type=DAEMON_START msg=audit(1510845176.428:6561): op=start ver=2.7.6 format=raw kernel=3.10.0-693.5.2.el7.x86_64 auid=4294967295 pid=621 uid=0 ses=4294967295 res=success
type=CONFIG_CHANGE msg=audit(1510845176.557:4): audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 res=1
type=CONFIG_CHANGE msg=audit(1510845176.557:5): audit_failure=1 old=1 auid=4294967295 ses=4294967295 res=1
type=SERVICE_START msg=audit(1510845176.560:6): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SYSTEM_BOOT msg=audit(1510845176.567:7): pid=643 uid=0 auid=4294967295 ses=4294967295 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.569:8): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.576:9): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=vgauthd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.578:10): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=vmtoolsd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.600:11): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.735:12): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=dbus comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.735:13): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.737:14): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=rhel-dmesg comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.739:15): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1510845176.739:16): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.746:17): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.778:18): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.787:19): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1510845176.789:20): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-start comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.789:21): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-quit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1510845176.789:22): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-quit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.790:23): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-quit-wait comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1510845176.790:24): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=plymouth-quit-wait comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.801:25): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.815:26): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845176.837:27): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845177.421:28): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=firewalld comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=NETFILTER_CFG msg=audit(1510845177.439:29): table=filter family=2 entries=0
type=SYSCALL msg=audit(1510845177.439:29): arch=c000003e syscall=175 success=yes exit=0 a0=83da20 a1=1da5 a2=41a678 a3=83a400 items=0 ppid=692 pid=693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
type=PROCTITLE msg=audit(1510845177.439:29): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572
type=SERVICE_START msg=audit(1510845177.489:30): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=NETFILTER_CFG msg=audit(1510845177.497:31): table=filter family=10 entries=0
type=SYSCALL msg=audit(1510845177.497:31): arch=c000003e syscall=175 success=yes exit=0 a0=1a86a20 a1=1d75 a2=41a678 a3=1a83500 items=0 ppid=701 pid=702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
type=PROCTITLE msg=audit(1510845177.497:31): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F66696C746572
type=SERVICE_START msg=audit(1510845177.521:32): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=NETFILTER_CFG msg=audit(1510845177.544:33): table=filter family=2 entries=0
type=NETFILTER_CFG msg=audit(1510845177.544:33): table=filter family=10 entries=0
type=SYSCALL msg=audit(1510845177.544:33): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7ffe381816a0 a2=40000040 a3=22 items=0 ppid=1 pid=715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(ostnamed)" exe="/usr/lib/systemd/systemd" key=(null)
type=PROCTITLE msg=audit(1510845177.544:33): proctitle="(ostnamed)"
type=SERVICE_START msg=audit(1510845178.037:34): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=NETFILTER_CFG msg=audit(1510845178.911:35): table=raw family=2 entries=0
type=NETFILTER_CFG msg=audit(1510845178.911:35): table=raw family=2 entries=0
type=SYSCALL msg=audit(1510845178.911:35): arch=c000003e syscall=175 success=yes exit=0 a0=d20a60 a1=1a55 a2=41a678 a3=d1d400 items=0 ppid=735 pid=736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
type=PROCTITLE msg=audit(1510845178.911:35): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F726177
type=NETFILTER_CFG msg=audit(1510845178.922:36): table=security family=2 entries=0
type=NETFILTER_CFG msg=audit(1510845178.922:36): table=security family=2 entries=0
type=SYSCALL msg=audit(1510845178.922:36): arch=c000003e syscall=175 success=yes exit=0 a0=7afa20 a1=1b25 a2=41a678 a3=7ac400 items=0 ppid=738 pid=739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
type=PROCTITLE msg=audit(1510845178.922:36): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F7365637572697479
type=NETFILTER_CFG msg=audit(1510845179.152:37): table=mangle family=2 entries=0
type=NETFILTER_CFG msg=audit(1510845179.152:37): table=mangle family=2 entries=0
type=SYSCALL msg=audit(1510845179.152:37): arch=c000003e syscall=175 success=yes exit=0 a0=ebba20 a1=1c5d a2=41a678 a3=eb8400 items=0 ppid=741 pid=742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
type=PROCTITLE msg=audit(1510845179.152:37): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65
type=NETFILTER_CFG msg=audit(1510845179.186:38): table=nat family=2 entries=0
type=NETFILTER_CFG msg=audit(1510845179.186:38): table=nat family=2 entries=0
type=SYSCALL msg=audit(1510845179.186:38): arch=c000003e syscall=175 success=yes exit=0 a0=1f9b0f0 a1=20cd a2=41a678 a3=1782400 items=0 ppid=744 pid=745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
type=PROCTITLE msg=audit(1510845179.186:38): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174
type=NETFILTER_CFG msg=audit(1510845179.198:39): table=raw family=10 entries=0
type=NETFILTER_CFG msg=audit(1510845179.198:39): table=raw family=10 entries=0
type=SYSCALL msg=audit(1510845179.198:39): arch=c000003e syscall=175 success=yes exit=0 a0=25eba20 a1=1a25 a2=41a678 a3=25e8500 items=0 ppid=750 pid=751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
type=PROCTITLE msg=audit(1510845179.198:39): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F726177
type=NETFILTER_CFG msg=audit(1510845179.207:40): table=security family=10 entries=0
type=NETFILTER_CFG msg=audit(1510845179.207:40): table=security family=10 entries=0
type=SYSCALL msg=audit(1510845179.207:40): arch=c000003e syscall=175 success=yes exit=0 a0=1126a40 a1=1af5 a2=41a678 a3=1123500 items=0 ppid=753 pid=754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
type=PROCTITLE msg=audit(1510845179.207:40): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F7365637572697479
type=NETFILTER_CFG msg=audit(1510845179.215:41): table=mangle family=10 entries=0
type=NETFILTER_CFG msg=audit(1510845179.215:41): table=mangle family=10 entries=0
type=SYSCALL msg=audit(1510845179.215:41): arch=c000003e syscall=175 success=yes exit=0 a0=1efea20 a1=1d75 a2=41a678 a3=1efb500 items=0 ppid=756 pid=757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
type=PROCTITLE msg=audit(1510845179.215:41): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6D616E676C65
type=NETFILTER_CFG msg=audit(1510845179.233:42): table=nat family=10 entries=0
type=NETFILTER_CFG msg=audit(1510845179.233:42): table=nat family=10 entries=0
type=SYSCALL msg=audit(1510845179.233:42): arch=c000003e syscall=175 success=yes exit=0 a0=1541120 a1=20cd a2=41a678 a3=153d500 items=0 ppid=759 pid=760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" key=(null)
type=PROCTITLE msg=audit(1510845179.233:42): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6E6174
type=NETFILTER_CFG msg=audit(1510845179.519:43): table=filter family=10 entries=4
type=SYSCALL msg=audit(1510845179.519:43): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=144fd60 items=0 ppid=685 pid=792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.519:43): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.524:44): table=raw family=10 entries=3
type=SYSCALL msg=audit(1510845179.524:44): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=144e650 items=0 ppid=685 pid=792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.524:44): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.524:45): table=security family=10 entries=4
type=SYSCALL msg=audit(1510845179.524:45): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=144e650 items=0 ppid=685 pid=792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.524:45): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.524:46): table=mangle family=10 entries=6
type=SYSCALL msg=audit(1510845179.524:46): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=144eb70 items=0 ppid=685 pid=792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.524:46): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.524:47): table=nat family=10 entries=5
type=SYSCALL msg=audit(1510845179.524:47): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=144ea90 items=0 ppid=685 pid=792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.524:47): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.531:48): table=filter family=2 entries=4
type=SYSCALL msg=audit(1510845179.531:48): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a24890 items=0 ppid=685 pid=797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.531:48): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.535:49): table=raw family=2 entries=3
type=SYSCALL msg=audit(1510845179.535:49): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a23460 items=0 ppid=685 pid=797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.535:49): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.535:50): table=security family=2 entries=4
type=SYSCALL msg=audit(1510845179.535:50): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a23460 items=0 ppid=685 pid=797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.535:50): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.535:51): table=mangle family=2 entries=6
type=SYSCALL msg=audit(1510845179.535:51): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a237a0 items=0 ppid=685 pid=797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.535:51): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.535:52): table=nat family=2 entries=5
type=SYSCALL msg=audit(1510845179.535:52): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a235e0 items=0 ppid=685 pid=797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.535:52): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.542:53): table=filter family=7 entries=3
type=SYSCALL msg=audit(1510845179.542:53): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=24633b0 items=0 ppid=685 pid=800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables-restor" exe="/usr/sbin/ebtables-restore" key=(null)
type=PROCTITLE msg=audit(1510845179.542:53): proctitle=2F7573722F7362696E2F65627461626C65732D726573746F7265002D2D6E6F666C757368
type=NETFILTER_CFG msg=audit(1510845179.542:54): table=broute family=7 entries=1
type=SYSCALL msg=audit(1510845179.542:54): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=24633b0 items=0 ppid=685 pid=800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables-restor" exe="/usr/sbin/ebtables-restore" key=(null)
type=PROCTITLE msg=audit(1510845179.542:54): proctitle=2F7573722F7362696E2F65627461626C65732D726573746F7265002D2D6E6F666C757368
type=NETFILTER_CFG msg=audit(1510845179.543:55): table=nat family=7 entries=3
type=SYSCALL msg=audit(1510845179.543:55): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=24633b0 items=0 ppid=685 pid=800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables-restor" exe="/usr/sbin/ebtables-restore" key=(null)
type=PROCTITLE msg=audit(1510845179.543:55): proctitle=2F7573722F7362696E2F65627461626C65732D726573746F7265002D2D6E6F666C757368
type=NETFILTER_CFG msg=audit(1510845179.549:56): table=raw family=10 entries=15
type=SYSCALL msg=audit(1510845179.549:56): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=18a7690 items=0 ppid=685 pid=801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.549:56): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.561:57): table=filter family=2 entries=39
type=SYSCALL msg=audit(1510845179.561:57): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ccc680 items=0 ppid=685 pid=804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.561:57): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.561:58): table=raw family=2 entries=15
type=SYSCALL msg=audit(1510845179.561:58): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=cc59a0 items=0 ppid=685 pid=804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.561:58): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.562:59): table=mangle family=2 entries=27
type=SYSCALL msg=audit(1510845179.562:59): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=cc65d0 items=0 ppid=685 pid=804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.562:59): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.562:60): table=nat family=2 entries=26
type=SYSCALL msg=audit(1510845179.562:60): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ccb7b0 items=0 ppid=685 pid=804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.562:60): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.568:61): table=filter family=10 entries=39
type=SYSCALL msg=audit(1510845179.568:61): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=978f60 items=0 ppid=685 pid=805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.568:61): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.569:62): table=raw family=10 entries=17
type=SYSCALL msg=audit(1510845179.569:62): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=971360 items=0 ppid=685 pid=805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.569:62): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.569:63): table=mangle family=10 entries=27
type=SYSCALL msg=audit(1510845179.569:63): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=977990 items=0 ppid=685 pid=805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.569:63): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.569:64): table=nat family=10 entries=26
type=SYSCALL msg=audit(1510845179.569:64): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=977990 items=0 ppid=685 pid=805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.569:64): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.574:65): table=filter family=10 entries=81
type=SYSCALL msg=audit(1510845179.574:65): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=15a9890 items=0 ppid=685 pid=806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.574:65): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.574:66): table=raw family=10 entries=29
type=SYSCALL msg=audit(1510845179.574:66): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=15a3bf0 items=0 ppid=685 pid=806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.574:66): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.575:67): table=security family=10 entries=13
type=SYSCALL msg=audit(1510845179.575:67): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=15a23c0 items=0 ppid=685 pid=806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.575:67): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.575:68): table=mangle family=10 entries=39
type=SYSCALL msg=audit(1510845179.575:68): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=15a4840 items=0 ppid=685 pid=806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.575:68): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.580:69): table=filter family=2 entries=80
type=SYSCALL msg=audit(1510845179.580:69): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d3faf0 items=0 ppid=685 pid=807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.580:69): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.580:70): table=raw family=2 entries=27
type=SYSCALL msg=audit(1510845179.580:70): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d3af50 items=0 ppid=685 pid=807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.580:70): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.581:71): table=security family=2 entries=13
type=SYSCALL msg=audit(1510845179.581:71): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d39ff0 items=0 ppid=685 pid=807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.581:71): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.581:72): table=mangle family=2 entries=39
type=SYSCALL msg=audit(1510845179.581:72): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d3bcc0 items=0 ppid=685 pid=807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.581:72): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.585:73): table=filter family=7 entries=3
type=SYSCALL msg=audit(1510845179.585:73): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=e76620 items=0 ppid=685 pid=808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables-restor" exe="/usr/sbin/ebtables-restore" key=(null)
type=PROCTITLE msg=audit(1510845179.585:73): proctitle=2F7573722F7362696E2F65627461626C65732D726573746F7265002D2D6E6F666C757368
type=NETFILTER_CFG msg=audit(1510845179.586:74): table=broute family=7 entries=1
type=SYSCALL msg=audit(1510845179.586:74): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=e76620 items=0 ppid=685 pid=808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables-restor" exe="/usr/sbin/ebtables-restore" key=(null)
type=PROCTITLE msg=audit(1510845179.586:74): proctitle=2F7573722F7362696E2F65627461626C65732D726573746F7265002D2D6E6F666C757368
type=NETFILTER_CFG msg=audit(1510845179.586:75): table=nat family=7 entries=3
type=SYSCALL msg=audit(1510845179.586:75): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=80 a3=e76620 items=0 ppid=685 pid=808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ebtables-restor" exe="/usr/sbin/ebtables-restore" key=(null)
type=PROCTITLE msg=audit(1510845179.586:75): proctitle=2F7573722F7362696E2F65627461626C65732D726573746F7265002D2D6E6F666C757368
type=NETFILTER_CFG msg=audit(1510845179.641:76): table=filter family=2 entries=80
type=SYSCALL msg=audit(1510845179.641:76): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2405610 items=0 ppid=685 pid=810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.641:76): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.642:77): table=raw family=2 entries=27
type=SYSCALL msg=audit(1510845179.642:77): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23ff860 items=0 ppid=685 pid=810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.642:77): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.642:78): table=mangle family=2 entries=39
type=SYSCALL msg=audit(1510845179.642:78): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2400fb0 items=0 ppid=685 pid=810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.642:78): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.642:79): table=nat family=2 entries=50
type=SYSCALL msg=audit(1510845179.642:79): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2401d40 items=0 ppid=685 pid=810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.642:79): proctitle=2F7573722F7362696E2F69707461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.647:80): table=filter family=10 entries=81
type=SYSCALL msg=audit(1510845179.647:80): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=17034b0 items=0 ppid=685 pid=811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.647:80): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.647:81): table=raw family=10 entries=29
type=SYSCALL msg=audit(1510845179.647:81): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=16fc290 items=0 ppid=685 pid=811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.647:81): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.647:82): table=mangle family=10 entries=39
type=SYSCALL msg=audit(1510845179.647:82): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=16fdb70 items=0 ppid=685 pid=811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.647:82): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=NETFILTER_CFG msg=audit(1510845179.647:83): table=nat family=10 entries=50
type=SYSCALL msg=audit(1510845179.647:83): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=16fecf0 items=0 ppid=685 pid=811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" key=(null)
type=PROCTITLE msg=audit(1510845179.647:83): proctitle=2F7573722F7362696E2F6970367461626C65732D726573746F7265002D2D776169743D32002D6E
type=SERVICE_START msg=audit(1510845180.350:84): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845180.726:85): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845180.829:86): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
type=SERVICE_START msg=audit(1510845180.838:87): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845181.320:88): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=httpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845181.357:89): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845181.693:90): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=postfix comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845181.947:91): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=postgresql comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SYSTEM_RUNLEVEL msg=audit(1510845181.952:92): pid=1132 uid=0 auid=4294967295 ses=4294967295 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1510845181.952:93): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1510845181.952:94): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845184.380:95): pid=1134 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845184.380:96): pid=1134 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845184.380:97): pid=1134 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845184.383:98): pid=1133 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=diffie-hellman-group-exchange-sha256 spid=1134 suid=74 rport=64723 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845184.383:99): pid=1133 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=diffie-hellman-group-exchange-sha256 spid=1134 suid=74 rport=64723 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845185.030:100): pid=1133 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_ACCT msg=audit(1510845185.030:101): pid=1133 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.031:102): pid=1133 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=1134 suid=74 rport=64723 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845185.033:103): pid=1133 uid=0 auid=4294967295 ses=4294967295 msg='op=success acct="smatou" exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1510845185.035:104): pid=1133 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=LOGIN msg=audit(1510845185.035:105): pid=1133 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1
type=CRYPTO_KEY_USER msg=audit(1510845185.046:106): pid=1136 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.046:107): pid=1136 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.046:108): pid=1136 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845185.058:109): pid=1135 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1136 suid=74 rport=64731 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845185.058:110): pid=1135 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1136 suid=74 rport=64731 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_START msg=audit(1510845185.063:111): pid=1133 uid=0 auid=1000 ses=1 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.063:112): pid=1137 uid=0 auid=1000 ses=1 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.064:113): pid=1137 uid=0 auid=1000 ses=1 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.064:114): pid=1137 uid=0 auid=1000 ses=1 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRED_ACQ msg=audit(1510845185.064:115): pid=1137 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_SESSION msg=audit(1510845185.065:116): pid=1133 uid=0 auid=1000 ses=1 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=diffie-hellman-group-exchange-sha256 spid=1137 suid=1000 rport=64723 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845185.065:117): pid=1133 uid=0 auid=1000 ses=1 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=diffie-hellman-group-exchange-sha256 spid=1137 suid=1000 rport=64723 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845185.099:118): pid=1135 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_ACCT msg=audit(1510845185.100:119): pid=1135 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.101:120): pid=1135 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=1136 suid=74 rport=64731 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845185.102:121): pid=1135 uid=0 auid=4294967295 ses=4294967295 msg='op=success acct="smatou" exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1510845185.102:122): pid=1135 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=LOGIN msg=audit(1510845185.102:123): pid=1135 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1
type=USER_START msg=audit(1510845185.108:124): pid=1135 uid=0 auid=1000 ses=2 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.110:125): pid=1138 uid=0 auid=1000 ses=2 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.110:126): pid=1138 uid=0 auid=1000 ses=2 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.110:127): pid=1138 uid=0 auid=1000 ses=2 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRED_ACQ msg=audit(1510845185.110:128): pid=1138 uid=0 auid=1000 ses=2 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1510845185.318:129): pid=1135 uid=0 auid=1000 ses=2 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_START msg=audit(1510845185.318:130): pid=1135 uid=0 auid=1000 ses=2 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.321:131): pid=1135 uid=0 auid=1000 ses=2 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1139 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.387:132): pid=1133 uid=0 auid=1000 ses=1 msg='op=destroy kind=session fp=? direction=from-client spid=1137 suid=1000 rport=64723 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.879:133): pid=1133 uid=0 auid=1000 ses=1 msg='op=destroy kind=session fp=? direction=from-server spid=1137 suid=1000 rport=64723 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_LOGIN msg=audit(1510845185.883:134): pid=1133 uid=0 auid=1000 ses=1 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=/dev/pts/0 res=success'
type=USER_START msg=audit(1510845185.883:135): pid=1133 uid=0 auid=1000 ses=1 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=/dev/pts/0 res=success'
type=CRYPTO_KEY_USER msg=audit(1510845185.886:136): pid=1133 uid=0 auid=1000 ses=1 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1148 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1510845190.712:137): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1510845207.593:138): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1510845249.067:139): pid=1176 uid=1000 auid=1000 ses=1 msg='op=PAM:authentication grantors=pam_unix acct="smatou" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_ACCT msg=audit(1510845249.067:140): pid=1176 uid=1000 auid=1000 ses=1 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="smatou" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_CMD msg=audit(1510845249.068:141): pid=1176 uid=1000 auid=1000 ses=1 msg='cwd="/var/log" cmd=7375202D terminal=pts/0 res=success'
type=CRED_REFR msg=audit(1510845249.068:142): pid=1176 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_START msg=audit(1510845249.068:143): pid=1176 uid=0 auid=1000 ses=1 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_AUTH msg=audit(1510845249.080:144): pid=1177 uid=0 auid=1000 ses=1 msg='op=PAM:authentication grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=ProjeQtor addr=? terminal=pts/0 res=success'
type=USER_ACCT msg=audit(1510845249.080:145): pid=1177 uid=0 auid=1000 ses=1 msg='op=PAM:accounting grantors=pam_succeed_if acct="root" exe="/usr/bin/su" hostname=ProjeQtor addr=? terminal=pts/0 res=success'
type=CRED_ACQ msg=audit(1510845249.080:146): pid=1177 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=ProjeQtor addr=? terminal=pts/0 res=success'
type=USER_START msg=audit(1510845249.085:147): pid=1177 uid=0 auid=1000 ses=1 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=ProjeQtor addr=? terminal=pts/0 res=success'
type=CRYPTO_KEY_USER msg=audit(1510845322.261:148): pid=1201 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845322.261:149): pid=1201 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845322.261:150): pid=1201 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845322.262:151): pid=1200 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1201 suid=74 rport=65374 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845322.262:152): pid=1200 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1201 suid=74 rport=65374 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845322.296:153): pid=1200 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_ACCT msg=audit(1510845322.297:154): pid=1200 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845322.298:155): pid=1200 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=1201 suid=74 rport=65374 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845322.299:156): pid=1200 uid=0 auid=4294967295 ses=4294967295 msg='op=success acct="smatou" exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1510845322.299:157): pid=1200 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=LOGIN msg=audit(1510845322.300:158): pid=1200 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1
type=USER_START msg=audit(1510845322.305:159): pid=1200 uid=0 auid=1000 ses=3 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845322.306:160): pid=1202 uid=0 auid=1000 ses=3 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845322.307:161): pid=1202 uid=0 auid=1000 ses=3 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845322.307:162): pid=1202 uid=0 auid=1000 ses=3 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRED_ACQ msg=audit(1510845322.307:163): pid=1202 uid=0 auid=1000 ses=3 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1510845322.505:164): pid=1200 uid=0 auid=1000 ses=3 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_START msg=audit(1510845322.505:165): pid=1200 uid=0 auid=1000 ses=3 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845322.508:166): pid=1200 uid=0 auid=1000 ses=3 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845325.670:167): pid=1200 uid=0 auid=1000 ses=3 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1510845325.670:168): pid=1200 uid=0 auid=1000 ses=3 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845325.670:169): pid=1200 uid=0 auid=1000 ses=3 msg='op=destroy kind=session fp=? direction=both spid=1202 suid=1000 rport=65374 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845325.672:170): pid=1200 uid=0 auid=1000 ses=3 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845325.673:171): pid=1200 uid=0 auid=1000 ses=3 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRED_DISP msg=audit(1510845325.673:172): pid=1200 uid=0 auid=1000 ses=3 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845325.674:173): pid=1200 uid=0 auid=1000 ses=3 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845325.674:174): pid=1200 uid=0 auid=1000 ses=3 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845325.674:175): pid=1200 uid=0 auid=1000 ses=3 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845348.332:176): pid=1177 uid=0 auid=1000 ses=1 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=ProjeQtor addr=? terminal=pts/0 res=success'
type=CRED_DISP msg=audit(1510845348.332:177): pid=1177 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=ProjeQtor addr=? terminal=pts/0 res=success'
type=USER_END msg=audit(1510845348.336:178): pid=1176 uid=0 auid=1000 ses=1 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=CRED_DISP msg=audit(1510845348.336:179): pid=1176 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_START msg=audit(1510845351.032:180): pid=1135 uid=0 auid=1000 ses=2 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845351.040:181): pid=1135 uid=0 auid=1000 ses=2 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1213 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845351.083:182): pid=1135 uid=0 auid=1000 ses=2 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845365.975:183): pid=1225 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845365.975:184): pid=1225 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845365.975:185): pid=1225 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845365.976:186): pid=1224 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1225 suid=74 rport=49214 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845365.976:187): pid=1224 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1225 suid=74 rport=49214 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845366.022:188): pid=1224 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_ACCT msg=audit(1510845366.022:189): pid=1224 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845366.025:190): pid=1224 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=1225 suid=74 rport=49214 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845366.025:191): pid=1224 uid=0 auid=4294967295 ses=4294967295 msg='op=success acct="smatou" exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1510845366.025:192): pid=1224 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=LOGIN msg=audit(1510845366.025:193): pid=1224 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1
type=USER_START msg=audit(1510845366.033:194): pid=1224 uid=0 auid=1000 ses=4 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845366.035:195): pid=1226 uid=0 auid=1000 ses=4 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845366.035:196): pid=1226 uid=0 auid=1000 ses=4 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845366.035:197): pid=1226 uid=0 auid=1000 ses=4 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRED_ACQ msg=audit(1510845366.035:198): pid=1226 uid=0 auid=1000 ses=4 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1510845366.241:199): pid=1224 uid=0 auid=1000 ses=4 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_START msg=audit(1510845366.241:200): pid=1224 uid=0 auid=1000 ses=4 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845366.249:201): pid=1224 uid=0 auid=1000 ses=4 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1227 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845368.773:202): pid=1224 uid=0 auid=1000 ses=4 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1510845368.773:203): pid=1224 uid=0 auid=1000 ses=4 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845368.773:204): pid=1224 uid=0 auid=1000 ses=4 msg='op=destroy kind=session fp=? direction=both spid=1226 suid=1000 rport=49214 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845368.775:205): pid=1224 uid=0 auid=1000 ses=4 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1226 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845368.775:206): pid=1224 uid=0 auid=1000 ses=4 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRED_DISP msg=audit(1510845368.775:207): pid=1224 uid=0 auid=1000 ses=4 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845368.777:208): pid=1224 uid=0 auid=1000 ses=4 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845368.777:209): pid=1224 uid=0 auid=1000 ses=4 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845368.777:210): pid=1224 uid=0 auid=1000 ses=4 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1510845403.546:211): pid=1238 uid=1000 auid=1000 ses=1 msg='cwd="/home/smatou" cmd=63686F776E20736D61746F753A736D61746F75206D65737361676573 terminal=pts/0 res=success'
type=CRED_REFR msg=audit(1510845403.546:212): pid=1238 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_START msg=audit(1510845403.546:213): pid=1238 uid=0 auid=1000 ses=1 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_END msg=audit(1510845403.557:214): pid=1238 uid=0 auid=1000 ses=1 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=CRED_DISP msg=audit(1510845403.557:215): pid=1238 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=CRYPTO_KEY_USER msg=audit(1510845417.126:216): pid=1242 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845417.126:217): pid=1242 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845417.126:218): pid=1242 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845417.128:219): pid=1241 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1242 suid=74 rport=49460 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845417.129:220): pid=1241 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1242 suid=74 rport=49460 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845417.172:221): pid=1241 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_ACCT msg=audit(1510845417.173:222): pid=1241 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845417.174:223): pid=1241 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=1242 suid=74 rport=49460 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845417.175:224): pid=1241 uid=0 auid=4294967295 ses=4294967295 msg='op=success acct="smatou" exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1510845417.176:225): pid=1241 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=LOGIN msg=audit(1510845417.176:226): pid=1241 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1
type=USER_START msg=audit(1510845417.181:227): pid=1241 uid=0 auid=1000 ses=5 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845417.183:228): pid=1243 uid=0 auid=1000 ses=5 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845417.183:229): pid=1243 uid=0 auid=1000 ses=5 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845417.183:230): pid=1243 uid=0 auid=1000 ses=5 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRED_ACQ msg=audit(1510845417.183:231): pid=1243 uid=0 auid=1000 ses=5 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1510845417.387:232): pid=1241 uid=0 auid=1000 ses=5 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_START msg=audit(1510845417.387:233): pid=1241 uid=0 auid=1000 ses=5 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845417.395:234): pid=1241 uid=0 auid=1000 ses=5 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1244 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845418.168:235): pid=1241 uid=0 auid=1000 ses=5 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1510845418.168:236): pid=1241 uid=0 auid=1000 ses=5 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845418.168:237): pid=1241 uid=0 auid=1000 ses=5 msg='op=destroy kind=session fp=? direction=both spid=1243 suid=1000 rport=49460 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845418.170:238): pid=1241 uid=0 auid=1000 ses=5 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1243 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845418.172:239): pid=1241 uid=0 auid=1000 ses=5 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRED_DISP msg=audit(1510845418.172:240): pid=1241 uid=0 auid=1000 ses=5 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845418.172:241): pid=1241 uid=0 auid=1000 ses=5 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845418.173:242): pid=1241 uid=0 auid=1000 ses=5 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845418.173:243): pid=1241 uid=0 auid=1000 ses=5 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1510845426.940:244): pid=1255 uid=1000 auid=1000 ses=1 msg='cwd="/home/smatou" cmd=63686F776E20736D61746F753A736D61746F752061756469742E6C6F67 terminal=pts/0 res=success'
type=CRED_REFR msg=audit(1510845426.941:245): pid=1255 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_START msg=audit(1510845426.941:246): pid=1255 uid=0 auid=1000 ses=1 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_END msg=audit(1510845426.946:247): pid=1255 uid=0 auid=1000 ses=1 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=CRED_DISP msg=audit(1510845426.946:248): pid=1255 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_CMD msg=audit(1510845431.779:249): pid=1257 uid=1000 auid=1000 ses=1 msg='cwd="/home/smatou" cmd=63686F776E20736D61746F753A736D61746F75206163636573735F6C6F67 terminal=pts/0 res=success'
type=CRED_REFR msg=audit(1510845431.779:250): pid=1257 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_START msg=audit(1510845431.779:251): pid=1257 uid=0 auid=1000 ses=1 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_END msg=audit(1510845431.782:252): pid=1257 uid=0 auid=1000 ses=1 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=CRED_DISP msg=audit(1510845431.782:253): pid=1257 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_CMD msg=audit(1510845436.202:254): pid=1259 uid=1000 auid=1000 ses=1 msg='cwd="/home/smatou" cmd=63686F776E20736D61746F753A736D61746F75206572726F725F6C6F67 terminal=pts/0 res=success'
type=CRED_REFR msg=audit(1510845436.202:255): pid=1259 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_START msg=audit(1510845436.202:256): pid=1259 uid=0 auid=1000 ses=1 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_END msg=audit(1510845436.206:257): pid=1259 uid=0 auid=1000 ses=1 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=CRED_DISP msg=audit(1510845436.206:258): pid=1259 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=CRYPTO_KEY_USER msg=audit(1510845445.471:259): pid=1262 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845445.471:260): pid=1262 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845445.472:261): pid=1262 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845445.474:262): pid=1261 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1262 suid=74 rport=49593 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845445.474:263): pid=1261 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1262 suid=74 rport=49593 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845445.511:264): pid=1261 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_ACCT msg=audit(1510845445.511:265): pid=1261 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845445.512:266): pid=1261 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=1262 suid=74 rport=49593 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845445.513:267): pid=1261 uid=0 auid=4294967295 ses=4294967295 msg='op=success acct="smatou" exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1510845445.513:268): pid=1261 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=LOGIN msg=audit(1510845445.513:269): pid=1261 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1
type=USER_START msg=audit(1510845445.519:270): pid=1261 uid=0 auid=1000 ses=6 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845445.519:271): pid=1263 uid=0 auid=1000 ses=6 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845445.521:272): pid=1263 uid=0 auid=1000 ses=6 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845445.521:273): pid=1263 uid=0 auid=1000 ses=6 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRED_ACQ msg=audit(1510845445.521:274): pid=1263 uid=0 auid=1000 ses=6 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1510845445.725:275): pid=1261 uid=0 auid=1000 ses=6 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_START msg=audit(1510845445.725:276): pid=1261 uid=0 auid=1000 ses=6 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845445.733:277): pid=1261 uid=0 auid=1000 ses=6 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1264 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845446.467:278): pid=1261 uid=0 auid=1000 ses=6 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1510845446.467:279): pid=1261 uid=0 auid=1000 ses=6 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845446.467:280): pid=1261 uid=0 auid=1000 ses=6 msg='op=destroy kind=session fp=? direction=both spid=1263 suid=1000 rport=49593 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845446.469:281): pid=1261 uid=0 auid=1000 ses=6 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1263 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845446.470:282): pid=1261 uid=0 auid=1000 ses=6 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRED_DISP msg=audit(1510845446.470:283): pid=1261 uid=0 auid=1000 ses=6 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845446.471:284): pid=1261 uid=0 auid=1000 ses=6 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1261 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845446.471:285): pid=1261 uid=0 auid=1000 ses=6 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1261 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845446.471:286): pid=1261 uid=0 auid=1000 ses=6 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1261 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845449.598:287): pid=1274 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1274 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845449.599:288): pid=1274 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1274 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845449.599:289): pid=1274 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1274 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845449.601:290): pid=1273 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1274 suid=74 rport=49614 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845449.601:291): pid=1273 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1274 suid=74 rport=49614 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845449.639:292): pid=1273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_ACCT msg=audit(1510845449.639:293): pid=1273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845449.640:294): pid=1273 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=1274 suid=74 rport=49614 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845449.641:295): pid=1273 uid=0 auid=4294967295 ses=4294967295 msg='op=success acct="smatou" exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1510845449.641:296): pid=1273 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=LOGIN msg=audit(1510845449.641:297): pid=1273 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1
type=USER_START msg=audit(1510845449.647:298): pid=1273 uid=0 auid=1000 ses=7 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845449.649:299): pid=1275 uid=0 auid=1000 ses=7 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845449.649:300): pid=1275 uid=0 auid=1000 ses=7 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845449.649:301): pid=1275 uid=0 auid=1000 ses=7 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRED_ACQ msg=audit(1510845449.649:302): pid=1275 uid=0 auid=1000 ses=7 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1510845449.854:303): pid=1273 uid=0 auid=1000 ses=7 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_START msg=audit(1510845449.854:304): pid=1273 uid=0 auid=1000 ses=7 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845449.858:305): pid=1273 uid=0 auid=1000 ses=7 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1276 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845451.801:306): pid=1273 uid=0 auid=1000 ses=7 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1510845451.801:307): pid=1273 uid=0 auid=1000 ses=7 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845451.801:308): pid=1273 uid=0 auid=1000 ses=7 msg='op=destroy kind=session fp=? direction=both spid=1275 suid=1000 rport=49614 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845451.804:309): pid=1273 uid=0 auid=1000 ses=7 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1275 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845451.805:310): pid=1273 uid=0 auid=1000 ses=7 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRED_DISP msg=audit(1510845451.805:311): pid=1273 uid=0 auid=1000 ses=7 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845451.806:312): pid=1273 uid=0 auid=1000 ses=7 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845451.806:313): pid=1273 uid=0 auid=1000 ses=7 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845451.806:314): pid=1273 uid=0 auid=1000 ses=7 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845453.034:315): pid=1287 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845453.034:316): pid=1287 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845453.034:317): pid=1287 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845453.036:318): pid=1286 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1287 suid=74 rport=49631 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1510845453.036:319): pid=1286 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=umac-64@openssh.com pfs=diffie-hellman-group1-sha1 spid=1287 suid=74 rport=49631 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845453.079:320): pid=1286 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_ACCT msg=audit(1510845453.079:321): pid=1286 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845453.080:322): pid=1286 uid=0 auid=4294967295 ses=4294967295 msg='op=destroy kind=session fp=? direction=both spid=1287 suid=74 rport=49631 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=USER_AUTH msg=audit(1510845453.081:323): pid=1286 uid=0 auid=4294967295 ses=4294967295 msg='op=success acct="smatou" exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=ssh res=success'
type=CRED_ACQ msg=audit(1510845453.082:324): pid=1286 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=LOGIN msg=audit(1510845453.082:325): pid=1286 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1
type=USER_START msg=audit(1510845453.088:326): pid=1286 uid=0 auid=1000 ses=8 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845453.090:327): pid=1288 uid=0 auid=1000 ses=8 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845453.090:328): pid=1288 uid=0 auid=1000 ses=8 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845453.090:329): pid=1288 uid=0 auid=1000 ses=8 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRED_ACQ msg=audit(1510845453.091:330): pid=1288 uid=0 auid=1000 ses=8 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGIN msg=audit(1510845453.398:331): pid=1286 uid=0 auid=1000 ses=8 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_START msg=audit(1510845453.398:332): pid=1286 uid=0 auid=1000 ses=8 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845453.401:333): pid=1286 uid=0 auid=1000 ses=8 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1289 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845454.030:334): pid=1286 uid=0 auid=1000 ses=8 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=USER_LOGOUT msg=audit(1510845454.030:335): pid=1286 uid=0 auid=1000 ses=8 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845454.030:336): pid=1286 uid=0 auid=1000 ses=8 msg='op=destroy kind=session fp=? direction=both spid=1288 suid=1000 rport=49631 laddr=192.168.116.133 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.116.1 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845454.032:337): pid=1286 uid=0 auid=1000 ses=8 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1510845454.034:338): pid=1286 uid=0 auid=1000 ses=8 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRED_DISP msg=audit(1510845454.034:339): pid=1286 uid=0 auid=1000 ses=8 msg='op=PAM:setcred grantors=pam_unix acct="smatou" exe="/usr/sbin/sshd" hostname=projeqtor addr=192.168.116.1 terminal=ssh res=success'
type=CRYPTO_KEY_USER msg=audit(1510845454.034:340): pid=1286 uid=0 auid=1000 ses=8 msg='op=destroy kind=server fp=SHA256:8a:a9:79:72:db:27:23:2d:7f:3b:e3:45:a5:95:4d:1c:f1:0f:c6:87:fc:96:8c:f9:95:32:af:bb:35:79:35:7f direction=? spid=1286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845454.034:341): pid=1286 uid=0 auid=1000 ses=8 msg='op=destroy kind=server fp=SHA256:22:d2:da:8e:2d:07:f6:97:f2:29:ca:9b:2b:3a:0c:0e:4b:40:72:a8:7d:ec:6f:c4:21:82:ee:52:67:d0:42:ed direction=? spid=1286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1510845454.034:342): pid=1286 uid=0 auid=1000 ses=8 msg='op=destroy kind=server fp=SHA256:27:ff:da:d9:b0:ca:25:22:0a:7e:85:26:40:cc:10:9b:0f:8f:90:38:44:0b:6b:b7:f0:16:0c:2c:c8:91:02:62 direction=? spid=1286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1510845708.258:343): pid=1313 uid=1000 auid=1000 ses=1 msg='cwd="/home/smatou" cmd=7375202D terminal=pts/0 res=success'
type=CRED_REFR msg=audit(1510845708.258:344): pid=1313 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_START msg=audit(1510845708.258:345): pid=1313 uid=0 auid=1000 ses=1 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
type=USER_AUTH msg=audit(1510845708.268:346): pid=1314 uid=0 auid=1000 ses=1 msg='op=PAM:authentication grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=ProjeQtor addr=? terminal=pts/0 res=success'
type=USER_ACCT msg=audit(1510845708.268:347): pid=1314 uid=0 auid=1000 ses=1 msg='op=PAM:accounting grantors=pam_succeed_if acct="root" exe="/usr/bin/su" hostname=ProjeQtor addr=? terminal=pts/0 res=success'
type=CRED_ACQ msg=audit(1510845708.268:348): pid=1314 uid=0 auid=1000 ses=1 msg='op=PAM:setcred grantors=pam_rootok acct="root" exe="/usr/bin/su" hostname=ProjeQtor addr=? terminal=pts/0 res=success'
type=USER_START msg=audit(1510845708.271:349): pid=1314 uid=0 auid=1000 ses=1 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_xauth acct="root" exe="/usr/bin/su" hostname=ProjeQtor addr=? terminal=pts/0 res=success'