XDD__text__TEXT@ 9__data__DATA@__const__TEXT@__cstring__TEXT@ __picsymbolstub2__TEXTL( 0__la_sym_ptr2__DATA h __nl_symbol_ptr__DATA4 __textcoal_nt__TEXT< @ ~@ Piil UStExE@ D$:E@$t  E@)xt&)@D$$Lt)xtv$)@8uDD$D$$t*뻍1Ex,tE@ tE@, 1E@u!E@E@8(u)@ u%$‹E@D$$E@LD$ T$E@dD$D$D$E@ D$ 3D$D$$nD$D$E$6ID$Q$)@ E@8(%$ ‹E@D$8E@LD$4T$0E@dD$,D$(D$$E@ D$ E@Exu uD$E@t DžS DžND$E@t DžR DžND$E@t DžA DžND$E@D$ D$D$$D$D$E $y]uID$$RID$$8D$ID$$t[]Ð  !"#$%&'*+,:;<=>?[\]^`{|}~-%s %s %s %d.%ld %d %salerts%s: Error communicating with execd.(null)%s %c%c%c %s %s %s %s %d.%ld %d %s%s: AR socket busy.%s: AR socket error (shutdown?).%s: Error communicating with ar queue (%d).⍀P⍀P}⍀Pid⍀PPKo⍀oP72Z⍀ZPE⍀EP0⍀0PYr$Ë$2*  XXX{4V8KC`9X+ B48K@@88{8m8A k } 00j } ,,j } ((~j y} s$k$ej `} Z R Lj G} A93j .} (j jj } QQj  yozxm{n|yozxm{n|qldidp<@DD&D(/D)KD+TD/_D4kD6yD8D=DBDDDEDGDHDI DODT#DV;DZIDcUDfDgDiDsDu7D{TD~yDDDDDD6$ /:HK) 6 L Q71G;t.A$lz +!5"AB?S@efg}pyq?r?s$@t &@ - " %  &8ETq((> 'M (\ ~8>d@< @0"phxF90X_OS_Exec___i686.get_pc_thunk.bx___local_name_ar_flag_ar_commands_active_responses_currently_rule__eflog__aflog__fflog_Config___i686.get_pc_thunk.axdyld_stub_binding_helper_merror_OS_SendUnix_snprintf_ftell_OSMatch_Execute_strlen_OS_IPFoundList_strrchr/mnt/gmirror/ports/security/ossec-hids-server/work/ossec-hids-1.3/src/analysisd/alerts/exec.cgcc2_compiled._hostname_mapOS_Exec:F(0,1)=(0,1)void:t(0,1)execq:p(0,2)=*(0,3)=r(0,3);-2147483648;2147483647;arq:p(0,2)lf:p(0,4)=*(0,5)=(0,6)=xs_Eventinfo:ar:p(0,7)=*(0,8)=(0,9)=xs_ar:int:t(0,3)Eventinfo:t(0,5)_Eventinfo:T(0,6)=s128log:(0,10)=*(0,11)=r(0,11);0;127;,0,32;full_log:(0,10),32,32;location:(0,10),64,32;hostname:(0,10),96,32;program_name:(0,10),128,32;srcip:(0,10),160,32;dstip:(0,10),192,32;srcport:(0,10),224,32;dstport:(0,10),256,32;protocol:(0,10),288,32;action:(0,10),320,32;user:(0,10),352,32;dstuser:(0,10),384,32;id:(0,10),416,32;status:(0,10),448,32;command:(0,10),480,32;url:(0,10),512,32;data:(0,10),544,32;systemname:(0,10),576,32;generated_rule:(0,12)=*(0,13)=(0,14)=xs_RuleInfo:,608,32;decoder_info:(0,15)=*(0,16)=(0,17)=s48get_next:(0,18)=(0,19)=@s8;r(0,19);0;255;,0,8;type:(0,18),8,8;use_own_name:(0,18),16,8;id:(0,20)=(0,21)=@s16;r(0,21);0;65535;,32,16;regex_offset:(0,20),48,16;prematch_offset:(0,20),64,16;fts:(0,3),96,32;parent:(0,10),128,32;name:(0,10),160,32;ftscomment:(0,10),192,32;regex:(0,22)=*(0,23)=(0,24)=xs_OSRegex:,224,32;prematch:(0,22),256,32;program_name:(0,25)=*(0,26)=(0,27)=xs_OSMatch:,288,32;plugindecoder:(0,28)=*(0,29)=f(0,1),320,32;order:(0,30)=*(0,31)=*(0,32)=f(0,1),352,32;;,640,32;sid_node_to_delete:(0,33)=*(0,34)=(0,35)=xs_OSListNode:,672,32;size:(0,3),704,32;p_name_size:(0,3),736,32;matched:(0,36)=@s16;r(0,36);-32768;32767;,768,16;time:(0,3),800,32;day:(0,3),832,32;year:(0,3),864,32;hour:(0,37)=ar(0,38)=r(0,38);0000000000000;0037777777777;;0;8;(0,11),896,72;mon:(0,39)=ar(0,38);0;3;(0,11),968,32;;active_response:t(0,8)_ar:T(0,9)=s36timeout:(0,3),0,32;location:(0,3),32,32;level:(0,3),64,32;name:(0,10),96,32;command:(0,10),128,32;agent_id:(0,10),160,32;rules_id:(0,10),192,32;rules_group:(0,10),224,32;ar_cmd:(0,40)=*(0,41)=(0,42)=xs_ar_command:,256,32;;char:t(0,11)RuleInfo:t(0,13)_RuleInfo:T(0,14)=s192sigid:(0,3),0,32;level:(0,3),32,32;maxsize:(0,3),64,32;frequency:(0,3),96,32;timeframe:(0,3),128,32;context:(0,18),160,8;firedtimes:(0,3),192,32;time_ignored:(0,3),224,32;ignore_time:(0,3),256,32;ignore:(0,3),288,32;ckignore:(0,3),320,32;group_prev_matched_sz:(0,3),352,32;__frequency:(0,3),384,32;last_events:(0,43)=*(0,10),416,32;alert_opts:(0,20),448,16;context_opts:(0,20),464,16;category:(0,18),480,8;decoded_as:(0,20),496,16;sid_prev_matched:(0,44)=*(0,45)=(0,46)=xs_OSList:,512,32;sid_search:(0,44),544,32;group_prev_matched:(0,47)=*(0,44),576,32;group_search:(0,44),608,32;event_search:(0,48)=*(0,49)=f(0,50)=*(0,1),640,32;group:(0,10),672,32;match:(0,25),704,32;regex:(0,22),736,32;day_time:(0,10),768,32;week_day:(0,10),800,32;srcip:(0,51)=*(0,52)=*(0,53)=(0,54)=xs_os_ip:,832,32;dstip:(0,51),864,32;srcport:(0,25),896,32;dstport:(0,25),928,32;user:(0,25),960,32;url:(0,25),992,32;id:(0,25),1024,32;status:(0,25),1056,32;hostname:(0,25),1088,32;program_name:(0,25),1120,32;extra_data:(0,25),1152,32;action:(0,10),1184,32;comment:(0,10),1216,32;info:(0,10),1248,32;cve:(0,10),1280,32;if_sid:(0,10),1312,32;if_level:(0,10),1344,32;if_group:(0,10),1376,32;if_matched_regex:(0,22),1408,32;if_matched_group:(0,25),1440,32;if_matched_sid:(0,3),1472,32;ar:(0,55)=*(0,7),1504,32;;OSDecoderInfo:t(0,16)u_int8_t:t(0,18)unsigned char:t(0,19)u_int16_t:t(0,20)short unsigned int:t(0,21)OSRegex:t(0,23)_OSRegex:T(0,24)=s24error:(0,3),0,32;flags:(0,2),32,32;patterns:(0,43),64,32;sub_strings:(0,43),96,32;prts_closure:(0,56)=*(0,43),128,32;prts_str:(0,56),160,32;;OSMatch:t(0,26)_OSMatch:T(0,27)=s16error:(0,3),0,32;size:(0,2),32,32;patterns:(0,43),64,32;match_fp:(0,57)=*(0,58)=*(0,59)=f(0,3),96,32;;OSListNode:t(0,34)_OSListNode:T(0,35)=s12next:(0,60)=*(0,35),0,32;prev:(0,60),32,32;data:(0,50),64,32;;short int:t(0,36)long unsigned int:t(0,61)=r(0,61);0000000000000;0037777777777;ar_command:t(0,41)_ar_command:T(0,42)=s16expect:(0,3),0,32;timeout_allowed:(0,3),32,32;name:(0,10),64,32;executable:(0,10),96,32;;OSList:t(0,45)_OSList:T(0,46)=s24first_node:(0,33),0,32;last_node:(0,33),32,32;cur_node:(0,33),64,32;currently_size:(0,3),96,32;max_size:(0,3),128,32;free_data_function:(0,28),160,32;;os_ip:t(0,53)_os_ip:T(0,54)=s12ip:(0,10),0,32;ip_address:(0,62)=r(0,62);0000000000000;0037777777777;,32,32;netmask:(0,62),64,32;;unsigned int:t(0,62)exec_msg:(0,63)=ar(0,38);0;1024;(0,11)ip:(0,10)user:(0,10)srcip_size:(0,3)wl:(0,64)=*(0,25)rc:(0,3)__local_name:G(0,10)hostname_map:S(0,65)=ar(0,38);0;255;(0,66)=k(0,19)ar_flag:G(0,3)ar_commands:G(0,44)active_responses:G(0,44)currently_rule:G(0,12)_eflog:G(0,67)=*(0,68)=(0,69)=xs__sFILE:FILE:t(0,68)__sFILE:T(0,69)=s88_p:(0,70)=*(0,19),0,32;_r:(0,3),32,32;_w:(0,3),64,32;_flags:(0,36),96,16;_file:(0,36),112,16;_bf:(0,71)=xs__sbuf:,128,64;_lbfsize:(0,3),192,32;_cookie:(0,50),224,32;_close:(0,72)=*(0,73)=f(0,3),256,32;_read:(0,74)=*(0,75)=f(0,3),288,32;_seek:(0,76)=*(0,77)=f(0,78)=(0,79)=(0,80)=(0,81)=@s64;r(0,81);01000000000000000000000;0777777777777777777777;,320,32;_write:(0,82)=*(0,83)=f(0,3),352,32;_ub:(0,71),384,64;_extra:(0,84)=*(0,85)=xs__sFILEX:,448,32;_ur:(0,3),480,32;_ubuf:(0,86)=ar(0,38);0;2;(0,19),512,24;_nbuf:(0,87)=ar(0,38);0;0;(0,19),536,8;_lb:(0,71),544,64;_blksize:(0,3),608,32;_offset:(0,78),640,64;;__sbuf:T(0,71)=s8_base:(0,70),0,32;_size:(0,3),32,32;;fpos_t:t(0,78)__darwin_off_t:t(0,79)__int64_t:t(0,80)long long int:t(0,81)_aflog:G(0,67)_fflog:G(0,67)Config:G(0,88)=(0,89)=xs__Config:_Config:t(0,88)__Config:T(0,89)=s36logall:(0,18),0,8;stats:(0,18),8,8;integrity:(0,18),16,8;syscheck_auto_ignore:(0,18),24,8;syscheck_alert_new:(0,18),32,8;rootcheck:(0,18),40,8;hostinfo:(0,18),48,8;mailbylevel:(0,18),56,8;logbylevel:(0,18),64,8;keeplogdate:(0,18),72,8;mailnotify:(0,36),80,16;ar:(0,3),96,32;memorysize:(0,3),128,32;syscheck_ignore:(0,43),160,32;white_list:(0,51),192,32;hostname_white_list:(0,64),224,32;includes:(0,43),256,32;;