-- Logs begin at ma 2015-11-16 18:22:38 EET, end at ma 2015-11-16 18:24:09 EET. -- marras 16 18:22:38 localhost.localdomain systemd-journal[120]: Runtime journal is using 6.2M (max allowed 49.6M, trying to leave 74.5M free of 490.4M available → current limit 49.6M). marras 16 18:22:38 localhost.localdomain systemd-journal[120]: Runtime journal is using 6.2M (max allowed 49.6M, trying to leave 74.5M free of 490.4M available → current limit 49.6M). marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys cpuset marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys cpu marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys cpuacct marras 16 18:22:38 localhost.localdomain kernel: Linux version 4.2.6-300.fc23.x86_64 (mockbuild@bkernel02.phx2.fedoraproject.org) (gcc version 5.1.1 20150618 (Red Hat 5.1.1-4) (GCC) ) #1 SMP Tue Nov 10 19:32:21 UTC 2015 marras 16 18:22:38 localhost.localdomain kernel: Command line: BOOT_IMAGE=/vmlinuz-4.2.6-300.fc23.x86_64 root=UUID=f5c71ab4-36e7-4712-b9a4-d9c5cc22c6ef ro console=tty0 rd_NO_PLYMOUTH console=ttyS0,115200 LANG=en_US.UTF-8 marras 16 18:22:38 localhost.localdomain kernel: x86/fpu: Legacy x87 FPU detected. marras 16 18:22:38 localhost.localdomain kernel: x86/fpu: Using 'lazy' FPU context switches. marras 16 18:22:38 localhost.localdomain kernel: e820: BIOS-provided physical RAM map: marras 16 18:22:38 localhost.localdomain kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable marras 16 18:22:38 localhost.localdomain kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved marras 16 18:22:38 localhost.localdomain kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved marras 16 18:22:38 localhost.localdomain kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ffdffff] usable marras 16 18:22:38 localhost.localdomain kernel: BIOS-e820: [mem 0x000000003ffe0000-0x000000003fffffff] reserved marras 16 18:22:38 localhost.localdomain kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved marras 16 18:22:38 localhost.localdomain kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved marras 16 18:22:38 localhost.localdomain kernel: NX (Execute Disable) protection: active marras 16 18:22:38 localhost.localdomain kernel: SMBIOS 2.8 present. marras 16 18:22:38 localhost.localdomain kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.8.1-20150318_183358- 04/01/2014 marras 16 18:22:38 localhost.localdomain kernel: Hypervisor detected: KVM marras 16 18:22:38 localhost.localdomain kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved marras 16 18:22:38 localhost.localdomain kernel: e820: remove [mem 0x000a0000-0x000fffff] usable marras 16 18:22:38 localhost.localdomain kernel: e820: last_pfn = 0x3ffe0 max_arch_pfn = 0x400000000 marras 16 18:22:38 localhost.localdomain kernel: MTRR default type: write-back marras 16 18:22:38 localhost.localdomain kernel: MTRR fixed ranges enabled: marras 16 18:22:38 localhost.localdomain kernel: 00000-9FFFF write-back marras 16 18:22:38 localhost.localdomain kernel: A0000-BFFFF uncachable marras 16 18:22:38 localhost.localdomain kernel: C0000-FFFFF write-protect marras 16 18:22:38 localhost.localdomain kernel: MTRR variable ranges enabled: marras 16 18:22:38 localhost.localdomain kernel: 0 base 0080000000 mask FF80000000 uncachable marras 16 18:22:38 localhost.localdomain kernel: 1 disabled marras 16 18:22:38 localhost.localdomain kernel: 2 disabled marras 16 18:22:38 localhost.localdomain kernel: 3 disabled marras 16 18:22:38 localhost.localdomain kernel: 4 disabled marras 16 18:22:38 localhost.localdomain kernel: 5 disabled marras 16 18:22:38 localhost.localdomain kernel: 6 disabled marras 16 18:22:38 localhost.localdomain kernel: 7 disabled marras 16 18:22:38 localhost.localdomain kernel: x86/PAT: PAT not supported by CPU. marras 16 18:22:38 localhost.localdomain kernel: found SMP MP-table at [mem 0x000f6590-0x000f659f] mapped at [ffff8800000f6590] marras 16 18:22:38 localhost.localdomain kernel: Base memory trampoline at [ffff880000099000] 99000 size 24576 marras 16 18:22:38 localhost.localdomain kernel: init_memory_mapping: [mem 0x00000000-0x000fffff] marras 16 18:22:38 localhost.localdomain kernel: [mem 0x00000000-0x000fffff] page 4k marras 16 18:22:38 localhost.localdomain kernel: BRK [0x02044000, 0x02044fff] PGTABLE marras 16 18:22:38 localhost.localdomain kernel: BRK [0x02045000, 0x02045fff] PGTABLE marras 16 18:22:38 localhost.localdomain kernel: BRK [0x02046000, 0x02046fff] PGTABLE marras 16 18:22:38 localhost.localdomain kernel: init_memory_mapping: [mem 0x3fc00000-0x3fdfffff] marras 16 18:22:38 localhost.localdomain kernel: [mem 0x3fc00000-0x3fdfffff] page 2M marras 16 18:22:38 localhost.localdomain kernel: init_memory_mapping: [mem 0x20000000-0x3fbfffff] marras 16 18:22:38 localhost.localdomain kernel: [mem 0x20000000-0x3fbfffff] page 2M marras 16 18:22:38 localhost.localdomain kernel: init_memory_mapping: [mem 0x00100000-0x1fffffff] marras 16 18:22:38 localhost.localdomain kernel: [mem 0x00100000-0x001fffff] page 4k marras 16 18:22:38 localhost.localdomain kernel: [mem 0x00200000-0x1fffffff] page 2M marras 16 18:22:38 localhost.localdomain kernel: init_memory_mapping: [mem 0x3fe00000-0x3ffdffff] marras 16 18:22:38 localhost.localdomain kernel: [mem 0x3fe00000-0x3ffdffff] page 4k marras 16 18:22:38 localhost.localdomain kernel: BRK [0x02047000, 0x02047fff] PGTABLE marras 16 18:22:38 localhost.localdomain kernel: RAMDISK: [mem 0x367f5000-0x373f2fff] marras 16 18:22:38 localhost.localdomain kernel: ACPI: Early table checksum verification disabled marras 16 18:22:38 localhost.localdomain kernel: ACPI: RSDP 0x00000000000F63B0 000014 (v00 BOCHS ) marras 16 18:22:38 localhost.localdomain kernel: ACPI: RSDT 0x000000003FFE16B5 000034 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) marras 16 18:22:38 localhost.localdomain kernel: ACPI: FACP 0x000000003FFE0BDA 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001) marras 16 18:22:38 localhost.localdomain kernel: ACPI: DSDT 0x000000003FFE0040 000B9A (v01 BOCHS BXPCDSDT 00000001 BXPC 00000001) marras 16 18:22:38 localhost.localdomain kernel: ACPI: FACS 0x000000003FFE0000 000040 marras 16 18:22:38 localhost.localdomain kernel: ACPI: SSDT 0x000000003FFE0C4E 0009B7 (v01 BOCHS BXPCSSDT 00000001 BXPC 00000001) marras 16 18:22:38 localhost.localdomain kernel: ACPI: APIC 0x000000003FFE1605 000078 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001) marras 16 18:22:38 localhost.localdomain kernel: ACPI: HPET 0x000000003FFE167D 000038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001) marras 16 18:22:38 localhost.localdomain kernel: ACPI: Local APIC address 0xfee00000 marras 16 18:22:38 localhost.localdomain kernel: No NUMA configuration found marras 16 18:22:38 localhost.localdomain kernel: Faking a node at [mem 0x0000000000000000-0x000000003ffdffff] marras 16 18:22:38 localhost.localdomain kernel: NODE_DATA(0) allocated [mem 0x3ffcc000-0x3ffdffff] marras 16 18:22:38 localhost.localdomain kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 marras 16 18:22:38 localhost.localdomain kernel: kvm-clock: cpu 0, msr 0:3ffbc001, primary cpu clock marras 16 18:22:38 localhost.localdomain kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns marras 16 18:22:38 localhost.localdomain kernel: [ffffea0000000000-ffffea0000ffffff] PMD -> [ffff88003e600000-ffff88003f5fffff] on node 0 marras 16 18:22:38 localhost.localdomain kernel: Zone ranges: marras 16 18:22:38 localhost.localdomain kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] marras 16 18:22:38 localhost.localdomain kernel: DMA32 [mem 0x0000000001000000-0x000000003ffdffff] marras 16 18:22:38 localhost.localdomain kernel: Normal empty marras 16 18:22:38 localhost.localdomain kernel: Movable zone start for each node marras 16 18:22:38 localhost.localdomain kernel: Early memory node ranges marras 16 18:22:38 localhost.localdomain kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] marras 16 18:22:38 localhost.localdomain kernel: node 0: [mem 0x0000000000100000-0x000000003ffdffff] marras 16 18:22:38 localhost.localdomain kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000003ffdffff] marras 16 18:22:38 localhost.localdomain kernel: On node 0 totalpages: 262014 marras 16 18:22:38 localhost.localdomain kernel: DMA zone: 64 pages used for memmap marras 16 18:22:38 localhost.localdomain kernel: DMA zone: 21 pages reserved marras 16 18:22:38 localhost.localdomain kernel: DMA zone: 3998 pages, LIFO batch:0 marras 16 18:22:38 localhost.localdomain kernel: DMA32 zone: 4032 pages used for memmap marras 16 18:22:38 localhost.localdomain kernel: DMA32 zone: 258016 pages, LIFO batch:31 marras 16 18:22:38 localhost.localdomain kernel: ACPI: PM-Timer IO Port: 0x608 marras 16 18:22:38 localhost.localdomain kernel: ACPI: Local APIC address 0xfee00000 marras 16 18:22:38 localhost.localdomain kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) marras 16 18:22:38 localhost.localdomain kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 marras 16 18:22:38 localhost.localdomain kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) marras 16 18:22:38 localhost.localdomain kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) marras 16 18:22:38 localhost.localdomain kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) marras 16 18:22:38 localhost.localdomain kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) marras 16 18:22:38 localhost.localdomain kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) marras 16 18:22:38 localhost.localdomain kernel: ACPI: IRQ0 used by override. marras 16 18:22:38 localhost.localdomain kernel: ACPI: IRQ5 used by override. marras 16 18:22:38 localhost.localdomain kernel: ACPI: IRQ9 used by override. marras 16 18:22:38 localhost.localdomain kernel: ACPI: IRQ10 used by override. marras 16 18:22:38 localhost.localdomain kernel: ACPI: IRQ11 used by override. marras 16 18:22:38 localhost.localdomain kernel: Using ACPI (MADT) for SMP configuration information marras 16 18:22:38 localhost.localdomain kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 marras 16 18:22:38 localhost.localdomain kernel: smpboot: Allowing 1 CPUs, 0 hotplug CPUs marras 16 18:22:38 localhost.localdomain kernel: PM: Registered nosave memory: [mem 0x00000000-0x00000fff] marras 16 18:22:38 localhost.localdomain kernel: PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff] marras 16 18:22:38 localhost.localdomain kernel: PM: Registered nosave memory: [mem 0x000a0000-0x000effff] marras 16 18:22:38 localhost.localdomain kernel: PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] marras 16 18:22:38 localhost.localdomain kernel: e820: [mem 0x40000000-0xfeffbfff] available for PCI devices marras 16 18:22:38 localhost.localdomain kernel: Booting paravirtualized kernel on KVM marras 16 18:22:38 localhost.localdomain kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns marras 16 18:22:38 localhost.localdomain kernel: setup_percpu: NR_CPUS:1024 nr_cpumask_bits:1 nr_cpu_ids:1 nr_node_ids:1 marras 16 18:22:38 localhost.localdomain kernel: PERCPU: Embedded 33 pages/cpu @ffff88003fc00000 s97048 r8192 d29928 u2097152 marras 16 18:22:38 localhost.localdomain kernel: pcpu-alloc: s97048 r8192 d29928 u2097152 alloc=1*2097152 marras 16 18:22:38 localhost.localdomain kernel: pcpu-alloc: [0] 0 marras 16 18:22:38 localhost.localdomain kernel: KVM setup async PF for cpu 0 marras 16 18:22:38 localhost.localdomain kernel: kvm-stealtime: cpu 0, msr 3fc0e480 marras 16 18:22:38 localhost.localdomain kernel: Built 1 zonelists in Node order, mobility grouping on. Total pages: 257897 marras 16 18:22:38 localhost.localdomain kernel: Policy zone: DMA32 marras 16 18:22:38 localhost.localdomain kernel: Kernel command line: BOOT_IMAGE=/vmlinuz-4.2.6-300.fc23.x86_64 root=UUID=f5c71ab4-36e7-4712-b9a4-d9c5cc22c6ef ro console=tty0 rd_NO_PLYMOUTH console=ttyS0,115200 LANG=en_US.UTF-8 marras 16 18:22:38 localhost.localdomain kernel: PID hash table entries: 4096 (order: 3, 32768 bytes) marras 16 18:22:38 localhost.localdomain kernel: Memory: 1002100K/1048056K available (7672K kernel code, 1264K rwdata, 3340K rodata, 1516K init, 1544K bss, 45956K reserved, 0K cma-reserved) marras 16 18:22:38 localhost.localdomain kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 marras 16 18:22:38 localhost.localdomain kernel: Hierarchical RCU implementation. marras 16 18:22:38 localhost.localdomain kernel: Build-time adjustment of leaf fanout to 64. marras 16 18:22:38 localhost.localdomain kernel: RCU restricting CPUs from NR_CPUS=1024 to nr_cpu_ids=1. marras 16 18:22:38 localhost.localdomain kernel: RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=1 marras 16 18:22:38 localhost.localdomain kernel: NR_IRQS:65792 nr_irqs:256 16 marras 16 18:22:38 localhost.localdomain kernel: Offload RCU callbacks from all CPUs marras 16 18:22:38 localhost.localdomain kernel: Offload RCU callbacks from CPUs: 0. marras 16 18:22:38 localhost.localdomain kernel: Console: colour *CGA 80x25 marras 16 18:22:38 localhost.localdomain kernel: console [tty0] enabled marras 16 18:22:38 localhost.localdomain kernel: console [ttyS0] enabled marras 16 18:22:38 localhost.localdomain kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns marras 16 18:22:38 localhost.localdomain kernel: hpet clockevent registered marras 16 18:22:38 localhost.localdomain kernel: tsc: Detected 2593.990 MHz processor marras 16 18:22:38 localhost.localdomain kernel: Calibrating delay loop (skipped) preset value.. 5187.98 BogoMIPS (lpj=2593990) marras 16 18:22:38 localhost.localdomain kernel: pid_max: default: 32768 minimum: 301 marras 16 18:22:38 localhost.localdomain kernel: ACPI: Core revision 20150619 marras 16 18:22:38 localhost.localdomain kernel: ACPI: All ACPI Tables successfully acquired marras 16 18:22:38 localhost.localdomain kernel: Security Framework initialized marras 16 18:22:38 localhost.localdomain kernel: SELinux: Initializing. marras 16 18:22:38 localhost.localdomain kernel: SELinux: Starting in permissive mode marras 16 18:22:38 localhost.localdomain kernel: Yama: becoming mindful. marras 16 18:22:38 localhost.localdomain kernel: Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes) marras 16 18:22:38 localhost.localdomain kernel: Inode-cache hash table entries: 65536 (order: 7, 524288 bytes) marras 16 18:22:38 localhost.localdomain kernel: Mount-cache hash table entries: 2048 (order: 2, 16384 bytes) marras 16 18:22:38 localhost.localdomain kernel: Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes) marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys blkio marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys memory marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys devices marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys freezer marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys net_cls marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys perf_event marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys net_prio marras 16 18:22:38 localhost.localdomain kernel: Initializing cgroup subsys hugetlb marras 16 18:22:38 localhost.localdomain kernel: mce: CPU supports 10 MCE banks marras 16 18:22:38 localhost.localdomain kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 marras 16 18:22:38 localhost.localdomain kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 marras 16 18:22:38 localhost.localdomain kernel: Freeing SMP alternatives memory: 28K (ffffffff81eb9000 - ffffffff81ec0000) marras 16 18:22:38 localhost.localdomain kernel: ftrace: allocating 28736 entries in 113 pages marras 16 18:22:38 localhost.localdomain kernel: x2apic enabled marras 16 18:22:38 localhost.localdomain kernel: Switched APIC routing to physical x2apic. marras 16 18:22:38 localhost.localdomain kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 marras 16 18:22:38 localhost.localdomain kernel: APIC calibration not consistent with PM-Timer: 106ms instead of 100ms marras 16 18:22:38 localhost.localdomain kernel: APIC delta adjusted to PM-Timer: 6250040 (6687477) marras 16 18:22:38 localhost.localdomain kernel: smpboot: CPU0: Intel QEMU Virtual CPU version 2.3.1 (fam: 06, model: 06, stepping: 03) marras 16 18:22:38 localhost.localdomain kernel: Performance Events: Broken PMU hardware detected, using software events only. marras 16 18:22:38 localhost.localdomain kernel: Failed to access perfctr msr (MSR c2 is 0) marras 16 18:22:38 localhost.localdomain kernel: x86: Booted up 1 node, 1 CPUs marras 16 18:22:38 localhost.localdomain kernel: smpboot: Total of 1 processors activated (5187.98 BogoMIPS) marras 16 18:22:38 localhost.localdomain kernel: devtmpfs: initialized marras 16 18:22:38 localhost.localdomain kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns marras 16 18:22:38 localhost.localdomain kernel: atomic64_test: passed for x86-64 platform with CX8 and with SSE marras 16 18:22:38 localhost.localdomain kernel: pinctrl core: initialized pinctrl subsystem marras 16 18:22:38 localhost.localdomain kernel: RTC time: 16:22:37, date: 11/16/15 marras 16 18:22:38 localhost.localdomain kernel: NET: Registered protocol family 16 marras 16 18:22:38 localhost.localdomain kernel: cpuidle: using governor menu marras 16 18:22:38 localhost.localdomain kernel: ACPI: bus type PCI registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 marras 16 18:22:38 localhost.localdomain kernel: PCI: Using configuration type 1 for base access marras 16 18:22:38 localhost.localdomain kernel: ACPI: Added _OSI(Module Device) marras 16 18:22:38 localhost.localdomain kernel: ACPI: Added _OSI(Processor Device) marras 16 18:22:38 localhost.localdomain kernel: ACPI: Added _OSI(3.0 _SCP Extensions) marras 16 18:22:38 localhost.localdomain kernel: ACPI: Added _OSI(Processor Aggregator Device) marras 16 18:22:38 localhost.localdomain kernel: ACPI: Interpreter enabled marras 16 18:22:38 localhost.localdomain kernel: ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20150619/hwxface-580) marras 16 18:22:38 localhost.localdomain kernel: ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150619/hwxface-580) marras 16 18:22:38 localhost.localdomain kernel: ACPI: (supports S0 S3 S4 S5) marras 16 18:22:38 localhost.localdomain kernel: ACPI: Using IOAPIC for interrupt routing marras 16 18:22:38 localhost.localdomain kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug marras 16 18:22:38 localhost.localdomain kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) marras 16 18:22:38 localhost.localdomain kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] marras 16 18:22:38 localhost.localdomain kernel: acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM marras 16 18:22:38 localhost.localdomain kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [2] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [3] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [4] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [5] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [6] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [7] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [8] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [9] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [10] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [11] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [12] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [13] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [14] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [15] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [16] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [17] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [18] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [19] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [20] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [21] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [22] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [23] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [24] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [25] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [26] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [27] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [28] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [29] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [30] registered marras 16 18:22:38 localhost.localdomain kernel: acpiphp: Slot [31] registered marras 16 18:22:38 localhost.localdomain kernel: PCI host bridge to bus 0000:00 marras 16 18:22:38 localhost.localdomain kernel: pci_bus 0000:00: root bus resource [bus 00-ff] marras 16 18:22:38 localhost.localdomain kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] marras 16 18:22:38 localhost.localdomain kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] marras 16 18:22:38 localhost.localdomain kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] marras 16 18:22:38 localhost.localdomain kernel: pci_bus 0000:00: root bus resource [mem 0x40000000-0xfebfffff window] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0e0-0xc0ef] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.2: [8086:7020] type 00 class 0x0c0300 marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.2: reg 0x20: [io 0xc080-0xc09f] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:02.0: [1af4:1000] type 00 class 0x020000 marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0a0-0xc0bf] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebc0000-0xfebc0fff] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:03.0: [1af4:1004] type 00 class 0x010000 marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc03f] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebc1000-0xfebc1fff] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:04.0: reg 0x10: [io 0xc040-0xc07f] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebc2000-0xfebc2fff] marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0c0-0xc0df] marras 16 18:22:38 localhost.localdomain kernel: ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) marras 16 18:22:38 localhost.localdomain kernel: ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) marras 16 18:22:38 localhost.localdomain kernel: ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) marras 16 18:22:38 localhost.localdomain kernel: ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) marras 16 18:22:38 localhost.localdomain kernel: ACPI: PCI Interrupt Link [LNKS] (IRQs *9) marras 16 18:22:38 localhost.localdomain kernel: ACPI: Enabled 16 GPEs in block 00 to 0F marras 16 18:22:38 localhost.localdomain kernel: vgaarb: loaded marras 16 18:22:38 localhost.localdomain kernel: SCSI subsystem initialized marras 16 18:22:38 localhost.localdomain kernel: libata version 3.00 loaded. marras 16 18:22:38 localhost.localdomain kernel: ACPI: bus type USB registered marras 16 18:22:38 localhost.localdomain kernel: usbcore: registered new interface driver usbfs marras 16 18:22:38 localhost.localdomain kernel: usbcore: registered new interface driver hub marras 16 18:22:38 localhost.localdomain kernel: usbcore: registered new device driver usb marras 16 18:22:38 localhost.localdomain kernel: PCI: Using ACPI for IRQ routing marras 16 18:22:38 localhost.localdomain kernel: PCI: pci_cache_line_size set to 64 bytes marras 16 18:22:38 localhost.localdomain kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] marras 16 18:22:38 localhost.localdomain kernel: e820: reserve RAM buffer [mem 0x3ffe0000-0x3fffffff] marras 16 18:22:38 localhost.localdomain kernel: NetLabel: Initializing marras 16 18:22:38 localhost.localdomain kernel: NetLabel: domain hash size = 128 marras 16 18:22:38 localhost.localdomain kernel: NetLabel: protocols = UNLABELED CIPSOv4 marras 16 18:22:38 localhost.localdomain kernel: NetLabel: unlabeled traffic allowed by default marras 16 18:22:38 localhost.localdomain kernel: HPET: 3 timers in total, 0 timers will be used for per-cpu timer marras 16 18:22:38 localhost.localdomain kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 marras 16 18:22:38 localhost.localdomain kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter marras 16 18:22:38 localhost.localdomain kernel: clocksource: Switched to clocksource kvm-clock marras 16 18:22:38 localhost.localdomain kernel: pnp: PnP ACPI init marras 16 18:22:38 localhost.localdomain kernel: pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active) marras 16 18:22:38 localhost.localdomain kernel: pnp 00:01: Plug and Play ACPI device, IDs PNP0303 (active) marras 16 18:22:38 localhost.localdomain kernel: pnp 00:02: Plug and Play ACPI device, IDs PNP0f13 (active) marras 16 18:22:38 localhost.localdomain kernel: pnp 00:03: [dma 2] marras 16 18:22:38 localhost.localdomain kernel: pnp 00:03: Plug and Play ACPI device, IDs PNP0700 (active) marras 16 18:22:38 localhost.localdomain kernel: pnp 00:04: Plug and Play ACPI device, IDs PNP0501 (active) marras 16 18:22:38 localhost.localdomain kernel: pnp: PnP ACPI: found 5 devices marras 16 18:22:38 localhost.localdomain kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns marras 16 18:22:38 localhost.localdomain kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] marras 16 18:22:38 localhost.localdomain kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] marras 16 18:22:38 localhost.localdomain kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] marras 16 18:22:38 localhost.localdomain kernel: pci_bus 0000:00: resource 7 [mem 0x40000000-0xfebfffff window] marras 16 18:22:38 localhost.localdomain kernel: NET: Registered protocol family 2 marras 16 18:22:38 localhost.localdomain kernel: TCP established hash table entries: 8192 (order: 4, 65536 bytes) marras 16 18:22:38 localhost.localdomain kernel: TCP bind hash table entries: 8192 (order: 5, 131072 bytes) marras 16 18:22:38 localhost.localdomain kernel: TCP: Hash tables configured (established 8192 bind 8192) marras 16 18:22:38 localhost.localdomain kernel: UDP hash table entries: 512 (order: 2, 16384 bytes) marras 16 18:22:38 localhost.localdomain kernel: UDP-Lite hash table entries: 512 (order: 2, 16384 bytes) marras 16 18:22:38 localhost.localdomain kernel: NET: Registered protocol family 1 marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release marras 16 18:22:38 localhost.localdomain kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds marras 16 18:22:38 localhost.localdomain kernel: ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11 marras 16 18:22:38 localhost.localdomain kernel: PCI: CLS 0 bytes, default 64 marras 16 18:22:38 localhost.localdomain kernel: Unpacking initramfs... marras 16 18:22:38 localhost.localdomain kernel: Freeing initrd memory: 12280K (ffff8800367f5000 - ffff8800373f3000) marras 16 18:22:38 localhost.localdomain kernel: microcode: CPU0 sig=0x663, pf=0x1, revision=0x1 marras 16 18:22:38 localhost.localdomain kernel: microcode: Microcode Update Driver: v2.00 , Peter Oruba marras 16 18:22:38 localhost.localdomain kernel: futex hash table entries: 256 (order: 2, 16384 bytes) marras 16 18:22:38 localhost.localdomain kernel: Initialise system trusted keyring marras 16 18:22:38 localhost.localdomain kernel: audit: initializing netlink subsys (disabled) marras 16 18:22:38 localhost.localdomain kernel: audit: type=2000 audit(1447690958.353:1): initialized marras 16 18:22:38 localhost.localdomain kernel: HugeTLB registered 2 MB page size, pre-allocated 0 pages marras 16 18:22:38 localhost.localdomain kernel: zpool: loaded marras 16 18:22:38 localhost.localdomain kernel: zbud: loaded marras 16 18:22:38 localhost.localdomain kernel: VFS: Disk quotas dquot_6.6.0 marras 16 18:22:38 localhost.localdomain kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) marras 16 18:22:38 localhost.localdomain kernel: Key type big_key registered marras 16 18:22:38 localhost.localdomain kernel: SELinux: Registering netfilter hooks marras 16 18:22:38 localhost.localdomain kernel: NET: Registered protocol family 38 marras 16 18:22:38 localhost.localdomain kernel: Key type asymmetric registered marras 16 18:22:38 localhost.localdomain kernel: Asymmetric key parser 'x509' registered marras 16 18:22:38 localhost.localdomain kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) marras 16 18:22:38 localhost.localdomain kernel: io scheduler noop registered marras 16 18:22:38 localhost.localdomain kernel: io scheduler deadline registered marras 16 18:22:38 localhost.localdomain kernel: io scheduler cfq registered (default) marras 16 18:22:38 localhost.localdomain kernel: pci_hotplug: PCI Hot Plug PCI Core version: 0.5 marras 16 18:22:38 localhost.localdomain kernel: pciehp: PCI Express Hot Plug Controller Driver version: 0.4 marras 16 18:22:38 localhost.localdomain kernel: intel_idle: does not run on family 6 model 6 marras 16 18:22:38 localhost.localdomain kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 marras 16 18:22:38 localhost.localdomain kernel: ACPI: Power Button [PWRF] marras 16 18:22:38 localhost.localdomain kernel: GHES: HEST is not enabled! marras 16 18:22:38 localhost.localdomain kernel: Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled marras 16 18:22:38 localhost.localdomain kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A marras 16 18:22:38 localhost.localdomain kernel: Non-volatile memory driver v1.3 marras 16 18:22:38 localhost.localdomain kernel: Linux agpgart interface v0.103 marras 16 18:22:38 localhost.localdomain kernel: ata_piix 0000:00:01.1: version 2.13 marras 16 18:22:38 localhost.localdomain kernel: scsi host0: ata_piix marras 16 18:22:38 localhost.localdomain kernel: scsi host1: ata_piix marras 16 18:22:38 localhost.localdomain kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0e0 irq 14 marras 16 18:22:38 localhost.localdomain kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0e8 irq 15 marras 16 18:22:38 localhost.localdomain kernel: libphy: Fixed MDIO Bus: probed marras 16 18:22:38 localhost.localdomain kernel: ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver marras 16 18:22:38 localhost.localdomain kernel: ehci-pci: EHCI PCI platform driver marras 16 18:22:38 localhost.localdomain kernel: ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver marras 16 18:22:38 localhost.localdomain kernel: ohci-pci: OHCI PCI platform driver marras 16 18:22:38 localhost.localdomain kernel: uhci_hcd: USB Universal Host Controller Interface driver marras 16 18:22:38 localhost.localdomain kernel: uhci_hcd 0000:00:01.2: UHCI Host Controller marras 16 18:22:38 localhost.localdomain kernel: uhci_hcd 0000:00:01.2: new USB bus registered, assigned bus number 1 marras 16 18:22:38 localhost.localdomain kernel: uhci_hcd 0000:00:01.2: detected 2 ports marras 16 18:22:38 localhost.localdomain kernel: uhci_hcd 0000:00:01.2: irq 11, io base 0x0000c080 marras 16 18:22:38 localhost.localdomain kernel: usb usb1: New USB device found, idVendor=1d6b, idProduct=0001 marras 16 18:22:38 localhost.localdomain kernel: usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 marras 16 18:22:38 localhost.localdomain kernel: usb usb1: Product: UHCI Host Controller marras 16 18:22:38 localhost.localdomain kernel: usb usb1: Manufacturer: Linux 4.2.6-300.fc23.x86_64 uhci_hcd marras 16 18:22:38 localhost.localdomain kernel: usb usb1: SerialNumber: 0000:00:01.2 marras 16 18:22:38 localhost.localdomain kernel: hub 1-0:1.0: USB hub found marras 16 18:22:38 localhost.localdomain kernel: hub 1-0:1.0: 2 ports detected marras 16 18:22:38 localhost.localdomain kernel: usbcore: registered new interface driver usbserial marras 16 18:22:38 localhost.localdomain kernel: usbcore: registered new interface driver usbserial_generic marras 16 18:22:38 localhost.localdomain kernel: usbserial: USB Serial support registered for generic marras 16 18:22:38 localhost.localdomain kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 marras 16 18:22:38 localhost.localdomain kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 marras 16 18:22:38 localhost.localdomain kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 marras 16 18:22:38 localhost.localdomain kernel: mousedev: PS/2 mouse device common for all mice marras 16 18:22:38 localhost.localdomain kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 marras 16 18:22:38 localhost.localdomain kernel: input: VirtualPS/2 VMware VMMouse as /devices/platform/i8042/serio1/input/input4 marras 16 18:22:38 localhost.localdomain kernel: input: VirtualPS/2 VMware VMMouse as /devices/platform/i8042/serio1/input/input3 marras 16 18:22:38 localhost.localdomain kernel: rtc_cmos 00:00: RTC can wake from S4 marras 16 18:22:38 localhost.localdomain kernel: rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 marras 16 18:22:38 localhost.localdomain kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram, hpet irqs marras 16 18:22:38 localhost.localdomain kernel: device-mapper: uevent: version 1.0.3 marras 16 18:22:38 localhost.localdomain kernel: device-mapper: ioctl: 4.33.0-ioctl (2015-8-18) initialised: dm-devel@redhat.com marras 16 18:22:38 localhost.localdomain kernel: hidraw: raw HID events driver (C) Jiri Kosina marras 16 18:22:38 localhost.localdomain kernel: usbcore: registered new interface driver usbhid marras 16 18:22:38 localhost.localdomain kernel: usbhid: USB HID core driver marras 16 18:22:38 localhost.localdomain kernel: drop_monitor: Initializing network drop monitor service marras 16 18:22:38 localhost.localdomain kernel: ip_tables: (C) 2000-2006 Netfilter Core Team marras 16 18:22:38 localhost.localdomain kernel: Initializing XFRM netlink socket marras 16 18:22:38 localhost.localdomain kernel: NET: Registered protocol family 10 marras 16 18:22:38 localhost.localdomain kernel: mip6: Mobile IPv6 marras 16 18:22:38 localhost.localdomain kernel: NET: Registered protocol family 17 marras 16 18:22:38 localhost.localdomain kernel: Loading compiled-in X.509 certificates marras 16 18:22:38 localhost.localdomain kernel: Loaded X.509 cert 'Fedora kernel signing key: 97072a50821d56aac58708a43d6b78074b858c60' marras 16 18:22:38 localhost.localdomain kernel: registered taskstats version 1 marras 16 18:22:38 localhost.localdomain kernel: zswap: loading zswap marras 16 18:22:38 localhost.localdomain kernel: zswap: using zbud pool marras 16 18:22:38 localhost.localdomain kernel: zswap: using lzo compressor marras 16 18:22:38 localhost.localdomain kernel: Magic number: 7:752:388 marras 16 18:22:38 localhost.localdomain kernel: rtc_cmos 00:00: setting system clock to 2015-11-16 16:22:38 UTC (1447690958) marras 16 18:22:38 localhost.localdomain kernel: PM: Hibernation image not present or could not be loaded. marras 16 18:22:38 localhost.localdomain kernel: ata1.01: ATAPI: QEMU DVD-ROM, 2.3.1, max UDMA/100 marras 16 18:22:38 localhost.localdomain kernel: ata1.01: configured for MWDMA2 marras 16 18:22:38 localhost.localdomain kernel: scsi 0:0:1:0: CD-ROM QEMU QEMU DVD-ROM 2.3. PQ: 0 ANSI: 5 marras 16 18:22:38 localhost.localdomain kernel: sr 0:0:1:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray marras 16 18:22:38 localhost.localdomain kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 marras 16 18:22:38 localhost.localdomain kernel: sr 0:0:1:0: Attached scsi CD-ROM sr0 marras 16 18:22:38 localhost.localdomain kernel: sr 0:0:1:0: Attached scsi generic sg0 type 5 marras 16 18:22:38 localhost.localdomain kernel: Freeing unused kernel memory: 1516K (ffffffff81d3e000 - ffffffff81eb9000) marras 16 18:22:38 localhost.localdomain kernel: Write protecting the kernel read-only data: 12288k marras 16 18:22:38 localhost.localdomain kernel: Freeing unused kernel memory: 508K (ffff880001781000 - ffff880001800000) marras 16 18:22:38 localhost.localdomain kernel: Freeing unused kernel memory: 756K (ffff880001b43000 - ffff880001c00000) marras 16 18:22:38 localhost.localdomain kernel: random: systemd urandom read with 3 bits of entropy available marras 16 18:22:38 localhost.localdomain systemd[1]: systemd 222 running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN) marras 16 18:22:38 localhost.localdomain systemd[1]: Detected virtualization kvm. marras 16 18:22:38 localhost.localdomain systemd[1]: Detected architecture x86-64. marras 16 18:22:38 localhost.localdomain systemd[1]: Running in initial RAM disk. marras 16 18:22:38 localhost.localdomain systemd[1]: Set hostname to . marras 16 18:22:38 localhost.localdomain systemd[1]: Reached target Local File Systems. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Local File Systems. marras 16 18:22:38 localhost.localdomain systemd[1]: Created slice -.slice. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting -.slice. marras 16 18:22:38 localhost.localdomain systemd[1]: Listening on udev Control Socket. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting udev Control Socket. marras 16 18:22:38 localhost.localdomain systemd[1]: Listening on Journal Socket. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Journal Socket. marras 16 18:22:38 localhost.localdomain systemd[1]: Listening on Journal Audit Socket. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Journal Audit Socket. marras 16 18:22:38 localhost.localdomain systemd[1]: Listening on udev Kernel Socket. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting udev Kernel Socket. marras 16 18:22:38 localhost.localdomain systemd[1]: Reached target Swap. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Swap. marras 16 18:22:38 localhost.localdomain systemd[1]: Listening on Journal Socket (/dev/log). marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Journal Socket (/dev/log). marras 16 18:22:38 localhost.localdomain systemd[1]: Reached target Sockets. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Sockets. marras 16 18:22:38 localhost.localdomain systemd[1]: Created slice System Slice. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting System Slice. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Journal Service... marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Create list of required static device nodes for the current kernel... marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Setup Virtual Console... marras 16 18:22:38 localhost.localdomain systemd[1]: Started dracut ask for additional cmdline parameters. marras 16 18:22:38 localhost.localdomain systemd[1]: Started dracut cmdline hook. marras 16 18:22:38 localhost.localdomain systemd[1]: Started dracut pre-udev hook. marras 16 18:22:38 localhost.localdomain systemd[1]: Started Load Kernel Modules. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Apply Kernel Variables... marras 16 18:22:38 localhost.localdomain systemd-journal[120]: Journal started marras 16 18:22:38 localhost.localdomain systemd-vconsole-setup[122]: putfont: PIO_FONT trying ... marras 16 18:22:38 localhost.localdomain systemd[1]: Reached target Slices. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Slices. marras 16 18:22:38 localhost.localdomain systemd[1]: Reached target Timers. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Timers. marras 16 18:22:38 localhost.localdomain systemd[1]: Started Journal Service. marras 16 18:22:38 localhost.localdomain kernel: audit: type=1130 audit(1447690958.697:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain systemd[1]: Started Create list of required static device nodes for the current kernel. marras 16 18:22:38 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain systemd[1]: Started Apply Kernel Variables. marras 16 18:22:38 localhost.localdomain kernel: audit: type=1130 audit(1447690958.699:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain kernel: audit: type=1130 audit(1447690958.701:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Create Static Device Nodes in /dev... marras 16 18:22:38 localhost.localdomain systemd[1]: Started Create Static Device Nodes in /dev. marras 16 18:22:38 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain kernel: audit: type=1130 audit(1447690958.708:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain systemd[1]: Starting udev Kernel Device Manager... marras 16 18:22:38 localhost.localdomain systemd[1]: Started udev Kernel Device Manager. marras 16 18:22:38 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain systemd[1]: Started dracut pre-trigger hook. marras 16 18:22:38 localhost.localdomain kernel: audit: type=1130 audit(1447690958.719:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain systemd[1]: Starting udev Coldplug all Devices... marras 16 18:22:38 localhost.localdomain systemd[1]: Mounting Configuration File System... marras 16 18:22:38 localhost.localdomain systemd[1]: Mounted Configuration File System. marras 16 18:22:38 localhost.localdomain systemd[1]: Started udev Coldplug all Devices. marras 16 18:22:38 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain kernel: audit: type=1130 audit(1447690958.791:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:38 localhost.localdomain systemd[1]: Started dracut initqueue hook. marras 16 18:22:38 localhost.localdomain systemd[1]: Reached target Remote File Systems (Pre). marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Remote File Systems (Pre). marras 16 18:22:38 localhost.localdomain systemd[1]: Reached target Remote File Systems. marras 16 18:22:38 localhost.localdomain systemd[1]: Starting Remote File Systems. marras 16 18:22:38 localhost.localdomain systemd[1]: Started dracut pre-mount hook. marras 16 18:22:38 localhost.localdomain kernel: ACPI: PCI Interrupt Link [LNKB] enabled at IRQ 10 marras 16 18:22:38 localhost.localdomain kernel: virtio-pci 0000:00:02.0: virtio_pci: leaving for legacy driver marras 16 18:22:38 localhost.localdomain kernel: ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 11 marras 16 18:22:38 localhost.localdomain kernel: virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver marras 16 18:22:39 localhost.localdomain kernel: virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver marras 16 18:22:39 localhost.localdomain kernel: ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 10 marras 16 18:22:39 localhost.localdomain kernel: virtio-pci 0000:00:05.0: virtio_pci: leaving for legacy driver marras 16 18:22:39 localhost.localdomain kernel: scsi host2: Virtio SCSI HBA marras 16 18:22:39 localhost.localdomain kernel: vda: vda1 vda2 vda3 marras 16 18:22:39 localhost.localdomain systemd[1]: Found device /dev/disk/by-uuid/f5c71ab4-36e7-4712-b9a4-d9c5cc22c6ef. marras 16 18:22:39 localhost.localdomain systemd[1]: Starting File System Check on /dev/disk/by-uuid/f5c71ab4-36e7-4712-b9a4-d9c5cc22c6ef... marras 16 18:22:39 localhost.localdomain systemd-fsck[188]: /usr/sbin/fsck.xfs: XFS file system. marras 16 18:22:39 localhost.localdomain systemd[1]: Started File System Check on /dev/disk/by-uuid/f5c71ab4-36e7-4712-b9a4-d9c5cc22c6ef. marras 16 18:22:39 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:39 localhost.localdomain kernel: audit: type=1130 audit(1447690959.084:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:39 localhost.localdomain systemd[1]: Mounting /sysroot... marras 16 18:22:39 localhost.localdomain kernel: SGI XFS with ACLs, security attributes, no debug enabled marras 16 18:22:39 localhost.localdomain kernel: XFS (vda3): Mounting V5 Filesystem marras 16 18:22:39 localhost.localdomain kernel: XFS (vda3): Ending clean mount marras 16 18:22:39 localhost.localdomain systemd[1]: Mounted /sysroot. marras 16 18:22:39 localhost.localdomain systemd[1]: Reached target Initrd Root File System. marras 16 18:22:39 localhost.localdomain systemd[1]: Starting Initrd Root File System. marras 16 18:22:39 localhost.localdomain systemd[1]: Starting Reload Configuration from the Real Root... marras 16 18:22:39 localhost.localdomain systemd[1]: Reloading. marras 16 18:22:39 localhost.localdomain systemd[1]: Started Reload Configuration from the Real Root. marras 16 18:22:39 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:39 localhost.localdomain kernel: audit: type=1130 audit(1447690959.349:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:39 localhost.localdomain kernel: audit: type=1131 audit(1447690959.351:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:39 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:39 localhost.localdomain systemd[1]: Reached target Initrd File Systems. marras 16 18:22:39 localhost.localdomain systemd[1]: Starting Initrd File Systems. marras 16 18:22:39 localhost.localdomain kernel: tsc: Refined TSC clocksource calibration: 2593.985 MHz marras 16 18:22:39 localhost.localdomain kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x256409f89d4, max_idle_ns: 440795226961 ns marras 16 18:22:43 localhost.localdomain systemd-vconsole-setup[122]: ................... marras 16 18:22:43 localhost.localdomain systemd-vconsole-setup[122]: setfont: putfont: 512,8x16: failed: -1 marras 16 18:22:43 localhost.localdomain systemd-vconsole-setup[122]: putfont: PIO_FONT: Invalid argument marras 16 18:22:43 localhost.localdomain systemd-vconsole-setup[122]: /usr/bin/setfont failed with error code 71. marras 16 18:22:43 localhost.localdomain systemd[1]: systemd-vconsole-setup.service: Main process exited, code=exited, status=1/FAILURE marras 16 18:22:43 localhost.localdomain systemd[1]: Failed to start Setup Virtual Console. marras 16 18:22:43 localhost.localdomain systemd[1]: systemd-vconsole-setup.service: Unit entered failed state. marras 16 18:22:43 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' marras 16 18:22:43 localhost.localdomain kernel: audit: type=1130 audit(1447690963.800:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' marras 16 18:22:43 localhost.localdomain systemd[1]: systemd-vconsole-setup.service: Failed with result 'exit-code'. marras 16 18:22:43 localhost.localdomain systemd[1]: Starting Show Plymouth Boot Screen... marras 16 18:22:43 localhost.localdomain systemd[1]: Reached target System Initialization. marras 16 18:22:43 localhost.localdomain systemd[1]: Starting System Initialization. marras 16 18:22:43 localhost.localdomain systemd-vconsole-setup[183]: /usr/bin/setfont failed with error code 71. marras 16 18:22:44 localhost.localdomain systemd-udevd[172]: Process '/usr/lib/systemd/systemd-vconsole-setup' failed with exit code 1. marras 16 18:22:44 localhost.localdomain systemd[1]: Received SIGRTMIN+20 from PID 246 (plymouthd). marras 16 18:22:44 localhost.localdomain systemd[1]: Started Show Plymouth Boot Screen. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=plymouth-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain kernel: audit: type=1130 audit(1447690964.150:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=plymouth-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Started Dispatch Password Requests to Console Directory Watch. marras 16 18:22:44 localhost.localdomain systemd[1]: Reached target Paths. marras 16 18:22:44 localhost.localdomain systemd[1]: Starting Paths. marras 16 18:22:44 localhost.localdomain systemd[1]: Started Forward Password Requests to Plymouth Directory Watch. marras 16 18:22:44 localhost.localdomain systemd[1]: Starting Forward Password Requests to Plymouth Directory Watch. marras 16 18:22:44 localhost.localdomain systemd[1]: Reached target Basic System. marras 16 18:22:44 localhost.localdomain systemd[1]: Starting Basic System. marras 16 18:22:44 localhost.localdomain systemd[1]: Started dracut mount hook. marras 16 18:22:44 localhost.localdomain systemd[1]: Reached target Initrd Default Target. marras 16 18:22:44 localhost.localdomain systemd[1]: Starting Initrd Default Target. marras 16 18:22:44 localhost.localdomain systemd[1]: Started dracut pre-pivot and cleanup hook. marras 16 18:22:44 localhost.localdomain systemd[1]: Starting Cleaning Up and Shutting Down Daemons... marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped Cleaning Up and Shutting Down Daemons. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain kernel: audit: type=1130 audit(1447690964.188:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain kernel: audit: type=1131 audit(1447690964.191:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Starting Plymouth switch root service... marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target Timers. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Timers. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target Initrd Default Target. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Initrd Default Target. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target Basic System. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Basic System. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target System Initialization. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping System Initialization. marras 16 18:22:44 localhost.localdomain systemd[1]: Starting Setup Virtual Console... marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target Swap. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Swap. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped Apply Kernel Variables. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain kernel: audit: type=1130 audit(1447690964.244:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain kernel: audit: type=1131 audit(1447690964.275:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd-vconsole-setup[259]: putfont: PIO_FONT trying ... marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Apply Kernel Variables... marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target Local File Systems. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Local File Systems. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped udev Coldplug all Devices. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain kernel: audit: type=1130 audit(1447690964.284:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain kernel: audit: type=1131 audit(1447690964.287:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping udev Coldplug all Devices... marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping udev Kernel Device Manager... marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target Paths. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Paths. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target Remote File Systems. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Remote File Systems. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target Remote File Systems (Pre). marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Remote File Systems (Pre). marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target Sockets. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Sockets. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped target Slices. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Slices. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped udev Kernel Device Manager. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain kernel: audit: type=1130 audit(1447690964.309:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain kernel: audit: type=1131 audit(1447690964.316:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Started Plymouth switch root service. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=plymouth-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=plymouth-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped Create Static Device Nodes in /dev. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Create Static Device Nodes in /dev... marras 16 18:22:44 localhost.localdomain systemd[1]: Stopped Create list of required static device nodes for the current kernel. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping Create list of required static device nodes for the current kernel... marras 16 18:22:44 localhost.localdomain systemd[1]: Closed udev Kernel Socket. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping udev Kernel Socket. marras 16 18:22:44 localhost.localdomain systemd[1]: Closed udev Control Socket. marras 16 18:22:44 localhost.localdomain systemd[1]: Stopping udev Control Socket. marras 16 18:22:44 localhost.localdomain systemd[1]: Starting Cleanup udevd DB... marras 16 18:22:44 localhost.localdomain systemd[1]: Started Cleanup udevd DB. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Reached target Switch Root. marras 16 18:22:44 localhost.localdomain systemd[1]: Starting Switch Root. marras 16 18:22:44 localhost.localdomain systemd[1]: Starting Switch Root... marras 16 18:22:44 localhost.localdomain systemd[1]: Switching root. marras 16 18:22:44 localhost.localdomain systemd-journal[120]: Journal stopped marras 16 18:22:44 localhost.localdomain systemd-journal[283]: Runtime journal is using 6.2M (max allowed 49.6M, trying to leave 74.5M free of 490.4M available → current limit 49.6M). marras 16 18:22:44 localhost.localdomain systemd-journal[283]: Runtime journal is using 6.2M (max allowed 49.6M, trying to leave 74.5M free of 490.4M available → current limit 49.6M). marras 16 18:22:44 localhost.localdomain systemd-journald[120]: Received SIGTERM from PID 1 (systemd). marras 16 18:22:44 localhost.localdomain kernel: SELinux: 32768 avtab hash slots, 103869 rules. marras 16 18:22:44 localhost.localdomain kernel: SELinux: 32768 avtab hash slots, 103869 rules. marras 16 18:22:44 localhost.localdomain kernel: SELinux: 8 users, 14 roles, 4915 types, 308 bools, 1 sens, 1024 cats marras 16 18:22:44 localhost.localdomain kernel: SELinux: 92 classes, 103869 rules marras 16 18:22:44 localhost.localdomain kernel: SELinux: Completing initialization. marras 16 18:22:44 localhost.localdomain kernel: SELinux: Setting up existing superblocks. marras 16 18:22:44 localhost.localdomain systemd[1]: Successfully loaded SELinux policy in 190.939ms. marras 16 18:22:44 localhost.localdomain systemd[1]: Relabelled /dev and /run in 31.012ms. marras 16 18:22:44 localhost.localdomain systemd-journal[283]: Journal started marras 16 18:22:44 localhost.localdomain systemd[1]: systemd 222 running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN) marras 16 18:22:44 localhost.localdomain audit: MAC_STATUS enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 marras 16 18:22:44 localhost.localdomain systemd[1]: Detected virtualization kvm. marras 16 18:22:44 localhost.localdomain audit: MAC_POLICY_LOAD policy loaded auid=4294967295 ses=4294967295 marras 16 18:22:44 localhost.localdomain systemd[1]: Detected architecture x86-64. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Set hostname to . marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceeding anyway. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain audit: CONFIG_CHANGE audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:syslogd_t:s0 res=1 marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Started Remount Root and Kernel File Systems. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Started Apply Kernel Variables. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:44 localhost.localdomain systemd[1]: Started Create list of required static device nodes for the current kernel. marras 16 18:22:44 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Started LVM2 metadata daemon. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm2-lvmetad comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Starting LVM2 metadata daemon... marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Configure read-only root support... marras 16 18:22:45 localhost.localdomain systemd[1]: Started First Boot Wizard. marras 16 18:22:45 localhost.localdomain systemd[1]: Started Create System Users. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Create Static Device Nodes in /dev... marras 16 18:22:45 localhost.localdomain systemd[1]: Started Rebuild Hardware Database. marras 16 18:22:45 localhost.localdomain kernel: RPC: Registered named UNIX socket transport module. marras 16 18:22:45 localhost.localdomain kernel: RPC: Registered udp transport module. marras 16 18:22:45 localhost.localdomain kernel: RPC: Registered tcp transport module. marras 16 18:22:45 localhost.localdomain kernel: RPC: Registered tcp NFSv4.1 backchannel transport module. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting udev Coldplug all Devices... marras 16 18:22:45 localhost.localdomain systemd[1]: Started Rebuild Dynamic Linker Cache. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Flush Journal to Persistent Storage... marras 16 18:22:45 localhost.localdomain systemd-journal[283]: Permanent journal is using 8.0M (max allowed 706.4M, trying to leave 1.0G free of 2.0G available → current limit 706.4M). marras 16 18:22:45 localhost.localdomain systemd-journal[283]: Time spent on flushing to /var is 80.215ms for 664 entries. marras 16 18:22:45 localhost.localdomain systemd[1]: Started Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm2-monitor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Started Create Static Device Nodes in /dev. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Starting udev Kernel Device Manager... marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fedora-readonly comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Reached target Local File Systems (Pre). marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Local File Systems (Pre). marras 16 18:22:45 localhost.localdomain systemd[1]: Mounted Virtual Machine and Container Storage. marras 16 18:22:45 localhost.localdomain systemd[1]: Started Configure read-only root support. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Load/Save Random Seed... marras 16 18:22:45 localhost.localdomain systemd[1]: Started Flush Journal to Persistent Storage. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Started Load/Save Random Seed. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Started udev Kernel Device Manager. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain kernel: Installing knfsd (copyright (C) 1996 okir@monad.swb.de). marras 16 18:22:45 localhost.localdomain systemd[1]: Mounted NFSD configuration filesystem. marras 16 18:22:45 localhost.localdomain systemd[1]: Started udev Coldplug all Devices. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 marras 16 18:22:45 localhost.localdomain systemd[1]: Found device /dev/disk/by-uuid/618b7fb2-8737-4b1c-8c3f-c856b4029f32. marras 16 18:22:45 localhost.localdomain systemd[1]: Activating swap /dev/disk/by-uuid/618b7fb2-8737-4b1c-8c3f-c856b4029f32... marras 16 18:22:45 localhost.localdomain systemd[1]: Found device /dev/disk/by-uuid/661f4318-eb8d-4f68-a569-0b2ee58a674e. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting File System Check on /dev/disk/by-uuid/661f4318-eb8d-4f68-a569-0b2ee58a674e... marras 16 18:22:45 localhost.localdomain kernel: Adding 629756k swap on /dev/vda2. Priority:-1 extents:1 across:629756k FS marras 16 18:22:45 localhost.localdomain systemd[1]: Activated swap /dev/disk/by-uuid/618b7fb2-8737-4b1c-8c3f-c856b4029f32. marras 16 18:22:45 localhost.localdomain systemd[1]: Reached target Swap. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Swap. marras 16 18:22:45 localhost.localdomain systemd-fsck[379]: /dev/vda1: clean, 349/128016 files, 158311/512000 blocks marras 16 18:22:45 localhost.localdomain systemd[1]: Started File System Check on /dev/disk/by-uuid/661f4318-eb8d-4f68-a569-0b2ee58a674e. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2duuid-661f4318\x2deb8d\x2d4f68\x2da569\x2d0b2ee58a674e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Mounting /boot... marras 16 18:22:45 localhost.localdomain kernel: EXT4-fs (vda1): mounted filesystem with ordered data mode. Opts: (null) marras 16 18:22:45 localhost.localdomain systemd[1]: Mounted /boot. marras 16 18:22:45 localhost.localdomain systemd[1]: Reached target Local File Systems. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Local File Systems. marras 16 18:22:45 localhost.localdomain systemd[1]: Started Import network configuration from initramfs. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Create Volatile Files and Directories... marras 16 18:22:45 localhost.localdomain systemd[1]: Started Rebuild Journal Catalog. marras 16 18:22:45 localhost.localdomain systemd[1]: Started Mark the need to relabel after reboot. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Tell Plymouth To Write Out Runtime Data... marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Preprocess NFS configuration... marras 16 18:22:45 localhost.localdomain systemd[1]: Started Commit a transient machine-id on disk. marras 16 18:22:45 localhost.localdomain systemd[1]: Started Relabel all filesystems, if necessary. marras 16 18:22:45 localhost.localdomain systemd[1]: Started Update is Completed. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Restore /run/initramfs on shutdown... marras 16 18:22:45 localhost.localdomain systemd[1]: Started Tell Plymouth To Write Out Runtime Data. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=plymouth-read-write comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=plymouth-read-write comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Started Restore /run/initramfs on shutdown. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Started Preprocess NFS configuration. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nfs-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Found device /dev/ttyS0. marras 16 18:22:45 localhost.localdomain systemd-tmpfiles[390]: Cannot set file attribute for '/var/log/journal', value=0x00800000, mask=0x00800000: Operation not supported marras 16 18:22:45 localhost.localdomain systemd-tmpfiles[390]: Cannot set file attribute for '/var/log/journal/211fa30bd148644ea0741ca1d3afc152', value=0x00800000, mask=0x00800000: Operation not supported marras 16 18:22:45 localhost.localdomain systemd[1]: Started Create Volatile Files and Directories. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Mounting RPC Pipe File System... marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Update UTMP about System Boot/Shutdown... marras 16 18:22:45 localhost.localdomain audit[410]: SYSTEM_BOOT pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Mounted RPC Pipe File System. marras 16 18:22:45 localhost.localdomain systemd[1]: Started Update UTMP about System Boot/Shutdown. marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:45 localhost.localdomain systemd[1]: Reached target System Initialization. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting System Initialization. marras 16 18:22:45 localhost.localdomain systemd[1]: Started Daily Cleanup of Temporary Directories. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Daily Cleanup of Temporary Directories. marras 16 18:22:45 localhost.localdomain systemd[1]: Listening on OpenSSH Server Socket. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting OpenSSH Server Socket. marras 16 18:22:45 localhost.localdomain systemd[1]: Listening on Open-iSCSI iscsid Socket. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Open-iSCSI iscsid Socket. marras 16 18:22:45 localhost.localdomain systemd[1]: Listening on RPCbind Server Activation Socket. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting RPCbind Server Activation Socket. marras 16 18:22:45 localhost.localdomain systemd[1]: Started dnf makecache timer. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting dnf makecache timer. marras 16 18:22:45 localhost.localdomain systemd[1]: Reached target Timers. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Timers. marras 16 18:22:45 localhost.localdomain systemd[1]: Listening on Open-iSCSI iscsiuio Socket. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Open-iSCSI iscsiuio Socket. marras 16 18:22:45 localhost.localdomain systemd[1]: Listening on D-Bus System Message Bus Socket. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting D-Bus System Message Bus Socket. marras 16 18:22:45 localhost.localdomain systemd[1]: Reached target Sockets. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Sockets. marras 16 18:22:45 localhost.localdomain systemd[1]: Reached target Basic System. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Basic System. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting firewalld - dynamic firewall daemon... marras 16 18:22:45 localhost.localdomain systemd[1]: Started Software RAID monitoring and management. marras 16 18:22:45 localhost.localdomain systemd[1]: Starting Login Service... marras 16 18:22:45 localhost.localdomain systemd[1]: Starting GSSAPI Proxy Daemon... marras 16 18:22:45 localhost.localdomain systemd[1]: Started D-Bus System Message Bus. marras 16 18:22:45 localhost.localdomain kernel: random: nonblocking pool is initialized marras 16 18:22:45 localhost.localdomain systemd[1]: Starting D-Bus System Message Bus... marras 16 18:22:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain systemd[1]: Started GSSAPI Proxy Daemon. marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain systemd[1]: Started RPC security service for NFS client and server. marras 16 18:22:46 localhost.localdomain systemd-logind[415]: Watching system buttons on /dev/input/event0 (Power Button) marras 16 18:22:46 localhost.localdomain systemd-logind[415]: New seat seat0. marras 16 18:22:46 localhost.localdomain systemd[1]: Started RPC security service for NFS server. marras 16 18:22:46 localhost.localdomain systemd[1]: Reached target NFS client services. marras 16 18:22:46 localhost.localdomain systemd[1]: Starting NFS client services. marras 16 18:22:46 localhost.localdomain systemd[1]: Started Login Service. marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain kernel: ppdev: user-space parallel port driver marras 16 18:22:46 localhost.localdomain kernel: virtio_net virtio0 ens2: renamed from eth0 marras 16 18:22:46 localhost.localdomain kernel: nf_conntrack version 0.5.0 (7946 buckets, 31784 max) marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=0 marras 16 18:22:46 localhost.localdomain audit[448]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55af0f21c140 a1=1d4f a2=55af0e365d2c a3=0 items=0 ppid=447 pid=448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174 marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=0 marras 16 18:22:46 localhost.localdomain audit[453]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=56536b39b4b0 a1=1a37 a2=565369cc9d2c a3=0 items=0 ppid=452 pid=453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65 marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=raw family=2 entries=0 marras 16 18:22:46 localhost.localdomain audit[457]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=562e209e84b0 a1=1817 a2=562e1f821d2c a3=0 items=0 ppid=456 pid=457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F726177 marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=0 marras 16 18:22:46 localhost.localdomain audit[460]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5609f875c4a0 a1=191f a2=5609f78a1d2c a3=0 items=0 ppid=459 pid=460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F7365637572697479 marras 16 18:22:46 localhost.localdomain kernel: ip6_tables: (C) 2000-2006 Netfilter Core Team marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=0 marras 16 18:22:46 localhost.localdomain audit[464]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=556cc1aa4630 a1=1b4f a2=556cc1869d2c a3=0 items=0 ppid=463 pid=464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F66696C746572 marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=0 marras 16 18:22:46 localhost.localdomain audit[468]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55a8b784e3a0 a1=1d47 a2=55a8b6b6cd2c a3=0 items=0 ppid=467 pid=468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6E6174 marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=0 marras 16 18:22:46 localhost.localdomain audit[473]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5582ed761630 a1=1ab7 a2=5582ec4a0d2c a3=0 items=0 ppid=472 pid=473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6D616E676C65 marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=0 marras 16 18:22:46 localhost.localdomain audit[477]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=559fbb019630 a1=1827 a2=559fba5f1d2c a3=0 items=0 ppid=476 pid=477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F726177 marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=0 marras 16 18:22:46 localhost.localdomain audit[480]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55a7cc33b630 a1=18ef a2=55a7cbe45d2c a3=0 items=0 ppid=479 pid=480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F7365637572697479 marras 16 18:22:46 localhost.localdomain kernel: Ebtables v2.0 registered marras 16 18:22:46 localhost.localdomain kernel: bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. marras 16 18:22:46 localhost.localdomain systemd[1]: Started firewalld - dynamic firewall daemon. marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=firewalld comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Network Manager... marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=4 marras 16 18:22:46 localhost.localdomain audit[496]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557e58c73600 items=0 ppid=414 pid=496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D46 marras 16 18:22:46 localhost.localdomain NetworkManager[491]: NetworkManager (version 1.0.6-8.fc23) is starting... marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Read config: /etc/NetworkManager/NetworkManager.conf and conf.d: 10-ibft-plugin.conf marras 16 18:22:46 localhost.localdomain systemd[1]: Started Network Manager. marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain systemd[1]: Reached target Network. marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Network. marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Notify NFS peers of a restart... marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Enable periodic update of entitlement certificates.... marras 16 18:22:46 localhost.localdomain sm-notify[500]: Version 1.3.3 starting marras 16 18:22:46 localhost.localdomain systemd[1]: Started Logout off all iSCSI sessions on shutdown. marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=iscsi-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Logout off all iSCSI sessions on shutdown... marras 16 18:22:46 localhost.localdomain systemd[1]: Started Login and scanning of iSCSI devices. marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Availability of block devices... marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=4 marras 16 18:22:46 localhost.localdomain audit[499]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a00ea73600 items=0 ppid=414 pid=499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain systemd[1]: Reached target Remote File Systems (Pre). marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D5A marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Remote File Systems (Pre). marras 16 18:22:46 localhost.localdomain systemd[1]: Reached target Remote File Systems. marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Remote File Systems. marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Permit User Sessions... marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=raw family=2 entries=3 marras 16 18:22:46 localhost.localdomain audit[505]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55af101bb4d0 items=0 ppid=414 pid=505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D7400726177002D46 marras 16 18:22:46 localhost.localdomain systemd[1]: Started Notify NFS peers of a restart. marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded settings plugin ifcfg-rh: (c) 2007 - 2015 Red Hat, Inc. To report bugs please use the NetworkManager mailing list. (/usr/lib64/NetworkManager/libnm-settings-plugin-ifcfg-rh.so) marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded settings plugin iBFT: (c) 2014 Red Hat, Inc. To report bugs please use the NetworkManager mailing list. (/usr/lib64/NetworkManager/libnm-settings-plugin-ibft.so) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded settings plugin keyfile: (c) 2007 - 2015 Red Hat, Inc. To report bugs please use the NetworkManager mailing list. marras 16 18:22:46 localhost.localdomain systemd[1]: Started Enable periodic update of entitlement certificates.. marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsmcertd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain NetworkManager[491]: ifcfg-rh: new connection /etc/sysconfig/network-scripts/ifcfg-eth0 (5fb06bd0-0bb0-7ffb-45f1-d6edd65f3e03,"System eth0") marras 16 18:22:46 localhost.localdomain systemd[1]: Started Availability of block devices. marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=blk-availability comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain systemd[1]: Started Permit User Sessions. marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain NetworkManager[491]: ifcfg-rh: new connection /etc/sysconfig/network-scripts/ifcfg-ens2 (c215f8cd-418c-4780-8f6a-2f2d9bfb2c16,"ens2") marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=raw family=2 entries=3 marras 16 18:22:46 localhost.localdomain audit[512]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560a032d14d0 items=0 ppid=414 pid=512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D7400726177002D5A marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=6 marras 16 18:22:46 localhost.localdomain audit[514]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561103110850 items=0 ppid=414 pid=514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D46 marras 16 18:22:46 localhost.localdomain NetworkManager[491]: monitoring kernel firmware directory '/lib/firmware'. marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Terminate Plymouth Boot Screen... marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Wait for Plymouth Boot Screen to Quit... marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded device plugin: NMVxlanFactory (internal) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded device plugin: NMVlanFactory (internal) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded device plugin: NMVethFactory (internal) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded device plugin: NMTunFactory (internal) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded device plugin: NMMacvlanFactory (internal) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded device plugin: NMInfinibandFactory (internal) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded device plugin: NMGreFactory (internal) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded device plugin: NMEthernetFactory (internal) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded device plugin: NMBridgeFactory (internal) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Loaded device plugin: NMBondFactory (internal) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: WiFi enabled by radio killswitch; enabled by state file marras 16 18:22:46 localhost.localdomain NetworkManager[491]: WWAN enabled by radio killswitch; enabled by state file marras 16 18:22:46 localhost.localdomain NetworkManager[491]: WiMAX enabled by radio killswitch; enabled by state file marras 16 18:22:46 localhost.localdomain NetworkManager[491]: Networking is enabled by state file marras 16 18:22:46 localhost.localdomain NetworkManager[491]: (ens2): new Ethernet device (carrier: OFF, driver: 'virtio_net', ifindex: 2) marras 16 18:22:46 localhost.localdomain NetworkManager[491]: (ens2): device state change: unmanaged -> unavailable (reason 'managed') [10 20 2] marras 16 18:22:46 localhost.localdomain systemd[1]: Started Command Scheduler. marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=6 marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain kernel: IPv6: ADDRCONF(NETDEV_UP): ens2: link is not ready marras 16 18:22:46 localhost.localdomain systemd[1]: Starting Command Scheduler... marras 16 18:22:46 localhost.localdomain audit[518]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557bb2f5a850 items=0 ppid=414 pid=518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D5A marras 16 18:22:46 localhost.localdomain NetworkManager[491]: (ens2): link connected marras 16 18:22:46 localhost.localdomain crond[519]: (CRON) INFO (Syslog will be used instead of sendmail.) marras 16 18:22:46 localhost.localdomain crond[519]: (CRON) INFO (RANDOM_DELAY will be scaled with factor 73% if used.) marras 16 18:22:46 localhost.localdomain systemd[1]: Received SIGRTMIN+21 from PID 246 (plymouthd). marras 16 18:22:46 localhost.localdomain NetworkManager[491]: (lo): link connected marras 16 18:22:46 localhost.localdomain NetworkManager[491]: (lo): new Generic device (carrier: ON, driver: 'unknown', ifindex: 1) marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=plymouth-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=plymouth-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain systemd[1]: Started Terminate Plymouth Boot Screen. marras 16 18:22:46 localhost.localdomain dbus[417]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' marras 16 18:22:46 localhost.localdomain systemd[1]: Started Wait for Plymouth Boot Screen to Quit. marras 16 18:22:46 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=5 marras 16 18:22:46 localhost.localdomain audit[523]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559b445bc720 items=0 ppid=414 pid=523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:46 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D46 marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=plymouth-quit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=plymouth-quit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=plymouth-quit-wait comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=plymouth-quit-wait comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:46 localhost.localdomain NetworkManager[491]: wpa_supplicant stopped marras 16 18:22:46 localhost.localdomain NetworkManager[491]: (ens2): device state change: unavailable -> disconnected (reason 'none') [20 30 0] marras 16 18:22:47 localhost.localdomain NetworkManager[491]: Auto-activating connection 'ens2'. marras 16 18:22:47 localhost.localdomain NetworkManager[491]: (ens2): Activation: starting connection 'ens2' (c215f8cd-418c-4780-8f6a-2f2d9bfb2c16) marras 16 18:22:47 localhost.localdomain NetworkManager[491]: (ens2): device state change: disconnected -> prepare (reason 'none') [30 40 0] marras 16 18:22:47 localhost.localdomain NetworkManager[491]: NetworkManager state is now CONNECTING marras 16 18:22:47 localhost.localdomain NetworkManager[491]: (ens2): device state change: prepare -> config (reason 'none') [40 50 0] marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=5 marras 16 18:22:47 localhost.localdomain audit[525]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56431a430720 items=0 ppid=414 pid=525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D5A marras 16 18:22:47 localhost.localdomain systemd[1]: Starting Authorization Manager... marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=4 marras 16 18:22:47 localhost.localdomain audit[526]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55565c254600 items=0 ppid=414 pid=526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D46 marras 16 18:22:47 localhost.localdomain systemd[1]: Started Getty on tty1. marras 16 18:22:47 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:47 localhost.localdomain systemd[1]: Starting Getty on tty1... marras 16 18:22:47 localhost.localdomain systemd[1]: Started Serial Getty on ttyS0. marras 16 18:22:47 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:47 localhost.localdomain systemd[1]: Starting Serial Getty on ttyS0... marras 16 18:22:47 localhost.localdomain systemd[1]: Reached target Login Prompts. marras 16 18:22:47 localhost.localdomain systemd[1]: Starting Login Prompts. marras 16 18:22:47 localhost.localdomain systemd[1]: Reached target Multi-User System. marras 16 18:22:47 localhost.localdomain systemd[1]: Starting Multi-User System. marras 16 18:22:47 localhost.localdomain systemd[1]: Starting Update UTMP about System Runlevel Changes... marras 16 18:22:47 localhost.localdomain audit[531]: SYSTEM_RUNLEVEL pid=531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=4 marras 16 18:22:47 localhost.localdomain systemd[1]: Started Update UTMP about System Runlevel Changes. marras 16 18:22:47 localhost.localdomain audit[532]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558d3d053600 items=0 ppid=414 pid=532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D5A marras 16 18:22:47 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:47 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:47 localhost.localdomain polkitd[527]: Started polkitd version 0.113 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=4 marras 16 18:22:47 localhost.localdomain audit[534]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a9e4d5f720 items=0 ppid=414 pid=534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D46 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=4 marras 16 18:22:47 localhost.localdomain polkitd[527]: Loading rules from directory /etc/polkit-1/rules.d marras 16 18:22:47 localhost.localdomain polkitd[527]: Loading rules from directory /usr/share/polkit-1/rules.d marras 16 18:22:47 localhost.localdomain audit[540]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ad0d94f720 items=0 ppid=414 pid=540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D5A marras 16 18:22:47 localhost.localdomain polkitd[527]: Finished loading, compiling and executing 3 rules marras 16 18:22:47 localhost.localdomain dbus[417]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' marras 16 18:22:47 localhost.localdomain systemd[1]: Started Authorization Manager. marras 16 18:22:47 localhost.localdomain systemd[1]: Startup finished in 583ms (kernel) + 5.827s (initrd) + 2.665s (userspace) = 9.075s. marras 16 18:22:47 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:47 localhost.localdomain polkitd[527]: Acquired the name org.freedesktop.PolicyKit1 on the system bus marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=3 marras 16 18:22:47 localhost.localdomain audit[542]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563e951905c0 items=0 ppid=414 pid=542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D7400726177002D46 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=3 marras 16 18:22:47 localhost.localdomain audit[547]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556299cef5c0 items=0 ppid=414 pid=547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D7400726177002D5A marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=6 marras 16 18:22:47 localhost.localdomain audit[548]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5642280159e0 items=0 ppid=414 pid=548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D46 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=6 marras 16 18:22:47 localhost.localdomain audit[550]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ecb85659e0 items=0 ppid=414 pid=550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D5A marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=5 marras 16 18:22:47 localhost.localdomain audit[551]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=562e02fe4880 items=0 ppid=414 pid=551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D46 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=5 marras 16 18:22:47 localhost.localdomain audit[553]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55eb8f9d4880 items=0 ppid=414 pid=553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D5A marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=4 marras 16 18:22:47 localhost.localdomain audit[554]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563d5b257720 items=0 ppid=414 pid=554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D46 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=4 marras 16 18:22:47 localhost.localdomain audit[556]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56391b5b7720 items=0 ppid=414 pid=556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D5A marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=broute family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[557]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=56301ef5e920 items=0 ppid=414 pid=557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740062726F757465002D46 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=broute family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[558]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=5560f510b920 items=0 ppid=414 pid=558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740062726F757465002D58 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=broute family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[559]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=560aec31d920 items=0 ppid=414 pid=559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740062726F757465002D5A marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[560]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55ff1bb43740 items=0 ppid=414 pid=560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D46 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[561]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=56187508a740 items=0 ppid=414 pid=561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D58 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[562]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=561f7b3a7740 items=0 ppid=414 pid=562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D5A marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[563]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=565282c73740 items=0 ppid=414 pid=563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D46 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[564]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=5644dd884740 items=0 ppid=414 pid=564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D58 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[565]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55b5c587a740 items=0 ppid=414 pid=565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D5A marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=4 marras 16 18:22:47 localhost.localdomain audit[566]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55fa8d6a8600 items=0 ppid=414 pid=566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D5000494E50555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=4 marras 16 18:22:47 localhost.localdomain audit[567]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56290c2c1600 items=0 ppid=414 pid=567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D50004F555450555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=4 marras 16 18:22:47 localhost.localdomain audit[568]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555fe1fe7600 items=0 ppid=414 pid=568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D5000464F525741524400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=raw family=2 entries=3 marras 16 18:22:47 localhost.localdomain audit[569]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559af595b4d0 items=0 ppid=414 pid=569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D7400726177002D5000505245524F5554494E4700414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=raw family=2 entries=3 marras 16 18:22:47 localhost.localdomain audit[570]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564e9cc074d0 items=0 ppid=414 pid=570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D7400726177002D50004F555450555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=6 marras 16 18:22:47 localhost.localdomain audit[571]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5573360e4850 items=0 ppid=414 pid=571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D5000505245524F5554494E4700414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=6 marras 16 18:22:47 localhost.localdomain audit[572]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5598b02e4850 items=0 ppid=414 pid=572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D5000504F5354524F5554494E4700414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=6 marras 16 18:22:47 localhost.localdomain audit[573]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55908b824850 items=0 ppid=414 pid=573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D5000494E50555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=6 marras 16 18:22:47 localhost.localdomain audit[574]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562035475850 items=0 ppid=414 pid=574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D50004F555450555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=6 marras 16 18:22:47 localhost.localdomain audit[575]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5611c8c2b850 items=0 ppid=414 pid=575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D5000464F525741524400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=4 marras 16 18:22:47 localhost.localdomain audit[576]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561b40b0c600 items=0 ppid=414 pid=576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D5000494E50555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=4 marras 16 18:22:47 localhost.localdomain audit[577]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557f62917600 items=0 ppid=414 pid=577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D50004F555450555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=4 marras 16 18:22:47 localhost.localdomain audit[578]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556c5f769600 items=0 ppid=414 pid=578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D5000464F525741524400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=4 marras 16 18:22:47 localhost.localdomain audit[579]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55bb3a064720 items=0 ppid=414 pid=579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D5000494E50555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=4 marras 16 18:22:47 localhost.localdomain audit[580]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5642b754a720 items=0 ppid=414 pid=580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D50004F555450555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=4 marras 16 18:22:47 localhost.localdomain audit[581]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c96acf5720 items=0 ppid=414 pid=581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D5000464F525741524400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=3 marras 16 18:22:47 localhost.localdomain audit[582]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5603666c55c0 items=0 ppid=414 pid=582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D7400726177002D5000505245524F5554494E4700414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=3 marras 16 18:22:47 localhost.localdomain audit[583]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55cef110e5c0 items=0 ppid=414 pid=583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D7400726177002D50004F555450555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=6 marras 16 18:22:47 localhost.localdomain audit[584]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56238b1919e0 items=0 ppid=414 pid=584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D5000505245524F5554494E4700414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=6 marras 16 18:22:47 localhost.localdomain audit[585]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ebe01589e0 items=0 ppid=414 pid=585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D5000504F5354524F5554494E4700414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=6 marras 16 18:22:47 localhost.localdomain audit[586]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56181e5df9e0 items=0 ppid=414 pid=586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D5000494E50555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=6 marras 16 18:22:47 localhost.localdomain audit[587]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55993707c9e0 items=0 ppid=414 pid=587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D50004F555450555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=6 marras 16 18:22:47 localhost.localdomain audit[588]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56417e3419e0 items=0 ppid=414 pid=588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D5000464F525741524400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=4 marras 16 18:22:47 localhost.localdomain audit[589]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ec38949720 items=0 ppid=414 pid=589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D5000494E50555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=4 marras 16 18:22:47 localhost.localdomain audit[590]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d50d938720 items=0 ppid=414 pid=590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D50004F555450555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=4 marras 16 18:22:47 localhost.localdomain audit[591]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ab8ca02720 items=0 ppid=414 pid=591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D5000464F525741524400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=broute family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[592]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=5591549ba920 items=0 ppid=414 pid=592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740062726F757465002D500042524F5554494E4700414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[593]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=555ea4fab740 items=0 ppid=414 pid=593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D5000494E50555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[594]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=5628c5403740 items=0 ppid=414 pid=594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D50004F555450555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[595]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55e446e55740 items=0 ppid=414 pid=595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D5000464F525741524400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[596]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55bf2a5b6740 items=0 ppid=414 pid=596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D5000505245524F5554494E4700414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[597]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55da1279a740 items=0 ppid=414 pid=597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D5000504F5354524F5554494E4700414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=0 marras 16 18:22:47 localhost.localdomain audit[598]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=56476e018740 items=0 ppid=414 pid=598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D50004F555450555400414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=5 marras 16 18:22:47 localhost.localdomain audit[599]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560b659a9720 items=0 ppid=414 pid=599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4E00505245524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=7 marras 16 18:22:47 localhost.localdomain audit[600]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555b82894060 items=0 ppid=414 pid=600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4900505245524F5554494E470031002D6A00505245524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=8 marras 16 18:22:47 localhost.localdomain audit[601]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561c68d76a70 items=0 ppid=414 pid=601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4E00505245524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=10 marras 16 18:22:47 localhost.localdomain audit[602]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5649814b0c50 items=0 ppid=414 pid=602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4E00505245524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=12 marras 16 18:22:47 localhost.localdomain audit[603]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556b44b86580 items=0 ppid=414 pid=603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4900505245524F5554494E470032002D6A00505245524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=13 marras 16 18:22:47 localhost.localdomain audit[604]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55cfcb3fc700 items=0 ppid=414 pid=604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4900505245524F5554494E470033002D6A00505245524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=14 marras 16 18:22:47 localhost.localdomain audit[605]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f0f908e110 items=0 ppid=414 pid=605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4E00504F5354524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=16 marras 16 18:22:47 localhost.localdomain audit[606]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564f241dca50 items=0 ppid=414 pid=606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4900504F5354524F5554494E470031002D6A00504F5354524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=17 marras 16 18:22:47 localhost.localdomain audit[607]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5574e3670460 items=0 ppid=414 pid=607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4E00504F5354524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=19 marras 16 18:22:47 localhost.localdomain audit[608]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56307da8f640 items=0 ppid=414 pid=608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4E00504F5354524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=21 marras 16 18:22:47 localhost.localdomain audit[609]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559c43939f70 items=0 ppid=414 pid=609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4900504F5354524F5554494E470032002D6A00504F5354524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=22 marras 16 18:22:47 localhost.localdomain audit[610]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5599a1b4e0f0 items=0 ppid=414 pid=610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4900504F5354524F5554494E470033002D6A00504F5354524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=23 marras 16 18:22:47 localhost.localdomain audit[611]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562267b8db00 items=0 ppid=414 pid=611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D4E004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=25 marras 16 18:22:47 localhost.localdomain audit[612]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5604bbeea440 items=0 ppid=414 pid=612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006E6174002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=6 marras 16 18:22:47 localhost.localdomain audit[613]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=556e34663850 items=0 ppid=414 pid=613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4E00505245524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=8 marras 16 18:22:47 localhost.localdomain audit[614]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5559be52a180 items=0 ppid=414 pid=614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4900505245524F5554494E470031002D6A00505245524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=9 marras 16 18:22:47 localhost.localdomain audit[615]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55cd80078ba0 items=0 ppid=414 pid=615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4E00505245524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=11 marras 16 18:22:47 localhost.localdomain audit[616]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ae2e6f3d70 items=0 ppid=414 pid=616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4E00505245524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=13 marras 16 18:22:47 localhost.localdomain audit[617]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d72efdf6b0 items=0 ppid=414 pid=617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4900505245524F5554494E470032002D6A00505245524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=14 marras 16 18:22:47 localhost.localdomain audit[618]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562b3dcaf820 items=0 ppid=414 pid=618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4900505245524F5554494E470033002D6A00505245524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=15 marras 16 18:22:47 localhost.localdomain audit[619]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564caf726240 items=0 ppid=414 pid=619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4E00504F5354524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=17 marras 16 18:22:47 localhost.localdomain audit[620]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55bfcf354b70 items=0 ppid=414 pid=620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4900504F5354524F5554494E470031002D6A00504F5354524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=18 marras 16 18:22:47 localhost.localdomain audit[621]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55883132b590 items=0 ppid=414 pid=621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4E00494E5055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=20 marras 16 18:22:47 localhost.localdomain audit[622]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f70e070ec0 items=0 ppid=414 pid=622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4900494E5055540031002D6A00494E5055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=21 marras 16 18:22:47 localhost.localdomain audit[623]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55690ea878e0 items=0 ppid=414 pid=623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4E004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=23 marras 16 18:22:47 localhost.localdomain audit[624]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560184ec2210 items=0 ppid=414 pid=624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=24 marras 16 18:22:47 localhost.localdomain audit[625]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561797107c30 items=0 ppid=414 pid=625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4E00464F52574152445F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=26 marras 16 18:22:47 localhost.localdomain audit[626]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b7a3e94560 items=0 ppid=414 pid=626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74006D616E676C65002D4900464F52574152440031002D6A00464F52574152445F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=4 marras 16 18:22:47 localhost.localdomain audit[627]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=563a2088b600 items=0 ppid=414 pid=627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4E00494E5055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=6 marras 16 18:22:47 localhost.localdomain audit[628]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56304109f7d0 items=0 ppid=414 pid=628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4E00494E5055545F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=8 marras 16 18:22:47 localhost.localdomain audit[629]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55bb68aaa9b0 items=0 ppid=414 pid=629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4E00494E5055545F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=10 marras 16 18:22:47 localhost.localdomain audit[630]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ea430b5280 items=0 ppid=414 pid=630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900494E5055540031002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=11 marras 16 18:22:47 localhost.localdomain audit[633]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55dc47a34610 items=0 ppid=414 pid=633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900494E5055540032002D69006C6F002D6A00414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=12 marras 16 18:22:47 localhost.localdomain audit[634]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562046f58770 items=0 ppid=414 pid=634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900494E5055540033002D6A00494E5055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=13 marras 16 18:22:47 localhost.localdomain audit[635]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5595a22d68e0 items=0 ppid=414 pid=635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900494E5055540034002D6A00494E5055545F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=14 marras 16 18:22:47 localhost.localdomain audit[636]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5573ca375a60 items=0 ppid=414 pid=636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900494E5055540035002D6A00494E5055545F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=15 marras 16 18:22:47 localhost.localdomain audit[637]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564b2ad72f60 items=0 ppid=414 pid=637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900494E5055540036002D700069636D70002D6A00414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=16 marras 16 18:22:47 localhost.localdomain audit[638]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55af08365cf0 items=0 ppid=414 pid=638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900494E5055540037002D6D00636F6E6E747261636B002D2D6374737461746500494E56414C4944002D6A0044524F50 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=17 marras 16 18:22:47 localhost.localdomain audit[639]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555c1b0d7570 items=0 ppid=414 pid=639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900494E5055540038002D6A0052454A454354002D2D72656A6563742D776974680069636D702D686F73742D70726F68696269746564 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=18 marras 16 18:22:47 localhost.localdomain audit[640]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56280cb51a70 items=0 ppid=414 pid=640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4E00464F52574152445F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=20 marras 16 18:22:47 localhost.localdomain audit[641]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55e3cf7f4c50 items=0 ppid=414 pid=641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4E00464F52574152445F494E5F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=22 marras 16 18:22:47 localhost.localdomain audit[642]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557e8fe5ae20 items=0 ppid=414 pid=642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4E00464F52574152445F494E5F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=24 marras 16 18:22:47 localhost.localdomain audit[643]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557728028000 items=0 ppid=414 pid=643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4E00464F52574152445F4F55545F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=26 marras 16 18:22:47 localhost.localdomain audit[644]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5599d8d1b1d0 items=0 ppid=414 pid=644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4E00464F52574152445F4F55545F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=28 marras 16 18:22:47 localhost.localdomain audit[645]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55870850fab0 items=0 ppid=414 pid=645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900464F52574152440031002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=29 marras 16 18:22:47 localhost.localdomain audit[646]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559929700e40 items=0 ppid=414 pid=646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900464F52574152440032002D69006C6F002D6A00414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=30 marras 16 18:22:47 localhost.localdomain audit[647]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55e64261df90 items=0 ppid=414 pid=647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900464F52574152440033002D6A00464F52574152445F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=31 marras 16 18:22:47 localhost.localdomain audit[648]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55fbd7500110 items=0 ppid=414 pid=648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900464F52574152440034002D6A00464F52574152445F494E5F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=32 marras 16 18:22:47 localhost.localdomain audit[649]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559494dcc280 items=0 ppid=414 pid=649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900464F52574152440035002D6A00464F52574152445F494E5F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=33 marras 16 18:22:47 localhost.localdomain audit[650]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564be6feb400 items=0 ppid=414 pid=650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900464F52574152440036002D6A00464F52574152445F4F55545F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=34 marras 16 18:22:47 localhost.localdomain audit[651]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56528ec07570 items=0 ppid=414 pid=651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900464F52574152440037002D6A00464F52574152445F4F55545F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=35 marras 16 18:22:47 localhost.localdomain audit[652]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d74ddaca80 items=0 ppid=414 pid=652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900464F52574152440038002D700069636D70002D6A00414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=36 marras 16 18:22:47 localhost.localdomain audit[653]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f79c1b9800 items=0 ppid=414 pid=653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900464F52574152440039002D6D00636F6E6E747261636B002D2D6374737461746500494E56414C4944002D6A0044524F50 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=37 marras 16 18:22:47 localhost.localdomain audit[654]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f195e18080 items=0 ppid=414 pid=654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4900464F5257415244003130002D6A0052454A454354002D2D72656A6563742D776974680069636D702D686F73742D70726F68696269746564 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=38 marras 16 18:22:47 localhost.localdomain audit[655]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55835bd48590 items=0 ppid=414 pid=655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D4E004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=40 marras 16 18:22:47 localhost.localdomain audit[656]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562b50e9aec0 items=0 ppid=414 pid=656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D740066696C746572002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=raw family=2 entries=3 marras 16 18:22:47 localhost.localdomain audit[657]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5629599e94d0 items=0 ppid=414 pid=657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D7400726177002D4E00505245524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=raw family=2 entries=5 marras 16 18:22:47 localhost.localdomain audit[658]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55e54d669e10 items=0 ppid=414 pid=658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D7400726177002D4900505245524F5554494E470031002D6A00505245524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=raw family=2 entries=6 marras 16 18:22:47 localhost.localdomain audit[659]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55feefa12820 items=0 ppid=414 pid=659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D7400726177002D4E004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=raw family=2 entries=8 marras 16 18:22:47 localhost.localdomain audit[660]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=563675421160 items=0 ppid=414 pid=660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D7400726177002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=4 marras 16 18:22:47 localhost.localdomain audit[661]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d4735e1600 items=0 ppid=414 pid=661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D4E00494E5055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=6 marras 16 18:22:47 localhost.localdomain audit[662]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562613926f30 items=0 ppid=414 pid=662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D4900494E5055540031002D6A00494E5055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=7 marras 16 18:22:47 localhost.localdomain audit[663]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a39fa8a950 items=0 ppid=414 pid=663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D4E004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=9 marras 16 18:22:47 localhost.localdomain audit[664]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b8951fe280 items=0 ppid=414 pid=664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=10 marras 16 18:22:47 localhost.localdomain audit[665]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a320ed7ca0 items=0 ppid=414 pid=665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D4E00464F52574152445F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=12 marras 16 18:22:47 localhost.localdomain audit[666]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5613365ed5d0 items=0 ppid=414 pid=666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D74007365637572697479002D4900464F52574152440031002D6A00464F52574152445F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=5 marras 16 18:22:47 localhost.localdomain audit[667]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55f000bd0880 items=0 ppid=414 pid=667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4E00505245524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=7 marras 16 18:22:47 localhost.localdomain audit[668]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c50b9ce250 items=0 ppid=414 pid=668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4900505245524F5554494E470031002D6A00505245524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=8 marras 16 18:22:47 localhost.localdomain audit[669]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55aeeee9fcb0 items=0 ppid=414 pid=669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4E00505245524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=10 marras 16 18:22:47 localhost.localdomain audit[670]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564aa67a6f00 items=0 ppid=414 pid=670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4E00505245524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=12 marras 16 18:22:47 localhost.localdomain audit[671]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56116afd08d0 items=0 ppid=414 pid=671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4900505245524F5554494E470032002D6A00505245524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=13 marras 16 18:22:47 localhost.localdomain audit[672]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=560b59d3fac0 items=0 ppid=414 pid=672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4900505245524F5554494E470033002D6A00505245524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=14 marras 16 18:22:47 localhost.localdomain audit[673]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55e64c69f520 items=0 ppid=414 pid=673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4E00504F5354524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=16 marras 16 18:22:47 localhost.localdomain audit[674]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55824b9d9f00 items=0 ppid=414 pid=674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4900504F5354524F5554494E470031002D6A00504F5354524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=17 marras 16 18:22:47 localhost.localdomain audit[675]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d44a2b7960 items=0 ppid=414 pid=675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4E00504F5354524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=19 marras 16 18:22:47 localhost.localdomain audit[676]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55bf31732ba0 items=0 ppid=414 pid=676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4E00504F5354524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain crond[519]: (CRON) INFO (running with inotify support) marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=21 marras 16 18:22:47 localhost.localdomain audit[677]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a18e7df580 items=0 ppid=414 pid=677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4900504F5354524F5554494E470032002D6A00504F5354524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=22 marras 16 18:22:47 localhost.localdomain audit[678]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=559fd5586770 items=0 ppid=414 pid=678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4900504F5354524F5554494E470033002D6A00504F5354524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=23 marras 16 18:22:47 localhost.localdomain audit[679]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5641579011d0 items=0 ppid=414 pid=679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D4E004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=25 marras 16 18:22:47 localhost.localdomain audit[680]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55f24abe5ba0 items=0 ppid=414 pid=680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006E6174002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=6 marras 16 18:22:47 localhost.localdomain audit[681]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55acccc5b9e0 items=0 ppid=414 pid=681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4E00505245524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=8 marras 16 18:22:47 localhost.localdomain audit[682]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55b813fbe3b0 items=0 ppid=414 pid=682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4900505245524F5554494E470031002D6A00505245524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=9 marras 16 18:22:47 localhost.localdomain audit[683]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563f07626e10 items=0 ppid=414 pid=683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4E00505245524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=11 marras 16 18:22:47 localhost.localdomain audit[684]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5630c5222060 items=0 ppid=414 pid=684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4E00505245524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=13 marras 16 18:22:47 localhost.localdomain audit[685]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564012773a30 items=0 ppid=414 pid=685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4900505245524F5554494E470032002D6A00505245524F5554494E475F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=14 marras 16 18:22:47 localhost.localdomain audit[686]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=559f97dbac20 items=0 ppid=414 pid=686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4900505245524F5554494E470033002D6A00505245524F5554494E475F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=15 marras 16 18:22:47 localhost.localdomain audit[687]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5623cf02b680 items=0 ppid=414 pid=687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4E00504F5354524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=17 marras 16 18:22:47 localhost.localdomain audit[688]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55fad2aca060 items=0 ppid=414 pid=688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4900504F5354524F5554494E470031002D6A00504F5354524F5554494E475F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=18 marras 16 18:22:47 localhost.localdomain audit[689]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556e1f3c9ac0 items=0 ppid=414 pid=689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4E00494E5055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=20 marras 16 18:22:47 localhost.localdomain audit[690]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5629cd319490 items=0 ppid=414 pid=690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4900494E5055540031002D6A00494E5055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=21 marras 16 18:22:47 localhost.localdomain audit[691]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5633d2d63ef0 items=0 ppid=414 pid=691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4E004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=23 marras 16 18:22:47 localhost.localdomain audit[692]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55dff2ac18d0 items=0 ppid=414 pid=692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=24 marras 16 18:22:47 localhost.localdomain audit[693]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556d58a65330 items=0 ppid=414 pid=693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4E00464F52574152445F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=26 marras 16 18:22:47 localhost.localdomain audit[694]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5591f59a7d00 items=0 ppid=414 pid=694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74006D616E676C65002D4900464F52574152440031002D6A00464F52574152445F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=4 marras 16 18:22:47 localhost.localdomain audit[695]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55e261c84720 items=0 ppid=414 pid=695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4E00494E5055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=6 marras 16 18:22:47 localhost.localdomain audit[696]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=558954a93960 items=0 ppid=414 pid=696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4E00494E5055545F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=8 marras 16 18:22:47 localhost.localdomain audit[697]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=559d3a5f8bb0 items=0 ppid=414 pid=697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4E00494E5055545F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=10 marras 16 18:22:47 localhost.localdomain audit[698]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d9c2874530 items=0 ppid=414 pid=698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900494E5055540031002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=11 marras 16 18:22:47 localhost.localdomain audit[699]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55736b1db930 items=0 ppid=414 pid=699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900494E5055540032002D69006C6F002D6A00414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=12 marras 16 18:22:47 localhost.localdomain audit[700]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557bcd506af0 items=0 ppid=414 pid=700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900494E5055540033002D6A00494E5055545F646972656374 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=13 marras 16 18:22:47 localhost.localdomain audit[701]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55eea04b0ce0 items=0 ppid=414 pid=701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900494E5055540034002D6A00494E5055545F5A4F4E45535F534F55524345 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=14 marras 16 18:22:47 localhost.localdomain audit[702]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5614ff5b6ed0 items=0 ppid=414 pid=702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900494E5055540035002D6A00494E5055545F5A4F4E4553 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=15 marras 16 18:22:47 localhost.localdomain audit[703]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56397ec34460 items=0 ppid=414 pid=703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900494E5055540036002D7000697076362D69636D70002D6A00414343455054 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=16 marras 16 18:22:47 localhost.localdomain audit[704]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=560f8bb47260 items=0 ppid=414 pid=704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900494E5055540037002D6D00636F6E6E747261636B002D2D6374737461746500494E56414C4944002D6A0044524F50 marras 16 18:22:47 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=17 marras 16 18:22:47 localhost.localdomain audit[705]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557237349b20 items=0 ppid=414 pid=705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:47 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900494E5055540038002D6A0052454A454354002D2D72656A6563742D776974680069636D70362D61646D2D70726F68696269746564 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=18 marras 16 18:22:48 localhost.localdomain audit[708]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55cd7b3d2080 items=0 ppid=414 pid=708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4E00464F52574152445F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=20 marras 16 18:22:48 localhost.localdomain audit[709]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=561abfc832d0 items=0 ppid=414 pid=709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4E00464F52574152445F494E5F5A4F4E45535F534F55524345 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=22 marras 16 18:22:48 localhost.localdomain audit[710]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=561165e5e510 items=0 ppid=414 pid=710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4E00464F52574152445F494E5F5A4F4E4553 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=24 marras 16 18:22:48 localhost.localdomain audit[711]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=558f4e79e760 items=0 ppid=414 pid=711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4E00464F52574152445F4F55545F5A4F4E45535F534F55524345 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=26 marras 16 18:22:48 localhost.localdomain audit[712]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5607a7bc29a0 items=0 ppid=414 pid=712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4E00464F52574152445F4F55545F5A4F4E4553 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=28 marras 16 18:22:48 localhost.localdomain audit[713]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55dd5f2ab330 items=0 ppid=414 pid=713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900464F52574152440031002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=29 marras 16 18:22:48 localhost.localdomain audit[714]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5584201ca720 items=0 ppid=414 pid=714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900464F52574152440032002D69006C6F002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=30 marras 16 18:22:48 localhost.localdomain audit[715]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a67edcb8e0 items=0 ppid=414 pid=715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900464F52574152440033002D6A00464F52574152445F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=31 marras 16 18:22:48 localhost.localdomain audit[716]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55b72f8cfad0 items=0 ppid=414 pid=716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900464F52574152440034002D6A00464F52574152445F494E5F5A4F4E45535F534F55524345 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=32 marras 16 18:22:48 localhost.localdomain audit[717]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55787b875cc0 items=0 ppid=414 pid=717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900464F52574152440035002D6A00464F52574152445F494E5F5A4F4E4553 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=33 marras 16 18:22:48 localhost.localdomain audit[718]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55bfe44a8eb0 items=0 ppid=414 pid=718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900464F52574152440036002D6A00464F52574152445F4F55545F5A4F4E45535F534F55524345 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=34 marras 16 18:22:48 localhost.localdomain audit[719]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c607ada0a0 items=0 ppid=414 pid=719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900464F52574152440037002D6A00464F52574152445F4F55545F5A4F4E4553 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=35 marras 16 18:22:48 localhost.localdomain audit[720]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ec22d0e630 items=0 ppid=414 pid=720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900464F52574152440038002D7000697076362D69636D70002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=36 marras 16 18:22:48 localhost.localdomain audit[721]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56379561e430 items=0 ppid=414 pid=721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900464F52574152440039002D6D00636F6E6E747261636B002D2D6374737461746500494E56414C4944002D6A0044524F50 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=37 marras 16 18:22:48 localhost.localdomain audit[722]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=562580999d00 items=0 ppid=414 pid=722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4900464F5257415244003130002D6A0052454A454354002D2D72656A6563742D776974680069636D70362D61646D2D70726F68696269746564 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=38 marras 16 18:22:48 localhost.localdomain audit[723]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5590f3b1b260 items=0 ppid=414 pid=723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D4E004F55545055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=40 marras 16 18:22:48 localhost.localdomain audit[724]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d17572ec30 items=0 ppid=414 pid=724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D740066696C746572002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=3 marras 16 18:22:48 localhost.localdomain audit[725]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55cfad3b05c0 items=0 ppid=414 pid=725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D7400726177002D4E00505245524F5554494E475F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=5 marras 16 18:22:48 localhost.localdomain audit[726]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563f1eb52f90 items=0 ppid=414 pid=726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D7400726177002D4900505245524F5554494E470031002D6A00505245524F5554494E475F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=6 marras 16 18:22:48 localhost.localdomain audit[727]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55650d8f39f0 items=0 ppid=414 pid=727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D7400726177002D4E004F55545055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=8 marras 16 18:22:48 localhost.localdomain audit[728]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5570101bd3d0 items=0 ppid=414 pid=728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D7400726177002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=4 marras 16 18:22:48 localhost.localdomain audit[729]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55f9893f6720 items=0 ppid=414 pid=729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D4E00494E5055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=6 marras 16 18:22:48 localhost.localdomain audit[730]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c88c3ca0f0 items=0 ppid=414 pid=730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D4900494E5055540031002D6A00494E5055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=7 marras 16 18:22:48 localhost.localdomain audit[731]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d654ddfb50 items=0 ppid=414 pid=731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D4E004F55545055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=9 marras 16 18:22:48 localhost.localdomain audit[732]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d6e4bd1530 items=0 ppid=414 pid=732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=10 marras 16 18:22:48 localhost.localdomain audit[733]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=562e0243af90 items=0 ppid=414 pid=733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D4E00464F52574152445F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=12 marras 16 18:22:48 localhost.localdomain audit[734]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d514426960 items=0 ppid=414 pid=734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D74007365637572697479002D4900464F52574152440031002D6A00464F52574152445F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=broute family=7 entries=0 marras 16 18:22:48 localhost.localdomain audit[735]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55c0e6b85a40 items=0 ppid=414 pid=735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740062726F757465002D4E0042524F5554494E475F646972656374002D500052455455524E marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=broute family=7 entries=1 marras 16 18:22:48 localhost.localdomain audit[736]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55ca8787eab0 items=0 ppid=414 pid=736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740062726F757465002D490042524F5554494E470031002D6A0042524F5554494E475F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=0 marras 16 18:22:48 localhost.localdomain audit[737]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=562474af8c90 items=0 ppid=414 pid=737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D4E00494E5055545F646972656374002D500052455455524E marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=1 marras 16 18:22:48 localhost.localdomain audit[738]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=5597e981b780 items=0 ppid=414 pid=738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D4900494E5055540031002D6A00494E5055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=1 marras 16 18:22:48 localhost.localdomain audit[739]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55cdc1f2df00 items=0 ppid=414 pid=739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D4E004F55545055545F646972656374002D500052455455524E marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=2 marras 16 18:22:48 localhost.localdomain audit[740]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55952b42e7a0 items=0 ppid=414 pid=740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=2 marras 16 18:22:48 localhost.localdomain audit[741]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=556b17d2d860 items=0 ppid=414 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D4E00464F52574152445F646972656374002D500052455455524E marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=7 entries=3 marras 16 18:22:48 localhost.localdomain audit[742]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=5613ee9b07b0 items=0 ppid=414 pid=742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D740066696C746572002D4900464F52574152440031002D6A00464F52574152445F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=0 marras 16 18:22:48 localhost.localdomain audit[743]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=5627a086fc90 items=0 ppid=414 pid=743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D4E00505245524F5554494E475F646972656374002D500052455455524E marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=1 marras 16 18:22:48 localhost.localdomain audit[744]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=557871733780 items=0 ppid=414 pid=744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D4900505245524F5554494E470031002D6A00505245524F5554494E475F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=1 marras 16 18:22:48 localhost.localdomain audit[745]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=559140ec3f00 items=0 ppid=414 pid=745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D4E00504F5354524F5554494E475F646972656374002D500052455455524E marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=2 marras 16 18:22:48 localhost.localdomain audit[746]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55d65a2357a0 items=0 ppid=414 pid=746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D4900504F5354524F5554494E470031002D6A00504F5354524F5554494E475F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=2 marras 16 18:22:48 localhost.localdomain audit[747]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55b99aa5b860 items=0 ppid=414 pid=747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D4E004F55545055545F646972656374002D500052455455524E marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=7 entries=3 marras 16 18:22:48 localhost.localdomain audit[748]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=55830af157b0 items=0 ppid=414 pid=748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables" exe="/usr/sbin/ebtables" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F65627461626C6573002D2D636F6E63757272656E74002D74006E6174002D49004F55545055540031002D6A004F55545055545F646972656374 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=9 marras 16 18:22:48 localhost.localdomain audit[749]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=559730d8e4a0 items=0 ppid=414 pid=749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D7400726177002D4900505245524F5554494E470031002D700069636D707636002D2D69636D7076362D747970653D726F757465722D6164766572746973656D656E74002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=10 marras 16 18:22:48 localhost.localdomain audit[750]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563f03277390 items=0 ppid=414 pid=750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D7400726177002D4900505245524F5554494E470032002D6D00727066696C746572002D2D696E76657274002D6A0044524F50 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=41 marras 16 18:22:48 localhost.localdomain audit[753]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55599ba918e0 items=0 ppid=414 pid=753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00494E5F7075626C6963002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=43 marras 16 18:22:48 localhost.localdomain audit[754]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55edcdf6aab0 items=0 ppid=414 pid=754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00494E5F7075626C69635F6C6F67002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=45 marras 16 18:22:48 localhost.localdomain audit[755]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560efe388c90 items=0 ppid=414 pid=755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00494E5F7075626C69635F64656E79002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=47 marras 16 18:22:48 localhost.localdomain audit[756]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55892a5f6e60 items=0 ppid=414 pid=756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00494E5F7075626C69635F616C6C6F77002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=41 marras 16 18:22:48 localhost.localdomain audit[757]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55f7a5f48690 items=0 ppid=414 pid=757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00494E5F7075626C6963002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=43 marras 16 18:22:48 localhost.localdomain audit[758]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=559d135e48e0 items=0 ppid=414 pid=758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00494E5F7075626C69635F6C6F67002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=45 marras 16 18:22:48 localhost.localdomain audit[759]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=562a43ad8b20 items=0 ppid=414 pid=759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00494E5F7075626C69635F64656E79002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=47 marras 16 18:22:48 localhost.localdomain audit[760]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55e8f6946d70 items=0 ppid=414 pid=760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00494E5F7075626C69635F616C6C6F77002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=49 marras 16 18:22:48 localhost.localdomain audit[761]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55bc4329a7a0 items=0 ppid=414 pid=761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900494E5F7075626C69630031002D740066696C746572002D6A00494E5F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=50 marras 16 18:22:48 localhost.localdomain audit[762]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55699de83910 items=0 ppid=414 pid=762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900494E5F7075626C69630032002D740066696C746572002D6A00494E5F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=51 marras 16 18:22:48 localhost.localdomain audit[763]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55cb373eea90 items=0 ppid=414 pid=763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900494E5F7075626C69630033002D740066696C746572002D6A00494E5F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=49 marras 16 18:22:48 localhost.localdomain audit[764]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563c26c3d740 items=0 ppid=414 pid=764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900494E5F7075626C69630031002D740066696C746572002D6A00494E5F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=50 marras 16 18:22:48 localhost.localdomain audit[765]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556df44d8930 items=0 ppid=414 pid=765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900494E5F7075626C69630032002D740066696C746572002D6A00494E5F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=51 marras 16 18:22:48 localhost.localdomain audit[766]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5611808e2b20 items=0 ppid=414 pid=766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900494E5F7075626C69630033002D740066696C746572002D6A00494E5F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=52 marras 16 18:22:48 localhost.localdomain audit[767]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ccf6ef96c0 items=0 ppid=414 pid=767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4100494E5F7075626C69635F616C6C6F77002D740066696C746572002D6D00746370002D7000746370002D2D64706F72740038373635002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=52 marras 16 18:22:48 localhost.localdomain audit[768]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=560c6654e7d0 items=0 ppid=414 pid=768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100494E5F7075626C69635F616C6C6F77002D740066696C746572002D6D00746370002D7000746370002D2D64706F72740038373635002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=53 marras 16 18:22:48 localhost.localdomain audit[769]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ce940d3a30 items=0 ppid=414 pid=769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4100494E5F7075626C69635F616C6C6F77002D740066696C746572002D7000746370002D2D64706F72740039303930002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=53 marras 16 18:22:48 localhost.localdomain audit[770]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=560d09efcbb0 items=0 ppid=414 pid=770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100494E5F7075626C69635F616C6C6F77002D740066696C746572002D7000746370002D2D64706F72740039303930002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=54 marras 16 18:22:48 localhost.localdomain audit[771]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5650d37cbd30 items=0 ppid=414 pid=771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4100494E5F7075626C69635F616C6C6F77002D740066696C746572002D7000756470002D2D64706F72740035333533002D64003232342E302E302E323531002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=54 marras 16 18:22:48 localhost.localdomain audit[772]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557f64589f10 items=0 ppid=414 pid=772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100494E5F7075626C69635F616C6C6F77002D740066696C746572002D7000756470002D2D64706F72740035333533002D6400666630323A3A6662002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=55 marras 16 18:22:48 localhost.localdomain audit[773]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556cef2332f0 items=0 ppid=414 pid=773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100494E5F7075626C69635F616C6C6F77002D740066696C746572002D7000756470002D2D64706F727400353436002D6400666538303A3A2F3634002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=55 marras 16 18:22:48 localhost.localdomain audit[774]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b732d51110 items=0 ppid=414 pid=774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4100494E5F7075626C69635F616C6C6F77002D740066696C746572002D7000746370002D2D64706F7274003232002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=56 marras 16 18:22:48 localhost.localdomain audit[775]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55e5c4702730 items=0 ppid=414 pid=775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100494E5F7075626C69635F616C6C6F77002D740066696C746572002D7000746370002D2D64706F7274003232002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6A00414343455054 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=56 marras 16 18:22:48 localhost.localdomain audit[776]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564b6eb4b260 items=0 ppid=414 pid=776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00465744495F7075626C6963002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=58 marras 16 18:22:48 localhost.localdomain audit[777]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f3b815a440 items=0 ppid=414 pid=777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00465744495F7075626C69635F6C6F67002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=60 marras 16 18:22:48 localhost.localdomain audit[778]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55c2f38f5610 items=0 ppid=414 pid=778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00465744495F7075626C69635F64656E79002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=62 marras 16 18:22:48 localhost.localdomain audit[779]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56093bcc07f0 items=0 ppid=414 pid=779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00465744495F7075626C69635F616C6C6F77002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=57 marras 16 18:22:48 localhost.localdomain audit[780]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a898ec18c0 items=0 ppid=414 pid=780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00465744495F7075626C6963002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=59 marras 16 18:22:48 localhost.localdomain audit[781]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5639eed73b00 items=0 ppid=414 pid=781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00465744495F7075626C69635F6C6F67002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=61 marras 16 18:22:48 localhost.localdomain audit[782]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c3d82f9d50 items=0 ppid=414 pid=782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00465744495F7075626C69635F64656E79002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=63 marras 16 18:22:48 localhost.localdomain audit[783]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c89a1c2f90 items=0 ppid=414 pid=783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00465744495F7075626C69635F616C6C6F77002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=64 marras 16 18:22:48 localhost.localdomain audit[784]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=559f81141120 items=0 ppid=414 pid=784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900465744495F7075626C69630031002D740066696C746572002D6A00465744495F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=65 marras 16 18:22:48 localhost.localdomain audit[785]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562d7f7502a0 items=0 ppid=414 pid=785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900465744495F7075626C69630032002D740066696C746572002D6A00465744495F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=66 marras 16 18:22:48 localhost.localdomain audit[786]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ff09d8d410 items=0 ppid=414 pid=786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900465744495F7075626C69630033002D740066696C746572002D6A00465744495F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=65 marras 16 18:22:48 localhost.localdomain audit[787]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5606186b4970 items=0 ppid=414 pid=787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900465744495F7075626C69630031002D740066696C746572002D6A00465744495F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=66 marras 16 18:22:48 localhost.localdomain audit[788]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d221a12b60 items=0 ppid=414 pid=788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900465744495F7075626C69630032002D740066696C746572002D6A00465744495F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=67 marras 16 18:22:48 localhost.localdomain audit[789]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=562141322d50 items=0 ppid=414 pid=789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900465744495F7075626C69630033002D740066696C746572002D6A00465744495F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=67 marras 16 18:22:48 localhost.localdomain audit[790]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55653961ce30 items=0 ppid=414 pid=790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E004657444F5F7075626C6963002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=69 marras 16 18:22:48 localhost.localdomain audit[791]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562bf1859000 items=0 ppid=414 pid=791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E004657444F5F7075626C69635F6C6F67002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=71 marras 16 18:22:48 localhost.localdomain audit[792]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555d123a91e0 items=0 ppid=414 pid=792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E004657444F5F7075626C69635F64656E79002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=73 marras 16 18:22:48 localhost.localdomain audit[793]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56105e1d23b0 items=0 ppid=414 pid=793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E004657444F5F7075626C69635F616C6C6F77002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=68 marras 16 18:22:48 localhost.localdomain audit[794]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d19dc867b0 items=0 ppid=414 pid=794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E004657444F5F7075626C6963002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=70 marras 16 18:22:48 localhost.localdomain audit[795]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d8681849f0 items=0 ppid=414 pid=795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E004657444F5F7075626C69635F6C6F67002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=72 marras 16 18:22:48 localhost.localdomain audit[796]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=555deb377c40 items=0 ppid=414 pid=796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E004657444F5F7075626C69635F64656E79002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=74 marras 16 18:22:48 localhost.localdomain audit[797]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5565f8b33e80 items=0 ppid=414 pid=797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E004657444F5F7075626C69635F616C6C6F77002D740066696C746572 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=75 marras 16 18:22:48 localhost.localdomain audit[798]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55da992c7cf0 items=0 ppid=414 pid=798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D49004657444F5F7075626C69630031002D740066696C746572002D6A004657444F5F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=76 marras 16 18:22:48 localhost.localdomain audit[799]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=563bb3e2ee60 items=0 ppid=414 pid=799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D49004657444F5F7075626C69630032002D740066696C746572002D6A004657444F5F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=77 marras 16 18:22:48 localhost.localdomain audit[800]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56436079cfe0 items=0 ppid=414 pid=800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D49004657444F5F7075626C69630033002D740066696C746572002D6A004657444F5F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=76 marras 16 18:22:48 localhost.localdomain audit[801]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=56416ae5e860 items=0 ppid=414 pid=801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D49004657444F5F7075626C69630031002D740066696C746572002D6A004657444F5F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=77 marras 16 18:22:48 localhost.localdomain audit[802]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55e16952fa50 items=0 ppid=414 pid=802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D49004657444F5F7075626C69630032002D740066696C746572002D6A004657444F5F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=78 marras 16 18:22:48 localhost.localdomain audit[803]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=555d5acc3c40 items=0 ppid=414 pid=803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D49004657444F5F7075626C69630033002D740066696C746572002D6A004657444F5F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=26 marras 16 18:22:48 localhost.localdomain audit[804]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f8c09b5e50 items=0 ppid=414 pid=804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E005052455F7075626C6963002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=28 marras 16 18:22:48 localhost.localdomain audit[805]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=560361226030 items=0 ppid=414 pid=805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E005052455F7075626C69635F6C6F67002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=30 marras 16 18:22:48 localhost.localdomain audit[806]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5647d4ea7200 items=0 ppid=414 pid=806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E005052455F7075626C69635F64656E79002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=32 marras 16 18:22:48 localhost.localdomain audit[807]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5613dbcba3e0 items=0 ppid=414 pid=807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E005052455F7075626C69635F616C6C6F77002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=26 marras 16 18:22:48 localhost.localdomain audit[808]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5564be6d5600 items=0 ppid=414 pid=808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E005052455F7075626C6963002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=28 marras 16 18:22:48 localhost.localdomain audit[809]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=558d9ee3c850 items=0 ppid=414 pid=809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E005052455F7075626C69635F6C6F67002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=30 marras 16 18:22:48 localhost.localdomain audit[810]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556b95309a90 items=0 ppid=414 pid=810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E005052455F7075626C69635F64656E79002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=32 marras 16 18:22:48 localhost.localdomain audit[811]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55af7a23ece0 items=0 ppid=414 pid=811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E005052455F7075626C69635F616C6C6F77002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=34 marras 16 18:22:48 localhost.localdomain audit[812]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561c0ffa3d10 items=0 ppid=414 pid=812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D49005052455F7075626C69630031002D74006E6174002D6A005052455F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=35 marras 16 18:22:48 localhost.localdomain audit[813]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ac676cfe90 items=0 ppid=414 pid=813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D49005052455F7075626C69630032002D74006E6174002D6A005052455F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=36 marras 16 18:22:48 localhost.localdomain audit[814]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=561b7edc9000 items=0 ppid=414 pid=814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D49005052455F7075626C69630033002D74006E6174002D6A005052455F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=34 marras 16 18:22:48 localhost.localdomain audit[815]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a69f5166b0 items=0 ppid=414 pid=815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D49005052455F7075626C69630031002D74006E6174002D6A005052455F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=35 marras 16 18:22:48 localhost.localdomain audit[816]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5572bc5148a0 items=0 ppid=414 pid=816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D49005052455F7075626C69630032002D74006E6174002D6A005052455F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=36 marras 16 18:22:48 localhost.localdomain audit[817]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55cb46096a90 items=0 ppid=414 pid=817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D49005052455F7075626C69630033002D74006E6174002D6A005052455F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=37 marras 16 18:22:48 localhost.localdomain audit[818]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55622e179a20 items=0 ppid=414 pid=818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00504F53545F7075626C6963002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=39 marras 16 18:22:48 localhost.localdomain audit[819]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5567b2786bf0 items=0 ppid=414 pid=819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00504F53545F7075626C69635F6C6F67002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=41 marras 16 18:22:48 localhost.localdomain audit[820]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55883897add0 items=0 ppid=414 pid=820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00504F53545F7075626C69635F64656E79002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=43 marras 16 18:22:48 localhost.localdomain audit[821]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55975fcddfa0 items=0 ppid=414 pid=821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E00504F53545F7075626C69635F616C6C6F77002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=37 marras 16 18:22:48 localhost.localdomain audit[822]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563358af34f0 items=0 ppid=414 pid=822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00504F53545F7075626C6963002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=39 marras 16 18:22:48 localhost.localdomain audit[823]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55c736719740 items=0 ppid=414 pid=823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00504F53545F7075626C69635F6C6F67002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=41 marras 16 18:22:48 localhost.localdomain audit[824]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d8e26ef980 items=0 ppid=414 pid=824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00504F53545F7075626C69635F64656E79002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=43 marras 16 18:22:48 localhost.localdomain audit[825]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d727ef7bd0 items=0 ppid=414 pid=825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E00504F53545F7075626C69635F616C6C6F77002D74006E6174 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=45 marras 16 18:22:48 localhost.localdomain audit[826]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562cbb2b98e0 items=0 ppid=414 pid=826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900504F53545F7075626C69630031002D74006E6174002D6A00504F53545F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=46 marras 16 18:22:48 localhost.localdomain audit[827]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56070dac7a50 items=0 ppid=414 pid=827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900504F53545F7075626C69630032002D74006E6174002D6A00504F53545F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=47 marras 16 18:22:48 localhost.localdomain audit[828]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=562d7dbfebd0 items=0 ppid=414 pid=828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900504F53545F7075626C69630033002D74006E6174002D6A00504F53545F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=45 marras 16 18:22:48 localhost.localdomain audit[829]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5557927df5a0 items=0 ppid=414 pid=829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900504F53545F7075626C69630031002D74006E6174002D6A00504F53545F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=46 marras 16 18:22:48 localhost.localdomain audit[830]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=563e0d98a790 items=0 ppid=414 pid=830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900504F53545F7075626C69630032002D74006E6174002D6A00504F53545F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=47 marras 16 18:22:48 localhost.localdomain audit[831]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55705acfb980 items=0 ppid=414 pid=831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900504F53545F7075626C69630033002D74006E6174002D6A00504F53545F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=27 marras 16 18:22:48 localhost.localdomain audit[832]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5628a388cf80 items=0 ppid=414 pid=832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E005052455F7075626C6963002D74006D616E676C65 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=29 marras 16 18:22:48 localhost.localdomain audit[833]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=564081bce150 items=0 ppid=414 pid=833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E005052455F7075626C69635F6C6F67002D74006D616E676C65 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=31 marras 16 18:22:48 localhost.localdomain audit[834]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55eab59aa330 items=0 ppid=414 pid=834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E005052455F7075626C69635F64656E79002D74006D616E676C65 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=33 marras 16 18:22:48 localhost.localdomain audit[835]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f9198fd500 items=0 ppid=414 pid=835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4E005052455F7075626C69635F616C6C6F77002D74006D616E676C65 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=27 marras 16 18:22:48 localhost.localdomain audit[836]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55aa5bf98760 items=0 ppid=414 pid=836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E005052455F7075626C6963002D74006D616E676C65 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=29 marras 16 18:22:48 localhost.localdomain audit[837]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55de185619b0 items=0 ppid=414 pid=837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E005052455F7075626C69635F6C6F67002D74006D616E676C65 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=31 marras 16 18:22:48 localhost.localdomain audit[838]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55d38a5aebf0 items=0 ppid=414 pid=838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E005052455F7075626C69635F64656E79002D74006D616E676C65 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=33 marras 16 18:22:48 localhost.localdomain audit[839]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55fa13349e40 items=0 ppid=414 pid=839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4E005052455F7075626C69635F616C6C6F77002D74006D616E676C65 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=35 marras 16 18:22:48 localhost.localdomain audit[840]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557864202e40 items=0 ppid=414 pid=840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D49005052455F7075626C69630031002D74006D616E676C65002D6A005052455F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=36 marras 16 18:22:48 localhost.localdomain audit[841]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5578bb6d6fb0 items=0 ppid=414 pid=841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D49005052455F7075626C69630032002D74006D616E676C65002D6A005052455F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=37 marras 16 18:22:48 localhost.localdomain audit[842]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=558ac7480130 items=0 ppid=414 pid=842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D49005052455F7075626C69630033002D74006D616E676C65002D6A005052455F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=35 marras 16 18:22:48 localhost.localdomain audit[843]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=556b5393b810 items=0 ppid=414 pid=843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D49005052455F7075626C69630031002D74006D616E676C65002D6A005052455F7075626C69635F6C6F67 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=36 marras 16 18:22:48 localhost.localdomain audit[844]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557282f83a00 items=0 ppid=414 pid=844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D49005052455F7075626C69630032002D74006D616E676C65002D6A005052455F7075626C69635F64656E79 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=37 marras 16 18:22:48 localhost.localdomain audit[845]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a8b6b38bf0 items=0 ppid=414 pid=845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D49005052455F7075626C69630033002D74006D616E676C65002D6A005052455F7075626C69635F616C6C6F77 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=78 marras 16 18:22:48 localhost.localdomain audit[846]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55a622234150 items=0 ppid=414 pid=846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4100464F52574152445F494E5F5A4F4E4553002D740066696C746572002D69002B002D6700465744495F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=79 marras 16 18:22:48 localhost.localdomain audit[847]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557e047cae30 items=0 ppid=414 pid=847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100464F52574152445F494E5F5A4F4E4553002D740066696C746572002D69002B002D6700465744495F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=79 marras 16 18:22:48 localhost.localdomain audit[848]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55d1f88962d0 items=0 ppid=414 pid=848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4100494E5055545F5A4F4E4553002D740066696C746572002D69002B002D6700494E5F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=80 marras 16 18:22:48 localhost.localdomain audit[849]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=558cced61020 items=0 ppid=414 pid=849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100494E5055545F5A4F4E4553002D740066696C746572002D69002B002D6700494E5F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=80 marras 16 18:22:48 localhost.localdomain audit[850]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f40299b440 items=0 ppid=414 pid=850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4100464F52574152445F4F55545F5A4F4E4553002D740066696C746572002D6F002B002D67004657444F5F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=81 marras 16 18:22:48 localhost.localdomain audit[851]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=564744059210 items=0 ppid=414 pid=851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100464F52574152445F4F55545F5A4F4E4553002D740066696C746572002D6F002B002D67004657444F5F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=48 marras 16 18:22:48 localhost.localdomain audit[852]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55ef19d04d40 items=0 ppid=414 pid=852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4100505245524F5554494E475F5A4F4E4553002D74006E6174002D69002B002D67005052455F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=48 marras 16 18:22:48 localhost.localdomain audit[853]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55a520013b70 items=0 ppid=414 pid=853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100505245524F5554494E475F5A4F4E4553002D74006E6174002D69002B002D67005052455F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=49 marras 16 18:22:48 localhost.localdomain audit[854]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55f0faa81ec0 items=0 ppid=414 pid=854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4100504F5354524F5554494E475F5A4F4E4553002D74006E6174002D6F002B002D6700504F53545F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=49 marras 16 18:22:48 localhost.localdomain audit[855]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55979e9d8d60 items=0 ppid=414 pid=855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100504F5354524F5554494E475F5A4F4E4553002D74006E6174002D6F002B002D6700504F53545F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=38 marras 16 18:22:48 localhost.localdomain audit[856]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557792ff12a0 items=0 ppid=414 pid=856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4100505245524F5554494E475F5A4F4E4553002D74006D616E676C65002D69002B002D67005052455F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=38 marras 16 18:22:48 localhost.localdomain audit[857]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5590959c0de0 items=0 ppid=414 pid=857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4100505245524F5554494E475F5A4F4E4553002D74006D616E676C65002D69002B002D67005052455F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=81 marras 16 18:22:48 localhost.localdomain audit[859]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=56196cc735c0 items=0 ppid=414 pid=859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900464F52574152445F494E5F5A4F4E45530031002D740066696C746572002D6900656E7332002D6700465744495F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=82 marras 16 18:22:48 localhost.localdomain audit[860]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55ae229d0400 items=0 ppid=414 pid=860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900464F52574152445F494E5F5A4F4E45530031002D740066696C746572002D6900656E7332002D6700465744495F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=82 marras 16 18:22:48 localhost.localdomain audit[861]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5610455c1730 items=0 ppid=414 pid=861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900494E5055545F5A4F4E45530031002D740066696C746572002D6900656E7332002D6700494E5F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=83 marras 16 18:22:48 localhost.localdomain audit[862]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5607fbfc45f0 items=0 ppid=414 pid=862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900494E5055545F5A4F4E45530031002D740066696C746572002D6900656E7332002D6700494E5F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=83 marras 16 18:22:48 localhost.localdomain audit[863]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=55b1368ea8b0 items=0 ppid=414 pid=863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900464F52574152445F4F55545F5A4F4E45530031002D740066696C746572002D6F00656E7332002D67004657444F5F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=84 marras 16 18:22:48 localhost.localdomain audit[864]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=5555977e07e0 items=0 ppid=414 pid=864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900464F52574152445F4F55545F5A4F4E45530031002D740066696C746572002D6F00656E7332002D67004657444F5F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=50 marras 16 18:22:48 localhost.localdomain audit[865]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=555aacc41030 items=0 ppid=414 pid=865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900505245524F5554494E475F5A4F4E45530031002D74006E6174002D6900656E7332002D67005052455F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=50 marras 16 18:22:48 localhost.localdomain audit[866]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=562df0fecf50 items=0 ppid=414 pid=866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900505245524F5554494E475F5A4F4E45530031002D74006E6174002D6900656E7332002D67005052455F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=51 marras 16 18:22:48 localhost.localdomain audit[867]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=5570470541b0 items=0 ppid=414 pid=867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900504F5354524F5554494E475F5A4F4E45530031002D74006E6174002D6F00656E7332002D6700504F53545F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=51 marras 16 18:22:48 localhost.localdomain audit[868]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=55fe008c3140 items=0 ppid=414 pid=868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900504F5354524F5554494E475F5A4F4E45530031002D74006E6174002D6F00656E7332002D6700504F53545F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=39 marras 16 18:22:48 localhost.localdomain audit[869]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=557df1f59420 items=0 ppid=414 pid=869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F69707461626C6573002D77002D4900505245524F5554494E475F5A4F4E45530031002D74006D616E676C65002D6900656E7332002D67005052455F7075626C6963 marras 16 18:22:48 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=39 marras 16 18:22:48 localhost.localdomain audit[870]: SYSCALL arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=557cb1e95fd0 items=0 ppid=414 pid=870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) marras 16 18:22:48 localhost.localdomain audit: PROCTITLE proctitle=2F7362696E2F6970367461626C6573002D77002D4900505245524F5554494E475F5A4F4E45530031002D74006D616E676C65002D6900656E7332002D67005052455F7075626C6963 marras 16 18:22:48 localhost.localdomain NetworkManager[491]: (ens2): device state change: config -> ip-config (reason 'none') [50 70 0] marras 16 18:22:48 localhost.localdomain NetworkManager[491]: Activation (ens2) Beginning DHCPv4 transaction (timeout in 45 seconds) marras 16 18:22:48 localhost.localdomain NetworkManager[491]: dhclient started with pid 871 marras 16 18:22:48 localhost.localdomain dhclient[871]: Created duid \000\001\000\001\035\334\277X\236\000P\035\000\002. marras 16 18:22:48 localhost.localdomain dhclient[871]: DHCPDISCOVER on ens2 to 255.255.255.255 port 67 interval 5 (xid=0x71d8ff65) marras 16 18:22:50 localhost.localdomain dhclient[871]: DHCPREQUEST on ens2 to 255.255.255.255 port 67 (xid=0x71d8ff65) marras 16 18:22:50 localhost.localdomain dhclient[871]: DHCPOFFER from 10.111.112.1 marras 16 18:22:50 localhost.localdomain dhclient[871]: DHCPACK from 10.111.112.1 (xid=0x71d8ff65) marras 16 18:22:50 localhost.localdomain NetworkManager[491]: address 10.111.121.104 marras 16 18:22:50 localhost.localdomain NetworkManager[491]: plen 20 (255.255.240.0) marras 16 18:22:50 localhost.localdomain NetworkManager[491]: gateway 10.111.112.1 marras 16 18:22:50 localhost.localdomain NetworkManager[491]: server identifier 10.111.112.1 marras 16 18:22:50 localhost.localdomain NetworkManager[491]: lease time 3600 marras 16 18:22:50 localhost.localdomain NetworkManager[491]: nameserver '10.111.112.1' marras 16 18:22:50 localhost.localdomain NetworkManager[491]: domain name 'cockpit.lan' marras 16 18:22:50 localhost.localdomain NetworkManager[491]: (ens2): DHCPv4 state changed unknown -> bound marras 16 18:22:50 localhost.localdomain NetworkManager[491]: (ens2): device state change: ip-config -> ip-check (reason 'none') [70 80 0] marras 16 18:22:50 localhost.localdomain dbus[417]: [system] Activating via systemd: service name='org.freedesktop.nm_dispatcher' unit='dbus-org.freedesktop.nm-dispatcher.service' marras 16 18:22:50 localhost.localdomain systemd[1]: Starting Network Manager Script Dispatcher Service... marras 16 18:22:50 localhost.localdomain dhclient[871]: bound to 10.111.121.104 -- renewal in 1535 seconds. marras 16 18:22:50 localhost.localdomain dbus[417]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher' marras 16 18:22:50 localhost.localdomain kernel: audit_printk_skb: 3216 callbacks suppressed marras 16 18:22:50 localhost.localdomain kernel: audit: type=1130 audit(1447690970.943:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:50 localhost.localdomain systemd[1]: Started Network Manager Script Dispatcher Service. marras 16 18:22:50 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:50 localhost.localdomain nm-dispatcher[880]: Dispatching action 'pre-up' for ens2 marras 16 18:22:50 localhost.localdomain NetworkManager[491]: (ens2): device state change: ip-check -> secondaries (reason 'none') [80 90 0] marras 16 18:22:50 localhost.localdomain NetworkManager[491]: (ens2): device state change: secondaries -> activated (reason 'none') [90 100 0] marras 16 18:22:50 localhost.localdomain NetworkManager[491]: NetworkManager state is now CONNECTED_LOCAL marras 16 18:22:50 localhost.localdomain NetworkManager[491]: NetworkManager state is now CONNECTED_GLOBAL marras 16 18:22:50 localhost.localdomain NetworkManager[491]: Policy set 'ens2' (ens2) as default for IPv4 routing and DNS. marras 16 18:22:50 localhost.localdomain NetworkManager[491]: (ens2): Activation: successful, device activated. marras 16 18:22:50 localhost.localdomain nm-dispatcher[880]: Dispatching action 'up' for ens2 marras 16 18:22:51 localhost.localdomain systemd[1]: iscsi.service: Unit cannot be reloaded because it is inactive. marras 16 18:22:51 localhost.localdomain systemd-vconsole-setup[437]: /usr/bin/setfont failed with error code 71. marras 16 18:22:51 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:22:51 localhost.localdomain systemd[1]: Created slice system-sshd.slice. marras 16 18:22:51 localhost.localdomain systemd[1]: Starting system-sshd.slice. marras 16 18:22:51 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.112.1:60520). marras 16 18:22:51 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@1-10.111.121.104:22-10.111.112.1:60520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain kernel: audit: type=1130 audit(1447690971.340:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@1-10.111.121.104:22-10.111.112.1:60520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.112.1:60520)... marras 16 18:22:51 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.112.1:60518). marras 16 18:22:51 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@0-10.111.121.104:22-10.111.112.1:60518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain kernel: audit: type=1130 audit(1447690971.353:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@0-10.111.121.104:22-10.111.112.1:60518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.112.1:60518)... marras 16 18:22:51 localhost.localdomain systemd-udevd[430]: Process '/usr/lib/systemd/systemd-vconsole-setup' failed with exit code 1. marras 16 18:22:51 localhost.localdomain sshd[907]: Did not receive identification string from 10.111.112.1 marras 16 18:22:51 localhost.localdomain audit[907]: CRYPTO_KEY_USER pid=907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain kernel: audit: type=2404 audit(1447690971.386:424): pid=907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[907]: CRYPTO_KEY_USER pid=907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain kernel: audit: type=2404 audit(1447690971.390:425): pid=907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain kernel: audit: type=2404 audit(1447690971.395:426): pid=908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[908]: CRYPTO_KEY_USER pid=908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain kernel: audit: type=2404 audit(1447690971.399:427): pid=907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[907]: CRYPTO_KEY_USER pid=907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain kernel: audit: type=2404 audit(1447690971.402:428): pid=908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[908]: CRYPTO_KEY_USER pid=908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@0-10.111.121.104:22-10.111.112.1:60518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain kernel: audit: type=1131 audit(1447690971.410:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@0-10.111.121.104:22-10.111.112.1:60518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[908]: CRYPTO_KEY_USER pid=908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain kernel: audit: type=2404 audit(1447690971.413:430): pid=908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[906]: CRYPTO_SESSION pid=906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256@libssh.org spid=908 suid=74 rport=60520 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[906]: CRYPTO_SESSION pid=906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256@libssh.org spid=908 suid=74 rport=60520 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[906]: USER_AUTH pid=906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=ssh res=failed' marras 16 18:22:51 localhost.localdomain audit[906]: USER_AUTH pid=906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60520 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[906]: USER_AUTH pid=906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:9f:56:13:c5:13:01:2d:a6:68:73:6b:e6:47:2f:b5:fe:18:3d:8e:b2:4d:81:47:50:79:2c:c9:1d:3b:a2:29:46 rport=60520 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[906]: USER_ACCT pid=906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain sshd[906]: Accepted publickey for root from 10.111.112.1 port 60520 ssh2: RSA SHA256:n1YTxRMBLaZoc2vmRy+1/hg9jrJNgUdQeSzJHTuiKUY marras 16 18:22:51 localhost.localdomain audit[906]: CRYPTO_KEY_USER pid=906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=908 suid=74 rport=60520 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[906]: USER_AUTH pid=906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[906]: CRED_ACQ pid=906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_reauthorize acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[906]: USER_ROLE_CHANGE pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:22:51 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:22:51 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:22:51 localhost.localdomain systemd-logind[415]: New session 1 of user root. marras 16 18:22:51 localhost.localdomain systemd[1]: Created slice user-0.slice. marras 16 18:22:51 localhost.localdomain systemd[1]: Starting user-0.slice. marras 16 18:22:51 localhost.localdomain systemd[1]: Started Session 1 of user root. marras 16 18:22:51 localhost.localdomain systemd[1]: Starting Session 1 of user root. marras 16 18:22:51 localhost.localdomain systemd[1]: Starting User Manager for UID 0... marras 16 18:22:51 localhost.localdomain audit[913]: USER_ACCT pid=913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain systemd[913]: pam_unix(systemd-user:session): session opened for user root by (uid=0) marras 16 18:22:51 localhost.localdomain audit[913]: USER_START pid=913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain systemd[913]: Reached target Sockets. marras 16 18:22:51 localhost.localdomain systemd[913]: Starting Sockets. marras 16 18:22:51 localhost.localdomain systemd[913]: Reached target Timers. marras 16 18:22:51 localhost.localdomain systemd[913]: Starting Timers. marras 16 18:22:51 localhost.localdomain systemd[913]: Reached target Paths. marras 16 18:22:51 localhost.localdomain systemd[913]: Starting Paths. marras 16 18:22:51 localhost.localdomain systemd[913]: Reached target Basic System. marras 16 18:22:51 localhost.localdomain systemd[913]: Starting Basic System. marras 16 18:22:51 localhost.localdomain systemd[913]: Reached target Default. marras 16 18:22:51 localhost.localdomain systemd[913]: Startup finished in 20ms. marras 16 18:22:51 localhost.localdomain systemd[1]: Started User Manager for UID 0. marras 16 18:22:51 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain sshd[906]: pam_unix(sshd:session): session opened for user root by (uid=0) marras 16 18:22:51 localhost.localdomain audit[906]: USER_START pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[918]: CRYPTO_KEY_USER pid=918 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain systemd[913]: Starting Default. marras 16 18:22:51 localhost.localdomain audit[918]: CRYPTO_KEY_USER pid=918 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[918]: CRYPTO_KEY_USER pid=918 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[918]: CRED_ACQ pid=918 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_reauthorize acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[906]: USER_LOGIN pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[906]: USER_START pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[906]: CRYPTO_KEY_USER pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain sshd[918]: Received disconnect from 10.111.112.1: 11: disconnected by user marras 16 18:22:51 localhost.localdomain sshd[918]: Disconnected from 10.111.112.1 marras 16 18:22:51 localhost.localdomain audit[906]: CRYPTO_KEY_USER pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[906]: CRYPTO_KEY_USER pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=918 suid=0 rport=60520 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain sshd[906]: pam_unix(sshd:session): session closed for user root marras 16 18:22:51 localhost.localdomain audit[906]: USER_END pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[906]: CRED_DISP pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_reauthorize acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[906]: USER_END pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[906]: USER_LOGOUT pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:22:51 localhost.localdomain audit[906]: CRYPTO_KEY_USER pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[906]: CRYPTO_KEY_USER pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[906]: CRYPTO_KEY_USER pid=906 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:22:51 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@1-10.111.121.104:22-10.111.112.1:60520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain systemd-logind[415]: Removed session 1. marras 16 18:22:51 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission stop for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:22:51 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission stop for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:22:51 localhost.localdomain systemd[913]: Stopped target Default. marras 16 18:22:51 localhost.localdomain systemd[913]: Stopping Default. marras 16 18:22:51 localhost.localdomain systemd[913]: Reached target Shutdown. marras 16 18:22:51 localhost.localdomain systemd[913]: Starting Shutdown. marras 16 18:22:51 localhost.localdomain systemd[913]: Starting Exit the Session... marras 16 18:22:51 localhost.localdomain systemd[913]: Stopped target Basic System. marras 16 18:22:51 localhost.localdomain systemd[913]: Stopping Basic System. marras 16 18:22:51 localhost.localdomain systemd[913]: Stopped target Paths. marras 16 18:22:51 localhost.localdomain systemd[913]: Stopping Paths. marras 16 18:22:51 localhost.localdomain systemd[913]: Stopped target Timers. marras 16 18:22:51 localhost.localdomain systemd[913]: Stopping Timers. marras 16 18:22:51 localhost.localdomain systemd[913]: Stopped target Sockets. marras 16 18:22:51 localhost.localdomain systemd[913]: Stopping Sockets. marras 16 18:22:51 localhost.localdomain systemd[1]: Stopping User Manager for UID 0... marras 16 18:22:51 localhost.localdomain systemd[913]: Received SIGRTMIN+24 from PID 929 (kill). marras 16 18:22:51 localhost.localdomain systemd[1]: Stopped User Manager for UID 0. marras 16 18:22:51 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:51 localhost.localdomain systemd[1]: Removed slice user-0.slice. marras 16 18:22:51 localhost.localdomain systemd[1]: Stopping user-0.slice. marras 16 18:22:52 localhost.localdomain NetworkManager[491]: startup complete marras 16 18:22:55 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:22:55 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49238). marras 16 18:22:55 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@2-10.111.121.104:22-10.111.121.103:49238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:55 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49238)... marras 16 18:22:55 localhost.localdomain audit[936]: CRYPTO_KEY_USER pid=936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[936]: CRYPTO_KEY_USER pid=936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[936]: CRYPTO_KEY_USER pid=936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[935]: CRYPTO_SESSION pid=935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=936 suid=74 rport=49238 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[935]: CRYPTO_SESSION pid=935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=936 suid=74 rport=49238 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain sshd[935]: Connection closed by 10.111.121.103 [preauth] marras 16 18:22:55 localhost.localdomain audit[935]: CRYPTO_KEY_USER pid=935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=936 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[935]: CRYPTO_KEY_USER pid=935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=936 suid=74 rport=49238 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[935]: CRYPTO_KEY_USER pid=935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[935]: CRYPTO_KEY_USER pid=935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[935]: CRYPTO_KEY_USER pid=935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[935]: USER_LOGIN pid=935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:22:55 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@2-10.111.121.104:22-10.111.121.103:49238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:55 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:22:55 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49240). marras 16 18:22:55 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@3-10.111.121.104:22-10.111.121.103:49240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:55 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49240)... marras 16 18:22:55 localhost.localdomain audit[941]: CRYPTO_KEY_USER pid=941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[941]: CRYPTO_KEY_USER pid=941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[941]: CRYPTO_KEY_USER pid=941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[940]: CRYPTO_SESSION pid=940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=941 suid=74 rport=49240 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[940]: CRYPTO_SESSION pid=940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=941 suid=74 rport=49240 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[940]: USER_AUTH pid=940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=pam_unix acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:55 localhost.localdomain audit[940]: USER_ACCT pid=940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:55 localhost.localdomain sshd[940]: Accepted password for admin from 10.111.121.103 port 49240 ssh2 marras 16 18:22:55 localhost.localdomain audit[940]: CRYPTO_KEY_USER pid=940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=941 suid=74 rport=49240 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain audit[940]: USER_AUTH pid=940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:55 localhost.localdomain audit[940]: CRED_ACQ pid=940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:55 localhost.localdomain audit[940]: USER_ROLE_CHANGE pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:55 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:22:55 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:22:55 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:22:55 localhost.localdomain systemd-logind[415]: New session 2 of user admin. marras 16 18:22:55 localhost.localdomain systemd[1]: Created slice user-1000.slice. marras 16 18:22:55 localhost.localdomain systemd[1]: Starting user-1000.slice. marras 16 18:22:55 localhost.localdomain systemd[1]: Started Session 2 of user admin. marras 16 18:22:55 localhost.localdomain systemd[1]: Starting Session 2 of user admin. marras 16 18:22:55 localhost.localdomain systemd[1]: Starting User Manager for UID 1000... marras 16 18:22:55 localhost.localdomain audit[945]: USER_ACCT pid=945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:55 localhost.localdomain systemd[945]: pam_unix(systemd-user:session): session opened for user admin by (uid=0) marras 16 18:22:55 localhost.localdomain audit[945]: USER_START pid=945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:55 localhost.localdomain systemd[945]: Reached target Paths. marras 16 18:22:55 localhost.localdomain sshd[940]: pam_unix(sshd:session): session opened for user admin by (uid=0) marras 16 18:22:55 localhost.localdomain systemd[945]: Starting Paths. marras 16 18:22:55 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:55 localhost.localdomain systemd[945]: Reached target Sockets. marras 16 18:22:55 localhost.localdomain audit[940]: USER_START pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog,pam_reauthorize acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:55 localhost.localdomain systemd[945]: Starting Sockets. marras 16 18:22:55 localhost.localdomain audit[950]: CRYPTO_KEY_USER pid=950 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain systemd[945]: Reached target Timers. marras 16 18:22:55 localhost.localdomain audit[950]: CRYPTO_KEY_USER pid=950 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain systemd[945]: Starting Timers. marras 16 18:22:55 localhost.localdomain audit[950]: CRYPTO_KEY_USER pid=950 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain systemd[945]: Reached target Basic System. marras 16 18:22:55 localhost.localdomain audit[950]: CRED_ACQ pid=950 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:55 localhost.localdomain systemd[945]: Starting Basic System. marras 16 18:22:55 localhost.localdomain systemd[945]: Reached target Default. marras 16 18:22:55 localhost.localdomain systemd[945]: Startup finished in 16ms. marras 16 18:22:55 localhost.localdomain systemd[1]: Started User Manager for UID 1000. marras 16 18:22:55 localhost.localdomain systemd[945]: Starting Default. marras 16 18:22:55 localhost.localdomain audit[940]: USER_LOGIN pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:55 localhost.localdomain audit[940]: USER_START pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:55 localhost.localdomain audit[940]: CRYPTO_KEY_USER pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=951 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:55 localhost.localdomain polkitd[527]: Registered Authentication Agent for unix-session:2 (system bus name :1.10 [cockpit-bridge], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) marras 16 18:22:55 localhost.localdomain cockpit-bridge[951]: Reauthorizing unix-user:admin marras 16 18:22:56 localhost.localdomain cockpit-bridge[951]: cockpit-polkit: user admin was reauthorized marras 16 18:22:56 localhost.localdomain cockpit-bridge[951]: cockpit-polkit helper exited with status: 0 marras 16 18:22:56 localhost.localdomain polkitd[527]: Operator of unix-session:2 successfully authenticated as unix-user:admin to gain ONE-SHOT authorization for action org.freedesktop.policykit.exec for unix-process:951:1772 [cockpit-bridge] (owned by unix-user:admin) marras 16 18:22:56 localhost.localdomain pkexec[974]: pam_systemd(polkit-1:session): Cannot create session: Already running in a session marras 16 18:22:56 localhost.localdomain pkexec[974]: pam_unix(polkit-1:session): session opened for user root by (uid=1000) marras 16 18:22:56 localhost.localdomain audit[974]: USER_START pid=974 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain pkexec[974]: admin: Executing command [USER=root] [TTY=unknown] [CWD=/run/user/1000] [COMMAND=/usr/bin/cockpit-bridge --privileged] marras 16 18:22:56 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:22:56 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49242). marras 16 18:22:56 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@4-10.111.121.104:22-10.111.121.103:49242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49242)... marras 16 18:22:56 localhost.localdomain audit[990]: CRYPTO_KEY_USER pid=990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[990]: CRYPTO_KEY_USER pid=990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[990]: CRYPTO_KEY_USER pid=990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[989]: CRYPTO_SESSION pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=990 suid=74 rport=49242 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[989]: CRYPTO_SESSION pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=990 suid=74 rport=49242 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain kernel: audit_printk_skb: 255 callbacks suppressed marras 16 18:22:56 localhost.localdomain kernel: audit: type=1100 audit(1447690976.541:516): pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=pam_unix acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain audit[989]: USER_AUTH pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=pam_unix acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain audit[999]: USER_MGMT pid=999 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="admin" acct="admin" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain kernel: audit: type=1102 audit(1447690976.548:517): pid=999 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="admin" acct="admin" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain usermod[999]: add 'admin' to group 'admin' marras 16 18:22:56 localhost.localdomain audit[999]: USER_MGMT pid=999 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="admin" acct="admin" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain kernel: audit: type=1102 audit(1447690976.563:518): pid=999 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="admin" acct="admin" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[989]: USER_ACCT pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain usermod[999]: add 'admin' to shadow group 'admin' marras 16 18:22:56 localhost.localdomain kernel: audit: type=1101 audit(1447690976.566:519): pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain sshd[989]: Accepted password for admin from 10.111.121.103 port 49242 ssh2 marras 16 18:22:56 localhost.localdomain audit[989]: CRYPTO_KEY_USER pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=990 suid=74 rport=49242 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain kernel: audit: type=2404 audit(1447690976.585:520): pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=990 suid=74 rport=49242 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[989]: USER_AUTH pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain kernel: audit: type=1100 audit(1447690976.598:521): pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain audit[989]: CRED_ACQ pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain kernel: audit: type=1103 audit(1447690976.608:522): pid=989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain kernel: audit: type=1006 audit(1447690976.616:523): pid=989 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 old-ses=4294967295 ses=3 res=1 marras 16 18:22:56 localhost.localdomain audit[1005]: USER_MGMT pid=1005 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="root" acct="root" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain kernel: audit: type=1102 audit(1447690976.651:524): pid=1005 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="root" acct="root" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain usermod[1005]: add 'root' to group 'root' marras 16 18:22:56 localhost.localdomain audit[1005]: USER_MGMT pid=1005 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="root" acct="root" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain kernel: audit: type=1102 audit(1447690976.660:525): pid=1005 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="root" acct="root" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain usermod[1005]: add 'root' to shadow group 'root' marras 16 18:22:56 localhost.localdomain audit[989]: USER_ROLE_CHANGE pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:22:56 localhost.localdomain systemd-logind[415]: New session 3 of user admin. marras 16 18:22:56 localhost.localdomain systemd[1]: Started Session 3 of user admin. marras 16 18:22:56 localhost.localdomain sshd[989]: pam_unix(sshd:session): session opened for user admin by (uid=0) marras 16 18:22:56 localhost.localdomain audit[989]: USER_START pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog,pam_reauthorize acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain audit[1011]: CRYPTO_KEY_USER pid=1011 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain systemd[1]: Starting Session 3 of user admin. marras 16 18:22:56 localhost.localdomain audit[1011]: CRYPTO_KEY_USER pid=1011 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[1011]: CRYPTO_KEY_USER pid=1011 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[1011]: CRED_ACQ pid=1011 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain audit[989]: USER_LOGIN pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain audit[989]: USER_START pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain audit[989]: CRYPTO_KEY_USER pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1012 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain polkitd[527]: Registered Authentication Agent for unix-session:3 (system bus name :1.16 [cockpit-bridge], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) marras 16 18:22:56 localhost.localdomain dbus[417]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' marras 16 18:22:56 localhost.localdomain systemd[1]: Starting Hostname Service... marras 16 18:22:56 localhost.localdomain audit: NETFILTER_CFG table=filter family=2 entries=0 marras 16 18:22:56 localhost.localdomain audit: NETFILTER_CFG table=nat family=2 entries=0 marras 16 18:22:56 localhost.localdomain audit: NETFILTER_CFG table=mangle family=2 entries=0 marras 16 18:22:56 localhost.localdomain audit: NETFILTER_CFG table=raw family=2 entries=0 marras 16 18:22:56 localhost.localdomain audit: NETFILTER_CFG table=security family=2 entries=0 marras 16 18:22:56 localhost.localdomain audit: NETFILTER_CFG table=filter family=10 entries=0 marras 16 18:22:56 localhost.localdomain audit: NETFILTER_CFG table=nat family=10 entries=0 marras 16 18:22:56 localhost.localdomain audit: NETFILTER_CFG table=mangle family=10 entries=0 marras 16 18:22:56 localhost.localdomain audit: NETFILTER_CFG table=raw family=10 entries=0 marras 16 18:22:56 localhost.localdomain audit: NETFILTER_CFG table=security family=10 entries=0 marras 16 18:22:56 localhost.localdomain audit[1035]: SYSCALL arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7ffd61a39260 a2=fffffffffffffff5 a3=60 items=0 ppid=1 pid=1035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(ostnamed)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null) marras 16 18:22:56 localhost.localdomain audit: PROCTITLE proctitle="(ostnamed)" marras 16 18:22:56 localhost.localdomain dbus[417]: [system] Successfully activated service 'org.freedesktop.hostname1' marras 16 18:22:56 localhost.localdomain systemd[1]: Started Hostname Service. marras 16 18:22:56 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:56 localhost.localdomain polkitd[527]: Unregistered Authentication Agent for unix-session:2 (system bus name :1.10, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) marras 16 18:22:56 localhost.localdomain audit[940]: USER_END pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain audit[940]: USER_LOGOUT pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain sshd[950]: Received disconnect from 10.111.121.103: 11: Bye Bye marras 16 18:22:56 localhost.localdomain sshd[950]: Disconnected from 10.111.121.103 marras 16 18:22:56 localhost.localdomain audit[940]: CRYPTO_KEY_USER pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[940]: CRYPTO_KEY_USER pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=950 suid=1000 rport=49240 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain sshd[940]: pam_unix(sshd:session): session closed for user admin marras 16 18:22:56 localhost.localdomain audit[940]: USER_END pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog,pam_reauthorize acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain polkitd[527]: Unregistered Authentication Agent for unix-session:3 (system bus name :1.16, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) marras 16 18:22:56 localhost.localdomain audit[940]: CRED_DISP pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:56 localhost.localdomain audit[940]: CRYPTO_KEY_USER pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[940]: CRYPTO_KEY_USER pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:56 localhost.localdomain audit[940]: CRYPTO_KEY_USER pid=940 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:57 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@3-10.111.121.104:22-10.111.121.103:49240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:22:57 localhost.localdomain audit[989]: USER_END pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:57 localhost.localdomain audit[989]: USER_LOGOUT pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:57 localhost.localdomain audit[989]: CRYPTO_KEY_USER pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1011 suid=1000 rport=49242 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:57 localhost.localdomain audit[989]: CRYPTO_KEY_USER pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1011 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:57 localhost.localdomain sshd[989]: pam_unix(sshd:session): session closed for user admin marras 16 18:22:57 localhost.localdomain audit[989]: USER_END pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog,pam_reauthorize acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:57 localhost.localdomain audit[989]: CRED_DISP pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_unix acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=success' marras 16 18:22:57 localhost.localdomain audit[989]: CRYPTO_KEY_USER pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:57 localhost.localdomain audit[989]: CRYPTO_KEY_USER pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:57 localhost.localdomain audit[989]: CRYPTO_KEY_USER pid=989 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:22:57 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@4-10.111.121.104:22-10.111.121.103:49242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:01 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:03 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:03 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.112.1:60632). marras 16 18:23:03 localhost.localdomain kernel: audit_printk_skb: 132 callbacks suppressed marras 16 18:23:03 localhost.localdomain kernel: audit: type=1130 audit(1447690983.201:559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@5-10.111.121.104:22-10.111.112.1:60632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@5-10.111.121.104:22-10.111.112.1:60632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:03 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.112.1:60632)... marras 16 18:23:03 localhost.localdomain audit[1042]: CRYPTO_KEY_USER pid=1042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain kernel: audit: type=2404 audit(1447690983.226:560): pid=1042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain kernel: audit: type=2404 audit(1447690983.230:561): pid=1042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1042]: CRYPTO_KEY_USER pid=1042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1042]: CRYPTO_KEY_USER pid=1042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain kernel: audit: type=2404 audit(1447690983.233:562): pid=1042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: CRYPTO_SESSION pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256@libssh.org spid=1042 suid=74 rport=60632 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain kernel: audit: type=2407 audit(1447690983.258:563): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256@libssh.org spid=1042 suid=74 rport=60632 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain kernel: audit: type=2407 audit(1447690983.263:564): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256@libssh.org spid=1042 suid=74 rport=60632 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: CRYPTO_SESSION pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256@libssh.org spid=1042 suid=74 rport=60632 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: USER_AUTH pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=ssh res=failed' marras 16 18:23:03 localhost.localdomain kernel: audit: type=1100 audit(1447690983.337:565): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=ssh res=failed' marras 16 18:23:03 localhost.localdomain audit[1041]: USER_AUTH pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain kernel: audit: type=1100 audit(1447690983.343:566): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain kernel: audit: type=1100 audit(1447690983.346:567): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:9f:56:13:c5:13:01:2d:a6:68:73:6b:e6:47:2f:b5:fe:18:3d:8e:b2:4d:81:47:50:79:2c:c9:1d:3b:a2:29:46 rport=60632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: USER_AUTH pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:9f:56:13:c5:13:01:2d:a6:68:73:6b:e6:47:2f:b5:fe:18:3d:8e:b2:4d:81:47:50:79:2c:c9:1d:3b:a2:29:46 rport=60632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: USER_ACCT pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain kernel: audit: type=1101 audit(1447690983.370:568): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain sshd[1041]: Accepted publickey for root from 10.111.112.1 port 60632 ssh2: RSA SHA256:n1YTxRMBLaZoc2vmRy+1/hg9jrJNgUdQeSzJHTuiKUY marras 16 18:23:03 localhost.localdomain audit[1041]: CRYPTO_KEY_USER pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1042 suid=74 rport=60632 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: USER_AUTH pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: CRED_ACQ pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_reauthorize acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: USER_ROLE_CHANGE pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:23:03 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:23:03 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:23:03 localhost.localdomain systemd-logind[415]: New session 4 of user root. marras 16 18:23:03 localhost.localdomain systemd[1]: Created slice user-0.slice. marras 16 18:23:03 localhost.localdomain systemd[1]: Starting user-0.slice. marras 16 18:23:03 localhost.localdomain systemd[1]: Started Session 4 of user root. marras 16 18:23:03 localhost.localdomain systemd[1]: Starting Session 4 of user root. marras 16 18:23:03 localhost.localdomain systemd[1]: Starting User Manager for UID 0... marras 16 18:23:03 localhost.localdomain audit[1045]: USER_ACCT pid=1045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:03 localhost.localdomain systemd[1045]: pam_unix(systemd-user:session): session opened for user root by (uid=0) marras 16 18:23:03 localhost.localdomain audit[1045]: USER_START pid=1045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:03 localhost.localdomain systemd[1045]: Reached target Timers. marras 16 18:23:03 localhost.localdomain systemd[1045]: Starting Timers. marras 16 18:23:03 localhost.localdomain systemd[1045]: Reached target Paths. marras 16 18:23:03 localhost.localdomain systemd[1045]: Starting Paths. marras 16 18:23:03 localhost.localdomain systemd[1045]: Reached target Sockets. marras 16 18:23:03 localhost.localdomain systemd[1045]: Starting Sockets. marras 16 18:23:03 localhost.localdomain systemd[1045]: Reached target Basic System. marras 16 18:23:03 localhost.localdomain systemd[1045]: Starting Basic System. marras 16 18:23:03 localhost.localdomain systemd[1045]: Reached target Default. marras 16 18:23:03 localhost.localdomain systemd[1045]: Startup finished in 50ms. marras 16 18:23:03 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:03 localhost.localdomain systemd[1]: Started User Manager for UID 0. marras 16 18:23:03 localhost.localdomain sshd[1041]: pam_unix(sshd:session): session opened for user root by (uid=0) marras 16 18:23:03 localhost.localdomain audit[1041]: USER_START pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain systemd[1045]: Starting Default. marras 16 18:23:03 localhost.localdomain audit[1050]: CRYPTO_KEY_USER pid=1050 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1050]: CRYPTO_KEY_USER pid=1050 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1050]: CRYPTO_KEY_USER pid=1050 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1050]: CRED_ACQ pid=1050 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_reauthorize acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: USER_LOGIN pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: USER_START pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: CRYPTO_KEY_USER pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain passwd[1059]: pam_unix(passwd:chauthtok): password changed for admin marras 16 18:23:03 localhost.localdomain audit[1059]: USER_CHAUTHTOK pid=1059 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=PAM:chauthtok grantors=pam_pwquality,pam_unix acct="admin" exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1059]: USER_CHAUTHTOK pid=1059 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=change password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success' marras 16 18:23:03 localhost.localdomain sshd[1050]: Received disconnect from 10.111.112.1: 11: disconnected by user marras 16 18:23:03 localhost.localdomain sshd[1050]: Disconnected from 10.111.112.1 marras 16 18:23:03 localhost.localdomain audit[1041]: CRYPTO_KEY_USER pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: CRYPTO_KEY_USER pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1050 suid=0 rport=60632 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain sshd[1041]: pam_unix(sshd:session): session closed for user root marras 16 18:23:03 localhost.localdomain audit[1041]: USER_END pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: CRED_DISP pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_reauthorize acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: USER_END pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: USER_LOGOUT pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: CRYPTO_KEY_USER pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: CRYPTO_KEY_USER pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1041]: CRYPTO_KEY_USER pid=1041 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:23:03 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@5-10.111.121.104:22-10.111.112.1:60632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:03 localhost.localdomain systemd-logind[415]: Removed session 4. marras 16 18:23:03 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission stop for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:23:03 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission stop for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:23:03 localhost.localdomain systemd[1045]: Stopped target Default. marras 16 18:23:03 localhost.localdomain systemd[1045]: Stopping Default. marras 16 18:23:03 localhost.localdomain systemd[1045]: Reached target Shutdown. marras 16 18:23:03 localhost.localdomain systemd[1045]: Starting Shutdown. marras 16 18:23:03 localhost.localdomain systemd[1045]: Starting Exit the Session... marras 16 18:23:03 localhost.localdomain systemd[1045]: Stopped target Basic System. marras 16 18:23:03 localhost.localdomain systemd[1045]: Stopping Basic System. marras 16 18:23:03 localhost.localdomain systemd[1045]: Stopped target Paths. marras 16 18:23:03 localhost.localdomain systemd[1045]: Stopping Paths. marras 16 18:23:03 localhost.localdomain systemd[1045]: Stopped target Sockets. marras 16 18:23:03 localhost.localdomain systemd[1045]: Stopping Sockets. marras 16 18:23:03 localhost.localdomain systemd[1045]: Stopped target Timers. marras 16 18:23:03 localhost.localdomain systemd[1045]: Stopping Timers. marras 16 18:23:03 localhost.localdomain systemd[1]: Stopping User Manager for UID 0... marras 16 18:23:03 localhost.localdomain systemd[1045]: Received SIGRTMIN+24 from PID 1066 (kill). marras 16 18:23:04 localhost.localdomain systemd[1]: Stopped User Manager for UID 0. marras 16 18:23:04 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:04 localhost.localdomain systemd[1]: Removed slice user-0.slice. marras 16 18:23:04 localhost.localdomain systemd[1]: Stopping user-0.slice. marras 16 18:23:08 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:08 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49282). marras 16 18:23:08 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@6-10.111.121.104:22-10.111.121.103:49282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:08 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49282)... marras 16 18:23:08 localhost.localdomain audit[1071]: CRYPTO_KEY_USER pid=1071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:08 localhost.localdomain audit[1071]: CRYPTO_KEY_USER pid=1071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:08 localhost.localdomain audit[1071]: CRYPTO_KEY_USER pid=1071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:08 localhost.localdomain audit[1070]: CRYPTO_SESSION pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1071 suid=74 rport=49282 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:08 localhost.localdomain audit[1070]: CRYPTO_SESSION pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1071 suid=74 rport=49282 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:08 localhost.localdomain kernel: audit_printk_skb: 120 callbacks suppressed marras 16 18:23:08 localhost.localdomain kernel: audit: type=1100 audit(1447690988.261:609): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:08 localhost.localdomain audit[1070]: USER_AUTH pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:08 localhost.localdomain audit[1070]: USER_AUTH pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:08 localhost.localdomain kernel: audit: type=1100 audit(1447690988.266:610): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:08 localhost.localdomain audit[1070]: USER_AUTH pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:08 localhost.localdomain kernel: audit: type=1100 audit(1447690988.272:611): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:08 localhost.localdomain unix_chkpwd[1072]: password check failed for user (admin) marras 16 18:23:08 localhost.localdomain sshd[1070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:08 localhost.localdomain audit[1070]: USER_AUTH pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:08 localhost.localdomain kernel: audit: type=1100 audit(1447690988.304:612): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:10 localhost.localdomain sshd[1070]: Failed password for admin from 10.111.121.103 port 49282 ssh2 marras 16 18:23:10 localhost.localdomain audit[1070]: USER_AUTH pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:10 localhost.localdomain kernel: audit: type=1100 audit(1447690990.337:613): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:10 localhost.localdomain sshd[1070]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:10 localhost.localdomain sshd[1070]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:10 localhost.localdomain audit[1070]: CRYPTO_KEY_USER pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1071 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain kernel: audit: type=2404 audit(1447690990.339:614): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1071 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1070]: CRYPTO_KEY_USER pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1071 suid=74 rport=49282 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain kernel: audit: type=2404 audit(1447690990.343:615): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1071 suid=74 rport=49282 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1070]: CRYPTO_KEY_USER pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain kernel: audit: type=2404 audit(1447690990.348:616): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain kernel: audit: type=2404 audit(1447690990.352:617): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1070]: CRYPTO_KEY_USER pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1070]: CRYPTO_KEY_USER pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1070]: USER_LOGIN pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:10 localhost.localdomain kernel: audit: type=2404 audit(1447690990.356:618): pid=1070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@6-10.111.121.104:22-10.111.121.103:49282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:10 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:10 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49286). marras 16 18:23:10 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@7-10.111.121.104:22-10.111.121.103:49286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:10 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49286)... marras 16 18:23:10 localhost.localdomain audit[1077]: CRYPTO_KEY_USER pid=1077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1077]: CRYPTO_KEY_USER pid=1077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1077]: CRYPTO_KEY_USER pid=1077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1076]: CRYPTO_SESSION pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1077 suid=74 rport=49286 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1076]: CRYPTO_SESSION pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1077 suid=74 rport=49286 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:10 localhost.localdomain audit[1076]: USER_AUTH pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:10 localhost.localdomain audit[1076]: USER_AUTH pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:10 localhost.localdomain audit[1076]: USER_AUTH pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:10 localhost.localdomain unix_chkpwd[1078]: password check failed for user (admin) marras 16 18:23:10 localhost.localdomain sshd[1076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:10 localhost.localdomain audit[1076]: USER_AUTH pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:12 localhost.localdomain sshd[1076]: Failed password for admin from 10.111.121.103 port 49286 ssh2 marras 16 18:23:12 localhost.localdomain audit[1076]: USER_AUTH pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:12 localhost.localdomain sshd[1076]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:12 localhost.localdomain sshd[1076]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:12 localhost.localdomain audit[1076]: CRYPTO_KEY_USER pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1077 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:12 localhost.localdomain audit[1076]: CRYPTO_KEY_USER pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1077 suid=74 rport=49286 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:12 localhost.localdomain audit[1076]: CRYPTO_KEY_USER pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:12 localhost.localdomain audit[1076]: CRYPTO_KEY_USER pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:12 localhost.localdomain audit[1076]: CRYPTO_KEY_USER pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:12 localhost.localdomain audit[1076]: USER_LOGIN pid=1076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:12 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@7-10.111.121.104:22-10.111.121.103:49286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:12 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:12 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49288). marras 16 18:23:12 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@8-10.111.121.104:22-10.111.121.103:49288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:12 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49288)... marras 16 18:23:12 localhost.localdomain audit[1083]: CRYPTO_KEY_USER pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:12 localhost.localdomain audit[1083]: CRYPTO_KEY_USER pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:12 localhost.localdomain audit[1083]: CRYPTO_KEY_USER pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:12 localhost.localdomain audit[1082]: CRYPTO_SESSION pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1083 suid=74 rport=49288 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:12 localhost.localdomain audit[1082]: CRYPTO_SESSION pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1083 suid=74 rport=49288 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:12 localhost.localdomain audit[1082]: USER_AUTH pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:12 localhost.localdomain audit[1082]: USER_AUTH pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:12 localhost.localdomain audit[1082]: USER_AUTH pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:12 localhost.localdomain unix_chkpwd[1084]: password check failed for user (admin) marras 16 18:23:12 localhost.localdomain sshd[1082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:12 localhost.localdomain audit[1082]: USER_AUTH pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:14 localhost.localdomain sshd[1082]: Failed password for admin from 10.111.121.103 port 49288 ssh2 marras 16 18:23:14 localhost.localdomain kernel: audit_printk_skb: 90 callbacks suppressed marras 16 18:23:14 localhost.localdomain kernel: audit: type=1100 audit(1447690994.252:649): pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:14 localhost.localdomain audit[1082]: USER_AUTH pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:14 localhost.localdomain sshd[1082]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:14 localhost.localdomain sshd[1082]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:14 localhost.localdomain audit[1082]: CRYPTO_KEY_USER pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1083 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain kernel: audit: type=2404 audit(1447690994.263:650): pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1083 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1082]: CRYPTO_KEY_USER pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1083 suid=74 rport=49288 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain kernel: audit: type=2404 audit(1447690994.270:651): pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1083 suid=74 rport=49288 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1082]: CRYPTO_KEY_USER pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain kernel: audit: type=2404 audit(1447690994.277:652): pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain kernel: audit: type=2404 audit(1447690994.283:653): pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1082]: CRYPTO_KEY_USER pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain kernel: audit: type=2404 audit(1447690994.291:654): pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1082]: CRYPTO_KEY_USER pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1082]: USER_LOGIN pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:14 localhost.localdomain kernel: audit: type=1112 audit(1447690994.295:655): pid=1082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:14 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@8-10.111.121.104:22-10.111.121.103:49288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:14 localhost.localdomain kernel: audit: type=1131 audit(1447690994.299:656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@8-10.111.121.104:22-10.111.121.103:49288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:14 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:14 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49290). marras 16 18:23:14 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@9-10.111.121.104:22-10.111.121.103:49290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:14 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49290)... marras 16 18:23:14 localhost.localdomain kernel: audit: type=1130 audit(1447690994.331:657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@9-10.111.121.104:22-10.111.121.103:49290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1089]: CRYPTO_KEY_USER pid=1089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1089]: CRYPTO_KEY_USER pid=1089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1089]: CRYPTO_KEY_USER pid=1089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain kernel: audit: type=2404 audit(1447690994.349:658): pid=1089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1088]: CRYPTO_SESSION pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1089 suid=74 rport=49290 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1088]: CRYPTO_SESSION pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1089 suid=74 rport=49290 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:14 localhost.localdomain audit[1088]: USER_AUTH pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:14 localhost.localdomain audit[1088]: USER_AUTH pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:14 localhost.localdomain audit[1088]: USER_AUTH pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:14 localhost.localdomain unix_chkpwd[1090]: password check failed for user (admin) marras 16 18:23:14 localhost.localdomain sshd[1088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:14 localhost.localdomain audit[1088]: USER_AUTH pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:16 localhost.localdomain sshd[1088]: Failed password for admin from 10.111.121.103 port 49290 ssh2 marras 16 18:23:16 localhost.localdomain audit[1088]: USER_AUTH pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:16 localhost.localdomain sshd[1088]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:16 localhost.localdomain sshd[1088]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:16 localhost.localdomain audit[1088]: CRYPTO_KEY_USER pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1089 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:16 localhost.localdomain audit[1088]: CRYPTO_KEY_USER pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1089 suid=74 rport=49290 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:16 localhost.localdomain audit[1088]: CRYPTO_KEY_USER pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:16 localhost.localdomain audit[1088]: CRYPTO_KEY_USER pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:16 localhost.localdomain audit[1088]: CRYPTO_KEY_USER pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:16 localhost.localdomain audit[1088]: USER_LOGIN pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:16 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@9-10.111.121.104:22-10.111.121.103:49290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:16 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:16 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49292). marras 16 18:23:16 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@10-10.111.121.104:22-10.111.121.103:49292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:16 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49292)... marras 16 18:23:16 localhost.localdomain audit[1095]: CRYPTO_KEY_USER pid=1095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:16 localhost.localdomain audit[1095]: CRYPTO_KEY_USER pid=1095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:16 localhost.localdomain audit[1095]: CRYPTO_KEY_USER pid=1095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:16 localhost.localdomain audit[1094]: CRYPTO_SESSION pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1095 suid=74 rport=49292 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:16 localhost.localdomain audit[1094]: CRYPTO_SESSION pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1095 suid=74 rport=49292 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:16 localhost.localdomain audit[1094]: USER_AUTH pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:16 localhost.localdomain audit[1094]: USER_AUTH pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:16 localhost.localdomain audit[1094]: USER_AUTH pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:16 localhost.localdomain unix_chkpwd[1096]: password check failed for user (admin) marras 16 18:23:16 localhost.localdomain sshd[1094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:16 localhost.localdomain audit[1094]: USER_AUTH pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:19 localhost.localdomain sshd[1094]: Failed password for admin from 10.111.121.103 port 49292 ssh2 marras 16 18:23:19 localhost.localdomain audit[1094]: USER_AUTH pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:19 localhost.localdomain sshd[1094]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:19 localhost.localdomain sshd[1094]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:19 localhost.localdomain audit[1094]: CRYPTO_KEY_USER pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1095 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:19 localhost.localdomain audit[1094]: CRYPTO_KEY_USER pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1095 suid=74 rport=49292 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:19 localhost.localdomain audit[1094]: CRYPTO_KEY_USER pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:19 localhost.localdomain audit[1094]: CRYPTO_KEY_USER pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:19 localhost.localdomain audit[1094]: CRYPTO_KEY_USER pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:19 localhost.localdomain audit[1094]: USER_LOGIN pid=1094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:19 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@10-10.111.121.104:22-10.111.121.103:49292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:19 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:19 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49294). marras 16 18:23:19 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@11-10.111.121.104:22-10.111.121.103:49294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:19 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49294)... marras 16 18:23:19 localhost.localdomain audit[1101]: CRYPTO_KEY_USER pid=1101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:19 localhost.localdomain audit[1101]: CRYPTO_KEY_USER pid=1101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:19 localhost.localdomain audit[1101]: CRYPTO_KEY_USER pid=1101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:19 localhost.localdomain audit[1100]: CRYPTO_SESSION pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1101 suid=74 rport=49294 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:19 localhost.localdomain audit[1100]: CRYPTO_SESSION pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1101 suid=74 rport=49294 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:19 localhost.localdomain kernel: audit_printk_skb: 120 callbacks suppressed marras 16 18:23:19 localhost.localdomain kernel: audit: type=1100 audit(1447690999.280:699): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:19 localhost.localdomain audit[1100]: USER_AUTH pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:19 localhost.localdomain audit[1100]: USER_AUTH pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:19 localhost.localdomain kernel: audit: type=1100 audit(1447690999.284:700): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:19 localhost.localdomain audit[1100]: USER_AUTH pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:19 localhost.localdomain kernel: audit: type=1100 audit(1447690999.287:701): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:19 localhost.localdomain unix_chkpwd[1102]: password check failed for user (admin) marras 16 18:23:19 localhost.localdomain sshd[1100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:19 localhost.localdomain audit[1100]: USER_AUTH pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:19 localhost.localdomain kernel: audit: type=1100 audit(1447690999.316:702): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:20 localhost.localdomain sshd[1100]: Failed password for admin from 10.111.121.103 port 49294 ssh2 marras 16 18:23:20 localhost.localdomain audit[1100]: USER_AUTH pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:20 localhost.localdomain kernel: audit: type=1100 audit(1447691000.858:703): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:20 localhost.localdomain sshd[1100]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:20 localhost.localdomain sshd[1100]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:20 localhost.localdomain audit[1100]: CRYPTO_KEY_USER pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1101 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain kernel: audit: type=2404 audit(1447691000.872:704): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1101 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain audit[1100]: CRYPTO_KEY_USER pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1101 suid=74 rport=49294 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain kernel: audit: type=2404 audit(1447691000.876:705): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1101 suid=74 rport=49294 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain audit[1100]: CRYPTO_KEY_USER pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain kernel: audit: type=2404 audit(1447691000.879:706): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain kernel: audit: type=2404 audit(1447691000.894:707): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain audit[1100]: CRYPTO_KEY_USER pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:20 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49296). marras 16 18:23:20 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@12-10.111.121.104:22-10.111.121.103:49296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:20 localhost.localdomain kernel: audit: type=1130 audit(1447691000.915:708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@12-10.111.121.104:22-10.111.121.103:49296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:20 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49296)... marras 16 18:23:20 localhost.localdomain audit[1100]: CRYPTO_KEY_USER pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain audit[1100]: USER_LOGIN pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:20 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@11-10.111.121.104:22-10.111.121.103:49294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:20 localhost.localdomain audit[1106]: CRYPTO_KEY_USER pid=1106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain audit[1106]: CRYPTO_KEY_USER pid=1106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain audit[1106]: CRYPTO_KEY_USER pid=1106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain audit[1103]: CRYPTO_SESSION pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1106 suid=74 rport=49296 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:20 localhost.localdomain audit[1103]: CRYPTO_SESSION pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1106 suid=74 rport=49296 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:21 localhost.localdomain audit[1103]: USER_AUTH pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:21 localhost.localdomain audit[1103]: USER_AUTH pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:21 localhost.localdomain audit[1103]: USER_AUTH pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:21 localhost.localdomain unix_chkpwd[1107]: password check failed for user (admin) marras 16 18:23:21 localhost.localdomain sshd[1103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:21 localhost.localdomain audit[1103]: USER_AUTH pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:23 localhost.localdomain sshd[1103]: Failed password for admin from 10.111.121.103 port 49296 ssh2 marras 16 18:23:23 localhost.localdomain audit[1103]: USER_AUTH pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:23 localhost.localdomain sshd[1103]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:23 localhost.localdomain sshd[1103]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:23 localhost.localdomain audit[1103]: CRYPTO_KEY_USER pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1106 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:23 localhost.localdomain audit[1103]: CRYPTO_KEY_USER pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1106 suid=74 rport=49296 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:23 localhost.localdomain audit[1103]: CRYPTO_KEY_USER pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:23 localhost.localdomain audit[1103]: CRYPTO_KEY_USER pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:23 localhost.localdomain audit[1103]: CRYPTO_KEY_USER pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:23 localhost.localdomain audit[1103]: USER_LOGIN pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:23 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@12-10.111.121.104:22-10.111.121.103:49296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:23 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:23 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49298). marras 16 18:23:23 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@13-10.111.121.104:22-10.111.121.103:49298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:23 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49298)... marras 16 18:23:23 localhost.localdomain audit[1112]: CRYPTO_KEY_USER pid=1112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:23 localhost.localdomain audit[1112]: CRYPTO_KEY_USER pid=1112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:23 localhost.localdomain audit[1112]: CRYPTO_KEY_USER pid=1112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:23 localhost.localdomain audit[1111]: CRYPTO_SESSION pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1112 suid=74 rport=49298 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:23 localhost.localdomain audit[1111]: CRYPTO_SESSION pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1112 suid=74 rport=49298 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:23 localhost.localdomain audit[1111]: USER_AUTH pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:23 localhost.localdomain audit[1111]: USER_AUTH pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:23 localhost.localdomain audit[1111]: USER_AUTH pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:23 localhost.localdomain unix_chkpwd[1113]: password check failed for user (admin) marras 16 18:23:23 localhost.localdomain sshd[1111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:23 localhost.localdomain audit[1111]: USER_AUTH pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:26 localhost.localdomain sshd[1111]: Failed password for admin from 10.111.121.103 port 49298 ssh2 marras 16 18:23:26 localhost.localdomain kernel: audit_printk_skb: 90 callbacks suppressed marras 16 18:23:26 localhost.localdomain kernel: audit: type=1100 audit(1447691006.230:739): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:26 localhost.localdomain audit[1111]: USER_AUTH pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:26 localhost.localdomain sshd[1111]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:26 localhost.localdomain sshd[1111]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:26 localhost.localdomain audit[1111]: CRYPTO_KEY_USER pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1112 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain kernel: audit: type=2404 audit(1447691006.235:740): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1112 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain audit[1111]: CRYPTO_KEY_USER pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1112 suid=74 rport=49298 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain kernel: audit: type=2404 audit(1447691006.239:741): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1112 suid=74 rport=49298 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain audit[1111]: CRYPTO_KEY_USER pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain kernel: audit: type=2404 audit(1447691006.243:742): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain kernel: audit: type=2404 audit(1447691006.247:743): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain audit[1111]: CRYPTO_KEY_USER pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain kernel: audit: type=2404 audit(1447691006.251:744): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain audit[1111]: CRYPTO_KEY_USER pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain kernel: audit: type=1112 audit(1447691006.255:745): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:26 localhost.localdomain audit[1111]: USER_LOGIN pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:26 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@13-10.111.121.104:22-10.111.121.103:49298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:26 localhost.localdomain kernel: audit: type=1131 audit(1447691006.259:746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@13-10.111.121.104:22-10.111.121.103:49298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:26 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:26 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49300). marras 16 18:23:26 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@14-10.111.121.104:22-10.111.121.103:49300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:26 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49300)... marras 16 18:23:26 localhost.localdomain kernel: audit: type=1130 audit(1447691006.271:747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@14-10.111.121.104:22-10.111.121.103:49300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:26 localhost.localdomain audit[1118]: CRYPTO_KEY_USER pid=1118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain audit[1118]: CRYPTO_KEY_USER pid=1118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain kernel: audit: type=2404 audit(1447691006.285:748): pid=1118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain audit[1118]: CRYPTO_KEY_USER pid=1118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain audit[1117]: CRYPTO_SESSION pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1118 suid=74 rport=49300 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain audit[1117]: CRYPTO_SESSION pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1118 suid=74 rport=49300 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:26 localhost.localdomain audit[1117]: USER_AUTH pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:26 localhost.localdomain audit[1117]: USER_AUTH pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:26 localhost.localdomain audit[1117]: USER_AUTH pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:26 localhost.localdomain unix_chkpwd[1119]: password check failed for user (admin) marras 16 18:23:26 localhost.localdomain sshd[1117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:26 localhost.localdomain audit[1117]: USER_AUTH pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:26 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:28 localhost.localdomain sshd[1117]: Failed password for admin from 10.111.121.103 port 49300 ssh2 marras 16 18:23:28 localhost.localdomain audit[1117]: USER_AUTH pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:28 localhost.localdomain sshd[1117]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:28 localhost.localdomain sshd[1117]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:28 localhost.localdomain audit[1117]: CRYPTO_KEY_USER pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1118 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:28 localhost.localdomain audit[1117]: CRYPTO_KEY_USER pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1118 suid=74 rport=49300 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:28 localhost.localdomain audit[1117]: CRYPTO_KEY_USER pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:28 localhost.localdomain audit[1117]: CRYPTO_KEY_USER pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:28 localhost.localdomain audit[1117]: CRYPTO_KEY_USER pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:28 localhost.localdomain audit[1117]: USER_LOGIN pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:28 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@14-10.111.121.104:22-10.111.121.103:49300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:28 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:28 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49302). marras 16 18:23:28 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@15-10.111.121.104:22-10.111.121.103:49302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:28 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49302)... marras 16 18:23:28 localhost.localdomain audit[1128]: CRYPTO_KEY_USER pid=1128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:28 localhost.localdomain audit[1128]: CRYPTO_KEY_USER pid=1128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:28 localhost.localdomain audit[1128]: CRYPTO_KEY_USER pid=1128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:28 localhost.localdomain audit[1127]: CRYPTO_SESSION pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1128 suid=74 rport=49302 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:28 localhost.localdomain audit[1127]: CRYPTO_SESSION pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1128 suid=74 rport=49302 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:28 localhost.localdomain audit[1127]: USER_AUTH pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:28 localhost.localdomain audit[1127]: USER_AUTH pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:28 localhost.localdomain audit[1127]: USER_AUTH pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:28 localhost.localdomain unix_chkpwd[1129]: password check failed for user (admin) marras 16 18:23:28 localhost.localdomain sshd[1127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:28 localhost.localdomain audit[1127]: USER_AUTH pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:30 localhost.localdomain sshd[1127]: Failed password for admin from 10.111.121.103 port 49302 ssh2 marras 16 18:23:30 localhost.localdomain audit[1127]: USER_AUTH pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:30 localhost.localdomain sshd[1127]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:30 localhost.localdomain sshd[1127]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:30 localhost.localdomain audit[1127]: CRYPTO_KEY_USER pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1128 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:30 localhost.localdomain audit[1127]: CRYPTO_KEY_USER pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1128 suid=74 rport=49302 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:30 localhost.localdomain audit[1127]: CRYPTO_KEY_USER pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:30 localhost.localdomain audit[1127]: CRYPTO_KEY_USER pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:30 localhost.localdomain audit[1127]: CRYPTO_KEY_USER pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:30 localhost.localdomain audit[1127]: USER_LOGIN pid=1127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:30 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@15-10.111.121.104:22-10.111.121.103:49302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:30 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:30 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49304). marras 16 18:23:30 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@16-10.111.121.104:22-10.111.121.103:49304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:30 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49304)... marras 16 18:23:30 localhost.localdomain audit[1134]: CRYPTO_KEY_USER pid=1134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:30 localhost.localdomain audit[1134]: CRYPTO_KEY_USER pid=1134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:30 localhost.localdomain audit[1134]: CRYPTO_KEY_USER pid=1134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:30 localhost.localdomain audit[1133]: CRYPTO_SESSION pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1134 suid=74 rport=49304 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:30 localhost.localdomain audit[1133]: CRYPTO_SESSION pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1134 suid=74 rport=49304 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:31 localhost.localdomain audit[1133]: USER_AUTH pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:31 localhost.localdomain audit[1133]: USER_AUTH pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:31 localhost.localdomain audit[1133]: USER_AUTH pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:31 localhost.localdomain unix_chkpwd[1135]: password check failed for user (admin) marras 16 18:23:31 localhost.localdomain sshd[1133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:31 localhost.localdomain audit[1133]: USER_AUTH pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:32 localhost.localdomain sshd[1133]: Failed password for admin from 10.111.121.103 port 49304 ssh2 marras 16 18:23:32 localhost.localdomain kernel: audit_printk_skb: 135 callbacks suppressed marras 16 18:23:32 localhost.localdomain kernel: audit: type=1100 audit(1447691012.554:794): pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:32 localhost.localdomain audit[1133]: USER_AUTH pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:32 localhost.localdomain sshd[1133]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:32 localhost.localdomain sshd[1133]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:32 localhost.localdomain audit[1133]: CRYPTO_KEY_USER pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1134 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain kernel: audit: type=2404 audit(1447691012.558:795): pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1134 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain kernel: audit: type=2404 audit(1447691012.561:796): pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1134 suid=74 rport=49304 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain audit[1133]: CRYPTO_KEY_USER pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1134 suid=74 rport=49304 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain audit[1133]: CRYPTO_KEY_USER pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain kernel: audit: type=2404 audit(1447691012.565:797): pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain audit[1133]: CRYPTO_KEY_USER pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain kernel: audit: type=2404 audit(1447691012.569:798): pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain kernel: audit: type=2404 audit(1447691012.573:799): pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain audit[1133]: CRYPTO_KEY_USER pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:32 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49306). marras 16 18:23:32 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@17-10.111.121.104:22-10.111.121.103:49306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:32 localhost.localdomain kernel: audit: type=1130 audit(1447691012.579:800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@17-10.111.121.104:22-10.111.121.103:49306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:32 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49306)... marras 16 18:23:32 localhost.localdomain audit[1133]: USER_LOGIN pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:32 localhost.localdomain kernel: audit: type=1112 audit(1447691012.584:801): pid=1133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:32 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@16-10.111.121.104:22-10.111.121.103:49304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:32 localhost.localdomain kernel: audit: type=1131 audit(1447691012.592:802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@16-10.111.121.104:22-10.111.121.103:49304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:32 localhost.localdomain audit[1139]: CRYPTO_KEY_USER pid=1139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain audit[1139]: CRYPTO_KEY_USER pid=1139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain audit[1139]: CRYPTO_KEY_USER pid=1139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain kernel: audit: type=2404 audit(1447691012.602:803): pid=1139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain audit[1136]: CRYPTO_SESSION pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1139 suid=74 rport=49306 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain audit[1136]: CRYPTO_SESSION pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1139 suid=74 rport=49306 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:32 localhost.localdomain audit[1136]: USER_AUTH pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:32 localhost.localdomain audit[1136]: USER_AUTH pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:32 localhost.localdomain audit[1136]: USER_AUTH pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:32 localhost.localdomain unix_chkpwd[1140]: password check failed for user (admin) marras 16 18:23:32 localhost.localdomain sshd[1136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:32 localhost.localdomain audit[1136]: USER_AUTH pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:34 localhost.localdomain sshd[1136]: Failed password for admin from 10.111.121.103 port 49306 ssh2 marras 16 18:23:34 localhost.localdomain audit[1136]: USER_AUTH pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:34 localhost.localdomain sshd[1136]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:34 localhost.localdomain sshd[1136]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:34 localhost.localdomain audit[1136]: CRYPTO_KEY_USER pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1139 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:34 localhost.localdomain audit[1136]: CRYPTO_KEY_USER pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1139 suid=74 rport=49306 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:34 localhost.localdomain audit[1136]: CRYPTO_KEY_USER pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:34 localhost.localdomain audit[1136]: CRYPTO_KEY_USER pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:34 localhost.localdomain audit[1136]: CRYPTO_KEY_USER pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:34 localhost.localdomain audit[1136]: USER_LOGIN pid=1136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:34 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@17-10.111.121.104:22-10.111.121.103:49306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:34 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:34 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49308). marras 16 18:23:34 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@18-10.111.121.104:22-10.111.121.103:49308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:34 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49308)... marras 16 18:23:34 localhost.localdomain audit[1145]: CRYPTO_KEY_USER pid=1145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:34 localhost.localdomain audit[1145]: CRYPTO_KEY_USER pid=1145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:34 localhost.localdomain audit[1145]: CRYPTO_KEY_USER pid=1145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:34 localhost.localdomain audit[1144]: CRYPTO_SESSION pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1145 suid=74 rport=49308 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:34 localhost.localdomain audit[1144]: CRYPTO_SESSION pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1145 suid=74 rport=49308 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:34 localhost.localdomain audit[1144]: USER_AUTH pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:34 localhost.localdomain audit[1144]: USER_AUTH pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:34 localhost.localdomain audit[1144]: USER_AUTH pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:34 localhost.localdomain unix_chkpwd[1146]: password check failed for user (admin) marras 16 18:23:34 localhost.localdomain sshd[1144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:34 localhost.localdomain audit[1144]: USER_AUTH pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:37 localhost.localdomain sshd[1144]: Failed password for admin from 10.111.121.103 port 49308 ssh2 marras 16 18:23:37 localhost.localdomain audit[1144]: USER_AUTH pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:37 localhost.localdomain sshd[1144]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:37 localhost.localdomain sshd[1144]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:37 localhost.localdomain audit[1144]: CRYPTO_KEY_USER pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1145 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:37 localhost.localdomain audit[1144]: CRYPTO_KEY_USER pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1145 suid=74 rport=49308 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:37 localhost.localdomain audit[1144]: CRYPTO_KEY_USER pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:37 localhost.localdomain audit[1144]: CRYPTO_KEY_USER pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:37 localhost.localdomain audit[1144]: CRYPTO_KEY_USER pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:37 localhost.localdomain audit[1144]: USER_LOGIN pid=1144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:37 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@18-10.111.121.104:22-10.111.121.103:49308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:37 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:37 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49310). marras 16 18:23:37 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@19-10.111.121.104:22-10.111.121.103:49310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:37 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49310)... marras 16 18:23:37 localhost.localdomain audit[1151]: CRYPTO_KEY_USER pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:37 localhost.localdomain audit[1151]: CRYPTO_KEY_USER pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:37 localhost.localdomain audit[1151]: CRYPTO_KEY_USER pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:37 localhost.localdomain audit[1150]: CRYPTO_SESSION pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1151 suid=74 rport=49310 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:37 localhost.localdomain audit[1150]: CRYPTO_SESSION pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1151 suid=74 rport=49310 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:37 localhost.localdomain audit[1150]: USER_AUTH pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:37 localhost.localdomain audit[1150]: USER_AUTH pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:37 localhost.localdomain audit[1150]: USER_AUTH pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:37 localhost.localdomain unix_chkpwd[1152]: password check failed for user (admin) marras 16 18:23:37 localhost.localdomain sshd[1150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:37 localhost.localdomain audit[1150]: USER_AUTH pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:39 localhost.localdomain sshd[1150]: Failed password for admin from 10.111.121.103 port 49310 ssh2 marras 16 18:23:39 localhost.localdomain kernel: audit_printk_skb: 132 callbacks suppressed marras 16 18:23:39 localhost.localdomain kernel: audit: type=1100 audit(1447691019.321:848): pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:39 localhost.localdomain audit[1150]: USER_AUTH pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:39 localhost.localdomain sshd[1150]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:39 localhost.localdomain sshd[1150]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:39 localhost.localdomain audit[1150]: CRYPTO_KEY_USER pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1151 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain kernel: audit: type=2404 audit(1447691019.328:849): pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1151 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain kernel: audit: type=2404 audit(1447691019.332:850): pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1151 suid=74 rport=49310 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain audit[1150]: CRYPTO_KEY_USER pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1151 suid=74 rport=49310 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain audit[1150]: CRYPTO_KEY_USER pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain kernel: audit: type=2404 audit(1447691019.336:851): pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain audit[1150]: CRYPTO_KEY_USER pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain kernel: audit: type=2404 audit(1447691019.340:852): pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain audit[1150]: CRYPTO_KEY_USER pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain kernel: audit: type=2404 audit(1447691019.344:853): pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain kernel: audit: type=1130 audit(1447691019.351:854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@20-10.111.121.104:22-10.111.121.103:49312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:39 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:39 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@20-10.111.121.104:22-10.111.121.103:49312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:39 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49312). marras 16 18:23:39 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49312)... marras 16 18:23:39 localhost.localdomain audit[1150]: USER_LOGIN pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:39 localhost.localdomain kernel: audit: type=1112 audit(1447691019.356:855): pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:39 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@19-10.111.121.104:22-10.111.121.103:49310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:39 localhost.localdomain kernel: audit: type=1131 audit(1447691019.364:856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@19-10.111.121.104:22-10.111.121.103:49310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:39 localhost.localdomain audit[1156]: CRYPTO_KEY_USER pid=1156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain audit[1156]: CRYPTO_KEY_USER pid=1156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain audit[1156]: CRYPTO_KEY_USER pid=1156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain kernel: audit: type=2404 audit(1447691019.376:857): pid=1156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain audit[1153]: CRYPTO_SESSION pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1156 suid=74 rport=49312 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain audit[1153]: CRYPTO_SESSION pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1156 suid=74 rport=49312 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:39 localhost.localdomain audit[1153]: USER_AUTH pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:39 localhost.localdomain audit[1153]: USER_AUTH pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:39 localhost.localdomain audit[1153]: USER_AUTH pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:39 localhost.localdomain unix_chkpwd[1157]: password check failed for user (admin) marras 16 18:23:39 localhost.localdomain sshd[1153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:39 localhost.localdomain audit[1153]: USER_AUTH pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:41 localhost.localdomain sshd[1153]: Failed password for admin from 10.111.121.103 port 49312 ssh2 marras 16 18:23:41 localhost.localdomain audit[1153]: USER_AUTH pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:41 localhost.localdomain sshd[1153]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:41 localhost.localdomain sshd[1153]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:41 localhost.localdomain audit[1153]: CRYPTO_KEY_USER pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1156 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:41 localhost.localdomain audit[1153]: CRYPTO_KEY_USER pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1156 suid=74 rport=49312 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:41 localhost.localdomain audit[1153]: CRYPTO_KEY_USER pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:41 localhost.localdomain audit[1153]: CRYPTO_KEY_USER pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:41 localhost.localdomain audit[1153]: CRYPTO_KEY_USER pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:41 localhost.localdomain audit[1153]: USER_LOGIN pid=1153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:41 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@20-10.111.121.104:22-10.111.121.103:49312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:41 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:41 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49314). marras 16 18:23:41 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@21-10.111.121.104:22-10.111.121.103:49314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:41 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49314)... marras 16 18:23:41 localhost.localdomain audit[1162]: CRYPTO_KEY_USER pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:41 localhost.localdomain audit[1162]: CRYPTO_KEY_USER pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:41 localhost.localdomain audit[1162]: CRYPTO_KEY_USER pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:41 localhost.localdomain audit[1161]: CRYPTO_SESSION pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1162 suid=74 rport=49314 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:41 localhost.localdomain audit[1161]: CRYPTO_SESSION pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1162 suid=74 rport=49314 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:42 localhost.localdomain audit[1161]: USER_AUTH pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:42 localhost.localdomain audit[1161]: USER_AUTH pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:42 localhost.localdomain audit[1161]: USER_AUTH pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:42 localhost.localdomain unix_chkpwd[1163]: password check failed for user (admin) marras 16 18:23:42 localhost.localdomain sshd[1161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:42 localhost.localdomain audit[1161]: USER_AUTH pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:43 localhost.localdomain sshd[1161]: Failed password for admin from 10.111.121.103 port 49314 ssh2 marras 16 18:23:43 localhost.localdomain audit[1161]: USER_AUTH pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:43 localhost.localdomain sshd[1161]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:43 localhost.localdomain sshd[1161]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:43 localhost.localdomain audit[1161]: CRYPTO_KEY_USER pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1162 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:43 localhost.localdomain audit[1161]: CRYPTO_KEY_USER pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1162 suid=74 rport=49314 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:43 localhost.localdomain audit[1161]: CRYPTO_KEY_USER pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:43 localhost.localdomain audit[1161]: CRYPTO_KEY_USER pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:43 localhost.localdomain audit[1161]: CRYPTO_KEY_USER pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:43 localhost.localdomain audit[1161]: USER_LOGIN pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:43 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@21-10.111.121.104:22-10.111.121.103:49314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:43 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:43 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49316). marras 16 18:23:43 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@22-10.111.121.104:22-10.111.121.103:49316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:43 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49316)... marras 16 18:23:43 localhost.localdomain audit[1168]: CRYPTO_KEY_USER pid=1168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:43 localhost.localdomain audit[1168]: CRYPTO_KEY_USER pid=1168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:43 localhost.localdomain audit[1168]: CRYPTO_KEY_USER pid=1168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:43 localhost.localdomain audit[1167]: CRYPTO_SESSION pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1168 suid=74 rport=49316 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:43 localhost.localdomain audit[1167]: CRYPTO_SESSION pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1168 suid=74 rport=49316 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:43 localhost.localdomain audit[1167]: USER_AUTH pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:43 localhost.localdomain audit[1167]: USER_AUTH pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:43 localhost.localdomain audit[1167]: USER_AUTH pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:43 localhost.localdomain unix_chkpwd[1169]: password check failed for user (admin) marras 16 18:23:43 localhost.localdomain sshd[1167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:43 localhost.localdomain audit[1167]: USER_AUTH pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:45 localhost.localdomain sshd[1167]: Failed password for admin from 10.111.121.103 port 49316 ssh2 marras 16 18:23:45 localhost.localdomain kernel: audit_printk_skb: 132 callbacks suppressed marras 16 18:23:45 localhost.localdomain kernel: audit: type=1100 audit(1447691025.528:902): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:45 localhost.localdomain audit[1167]: USER_AUTH pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:45 localhost.localdomain sshd[1167]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:45 localhost.localdomain sshd[1167]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:45 localhost.localdomain audit[1167]: CRYPTO_KEY_USER pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1168 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain kernel: audit: type=2404 audit(1447691025.539:903): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1168 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain kernel: audit: type=2404 audit(1447691025.555:904): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1168 suid=74 rport=49316 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1167]: CRYPTO_KEY_USER pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1168 suid=74 rport=49316 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1167]: CRYPTO_KEY_USER pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain kernel: audit: type=2404 audit(1447691025.569:905): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain kernel: audit: type=2404 audit(1447691025.577:906): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1167]: CRYPTO_KEY_USER pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain kernel: audit: type=2404 audit(1447691025.587:907): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1167]: CRYPTO_KEY_USER pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1167]: USER_LOGIN pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:45 localhost.localdomain kernel: audit: type=1112 audit(1447691025.592:908): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:45 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:45 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49318). marras 16 18:23:45 localhost.localdomain kernel: audit: type=1130 audit(1447691025.616:909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@23-10.111.121.104:22-10.111.121.103:49318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@23-10.111.121.104:22-10.111.121.103:49318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:45 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49318)... marras 16 18:23:45 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@22-10.111.121.104:22-10.111.121.103:49316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:45 localhost.localdomain kernel: audit: type=1131 audit(1447691025.647:910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@22-10.111.121.104:22-10.111.121.103:49316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1173]: CRYPTO_KEY_USER pid=1173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1173]: CRYPTO_KEY_USER pid=1173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1173]: CRYPTO_KEY_USER pid=1173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain kernel: audit: type=2404 audit(1447691025.673:911): pid=1173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1170]: CRYPTO_SESSION pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1173 suid=74 rport=49318 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1170]: CRYPTO_SESSION pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1173 suid=74 rport=49318 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:45 localhost.localdomain audit[1170]: USER_AUTH pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:45 localhost.localdomain audit[1170]: USER_AUTH pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:45 localhost.localdomain audit[1170]: USER_AUTH pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:45 localhost.localdomain unix_chkpwd[1174]: password check failed for user (admin) marras 16 18:23:45 localhost.localdomain sshd[1170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:45 localhost.localdomain audit[1170]: USER_AUTH pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:47 localhost.localdomain sshd[1170]: Failed password for admin from 10.111.121.103 port 49318 ssh2 marras 16 18:23:47 localhost.localdomain audit[1170]: USER_AUTH pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:47 localhost.localdomain sshd[1170]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:47 localhost.localdomain sshd[1170]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:47 localhost.localdomain audit[1170]: CRYPTO_KEY_USER pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1173 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:47 localhost.localdomain audit[1170]: CRYPTO_KEY_USER pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1173 suid=74 rport=49318 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:47 localhost.localdomain audit[1170]: CRYPTO_KEY_USER pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:47 localhost.localdomain audit[1170]: CRYPTO_KEY_USER pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:47 localhost.localdomain audit[1170]: CRYPTO_KEY_USER pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:47 localhost.localdomain audit[1170]: USER_LOGIN pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:47 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@23-10.111.121.104:22-10.111.121.103:49318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:48 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:48 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49320). marras 16 18:23:48 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@24-10.111.121.104:22-10.111.121.103:49320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:48 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49320)... marras 16 18:23:48 localhost.localdomain audit[1179]: CRYPTO_KEY_USER pid=1179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:48 localhost.localdomain audit[1179]: CRYPTO_KEY_USER pid=1179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:48 localhost.localdomain audit[1179]: CRYPTO_KEY_USER pid=1179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:48 localhost.localdomain audit[1178]: CRYPTO_SESSION pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1179 suid=74 rport=49320 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:48 localhost.localdomain audit[1178]: CRYPTO_SESSION pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1179 suid=74 rport=49320 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:48 localhost.localdomain audit[1178]: USER_AUTH pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:48 localhost.localdomain audit[1178]: USER_AUTH pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:48 localhost.localdomain audit[1178]: USER_AUTH pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:48 localhost.localdomain unix_chkpwd[1180]: password check failed for user (admin) marras 16 18:23:48 localhost.localdomain sshd[1178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:48 localhost.localdomain audit[1178]: USER_AUTH pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:50 localhost.localdomain sshd[1178]: Failed password for admin from 10.111.121.103 port 49320 ssh2 marras 16 18:23:50 localhost.localdomain audit[1178]: USER_AUTH pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:50 localhost.localdomain sshd[1178]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:50 localhost.localdomain sshd[1178]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:50 localhost.localdomain audit[1178]: CRYPTO_KEY_USER pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1179 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:50 localhost.localdomain audit[1178]: CRYPTO_KEY_USER pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1179 suid=74 rport=49320 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:50 localhost.localdomain audit[1178]: CRYPTO_KEY_USER pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:50 localhost.localdomain audit[1178]: CRYPTO_KEY_USER pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:50 localhost.localdomain audit[1178]: CRYPTO_KEY_USER pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:50 localhost.localdomain audit[1178]: USER_LOGIN pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:50 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@24-10.111.121.104:22-10.111.121.103:49320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:50 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:50 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49322). marras 16 18:23:50 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@25-10.111.121.104:22-10.111.121.103:49322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:50 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49322)... marras 16 18:23:50 localhost.localdomain audit[1185]: CRYPTO_KEY_USER pid=1185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:50 localhost.localdomain audit[1185]: CRYPTO_KEY_USER pid=1185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:50 localhost.localdomain audit[1185]: CRYPTO_KEY_USER pid=1185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:50 localhost.localdomain audit[1184]: CRYPTO_SESSION pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1185 suid=74 rport=49322 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:50 localhost.localdomain audit[1184]: CRYPTO_SESSION pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1185 suid=74 rport=49322 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:50 localhost.localdomain audit[1184]: USER_AUTH pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:50 localhost.localdomain audit[1184]: USER_AUTH pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:50 localhost.localdomain audit[1184]: USER_AUTH pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:50 localhost.localdomain unix_chkpwd[1186]: password check failed for user (admin) marras 16 18:23:50 localhost.localdomain sshd[1184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:50 localhost.localdomain audit[1184]: USER_AUTH pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:51 localhost.localdomain sshd[1184]: Failed password for admin from 10.111.121.103 port 49322 ssh2 marras 16 18:23:51 localhost.localdomain kernel: audit_printk_skb: 132 callbacks suppressed marras 16 18:23:51 localhost.localdomain kernel: audit: type=1100 audit(1447691031.968:956): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:51 localhost.localdomain audit[1184]: USER_AUTH pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:51 localhost.localdomain sshd[1184]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:51 localhost.localdomain sshd[1184]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:51 localhost.localdomain audit[1184]: CRYPTO_KEY_USER pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1185 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:51 localhost.localdomain kernel: audit: type=2404 audit(1447691031.973:957): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1185 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:51 localhost.localdomain kernel: audit: type=2404 audit(1447691031.978:958): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1185 suid=74 rport=49322 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:51 localhost.localdomain audit[1184]: CRYPTO_KEY_USER pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1185 suid=74 rport=49322 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:51 localhost.localdomain audit[1184]: CRYPTO_KEY_USER pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:51 localhost.localdomain kernel: audit: type=2404 audit(1447691031.982:959): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:51 localhost.localdomain kernel: audit: type=2404 audit(1447691031.994:960): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:51 localhost.localdomain audit[1184]: CRYPTO_KEY_USER pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:51 localhost.localdomain audit[1184]: CRYPTO_KEY_USER pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:52 localhost.localdomain kernel: audit: type=2404 audit(1447691031.998:961): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:52 localhost.localdomain kernel: audit: type=1112 audit(1447691032.001:962): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:52 localhost.localdomain audit[1184]: USER_LOGIN pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:52 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:52 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49324). marras 16 18:23:52 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@26-10.111.121.104:22-10.111.121.103:49324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:52 localhost.localdomain kernel: audit: type=1130 audit(1447691032.008:963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@26-10.111.121.104:22-10.111.121.103:49324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:52 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49324)... marras 16 18:23:52 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@25-10.111.121.104:22-10.111.121.103:49322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:52 localhost.localdomain kernel: audit: type=1131 audit(1447691032.014:964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@25-10.111.121.104:22-10.111.121.103:49322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:52 localhost.localdomain audit[1190]: CRYPTO_KEY_USER pid=1190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:52 localhost.localdomain kernel: audit: type=2404 audit(1447691032.033:965): pid=1190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:52 localhost.localdomain audit[1190]: CRYPTO_KEY_USER pid=1190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:52 localhost.localdomain audit[1190]: CRYPTO_KEY_USER pid=1190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:52 localhost.localdomain audit[1187]: CRYPTO_SESSION pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1190 suid=74 rport=49324 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:52 localhost.localdomain audit[1187]: CRYPTO_SESSION pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1190 suid=74 rport=49324 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:52 localhost.localdomain audit[1187]: USER_AUTH pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:52 localhost.localdomain audit[1187]: USER_AUTH pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:52 localhost.localdomain audit[1187]: USER_AUTH pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:52 localhost.localdomain unix_chkpwd[1191]: password check failed for user (admin) marras 16 18:23:52 localhost.localdomain sshd[1187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:52 localhost.localdomain audit[1187]: USER_AUTH pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:54 localhost.localdomain sshd[1187]: Failed password for admin from 10.111.121.103 port 49324 ssh2 marras 16 18:23:54 localhost.localdomain audit[1187]: USER_AUTH pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:54 localhost.localdomain sshd[1187]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:54 localhost.localdomain sshd[1187]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:54 localhost.localdomain audit[1187]: CRYPTO_KEY_USER pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1190 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:54 localhost.localdomain audit[1187]: CRYPTO_KEY_USER pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1190 suid=74 rport=49324 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:54 localhost.localdomain audit[1187]: CRYPTO_KEY_USER pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1187 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:54 localhost.localdomain audit[1187]: CRYPTO_KEY_USER pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1187 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:54 localhost.localdomain audit[1187]: CRYPTO_KEY_USER pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1187 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:54 localhost.localdomain audit[1187]: USER_LOGIN pid=1187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:54 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@26-10.111.121.104:22-10.111.121.103:49324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:54 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:54 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49326). marras 16 18:23:54 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@27-10.111.121.104:22-10.111.121.103:49326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:54 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49326)... marras 16 18:23:54 localhost.localdomain audit[1196]: CRYPTO_KEY_USER pid=1196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:54 localhost.localdomain audit[1196]: CRYPTO_KEY_USER pid=1196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:54 localhost.localdomain audit[1196]: CRYPTO_KEY_USER pid=1196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:54 localhost.localdomain audit[1195]: CRYPTO_SESSION pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1196 suid=74 rport=49326 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:54 localhost.localdomain audit[1195]: CRYPTO_SESSION pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1196 suid=74 rport=49326 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:54 localhost.localdomain audit[1195]: USER_AUTH pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:54 localhost.localdomain audit[1195]: USER_AUTH pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:54 localhost.localdomain audit[1195]: USER_AUTH pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:54 localhost.localdomain unix_chkpwd[1197]: password check failed for user (admin) marras 16 18:23:54 localhost.localdomain sshd[1195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:54 localhost.localdomain audit[1195]: USER_AUTH pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:55 localhost.localdomain sshd[1195]: Failed password for admin from 10.111.121.103 port 49326 ssh2 marras 16 18:23:55 localhost.localdomain audit[1195]: USER_AUTH pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:55 localhost.localdomain sshd[1195]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:55 localhost.localdomain sshd[1195]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:55 localhost.localdomain audit[1195]: CRYPTO_KEY_USER pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1196 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:55 localhost.localdomain audit[1195]: CRYPTO_KEY_USER pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1196 suid=74 rport=49326 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:55 localhost.localdomain audit[1195]: CRYPTO_KEY_USER pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:55 localhost.localdomain audit[1195]: CRYPTO_KEY_USER pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:55 localhost.localdomain audit[1195]: CRYPTO_KEY_USER pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:55 localhost.localdomain audit[1195]: USER_LOGIN pid=1195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:55 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@27-10.111.121.104:22-10.111.121.103:49326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:55 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:55 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49328). marras 16 18:23:55 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@28-10.111.121.104:22-10.111.121.103:49328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:55 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49328)... marras 16 18:23:55 localhost.localdomain audit[1202]: CRYPTO_KEY_USER pid=1202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:55 localhost.localdomain audit[1202]: CRYPTO_KEY_USER pid=1202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:55 localhost.localdomain audit[1202]: CRYPTO_KEY_USER pid=1202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:55 localhost.localdomain audit[1201]: CRYPTO_SESSION pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1202 suid=74 rport=49328 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:55 localhost.localdomain audit[1201]: CRYPTO_SESSION pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1202 suid=74 rport=49328 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:55 localhost.localdomain audit[1201]: USER_AUTH pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:55 localhost.localdomain audit[1201]: USER_AUTH pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:55 localhost.localdomain audit[1201]: USER_AUTH pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:55 localhost.localdomain unix_chkpwd[1203]: password check failed for user (admin) marras 16 18:23:55 localhost.localdomain sshd[1201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:55 localhost.localdomain audit[1201]: USER_AUTH pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:57 localhost.localdomain sshd[1201]: Failed password for admin from 10.111.121.103 port 49328 ssh2 marras 16 18:23:57 localhost.localdomain kernel: audit_printk_skb: 132 callbacks suppressed marras 16 18:23:57 localhost.localdomain kernel: audit: type=1100 audit(1447691037.722:1010): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:57 localhost.localdomain audit[1201]: USER_AUTH pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:57 localhost.localdomain sshd[1201]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:23:57 localhost.localdomain sshd[1201]: Disconnected from 10.111.121.103 [preauth] marras 16 18:23:57 localhost.localdomain audit[1201]: CRYPTO_KEY_USER pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1202 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain kernel: audit: type=2404 audit(1447691037.727:1011): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1202 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain kernel: audit: type=2404 audit(1447691037.733:1012): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1202 suid=74 rport=49328 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1201]: CRYPTO_KEY_USER pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1202 suid=74 rport=49328 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1201]: CRYPTO_KEY_USER pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain kernel: audit: type=2404 audit(1447691037.745:1013): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1201]: CRYPTO_KEY_USER pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain kernel: audit: type=2404 audit(1447691037.759:1014): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain kernel: audit: type=2404 audit(1447691037.776:1015): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1201]: CRYPTO_KEY_USER pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1201 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1201]: USER_LOGIN pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:57 localhost.localdomain kernel: audit: type=1112 audit(1447691037.783:1016): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:57 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:23:57 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49330). marras 16 18:23:57 localhost.localdomain kernel: audit: type=1130 audit(1447691037.804:1017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@29-10.111.121.104:22-10.111.121.103:49330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@29-10.111.121.104:22-10.111.121.103:49330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:57 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49330)... marras 16 18:23:57 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@28-10.111.121.104:22-10.111.121.103:49328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:57 localhost.localdomain kernel: audit: type=1131 audit(1447691037.825:1018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@28-10.111.121.104:22-10.111.121.103:49328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1207]: CRYPTO_KEY_USER pid=1207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain kernel: audit: type=2404 audit(1447691037.857:1019): pid=1207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1207]: CRYPTO_KEY_USER pid=1207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1207]: CRYPTO_KEY_USER pid=1207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1204]: CRYPTO_SESSION pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1207 suid=74 rport=49330 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1204]: CRYPTO_SESSION pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1207 suid=74 rport=49330 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:23:57 localhost.localdomain audit[1204]: USER_AUTH pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:57 localhost.localdomain audit[1204]: USER_AUTH pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:58 localhost.localdomain audit[1204]: USER_AUTH pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:23:58 localhost.localdomain unix_chkpwd[1208]: password check failed for user (admin) marras 16 18:23:58 localhost.localdomain sshd[1204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:23:58 localhost.localdomain audit[1204]: USER_AUTH pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:00 localhost.localdomain sshd[1204]: Failed password for admin from 10.111.121.103 port 49330 ssh2 marras 16 18:24:00 localhost.localdomain audit[1204]: USER_AUTH pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:00 localhost.localdomain sshd[1204]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:24:00 localhost.localdomain sshd[1204]: Disconnected from 10.111.121.103 [preauth] marras 16 18:24:00 localhost.localdomain audit[1204]: CRYPTO_KEY_USER pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1207 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:00 localhost.localdomain audit[1204]: CRYPTO_KEY_USER pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1207 suid=74 rport=49330 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:00 localhost.localdomain audit[1204]: CRYPTO_KEY_USER pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:00 localhost.localdomain audit[1204]: CRYPTO_KEY_USER pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:00 localhost.localdomain audit[1204]: CRYPTO_KEY_USER pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:00 localhost.localdomain audit[1204]: USER_LOGIN pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:00 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@29-10.111.121.104:22-10.111.121.103:49330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:00 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:24:00 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49332). marras 16 18:24:00 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@30-10.111.121.104:22-10.111.121.103:49332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:00 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49332)... marras 16 18:24:00 localhost.localdomain audit[1213]: CRYPTO_KEY_USER pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:00 localhost.localdomain audit[1213]: CRYPTO_KEY_USER pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:00 localhost.localdomain audit[1213]: CRYPTO_KEY_USER pid=1213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:00 localhost.localdomain audit[1212]: CRYPTO_SESSION pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1213 suid=74 rport=49332 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:00 localhost.localdomain audit[1212]: CRYPTO_SESSION pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1213 suid=74 rport=49332 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:00 localhost.localdomain audit[1212]: USER_AUTH pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:00 localhost.localdomain audit[1212]: USER_AUTH pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:00 localhost.localdomain audit[1212]: USER_AUTH pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:00 localhost.localdomain unix_chkpwd[1214]: password check failed for user (admin) marras 16 18:24:00 localhost.localdomain sshd[1212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:24:00 localhost.localdomain audit[1212]: USER_AUTH pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:02 localhost.localdomain sshd[1212]: Failed password for admin from 10.111.121.103 port 49332 ssh2 marras 16 18:24:02 localhost.localdomain audit[1212]: USER_AUTH pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:02 localhost.localdomain sshd[1212]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:24:02 localhost.localdomain sshd[1212]: Disconnected from 10.111.121.103 [preauth] marras 16 18:24:02 localhost.localdomain audit[1212]: CRYPTO_KEY_USER pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1213 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1212]: CRYPTO_KEY_USER pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1213 suid=74 rport=49332 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1212]: CRYPTO_KEY_USER pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1212]: CRYPTO_KEY_USER pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1212]: CRYPTO_KEY_USER pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1212]: USER_LOGIN pid=1212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:02 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@30-10.111.121.104:22-10.111.121.103:49332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:02 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:24:02 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49334). marras 16 18:24:02 localhost.localdomain kernel: audit_printk_skb: 102 callbacks suppressed marras 16 18:24:02 localhost.localdomain kernel: audit: type=1130 audit(1447691042.735:1054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@31-10.111.121.104:22-10.111.121.103:49334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@31-10.111.121.104:22-10.111.121.103:49334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:02 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49334)... marras 16 18:24:02 localhost.localdomain audit[1219]: CRYPTO_KEY_USER pid=1219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain kernel: audit: type=2404 audit(1447691042.762:1055): pid=1219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain kernel: audit: type=2404 audit(1447691042.766:1056): pid=1219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1219]: CRYPTO_KEY_USER pid=1219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1219]: CRYPTO_KEY_USER pid=1219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain kernel: audit: type=2404 audit(1447691042.772:1057): pid=1219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1218]: CRYPTO_SESSION pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1219 suid=74 rport=49334 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain kernel: audit: type=2407 audit(1447691042.783:1058): pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1219 suid=74 rport=49334 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain kernel: audit: type=2407 audit(1447691042.786:1059): pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1219 suid=74 rport=49334 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1218]: CRYPTO_SESSION pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1219 suid=74 rport=49334 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:02 localhost.localdomain audit[1218]: USER_AUTH pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:02 localhost.localdomain kernel: audit: type=1100 audit(1447691042.889:1060): pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:02 localhost.localdomain audit[1218]: USER_AUTH pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:02 localhost.localdomain kernel: audit: type=1100 audit(1447691042.893:1061): pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:02 localhost.localdomain audit[1218]: USER_AUTH pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:02 localhost.localdomain kernel: audit: type=1100 audit(1447691042.896:1062): pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:02 localhost.localdomain unix_chkpwd[1220]: password check failed for user (admin) marras 16 18:24:02 localhost.localdomain sshd[1218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:24:02 localhost.localdomain audit[1218]: USER_AUTH pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:02 localhost.localdomain kernel: audit: type=1100 audit(1447691042.928:1063): pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:05 localhost.localdomain sshd[1218]: Failed password for admin from 10.111.121.103 port 49334 ssh2 marras 16 18:24:05 localhost.localdomain audit[1218]: USER_AUTH pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:05 localhost.localdomain sshd[1218]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:24:05 localhost.localdomain sshd[1218]: Disconnected from 10.111.121.103 [preauth] marras 16 18:24:05 localhost.localdomain audit[1218]: CRYPTO_KEY_USER pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1219 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:05 localhost.localdomain audit[1218]: CRYPTO_KEY_USER pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1219 suid=74 rport=49334 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:05 localhost.localdomain audit[1218]: CRYPTO_KEY_USER pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:05 localhost.localdomain audit[1218]: CRYPTO_KEY_USER pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:05 localhost.localdomain audit[1218]: CRYPTO_KEY_USER pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:05 localhost.localdomain audit[1218]: USER_LOGIN pid=1218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:05 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@31-10.111.121.104:22-10.111.121.103:49334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:05 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:24:05 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49336). marras 16 18:24:05 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@32-10.111.121.104:22-10.111.121.103:49336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:05 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49336)... marras 16 18:24:05 localhost.localdomain audit[1225]: CRYPTO_KEY_USER pid=1225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:05 localhost.localdomain audit[1225]: CRYPTO_KEY_USER pid=1225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:05 localhost.localdomain audit[1225]: CRYPTO_KEY_USER pid=1225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:05 localhost.localdomain audit[1224]: CRYPTO_SESSION pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1225 suid=74 rport=49336 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:05 localhost.localdomain audit[1224]: CRYPTO_SESSION pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1225 suid=74 rport=49336 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:05 localhost.localdomain audit[1224]: USER_AUTH pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:05 localhost.localdomain audit[1224]: USER_AUTH pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:05 localhost.localdomain audit[1224]: USER_AUTH pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:05 localhost.localdomain unix_chkpwd[1226]: password check failed for user (admin) marras 16 18:24:05 localhost.localdomain sshd[1224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:24:05 localhost.localdomain audit[1224]: USER_AUTH pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:07 localhost.localdomain sshd[1224]: Failed password for admin from 10.111.121.103 port 49336 ssh2 marras 16 18:24:07 localhost.localdomain audit[1224]: USER_AUTH pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:07 localhost.localdomain sshd[1224]: Received disconnect from 10.111.121.103: 11: Bye Bye [preauth] marras 16 18:24:07 localhost.localdomain sshd[1224]: Disconnected from 10.111.121.103 [preauth] marras 16 18:24:07 localhost.localdomain audit[1224]: CRYPTO_KEY_USER pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1225 suid=74 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain audit[1224]: CRYPTO_KEY_USER pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1225 suid=74 rport=49336 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain audit[1224]: CRYPTO_KEY_USER pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1224 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain audit[1224]: CRYPTO_KEY_USER pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1224 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain audit[1224]: CRYPTO_KEY_USER pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1224 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain audit[1224]: USER_LOGIN pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:07 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@32-10.111.121.104:22-10.111.121.103:49336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:07 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:24:07 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.121.103:49338). marras 16 18:24:07 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@33-10.111.121.104:22-10.111.121.103:49338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:07 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.121.103:49338)... marras 16 18:24:07 localhost.localdomain audit[1231]: CRYPTO_KEY_USER pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain audit[1231]: CRYPTO_KEY_USER pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain audit[1231]: CRYPTO_KEY_USER pid=1231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain kernel: audit_printk_skb: 90 callbacks suppressed marras 16 18:24:07 localhost.localdomain kernel: audit: type=2407 audit(1447691047.767:1094): pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1231 suid=74 rport=49338 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain audit[1230]: CRYPTO_SESSION pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1231 suid=74 rport=49338 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain kernel: audit: type=2407 audit(1447691047.771:1095): pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1231 suid=74 rport=49338 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain audit[1230]: CRYPTO_SESSION pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1231 suid=74 rport=49338 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=? res=success' marras 16 18:24:07 localhost.localdomain audit[1230]: USER_AUTH pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:07 localhost.localdomain kernel: audit: type=1100 audit(1447691047.866:1096): pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:07 localhost.localdomain audit[1230]: USER_AUTH pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:07 localhost.localdomain kernel: audit: type=1100 audit(1447691047.871:1097): pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:07 localhost.localdomain audit[1230]: USER_AUTH pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:07 localhost.localdomain kernel: audit: type=1100 audit(1447691047.874:1098): pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:07 localhost.localdomain unix_chkpwd[1232]: password check failed for user (admin) marras 16 18:24:07 localhost.localdomain sshd[1230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.111.121.103 user=admin marras 16 18:24:07 localhost.localdomain audit[1230]: USER_AUTH pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:07 localhost.localdomain kernel: audit: type=1100 audit(1447691047.903:1099): pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=10.111.121.103 addr=10.111.121.103 terminal=ssh res=failed' marras 16 18:24:09 localhost.localdomain kernel: audit: type=1130 audit(1447691049.411:1100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@34-10.111.121.104:22-10.111.112.1:33252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:09 localhost.localdomain systemd[1]: Started OpenSSH Server Key Generation. marras 16 18:24:09 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd@34-10.111.121.104:22-10.111.112.1:33252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:09 localhost.localdomain systemd[1]: Started OpenSSH per-connection server daemon (10.111.112.1:33252). marras 16 18:24:09 localhost.localdomain systemd[1]: Starting OpenSSH per-connection server daemon (10.111.112.1:33252)... marras 16 18:24:09 localhost.localdomain audit[1234]: CRYPTO_KEY_USER pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain kernel: audit: type=2404 audit(1447691049.426:1101): pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1234]: CRYPTO_KEY_USER pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain kernel: audit: type=2404 audit(1447691049.430:1102): pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain kernel: audit: type=2404 audit(1447691049.434:1103): pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1234]: CRYPTO_KEY_USER pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: CRYPTO_SESSION pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256@libssh.org spid=1234 suid=74 rport=33252 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: CRYPTO_SESSION pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256@libssh.org spid=1234 suid=74 rport=33252 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: USER_AUTH pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=ssh res=failed' marras 16 18:24:09 localhost.localdomain audit[1233]: USER_AUTH pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33252 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: USER_AUTH pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:9f:56:13:c5:13:01:2d:a6:68:73:6b:e6:47:2f:b5:fe:18:3d:8e:b2:4d:81:47:50:79:2c:c9:1d:3b:a2:29:46 rport=33252 acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: USER_ACCT pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:24:09 localhost.localdomain sshd[1233]: Accepted publickey for root from 10.111.112.1 port 33252 ssh2: RSA SHA256:n1YTxRMBLaZoc2vmRy+1/hg9jrJNgUdQeSzJHTuiKUY marras 16 18:24:09 localhost.localdomain audit[1233]: CRYPTO_KEY_USER pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1234 suid=74 rport=33252 laddr=10.111.121.104 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: USER_AUTH pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=ssh res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: CRED_ACQ pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_reauthorize acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: USER_ROLE_CHANGE pid=1233 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:24:09 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:24:09 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:24:09 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' marras 16 18:24:09 localhost.localdomain systemd-logind[415]: New session 5 of user root. marras 16 18:24:09 localhost.localdomain systemd[1]: Created slice user-0.slice. marras 16 18:24:09 localhost.localdomain systemd[1]: Starting user-0.slice. marras 16 18:24:09 localhost.localdomain systemd[1]: Started Session 5 of user root. marras 16 18:24:09 localhost.localdomain systemd[1]: Starting Session 5 of user root. marras 16 18:24:09 localhost.localdomain systemd[1]: Starting User Manager for UID 0... marras 16 18:24:09 localhost.localdomain audit[1237]: USER_ACCT pid=1237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:09 localhost.localdomain systemd[1237]: pam_unix(systemd-user:session): session opened for user root by (uid=0) marras 16 18:24:09 localhost.localdomain audit[1237]: USER_START pid=1237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:09 localhost.localdomain systemd[1237]: Reached target Timers. marras 16 18:24:09 localhost.localdomain systemd[1237]: Starting Timers. marras 16 18:24:09 localhost.localdomain systemd[1237]: Reached target Paths. marras 16 18:24:09 localhost.localdomain systemd[1237]: Starting Paths. marras 16 18:24:09 localhost.localdomain systemd[1237]: Reached target Sockets. marras 16 18:24:09 localhost.localdomain systemd[1237]: Starting Sockets. marras 16 18:24:09 localhost.localdomain systemd[1237]: Reached target Basic System. marras 16 18:24:09 localhost.localdomain systemd[1237]: Starting Basic System. marras 16 18:24:09 localhost.localdomain systemd[1237]: Reached target Default. marras 16 18:24:09 localhost.localdomain systemd[1237]: Startup finished in 16ms. marras 16 18:24:09 localhost.localdomain systemd[1]: Started User Manager for UID 0. marras 16 18:24:09 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' marras 16 18:24:09 localhost.localdomain sshd[1233]: pam_unix(sshd:session): session opened for user root by (uid=0) marras 16 18:24:09 localhost.localdomain audit[1233]: USER_START pid=1233 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:24:09 localhost.localdomain systemd[1237]: Starting Default. marras 16 18:24:09 localhost.localdomain audit[1242]: CRYPTO_KEY_USER pid=1242 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b1:14:e3:e8:bc:ab:f2:ca:9a:21:61:a6:34:41:7f:05:72:fc:97:3f:e1:83:85:e1:9f:48:b5:e5:ad:fc:a2:18 direction=? spid=1242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1242]: CRYPTO_KEY_USER pid=1242 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:28:88:08:b9:9b:6c:cc:f4:f5:85:31:11:0f:32:0e:ac:09:81:bb:f4:38:96:52:26:8a:2d:93:e9:99:c5:31:c8 direction=? spid=1242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1242]: CRYPTO_KEY_USER pid=1242 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success' marras 16 18:24:09 localhost.localdomain audit[1242]: CRED_ACQ pid=1242 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix,pam_reauthorize acct="root" exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: USER_LOGIN pid=1233 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: USER_START pid=1233 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.111.112.1 addr=10.111.112.1 terminal=ssh res=success' marras 16 18:24:09 localhost.localdomain audit[1233]: CRYPTO_KEY_USER pid=1233 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:91:eb:7f:a6:76:c3:1a:76:61:4f:fb:ee:9f:a7:8e:61:82:15:9e:41:53:0f:d8:ba:ec:a3:f6:db:ec:1c:a9:27 direction=? spid=1243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.111.112.1 terminal=? res=success'