This page shows the content of a tree. It is essentially a list of items, each of which consist of a key and a value.
The key is shown in the boxes on the left. It is a triple of a 64-bit id, an 8-bit type, and a 64-bit offset. What each of them means depends on the tree we're in. You can search for a key id by using the search field below.
The value is summarized to the right of the key. To see the value in more detail, unfold the key by clicking on it.
Finally, to the very right, we have the logical address of the metadata node which the item is stored in.
| size | 112744 |
| mode | 33261 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 112744,
nbytes: 114688,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33261,
rdev: 0,
flags: 0,
sequence: 115,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 944181338,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 944181338,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 68 B8 01 00 00 00 00 00 00 C0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ED 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 5A 10 47 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 5A 10 47 38
| name | "ausearch" |
| index | 130 |
Ref(
[
RefItem {
index: 130,
name_len: 8,
name: "ausearch",
},
],
)82 00 00 00 00 00 00 00 08 00 61 75 73 65 61 72 63 68
112 KiB on disk, starting at offset 0 within the extent at address 50046000; 112 KiB in the file starting from offset 0.
| compression | 0 |
| encryption | 0 |
| other_encoding | 0 |
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 114688,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 1,
},
data: External(
ExternalExtent {
disk_bytenr: 1342464000,
disk_num_bytes: 114688,
offset: 0,
num_bytes: 114688,
},
),
},
)09 00 00 00 00 00 00 00 00 C0 01 00 00 00 00 00 00 00 00 00 01 00 60 04 50 00 00 00 00 00 C0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C0 01 00 00 00 00 00
| size | 14280 |
| mode | 33261 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 14280,
nbytes: 16384,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33261,
rdev: 0,
flags: 0,
sequence: 146,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 944181338,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 944181338,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 C8 37 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ED 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 92 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 5A 10 47 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 5A 10 47 38
| name | "ausyscall" |
| index | 131 |
Ref(
[
RefItem {
index: 131,
name_len: 9,
name: "ausyscall",
},
],
)83 00 00 00 00 00 00 00 09 00 61 75 73 79 73 63 61 6C 6C
16 KiB on disk, starting at offset 0 within the extent at address 50062000; 16 KiB in the file starting from offset 0.
| compression | 0 |
| encryption | 0 |
| other_encoding | 0 |
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 16384,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 1,
},
data: External(
ExternalExtent {
disk_bytenr: 1342578688,
disk_num_bytes: 16384,
offset: 0,
num_bytes: 16384,
},
),
},
)09 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 01 00 20 06 50 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00
| size | 13786 |
| mode | 33188 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 13786,
nbytes: 16384,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33188,
rdev: 0,
flags: 0,
sequence: 54,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 944181338,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 944181338,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 DA 35 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 A4 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 5A 10 47 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 5A 10 47 38
| name | "audit-records.h" |
| index | 211 |
Ref(
[
RefItem {
index: 211,
name_len: 15,
name: "audit-records.h",
},
],
)D3 00 00 00 00 00 00 00 0F 00 61 75 64 69 74 2D 72 65 63 6F 72 64 73 2E 68
16 KiB on disk, starting at offset 0 within the extent at address 50066000; 16 KiB in the file starting from offset 0.
| compression | 0 |
| encryption | 0 |
| other_encoding | 0 |
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 16384,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 1,
},
data: External(
ExternalExtent {
disk_bytenr: 1342595072,
disk_num_bytes: 16384,
offset: 0,
num_bytes: 16384,
},
),
},
)09 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 01 00 60 06 50 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00
| size | 3157 |
| mode | 33188 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 3157,
nbytes: 4096,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33188,
rdev: 0,
flags: 0,
sequence: 17,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 944181338,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 55 0C 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 A4 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 5A 10 47 38
| name | "audit_logging.h" |
| index | 212 |
Ref(
[
RefItem {
index: 212,
name_len: 15,
name: "audit_logging.h",
},
],
)D4 00 00 00 00 00 00 00 0F 00 61 75 64 69 74 5F 6C 6F 67 67 69 6E 67 2E 68
4 KiB on disk, starting at offset 0 within the extent at address 5006A000; 4 KiB in the file starting from offset 0.
| compression | 0 |
| encryption | 0 |
| other_encoding | 0 |
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 4096,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 1,
},
data: External(
ExternalExtent {
disk_bytenr: 1342611456,
disk_num_bytes: 4096,
offset: 0,
num_bytes: 4096,
},
),
},
)09 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 01 00 A0 06 50 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00
| size | 4055 |
| mode | 33188 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 4055,
nbytes: 4096,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33188,
rdev: 0,
flags: 0,
sequence: 77,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 D7 0F 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 A4 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4D 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "auparse-defs.h" |
| index | 213 |
Ref(
[
RefItem {
index: 213,
name_len: 14,
name: "auparse-defs.h",
},
],
)D5 00 00 00 00 00 00 00 0E 00 61 75 70 61 72 73 65 2D 64 65 66 73 2E 68
4 KiB on disk, starting at offset 0 within the extent at address 5006B000; 4 KiB in the file starting from offset 0.
| compression | 0 |
| encryption | 0 |
| other_encoding | 0 |
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 4096,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 1,
},
data: External(
ExternalExtent {
disk_bytenr: 1342615552,
disk_num_bytes: 4096,
offset: 0,
num_bytes: 4096,
},
),
},
)09 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 01 00 B0 06 50 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00
| size | 7440 |
| mode | 33188 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 7440,
nbytes: 8192,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33188,
rdev: 0,
flags: 0,
sequence: 41,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 10 1D 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 A4 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "auparse.h" |
| index | 214 |
Ref(
[
RefItem {
index: 214,
name_len: 9,
name: "auparse.h",
},
],
)D6 00 00 00 00 00 00 00 09 00 61 75 70 61 72 73 65 2E 68
8 KiB on disk, starting at offset 0 within the extent at address 5006C000; 8 KiB in the file starting from offset 0.
| compression | 0 |
| encryption | 0 |
| other_encoding | 0 |
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 8192,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 1,
},
data: External(
ExternalExtent {
disk_bytenr: 1342619648,
disk_num_bytes: 8192,
offset: 0,
num_bytes: 8192,
},
),
},
)09 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 00 01 00 C0 06 50 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00
| size | 10306 |
| mode | 33188 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 10306,
nbytes: 12288,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33188,
rdev: 0,
flags: 0,
sequence: 102,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 42 28 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 A4 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "libaudit.h" |
| index | 215 |
Ref(
[
RefItem {
index: 215,
name_len: 10,
name: "libaudit.h",
},
],
)D7 00 00 00 00 00 00 00 0A 00 6C 69 62 61 75 64 69 74 2E 68
12 KiB on disk, starting at offset 0 within the extent at address 5006E000; 12 KiB in the file starting from offset 0.
| compression | 0 |
| encryption | 0 |
| other_encoding | 0 |
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 12288,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 1,
},
data: External(
ExternalExtent {
disk_bytenr: 1342627840,
disk_num_bytes: 12288,
offset: 0,
num_bytes: 12288,
},
),
},
)09 00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 01 00 E0 06 50 00 00 00 00 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00 00 00 00
| size | 17 |
| mode | 41471 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913585 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 10,
size: 17,
nbytes: 17,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 41471,
rdev: 0,
flags: 0,
sequence: 83,
atime: Time {
sec: 1708913585,
nsec: 477590212,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 0A 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 FF A1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B1 F3 DB 65 00 00 00 00 C4 72 77 1C A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "libaudit.so" |
| index | 288 |
Ref(
[
RefItem {
index: 288,
name_len: 11,
name: "libaudit.so",
},
],
)20 01 00 00 00 00 00 00 0B 00 6C 69 62 61 75 64 69 74 2E 73 6F
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 17,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 0,
},
data: Inline(
[
108,
105,
98,
97,
117,
100,
105,
116,
46,
115,
111,
46,
49,
46,
48,
46,
48,
],
),
},
)09 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 00 6C 69 62 61 75 64 69 74 2E 73 6F 2E 31 2E 30 2E 30
| size | 17 |
| mode | 41471 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913584 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 10,
size: 17,
nbytes: 17,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 41471,
rdev: 0,
flags: 0,
sequence: 53,
atime: Time {
sec: 1708913584,
nsec: 370916869,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 0A 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 FF A1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 35 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B0 F3 DB 65 00 00 00 00 05 BE 1B 16 A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "libaudit.so.1" |
| index | 289 |
Ref(
[
RefItem {
index: 289,
name_len: 13,
name: "libaudit.so.1",
},
],
)21 01 00 00 00 00 00 00 0D 00 6C 69 62 61 75 64 69 74 2E 73 6F 2E 31
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 17,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 0,
},
data: Inline(
[
108,
105,
98,
97,
117,
100,
105,
116,
46,
115,
111,
46,
49,
46,
48,
46,
48,
],
),
},
)09 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 00 6C 69 62 61 75 64 69 74 2E 73 6F 2E 31 2E 30 2E 30
| size | 124808 |
| mode | 33261 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913584 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 10,
size: 124808,
nbytes: 126976,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33261,
rdev: 0,
flags: 0,
sequence: 59,
atime: Time {
sec: 1708913584,
nsec: 370916869,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 0A 00 00 00 00 00 00 00 88 E7 01 00 00 00 00 00 00 F0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ED 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3B 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B0 F3 DB 65 00 00 00 00 05 BE 1B 16 A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "libaudit.so.1.0.0" |
| index | 290 |
Ref(
[
RefItem {
index: 290,
name_len: 17,
name: "libaudit.so.1.0.0",
},
],
)22 01 00 00 00 00 00 00 11 00 6C 69 62 61 75 64 69 74 2E 73 6F 2E 31 2E 30 2E 30
124 KiB on disk, starting at offset 0 within the extent at address 50071000; 124 KiB in the file starting from offset 0.
| compression | 0 |
| encryption | 0 |
| other_encoding | 0 |
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 126976,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 1,
},
data: External(
ExternalExtent {
disk_bytenr: 1342640128,
disk_num_bytes: 126976,
offset: 0,
num_bytes: 126976,
},
),
},
)09 00 00 00 00 00 00 00 00 F0 01 00 00 00 00 00 00 00 00 00 01 00 10 07 50 00 00 00 00 00 F0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F0 01 00 00 00 00 00
| size | 19 |
| mode | 41471 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913585 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 10,
size: 19,
nbytes: 19,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 41471,
rdev: 0,
flags: 0,
sequence: 167,
atime: Time {
sec: 1708913585,
nsec: 477590212,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 0A 00 00 00 00 00 00 00 13 00 00 00 00 00 00 00 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 FF A1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B1 F3 DB 65 00 00 00 00 C4 72 77 1C A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "libauparse.so" |
| index | 291 |
Ref(
[
RefItem {
index: 291,
name_len: 13,
name: "libauparse.so",
},
],
)23 01 00 00 00 00 00 00 0D 00 6C 69 62 61 75 70 61 72 73 65 2E 73 6F
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 19,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 0,
},
data: Inline(
[
108,
105,
98,
97,
117,
112,
97,
114,
115,
101,
46,
115,
111,
46,
48,
46,
48,
46,
48,
],
),
},
)09 00 00 00 00 00 00 00 13 00 00 00 00 00 00 00 00 00 00 00 00 6C 69 62 61 75 70 61 72 73 65 2E 73 6F 2E 30 2E 30 2E 30
| size | 19 |
| mode | 41471 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913585 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 10,
size: 19,
nbytes: 19,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 41471,
rdev: 0,
flags: 0,
sequence: 102,
atime: Time {
sec: 1708913585,
nsec: 477590212,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 0A 00 00 00 00 00 00 00 13 00 00 00 00 00 00 00 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 FF A1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B1 F3 DB 65 00 00 00 00 C4 72 77 1C A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "libauparse.so.0" |
| index | 292 |
Ref(
[
RefItem {
index: 292,
name_len: 15,
name: "libauparse.so.0",
},
],
)24 01 00 00 00 00 00 00 0F 00 6C 69 62 61 75 70 61 72 73 65 2E 73 6F 2E 30
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 19,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 0,
},
data: Inline(
[
108,
105,
98,
97,
117,
112,
97,
114,
115,
101,
46,
115,
111,
46,
48,
46,
48,
46,
48,
],
),
},
)09 00 00 00 00 00 00 00 13 00 00 00 00 00 00 00 00 00 00 00 00 6C 69 62 61 75 70 61 72 73 65 2E 73 6F 2E 30 2E 30 2E 30
| size | 149392 |
| mode | 33261 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913585 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 10,
size: 149392,
nbytes: 151552,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33261,
rdev: 0,
flags: 0,
sequence: 86,
atime: Time {
sec: 1708913585,
nsec: 477590212,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 0A 00 00 00 00 00 00 00 90 47 02 00 00 00 00 00 00 50 02 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ED 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B1 F3 DB 65 00 00 00 00 C4 72 77 1C A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "libauparse.so.0.0.0" |
| index | 293 |
Ref(
[
RefItem {
index: 293,
name_len: 19,
name: "libauparse.so.0.0.0",
},
],
)25 01 00 00 00 00 00 00 13 00 6C 69 62 61 75 70 61 72 73 65 2E 73 6F 2E 30 2E 30 2E 30
148 KiB on disk, starting at offset 0 within the extent at address 1BC32000; 148 KiB in the file starting from offset 0.
| compression | 0 |
| encryption | 0 |
| other_encoding | 0 |
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 151552,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 1,
},
data: External(
ExternalExtent {
disk_bytenr: 465772544,
disk_num_bytes: 151552,
offset: 0,
num_bytes: 151552,
},
),
},
)09 00 00 00 00 00 00 00 00 50 02 00 00 00 00 00 00 00 00 00 01 00 20 C3 1B 00 00 00 00 00 50 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 02 00 00 00 00 00
| size | 294 |
| mode | 33188 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 294,
nbytes: 294,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33188,
rdev: 0,
flags: 0,
sequence: 57,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 26 01 00 00 00 00 00 00 26 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 A4 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "audit.pc" |
| index | 54 |
Ref(
[
RefItem {
index: 54,
name_len: 8,
name: "audit.pc",
},
],
)36 00 00 00 00 00 00 00 08 00 61 75 64 69 74 2E 70 63
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 294,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 0,
},
data: Inline(
[
112,
114,
101,
102,
105,
120,
61,
47,
117,
115,
114,
10,
101,
120,
101,
99,
95,
112,
114,
101,
102,
105,
120,
61,
36,
123,
112,
114,
101,
102,
105,
120,
125,
10,
108,
105,
98,
100,
105,
114,
61,
36,
123,
101,
120,
101,
99,
95,
112,
114,
101,
102,
105,
120,
125,
47,
108,
105,
98,
10,
105,
110,
99,
108,
117,
100,
101,
100,
105,
114,
61,
36,
123,
112,
114,
101,
102,
105,
120,
125,
47,
105,
110,
99,
108,
117,
100,
101,
10,
10,
78,
97,
109,
101,
58,
32,
108,
105,
98,
97,
117,
100,
105,
116,
10,
68,
101,
115,
99,
114,
105,
112,
116,
105,
111,
110,
58,
32,
76,
105,
98,
114,
97,
114,
105,
101,
115,
32,
110,
101,
101,
100,
101,
100,
32,
102,
111,
114,
32,
97,
112,
112,
115,
32,
116,
104,
97,
116,
32,
117,
115,
101,
32,
116,
104,
101,
32,
107,
101,
114,
110,
101,
108,
32,
97,
117,
100,
105,
116,
32,
102,
114,
97,
109,
101,
119,
111,
114,
107,
10,
86,
101,
114,
115,
105,
111,
110,
58,
32,
52,
46,
48,
10,
76,
105,
98,
115,
58,
32,
45,
76,
36,
123,
108,
105,
98,
100,
105,
114,
125,
32,
45,
108,
97,
117,
100,
105,
116,
10,
76,
105,
98,
115,
46,
112,
114,
105,
118,
97,
116,
101,
58,
32,
45,
108,
99,
97,
112,
45,
110,
103,
10,
67,
102,
108,
97,
103,
115,
58,
32,
45,
73,
36,
123,
105,
110,
99,
108,
117,
100,
101,
100,
105,
114,
125,
10,
82,
101,
113,
117,
105,
114,
101,
115,
46,
112,
114,
105,
118,
97,
116,
101,
58,
32,
108,
105,
98,
99,
97,
112,
45,
110,
103,
10,
],
),
},
)09 00 00 00 00 00 00 00 26 01 00 00 00 00 00 00 00 00 00 00 00 70 72 65 66 69 78 3D 2F 75 73 72 0A 65 78 65 63 5F 70 72 65 66 69 78 3D 24 7B 70 72 65 66 69 78 7D 0A 6C 69 62 64 69 72 3D 24 7B 65 78 65 63 5F 70 72 65 66 69 78 7D 2F 6C 69 62 0A 69 6E 63 6C 75 64 65 64 69 72 3D 24 7B 70 72 65 66 69 78 7D 2F 69 6E 63 6C 75 64 65 0A 0A 4E 61 6D 65 3A 20 6C 69 62 61 75 64 69 74 0A 44 65 73 63 72 69 70 74 69 6F 6E 3A 20 4C 69 62 72 61 72 69 65 73 20 6E 65 65 64 65 64 20 66 6F 72 20 61 70 70 73 20 74 68 61 74 20 75 73 65 20 74 68 65 20 6B 65 72 6E 65 6C 20 61 75 64 69 74 20 66 72 61 6D 65 77 6F 72 6B 0A 56 65 72 73 69 6F 6E 3A 20 34 2E 30 0A 4C 69 62 73 3A 20 2D 4C 24 7B 6C 69 62 64 69 72 7D 20 2D 6C 61 75 64 69 74 0A 4C 69 62 73 2E 70 72 69 76 61 74 65 3A 20 2D 6C 63 61 70 2D 6E 67 0A 43 66 6C 61 67 73 3A 20 2D 49 24 7B 69 6E 63 6C 75 64 65 64 69 72 7D 0A 52 65 71 75 69 72 65 73 2E 70 72 69 76 61 74 65 3A 20 6C 69 62 63 61 70 2D 6E 67 0A
| size | 270 |
| mode | 33188 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 270,
nbytes: 270,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33188,
rdev: 0,
flags: 0,
sequence: 34,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 0E 01 00 00 00 00 00 00 0E 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 A4 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "auparse.pc" |
| index | 55 |
Ref(
[
RefItem {
index: 55,
name_len: 10,
name: "auparse.pc",
},
],
)37 00 00 00 00 00 00 00 0A 00 61 75 70 61 72 73 65 2E 70 63
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 270,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 0,
},
data: Inline(
[
112,
114,
101,
102,
105,
120,
61,
47,
117,
115,
114,
10,
101,
120,
101,
99,
95,
112,
114,
101,
102,
105,
120,
61,
36,
123,
112,
114,
101,
102,
105,
120,
125,
10,
108,
105,
98,
100,
105,
114,
61,
36,
123,
101,
120,
101,
99,
95,
112,
114,
101,
102,
105,
120,
125,
47,
108,
105,
98,
10,
105,
110,
99,
108,
117,
100,
101,
100,
105,
114,
61,
36,
123,
112,
114,
101,
102,
105,
120,
125,
47,
105,
110,
99,
108,
117,
100,
101,
10,
10,
78,
97,
109,
101,
58,
32,
108,
105,
98,
97,
117,
112,
97,
114,
115,
101,
10,
68,
101,
115,
99,
114,
105,
112,
116,
105,
111,
110,
58,
32,
76,
105,
98,
114,
97,
114,
121,
32,
102,
111,
114,
32,
97,
112,
112,
115,
32,
116,
104,
97,
116,
32,
119,
97,
110,
116,
32,
116,
111,
32,
112,
97,
114,
115,
101,
32,
97,
110,
100,
32,
105,
110,
116,
101,
114,
112,
114,
101,
116,
32,
97,
117,
100,
105,
116,
32,
101,
118,
101,
110,
116,
115,
10,
86,
101,
114,
115,
105,
111,
110,
58,
32,
52,
46,
48,
10,
76,
105,
98,
115,
58,
32,
45,
76,
36,
123,
108,
105,
98,
100,
105,
114,
125,
32,
45,
108,
97,
117,
112,
97,
114,
115,
101,
10,
76,
105,
98,
115,
46,
112,
114,
105,
118,
97,
116,
101,
58,
32,
45,
108,
97,
117,
100,
105,
116,
10,
67,
102,
108,
97,
103,
115,
58,
32,
45,
73,
36,
123,
105,
110,
99,
108,
117,
100,
101,
100,
105,
114,
125,
10,
],
),
},
)09 00 00 00 00 00 00 00 0E 01 00 00 00 00 00 00 00 00 00 00 00 70 72 65 66 69 78 3D 2F 75 73 72 0A 65 78 65 63 5F 70 72 65 66 69 78 3D 24 7B 70 72 65 66 69 78 7D 0A 6C 69 62 64 69 72 3D 24 7B 65 78 65 63 5F 70 72 65 66 69 78 7D 2F 6C 69 62 0A 69 6E 63 6C 75 64 65 64 69 72 3D 24 7B 70 72 65 66 69 78 7D 2F 69 6E 63 6C 75 64 65 0A 0A 4E 61 6D 65 3A 20 6C 69 62 61 75 70 61 72 73 65 0A 44 65 73 63 72 69 70 74 69 6F 6E 3A 20 4C 69 62 72 61 72 79 20 66 6F 72 20 61 70 70 73 20 74 68 61 74 20 77 61 6E 74 20 74 6F 20 70 61 72 73 65 20 61 6E 64 20 69 6E 74 65 72 70 72 65 74 20 61 75 64 69 74 20 65 76 65 6E 74 73 0A 56 65 72 73 69 6F 6E 3A 20 34 2E 30 0A 4C 69 62 73 3A 20 2D 4C 24 7B 6C 69 62 64 69 72 7D 20 2D 6C 61 75 70 61 72 73 65 0A 4C 69 62 73 2E 70 72 69 76 61 74 65 3A 20 2D 6C 61 75 64 69 74 0A 43 66 6C 61 67 73 3A 20 2D 49 24 7B 69 6E 63 6C 75 64 65 64 69 72 7D 0A
| size | 934 |
| mode | 33188 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 934,
nbytes: 934,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33188,
rdev: 0,
flags: 0,
sequence: 233,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 A6 03 00 00 00 00 00 00 A6 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 A4 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "audit-rules.service" |
| index | 12 |
Ref(
[
RefItem {
index: 12,
name_len: 19,
name: "audit-rules.service",
},
],
)0C 00 00 00 00 00 00 00 13 00 61 75 64 69 74 2D 72 75 6C 65 73 2E 73 65 72 76 69 63 65
ExtentData(
ExtentDataItem {
header: ExtentDataHeader {
generation: 9,
ram_bytes: 934,
compression: 0,
encryption: 0,
other_encoding: 0,
extent_type: 0,
},
data: Inline(
[
91,
85,
110,
105,
116,
93,
10,
68,
101,
115,
99,
114,
105,
112,
116,
105,
111,
110,
61,
76,
111,
97,
100,
32,
65,
117,
100,
105,
116,
32,
82,
117,
108,
101,
115,
10,
67,
111,
110,
100,
105,
116,
105,
111,
110,
75,
101,
114,
110,
101,
108,
67,
111,
109,
109,
97,
110,
100,
76,
105,
110,
101,
61,
33,
97,
117,
100,
105,
116,
61,
48,
10,
67,
111,
110,
100,
105,
116,
105,
111,
110,
75,
101,
114,
110,
101,
108,
67,
111,
109,
109,
97,
110,
100,
76,
105,
110,
101,
61,
33,
97,
117,
100,
105,
116,
61,
111,
102,
102,
10,
68,
101,
102,
97,
117,
108,
116,
68,
101,
112,
101,
110,
100,
101,
110,
99,
105,
101,
115,
61,
110,
111,
10,
35,
32,
87,
101,
32,
110,
101,
101,
100,
32,
116,
104,
101,
32,
108,
111,
99,
97,
108,
32,
102,
105,
108,
101,
32,
115,
121,
115,
116,
101,
109,
32,
102,
111,
114,
32,
116,
104,
101,
32,
114,
117,
108,
101,
115,
46,
32,
65,
117,
103,
101,
110,
114,
117,
108,
101,
115,
32,
117,
115,
101,
115,
32,
47,
116,
109,
112,
32,
119,
104,
105,
108,
101,
10,
35,
32,
99,
111,
110,
115,
116,
114,
117,
99,
116,
105,
110,
103,
32,
114,
117,
108,
101,
115,
44,
32,
115,
111,
32,
119,
101,
32,
104,
97,
118,
101,
32,
116,
111,
32,
119,
97,
105,
116,
32,
102,
111,
114,
32,
116,
104,
97,
116,
32,
116,
111,
32,
98,
101,
32,
97,
118,
97,
105,
108,
97,
98,
108,
101,
44,
32,
116,
111,
111,
46,
10,
65,
102,
116,
101,
114,
61,
108,
111,
99,
97,
108,
45,
102,
115,
46,
116,
97,
114,
103,
101,
116,
32,
115,
121,
115,
116,
101,
109,
100,
45,
116,
109,
112,
102,
105,
108,
101,
115,
45,
115,
101,
116,
117,
112,
46,
115,
101,
114,
118,
105,
99,
101,
10,
10,
68,
111,
99,
117,
109,
101,
110,
116,
97,
116,
105,
111,
110,
61,
109,
97,
110,
58,
97,
117,
100,
105,
116,
99,
116,
108,
40,
56,
41,
32,
104,
116,
116,
112,
115,
58,
47,
47,
103,
105,
116,
104,
117,
98,
46,
99,
111,
109,
47,
108,
105,
110,
117,
120,
45,
97,
117,
100,
105,
116,
47,
97,
117,
100,
105,
116,
45,
100,
111,
99,
117,
109,
101,
110,
116,
97,
116,
105,
111,
110,
10,
10,
91,
83,
101,
114,
118,
105,
99,
101,
93,
10,
84,
121,
112,
101,
61,
111,
110,
101,
115,
104,
111,
116,
10,
69,
120,
101,
99,
83,
116,
97,
114,
116,
61,
47,
117,
115,
114,
47,
98,
105,
110,
47,
97,
117,
103,
101,
110,
114,
117,
108,
101,
115,
32,
45,
45,
108,
111,
97,
100,
10,
10,
35,
32,
66,
121,
32,
100,
101,
102,
97,
117,
108,
116,
32,
119,
101,
32,
100,
111,
110,
39,
116,
32,
99,
108,
101,
97,
114,
32,
116,
104,
101,
32,
114,
117,
108,
101,
115,
32,
111,
110,
32,
101,
120,
105,
116,
46,
32,
84,
111,
32,
101,
110,
97,
98,
108,
101,
32,
116,
104,
105,
115,
44,
32,
117,
110,
99,
111,
109,
109,
101,
110,
116,
32,
116,
104,
101,
10,
35,
32,
110,
101,
120,
116,
32,
108,
105,
110,
101,
32,
97,
102,
116,
101,
114,
32,
99,
111,
112,
121,
105,
110,
103,
32,
116,
104,
101,
32,
102,
105,
108,
101,
32,
116,
111,
32,
47,
101,
116,
99,
47,
115,
121,
115,
116,
101,
109,
100,
47,
115,
121,
115,
116,
101,
109,
47,
97,
117,
100,
105,
116,
45,
114,
117,
108,
101,
115,
46,
115,
101,
114,
118,
105,
99,
101,
10,
35,
69,
120,
101,
99,
83,
116,
111,
112,
80,
111,
115,
116,
61,
47,
115,
98,
105,
110,
47,
97,
117,
100,
105,
116,
99,
116,
108,
32,
45,
82,
32,
47,
101,
116,
99,
47,
97,
117,
100,
105,
116,
47,
97,
117,
100,
105,
116,
45,
115,
116,
111,
112,
46,
114,
117,
108,
101,
115,
10,
10,
35,
35,
35,
32,
83,
101,
99,
117,
114,
105,
116,
121,
32,
83,
101,
116,
116,
105,
110,
103,
115,
32,
35,
35,
35,
10,
35,
32,
84,
104,
105,
115,
32,
119,
111,
110,
39,
116,
32,
117,
115,
101,
32,
97,
110,
121,
32,
115,
101,
99,
117,
114,
105,
116,
121,
32,
115,
101,
116,
116,
105,
110,
103,
115,
46,
32,
84,
104,
101,
121,
32,
116,
101,
110,
100,
32,
116,
111,
32,
105,
110,
116,
101,
114,
102,
101,
114,
101,
32,
119,
105,
116,
104,
10,
35,
32,
108,
111,
97,
100,
105,
110,
103,
32,
114,
117,
108,
101,
115,
32,
97,
110,
121,
119,
97,
121,
115,
46,
32,
83,
105,
110,
99,
101,
32,
105,
116,
115,
32,
97,
32,
111,
110,
101,
45,
115,
104,
111,
116,
32,
115,
101,
114,
118,
105,
99,
101,
32,
119,
105,
116,
104,
32,
114,
111,
111,
116,
32,
111,
119,
110,
101,
100,
10,
35,
32,
105,
110,
112,
117,
116,
44,
32,
108,
101,
116,
39,
115,
32,
106,
117,
115,
116,
32,
108,
111,
97,
100,
32,
97,
110,
100,
32,
103,
101,
116,
32,
100,
111,
110,
101,
46,
10,
10,
91,
73,
110,
115,
116,
97,
108,
108,
93,
10,
87,
97,
110,
116,
101,
100,
66,
121,
61,
109,
117,
108,
116,
105,
45,
117,
115,
101,
114,
46,
116,
97,
114,
103,
101,
116,
10,
10,
],
),
},
)09 00 00 00 00 00 00 00 A6 03 00 00 00 00 00 00 00 00 00 00 00 5B 55 6E 69 74 5D 0A 44 65 73 63 72 69 70 74 69 6F 6E 3D 4C 6F 61 64 20 41 75 64 69 74 20 52 75 6C 65 73 0A 43 6F 6E 64 69 74 69 6F 6E 4B 65 72 6E 65 6C 43 6F 6D 6D 61 6E 64 4C 69 6E 65 3D 21 61 75 64 69 74 3D 30 0A 43 6F 6E 64 69 74 69 6F 6E 4B 65 72 6E 65 6C 43 6F 6D 6D 61 6E 64 4C 69 6E 65 3D 21 61 75 64 69 74 3D 6F 66 66 0A 44 65 66 61 75 6C 74 44 65 70 65 6E 64 65 6E 63 69 65 73 3D 6E 6F 0A 23 20 57 65 20 6E 65 65 64 20 74 68 65 20 6C 6F 63 61 6C 20 66 69 6C 65 20 73 79 73 74 65 6D 20 66 6F 72 20 74 68 65 20 72 75 6C 65 73 2E 20 41 75 67 65 6E 72 75 6C 65 73 20 75 73 65 73 20 2F 74 6D 70 20 77 68 69 6C 65 0A 23 20 63 6F 6E 73 74 72 75 63 74 69 6E 67 20 72 75 6C 65 73 2C 20 73 6F 20 77 65 20 68 61 76 65 20 74 6F 20 77 61 69 74 20 66 6F 72 20 74 68 61 74 20 74 6F 20 62 65 20 61 76 61 69 6C 61 62 6C 65 2C 20 74 6F 6F 2E 0A 41 66 74 65 72 3D 6C 6F 63 61 6C 2D 66 73 2E 74 61 72 67 65 74 20 73 79 73 74 65 6D 64 2D 74 6D 70 66 69 6C 65 73 2D 73 65 74 75 70 2E 73 65 72 76 69 63 65 0A 0A 44 6F 63 75 6D 65 6E 74 61 74 69 6F 6E 3D 6D 61 6E 3A 61 75 64 69 74 63 74 6C 28 38 29 20 68 74 74 70 73 3A 2F 2F 67 69 74 68 75 62 2E 63 6F 6D 2F 6C 69 6E 75 78 2D 61 75 64 69 74 2F 61 75 64 69 74 2D 64 6F 63 75 6D 65 6E 74 61 74 69 6F 6E 0A 0A 5B 53 65 72 76 69 63 65 5D 0A 54 79 70 65 3D 6F 6E 65 73 68 6F 74 0A 45 78 65 63 53 74 61 72 74 3D 2F 75 73 72 2F 62 69 6E 2F 61 75 67 65 6E 72 75 6C 65 73 20 2D 2D 6C 6F 61 64 0A 0A 23 20 42 79 20 64 65 66 61 75 6C 74 20 77 65 20 64 6F 6E 27 74 20 63 6C 65 61 72 20 74 68 65 20 72 75 6C 65 73 20 6F 6E 20 65 78 69 74 2E 20 54 6F 20 65 6E 61 62 6C 65 20 74 68 69 73 2C 20 75 6E 63 6F 6D 6D 65 6E 74 20 74 68 65 0A 23 20 6E 65 78 74 20 6C 69 6E 65 20 61 66 74 65 72 20 63 6F 70 79 69 6E 67 20 74 68 65 20 66 69 6C 65 20 74 6F 20 2F 65 74 63 2F 73 79 73 74 65 6D 64 2F 73 79 73 74 65 6D 2F 61 75 64 69 74 2D 72 75 6C 65 73 2E 73 65 72 76 69 63 65 0A 23 45 78 65 63 53 74 6F 70 50 6F 73 74 3D 2F 73 62 69 6E 2F 61 75 64 69 74 63 74 6C 20 2D 52 20 2F 65 74 63 2F 61 75 64 69 74 2F 61 75 64 69 74 2D 73 74 6F 70 2E 72 75 6C 65 73 0A 0A 23 23 23 20 53 65 63 75 72 69 74 79 20 53 65 74 74 69 6E 67 73 20 23 23 23 0A 23 20 54 68 69 73 20 77 6F 6E 27 74 20 75 73 65 20 61 6E 79 20 73 65 63 75 72 69 74 79 20 73 65 74 74 69 6E 67 73 2E 20 54 68 65 79 20 74 65 6E 64 20 74 6F 20 69 6E 74 65 72 66 65 72 65 20 77 69 74 68 0A 23 20 6C 6F 61 64 69 6E 67 20 72 75 6C 65 73 20 61 6E 79 77 61 79 73 2E 20 53 69 6E 63 65 20 69 74 73 20 61 20 6F 6E 65 2D 73 68 6F 74 20 73 65 72 76 69 63 65 20 77 69 74 68 20 72 6F 6F 74 20 6F 77 6E 65 64 0A 23 20 69 6E 70 75 74 2C 20 6C 65 74 27 73 20 6A 75 73 74 20 6C 6F 61 64 20 61 6E 64 20 67 65 74 20 64 6F 6E 65 2E 0A 0A 5B 49 6E 73 74 61 6C 6C 5D 0A 57 61 6E 74 65 64 42 79 3D 6D 75 6C 74 69 2D 75 73 65 72 2E 74 61 72 67 65 74 0A 0A
| size | 1302 |
| mode | 33188 |
| uid | 0 |
| gid | 0 |
| nlink | 1 |
| atime | 1708913572 |
| ctime | 1708913572 |
| mtime | 1705490454 |
| otime | 1708913572 |
Inode(
InodeItem {
generation: 9,
transid: 9,
size: 1302,
nbytes: 1302,
block_group: 0,
nlink: 1,
uid: 0,
gid: 0,
mode: 33188,
rdev: 0,
flags: 0,
sequence: 15,
atime: Time {
sec: 1708913572,
nsec: 0,
},
ctime: Time {
sec: 1708913572,
nsec: 947514692,
},
mtime: Time {
sec: 1705490454,
nsec: 0,
},
otime: Time {
sec: 1708913572,
nsec: 947514692,
},
},
)09 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 16 05 00 00 00 00 00 00 16 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 A4 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38 16 B8 A7 65 00 00 00 00 00 00 00 00 A4 F3 DB 65 00 00 00 00 44 ED 79 38
| name | "auditd.service" |
| index | 13 |
Ref(
[
RefItem {
index: 13,
name_len: 14,
name: "auditd.service",
},
],
)0D 00 00 00 00 00 00 00 0E 00 61 75 64 69 74 64 2E 73 65 72 76 69 63 65