(15:57:48|15:57:49)\.[[:digit:]]{3} execve\("\.\./sleep", \["\.\./sleep", "0"\], 0x[[:xdigit:]]* /\* [[:digit:]]* vars \*/\) = 0
