-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathtcp_client_server.json
More file actions
121 lines (119 loc) · 41.9 KB
/
Copy pathtcp_client_server.json
File metadata and controls
121 lines (119 loc) · 41.9 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
[
{"event": "audit:event:aue_read:", "time": 1498850498226473350, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 1, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_read:", "time": 1498850498226473350, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 1, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_read:", "time": 1498850498226473350, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 1, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_write:", "time": 1498850498227724459, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 8, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_read:", "time": 1498850498732308937, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 1, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_write:", "time": 1498850498732598463, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 8, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_write:", "time": 1498850498732598463, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 2, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_pipe:", "time": 1498850498733504217, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "ret_objuuid1": "56fd5d44-5dc9-11e7-9afa-44a842348b1c", "ret_objuuid2": "56fd5d47-5dc9-11e7-9afa-44a842348b1c", "ret_fd1": 3, "ret_fd2": 4, "retval": 0}
, {"event": "audit:event:aue_fork:", "time": 1498850498734820368, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "ret_objuuid1": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "ret_objuuid2": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_pid": 30684, "retval": 30684}
, {"event": "audit:event:aue_close:", "time": 1498850498734820368, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 3, "exec": "zsh", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850498734820368, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "fd": 4, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850498735473839, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 3, "exec": "zsh", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "56fd5d47-5dc9-11e7-9afa-44a842348b1c", "fd": 4, "retval": 0}
, {"event": "audit:event:aue_read:", "time": 1498850498735473839, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "56fd5d44-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0, "fdpath": "<unknown>"}
, {"event": "audit:event:aue_close:", "time": 1498850498735473839, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 3, "exec": "zsh", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850498735473839, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "56fd5d44-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850498735473839, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 3, "exec": "zsh", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "6f4b3840-9d81-fa5c-819d-07c71cfab1f7", "fd": 12, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850498736474576, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 3, "exec": "zsh", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "05f80a4a-3a2b-0c5c-ab3a-f4562c0cfebb", "fd": 13, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850498736474576, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 3, "exec": "zsh", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "d22e1655-3966-f854-a639-4283f4f80ef6", "fd": 14, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850498737640144, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "b71b45a0-2f2c-f451-ac2f-f04341f4b29a", "fd": 15, "retval": 0}
, {"event": "audit:event:aue_execve:", "time": 1498850498738473509, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "e5908321-5e19-395e-995e-ff42be39468a", "arg_objuuid2": "264a4864-39fe-f855-be39-fd7f05f8e168", "upath1": "/usr/home/arun/tc/misc/./server", "upath2": "/libexec/ld-elf.so.1", "retval": 0, "cmdline": "./server"}
, {"event": "audit:event:aue_openat_rwtc:", "time": 1498850498738473509, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "ffdae565-1dc0-ec51-801d-bac641ec6a59", "ret_objuuid1": "ffdae565-1dc0-ec51-801d-bac641ec6a59", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3}
, {"event": "audit:event:aue_mmap:", "time": 1498850498739474005, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "ffdae565-1dc0-ec51-801d-bac641ec6a59", "fd": 3, "retval": 6459392, "fdpath": "/etc/libmap.conf"}
, {"event": "audit:event:aue_close:", "time": 1498850498739474005, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "ffdae565-1dc0-ec51-801d-bac641ec6a59", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_openat_rwtc:", "time": 1498850498739474005, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "ret_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3}
, {"event": "audit:event:aue_read:", "time": 1498850498740816449, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "fd": 3, "retval": 128, "fdpath": "/var/run/ld-elf.so.hints"}
, {"event": "audit:event:aue_lseek:", "time": 1498850498740816449, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "fd": 3, "retval": 128}
, {"event": "audit:event:aue_read:", "time": 1498850498741474270, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "fd": 3, "retval": 231, "fdpath": "/var/run/ld-elf.so.hints"}
, {"event": "audit:event:aue_close:", "time": 1498850498741474270, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_openat_rwtc:", "time": 1498850498742474236, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "ret_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3}
, {"event": "audit:event:aue_mmap:", "time": 1498850498742474236, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "fd": 3, "retval": 6459392, "fdpath": "/lib/libc.so.7"}
, {"event": "audit:event:aue_mmap:", "time": 1498850498742474236, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "fd": 3, "retval": 8527872, "fdpath": "/lib/libc.so.7"}
, {"event": "audit:event:aue_mmap:", "time": 1498850498743474187, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "fd": 3, "retval": 12259328, "fdpath": "/lib/libc.so.7"}
, {"event": "audit:event:aue_close:", "time": 1498850498743474187, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_socket:", "time": 1498850498744474058, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "ret_objuuid1": "56fef730-5dc9-11e7-9afa-44a842348b1c", "ret_fd1": 3, "retval": 3}
, {"event": "audit:event:aue_close:", "time": 1498850498744474058, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "56fef730-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_socket:", "time": 1498850498745697264, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "ret_objuuid1": "56ff170e-5dc9-11e7-9afa-44a842348b1c", "ret_fd1": 3, "retval": 3}
, {"event": "audit:event:aue_close:", "time": 1498850498745697264, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "56ff170e-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_socket:", "time": 1498850498746492918, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "ret_objuuid1": "56ff3569-5dc9-11e7-9afa-44a842348b1c", "ret_fd1": 3, "retval": 3}
, {"event": "audit:event:aue_bind:", "time": 1498850498746492918, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "56ff3569-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "address": "::", "port": 3490, "retval": 0}
, {"event": "audit:event:aue_listen:", "time": 1498850498746492918, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "56ff3569-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_write:", "time": 1498850498747475860, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 1, "retval": 35, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_read:", "time": 1498850502554543921, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 1, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_read:", "time": 1498850502554543921, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 1, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_read:", "time": 1498850502554543921, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 1, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_write:", "time": 1498850502555770966, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 18, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_read:", "time": 1498850502989061863, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 1, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_write:", "time": 1498850502989481691, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 8, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_write:", "time": 1498850502989481691, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 2, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_pipe:", "time": 1498850502989481691, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "ret_objuuid1": "5986c44a-5dc9-11e7-9afa-44a842348b1c", "ret_objuuid2": "5986c44b-5dc9-11e7-9afa-44a842348b1c", "ret_fd1": 3, "ret_fd2": 4, "retval": 0}
, {"event": "audit:event:aue_fork:", "time": 1498850502990738612, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "ret_objuuid1": "5986da88-5dc9-11e7-9afa-44a842348b1c", "ret_objuuid2": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_pid": 30685, "retval": 30685}
, {"event": "audit:event:aue_close:", "time": 1498850502990738612, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850502990738612, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "fd": 4, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850502990738612, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "5986c44b-5dc9-11e7-9afa-44a842348b1c", "fd": 4, "retval": 0}
, {"event": "audit:event:aue_read:", "time": 1498850502991473878, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "5986c44a-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0, "fdpath": "<unknown>"}
, {"event": "audit:event:aue_close:", "time": 1498850502991473878, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850502991473878, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 0, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "5986c44a-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850502991473878, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "6f4b3840-9d81-fa5c-819d-07c71cfab1f7", "fd": 12, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850502992476127, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "d22e1655-3966-f854-a639-4283f4f80ef6", "fd": 13, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850502992476127, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "05f80a4a-3a2b-0c5c-ab3a-f4562c0cfebb", "fd": 14, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850502992476127, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "b71b45a0-2f2c-f451-ac2f-f04341f4b29a", "fd": 15, "retval": 0}
, {"event": "audit:event:aue_execve:", "time": 1498850502994473152, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "7f8ff5e2-8457-3e55-9784-299ac53e7bb8", "arg_objuuid2": "264a4864-39fe-f855-be39-fd7f05f8e168", "upath1": "/usr/home/arun/tc/misc/./client", "upath2": "/libexec/ld-elf.so.1", "retval": 0, "cmdline": "./client localhost"}
, {"event": "audit:event:aue_openat_rwtc:", "time": 1498850502995841109, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "ffdae565-1dc0-ec51-801d-bac641ec6a59", "ret_objuuid1": "ffdae565-1dc0-ec51-801d-bac641ec6a59", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3}
, {"event": "audit:event:aue_mmap:", "time": 1498850502995841109, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "ffdae565-1dc0-ec51-801d-bac641ec6a59", "fd": 3, "retval": 6459392, "fdpath": "/etc/libmap.conf"}
, {"event": "audit:event:aue_close:", "time": 1498850502996598229, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "ffdae565-1dc0-ec51-801d-bac641ec6a59", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_openat_rwtc:", "time": 1498850502997663317, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "ret_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3}
, {"event": "audit:event:aue_read:", "time": 1498850502998598204, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "fd": 3, "retval": 128, "fdpath": "/var/run/ld-elf.so.hints"}
, {"event": "audit:event:aue_lseek:", "time": 1498850502998598204, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "fd": 3, "retval": 128}
, {"event": "audit:event:aue_read:", "time": 1498850502999473336, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "fd": 3, "retval": 231, "fdpath": "/var/run/ld-elf.so.hints"}
, {"event": "audit:event:aue_close:", "time": 1498850502999473336, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "3452d1b2-ed23-8b50-a3ed-ac59908b0080", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_openat_rwtc:", "time": 1498850503000473434, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "ret_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3}
, {"event": "audit:event:aue_mmap:", "time": 1498850503000473434, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "fd": 3, "retval": 6459392, "fdpath": "/lib/libc.so.7"}
, {"event": "audit:event:aue_mmap:", "time": 1498850503000473434, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "fd": 3, "retval": 8527872, "fdpath": "/lib/libc.so.7"}
, {"event": "audit:event:aue_mmap:", "time": 1498850503001835273, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "fd": 3, "retval": 12259328, "fdpath": "/lib/libc.so.7"}
, {"event": "audit:event:aue_close:", "time": 1498850503001835273, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "abe9c19e-d270-f352-b0d2-d15882f3c39f", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_open_rwtc:", "time": 1498850503002598701, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 2, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "6f3cc4a6-5203-fc53-8352-e28c93fc91fb", "ret_objuuid1": "6f3cc4a6-5203-fc53-8352-e28c93fc91fb", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3}
, {"event": "audit:event:aue_read:", "time": 1498850503003474906, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "6f3cc4a6-5203-fc53-8352-e28c93fc91fb", "fd": 3, "retval": 255, "fdpath": "/etc/nsswitch.conf"}
, {"event": "audit:event:aue_read:", "time": 1498850503003474906, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "6f3cc4a6-5203-fc53-8352-e28c93fc91fb", "fd": 3, "retval": 0, "fdpath": "/etc/nsswitch.conf"}
, {"event": "audit:event:aue_close:", "time": 1498850503004561496, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "6f3cc4a6-5203-fc53-8352-e28c93fc91fb", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_open_rwtc:", "time": 1498850503005528136, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "03771de1-ccbf-a653-bfcc-0d4583a6a0f1", "ret_objuuid1": "03771de1-ccbf-a653-bfcc-0d4583a6a0f1", "upath1": "/etc/hosts", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3}
, {"event": "audit:event:aue_read:", "time": 1498850503005528136, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "03771de1-ccbf-a653-bfcc-0d4583a6a0f1", "fd": 3, "retval": 1031, "fdpath": "/etc/hosts"}
, {"event": "audit:event:aue_read:", "time": 1498850503006598296, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "03771de1-ccbf-a653-bfcc-0d4583a6a0f1", "fd": 3, "retval": 0, "fdpath": "/etc/hosts"}
, {"event": "audit:event:aue_close:", "time": 1498850503006598296, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "03771de1-ccbf-a653-bfcc-0d4583a6a0f1", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_socket:", "time": 1498850503007473534, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "ret_objuuid1": "59896196-5dc9-11e7-9afa-44a842348b1c", "ret_fd1": 3, "retval": 3}
, {"event": "audit:event:aue_connect:", "time": 1498850503007473534, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "59896196-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "address": "::1", "port": 1, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850503007473534, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "59896196-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_socket:", "time": 1498850503008473729, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "ret_objuuid1": "5989908a-5dc9-11e7-9afa-44a842348b1c", "ret_fd1": 3, "retval": 3}
, {"event": "audit:event:aue_connect:", "time": 1498850503008473729, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "5989908a-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "address": "127.0.0.1", "port": 1, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850503009473889, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "5989908a-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_socket:", "time": 1498850503009473889, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "ret_objuuid1": "5989beab-5dc9-11e7-9afa-44a842348b1c", "ret_fd1": 3, "retval": 3}
, {"event": "audit:event:aue_writev:", "time": 1498850503011501476, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 2, "retval": 36, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_close:", "time": 1498850503011501476, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "5989beab-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_socket:", "time": 1498850503012598211, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "ret_objuuid1": "598a3062-5dc9-11e7-9afa-44a842348b1c", "ret_fd1": 3, "retval": 3}
, {"event": "audit:event:aue_connect:", "time": 1498850503012598211, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "598a3062-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "address": "::1", "port": 3490, "retval": 0}
, {"event": "audit:event:aue_accept:", "time": 1498850503012598211, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "56ff3569-5dc9-11e7-9afa-44a842348b1c", "ret_objuuid1": "598a4114-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "ret_fd1": 4, "address": "::1", "port": 22224, "retval": 4}
, {"event": "audit:event:aue_write:", "time": 1498850503013589177, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 1, "retval": 26, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_write:", "time": 1498850503013589177, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 1, "retval": 32, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_fork:", "time": 1498850503013589177, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "ret_objuuid1": "598a6323-5dc9-11e7-9afa-44a842348b1c", "ret_objuuid2": "3f444265-55f0-11e7-933e-44a842348b1c", "arg_pid": 30686, "retval": 30686}
, {"event": "audit:event:aue_close:", "time": 1498850503013589177, "pid": 30686, "ppid": 30684, "tid": 100125, "uid": 8313, "cpu_id": 1, "exec": "server", "subjprocuuid": "598a6323-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "3f444265-55f0-11e7-933e-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_close:", "time": 1498850503014473435, "pid": 30684, "ppid": 30644, "tid": 100120, "uid": 8313, "cpu_id": 2, "exec": "server", "subjprocuuid": "56fd744f-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "a8cfabd0-55ea-11e7-9339-44a842348b1c", "fd": 4, "retval": 0}
, {"event": "audit:event:aue_sendto:", "time": 1498850503014473435, "pid": 30686, "ppid": 30684, "tid": 100125, "uid": 8313, "cpu_id": 1, "exec": "server", "subjprocuuid": "598a6323-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "3f444265-55f0-11e7-933e-44a842348b1c", "arg_objuuid1": "598a4114-5dc9-11e7-9afa-44a842348b1c", "fd": 4, "retval": 13}
, {"event": "audit:event:aue_recvfrom:", "time": 1498850503014473435, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "598a3062-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 13}
, {"event": "audit:event:aue_close:", "time": 1498850503014473435, "pid": 30686, "ppid": 30684, "tid": 100125, "uid": 8313, "cpu_id": 1, "exec": "server", "subjprocuuid": "598a6323-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "3f444265-55f0-11e7-933e-44a842348b1c", "arg_objuuid1": "598a4114-5dc9-11e7-9afa-44a842348b1c", "fd": 4, "retval": 0}
, {"event": "audit:event:aue_write:", "time": 1498850503014473435, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 1, "retval": 33, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_close:", "time": 1498850503014473435, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "arg_objuuid1": "598a3062-5dc9-11e7-9afa-44a842348b1c", "fd": 3, "retval": 0}
, {"event": "audit:event:aue_exit:", "time": 1498850503014473435, "pid": 30686, "ppid": 30684, "tid": 100125, "uid": 8313, "cpu_id": 1, "exec": "server", "subjprocuuid": "598a6323-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "3f444265-55f0-11e7-933e-44a842348b1c", "retval": 0}
, {"event": "audit:event:aue_exit:", "time": 1498850503015473619, "pid": 30685, "ppid": 29886, "tid": 100141, "uid": 8313, "cpu_id": 0, "exec": "client", "subjprocuuid": "5986da88-5dc9-11e7-9afa-44a842348b1c", "subjthruuid": "e33aed87-562d-11e7-9381-44a842348b1c", "retval": 0}
, {"event": "audit:event:aue_fcntl:", "time": 1498850503015473619, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "fd": 3, "retval": 2, "fcntl_cmd": 3}
, {"event": "audit:event:aue_write:", "time": 1498850503016474000, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 258, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_write:", "time": 1498850503016474000, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 60, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_write:", "time": 1498850503017473986, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 33, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_write:", "time": 1498850503017473986, "pid": 29886, "ppid": 29885, "tid": 100075, "uid": 8313, "cpu_id": 2, "exec": "zsh", "subjprocuuid": "b7c3e368-5d9b-11e7-9ab4-44a842348b1c", "subjthruuid": "922b53b4-55ea-11e7-9307-44a842348b1c", "arg_objuuid1": "c0e60490-62be-7b5a-be62-6f2dba7ba087", "fd": 10, "retval": 8, "fdpath": "/dev/pts/1"}
, {"event": "audit:event:aue_write:", "time": 1498850506878472894, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 1, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 1, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_fcntl:", "time": 1498850506878472894, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 1, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "fd": 3, "retval": 2, "fcntl_cmd": 3}
, {"event": "audit:event:aue_write:", "time": 1498850506878472894, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 1, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 258, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_write:", "time": 1498850506879580707, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 1, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 60, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_write:", "time": 1498850506880473074, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 1, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 33, "fdpath": "/dev/pts/2"}
, {"event": "audit:event:aue_write:", "time": 1498850506880473074, "pid": 30644, "ppid": 30643, "tid": 100143, "uid": 8313, "cpu_id": 1, "exec": "zsh", "subjprocuuid": "00150e31-5dc9-11e7-9af3-44a842348b1c", "subjthruuid": "e3468e82-562d-11e7-9382-44a842348b1c", "arg_objuuid1": "64ee4b93-8566-e751-a685-83ede1e76e1a", "fd": 10, "retval": 8, "fdpath": "/dev/pts/2"}
]