X@1@1__text__TEXT%4<__data__DATA%('E__const__TEXT@%(__cstring__TEXT@&)__picsymbolstub2__TEXT-0,F__la_sym_ptr2__DATA0ln3Ѝ@ D$@$}#F D$Ѝ@$z#EЍ@D$Ѝ@$t4@D$.#D$P&$#Dž tbtY@D$.#D$&$#@D$.#D$P&$#DžtfBЍ@ D$$" $D$Ѝ@$"'Ѝ@D$Ѝ@$Yt%@D$.#D$P&$!tStJ@D$.#D$&$A"@D$.#D$P&$m!tfBЍ@ D$$ (D$Ѝ@$ u8Ѝ@ D$$A E D$Ѝ@$; u 0D$Ѝ@$ uD&D$Ѝ@ $  @ @D$Ѝ@$DžDž!<uЍ@ D$!$u7!Ћ"A(mx( Ѝ@ D$ Ѝ@D$.#D$&$uDžD$Ѝ@$F'D$Ѝ@ $u@ 'D$Ѝ@ $yu@ 'D$Ѝ@ $9u@T 'D$Ѝ@ $u@ 'D$Ѝ@ $u@ #'D$Ѝ@ $yu@ +'D$Ѝ@ $9u@ T <'D$Ѝ@ $u@  Ѝ@ D$.#D$P'$DžD$Ѝ@$ DžD$Ѝ@ D$$,4D$$F,F,u.#D$P%$|~*ЍA,Dž8uo'D$$ct(Ѝ V,. w'D$$t(Ѝ V,- i|'D$$t(Ѝ V,- #'D$$t(Ѝ V,- 'D$$Kt(Ѝ V,- 'D$$t(Ѝ V,- Q'D$$t(Ѝ V,- 'D$$yt(Ѝ V,- 'D$$3t(Ѝ V,- 'D$$t(Ѝ V,- 9'D$$t(Ѝ V,- 'D$$at(Ѝ V,- v$D$$t%Ѝ V,- j'D$$t%Ѝ V,- '@D$D$'$7$_$:D$Ѝ@$D$Ѝ@ D$$,u.#D$P%$n8uoo'D$$tR P w'D$$QtR P |'D$$tR @P 'D$$tR ʀP q'D$$tR P 9 (D$$qtR P 'D$$9tR P 'D$$tR P 'D$$tR P \q$D$$tR P '@D$D$0($$)$ eЍD@D$ Ѝ@D$.#D$p($,DžG6$qunxubuY@D$.#D$($@D$.#D$P&$Džux u!x,ut@x,u4@D$.#D$P&$/DžJ@tbxuV#D$.#D$#$@D$.#D$P&$Dž@xu%f@@fB_uV#D$.#D$#$<@D$.#D$P&$Dž2@tkxt uV#D$.#D$#$@D$.#D$P&$Džfx@tfx#D$.#D$#$8@D$.#D$P&$Dž.@D$.#D$P&$DžD$$F F u.#D$P%$D$@ D$$u@@ D$ D$.#D$($/DžJ$D$$UF$F$u.#D$P%$D$@$D$$ u;)D$ D$.#D$($vDž$ D$$FFu.#D$P%$aD$@D$$D u@@D$ D$.#D$($Dž@x u1D$.#D$0)$xDž$ x(tNxux,u4@D$.#D$p)$Dž+$ u'.#D$)$ DžD$ H$ )$)$*$q0*$cO*$Ub*$G$u$.#D$)$" Dž@.#$u$.#D$)$ Dž Dž@[^]ÐUS$p}EE $ EE=gD$E$ E}u$D$$W EED$E D$E$ EEE D$D$0 $ EE $ EE$ EEEE}~(E D$D$0 $ EjED$E$O E}u!D$$m E+ED$E D$E$EEEEE$[]Ð@&K&  !"#$%&'*+,:;<=>?[\]^`{|}~PF_DecoderSymantecWS_Decoderossec-analysisd%s(1290); Error creating a new list (calloc).%s(1291): Error adding nodes to list.offsetafter_parentafter_prematchafter_regex%s(2120): Invalid offset value: '%s'%s(2121): Invalid decoder attribute: '%s'plugin_decoderdecodernamestatususe_own_nameparentprogram_nameprematchregexordertypeftsftscomment%s(1226): Error reading XML file '%s': %s (line %d).%s(1227): Error applying XML variables '%s': %s.%s(1102): Memory error. Exiting.%s(1230): Invalid element in the configuration: '%s'.%s(1231): Invalid NULL element in the configuration.%s(1234): Invalid NULL content for element: %s.%s(2107): Decoder configuration error: '%s'.%s(2109): Duplicated offsets for same regex: '%s'.true%s(2110): Invalid decoder argument for %s: '%s'.firewallidsweb-logsyslogsquidwindowshost-informationossec%s: Invalid decoder type '%s'.dstuserusersrcipdstipsrcportdstportprotocolactionidurldataextra_datasystem_namedecode-xml: Wrong field '%s' in the order of decoder '%s'locationdecode-xml: Wrong field '%s' in the fts decoder '%s'%s: Invalid element '%s' for decoder '%s'%s(2108): No 'prematch' found in decoder: '%s'.%s(1450): Syntax error on regex: '%s': %d.compile failed%s(1451): Missing sub_strings on regex: '%s'.%s(2111): Additional data to plugin decoder: '%s'.%s(2106): Error adding decoder plugin.rootchecksyscheck_integrity_changedsyscheck_integrity_changed_2ndsyscheck_integrity_changed_3rdsyscheck_new_entrysyscheck_deleted%s(1104): Maximum string size reached for: %s. ⍀P⍀Pt⍀tP_⍀_PJ⍀JP5⍀5P{v ⍀ Pb] ⍀ PID⍀P0+⍀P⍀P⍀P⍀P⍀Px⍀xPc⍀cP|N⍀NPhc9⍀9POJ$⍀$P61⍀P⍀P⍀P⍀P⍀P⍀P⍀P|⍀|Pn-...G.`.y....../(/A/Z/s////// 0"0;0T0m00$Ë$$$$(#$^&#$$$-#$^&#`$R$;$3$-#)$^&#$##(##^&####  W#O#,0E#^&0;#3#^&0!##,0#^&0#""-0""-0""`-0""@-0""-0""-0""l"d",0Z"^&0P"3"+",0!"^&0!!!`,0!^&0!! ,0y!^&0V!3!+!(0!!^&0!   ,0 ^&0 K,0 z r (0h ^&0X 1   ,0 ^&0(0^&0d\)0R^&00()0^&0  '0^&0&0)0^&0{ '0q^&0g '0,$)0^&0 '0^&0&0)0u^&0bZ '0P^&0F&0 )0^&0)0^&0}+0s^&0B+0^&0`+0Q='0*0*0*0t`:+0<(*0*0*0*0\H*0&(0^&0m]U+0/10 *010'010p*0`10>**0 10*010*010lX*0H10&*010*0 10*0v$10T@*00(10*0,10*0010n*0(0^&0IA*07^&0l*0[*0XS*0?M*0F*0>*0X:*0?1*0 *0^&0L0%0)$%0%0%0uN)0Dm')0^&0 )0 ^&0  )0 ^&0 I    )0 ^&0  )0 ^&0Q I )0? ^&0   ` $  @)0 ^&0  )0 ^&0Z R (0H ^&0>   (0 ^&0V  (0^&0)0^&0YQ(0G^&0(0^&0)!(0^&0.&(0^&0r^V@(0L^&0#410(0^&0z@(0p^&0R5-(0#^&0'0'0'0'0'0'0'0x'0l'0`'0T'0H'0<'0,  `'^& '^& '{&iX&C2&  -&P^&P<%P&Pu^&Pj<%Pb<%P\R<%PL  * <% <%   E ? F @ b 0~00~0 b 0e0x0e0r mb g0L0_0L0Y Tb N030F030@ ;b 500-00' "b 0000 b 0/0/ b 0/0/ b 0/0/ b 0/0/ b 0/0/ b 0k/~0k/x sb m0R/e0R/_ Zb T09/L09/F Ab ;0 /30 /- (b "0/0/ b 0.0. b 0.0. b 0.0. b 0.0. b 0.0. b 0q.0q.~ yb s0X.k0X.e `b Z0?.R0?.L Gb A0&.90&.3 .b (0 . 0 . b 0-0- hd`\XTPLHD@<840,($  ]X^\96128T_>![Y:;.R7=Z<5U34]X^\96128T_>![Y:;.R7=Z<5U34GD*H/)A,C+BI-0d3d@<O@%D#D$ D&D)3D*:]$#"$DD/DD0PD2[D3hD5sD6D;D=D>DADB$/D.$DGDMDSDTDXD[D\ D_5Da?DdKDfTDhZDm\DnfDroDtwDvDxD|DDDDDDD$G FHC>X6LQ1";_ l I} J  X Y    $DDDDD$D0DODVDqDyDDDDDDDDD $  O  $0D D0D:DFDRD^DjDvDDDDDDDDDDDD9DHDZDDDDDDDDD-D6DbDqDvDDD DD2DADD-D<D D"D#D&D(&D)]D/lD0D2D3D7D8D:D; D@ DA# DB/ DC] DDj DEw DF DG DH DI DJ DK DL DM DO DP DQ DU DW DX" D\1 D^F D_^ Dcn De Dg Dh Dj Dl Dm( Dq7 Dsh Dw Dz D}# D0 DU Dd Dv D D D D D D DU D D D D DD+D4DDD|DDDDLDDDDDD'D<DDD\D^DlD|DDDDGDVDDDDDDDGDVDDDDDDDMD\DDDDD D (DGDRD\DlDDDDD D">D$\D&D(D*D,D.D0.D2VD4tD6D8D:D<D>(D@FDBnDDDFDHDJDLDP:DTaDUqDWzDZD^DdDe DfDj*Dn6DpFDrdDt~DvDxDzD|D~ D&DDD^D|DDDDDD$D;DYDpDDDDDD*D8DFDdDDDDDD'DDDfDDDDDDDD D0D?DPDeDDDDDDDD4DCDhDwDDD D  D ' D5 DB D~ D D D D D  D!7!D#^!D$!D(!D*!D+!D.!D3!D5"D67"D:F"D<X"D=p"D@"DE"DH"DL"DM"DN"DO"DP"DQ"DU"DW #DX%#DZ1#D\C#D][#Dbg#Dcq# $   H( 87 4 s D ) : Y @q < 8 4 0 , ( $   / = R i q 0r        y    U w    ' d  +;<=`Ka[\]"^q#_$d Dm#Dn#Dp#Dq#Ds#Dt#Dv#Dw#Dy#Dz$D~ $D?$DK$DY$Dg$Ds$D|$D$D$D$D$D$D$D$D%D%`$m#sl}l p#K$K$%$ &@%   * ; a s  "p % '< -K "y$Qd % "). Y ! $ '[d% 81<1#D<%%R0%$%(X@uO!b!9uh(3bLy9lVb vnZJ? 5._plugin_decoders_plugin_decoders_init_PF_Decoder_Init_SymantecWS_Decoder_Init_plugin_decoders_exec_PF_Decoder_Exec_SymantecWS_Decoder_Exec_os_decoder_store_getDecoderfromlist___i686.get_pc_thunk.bx_addDecoder2list_os_setdecoderids_ReadDecodeAttrs_ReadDecodeXML__loadmemory___local_name_today_thishour_prev_year_prev_month___crt_hour___crt_wday_c_time___shost_NULL_Decoder_ar_flag_ar_commands_active_responses_currently_rule___i686.get_pc_thunk.axdyld_stub_binding_helper_SystemName_FP_Status_FP_Data_FP_Url_FP_ID_FP_Action_FP_Protocol_FP_DstPort_FP_SrcPort_FP_DstIP_FP_SrcIP_FP_User_FP_DstUser_FP_strncat_realloc_strncpy_strlen_OS_ClearXML_OS_AddOSDecoder_OSMatch_Compile_OSRegex_Compile_OS_ClearNode_free_strstr_OS_StrBreak_strdup_strcasecmp_OS_CreateOSDecoderList_OS_GetElementsbyNode_ErrorExit_calloc_OS_ApplyVariables_OS_ReadXML_strcmp_OS_GetFirstOSDecoder_OSStore_Put_merror_OSStore_Create_OSStore_GetPosition/mnt/gmirror/ports/security/ossec-hids-server/work/ossec-hids-1.3/src/analysisd/decoders/decode-xml.cgcc2_compiled._hostname_mapgetDecoderfromlist:F(0,1)=r(0,1);-2147483648;2147483647;int:t(0,1)name:p(0,2)=*(0,3)=r(0,3);0;127;char:t(0,3)addDecoder2list:F(0,1)name:p(0,2)os_setdecoderids:F(0,1)p_name:p(0,2)node:(0,4)=*(0,5)=(0,6)=xs_OSDecoderNode:OSDecoderNode:t(0,5)_OSDecoderNode:T(0,6)=s12next:(0,7)=*(0,6),0,32;child:(0,7),32,32;osdecoder:(0,8)=*(0,9)=(0,10)=s48get_next:(0,11)=(0,12)=@s8;r(0,12);0;255;,0,8;type:(0,11),8,8;use_own_name:(0,11),16,8;id:(0,13)=(0,14)=@s16;r(0,14);0;65535;,32,16;regex_offset:(0,13),48,16;prematch_offset:(0,13),64,16;fts:(0,1),96,32;parent:(0,2),128,32;name:(0,2),160,32;ftscomment:(0,2),192,32;regex:(0,15)=*(0,16)=(0,17)=xs_OSRegex:,224,32;prematch:(0,15),256,32;program_name:(0,18)=*(0,19)=(0,20)=xs_OSMatch:,288,32;plugindecoder:(0,21)=*(0,22)=f(0,23)=(0,23),320,32;order:(0,24)=*(0,25)=*(0,26)=f(0,23),352,32;;,64,32;;OSDecoderInfo:t(0,9)u_int8_t:t(0,11)unsigned char:t(0,12)u_int16_t:t(0,13)short unsigned int:t(0,14)OSRegex:t(0,16)_OSRegex:T(0,17)=s24error:(0,1),0,32;flags:(0,27)=*(0,1),32,32;patterns:(0,28)=*(0,2),64,32;sub_strings:(0,28),96,32;prts_closure:(0,29)=*(0,28),128,32;prts_str:(0,29),160,32;;OSMatch:t(0,19)_OSMatch:T(0,20)=s16error:(0,1),0,32;size:(0,27),32,32;patterns:(0,28),64,32;match_fp:(0,30)=*(0,31)=*(0,32)=f(0,1),96,32;;void:t(0,23)child_node:(0,4)nnode:(0,8)p_id:(0,1)p_name:(0,2)ReadDecodeAttrs:F(0,1)names:p(0,28)values:p(0,28)offset:(0,1)ReadDecodeXML:F(0,1)file:p(0,2)xml:(0,33)=(0,34)=xs_OS_XML:OS_XML:t(0,33)_OS_XML:T(0,34)=s164cur:(0,1),0,32;fol:(0,1),32,32;tp:(0,27),64,32;rl:(0,27),96,32;ck:(0,27),128,32;ln:(0,27),160,32;err_line:(0,1),192,32;ct:(0,28),224,32;el:(0,28),256,32;err:(0,35)=ar(0,36)=r(0,36);0000000000000;0037777777777;;0;127;(0,3),288,1024;;long unsigned int:t(0,37)=r(0,37);0000000000000;0037777777777;node:(0,38)=(0,39)=*(0,40)=*(0,41)=(0,42)=xs_xml_node:xml_node:t(0,41)XML_NODE:t(0,38)_xml_node:T(0,42)=s24key:(0,1),0,32;line:(0,1),32,32;element:(0,2),64,32;content:(0,2),96,32;attributes:(0,28),128,32;values:(0,28),160,32;;xml_plugindecoder:(0,2)xml_decoder:(0,2)xml_decoder_name:(0,2)xml_decoder_status:(0,2)xml_usename:(0,2)xml_parent:(0,2)xml_program_name:(0,2)xml_prematch:(0,2)xml_regex:(0,2)xml_order:(0,2)xml_type:(0,2)xml_fts:(0,2)xml_ftscomment:(0,2)NULL_Decoder_tmp:(0,8)i:(0,1)elements:(0,38)pi:(0,8)j:(0,1)regex:(0,2)prematch:(0,2)p_name:(0,2)r_offset:(0,1)r_offset:(0,1)ed_c:(0,1)dec_init:(0,43)=*(0,44)=f(0,23)norder:(0,28)s_norder:(0,28)order_int:(0,1)norder:(0,28)s_norder:(0,28)_loadmemory:F(0,2)at:p(0,2)str:p(0,2)strsize:(0,1)strsize:(0,1)atsize:(0,1)finalsize:(0,1)__local_name:G(0,2)hostname_map:S(0,45)=ar(0,36);0;255;(0,46)=k(0,12)today:G(0,1)thishour:G(0,1)prev_year:G(0,1)prev_month:G(0,47)=ar(0,36);0;3;(0,3)__crt_hour:G(0,1)__crt_wday:G(0,1)c_time:G(0,48)=(0,49)=(0,50)=r(0,50);-2147483648;2147483647;time_t:t(0,48)__darwin_time_t:t(0,49)long int:t(0,50)__shost:G(0,51)=ar(0,36);0;511;(0,3)NULL_Decoder:G(0,52)=*(0,23)ar_flag:G(0,1)ar_commands:G(0,53)=*(0,54)=(0,55)=xs_OSList:OSList:t(0,54)_OSList:T(0,55)=s24first_node:(0,56)=*(0,57)=(0,58)=xs_OSListNode:,0,32;last_node:(0,56),32,32;cur_node:(0,56),64,32;currently_size:(0,1),96,32;max_size:(0,1),128,32;free_data_function:(0,21),160,32;;OSListNode:t(0,57)_OSListNode:T(0,58)=s12next:(0,59)=*(0,58),0,32;prev:(0,59),32,32;data:(0,52),64,32;;active_responses:G(0,53)currently_rule:G(0,60)=*(0,61)=(0,62)=xs_RuleInfo:RuleInfo:t(0,61)_RuleInfo:T(0,62)=s192sigid:(0,1),0,32;level:(0,1),32,32;maxsize:(0,1),64,32;frequency:(0,1),96,32;timeframe:(0,1),128,32;context:(0,11),160,8;firedtimes:(0,1),192,32;time_ignored:(0,1),224,32;ignore_time:(0,1),256,32;ignore:(0,1),288,32;ckignore:(0,1),320,32;group_prev_matched_sz:(0,1),352,32;__frequency:(0,1),384,32;last_events:(0,28),416,32;alert_opts:(0,13),448,16;context_opts:(0,13),464,16;category:(0,11),480,8;decoded_as:(0,13),496,16;sid_prev_matched:(0,53),512,32;sid_search:(0,53),544,32;group_prev_matched:(0,63)=*(0,53),576,32;group_search:(0,53),608,32;event_search:(0,64)=*(0,65)=f(0,52),640,32;group:(0,2),672,32;match:(0,18),704,32;regex:(0,15),736,32;day_time:(0,2),768,32;week_day:(0,2),800,32;srcip:(0,66)=*(0,67)=*(0,68)=(0,69)=xs_os_ip:,832,32;dstip:(0,66),864,32;srcport:(0,18),896,32;dstport:(0,18),928,32;user:(0,18),960,32;url:(0,18),992,32;id:(0,18),1024,32;status:(0,18),1056,32;hostname:(0,18),1088,32;program_name:(0,18),1120,32;extra_data:(0,18),1152,32;action:(0,2),1184,32;comment:(0,2),1216,32;info:(0,2),1248,32;cve:(0,2),1280,32;if_sid:(0,2),1312,32;if_level:(0,2),1344,32;if_group:(0,2),1376,32;if_matched_regex:(0,15),1408,32;if_matched_group:(0,18),1440,32;if_matched_sid:(0,1),1472,32;ar:(0,70)=*(0,71)=*(0,72)=(0,73)=xs_ar:,1504,32;;os_ip:t(0,68)_os_ip:T(0,69)=s12ip:(0,2),0,32;ip_address:(0,74)=r(0,74);0000000000000;0037777777777;,32,32;netmask:(0,74),64,32;;active_response:t(0,72)_ar:T(0,73)=s36timeout:(0,1),0,32;location:(0,1),32,32;level:(0,1),64,32;name:(0,2),96,32;command:(0,2),128,32;agent_id:(0,2),160,32;rules_id:(0,2),192,32;rules_group:(0,2),224,32;ar_cmd:(0,75)=*(0,76)=(0,77)=xs_ar_command:,256,32;;unsigned int:t(0,74)ar_command:t(0,76)_ar_command:T(0,77)=s16expect:(0,1),0,32;timeout_allowed:(0,1),32,32;name:(0,2),64,32;executable:(0,2),96,32;;plugin_decoders:G(0,78)=ar(0,36);0;2;(0,2)plugin_decoders_init:G(0,79)=ar(0,36);0;2;(0,52)plugin_decoders_exec:G(0,80)=ar(0,36);0;2;(0,52)os_decoder_store:G(0,81)=*(0,82)=(0,83)=xs_OSStore:OSStore:t(0,82)_OSStore:T(0,83)=s24first_node:(0,84)=*(0,85)=(0,86)=xs_OSStoreNode:,0,32;last_node:(0,84),32,32;cur_node:(0,84),64,32;currently_size:(0,1),96,32;max_size:(0,1),128,32;free_data_function:(0,21),160,32;;OSStoreNode:t(0,85)_OSStoreNode:T(0,86)=s20next:(0,87)=*(0,86),0,32;prev:(0,87),32,32;data:(0,52),64,32;key:(0,2),96,32;key_size:(0,1),128,32;;