Accidently posted from non-subscribed address, this is a repost.
----- Forwarded message from Errol Casey <errol(_at_)boo-bear(_dot_)com> -----
Date: Sun, 2 Dec 2001 01:02:08 -0500
From: Errol Casey <errol(_at_)boo-bear(_dot_)com>
To: getmail(_at_)discworld(_dot_)dnsalias(_dot_)org,
procmail-users(_at_)procmail(_dot_)org
Subject: Procmail returning -1 (trace of procmail spawned from getmail)
Message-ID: <20011202010208(_dot_)A24602(_at_)boo-bear(_dot_)com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
protocol="application/pgp-signature"; boundary="HlL+5n6rz5pIUxbD"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
Status: RO
Content-Length: 23951
Lines: 419
Here is an strace of procmail when called from getmail
I have the following option in my getmailrc to call procmail
local = clsmooth(_at_)nc(_dot_)rr(_dot_)com,|/usr/bin/procmail
It is returning -1 to getmail and causing it to abort. I don't know
why or what the -1 return means.
Any assistance would be appreciated, as I would like to get these
two tools working. If I take "procmail" out of the config and just
download the mail it works everytime (taking procmail out of the equation)
trace_procmail contains:
strace procmail
--------------------------------
02_Dec_2001_05:30:04_-0000 getmail started for
clsmooth(_at_)pop-server(_dot_)nc(_dot_)rr(_dot_)com:110
02_Dec_2001_05:30:05_-0000 POP3 connect for clsmooth on
pop-server.nc.rr.com:110 (+OK Microsoft POP3 Server Version: 5.5.1877.567.56
ready <145(_dot_)2148697584(_at_)nc(_dot_)rr(_dot_)com>)
02_Dec_2001_05:30:05_-0000 POP3 login successful
02_Dec_2001_05:30:05_-0000 POP3 list (+OK 4 43638)
02_Dec_2001_05:30:05_-0000 retrieved message "20000000.eml"
02_Dec_2001_05:30:05_-0000 new message
"<20011202051834(_dot_)23800(_dot_)qmail(_at_)amr(_dot_)boo-bear(_dot_)com>":
from <root(_at_)amr(_dot_)homeip(_dot_)net>, to:
clsmooth(_at_)nc(_dot_)rr(_dot_)com
02_Dec_2001_05:30:06_-0000 delivered to command "/usr/bin/procmail" for
<clsmooth(_at_)nc(_dot_)rr(_dot_)com>
02_Dec_2001_05:30:06_-0000 finished message: 1 local recipients
02_Dec_2001_05:30:06_-0000 retrieved message "30000000.eml"
02_Dec_2001_05:30:06_-0000 new message
"<20011202051800(_dot_)23766(_dot_)qmail(_at_)amr(_dot_)boo-bear(_dot_)com>":
from <clsmooth(_at_)amr(_dot_)homeip(_dot_)net>, to:
clsmooth(_at_)nc(_dot_)rr(_dot_)com
02_Dec_2001_05:30:06_-0000 Aborting... (command "/usr/bin/procmail" returned -1
())
02_Dec_2001_05:41:41_-0000 getmail started for
clsmooth(_at_)pop-server(_dot_)nc(_dot_)rr(_dot_)com:110
02_Dec_2001_05:41:41_-0000 POP3 connect for clsmooth on
pop-server.nc.rr.com:110 (+OK Microsoft POP3 Server Version: 5.5.1877.567.56
ready <166(_dot_)511552992(_at_)nc(_dot_)rr(_dot_)com>)
02_Dec_2001_05:41:41_-0000 POP3 login successful
02_Dec_2001_05:41:41_-0000 POP3 list (+OK 2 1254)
02_Dec_2001_05:41:41_-0000 retrieved message "60000000.eml"
02_Dec_2001_05:41:41_-0000 new message
"<20011202053932(_dot_)24302(_dot_)qmail(_at_)amr(_dot_)boo-bear(_dot_)com>":
from <clsmooth(_at_)amr(_dot_)homeip(_dot_)net>, to:
clsmooth(_at_)nc(_dot_)rr(_dot_)com
02_Dec_2001_05:41:41_-0000 Aborting... (command
"/home/clsmooth/bin/trace_procmail" returned 0 (execve("/usr/bin/procmail",
["/usr/bin/procmail"], [/* 34 vars */]) = 0
uname({sys="Linux", node="amr", ...}) = 0
brk(0) = 0x8059688
open("/etc/ld.so.preload", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=52983, ...}) = 0
old_mmap(NULL, 52983, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40016000
close(3) = 0
open("/lib/libm.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340I\0"..., 1024) =
1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=129908, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x40023000
old_mmap(NULL, 131448, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40024000
mprotect(0x40043000, 4472, PROT_NONE) = 0
old_mmap(0x40043000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x1e000) = 0x40043000
close(3) = 0
open("/lib/libnsl.so.1", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 ?\0\000"..., 1024) =
1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=78208, ...}) = 0
old_mmap(NULL, 89632, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40045000
mprotect(0x40058000, 11808, PROT_NONE) = 0
old_mmap(0x40058000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x12000) = 0x40058000
old_mmap(0x40059000, 7712, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40059000
close(3) = 0
open("/lib/libdl.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\36"..., 1024) =
1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=9900, ...}) = 0
old_mmap(NULL, 12832, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4005b000
mprotect(0x4005e000, 544, PROT_NONE) = 0
old_mmap(0x4005e000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x2000) = 0x4005e000
close(3) = 0
open("/lib/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\302\1"..., 1024) =
1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=1216268, ...}) = 0
old_mmap(NULL, 1231496, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4005f000
mprotect(0x40183000, 35464, PROT_NONE) = 0
old_mmap(0x40183000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x123000) = 0x40183000
old_mmap(0x40188000, 14984, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40188000
close(3) = 0
open("/lib/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\302\1"..., 1024) =
1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=1216268, ...}) = 0
close(3) = 0
open("/lib/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\302\1"..., 1024) =
1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=1216268, ...}) = 0
close(3) = 0
open("/lib/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\302\1"..., 1024) =
1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=1216268, ...}) = 0
close(3) = 0
munmap(0x40016000, 52983) = 0
getpid() = 24385
getpid() = 24385
semget(1075343148, 0, IPC_CREAT|IPC_NOWAIT|0x40187160|0440) = 515
semop(1075343148, 0x401859d0, 0) = 510
SYS_199(0x40186f2c, 0, 0x40187b60, 0x401859d0, 0) = 510
ipc_subcall(0x40186f2c, 0, 0x40187b60, 0x401859d0) = 515
brk(0) = 0x8059688
brk(0x80596a8) = 0x80596a8
brk(0x805a000) = 0x805a000
socket(PF_UNIX, SOCK_STREAM, 0) = 3
connect(3, {sin_family=AF_UNIX, path="
/var/run/.nscd_socket"}, 110) = -1
ENOENT (No such file or directory)
close(3) = 0
open("/etc/nsswitch.conf", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=1762, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x40016000
read(3, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1762
brk(0x805b000) = 0x805b000
read(3, "", 4096) = 0
close(3) = 0
munmap(0x40016000, 4096) = 0
open("/etc/ld.so.cache", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=52983, ...}) = 0
old_mmap(NULL, 52983, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40016000
close(3) = 0
open("/lib/libnss_files.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\360 \0"..., 1024) =
1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=38580, ...}) = 0
old_mmap(NULL, 41960, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4018c000
mprotect(0x40196000, 1000, PROT_NONE) = 0
old_mmap(0x40196000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x9000) = 0x40196000
close(3) = 0
munmap(0x40016000, 52983) = 0
open("/etc/passwd", O_RDONLY) = 3
shmat(3, 0x1, 0x1ptrace: umoven: Input/output error
) = ?
shmat(3, 0x1, 0x2ptrace: umoven: Input/output error
) = ?
fstat64(3, {st_mode=S_IFREG|0644, st_size=2185, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x40016000
read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 2185
close(3) = 0
munmap(0x40016000, 4096) = 0
open("/etc/ld.so.cache", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=52983, ...}) = 0
old_mmap(NULL, 52983, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40016000
close(3) = 0
open("/lib/libnss_nisplus.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000\37\0"..., 1024) =
1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=42020, ...}) = 0
old_mmap(NULL, 45188, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40197000
mprotect(0x401a1000, 4228, PROT_NONE) = 0
old_mmap(0x401a1000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x9000) = 0x401a1000
old_mmap(0x401a2000, 132, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x401a2000
close(3) = 0
munmap(0x40016000, 52983) = 0
open("/etc/ld.so.cache", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=52983, ...}) = 0
old_mmap(NULL, 52983, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40016000
close(3) = 0
open("/lib/libnss_nis.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000 \0\000"..., 1024) =
1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=39772, ...}) = 0
old_mmap(NULL, 42952, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x401a3000
mprotect(0x401ad000, 1992, PROT_NONE) = 0
old_mmap(0x401ad000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x9000) = 0x401ad000
close(3) = 0
munmap(0x40016000, 52983) = 0
umask(077) = 022
dup(1) = 3
close(1) = 0
close(1) = -1 EBADF (Bad file descriptor)
open("/dev/null", O_WRONLY|O_APPEND|O_CREAT, 0667) = 1
brk(0x805c000) = 0x805c000
rt_sigaction(SIGXCPU, {SIG_IGN}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGXFSZ, {SIG_IGN}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGUSR2, {0x8053a80, [USR2], SA_RESTART|0x4000000}, {SIG_DFL}, 8)
= 0
rt_sigaction(SIGUSR2, {0x8050070, [USR2], SA_RESTART|0x4000000}, {0x8053a80,
[USR2], SA_RESTART|0x4000000}, 8) = 0
rt_sigaction(SIGUSR1, {0x8053a80, [USR1], SA_RESTART|0x4000000}, {SIG_DFL}, 8)
= 0
rt_sigaction(SIGUSR1, {0x8050050, [USR1], SA_RESTART|0x4000000}, {0x8053a80,
[USR1], SA_RESTART|0x4000000}, 8) = 0
rt_sigaction(SIGCHLD, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_IGN}, 8) = 0
rt_sigaction(SIGTERM, {0x8053a80, [TERM], SA_RESTART|0x4000000}, {SIG_DFL}, 8)
= 0
rt_sigaction(SIGTERM, {0x8050550, [TERM], SA_RESTART|0x4000000}, {0x8053a80,
[TERM], SA_RESTART|0x4000000}, 8) = 0
rt_sigaction(SIGINT, {0x8053a80, [INT], SA_RESTART|0x4000000}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGINT, {0x8050590, [INT], SA_RESTART|0x4000000}, {0x8053a80,
[INT], SA_RESTART|0x4000000}, 8) = 0
rt_sigaction(SIGHUP, {0x8053a80, [HUP], SA_RESTART|0x4000000}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGHUP, {0x8050590, [HUP], SA_RESTART|0x4000000}, {0x8053a80,
[HUP], SA_RESTART|0x4000000}, 8) = 0
rt_sigaction(SIGQUIT, {0x8053a80, [QUIT], SA_RESTART|0x4000000}, {SIG_DFL}, 8)
= 0
rt_sigaction(SIGQUIT, {0x8050570, [QUIT], SA_RESTART|0x4000000}, {0x8053a80,
[QUIT], SA_RESTART|0x4000000}, 8) = 0
rt_sigaction(SIGALRM, {0x8051560, [ALRM], SA_RESTART|0x4000000}, {SIG_DFL}, 8)
= 0
brk(0x805e000) = 0x805e000
read(0, "From clsmooth(_at_)amr(_dot_)homeip(_dot_)net Sun"..., 4113) = 817
read(0, "", 3296) = 0
open("/etc/passwd", O_RDONLY) = 4
shmat(4, 0x1, 0x1ptrace: umoven: Input/output error
) = ?
shmat(4, 0x1, 0x2ptrace: umoven: Input/output error
) = ?
fstat64(4, {st_mode=S_IFREG|0644, st_size=2185, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x40016000
read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 2185
close(4) = 0
munmap(0x40016000, 4096) = 0
uname({sys="Linux", node="amr", ...}) = 0
stat64("/var/spool/mail/", {st_mode=S_IFDIR|S_ISGID|0775, st_size=4096, ...}) = 0
msgctl(12, MSG_???, 0x401859d0) = -1 EPERM (Operation not permitted)
semop(1075343148, 0x401859d0, 1) = 510
SYS_199(0x40186f2c, 0x1, 0x40187b60, 0x401859d0, 0x203) = 510
lstat64("/var/spool/mail/clsmooth", {st_mode=S_IFREG|0660, st_size=2227, ...})
= 0
umask(077) = 077
open("/etc/procmailrc", O_RDONLY) = 4
lseek(4, 0, SEEK_CUR) = 0
read(4, "PATH=\"/usr/bin:$PATH:/usr/local/"..., 1024) = 1024
ipc_subcall(0x203, 0xffffffff, 0x40186f2c, 0x401859d0) = 0
ipc_subcall(0x40186f2c, 0x1, 0x40187b60, 0x401859d0) = 515
semctl(510, 4294967295, 0x40186f2c /* SEM_??? */, 0x401859d0) = 0
msgget(510, 0x1|0) = 0
ipc_subcall(0xffffffff, 0x203, 0x40186f2c, 0x401859d0) = 0
open("/home/clsmooth/procmail.log", O_WRONLY|O_APPEND|O_CREAT, 0667) = 5
close(2) = 0
dup(5) = 2
close(5) = 0
stat64("/etc/procmail/local-rules.procmail", {st_mode=S_IFREG|0644,
st_size=1546, ...}) = 0
open("/etc/procmail/local-rules.procmail", O_RDONLY) = 5
lseek(5, 0, SEEK_CUR) = 0
read(5, "# Messages with .EXE attachments"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 1024
read(5, ".*Re:\n* ^Content-Type:.*multipar"..., 1024) = 522
lseek(5, 0, SEEK_CUR) = 1546
read(5, "", 1024) = 0
close(5) = 0
lseek(4, 0, SEEK_SET) = 0
read(4, "PATH=\"/usr/bin:$PATH:/usr/local/"..., 1024) = 1024
stat64("/etc/procmail/html-trap.procmail", {st_mode=S_IFREG|0644,
st_size=45382, ...}) = 0
open("/etc/procmail/html-trap.procmail", O_RDONLY) = 5
lseek(5, 0, SEEK_CUR) = 0
read(5, "### Copyright (C) 1997-2001 John"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 1024
read(5, "revent attacks, at the cost of n"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 2048
read(5, " within limited bounds.\n# To red"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 3072
read(5, "oisoning, set\n# $SCORE_ONLY to a"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 4096
read(5, " requires mktemp and mimencode.\n"..., 1024) = 1024
brk(0x8061000) = 0x8061000
wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes)
brk(0x806a000) = 0x806a000
brk(0x8073000) = 0x8073000
wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes)
wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes)
lseek(5, 0, SEEK_CUR) = 5120
read(5, " * ^To: +\\/.*\n {\n TO=\"$MATC"..., 1024) = 1024
wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes)
lseek(5, 0, SEEK_CUR) = 6144
read(5, ".\n\nSee http://support.microsoft.";..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 7168
read(5, "CURITY_NONOTIFY_LONGSUBJECT ?? ["..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 8192
read(5, "................................"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 9216
read(5, " echo $HDR;\\\n echo ;\\\n "..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 10240
read(5, "&1 ;\\\n echo ;\\\n "..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 11264
read(5, "tside of an HTML\n# context.\n#\n# "..., 1024) = 1024
wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes)
lseek(5, 0, SEEK_CUR) = 12288
read(5, "3[0-9a]|4[0-9a-f]|5[0-9a]|6[1-9a"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 13312
read(5, "s/\\sOn(Abort|Blur|Change|Click|D"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 14336
read(5, "he defanging.\n#\n# NOTE: the [ \t]"..., 1024) = 1024
wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes)
lseek(5, 0, SEEK_CUR) = 15360
read(5, "\n if (($junk,$filen) = /^be"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 16384
read(5, " print \"X-Content-"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 17408
read(5, "position[ \t]*:.*attachment\n* !$ "..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 18432
read(5, "y && $mimebdrs[0]) {\t#\\\n\t warn "..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 19456
read(5, ") {\t#\\\n\t if (($mimebdry) = /bou"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 20480
read(5, "bdry;\t#\\\n\t push @newbdrs, $ne"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 21504
read(5, " chomp($destf);\t#\\\n\t if (o"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 22528
read(5, "\t\t$why .= \" 9 for $&\\n\";\t#\\\n"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 23552
read(5, "\";\t#\\\n\t\t\t$score+= 2;\t#\\\n\t\t}\t#\\\n\t"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 24576
read(5, " close(ATTCH);\t#\\\n\t unl"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 25600
read(5, "etected that the preceding\\n\";\t#"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 26624
read(5, " $mangle_mime_type = 0;\t#\\\n\t "..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 27648
read(5, "]+\\s*:[^\"]*(\"[^\"]*\"[^\"]+)*name\\s"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 28672
read(5, "nt-[-\\w]+\\s*:.*name\\s*=\\s*\"([^\"]"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 29696
read(5, "<STRIPPED>)) {\t#\\\n\t\t $stp_s"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 30720
read(5, "{\"POISONED_EXECUTABLES\"})) {\t#\\\n"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 31744
read(5, "ITY WARNING\\n\\n\";\t#\\\n\t\t\tprint $E"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 32768
read(5, "awbdrs, $rawbdry;\t#\\\n\t\t push @b"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 33792
read(5, "c =~ s/^\\s+//g;\t#\\\n\t\t $stp_"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 34816
read(5, "(POISONED,$specf)) {\t#\\\n\t\t wa"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 35840
read(5, "\"};\t#\\\n\t\t\tlast;\t#\\\n\t\t }\t#\\\n"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 36864
read(5, "ta($eh);\t#\\\n\t\t $hdrtxt =~ s/${e"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 37888
read(5, "\n\t s/\\s*\\n$//;\t#\\\n\t $h"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 38912
read(5, "tent-Security: \\[${HOST}\\] \\/REP"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 39936
read(5, "aster>\';\\\n echo \'Subjec"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 40960
read(5, "CURITY WARNING $HOST $SECRET\" \\\n"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 41984
read(5, "uter.\';\\\n echo ;\\"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 43008
read(5, "rity daemon\" <postmaster>\';\\\n "..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 44032
read(5, "zed on\' $HOST;\\\n echo \'"..., 1024) = 1024
lseek(5, 0, SEEK_CUR) = 45056
read(5, " ls -l $SECURITY_QUARANTIN"..., 1024) = 326
lseek(5, 0, SEEK_CUR) = 45382
read(5, "", 1024) = 0
close(5) = 0
lseek(4, 0, SEEK_SET) = 0
read(4, "PATH=\"/usr/bin:$PATH:/usr/local/"..., 1024) = 1024
lseek(4, 0, SEEK_CUR) = 1024
read(4, "ITY_NOTIFY=\nSECURITY_NOTIFY_VERB"..., 1024) = 92
lseek(4, 0, SEEK_CUR) = 1116
read(4, "", 1024) = 0
close(4) = 0
open("/home/clsmooth/.procmailrc", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0744, st_size=918, ...}) = 0
stat64("/home/clsmooth/", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
chdir("/home/clsmooth") = 0
lseek(4, 0, SEEK_CUR) = 0
read(4, "SHELL=/bin/sh\nGREP=/bin/grep\nLIN"..., 1024) = 918
chdir("/home/clsmooth/Mail") = 0
open("/home/clsmooth/Mail/from", O_WRONLY|O_APPEND|O_CREAT, 0667) = 5
close(2) = 0
dup(5) = 2
close(5) = 0
time(NULL) = 1007271701
open("/etc/localtime", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1267, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x40016000
read(5, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\4\0\0\0\4\0"..., 4096) =
1267
close(5) = 0
munmap(0x40016000, 4096) = 0
write(2, "procmail: [24385] Sun Dec 2 00:"..., 43) = 43
write(2, "procmail: Assigning \"MYEMAIL=/ho"..., 54) = 54
wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes)
wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes)
time(NULL) = 1007271701
write(2, "procmail: Locking \"msgid.lock\"\n", 31) = 31
time(NULL) = 1007271701
lstat64("_B9F.V8bC8.amr", 0xbffff560) = -1 ENOENT (No such file or directory)
open("_B9F.V8bC8.amr", O_WRONLY|O_CREAT|O_EXCL, 0444) = 5
write(5, "0", 1) = 1
close(5) = 0
stat64("_B9F.V8bC8.amr", {st_mode=S_IFREG|0400, st_size=1, ...}) = 0
link("_B9F.V8bC8.amr", "msgid.lock") = 0
unlink("_B9F.V8bC8.amr") = 0
ipc_subcall(0xffffffff, 0x203, 0x40186f2c, 0x401859d0) = 0
time(NULL) = 1007271701
alarm(960) = 0
pipe([5, 6]) = 0
wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes)
fork() = 24386
close(5) = 0
lseek(6, 0, SEEK_END) = -1 ESPIPE (Illegal seek)
write(6, "From clsmooth(_at_)amr(_dot_)homeip(_dot_)net Sun"..., 812) = 812
close(6) = 0
wait4(-1, [WIFEXITED(s) && WEXITSTATUS(s) == 0], 0, NULL) = 24386
--- SIGCHLD (Child exited) ---
time(NULL) = 1007271701
write(2, "procmail: Assigning \"LASTFOLDER="..., 73) = 73
time(NULL) = 1007271701
write(2, "procmail: Unlocking \"msgid.lock\""..., 33) = 33
unlink("msgid.lock") = 0
ipc_subcall(0xffffffff, 0x203, 0x40186f2c, 0x401859d0) = 0
rt_sigaction(SIGTERM, {SIG_IGN}, {0x8050550, [TERM], SA_RESTART|0x4000000}, 8)
= 0
rt_sigaction(SIGHUP, {SIG_IGN}, {0x8050590, [HUP], SA_RESTART|0x4000000}, 8) = 0
rt_sigaction(SIGINT, {SIG_IGN}, {0x8050590, [INT], SA_RESTART|0x4000000}, 8) = 0
rt_sigaction(SIGQUIT, {SIG_IGN}, {0x8050570, [QUIT], SA_RESTART|0x4000000}, 8)
= 0
getpid() = 24385
socket(PF_INET, SOCK_DGRAM, IPPROTO_UDP) = 5
sendto(5, "clsmooth@:/usr/bin/formail -D 81"..., 49, 0, {sin_family=AF_INET,
sin_port=htons(512), sin_addr=inet_addr("127.0.0.1")}}, 16) = 49
close(5) = 0
time(NULL) = 1007271701
write(2, "procmail: Notified comsat: \"clsm"..., 79) = 79
write(2, "From clsmooth(_at_)amr(_dot_)homeip(_dot_)net Sun"..., 54) = 54
write(2, " Subject: test\n", 15) = 15
write(2, " Folder: /usr/bin/formail -D 81"..., 60) = 60
close(3) = 0
close(4) = 0
_exit(0) = ?))
----- End forwarded message -----
--
GPG key: Send email with Subject: send gpg
GPG fingerprint: B0A5 535B 9F97 036D 4A48 F00B B5FB 20DC 5EE4 1D01
pgpsDL68DD0Qc.pgp
Description: PGP signature