execve("../run/john", ["../run/john", "--wordlist=pwlist.uniq", "shadow"], [/* 36 vars */]) = 0
brk(0)                                  = 0x80ab000
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ee3000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=37191, ...}) = 0
mmap2(NULL, 37191, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ed9000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/i686/cmov/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\260e\1\0004\0\0\0\4\247\24\0\0\0\0\0004\0 \0\n\0(\0D\0C\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0@\1\0\0@\1\0\0\5\0\0\0\4\0\0\0\3\0\0\0000*\23\0000*\23\0000*\23\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0Xm\24\0Xm\24\0\5\0\0\0\0\20\0\0\1\0\0\0\374q\24\0\374q\24\0\374q\24\0\240\'\0\0tT\0\0\6\0\0\0\0\20\0\0\2\0\0\0\234\215\24\0\234\215\24\0\234\215\24\0\360\0\0\0\360\0\0\0\6\0\0\0\4\0\0\0\4\0\0\0t\1\0\0t\1\0\0t\1\0\0 \0\0\0 \0\0\0\4\0\0\0\4\0\0\0\7\0\0\0\374q\24\0\374q\24\0\374q\24\0\10\0\0\0,\0\0\0\4\0\0\0\4\0\0\0P\345tdD*\23\0D*\23\0D*\23\0<,\0\0<,\0\0\4\0\0\0\4\0\0\0Q\345td\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\6\0\0\0\4\0\0\0R\345td\4r\24\0\374q\24\0\374q\24\0\210\34\0\0\200\34\0\0\4\0\0\0\1\0\0\0\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\6\0\0\0\10\0\0\0\363\3\0\0\n\0\0\0\0\2\0\0\16\0\0\0\2400\20D\200 \2\1\214\3\346\220AE\210\0\204\0\10\0A\200\0@\300\200\0\f\2\f\0\0010\0\10@\"\10\246\4\210H6l\240\0260\0&\204\200\216\4\10B$\2\f\246\244\32\6c\310\0\302 \1\300\0R\0!\201\10\4\n  \250\24\0\24(`\0\0P\240\312DB", 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1356196, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ed8000
mmap2(NULL, 1361520, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7d8b000
mmap2(0xb7ed2000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x147) = 0xb7ed2000
mmap2(0xb7ed5000, 9840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7ed5000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7d8a000
set_thread_area({entry_number:-1 -> 6, base_addr:0xb7d8a6b0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
mprotect(0xb7ed2000, 4096, PROT_READ)   = 0
munmap(0xb7ed9000, 37191)               = 0
brk(0)                                  = 0x80ab000
brk(0x80cd000)                          = 0x80cd000
open("../run/john.conf", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=15017, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ee2000
read(3, "#\n# This file is part of John the Ripper password cracker,\n# Copyright (c) 1996-2006 by Solar Designer\n#\n\n[Options]\n# Wordlist file name, to be used in batch mode\n# Wordlist = $JOHN/password.lst\n# Use idle cycles only\nIdle = N\n# Crash recovery file saving delay in seconds\nSave = 300\n# Beep when a password is found (who needs this anyway?)\nBeep = N\n\n# \"Single crack\" mode rules\n[List.Rules:Single]\n# Simple rules come first...\n:\n-s x**\n-c (?acQ\n-c lQ\n-s-c x**MlQ\n# These were not included in crackers I\'ve seen, but are pretty efficient,\n# so I include them near the beginning\n>6\'6\n>7l\'7\n>6/?ul\'6\n>5\'5\n# Weird order, eh? Can\'t do anything about it, the order is based on the\n# number of successful cracks...\n<*d\nrc\n<*dMcQ\n>5/?ul\'5\nuQ\nr(?al\n<*!?A[lc]p\n<*cQd\n>7/?u\'7\n>4l\'4\n<+(?lcr\n<+r(?lcr\n>3\'3\n>4/?u\'4\n>3/?ul\'3\nuQr\n<*lQf\n# About 50% of single-mode-crackable passwords get cracked by now...\n>2x12\n>3x13\n>4x14\n>5x15\n>6x16\n>7x17\n>8x18\n>3x22\n>4x23\n>5x24\n>6x25\n>7x26\n>8x27\n>9x28\n>4x32\n>5x33\n>6x34\n>7x35\n>8x36\n>9x37\n>2/?ulx12\n>3/?"..., 4096) = 4096
read(3, "o[0-7][a-z]\n;# Toggle case everywhere...\n;lMT[*0]T[*1]T[*2]T[*3]T[*4]T[*5]T[*6]T[*7]Q\n;# Very slow stuff...\n;l$[1-90]<-$[0-9]$[0-9]\n;(?ac$[1-90]<-$[0-9]$[0-9]\n;<-l$[a-z]$[a-z]\n;<9l^[a-z]^[a-z]\n;<-l^[a-z]$[a-z]\n\n# Wordlist mode rules\n[List.Rules:Wordlist]\n# Try words as they are\n:\n# Lowercase every pure alphanumeric word\n-c >3!?XlQ\n# Capitalize every pure alphanumeric word\n-c >2(?a!?XcQ\n# Lowercase and pluralize pure alphabetic words\n<*>2!?Alp\n# Lowercase pure alphabetic words and append \'1\'\n<*>2!?Al$1\n# Capitalize pure alphabetic words and append \'1\'\n-c <*>2!?Ac$1\n# Duplicate reasonably short pure alphabetic words (fred -> fredfred)\n<7>1!?Ald\n# Lowercase and reverse pure alphabetic words\n>3!?AlMrQ\n# Prefix pure alphabetic words with \'1\'\n>2!?Al^1\n# Uppercase pure alphanumeric words\n-c >2!?XuQ\n# Lowercase pure alphabetic words and append a digit or simple punctuation\n<*>2!?Al$[2!37954860.?]\n# Words containing punctuation, which is then squeezed out, lowercase\n/?p@?p>3l\n# Words with vowels removed, lowercase\n/?v"..., 4096) = 4096
read(3, ";\n}\n\n# Simple and well-commented, yet useful external mode example\n[List.External:Double]\n/*\n * This cracking mode tries all the possible duplicated lowercase alphabetic\n * \"words\" of up to 8 characters long.  Since word halves are the same, it\n * only has to try about 500,000 words.\n */\n\n/* Global variables: current length and word */\nint length, current[9];\n\n/* Called at startup to initialize the global variables */\nvoid init()\n{\n\tint i;\n\n\ti = length = 2;\t\t\t// Start with 4 character long words\n\twhile (i--) current[i] = \'a\';\t// Set our half-word to \"aa\"\n}\n\n/* Generates a new word */\nvoid generate()\n{\n\tint i;\n\n/* Export last generated word, duplicating it at the same time; here \"word\"\n * is a pre-defined external variable. */\n\tword[(i = length) << 1] = 0;\n\twhile (i--) word[length + i] = word[i] = current[i];\n\n/* Generate a new word */\n\ti = length - 1;\t\t\t// Start from the last character\n\twhile (++current[i] > \'z\')\t// Try to increase it\n\tif (i)\t\t\t\t// Overflow here, any more positions?\n\t\tcurrent[i--] = \'a\';\t// Y"..., 4096) = 4096
read(3, "n a keyboard as candidate passwords\n[List.External:Keyboard]\nint maxlength, length;\t// Maximum passwords length to try, current length\nint fuzz;\t\t// The desired \"fuzz factor\", either 0 or 1\nint id[15];\t\t// Current character indices for each position\nint m[0x400], mc[0x80];\t// The keys matrix, counts of adjacent keys\nint f[0x40], fc;\t// Characters for the first position, their count\n\nvoid init()\n{\n\tint minlength;\n\tint i, j, c, p;\n\tint k[0x40];\n\n\tminlength = 1;\t// Initial passwords length to try\n\tmaxlength = 15;\t// Maximum passwords length to try, up to 15\n\tfuzz = 1;\t// \"Fuzz factor\", set to 0 for much quicker runs\n\n/*\n * This defines the keyboard layout, by default for a QWERTY keyboard.\n * Please note that the sizes of m[] and mc[] arrays assume 7-bit\n * characters and will need to be doubled for 8-bit characters such as\n * umlauts.\n */\n\ti = 0; while (i < 0x40) k[i++] = 0;\n\tk[0] = \'`\';\n\ti = 0; while (++i <= 9) k[i] = \'0\' + i;\n\tk[10] = \'0\'; k[11] = \'-\'; k[12] = \'=\';\n\tk[0x11] = \'q\'; k[0x12] = \'w\'; k[0x13] = \'e\'"..., 4096) = 2729
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb7ee2000, 4096)                = 0
times({tms_utime=0, tms_stime=0, tms_cutime=0, tms_cstime=0}) = 134097507
rt_sigaction(SIGHUP, {0x8061510, [], SA_RESTART}, NULL, 8) = 0
rt_sigaction(SIGINT, {0x8061930, [INT], SA_RESTART}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGTERM, {0x8061930, [TERM], SA_RESTART}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGXCPU, {0x8061930, [XCPU], SA_RESTART}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGXFSZ, {0x8061930, [XFSZ], SA_RESTART}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGALRM, {0x8061740, [], SA_RESTART}, NULL, 8) = 0
setitimer(ITIMER_REAL, {it_interval={1, 0}, it_value={1, 0}}, NULL) = 0
umask(077)                              = 022
stat64("shadow", {st_mode=S_IFREG|0600, st_size=389, ...}) = 0
open("shadow", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0600, st_size=389, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ee2000
read(3, "XXXX..., 4096) = 389
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb7ee2000, 4096)                = 0
chmod("../run/john.log", 0600)          = 0
open("../run/john.log", O_WRONLY|O_CREAT|O_APPEND, 0600) = 3
open("../run/john.pot", O_RDONLY)       = 4
fstat64(4, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ee2000
read(4, "", 4096)                       = 0
close(4)                                = 0
munmap(0xb7ee2000, 4096)                = 0
fstat64(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 4), ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ee2000
write(1, "Loaded 5 password hashes with 5 different salts (FreeBSD MD5 [32/32])\n", 70) = 70
times({tms_utime=0, tms_stime=0, tms_cutime=0, tms_cstime=0}) = 134097507
chmod("../run/john.pot", 0600)          = 0
open("../run/john.pot", O_WRONLY|O_CREAT|O_APPEND, 0600) = 4
times({tms_utime=0, tms_stime=0, tms_cutime=0, tms_cstime=0}) = 134097507
times({tms_utime=0, tms_stime=0, tms_cutime=0, tms_cstime=0}) = 134097507
open("/dev/tty", O_RDONLY|O_NONBLOCK)   = 5
ioctl(5, TIOCGPGRP, [26787])            = 0
getpid()                                = 26788
close(5)                                = 0
times({tms_utime=0, tms_stime=0, tms_cutime=0, tms_cstime=0}) = 134097507
open("pwlist.uniq", O_RDONLY) = -1 EOVERFLOW (Value too large for defined data type)
write(2, "fopen: pwlist.uniq", 36) = 36
write(2, ": Value too large for defined data type\n", 40) = 40
times({tms_utime=0, tms_stime=1, tms_cutime=0, tms_cstime=0}) = 134097508
flock(3, LOCK_EX)                       = 0
write(3, "0:00:00:00 Starting a new session\n0:00:00:00 Loaded a total of 5 password hashes with 5 different salts\n0:00:00:00 Remaining 5 password hashes with 5 different salts\n0:00:00:00 - Hash type: FreeBSD MD5 (lengths up to 15)\n0:00:00:00 - Algorithm: 32/32\n0:00:00:00 Proceeding with wordlist mode\n0:00:00:00 Terminating on error\n", 324) = 324
flock(3, LOCK_UN)                       = 0
fsync(3)                                = 0
close(3)                                = 0
fsync(4)                                = 0
close(4)                                = 0
rt_sigaction(SIGHUP, {SIG_IGN}, {0x8061510, [], SA_RESTART}, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x8061930, [INT], SA_RESTART}, 8) = 0
rt_sigaction(SIGTERM, {SIG_DFL}, {0x8061930, [TERM], SA_RESTART}, 8) = 0
rt_sigaction(SIGXCPU, {SIG_DFL}, {0x8061930, [XCPU], SA_RESTART}, 8) = 0
rt_sigaction(SIGXFSZ, {SIG_DFL}, {0x8061930, [XFSZ], SA_RESTART}, 8) = 0
setitimer(ITIMER_REAL, {it_interval={0, 0}, it_value={0, 0}}, NULL) = 0
rt_sigaction(SIGALRM, {SIG_DFL}, {0x8061740, [], SA_RESTART}, 8) = 0
exit_group(1)                           = ?