execve("/usr/bin/squidwall", ["/usr/bin/squidwall"], [/* 14 vars */]) = 0 open("/dev/urandom", O_RDONLY) = 3 read(3, "9G\272\260", 4) = 4 close(3) = 0 open("/var/log/squid/squidwall.log", O_WRONLY|O_APPEND|O_CREAT|O_LARGEFILE, 0600) = 3 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0b000 stat("/etc/squidwall/filters/bfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 open("/etc/squidwall/filters/bfilter", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 4 entries */, 4083) = 72 open("/etc/squidwall/filters/bfilter/banner-tr", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 5 lseek(5, 0, SEEK_END) = 375 old_mmap(NULL, 375, PROT_READ, MAP_SHARED, 5, 0) = 0xb7f09000 close(5) = 0 old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f07000 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f06000 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f05000 munmap(0xb7f09000, 375) = 0 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 getpid() = 18571 gettimeofday({1153429342, 325575}, NULL) = 0 stat("/etc/squidwall/filters/cfilter/!", {st_mode=S_IFREG|0644, st_size=661, ...}) = 0 open("/etc/squidwall/filters/cfilter", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 4 entries */, 4083) = 64 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 stat("/etc/squidwall/filters/pfilter/!", {st_mode=S_IFREG|0644, st_size=672, ...}) = 0 open("/etc/squidwall/filters/pfilter", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 7 entries */, 4083) = 128 open("/etc/squidwall/filters/pfilter/porn", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 5 lseek(5, 0, SEEK_END) = 1720 old_mmap(NULL, 1720, PROT_READ, MAP_SHARED, 5, 0) = 0xb7f09000 close(5) = 0 old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f03000 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f02000 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f01000 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f00000 munmap(0xb7f09000, 1720) = 0 open("/etc/squidwall/filters/pfilter/beschimpfungen", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 5 lseek(5, 0, SEEK_END) = 462 old_mmap(NULL, 462, PROT_READ, MAP_SHARED, 5, 0) = 0xb7f09000 close(5) = 0 munmap(0xb7f09000, 462) = 0 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 gettimeofday({1153429342, 326772}, NULL) = 0 open("/etc/squidwall/filters/pfilter/!", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 672 old_mmap(NULL, 672, PROT_READ, MAP_SHARED, 4, 0) = 0xb7f0a000 close(4) = 0 old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7efe000 old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7efc000 open("/etc/squidwall/filters/pfilter/@", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 662 old_mmap(NULL, 662, PROT_READ, MAP_SHARED, 4, 0) = 0xb7efb000 close(4) = 0 munmap(0xb7efb000, 662) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7efb000 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7efa000 open("/etc/squidwall/filters/pfilter/@", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 662 old_mmap(NULL, 662, PROT_READ, MAP_SHARED, 4, 0) = 0xb7ef9000 close(4) = 0 munmap(0xb7ef9000, 662) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ef9000 munmap(0xb7f0a000, 672) = 0 stat("/etc/squidwall/filters/ufilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 open("/etc/squidwall/filters/ufilter", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 3 entries */, 4083) = 48 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 stat("/etc/squidwall/filters/ufilter_md5/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 open("/etc/squidwall/filters/ufilter_md5", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 4 entries */, 4083) = 76 open("/etc/squidwall/filters/ufilter_md5/anti-google-hash", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 5 lseek(5, 0, SEEK_END) = 112 old_mmap(NULL, 112, PROT_READ, MAP_SHARED, 5, 0) = 0xb7f09000 close(5) = 0 old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ef7000 munmap(0xb7f09000, 112) = 0 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 gettimeofday({1153429342, 383708}, NULL) = 0 stat("/etc/squidwall/filters/ufilter_sha1/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 open("/etc/squidwall/filters/ufilter_sha1", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 3 entries */, 4083) = 48 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 stat("/etc/squidwall/filters/wfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 open("/etc/squidwall/filters/wfilter", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 4 entries */, 4083) = 68 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 stat("/etc/squidwall/filters/bcfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 open("/etc/squidwall/filters/bcfilter", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 6 entries */, 4083) = 104 open("/etc/squidwall/filters/bcfilter/default", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 5 lseek(5, 0, SEEK_END) = 216 old_mmap(NULL, 216, PROT_READ, MAP_SHARED, 5, 0) = 0xb7f09000 close(5) = 0 old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ef5000 munmap(0xb7f09000, 216) = 0 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 gettimeofday({1153429342, 384731}, NULL) = 0 stat("/etc/squidwall/filters/brfilter/!", {st_mode=S_IFREG|0644, st_size=255, ...}) = 0 open("/etc/squidwall/filters/brfilter", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 4 entries */, 4083) = 64 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 stat("/etc/squidwall/filters/crfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 open("/etc/squidwall/filters/crfilter", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 4 entries */, 4083) = 64 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 stat("/etc/squidwall/filters/urfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 open("/etc/squidwall/filters/urfilter", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 4 entries */, 4083) = 64 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 stat("/etc/squidwall/filters/wrfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 open("/etc/squidwall/filters/wrfilter", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 5 entries */, 4083) = 84 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 stat("/etc/squidwall/redirects/!", {st_mode=S_IFREG|0644, st_size=256, ...}) = 0 open("/etc/squidwall/redirects", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 5 entries */, 4083) = 84 old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ef3000 readlink("/etc/squidwall/redirects/help", "http://www.mcmilk.de/wiki", 4999) = 25 old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ef1000 munmap(0xb7ef3000, 8192) = 0 old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ef3000 readlink("/etc/squidwall/redirects/milky", "http://www.mcmilk.de", 4999) = 20 munmap(0xb7ef3000, 8192) = 0 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 gettimeofday({1153429342, 386312}, NULL) = 0 stat("/etc/squidwall/users/!", {st_mode=S_IFREG|0644, st_size=1899, ...}) = 0 open("/etc/squidwall/users", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 3 entries */, 4083) = 48 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 stat("/etc/squidwall/hosts/!", {st_mode=S_IFREG|0644, st_size=2020, ...}) = 0 open("/etc/squidwall/hosts", O_RDONLY|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 getdents(4, /* 12 entries */, 4083) = 300 old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ef3000 getdents(4, /* 0 entries */, 4083) = 0 close(4) = 0 munmap(0xb7f0a000, 4096) = 0 open("/etc/squidwall/hosts/?192.168.100.5", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 0 old_mmap(NULL, 0, PROT_READ, MAP_SHARED, 4, 0) = -1 EINVAL (Invalid argument) close(4) = 0 open("/etc/squidwall/hosts/!", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 2020 old_mmap(NULL, 2020, PROT_READ, MAP_SHARED, 4, 0) = 0xb7f0a000 close(4) = 0 munmap(0xb7f0a000, 2020) = 0 open("/etc/squidwall/hosts/?192.168.100.6", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 0 old_mmap(NULL, 0, PROT_READ, MAP_SHARED, 4, 0) = -1 EINVAL (Invalid argument) close(4) = 0 open("/etc/squidwall/hosts/!", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 2020 old_mmap(NULL, 2020, PROT_READ, MAP_SHARED, 4, 0) = 0xb7f0a000 close(4) = 0 munmap(0xb7f0a000, 2020) = 0 open("/etc/squidwall/hosts/?192.168.100.7", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 0 old_mmap(NULL, 0, PROT_READ, MAP_SHARED, 4, 0) = -1 EINVAL (Invalid argument) close(4) = 0 open("/etc/squidwall/hosts/!", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 2020 old_mmap(NULL, 2020, PROT_READ, MAP_SHARED, 4, 0) = 0xb7f0a000 close(4) = 0 munmap(0xb7f0a000, 2020) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f0a000 open("/etc/squidwall/hosts/?192.168.100.8", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 0 old_mmap(NULL, 0, PROT_READ, MAP_SHARED, 4, 0) = -1 EINVAL (Invalid argument) close(4) = 0 open("/etc/squidwall/hosts/!", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 2020 old_mmap(NULL, 2020, PROT_READ, MAP_SHARED, 4, 0) = 0xb7f09000 close(4) = 0 munmap(0xb7f09000, 2020) = 0 open("/etc/squidwall/hosts/?192.168.100.9", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 0 old_mmap(NULL, 0, PROT_READ, MAP_SHARED, 4, 0) = -1 EINVAL (Invalid argument) close(4) = 0 open("/etc/squidwall/hosts/!", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 2020 old_mmap(NULL, 2020, PROT_READ, MAP_SHARED, 4, 0) = 0xb7f09000 close(4) = 0 munmap(0xb7f09000, 2020) = 0 open("/etc/squidwall/hosts/?192.168.100.20", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 0 old_mmap(NULL, 0, PROT_READ, MAP_SHARED, 4, 0) = -1 EINVAL (Invalid argument) close(4) = 0 open("/etc/squidwall/hosts/!", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 2020 old_mmap(NULL, 2020, PROT_READ, MAP_SHARED, 4, 0) = 0xb7f09000 close(4) = 0 munmap(0xb7f09000, 2020) = 0 open("/etc/squidwall/hosts/?192.168.100.21", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 0 old_mmap(NULL, 0, PROT_READ, MAP_SHARED, 4, 0) = -1 EINVAL (Invalid argument) close(4) = 0 open("/etc/squidwall/hosts/!", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 2020 old_mmap(NULL, 2020, PROT_READ, MAP_SHARED, 4, 0) = 0xb7f09000 close(4) = 0 munmap(0xb7f09000, 2020) = 0 open("/etc/squidwall/hosts/?192.168.100.100", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 0 old_mmap(NULL, 0, PROT_READ, MAP_SHARED, 4, 0) = -1 EINVAL (Invalid argument) close(4) = 0 open("/etc/squidwall/hosts/!", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 2020 old_mmap(NULL, 2020, PROT_READ, MAP_SHARED, 4, 0) = 0xb7f09000 close(4) = 0 munmap(0xb7f09000, 2020) = 0 open("/etc/squidwall/hosts/?192.168.100.101", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 0 old_mmap(NULL, 0, PROT_READ, MAP_SHARED, 4, 0) = -1 EINVAL (Invalid argument) close(4) = 0 open("/etc/squidwall/hosts/!", O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 4 lseek(4, 0, SEEK_END) = 2020 old_mmap(NULL, 2020, PROT_READ, MAP_SHARED, 4, 0) = 0xb7f09000 close(4) = 0 munmap(0xb7f09000, 2020) = 0 gettimeofday({1153429342, 390349}, NULL) = 0 gettimeofday({1153429342, 390376}, NULL) = 0 write(3, "@4000000044bfef681367e34c reading[18571]: bfilter: 1\n@4000000044bfef68137a2714 reading[18571]: pfilter: 2\n@4000000044bfef6816deed54 reading[18571]: ufilter_md5: 1\n@4000000044bfef6816ee896c reading[18571]: bcfilter: 1\n@4000000044bfef681706a934 reading[18571]: redirects: 2\n@4000000044bfef68174442bc reading[18571]: hosts: 9\n@4000000044bfef681744ac34 reading[18571]: --------------------------------------\n", 423) = 423 fcntl(0, F_GETFL) = 0x2 (flags O_RDWR) old_mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7eef000 epoll_create(1000) = 4 fcntl(1, F_GETFL) = 0x2 (flags O_RDWR) old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7eee000 epoll_ctl(4, EPOLL_CTL_ADD, 0, {EPOLLIN, {u32=0, u64=578074302797053952}}) = 0 epoll_wait(4, {{EPOLLIN, {u32=0, u64=578074302797053952}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 0, {0, {u32=0, u64=577917356102123520}}) = 0 read(0, "http://www.mcmilk.de/tmp/virus-test/eicar.com 192.168.100.6/p28tr - GET\n", 8192) = 72 stat("/etc/squidwall/filters/bfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/cfilter/!", {st_mode=S_IFREG|0644, st_size=661, ...}) = 0 stat("/etc/squidwall/filters/pfilter/!", {st_mode=S_IFREG|0644, st_size=672, ...}) = 0 stat("/etc/squidwall/filters/ufilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/ufilter_md5/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/ufilter_sha1/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/wfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/bcfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/brfilter/!", {st_mode=S_IFREG|0644, st_size=255, ...}) = 0 stat("/etc/squidwall/filters/crfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/urfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/wrfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/redirects/!", {st_mode=S_IFREG|0644, st_size=256, ...}) = 0 stat("/etc/squidwall/users/!", {st_mode=S_IFREG|0644, st_size=1899, ...}) = 0 stat("/etc/squidwall/hosts/!", {st_mode=S_IFREG|0644, st_size=2020, ...}) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 5 connect(5, {sa_family=AF_INET, sin_port=htons(3310), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 ECONNREFUSED (Connection refused) close(5) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 5 connect(5, {sa_family=AF_FILE, path="/var/lib/clamav/clamd.sock"}, 110) = 0 gettimeofday({1153429352, 981944}, NULL) = 0 write(3, "@4000000044bfef723a8748b4 info[18571]: clamav: via socket file\n", 63) = 63 write(5, "STREAM\n", 7) = 7 read(5, "PORT 1915\n", 5000) = 10 socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 6 connect(6, {sa_family=AF_INET, sin_port=htons(1915), sin_addr=inet_addr("127.0.0.1")}, 16) = 0 fcntl(6, F_GETFL) = 0x2 (flags O_RDWR) socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 7 connect(7, {sa_family=AF_INET, sin_port=htons(3128), sin_addr=inet_addr("127.0.0.1")}, 16) = 0 fcntl(7, F_GETFL) = 0x2 (flags O_RDWR) epoll_ctl(4, EPOLL_CTL_ADD, 7, {EPOLLOUT, {u32=7, u64=577883881127018503}}) = 0 epoll_wait(4, {{EPOLLOUT, {u32=7, u64=577883881127018503}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 7, {0, {u32=7, u64=13254287543815372807}}) = 0 write(7, "GET http://www.mcmilk.de/tmp/virus-test/eicar.com HTTP/1.0\r\nUser-Agent: squidwall 0.4b\r\n\r\n", 90) = 90 epoll_ctl(4, EPOLL_CTL_ADD, 7, {EPOLLIN, {u32=7, u64=13254287543815372807}}) = 0 epoll_wait(4, {{EPOLLIN, {u32=7, u64=13254287543815372807}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 7, {0, {u32=7, u64=13254287543815372807}}) = 0 read(7, "HTTP/1.0 200 OK\r\nDate: Thu, 20 Jul 2006 21:02:33 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 03 Aug 2004 15:23:41 GMT\r\nETag: \"a2805c-44-8099b940\"\r\nAccept-Ranges: bytes\r\nContent-Length: 68\r\nContent-Type: text/plain\r\nX-Cache: MISS from p28tr\r\nX-Cache-Lookup: MISS from p28tr:3128\r\nProxy-Connection: close\r\n\r\nX5O!P%@AP[4\\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*", 5000) = 371 read(7, "", 5000) = 0 close(7) = 0 write(6, "HTTP/1.0 200 OK\r\nDate: Thu, 20 Jul 2006 21:02:33 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 03 Aug 2004 15:23:41 GMT\r\nETag: \"a2805c-44-8099b940\"\r\nAccept-Ranges: bytes\r\nContent-Length: 68\r\nContent-Type: text/plain\r\nX-Cache: MISS from p28tr\r\nX-Cache-Lookup: MISS from p28tr:3128\r\nProxy-Connection: close\r\n\r\nX5O!P%@AP[4\\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*", 371) = 371 close(6) = 0 epoll_ctl(4, EPOLL_CTL_ADD, 5, {EPOLLIN, {u32=5, u64=577869746389647365}}) = 0 epoll_wait(4, {{EPOLLIN|EPOLLHUP, {u32=5, u64=577869746389647365}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 5, {0, {u32=5, u64=5}}) = 0 read(5, "stream: OK\n", 5000) = 11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ read(5, "", 5000) = 0 close(5) = 0 epoll_ctl(4, EPOLL_CTL_ADD, 1, {EPOLLOUT, {u32=1, u64=292057776129}}) = 0 epoll_wait(4, {{EPOLLOUT, {u32=1, u64=292057776129}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 1, {0, {u32=1, u64=12884901889}}) = 0 write(1, "\n", 1) = 1 epoll_ctl(4, EPOLL_CTL_ADD, 0, {EPOLLIN, {u32=0, u64=578074302797053952}}) = 0 epoll_wait(4, {{EPOLLIN, {u32=0, u64=578074302797053952}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 0, {0, {u32=0, u64=577917356102123520}}) = 0 read(0, "http://www.mcmilk.de/favicon.ico 192.168.100.6/p28tr - GET\n", 8192) = 59 stat("/etc/squidwall/filters/bfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/cfilter/!", {st_mode=S_IFREG|0644, st_size=661, ...}) = 0 stat("/etc/squidwall/filters/pfilter/!", {st_mode=S_IFREG|0644, st_size=672, ...}) = 0 stat("/etc/squidwall/filters/ufilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/ufilter_md5/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/ufilter_sha1/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/wfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/bcfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/brfilter/!", {st_mode=S_IFREG|0644, st_size=255, ...}) = 0 stat("/etc/squidwall/filters/crfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/urfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/filters/wrfilter/!", {st_mode=S_IFREG|0644, st_size=263, ...}) = 0 stat("/etc/squidwall/redirects/!", {st_mode=S_IFREG|0644, st_size=256, ...}) = 0 stat("/etc/squidwall/users/!", {st_mode=S_IFREG|0644, st_size=1899, ...}) = 0 stat("/etc/squidwall/hosts/!", {st_mode=S_IFREG|0644, st_size=2020, ...}) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 5 connect(5, {sa_family=AF_FILE, path="/var/lib/clamav/clamd.sock"}, 110) = 0 epoll_ctl(4, EPOLL_CTL_ADD, 5, {EPOLLOUT, {u32=5, u64=21474836485}}) = 0 epoll_wait(4, {{EPOLLOUT, {u32=5, u64=21474836485}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 5, {0, {u32=5, u64=13254287487980797957}}) = 0 write(5, "STREAM\n", 7) = 7 epoll_ctl(4, EPOLL_CTL_ADD, 5, {EPOLLIN, {u32=5, u64=577882747255652357}}) = 0 epoll_wait(4, {{EPOLLIN, {u32=5, u64=577882747255652357}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 5, {0, {u32=5, u64=13254287487980797957}}) = 0 read(5, "PORT 1547\n", 5000) = 10 socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 6 connect(6, {sa_family=AF_INET, sin_port=htons(1547), sin_addr=inet_addr("127.0.0.1")}, 16) = 0 fcntl(6, F_GETFL) = 0x2 (flags O_RDWR) socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 7 connect(7, {sa_family=AF_INET, sin_port=htons(3128), sin_addr=inet_addr("127.0.0.1")}, 16) = 0 fcntl(7, F_GETFL) = 0x2 (flags O_RDWR) epoll_ctl(4, EPOLL_CTL_ADD, 7, {EPOLLOUT, {u32=7, u64=577883881127018503}}) = 0 epoll_wait(4, {{EPOLLOUT, {u32=7, u64=577883881127018503}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 7, {0, {u32=7, u64=13254287487980797959}}) = 0 write(7, "GET http://www.mcmilk.de/favicon.ico HTTP/1.0\r\nUser-Agent: squidwall 0.4b\r\n\r\n", 77) = 77 epoll_ctl(4, EPOLL_CTL_ADD, 7, {EPOLLIN, {u32=7, u64=13254287487980797959}}) = 0 epoll_wait(4, {{EPOLLIN, {u32=7, u64=13254287487980797959}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 7, {0, {u32=7, u64=13254287487980797959}}) = 0 read(7, "HTTP/1.0 200 OK\r\nDate: Sat, 20 May 2006 16:52:54 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 29 Dec 2005 08:42:51 GMT\r\nETag: \"a1485b-2df-b3b338c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 735\r\nContent-Type: image/x-icon\r\nX-Cache: HIT from p28tr\r\nX-Cache-Lookup: HIT from p28tr:3128\r\nProxy-Connection: close\r\n\r\n\211PNG\r\n\32\n\0\0\0\rIHDR\0\0\0 \0\0\0 \10\6\0\0\0szz\364\0\0\0\6bKGD\0\377\0\377\0\377\240\275\247\223\0\0\0\tpHYs\0\0\v\23\0\0\v\23\1\0\232\234\30\0\0\0\7tIME\7\325\f\35\10*\32u\276!\225\0\0\2lIDATX\303\345\227;h\24Q\24\206\277l\22\37$\20P\214H\30\37\340v\261\21La\225i\4w\233\200\210\332h\246\260\21-\24\6B,\\\261\tLRX\244\23G\210\210`a!\321JFDX\361\201,\370\2\211\6\227(\4|?\321\230\2659\v\307q\';\367f$\205\7.\374{\346\356\334\377\234\373\237s\357\264\372aDG\327*\236Wn\263\24\226{\371\344\1\323\217\356\261T\326\222v\242\37F\211\317\2\317\315\234@\27\260\7\330\2\334\364\303\350R\232\227\331\20\311%\370w\0\247\201\303\300x\340\271y\203,\25\200;2\n\266\0046\2\313\5\257\1\306\f\202\32\1\266\311\30\261%P\6\346\324\357\355)\267\340\4\320\253\\\216\25\1?\214n\1\37\225\253#e\364\7c\272zo\233\1\200W\n\257\10<\327i\22\375\20\320\23sO\33\23P\345\366&\376\250\311\273\216Y5\"\203\271\373\223\262\20x\356\270\210uq\4\26j6\322\33\306\22\204wH\271f\262\312\300\352\6\276\335\262`}\361\0020\30[\374\231\25\201\6\321\353\224\276S\270\24xn-\360\334\0320)=c\36\370\2\2341i\341\3152\240K\357\232,\220d\367\3750\352\364\303\250\224\211\10Elm\312u\36\30\215\225f\335\356\2\'m\17\244\\B\232\6\200\225\202?\3\17\201\222\324yKl\364\311V\324\17#M\262\247\3316$m\301>\205g\201\252AP\27\24\316\7\236\353LU\312\306\4\326Y\366\n$\33Z/\303\325\247\25c\2\355&\355\264\201}R\270\277{\375\346d\2\361\375\21\1\352\236>jA\340\205\302\313\326n\310\33e`@\341\17u\201\31\332E\205\273\317\36\37tZ\333\332S\0238\232\20\211\211]\6\276\t\356\4\206\373v\356mN@\332\354&\345zlI\240\n\274\326-\274|e\302I\223\201]\n\317\305J\312\324&\200\232:Wz\23/\222\"\304\3\300O\371S\r\2102\270\366\317\250\367}\5\256\376uM\223\305\35`JM\376\1\0243 0$\235\264\246\306[\361\377A\340\210\2320\17\234\313\360\343\247\10\374\212\221\230\215k@\v\357z\354\214_\254M\2\247\244\242\276\213\357F#\226\365\217\211\"\377\316\34`k\232\353\372\377c\277\1O\371\257b\r)\314\365\0\0\0\0IEND\256B`\202", 5000) = 1040 read(7, "", 5000) = 0 close(7) = 0 write(6, "HTTP/1.0 200 OK\r\nDate: Sat, 20 May 2006 16:52:54 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 29 Dec 2005 08:42:51 GMT\r\nETag: \"a1485b-2df-b3b338c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 735\r\nContent-Type: image/x-icon\r\nX-Cache: HIT from p28tr\r\nX-Cache-Lookup: HIT from p28tr:3128\r\nProxy-Connection: close\r\n\r\n\211PNG\r\n\32\n\0\0\0\rIHDR\0\0\0 \0\0\0 \10\6\0\0\0szz\364\0\0\0\6bKGD\0\377\0\377\0\377\240\275\247\223\0\0\0\tpHYs\0\0\v\23\0\0\v\23\1\0\232\234\30\0\0\0\7tIME\7\325\f\35\10*\32u\276!\225\0\0\2lIDATX\303\345\227;h\24Q\24\206\277l\22\37$\20P\214H\30\37\340v\261\21La\225i\4w\233\200\210\332h\246\260\21-\24\6B,\\\261\tLRX\244\23G\210\210`a!\321JFDX\361\201,\370\2\211\6\227(\4|?\321\230\2659\v\307q\';\367f$\205\7.\374{\346\356\334\377\234\373\237s\357\264\372aDG\327*\236Wn\263\24\226{\371\344\1\323\217\356\261T\326\222v\242\37F\211\317\2\317\315\234@\27\260\7\330\2\334\364\303\350R\232\227\331\20\311%\370w\0\247\201\303\300x\340\271y\203,\25\200;2\n\266\0046\2\313\5\257\1\306\f\202\32\1\266\311\30\261%P\6\346\324\357\355)\267\340\4\320\253\\\216\25\1?\214n\1\37\225\253#e\364\7c\272zo\233\1\200W\n\257\10<\327i\22\375\20\320\23sO\33\23P\345\366&\376\250\311\273\216Y5\"\203\271\373\223\262\20x\356\270\210uq\4\26j6\322\33\306\22\204wH\271f\262\312\300\352\6\276\335\262`}\361\0020\30[\374\231\25\201\6\321\353\224\276S\270\24xn-\360\334\0320)=c\36\370\2\2341i\341\3152\240K\357\232,\220d\367\3750\352\364\303\250\224\211\10Elm\312u\36\30\215\225f\335\356\2\'m\17\244\\B\232\6\200\225\202?\3\17\201\222\324yKl\364\311V\324\17#M\262\247\3316$m\301>\205g\201\252AP\27\24\316\7\236\353LU\312\306\4\326Y\366\n$\33Z/\303\325\247\25c\2\355&\355\264\201}R\270\277{\375\346d\2\361\375\21\1\352\236>jA\340\205\302\313\326n\310\33e`@\341\17u\201\31\332E\205\273\317\36\37tZ\333\332S\0238\232\20\211\211]\6\276\t\356\4\206\373v\356mN@\332\354&\345zlI\240\n\274\326-\274|e\302I\223\201]\n\317\305J\312\324&\200\232:Wz\23/\222\"\304\3\300O\371S\r\2102\270\366\317\250\367}\5\256\376uM\223\305\35`JM\376\1\0243 0$\235\264\246\306[\361\377A\340\210\2320\17\234\313\360\343\247\10\374\212\221\230\215k@\v\357z\354\214_\254M\2\247\244\242\276\213\357F#\226\365\217\211\"\377\316\34`k\232\353\372\377c\277\1O\371\257b\r)\314\365\0\0\0\0IEND\256B`\202", 1040) = 1040 close(6) = 0 epoll_ctl(4, EPOLL_CTL_ADD, 5, {EPOLLIN, {u32=5, u64=577869746389647365}}) = 0 epoll_wait(4, {{EPOLLIN|EPOLLHUP, {u32=5, u64=577869746389647365}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 5, {0, {u32=5, u64=5}}) = 0 read(5, "stream: OK\n", 5000) = 11 read(5, "", 5000) = 0 close(5) = 0 epoll_ctl(4, EPOLL_CTL_ADD, 1, {EPOLLOUT, {u32=1, u64=549755813889}}) = 0 epoll_wait(4, {{EPOLLOUT, {u32=1, u64=549755813889}}}, 100, -1) = 1 epoll_ctl(4, EPOLL_CTL_DEL, 1, {0, {u32=1, u64=12884901889}}) = 0 write(1, "\n", 1) = 1 epoll_ctl(4, EPOLL_CTL_ADD, 0, {EPOLLIN, {u32=0, u64=578074302797053952}}) = 0 epoll_wait(4,