Attachment 154339 Details for Bug 239449 – Audit logs from just after VM creation

Audit logs from just after VM creation

audit.log (text/plain), 16.77 KB, created by Daniel Berrangé on 2007-05-08 15:01:52 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Berrangé

Created: 2007-05-08 15:01:52 UTC

Size: 16.77 KB

patch

obsolete

>type=DAEMON_START msg=audit(1178636097.168:3017) auditd start, ver=1.5.3, format=raw, auid=4294967295 pid=2300 res=success, auditd pid=2300
>type=CONFIG_CHANGE msg=audit(1178636097.271:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1178636097.319:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=USER_LOGIN msg=audit(1178636120.365:7): user pid=2971 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=10.11.14.136, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1178636120.641:8): user pid=2971 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1178636121.113:9): user pid=2971 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=LOGIN msg=audit(1178636121.809:10): login pid=2971 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1178636121.809:11): user pid=2971 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1178636122.105:12): user pid=2987 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=/dev/pts/1 res=success)'
>type=CRED_REFR msg=audit(1178636122.109:13): user pid=2987 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=AVC msg=audit(1178636132.609:14): avc:  denied  { read } for  pid=3112 comm="python" name="config.sxp" dev=dm-0 ino=4391845 scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:xend_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1178636132.609:14): arch=c000003e syscall=2 success=yes exit=18 a0=dbf1b0 a1=0 a2=1b6 a3=0 items=0 ppid=3111 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="python" exe="/usr/bin/python" subj=system_u:system_r:xend_t:s0 key=(null)
>type=USER_ERR msg=audit(1178636136.426:15): user pid=3244 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_LOGIN msg=audit(1178636447.547:16): user pid=3354 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=10.11.14.136, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1178636447.783:17): user pid=3354 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1178636447.855:18): user pid=3354 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=LOGIN msg=audit(1178636447.859:19): login pid=3354 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1178636447.863:20): user pid=3354 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1178636448.043:21): user pid=3356 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=/dev/pts/2 res=success)'
>type=CRED_REFR msg=audit(1178636448.047:22): user pid=3356 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1178636461.168:23): user pid=3389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1178636461.172:24): user pid=3389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1178636461.172:25): login pid=3389 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1178636461.188:26): user pid=3389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1178636461.280:27): user pid=3389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1178636461.288:28): user pid=3389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='PAM: session close acct=root : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1178636794.867:29): avc:  denied  { create } for  pid=3412 comm="python" name="xenbl.17343" scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:xend_var_run_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1178636794.867:29): arch=c000003e syscall=133 success=yes exit=0 a0=ec9834 a1=1180 a2=0 a3=ec9810 items=0 ppid=3111 pid=3412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="python" exe="/usr/bin/python" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1178636794.911:30): avc:  denied  { read } for  pid=3412 comm="python" name="xenbl.17343" dev=dm-0 ino=7133197 scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:xend_var_run_t:s0 tclass=fifo_file
>type=AVC msg=audit(1178636795.175:31): avc:  denied  { write } for  pid=3413 comm="pygrub" name="xenbl.17343" dev=dm-0 ino=7133197 scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:xend_var_run_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1178636795.175:31): arch=c000003e syscall=2 success=yes exit=3 a0=728e10 a1=1 a2=0 a3=728e10 items=0 ppid=3112 pid=3413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 comm="pygrub" exe="/usr/bin/python" subj=system_u:system_r:xend_t:s0 key=(null)
>type=SYSCALL msg=audit(1178636794.911:30): arch=c000003e syscall=2 success=yes exit=27 a0=a90b80 a1=0 a2=0 a3=a90b80 items=0 ppid=3111 pid=3412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="python" exe="/usr/bin/python" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1178636800.892:32): avc:  denied  { unlink } for  pid=3412 comm="python" name="xenbl.17343" dev=dm-0 ino=7133197 scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:xend_var_run_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1178636800.892:32): arch=c000003e syscall=87 success=yes exit=0 a0=a90b80 a1=1 a2=1 a3=a90b80 items=0 ppid=3111 pid=3412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="python" exe="/usr/bin/python" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1178636801.652:33): avc:  denied  { create } for  pid=3116 comm="blktapctrl" name="tapctrlread1" scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1178636801.652:33): arch=c000003e syscall=133 success=yes exit=0 a0=6048b0 a1=11ff a2=0 a3=6048b0 items=0 ppid=1 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="blktapctrl" exe="/usr/sbin/blktapctrl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1178636801.696:34): avc:  denied  { read write } for  pid=3116 comm="blktapctrl" name="tapctrlread1" dev=dm-0 ino=6574404 scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1178636801.696:34): arch=c000003e syscall=2 success=yes exit=9 a0=6048b0 a1=802 a2=0 a3=6048b0 items=0 ppid=1 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="blktapctrl" exe="/usr/sbin/blktapctrl" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1178636801.988:35): avc:  denied  { search } for  pid=3423 comm="blktap" name="xen" dev=dm-0 ino=6584321 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1178636801.988:35): arch=c000003e syscall=2 success=yes exit=3 a0=8cb370 a1=441 a2=1b6 a3=0 items=0 ppid=3422 pid=3423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="blktap" exe="/bin/bash" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1178636802.044:36): avc:  denied  { write } for  pid=3412 comm="python" name="z_jYgb" dev=dm-0 ino=4389252 scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:xend_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1178636802.044:36): arch=c000003e syscall=1 success=yes exit=4 a0=1a a1=2aaab22cd000 a2=4 a3=d8b4a4 items=0 ppid=3111 pid=3412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="python" exe="/usr/bin/python" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC_PATH msg=audit(1178636802.044:36):  path="/tmp/z_jYgb"
>type=AVC msg=audit(1178636802.044:37): avc:  denied  { unlink } for  pid=3412 comm="python" name="z_jYgb" dev=dm-0 ino=4389252 scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:xend_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1178636802.044:37): arch=c000003e syscall=87 success=yes exit=0 a0=dd03f0 a1=1 a2=1 a3=dd03f0 items=0 ppid=3111 pid=3412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="python" exe="/usr/bin/python" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1178636802.160:38): avc:  denied  { rename } for  pid=3412 comm="python" name="tmpWx2-1o" dev=dm-0 ino=4389252 scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:xend_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1178636802.160:38): arch=c000003e syscall=82 success=yes exit=0 a0=d07a80 a1=a39410 a2=1 a3=a39410 items=0 ppid=3111 pid=3412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="python" exe="/usr/bin/python" subj=system_u:system_r:xend_t:s0 key=(null)
>type=AVC msg=audit(1178636802.312:39): avc:  denied  { search } for  pid=3490 comm="xenstore-read" name="xen" dev=proc ino=4026533112 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_xen_t:s0 tclass=dir
>type=AVC msg=audit(1178636802.312:40): avc:  denied  { search } for  pid=3492 comm="xenstore-read" name="xen" dev=proc ino=4026533112 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_xen_t:s0 tclass=dir
>type=AVC msg=audit(1178636802.312:40): avc:  denied  { getattr } for  pid=3492 comm="xenstore-read" name="xenbus" dev=proc ino=4026533115 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_xen_t:s0 tclass=file
>type=SYSCALL msg=audit(1178636802.312:40): arch=c000003e syscall=4 success=yes exit=0 a0=3014e031f2 a1=7fff997e61f0 a2=7fff997e61f0 a3=8 items=0 ppid=3491 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenstore-read" exe="/usr/bin/xenstore-read" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC_PATH msg=audit(1178636802.312:40):  path="/proc/xen/xenbus"
>type=AVC msg=audit(1178636802.312:41): avc:  denied  { read write } for  pid=3492 comm="xenstore-read" name="xenbus" dev=proc ino=4026533115 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_xen_t:s0 tclass=file
>type=SYSCALL msg=audit(1178636802.312:41): arch=c000003e syscall=2 success=yes exit=3 a0=3014e031f2 a1=2 a2=0 a3=8 items=0 ppid=3491 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenstore-read" exe="/usr/bin/xenstore-read" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1178636802.312:39): arch=c000003e syscall=4 success=yes exit=0 a0=3014e031f2 a1=7fff95a11450 a2=7fff95a11450 a3=8 items=0 ppid=3489 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="xenstore-read" exe="/usr/bin/xenstore-read" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1178636802.356:42): avc:  denied  { getattr } for  pid=3502 comm="readlink" name="xen" dev=dm-0 ino=6590465 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1178636802.356:42): arch=c000003e syscall=6 success=yes exit=0 a0=606060 a1=7ffff8191c50 a2=7ffff8191c50 a3=606069 items=0 ppid=3423 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="readlink" exe="/usr/bin/readlink" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC_PATH msg=audit(1178636802.356:42):  path="/var/lib/xen"
>type=AVC msg=audit(1178636802.356:43): avc:  denied  { search } for  pid=3502 comm="readlink" name="xen" dev=dm-0 ino=6590465 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xend_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1178636802.356:43): avc:  denied  { getattr } for  pid=3502 comm="readlink" name="images" dev=dm-0 ino=6914291 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xen_image_t:s0 tclass=dir
>type=SYSCALL msg=audit(1178636802.356:43): arch=c000003e syscall=6 success=yes exit=0 a0=606060 a1=7ffff8191c50 a2=7ffff8191c50 a3=60606d items=0 ppid=3423 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="readlink" exe="/usr/bin/readlink" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC_PATH msg=audit(1178636802.356:43):  path="/var/lib/xen/images"
>type=AVC msg=audit(1178636802.368:44): avc:  denied  { search } for  pid=3502 comm="readlink" name="images" dev=dm-0 ino=6914291 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xen_image_t:s0 tclass=dir
>type=AVC msg=audit(1178636802.368:44): avc:  denied  { getattr } for  pid=3502 comm="readlink" name="f7pv.img" dev=dm-0 ino=6916320 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=root:object_r:xen_image_t:s0 tclass=file
>type=SYSCALL msg=audit(1178636802.368:44): arch=c000003e syscall=6 success=yes exit=0 a0=606060 a1=7ffff8191c50 a2=7ffff8191c50 a3=606074 items=0 ppid=3423 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="readlink" exe="/usr/bin/readlink" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=AVC_PATH msg=audit(1178636802.368:44):  path="/var/lib/xen/images/f7pv.img"
>type=ANOM_PROMISCUOUS msg=audit(1178636802.376:45): dev=vif1.0 prom=256 old_prom=0 auid=4294967295
>type=SYSCALL msg=audit(1178636802.376:45): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fff783acee0 a3=21000 items=0 ppid=3430 pid=3508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:udev_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1178637636.699:46): user pid=3538 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct=root: exe="/usr/sbin/sshd" (hostname=?, addr=10.11.14.136, terminal=sshd res=failed)'
>type=USER_ACCT msg=audit(1178637636.967:47): user pid=3538 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: accounting acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1178637637.039:48): user pid=3538 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=LOGIN msg=audit(1178637637.043:49): login pid=3538 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1178637637.043:50): user pid=3538 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: session open acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1178637637.211:51): user pid=3540 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='PAM: setcred acct=root : exe="/usr/sbin/sshd" (hostname=vpn-14-136.rdu.redhat.com, addr=10.11.14.136, terminal=ssh res=success)'

Actions: View

Attachments on bug 239449: 154339 | 154341 | 156198