| __text__TEXTt /__data__DATAt __const__TEXT__cstring__TEXTo__picsymbolstub2__TEXT} __la_sym_ptr2__DATAl __textcoal_nt__TEXT @ xx Piim USt$9[]ÐUVS@EDžƅED$,E$uDžD$,$uDžuD$nD$$/E8t:}48,u'UE뻍EEx,u$F,F,rD$$P|D$D$$]E8t:}48,u'UE뻍EExu$FFrD$$~D$D$$E8t=}48,u'UE븍EEx@u$F@F@rD$$D$D$$t(D$D$$E8t/}~'UEƍEEx4u3u$ F4F4urD$$D$,${mDž@[^]Ð  !"#$%&'*+,:;<=>?[\]^`{|}~%s: Initializing SymantecWS decoder..10=ossec-analysisd%s(1102): Memory error. Exiting.11=60=3=2= x⍀xPc⍀cPN⍀NP9⍀9P$⍀$P.G`$Ë$28 8y8gU8B:8088me8[8G888u8e4l  l yw s|Xk|Xek `w Zx?Rx?Lk Gw At&9t&3k .w (p  p k w llk  muvtsmuvtsdPde<tDD DD$$(D&(D'8D)?D,ID-PD1TD3xD5D7D9D=D@DBDCDD DF(DG>DIODK[DMhDRDTDUDVDXDYD[!D^-D`:DevDgDhDiDkDlDnDqDsDxKD{D|D~DDDDD D<DIDWDa$&(%Ham} 6 L Q   1- ; gz $/^)vbw'(-);8<a=$L> R& - " % dt2(KobY_SymantecWS_Decoder_Init___i686.get_pc_thunk.bx_SymantecWS_Decoder_Exec___local_name_ar_flag_ar_commands_active_responses_currently_rule___i686.get_pc_thunk.axdyld_stub_binding_helper_ErrorExit_strdup_strncmp_strchr_debug1/mnt/gmirror/ports/security/ossec-hids-server/work/ossec-hids-1.3/src/analysisd/decoders/plugins/symantecws_decoder.cgcc2_compiled._hostname_mapSymantecWS_Decoder_Init:F(0,1)=*(0,2)=(0,2)void:t(0,2)SymantecWS_Decoder_Exec:F(0,1)lf:p(0,3)=*(0,4)=(0,5)=xs_Eventinfo:Eventinfo:t(0,4)_Eventinfo:T(0,5)=s128log:(0,6)=*(0,7)=r(0,7);0;127;,0,32;full_log:(0,6),32,32;location:(0,6),64,32;hostname:(0,6),96,32;program_name:(0,6),128,32;srcip:(0,6),160,32;dstip:(0,6),192,32;srcport:(0,6),224,32;dstport:(0,6),256,32;protocol:(0,6),288,32;action:(0,6),320,32;user:(0,6),352,32;dstuser:(0,6),384,32;id:(0,6),416,32;status:(0,6),448,32;command:(0,6),480,32;url:(0,6),512,32;data:(0,6),544,32;systemname:(0,6),576,32;generated_rule:(0,8)=*(0,9)=(0,10)=xs_RuleInfo:,608,32;decoder_info:(0,11)=*(0,12)=(0,13)=s48get_next:(0,14)=(0,15)=@s8;r(0,15);0;255;,0,8;type:(0,14),8,8;use_own_name:(0,14),16,8;id:(0,16)=(0,17)=@s16;r(0,17);0;65535;,32,16;regex_offset:(0,16),48,16;prematch_offset:(0,16),64,16;fts:(0,18)=r(0,18);-2147483648;2147483647;,96,32;parent:(0,6),128,32;name:(0,6),160,32;ftscomment:(0,6),192,32;regex:(0,19)=*(0,20)=(0,21)=xs_OSRegex:,224,32;prematch:(0,19),256,32;program_name:(0,22)=*(0,23)=(0,24)=xs_OSMatch:,288,32;plugindecoder:(0,25)=*(0,26)=f(0,2),320,32;order:(0,27)=*(0,28)=*(0,29)=f(0,2),352,32;;,640,32;sid_node_to_delete:(0,30)=*(0,31)=(0,32)=xs_OSListNode:,672,32;size:(0,18),704,32;p_name_size:(0,18),736,32;matched:(0,33)=@s16;r(0,33);-32768;32767;,768,16;time:(0,18),800,32;day:(0,18),832,32;year:(0,18),864,32;hour:(0,34)=ar(0,35)=r(0,35);0000000000000;0037777777777;;0;8;(0,7),896,72;mon:(0,36)=ar(0,35);0;3;(0,7),968,32;;char:t(0,7)RuleInfo:t(0,9)_RuleInfo:T(0,10)=s192sigid:(0,18),0,32;level:(0,18),32,32;maxsize:(0,18),64,32;frequency:(0,18),96,32;timeframe:(0,18),128,32;context:(0,14),160,8;firedtimes:(0,18),192,32;time_ignored:(0,18),224,32;ignore_time:(0,18),256,32;ignore:(0,18),288,32;ckignore:(0,18),320,32;group_prev_matched_sz:(0,18),352,32;__frequency:(0,18),384,32;last_events:(0,37)=*(0,6),416,32;alert_opts:(0,16),448,16;context_opts:(0,16),464,16;category:(0,14),480,8;decoded_as:(0,16),496,16;sid_prev_matched:(0,38)=*(0,39)=(0,40)=xs_OSList:,512,32;sid_search:(0,38),544,32;group_prev_matched:(0,41)=*(0,38),576,32;group_search:(0,38),608,32;event_search:(0,42)=*(0,43)=f(0,1),640,32;group:(0,6),672,32;match:(0,22),704,32;regex:(0,19),736,32;day_time:(0,6),768,32;week_day:(0,6),800,32;srcip:(0,44)=*(0,45)=*(0,46)=(0,47)=xs_os_ip:,832,32;dstip:(0,44),864,32;srcport:(0,22),896,32;dstport:(0,22),928,32;user:(0,22),960,32;url:(0,22),992,32;id:(0,22),1024,32;status:(0,22),1056,32;hostname:(0,22),1088,32;program_name:(0,22),1120,32;extra_data:(0,22),1152,32;action:(0,6),1184,32;comment:(0,6),1216,32;info:(0,6),1248,32;cve:(0,6),1280,32;if_sid:(0,6),1312,32;if_level:(0,6),1344,32;if_group:(0,6),1376,32;if_matched_regex:(0,19),1408,32;if_matched_group:(0,22),1440,32;if_matched_sid:(0,18),1472,32;ar:(0,48)=*(0,49)=*(0,50)=(0,51)=xs_ar:,1504,32;;OSDecoderInfo:t(0,12)u_int8_t:t(0,14)unsigned char:t(0,15)u_int16_t:t(0,16)short unsigned int:t(0,17)int:t(0,18)OSRegex:t(0,20)_OSRegex:T(0,21)=s24error:(0,18),0,32;flags:(0,52)=*(0,18),32,32;patterns:(0,37),64,32;sub_strings:(0,37),96,32;prts_closure:(0,53)=*(0,37),128,32;prts_str:(0,53),160,32;;OSMatch:t(0,23)_OSMatch:T(0,24)=s16error:(0,18),0,32;size:(0,52),32,32;patterns:(0,37),64,32;match_fp:(0,54)=*(0,55)=*(0,56)=f(0,18),96,32;;OSListNode:t(0,31)_OSListNode:T(0,32)=s12next:(0,57)=*(0,32),0,32;prev:(0,57),32,32;data:(0,1),64,32;;short int:t(0,33)long unsigned int:t(0,58)=r(0,58);0000000000000;0037777777777;OSList:t(0,39)_OSList:T(0,40)=s24first_node:(0,30),0,32;last_node:(0,30),32,32;cur_node:(0,30),64,32;currently_size:(0,18),96,32;max_size:(0,18),128,32;free_data_function:(0,25),160,32;;os_ip:t(0,46)_os_ip:T(0,47)=s12ip:(0,6),0,32;ip_address:(0,59)=r(0,59);0000000000000;0037777777777;,32,32;netmask:(0,59),64,32;;active_response:t(0,50)_ar:T(0,51)=s36timeout:(0,18),0,32;location:(0,18),32,32;level:(0,18),64,32;name:(0,6),96,32;command:(0,6),128,32;agent_id:(0,6),160,32;rules_id:(0,6),192,32;rules_group:(0,6),224,32;ar_cmd:(0,60)=*(0,61)=(0,62)=xs_ar_command:,256,32;;unsigned int:t(0,59)ar_command:t(0,61)_ar_command:T(0,62)=s16expect:(0,18),0,32;timeout_allowed:(0,18),32,32;name:(0,6),64,32;executable:(0,6),96,32;;count:(0,18)buf_str:(0,63)=ar(0,35);0;1024;(0,7)tmp_str:(0,6)__local_name:G(0,6)hostname_map:S(0,64)=ar(0,35);0;255;(0,65)=k(0,15)ar_flag:G(0,18)ar_commands:G(0,38)active_responses:G(0,38)currently_rule:G(0,8)