Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 4569] Trying to run dumpcap as "root" causes system to completely lockup (requ

Wireshark-bugs: [Wireshark-bugs] [Bug 4569] Trying to run dumpcap as "root" causes system to com
Date: Sat, 13 Mar 2010 08:45:30 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4569

--- Comment #11 from Gary <gajimmy@xxxxxxxxxxx> 2010-03-13 08:45:15 PST ---
In preparation for returning this computer, I've had to remove all of the
software, including VMWare.  Thus, the vmnet interfaces are no longer
available.  However, running the different "dumcap" commands on all of the
interfaces did allow me to lock up the system.  It was with "usbmon2".  Only
running "dumpcap" on that interface locked up the system.  Here are the
results, starting with the interface list:

gary@ubuntu:~$ sudo tcpdump -D
1.eth0
2.wmaster0
3.wlan0
4.usbmon1 (USB bus number 1)
5.usbmon2 (USB bus number 2)
6.usbmon3 (USB bus number 3)
7.usbmon4 (USB bus number 4)
8.any (Pseudo-device that captures on all interfaces)
9.lo
gary@ubuntu:~$ sudo dumpcap -i eth0 -w /dev/null -c 10
File: /dev/null
Packets: 10 Packets dropped: 0
gary@ubuntu:~$ sudo dumpcap -i wmaster0 -w /dev/null -c 10
File: /dev/null
^CPackets dropped: 0
gary@ubuntu:~$ sudo dumpcap -i wlan0 -w /dev/null -c 10
File: /dev/null
^CPackets dropped: 0
gary@ubuntu:~$ sudo dumpcap -i usbmon1 -w /dev/null -c 10
File: /dev/null
^CPackets dropped: 32767
gary@ubuntu:~$ sudo dumpcap -i usbmon2 -w /dev/null -c 10
File: /dev/null

***NOTE: Froze at this point.  Had to hard reset the system.***

*** Reran starting from usbmon1 to see if the problem could be random. ***

gary@ubuntu:~$ sudo dumpcap -i usbmon1 -w /dev/null -c 10
File: /dev/null
^CPackets dropped: 32767
gary@ubuntu:~$ sudo dumpcap -i usbmon2 -w /dev/null -c 10
File: /dev/null

***NOTE: Froze again at this point.  Had to hard reset the system.***

gary@ubuntu:~$ sudo dumpcap -i usbmon3 -w /dev/null -c 10
File: /dev/null
Packets: 10 Packets dropped: 32767

***NOTE:  USBMON3 is the mouse.  When I moved it to see if the computer had
frozen, I got back the last line and the command ended.  I ran it three times
and got back the same answer every time.  No freezing with it. ***

gary@ubuntu:~$ sudo dumpcap -i usbmon4 -w /dev/null -c 10
File: /dev/null
^CPackets dropped: 32767
gary@ubuntu:~$ sudo dumpcap -i any -w /dev/null -c 10
File: /dev/null
Packets: 10 Packets dropped: 0
gary@ubuntu:~$ sudo dumpcap -i lo -w /dev/null -c 10
File: /dev/null
^CPackets dropped: 0

Here is the output from the last two commands you requested, "strace tcpdump
-D" and "strace dumpcap -D":

gary@ubuntu:~$ sudo strace tcpdump -D
execve("/usr/sbin/tcpdump", ["tcpdump", "-D"], [/* 14 vars */]) = 0
brk(0)                                  = 0x1d49000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f6371b0c000
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f6371b0a000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=52704, ...}) = 0
mmap(NULL, 52704, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f6371afd000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libcrypto.so.0.9.8", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 a\6\0\0\0\0\0"..., 832)
= 832
fstat(3, {st_mode=S_IFREG|0644, st_size=1586720, ...}) = 0
mmap(NULL, 3696632, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f6371568000
mprotect(0x7f63716c8000, 2097152, PROT_NONE) = 0
mmap(0x7f63718c8000, 143360, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x160000) = 0x7f63718c8000
mmap(0x7f63718eb000, 14328, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f63718eb000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/libpcap.so.0.8", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260q\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=212992, ...}) = 0
mmap(NULL, 2311328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f6371333000
mprotect(0x7f6371365000, 2097152, PROT_NONE) = 0
mmap(0x7f6371565000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x32000) = 0x7f6371565000
mmap(0x7f6371567000, 1184, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6371567000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3,
"\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\353\1\0\0\0\0\0"..., 832) =
832
fstat(3, {st_mode=S_IFREG|0755, st_size=1490312, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f6371afc000
mmap(NULL, 3598344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f6370fc4000
mprotect(0x7f637112a000, 2093056, PROT_NONE) = 0
mmap(0x7f6371329000, 20480, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x165000) = 0x7f6371329000
mmap(0x7f637132e000, 18440, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f637132e000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libdl.so.2", O_RDONLY)       = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=14696, ...}) = 0
mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f6370dc0000
mprotect(0x7f6370dc2000, 2097152, PROT_NONE) = 0
mmap(0x7f6370fc2000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f6370fc2000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libz.so.1", O_RDONLY)        = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\"\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=92752, ...}) = 0
mmap(NULL, 2187792, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f6370ba9000
mprotect(0x7f6370bbf000, 2093056, PROT_NONE) = 0
mmap(0x7f6370dbe000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x15000) = 0x7f6370dbe000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f6371afb000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f6371afa000
arch_prctl(ARCH_SET_FS, 0x7f6371afa6f0) = 0
mprotect(0x7f6370dbe000, 4096, PROT_READ) = 0
mprotect(0x7f6370fc2000, 4096, PROT_READ) = 0
mprotect(0x7f6371329000, 16384, PROT_READ) = 0
mprotect(0x7f6371565000, 4096, PROT_READ) = 0
mprotect(0x7f63718c8000, 53248, PROT_READ) = 0
mprotect(0x69d000, 4096, PROT_READ)     = 0
mprotect(0x7f6371b0d000, 4096, PROT_READ) = 0
munmap(0x7f6371afd000, 52704)           = 0
socket(PF_NETLINK, SOCK_RAW, 0)         = 3
bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(3, {sa_family=AF_NETLINK, pid=4349, groups=00000000},
[5649205874959319052]) = 0
sendto(3, "\24\0\0\0\22\0\1\3\37\273\233K\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\360\0\0\0\20\0\2\0\37\273\233K\375\20\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 988
brk(0)                                  = 0x1d49000
brk(0x1d6a000)                          = 0x1d6a000
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\24\0\0\0\3\0\2\0\37\273\233K\375\20\0\0\0\0\0\0\1\0\0\0I\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
sendto(3, "\24\0\0\0\26\0\1\3 \273\233K\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"0\0\0\0\24\0\2\0
\273\233K\375\20\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"..., 4096}],
msg_controllen=0, msg_flags=0}, 0) = 108
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"@\0\0\0\24\0\2\0
\273\233K\375\20\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}],
msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\24\0\0\0\3\0\2\0
\273\233K\375\20\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}],
msg_controllen=0, msg_flags=0}, 0) = 20
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="lo", ifr_hwaddr=00:00:00:00:00:00}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if1, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f63709a9000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f63709a9000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="eth0", ifr_hwaddr=90:e6:ba:f5:09:18}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="eth0", ifr_index=2}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if2, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f63709a9000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f63709a9000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="wmaster0", ifr_hwaddr=00:26:82:47:74:28}) =
0
ioctl(3, SIOCGIFINDEX, {ifr_name="wmaster0", ifr_index=3}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if3, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f63709a9000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f63709a9000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="wlan0", ifr_hwaddr=00:26:82:47:74:28}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="wlan0", ifr_index=4}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if4, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f63709a9000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f63709a9000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_DGRAM, 768)      = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f63709a9000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f63709a9000, 2097152)         = 0
close(3)                                = 0
open("/dev/bus/usb", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
fcntl(3, F_GETFD)                       = 0x1 (flags FD_CLOEXEC)
getdents(3, /* 6 entries */, 32768)     = 144
open("/dev/usbmon3", O_RDONLY)          = 4
ioctl(4, 0x9205, 0)                     = 307200
mmap(NULL, 307200, PROT_READ, MAP_SHARED, 4, 0) = 0x7f6371aaf000
close(4)                                = 0
open("/dev/usbmon2", O_RDONLY)          = 4
ioctl(4, 0x9205, 0)                     = 307200
mmap(NULL, 307200, PROT_READ, MAP_SHARED, 4, 0) = 0x7f6371a64000
close(4)                                = 0
open("/dev/usbmon4", O_RDONLY)          = 4
ioctl(4, 0x9205, 0)                     = 307200
mmap(NULL, 307200, PROT_READ, MAP_SHARED, 4, 0) = 0x7f6371a19000
close(4)                                = 0
open("/dev/usbmon1", O_RDONLY)          = 4
ioctl(4, 0x9205, 0)                     = 307200
mmap(NULL, 307200, PROT_READ, MAP_SHARED, 4, 0) = 0x7f63719ce000
close(4)                                = 0
getdents(3, /* 0 entries */, 32768)     = 0
close(3)                                = 0
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f6371b09000
write(1, "1.eth0\n", 71.eth0
)                 = 7
write(1, "2.wmaster0\n", 112.wmaster0
)            = 11
write(1, "3.wlan0\n", 83.wlan0
)                = 8
write(1, "4.usbmon1 (USB bus number 1)\n", 294.usbmon1 (USB bus number 1)
) = 29
write(1, "5.usbmon2 (USB bus number 2)\n", 295.usbmon2 (USB bus number 2)
) = 29
write(1, "6.usbmon3 (USB bus number 3)\n", 296.usbmon3 (USB bus number 3)
) = 29
write(1, "7.usbmon4 (USB bus number 4)\n", 297.usbmon4 (USB bus number 4)
) = 29
write(1, "8.any (Pseudo-device that captur"..., 548.any (Pseudo-device that
captures on all interfaces)
) = 54
write(1, "9.lo\n", 59.lo
)                   = 5
exit_group(0)                           = ?

gary@ubuntu:/usr/bin$ sudo strace dumpcap -D
execve("/usr/bin/dumpcap", ["dumpcap", "-D"], [/* 14 vars */]) = 0
brk(0)                                  = 0x7f4332317000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f4330f0a000
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f4330f08000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/wireshark/tls/x86_64/libwiretap.so.0", O_RDONLY) = -1 ENOENT (No
such file or directory)
stat("/usr/lib/wireshark/tls/x86_64", 0x7fffd3f834b0) = -1 ENOENT (No such file
or directory)
open("/usr/lib/wireshark/tls/libwiretap.so.0", O_RDONLY) = -1 ENOENT (No such
file or directory)
stat("/usr/lib/wireshark/tls", 0x7fffd3f834b0) = -1 ENOENT (No such file or
directory)
open("/usr/lib/wireshark/x86_64/libwiretap.so.0", O_RDONLY) = -1 ENOENT (No
such file or directory)
stat("/usr/lib/wireshark/x86_64", 0x7fffd3f834b0) = -1 ENOENT (No such file or
directory)
open("/usr/lib/wireshark/libwiretap.so.0", O_RDONLY) = 3
read(3,
"\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\216\0\0\0\0\0\0"..., 832) =
832
fstat(3, {st_mode=S_IFREG|0644, st_size=274648, ...}) = 0
mmap(NULL, 2503816, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f4330a89000
mprotect(0x7f4330aca000, 2093056, PROT_NONE) = 0
mmap(0x7f4330cc9000, 12288, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x40000) = 0x7f4330cc9000
mmap(0x7f4330ccc000, 132232, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4330ccc000
close(3)                                = 0
open("/usr/lib/wireshark/libwsutil.so.0", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\16\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=10104, ...}) = 0
mmap(NULL, 2105392, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f4330886000
mprotect(0x7f4330888000, 2093056, PROT_NONE) = 0
mmap(0x7f4330a87000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7f4330a87000
close(3)                                = 0
open("/usr/lib/wireshark/libgmodule-2.0.so.0", O_RDONLY) = -1 ENOENT (No such
file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=52704, ...}) = 0
mmap(NULL, 52704, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f4330efb000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/libgmodule-2.0.so.0", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\22\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=14536, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f4330efa000
mmap(NULL, 2109880, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f4330682000
mprotect(0x7f4330685000, 2093056, PROT_NONE) = 0
mmap(0x7f4330884000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f4330884000
close(3)                                = 0
open("/usr/lib/wireshark/libglib-2.0.so.0", O_RDONLY) = -1 ENOENT (No such file
or directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libglib-2.0.so.0", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300X\1\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=811240, ...}) = 0
mmap(NULL, 2908328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f43303bb000
mprotect(0x7f4330480000, 2093056, PROT_NONE) = 0
mmap(0x7f433067f000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc4000) = 0x7f433067f000
mmap(0x7f4330681000, 168, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4330681000
close(3)                                = 0
open("/usr/lib/wireshark/libpcap.so.0.8", O_RDONLY) = -1 ENOENT (No such file
or directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/libpcap.so.0.8", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260q\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=212992, ...}) = 0
mmap(NULL, 2311328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f4330186000
mprotect(0x7f43301b8000, 2097152, PROT_NONE) = 0
mmap(0x7f43303b8000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x32000) = 0x7f43303b8000
mmap(0x7f43303ba000, 1184, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f43303ba000
close(3)                                = 0
open("/usr/lib/wireshark/libgcrypt.so.11", O_RDONLY) = -1 ENOENT (No such file
or directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libgcrypt.so.11", O_RDONLY)  = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\201\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=490920, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f4330ef9000
mmap(NULL, 2587360, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f432ff0e000
mprotect(0x7f432ff83000, 2093056, PROT_NONE) = 0
mmap(0x7f4330182000, 16384, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x74000) = 0x7f4330182000
close(3)                                = 0
open("/usr/lib/wireshark/libgnutls.so.26", O_RDONLY) = -1 ENOENT (No such file
or directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/libgnutls.so.26", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0T\1\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=663816, ...}) = 0
mmap(NULL, 2758984, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f432fc6c000
mprotect(0x7f432fd07000, 2097152, PROT_NONE) = 0
mmap(0x7f432ff07000, 28672, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9b000) = 0x7f432ff07000
close(3)                                = 0
open("/usr/lib/wireshark/libcap.so.2", O_RDONLY) = -1 ENOENT (No such file or
directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libcap.so.2", O_RDONLY)      = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\24\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=18768, ...}) = 0
mmap(NULL, 2114048, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f432fa67000
mprotect(0x7f432fa6b000, 2093056, PROT_NONE) = 0
mmap(0x7f432fc6a000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f432fc6a000
close(3)                                = 0
open("/usr/lib/wireshark/libz.so.1", O_RDONLY) = -1 ENOENT (No such file or
directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libz.so.1", O_RDONLY)        = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\"\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=92752, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f4330ef8000
mmap(NULL, 2187792, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f432f850000
mprotect(0x7f432f866000, 2093056, PROT_NONE) = 0
mmap(0x7f432fa65000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x15000) = 0x7f432fa65000
close(3)                                = 0
open("/usr/lib/wireshark/libpthread.so.0", O_RDONLY) = -1 ENOENT (No such file
or directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libpthread.so.0", O_RDONLY)  = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340X\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=131174, ...}) = 0
mmap(NULL, 2208640, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f432f634000
mprotect(0x7f432f64b000, 2093056, PROT_NONE) = 0
mmap(0x7f432f84a000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x16000) = 0x7f432f84a000
mmap(0x7f432f84c000, 13184, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f432f84c000
close(3)                                = 0
open("/usr/lib/wireshark/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or
directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3,
"\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\353\1\0\0\0\0\0"..., 832) =
832
fstat(3, {st_mode=S_IFREG|0755, st_size=1490312, ...}) = 0
mmap(NULL, 3598344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f432f2c5000
mprotect(0x7f432f42b000, 2093056, PROT_NONE) = 0
mmap(0x7f432f62a000, 20480, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x165000) = 0x7f432f62a000
mmap(0x7f432f62f000, 18440, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f432f62f000
close(3)                                = 0
open("/usr/lib/wireshark/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or
directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libdl.so.2", O_RDONLY)       = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=14696, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f4330ef7000
mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f432f0c1000
mprotect(0x7f432f0c3000, 2097152, PROT_NONE) = 0
mmap(0x7f432f2c3000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f432f2c3000
close(3)                                = 0
open("/usr/lib/wireshark/libpcre.so.3", O_RDONLY) = -1 ENOENT (No such file or
directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libpcre.so.3", O_RDONLY)     = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\25\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=186440, ...}) = 0
mmap(NULL, 2281640, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f432ee93000
mprotect(0x7f432eec0000, 2093056, PROT_NONE) = 0
mmap(0x7f432f0bf000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f432f0bf000
close(3)                                = 0
open("/usr/lib/wireshark/libgpg-error.so.0", O_RDONLY) = -1 ENOENT (No such
file or directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/libgpg-error.so.0", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\10\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=14256, ...}) = 0
mmap(NULL, 2109528, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f432ec8f000
mprotect(0x7f432ec92000, 2093056, PROT_NONE) = 0
mmap(0x7f432ee91000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f432ee91000
close(3)                                = 0
open("/usr/lib/wireshark/libtasn1.so.3", O_RDONLY) = -1 ENOENT (No such file or
directory)
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/libtasn1.so.3", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\31\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=67808, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f4330ef6000
mmap(NULL, 2163432, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7f432ea7e000
mprotect(0x7f432ea8e000, 2093056, PROT_NONE) = 0
mmap(0x7f432ec8d000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f432ec8d000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f4330ef5000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f4330ef4000
arch_prctl(ARCH_SET_FS, 0x7f4330ef46f0) = 0
mprotect(0x7f432ec8d000, 4096, PROT_READ) = 0
mprotect(0x7f432ee91000, 4096, PROT_READ) = 0
mprotect(0x7f432f0bf000, 4096, PROT_READ) = 0
mprotect(0x7f432f2c3000, 4096, PROT_READ) = 0
mprotect(0x7f432f62a000, 16384, PROT_READ) = 0
mprotect(0x7f432f84a000, 4096, PROT_READ) = 0
mprotect(0x7f432fa65000, 4096, PROT_READ) = 0
mprotect(0x7f432fc6a000, 4096, PROT_READ) = 0
mprotect(0x7f432ff07000, 24576, PROT_READ) = 0
mprotect(0x7f4330182000, 4096, PROT_READ) = 0
mprotect(0x7f43303b8000, 4096, PROT_READ) = 0
mprotect(0x7f433067f000, 4096, PROT_READ) = 0
mprotect(0x7f4330884000, 4096, PROT_READ) = 0
mprotect(0x7f4330a87000, 4096, PROT_READ) = 0
mprotect(0x7f4330cc9000, 8192, PROT_READ) = 0
mprotect(0x7f433111b000, 4096, PROT_READ) = 0
mprotect(0x7f4330f0b000, 4096, PROT_READ) = 0
munmap(0x7f4330efb000, 52704)           = 0
set_tid_address(0x7f4330ef47c0)         = 4445
set_robust_list(0x7f4330ef47d0, 0x18)   = 0
futex(0x7fffd3f83d8c, FUTEX_WAKE_PRIVATE, 1) = 0
futex(0x7fffd3f83d8c, 0x189 /* FUTEX_??? */, 1, NULL, 7f4330ef46f0) = -1 EAGAIN
(Resource temporarily unavailable)
rt_sigaction(SIGRTMIN, {0x7f432f639760, [], SA_RESTORER|SA_SIGINFO,
0x7f432f643190}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x7f432f6397f0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO,
0x7f432f643190}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
brk(0)                                  = 0x7f4332317000
brk(0x7f4332338000)                     = 0x7f4332338000
rt_sigaction(SIGTERM, {0x7f4330f132a0, [], SA_RESTORER, 0x7f432f643190}, NULL,
8) = 0
rt_sigaction(SIGINT, {0x7f4330f132a0, [], SA_RESTORER, 0x7f432f643190}, NULL,
8) = 0
rt_sigaction(SIGPIPE, {0x7f4330f132a0, [], SA_RESTORER, 0x7f432f643190}, NULL,
8) = 0
rt_sigaction(SIGHUP, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGHUP, {0x7f4330f132a0, [], SA_RESTORER, 0x7f432f643190}, NULL,
8) = 0
getuid()                                = 0
geteuid()                               = 0
getgid()                                = 0
getegid()                               = 0
capget(0x20080522, 0, NULL)             = -1 EFAULT (Bad address)
prctl(0x8, 0x1, 0, 0, 0)                = 0
capset(0x20080522, 0, {0, CAP_NET_ADMIN|CAP_NET_RAW,
CAP_NET_ADMIN|CAP_NET_RAW}) = 0
setresgid(0, 0, 0)                      = 0
setresuid(0, 0, 0)                      = 0
capset(0x20080522, 0, {CAP_NET_ADMIN|CAP_NET_RAW, CAP_NET_ADMIN|CAP_NET_RAW,
CAP_NET_ADMIN|CAP_NET_RAW}) = 0
getuid()                                = 0
getgid()                                = 0
socket(PF_NETLINK, SOCK_RAW, 0)         = 3
bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(3, {sa_family=AF_NETLINK, pid=4445, groups=00000000},
[3526188216103206924]) = 0
sendto(3, "\24\0\0\0\22\0\1\3q\300\233K\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\360\0\0\0\20\0\2\0q\300\233K]\21\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 988
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\24\0\0\0\3\0\2\0q\300\233K]\21\0\0\0\0\0\0\1\0\0\0I\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
sendto(3, "\24\0\0\0\26\0\1\3r\300\233K\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"0\0\0\0\24\0\2\0r\300\233K]\21\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 108
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"@\0\0\0\24\0\2\0r\300\233K]\21\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\24\0\0\0\3\0\2\0r\300\233K]\21\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="lo", ifr_hwaddr=00:00:00:00:00:00}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if1, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f432e87e000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f432e87e000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="eth0", ifr_hwaddr=90:e6:ba:f5:09:18}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="eth0", ifr_index=2}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if2, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f432e87e000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f432e87e000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="wmaster0", ifr_hwaddr=00:26:82:47:74:28}) =
0
ioctl(3, SIOCGIFINDEX, {ifr_name="wmaster0", ifr_index=3}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if3, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f432e87e000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f432e87e000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="wlan0", ifr_hwaddr=00:26:82:47:74:28}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="wlan0", ifr_index=4}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if4, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f432e87e000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f432e87e000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_DGRAM, 768)      = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f432e87e000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f432e87e000, 2097152)         = 0
close(3)                                = 0
open("/dev/bus/usb", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
fcntl(3, F_GETFD)                       = 0x1 (flags FD_CLOEXEC)
getdents(3, /* 6 entries */, 32768)     = 144
open("/dev/usbmon4", O_RDONLY)          = 4
ioctl(4, 0x9205, 0)                     = 307200
mmap(NULL, 307200, PROT_READ, MAP_SHARED, 4, 0) = 0x7f4330ea9000
close(4)                                = 0
open("/dev/usbmon1", O_RDONLY)          = 4
ioctl(4, 0x9205, 0)                     = 307200
mmap(NULL, 307200, PROT_READ, MAP_SHARED, 4, 0) = 0x7f4330e5e000
close(4)                                = 0
open("/dev/usbmon3", O_RDONLY)          = 4
ioctl(4, 0x9205, 0)                     = 307200
mmap(NULL, 307200, PROT_READ, MAP_SHARED, 4, 0) = 0x7f4330e13000
close(4)                                = 0
open("/dev/usbmon2", O_RDONLY)          = 4
ioctl(4, 0x9205, 0)                     = 307200
mmap(NULL, 307200, PROT_READ, MAP_SHARED, 4, 0) = 0x7f4330dc8000
close(4)                                = 0
getdents(3, /* 0 entries */, 32768)     = 0
close(3)                                = 0
socket(PF_NETLINK, SOCK_RAW, 0)         = 3
bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(3, {sa_family=AF_NETLINK, pid=4445, groups=00000000},
[3526221957366284300]) = 0
sendto(3, "\24\0\0\0\22\0\1\3r\300\233K\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\360\0\0\0\20\0\2\0r\300\233K]\21\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 988
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\24\0\0\0\3\0\2\0r\300\233K]\21\0\0\0\0\0\0\1\0\0\0I\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
sendto(3, "\24\0\0\0\26\0\1\3s\300\233K\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"0\0\0\0\24\0\2\0s\300\233K]\21\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 108
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"@\0\0\0\24\0\2\0s\300\233K]\21\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\24\0\0\0\3\0\2\0s\300\233K]\21\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="lo", ifr_hwaddr=00:00:00:00:00:00}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if1, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f432e87e000
mmap(NULL, 135168, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x7f4330da7000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f432e87e000, 2097152)         = 0
munmap(0x7f4330da7000, 135168)          = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="eth0", ifr_hwaddr=90:e6:ba:f5:09:18}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="eth0", ifr_index=2}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if2, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f432e87e000
brk(0x7f433235a000)                     = 0x7f433235a000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f432e87e000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="wmaster0", ifr_hwaddr=00:26:82:47:74:28}) =
0
ioctl(3, SIOCGIFINDEX, {ifr_name="wmaster0", ifr_index=3}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if3, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f432e87e000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f432e87e000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="wlan0", ifr_hwaddr=00:26:82:47:74:28}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="wlan0", ifr_index=4}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if4, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [17179869184], [4]) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f432e87e000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f432e87e000, 2097152)         = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_DGRAM, 768)      = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
setsockopt(3, SOL_PACKET, 0x8 /* PACKET_??? */, [1], 4) = 0
getsockopt(3, SOL_PACKET, 0xb /* PACKET_??? */, [17179869212], [4]) = 0
setsockopt(3, SOL_PACKET, 0xa /* PACKET_??? */, [1], 4) = 0
setsockopt(3, SOL_PACKET, 0xc /* PACKET_??? */, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\20\0\0\0\2\0\0\200\0\0\0\0@\0\0",
16) = 0
mmap(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f432e87e000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
16) = -1 EBUSY (Device or resource busy)
munmap(0x7f432e87e000, 2097152)         = 0
close(3

*** NOTE: Froze up again at this point. ***

Is there anything else you'd like me to perform before I return the computer?

Oh, and thanks for the excellent idea about logging in remotely.  Kicking
myself for not having thought of it.  Made gathering the data infinitely
easier.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
References:
- [Wireshark-bugs] [Bug 4569] New: Trying to Run Wireshark as "root" causes system to completely lockup (requires hard reset)
  - From: bugzilla-daemon
Prev by Date: [Wireshark-bugs] [Bug 4576] Small enhancement for dumpcap: Read pcap data from a Unix domain socket
Next by Date: [Wireshark-bugs] [Bug 4569] Trying to run dumpcap as "root" causes system to completely lockup (requires hard reset)
Previous by thread: [Wireshark-bugs] [Bug 4569] Trying to run dumpcap as "root" causes system to completely lockup (requires hard reset)
Next by thread: [Wireshark-bugs] [Bug 4569] Trying to run dumpcap as "root" causes system to completely lockup (requires hard reset)
Index(es):
- Date
- Thread