X__text__TEXT__data__DATA__const__TEXT __cstring__TEXT ` __picsymbolstub2__TEXT \4r__la_sym_ptr2__DATA[L7__nl_symbol_ptr__DATA&__textcoal_nt__TEXT @$ P\*UVS x$e}uE D$$O}uE D$$ 2}uE D$($ E D$4$ B$ E} ED$ 9DD$E D$@8$F ND$s$ 6D$$ F8F8y"D$ND$$ D$ 9DD$E D$@8$ y"D$ND$$? EE [^]UUS4?[\]^`{|}~[OK]: %s [ERR]: %s [INFO]: %s [FAILED]: %s rootcheckossec-rootcheck%s(1224): Error sending message to queue./usr/local/ossec-hids/queue/ossec/queue%s(1211): Unable to access queue: '%s'. Giving up../** Starting Rootcheck v0.8 by Daniel B. Cid ** ** http://www.ossec.net/en/about.html#dev-team ** ** http://www.ossec.net/rootcheck/ ** Be patient, it may take a few minutes to complete... Starting rootcheck scan.%s: No rootcheck_files file configured.r%s: No rootcheck_files file: '%s'%s: No rootcheck_trojans file configured.%s: No rootcheck_trojans file: '%s'%s: DEBUG: Going into check_rc_dev%s: DEBUG: Going into check_rc_sys%s: DEBUG: Going into check_rc_pids%s: DEBUG: Going into check_rc_ports%s: DEBUG: Going into check_open_ports%s: DEBUG: Going into check_rc_if%s: DEBUG: Completed with all checks.- Scan completed in %d seconds. %s: DEBUG: Leaving run_rk_check{⍀Pgb⍀PNI⍀P50⍀P⍀Pm⍀mPX⍀XPC⍀CP.⍀.P⍀P⍀Pmh⍀PTO⍀P;6⍀P"⍀P ⍀P⍀Pq⍀qP\⍀\P # < U n 6O$Ë$` [ O~oQ5 [ [` [ [ [|oia W[QD>6` ,[& [  [rc[ Q[B3&  ` [6 zOtl f^XPJB@<4O& 4  [  uh WQ IA 7[ -    [  Q O A ph5 SK* 6.    GG  ..     ~ x s m e _ Z T L F A ; 3 - ( "      f f {M {M w4 w4 s s o o ~ y sk kk e ` Zg Rg L G Ac 9c 3 . (_ _   [ [  HD@<840,($  dd < DD DD%D<DBDYD_D!vD$D%D)D*D-D/D1D3+D6MD8}D=D>($Xcr $DEDK$E$DRD[D^D_DaDcDpDrDvDy$D{2D|@D}ND~\DjDxDDDDDDDD:D@DiDDDDDDDDD*DBDUDmDDDDDDD"D#D&D, D.'D0_D2aD3D,D8D:D<D=D@DB $RS"p9ITUVwQgyTq(=ZE[gh+q rst$\u &  &G b v d 5$~C)Y ?7Qiv\iQ@vp_notify_rk___i686.get_pc_thunk.bx_start_rk_daemon_run_rk_check___local_name_rootcheck_rk_sys_file_rk_sys_name_rk_sys_count_total_ports_udp_total_ports_tcp___i686.get_pc_thunk.axdyld_stub_binding_helper_free_check_rc_if_check_open_ports_check_rc_ports_check_rc_pids_check_rc_sys_check_rc_dev_debug1_check_rc_trojans_fclose_check_rc_files_fopen_time_strlen_ErrorExit_StartMQ_merror_SendMSG_printf/mnt/gmirror/ports/security/ossec-hids-server/work/ossec-hids-1.3/src/rootcheck/run_rk_check.cgcc2_compiled._hostname_mapnotify_rk:F(0,1)=r(0,1);-2147483648;2147483647;int:t(0,1)rk_type:p(0,1)msg:p(0,2)=*(0,3)=r(0,3);0;127;char:t(0,3)start_rk_daemon:F(0,4)=(0,4)void:t(0,4)run_rk_check:F(0,4)time1:(0,5)=(0,6)=(0,7)=r(0,7);-2147483648;2147483647;time_t:t(0,5)__darwin_time_t:t(0,6)long int:t(0,7)time2:(0,5)fp:(0,8)=*(0,9)=(0,10)=xs__sFILE:FILE:t(0,9)__sFILE:T(0,10)=s88_p:(0,11)=*(0,12)=@s8;r(0,12);0;255;,0,32;_r:(0,1),32,32;_w:(0,1),64,32;_flags:(0,13)=@s16;r(0,13);-32768;32767;,96,16;_file:(0,13),112,16;_bf:(0,14)=xs__sbuf:,128,64;_lbfsize:(0,1),192,32;_cookie:(0,15)=*(0,4),224,32;_close:(0,16)=*(0,17)=f(0,1),256,32;_read:(0,18)=*(0,19)=f(0,1),288,32;_seek:(0,20)=*(0,21)=f(0,22)=(0,23)=(0,24)=(0,25)=@s64;r(0,25);01000000000000000000000;0777777777777777777777;,320,32;_write:(0,26)=*(0,27)=f(0,1),352,32;_ub:(0,14),384,64;_extra:(0,28)=*(0,29)=xs__sFILEX:,448,32;_ur:(0,1),480,32;_ubuf:(0,30)=ar(0,31)=r(0,31);0000000000000;0037777777777;;0;2;(0,12),512,24;_nbuf:(0,32)=ar(0,31);0;0;(0,12),536,8;_lb:(0,14),544,64;_blksize:(0,1),608,32;_offset:(0,22),640,64;;unsigned char:t(0,12)short int:t(0,13)__sbuf:T(0,14)=s8_base:(0,11),0,32;_size:(0,1),32,32;;fpos_t:t(0,22)__darwin_off_t:t(0,23)__int64_t:t(0,24)long long int:t(0,25)long unsigned int:t(0,33)=r(0,33);0000000000000;0037777777777;i:(0,1)basedir:(0,34)=ar(0,31);0;1;(0,3)li:(0,1)__local_name:G(0,2)hostname_map:S(0,35)=ar(0,31);0;255;(0,36)=k(0,12)rootcheck:G(0,37)=(0,38)=xs_rkconfig:rkconfig:t(0,37)_rkconfig:T(0,38)=s60workdir:(0,2),0,32;basedir:(0,2),32,32;rootkit_files:(0,2),64,32;rootkit_trojans:(0,2),96,32;winaudit:(0,2),128,32;winmalware:(0,2),160,32;winapps:(0,2),192,32;fp:(0,8),224,32;daemon:(0,1),256,32;notify:(0,1),288,32;scanall:(0,1),320,32;readall:(0,1),352,32;disabled:(0,1),384,32;time:(0,1),416,32;queue:(0,1),448,32;;rk_sys_file:G(0,39)=*(0,2)rk_sys_name:G(0,39)rk_sys_count:G(0,1)total_ports_udp:G(0,40)=ar(0,31);0;65535;(0,3)total_ports_tcp:G(0,40)