sprintaddr:getnameinfo: Temporary failure in name resolution

[JoshuaPettus]

Hi I'm using sslh-ev 2.0.1. ( I don't think the flavor of sslh is the problem but do let me know and I can give another a try)

One issue I have been having since the very beginning is I keep getting
"sprintaddr:getnameinfo: Temporary failure in name resolution" errors in the log. Which is weird as DNS works just fine for the rest of the machine. It's only sslh complaining.

{edit} the other stuff I was noticing was unrelated

[yrutschle]

On Thu, Feb 08, 2024 at 12:07:58PM -0800, Joshua Pettus wrote: One issue I have been having since the very beginning is I keep getting "sprintaddr:getnameinfo: Temporary failure in name resolution" errors in the log.

Can you run `sslh` under strace and see if something fails upon resolution?

[JoshuaPettus]

I tried running it under strace. It launches though strace quits once it does. Don't know if this is the output you are looking for

I forgot to mention the issue always seemed benign, which is why I took forever reporting it. It just seems odd.

strace output

execve("/usr/sbin/sslh-ev", ["sslh-ev", "-F/etc/sslh/sslh.cfg"], 0x7ffd212a4c58 /* 13 vars */) = 0
brk(NULL)                               = 0x55e009c8b000
arch_prctl(0x3001 /* ARCH_??? */, 0x7ffdda209820) = -1 EINVAL (Invalid argument)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4149354000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=65331, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 65331, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f4149306000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=637632, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 639760, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4149266000
mmap(0x7f4149268000, 450560, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f4149268000
mmap(0x7f41492d6000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x70000) = 0x7f41492d6000
mmap(0x7f4149301000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9a000) = 0x7f4149301000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libwrap.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=44872, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 48192, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4149256000
mmap(0x7f4149259000, 20480, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4149259000
mmap(0x7f414925e000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f414925e000
mmap(0x7f4149260000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f4149260000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libconfig.so.9", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3404\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=51584, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 53584, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4149246000
mmap(0x7f4149249000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4149249000
mmap(0x7f414924f000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f414924f000
mmap(0x7f4149252000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f4149252000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=39024, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 41016, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4149236000
mmap(0x7f4149239000, 16384, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4149239000
mmap(0x7f414923d000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f414923d000
mmap(0x7f414923f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f414923f000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libsystemd.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=807936, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 812384, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f414916e000
mprotect(0x7f4149181000, 700416, PROT_NONE) = 0
mmap(0x7f4149181000, 520192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13000) = 0x7f4149181000
mmap(0x7f4149200000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x92000) = 0x7f4149200000
mmap(0x7f414922c000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbd000) = 0x7f414922c000
mmap(0x7f4149234000, 1376, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4149234000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libbsd.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=89096, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 94432, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4149156000
mprotect(0x7f414915a000, 69632, PROT_NONE) = 0
mmap(0x7f414915a000, 53248, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f414915a000
mmap(0x7f4149167000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x11000) = 0x7f4149167000
mmap(0x7f414916b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14000) = 0x7f414916b000
mmap(0x7f414916d000, 224, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f414916d000
close(3)                                = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4149352000
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libev.so.4", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\2407\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=67584, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 72768, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f414913e000
mmap(0x7f4149141000, 36864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4149141000
mmap(0x7f414914a000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x7f414914a000
mmap(0x7f414914e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f414914e000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\237\2\0\0\0\0\0"..., 832) = 832
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784
pread64(3, "\4\0\0\0 \0\0\0\5\0\0\0GNU\0\2\0\0\300\4\0\0\0\3\0\0\0\0\0\0\0"..., 48, 848) = 48
pread64(3, "\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\302\211\332Pq\2439\235\350\223\322\257\201\326\243\f"..., 68, 896) = 68
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=2220400, ...}, AT_EMPTY_PATH) = 0
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784
mmap(NULL, 2264656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148f0e000
mprotect(0x7f4148f36000, 2023424, PROT_NONE) = 0
mmap(0x7f4148f36000, 1658880, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f4148f36000
mmap(0x7f41490cb000, 360448, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1bd000) = 0x7f41490cb000
mmap(0x7f4149124000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x215000) = 0x7f4149124000
mmap(0x7f414912a000, 52816, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f414912a000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libnsl.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=93280, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 105032, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148eee000
mmap(0x7f4148ef2000, 57344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f4148ef2000
mmap(0x7f4148f00000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12000) = 0x7f4148f00000
mmap(0x7f4148f04000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x15000) = 0x7f4148f04000
mmap(0x7f4148f06000, 6728, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4148f06000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/liblzma.so.5", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=170456, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 172296, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148ebe000
mmap(0x7f4148ec1000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4148ec1000
mmap(0x7f4148edc000, 45056, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7f4148edc000
mmap(0x7f4148ee7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f4148ee7000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libzstd.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=841808, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 843832, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148dee000
mmap(0x7f4148df8000, 729088, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7f4148df8000
mmap(0x7f4148eaa000, 69632, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbc000) = 0x7f4148eaa000
mmap(0x7f4148ebb000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xcc000) = 0x7f4148ebb000read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=125152, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 127072, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148dce000
mprotect(0x7f4148dd0000, 114688, PROT_NONE) = 0
mmap(0x7f4148dd0000, 102400, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f4148dd0000
mmap(0x7f4148de9000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b000) = 0x7f4148de9000
mmap(0x7f4148dec000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1d000) = 0x7f4148dec000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libgcrypt.so.20", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1296312, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4149304000
mmap(NULL, 1299576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148c8e000
mprotect(0x7f4148c9d000, 1200128, PROT_NONE) = 0
mmap(0x7f4148c9d000, 942080, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f4148c9d000
mmap(0x7f4148d83000, 253952, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf5000) = 0x7f4148d83000
mmap(0x7f4148dc2000, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x133000) = 0x7f4148dc2000
mmap(0x7f4148dcb000, 1144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4148dcb000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libmd.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47472, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 49384, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148c7e000
mmap(0x7f4148c80000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f4148c80000
mmap(0x7f4148c87000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f4148c87000
mmap(0x7f4148c89000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7f4148c89000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libtirpc.so.3", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=182912, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 187256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148c4e000
mprotect(0x7f4148c55000, 151552, PROT_NONE) = 0
mmap(0x7f4148c55000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f4148c55000
mmap(0x7f4148c70000, 36864, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f4148c70000
mmap(0x7f4148c7a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2b000) = 0x7f4148c7a000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libgpg-error.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=149760, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 151992, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148c26000
mmap(0x7f4148c2a000, 90112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f4148c2a000
mmap(0x7f4148c40000, 40960, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7f4148c40000
mmap(0x7f4148c4a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x23000) = 0x7f4148c4a000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libgssapi_krb5.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=338648, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 340960, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148bce000
mprotect(0x7f4148bd9000, 282624, PROT_NONE) = 0
mmap(0x7f4148bd9000, 229376, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f4148bd9000
mmap(0x7f4148c11000, 49152, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x43000) = 0x7f4148c11000
mmap(0x7f4148c1e000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4f000) = 0x7f4148c1e000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libkrb5.so.3", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=827936, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4149264000
mmap(NULL, 830576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148afe000
mprotect(0x7f4148b1f000, 634880, PROT_NONE) = 0
mmap(0x7f4148b1f000, 380928, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x21000) = 0x7f4148b1f000
mmap(0x7f4148b7c000, 249856, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7e000) = 0x7f4148b7c000
mmap(0x7f4148bba000, 61440, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbb000) = 0x7f4148bba000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libk5crypto.so.3", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=182864, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 188472, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148ace000
mprotect(0x7f4148ad2000, 163840, PROT_NONE) = 0
mmap(0x7f4148ad2000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f4148ad2000
mmap(0x7f4148aed000, 49152, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1f000) = 0x7f4148aed000
mmap(0x7f4148afa000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2b000) = 0x7f4148afa000
mmap(0x7f4148afc000, 56, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4148afc000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcom_err.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=18504, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 20552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148ac6000
mmap(0x7f4148ac8000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f4148ac8000
mmap(0x7f4148ac9000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4148ac9000
mmap(0x7f4148aca000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4148aca000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libkrb5support.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=52016, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 54224, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148ab6000
mprotect(0x7f4148ab9000, 36864, PROT_NONE) = 0
mmap(0x7f4148ab9000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4148ab9000
mmap(0x7f4148abf000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f4148abf000
mmap(0x7f4148ac2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f4148ac2000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libkeyutils.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=22600, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 24592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148aae000
mmap(0x7f4148ab0000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f4148ab0000
mmap(0x7f4148ab2000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f4148ab2000
mmap(0x7f4148ab3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f4148ab3000
close(3)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=68552, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 80456, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4148a96000
mmap(0x7f4148a99000, 40960, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4148a99000
mmap(0x7f4148aa3000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f4148aa3000
mmap(0x7f4148aa6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f4148aa6000
mmap(0x7f4148aa8000, 6728, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4148aa8000
close(3)                                = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4149262000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4149254000
arch_prctl(ARCH_SET_FS, 0x7f41492553c0) = 0
set_tid_address(0x7f4149255690)         = 1365199
set_robust_list(0x7f41492556a0, 24)     = 0
rseq(0x7f4149255d60, 0x20, 0, 0x53053053) = 0
mprotect(0x7f4149124000, 16384, PROT_READ) = 0
mprotect(0x7f4148aa6000, 4096, PROT_READ) = 0
mprotect(0x7f4148ab3000, 4096, PROT_READ) = 0
mprotect(0x7f4148ac2000, 4096, PROT_READ) = 0
mprotect(0x7f4148aca000, 4096, PROT_READ) = 0
mprotect(0x7f4148afa000, 4096, PROT_READ) = 0
mprotect(0x7f4148bba000, 53248, PROT_READ) = 0
mprotect(0x7f4148c1e000, 8192, PROT_READ) = 0
mprotect(0x7f4148c4a000, 4096, PROT_READ) = 0
mprotect(0x7f4148c7a000, 4096, PROT_READ) = 0
mprotect(0x7f4148c89000, 4096, PROT_READ) = 0
mprotect(0x7f4148dc2000, 12288, PROT_READ) = 0
mprotect(0x7f4148dec000, 4096, PROT_READ) = 0
mprotect(0x7f4148ebb000, 4096, PROT_READ) = 0
mprotect(0x7f4148ee7000, 4096, PROT_READ) = 0
mprotect(0x7f4148f04000, 4096, PROT_READ) = 0
mprotect(0x7f414914e000, 4096, PROT_READ) = 0
mprotect(0x7f414916b000, 4096, PROT_READ) = 0
mprotect(0x7f414923f000, 4096, PROT_READ) = 0
mprotect(0x7f414922c000, 28672, PROT_READ) = 0
mprotect(0x7f4149252000, 4096, PROT_READ) = 0
mprotect(0x7f4149260000, 4096, PROT_READ) = 0
mprotect(0x7f4149301000, 4096, PROT_READ) = 0
mprotect(0x55e007c9f000, 4096, PROT_READ) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4149244000
mprotect(0x7f414934e000, 8192, PROT_READ) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
munmap(0x7f4149306000, 65331)           = 0
getrandom("\x94\x11\x6b\x9d\xb4\xf8\x96\xfd", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55e009c8b000
brk(0x55e009cac000)                     = 0x55e009cac000
prctl(PR_CAPBSET_READ, CAP_MAC_OVERRIDE) = 1
prctl(PR_CAPBSET_READ, 0x30 /* CAP_??? */) = -1 EINVAL (Invalid argument)
prctl(PR_CAPBSET_READ, CAP_CHECKPOINT_RESTORE) = 1
prctl(PR_CAPBSET_READ, 0x2c /* CAP_??? */) = -1 EINVAL (Invalid argument)
prctl(PR_CAPBSET_READ, 0x2a /* CAP_??? */) = -1 EINVAL (Invalid argument)
prctl(PR_CAPBSET_READ, 0x29 /* CAP_??? */) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "/etc/sslh/sslh.cfg", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=3046, ...}) = 0
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3046, ...}, AT_EMPTY_PATH) = 0
read(3, "# This is a basic configuration "..., 8192) = 3046
read(3, "", 4096)                       = 0
read(3, "", 8192)                       = 0
close(3)                                = 0
socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 3
setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
setsockopt(3, SOL_IP, IP_FREEBIND, [1], 4) = 0
bind(3, {sa_family=AF_INET, sin_port=htons(443), sin_addr=inet_addr("192.168.2.2")}, 16) = 0
listen(3, 50)                           = 0newfstatat(AT_FDCWD, "/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=801, ...}, 0) = 0
openat(AT_FDCWD, "/etc/host.conf", O_RDONLY|O_CLOEXEC) = 4
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=92, ...}, AT_EMPTY_PATH) = 0
read(4, "# The \"order\" line is only used "..., 4096) = 92
read(4, "", 4096)                       = 0
close(4)                                = 0
futex(0x7f414913132c, FUTEX_WAKE_PRIVATE, 2147483647) = 0
openat(AT_FDCWD, "/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = 4
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=801, ...}, AT_EMPTY_PATH) = 0
read(4, "# This is /run/systemd/resolve/r"..., 4096) = 801
read(4, "", 4096)                       = 0
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=801, ...}, AT_EMPTY_PATH) = 0
close(4)                                = 0
socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
connect(4, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(4)                                = 0
socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
connect(4, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(4)                                = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=542, ...}, 0) = 0
newfstatat(AT_FDCWD, "/", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
openat(AT_FDCWD, "/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 4
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=542, ...}, AT_EMPTY_PATH) = 0
read(4, "# /etc/nsswitch.conf\n#\n# Example"..., 4096) = 542
read(4, "", 4096)                       = 0
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=542, ...}, AT_EMPTY_PATH) = 0
close(4)                                = 0
openat(AT_FDCWD, "/etc/hosts", O_RDONLY|O_CLOEXEC) = 4
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=529, ...}, AT_EMPTY_PATH) = 0
lseek(4, 0, SEEK_SET)                   = 0
read(4, "127.0.0.1\tlocalhost\n127.0.1.1\tJo"..., 4096) = 529
read(4, "", 4096)                       = 0
close(4)                                = 0
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 4
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=65331, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 65331, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7f4148a86000
close(4)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libnss_mdns4_minimal.so.2", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=18664, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 20496, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f414930e000
mmap(0x7f414930f000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x1000) = 0x7f414930f000
mmap(0x7f4149311000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x3000) = 0x7f4149311000
mmap(0x7f4149312000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x3000) = 0x7f4149312000
close(4)                                = 0
mprotect(0x7f4149312000, 4096, PROT_READ) = 0
munmap(0x7f4148a86000, 65331)           = 0
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 4
setsockopt(4, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("1.1.1.1")}, 16) = 0
poll([{fd=4, events=POLLOUT}], 1, 0)    = 1 ([{fd=4, revents=POLLOUT}])
sendto(4, "\7\31\1\0\0\1\0\0\0\0\0\0\0012\0012\003168\003192\7in-addr"..., 42, MSG_NOSIGNAL, NULL, 0) = 42
poll([{fd=4, events=POLLIN}], 1, 5000)  = 1 ([{fd=4, revents=POLLIN}])
ioctl(4, FIONREAD, [42])                = 0
recvfrom(4, "\7\31\201\203\0\1\0\0\0\0\0\0\0012\0012\003168\003192\7in-addr"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("1.1.1.1")}, [28 => 16]) = 42
close(4)                                = 0
socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
connect(4, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(4)                                = 0
socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
connect(4, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(4)                                = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=542, ...}, 0) = 0
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 4
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=65331, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 65331, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7f4148a86000
close(4)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v2/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v2", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/tls/x86_64/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64-linux-gnu/tls/x86_64/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/tls/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64-linux-gnu/tls/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/tls/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64-linux-gnu/tls/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/tls/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64-linux-gnu/tls", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/x86_64/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64-linux-gnu/x86_64/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64-linux-gnu/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64-linux-gnu/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64-linux-gnu", {st_mode=S_IFDIR|0755, st_size=81920, ...}, 0) = 0
openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v2/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v2", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/tls/x86_64/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/tls/x86_64/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/tls/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/tls/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/tls/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/tls/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/tls/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/tls", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/x86_64/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/x86_64/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu", {st_mode=S_IFDIR|0755, st_size=81920, ...}, 0) = 0
openat(AT_FDCWD, "/lib/glibc-hwcaps/x86-64-v2/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/glibc-hwcaps/x86-64-v2", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/tls/x86_64/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/tls/x86_64/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/tls/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/tls/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/tls/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/tls/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/tls/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/tls", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/lib", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
openat(AT_FDCWD, "/usr/lib/glibc-hwcaps/x86-64-v2/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/glibc-hwcaps/x86-64-v2", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/tls/x86_64/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/tls/x86_64/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/tls/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/tls/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/tls/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/tls/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/tls/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/tls", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib/x86_64", 0x7ffdda207a60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/libnss_db.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/lib", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
munmap(0x7f4148a86000, 65331)           = 0
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 4
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=65331, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 65331, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7f4148a86000
close(4)                                = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libnss_db-2.35.so", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/libnss_db-2.35.so", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/libnss_db-2.35.so", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib/libnss_db-2.35.so", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
munmap(0x7f4148a86000, 65331)           = 0
openat(AT_FDCWD, "/etc/services", O_RDONLY|O_CLOEXEC) = 4
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=12813, ...}, AT_EMPTY_PATH) = 0
lseek(4, 0, SEEK_SET)                   = 0
read(4, "# Network services, Internet sty"..., 4096) = 4096
close(4)                                = 0
socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
setsockopt(4, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
setsockopt(4, SOL_IP, IP_FREEBIND, [1], 4) = 0
bind(4, {sa_family=AF_INET, sin_port=htons(443), sin_addr=inet_addr("192.168.2.2")}, 16) = 0
newfstatat(AT_FDCWD, "/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=801, ...}, 0) = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=542, ...}, 0) = 0
openat(AT_FDCWD, "/etc/hosts", O_RDONLY|O_CLOEXEC) = 5
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=529, ...}, AT_EMPTY_PATH) = 0
lseek(5, 0, SEEK_SET)                   = 0
read(5, "127.0.0.1\tlocalhost\n127.0.1.1\tJo"..., 4096) = 529
read(5, "", 4096)                       = 0
close(5)                                = 0
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 5
setsockopt(5, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(5, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("1.1.1.1")}, 16) = 0
poll([{fd=5, events=POLLOUT}], 1, 0)    = 1 ([{fd=5, revents=POLLOUT}])
sendto(5, "\242B\1\0\0\1\0\0\0\0\0\0\0012\0012\003168\003192\7in-addr"..., 42, MSG_NOSIGNAL, NULL, 0) = 42
poll([{fd=5, events=POLLIN}], 1, 5000)  = 1 ([{fd=5, revents=POLLIN}])
ioctl(5, FIONREAD, [42])                = 0
recvfrom(5, "\242B\201\203\0\1\0\0\0\0\0\0\0012\0012\003168\003192\7in-addr"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("1.1.1.1")}, [28 => 16]) = 42
close(5)                                = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=542, ...}, 0) = 0
openat(AT_FDCWD, "/etc/services", O_RDONLY|O_CLOEXEC) = 5
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=12813, ...}, AT_EMPTY_PATH) = 0
lseek(5, 0, SEEK_SET)                   = 0
read(5, "# Network services, Internet sty"..., 4096) = 4096
close(5)                                = 0
socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 5
setsockopt(5, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
setsockopt(5, SOL_IP, IP_FREEBIND, [1], 4) = 0
bind(5, {sa_family=AF_INET, sin_port=htons(443), sin_addr=inet_addr("10.8.0.1")}, 16) = 0
listen(5, 50)                           = 0
newfstatat(AT_FDCWD, "/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=801, ...}, 0) = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=542, ...}, 0) = 0
openat(AT_FDCWD, "/etc/hosts", O_RDONLY|O_CLOEXEC) = 6
newfstatat(6, "", {st_mode=S_IFREG|0644, st_size=529, ...}, AT_EMPTY_PATH) = 0
lseek(6, 0, SEEK_SET)                   = 0
read(6, "127.0.0.1\tlocalhost\n127.0.1.1\tJo"..., 4096) = 529
read(6, "", 4096)                       = 0
close(6)                                = 0
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 6
setsockopt(6, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(6, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("1.1.1.1")}, 16) = 0
poll([{fd=6, events=POLLOUT}], 1, 0)    = 1 ([{fd=6, revents=POLLOUT}])
sendto(6, "[\257\1\0\0\1\0\0\0\0\0\0\0011\0010\18\00210\7in-addr\4ar"..., 39, MSG_NOSIGNAL, NULL, 0) = 39
poll([{fd=6, events=POLLIN}], 1, 5000)  = 1 ([{fd=6, revents=POLLIN}])
ioctl(6, FIONREAD, [39])                = 0
recvfrom(6, "[\257\201\203\0\1\0\0\0\0\0\0\0011\0010\18\00210\7in-addr\4ar"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("1.1.1.1")}, [28 => 16]) = 39
close(6)                                = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=542, ...}, 0) = 0
openat(AT_FDCWD, "/etc/services", O_RDONLY|O_CLOEXEC) = 6
newfstatat(6, "", {st_mode=S_IFREG|0644, st_size=12813, ...}, AT_EMPTY_PATH) = 0
lseek(6, 0, SEEK_SET)                   = 0
read(6, "# Network services, Internet sty"..., 4096) = 4096
close(6)                                = 0
socket(AF_INET, SOCK_DGRAM, IPPROTO_IP) = 6
setsockopt(6, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
setsockopt(6, SOL_IP, IP_FREEBIND, [1], 4) = 0
bind(6, {sa_family=AF_INET, sin_port=htons(443), sin_addr=inet_addr("10.8.0.1")}, 16) = 0
newfstatat(AT_FDCWD, "/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=801, ...}, 0) = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=542, ...}, 0) = 0
openat(AT_FDCWD, "/etc/hosts", O_RDONLY|O_CLOEXEC) = 7
newfstatat(7, "", {st_mode=S_IFREG|0644, st_size=529, ...}, AT_EMPTY_PATH) = 0
lseek(7, 0, SEEK_SET)                   = 0
read(7, "127.0.0.1\tlocalhost\n127.0.1.1\tJo"..., 4096) = 529
read(7, "", 4096)                       = 0
close(7)                                = 0
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 7
setsockopt(7, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(7, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("1.1.1.1")}, 16) = 0
poll([{fd=7, events=POLLOUT}], 1, 0)    = 1 ([{fd=7, revents=POLLOUT}])
sendto(7, ")\215\1\0\0\1\0\0\0\0\0\0\0011\0010\18\00210\7in-addr\4ar"..., 39, MSG_NOSIGNAL, NULL, 0) = 39
poll([{fd=7, events=POLLIN}], 1, 5000)  = 1 ([{fd=7, revents=POLLIN}])
ioctl(7, FIONREAD, [39])                = 0
recvfrom(7, ")\215\201\203\0\1\0\0\0\0\0\0\0011\0010\18\00210\7in-addr\4ar"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("1.1.1.1")}, [28 => 16]) = 39
close(7)                                = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=542, ...}, 0) = 0
openat(AT_FDCWD, "/etc/services", O_RDONLY|O_CLOEXEC) = 7
newfstatat(7, "", {st_mode=S_IFREG|0644, st_size=12813, ...}, AT_EMPTY_PATH) = 0
lseek(7, 0, SEEK_SET)                   = 0
read(7, "# Network services, Internet sty"..., 4096) = 4096
close(7)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f4149255690) = 1365200
exit_group(0)                           = ?
+++ exited with 0 +++

[yrutschle]

ah yes, strace is losing sslh when it forks to detach and create a new session. Can you retry with strace -f ?

[JoshuaPettus]

That makes sense! Good to know. I got it to go through the error a few times. Here is the output

strace output

fcntl(6, F_SETFL, O_RDWR|O_NONBLOCK)    = 0
epoll_ctl(8, EPOLL_CTL_ADD, 9, {events=EPOLLIN, data={u32=9, u64=4294967305}}) = 0
epoll_ctl(8, EPOLL_CTL_ADD, 3, {events=EPOLLIN, data={u32=3, u64=4294967299}}) = 0
epoll_ctl(8, EPOLL_CTL_ADD, 4, {events=EPOLLIN, data={u32=4, u64=4294967300}}) = 0
epoll_ctl(8, EPOLL_CTL_ADD, 5, {events=EPOLLIN, data={u32=5, u64=4294967301}}) = 0
epoll_ctl(8, EPOLL_CTL_ADD, 6, {events=EPOLLIN, data={u32=6, u64=4294967302}}) = 0
epoll_wait(8, [{events=EPOLLIN, data={u32=3, u64=4294967299}}], 64, 59743) = 1
accept(3, NULL, NULL)                   = 10
fcntl(10, F_GETFL)                      = 0x2 (flags O_RDWR)
fcntl(10, F_SETFL, O_RDWR|O_NONBLOCK)   = 0
epoll_ctl(8, EPOLL_CTL_ADD, 10, {events=EPOLLIN, data={u32=10, u64=4294967306}}) = 0
epoll_wait(8, [{events=EPOLLIN, data={u32=10, u64=4294967306}}], 64, 59743) = 1
read(10, "\26\3\1\2\0\1\0\1\374\3\3\303P\337u\312\232\n\255/\226\366;a\216\324\37\205Y\330vs"..., 8192) = 517
newfstatat(7, "", {st_mode=S_IFREG|0644, st_size=51360228, ...}, AT_EMPTY_PATH) = 0
write(7, "probing for openvpn\n", 20)   = 20
write(7, "probed for openvpn: PROBE_NEXT\n", 31) = 31
write(7, "probing for tls\n", 16)       = 16
write(7, "matching [cloud.redacted.com] "..., 59) = 59
write(7, "probed for tls: PROBE_NEXT\n", 27) = 27
write(7, "probing for tls\n", 16)       = 16
write(7, "matching [http/1.1] with [stun.t"..., 37) = 37
write(7, "matching [http/1.1] with [stun.n"..., 46) = 46
write(7, "Unknown ALPN name: http/1.1\n", 28) = 28
write(7, "probed for tls: PROBE_NEXT\n", 27) = 27
write(7, "probing for tls\n", 16)       = 16
write(7, "probed for tls: PROBE_MATCH\n", 28) = 28
getpeername(10, {sa_family=AF_INET, sin_port=htons(65080), sin_addr=inet_addr("172.70.231.59")}, [128 => 16]) = 0
newfstatat(AT_FDCWD, "/etc/resolv.conf", 0x7fffd3a028e0, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
uname({sysname="Linux", nodename="JoshServ", ...}) = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", 0x7fffd3a02760, 0) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
openat(AT_FDCWD, "/etc/hosts", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 11
setsockopt(11, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(11, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=11, events=POLLOUT}], 1, 0)   = 1 ([{fd=11, revents=POLLOUT}])
sendto(11, "\302\16\1\0\0\1\0\0\0\0\0\0\0012\0010\0010\003127\7in-addr\4a"..., 40, MSG_NOSIGNAL, NULL, 0) = 40
poll([{fd=11, events=POLLIN}], 1, 5000) = 1 ([{fd=11, revents=POLLERR}])
close(11)                               = 0
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 11
setsockopt(11, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(11, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=11, events=POLLOUT}], 1, 0)   = 1 ([{fd=11, revents=POLLOUT}])
sendto(11, "\302\16\1\0\0\1\0\0\0\0\0\0\0012\0010\0010\003127\7in-addr\4a"..., 40, MSG_NOSIGNAL, NULL, 0) = 40
poll([{fd=11, events=POLLIN}], 1, 5000) = 1 ([{fd=11, revents=POLLERR}])
close(11)                               = 0
write(7, "sprintaddr:getnameinfo: Temporar"..., 61) = 61
write(7, "trying to connect to 127.0.0.2:4"..., 51) = 51
socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 11
setsockopt(11, SOL_TCP, TCP_FASTOPEN_CONNECT, [1], 4) = 0
fcntl(11, F_GETFL)                      = 0x2 (flags O_RDWR)
fcntl(11, F_SETFL, O_RDWR|O_NONBLOCK)   = 0
getpeername(10, {sa_family=AF_INET, sin_port=htons(65080), sin_addr=inet_addr("172.70.231.59")}, [128 => 16]) = 0
socket(AF_NETLINK, SOCK_RAW|SOCK_CLOEXEC, NETLINK_ROUTE) = 12
bind(12, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 0
getsockname(12, {sa_family=AF_NETLINK, nl_pid=2241861, nl_groups=00000000}, [12]) = 0
sendto(12, [{nlmsg_len=20, nlmsg_type=RTM_GETLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_DUMP, nlmsg_seq=1708370883, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ...}], 20, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 20

close(12)                               = 0
setsockopt(11, SOL_IP, IP_TRANSPARENT, [1], 4) = 0
bind(11, {sa_family=AF_INET, sin_port=htons(65080), sin_addr=inet_addr("172.70.231.59")}, 16) = 0
connect(11, {sa_family=AF_INET, sin_port=htons(443), sin_addr=inet_addr("127.0.0.2")}, 16) = -1 EINPROGRESS (Operation now in progress)
getpeername(10, {sa_family=AF_INET, sin_port=htons(65080), sin_addr=inet_addr("172.70.231.59")}, [128 => 16]) = 0
newfstatat(AT_FDCWD, "/etc/resolv.conf", 0x7fffd3a01c60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/hosts", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 12
setsockopt(12, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(12, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=12, events=POLLOUT}], 1, 0)   = 1 ([{fd=12, revents=POLLOUT}])
sendto(12, "\375\311\1\0\0\1\0\0\0\0\0\0\00259\003231\00270\003172\7in-ad"..., 44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=12, events=POLLIN}], 1, 5000) = 1 ([{fd=12, revents=POLLERR}])
close(12)                               = 0
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 12
setsockopt(12, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(12, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=12, events=POLLOUT}], 1, 0)   = 1 ([{fd=12, revents=POLLOUT}])
sendto(12, "\375\311\1\0\0\1\0\0\0\0\0\0\00259\003231\00270\003172\7in-ad"..., 44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=12, events=POLLIN}], 1, 5000) = 1 ([{fd=12, revents=POLLERR}])
close(12)                               = 0
write(7, "sprintaddr:getnameinfo: Temporar"..., 61) = 61
getsockname(10, {sa_family=AF_INET, sin_port=htons(443), sin_addr=inet_addr("192.168.2.2")}, [128 => 16]) = 0
newfstatat(AT_FDCWD, "/etc/resolv.conf", 0x7fffd3a01c60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/hosts", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 12
setsockopt(12, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(12, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=12, events=POLLOUT}], 1, 0)   = 1 ([{fd=12, revents=POLLOUT}])
sendto(12, "in\1\0\0\1\0\0\0\0\0\0\0012\0012\003168\003192\7in-addr"..., 42, MSG_NOSIGNAL, NULL, 0) = 42
poll([{fd=12, events=POLLIN}], 1, 5000) = 1 ([{fd=12, revents=POLLERR}])
close(12)                               = 0
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 12
setsockopt(12, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(12, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=12, events=POLLOUT}], 1, 0)   = 1 ([{fd=12, revents=POLLOUT}])
sendto(12, "in\1\0\0\1\0\0\0\0\0\0\0012\0012\003168\003192\7in-addr"..., 42, MSG_NOSIGNAL, NULL, 0) = 42
poll([{fd=12, events=POLLIN}], 1, 5000) = 1 ([{fd=12, revents=POLLERR}])
close(12)                               = 0
write(7, "sprintaddr:getnameinfo: Temporar"..., 61) = 61
getpeername(11, {sa_family=AF_INET, sin_port=htons(443), sin_addr=inet_addr("127.0.0.2")}, [128 => 16]) = 0
newfstatat(AT_FDCWD, "/etc/resolv.conf", 0x7fffd3a01c60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/hosts", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 12
setsockopt(12, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(12, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=12, events=POLLOUT}], 1, 0)   = 1 ([{fd=12, revents=POLLOUT}])
sendto(12, "U\27\1\0\0\1\0\0\0\0\0\0\0012\0010\0010\003127\7in-addr\4a"..., 40, MSG_NOSIGNAL, NULL, 0) = 40
poll([{fd=12, events=POLLIN}], 1, 5000) = 1 ([{fd=12, revents=POLLERR}])
**sendto(12, "U\27\1\0\0\1\0\0\0\0\0\0\0012\0010\0010\003127\7in-addr\4a"..., 40, MSG_NOSIGNAL, NULL, 0) = 40
poll([{fd=12, events=POLLIN}], 1, 5000) = 1 ([{fd=12, revents=POLLERR}])
close(12)                               = 0
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 12
setsockopt(12, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(12, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=12, events=POLLOUT}], 1, 0)   = 1 ([{fd=12, revents=POLLOUT}])
sendto(12, "U\27\1\0\0\1\0\0\0\0\0\0\0012\0010\0010\003127\7in-addr\4a"..., 40, MSG_NOSIGNAL, NULL, 0) = 40
poll([{fd=12, events=POLLIN}], 1, 5000) = 1 ([{fd=12, revents=POLLERR}])
close(12)                               = 0
write(7, "sprintaddr:getnameinfo: Temporar"..., 61) = 61
getsockname(11, {sa_family=AF_INET, sin_port=htons(65080), sin_addr=inet_addr("172.70.231.59")}, [128 => 16]) = 0
newfstatat(AT_FDCWD, "/etc/resolv.conf", 0x7fffd3a01c60, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/hosts", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 12
setsockopt(12, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(12, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=12, events=POLLOUT}], 1, 0)   = 1 ([{fd=12, revents=POLLOUT}])
sendto(12, "\344l\1\0\0\1\0\0\0\0\0\0\00259\003231\00270\003172\7in-ad"..., 44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=12, events=POLLIN}], 1, 5000) = 1 ([{fd=12, revents=POLLERR}])
close(12)                               = 0
socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 12
setsockopt(12, SOL_IP, IP_RECVERR, [1], 4) = 0
connect(12, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
poll([{fd=12, events=POLLOUT}], 1, 0)   = 1 ([{fd=12, revents=POLLOUT}])
sendto(12, "\344l\1\0\0\1\0\0\0\0\0\0\00259\003231\00270\003172\7in-ad"..., 44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=12, events=POLLIN}], 1, 5000) = 1 ([{fd=12, revents=POLLERR}])
close(12)                               = 0
write(7, "sprintaddr:getnameinfo: Temporar"..., 61) = 61

Not sure what it means by

newfstatat(AT_FDCWD, "/etc/resolv.conf", 0x7fffd3a01c60, 0) = -1 ENOENT (No such file or directory

That file most certianly exists though it is a simlink to /run/systemd/resolve/resolv.conf as part of systemd's resolver. Could it be taking issue with that?

[yrutschle]

It's also failing to find /etc/hosts. This could be a problem coming from the recent addition of Landlock, but I don't think 2.0.1 included that... Could you still check the startup traces (with verbose config dump at startup) if it says something about Landlock?
Not being able to read these files could definitely confuse the name resolution...

[kecksk0enig]

I have the same problem, and willing to help the issue results in very slow tls connections to my websites. im also runnung 1.20

[kecksk0enig]

As a follow up i think it is possible this new behavior was introduced by a system update ( i recently upgraded my ubuntu 20.04 VPS zu 24.04, however prior to upgrading the release i had to upgrade all packages. i think the sslh package is also been upgraded (still on 20.04) and results in this behavior.

I currently runn apache2 and added another port not multiplexed by sslh to the configuration. directly connecting to that ports results in fast tls handshake /connection. going over default 443 (and thus multiplexed by sslh) results in um to 20 seconds wait for sucessfull handshake.

Observing the sslh logs all slow connections result in a
sslh-select[642]: sprintaddr:getnameinfo: Temporary failure in name resolution

Any way i could provide more useful feedback?

Thank you in advance!

curl --trace-time -v   -s https://b4ckbone.de
14:49:10.929015 *   Trying 2a02:c207:3004:689::1:443...
14:49:10.953694 * Connected to b4ckbone.de (2a02:c207:3004:689::1) port 443 (#0)
14:49:10.955613 * ALPN, offering h2
14:49:10.955644 * ALPN, offering http/1.1
14:49:10.993319 *  CAfile: /etc/ssl/certs/ca-certificates.crt
14:49:10.993350 *  CApath: /etc/ssl/certs
14:49:10.993530 * TLSv1.0 (OUT), TLS header, Certificate Status (22):
14:49:10.993552 * TLSv1.3 (OUT), TLS handshake, Client hello (1):
14:49:21.058276 * TLSv1.2 (IN), TLS header, Certificate Status (22):
14:49:21.058394 * TLSv1.3 (IN), TLS handshake, Server hello (2):
14:49:21.059109 * TLSv1.2 (IN), TLS header, Finished (20):
14:49:21.059246 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:49:21.059353 * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
14:49:21.059474 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:49:21.059621 * TLSv1.3 (IN), TLS handshake, Certificate (11):
14:49:21.062761 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:49:21.062870 * TLSv1.3 (IN), TLS handshake, CERT verify (15):
14:49:21.063274 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:49:21.063442 * TLSv1.3 (IN), TLS handshake, Finished (20):
14:49:21.063664 * TLSv1.2 (OUT), TLS header, Finished (20):
14:49:21.063737 * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
14:49:21.063914 * TLSv1.2 (OUT), TLS header, Supplemental data (23):
14:49:21.064045 * TLSv1.3 (OUT), TLS handshake, Finished (20):
14:49:21.064265 * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
14:49:21.064373 * ALPN, server accepted to use http/1.1
14:49:21.064491 * Server certificate:
14:49:21.064606 *  subject: CN=b4ckbone.de
14:49:21.064697 *  start date: Aug 23 05:38:34 2024 GMT
14:49:21.064819 *  expire date: Nov 21 05:38:33 2024 GMT
14:49:21.064958 *  subjectAltName: host "b4ckbone.de" matched cert's "b4ckbone.de"
14:49:21.065105 *  issuer: C=US; O=Let's Encrypt; CN=R11
14:49:21.065221 *  SSL certificate verify ok.
14:49:21.065415 * TLSv1.2 (OUT), TLS header, Supplemental data (23):
14:49:21.065583 > GET / HTTP/1.1
14:49:21.065583 > Host: b4ckbone.de
14:49:21.065583 > User-Agent: curl/7.81.0
14:49:21.065583 > Accept: */*
14:49:21.065583 > 
14:49:21.089323 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:49:21.089539 * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
14:49:21.155317 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:49:21.155376 * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
14:49:21.155426 * old SSL session ID is stale, removing
14:49:21.155454 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:49:21.155493 * Mark bundle as not supporting multiuse
14:49:21.155514 < HTTP/1.1 200 OK
14:49:21.155534 < Date: Tue, 15 Oct 2024 12:49:20 GMT
14:49:21.155558 < Server: Apache
14:49:21.155585 < X-Frame-Options: sameorigin
14:49:21.155617 < Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
14:49:21.155642 < Upgrade: h2
14:49:21.155669 < Connection: Upgrade
14:49:21.155698 < Last-Modified: Fri, 30 Mar 2018 12:19:17 GMT
14:49:21.155726 < ETag: "102-568a03fc89278"
14:49:21.155754 < Accept-Ranges: bytes
14:49:21.155781 < Content-Length: 258
14:49:21.155809 < Vary: Accept-Encoding
14:49:21.155838 < MyHeader: D=284 t=1728996560505463
14:49:21.155869 < Content-Type: text/html
14:49:21.155897 < 
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>You can access the internet :)</title>
<style type="text/css">
html {
   width:100%;
   height:100%;
   background:url(online.gif) center center no-repeat;
}
</style>
</head>
<body>
</body>
</html>
14:49:21.155960 * Connection #0 to host b4ckbone.de left intact

vs

curl --trace-time -v   -s https://b4ckbone.de:5553
14:45:00.883683 *   Trying 2a02:c207:3004:689::1:5553...
14:45:00.908371 * Connected to b4ckbone.de (2a02:c207:3004:689::1) port 5553 (#0)
14:45:00.913451 * ALPN, offering h2
14:45:00.913541 * ALPN, offering http/1.1
14:45:00.970977 *  CAfile: /etc/ssl/certs/ca-certificates.crt
14:45:00.971039 *  CApath: /etc/ssl/certs
14:45:00.971216 * TLSv1.0 (OUT), TLS header, Certificate Status (22):
14:45:00.971241 * TLSv1.3 (OUT), TLS handshake, Client hello (1):
14:45:01.006651 * TLSv1.2 (IN), TLS header, Certificate Status (22):
14:45:01.006689 * TLSv1.3 (IN), TLS handshake, Server hello (2):
14:45:01.006920 * TLSv1.2 (IN), TLS header, Finished (20):
14:45:01.006945 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:45:01.006972 * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
14:45:01.007006 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:45:01.007767 * TLSv1.3 (IN), TLS handshake, Certificate (11):
14:45:01.008639 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:45:01.008674 * TLSv1.3 (IN), TLS handshake, CERT verify (15):
14:45:01.008798 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:45:01.008834 * TLSv1.3 (IN), TLS handshake, Finished (20):
14:45:01.008893 * TLSv1.2 (OUT), TLS header, Finished (20):
14:45:01.008924 * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
14:45:01.008974 * TLSv1.2 (OUT), TLS header, Supplemental data (23):
14:45:01.009012 * TLSv1.3 (OUT), TLS handshake, Finished (20):
14:45:01.009076 * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
14:45:01.009103 * ALPN, server accepted to use http/1.1
14:45:01.009132 * Server certificate:
14:45:01.009159 *  subject: CN=b4ckbone.de
14:45:01.009186 *  start date: Aug 23 05:38:34 2024 GMT
14:45:01.009214 *  expire date: Nov 21 05:38:33 2024 GMT
14:45:01.009253 *  subjectAltName: host "b4ckbone.de" matched cert's "b4ckbone.de"
14:45:01.009287 *  issuer: C=US; O=Let's Encrypt; CN=R11
14:45:01.009322 *  SSL certificate verify ok.
14:45:01.009388 * TLSv1.2 (OUT), TLS header, Supplemental data (23):
14:45:01.009440 > GET / HTTP/1.1
14:45:01.009440 > Host: b4ckbone.de:5553
14:45:01.009440 > User-Agent: curl/7.81.0
14:45:01.009440 > Accept: */*
14:45:01.009440 > 
14:45:01.033670 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:45:01.033792 * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
14:45:01.033878 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:45:01.033933 * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
14:45:01.033991 * old SSL session ID is stale, removing
14:45:01.034051 * TLSv1.2 (IN), TLS header, Supplemental data (23):
14:45:01.034137 * Mark bundle as not supporting multiuse
14:45:01.034170 < HTTP/1.1 200 OK
14:45:01.034211 < Date: Tue, 15 Oct 2024 12:45:00 GMT
14:45:01.034249 < Server: Apache
14:45:01.034288 < X-Frame-Options: sameorigin
14:45:01.034329 < Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
14:45:01.034368 < Upgrade: h2
14:45:01.034409 < Connection: Upgrade
14:45:01.034448 < Last-Modified: Fri, 30 Mar 2018 12:19:17 GMT
14:45:01.034486 < ETag: "102-568a03fc89278"
14:45:01.034527 < Accept-Ranges: bytes
14:45:01.034566 < Content-Length: 258
14:45:01.034609 < Vary: Accept-Encoding
14:45:01.034650 < MyHeader: D=263 t=1728996300449242
14:45:01.034691 < Content-Type: text/html
14:45:01.034732 < 
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>You can access the internet :)</title>
<style type="text/css">
html {
   width:100%;
   height:100%;
   background:url(online.gif) center center no-repeat;
}
</style>
</head>
<body>
</body>
</html>
14:45:01.034832 * Connection #0 to host b4ckbone.de left intact