From e721129c3e4538ef73a95a3b5f7dab9e7c91cb64 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Thu, 10 Mar 2022 13:23:15 +1100 Subject: [PATCH 01/67] Update data stream and pipeline for webhook based integration --- .../cisco_meraki/_dev/build/docs/README.md | 25 +- .../_dev/deploy/docker/docker-compose.yml | 29 +- .../docker/sample_logs/cisco-meraki.log | 100 - .../docker/sample_logs/meraki-mx-ndjson.log | 1 + packages/cisco_meraki/changelog.yml | 7 +- .../_dev/test/pipeline/test-common-config.yml | 2 + .../log/_dev/test/pipeline/test-generated.log | 100 - .../pipeline/test-generated.log-config.yml | 5 - .../pipeline/test-generated.log-expected.json | 1204 ------ .../_dev/test/pipeline/test-mx-events.json | 39 + .../test-mx-events.json-expected.json | 43 + .../_dev/test/system/test-logfile-config.yml | 7 - .../test/system/test-meraki-http-config.yml | 10 + .../test/system/test-meraki-https-config.yml | 61 + .../log/_dev/test/system/test-tcp-config.yml | 8 - .../log/_dev/test/system/test-udp-config.yml | 8 - .../log/agent/stream/http_endpoint.yml.hbs | 41 + .../log/agent/stream/stream.yml.hbs | 3256 ----------------- .../data_stream/log/agent/stream/tcp.yml.hbs | 3253 ---------------- .../data_stream/log/agent/stream/udp.yml.hbs | 3253 ---------------- .../elasticsearch/ingest_pipeline/default.yml | 115 +- .../data_stream/log/fields/agent.yml | 201 +- .../data_stream/log/fields/fields.yml | 1775 +-------- .../cisco_meraki/data_stream/log/manifest.yml | 184 +- packages/cisco_meraki/docs/README.md | 939 +---- packages/cisco_meraki/img/cisco-logo.svg | 1 + .../cisco_meraki/img/sample-screenshot.png | Bin 0 -> 18849 bytes packages/cisco_meraki/manifest.yml | 36 +- 28 files changed, 390 insertions(+), 14313 deletions(-) delete mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log create mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/meraki-mx-ndjson.log create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-common-config.yml delete mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log delete mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log-config.yml delete mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log-expected.json create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json-expected.json delete mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/system/test-logfile-config.yml create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-http-config.yml create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-https-config.yml delete mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/system/test-tcp-config.yml delete mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/system/test-udp-config.yml create mode 100644 packages/cisco_meraki/data_stream/log/agent/stream/http_endpoint.yml.hbs delete mode 100644 packages/cisco_meraki/data_stream/log/agent/stream/stream.yml.hbs delete mode 100644 packages/cisco_meraki/data_stream/log/agent/stream/tcp.yml.hbs delete mode 100644 packages/cisco_meraki/data_stream/log/agent/stream/udp.yml.hbs create mode 100644 packages/cisco_meraki/img/cisco-logo.svg create mode 100644 packages/cisco_meraki/img/sample-screenshot.png diff --git a/packages/cisco_meraki/_dev/build/docs/README.md b/packages/cisco_meraki/_dev/build/docs/README.md index 643dbd8f4d2..a38276567ef 100644 --- a/packages/cisco_meraki/_dev/build/docs/README.md +++ b/packages/cisco_meraki/_dev/build/docs/README.md @@ -1,16 +1,23 @@ -# Cisco Meraki Integration +# Cisco Meraki Syslog Integration -This integration is for Cisco Meraki device's logs. It includes the following -datasets for receiving logs over syslog or read from a file: +Cisco Meraki is the leader in cloud controlled Wi-Fi, routing, and security. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. -- `log` dataset: supports Cisco Meraki logs. +The Cisco Meraki Syslog integration package allows you to search, observe and visualize the Cisco Meraki Syslog events through Elasticsearch. Cisco Meraki Syslog sends events for "Meraki MX Security Appliance", "Meraki MS Switches" and "Meraki MR Access Points". -## Logs +## Compatibility + +A syslog server can be configured to store messages for reporting purposes from MX Security Appliances, MR Access Points, and MS switches. This package collects events from the configured syslog server. + +## Configuration -### Meraki +Cisco Meraki dashboard can be used to configure one or more syslog servers and Meraki message types to be sent to the syslog servers. Refer to [Syslog Server Overview and Configuration](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration#Configuring_a_Syslog_Server) page for more information on how to configure syslog server on Cisco Meraki. -The `log` dataset collects Cisco Meraki logs. +### Syslog Events + +Enable to collect Meraki syslog events from the specified syslog server. + +## Logs -{{event "log"}} +### Syslog -{{fields "log"}} +The Meraki syslog dataset provides events from the configured syslog server. All Cisco Meraki syslog specific fields are available in the `meraki.syslog` field group. diff --git a/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml b/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml index ce2f6353fe9..38f6cc3cf3d 100644 --- a/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml +++ b/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml @@ -1,18 +1,21 @@ -version: "2.3" +version: '2.3' services: - cisco-logfile: - image: alpine + meraki-webhook-http: + image: docker.elastic.co/observability/stream:v0.6.2 volumes: - ./sample_logs:/sample_logs:ro - - ${SERVICE_LOGS_DIR}:/var/log - command: /bin/sh -c "cp /sample_logs/* /var/log/" - cisco-meraki-udp: - image: docker.elastic.co/observability/stream:v0.5.0 + environment: + - STREAM_PROTOCOL=webhook + - STREAM_ADDR=http://elastic-agent:8686/meraki/events + - STREAM_WEBHOOK_HEADER=Authorization=abc123 + command: log --start-signal=SIGHUP --delay=5s /sample_logs/meraki-mx-ndjson.log + meraki-webhook-https: + image: docker.elastic.co/observability/stream:v0.6.2 volumes: - ./sample_logs:/sample_logs:ro - command: log --start-signal=SIGHUP --delay=5s --addr elastic-agent:9514 -p=udp /sample_logs/cisco-meraki.log - cisco-meraki-tcp: - image: docker.elastic.co/observability/stream:v0.5.0 - volumes: - - ./sample_logs:/sample_logs:ro - command: log --start-signal=SIGHUP --delay=5s --addr elastic-agent:9514 -p=tcp /sample_logs/cisco-meraki.log + environment: + - STREAM_PROTOCOL=webhook + - STREAM_ADDR=https://elastic-agent:8686/meraki/events + - STREAM_WEBHOOK_HEADER=Authorization=abc123 + - STREAM_INSECURE=true + command: log --start-signal=SIGHUP --delay=5s /sample_logs/meraki-mx-ndjson.log diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log deleted file mode 100644 index 05501480e40..00000000000 --- a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log +++ /dev/null @@ -1,100 +0,0 @@ -modtempo 1454047799.olab nto_ security_event olaborissecurity_event tur url=https://example.org/odoco/ria.jpg?ritin=uredolor#tatemac src=10.15.44.253:5078 dst=10.193.124.51:5293 mac=01:00:5e:28:ae:7d name=psa sha256=umq disposition=ntium action=deny -umdo 1455282753.itessequ vol_ events dhcp lease of ip 10.102.218.31 from server mac 01:00:5e:9c:c2:9c for client mac 01:00:5e:0f:87:e3 from router 10.15.16.212 on subnet ameaqu with dns aqu -uipexea 1456517708.tatio minim_ flows ceroinBC flows src=10.179.60.216 dst=10.69.53.104 protocol=udp pattern: 0 reprehe -mipsu 1457752662.consec taliquip_ flows radip flows block src=10.155.236.240 dst=10.112.46.169 mac=01:00:5e:7a:74:89 protocol=ipv6 type=roidents -obeataev 1458987616.lor uidexea_appliance events MAC 01:00:5e:e1:89:ac and MAC 01:00:5e:a3:d9:ac both claim IP: 10.14.107.140 -iutal 1460222571.dexe urerep events content_filtering_block url='https://api.example.org/liqu/lorem.gif?ueipsaqu=uidolore#niamqu' category0='ari' server='10.108.180.105:5098' client_mac='01:00:5e:40:9b:83' -ipit 1461457525.idexea riat_appliance events MAC 01:00:5e:25:4f:e4 and MAC 01:00:5e:3f:49:e4 both claim IP: 10.149.88.198 -ntsuntin 1462692479.aecatcup animi events dhcp release for mac 01:00:5e:e3:10:34 -orsitame 1463927433.quiratio ite events MAC 01:00:5e:48:62:22 and MAC 01:00:5e:9f:b6:a6 both claim IP: 10.243.206.225 -olupta turveli.toccae tatno_ ids-alerts taliqu ids-alerts signature=temUten priority=ccusan timestamp=1465162388.iqudirection=outbound protocol=icmp src=10.131.82.116:7307 -uaera 1466397342.sitas ehenderi_ security_event atquovosecurity_event iumto url=https://www5.example.net/sun/essecill.html?saute=vel#quu src=10.210.213.18:7616 dst=10.134.0.141:2703 mac=01:00:5e:aa:42:fa name=idolores sha256=llumquid disposition=tation action=accept -omn ipsumq.atcu oremagna_ security_event remipsum security_event liq signature=ist priority=tnon timestamp=1467632296.ionul shost=01:00:5e:c8:9c:2f direction=outbound protocol=udp src=10.163.72.17 dst=10.74.237.180 message:nsequu -omm 1468867250.idestla Nemoeni_appliance events MAC 01:00:5e:c4:69:7f and MAC 01:00:5e:e2:67:d2 both claim IP: 10.72.31.26 -agna tionemu.eomnisis mqui ids-alerts signature=civeli priority=errorsi timestamp=1470102205.desdirection=internal protocol=tcp src=10.70.95.74:4290 -olupt 1471337159.dit sumquiad events MAC 01:00:5e:ea:e8:7a and MAC 01:00:5e:9c:d2:4a both claim IP: 10.17.21.125 -amqu 1472572113.uines nsec events dhcp lease of ip 10.85.10.165 from server mac 01:00:5e:63:93:48 for client mac 01:00:5e:46:17:35 from router 10.53.150.119 on subnet uiineavo with dns tisetq -giatquov eritquii.dexeac iscinge ids-alerts signature=atvol priority=umiur timestamp=1473807067.imadprotocol=igmp src=10.88.231.224 dst=10.187.77.245message: iadese -agnaali 1475042022.gnam tat events content_filtering_block url='https://internal.example.com/quae/maccusa.htm?rQuisau=idex#xerci' category0='aqu' server='10.186.58.115:7238' client_mac='01:00:5e:8f:16:6d' -apariat 1476276976.tlabore untmolli_ events dhcp lease of ip 10.219.84.37 from server mac 01:00:5e:e8:bf:69 for client mac 01:00:5e:87:e1:a0 from router 10.205.47.51 on subnet uovolup with dns samvolu -ento 1477511930.pic evita events MAC 01:00:5e:ce:61:db and MAC 01:00:5e:ec:f8:cc both claim IP: 10.3.134.237 -tmo 1478746884.fficiade uscipit events aid=vitaedi arp_resp=fugitse arp_src=veniamq auth_neg_dur=one auth_neg_failed=etMalor channel=ipi dns_req_rtt=reseos dns_resp=pariatu dns_server=tin duration=48.123000 full_conn=oquisqu identity=sperna ip_resp=eabilloi ip_src=10.182.178.217 is_8021x=tlab is_wpa=volupt last_auth_ago=osqui radio=xerc reason=iutali rssi=fdeFi type=texp vap=tasuntex client_mac=01:00:5e:e3:b1:24 client_ip=10.194.114.58 instigator=ectio http_resp=dutper dhcp_lease_completed=lamcolab dhcp_ip=ati dhcp_server=tlabo dhcp_server_mac=uames dhcp_resp=iduntu url=https://internal.example.net/ris/uamqu.txt?liqui=quioffi#uptate category0=ncidid server=10.63.194.87 vpn_type=quisno connectivity=sin -emvel 1479981839.tmollita fde events aid=nsecte arp_resp=inculpa arp_src=abo auth_neg_dur=veniamqu auth_neg_failed=nse channel=non dns_req_rtt=paquioff dns_resp=mquisnos dns_server=maven duration=71.798000 full_conn=atcu identity=labor ip_resp=didunt ip_src=10.153.0.77 is_8021x=udan is_wpa=orema last_auth_ago=invento radio=qua reason=aturQui rssi=utlabor type=rau vap=idex client_mac=01:00:5e:9e:7b:a4 client_ip=10.105.88.20 instigator=ecte http_resp=tinvolu dhcp_lease_completed=iurer dhcp_ip=iciadese dhcp_server=quidolor dhcp_server_mac=tessec dhcp_resp=olupta url=https://mail.example.com/icabo/itatio.jpg?eleum=sintoc#volupt category0=siste server=10.163.154.210 vpn_type=ept connectivity=iumtotam -ionevo 1481216793.ugiatnu ciati_appliance events MAC 01:00:5e:b8:7a:96 and MAC 01:00:5e:b9:6b:a8 both claim IP: 10.73.69.176 -spi 1482451747.stquido ommodico_ flows ese flows allow src=10.145.248.111 dst=10.57.6.252 mac=01:00:5e:94:6a:cf protocol=udp -smo etcons.iusmodi uamest_ security_event uiac security_event epte signature=idolo priority=quinesc timestamp=1483686701.madmi shost=01:00:5e:1c:4c:64 direction=internal protocol=icmp src=10.31.77.157 dst=10.12.182.70 message:tev -nisiuta 1484921656.roid inibusB flows cancel -str 1486156610.idolore pid_ flows cteturad flows deny src=10.93.68.231 dst=10.135.217.12 mac=01:00:5e:4a:69:5b protocol=ipv6 type=archite -amnih 1487391564.ium esciuntN_ events dhcp release for mac 01:00:5e:8b:99:98 -isnost 1488626519.queips ncidi_ flows iscinge flows src=10.247.30.212 dst=10.66.89.5 mac=01:00:5e:7f:65:da protocol=igmp pattern: 1 borios -oin 1489861473.mvenia madminim events IDS: fugitsed -dmin fugi.quia iduntu security_event idestlab signature=rnatur priority=ofdeFin timestamp=1491096427.essequam dhost=01:00:5e:c1:53:b1 direction=inbound protocol=tcp src=10.221.102.245 dst=10.173.136.186 message:naal -umqu tinv.adipisc uscipitl_ ids-alerts ritatise ids-alerts signature=uamei priority=siut timestamp=1492331381.ciad dhost=01:00:5e:1f:c6:29 direction=external protocol=udp src=10.58.64.108 dst=10.54.37.86 message: entorev -velitess 1493566336.naali uunturm_ flows veli flows block src=10.147.76.202 dst=10.163.93.20 mac=01:00:5e:1d:85:ec protocol=ipv6 sport=1085 dport=3141 -iumdol tpersp.stla uptatema_ security_event uradi security_event tot signature=llamco priority=nea timestamp=1494801290.psum dhost=01:00:5e:35:71:1e direction=internal protocol=icmp src=10.0.200.27:5905 dst=10.183.44.198:1702 message:asiarc -tiaec 1496036244.rumwrit icabo_ events dhcp lease of ip 10.148.124.84 from server mac 01:00:5e:0b:2c:22 for client mac 01:00:5e:06:12:98 from router 10.28.144.180 on subnet ritin with dns temporin -ica 1497271198.lillum remips_appliance events aid=uisaute arp_resp=imide arp_src=poriss auth_neg_dur=tvolup auth_neg_failed=itesseq channel=dictasun dns_req_rtt=veniamqu dns_resp=rum dns_server=quaea duration=165.611000 full_conn=mvel identity=nof ip_resp=usmodi ip_src=10.204.230.166 is_8021x=dat is_wpa=aincidu last_auth_ago=nimadmin radio=isiu reason=licabo rssi=enimadmi type=utaliqu vap=dic client_mac=01:00:5e:bb:60:a6 client_ip=10.62.71.118 instigator=ineavol http_resp=iosa dhcp_lease_completed=boNemoe dhcp_ip=onsequ dhcp_server=equinesc dhcp_server_mac=cab dhcp_resp=atisund url=https://example.net/ites/isetq.gif?nisiut=tur#avolupt category0=ariatur server=10.98.194.212 vpn_type=nimave connectivity=isciv -dipisci 1498506153.spernatu admi events content_filtering_block url='https://www.example.org/ueipsa/tae.html?eriti=atcupi#corpori' category0='borisnis' server='10.197.13.39:5912' -itsedd 1499741107.leumiur eratvol events dhcp release for mac 01:00:5e:fd:84:bb -leumiu tla.item nimid ids-alerts signature=dat priority=periam timestamp=1500976061.dquprotocol=icmp src=10.242.77.170 dst=10.150.245.88message: orisn -sitam rad.loi isc_ ids-alerts volupt ids-alerts signature=rem priority=idid timestamp=1502211015.tesse shost=01:00:5e:9d:eb:fb direction=external protocol=tcp src=10.247.139.239 dst=10.180.195.43 message: tenatuse -tore 1503445970.elits consequa events dhcp release for mac 01:00:5e:50:48:c4 -undeom uamnihi.risnis uov_ ids-alerts isn ids-alerts signature=sBono priority=loremqu timestamp=1504680924.teturprotocol=rdp src=10.94.6.140 dst=10.147.15.213message: uptat -itasper 1505915878.uae mve_ flows obeata flows block src=10.230.6.127 dst=10.111.157.56 mac=01:00:5e:39:a7:fc protocol=icmp type=aliquamq -archite 1507150832.remq veniamq events aid=occ arp_resp=oloreseo arp_src=iruredol auth_neg_dur=veniamqu auth_neg_failed=licaboN channel=atquo dns_req_rtt=cupi dns_resp=strude dns_server=eritin duration=85.513000 full_conn=litsedq identity=nderiti ip_resp=ntNe ip_src=10.179.40.170 is_8021x=olorema is_wpa=mollita last_auth_ago=tatem radio=iae reason=quido rssi=emip type=inBC vap=mol client_mac=01:00:5e:58:2d:1c client_ip=10.153.81.206 instigator=rsita http_resp=nsequun dhcp_lease_completed=eetd dhcp_ip=illu dhcp_server=iatqu dhcp_server_mac=lorsi dhcp_resp=repreh url=https://www.example.net/irured/illumqui.txt?tionula=ritqu#ecatcupi category0=uamei server=10.193.219.34 vpn_type=onse connectivity=olorem -umwritte 1508385787.vol oremquel_appliance events MAC 01:00:5e:16:5e:b1 and MAC 01:00:5e:ee:e8:77 both claim IP: 10.255.199.16 -unte 1509620741.uamnihil llam_appliance events MAC 01:00:5e:ee:1d:77 and MAC 01:00:5e:f1:21:bd both claim IP: 10.94.88.5 -esci 1510855695.uov quaeab_ events IDS: moles -accusa 1512090649.natu liquid events IDS: enim -dquiaco nibus.vitaed ser security_event etconsec signature=elillum priority=upt timestamp=1513325604.rnat dhost=01:00:5e:01:60:e0 direction=internal protocol=ipv6 src=10.90.99.245 dst=10.124.63.4 message:pta -tetura 1514560558.imadmini moe_appliance events content_filtering_block url='https://mail.example.net/uat/lupta.html?uptassit=ncidi#tlabori' category0='laudan' server='10.249.7.146:2010' -lapar 1515795512.ritati edquia_appliance events IDS: itesse -amvolu mip.tion tobeatae_ security_event Utenima security_event iqua signature=luptat priority=deriti timestamp=1517030466.sintocc dhost=01:00:5e:c9:b7:22 direction=inbound protocol=icmp src=10.196.96.162 dst=10.81.234.34 message:equuntur -uide 1518265421.scivel henderi_appliance events IDS: iusmodt -tiumd 1519500375.ntmoll mexer events dhcp lease of ip 10.40.101.224 from server mac 01:00:5e:0a:df:72 for client mac 01:00:5e:7c:01:ab with hostname remips188.api.invalid from router 10.78.199.43 on subnet ehender with dns ilmole -runtmo 1520735329.ore isund_appliance events MAC 01:00:5e:17:87:3e and MAC 01:00:5e:5f:c1:3e both claim IP: 10.244.29.119 -tutlabor 1521970284.reseosq gna_ flows pteurs flows deny src=10.83.131.245 dst=10.39.172.93 mac=01:00:5e:c4:12:c7 protocol=udp type=uido -osquira 1523205238.umd sciveli_ events dhcp lease of ip 10.86.188.179 from server mac 01:00:5e:48:4b:78 for client mac 01:00:5e:7e:cd:15 from router 10.201.168.116 on subnet umiure with dns laborum -umdolors 1524440192.lumdo acom_ security_event umexercisecurity_event duntut url=https://mail.example.com/prehend/eufug.htm?eufug=est#civelits src=10.148.211.222:2053 dst=10.122.204.151:3903 mac=01:00:5e:c3:a0:dc name=ine sha256=urerepre disposition=asnulap action=deny -atnul 1525675146.umfugi stquidol_ flows luptatem flows accept -essequam ueporro.aliqu upt ids-alerts signature=orum priority=Bonoru timestamp=1526910101.madminimprotocol=ipv6-icmp src=10.97.46.16 dst=10.120.4.9message: teni -lorsitam tanimid.onpr litseddo_ ids-alerts oremqu ids-alerts signature=idex priority=radip timestamp=1528145055.uptaprotocol=ipv6-icmp src=10.171.206.139 dst=10.165.173.162message: lestia -inibusB 1529380009.nostrud cteturad events dhcp lease of ip 10.150.163.151 from server mac 01:00:5e:72:b7:79 for client mac 01:00:5e:f2:d3:12 with hostname uames4985.mail.localdomain from router 10.144.57.239 on subnet oinBCSed with dns orem -eritq rehen.ipsamvol elillum_ ids-alerts tco ids-alerts signature=tvol priority=oluptate timestamp=1530614963.lit shost=01:00:5e:ac:6d:d3 direction=unknown protocol=igmp src=10.52.202.158 dst=10.54.44.231 message: Ute -runtm 1531849918.eturadip olorsi_ events MAC 01:00:5e:67:1d:0f and MAC 01:00:5e:f0:a9:cd both claim IP: 10.101.183.86 -inesciu 1533084872.quid atcupid_ flows orem flows src=10.71.22.225 dst=10.4.76.100 protocol=ggp pattern: allow serrorsi -lamco 1534319826.cit siar events MAC 01:00:5e:80:cd:ca and MAC 01:00:5e:45:aa:51 both claim IP: 10.83.130.95 -hite 1535554780.ianonnum nofdeFi events aid=henderit arp_resp=remq arp_src=unt auth_neg_dur=tla auth_neg_failed=arch channel=lite dns_req_rtt=ugia dns_resp=meum dns_server=borumSec duration=91.439000 full_conn=nvolupta identity=tev ip_resp=nre ip_src=10.2.110.73 is_8021x=eturadip is_wpa=ent last_auth_ago=rumSecti radio=Utenima reason=olore rssi=orumS type=olor vap=radip client_mac=01:00:5e:59:bf:36 client_ip=10.230.98.81 instigator=aaliquaU http_resp=olu dhcp_lease_completed=iameaque dhcp_ip=identsun dhcp_server=ender dhcp_server_mac=inc dhcp_resp=tect url=https://www.example.net/doconse/eni.html?mSec=smoditem#tatisetq category0=uidolo server=10.103.49.129 vpn_type=oquisq connectivity=abori -dunt 1536789735.ames amni events aid=tatio arp_resp=amquisno arp_src=modoc auth_neg_dur=magnam auth_neg_failed=uinesc channel=cid dns_req_rtt=emi dns_resp=Bonorum dns_server=lesti duration=59.289000 full_conn=iosamni identity=idu ip_resp=sis ip_src=10.158.61.228 is_8021x=tsedquia is_wpa=its last_auth_ago=umdolor radio=isiu reason=assi rssi=eserun type=rvelill vap=lupta client_mac=01:00:5e:e6:a6:a2 client_ip=10.186.16.20 instigator=tisu http_resp=remagnam dhcp_lease_completed=nvolupt dhcp_ip=meiusm dhcp_server=nidolo dhcp_server_mac=atquovol dhcp_resp=quunt url=https://www.example.com/seq/moll.htm?sunt=dquianon#urExc category0=tDuis server=10.132.176.96 vpn_type=aria connectivity=inim -oremeumf 1538024689.lesti sintocca events dhcp lease of ip 10.105.136.146 from server mac 01:00:5e:bb:aa:f6 for client mac 01:00:5e:69:92:4a with hostname lors2232.api.example from router 10.46.217.155 on subnet amnihil with dns orissus -nimadmin 1539259643.lumqui quiavolu flows src=10.245.199.23 dst=10.123.62.215 mac=01:00:5e:1f:7f:1d protocol=udp pattern: 0 iusmodt -rep 1540494597.remap deri flows cancel src=10.239.105.121 dst=10.70.7.23 mac=01:00:5e:8e:82:f0 protocol=ipv6 -idexeac 1541729552.nimadmin midest_appliance events aid=modt arp_resp=iduntutl arp_src=rsitam auth_neg_dur=xercit auth_neg_failed=ulpaquio channel=itqu dns_req_rtt=minimav dns_resp=smodtem dns_server=roquisqu duration=116.294000 full_conn=iquid identity=evo ip_resp=mcorpori ip_src=10.196.176.243 is_8021x=itesse is_wpa=expl last_auth_ago=essecill radio=totamre reason=rpo rssi=velites type=nonpro vap=nula client_mac=01:00:5e:99:a6:b4 client_ip=10.90.50.149 instigator=nemulla http_resp=asp dhcp_lease_completed=dexercit dhcp_ip=amn dhcp_server=itessequ dhcp_server_mac=porissu dhcp_resp=umd url=https://www.example.net/sectetur/edquian.html?turQuis=taevi#uames category0=tconsec server=10.16.230.121 vpn_type=laboree connectivity=udantiu -ttenb olor.quiav gna security_event Nem signature=tdolorem priority=eacomm timestamp=1542964506.upidata dhost=01:00:5e:6a:c8:f8 direction=unknown protocol=ipv6 src=10.246.152.72:4293 dst=10.34.62.190:1641 message:eve -quisn 1544199460.rem ulamcola events dhcp no offers for mac 01:00:5e:67:fc:cb -eruntmo 1545434414.nimve usanti_ events dhcp release for mac 01:00:5e:7d:de:f7 -uatu 1546669369.olupta consequu_ events dhcp release for mac 01:00:5e:6b:96:f2 -sitam inibusBo.illoin emUtenim ids-alerts signature=ende priority=dexea timestamp=1547904323.acoprotocol=ipv6 src=10.244.32.189 dst=10.121.9.5message: uptas -edol 1549139277.sequuntu quameius_ events content_filtering_block url='https://www.example.com/totamrem/aliqu.htm?sBonorum=moenimi#lor' category0='auto' server='10.41.124.15:333' -antium 1550374232.remaper eseosq events dhcp no offers for mac 01:00:5e:c3:77:27 -oditau 1551609186.onsec dit events MAC 01:00:5e:19:86:21 and MAC 01:00:5e:ed:ed:79 both claim IP: 10.43.235.230 -asper dictasun.psa lorese_ ids-alerts ctobeat ids-alerts signature=onsec priority=idestl timestamp=1552844140.litani shost=01:00:5e:a0:b2:c9 direction=unknown protocol=icmp src=10.199.19.205:5823 dst=10.103.91.159:7116 message: ntut -estiaec 1554079094.pitlabo tas_appliance flows src=10.17.111.91 dst=10.65.0.157 mac=01:00:5e:49:c4:17 protocol=udp pattern: 1 nostrum -ercitati 1555314049.atem serro flows cancel -amquaera 1556549003.rsitamet leumiur events MAC 01:00:5e:fd:79:9e and MAC 01:00:5e:4d:c0:dd both claim IP: 10.20.130.88 -abill ametcon.ofdeFini tasnu_ ids-alerts tionev ids-alerts signature=uasiarch priority=velites timestamp=1557783957.uredolorprotocol=ipv6 src=10.177.64.152 dst=10.140.242.86message: temporin -lor nvolupt.dquia ora_ security_event dipi security_event ecatc signature=quovolu priority=ite timestamp=1559018911.itse shost=01:00:5e:b8:73:c8 direction=external protocol=icmp src=10.199.103.185:2449 dst=10.51.121.223:24 message:stenat -saq 1560253866.asiarch ssuscipi events MAC 01:00:5e:93:48:61 and MAC 01:00:5e:21:c2:55 both claim IP: 10.126.242.58 -tlab 1561488820.vel ionevo events dhcp release for mac 01:00:5e:8a:1a:f9 -aeab 1562723774.uradipis aerat_ flows uira flows deny src=10.121.37.244 dst=10.113.152.241 mac=01:00:5e:9c:86:62 protocol=udp type=utaliqui -nesciu 1563958728.mali roinBCSe_appliance events aid=eetdolor arp_resp=tpersp arp_src=assi auth_neg_dur=rch auth_neg_failed=psa channel=nreprehe dns_req_rtt=pidatatn dns_resp=isno dns_server=luptatev duration=39.622000 full_conn=lla identity=urau ip_resp=aeca ip_src=10.247.118.132 is_8021x=atcupi is_wpa=enima last_auth_ago=uptateve radio=fugitsed reason=lumqui rssi=ectet type=ionu vap=eratv client_mac=01:00:5e:10:8b:c3 client_ip=10.153.33.99 instigator=liq http_resp=xerc dhcp_lease_completed=atisetqu dhcp_ip=squir dhcp_server=gnaaliq dhcp_server_mac=quam dhcp_resp=deriti url=https://www5.example.org/eturadi/umS.txt?mSecti=henderi#taevitae category0=tevel server=10.254.96.130 vpn_type=ita connectivity=iquipexe -tot 1565193683.reme emeumfu events aid=inBCSedu arp_resp=ita arp_src=ade auth_neg_dur=nihilmol auth_neg_failed=nder channel=ano dns_req_rtt=rumexer dns_resp=eab dns_server=iaconseq duration=18.963000 full_conn=eli identity=rissusci ip_resp=ectetur ip_src=10.101.13.122 is_8021x=oconsequ is_wpa=roqui last_auth_ago=oluptate radio=ntut reason=mremaper rssi=uteirur type=ntium vap=ide client_mac=01:00:5e:95:ae:d0 client_ip=10.78.143.52 instigator=ntiumdol http_resp=conse dhcp_lease_completed=aturve dhcp_ip=edqui dhcp_server=tvolu dhcp_server_mac=psu dhcp_resp=strud url=https://internal.example.org/fdeFi/ratv.htm?sequatu=tiumtot#tate category0=udanti server=10.200.98.243 vpn_type=cteturad connectivity=umq -oinvento 1566428637.mporin orissusc_appliance events content_filtering_block url='https://www5.example.net/uov/pariat.htm?litsed=lumd#tiaec' category0='lorem' server='10.247.205.185:7676' client_mac='01:00:5e:6f:21:c8' -metMa emoen.ptate mipsumqu_ ids-alerts ccusa ids-alerts signature=billo priority=doloremi timestamp=1567663591.ectetura dhost=01:00:5e:0a:88:bb direction=inbound protocol=ipv6 src=10.195.90.73:3914 dst=10.147.165.30:7662 message: idents -veniamqu 1568898545.iconsequ ueporr_appliance events IDS: empor -atDuisa mipsa.uas iat ids-alerts signature=hite priority=adipis timestamp=1570133500.abo dhost=01:00:5e:dd:cb:5b direction=inbound protocol=udp src=10.137.166.97 dst=10.162.202.14 message: ipsaqua -deom 1571368454.tiumdo rautod_appliance events content_filtering_block url='https://www5.example.com/illoinve/etcon.htm?nevolup=erspici#itinvolu' category0='adeserun' server='10.227.135.142:6598' -orese 1572603408.umdolore umqui_appliance events MAC 01:00:5e:f1:b8:3a and MAC 01:00:5e:37:9c:af both claim IP: 10.199.29.19 -explicab 1573838362.samvolu teiru_appliance events dhcp no offers for mac 01:00:5e:b8:06:92 -rissusci 1575073317.uaturQ iusmod_ events aid=mips arp_resp=iduntutl arp_src=mipsumd auth_neg_dur=eiusmo auth_neg_failed=quelauda channel=rcit dns_req_rtt=dolo dns_resp=ulamc dns_server=doe duration=10.574000 full_conn=remquela identity=toreve ip_resp=squirat ip_src=10.85.59.172 is_8021x=mto is_wpa=iae last_auth_ago=dent radio=Uten reason=tatiset rssi=sequat type=modoco vap=beataevi client_mac=01:00:5e:92:d8:95 client_ip=10.158.215.216 instigator=deritin http_resp=ptate dhcp_lease_completed=lloi dhcp_ip=nseq dhcp_server=equunt dhcp_server_mac=tutla dhcp_resp=usmod url=https://example.com/qui/itse.gif?orsitame=tasn#exeaco category0=upta server=10.75.122.111 vpn_type=reprehe connectivity=deFinib -orr 1576308271.pre aute events IDS: rchite diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/meraki-mx-ndjson.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/meraki-mx-ndjson.log new file mode 100644 index 00000000000..c1a186fc01b --- /dev/null +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/meraki-mx-ndjson.log @@ -0,0 +1 @@ +{ "version": "0.1", "sharedSecret": "secret", "sentAt": "2021-10-07T08:42:00.926325Z", "organizationId": "2930418", "organizationName": "My organization", "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", "networkId": "N_24329156", "networkName": "Main Office", "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", "networkTags": [], "deviceSerial": "Q234-ABCD-5678", "deviceMac": "00:11:22:33:44:55", "deviceName": "My appliance", "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", "deviceTags": [ "tag1", "tag2" ], "deviceModel": "MX", "alertId": "0000000000000000", "alertType": "Cellular came up", "alertTypeId": "cellular_up", "alertLevel": "informational", "occurredAt": "2018-02-11T00:00:00.123450Z", "alertData": { "provider": "Purview Wireless", "model": "UML290VW", "local": "192.168.1.2", "remote": "1.2.3.5", "connection": "LTE" } } diff --git a/packages/cisco_meraki/changelog.yml b/packages/cisco_meraki/changelog.yml index aa9069cea34..8be1223660d 100644 --- a/packages/cisco_meraki/changelog.yml +++ b/packages/cisco_meraki/changelog.yml @@ -1,4 +1,9 @@ -# newer versions go on top +# newer versions go on topA +- version: "0.5.0" + changes: + - description: Replace RSA2ELK with Webhook integration + type: enhancement + link: https://github.com/elastic/integrations/pull/ - version: "0.4.0" changes: - description: Update to ECS 8.0.0 diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-common-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-common-config.yml new file mode 100644 index 00000000000..c39dc386179 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-common-config.yml @@ -0,0 +1,2 @@ +dynamic_fields: + event.ingested: ".*" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log deleted file mode 100644 index 05501480e40..00000000000 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log +++ /dev/null @@ -1,100 +0,0 @@ -modtempo 1454047799.olab nto_ security_event olaborissecurity_event tur url=https://example.org/odoco/ria.jpg?ritin=uredolor#tatemac src=10.15.44.253:5078 dst=10.193.124.51:5293 mac=01:00:5e:28:ae:7d name=psa sha256=umq disposition=ntium action=deny -umdo 1455282753.itessequ vol_ events dhcp lease of ip 10.102.218.31 from server mac 01:00:5e:9c:c2:9c for client mac 01:00:5e:0f:87:e3 from router 10.15.16.212 on subnet ameaqu with dns aqu -uipexea 1456517708.tatio minim_ flows ceroinBC flows src=10.179.60.216 dst=10.69.53.104 protocol=udp pattern: 0 reprehe -mipsu 1457752662.consec taliquip_ flows radip flows block src=10.155.236.240 dst=10.112.46.169 mac=01:00:5e:7a:74:89 protocol=ipv6 type=roidents -obeataev 1458987616.lor uidexea_appliance events MAC 01:00:5e:e1:89:ac and MAC 01:00:5e:a3:d9:ac both claim IP: 10.14.107.140 -iutal 1460222571.dexe urerep events content_filtering_block url='https://api.example.org/liqu/lorem.gif?ueipsaqu=uidolore#niamqu' category0='ari' server='10.108.180.105:5098' client_mac='01:00:5e:40:9b:83' -ipit 1461457525.idexea riat_appliance events MAC 01:00:5e:25:4f:e4 and MAC 01:00:5e:3f:49:e4 both claim IP: 10.149.88.198 -ntsuntin 1462692479.aecatcup animi events dhcp release for mac 01:00:5e:e3:10:34 -orsitame 1463927433.quiratio ite events MAC 01:00:5e:48:62:22 and MAC 01:00:5e:9f:b6:a6 both claim IP: 10.243.206.225 -olupta turveli.toccae tatno_ ids-alerts taliqu ids-alerts signature=temUten priority=ccusan timestamp=1465162388.iqudirection=outbound protocol=icmp src=10.131.82.116:7307 -uaera 1466397342.sitas ehenderi_ security_event atquovosecurity_event iumto url=https://www5.example.net/sun/essecill.html?saute=vel#quu src=10.210.213.18:7616 dst=10.134.0.141:2703 mac=01:00:5e:aa:42:fa name=idolores sha256=llumquid disposition=tation action=accept -omn ipsumq.atcu oremagna_ security_event remipsum security_event liq signature=ist priority=tnon timestamp=1467632296.ionul shost=01:00:5e:c8:9c:2f direction=outbound protocol=udp src=10.163.72.17 dst=10.74.237.180 message:nsequu -omm 1468867250.idestla Nemoeni_appliance events MAC 01:00:5e:c4:69:7f and MAC 01:00:5e:e2:67:d2 both claim IP: 10.72.31.26 -agna tionemu.eomnisis mqui ids-alerts signature=civeli priority=errorsi timestamp=1470102205.desdirection=internal protocol=tcp src=10.70.95.74:4290 -olupt 1471337159.dit sumquiad events MAC 01:00:5e:ea:e8:7a and MAC 01:00:5e:9c:d2:4a both claim IP: 10.17.21.125 -amqu 1472572113.uines nsec events dhcp lease of ip 10.85.10.165 from server mac 01:00:5e:63:93:48 for client mac 01:00:5e:46:17:35 from router 10.53.150.119 on subnet uiineavo with dns tisetq -giatquov eritquii.dexeac iscinge ids-alerts signature=atvol priority=umiur timestamp=1473807067.imadprotocol=igmp src=10.88.231.224 dst=10.187.77.245message: iadese -agnaali 1475042022.gnam tat events content_filtering_block url='https://internal.example.com/quae/maccusa.htm?rQuisau=idex#xerci' category0='aqu' server='10.186.58.115:7238' client_mac='01:00:5e:8f:16:6d' -apariat 1476276976.tlabore untmolli_ events dhcp lease of ip 10.219.84.37 from server mac 01:00:5e:e8:bf:69 for client mac 01:00:5e:87:e1:a0 from router 10.205.47.51 on subnet uovolup with dns samvolu -ento 1477511930.pic evita events MAC 01:00:5e:ce:61:db and MAC 01:00:5e:ec:f8:cc both claim IP: 10.3.134.237 -tmo 1478746884.fficiade uscipit events aid=vitaedi arp_resp=fugitse arp_src=veniamq auth_neg_dur=one auth_neg_failed=etMalor channel=ipi dns_req_rtt=reseos dns_resp=pariatu dns_server=tin duration=48.123000 full_conn=oquisqu identity=sperna ip_resp=eabilloi ip_src=10.182.178.217 is_8021x=tlab is_wpa=volupt last_auth_ago=osqui radio=xerc reason=iutali rssi=fdeFi type=texp vap=tasuntex client_mac=01:00:5e:e3:b1:24 client_ip=10.194.114.58 instigator=ectio http_resp=dutper dhcp_lease_completed=lamcolab dhcp_ip=ati dhcp_server=tlabo dhcp_server_mac=uames dhcp_resp=iduntu url=https://internal.example.net/ris/uamqu.txt?liqui=quioffi#uptate category0=ncidid server=10.63.194.87 vpn_type=quisno connectivity=sin -emvel 1479981839.tmollita fde events aid=nsecte arp_resp=inculpa arp_src=abo auth_neg_dur=veniamqu auth_neg_failed=nse channel=non dns_req_rtt=paquioff dns_resp=mquisnos dns_server=maven duration=71.798000 full_conn=atcu identity=labor ip_resp=didunt ip_src=10.153.0.77 is_8021x=udan is_wpa=orema last_auth_ago=invento radio=qua reason=aturQui rssi=utlabor type=rau vap=idex client_mac=01:00:5e:9e:7b:a4 client_ip=10.105.88.20 instigator=ecte http_resp=tinvolu dhcp_lease_completed=iurer dhcp_ip=iciadese dhcp_server=quidolor dhcp_server_mac=tessec dhcp_resp=olupta url=https://mail.example.com/icabo/itatio.jpg?eleum=sintoc#volupt category0=siste server=10.163.154.210 vpn_type=ept connectivity=iumtotam -ionevo 1481216793.ugiatnu ciati_appliance events MAC 01:00:5e:b8:7a:96 and MAC 01:00:5e:b9:6b:a8 both claim IP: 10.73.69.176 -spi 1482451747.stquido ommodico_ flows ese flows allow src=10.145.248.111 dst=10.57.6.252 mac=01:00:5e:94:6a:cf protocol=udp -smo etcons.iusmodi uamest_ security_event uiac security_event epte signature=idolo priority=quinesc timestamp=1483686701.madmi shost=01:00:5e:1c:4c:64 direction=internal protocol=icmp src=10.31.77.157 dst=10.12.182.70 message:tev -nisiuta 1484921656.roid inibusB flows cancel -str 1486156610.idolore pid_ flows cteturad flows deny src=10.93.68.231 dst=10.135.217.12 mac=01:00:5e:4a:69:5b protocol=ipv6 type=archite -amnih 1487391564.ium esciuntN_ events dhcp release for mac 01:00:5e:8b:99:98 -isnost 1488626519.queips ncidi_ flows iscinge flows src=10.247.30.212 dst=10.66.89.5 mac=01:00:5e:7f:65:da protocol=igmp pattern: 1 borios -oin 1489861473.mvenia madminim events IDS: fugitsed -dmin fugi.quia iduntu security_event idestlab signature=rnatur priority=ofdeFin timestamp=1491096427.essequam dhost=01:00:5e:c1:53:b1 direction=inbound protocol=tcp src=10.221.102.245 dst=10.173.136.186 message:naal -umqu tinv.adipisc uscipitl_ ids-alerts ritatise ids-alerts signature=uamei priority=siut timestamp=1492331381.ciad dhost=01:00:5e:1f:c6:29 direction=external protocol=udp src=10.58.64.108 dst=10.54.37.86 message: entorev -velitess 1493566336.naali uunturm_ flows veli flows block src=10.147.76.202 dst=10.163.93.20 mac=01:00:5e:1d:85:ec protocol=ipv6 sport=1085 dport=3141 -iumdol tpersp.stla uptatema_ security_event uradi security_event tot signature=llamco priority=nea timestamp=1494801290.psum dhost=01:00:5e:35:71:1e direction=internal protocol=icmp src=10.0.200.27:5905 dst=10.183.44.198:1702 message:asiarc -tiaec 1496036244.rumwrit icabo_ events dhcp lease of ip 10.148.124.84 from server mac 01:00:5e:0b:2c:22 for client mac 01:00:5e:06:12:98 from router 10.28.144.180 on subnet ritin with dns temporin -ica 1497271198.lillum remips_appliance events aid=uisaute arp_resp=imide arp_src=poriss auth_neg_dur=tvolup auth_neg_failed=itesseq channel=dictasun dns_req_rtt=veniamqu dns_resp=rum dns_server=quaea duration=165.611000 full_conn=mvel identity=nof ip_resp=usmodi ip_src=10.204.230.166 is_8021x=dat is_wpa=aincidu last_auth_ago=nimadmin radio=isiu reason=licabo rssi=enimadmi type=utaliqu vap=dic client_mac=01:00:5e:bb:60:a6 client_ip=10.62.71.118 instigator=ineavol http_resp=iosa dhcp_lease_completed=boNemoe dhcp_ip=onsequ dhcp_server=equinesc dhcp_server_mac=cab dhcp_resp=atisund url=https://example.net/ites/isetq.gif?nisiut=tur#avolupt category0=ariatur server=10.98.194.212 vpn_type=nimave connectivity=isciv -dipisci 1498506153.spernatu admi events content_filtering_block url='https://www.example.org/ueipsa/tae.html?eriti=atcupi#corpori' category0='borisnis' server='10.197.13.39:5912' -itsedd 1499741107.leumiur eratvol events dhcp release for mac 01:00:5e:fd:84:bb -leumiu tla.item nimid ids-alerts signature=dat priority=periam timestamp=1500976061.dquprotocol=icmp src=10.242.77.170 dst=10.150.245.88message: orisn -sitam rad.loi isc_ ids-alerts volupt ids-alerts signature=rem priority=idid timestamp=1502211015.tesse shost=01:00:5e:9d:eb:fb direction=external protocol=tcp src=10.247.139.239 dst=10.180.195.43 message: tenatuse -tore 1503445970.elits consequa events dhcp release for mac 01:00:5e:50:48:c4 -undeom uamnihi.risnis uov_ ids-alerts isn ids-alerts signature=sBono priority=loremqu timestamp=1504680924.teturprotocol=rdp src=10.94.6.140 dst=10.147.15.213message: uptat -itasper 1505915878.uae mve_ flows obeata flows block src=10.230.6.127 dst=10.111.157.56 mac=01:00:5e:39:a7:fc protocol=icmp type=aliquamq -archite 1507150832.remq veniamq events aid=occ arp_resp=oloreseo arp_src=iruredol auth_neg_dur=veniamqu auth_neg_failed=licaboN channel=atquo dns_req_rtt=cupi dns_resp=strude dns_server=eritin duration=85.513000 full_conn=litsedq identity=nderiti ip_resp=ntNe ip_src=10.179.40.170 is_8021x=olorema is_wpa=mollita last_auth_ago=tatem radio=iae reason=quido rssi=emip type=inBC vap=mol client_mac=01:00:5e:58:2d:1c client_ip=10.153.81.206 instigator=rsita http_resp=nsequun dhcp_lease_completed=eetd dhcp_ip=illu dhcp_server=iatqu dhcp_server_mac=lorsi dhcp_resp=repreh url=https://www.example.net/irured/illumqui.txt?tionula=ritqu#ecatcupi category0=uamei server=10.193.219.34 vpn_type=onse connectivity=olorem -umwritte 1508385787.vol oremquel_appliance events MAC 01:00:5e:16:5e:b1 and MAC 01:00:5e:ee:e8:77 both claim IP: 10.255.199.16 -unte 1509620741.uamnihil llam_appliance events MAC 01:00:5e:ee:1d:77 and MAC 01:00:5e:f1:21:bd both claim IP: 10.94.88.5 -esci 1510855695.uov quaeab_ events IDS: moles -accusa 1512090649.natu liquid events IDS: enim -dquiaco nibus.vitaed ser security_event etconsec signature=elillum priority=upt timestamp=1513325604.rnat dhost=01:00:5e:01:60:e0 direction=internal protocol=ipv6 src=10.90.99.245 dst=10.124.63.4 message:pta -tetura 1514560558.imadmini moe_appliance events content_filtering_block url='https://mail.example.net/uat/lupta.html?uptassit=ncidi#tlabori' category0='laudan' server='10.249.7.146:2010' -lapar 1515795512.ritati edquia_appliance events IDS: itesse -amvolu mip.tion tobeatae_ security_event Utenima security_event iqua signature=luptat priority=deriti timestamp=1517030466.sintocc dhost=01:00:5e:c9:b7:22 direction=inbound protocol=icmp src=10.196.96.162 dst=10.81.234.34 message:equuntur -uide 1518265421.scivel henderi_appliance events IDS: iusmodt -tiumd 1519500375.ntmoll mexer events dhcp lease of ip 10.40.101.224 from server mac 01:00:5e:0a:df:72 for client mac 01:00:5e:7c:01:ab with hostname remips188.api.invalid from router 10.78.199.43 on subnet ehender with dns ilmole -runtmo 1520735329.ore isund_appliance events MAC 01:00:5e:17:87:3e and MAC 01:00:5e:5f:c1:3e both claim IP: 10.244.29.119 -tutlabor 1521970284.reseosq gna_ flows pteurs flows deny src=10.83.131.245 dst=10.39.172.93 mac=01:00:5e:c4:12:c7 protocol=udp type=uido -osquira 1523205238.umd sciveli_ events dhcp lease of ip 10.86.188.179 from server mac 01:00:5e:48:4b:78 for client mac 01:00:5e:7e:cd:15 from router 10.201.168.116 on subnet umiure with dns laborum -umdolors 1524440192.lumdo acom_ security_event umexercisecurity_event duntut url=https://mail.example.com/prehend/eufug.htm?eufug=est#civelits src=10.148.211.222:2053 dst=10.122.204.151:3903 mac=01:00:5e:c3:a0:dc name=ine sha256=urerepre disposition=asnulap action=deny -atnul 1525675146.umfugi stquidol_ flows luptatem flows accept -essequam ueporro.aliqu upt ids-alerts signature=orum priority=Bonoru timestamp=1526910101.madminimprotocol=ipv6-icmp src=10.97.46.16 dst=10.120.4.9message: teni -lorsitam tanimid.onpr litseddo_ ids-alerts oremqu ids-alerts signature=idex priority=radip timestamp=1528145055.uptaprotocol=ipv6-icmp src=10.171.206.139 dst=10.165.173.162message: lestia -inibusB 1529380009.nostrud cteturad events dhcp lease of ip 10.150.163.151 from server mac 01:00:5e:72:b7:79 for client mac 01:00:5e:f2:d3:12 with hostname uames4985.mail.localdomain from router 10.144.57.239 on subnet oinBCSed with dns orem -eritq rehen.ipsamvol elillum_ ids-alerts tco ids-alerts signature=tvol priority=oluptate timestamp=1530614963.lit shost=01:00:5e:ac:6d:d3 direction=unknown protocol=igmp src=10.52.202.158 dst=10.54.44.231 message: Ute -runtm 1531849918.eturadip olorsi_ events MAC 01:00:5e:67:1d:0f and MAC 01:00:5e:f0:a9:cd both claim IP: 10.101.183.86 -inesciu 1533084872.quid atcupid_ flows orem flows src=10.71.22.225 dst=10.4.76.100 protocol=ggp pattern: allow serrorsi -lamco 1534319826.cit siar events MAC 01:00:5e:80:cd:ca and MAC 01:00:5e:45:aa:51 both claim IP: 10.83.130.95 -hite 1535554780.ianonnum nofdeFi events aid=henderit arp_resp=remq arp_src=unt auth_neg_dur=tla auth_neg_failed=arch channel=lite dns_req_rtt=ugia dns_resp=meum dns_server=borumSec duration=91.439000 full_conn=nvolupta identity=tev ip_resp=nre ip_src=10.2.110.73 is_8021x=eturadip is_wpa=ent last_auth_ago=rumSecti radio=Utenima reason=olore rssi=orumS type=olor vap=radip client_mac=01:00:5e:59:bf:36 client_ip=10.230.98.81 instigator=aaliquaU http_resp=olu dhcp_lease_completed=iameaque dhcp_ip=identsun dhcp_server=ender dhcp_server_mac=inc dhcp_resp=tect url=https://www.example.net/doconse/eni.html?mSec=smoditem#tatisetq category0=uidolo server=10.103.49.129 vpn_type=oquisq connectivity=abori -dunt 1536789735.ames amni events aid=tatio arp_resp=amquisno arp_src=modoc auth_neg_dur=magnam auth_neg_failed=uinesc channel=cid dns_req_rtt=emi dns_resp=Bonorum dns_server=lesti duration=59.289000 full_conn=iosamni identity=idu ip_resp=sis ip_src=10.158.61.228 is_8021x=tsedquia is_wpa=its last_auth_ago=umdolor radio=isiu reason=assi rssi=eserun type=rvelill vap=lupta client_mac=01:00:5e:e6:a6:a2 client_ip=10.186.16.20 instigator=tisu http_resp=remagnam dhcp_lease_completed=nvolupt dhcp_ip=meiusm dhcp_server=nidolo dhcp_server_mac=atquovol dhcp_resp=quunt url=https://www.example.com/seq/moll.htm?sunt=dquianon#urExc category0=tDuis server=10.132.176.96 vpn_type=aria connectivity=inim -oremeumf 1538024689.lesti sintocca events dhcp lease of ip 10.105.136.146 from server mac 01:00:5e:bb:aa:f6 for client mac 01:00:5e:69:92:4a with hostname lors2232.api.example from router 10.46.217.155 on subnet amnihil with dns orissus -nimadmin 1539259643.lumqui quiavolu flows src=10.245.199.23 dst=10.123.62.215 mac=01:00:5e:1f:7f:1d protocol=udp pattern: 0 iusmodt -rep 1540494597.remap deri flows cancel src=10.239.105.121 dst=10.70.7.23 mac=01:00:5e:8e:82:f0 protocol=ipv6 -idexeac 1541729552.nimadmin midest_appliance events aid=modt arp_resp=iduntutl arp_src=rsitam auth_neg_dur=xercit auth_neg_failed=ulpaquio channel=itqu dns_req_rtt=minimav dns_resp=smodtem dns_server=roquisqu duration=116.294000 full_conn=iquid identity=evo ip_resp=mcorpori ip_src=10.196.176.243 is_8021x=itesse is_wpa=expl last_auth_ago=essecill radio=totamre reason=rpo rssi=velites type=nonpro vap=nula client_mac=01:00:5e:99:a6:b4 client_ip=10.90.50.149 instigator=nemulla http_resp=asp dhcp_lease_completed=dexercit dhcp_ip=amn dhcp_server=itessequ dhcp_server_mac=porissu dhcp_resp=umd url=https://www.example.net/sectetur/edquian.html?turQuis=taevi#uames category0=tconsec server=10.16.230.121 vpn_type=laboree connectivity=udantiu -ttenb olor.quiav gna security_event Nem signature=tdolorem priority=eacomm timestamp=1542964506.upidata dhost=01:00:5e:6a:c8:f8 direction=unknown protocol=ipv6 src=10.246.152.72:4293 dst=10.34.62.190:1641 message:eve -quisn 1544199460.rem ulamcola events dhcp no offers for mac 01:00:5e:67:fc:cb -eruntmo 1545434414.nimve usanti_ events dhcp release for mac 01:00:5e:7d:de:f7 -uatu 1546669369.olupta consequu_ events dhcp release for mac 01:00:5e:6b:96:f2 -sitam inibusBo.illoin emUtenim ids-alerts signature=ende priority=dexea timestamp=1547904323.acoprotocol=ipv6 src=10.244.32.189 dst=10.121.9.5message: uptas -edol 1549139277.sequuntu quameius_ events content_filtering_block url='https://www.example.com/totamrem/aliqu.htm?sBonorum=moenimi#lor' category0='auto' server='10.41.124.15:333' -antium 1550374232.remaper eseosq events dhcp no offers for mac 01:00:5e:c3:77:27 -oditau 1551609186.onsec dit events MAC 01:00:5e:19:86:21 and MAC 01:00:5e:ed:ed:79 both claim IP: 10.43.235.230 -asper dictasun.psa lorese_ ids-alerts ctobeat ids-alerts signature=onsec priority=idestl timestamp=1552844140.litani shost=01:00:5e:a0:b2:c9 direction=unknown protocol=icmp src=10.199.19.205:5823 dst=10.103.91.159:7116 message: ntut -estiaec 1554079094.pitlabo tas_appliance flows src=10.17.111.91 dst=10.65.0.157 mac=01:00:5e:49:c4:17 protocol=udp pattern: 1 nostrum -ercitati 1555314049.atem serro flows cancel -amquaera 1556549003.rsitamet leumiur events MAC 01:00:5e:fd:79:9e and MAC 01:00:5e:4d:c0:dd both claim IP: 10.20.130.88 -abill ametcon.ofdeFini tasnu_ ids-alerts tionev ids-alerts signature=uasiarch priority=velites timestamp=1557783957.uredolorprotocol=ipv6 src=10.177.64.152 dst=10.140.242.86message: temporin -lor nvolupt.dquia ora_ security_event dipi security_event ecatc signature=quovolu priority=ite timestamp=1559018911.itse shost=01:00:5e:b8:73:c8 direction=external protocol=icmp src=10.199.103.185:2449 dst=10.51.121.223:24 message:stenat -saq 1560253866.asiarch ssuscipi events MAC 01:00:5e:93:48:61 and MAC 01:00:5e:21:c2:55 both claim IP: 10.126.242.58 -tlab 1561488820.vel ionevo events dhcp release for mac 01:00:5e:8a:1a:f9 -aeab 1562723774.uradipis aerat_ flows uira flows deny src=10.121.37.244 dst=10.113.152.241 mac=01:00:5e:9c:86:62 protocol=udp type=utaliqui -nesciu 1563958728.mali roinBCSe_appliance events aid=eetdolor arp_resp=tpersp arp_src=assi auth_neg_dur=rch auth_neg_failed=psa channel=nreprehe dns_req_rtt=pidatatn dns_resp=isno dns_server=luptatev duration=39.622000 full_conn=lla identity=urau ip_resp=aeca ip_src=10.247.118.132 is_8021x=atcupi is_wpa=enima last_auth_ago=uptateve radio=fugitsed reason=lumqui rssi=ectet type=ionu vap=eratv client_mac=01:00:5e:10:8b:c3 client_ip=10.153.33.99 instigator=liq http_resp=xerc dhcp_lease_completed=atisetqu dhcp_ip=squir dhcp_server=gnaaliq dhcp_server_mac=quam dhcp_resp=deriti url=https://www5.example.org/eturadi/umS.txt?mSecti=henderi#taevitae category0=tevel server=10.254.96.130 vpn_type=ita connectivity=iquipexe -tot 1565193683.reme emeumfu events aid=inBCSedu arp_resp=ita arp_src=ade auth_neg_dur=nihilmol auth_neg_failed=nder channel=ano dns_req_rtt=rumexer dns_resp=eab dns_server=iaconseq duration=18.963000 full_conn=eli identity=rissusci ip_resp=ectetur ip_src=10.101.13.122 is_8021x=oconsequ is_wpa=roqui last_auth_ago=oluptate radio=ntut reason=mremaper rssi=uteirur type=ntium vap=ide client_mac=01:00:5e:95:ae:d0 client_ip=10.78.143.52 instigator=ntiumdol http_resp=conse dhcp_lease_completed=aturve dhcp_ip=edqui dhcp_server=tvolu dhcp_server_mac=psu dhcp_resp=strud url=https://internal.example.org/fdeFi/ratv.htm?sequatu=tiumtot#tate category0=udanti server=10.200.98.243 vpn_type=cteturad connectivity=umq -oinvento 1566428637.mporin orissusc_appliance events content_filtering_block url='https://www5.example.net/uov/pariat.htm?litsed=lumd#tiaec' category0='lorem' server='10.247.205.185:7676' client_mac='01:00:5e:6f:21:c8' -metMa emoen.ptate mipsumqu_ ids-alerts ccusa ids-alerts signature=billo priority=doloremi timestamp=1567663591.ectetura dhost=01:00:5e:0a:88:bb direction=inbound protocol=ipv6 src=10.195.90.73:3914 dst=10.147.165.30:7662 message: idents -veniamqu 1568898545.iconsequ ueporr_appliance events IDS: empor -atDuisa mipsa.uas iat ids-alerts signature=hite priority=adipis timestamp=1570133500.abo dhost=01:00:5e:dd:cb:5b direction=inbound protocol=udp src=10.137.166.97 dst=10.162.202.14 message: ipsaqua -deom 1571368454.tiumdo rautod_appliance events content_filtering_block url='https://www5.example.com/illoinve/etcon.htm?nevolup=erspici#itinvolu' category0='adeserun' server='10.227.135.142:6598' -orese 1572603408.umdolore umqui_appliance events MAC 01:00:5e:f1:b8:3a and MAC 01:00:5e:37:9c:af both claim IP: 10.199.29.19 -explicab 1573838362.samvolu teiru_appliance events dhcp no offers for mac 01:00:5e:b8:06:92 -rissusci 1575073317.uaturQ iusmod_ events aid=mips arp_resp=iduntutl arp_src=mipsumd auth_neg_dur=eiusmo auth_neg_failed=quelauda channel=rcit dns_req_rtt=dolo dns_resp=ulamc dns_server=doe duration=10.574000 full_conn=remquela identity=toreve ip_resp=squirat ip_src=10.85.59.172 is_8021x=mto is_wpa=iae last_auth_ago=dent radio=Uten reason=tatiset rssi=sequat type=modoco vap=beataevi client_mac=01:00:5e:92:d8:95 client_ip=10.158.215.216 instigator=deritin http_resp=ptate dhcp_lease_completed=lloi dhcp_ip=nseq dhcp_server=equunt dhcp_server_mac=tutla dhcp_resp=usmod url=https://example.com/qui/itse.gif?orsitame=tasn#exeaco category0=upta server=10.75.122.111 vpn_type=reprehe connectivity=deFinib -orr 1576308271.pre aute events IDS: rchite diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log-config.yml deleted file mode 100644 index 5622947e4b8..00000000000 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log-config.yml +++ /dev/null @@ -1,5 +0,0 @@ -dynamic_fields: - event.ingested: ".*" -fields: - tags: - - preserve_original_event diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log-expected.json deleted file mode 100644 index 521eb1b1ba5..00000000000 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-generated.log-expected.json +++ /dev/null @@ -1,1204 +0,0 @@ -{ - "expected": [ - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402787257Z" - }, - "message": "modtempo 1454047799.olab nto_ security_event olaborissecurity_event tur url=https://example.org/odoco/ria.jpg?ritin=uredolor#tatemac src=10.15.44.253:5078 dst=10.193.124.51:5293 mac=01:00:5e:28:ae:7d name=psa sha256=umq disposition=ntium action=deny", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402790126Z" - }, - "message": "umdo 1455282753.itessequ vol_ events dhcp lease of ip 10.102.218.31 from server mac 01:00:5e:9c:c2:9c for client mac 01:00:5e:0f:87:e3 from router 10.15.16.212 on subnet ameaqu with dns aqu", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402791078Z" - }, - "message": "uipexea 1456517708.tatio minim_ flows ceroinBC flows src=10.179.60.216 dst=10.69.53.104 protocol=udp pattern: 0 reprehe", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402791945Z" - }, - "message": "mipsu 1457752662.consec taliquip_ flows radip flows block src=10.155.236.240 dst=10.112.46.169 mac=01:00:5e:7a:74:89 protocol=ipv6 type=roidents ", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402792809Z" - }, - "message": "obeataev 1458987616.lor uidexea_appliance events MAC 01:00:5e:e1:89:ac and MAC 01:00:5e:a3:d9:ac both claim IP: 10.14.107.140", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402793701Z" - }, - "message": "iutal 1460222571.dexe urerep events content_filtering_block url='https://api.example.org/liqu/lorem.gif?ueipsaqu=uidolore#niamqu' category0='ari' server='10.108.180.105:5098' client_mac='01:00:5e:40:9b:83'", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402797371Z" - }, - "message": "ipit 1461457525.idexea riat_appliance events MAC 01:00:5e:25:4f:e4 and MAC 01:00:5e:3f:49:e4 both claim IP: 10.149.88.198", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402798420Z" - }, - "message": "ntsuntin 1462692479.aecatcup animi events dhcp release for mac 01:00:5e:e3:10:34", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402799284Z" - }, - "message": "orsitame 1463927433.quiratio ite events MAC 01:00:5e:48:62:22 and MAC 01:00:5e:9f:b6:a6 both claim IP: 10.243.206.225", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402800146Z" - }, - "message": "olupta turveli.toccae tatno_ ids-alerts taliqu ids-alerts signature=temUten priority=ccusan timestamp=1465162388.iqudirection=outbound protocol=icmp src=10.131.82.116:7307", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402801009Z" - }, - "message": "uaera 1466397342.sitas ehenderi_ security_event atquovosecurity_event iumto url=https://www5.example.net/sun/essecill.html?saute=vel#quu src=10.210.213.18:7616 dst=10.134.0.141:2703 mac=01:00:5e:aa:42:fa name=idolores sha256=llumquid disposition=tation action=accept", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402802103Z" - }, - "message": "omn ipsumq.atcu oremagna_ security_event remipsum security_event liq signature=ist priority=tnon timestamp=1467632296.ionul shost=01:00:5e:c8:9c:2f direction=outbound protocol=udp src=10.163.72.17 dst=10.74.237.180 message:nsequu", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402802989Z" - }, - "message": "omm 1468867250.idestla Nemoeni_appliance events MAC 01:00:5e:c4:69:7f and MAC 01:00:5e:e2:67:d2 both claim IP: 10.72.31.26", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402803848Z" - }, - "message": "agna tionemu.eomnisis mqui ids-alerts signature=civeli priority=errorsi timestamp=1470102205.desdirection=internal protocol=tcp src=10.70.95.74:4290", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402804715Z" - }, - "message": "olupt 1471337159.dit sumquiad events MAC 01:00:5e:ea:e8:7a and MAC 01:00:5e:9c:d2:4a both claim IP: 10.17.21.125", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402805575Z" - }, - "message": "amqu 1472572113.uines nsec events dhcp lease of ip 10.85.10.165 from server mac 01:00:5e:63:93:48 for client mac 01:00:5e:46:17:35 from router 10.53.150.119 on subnet uiineavo with dns tisetq", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402806636Z" - }, - "message": "giatquov eritquii.dexeac iscinge ids-alerts signature=atvol priority=umiur timestamp=1473807067.imadprotocol=igmp src=10.88.231.224 dst=10.187.77.245message: iadese", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402807497Z" - }, - "message": "agnaali 1475042022.gnam tat events content_filtering_block url='https://internal.example.com/quae/maccusa.htm?rQuisau=idex#xerci' category0='aqu' server='10.186.58.115:7238' client_mac='01:00:5e:8f:16:6d'", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402808365Z" - }, - "message": "apariat 1476276976.tlabore untmolli_ events dhcp lease of ip 10.219.84.37 from server mac 01:00:5e:e8:bf:69 for client mac 01:00:5e:87:e1:a0 from router 10.205.47.51 on subnet uovolup with dns samvolu", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402809273Z" - }, - "message": "ento 1477511930.pic evita events MAC 01:00:5e:ce:61:db and MAC 01:00:5e:ec:f8:cc both claim IP: 10.3.134.237", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402810162Z" - }, - "message": "tmo 1478746884.fficiade uscipit events aid=vitaedi arp_resp=fugitse arp_src=veniamq auth_neg_dur=one auth_neg_failed=etMalor channel=ipi dns_req_rtt=reseos dns_resp=pariatu dns_server=tin duration=48.123000 full_conn=oquisqu identity=sperna ip_resp=eabilloi ip_src=10.182.178.217 is_8021x=tlab is_wpa=volupt last_auth_ago=osqui radio=xerc reason=iutali rssi=fdeFi type=texp vap=tasuntex client_mac=01:00:5e:e3:b1:24 client_ip=10.194.114.58 instigator=ectio http_resp=dutper dhcp_lease_completed=lamcolab dhcp_ip=ati dhcp_server=tlabo dhcp_server_mac=uames dhcp_resp=iduntu url=https://internal.example.net/ris/uamqu.txt?liqui=quioffi#uptate category0=ncidid server=10.63.194.87 vpn_type=quisno connectivity=sin", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402811026Z" - }, - "message": "emvel 1479981839.tmollita fde events aid=nsecte arp_resp=inculpa arp_src=abo auth_neg_dur=veniamqu auth_neg_failed=nse channel=non dns_req_rtt=paquioff dns_resp=mquisnos dns_server=maven duration=71.798000 full_conn=atcu identity=labor ip_resp=didunt ip_src=10.153.0.77 is_8021x=udan is_wpa=orema last_auth_ago=invento radio=qua reason=aturQui rssi=utlabor type=rau vap=idex client_mac=01:00:5e:9e:7b:a4 client_ip=10.105.88.20 instigator=ecte http_resp=tinvolu dhcp_lease_completed=iurer dhcp_ip=iciadese dhcp_server=quidolor dhcp_server_mac=tessec dhcp_resp=olupta url=https://mail.example.com/icabo/itatio.jpg?eleum=sintoc#volupt category0=siste server=10.163.154.210 vpn_type=ept connectivity=iumtotam", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402811950Z" - }, - "message": "ionevo 1481216793.ugiatnu ciati_appliance events MAC 01:00:5e:b8:7a:96 and MAC 01:00:5e:b9:6b:a8 both claim IP: 10.73.69.176", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402812929Z" - }, - "message": "spi 1482451747.stquido ommodico_ flows ese flows allow src=10.145.248.111 dst=10.57.6.252 mac=01:00:5e:94:6a:cf protocol=udp ", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402813796Z" - }, - "message": "smo etcons.iusmodi uamest_ security_event uiac security_event epte signature=idolo priority=quinesc timestamp=1483686701.madmi shost=01:00:5e:1c:4c:64 direction=internal protocol=icmp src=10.31.77.157 dst=10.12.182.70 message:tev", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402814698Z" - }, - "message": "nisiuta 1484921656.roid inibusB flows cancel", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402815606Z" - }, - "message": "str 1486156610.idolore pid_ flows cteturad flows deny src=10.93.68.231 dst=10.135.217.12 mac=01:00:5e:4a:69:5b protocol=ipv6 type=archite ", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402816477Z" - }, - "message": "amnih 1487391564.ium esciuntN_ events dhcp release for mac 01:00:5e:8b:99:98", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402817329Z" - }, - "message": "isnost 1488626519.queips ncidi_ flows iscinge flows src=10.247.30.212 dst=10.66.89.5 mac=01:00:5e:7f:65:da protocol=igmp pattern: 1 borios", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402818188Z" - }, - "message": "oin 1489861473.mvenia madminim events IDS: fugitsed", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402819089Z" - }, - "message": "dmin fugi.quia iduntu security_event idestlab signature=rnatur priority=ofdeFin timestamp=1491096427.essequam dhost=01:00:5e:c1:53:b1 direction=inbound protocol=tcp src=10.221.102.245 dst=10.173.136.186 message:naal", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402819955Z" - }, - "message": "umqu tinv.adipisc uscipitl_ ids-alerts ritatise ids-alerts signature=uamei priority=siut timestamp=1492331381.ciad dhost=01:00:5e:1f:c6:29 direction=external protocol=udp src=10.58.64.108 dst=10.54.37.86 message: entorev", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402820928Z" - }, - "message": "velitess 1493566336.naali uunturm_ flows veli flows block src=10.147.76.202 dst=10.163.93.20 mac=01:00:5e:1d:85:ec protocol=ipv6 sport=1085 dport=3141 ", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402821803Z" - }, - "message": "iumdol tpersp.stla uptatema_ security_event uradi security_event tot signature=llamco priority=nea timestamp=1494801290.psum dhost=01:00:5e:35:71:1e direction=internal protocol=icmp src=10.0.200.27:5905 dst=10.183.44.198:1702 message:asiarc", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402822774Z" - }, - "message": "tiaec 1496036244.rumwrit icabo_ events dhcp lease of ip 10.148.124.84 from server mac 01:00:5e:0b:2c:22 for client mac 01:00:5e:06:12:98 from router 10.28.144.180 on subnet ritin with dns temporin", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402823636Z" - }, - "message": "ica 1497271198.lillum remips_appliance events aid=uisaute arp_resp=imide arp_src=poriss auth_neg_dur=tvolup auth_neg_failed=itesseq channel=dictasun dns_req_rtt=veniamqu dns_resp=rum dns_server=quaea duration=165.611000 full_conn=mvel identity=nof ip_resp=usmodi ip_src=10.204.230.166 is_8021x=dat is_wpa=aincidu last_auth_ago=nimadmin radio=isiu reason=licabo rssi=enimadmi type=utaliqu vap=dic client_mac=01:00:5e:bb:60:a6 client_ip=10.62.71.118 instigator=ineavol http_resp=iosa dhcp_lease_completed=boNemoe dhcp_ip=onsequ dhcp_server=equinesc dhcp_server_mac=cab dhcp_resp=atisund url=https://example.net/ites/isetq.gif?nisiut=tur#avolupt category0=ariatur server=10.98.194.212 vpn_type=nimave connectivity=isciv", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402824495Z" - }, - "message": "dipisci 1498506153.spernatu admi events content_filtering_block url='https://www.example.org/ueipsa/tae.html?eriti=atcupi#corpori' category0='borisnis' server='10.197.13.39:5912'", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402859624Z" - }, - "message": "itsedd 1499741107.leumiur eratvol events dhcp release for mac 01:00:5e:fd:84:bb", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402860969Z" - }, - "message": "leumiu tla.item nimid ids-alerts signature=dat priority=periam timestamp=1500976061.dquprotocol=icmp src=10.242.77.170 dst=10.150.245.88message: orisn", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402861866Z" - }, - "message": "sitam rad.loi isc_ ids-alerts volupt ids-alerts signature=rem priority=idid timestamp=1502211015.tesse shost=01:00:5e:9d:eb:fb direction=external protocol=tcp src=10.247.139.239 dst=10.180.195.43 message: tenatuse", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402862738Z" - }, - "message": "tore 1503445970.elits consequa events dhcp release for mac 01:00:5e:50:48:c4", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402863582Z" - }, - "message": "undeom uamnihi.risnis uov_ ids-alerts isn ids-alerts signature=sBono priority=loremqu timestamp=1504680924.teturprotocol=rdp src=10.94.6.140 dst=10.147.15.213message: uptat", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402864441Z" - }, - "message": "itasper 1505915878.uae mve_ flows obeata flows block src=10.230.6.127 dst=10.111.157.56 mac=01:00:5e:39:a7:fc protocol=icmp type=aliquamq ", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402865373Z" - }, - "message": "archite 1507150832.remq veniamq events aid=occ arp_resp=oloreseo arp_src=iruredol auth_neg_dur=veniamqu auth_neg_failed=licaboN channel=atquo dns_req_rtt=cupi dns_resp=strude dns_server=eritin duration=85.513000 full_conn=litsedq identity=nderiti ip_resp=ntNe ip_src=10.179.40.170 is_8021x=olorema is_wpa=mollita last_auth_ago=tatem radio=iae reason=quido rssi=emip type=inBC vap=mol client_mac=01:00:5e:58:2d:1c client_ip=10.153.81.206 instigator=rsita http_resp=nsequun dhcp_lease_completed=eetd dhcp_ip=illu dhcp_server=iatqu dhcp_server_mac=lorsi dhcp_resp=repreh url=https://www.example.net/irured/illumqui.txt?tionula=ritqu#ecatcupi category0=uamei server=10.193.219.34 vpn_type=onse connectivity=olorem", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402866225Z" - }, - "message": "umwritte 1508385787.vol oremquel_appliance events MAC 01:00:5e:16:5e:b1 and MAC 01:00:5e:ee:e8:77 both claim IP: 10.255.199.16", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402867073Z" - }, - "message": "unte 1509620741.uamnihil llam_appliance events MAC 01:00:5e:ee:1d:77 and MAC 01:00:5e:f1:21:bd both claim IP: 10.94.88.5", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402867921Z" - }, - "message": "esci 1510855695.uov quaeab_ events IDS: moles", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402868775Z" - }, - "message": "accusa 1512090649.natu liquid events IDS: enim", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402869648Z" - }, - "message": "dquiaco nibus.vitaed ser security_event etconsec signature=elillum priority=upt timestamp=1513325604.rnat dhost=01:00:5e:01:60:e0 direction=internal protocol=ipv6 src=10.90.99.245 dst=10.124.63.4 message:pta", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402870491Z" - }, - "message": "tetura 1514560558.imadmini moe_appliance events content_filtering_block url='https://mail.example.net/uat/lupta.html?uptassit=ncidi#tlabori' category0='laudan' server='10.249.7.146:2010'", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402871577Z" - }, - "message": "lapar 1515795512.ritati edquia_appliance events IDS: itesse", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402872431Z" - }, - "message": "amvolu mip.tion tobeatae_ security_event Utenima security_event iqua signature=luptat priority=deriti timestamp=1517030466.sintocc dhost=01:00:5e:c9:b7:22 direction=inbound protocol=icmp src=10.196.96.162 dst=10.81.234.34 message:equuntur", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402873284Z" - }, - "message": "uide 1518265421.scivel henderi_appliance events IDS: iusmodt", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402874155Z" - }, - "message": "tiumd 1519500375.ntmoll mexer events dhcp lease of ip 10.40.101.224 from server mac 01:00:5e:0a:df:72 for client mac 01:00:5e:7c:01:ab with hostname remips188.api.invalid from router 10.78.199.43 on subnet ehender with dns ilmole", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402875353Z" - }, - "message": "runtmo 1520735329.ore isund_appliance events MAC 01:00:5e:17:87:3e and MAC 01:00:5e:5f:c1:3e both claim IP: 10.244.29.119", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402876192Z" - }, - "message": "tutlabor 1521970284.reseosq gna_ flows pteurs flows deny src=10.83.131.245 dst=10.39.172.93 mac=01:00:5e:c4:12:c7 protocol=udp type=uido ", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402877035Z" - }, - "message": "osquira 1523205238.umd sciveli_ events dhcp lease of ip 10.86.188.179 from server mac 01:00:5e:48:4b:78 for client mac 01:00:5e:7e:cd:15 from router 10.201.168.116 on subnet umiure with dns laborum", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402877879Z" - }, - "message": "umdolors 1524440192.lumdo acom_ security_event umexercisecurity_event duntut url=https://mail.example.com/prehend/eufug.htm?eufug=est#civelits src=10.148.211.222:2053 dst=10.122.204.151:3903 mac=01:00:5e:c3:a0:dc name=ine sha256=urerepre disposition=asnulap action=deny", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402878756Z" - }, - "message": "atnul 1525675146.umfugi stquidol_ flows luptatem flows accept", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402879608Z" - }, - "message": "essequam ueporro.aliqu upt ids-alerts signature=orum priority=Bonoru timestamp=1526910101.madminimprotocol=ipv6-icmp src=10.97.46.16 dst=10.120.4.9message: teni", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402880460Z" - }, - "message": "lorsitam tanimid.onpr litseddo_ ids-alerts oremqu ids-alerts signature=idex priority=radip timestamp=1528145055.uptaprotocol=ipv6-icmp src=10.171.206.139 dst=10.165.173.162message: lestia", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402881305Z" - }, - "message": "inibusB 1529380009.nostrud cteturad events dhcp lease of ip 10.150.163.151 from server mac 01:00:5e:72:b7:79 for client mac 01:00:5e:f2:d3:12 with hostname uames4985.mail.localdomain from router 10.144.57.239 on subnet oinBCSed with dns orem", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402882160Z" - }, - "message": "eritq rehen.ipsamvol elillum_ ids-alerts tco ids-alerts signature=tvol priority=oluptate timestamp=1530614963.lit shost=01:00:5e:ac:6d:d3 direction=unknown protocol=igmp src=10.52.202.158 dst=10.54.44.231 message: Ute", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402883012Z" - }, - "message": "runtm 1531849918.eturadip olorsi_ events MAC 01:00:5e:67:1d:0f and MAC 01:00:5e:f0:a9:cd both claim IP: 10.101.183.86", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402883878Z" - }, - "message": "inesciu 1533084872.quid atcupid_ flows orem flows src=10.71.22.225 dst=10.4.76.100 protocol=ggp pattern: allow serrorsi", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402884730Z" - }, - "message": "lamco 1534319826.cit siar events MAC 01:00:5e:80:cd:ca and MAC 01:00:5e:45:aa:51 both claim IP: 10.83.130.95", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402885579Z" - }, - "message": "hite 1535554780.ianonnum nofdeFi events aid=henderit arp_resp=remq arp_src=unt auth_neg_dur=tla auth_neg_failed=arch channel=lite dns_req_rtt=ugia dns_resp=meum dns_server=borumSec duration=91.439000 full_conn=nvolupta identity=tev ip_resp=nre ip_src=10.2.110.73 is_8021x=eturadip is_wpa=ent last_auth_ago=rumSecti radio=Utenima reason=olore rssi=orumS type=olor vap=radip client_mac=01:00:5e:59:bf:36 client_ip=10.230.98.81 instigator=aaliquaU http_resp=olu dhcp_lease_completed=iameaque dhcp_ip=identsun dhcp_server=ender dhcp_server_mac=inc dhcp_resp=tect url=https://www.example.net/doconse/eni.html?mSec=smoditem#tatisetq category0=uidolo server=10.103.49.129 vpn_type=oquisq connectivity=abori", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402886438Z" - }, - "message": "dunt 1536789735.ames amni events aid=tatio arp_resp=amquisno arp_src=modoc auth_neg_dur=magnam auth_neg_failed=uinesc channel=cid dns_req_rtt=emi dns_resp=Bonorum dns_server=lesti duration=59.289000 full_conn=iosamni identity=idu ip_resp=sis ip_src=10.158.61.228 is_8021x=tsedquia is_wpa=its last_auth_ago=umdolor radio=isiu reason=assi rssi=eserun type=rvelill vap=lupta client_mac=01:00:5e:e6:a6:a2 client_ip=10.186.16.20 instigator=tisu http_resp=remagnam dhcp_lease_completed=nvolupt dhcp_ip=meiusm dhcp_server=nidolo dhcp_server_mac=atquovol dhcp_resp=quunt url=https://www.example.com/seq/moll.htm?sunt=dquianon#urExc category0=tDuis server=10.132.176.96 vpn_type=aria connectivity=inim", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402887291Z" - }, - "message": "oremeumf 1538024689.lesti sintocca events dhcp lease of ip 10.105.136.146 from server mac 01:00:5e:bb:aa:f6 for client mac 01:00:5e:69:92:4a with hostname lors2232.api.example from router 10.46.217.155 on subnet amnihil with dns orissus", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402888137Z" - }, - "message": "nimadmin 1539259643.lumqui quiavolu flows src=10.245.199.23 dst=10.123.62.215 mac=01:00:5e:1f:7f:1d protocol=udp pattern: 0 iusmodt", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402888988Z" - }, - "message": "rep 1540494597.remap deri flows cancel src=10.239.105.121 dst=10.70.7.23 mac=01:00:5e:8e:82:f0 protocol=ipv6 ", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402889888Z" - }, - "message": "idexeac 1541729552.nimadmin midest_appliance events aid=modt arp_resp=iduntutl arp_src=rsitam auth_neg_dur=xercit auth_neg_failed=ulpaquio channel=itqu dns_req_rtt=minimav dns_resp=smodtem dns_server=roquisqu duration=116.294000 full_conn=iquid identity=evo ip_resp=mcorpori ip_src=10.196.176.243 is_8021x=itesse is_wpa=expl last_auth_ago=essecill radio=totamre reason=rpo rssi=velites type=nonpro vap=nula client_mac=01:00:5e:99:a6:b4 client_ip=10.90.50.149 instigator=nemulla http_resp=asp dhcp_lease_completed=dexercit dhcp_ip=amn dhcp_server=itessequ dhcp_server_mac=porissu dhcp_resp=umd url=https://www.example.net/sectetur/edquian.html?turQuis=taevi#uames category0=tconsec server=10.16.230.121 vpn_type=laboree connectivity=udantiu", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402890747Z" - }, - "message": "ttenb olor.quiav gna security_event Nem signature=tdolorem priority=eacomm timestamp=1542964506.upidata dhost=01:00:5e:6a:c8:f8 direction=unknown protocol=ipv6 src=10.246.152.72:4293 dst=10.34.62.190:1641 message:eve", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402891635Z" - }, - "message": "quisn 1544199460.rem ulamcola events dhcp no offers for mac 01:00:5e:67:fc:cb", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402892676Z" - }, - "message": "eruntmo 1545434414.nimve usanti_ events dhcp release for mac 01:00:5e:7d:de:f7", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402897820Z" - }, - "message": "uatu 1546669369.olupta consequu_ events dhcp release for mac 01:00:5e:6b:96:f2", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402900543Z" - }, - "message": "sitam inibusBo.illoin emUtenim ids-alerts signature=ende priority=dexea timestamp=1547904323.acoprotocol=ipv6 src=10.244.32.189 dst=10.121.9.5message: uptas", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402902009Z" - }, - "message": "edol 1549139277.sequuntu quameius_ events content_filtering_block url='https://www.example.com/totamrem/aliqu.htm?sBonorum=moenimi#lor' category0='auto' server='10.41.124.15:333'", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402903304Z" - }, - "message": "antium 1550374232.remaper eseosq events dhcp no offers for mac 01:00:5e:c3:77:27", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402904182Z" - }, - "message": "oditau 1551609186.onsec dit events MAC 01:00:5e:19:86:21 and MAC 01:00:5e:ed:ed:79 both claim IP: 10.43.235.230", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402905133Z" - }, - "message": "asper dictasun.psa lorese_ ids-alerts ctobeat ids-alerts signature=onsec priority=idestl timestamp=1552844140.litani shost=01:00:5e:a0:b2:c9 direction=unknown protocol=icmp src=10.199.19.205:5823 dst=10.103.91.159:7116 message: ntut", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402906346Z" - }, - "message": "estiaec 1554079094.pitlabo tas_appliance flows src=10.17.111.91 dst=10.65.0.157 mac=01:00:5e:49:c4:17 protocol=udp pattern: 1 nostrum", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402907198Z" - }, - "message": "ercitati 1555314049.atem serro flows cancel", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402908149Z" - }, - "message": "amquaera 1556549003.rsitamet leumiur events MAC 01:00:5e:fd:79:9e and MAC 01:00:5e:4d:c0:dd both claim IP: 10.20.130.88", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402909011Z" - }, - "message": "abill ametcon.ofdeFini tasnu_ ids-alerts tionev ids-alerts signature=uasiarch priority=velites timestamp=1557783957.uredolorprotocol=ipv6 src=10.177.64.152 dst=10.140.242.86message: temporin", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402909867Z" - }, - "message": "lor nvolupt.dquia ora_ security_event dipi security_event ecatc signature=quovolu priority=ite timestamp=1559018911.itse shost=01:00:5e:b8:73:c8 direction=external protocol=icmp src=10.199.103.185:2449 dst=10.51.121.223:24 message:stenat", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402910758Z" - }, - "message": "saq 1560253866.asiarch ssuscipi events MAC 01:00:5e:93:48:61 and MAC 01:00:5e:21:c2:55 both claim IP: 10.126.242.58", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402911649Z" - }, - "message": "tlab 1561488820.vel ionevo events dhcp release for mac 01:00:5e:8a:1a:f9", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402912501Z" - }, - "message": "aeab 1562723774.uradipis aerat_ flows uira flows deny src=10.121.37.244 dst=10.113.152.241 mac=01:00:5e:9c:86:62 protocol=udp type=utaliqui ", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402913354Z" - }, - "message": "nesciu 1563958728.mali roinBCSe_appliance events aid=eetdolor arp_resp=tpersp arp_src=assi auth_neg_dur=rch auth_neg_failed=psa channel=nreprehe dns_req_rtt=pidatatn dns_resp=isno dns_server=luptatev duration=39.622000 full_conn=lla identity=urau ip_resp=aeca ip_src=10.247.118.132 is_8021x=atcupi is_wpa=enima last_auth_ago=uptateve radio=fugitsed reason=lumqui rssi=ectet type=ionu vap=eratv client_mac=01:00:5e:10:8b:c3 client_ip=10.153.33.99 instigator=liq http_resp=xerc dhcp_lease_completed=atisetqu dhcp_ip=squir dhcp_server=gnaaliq dhcp_server_mac=quam dhcp_resp=deriti url=https://www5.example.org/eturadi/umS.txt?mSecti=henderi#taevitae category0=tevel server=10.254.96.130 vpn_type=ita connectivity=iquipexe", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402914214Z" - }, - "message": "tot 1565193683.reme emeumfu events aid=inBCSedu arp_resp=ita arp_src=ade auth_neg_dur=nihilmol auth_neg_failed=nder channel=ano dns_req_rtt=rumexer dns_resp=eab dns_server=iaconseq duration=18.963000 full_conn=eli identity=rissusci ip_resp=ectetur ip_src=10.101.13.122 is_8021x=oconsequ is_wpa=roqui last_auth_ago=oluptate radio=ntut reason=mremaper rssi=uteirur type=ntium vap=ide client_mac=01:00:5e:95:ae:d0 client_ip=10.78.143.52 instigator=ntiumdol http_resp=conse dhcp_lease_completed=aturve dhcp_ip=edqui dhcp_server=tvolu dhcp_server_mac=psu dhcp_resp=strud url=https://internal.example.org/fdeFi/ratv.htm?sequatu=tiumtot#tate category0=udanti server=10.200.98.243 vpn_type=cteturad connectivity=umq", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402915077Z" - }, - "message": "oinvento 1566428637.mporin orissusc_appliance events content_filtering_block url='https://www5.example.net/uov/pariat.htm?litsed=lumd#tiaec' category0='lorem' server='10.247.205.185:7676' client_mac='01:00:5e:6f:21:c8'", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402915952Z" - }, - "message": "metMa emoen.ptate mipsumqu_ ids-alerts ccusa ids-alerts signature=billo priority=doloremi timestamp=1567663591.ectetura dhost=01:00:5e:0a:88:bb direction=inbound protocol=ipv6 src=10.195.90.73:3914 dst=10.147.165.30:7662 message: idents", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402916820Z" - }, - "message": "veniamqu 1568898545.iconsequ ueporr_appliance events IDS: empor", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402917680Z" - }, - "message": "atDuisa mipsa.uas iat ids-alerts signature=hite priority=adipis timestamp=1570133500.abo dhost=01:00:5e:dd:cb:5b direction=inbound protocol=udp src=10.137.166.97 dst=10.162.202.14 message: ipsaqua", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402918551Z" - }, - "message": "deom 1571368454.tiumdo rautod_appliance events content_filtering_block url='https://www5.example.com/illoinve/etcon.htm?nevolup=erspici#itinvolu' category0='adeserun' server='10.227.135.142:6598'", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402919417Z" - }, - "message": "orese 1572603408.umdolore umqui_appliance events MAC 01:00:5e:f1:b8:3a and MAC 01:00:5e:37:9c:af both claim IP: 10.199.29.19", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402920282Z" - }, - "message": "explicab 1573838362.samvolu teiru_appliance events dhcp no offers for mac 01:00:5e:b8:06:92", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402921147Z" - }, - "message": "rissusci 1575073317.uaturQ iusmod_ events aid=mips arp_resp=iduntutl arp_src=mipsumd auth_neg_dur=eiusmo auth_neg_failed=quelauda channel=rcit dns_req_rtt=dolo dns_resp=ulamc dns_server=doe duration=10.574000 full_conn=remquela identity=toreve ip_resp=squirat ip_src=10.85.59.172 is_8021x=mto is_wpa=iae last_auth_ago=dent radio=Uten reason=tatiset rssi=sequat type=modoco vap=beataevi client_mac=01:00:5e:92:d8:95 client_ip=10.158.215.216 instigator=deritin http_resp=ptate dhcp_lease_completed=lloi dhcp_ip=nseq dhcp_server=equunt dhcp_server_mac=tutla dhcp_resp=usmod url=https://example.com/qui/itse.gif?orsitame=tasn#exeaco category0=upta server=10.75.122.111 vpn_type=reprehe connectivity=deFinib", - "tags": [ - "preserve_original_event" - ] - }, - { - "ecs": { - "version": "8.0.0" - }, - "event": { - "ingested": "2022-01-25T12:05:18.402922010Z" - }, - "message": "orr 1576308271.pre aute events IDS: rchite", - "tags": [ - "preserve_original_event" - ] - } - ] -} \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json new file mode 100644 index 00000000000..4364a40c0cc --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json @@ -0,0 +1,39 @@ +{ + "events": [ + { + "json": { + "version": "0.1", + "sharedSecret": "secret", + "sentAt": "2021-10-07T08:42:00.926325Z", + "organizationId": "2930418", + "organizationName": "My organization", + "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", + "networkId": "N_24329156", + "networkName": "Main Office", + "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", + "networkTags": [], + "deviceSerial": "Q234-ABCD-5678", + "deviceMac": "00:11:22:33:44:55", + "deviceName": "My appliance", + "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", + "deviceTags": [ + "tag1", + "tag2" + ], + "deviceModel": "MX", + "alertId": "0000000000000000", + "alertType": "Cellular came up", + "alertTypeId": "cellular_up", + "alertLevel": "informational", + "occurredAt": "2018-02-11T00:00:00.123450Z", + "alertData": { + "provider": "Purview Wireless", + "model": "UML290VW", + "local": "192.168.1.2", + "remote": "1.2.3.5", + "connection": "LTE" + } + } + } + ] +} \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json-expected.json new file mode 100644 index 00000000000..9103f938a29 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json-expected.json @@ -0,0 +1,43 @@ +{ + "expected": [ + { + "cisco_meraki": { + "log": { + "alertData": { + "connection": "LTE", + "local": "192.168.1.2", + "model": "UML290VW", + "provider": "Purview Wireless", + "remote": "1.2.3.5" + }, + "alertId": "0000000000000000", + "alertLevel": "informational", + "alertType": "Cellular came up", + "alertTypeId": "cellular_up", + "deviceMac": "00:11:22:33:44:55", + "deviceModel": "MX", + "deviceName": "My appliance", + "deviceSerial": "Q234-ABCD-5678", + "deviceTags": [ + "tag1", + "tag2" + ], + "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", + "networkId": "N_24329156", + "networkName": "Main Office", + "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", + "occurredAt": "2018-02-11T00:00:00.123450Z", + "organizationId": "2930418", + "organizationName": "My organization", + "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", + "sentAt": "2021-10-07T08:42:00.926325Z", + "sharedSecret": "secret", + "version": "0.1" + } + }, + "ecs": { + "version": "8.0.0" + } + } + ] +} \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-logfile-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-logfile-config.yml deleted file mode 100644 index 0d305dcddaf..00000000000 --- a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-logfile-config.yml +++ /dev/null @@ -1,7 +0,0 @@ -service: cisco-logfile -input: logfile -data_stream: - vars: - paths: - - "{{SERVICE_LOGS_DIR}}/*meraki*.log" - preserve_original_event: true diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-http-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-http-config.yml new file mode 100644 index 00000000000..54290741aff --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-http-config.yml @@ -0,0 +1,10 @@ +service: meraki-webhook-http +service_notify_signal: SIGHUP +input: webhook +data_stream: + vars: + listen_address: 0.0.0.0 + listen_port: 8686 + url: /meraki/events + secret_value: abc123 + preserve_original_event: true diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-https-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-https-config.yml new file mode 100644 index 00000000000..dd02536ccc6 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-https-config.yml @@ -0,0 +1,61 @@ +service: meraki-webhook-https +service_notify_signal: SIGHUP +input: webhook +data_stream: + vars: + listen_address: 0.0.0.0 + listen_port: 8686 + preserve_original_event: true + url: /meraki/events + secret_value: abc123 + ssl: |- + certificate: | + -----BEGIN CERTIFICATE----- + MIIDJjCCAg6gAwIBAgIRAO76bP2QhJVqbLjcsWD6gkUwDQYJKoZIhvcNAQELBQAw + JjEkMCIGA1UEChMbVEVTVCAtIEVsYXN0aWMgSW50ZWdyYXRpb25zMB4XDTIxMDIw + MjE2NTUzOVoXDTQxMDEyODE2NTUzOVowJjEkMCIGA1UEChMbVEVTVCAtIEVsYXN0 + aWMgSW50ZWdyYXRpb25zMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA + vUs3YgX4RnEKzSyqH599ffHMDidw3JUTNzp/alRByiGN2gnC2YLLeB8gbZHn2Xkl + YCET1oUrVmPAijwV2RzPYwIn0kIh4zVOKO7+RDCCrgq8CgIG1xZyUhMF3uwn868r + SmX5FZ3T3/max51EsAJmzawef1TqrQRdEKxuPBQs/4qWaYeQCeYeZBVcg2b8CUmg + 3w1lB072Xzt7cJUp8FU1s7U9Hfgg2Dslh9+DSVX0yoqwN8Ynw4FXMSyqAu/OdBbG + aidOR6YjlKx3OSUUYsuB7q3XDyigb6Va7W737QTLIhtEb56l4E0iO4jDT41LaYyw + vRpWegfvHoFBHXbXT6AxtQIDAQABo08wTTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0l + BAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAYBgNVHREEETAPgg1lbGFzdGlj + LWFnZW50MA0GCSqGSIb3DQEBCwUAA4IBAQAcFeQS0QtPFpGMQ55NO+ycsXAsYZsJ + XvdUMoGygkkbrUQXmQbMMSMPGAGdMfc9V6BMA8x6JgGyKZBcIN/RTkBKjpXFwL03 + su+9liQnIMbYFvBfc1HDjAN5u2HpMdH0sCOe0W4XF5r6n8Q+6WuCl51HND6ObsyR + nU/7PySQ6Bv2PftPI1LMFeLsmgQsCJ/z8jcP4oW4PtgyK7vb+NWGLzRnkgaHYqh3 + oT7VnxPZQtWBJQa2LJhcp+u5k2Y6PipAyh4mCm/IRr1UHpGT/qBGnaUC+DRWd/pk + T4UnmUgq6eJL4IY+v/wpUPS+uHVtFhPSvRp+5hhicuK1YN4Ug/qKirVs + -----END CERTIFICATE----- + key: | + -----BEGIN PRIVATE KEY----- + MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC9SzdiBfhGcQrN + LKofn3198cwOJ3DclRM3On9qVEHKIY3aCcLZgst4HyBtkefZeSVgIRPWhStWY8CK + PBXZHM9jAifSQiHjNU4o7v5EMIKuCrwKAgbXFnJSEwXe7CfzrytKZfkVndPf+ZrH + nUSwAmbNrB5/VOqtBF0QrG48FCz/ipZph5AJ5h5kFVyDZvwJSaDfDWUHTvZfO3tw + lSnwVTWztT0d+CDYOyWH34NJVfTKirA3xifDgVcxLKoC7850FsZqJ05HpiOUrHc5 + JRRiy4HurdcPKKBvpVrtbvftBMsiG0RvnqXgTSI7iMNPjUtpjLC9GlZ6B+8egUEd + dtdPoDG1AgMBAAECggEAP2ks+ldJnj9MAQNPUhyZa1FOrAcmVZ5Su5OLD1F+YHnx + DPNsJHUeN/UlZc8UvdNJY/RwstIVfHEaFLSgFQUDrAUS1ep1c6ltr2SwJKOjgy3x + Y+Dd7buFPF1HADBYCdfKRrf2QvmF+mehI/FZCyUizw8zgDAwFRl7G5THsLSJhmiQ + wDc9WbPFLyswtmeKoAqMiHHqV63PtJunqvGbrDTHh9f4P5JVtreMoPWzE9czQ2ZI + 5nBHOFP/EA6twyRalqOsm3XoFmyrWMmJtm/JJsDlGr/LZcVbtghxybEYo8p/VLpo + JmBSJgM17rwGhniDWXWXXOfx2fkNZEhVIeGvZYJRgQKBgQDOHnepihIu650pTfRD + fcUyPN9oYLzI2mwv70H3FzJQftt3pqmWhlX2adaXYJ65/8xwr6SmkHmYjTvfuCoT + SFApzv9fnYcD6vCsk5AhLpbarWR3MEU1SCvaiFuRNrdTcR8MGSglWPLLVXCI6f/g + F9kZ/Ngz7MkvD2bNT/WjNj3LMQKBgQDrGmPo0gvfk+QoFtL05+dDDrB2IxUokdqa + RzdecC8wV01l8lIj4TDqo7W1wwxdEUvCbUYriE2BoXi1v3jF+wfluqJOL30Ex5kb + UO5At+DWakxzgy3v0F32AOZRISAGMdbrNFaLpjD9t9NGbL8kiestfs2QuTISHJwU + fD47jFDlxQKBgHrczGVh6O7RAVByqCxm1tnYUS8torpzAFQeYQrBZ/t1cqrCzInu + L2V/tytqq5KheKKfAB1NNz4IyezUITh3PVl+itja1HUwYR/todc1pzRYcO9e9ZIK + ICHWcAaCQArb/i6+/CAvAiLUHg1utlhEvuNvxQxGk7Gak6PEit4r4e+xAoGBAIOR + rT/p7IMefJyCyWQNM7qvScmTMJAXr8KPAEl1drMS6FmZFqbFq15kZ5hko1KiD0er + Z42NJfLZrnfnw2roZS8HFzWyFcDLAr/qtqq5PLZBnq82RkrizPKS5lGYvBc7ZQ8T + pytXwir66N2MlhuYo2g+gkPvoDnKkP5V2W3xxIQRAoGBAIDayGKqE1iZwF72R0xQ + Vg8y2x9JoxY1lDGA8oLzYKcp7OslI6sPhv/NGnkQBwV964dcffnn6dezFyKKBGir + DSiM9duWTttlzzUhUQMHCua2z/LXjz1XMb0LoSEOVdk00TDgRMSFhBLhr3ZXmoLb + Iqi7is4z2mP8pbcIIlmloogE + -----END PRIVATE KEY----- + verification_mode: none diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-tcp-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-tcp-config.yml deleted file mode 100644 index bb7635fa915..00000000000 --- a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-tcp-config.yml +++ /dev/null @@ -1,8 +0,0 @@ -service: cisco-meraki-tcp -service_notify_signal: SIGHUP -input: tcp -data_stream: - vars: - tcp_host: 0.0.0.0 - tcp_port: 9514 - preserve_original_event: true diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-udp-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-udp-config.yml deleted file mode 100644 index 74d27a82e69..00000000000 --- a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-udp-config.yml +++ /dev/null @@ -1,8 +0,0 @@ -service: cisco-meraki-udp -service_notify_signal: SIGHUP -input: udp -data_stream: - vars: - udp_host: 0.0.0.0 - udp_port: 9514 - preserve_original_event: true diff --git a/packages/cisco_meraki/data_stream/log/agent/stream/http_endpoint.yml.hbs b/packages/cisco_meraki/data_stream/log/agent/stream/http_endpoint.yml.hbs new file mode 100644 index 00000000000..1203728f145 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/agent/stream/http_endpoint.yml.hbs @@ -0,0 +1,41 @@ +type: http_endpoint +enabled: true +prefix: json + +{{#if listen_address}} +listen_address: {{listen_address}} +{{/if}} +{{#if listen_port}} +listen_port: {{listen_port}} +{{/if}} +{{#if url}} +url: {{url}} +{{/if}} + +{{#if secret_value}} +secret.header: Authorization +secret.value: "{{secret_value}}" +{{/if}} + +{{#if ssl}} +ssl: {{ssl}} +{{/if}} + +{{#if preserve_original_event}} +preserve_original_event: true +{{/if}} + +tags: +{{#if preserve_original_event}} + - preserve_original_event +{{/if}} +{{#each tags as |tag i|}} + - {{tag}} +{{/each}} +{{#contains "forwarded" tags}} +publisher_pipeline.disable_host: true +{{/contains}} +{{#if processors}} +processors: +{{processors}} +{{/if}} diff --git a/packages/cisco_meraki/data_stream/log/agent/stream/stream.yml.hbs b/packages/cisco_meraki/data_stream/log/agent/stream/stream.yml.hbs deleted file mode 100644 index 7789762c763..00000000000 --- a/packages/cisco_meraki/data_stream/log/agent/stream/stream.yml.hbs +++ /dev/null @@ -1,3256 +0,0 @@ -paths: -{{#each paths as |path i|}} - - {{path}} -{{/each}} -exclude_files: [".gz$"] -tags: -{{#if preserve_original_event}} - - preserve_original_event -{{/if}} -{{#each tags as |tag i|}} - - {{tag}} -{{/each}} -fields_under_root: true -fields: - observer: - vendor: "Cisco" - product: "Meraki" - type: "Wireless" -{{#contains "forwarded" tags}} -publisher_pipeline.disable_host: true -{{/contains}} -processors: -{{#if processors}} -{{processors}} -{{/if}} -- script: - lang: javascript - params: - ecs: true - rsa: {{rsa_fields}} - tz_offset: {{tz_offset}} - keep_raw: {{keep_raw_fields}} - debug: {{debug}} - source: | - // Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one - // or more contributor license agreements. Licensed under the Elastic License; - // you may not use this file except in compliance with the Elastic License. - - /* jshint -W014,-W016,-W097,-W116 */ - - var processor = require("processor"); - var console = require("console"); - - var FLAG_FIELD = "log.flags"; - var FIELDS_OBJECT = "nwparser"; - var FIELDS_PREFIX = FIELDS_OBJECT + "."; - - var defaults = { - debug: false, - ecs: true, - rsa: false, - keep_raw: false, - tz_offset: "local", - strip_priority: true - }; - - var saved_flags = null; - var debug; - var map_ecs; - var map_rsa; - var keep_raw; - var device; - var tz_offset; - var strip_priority; - - // Register params from configuration. - function register(params) { - debug = params.debug !== undefined ? params.debug : defaults.debug; - map_ecs = params.ecs !== undefined ? params.ecs : defaults.ecs; - map_rsa = params.rsa !== undefined ? params.rsa : defaults.rsa; - keep_raw = params.keep_raw !== undefined ? params.keep_raw : defaults.keep_raw; - tz_offset = parse_tz_offset(params.tz_offset !== undefined? params.tz_offset : defaults.tz_offset); - strip_priority = params.strip_priority !== undefined? params.strip_priority : defaults.strip_priority; - device = new DeviceProcessor(); - } - - function parse_tz_offset(offset) { - var date; - var m; - switch(offset) { - // local uses the tz offset from the JS VM. - case "local": - date = new Date(); - // Reversing the sign as we the offset from UTC, not to UTC. - return parse_local_tz_offset(-date.getTimezoneOffset()); - // event uses the tz offset from event.timezone (add_locale processor). - case "event": - return offset; - // Otherwise a tz offset in the form "[+-][0-9]{4}" is required. - default: - m = offset.match(/^([+\-])([0-9]{2}):?([0-9]{2})?$/); - if (m === null || m.length !== 4) { - throw("bad timezone offset: '" + offset + "'. Must have the form +HH:MM"); - } - return m[1] + m[2] + ":" + (m[3]!==undefined? m[3] : "00"); - } - } - - function parse_local_tz_offset(minutes) { - var neg = minutes < 0; - minutes = Math.abs(minutes); - var min = minutes % 60; - var hours = Math.floor(minutes / 60); - var pad2digit = function(n) { - if (n < 10) { return "0" + n;} - return "" + n; - }; - return (neg? "-" : "+") + pad2digit(hours) + ":" + pad2digit(min); - } - - function process(evt) { - // Function register is only called by the processor when `params` are set - // in the processor config. - if (device === undefined) { - register(defaults); - } - return device.process(evt); - } - - function processor_chain(subprocessors) { - var builder = new processor.Chain(); - subprocessors.forEach(builder.Add); - return builder.Build().Run; - } - - function linear_select(subprocessors) { - return function (evt) { - var flags = evt.Get(FLAG_FIELD); - var i; - for (i = 0; i < subprocessors.length; i++) { - evt.Delete(FLAG_FIELD); - if (debug) console.warn("linear_select trying entry " + i); - subprocessors[i](evt); - // Dissect processor succeeded? - if (evt.Get(FLAG_FIELD) == null) break; - if (debug) console.warn("linear_select failed entry " + i); - } - if (flags !== null) { - evt.Put(FLAG_FIELD, flags); - } - if (debug) { - if (i < subprocessors.length) { - console.warn("linear_select matched entry " + i); - } else { - console.warn("linear_select didn't match"); - } - } - }; - } - - function conditional(opt) { - return function(evt) { - if (opt.if(evt)) { - opt.then(evt); - } else if (opt.else) { - opt.else(evt); - } - }; - } - - var strip_syslog_priority = (function() { - var isEnabled = function() { return strip_priority === true; }; - var fetchPRI = field("_pri"); - var fetchPayload = field("payload"); - var removePayload = remove(["payload"]); - var cleanup = remove(["_pri", "payload"]); - var onMatch = function(evt) { - var pri, priStr = fetchPRI(evt); - if (priStr != null - && 0 < priStr.length && priStr.length < 4 - && !isNaN((pri = Number(priStr))) - && 0 <= pri && pri < 192) { - var severity = pri & 7, - facility = pri >> 3; - setc("_severity", "" + severity)(evt); - setc("_facility", "" + facility)(evt); - // Replace message with priority stripped. - evt.Put("message", fetchPayload(evt)); - removePayload(evt); - } else { - // not a valid syslog PRI, cleanup. - cleanup(evt); - } - }; - return conditional({ - if: isEnabled, - then: cleanup_flags(match( - "STRIP_PRI", - "message", - "<%{_pri}>%{payload}", - onMatch - )) - }); - })(); - - function match(id, src, pattern, on_success) { - var dissect = new processor.Dissect({ - field: src, - tokenizer: pattern, - target_prefix: FIELDS_OBJECT, - ignore_failure: true, - overwrite_keys: true, - trim_values: "right" - }); - return function (evt) { - var msg = evt.Get(src); - dissect.Run(evt); - var failed = evt.Get(FLAG_FIELD) != null; - if (debug) { - if (failed) { - console.debug("dissect fail: " + id + " field:" + src); - } else { - console.debug("dissect OK: " + id + " field:" + src); - } - console.debug(" expr: <<" + pattern + ">>"); - console.debug(" input: <<" + msg + ">>"); - } - if (on_success != null && !failed) { - on_success(evt); - } - }; - } - - function match_copy(id, src, dst, on_success) { - dst = FIELDS_PREFIX + dst; - if (dst === FIELDS_PREFIX || dst === src) { - return function (evt) { - if (debug) { - console.debug("noop OK: " + id + " field:" + src); - console.debug(" input: <<" + evt.Get(src) + ">>"); - } - if (on_success != null) on_success(evt); - } - } - return function (evt) { - var msg = evt.Get(src); - evt.Put(dst, msg); - if (debug) { - console.debug("copy OK: " + id + " field:" + src); - console.debug(" target: '" + dst + "'"); - console.debug(" input: <<" + msg + ">>"); - } - if (on_success != null) on_success(evt); - } - } - - function cleanup_flags(processor) { - return function(evt) { - processor(evt); - evt.Delete(FLAG_FIELD); - }; - } - - function all_match(opts) { - return function (evt) { - var i; - for (i = 0; i < opts.processors.length; i++) { - evt.Delete(FLAG_FIELD); - opts.processors[i](evt); - // Dissect processor succeeded? - if (evt.Get(FLAG_FIELD) != null) { - if (debug) console.warn("all_match failure at " + i); - if (opts.on_failure != null) opts.on_failure(evt); - return; - } - if (debug) console.warn("all_match success at " + i); - } - if (opts.on_success != null) opts.on_success(evt); - }; - } - - function msgid_select(mapping) { - return function (evt) { - var msgid = evt.Get(FIELDS_PREFIX + "messageid"); - if (msgid == null) { - if (debug) console.warn("msgid_select: no messageid captured!"); - return; - } - var next = mapping[msgid]; - if (next === undefined) { - if (debug) console.warn("msgid_select: no mapping for messageid:" + msgid); - return; - } - if (debug) console.info("msgid_select: matched key=" + msgid); - return next(evt); - }; - } - - function msg(msg_id, match) { - return function (evt) { - match(evt); - if (evt.Get(FLAG_FIELD) == null) { - evt.Put(FIELDS_PREFIX + "msg_id1", msg_id); - } - }; - } - - var start; - - function save_flags(evt) { - saved_flags = evt.Get(FLAG_FIELD); - evt.Put("event.original", evt.Get("message")); - } - - function restore_flags(evt) { - if (saved_flags !== null) { - evt.Put(FLAG_FIELD, saved_flags); - } - evt.Delete("message"); - } - - function constant(value) { - return function (evt) { - return value; - }; - } - - function field(name) { - var fullname = FIELDS_PREFIX + name; - return function (evt) { - return evt.Get(fullname); - }; - } - - function STRCAT(args) { - var s = ""; - var i; - for (i = 0; i < args.length; i++) { - s += args[i]; - } - return s; - } - - // TODO: Implement - function DIRCHK(args) { - unimplemented("DIRCHK"); - } - - function strictToInt(str) { - return str * 1; - } - - function CALC(args) { - if (args.length !== 3) { - console.warn("skipped call to CALC with " + args.length + " arguments."); - return; - } - var a = strictToInt(args[0]); - var b = strictToInt(args[2]); - if (isNaN(a) || isNaN(b)) { - console.warn("failed evaluating CALC arguments a='" + args[0] + "' b='" + args[2] + "'."); - return; - } - var result; - switch (args[1]) { - case "+": - result = a + b; - break; - case "-": - result = a - b; - break; - case "*": - result = a * b; - break; - default: - // Only * and + seen in the parsers. - console.warn("unknown CALC operation '" + args[1] + "'."); - return; - } - // Always return a string - return result !== undefined ? "" + result : result; - } - - var quoteChars = "\"'`"; - function RMQ(args) { - if(args.length !== 1) { - console.warn("RMQ: only one argument expected"); - return; - } - var value = args[0].trim(); - var n = value.length; - var char; - return n > 1 - && (char=value.charAt(0)) === value.charAt(n-1) - && quoteChars.indexOf(char) !== -1? - value.substr(1, n-2) - : value; - } - - function call(opts) { - var args = new Array(opts.args.length); - return function (evt) { - for (var i = 0; i < opts.args.length; i++) - if ((args[i] = opts.args[i](evt)) == null) return; - var result = opts.fn(args); - if (result != null) { - evt.Put(opts.dest, result); - } - }; - } - - function nop(evt) { - } - - function appendErrorMsg(evt, msg) { - var value = evt.Get("error.message"); - if (value == null) { - value = [msg]; - } else if (msg instanceof Array) { - value.push(msg); - } else { - value = [value, msg]; - } - evt.Put("error.message", value); - } - - function unimplemented(name) { - appendErrorMsg("unimplemented feature: " + name); - } - - function lookup(opts) { - return function (evt) { - var key = opts.key(evt); - if (key == null) return; - var value = opts.map.keyvaluepairs[key]; - if (value === undefined) { - value = opts.map.default; - } - if (value !== undefined) { - evt.Put(opts.dest, value(evt)); - } - }; - } - - function set(fields) { - return new processor.AddFields({ - target: FIELDS_OBJECT, - fields: fields, - }); - } - - function setf(dst, src) { - return function (evt) { - var val = evt.Get(FIELDS_PREFIX + src); - if (val != null) evt.Put(FIELDS_PREFIX + dst, val); - }; - } - - function setc(dst, value) { - return function (evt) { - evt.Put(FIELDS_PREFIX + dst, value); - }; - } - - function set_field(opts) { - return function (evt) { - var val = opts.value(evt); - if (val != null) evt.Put(opts.dest, val); - }; - } - - function dump(label) { - return function (evt) { - console.log("Dump of event at " + label + ": " + JSON.stringify(evt, null, "\t")); - }; - } - - function date_time_join_args(evt, arglist) { - var str = ""; - for (var i = 0; i < arglist.length; i++) { - var fname = FIELDS_PREFIX + arglist[i]; - var val = evt.Get(fname); - if (val != null) { - if (str !== "") str += " "; - str += val; - } else { - if (debug) console.warn("in date_time: input arg " + fname + " is not set"); - } - } - return str; - } - - function to2Digit(num) { - return num? (num < 10? "0" + num : num) : "00"; - } - - // Make two-digit dates 00-69 interpreted as 2000-2069 - // and dates 70-99 translated to 1970-1999. - var twoDigitYearEpoch = 70; - var twoDigitYearCentury = 2000; - - // This is to accept dates up to 2 days in the future, only used when - // no year is specified in a date. 2 days should be enough to account for - // time differences between systems and different tz offsets. - var maxFutureDelta = 2*24*60*60*1000; - - // DateContainer stores date fields and then converts those fields into - // a Date. Necessary because building a Date using its set() methods gives - // different results depending on the order of components. - function DateContainer(tzOffset) { - this.offset = tzOffset === undefined? "Z" : tzOffset; - } - - DateContainer.prototype = { - setYear: function(v) {this.year = v;}, - setMonth: function(v) {this.month = v;}, - setDay: function(v) {this.day = v;}, - setHours: function(v) {this.hours = v;}, - setMinutes: function(v) {this.minutes = v;}, - setSeconds: function(v) {this.seconds = v;}, - - setUNIX: function(v) {this.unix = v;}, - - set2DigitYear: function(v) { - this.year = v < twoDigitYearEpoch? twoDigitYearCentury + v : twoDigitYearCentury + v - 100; - }, - - toDate: function() { - if (this.unix !== undefined) { - return new Date(this.unix * 1000); - } - if (this.day === undefined || this.month === undefined) { - // Can't make a date from this. - return undefined; - } - if (this.year === undefined) { - // A date without a year. Set current year, or previous year - // if date would be in the future. - var now = new Date(); - this.year = now.getFullYear(); - var date = this.toDate(); - if (date.getTime() - now.getTime() > maxFutureDelta) { - date.setFullYear(now.getFullYear() - 1); - } - return date; - } - var MM = to2Digit(this.month); - var DD = to2Digit(this.day); - var hh = to2Digit(this.hours); - var mm = to2Digit(this.minutes); - var ss = to2Digit(this.seconds); - return new Date(this.year + "-" + MM + "-" + DD + "T" + hh + ":" + mm + ":" + ss + this.offset); - } - } - - function date_time_try_pattern(fmt, str, tzOffset) { - var date = new DateContainer(tzOffset); - var pos = date_time_try_pattern_at_pos(fmt, str, 0, date); - return pos !== undefined? date.toDate() : undefined; - } - - function date_time_try_pattern_at_pos(fmt, str, pos, date) { - var len = str.length; - for (var proc = 0; pos !== undefined && pos < len && proc < fmt.length; proc++) { - pos = fmt[proc](str, pos, date); - } - return pos; - } - - function date_time(opts) { - return function (evt) { - var tzOffset = opts.tz || tz_offset; - if (tzOffset === "event") { - tzOffset = evt.Get("event.timezone"); - } - var str = date_time_join_args(evt, opts.args); - for (var i = 0; i < opts.fmts.length; i++) { - var date = date_time_try_pattern(opts.fmts[i], str, tzOffset); - if (date !== undefined) { - evt.Put(FIELDS_PREFIX + opts.dest, date); - return; - } - } - if (debug) console.warn("in date_time: id=" + opts.id + " FAILED: " + str); - }; - } - - var uA = 60 * 60 * 24; - var uD = 60 * 60 * 24; - var uF = 60 * 60; - var uG = 60 * 60 * 24 * 30; - var uH = 60 * 60; - var uI = 60 * 60; - var uJ = 60 * 60 * 24; - var uM = 60 * 60 * 24 * 30; - var uN = 60 * 60; - var uO = 1; - var uS = 1; - var uT = 60; - var uU = 60; - var uc = dc; - - function duration(opts) { - return function(evt) { - var str = date_time_join_args(evt, opts.args); - for (var i = 0; i < opts.fmts.length; i++) { - var seconds = duration_try_pattern(opts.fmts[i], str); - if (seconds !== undefined) { - evt.Put(FIELDS_PREFIX + opts.dest, seconds); - return; - } - } - if (debug) console.warn("in duration: id=" + opts.id + " (s) FAILED: " + str); - }; - } - - function duration_try_pattern(fmt, str) { - var secs = 0; - var pos = 0; - for (var i=0; i [ month_id , how many chars to skip if month in long form ] - "Jan": [0, 4], - "Feb": [1, 5], - "Mar": [2, 2], - "Apr": [3, 2], - "May": [4, 0], - "Jun": [5, 1], - "Jul": [6, 1], - "Aug": [7, 3], - "Sep": [8, 6], - "Oct": [9, 4], - "Nov": [10, 5], - "Dec": [11, 4], - "jan": [0, 4], - "feb": [1, 5], - "mar": [2, 2], - "apr": [3, 2], - "may": [4, 0], - "jun": [5, 1], - "jul": [6, 1], - "aug": [7, 3], - "sep": [8, 6], - "oct": [9, 4], - "nov": [10, 5], - "dec": [11, 4], - }; - - // var dC = undefined; - var dR = dateMonthName(true); - var dB = dateMonthName(false); - var dM = dateFixedWidthNumber("M", 2, 1, 12, DateContainer.prototype.setMonth); - var dG = dateVariableWidthNumber("G", 1, 12, DateContainer.prototype.setMonth); - var dD = dateFixedWidthNumber("D", 2, 1, 31, DateContainer.prototype.setDay); - var dF = dateVariableWidthNumber("F", 1, 31, DateContainer.prototype.setDay); - var dH = dateFixedWidthNumber("H", 2, 0, 24, DateContainer.prototype.setHours); - var dI = dateVariableWidthNumber("I", 0, 24, DateContainer.prototype.setHours); // Accept hours >12 - var dN = dateVariableWidthNumber("N", 0, 24, DateContainer.prototype.setHours); - var dT = dateFixedWidthNumber("T", 2, 0, 59, DateContainer.prototype.setMinutes); - var dU = dateVariableWidthNumber("U", 0, 59, DateContainer.prototype.setMinutes); - var dP = parseAMPM; // AM|PM - var dQ = parseAMPM; // A.M.|P.M - var dS = dateFixedWidthNumber("S", 2, 0, 60, DateContainer.prototype.setSeconds); - var dO = dateVariableWidthNumber("O", 0, 60, DateContainer.prototype.setSeconds); - var dY = dateFixedWidthNumber("Y", 2, 0, 99, DateContainer.prototype.set2DigitYear); - var dW = dateFixedWidthNumber("W", 4, 1000, 9999, DateContainer.prototype.setYear); - var dZ = parseHMS; - var dX = dateVariableWidthNumber("X", 0, 0x10000000000, DateContainer.prototype.setUNIX); - - // parseAMPM parses "A.M", "AM", "P.M", "PM" from logs. - // Only works if this modifier appears after the hour has been read from logs - // which is always the case in the 300 devices. - function parseAMPM(str, pos, date) { - var n = str.length; - var start = skipws(str, pos); - if (start + 2 > n) return; - var head = str.substr(start, 2).toUpperCase(); - var isPM = false; - var skip = false; - switch (head) { - case "A.": - skip = true; - /* falls through */ - case "AM": - break; - case "P.": - skip = true; - /* falls through */ - case "PM": - isPM = true; - break; - default: - if (debug) console.warn("can't parse pos " + start + " as AM/PM: " + str + "(head:" + head + ")"); - return; - } - pos = start + 2; - if (skip) { - if (pos+2 > n || str.substr(pos, 2).toUpperCase() !== "M.") { - if (debug) console.warn("can't parse pos " + start + " as AM/PM: " + str + "(tail)"); - return; - } - pos += 2; - } - var hh = date.hours; - if (isPM) { - // Accept existing hour in 24h format. - if (hh < 12) hh += 12; - } else { - if (hh === 12) hh = 0; - } - date.setHours(hh); - return pos; - } - - function parseHMS(str, pos, date) { - return date_time_try_pattern_at_pos([dN, dc(":"), dU, dc(":"), dO], str, pos, date); - } - - function skipws(str, pos) { - for ( var n = str.length; - pos < n && str.charAt(pos) === " "; - pos++) - ; - return pos; - } - - function skipdigits(str, pos) { - var c; - for (var n = str.length; - pos < n && (c = str.charAt(pos)) >= "0" && c <= "9"; - pos++) - ; - return pos; - } - - function dSkip(str, pos, date) { - var chr; - for (;pos < str.length && (chr=str[pos])<'0' || chr>'9'; pos++) {} - return pos < str.length? pos : undefined; - } - - function dateVariableWidthNumber(fmtChar, min, max, setter) { - return function (str, pos, date) { - var start = skipws(str, pos); - pos = skipdigits(str, start); - var s = str.substr(start, pos - start); - var value = parseInt(s, 10); - if (value >= min && value <= max) { - setter.call(date, value); - return pos; - } - return; - }; - } - - function dateFixedWidthNumber(fmtChar, width, min, max, setter) { - return function (str, pos, date) { - pos = skipws(str, pos); - var n = str.length; - if (pos + width > n) return; - var s = str.substr(pos, width); - var value = parseInt(s, 10); - if (value >= min && value <= max) { - setter.call(date, value); - return pos + width; - } - return; - }; - } - - // Short month name (Jan..Dec). - function dateMonthName(long) { - return function (str, pos, date) { - pos = skipws(str, pos); - var n = str.length; - if (pos + 3 > n) return; - var mon = str.substr(pos, 3); - var idx = shortMonths[mon]; - if (idx === undefined) { - idx = shortMonths[mon.toLowerCase()]; - } - if (idx === undefined) { - //console.warn("parsing date_time: '" + mon + "' is not a valid short month (%B)"); - return; - } - date.setMonth(idx[0]+1); - return pos + 3 + (long ? idx[1] : 0); - }; - } - - function url_wrapper(dst, src, fn) { - return function(evt) { - var value = evt.Get(FIELDS_PREFIX + src), result; - if (value != null && (result = fn(value))!== undefined) { - evt.Put(FIELDS_PREFIX + dst, result); - } else { - console.debug(fn.name + " failed for '" + value + "'"); - } - }; - } - - // The following regular expression for parsing URLs from: - // https://github.com/wizard04wsu/URI_Parsing - // - // The MIT License (MIT) - // - // Copyright (c) 2014 Andrew Harrison - // - // Permission is hereby granted, free of charge, to any person obtaining a copy of - // this software and associated documentation files (the "Software"), to deal in - // the Software without restriction, including without limitation the rights to - // use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of - // the Software, and to permit persons to whom the Software is furnished to do so, - // subject to the following conditions: - // - // The above copyright notice and this permission notice shall be included in all - // copies or substantial portions of the Software. - // - // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - // IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS - // FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR - // COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER - // IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN - // CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. - var uriRegExp = /^([a-z][a-z0-9+.\-]*):(?:\/\/((?:(?=((?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9A-F]{2})*))(\3)@)?(?=(\[[0-9A-F:.]{2,}\]|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9A-F]{2})*))\5(?::(?=(\d*))\6)?)(\/(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/]|%[0-9A-F]{2})*))\8)?|(\/?(?!\/)(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/]|%[0-9A-F]{2})*))\10)?)(?:\?(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/?]|%[0-9A-F]{2})*))\11)?(?:#(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/?]|%[0-9A-F]{2})*))\12)?$/i; - - var uriScheme = 1; - var uriDomain = 5; - var uriPort = 6; - var uriPath = 7; - var uriPathAlt = 9; - var uriQuery = 11; - - function domain(dst, src) { - return url_wrapper(dst, src, extract_domain); - } - - function split_url(value) { - var m = value.match(uriRegExp); - if (m && m[uriDomain]) return m; - // Support input in the form "www.example.net/path", but not "/path". - m = ("null://" + value).match(uriRegExp); - if (m) return m; - } - - function extract_domain(value) { - var m = split_url(value); - if (m && m[uriDomain]) return m[uriDomain]; - } - - var extFromPage = /\.[^.]+$/; - function extract_ext(value) { - var page = extract_page(value); - if (page) { - var m = page.match(extFromPage); - if (m) return m[0]; - } - } - - function ext(dst, src) { - return url_wrapper(dst, src, extract_ext); - } - - function fqdn(dst, src) { - // TODO: fqdn and domain(eTLD+1) are currently the same. - return domain(dst, src); - } - - var pageFromPathRegExp = /\/([^\/]+)$/; - var pageName = 1; - - function extract_page(value) { - value = extract_path(value); - if (!value) return undefined; - var m = value.match(pageFromPathRegExp); - if (m) return m[pageName]; - } - - function page(dst, src) { - return url_wrapper(dst, src, extract_page); - } - - function extract_path(value) { - var m = split_url(value); - return m? m[uriPath] || m[uriPathAlt] : undefined; - } - - function path(dst, src) { - return url_wrapper(dst, src, extract_path); - } - - // Map common schemes to their default port. - // port has to be a string (will be converted at a later stage). - var schemePort = { - "ftp": "21", - "ssh": "22", - "http": "80", - "https": "443", - }; - - function extract_port(value) { - var m = split_url(value); - if (!m) return undefined; - if (m[uriPort]) return m[uriPort]; - if (m[uriScheme]) { - return schemePort[m[uriScheme]]; - } - } - - function port(dst, src) { - return url_wrapper(dst, src, extract_port); - } - - function extract_query(value) { - var m = split_url(value); - if (m && m[uriQuery]) return m[uriQuery]; - } - - function query(dst, src) { - return url_wrapper(dst, src, extract_query); - } - - function extract_root(value) { - var m = split_url(value); - if (m && m[uriDomain] && m[uriDomain]) { - var scheme = m[uriScheme] && m[uriScheme] !== "null"? - m[uriScheme] + "://" : ""; - var port = m[uriPort]? ":" + m[uriPort] : ""; - return scheme + m[uriDomain] + port; - } - } - - function root(dst, src) { - return url_wrapper(dst, src, extract_root); - } - - function tagval(id, src, cfg, keys, on_success) { - var fail = function(evt) { - evt.Put(FLAG_FIELD, "tagval_parsing_error"); - } - if (cfg.kv_separator.length !== 1) { - throw("Invalid TAGVALMAP ValueDelimiter (must have 1 character)"); - } - var quotes_len = cfg.open_quote.length > 0 && cfg.close_quote.length > 0? - cfg.open_quote.length + cfg.close_quote.length : 0; - var kv_regex = new RegExp('^([^' + cfg.kv_separator + ']*)*' + cfg.kv_separator + ' *(.*)*$'); - return function(evt) { - var msg = evt.Get(src); - if (msg === undefined) { - console.warn("tagval: input field is missing"); - return fail(evt); - } - var pairs = msg.split(cfg.pair_separator); - var i; - var success = false; - var prev = ""; - for (i=0; i 0 && - value.length >= cfg.open_quote.length + cfg.close_quote.length && - value.substr(0, cfg.open_quote.length) === cfg.open_quote && - value.substr(value.length - cfg.close_quote.length) === cfg.close_quote) { - value = value.substr(cfg.open_quote.length, value.length - quotes_len); - } - evt.Put(FIELDS_PREFIX + field, value); - success = true; - } - if (!success) { - return fail(evt); - } - if (on_success != null) { - on_success(evt); - } - } - } - - var ecs_mappings = { - "_facility": {convert: to_long, to:[{field: "log.syslog.facility.code", setter: fld_set}]}, - "_pri": {convert: to_long, to:[{field: "log.syslog.priority", setter: fld_set}]}, - "_severity": {convert: to_long, to:[{field: "log.syslog.severity.code", setter: fld_set}]}, - "action": {to:[{field: "event.action", setter: fld_prio, prio: 0}]}, - "administrator": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 4}]}, - "alias.ip": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 3},{field: "related.ip", setter: fld_append}]}, - "alias.ipv6": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 4},{field: "related.ip", setter: fld_append}]}, - "alias.mac": {convert: to_mac, to:[{field: "host.mac", setter: fld_prio, prio: 1}]}, - "application": {to:[{field: "network.application", setter: fld_set}]}, - "bytes": {convert: to_long, to:[{field: "network.bytes", setter: fld_set}]}, - "c_domain": {to:[{field: "source.domain", setter: fld_prio, prio: 1}]}, - "c_logon_id": {to:[{field: "user.id", setter: fld_prio, prio: 2}]}, - "c_user_name": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 8}]}, - "c_username": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 2}]}, - "cctld": {to:[{field: "url.top_level_domain", setter: fld_prio, prio: 1}]}, - "child_pid": {convert: to_long, to:[{field: "process.pid", setter: fld_prio, prio: 1}]}, - "child_pid_val": {to:[{field: "process.title", setter: fld_set}]}, - "child_process": {to:[{field: "process.name", setter: fld_prio, prio: 1}]}, - "city.dst": {to:[{field: "destination.geo.city_name", setter: fld_set}]}, - "city.src": {to:[{field: "source.geo.city_name", setter: fld_set}]}, - "daddr": {convert: to_ip, to:[{field: "destination.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "daddr_v6": {convert: to_ip, to:[{field: "destination.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "ddomain": {to:[{field: "destination.domain", setter: fld_prio, prio: 0}]}, - "devicehostip": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 2},{field: "related.ip", setter: fld_append}]}, - "devicehostmac": {convert: to_mac, to:[{field: "host.mac", setter: fld_prio, prio: 0}]}, - "dhost": {to:[{field: "destination.address", setter: fld_set},{field: "related.hosts", setter: fld_append}]}, - "dinterface": {to:[{field: "observer.egress.interface.name", setter: fld_set}]}, - "direction": {to:[{field: "network.direction", setter: fld_set}]}, - "directory": {to:[{field: "file.directory", setter: fld_set}]}, - "dmacaddr": {convert: to_mac, to:[{field: "destination.mac", setter: fld_set}]}, - "dns.responsetype": {to:[{field: "dns.answers.type", setter: fld_set}]}, - "dns.resptext": {to:[{field: "dns.answers.name", setter: fld_set}]}, - "dns_querytype": {to:[{field: "dns.question.type", setter: fld_set}]}, - "domain": {to:[{field: "server.domain", setter: fld_prio, prio: 0},{field: "related.hosts", setter: fld_append}]}, - "domain.dst": {to:[{field: "destination.domain", setter: fld_prio, prio: 1}]}, - "domain.src": {to:[{field: "source.domain", setter: fld_prio, prio: 2}]}, - "domain_id": {to:[{field: "user.domain", setter: fld_set}]}, - "domainname": {to:[{field: "server.domain", setter: fld_prio, prio: 1}]}, - "dport": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 0}]}, - "dtransaddr": {convert: to_ip, to:[{field: "destination.nat.ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "dtransport": {convert: to_long, to:[{field: "destination.nat.port", setter: fld_prio, prio: 0}]}, - "ec_outcome": {to:[{field: "event.outcome", setter: fld_ecs_outcome}]}, - "event_description": {to:[{field: "message", setter: fld_prio, prio: 0}]}, - "event_source": {to:[{field: "related.hosts", setter: fld_append}]}, - "event_time": {convert: to_date, to:[{field: "@timestamp", setter: fld_set}]}, - "event_type": {to:[{field: "event.action", setter: fld_prio, prio: 1}]}, - "extension": {to:[{field: "file.extension", setter: fld_prio, prio: 1}]}, - "file.attributes": {to:[{field: "file.attributes", setter: fld_set}]}, - "filename": {to:[{field: "file.name", setter: fld_prio, prio: 0}]}, - "filename_size": {convert: to_long, to:[{field: "file.size", setter: fld_set}]}, - "filepath": {to:[{field: "file.path", setter: fld_set}]}, - "filetype": {to:[{field: "file.type", setter: fld_set}]}, - "fqdn": {to:[{field: "related.hosts", setter: fld_append}]}, - "group": {to:[{field: "group.name", setter: fld_set}]}, - "groupid": {to:[{field: "group.id", setter: fld_set}]}, - "host": {to:[{field: "host.name", setter: fld_prio, prio: 1},{field: "related.hosts", setter: fld_append}]}, - "hostip": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "hostip_v6": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "hostname": {to:[{field: "host.name", setter: fld_prio, prio: 0}]}, - "id": {to:[{field: "event.code", setter: fld_prio, prio: 0}]}, - "interface": {to:[{field: "network.interface.name", setter: fld_set}]}, - "ip.orig": {convert: to_ip, to:[{field: "network.forwarded_ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "ip.trans.dst": {convert: to_ip, to:[{field: "destination.nat.ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "ip.trans.src": {convert: to_ip, to:[{field: "source.nat.ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "ipv6.orig": {convert: to_ip, to:[{field: "network.forwarded_ip", setter: fld_prio, prio: 2},{field: "related.ip", setter: fld_append}]}, - "latdec_dst": {convert: to_double, to:[{field: "destination.geo.location.lat", setter: fld_set}]}, - "latdec_src": {convert: to_double, to:[{field: "source.geo.location.lat", setter: fld_set}]}, - "location_city": {to:[{field: "geo.city_name", setter: fld_set}]}, - "location_country": {to:[{field: "geo.country_name", setter: fld_set}]}, - "location_desc": {to:[{field: "geo.name", setter: fld_set}]}, - "location_dst": {to:[{field: "destination.geo.country_name", setter: fld_set}]}, - "location_src": {to:[{field: "source.geo.country_name", setter: fld_set}]}, - "location_state": {to:[{field: "geo.region_name", setter: fld_set}]}, - "logon_id": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 5}]}, - "longdec_dst": {convert: to_double, to:[{field: "destination.geo.location.lon", setter: fld_set}]}, - "longdec_src": {convert: to_double, to:[{field: "source.geo.location.lon", setter: fld_set}]}, - "macaddr": {convert: to_mac, to:[{field: "host.mac", setter: fld_prio, prio: 2}]}, - "messageid": {to:[{field: "event.code", setter: fld_prio, prio: 1}]}, - "method": {to:[{field: "http.request.method", setter: fld_set}]}, - "msg": {to:[{field: "message", setter: fld_set}]}, - "orig_ip": {convert: to_ip, to:[{field: "network.forwarded_ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "owner": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 6}]}, - "packets": {convert: to_long, to:[{field: "network.packets", setter: fld_set}]}, - "parent_pid": {convert: to_long, to:[{field: "process.parent.pid", setter: fld_prio, prio: 0}]}, - "parent_pid_val": {to:[{field: "process.parent.title", setter: fld_set}]}, - "parent_process": {to:[{field: "process.parent.name", setter: fld_prio, prio: 0}]}, - "patient_fullname": {to:[{field: "user.full_name", setter: fld_prio, prio: 1}]}, - "port.dst": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 1}]}, - "port.src": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 1}]}, - "port.trans.dst": {convert: to_long, to:[{field: "destination.nat.port", setter: fld_prio, prio: 1}]}, - "port.trans.src": {convert: to_long, to:[{field: "source.nat.port", setter: fld_prio, prio: 1}]}, - "process": {to:[{field: "process.name", setter: fld_prio, prio: 0}]}, - "process_id": {convert: to_long, to:[{field: "process.pid", setter: fld_prio, prio: 0}]}, - "process_id_src": {convert: to_long, to:[{field: "process.parent.pid", setter: fld_prio, prio: 1}]}, - "process_src": {to:[{field: "process.parent.name", setter: fld_prio, prio: 1}]}, - "product": {to:[{field: "observer.product", setter: fld_set}]}, - "protocol": {to:[{field: "network.protocol", setter: fld_set}]}, - "query": {to:[{field: "url.query", setter: fld_prio, prio: 2}]}, - "rbytes": {convert: to_long, to:[{field: "destination.bytes", setter: fld_set}]}, - "referer": {to:[{field: "http.request.referrer", setter: fld_prio, prio: 1}]}, - "rulename": {to:[{field: "rule.name", setter: fld_set}]}, - "saddr": {convert: to_ip, to:[{field: "source.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "saddr_v6": {convert: to_ip, to:[{field: "source.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "sbytes": {convert: to_long, to:[{field: "source.bytes", setter: fld_set}]}, - "sdomain": {to:[{field: "source.domain", setter: fld_prio, prio: 0}]}, - "service": {to:[{field: "service.name", setter: fld_prio, prio: 1}]}, - "service.name": {to:[{field: "service.name", setter: fld_prio, prio: 0}]}, - "service_account": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 7}]}, - "severity": {to:[{field: "log.level", setter: fld_set}]}, - "shost": {to:[{field: "host.hostname", setter: fld_set},{field: "source.address", setter: fld_set},{field: "related.hosts", setter: fld_append}]}, - "sinterface": {to:[{field: "observer.ingress.interface.name", setter: fld_set}]}, - "sld": {to:[{field: "url.registered_domain", setter: fld_set}]}, - "smacaddr": {convert: to_mac, to:[{field: "source.mac", setter: fld_set}]}, - "sport": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 0}]}, - "stransaddr": {convert: to_ip, to:[{field: "source.nat.ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "stransport": {convert: to_long, to:[{field: "source.nat.port", setter: fld_prio, prio: 0}]}, - "tcp.dstport": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 2}]}, - "tcp.srcport": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 2}]}, - "timezone": {to:[{field: "event.timezone", setter: fld_set}]}, - "tld": {to:[{field: "url.top_level_domain", setter: fld_prio, prio: 0}]}, - "udp.dstport": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 3}]}, - "udp.srcport": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 3}]}, - "uid": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 3}]}, - "url": {to:[{field: "url.original", setter: fld_prio, prio: 1}]}, - "url_raw": {to:[{field: "url.original", setter: fld_prio, prio: 0}]}, - "urldomain": {to:[{field: "url.domain", setter: fld_prio, prio: 0}]}, - "urlquery": {to:[{field: "url.query", setter: fld_prio, prio: 0}]}, - "user": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 0}]}, - "user.id": {to:[{field: "user.id", setter: fld_prio, prio: 1}]}, - "user_agent": {to:[{field: "user_agent.original", setter: fld_set}]}, - "user_fullname": {to:[{field: "user.full_name", setter: fld_prio, prio: 0}]}, - "user_id": {to:[{field: "user.id", setter: fld_prio, prio: 0}]}, - "username": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 1}]}, - "version": {to:[{field: "observer.version", setter: fld_set}]}, - "web_domain": {to:[{field: "url.domain", setter: fld_prio, prio: 1},{field: "related.hosts", setter: fld_append}]}, - "web_extension": {to:[{field: "file.extension", setter: fld_prio, prio: 0}]}, - "web_query": {to:[{field: "url.query", setter: fld_prio, prio: 1}]}, - "web_ref_domain": {to:[{field: "related.hosts", setter: fld_append}]}, - "web_referer": {to:[{field: "http.request.referrer", setter: fld_prio, prio: 0}]}, - "web_root": {to:[{field: "url.path", setter: fld_set}]}, - "webpage": {to:[{field: "file.name", setter: fld_prio, prio: 1}]}, - }; - - var rsa_mappings = { - "access_point": {to:[{field: "rsa.wireless.access_point", setter: fld_set}]}, - "accesses": {to:[{field: "rsa.identity.accesses", setter: fld_set}]}, - "acl_id": {to:[{field: "rsa.misc.acl_id", setter: fld_set}]}, - "acl_op": {to:[{field: "rsa.misc.acl_op", setter: fld_set}]}, - "acl_pos": {to:[{field: "rsa.misc.acl_pos", setter: fld_set}]}, - "acl_table": {to:[{field: "rsa.misc.acl_table", setter: fld_set}]}, - "action": {to:[{field: "rsa.misc.action", setter: fld_append}]}, - "ad_computer_dst": {to:[{field: "rsa.network.ad_computer_dst", setter: fld_set}]}, - "addr": {to:[{field: "rsa.network.addr", setter: fld_set}]}, - "admin": {to:[{field: "rsa.misc.admin", setter: fld_set}]}, - "agent": {to:[{field: "rsa.misc.client", setter: fld_prio, prio: 0}]}, - "agent.id": {to:[{field: "rsa.misc.agent_id", setter: fld_set}]}, - "alarm_id": {to:[{field: "rsa.misc.alarm_id", setter: fld_set}]}, - "alarmname": {to:[{field: "rsa.misc.alarmname", setter: fld_set}]}, - "alert": {to:[{field: "rsa.threat.alert", setter: fld_set}]}, - "alert_id": {to:[{field: "rsa.misc.alert_id", setter: fld_set}]}, - "alias.host": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "analysis.file": {to:[{field: "rsa.investigations.analysis_file", setter: fld_set}]}, - "analysis.service": {to:[{field: "rsa.investigations.analysis_service", setter: fld_set}]}, - "analysis.session": {to:[{field: "rsa.investigations.analysis_session", setter: fld_set}]}, - "app_id": {to:[{field: "rsa.misc.app_id", setter: fld_set}]}, - "attachment": {to:[{field: "rsa.file.attachment", setter: fld_set}]}, - "audit": {to:[{field: "rsa.misc.audit", setter: fld_set}]}, - "audit_class": {to:[{field: "rsa.internal.audit_class", setter: fld_set}]}, - "audit_object": {to:[{field: "rsa.misc.audit_object", setter: fld_set}]}, - "auditdata": {to:[{field: "rsa.misc.auditdata", setter: fld_set}]}, - "authmethod": {to:[{field: "rsa.identity.auth_method", setter: fld_set}]}, - "autorun_type": {to:[{field: "rsa.misc.autorun_type", setter: fld_set}]}, - "bcc": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "benchmark": {to:[{field: "rsa.misc.benchmark", setter: fld_set}]}, - "binary": {to:[{field: "rsa.file.binary", setter: fld_set}]}, - "boc": {to:[{field: "rsa.investigations.boc", setter: fld_set}]}, - "bssid": {to:[{field: "rsa.wireless.wlan_ssid", setter: fld_prio, prio: 1}]}, - "bypass": {to:[{field: "rsa.misc.bypass", setter: fld_set}]}, - "c_sid": {to:[{field: "rsa.identity.user_sid_src", setter: fld_set}]}, - "cache": {to:[{field: "rsa.misc.cache", setter: fld_set}]}, - "cache_hit": {to:[{field: "rsa.misc.cache_hit", setter: fld_set}]}, - "calling_from": {to:[{field: "rsa.misc.phone", setter: fld_prio, prio: 1}]}, - "calling_to": {to:[{field: "rsa.misc.phone", setter: fld_prio, prio: 0}]}, - "category": {to:[{field: "rsa.misc.category", setter: fld_set}]}, - "cc": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "cc.number": {convert: to_long, to:[{field: "rsa.misc.cc_number", setter: fld_set}]}, - "cefversion": {to:[{field: "rsa.misc.cefversion", setter: fld_set}]}, - "cert.serial": {to:[{field: "rsa.crypto.cert_serial", setter: fld_set}]}, - "cert_ca": {to:[{field: "rsa.crypto.cert_ca", setter: fld_set}]}, - "cert_checksum": {to:[{field: "rsa.crypto.cert_checksum", setter: fld_set}]}, - "cert_common": {to:[{field: "rsa.crypto.cert_common", setter: fld_set}]}, - "cert_error": {to:[{field: "rsa.crypto.cert_error", setter: fld_set}]}, - "cert_hostname": {to:[{field: "rsa.crypto.cert_host_name", setter: fld_set}]}, - "cert_hostname_cat": {to:[{field: "rsa.crypto.cert_host_cat", setter: fld_set}]}, - "cert_issuer": {to:[{field: "rsa.crypto.cert_issuer", setter: fld_set}]}, - "cert_keysize": {to:[{field: "rsa.crypto.cert_keysize", setter: fld_set}]}, - "cert_status": {to:[{field: "rsa.crypto.cert_status", setter: fld_set}]}, - "cert_subject": {to:[{field: "rsa.crypto.cert_subject", setter: fld_set}]}, - "cert_username": {to:[{field: "rsa.crypto.cert_username", setter: fld_set}]}, - "cfg.attr": {to:[{field: "rsa.misc.cfg_attr", setter: fld_set}]}, - "cfg.obj": {to:[{field: "rsa.misc.cfg_obj", setter: fld_set}]}, - "cfg.path": {to:[{field: "rsa.misc.cfg_path", setter: fld_set}]}, - "change_attribute": {to:[{field: "rsa.misc.change_attrib", setter: fld_set}]}, - "change_new": {to:[{field: "rsa.misc.change_new", setter: fld_set}]}, - "change_old": {to:[{field: "rsa.misc.change_old", setter: fld_set}]}, - "changes": {to:[{field: "rsa.misc.changes", setter: fld_set}]}, - "checksum": {to:[{field: "rsa.misc.checksum", setter: fld_set}]}, - "checksum.dst": {to:[{field: "rsa.misc.checksum_dst", setter: fld_set}]}, - "checksum.src": {to:[{field: "rsa.misc.checksum_src", setter: fld_set}]}, - "cid": {to:[{field: "rsa.internal.cid", setter: fld_set}]}, - "client": {to:[{field: "rsa.misc.client", setter: fld_prio, prio: 1}]}, - "client_ip": {to:[{field: "rsa.misc.client_ip", setter: fld_set}]}, - "clustermembers": {to:[{field: "rsa.misc.clustermembers", setter: fld_set}]}, - "cmd": {to:[{field: "rsa.misc.cmd", setter: fld_set}]}, - "cn_acttimeout": {to:[{field: "rsa.misc.cn_acttimeout", setter: fld_set}]}, - "cn_asn_dst": {to:[{field: "rsa.web.cn_asn_dst", setter: fld_set}]}, - "cn_asn_src": {to:[{field: "rsa.misc.cn_asn_src", setter: fld_set}]}, - "cn_bgpv4nxthop": {to:[{field: "rsa.misc.cn_bgpv4nxthop", setter: fld_set}]}, - "cn_ctr_dst_code": {to:[{field: "rsa.misc.cn_ctr_dst_code", setter: fld_set}]}, - "cn_dst_tos": {to:[{field: "rsa.misc.cn_dst_tos", setter: fld_set}]}, - "cn_dst_vlan": {to:[{field: "rsa.misc.cn_dst_vlan", setter: fld_set}]}, - "cn_engine_id": {to:[{field: "rsa.misc.cn_engine_id", setter: fld_set}]}, - "cn_engine_type": {to:[{field: "rsa.misc.cn_engine_type", setter: fld_set}]}, - "cn_f_switch": {to:[{field: "rsa.misc.cn_f_switch", setter: fld_set}]}, - "cn_flowsampid": {to:[{field: "rsa.misc.cn_flowsampid", setter: fld_set}]}, - "cn_flowsampintv": {to:[{field: "rsa.misc.cn_flowsampintv", setter: fld_set}]}, - "cn_flowsampmode": {to:[{field: "rsa.misc.cn_flowsampmode", setter: fld_set}]}, - "cn_inacttimeout": {to:[{field: "rsa.misc.cn_inacttimeout", setter: fld_set}]}, - "cn_inpermbyts": {to:[{field: "rsa.misc.cn_inpermbyts", setter: fld_set}]}, - "cn_inpermpckts": {to:[{field: "rsa.misc.cn_inpermpckts", setter: fld_set}]}, - "cn_invalid": {to:[{field: "rsa.misc.cn_invalid", setter: fld_set}]}, - "cn_ip_proto_ver": {to:[{field: "rsa.misc.cn_ip_proto_ver", setter: fld_set}]}, - "cn_ipv4_ident": {to:[{field: "rsa.misc.cn_ipv4_ident", setter: fld_set}]}, - "cn_l_switch": {to:[{field: "rsa.misc.cn_l_switch", setter: fld_set}]}, - "cn_log_did": {to:[{field: "rsa.misc.cn_log_did", setter: fld_set}]}, - "cn_log_rid": {to:[{field: "rsa.misc.cn_log_rid", setter: fld_set}]}, - "cn_max_ttl": {to:[{field: "rsa.misc.cn_max_ttl", setter: fld_set}]}, - "cn_maxpcktlen": {to:[{field: "rsa.misc.cn_maxpcktlen", setter: fld_set}]}, - "cn_min_ttl": {to:[{field: "rsa.misc.cn_min_ttl", setter: fld_set}]}, - "cn_minpcktlen": {to:[{field: "rsa.misc.cn_minpcktlen", setter: fld_set}]}, - "cn_mpls_lbl_1": {to:[{field: "rsa.misc.cn_mpls_lbl_1", setter: fld_set}]}, - "cn_mpls_lbl_10": {to:[{field: "rsa.misc.cn_mpls_lbl_10", setter: fld_set}]}, - "cn_mpls_lbl_2": {to:[{field: "rsa.misc.cn_mpls_lbl_2", setter: fld_set}]}, - "cn_mpls_lbl_3": {to:[{field: "rsa.misc.cn_mpls_lbl_3", setter: fld_set}]}, - "cn_mpls_lbl_4": {to:[{field: "rsa.misc.cn_mpls_lbl_4", setter: fld_set}]}, - "cn_mpls_lbl_5": {to:[{field: "rsa.misc.cn_mpls_lbl_5", setter: fld_set}]}, - "cn_mpls_lbl_6": {to:[{field: "rsa.misc.cn_mpls_lbl_6", setter: fld_set}]}, - "cn_mpls_lbl_7": {to:[{field: "rsa.misc.cn_mpls_lbl_7", setter: fld_set}]}, - "cn_mpls_lbl_8": {to:[{field: "rsa.misc.cn_mpls_lbl_8", setter: fld_set}]}, - "cn_mpls_lbl_9": {to:[{field: "rsa.misc.cn_mpls_lbl_9", setter: fld_set}]}, - "cn_mplstoplabel": {to:[{field: "rsa.misc.cn_mplstoplabel", setter: fld_set}]}, - "cn_mplstoplabip": {to:[{field: "rsa.misc.cn_mplstoplabip", setter: fld_set}]}, - "cn_mul_dst_byt": {to:[{field: "rsa.misc.cn_mul_dst_byt", setter: fld_set}]}, - "cn_mul_dst_pks": {to:[{field: "rsa.misc.cn_mul_dst_pks", setter: fld_set}]}, - "cn_muligmptype": {to:[{field: "rsa.misc.cn_muligmptype", setter: fld_set}]}, - "cn_rpackets": {to:[{field: "rsa.web.cn_rpackets", setter: fld_set}]}, - "cn_sampalgo": {to:[{field: "rsa.misc.cn_sampalgo", setter: fld_set}]}, - "cn_sampint": {to:[{field: "rsa.misc.cn_sampint", setter: fld_set}]}, - "cn_seqctr": {to:[{field: "rsa.misc.cn_seqctr", setter: fld_set}]}, - "cn_spackets": {to:[{field: "rsa.misc.cn_spackets", setter: fld_set}]}, - "cn_src_tos": {to:[{field: "rsa.misc.cn_src_tos", setter: fld_set}]}, - "cn_src_vlan": {to:[{field: "rsa.misc.cn_src_vlan", setter: fld_set}]}, - "cn_sysuptime": {to:[{field: "rsa.misc.cn_sysuptime", setter: fld_set}]}, - "cn_template_id": {to:[{field: "rsa.misc.cn_template_id", setter: fld_set}]}, - "cn_totbytsexp": {to:[{field: "rsa.misc.cn_totbytsexp", setter: fld_set}]}, - "cn_totflowexp": {to:[{field: "rsa.misc.cn_totflowexp", setter: fld_set}]}, - "cn_totpcktsexp": {to:[{field: "rsa.misc.cn_totpcktsexp", setter: fld_set}]}, - "cn_unixnanosecs": {to:[{field: "rsa.misc.cn_unixnanosecs", setter: fld_set}]}, - "cn_v6flowlabel": {to:[{field: "rsa.misc.cn_v6flowlabel", setter: fld_set}]}, - "cn_v6optheaders": {to:[{field: "rsa.misc.cn_v6optheaders", setter: fld_set}]}, - "code": {to:[{field: "rsa.misc.code", setter: fld_set}]}, - "command": {to:[{field: "rsa.misc.command", setter: fld_set}]}, - "comments": {to:[{field: "rsa.misc.comments", setter: fld_set}]}, - "comp_class": {to:[{field: "rsa.misc.comp_class", setter: fld_set}]}, - "comp_name": {to:[{field: "rsa.misc.comp_name", setter: fld_set}]}, - "comp_rbytes": {to:[{field: "rsa.misc.comp_rbytes", setter: fld_set}]}, - "comp_sbytes": {to:[{field: "rsa.misc.comp_sbytes", setter: fld_set}]}, - "component_version": {to:[{field: "rsa.misc.comp_version", setter: fld_set}]}, - "connection_id": {to:[{field: "rsa.misc.connection_id", setter: fld_prio, prio: 1}]}, - "connectionid": {to:[{field: "rsa.misc.connection_id", setter: fld_prio, prio: 0}]}, - "content": {to:[{field: "rsa.misc.content", setter: fld_set}]}, - "content_type": {to:[{field: "rsa.misc.content_type", setter: fld_set}]}, - "content_version": {to:[{field: "rsa.misc.content_version", setter: fld_set}]}, - "context": {to:[{field: "rsa.misc.context", setter: fld_set}]}, - "count": {to:[{field: "rsa.misc.count", setter: fld_set}]}, - "cpu": {convert: to_long, to:[{field: "rsa.misc.cpu", setter: fld_set}]}, - "cpu_data": {to:[{field: "rsa.misc.cpu_data", setter: fld_set}]}, - "criticality": {to:[{field: "rsa.misc.criticality", setter: fld_set}]}, - "cs_agency_dst": {to:[{field: "rsa.misc.cs_agency_dst", setter: fld_set}]}, - "cs_analyzedby": {to:[{field: "rsa.misc.cs_analyzedby", setter: fld_set}]}, - "cs_av_other": {to:[{field: "rsa.misc.cs_av_other", setter: fld_set}]}, - "cs_av_primary": {to:[{field: "rsa.misc.cs_av_primary", setter: fld_set}]}, - "cs_av_secondary": {to:[{field: "rsa.misc.cs_av_secondary", setter: fld_set}]}, - "cs_bgpv6nxthop": {to:[{field: "rsa.misc.cs_bgpv6nxthop", setter: fld_set}]}, - "cs_bit9status": {to:[{field: "rsa.misc.cs_bit9status", setter: fld_set}]}, - "cs_context": {to:[{field: "rsa.misc.cs_context", setter: fld_set}]}, - "cs_control": {to:[{field: "rsa.misc.cs_control", setter: fld_set}]}, - "cs_data": {to:[{field: "rsa.misc.cs_data", setter: fld_set}]}, - "cs_datecret": {to:[{field: "rsa.misc.cs_datecret", setter: fld_set}]}, - "cs_dst_tld": {to:[{field: "rsa.misc.cs_dst_tld", setter: fld_set}]}, - "cs_eth_dst_ven": {to:[{field: "rsa.misc.cs_eth_dst_ven", setter: fld_set}]}, - "cs_eth_src_ven": {to:[{field: "rsa.misc.cs_eth_src_ven", setter: fld_set}]}, - "cs_event_uuid": {to:[{field: "rsa.misc.cs_event_uuid", setter: fld_set}]}, - "cs_filetype": {to:[{field: "rsa.misc.cs_filetype", setter: fld_set}]}, - "cs_fld": {to:[{field: "rsa.misc.cs_fld", setter: fld_set}]}, - "cs_if_desc": {to:[{field: "rsa.misc.cs_if_desc", setter: fld_set}]}, - "cs_if_name": {to:[{field: "rsa.misc.cs_if_name", setter: fld_set}]}, - "cs_ip_next_hop": {to:[{field: "rsa.misc.cs_ip_next_hop", setter: fld_set}]}, - "cs_ipv4dstpre": {to:[{field: "rsa.misc.cs_ipv4dstpre", setter: fld_set}]}, - "cs_ipv4srcpre": {to:[{field: "rsa.misc.cs_ipv4srcpre", setter: fld_set}]}, - "cs_lifetime": {to:[{field: "rsa.misc.cs_lifetime", setter: fld_set}]}, - "cs_log_medium": {to:[{field: "rsa.misc.cs_log_medium", setter: fld_set}]}, - "cs_loginname": {to:[{field: "rsa.misc.cs_loginname", setter: fld_set}]}, - "cs_modulescore": {to:[{field: "rsa.misc.cs_modulescore", setter: fld_set}]}, - "cs_modulesign": {to:[{field: "rsa.misc.cs_modulesign", setter: fld_set}]}, - "cs_opswatresult": {to:[{field: "rsa.misc.cs_opswatresult", setter: fld_set}]}, - "cs_payload": {to:[{field: "rsa.misc.cs_payload", setter: fld_set}]}, - "cs_registrant": {to:[{field: "rsa.misc.cs_registrant", setter: fld_set}]}, - "cs_registrar": {to:[{field: "rsa.misc.cs_registrar", setter: fld_set}]}, - "cs_represult": {to:[{field: "rsa.misc.cs_represult", setter: fld_set}]}, - "cs_rpayload": {to:[{field: "rsa.misc.cs_rpayload", setter: fld_set}]}, - "cs_sampler_name": {to:[{field: "rsa.misc.cs_sampler_name", setter: fld_set}]}, - "cs_sourcemodule": {to:[{field: "rsa.misc.cs_sourcemodule", setter: fld_set}]}, - "cs_streams": {to:[{field: "rsa.misc.cs_streams", setter: fld_set}]}, - "cs_targetmodule": {to:[{field: "rsa.misc.cs_targetmodule", setter: fld_set}]}, - "cs_v6nxthop": {to:[{field: "rsa.misc.cs_v6nxthop", setter: fld_set}]}, - "cs_whois_server": {to:[{field: "rsa.misc.cs_whois_server", setter: fld_set}]}, - "cs_yararesult": {to:[{field: "rsa.misc.cs_yararesult", setter: fld_set}]}, - "cve": {to:[{field: "rsa.misc.cve", setter: fld_set}]}, - "d_certauth": {to:[{field: "rsa.crypto.d_certauth", setter: fld_set}]}, - "d_cipher": {to:[{field: "rsa.crypto.cipher_dst", setter: fld_set}]}, - "d_ciphersize": {convert: to_long, to:[{field: "rsa.crypto.cipher_size_dst", setter: fld_set}]}, - "d_sslver": {to:[{field: "rsa.crypto.ssl_ver_dst", setter: fld_set}]}, - "data": {to:[{field: "rsa.internal.data", setter: fld_set}]}, - "data_type": {to:[{field: "rsa.misc.data_type", setter: fld_set}]}, - "date": {to:[{field: "rsa.time.date", setter: fld_set}]}, - "datetime": {to:[{field: "rsa.time.datetime", setter: fld_set}]}, - "day": {to:[{field: "rsa.time.day", setter: fld_set}]}, - "db_id": {to:[{field: "rsa.db.db_id", setter: fld_set}]}, - "db_name": {to:[{field: "rsa.db.database", setter: fld_set}]}, - "db_pid": {convert: to_long, to:[{field: "rsa.db.db_pid", setter: fld_set}]}, - "dclass_counter1": {convert: to_long, to:[{field: "rsa.counters.dclass_c1", setter: fld_set}]}, - "dclass_counter1_string": {to:[{field: "rsa.counters.dclass_c1_str", setter: fld_set}]}, - "dclass_counter2": {convert: to_long, to:[{field: "rsa.counters.dclass_c2", setter: fld_set}]}, - "dclass_counter2_string": {to:[{field: "rsa.counters.dclass_c2_str", setter: fld_set}]}, - "dclass_counter3": {convert: to_long, to:[{field: "rsa.counters.dclass_c3", setter: fld_set}]}, - "dclass_counter3_string": {to:[{field: "rsa.counters.dclass_c3_str", setter: fld_set}]}, - "dclass_ratio1": {to:[{field: "rsa.counters.dclass_r1", setter: fld_set}]}, - "dclass_ratio1_string": {to:[{field: "rsa.counters.dclass_r1_str", setter: fld_set}]}, - "dclass_ratio2": {to:[{field: "rsa.counters.dclass_r2", setter: fld_set}]}, - "dclass_ratio2_string": {to:[{field: "rsa.counters.dclass_r2_str", setter: fld_set}]}, - "dclass_ratio3": {to:[{field: "rsa.counters.dclass_r3", setter: fld_set}]}, - "dclass_ratio3_string": {to:[{field: "rsa.counters.dclass_r3_str", setter: fld_set}]}, - "dead": {convert: to_long, to:[{field: "rsa.internal.dead", setter: fld_set}]}, - "description": {to:[{field: "rsa.misc.description", setter: fld_set}]}, - "detail": {to:[{field: "rsa.misc.event_desc", setter: fld_set}]}, - "device": {to:[{field: "rsa.misc.device_name", setter: fld_set}]}, - "device.class": {to:[{field: "rsa.internal.device_class", setter: fld_set}]}, - "device.group": {to:[{field: "rsa.internal.device_group", setter: fld_set}]}, - "device.host": {to:[{field: "rsa.internal.device_host", setter: fld_set}]}, - "device.ip": {convert: to_ip, to:[{field: "rsa.internal.device_ip", setter: fld_set}]}, - "device.ipv6": {convert: to_ip, to:[{field: "rsa.internal.device_ipv6", setter: fld_set}]}, - "device.type": {to:[{field: "rsa.internal.device_type", setter: fld_set}]}, - "device.type.id": {convert: to_long, to:[{field: "rsa.internal.device_type_id", setter: fld_set}]}, - "devicehostname": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "devvendor": {to:[{field: "rsa.misc.devvendor", setter: fld_set}]}, - "dhost": {to:[{field: "rsa.network.host_dst", setter: fld_set}]}, - "did": {to:[{field: "rsa.internal.did", setter: fld_set}]}, - "dinterface": {to:[{field: "rsa.network.dinterface", setter: fld_set}]}, - "directory.dst": {to:[{field: "rsa.file.directory_dst", setter: fld_set}]}, - "directory.src": {to:[{field: "rsa.file.directory_src", setter: fld_set}]}, - "disk_volume": {to:[{field: "rsa.storage.disk_volume", setter: fld_set}]}, - "disposition": {to:[{field: "rsa.misc.disposition", setter: fld_set}]}, - "distance": {to:[{field: "rsa.misc.distance", setter: fld_set}]}, - "dmask": {to:[{field: "rsa.network.dmask", setter: fld_set}]}, - "dn": {to:[{field: "rsa.identity.dn", setter: fld_set}]}, - "dns_a_record": {to:[{field: "rsa.network.dns_a_record", setter: fld_set}]}, - "dns_cname_record": {to:[{field: "rsa.network.dns_cname_record", setter: fld_set}]}, - "dns_id": {to:[{field: "rsa.network.dns_id", setter: fld_set}]}, - "dns_opcode": {to:[{field: "rsa.network.dns_opcode", setter: fld_set}]}, - "dns_ptr_record": {to:[{field: "rsa.network.dns_ptr_record", setter: fld_set}]}, - "dns_resp": {to:[{field: "rsa.network.dns_resp", setter: fld_set}]}, - "dns_type": {to:[{field: "rsa.network.dns_type", setter: fld_set}]}, - "doc_number": {convert: to_long, to:[{field: "rsa.misc.doc_number", setter: fld_set}]}, - "domain": {to:[{field: "rsa.network.domain", setter: fld_set}]}, - "domain1": {to:[{field: "rsa.network.domain1", setter: fld_set}]}, - "dst_dn": {to:[{field: "rsa.identity.dn_dst", setter: fld_set}]}, - "dst_payload": {to:[{field: "rsa.misc.payload_dst", setter: fld_set}]}, - "dst_spi": {to:[{field: "rsa.misc.spi_dst", setter: fld_set}]}, - "dst_zone": {to:[{field: "rsa.network.zone_dst", setter: fld_set}]}, - "dstburb": {to:[{field: "rsa.misc.dstburb", setter: fld_set}]}, - "duration": {convert: to_double, to:[{field: "rsa.time.duration_time", setter: fld_set}]}, - "duration_string": {to:[{field: "rsa.time.duration_str", setter: fld_set}]}, - "ec_activity": {to:[{field: "rsa.investigations.ec_activity", setter: fld_set}]}, - "ec_outcome": {to:[{field: "rsa.investigations.ec_outcome", setter: fld_set}]}, - "ec_subject": {to:[{field: "rsa.investigations.ec_subject", setter: fld_set}]}, - "ec_theme": {to:[{field: "rsa.investigations.ec_theme", setter: fld_set}]}, - "edomain": {to:[{field: "rsa.misc.edomain", setter: fld_set}]}, - "edomaub": {to:[{field: "rsa.misc.edomaub", setter: fld_set}]}, - "effective_time": {convert: to_date, to:[{field: "rsa.time.effective_time", setter: fld_set}]}, - "ein.number": {convert: to_long, to:[{field: "rsa.misc.ein_number", setter: fld_set}]}, - "email": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "encryption_type": {to:[{field: "rsa.crypto.crypto", setter: fld_set}]}, - "endtime": {convert: to_date, to:[{field: "rsa.time.endtime", setter: fld_set}]}, - "entropy.req": {convert: to_long, to:[{field: "rsa.internal.entropy_req", setter: fld_set}]}, - "entropy.res": {convert: to_long, to:[{field: "rsa.internal.entropy_res", setter: fld_set}]}, - "entry": {to:[{field: "rsa.internal.entry", setter: fld_set}]}, - "eoc": {to:[{field: "rsa.investigations.eoc", setter: fld_set}]}, - "error": {to:[{field: "rsa.misc.error", setter: fld_set}]}, - "eth_type": {convert: to_long, to:[{field: "rsa.network.eth_type", setter: fld_set}]}, - "euid": {to:[{field: "rsa.misc.euid", setter: fld_set}]}, - "event.cat": {convert: to_long, to:[{field: "rsa.investigations.event_cat", setter: fld_prio, prio: 1}]}, - "event.cat.name": {to:[{field: "rsa.investigations.event_cat_name", setter: fld_prio, prio: 1}]}, - "event_cat": {convert: to_long, to:[{field: "rsa.investigations.event_cat", setter: fld_prio, prio: 0}]}, - "event_cat_name": {to:[{field: "rsa.investigations.event_cat_name", setter: fld_prio, prio: 0}]}, - "event_category": {to:[{field: "rsa.misc.event_category", setter: fld_set}]}, - "event_computer": {to:[{field: "rsa.misc.event_computer", setter: fld_set}]}, - "event_counter": {convert: to_long, to:[{field: "rsa.counters.event_counter", setter: fld_set}]}, - "event_description": {to:[{field: "rsa.internal.event_desc", setter: fld_set}]}, - "event_id": {to:[{field: "rsa.misc.event_id", setter: fld_set}]}, - "event_log": {to:[{field: "rsa.misc.event_log", setter: fld_set}]}, - "event_name": {to:[{field: "rsa.internal.event_name", setter: fld_set}]}, - "event_queue_time": {convert: to_date, to:[{field: "rsa.time.event_queue_time", setter: fld_set}]}, - "event_source": {to:[{field: "rsa.misc.event_source", setter: fld_set}]}, - "event_state": {to:[{field: "rsa.misc.event_state", setter: fld_set}]}, - "event_time": {convert: to_date, to:[{field: "rsa.time.event_time", setter: fld_set}]}, - "event_time_str": {to:[{field: "rsa.time.event_time_str", setter: fld_prio, prio: 1}]}, - "event_time_string": {to:[{field: "rsa.time.event_time_str", setter: fld_prio, prio: 0}]}, - "event_type": {to:[{field: "rsa.misc.event_type", setter: fld_set}]}, - "event_user": {to:[{field: "rsa.misc.event_user", setter: fld_set}]}, - "eventtime": {to:[{field: "rsa.time.eventtime", setter: fld_set}]}, - "expected_val": {to:[{field: "rsa.misc.expected_val", setter: fld_set}]}, - "expiration_time": {convert: to_date, to:[{field: "rsa.time.expire_time", setter: fld_set}]}, - "expiration_time_string": {to:[{field: "rsa.time.expire_time_str", setter: fld_set}]}, - "facility": {to:[{field: "rsa.misc.facility", setter: fld_set}]}, - "facilityname": {to:[{field: "rsa.misc.facilityname", setter: fld_set}]}, - "faddr": {to:[{field: "rsa.network.faddr", setter: fld_set}]}, - "fcatnum": {to:[{field: "rsa.misc.fcatnum", setter: fld_set}]}, - "federated_idp": {to:[{field: "rsa.identity.federated_idp", setter: fld_set}]}, - "federated_sp": {to:[{field: "rsa.identity.federated_sp", setter: fld_set}]}, - "feed.category": {to:[{field: "rsa.internal.feed_category", setter: fld_set}]}, - "feed_desc": {to:[{field: "rsa.internal.feed_desc", setter: fld_set}]}, - "feed_name": {to:[{field: "rsa.internal.feed_name", setter: fld_set}]}, - "fhost": {to:[{field: "rsa.network.fhost", setter: fld_set}]}, - "file_entropy": {convert: to_double, to:[{field: "rsa.file.file_entropy", setter: fld_set}]}, - "file_vendor": {to:[{field: "rsa.file.file_vendor", setter: fld_set}]}, - "filename_dst": {to:[{field: "rsa.file.filename_dst", setter: fld_set}]}, - "filename_src": {to:[{field: "rsa.file.filename_src", setter: fld_set}]}, - "filename_tmp": {to:[{field: "rsa.file.filename_tmp", setter: fld_set}]}, - "filesystem": {to:[{field: "rsa.file.filesystem", setter: fld_set}]}, - "filter": {to:[{field: "rsa.misc.filter", setter: fld_set}]}, - "finterface": {to:[{field: "rsa.misc.finterface", setter: fld_set}]}, - "flags": {to:[{field: "rsa.misc.flags", setter: fld_set}]}, - "forensic_info": {to:[{field: "rsa.misc.forensic_info", setter: fld_set}]}, - "forward.ip": {convert: to_ip, to:[{field: "rsa.internal.forward_ip", setter: fld_set}]}, - "forward.ipv6": {convert: to_ip, to:[{field: "rsa.internal.forward_ipv6", setter: fld_set}]}, - "found": {to:[{field: "rsa.misc.found", setter: fld_set}]}, - "fport": {to:[{field: "rsa.network.fport", setter: fld_set}]}, - "fqdn": {to:[{field: "rsa.web.fqdn", setter: fld_set}]}, - "fresult": {convert: to_long, to:[{field: "rsa.misc.fresult", setter: fld_set}]}, - "from": {to:[{field: "rsa.email.email_src", setter: fld_set}]}, - "gaddr": {to:[{field: "rsa.misc.gaddr", setter: fld_set}]}, - "gateway": {to:[{field: "rsa.network.gateway", setter: fld_set}]}, - "gmtdate": {to:[{field: "rsa.time.gmtdate", setter: fld_set}]}, - "gmttime": {to:[{field: "rsa.time.gmttime", setter: fld_set}]}, - "group": {to:[{field: "rsa.misc.group", setter: fld_set}]}, - "group_object": {to:[{field: "rsa.misc.group_object", setter: fld_set}]}, - "groupid": {to:[{field: "rsa.misc.group_id", setter: fld_set}]}, - "h_code": {to:[{field: "rsa.internal.hcode", setter: fld_set}]}, - "hardware_id": {to:[{field: "rsa.misc.hardware_id", setter: fld_set}]}, - "header.id": {to:[{field: "rsa.internal.header_id", setter: fld_set}]}, - "host.orig": {to:[{field: "rsa.network.host_orig", setter: fld_set}]}, - "host.state": {to:[{field: "rsa.endpoint.host_state", setter: fld_set}]}, - "host.type": {to:[{field: "rsa.network.host_type", setter: fld_set}]}, - "host_role": {to:[{field: "rsa.identity.host_role", setter: fld_set}]}, - "hostid": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "hostname": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "hour": {to:[{field: "rsa.time.hour", setter: fld_set}]}, - "https.insact": {to:[{field: "rsa.crypto.https_insact", setter: fld_set}]}, - "https.valid": {to:[{field: "rsa.crypto.https_valid", setter: fld_set}]}, - "icmpcode": {convert: to_long, to:[{field: "rsa.network.icmp_code", setter: fld_set}]}, - "icmptype": {convert: to_long, to:[{field: "rsa.network.icmp_type", setter: fld_set}]}, - "id": {to:[{field: "rsa.misc.reference_id", setter: fld_set}]}, - "id1": {to:[{field: "rsa.misc.reference_id1", setter: fld_set}]}, - "id2": {to:[{field: "rsa.misc.reference_id2", setter: fld_set}]}, - "id3": {to:[{field: "rsa.misc.id3", setter: fld_set}]}, - "ike": {to:[{field: "rsa.crypto.ike", setter: fld_set}]}, - "ike_cookie1": {to:[{field: "rsa.crypto.ike_cookie1", setter: fld_set}]}, - "ike_cookie2": {to:[{field: "rsa.crypto.ike_cookie2", setter: fld_set}]}, - "im_buddyid": {to:[{field: "rsa.misc.im_buddyid", setter: fld_set}]}, - "im_buddyname": {to:[{field: "rsa.misc.im_buddyname", setter: fld_set}]}, - "im_client": {to:[{field: "rsa.misc.im_client", setter: fld_set}]}, - "im_croomid": {to:[{field: "rsa.misc.im_croomid", setter: fld_set}]}, - "im_croomtype": {to:[{field: "rsa.misc.im_croomtype", setter: fld_set}]}, - "im_members": {to:[{field: "rsa.misc.im_members", setter: fld_set}]}, - "im_userid": {to:[{field: "rsa.misc.im_userid", setter: fld_set}]}, - "im_username": {to:[{field: "rsa.misc.im_username", setter: fld_set}]}, - "index": {to:[{field: "rsa.misc.index", setter: fld_set}]}, - "info": {to:[{field: "rsa.db.index", setter: fld_set}]}, - "inode": {convert: to_long, to:[{field: "rsa.internal.inode", setter: fld_set}]}, - "inout": {to:[{field: "rsa.misc.inout", setter: fld_set}]}, - "instance": {to:[{field: "rsa.db.instance", setter: fld_set}]}, - "interface": {to:[{field: "rsa.network.interface", setter: fld_set}]}, - "inv.category": {to:[{field: "rsa.investigations.inv_category", setter: fld_set}]}, - "inv.context": {to:[{field: "rsa.investigations.inv_context", setter: fld_set}]}, - "ioc": {to:[{field: "rsa.investigations.ioc", setter: fld_set}]}, - "ip_proto": {convert: to_long, to:[{field: "rsa.network.ip_proto", setter: fld_set}]}, - "ipkt": {to:[{field: "rsa.misc.ipkt", setter: fld_set}]}, - "ipscat": {to:[{field: "rsa.misc.ipscat", setter: fld_set}]}, - "ipspri": {to:[{field: "rsa.misc.ipspri", setter: fld_set}]}, - "jobname": {to:[{field: "rsa.misc.jobname", setter: fld_set}]}, - "jobnum": {to:[{field: "rsa.misc.job_num", setter: fld_set}]}, - "laddr": {to:[{field: "rsa.network.laddr", setter: fld_set}]}, - "language": {to:[{field: "rsa.misc.language", setter: fld_set}]}, - "latitude": {to:[{field: "rsa.misc.latitude", setter: fld_set}]}, - "lc.cid": {to:[{field: "rsa.internal.lc_cid", setter: fld_set}]}, - "lc.ctime": {convert: to_date, to:[{field: "rsa.internal.lc_ctime", setter: fld_set}]}, - "ldap": {to:[{field: "rsa.identity.ldap", setter: fld_set}]}, - "ldap.query": {to:[{field: "rsa.identity.ldap_query", setter: fld_set}]}, - "ldap.response": {to:[{field: "rsa.identity.ldap_response", setter: fld_set}]}, - "level": {convert: to_long, to:[{field: "rsa.internal.level", setter: fld_set}]}, - "lhost": {to:[{field: "rsa.network.lhost", setter: fld_set}]}, - "library": {to:[{field: "rsa.misc.library", setter: fld_set}]}, - "lifetime": {convert: to_long, to:[{field: "rsa.misc.lifetime", setter: fld_set}]}, - "linenum": {to:[{field: "rsa.misc.linenum", setter: fld_set}]}, - "link": {to:[{field: "rsa.misc.link", setter: fld_set}]}, - "linterface": {to:[{field: "rsa.network.linterface", setter: fld_set}]}, - "list_name": {to:[{field: "rsa.misc.list_name", setter: fld_set}]}, - "listnum": {to:[{field: "rsa.misc.listnum", setter: fld_set}]}, - "load_data": {to:[{field: "rsa.misc.load_data", setter: fld_set}]}, - "location_floor": {to:[{field: "rsa.misc.location_floor", setter: fld_set}]}, - "location_mark": {to:[{field: "rsa.misc.location_mark", setter: fld_set}]}, - "log_id": {to:[{field: "rsa.misc.log_id", setter: fld_set}]}, - "log_type": {to:[{field: "rsa.misc.log_type", setter: fld_set}]}, - "logid": {to:[{field: "rsa.misc.logid", setter: fld_set}]}, - "logip": {to:[{field: "rsa.misc.logip", setter: fld_set}]}, - "logname": {to:[{field: "rsa.misc.logname", setter: fld_set}]}, - "logon_type": {to:[{field: "rsa.identity.logon_type", setter: fld_set}]}, - "logon_type_desc": {to:[{field: "rsa.identity.logon_type_desc", setter: fld_set}]}, - "longitude": {to:[{field: "rsa.misc.longitude", setter: fld_set}]}, - "lport": {to:[{field: "rsa.misc.lport", setter: fld_set}]}, - "lread": {convert: to_long, to:[{field: "rsa.db.lread", setter: fld_set}]}, - "lun": {to:[{field: "rsa.storage.lun", setter: fld_set}]}, - "lwrite": {convert: to_long, to:[{field: "rsa.db.lwrite", setter: fld_set}]}, - "macaddr": {convert: to_mac, to:[{field: "rsa.network.eth_host", setter: fld_set}]}, - "mail_id": {to:[{field: "rsa.misc.mail_id", setter: fld_set}]}, - "mask": {to:[{field: "rsa.network.mask", setter: fld_set}]}, - "match": {to:[{field: "rsa.misc.match", setter: fld_set}]}, - "mbug_data": {to:[{field: "rsa.misc.mbug_data", setter: fld_set}]}, - "mcb.req": {convert: to_long, to:[{field: "rsa.internal.mcb_req", setter: fld_set}]}, - "mcb.res": {convert: to_long, to:[{field: "rsa.internal.mcb_res", setter: fld_set}]}, - "mcbc.req": {convert: to_long, to:[{field: "rsa.internal.mcbc_req", setter: fld_set}]}, - "mcbc.res": {convert: to_long, to:[{field: "rsa.internal.mcbc_res", setter: fld_set}]}, - "medium": {convert: to_long, to:[{field: "rsa.internal.medium", setter: fld_set}]}, - "message": {to:[{field: "rsa.internal.message", setter: fld_set}]}, - "message_body": {to:[{field: "rsa.misc.message_body", setter: fld_set}]}, - "messageid": {to:[{field: "rsa.internal.messageid", setter: fld_set}]}, - "min": {to:[{field: "rsa.time.min", setter: fld_set}]}, - "misc": {to:[{field: "rsa.misc.misc", setter: fld_set}]}, - "misc_name": {to:[{field: "rsa.misc.misc_name", setter: fld_set}]}, - "mode": {to:[{field: "rsa.misc.mode", setter: fld_set}]}, - "month": {to:[{field: "rsa.time.month", setter: fld_set}]}, - "msg": {to:[{field: "rsa.internal.msg", setter: fld_set}]}, - "msgIdPart1": {to:[{field: "rsa.misc.msgIdPart1", setter: fld_set}]}, - "msgIdPart2": {to:[{field: "rsa.misc.msgIdPart2", setter: fld_set}]}, - "msgIdPart3": {to:[{field: "rsa.misc.msgIdPart3", setter: fld_set}]}, - "msgIdPart4": {to:[{field: "rsa.misc.msgIdPart4", setter: fld_set}]}, - "msg_id": {to:[{field: "rsa.internal.msg_id", setter: fld_set}]}, - "msg_type": {to:[{field: "rsa.misc.msg_type", setter: fld_set}]}, - "msgid": {to:[{field: "rsa.misc.msgid", setter: fld_set}]}, - "name": {to:[{field: "rsa.misc.name", setter: fld_set}]}, - "netname": {to:[{field: "rsa.network.netname", setter: fld_set}]}, - "netsessid": {to:[{field: "rsa.misc.netsessid", setter: fld_set}]}, - "network_port": {convert: to_long, to:[{field: "rsa.network.network_port", setter: fld_set}]}, - "network_service": {to:[{field: "rsa.network.network_service", setter: fld_set}]}, - "node": {to:[{field: "rsa.misc.node", setter: fld_set}]}, - "nodename": {to:[{field: "rsa.internal.node_name", setter: fld_set}]}, - "ntype": {to:[{field: "rsa.misc.ntype", setter: fld_set}]}, - "num": {to:[{field: "rsa.misc.num", setter: fld_set}]}, - "number": {to:[{field: "rsa.misc.number", setter: fld_set}]}, - "number1": {to:[{field: "rsa.misc.number1", setter: fld_set}]}, - "number2": {to:[{field: "rsa.misc.number2", setter: fld_set}]}, - "nwe.callback_id": {to:[{field: "rsa.internal.nwe_callback_id", setter: fld_set}]}, - "nwwn": {to:[{field: "rsa.misc.nwwn", setter: fld_set}]}, - "obj_id": {to:[{field: "rsa.internal.obj_id", setter: fld_set}]}, - "obj_name": {to:[{field: "rsa.misc.obj_name", setter: fld_set}]}, - "obj_server": {to:[{field: "rsa.internal.obj_server", setter: fld_set}]}, - "obj_type": {to:[{field: "rsa.misc.obj_type", setter: fld_set}]}, - "obj_value": {to:[{field: "rsa.internal.obj_val", setter: fld_set}]}, - "object": {to:[{field: "rsa.misc.object", setter: fld_set}]}, - "observed_val": {to:[{field: "rsa.misc.observed_val", setter: fld_set}]}, - "operation": {to:[{field: "rsa.misc.operation", setter: fld_set}]}, - "operation_id": {to:[{field: "rsa.misc.operation_id", setter: fld_set}]}, - "opkt": {to:[{field: "rsa.misc.opkt", setter: fld_set}]}, - "org.dst": {to:[{field: "rsa.physical.org_dst", setter: fld_prio, prio: 1}]}, - "org.src": {to:[{field: "rsa.physical.org_src", setter: fld_set}]}, - "org_dst": {to:[{field: "rsa.physical.org_dst", setter: fld_prio, prio: 0}]}, - "orig_from": {to:[{field: "rsa.misc.orig_from", setter: fld_set}]}, - "origin": {to:[{field: "rsa.network.origin", setter: fld_set}]}, - "original_owner": {to:[{field: "rsa.identity.owner", setter: fld_set}]}, - "os": {to:[{field: "rsa.misc.OS", setter: fld_set}]}, - "owner_id": {to:[{field: "rsa.misc.owner_id", setter: fld_set}]}, - "p_action": {to:[{field: "rsa.misc.p_action", setter: fld_set}]}, - "p_date": {to:[{field: "rsa.time.p_date", setter: fld_set}]}, - "p_filter": {to:[{field: "rsa.misc.p_filter", setter: fld_set}]}, - "p_group_object": {to:[{field: "rsa.misc.p_group_object", setter: fld_set}]}, - "p_id": {to:[{field: "rsa.misc.p_id", setter: fld_set}]}, - "p_month": {to:[{field: "rsa.time.p_month", setter: fld_set}]}, - "p_msgid": {to:[{field: "rsa.misc.p_msgid", setter: fld_set}]}, - "p_msgid1": {to:[{field: "rsa.misc.p_msgid1", setter: fld_set}]}, - "p_msgid2": {to:[{field: "rsa.misc.p_msgid2", setter: fld_set}]}, - "p_result1": {to:[{field: "rsa.misc.p_result1", setter: fld_set}]}, - "p_time": {to:[{field: "rsa.time.p_time", setter: fld_set}]}, - "p_time1": {to:[{field: "rsa.time.p_time1", setter: fld_set}]}, - "p_time2": {to:[{field: "rsa.time.p_time2", setter: fld_set}]}, - "p_url": {to:[{field: "rsa.web.p_url", setter: fld_set}]}, - "p_user_agent": {to:[{field: "rsa.web.p_user_agent", setter: fld_set}]}, - "p_web_cookie": {to:[{field: "rsa.web.p_web_cookie", setter: fld_set}]}, - "p_web_method": {to:[{field: "rsa.web.p_web_method", setter: fld_set}]}, - "p_web_referer": {to:[{field: "rsa.web.p_web_referer", setter: fld_set}]}, - "p_year": {to:[{field: "rsa.time.p_year", setter: fld_set}]}, - "packet_length": {to:[{field: "rsa.network.packet_length", setter: fld_set}]}, - "paddr": {convert: to_ip, to:[{field: "rsa.network.paddr", setter: fld_set}]}, - "param": {to:[{field: "rsa.misc.param", setter: fld_set}]}, - "param.dst": {to:[{field: "rsa.misc.param_dst", setter: fld_set}]}, - "param.src": {to:[{field: "rsa.misc.param_src", setter: fld_set}]}, - "parent_node": {to:[{field: "rsa.misc.parent_node", setter: fld_set}]}, - "parse.error": {to:[{field: "rsa.internal.parse_error", setter: fld_set}]}, - "password": {to:[{field: "rsa.identity.password", setter: fld_set}]}, - "password_chg": {to:[{field: "rsa.misc.password_chg", setter: fld_set}]}, - "password_expire": {to:[{field: "rsa.misc.password_expire", setter: fld_set}]}, - "patient_fname": {to:[{field: "rsa.healthcare.patient_fname", setter: fld_set}]}, - "patient_id": {to:[{field: "rsa.healthcare.patient_id", setter: fld_set}]}, - "patient_lname": {to:[{field: "rsa.healthcare.patient_lname", setter: fld_set}]}, - "patient_mname": {to:[{field: "rsa.healthcare.patient_mname", setter: fld_set}]}, - "payload.req": {convert: to_long, to:[{field: "rsa.internal.payload_req", setter: fld_set}]}, - "payload.res": {convert: to_long, to:[{field: "rsa.internal.payload_res", setter: fld_set}]}, - "peer": {to:[{field: "rsa.crypto.peer", setter: fld_set}]}, - "peer_id": {to:[{field: "rsa.crypto.peer_id", setter: fld_set}]}, - "permgranted": {to:[{field: "rsa.misc.permgranted", setter: fld_set}]}, - "permissions": {to:[{field: "rsa.db.permissions", setter: fld_set}]}, - "permwanted": {to:[{field: "rsa.misc.permwanted", setter: fld_set}]}, - "pgid": {to:[{field: "rsa.misc.pgid", setter: fld_set}]}, - "phone_number": {to:[{field: "rsa.misc.phone", setter: fld_prio, prio: 2}]}, - "phost": {to:[{field: "rsa.network.phost", setter: fld_set}]}, - "pid": {to:[{field: "rsa.misc.pid", setter: fld_set}]}, - "policy": {to:[{field: "rsa.misc.policy", setter: fld_set}]}, - "policyUUID": {to:[{field: "rsa.misc.policyUUID", setter: fld_set}]}, - "policy_id": {to:[{field: "rsa.misc.policy_id", setter: fld_set}]}, - "policy_value": {to:[{field: "rsa.misc.policy_value", setter: fld_set}]}, - "policy_waiver": {to:[{field: "rsa.misc.policy_waiver", setter: fld_set}]}, - "policyname": {to:[{field: "rsa.misc.policy_name", setter: fld_prio, prio: 0}]}, - "pool_id": {to:[{field: "rsa.misc.pool_id", setter: fld_set}]}, - "pool_name": {to:[{field: "rsa.misc.pool_name", setter: fld_set}]}, - "port": {convert: to_long, to:[{field: "rsa.network.port", setter: fld_set}]}, - "portname": {to:[{field: "rsa.misc.port_name", setter: fld_set}]}, - "pread": {convert: to_long, to:[{field: "rsa.db.pread", setter: fld_set}]}, - "priority": {to:[{field: "rsa.misc.priority", setter: fld_set}]}, - "privilege": {to:[{field: "rsa.file.privilege", setter: fld_set}]}, - "process.vid.dst": {to:[{field: "rsa.internal.process_vid_dst", setter: fld_set}]}, - "process.vid.src": {to:[{field: "rsa.internal.process_vid_src", setter: fld_set}]}, - "process_id_val": {to:[{field: "rsa.misc.process_id_val", setter: fld_set}]}, - "processing_time": {to:[{field: "rsa.time.process_time", setter: fld_set}]}, - "profile": {to:[{field: "rsa.identity.profile", setter: fld_set}]}, - "prog_asp_num": {to:[{field: "rsa.misc.prog_asp_num", setter: fld_set}]}, - "program": {to:[{field: "rsa.misc.program", setter: fld_set}]}, - "protocol_detail": {to:[{field: "rsa.network.protocol_detail", setter: fld_set}]}, - "pwwn": {to:[{field: "rsa.storage.pwwn", setter: fld_set}]}, - "r_hostid": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "real_data": {to:[{field: "rsa.misc.real_data", setter: fld_set}]}, - "realm": {to:[{field: "rsa.identity.realm", setter: fld_set}]}, - "reason": {to:[{field: "rsa.misc.reason", setter: fld_set}]}, - "rec_asp_device": {to:[{field: "rsa.misc.rec_asp_device", setter: fld_set}]}, - "rec_asp_num": {to:[{field: "rsa.misc.rec_asp_num", setter: fld_set}]}, - "rec_library": {to:[{field: "rsa.misc.rec_library", setter: fld_set}]}, - "recorded_time": {convert: to_date, to:[{field: "rsa.time.recorded_time", setter: fld_set}]}, - "recordnum": {to:[{field: "rsa.misc.recordnum", setter: fld_set}]}, - "registry.key": {to:[{field: "rsa.endpoint.registry_key", setter: fld_set}]}, - "registry.value": {to:[{field: "rsa.endpoint.registry_value", setter: fld_set}]}, - "remote_domain": {to:[{field: "rsa.web.remote_domain", setter: fld_set}]}, - "remote_domain_id": {to:[{field: "rsa.network.remote_domain_id", setter: fld_set}]}, - "reputation_num": {convert: to_double, to:[{field: "rsa.web.reputation_num", setter: fld_set}]}, - "resource": {to:[{field: "rsa.internal.resource", setter: fld_set}]}, - "resource_class": {to:[{field: "rsa.internal.resource_class", setter: fld_set}]}, - "result": {to:[{field: "rsa.misc.result", setter: fld_set}]}, - "result_code": {to:[{field: "rsa.misc.result_code", setter: fld_prio, prio: 1}]}, - "resultcode": {to:[{field: "rsa.misc.result_code", setter: fld_prio, prio: 0}]}, - "rid": {convert: to_long, to:[{field: "rsa.internal.rid", setter: fld_set}]}, - "risk": {to:[{field: "rsa.misc.risk", setter: fld_set}]}, - "risk_info": {to:[{field: "rsa.misc.risk_info", setter: fld_set}]}, - "risk_num": {convert: to_double, to:[{field: "rsa.misc.risk_num", setter: fld_set}]}, - "risk_num_comm": {convert: to_double, to:[{field: "rsa.misc.risk_num_comm", setter: fld_set}]}, - "risk_num_next": {convert: to_double, to:[{field: "rsa.misc.risk_num_next", setter: fld_set}]}, - "risk_num_sand": {convert: to_double, to:[{field: "rsa.misc.risk_num_sand", setter: fld_set}]}, - "risk_num_static": {convert: to_double, to:[{field: "rsa.misc.risk_num_static", setter: fld_set}]}, - "risk_suspicious": {to:[{field: "rsa.misc.risk_suspicious", setter: fld_set}]}, - "risk_warning": {to:[{field: "rsa.misc.risk_warning", setter: fld_set}]}, - "rpayload": {to:[{field: "rsa.network.rpayload", setter: fld_set}]}, - "ruid": {to:[{field: "rsa.misc.ruid", setter: fld_set}]}, - "rule": {to:[{field: "rsa.misc.rule", setter: fld_set}]}, - "rule_group": {to:[{field: "rsa.misc.rule_group", setter: fld_set}]}, - "rule_template": {to:[{field: "rsa.misc.rule_template", setter: fld_set}]}, - "rule_uid": {to:[{field: "rsa.misc.rule_uid", setter: fld_set}]}, - "rulename": {to:[{field: "rsa.misc.rule_name", setter: fld_set}]}, - "s_certauth": {to:[{field: "rsa.crypto.s_certauth", setter: fld_set}]}, - "s_cipher": {to:[{field: "rsa.crypto.cipher_src", setter: fld_set}]}, - "s_ciphersize": {convert: to_long, to:[{field: "rsa.crypto.cipher_size_src", setter: fld_set}]}, - "s_context": {to:[{field: "rsa.misc.context_subject", setter: fld_set}]}, - "s_sslver": {to:[{field: "rsa.crypto.ssl_ver_src", setter: fld_set}]}, - "sburb": {to:[{field: "rsa.misc.sburb", setter: fld_set}]}, - "scheme": {to:[{field: "rsa.crypto.scheme", setter: fld_set}]}, - "sdomain_fld": {to:[{field: "rsa.misc.sdomain_fld", setter: fld_set}]}, - "search.text": {to:[{field: "rsa.misc.search_text", setter: fld_set}]}, - "sec": {to:[{field: "rsa.misc.sec", setter: fld_set}]}, - "second": {to:[{field: "rsa.misc.second", setter: fld_set}]}, - "sensor": {to:[{field: "rsa.misc.sensor", setter: fld_set}]}, - "sensorname": {to:[{field: "rsa.misc.sensorname", setter: fld_set}]}, - "seqnum": {to:[{field: "rsa.misc.seqnum", setter: fld_set}]}, - "serial_number": {to:[{field: "rsa.misc.serial_number", setter: fld_set}]}, - "service.account": {to:[{field: "rsa.identity.service_account", setter: fld_set}]}, - "session": {to:[{field: "rsa.misc.session", setter: fld_set}]}, - "session.split": {to:[{field: "rsa.internal.session_split", setter: fld_set}]}, - "sessionid": {to:[{field: "rsa.misc.log_session_id", setter: fld_set}]}, - "sessionid1": {to:[{field: "rsa.misc.log_session_id1", setter: fld_set}]}, - "sessiontype": {to:[{field: "rsa.misc.sessiontype", setter: fld_set}]}, - "severity": {to:[{field: "rsa.misc.severity", setter: fld_set}]}, - "sid": {to:[{field: "rsa.identity.user_sid_dst", setter: fld_set}]}, - "sig.name": {to:[{field: "rsa.misc.sig_name", setter: fld_set}]}, - "sigUUID": {to:[{field: "rsa.misc.sigUUID", setter: fld_set}]}, - "sigcat": {to:[{field: "rsa.misc.sigcat", setter: fld_set}]}, - "sigid": {convert: to_long, to:[{field: "rsa.misc.sig_id", setter: fld_set}]}, - "sigid1": {convert: to_long, to:[{field: "rsa.misc.sig_id1", setter: fld_set}]}, - "sigid_string": {to:[{field: "rsa.misc.sig_id_str", setter: fld_set}]}, - "signame": {to:[{field: "rsa.misc.policy_name", setter: fld_prio, prio: 1}]}, - "sigtype": {to:[{field: "rsa.crypto.sig_type", setter: fld_set}]}, - "sinterface": {to:[{field: "rsa.network.sinterface", setter: fld_set}]}, - "site": {to:[{field: "rsa.internal.site", setter: fld_set}]}, - "size": {convert: to_long, to:[{field: "rsa.internal.size", setter: fld_set}]}, - "smask": {to:[{field: "rsa.network.smask", setter: fld_set}]}, - "snmp.oid": {to:[{field: "rsa.misc.snmp_oid", setter: fld_set}]}, - "snmp.value": {to:[{field: "rsa.misc.snmp_value", setter: fld_set}]}, - "sourcefile": {to:[{field: "rsa.internal.sourcefile", setter: fld_set}]}, - "space": {to:[{field: "rsa.misc.space", setter: fld_set}]}, - "space1": {to:[{field: "rsa.misc.space1", setter: fld_set}]}, - "spi": {to:[{field: "rsa.misc.spi", setter: fld_set}]}, - "sql": {to:[{field: "rsa.misc.sql", setter: fld_set}]}, - "src_dn": {to:[{field: "rsa.identity.dn_src", setter: fld_set}]}, - "src_payload": {to:[{field: "rsa.misc.payload_src", setter: fld_set}]}, - "src_spi": {to:[{field: "rsa.misc.spi_src", setter: fld_set}]}, - "src_zone": {to:[{field: "rsa.network.zone_src", setter: fld_set}]}, - "srcburb": {to:[{field: "rsa.misc.srcburb", setter: fld_set}]}, - "srcdom": {to:[{field: "rsa.misc.srcdom", setter: fld_set}]}, - "srcservice": {to:[{field: "rsa.misc.srcservice", setter: fld_set}]}, - "ssid": {to:[{field: "rsa.wireless.wlan_ssid", setter: fld_prio, prio: 0}]}, - "stamp": {convert: to_date, to:[{field: "rsa.time.stamp", setter: fld_set}]}, - "starttime": {convert: to_date, to:[{field: "rsa.time.starttime", setter: fld_set}]}, - "state": {to:[{field: "rsa.misc.state", setter: fld_set}]}, - "statement": {to:[{field: "rsa.internal.statement", setter: fld_set}]}, - "status": {to:[{field: "rsa.misc.status", setter: fld_set}]}, - "status1": {to:[{field: "rsa.misc.status1", setter: fld_set}]}, - "streams": {convert: to_long, to:[{field: "rsa.misc.streams", setter: fld_set}]}, - "subcategory": {to:[{field: "rsa.misc.subcategory", setter: fld_set}]}, - "subject": {to:[{field: "rsa.email.subject", setter: fld_set}]}, - "svcno": {to:[{field: "rsa.misc.svcno", setter: fld_set}]}, - "system": {to:[{field: "rsa.misc.system", setter: fld_set}]}, - "t_context": {to:[{field: "rsa.misc.context_target", setter: fld_set}]}, - "task_name": {to:[{field: "rsa.file.task_name", setter: fld_set}]}, - "tbdstr1": {to:[{field: "rsa.misc.tbdstr1", setter: fld_set}]}, - "tbdstr2": {to:[{field: "rsa.misc.tbdstr2", setter: fld_set}]}, - "tbl_name": {to:[{field: "rsa.db.table_name", setter: fld_set}]}, - "tcp_flags": {convert: to_long, to:[{field: "rsa.misc.tcp_flags", setter: fld_set}]}, - "terminal": {to:[{field: "rsa.misc.terminal", setter: fld_set}]}, - "tgtdom": {to:[{field: "rsa.misc.tgtdom", setter: fld_set}]}, - "tgtdomain": {to:[{field: "rsa.misc.tgtdomain", setter: fld_set}]}, - "threat_name": {to:[{field: "rsa.threat.threat_category", setter: fld_set}]}, - "threat_source": {to:[{field: "rsa.threat.threat_source", setter: fld_set}]}, - "threat_val": {to:[{field: "rsa.threat.threat_desc", setter: fld_set}]}, - "threshold": {to:[{field: "rsa.misc.threshold", setter: fld_set}]}, - "time": {convert: to_date, to:[{field: "rsa.internal.time", setter: fld_set}]}, - "timestamp": {to:[{field: "rsa.time.timestamp", setter: fld_set}]}, - "timezone": {to:[{field: "rsa.time.timezone", setter: fld_set}]}, - "to": {to:[{field: "rsa.email.email_dst", setter: fld_set}]}, - "tos": {convert: to_long, to:[{field: "rsa.misc.tos", setter: fld_set}]}, - "trans_from": {to:[{field: "rsa.email.trans_from", setter: fld_set}]}, - "trans_id": {to:[{field: "rsa.db.transact_id", setter: fld_set}]}, - "trans_to": {to:[{field: "rsa.email.trans_to", setter: fld_set}]}, - "trigger_desc": {to:[{field: "rsa.misc.trigger_desc", setter: fld_set}]}, - "trigger_val": {to:[{field: "rsa.misc.trigger_val", setter: fld_set}]}, - "type": {to:[{field: "rsa.misc.type", setter: fld_set}]}, - "type1": {to:[{field: "rsa.misc.type1", setter: fld_set}]}, - "tzone": {to:[{field: "rsa.time.tzone", setter: fld_set}]}, - "ubc.req": {convert: to_long, to:[{field: "rsa.internal.ubc_req", setter: fld_set}]}, - "ubc.res": {convert: to_long, to:[{field: "rsa.internal.ubc_res", setter: fld_set}]}, - "udb_class": {to:[{field: "rsa.misc.udb_class", setter: fld_set}]}, - "url_fld": {to:[{field: "rsa.misc.url_fld", setter: fld_set}]}, - "urlpage": {to:[{field: "rsa.web.urlpage", setter: fld_set}]}, - "urlroot": {to:[{field: "rsa.web.urlroot", setter: fld_set}]}, - "user_address": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "user_dept": {to:[{field: "rsa.identity.user_dept", setter: fld_set}]}, - "user_div": {to:[{field: "rsa.misc.user_div", setter: fld_set}]}, - "user_fname": {to:[{field: "rsa.identity.firstname", setter: fld_set}]}, - "user_lname": {to:[{field: "rsa.identity.lastname", setter: fld_set}]}, - "user_mname": {to:[{field: "rsa.identity.middlename", setter: fld_set}]}, - "user_org": {to:[{field: "rsa.identity.org", setter: fld_set}]}, - "user_role": {to:[{field: "rsa.identity.user_role", setter: fld_set}]}, - "userid": {to:[{field: "rsa.misc.userid", setter: fld_set}]}, - "username_fld": {to:[{field: "rsa.misc.username_fld", setter: fld_set}]}, - "utcstamp": {to:[{field: "rsa.misc.utcstamp", setter: fld_set}]}, - "v_instafname": {to:[{field: "rsa.misc.v_instafname", setter: fld_set}]}, - "vendor_event_cat": {to:[{field: "rsa.investigations.event_vcat", setter: fld_set}]}, - "version": {to:[{field: "rsa.misc.version", setter: fld_set}]}, - "vid": {to:[{field: "rsa.internal.msg_vid", setter: fld_set}]}, - "virt_data": {to:[{field: "rsa.misc.virt_data", setter: fld_set}]}, - "virusname": {to:[{field: "rsa.misc.virusname", setter: fld_set}]}, - "vlan": {convert: to_long, to:[{field: "rsa.network.vlan", setter: fld_set}]}, - "vlan.name": {to:[{field: "rsa.network.vlan_name", setter: fld_set}]}, - "vm_target": {to:[{field: "rsa.misc.vm_target", setter: fld_set}]}, - "vpnid": {to:[{field: "rsa.misc.vpnid", setter: fld_set}]}, - "vsys": {to:[{field: "rsa.misc.vsys", setter: fld_set}]}, - "vuln_ref": {to:[{field: "rsa.misc.vuln_ref", setter: fld_set}]}, - "web_cookie": {to:[{field: "rsa.web.web_cookie", setter: fld_set}]}, - "web_extension_tmp": {to:[{field: "rsa.web.web_extension_tmp", setter: fld_set}]}, - "web_host": {to:[{field: "rsa.web.alias_host", setter: fld_set}]}, - "web_method": {to:[{field: "rsa.misc.action", setter: fld_append}]}, - "web_page": {to:[{field: "rsa.web.web_page", setter: fld_set}]}, - "web_ref_domain": {to:[{field: "rsa.web.web_ref_domain", setter: fld_set}]}, - "web_ref_host": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "web_ref_page": {to:[{field: "rsa.web.web_ref_page", setter: fld_set}]}, - "web_ref_query": {to:[{field: "rsa.web.web_ref_query", setter: fld_set}]}, - "web_ref_root": {to:[{field: "rsa.web.web_ref_root", setter: fld_set}]}, - "wifi_channel": {convert: to_long, to:[{field: "rsa.wireless.wlan_channel", setter: fld_set}]}, - "wlan": {to:[{field: "rsa.wireless.wlan_name", setter: fld_set}]}, - "word": {to:[{field: "rsa.internal.word", setter: fld_set}]}, - "workspace_desc": {to:[{field: "rsa.misc.workspace", setter: fld_set}]}, - "workstation": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "year": {to:[{field: "rsa.time.year", setter: fld_set}]}, - "zone": {to:[{field: "rsa.network.zone", setter: fld_set}]}, - }; - - function to_date(value) { - switch (typeof (value)) { - case "object": - // This is a Date. But as it was obtained from evt.Get(), the VM - // doesn't see it as a JS Date anymore, thus value instanceof Date === false. - // Have to trust that any object here is a valid Date for Go. - return value; - case "string": - var asDate = new Date(value); - if (!isNaN(asDate)) return asDate; - } - } - - // ECMAScript 5.1 doesn't have Object.MAX_SAFE_INTEGER / Object.MIN_SAFE_INTEGER. - var maxSafeInt = Math.pow(2, 53) - 1; - var minSafeInt = -maxSafeInt; - - function to_long(value) { - var num = parseInt(value); - // Better not to index a number if it's not safe (above 53 bits). - return !isNaN(num) && minSafeInt <= num && num <= maxSafeInt ? num : undefined; - } - - function to_ip(value) { - if (value.indexOf(":") === -1) - return to_ipv4(value); - return to_ipv6(value); - } - - var ipv4_regex = /^(\d+)\.(\d+)\.(\d+)\.(\d+)$/; - var ipv6_hex_regex = /^[0-9A-Fa-f]{1,4}$/; - - function to_ipv4(value) { - var result = ipv4_regex.exec(value); - if (result == null || result.length !== 5) return; - for (var i = 1; i < 5; i++) { - var num = strictToInt(result[i]); - if (isNaN(num) || num < 0 || num > 255) return; - } - return value; - } - - function to_ipv6(value) { - var sqEnd = value.indexOf("]"); - if (sqEnd > -1) { - if (value.charAt(0) !== "[") return; - value = value.substr(1, sqEnd - 1); - } - var zoneOffset = value.indexOf("%"); - if (zoneOffset > -1) { - value = value.substr(0, zoneOffset); - } - var parts = value.split(":"); - if (parts == null || parts.length < 3 || parts.length > 8) return; - var numEmpty = 0; - var innerEmpty = 0; - for (var i = 0; i < parts.length; i++) { - if (parts[i].length === 0) { - numEmpty++; - if (i > 0 && i + 1 < parts.length) innerEmpty++; - } else if (!parts[i].match(ipv6_hex_regex) && - // Accept an IPv6 with a valid IPv4 at the end. - ((i + 1 < parts.length) || !to_ipv4(parts[i]))) { - return; - } - } - return innerEmpty === 0 && parts.length === 8 || innerEmpty === 1 ? value : undefined; - } - - function to_double(value) { - return parseFloat(value); - } - - function to_mac(value) { - // ES doesn't have a mac datatype so it's safe to ingest whatever was captured. - return value; - } - - function to_lowercase(value) { - // to_lowercase is used against keyword fields, which can accept - // any other type (numbers, dates). - return typeof(value) === "string"? value.toLowerCase() : value; - } - - function fld_set(dst, value) { - dst[this.field] = { v: value }; - } - - function fld_append(dst, value) { - if (dst[this.field] === undefined) { - dst[this.field] = { v: [value] }; - } else { - var base = dst[this.field]; - if (base.v.indexOf(value)===-1) base.v.push(value); - } - } - - function fld_prio(dst, value) { - if (dst[this.field] === undefined) { - dst[this.field] = { v: value, prio: this.prio}; - } else if(this.prio < dst[this.field].prio) { - dst[this.field].v = value; - dst[this.field].prio = this.prio; - } - } - - var valid_ecs_outcome = { - 'failure': true, - 'success': true, - 'unknown': true - }; - - function fld_ecs_outcome(dst, value) { - value = value.toLowerCase(); - if (valid_ecs_outcome[value] === undefined) { - value = 'unknown'; - } - if (dst[this.field] === undefined) { - dst[this.field] = { v: value }; - } else if (dst[this.field].v === 'unknown') { - dst[this.field] = { v: value }; - } - } - - function map_all(evt, targets, value) { - for (var i = 0; i < targets.length; i++) { - evt.Put(targets[i], value); - } - } - - function populate_fields(evt) { - var base = evt.Get(FIELDS_OBJECT); - if (base === null) return; - alternate_datetime(evt); - if (map_ecs) { - do_populate(evt, base, ecs_mappings); - } - if (map_rsa) { - do_populate(evt, base, rsa_mappings); - } - if (keep_raw) { - evt.Put("rsa.raw", base); - } - evt.Delete(FIELDS_OBJECT); - } - - var datetime_alt_components = [ - {field: "day", fmts: [[dF]]}, - {field: "year", fmts: [[dW]]}, - {field: "month", fmts: [[dB],[dG]]}, - {field: "date", fmts: [[dW,dSkip,dG,dSkip,dF],[dW,dSkip,dB,dSkip,dF],[dW,dSkip,dR,dSkip,dF]]}, - {field: "hour", fmts: [[dN]]}, - {field: "min", fmts: [[dU]]}, - {field: "secs", fmts: [[dO]]}, - {field: "time", fmts: [[dN, dSkip, dU, dSkip, dO]]}, - ]; - - function alternate_datetime(evt) { - if (evt.Get(FIELDS_PREFIX + "event_time") != null) { - return; - } - var tzOffset = tz_offset; - if (tzOffset === "event") { - tzOffset = evt.Get("event.timezone"); - } - var container = new DateContainer(tzOffset); - for (var i=0; i} %{hfld2}.%{hfld3->} %{p0}"); - - var dup2 = call({ - dest: "nwparser.payload", - fn: STRCAT, - args: [ - field("hfld4"), - constant("_appliance "), - field("p0"), - ], - }); - - var dup3 = call({ - dest: "nwparser.payload", - fn: STRCAT, - args: [ - field("hfld4"), - constant(" "), - field("p0"), - ], - }); - - var dup4 = match_copy("MESSAGE#0:flows/2_1", "nwparser.p0", "p0"); - - var dup5 = setc("eventcategory","1605020000"); - - var dup6 = setf("msg","$MSG"); - - var dup7 = setc("event_source","appliance"); - - var dup8 = setf("sensor","node"); - - var dup9 = date_time({ - dest: "event_time", - args: ["hfld2"], - fmts: [ - [dX], - ], - }); - - var dup10 = match_copy("MESSAGE#1:flows:01/1_2", "nwparser.p0", ""); - - var dup11 = match("MESSAGE#10:ids-alerts:01/1_0", "nwparser.p0", "dhost=%{dmacaddr->} direction=%{p0}"); - - var dup12 = match("MESSAGE#10:ids-alerts:01/1_1", "nwparser.p0", "shost=%{smacaddr->} direction=%{p0}"); - - var dup13 = match("MESSAGE#10:ids-alerts:01/2", "nwparser.p0", "%{direction->} protocol=%{protocol->} src=%{p0}"); - - var dup14 = match_copy("MESSAGE#10:ids-alerts:01/4", "nwparser.p0", "signame"); - - var dup15 = setc("eventcategory","1607000000"); - - var dup16 = setc("event_type","ids-alerts"); - - var dup17 = date_time({ - dest: "event_time", - args: ["fld3"], - fmts: [ - [dX], - ], - }); - - var dup18 = setc("event_type","security_event"); - - var dup19 = constant("Allow"); - - var dup20 = match("HEADER#0:0003/1_0", "nwparser.p0", "%{hfld4}_appliance %{p0}", processor_chain([ - dup2, - ])); - - var dup21 = match("HEADER#0:0003/1_1", "nwparser.p0", "%{hfld4->} %{p0}", processor_chain([ - dup3, - ])); - - var dup22 = linear_select([ - dup11, - dup12, - ]); - - var dup23 = linear_select([ - dup20, - dup21, - ]); - - var part1 = match("HEADER#0:0003/2", "nwparser.p0", "urls %{p0}"); - - var all1 = all_match({ - processors: [ - dup1, - dup23, - part1, - ], - on_success: processor_chain([ - setc("header_id","0003"), - setc("messageid","urls"), - ]), - }); - - var part2 = match("HEADER#1:0002/1_0", "nwparser.p0", "%{node}_appliance events %{p0}"); - - var part3 = match("HEADER#1:0002/1_1", "nwparser.p0", "%{node->} events %{p0}"); - - var select1 = linear_select([ - part2, - part3, - ]); - - var part4 = match_copy("HEADER#1:0002/2", "nwparser.p0", "payload"); - - var all2 = all_match({ - processors: [ - dup1, - select1, - part4, - ], - on_success: processor_chain([ - setc("header_id","0002"), - setc("messageid","events"), - ]), - }); - - var part5 = match("HEADER#2:0001/2", "nwparser.p0", "%{messageid->} %{p0}"); - - var all3 = all_match({ - processors: [ - dup1, - dup23, - part5, - ], - on_success: processor_chain([ - setc("header_id","0001"), - ]), - }); - - var part6 = match("HEADER#3:0005/1_0", "nwparser.p0", "%{hfld4}_appliance %{p0}"); - - var part7 = match("HEADER#3:0005/1_1", "nwparser.p0", "%{hfld4->} %{p0}"); - - var select2 = linear_select([ - part6, - part7, - ]); - - var part8 = match("HEADER#3:0005/2", "nwparser.p0", "%{} %{hfld5->} %{hfld6->} %{messageid->} %{p0}", processor_chain([ - call({ - dest: "nwparser.payload", - fn: STRCAT, - args: [ - field("hfld6"), - constant(" "), - field("messageid"), - constant(" "), - field("p0"), - ], - }), - ])); - - var all4 = all_match({ - processors: [ - dup1, - select2, - part8, - ], - on_success: processor_chain([ - setc("header_id","0005"), - ]), - }); - - var hdr1 = match("HEADER#4:0004", "message", "%{hfld1->} %{hfld2}.%{hfld3->} %{hfld4}_%{space->} %{messageid->} %{payload}", processor_chain([ - setc("header_id","0004"), - ])); - - var select3 = linear_select([ - all1, - all2, - all3, - all4, - hdr1, - ]); - - var part9 = match("MESSAGE#0:flows/0_0", "nwparser.payload", "%{node}_appliance %{p0}"); - - var part10 = match("MESSAGE#0:flows/0_1", "nwparser.payload", "%{node->} %{p0}"); - - var select4 = linear_select([ - part9, - part10, - ]); - - var part11 = match("MESSAGE#0:flows/1", "nwparser.p0", "flows src=%{saddr->} dst=%{daddr->} %{p0}"); - - var part12 = match("MESSAGE#0:flows/2_0", "nwparser.p0", "mac=%{dmacaddr->} %{p0}"); - - var select5 = linear_select([ - part12, - dup4, - ]); - - var part13 = match("MESSAGE#0:flows/3", "nwparser.p0", "protocol=%{protocol->} %{p0}"); - - var part14 = match("MESSAGE#0:flows/4_0", "nwparser.p0", "sport=%{sport->} dport=%{dport->} %{p0}"); - - var part15 = match("MESSAGE#0:flows/4_1", "nwparser.p0", "type=%{event_type->} %{p0}"); - - var select6 = linear_select([ - part14, - part15, - dup4, - ]); - - var part16 = match("MESSAGE#0:flows/5", "nwparser.p0", "pattern: %{fld21->} %{info}"); - - var all5 = all_match({ - processors: [ - select4, - part11, - select5, - part13, - select6, - part16, - ], - on_success: processor_chain([ - dup5, - dup6, - lookup({ - dest: "nwparser.action", - map: map_actionType, - key: field("fld21"), - }), - dup7, - dup8, - dup9, - ]), - }); - - var msg1 = msg("flows", all5); - - var part17 = match("MESSAGE#1:flows:01/0", "nwparser.payload", "%{node->} flows %{action->} src=%{saddr->} dst=%{daddr->} mac=%{smacaddr->} protocol=%{protocol->} %{p0}"); - - var part18 = match("MESSAGE#1:flows:01/1_0", "nwparser.p0", "sport=%{sport->} dport=%{dport->} "); - - var part19 = match("MESSAGE#1:flows:01/1_1", "nwparser.p0", "type=%{event_type->} "); - - var select7 = linear_select([ - part18, - part19, - dup10, - ]); - - var all6 = all_match({ - processors: [ - part17, - select7, - ], - on_success: processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ]), - }); - - var msg2 = msg("flows:01", all6); - - var part20 = match("MESSAGE#2:flows:02", "nwparser.payload", "%{node->} flows %{action}", processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ])); - - var msg3 = msg("flows:02", part20); - - var select8 = linear_select([ - msg1, - msg2, - msg3, - ]); - - var part21 = match("MESSAGE#3:urls/0_0", "nwparser.payload", "%{node}_appliance urls src=%{p0}"); - - var part22 = match("MESSAGE#3:urls/0_1", "nwparser.payload", "%{node->} urls src=%{p0}"); - - var part23 = match("MESSAGE#3:urls/0_2", "nwparser.payload", "src=%{p0}"); - - var select9 = linear_select([ - part21, - part22, - part23, - ]); - - var part24 = match("MESSAGE#3:urls/1", "nwparser.p0", "%{sport}:%{saddr->} dst=%{daddr}:%{dport->} mac=%{macaddr->} %{p0}"); - - var part25 = match("MESSAGE#3:urls/2_0", "nwparser.p0", "agent='%{user_agent}' request: %{p0}"); - - var part26 = match("MESSAGE#3:urls/2_1", "nwparser.p0", "agent=%{user_agent->} request: %{p0}"); - - var part27 = match("MESSAGE#3:urls/2_2", "nwparser.p0", "request: %{p0}"); - - var select10 = linear_select([ - part25, - part26, - part27, - ]); - - var part28 = match("MESSAGE#3:urls/3", "nwparser.p0", "%{} %{web_method}%{url}"); - - var all7 = all_match({ - processors: [ - select9, - part24, - select10, - part28, - ], - on_success: processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ]), - }); - - var msg4 = msg("urls", all7); - - var part29 = match("MESSAGE#4:events/0", "nwparser.payload", "dhcp lease of ip %{saddr->} from server mac %{smacaddr->} for client mac %{p0}"); - - var part30 = match("MESSAGE#4:events/1_0", "nwparser.p0", "%{dmacaddr->} with hostname %{hostname->} from router %{p0}"); - - var part31 = match("MESSAGE#4:events/1_1", "nwparser.p0", "%{dmacaddr->} from router %{p0}"); - - var select11 = linear_select([ - part30, - part31, - ]); - - var part32 = match("MESSAGE#4:events/2", "nwparser.p0", "%{hostip->} on subnet %{mask->} with dns %{dns_a_record}"); - - var all8 = all_match({ - processors: [ - part29, - select11, - part32, - ], - on_success: processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ]), - }); - - var msg5 = msg("events", all8); - - var part33 = match("MESSAGE#5:events:02/0", "nwparser.payload", "content_filtering_block url='%{url}' category0='%{category}' server='%{daddr}:%{dport}'%{p0}"); - - var part34 = match("MESSAGE#5:events:02/1_0", "nwparser.p0", " client_mac='%{dmacaddr}'"); - - var select12 = linear_select([ - part34, - dup10, - ]); - - var all9 = all_match({ - processors: [ - part33, - select12, - ], - on_success: processor_chain([ - dup5, - dup6, - setc("event_description","content_filtering_block"), - dup8, - dup9, - ]), - }); - - var msg6 = msg("events:02", all9); - - var part35 = tagval("MESSAGE#6:events:01", "nwparser.payload", tvm, { - "aid": "fld1", - "arp_resp": "fld2", - "arp_src": "fld3", - "auth_neg_dur": "fld4", - "auth_neg_failed": "fld5", - "category0": "category", - "channel": "fld6", - "client_ip": "daddr", - "client_mac": "dmacaddr", - "connectivity": "fld28", - "dhcp_ip": "fld23", - "dhcp_lease_completed": "fld22", - "dhcp_resp": "fld26", - "dhcp_server": "fld24", - "dhcp_server_mac": "fld25", - "dns_req_rtt": "fld7", - "dns_resp": "fld8", - "dns_server": "fld9", - "duration": "duration", - "full_conn": "fld11", - "http_resp": "fld21", - "identity": "fld12", - "instigator": "fld20", - "ip_resp": "fld13", - "ip_src": "saddr", - "is_8021x": "fld15", - "is_wpa": "fld16", - "last_auth_ago": "fld17", - "radio": "fld18", - "reason": "fld19", - "rssi": "dclass_ratio1", - "server": "daddr", - "type": "event_type", - "url": "url", - "vap": "fld22", - "vpn_type": "fld27", - }, processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ])); - - var msg7 = msg("events:01", part35); - - var part36 = match("MESSAGE#7:events:03", "nwparser.payload", "IDS: %{info}", processor_chain([ - dup5, - dup6, - setc("event_description","events IDS"), - dup8, - dup9, - ])); - - var msg8 = msg("events:03", part36); - - var part37 = match("MESSAGE#8:events:04/0", "nwparser.payload", "dhcp %{p0}"); - - var part38 = match("MESSAGE#8:events:04/1_0", "nwparser.p0", "no offers%{p0}"); - - var part39 = match("MESSAGE#8:events:04/1_1", "nwparser.p0", "release%{p0}"); - - var select13 = linear_select([ - part38, - part39, - ]); - - var part40 = match("MESSAGE#8:events:04/2", "nwparser.p0", "%{}for mac %{macaddr}"); - - var all10 = all_match({ - processors: [ - part37, - select13, - part40, - ], - on_success: processor_chain([ - dup5, - dup6, - setc("event_description","events DHCP"), - dup8, - dup9, - ]), - }); - - var msg9 = msg("events:04", all10); - - var part41 = match("MESSAGE#9:events:05", "nwparser.payload", "MAC %{macaddr->} and MAC %{macaddr->} both claim IP: %{saddr}", processor_chain([ - dup5, - dup6, - setc("event_description"," events MAC"), - dup8, - dup9, - ])); - - var msg10 = msg("events:05", part41); - - var select14 = linear_select([ - msg5, - msg6, - msg7, - msg8, - msg9, - msg10, - ]); - - var part42 = match("MESSAGE#10:ids-alerts:01/0", "nwparser.payload", "%{node->} ids-alerts signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4->} %{p0}"); - - var part43 = match("MESSAGE#10:ids-alerts:01/3_0", "nwparser.p0", "%{saddr}:%{sport->} dst=%{daddr}:%{dport->} message: %{p0}"); - - var part44 = match("MESSAGE#10:ids-alerts:01/3_1", "nwparser.p0", "%{saddr->} dst=%{daddr->} message: %{p0}"); - - var select15 = linear_select([ - part43, - part44, - ]); - - var all11 = all_match({ - processors: [ - part42, - dup22, - dup13, - select15, - dup14, - ], - on_success: processor_chain([ - dup15, - dup6, - dup16, - dup8, - dup17, - ]), - }); - - var msg11 = msg("ids-alerts:01", all11); - - var part45 = match("MESSAGE#11:ids-alerts:03", "nwparser.payload", "%{node->} ids-alerts signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4}direction=%{direction->} protocol=%{protocol->} src=%{saddr}:%{sport}", processor_chain([ - dup15, - dup6, - dup16, - dup8, - dup17, - ])); - - var msg12 = msg("ids-alerts:03", part45); - - var part46 = match("MESSAGE#12:ids-alerts:02", "nwparser.payload", "%{node->} ids-alerts signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4}protocol=%{protocol->} src=%{saddr->} dst=%{daddr}message: %{signame}", processor_chain([ - dup15, - dup6, - dup16, - dup8, - dup17, - ])); - - var msg13 = msg("ids-alerts:02", part46); - - var select16 = linear_select([ - msg11, - msg12, - msg13, - ]); - - var part47 = match("MESSAGE#13:security_event", "nwparser.payload", "%{node}security_event %{event_description->} url=%{url->} src=%{saddr}:%{sport->} dst=%{daddr}:%{dport->} mac=%{smacaddr->} name=%{fld10->} sha256=%{fld11->} disposition=%{disposition->} action=%{action}", processor_chain([ - dup5, - dup6, - dup18, - dup8, - dup9, - ])); - - var msg14 = msg("security_event", part47); - - var part48 = match("MESSAGE#14:security_event:01/0", "nwparser.payload", "%{node->} security_event %{event_description->} signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4->} %{p0}"); - - var part49 = match("MESSAGE#14:security_event:01/3_0", "nwparser.p0", "%{saddr}:%{sport->} dst=%{daddr}:%{dport->} message:%{p0}"); - - var part50 = match("MESSAGE#14:security_event:01/3_1", "nwparser.p0", "%{saddr->} dst=%{daddr->} message:%{p0}"); - - var select17 = linear_select([ - part49, - part50, - ]); - - var all12 = all_match({ - processors: [ - part48, - dup22, - dup13, - select17, - dup14, - ], - on_success: processor_chain([ - dup15, - dup6, - dup18, - dup8, - dup17, - ]), - }); - - var msg15 = msg("security_event:01", all12); - - var select18 = linear_select([ - msg14, - msg15, - ]); - - var chain1 = processor_chain([ - select3, - msgid_select({ - "events": select14, - "flows": select8, - "ids-alerts": select16, - "security_event": select18, - "urls": msg4, - }), - ]); - - var hdr2 = match("HEADER#0:0003/0", "message", "%{hfld1->} %{hfld2}.%{hfld3->} %{p0}"); - - var part51 = match_copy("MESSAGE#0:flows/2_1", "nwparser.p0", "p0"); - - var part52 = match_copy("MESSAGE#1:flows:01/1_2", "nwparser.p0", ""); - - var part53 = match("MESSAGE#10:ids-alerts:01/1_0", "nwparser.p0", "dhost=%{dmacaddr->} direction=%{p0}"); - - var part54 = match("MESSAGE#10:ids-alerts:01/1_1", "nwparser.p0", "shost=%{smacaddr->} direction=%{p0}"); - - var part55 = match("MESSAGE#10:ids-alerts:01/2", "nwparser.p0", "%{direction->} protocol=%{protocol->} src=%{p0}"); - - var part56 = match_copy("MESSAGE#10:ids-alerts:01/4", "nwparser.p0", "signame"); - - var part57 = match("HEADER#0:0003/1_0", "nwparser.p0", "%{hfld4}_appliance %{p0}", processor_chain([ - dup2, - ])); - - var part58 = match("HEADER#0:0003/1_1", "nwparser.p0", "%{hfld4->} %{p0}", processor_chain([ - dup3, - ])); - - var select19 = linear_select([ - dup11, - dup12, - ]); - - var select20 = linear_select([ - dup20, - dup21, - ]); - -- community_id: -- registered_domain: - ignore_missing: true - ignore_failure: true - field: dns.question.name - target_field: dns.question.registered_domain - target_subdomain_field: dns.question.subdomain - target_etld_field: dns.question.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: client.domain - target_field: client.registered_domain - target_subdomain_field: client.subdomain - target_etld_field: client.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: server.domain - target_field: server.registered_domain - target_subdomain_field: server.subdomain - target_etld_field: server.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: destination.domain - target_field: destination.registered_domain - target_subdomain_field: destination.subdomain - target_etld_field: destination.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: source.domain - target_field: source.registered_domain - target_subdomain_field: source.subdomain - target_etld_field: source.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: url.domain - target_field: url.registered_domain - target_subdomain_field: url.subdomain - target_etld_field: url.top_level_domain -- add_locale: ~ diff --git a/packages/cisco_meraki/data_stream/log/agent/stream/tcp.yml.hbs b/packages/cisco_meraki/data_stream/log/agent/stream/tcp.yml.hbs deleted file mode 100644 index c835db3270b..00000000000 --- a/packages/cisco_meraki/data_stream/log/agent/stream/tcp.yml.hbs +++ /dev/null @@ -1,3253 +0,0 @@ -tcp: -host: "{{tcp_host}}:{{tcp_port}}" -tags: -{{#if preserve_original_event}} - - preserve_original_event -{{/if}} -{{#each tags as |tag i|}} - - {{tag}} -{{/each}} -fields_under_root: true -fields: - observer: - vendor: "Cisco" - product: "Meraki" - type: "Wireless" -{{#contains "forwarded" tags}} -publisher_pipeline.disable_host: true -{{/contains}} -processors: -{{#if processors}} -{{processors}} -{{/if}} -- script: - lang: javascript - params: - ecs: true - rsa: {{rsa_fields}} - tz_offset: {{tz_offset}} - keep_raw: {{keep_raw_fields}} - debug: {{debug}} - source: | - // Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one - // or more contributor license agreements. Licensed under the Elastic License; - // you may not use this file except in compliance with the Elastic License. - - /* jshint -W014,-W016,-W097,-W116 */ - - var processor = require("processor"); - var console = require("console"); - - var FLAG_FIELD = "log.flags"; - var FIELDS_OBJECT = "nwparser"; - var FIELDS_PREFIX = FIELDS_OBJECT + "."; - - var defaults = { - debug: false, - ecs: true, - rsa: false, - keep_raw: false, - tz_offset: "local", - strip_priority: true - }; - - var saved_flags = null; - var debug; - var map_ecs; - var map_rsa; - var keep_raw; - var device; - var tz_offset; - var strip_priority; - - // Register params from configuration. - function register(params) { - debug = params.debug !== undefined ? params.debug : defaults.debug; - map_ecs = params.ecs !== undefined ? params.ecs : defaults.ecs; - map_rsa = params.rsa !== undefined ? params.rsa : defaults.rsa; - keep_raw = params.keep_raw !== undefined ? params.keep_raw : defaults.keep_raw; - tz_offset = parse_tz_offset(params.tz_offset !== undefined? params.tz_offset : defaults.tz_offset); - strip_priority = params.strip_priority !== undefined? params.strip_priority : defaults.strip_priority; - device = new DeviceProcessor(); - } - - function parse_tz_offset(offset) { - var date; - var m; - switch(offset) { - // local uses the tz offset from the JS VM. - case "local": - date = new Date(); - // Reversing the sign as we the offset from UTC, not to UTC. - return parse_local_tz_offset(-date.getTimezoneOffset()); - // event uses the tz offset from event.timezone (add_locale processor). - case "event": - return offset; - // Otherwise a tz offset in the form "[+-][0-9]{4}" is required. - default: - m = offset.match(/^([+\-])([0-9]{2}):?([0-9]{2})?$/); - if (m === null || m.length !== 4) { - throw("bad timezone offset: '" + offset + "'. Must have the form +HH:MM"); - } - return m[1] + m[2] + ":" + (m[3]!==undefined? m[3] : "00"); - } - } - - function parse_local_tz_offset(minutes) { - var neg = minutes < 0; - minutes = Math.abs(minutes); - var min = minutes % 60; - var hours = Math.floor(minutes / 60); - var pad2digit = function(n) { - if (n < 10) { return "0" + n;} - return "" + n; - }; - return (neg? "-" : "+") + pad2digit(hours) + ":" + pad2digit(min); - } - - function process(evt) { - // Function register is only called by the processor when `params` are set - // in the processor config. - if (device === undefined) { - register(defaults); - } - return device.process(evt); - } - - function processor_chain(subprocessors) { - var builder = new processor.Chain(); - subprocessors.forEach(builder.Add); - return builder.Build().Run; - } - - function linear_select(subprocessors) { - return function (evt) { - var flags = evt.Get(FLAG_FIELD); - var i; - for (i = 0; i < subprocessors.length; i++) { - evt.Delete(FLAG_FIELD); - if (debug) console.warn("linear_select trying entry " + i); - subprocessors[i](evt); - // Dissect processor succeeded? - if (evt.Get(FLAG_FIELD) == null) break; - if (debug) console.warn("linear_select failed entry " + i); - } - if (flags !== null) { - evt.Put(FLAG_FIELD, flags); - } - if (debug) { - if (i < subprocessors.length) { - console.warn("linear_select matched entry " + i); - } else { - console.warn("linear_select didn't match"); - } - } - }; - } - - function conditional(opt) { - return function(evt) { - if (opt.if(evt)) { - opt.then(evt); - } else if (opt.else) { - opt.else(evt); - } - }; - } - - var strip_syslog_priority = (function() { - var isEnabled = function() { return strip_priority === true; }; - var fetchPRI = field("_pri"); - var fetchPayload = field("payload"); - var removePayload = remove(["payload"]); - var cleanup = remove(["_pri", "payload"]); - var onMatch = function(evt) { - var pri, priStr = fetchPRI(evt); - if (priStr != null - && 0 < priStr.length && priStr.length < 4 - && !isNaN((pri = Number(priStr))) - && 0 <= pri && pri < 192) { - var severity = pri & 7, - facility = pri >> 3; - setc("_severity", "" + severity)(evt); - setc("_facility", "" + facility)(evt); - // Replace message with priority stripped. - evt.Put("message", fetchPayload(evt)); - removePayload(evt); - } else { - // not a valid syslog PRI, cleanup. - cleanup(evt); - } - }; - return conditional({ - if: isEnabled, - then: cleanup_flags(match( - "STRIP_PRI", - "message", - "<%{_pri}>%{payload}", - onMatch - )) - }); - })(); - - function match(id, src, pattern, on_success) { - var dissect = new processor.Dissect({ - field: src, - tokenizer: pattern, - target_prefix: FIELDS_OBJECT, - ignore_failure: true, - overwrite_keys: true, - trim_values: "right" - }); - return function (evt) { - var msg = evt.Get(src); - dissect.Run(evt); - var failed = evt.Get(FLAG_FIELD) != null; - if (debug) { - if (failed) { - console.debug("dissect fail: " + id + " field:" + src); - } else { - console.debug("dissect OK: " + id + " field:" + src); - } - console.debug(" expr: <<" + pattern + ">>"); - console.debug(" input: <<" + msg + ">>"); - } - if (on_success != null && !failed) { - on_success(evt); - } - }; - } - - function match_copy(id, src, dst, on_success) { - dst = FIELDS_PREFIX + dst; - if (dst === FIELDS_PREFIX || dst === src) { - return function (evt) { - if (debug) { - console.debug("noop OK: " + id + " field:" + src); - console.debug(" input: <<" + evt.Get(src) + ">>"); - } - if (on_success != null) on_success(evt); - } - } - return function (evt) { - var msg = evt.Get(src); - evt.Put(dst, msg); - if (debug) { - console.debug("copy OK: " + id + " field:" + src); - console.debug(" target: '" + dst + "'"); - console.debug(" input: <<" + msg + ">>"); - } - if (on_success != null) on_success(evt); - } - } - - function cleanup_flags(processor) { - return function(evt) { - processor(evt); - evt.Delete(FLAG_FIELD); - }; - } - - function all_match(opts) { - return function (evt) { - var i; - for (i = 0; i < opts.processors.length; i++) { - evt.Delete(FLAG_FIELD); - opts.processors[i](evt); - // Dissect processor succeeded? - if (evt.Get(FLAG_FIELD) != null) { - if (debug) console.warn("all_match failure at " + i); - if (opts.on_failure != null) opts.on_failure(evt); - return; - } - if (debug) console.warn("all_match success at " + i); - } - if (opts.on_success != null) opts.on_success(evt); - }; - } - - function msgid_select(mapping) { - return function (evt) { - var msgid = evt.Get(FIELDS_PREFIX + "messageid"); - if (msgid == null) { - if (debug) console.warn("msgid_select: no messageid captured!"); - return; - } - var next = mapping[msgid]; - if (next === undefined) { - if (debug) console.warn("msgid_select: no mapping for messageid:" + msgid); - return; - } - if (debug) console.info("msgid_select: matched key=" + msgid); - return next(evt); - }; - } - - function msg(msg_id, match) { - return function (evt) { - match(evt); - if (evt.Get(FLAG_FIELD) == null) { - evt.Put(FIELDS_PREFIX + "msg_id1", msg_id); - } - }; - } - - var start; - - function save_flags(evt) { - saved_flags = evt.Get(FLAG_FIELD); - evt.Put("event.original", evt.Get("message")); - } - - function restore_flags(evt) { - if (saved_flags !== null) { - evt.Put(FLAG_FIELD, saved_flags); - } - evt.Delete("message"); - } - - function constant(value) { - return function (evt) { - return value; - }; - } - - function field(name) { - var fullname = FIELDS_PREFIX + name; - return function (evt) { - return evt.Get(fullname); - }; - } - - function STRCAT(args) { - var s = ""; - var i; - for (i = 0; i < args.length; i++) { - s += args[i]; - } - return s; - } - - // TODO: Implement - function DIRCHK(args) { - unimplemented("DIRCHK"); - } - - function strictToInt(str) { - return str * 1; - } - - function CALC(args) { - if (args.length !== 3) { - console.warn("skipped call to CALC with " + args.length + " arguments."); - return; - } - var a = strictToInt(args[0]); - var b = strictToInt(args[2]); - if (isNaN(a) || isNaN(b)) { - console.warn("failed evaluating CALC arguments a='" + args[0] + "' b='" + args[2] + "'."); - return; - } - var result; - switch (args[1]) { - case "+": - result = a + b; - break; - case "-": - result = a - b; - break; - case "*": - result = a * b; - break; - default: - // Only * and + seen in the parsers. - console.warn("unknown CALC operation '" + args[1] + "'."); - return; - } - // Always return a string - return result !== undefined ? "" + result : result; - } - - var quoteChars = "\"'`"; - function RMQ(args) { - if(args.length !== 1) { - console.warn("RMQ: only one argument expected"); - return; - } - var value = args[0].trim(); - var n = value.length; - var char; - return n > 1 - && (char=value.charAt(0)) === value.charAt(n-1) - && quoteChars.indexOf(char) !== -1? - value.substr(1, n-2) - : value; - } - - function call(opts) { - var args = new Array(opts.args.length); - return function (evt) { - for (var i = 0; i < opts.args.length; i++) - if ((args[i] = opts.args[i](evt)) == null) return; - var result = opts.fn(args); - if (result != null) { - evt.Put(opts.dest, result); - } - }; - } - - function nop(evt) { - } - - function appendErrorMsg(evt, msg) { - var value = evt.Get("error.message"); - if (value == null) { - value = [msg]; - } else if (msg instanceof Array) { - value.push(msg); - } else { - value = [value, msg]; - } - evt.Put("error.message", value); - } - - function unimplemented(name) { - appendErrorMsg("unimplemented feature: " + name); - } - - function lookup(opts) { - return function (evt) { - var key = opts.key(evt); - if (key == null) return; - var value = opts.map.keyvaluepairs[key]; - if (value === undefined) { - value = opts.map.default; - } - if (value !== undefined) { - evt.Put(opts.dest, value(evt)); - } - }; - } - - function set(fields) { - return new processor.AddFields({ - target: FIELDS_OBJECT, - fields: fields, - }); - } - - function setf(dst, src) { - return function (evt) { - var val = evt.Get(FIELDS_PREFIX + src); - if (val != null) evt.Put(FIELDS_PREFIX + dst, val); - }; - } - - function setc(dst, value) { - return function (evt) { - evt.Put(FIELDS_PREFIX + dst, value); - }; - } - - function set_field(opts) { - return function (evt) { - var val = opts.value(evt); - if (val != null) evt.Put(opts.dest, val); - }; - } - - function dump(label) { - return function (evt) { - console.log("Dump of event at " + label + ": " + JSON.stringify(evt, null, "\t")); - }; - } - - function date_time_join_args(evt, arglist) { - var str = ""; - for (var i = 0; i < arglist.length; i++) { - var fname = FIELDS_PREFIX + arglist[i]; - var val = evt.Get(fname); - if (val != null) { - if (str !== "") str += " "; - str += val; - } else { - if (debug) console.warn("in date_time: input arg " + fname + " is not set"); - } - } - return str; - } - - function to2Digit(num) { - return num? (num < 10? "0" + num : num) : "00"; - } - - // Make two-digit dates 00-69 interpreted as 2000-2069 - // and dates 70-99 translated to 1970-1999. - var twoDigitYearEpoch = 70; - var twoDigitYearCentury = 2000; - - // This is to accept dates up to 2 days in the future, only used when - // no year is specified in a date. 2 days should be enough to account for - // time differences between systems and different tz offsets. - var maxFutureDelta = 2*24*60*60*1000; - - // DateContainer stores date fields and then converts those fields into - // a Date. Necessary because building a Date using its set() methods gives - // different results depending on the order of components. - function DateContainer(tzOffset) { - this.offset = tzOffset === undefined? "Z" : tzOffset; - } - - DateContainer.prototype = { - setYear: function(v) {this.year = v;}, - setMonth: function(v) {this.month = v;}, - setDay: function(v) {this.day = v;}, - setHours: function(v) {this.hours = v;}, - setMinutes: function(v) {this.minutes = v;}, - setSeconds: function(v) {this.seconds = v;}, - - setUNIX: function(v) {this.unix = v;}, - - set2DigitYear: function(v) { - this.year = v < twoDigitYearEpoch? twoDigitYearCentury + v : twoDigitYearCentury + v - 100; - }, - - toDate: function() { - if (this.unix !== undefined) { - return new Date(this.unix * 1000); - } - if (this.day === undefined || this.month === undefined) { - // Can't make a date from this. - return undefined; - } - if (this.year === undefined) { - // A date without a year. Set current year, or previous year - // if date would be in the future. - var now = new Date(); - this.year = now.getFullYear(); - var date = this.toDate(); - if (date.getTime() - now.getTime() > maxFutureDelta) { - date.setFullYear(now.getFullYear() - 1); - } - return date; - } - var MM = to2Digit(this.month); - var DD = to2Digit(this.day); - var hh = to2Digit(this.hours); - var mm = to2Digit(this.minutes); - var ss = to2Digit(this.seconds); - return new Date(this.year + "-" + MM + "-" + DD + "T" + hh + ":" + mm + ":" + ss + this.offset); - } - } - - function date_time_try_pattern(fmt, str, tzOffset) { - var date = new DateContainer(tzOffset); - var pos = date_time_try_pattern_at_pos(fmt, str, 0, date); - return pos !== undefined? date.toDate() : undefined; - } - - function date_time_try_pattern_at_pos(fmt, str, pos, date) { - var len = str.length; - for (var proc = 0; pos !== undefined && pos < len && proc < fmt.length; proc++) { - pos = fmt[proc](str, pos, date); - } - return pos; - } - - function date_time(opts) { - return function (evt) { - var tzOffset = opts.tz || tz_offset; - if (tzOffset === "event") { - tzOffset = evt.Get("event.timezone"); - } - var str = date_time_join_args(evt, opts.args); - for (var i = 0; i < opts.fmts.length; i++) { - var date = date_time_try_pattern(opts.fmts[i], str, tzOffset); - if (date !== undefined) { - evt.Put(FIELDS_PREFIX + opts.dest, date); - return; - } - } - if (debug) console.warn("in date_time: id=" + opts.id + " FAILED: " + str); - }; - } - - var uA = 60 * 60 * 24; - var uD = 60 * 60 * 24; - var uF = 60 * 60; - var uG = 60 * 60 * 24 * 30; - var uH = 60 * 60; - var uI = 60 * 60; - var uJ = 60 * 60 * 24; - var uM = 60 * 60 * 24 * 30; - var uN = 60 * 60; - var uO = 1; - var uS = 1; - var uT = 60; - var uU = 60; - var uc = dc; - - function duration(opts) { - return function(evt) { - var str = date_time_join_args(evt, opts.args); - for (var i = 0; i < opts.fmts.length; i++) { - var seconds = duration_try_pattern(opts.fmts[i], str); - if (seconds !== undefined) { - evt.Put(FIELDS_PREFIX + opts.dest, seconds); - return; - } - } - if (debug) console.warn("in duration: id=" + opts.id + " (s) FAILED: " + str); - }; - } - - function duration_try_pattern(fmt, str) { - var secs = 0; - var pos = 0; - for (var i=0; i [ month_id , how many chars to skip if month in long form ] - "Jan": [0, 4], - "Feb": [1, 5], - "Mar": [2, 2], - "Apr": [3, 2], - "May": [4, 0], - "Jun": [5, 1], - "Jul": [6, 1], - "Aug": [7, 3], - "Sep": [8, 6], - "Oct": [9, 4], - "Nov": [10, 5], - "Dec": [11, 4], - "jan": [0, 4], - "feb": [1, 5], - "mar": [2, 2], - "apr": [3, 2], - "may": [4, 0], - "jun": [5, 1], - "jul": [6, 1], - "aug": [7, 3], - "sep": [8, 6], - "oct": [9, 4], - "nov": [10, 5], - "dec": [11, 4], - }; - - // var dC = undefined; - var dR = dateMonthName(true); - var dB = dateMonthName(false); - var dM = dateFixedWidthNumber("M", 2, 1, 12, DateContainer.prototype.setMonth); - var dG = dateVariableWidthNumber("G", 1, 12, DateContainer.prototype.setMonth); - var dD = dateFixedWidthNumber("D", 2, 1, 31, DateContainer.prototype.setDay); - var dF = dateVariableWidthNumber("F", 1, 31, DateContainer.prototype.setDay); - var dH = dateFixedWidthNumber("H", 2, 0, 24, DateContainer.prototype.setHours); - var dI = dateVariableWidthNumber("I", 0, 24, DateContainer.prototype.setHours); // Accept hours >12 - var dN = dateVariableWidthNumber("N", 0, 24, DateContainer.prototype.setHours); - var dT = dateFixedWidthNumber("T", 2, 0, 59, DateContainer.prototype.setMinutes); - var dU = dateVariableWidthNumber("U", 0, 59, DateContainer.prototype.setMinutes); - var dP = parseAMPM; // AM|PM - var dQ = parseAMPM; // A.M.|P.M - var dS = dateFixedWidthNumber("S", 2, 0, 60, DateContainer.prototype.setSeconds); - var dO = dateVariableWidthNumber("O", 0, 60, DateContainer.prototype.setSeconds); - var dY = dateFixedWidthNumber("Y", 2, 0, 99, DateContainer.prototype.set2DigitYear); - var dW = dateFixedWidthNumber("W", 4, 1000, 9999, DateContainer.prototype.setYear); - var dZ = parseHMS; - var dX = dateVariableWidthNumber("X", 0, 0x10000000000, DateContainer.prototype.setUNIX); - - // parseAMPM parses "A.M", "AM", "P.M", "PM" from logs. - // Only works if this modifier appears after the hour has been read from logs - // which is always the case in the 300 devices. - function parseAMPM(str, pos, date) { - var n = str.length; - var start = skipws(str, pos); - if (start + 2 > n) return; - var head = str.substr(start, 2).toUpperCase(); - var isPM = false; - var skip = false; - switch (head) { - case "A.": - skip = true; - /* falls through */ - case "AM": - break; - case "P.": - skip = true; - /* falls through */ - case "PM": - isPM = true; - break; - default: - if (debug) console.warn("can't parse pos " + start + " as AM/PM: " + str + "(head:" + head + ")"); - return; - } - pos = start + 2; - if (skip) { - if (pos+2 > n || str.substr(pos, 2).toUpperCase() !== "M.") { - if (debug) console.warn("can't parse pos " + start + " as AM/PM: " + str + "(tail)"); - return; - } - pos += 2; - } - var hh = date.hours; - if (isPM) { - // Accept existing hour in 24h format. - if (hh < 12) hh += 12; - } else { - if (hh === 12) hh = 0; - } - date.setHours(hh); - return pos; - } - - function parseHMS(str, pos, date) { - return date_time_try_pattern_at_pos([dN, dc(":"), dU, dc(":"), dO], str, pos, date); - } - - function skipws(str, pos) { - for ( var n = str.length; - pos < n && str.charAt(pos) === " "; - pos++) - ; - return pos; - } - - function skipdigits(str, pos) { - var c; - for (var n = str.length; - pos < n && (c = str.charAt(pos)) >= "0" && c <= "9"; - pos++) - ; - return pos; - } - - function dSkip(str, pos, date) { - var chr; - for (;pos < str.length && (chr=str[pos])<'0' || chr>'9'; pos++) {} - return pos < str.length? pos : undefined; - } - - function dateVariableWidthNumber(fmtChar, min, max, setter) { - return function (str, pos, date) { - var start = skipws(str, pos); - pos = skipdigits(str, start); - var s = str.substr(start, pos - start); - var value = parseInt(s, 10); - if (value >= min && value <= max) { - setter.call(date, value); - return pos; - } - return; - }; - } - - function dateFixedWidthNumber(fmtChar, width, min, max, setter) { - return function (str, pos, date) { - pos = skipws(str, pos); - var n = str.length; - if (pos + width > n) return; - var s = str.substr(pos, width); - var value = parseInt(s, 10); - if (value >= min && value <= max) { - setter.call(date, value); - return pos + width; - } - return; - }; - } - - // Short month name (Jan..Dec). - function dateMonthName(long) { - return function (str, pos, date) { - pos = skipws(str, pos); - var n = str.length; - if (pos + 3 > n) return; - var mon = str.substr(pos, 3); - var idx = shortMonths[mon]; - if (idx === undefined) { - idx = shortMonths[mon.toLowerCase()]; - } - if (idx === undefined) { - //console.warn("parsing date_time: '" + mon + "' is not a valid short month (%B)"); - return; - } - date.setMonth(idx[0]+1); - return pos + 3 + (long ? idx[1] : 0); - }; - } - - function url_wrapper(dst, src, fn) { - return function(evt) { - var value = evt.Get(FIELDS_PREFIX + src), result; - if (value != null && (result = fn(value))!== undefined) { - evt.Put(FIELDS_PREFIX + dst, result); - } else { - console.debug(fn.name + " failed for '" + value + "'"); - } - }; - } - - // The following regular expression for parsing URLs from: - // https://github.com/wizard04wsu/URI_Parsing - // - // The MIT License (MIT) - // - // Copyright (c) 2014 Andrew Harrison - // - // Permission is hereby granted, free of charge, to any person obtaining a copy of - // this software and associated documentation files (the "Software"), to deal in - // the Software without restriction, including without limitation the rights to - // use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of - // the Software, and to permit persons to whom the Software is furnished to do so, - // subject to the following conditions: - // - // The above copyright notice and this permission notice shall be included in all - // copies or substantial portions of the Software. - // - // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - // IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS - // FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR - // COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER - // IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN - // CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. - var uriRegExp = /^([a-z][a-z0-9+.\-]*):(?:\/\/((?:(?=((?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9A-F]{2})*))(\3)@)?(?=(\[[0-9A-F:.]{2,}\]|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9A-F]{2})*))\5(?::(?=(\d*))\6)?)(\/(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/]|%[0-9A-F]{2})*))\8)?|(\/?(?!\/)(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/]|%[0-9A-F]{2})*))\10)?)(?:\?(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/?]|%[0-9A-F]{2})*))\11)?(?:#(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/?]|%[0-9A-F]{2})*))\12)?$/i; - - var uriScheme = 1; - var uriDomain = 5; - var uriPort = 6; - var uriPath = 7; - var uriPathAlt = 9; - var uriQuery = 11; - - function domain(dst, src) { - return url_wrapper(dst, src, extract_domain); - } - - function split_url(value) { - var m = value.match(uriRegExp); - if (m && m[uriDomain]) return m; - // Support input in the form "www.example.net/path", but not "/path". - m = ("null://" + value).match(uriRegExp); - if (m) return m; - } - - function extract_domain(value) { - var m = split_url(value); - if (m && m[uriDomain]) return m[uriDomain]; - } - - var extFromPage = /\.[^.]+$/; - function extract_ext(value) { - var page = extract_page(value); - if (page) { - var m = page.match(extFromPage); - if (m) return m[0]; - } - } - - function ext(dst, src) { - return url_wrapper(dst, src, extract_ext); - } - - function fqdn(dst, src) { - // TODO: fqdn and domain(eTLD+1) are currently the same. - return domain(dst, src); - } - - var pageFromPathRegExp = /\/([^\/]+)$/; - var pageName = 1; - - function extract_page(value) { - value = extract_path(value); - if (!value) return undefined; - var m = value.match(pageFromPathRegExp); - if (m) return m[pageName]; - } - - function page(dst, src) { - return url_wrapper(dst, src, extract_page); - } - - function extract_path(value) { - var m = split_url(value); - return m? m[uriPath] || m[uriPathAlt] : undefined; - } - - function path(dst, src) { - return url_wrapper(dst, src, extract_path); - } - - // Map common schemes to their default port. - // port has to be a string (will be converted at a later stage). - var schemePort = { - "ftp": "21", - "ssh": "22", - "http": "80", - "https": "443", - }; - - function extract_port(value) { - var m = split_url(value); - if (!m) return undefined; - if (m[uriPort]) return m[uriPort]; - if (m[uriScheme]) { - return schemePort[m[uriScheme]]; - } - } - - function port(dst, src) { - return url_wrapper(dst, src, extract_port); - } - - function extract_query(value) { - var m = split_url(value); - if (m && m[uriQuery]) return m[uriQuery]; - } - - function query(dst, src) { - return url_wrapper(dst, src, extract_query); - } - - function extract_root(value) { - var m = split_url(value); - if (m && m[uriDomain] && m[uriDomain]) { - var scheme = m[uriScheme] && m[uriScheme] !== "null"? - m[uriScheme] + "://" : ""; - var port = m[uriPort]? ":" + m[uriPort] : ""; - return scheme + m[uriDomain] + port; - } - } - - function root(dst, src) { - return url_wrapper(dst, src, extract_root); - } - - function tagval(id, src, cfg, keys, on_success) { - var fail = function(evt) { - evt.Put(FLAG_FIELD, "tagval_parsing_error"); - } - if (cfg.kv_separator.length !== 1) { - throw("Invalid TAGVALMAP ValueDelimiter (must have 1 character)"); - } - var quotes_len = cfg.open_quote.length > 0 && cfg.close_quote.length > 0? - cfg.open_quote.length + cfg.close_quote.length : 0; - var kv_regex = new RegExp('^([^' + cfg.kv_separator + ']*)*' + cfg.kv_separator + ' *(.*)*$'); - return function(evt) { - var msg = evt.Get(src); - if (msg === undefined) { - console.warn("tagval: input field is missing"); - return fail(evt); - } - var pairs = msg.split(cfg.pair_separator); - var i; - var success = false; - var prev = ""; - for (i=0; i 0 && - value.length >= cfg.open_quote.length + cfg.close_quote.length && - value.substr(0, cfg.open_quote.length) === cfg.open_quote && - value.substr(value.length - cfg.close_quote.length) === cfg.close_quote) { - value = value.substr(cfg.open_quote.length, value.length - quotes_len); - } - evt.Put(FIELDS_PREFIX + field, value); - success = true; - } - if (!success) { - return fail(evt); - } - if (on_success != null) { - on_success(evt); - } - } - } - - var ecs_mappings = { - "_facility": {convert: to_long, to:[{field: "log.syslog.facility.code", setter: fld_set}]}, - "_pri": {convert: to_long, to:[{field: "log.syslog.priority", setter: fld_set}]}, - "_severity": {convert: to_long, to:[{field: "log.syslog.severity.code", setter: fld_set}]}, - "action": {to:[{field: "event.action", setter: fld_prio, prio: 0}]}, - "administrator": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 4}]}, - "alias.ip": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 3},{field: "related.ip", setter: fld_append}]}, - "alias.ipv6": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 4},{field: "related.ip", setter: fld_append}]}, - "alias.mac": {convert: to_mac, to:[{field: "host.mac", setter: fld_prio, prio: 1}]}, - "application": {to:[{field: "network.application", setter: fld_set}]}, - "bytes": {convert: to_long, to:[{field: "network.bytes", setter: fld_set}]}, - "c_domain": {to:[{field: "source.domain", setter: fld_prio, prio: 1}]}, - "c_logon_id": {to:[{field: "user.id", setter: fld_prio, prio: 2}]}, - "c_user_name": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 8}]}, - "c_username": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 2}]}, - "cctld": {to:[{field: "url.top_level_domain", setter: fld_prio, prio: 1}]}, - "child_pid": {convert: to_long, to:[{field: "process.pid", setter: fld_prio, prio: 1}]}, - "child_pid_val": {to:[{field: "process.title", setter: fld_set}]}, - "child_process": {to:[{field: "process.name", setter: fld_prio, prio: 1}]}, - "city.dst": {to:[{field: "destination.geo.city_name", setter: fld_set}]}, - "city.src": {to:[{field: "source.geo.city_name", setter: fld_set}]}, - "daddr": {convert: to_ip, to:[{field: "destination.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "daddr_v6": {convert: to_ip, to:[{field: "destination.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "ddomain": {to:[{field: "destination.domain", setter: fld_prio, prio: 0}]}, - "devicehostip": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 2},{field: "related.ip", setter: fld_append}]}, - "devicehostmac": {convert: to_mac, to:[{field: "host.mac", setter: fld_prio, prio: 0}]}, - "dhost": {to:[{field: "destination.address", setter: fld_set},{field: "related.hosts", setter: fld_append}]}, - "dinterface": {to:[{field: "observer.egress.interface.name", setter: fld_set}]}, - "direction": {to:[{field: "network.direction", setter: fld_set}]}, - "directory": {to:[{field: "file.directory", setter: fld_set}]}, - "dmacaddr": {convert: to_mac, to:[{field: "destination.mac", setter: fld_set}]}, - "dns.responsetype": {to:[{field: "dns.answers.type", setter: fld_set}]}, - "dns.resptext": {to:[{field: "dns.answers.name", setter: fld_set}]}, - "dns_querytype": {to:[{field: "dns.question.type", setter: fld_set}]}, - "domain": {to:[{field: "server.domain", setter: fld_prio, prio: 0},{field: "related.hosts", setter: fld_append}]}, - "domain.dst": {to:[{field: "destination.domain", setter: fld_prio, prio: 1}]}, - "domain.src": {to:[{field: "source.domain", setter: fld_prio, prio: 2}]}, - "domain_id": {to:[{field: "user.domain", setter: fld_set}]}, - "domainname": {to:[{field: "server.domain", setter: fld_prio, prio: 1}]}, - "dport": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 0}]}, - "dtransaddr": {convert: to_ip, to:[{field: "destination.nat.ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "dtransport": {convert: to_long, to:[{field: "destination.nat.port", setter: fld_prio, prio: 0}]}, - "ec_outcome": {to:[{field: "event.outcome", setter: fld_ecs_outcome}]}, - "event_description": {to:[{field: "message", setter: fld_prio, prio: 0}]}, - "event_source": {to:[{field: "related.hosts", setter: fld_append}]}, - "event_time": {convert: to_date, to:[{field: "@timestamp", setter: fld_set}]}, - "event_type": {to:[{field: "event.action", setter: fld_prio, prio: 1}]}, - "extension": {to:[{field: "file.extension", setter: fld_prio, prio: 1}]}, - "file.attributes": {to:[{field: "file.attributes", setter: fld_set}]}, - "filename": {to:[{field: "file.name", setter: fld_prio, prio: 0}]}, - "filename_size": {convert: to_long, to:[{field: "file.size", setter: fld_set}]}, - "filepath": {to:[{field: "file.path", setter: fld_set}]}, - "filetype": {to:[{field: "file.type", setter: fld_set}]}, - "fqdn": {to:[{field: "related.hosts", setter: fld_append}]}, - "group": {to:[{field: "group.name", setter: fld_set}]}, - "groupid": {to:[{field: "group.id", setter: fld_set}]}, - "host": {to:[{field: "host.name", setter: fld_prio, prio: 1},{field: "related.hosts", setter: fld_append}]}, - "hostip": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "hostip_v6": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "hostname": {to:[{field: "host.name", setter: fld_prio, prio: 0}]}, - "id": {to:[{field: "event.code", setter: fld_prio, prio: 0}]}, - "interface": {to:[{field: "network.interface.name", setter: fld_set}]}, - "ip.orig": {convert: to_ip, to:[{field: "network.forwarded_ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "ip.trans.dst": {convert: to_ip, to:[{field: "destination.nat.ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "ip.trans.src": {convert: to_ip, to:[{field: "source.nat.ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "ipv6.orig": {convert: to_ip, to:[{field: "network.forwarded_ip", setter: fld_prio, prio: 2},{field: "related.ip", setter: fld_append}]}, - "latdec_dst": {convert: to_double, to:[{field: "destination.geo.location.lat", setter: fld_set}]}, - "latdec_src": {convert: to_double, to:[{field: "source.geo.location.lat", setter: fld_set}]}, - "location_city": {to:[{field: "geo.city_name", setter: fld_set}]}, - "location_country": {to:[{field: "geo.country_name", setter: fld_set}]}, - "location_desc": {to:[{field: "geo.name", setter: fld_set}]}, - "location_dst": {to:[{field: "destination.geo.country_name", setter: fld_set}]}, - "location_src": {to:[{field: "source.geo.country_name", setter: fld_set}]}, - "location_state": {to:[{field: "geo.region_name", setter: fld_set}]}, - "logon_id": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 5}]}, - "longdec_dst": {convert: to_double, to:[{field: "destination.geo.location.lon", setter: fld_set}]}, - "longdec_src": {convert: to_double, to:[{field: "source.geo.location.lon", setter: fld_set}]}, - "macaddr": {convert: to_mac, to:[{field: "host.mac", setter: fld_prio, prio: 2}]}, - "messageid": {to:[{field: "event.code", setter: fld_prio, prio: 1}]}, - "method": {to:[{field: "http.request.method", setter: fld_set}]}, - "msg": {to:[{field: "message", setter: fld_set}]}, - "orig_ip": {convert: to_ip, to:[{field: "network.forwarded_ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "owner": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 6}]}, - "packets": {convert: to_long, to:[{field: "network.packets", setter: fld_set}]}, - "parent_pid": {convert: to_long, to:[{field: "process.parent.pid", setter: fld_prio, prio: 0}]}, - "parent_pid_val": {to:[{field: "process.parent.title", setter: fld_set}]}, - "parent_process": {to:[{field: "process.parent.name", setter: fld_prio, prio: 0}]}, - "patient_fullname": {to:[{field: "user.full_name", setter: fld_prio, prio: 1}]}, - "port.dst": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 1}]}, - "port.src": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 1}]}, - "port.trans.dst": {convert: to_long, to:[{field: "destination.nat.port", setter: fld_prio, prio: 1}]}, - "port.trans.src": {convert: to_long, to:[{field: "source.nat.port", setter: fld_prio, prio: 1}]}, - "process": {to:[{field: "process.name", setter: fld_prio, prio: 0}]}, - "process_id": {convert: to_long, to:[{field: "process.pid", setter: fld_prio, prio: 0}]}, - "process_id_src": {convert: to_long, to:[{field: "process.parent.pid", setter: fld_prio, prio: 1}]}, - "process_src": {to:[{field: "process.parent.name", setter: fld_prio, prio: 1}]}, - "product": {to:[{field: "observer.product", setter: fld_set}]}, - "protocol": {to:[{field: "network.protocol", setter: fld_set}]}, - "query": {to:[{field: "url.query", setter: fld_prio, prio: 2}]}, - "rbytes": {convert: to_long, to:[{field: "destination.bytes", setter: fld_set}]}, - "referer": {to:[{field: "http.request.referrer", setter: fld_prio, prio: 1}]}, - "rulename": {to:[{field: "rule.name", setter: fld_set}]}, - "saddr": {convert: to_ip, to:[{field: "source.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "saddr_v6": {convert: to_ip, to:[{field: "source.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "sbytes": {convert: to_long, to:[{field: "source.bytes", setter: fld_set}]}, - "sdomain": {to:[{field: "source.domain", setter: fld_prio, prio: 0}]}, - "service": {to:[{field: "service.name", setter: fld_prio, prio: 1}]}, - "service.name": {to:[{field: "service.name", setter: fld_prio, prio: 0}]}, - "service_account": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 7}]}, - "severity": {to:[{field: "log.level", setter: fld_set}]}, - "shost": {to:[{field: "host.hostname", setter: fld_set},{field: "source.address", setter: fld_set},{field: "related.hosts", setter: fld_append}]}, - "sinterface": {to:[{field: "observer.ingress.interface.name", setter: fld_set}]}, - "sld": {to:[{field: "url.registered_domain", setter: fld_set}]}, - "smacaddr": {convert: to_mac, to:[{field: "source.mac", setter: fld_set}]}, - "sport": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 0}]}, - "stransaddr": {convert: to_ip, to:[{field: "source.nat.ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "stransport": {convert: to_long, to:[{field: "source.nat.port", setter: fld_prio, prio: 0}]}, - "tcp.dstport": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 2}]}, - "tcp.srcport": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 2}]}, - "timezone": {to:[{field: "event.timezone", setter: fld_set}]}, - "tld": {to:[{field: "url.top_level_domain", setter: fld_prio, prio: 0}]}, - "udp.dstport": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 3}]}, - "udp.srcport": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 3}]}, - "uid": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 3}]}, - "url": {to:[{field: "url.original", setter: fld_prio, prio: 1}]}, - "url_raw": {to:[{field: "url.original", setter: fld_prio, prio: 0}]}, - "urldomain": {to:[{field: "url.domain", setter: fld_prio, prio: 0}]}, - "urlquery": {to:[{field: "url.query", setter: fld_prio, prio: 0}]}, - "user": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 0}]}, - "user.id": {to:[{field: "user.id", setter: fld_prio, prio: 1}]}, - "user_agent": {to:[{field: "user_agent.original", setter: fld_set}]}, - "user_fullname": {to:[{field: "user.full_name", setter: fld_prio, prio: 0}]}, - "user_id": {to:[{field: "user.id", setter: fld_prio, prio: 0}]}, - "username": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 1}]}, - "version": {to:[{field: "observer.version", setter: fld_set}]}, - "web_domain": {to:[{field: "url.domain", setter: fld_prio, prio: 1},{field: "related.hosts", setter: fld_append}]}, - "web_extension": {to:[{field: "file.extension", setter: fld_prio, prio: 0}]}, - "web_query": {to:[{field: "url.query", setter: fld_prio, prio: 1}]}, - "web_ref_domain": {to:[{field: "related.hosts", setter: fld_append}]}, - "web_referer": {to:[{field: "http.request.referrer", setter: fld_prio, prio: 0}]}, - "web_root": {to:[{field: "url.path", setter: fld_set}]}, - "webpage": {to:[{field: "file.name", setter: fld_prio, prio: 1}]}, - }; - - var rsa_mappings = { - "access_point": {to:[{field: "rsa.wireless.access_point", setter: fld_set}]}, - "accesses": {to:[{field: "rsa.identity.accesses", setter: fld_set}]}, - "acl_id": {to:[{field: "rsa.misc.acl_id", setter: fld_set}]}, - "acl_op": {to:[{field: "rsa.misc.acl_op", setter: fld_set}]}, - "acl_pos": {to:[{field: "rsa.misc.acl_pos", setter: fld_set}]}, - "acl_table": {to:[{field: "rsa.misc.acl_table", setter: fld_set}]}, - "action": {to:[{field: "rsa.misc.action", setter: fld_append}]}, - "ad_computer_dst": {to:[{field: "rsa.network.ad_computer_dst", setter: fld_set}]}, - "addr": {to:[{field: "rsa.network.addr", setter: fld_set}]}, - "admin": {to:[{field: "rsa.misc.admin", setter: fld_set}]}, - "agent": {to:[{field: "rsa.misc.client", setter: fld_prio, prio: 0}]}, - "agent.id": {to:[{field: "rsa.misc.agent_id", setter: fld_set}]}, - "alarm_id": {to:[{field: "rsa.misc.alarm_id", setter: fld_set}]}, - "alarmname": {to:[{field: "rsa.misc.alarmname", setter: fld_set}]}, - "alert": {to:[{field: "rsa.threat.alert", setter: fld_set}]}, - "alert_id": {to:[{field: "rsa.misc.alert_id", setter: fld_set}]}, - "alias.host": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "analysis.file": {to:[{field: "rsa.investigations.analysis_file", setter: fld_set}]}, - "analysis.service": {to:[{field: "rsa.investigations.analysis_service", setter: fld_set}]}, - "analysis.session": {to:[{field: "rsa.investigations.analysis_session", setter: fld_set}]}, - "app_id": {to:[{field: "rsa.misc.app_id", setter: fld_set}]}, - "attachment": {to:[{field: "rsa.file.attachment", setter: fld_set}]}, - "audit": {to:[{field: "rsa.misc.audit", setter: fld_set}]}, - "audit_class": {to:[{field: "rsa.internal.audit_class", setter: fld_set}]}, - "audit_object": {to:[{field: "rsa.misc.audit_object", setter: fld_set}]}, - "auditdata": {to:[{field: "rsa.misc.auditdata", setter: fld_set}]}, - "authmethod": {to:[{field: "rsa.identity.auth_method", setter: fld_set}]}, - "autorun_type": {to:[{field: "rsa.misc.autorun_type", setter: fld_set}]}, - "bcc": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "benchmark": {to:[{field: "rsa.misc.benchmark", setter: fld_set}]}, - "binary": {to:[{field: "rsa.file.binary", setter: fld_set}]}, - "boc": {to:[{field: "rsa.investigations.boc", setter: fld_set}]}, - "bssid": {to:[{field: "rsa.wireless.wlan_ssid", setter: fld_prio, prio: 1}]}, - "bypass": {to:[{field: "rsa.misc.bypass", setter: fld_set}]}, - "c_sid": {to:[{field: "rsa.identity.user_sid_src", setter: fld_set}]}, - "cache": {to:[{field: "rsa.misc.cache", setter: fld_set}]}, - "cache_hit": {to:[{field: "rsa.misc.cache_hit", setter: fld_set}]}, - "calling_from": {to:[{field: "rsa.misc.phone", setter: fld_prio, prio: 1}]}, - "calling_to": {to:[{field: "rsa.misc.phone", setter: fld_prio, prio: 0}]}, - "category": {to:[{field: "rsa.misc.category", setter: fld_set}]}, - "cc": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "cc.number": {convert: to_long, to:[{field: "rsa.misc.cc_number", setter: fld_set}]}, - "cefversion": {to:[{field: "rsa.misc.cefversion", setter: fld_set}]}, - "cert.serial": {to:[{field: "rsa.crypto.cert_serial", setter: fld_set}]}, - "cert_ca": {to:[{field: "rsa.crypto.cert_ca", setter: fld_set}]}, - "cert_checksum": {to:[{field: "rsa.crypto.cert_checksum", setter: fld_set}]}, - "cert_common": {to:[{field: "rsa.crypto.cert_common", setter: fld_set}]}, - "cert_error": {to:[{field: "rsa.crypto.cert_error", setter: fld_set}]}, - "cert_hostname": {to:[{field: "rsa.crypto.cert_host_name", setter: fld_set}]}, - "cert_hostname_cat": {to:[{field: "rsa.crypto.cert_host_cat", setter: fld_set}]}, - "cert_issuer": {to:[{field: "rsa.crypto.cert_issuer", setter: fld_set}]}, - "cert_keysize": {to:[{field: "rsa.crypto.cert_keysize", setter: fld_set}]}, - "cert_status": {to:[{field: "rsa.crypto.cert_status", setter: fld_set}]}, - "cert_subject": {to:[{field: "rsa.crypto.cert_subject", setter: fld_set}]}, - "cert_username": {to:[{field: "rsa.crypto.cert_username", setter: fld_set}]}, - "cfg.attr": {to:[{field: "rsa.misc.cfg_attr", setter: fld_set}]}, - "cfg.obj": {to:[{field: "rsa.misc.cfg_obj", setter: fld_set}]}, - "cfg.path": {to:[{field: "rsa.misc.cfg_path", setter: fld_set}]}, - "change_attribute": {to:[{field: "rsa.misc.change_attrib", setter: fld_set}]}, - "change_new": {to:[{field: "rsa.misc.change_new", setter: fld_set}]}, - "change_old": {to:[{field: "rsa.misc.change_old", setter: fld_set}]}, - "changes": {to:[{field: "rsa.misc.changes", setter: fld_set}]}, - "checksum": {to:[{field: "rsa.misc.checksum", setter: fld_set}]}, - "checksum.dst": {to:[{field: "rsa.misc.checksum_dst", setter: fld_set}]}, - "checksum.src": {to:[{field: "rsa.misc.checksum_src", setter: fld_set}]}, - "cid": {to:[{field: "rsa.internal.cid", setter: fld_set}]}, - "client": {to:[{field: "rsa.misc.client", setter: fld_prio, prio: 1}]}, - "client_ip": {to:[{field: "rsa.misc.client_ip", setter: fld_set}]}, - "clustermembers": {to:[{field: "rsa.misc.clustermembers", setter: fld_set}]}, - "cmd": {to:[{field: "rsa.misc.cmd", setter: fld_set}]}, - "cn_acttimeout": {to:[{field: "rsa.misc.cn_acttimeout", setter: fld_set}]}, - "cn_asn_dst": {to:[{field: "rsa.web.cn_asn_dst", setter: fld_set}]}, - "cn_asn_src": {to:[{field: "rsa.misc.cn_asn_src", setter: fld_set}]}, - "cn_bgpv4nxthop": {to:[{field: "rsa.misc.cn_bgpv4nxthop", setter: fld_set}]}, - "cn_ctr_dst_code": {to:[{field: "rsa.misc.cn_ctr_dst_code", setter: fld_set}]}, - "cn_dst_tos": {to:[{field: "rsa.misc.cn_dst_tos", setter: fld_set}]}, - "cn_dst_vlan": {to:[{field: "rsa.misc.cn_dst_vlan", setter: fld_set}]}, - "cn_engine_id": {to:[{field: "rsa.misc.cn_engine_id", setter: fld_set}]}, - "cn_engine_type": {to:[{field: "rsa.misc.cn_engine_type", setter: fld_set}]}, - "cn_f_switch": {to:[{field: "rsa.misc.cn_f_switch", setter: fld_set}]}, - "cn_flowsampid": {to:[{field: "rsa.misc.cn_flowsampid", setter: fld_set}]}, - "cn_flowsampintv": {to:[{field: "rsa.misc.cn_flowsampintv", setter: fld_set}]}, - "cn_flowsampmode": {to:[{field: "rsa.misc.cn_flowsampmode", setter: fld_set}]}, - "cn_inacttimeout": {to:[{field: "rsa.misc.cn_inacttimeout", setter: fld_set}]}, - "cn_inpermbyts": {to:[{field: "rsa.misc.cn_inpermbyts", setter: fld_set}]}, - "cn_inpermpckts": {to:[{field: "rsa.misc.cn_inpermpckts", setter: fld_set}]}, - "cn_invalid": {to:[{field: "rsa.misc.cn_invalid", setter: fld_set}]}, - "cn_ip_proto_ver": {to:[{field: "rsa.misc.cn_ip_proto_ver", setter: fld_set}]}, - "cn_ipv4_ident": {to:[{field: "rsa.misc.cn_ipv4_ident", setter: fld_set}]}, - "cn_l_switch": {to:[{field: "rsa.misc.cn_l_switch", setter: fld_set}]}, - "cn_log_did": {to:[{field: "rsa.misc.cn_log_did", setter: fld_set}]}, - "cn_log_rid": {to:[{field: "rsa.misc.cn_log_rid", setter: fld_set}]}, - "cn_max_ttl": {to:[{field: "rsa.misc.cn_max_ttl", setter: fld_set}]}, - "cn_maxpcktlen": {to:[{field: "rsa.misc.cn_maxpcktlen", setter: fld_set}]}, - "cn_min_ttl": {to:[{field: "rsa.misc.cn_min_ttl", setter: fld_set}]}, - "cn_minpcktlen": {to:[{field: "rsa.misc.cn_minpcktlen", setter: fld_set}]}, - "cn_mpls_lbl_1": {to:[{field: "rsa.misc.cn_mpls_lbl_1", setter: fld_set}]}, - "cn_mpls_lbl_10": {to:[{field: "rsa.misc.cn_mpls_lbl_10", setter: fld_set}]}, - "cn_mpls_lbl_2": {to:[{field: "rsa.misc.cn_mpls_lbl_2", setter: fld_set}]}, - "cn_mpls_lbl_3": {to:[{field: "rsa.misc.cn_mpls_lbl_3", setter: fld_set}]}, - "cn_mpls_lbl_4": {to:[{field: "rsa.misc.cn_mpls_lbl_4", setter: fld_set}]}, - "cn_mpls_lbl_5": {to:[{field: "rsa.misc.cn_mpls_lbl_5", setter: fld_set}]}, - "cn_mpls_lbl_6": {to:[{field: "rsa.misc.cn_mpls_lbl_6", setter: fld_set}]}, - "cn_mpls_lbl_7": {to:[{field: "rsa.misc.cn_mpls_lbl_7", setter: fld_set}]}, - "cn_mpls_lbl_8": {to:[{field: "rsa.misc.cn_mpls_lbl_8", setter: fld_set}]}, - "cn_mpls_lbl_9": {to:[{field: "rsa.misc.cn_mpls_lbl_9", setter: fld_set}]}, - "cn_mplstoplabel": {to:[{field: "rsa.misc.cn_mplstoplabel", setter: fld_set}]}, - "cn_mplstoplabip": {to:[{field: "rsa.misc.cn_mplstoplabip", setter: fld_set}]}, - "cn_mul_dst_byt": {to:[{field: "rsa.misc.cn_mul_dst_byt", setter: fld_set}]}, - "cn_mul_dst_pks": {to:[{field: "rsa.misc.cn_mul_dst_pks", setter: fld_set}]}, - "cn_muligmptype": {to:[{field: "rsa.misc.cn_muligmptype", setter: fld_set}]}, - "cn_rpackets": {to:[{field: "rsa.web.cn_rpackets", setter: fld_set}]}, - "cn_sampalgo": {to:[{field: "rsa.misc.cn_sampalgo", setter: fld_set}]}, - "cn_sampint": {to:[{field: "rsa.misc.cn_sampint", setter: fld_set}]}, - "cn_seqctr": {to:[{field: "rsa.misc.cn_seqctr", setter: fld_set}]}, - "cn_spackets": {to:[{field: "rsa.misc.cn_spackets", setter: fld_set}]}, - "cn_src_tos": {to:[{field: "rsa.misc.cn_src_tos", setter: fld_set}]}, - "cn_src_vlan": {to:[{field: "rsa.misc.cn_src_vlan", setter: fld_set}]}, - "cn_sysuptime": {to:[{field: "rsa.misc.cn_sysuptime", setter: fld_set}]}, - "cn_template_id": {to:[{field: "rsa.misc.cn_template_id", setter: fld_set}]}, - "cn_totbytsexp": {to:[{field: "rsa.misc.cn_totbytsexp", setter: fld_set}]}, - "cn_totflowexp": {to:[{field: "rsa.misc.cn_totflowexp", setter: fld_set}]}, - "cn_totpcktsexp": {to:[{field: "rsa.misc.cn_totpcktsexp", setter: fld_set}]}, - "cn_unixnanosecs": {to:[{field: "rsa.misc.cn_unixnanosecs", setter: fld_set}]}, - "cn_v6flowlabel": {to:[{field: "rsa.misc.cn_v6flowlabel", setter: fld_set}]}, - "cn_v6optheaders": {to:[{field: "rsa.misc.cn_v6optheaders", setter: fld_set}]}, - "code": {to:[{field: "rsa.misc.code", setter: fld_set}]}, - "command": {to:[{field: "rsa.misc.command", setter: fld_set}]}, - "comments": {to:[{field: "rsa.misc.comments", setter: fld_set}]}, - "comp_class": {to:[{field: "rsa.misc.comp_class", setter: fld_set}]}, - "comp_name": {to:[{field: "rsa.misc.comp_name", setter: fld_set}]}, - "comp_rbytes": {to:[{field: "rsa.misc.comp_rbytes", setter: fld_set}]}, - "comp_sbytes": {to:[{field: "rsa.misc.comp_sbytes", setter: fld_set}]}, - "component_version": {to:[{field: "rsa.misc.comp_version", setter: fld_set}]}, - "connection_id": {to:[{field: "rsa.misc.connection_id", setter: fld_prio, prio: 1}]}, - "connectionid": {to:[{field: "rsa.misc.connection_id", setter: fld_prio, prio: 0}]}, - "content": {to:[{field: "rsa.misc.content", setter: fld_set}]}, - "content_type": {to:[{field: "rsa.misc.content_type", setter: fld_set}]}, - "content_version": {to:[{field: "rsa.misc.content_version", setter: fld_set}]}, - "context": {to:[{field: "rsa.misc.context", setter: fld_set}]}, - "count": {to:[{field: "rsa.misc.count", setter: fld_set}]}, - "cpu": {convert: to_long, to:[{field: "rsa.misc.cpu", setter: fld_set}]}, - "cpu_data": {to:[{field: "rsa.misc.cpu_data", setter: fld_set}]}, - "criticality": {to:[{field: "rsa.misc.criticality", setter: fld_set}]}, - "cs_agency_dst": {to:[{field: "rsa.misc.cs_agency_dst", setter: fld_set}]}, - "cs_analyzedby": {to:[{field: "rsa.misc.cs_analyzedby", setter: fld_set}]}, - "cs_av_other": {to:[{field: "rsa.misc.cs_av_other", setter: fld_set}]}, - "cs_av_primary": {to:[{field: "rsa.misc.cs_av_primary", setter: fld_set}]}, - "cs_av_secondary": {to:[{field: "rsa.misc.cs_av_secondary", setter: fld_set}]}, - "cs_bgpv6nxthop": {to:[{field: "rsa.misc.cs_bgpv6nxthop", setter: fld_set}]}, - "cs_bit9status": {to:[{field: "rsa.misc.cs_bit9status", setter: fld_set}]}, - "cs_context": {to:[{field: "rsa.misc.cs_context", setter: fld_set}]}, - "cs_control": {to:[{field: "rsa.misc.cs_control", setter: fld_set}]}, - "cs_data": {to:[{field: "rsa.misc.cs_data", setter: fld_set}]}, - "cs_datecret": {to:[{field: "rsa.misc.cs_datecret", setter: fld_set}]}, - "cs_dst_tld": {to:[{field: "rsa.misc.cs_dst_tld", setter: fld_set}]}, - "cs_eth_dst_ven": {to:[{field: "rsa.misc.cs_eth_dst_ven", setter: fld_set}]}, - "cs_eth_src_ven": {to:[{field: "rsa.misc.cs_eth_src_ven", setter: fld_set}]}, - "cs_event_uuid": {to:[{field: "rsa.misc.cs_event_uuid", setter: fld_set}]}, - "cs_filetype": {to:[{field: "rsa.misc.cs_filetype", setter: fld_set}]}, - "cs_fld": {to:[{field: "rsa.misc.cs_fld", setter: fld_set}]}, - "cs_if_desc": {to:[{field: "rsa.misc.cs_if_desc", setter: fld_set}]}, - "cs_if_name": {to:[{field: "rsa.misc.cs_if_name", setter: fld_set}]}, - "cs_ip_next_hop": {to:[{field: "rsa.misc.cs_ip_next_hop", setter: fld_set}]}, - "cs_ipv4dstpre": {to:[{field: "rsa.misc.cs_ipv4dstpre", setter: fld_set}]}, - "cs_ipv4srcpre": {to:[{field: "rsa.misc.cs_ipv4srcpre", setter: fld_set}]}, - "cs_lifetime": {to:[{field: "rsa.misc.cs_lifetime", setter: fld_set}]}, - "cs_log_medium": {to:[{field: "rsa.misc.cs_log_medium", setter: fld_set}]}, - "cs_loginname": {to:[{field: "rsa.misc.cs_loginname", setter: fld_set}]}, - "cs_modulescore": {to:[{field: "rsa.misc.cs_modulescore", setter: fld_set}]}, - "cs_modulesign": {to:[{field: "rsa.misc.cs_modulesign", setter: fld_set}]}, - "cs_opswatresult": {to:[{field: "rsa.misc.cs_opswatresult", setter: fld_set}]}, - "cs_payload": {to:[{field: "rsa.misc.cs_payload", setter: fld_set}]}, - "cs_registrant": {to:[{field: "rsa.misc.cs_registrant", setter: fld_set}]}, - "cs_registrar": {to:[{field: "rsa.misc.cs_registrar", setter: fld_set}]}, - "cs_represult": {to:[{field: "rsa.misc.cs_represult", setter: fld_set}]}, - "cs_rpayload": {to:[{field: "rsa.misc.cs_rpayload", setter: fld_set}]}, - "cs_sampler_name": {to:[{field: "rsa.misc.cs_sampler_name", setter: fld_set}]}, - "cs_sourcemodule": {to:[{field: "rsa.misc.cs_sourcemodule", setter: fld_set}]}, - "cs_streams": {to:[{field: "rsa.misc.cs_streams", setter: fld_set}]}, - "cs_targetmodule": {to:[{field: "rsa.misc.cs_targetmodule", setter: fld_set}]}, - "cs_v6nxthop": {to:[{field: "rsa.misc.cs_v6nxthop", setter: fld_set}]}, - "cs_whois_server": {to:[{field: "rsa.misc.cs_whois_server", setter: fld_set}]}, - "cs_yararesult": {to:[{field: "rsa.misc.cs_yararesult", setter: fld_set}]}, - "cve": {to:[{field: "rsa.misc.cve", setter: fld_set}]}, - "d_certauth": {to:[{field: "rsa.crypto.d_certauth", setter: fld_set}]}, - "d_cipher": {to:[{field: "rsa.crypto.cipher_dst", setter: fld_set}]}, - "d_ciphersize": {convert: to_long, to:[{field: "rsa.crypto.cipher_size_dst", setter: fld_set}]}, - "d_sslver": {to:[{field: "rsa.crypto.ssl_ver_dst", setter: fld_set}]}, - "data": {to:[{field: "rsa.internal.data", setter: fld_set}]}, - "data_type": {to:[{field: "rsa.misc.data_type", setter: fld_set}]}, - "date": {to:[{field: "rsa.time.date", setter: fld_set}]}, - "datetime": {to:[{field: "rsa.time.datetime", setter: fld_set}]}, - "day": {to:[{field: "rsa.time.day", setter: fld_set}]}, - "db_id": {to:[{field: "rsa.db.db_id", setter: fld_set}]}, - "db_name": {to:[{field: "rsa.db.database", setter: fld_set}]}, - "db_pid": {convert: to_long, to:[{field: "rsa.db.db_pid", setter: fld_set}]}, - "dclass_counter1": {convert: to_long, to:[{field: "rsa.counters.dclass_c1", setter: fld_set}]}, - "dclass_counter1_string": {to:[{field: "rsa.counters.dclass_c1_str", setter: fld_set}]}, - "dclass_counter2": {convert: to_long, to:[{field: "rsa.counters.dclass_c2", setter: fld_set}]}, - "dclass_counter2_string": {to:[{field: "rsa.counters.dclass_c2_str", setter: fld_set}]}, - "dclass_counter3": {convert: to_long, to:[{field: "rsa.counters.dclass_c3", setter: fld_set}]}, - "dclass_counter3_string": {to:[{field: "rsa.counters.dclass_c3_str", setter: fld_set}]}, - "dclass_ratio1": {to:[{field: "rsa.counters.dclass_r1", setter: fld_set}]}, - "dclass_ratio1_string": {to:[{field: "rsa.counters.dclass_r1_str", setter: fld_set}]}, - "dclass_ratio2": {to:[{field: "rsa.counters.dclass_r2", setter: fld_set}]}, - "dclass_ratio2_string": {to:[{field: "rsa.counters.dclass_r2_str", setter: fld_set}]}, - "dclass_ratio3": {to:[{field: "rsa.counters.dclass_r3", setter: fld_set}]}, - "dclass_ratio3_string": {to:[{field: "rsa.counters.dclass_r3_str", setter: fld_set}]}, - "dead": {convert: to_long, to:[{field: "rsa.internal.dead", setter: fld_set}]}, - "description": {to:[{field: "rsa.misc.description", setter: fld_set}]}, - "detail": {to:[{field: "rsa.misc.event_desc", setter: fld_set}]}, - "device": {to:[{field: "rsa.misc.device_name", setter: fld_set}]}, - "device.class": {to:[{field: "rsa.internal.device_class", setter: fld_set}]}, - "device.group": {to:[{field: "rsa.internal.device_group", setter: fld_set}]}, - "device.host": {to:[{field: "rsa.internal.device_host", setter: fld_set}]}, - "device.ip": {convert: to_ip, to:[{field: "rsa.internal.device_ip", setter: fld_set}]}, - "device.ipv6": {convert: to_ip, to:[{field: "rsa.internal.device_ipv6", setter: fld_set}]}, - "device.type": {to:[{field: "rsa.internal.device_type", setter: fld_set}]}, - "device.type.id": {convert: to_long, to:[{field: "rsa.internal.device_type_id", setter: fld_set}]}, - "devicehostname": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "devvendor": {to:[{field: "rsa.misc.devvendor", setter: fld_set}]}, - "dhost": {to:[{field: "rsa.network.host_dst", setter: fld_set}]}, - "did": {to:[{field: "rsa.internal.did", setter: fld_set}]}, - "dinterface": {to:[{field: "rsa.network.dinterface", setter: fld_set}]}, - "directory.dst": {to:[{field: "rsa.file.directory_dst", setter: fld_set}]}, - "directory.src": {to:[{field: "rsa.file.directory_src", setter: fld_set}]}, - "disk_volume": {to:[{field: "rsa.storage.disk_volume", setter: fld_set}]}, - "disposition": {to:[{field: "rsa.misc.disposition", setter: fld_set}]}, - "distance": {to:[{field: "rsa.misc.distance", setter: fld_set}]}, - "dmask": {to:[{field: "rsa.network.dmask", setter: fld_set}]}, - "dn": {to:[{field: "rsa.identity.dn", setter: fld_set}]}, - "dns_a_record": {to:[{field: "rsa.network.dns_a_record", setter: fld_set}]}, - "dns_cname_record": {to:[{field: "rsa.network.dns_cname_record", setter: fld_set}]}, - "dns_id": {to:[{field: "rsa.network.dns_id", setter: fld_set}]}, - "dns_opcode": {to:[{field: "rsa.network.dns_opcode", setter: fld_set}]}, - "dns_ptr_record": {to:[{field: "rsa.network.dns_ptr_record", setter: fld_set}]}, - "dns_resp": {to:[{field: "rsa.network.dns_resp", setter: fld_set}]}, - "dns_type": {to:[{field: "rsa.network.dns_type", setter: fld_set}]}, - "doc_number": {convert: to_long, to:[{field: "rsa.misc.doc_number", setter: fld_set}]}, - "domain": {to:[{field: "rsa.network.domain", setter: fld_set}]}, - "domain1": {to:[{field: "rsa.network.domain1", setter: fld_set}]}, - "dst_dn": {to:[{field: "rsa.identity.dn_dst", setter: fld_set}]}, - "dst_payload": {to:[{field: "rsa.misc.payload_dst", setter: fld_set}]}, - "dst_spi": {to:[{field: "rsa.misc.spi_dst", setter: fld_set}]}, - "dst_zone": {to:[{field: "rsa.network.zone_dst", setter: fld_set}]}, - "dstburb": {to:[{field: "rsa.misc.dstburb", setter: fld_set}]}, - "duration": {convert: to_double, to:[{field: "rsa.time.duration_time", setter: fld_set}]}, - "duration_string": {to:[{field: "rsa.time.duration_str", setter: fld_set}]}, - "ec_activity": {to:[{field: "rsa.investigations.ec_activity", setter: fld_set}]}, - "ec_outcome": {to:[{field: "rsa.investigations.ec_outcome", setter: fld_set}]}, - "ec_subject": {to:[{field: "rsa.investigations.ec_subject", setter: fld_set}]}, - "ec_theme": {to:[{field: "rsa.investigations.ec_theme", setter: fld_set}]}, - "edomain": {to:[{field: "rsa.misc.edomain", setter: fld_set}]}, - "edomaub": {to:[{field: "rsa.misc.edomaub", setter: fld_set}]}, - "effective_time": {convert: to_date, to:[{field: "rsa.time.effective_time", setter: fld_set}]}, - "ein.number": {convert: to_long, to:[{field: "rsa.misc.ein_number", setter: fld_set}]}, - "email": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "encryption_type": {to:[{field: "rsa.crypto.crypto", setter: fld_set}]}, - "endtime": {convert: to_date, to:[{field: "rsa.time.endtime", setter: fld_set}]}, - "entropy.req": {convert: to_long, to:[{field: "rsa.internal.entropy_req", setter: fld_set}]}, - "entropy.res": {convert: to_long, to:[{field: "rsa.internal.entropy_res", setter: fld_set}]}, - "entry": {to:[{field: "rsa.internal.entry", setter: fld_set}]}, - "eoc": {to:[{field: "rsa.investigations.eoc", setter: fld_set}]}, - "error": {to:[{field: "rsa.misc.error", setter: fld_set}]}, - "eth_type": {convert: to_long, to:[{field: "rsa.network.eth_type", setter: fld_set}]}, - "euid": {to:[{field: "rsa.misc.euid", setter: fld_set}]}, - "event.cat": {convert: to_long, to:[{field: "rsa.investigations.event_cat", setter: fld_prio, prio: 1}]}, - "event.cat.name": {to:[{field: "rsa.investigations.event_cat_name", setter: fld_prio, prio: 1}]}, - "event_cat": {convert: to_long, to:[{field: "rsa.investigations.event_cat", setter: fld_prio, prio: 0}]}, - "event_cat_name": {to:[{field: "rsa.investigations.event_cat_name", setter: fld_prio, prio: 0}]}, - "event_category": {to:[{field: "rsa.misc.event_category", setter: fld_set}]}, - "event_computer": {to:[{field: "rsa.misc.event_computer", setter: fld_set}]}, - "event_counter": {convert: to_long, to:[{field: "rsa.counters.event_counter", setter: fld_set}]}, - "event_description": {to:[{field: "rsa.internal.event_desc", setter: fld_set}]}, - "event_id": {to:[{field: "rsa.misc.event_id", setter: fld_set}]}, - "event_log": {to:[{field: "rsa.misc.event_log", setter: fld_set}]}, - "event_name": {to:[{field: "rsa.internal.event_name", setter: fld_set}]}, - "event_queue_time": {convert: to_date, to:[{field: "rsa.time.event_queue_time", setter: fld_set}]}, - "event_source": {to:[{field: "rsa.misc.event_source", setter: fld_set}]}, - "event_state": {to:[{field: "rsa.misc.event_state", setter: fld_set}]}, - "event_time": {convert: to_date, to:[{field: "rsa.time.event_time", setter: fld_set}]}, - "event_time_str": {to:[{field: "rsa.time.event_time_str", setter: fld_prio, prio: 1}]}, - "event_time_string": {to:[{field: "rsa.time.event_time_str", setter: fld_prio, prio: 0}]}, - "event_type": {to:[{field: "rsa.misc.event_type", setter: fld_set}]}, - "event_user": {to:[{field: "rsa.misc.event_user", setter: fld_set}]}, - "eventtime": {to:[{field: "rsa.time.eventtime", setter: fld_set}]}, - "expected_val": {to:[{field: "rsa.misc.expected_val", setter: fld_set}]}, - "expiration_time": {convert: to_date, to:[{field: "rsa.time.expire_time", setter: fld_set}]}, - "expiration_time_string": {to:[{field: "rsa.time.expire_time_str", setter: fld_set}]}, - "facility": {to:[{field: "rsa.misc.facility", setter: fld_set}]}, - "facilityname": {to:[{field: "rsa.misc.facilityname", setter: fld_set}]}, - "faddr": {to:[{field: "rsa.network.faddr", setter: fld_set}]}, - "fcatnum": {to:[{field: "rsa.misc.fcatnum", setter: fld_set}]}, - "federated_idp": {to:[{field: "rsa.identity.federated_idp", setter: fld_set}]}, - "federated_sp": {to:[{field: "rsa.identity.federated_sp", setter: fld_set}]}, - "feed.category": {to:[{field: "rsa.internal.feed_category", setter: fld_set}]}, - "feed_desc": {to:[{field: "rsa.internal.feed_desc", setter: fld_set}]}, - "feed_name": {to:[{field: "rsa.internal.feed_name", setter: fld_set}]}, - "fhost": {to:[{field: "rsa.network.fhost", setter: fld_set}]}, - "file_entropy": {convert: to_double, to:[{field: "rsa.file.file_entropy", setter: fld_set}]}, - "file_vendor": {to:[{field: "rsa.file.file_vendor", setter: fld_set}]}, - "filename_dst": {to:[{field: "rsa.file.filename_dst", setter: fld_set}]}, - "filename_src": {to:[{field: "rsa.file.filename_src", setter: fld_set}]}, - "filename_tmp": {to:[{field: "rsa.file.filename_tmp", setter: fld_set}]}, - "filesystem": {to:[{field: "rsa.file.filesystem", setter: fld_set}]}, - "filter": {to:[{field: "rsa.misc.filter", setter: fld_set}]}, - "finterface": {to:[{field: "rsa.misc.finterface", setter: fld_set}]}, - "flags": {to:[{field: "rsa.misc.flags", setter: fld_set}]}, - "forensic_info": {to:[{field: "rsa.misc.forensic_info", setter: fld_set}]}, - "forward.ip": {convert: to_ip, to:[{field: "rsa.internal.forward_ip", setter: fld_set}]}, - "forward.ipv6": {convert: to_ip, to:[{field: "rsa.internal.forward_ipv6", setter: fld_set}]}, - "found": {to:[{field: "rsa.misc.found", setter: fld_set}]}, - "fport": {to:[{field: "rsa.network.fport", setter: fld_set}]}, - "fqdn": {to:[{field: "rsa.web.fqdn", setter: fld_set}]}, - "fresult": {convert: to_long, to:[{field: "rsa.misc.fresult", setter: fld_set}]}, - "from": {to:[{field: "rsa.email.email_src", setter: fld_set}]}, - "gaddr": {to:[{field: "rsa.misc.gaddr", setter: fld_set}]}, - "gateway": {to:[{field: "rsa.network.gateway", setter: fld_set}]}, - "gmtdate": {to:[{field: "rsa.time.gmtdate", setter: fld_set}]}, - "gmttime": {to:[{field: "rsa.time.gmttime", setter: fld_set}]}, - "group": {to:[{field: "rsa.misc.group", setter: fld_set}]}, - "group_object": {to:[{field: "rsa.misc.group_object", setter: fld_set}]}, - "groupid": {to:[{field: "rsa.misc.group_id", setter: fld_set}]}, - "h_code": {to:[{field: "rsa.internal.hcode", setter: fld_set}]}, - "hardware_id": {to:[{field: "rsa.misc.hardware_id", setter: fld_set}]}, - "header.id": {to:[{field: "rsa.internal.header_id", setter: fld_set}]}, - "host.orig": {to:[{field: "rsa.network.host_orig", setter: fld_set}]}, - "host.state": {to:[{field: "rsa.endpoint.host_state", setter: fld_set}]}, - "host.type": {to:[{field: "rsa.network.host_type", setter: fld_set}]}, - "host_role": {to:[{field: "rsa.identity.host_role", setter: fld_set}]}, - "hostid": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "hostname": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "hour": {to:[{field: "rsa.time.hour", setter: fld_set}]}, - "https.insact": {to:[{field: "rsa.crypto.https_insact", setter: fld_set}]}, - "https.valid": {to:[{field: "rsa.crypto.https_valid", setter: fld_set}]}, - "icmpcode": {convert: to_long, to:[{field: "rsa.network.icmp_code", setter: fld_set}]}, - "icmptype": {convert: to_long, to:[{field: "rsa.network.icmp_type", setter: fld_set}]}, - "id": {to:[{field: "rsa.misc.reference_id", setter: fld_set}]}, - "id1": {to:[{field: "rsa.misc.reference_id1", setter: fld_set}]}, - "id2": {to:[{field: "rsa.misc.reference_id2", setter: fld_set}]}, - "id3": {to:[{field: "rsa.misc.id3", setter: fld_set}]}, - "ike": {to:[{field: "rsa.crypto.ike", setter: fld_set}]}, - "ike_cookie1": {to:[{field: "rsa.crypto.ike_cookie1", setter: fld_set}]}, - "ike_cookie2": {to:[{field: "rsa.crypto.ike_cookie2", setter: fld_set}]}, - "im_buddyid": {to:[{field: "rsa.misc.im_buddyid", setter: fld_set}]}, - "im_buddyname": {to:[{field: "rsa.misc.im_buddyname", setter: fld_set}]}, - "im_client": {to:[{field: "rsa.misc.im_client", setter: fld_set}]}, - "im_croomid": {to:[{field: "rsa.misc.im_croomid", setter: fld_set}]}, - "im_croomtype": {to:[{field: "rsa.misc.im_croomtype", setter: fld_set}]}, - "im_members": {to:[{field: "rsa.misc.im_members", setter: fld_set}]}, - "im_userid": {to:[{field: "rsa.misc.im_userid", setter: fld_set}]}, - "im_username": {to:[{field: "rsa.misc.im_username", setter: fld_set}]}, - "index": {to:[{field: "rsa.misc.index", setter: fld_set}]}, - "info": {to:[{field: "rsa.db.index", setter: fld_set}]}, - "inode": {convert: to_long, to:[{field: "rsa.internal.inode", setter: fld_set}]}, - "inout": {to:[{field: "rsa.misc.inout", setter: fld_set}]}, - "instance": {to:[{field: "rsa.db.instance", setter: fld_set}]}, - "interface": {to:[{field: "rsa.network.interface", setter: fld_set}]}, - "inv.category": {to:[{field: "rsa.investigations.inv_category", setter: fld_set}]}, - "inv.context": {to:[{field: "rsa.investigations.inv_context", setter: fld_set}]}, - "ioc": {to:[{field: "rsa.investigations.ioc", setter: fld_set}]}, - "ip_proto": {convert: to_long, to:[{field: "rsa.network.ip_proto", setter: fld_set}]}, - "ipkt": {to:[{field: "rsa.misc.ipkt", setter: fld_set}]}, - "ipscat": {to:[{field: "rsa.misc.ipscat", setter: fld_set}]}, - "ipspri": {to:[{field: "rsa.misc.ipspri", setter: fld_set}]}, - "jobname": {to:[{field: "rsa.misc.jobname", setter: fld_set}]}, - "jobnum": {to:[{field: "rsa.misc.job_num", setter: fld_set}]}, - "laddr": {to:[{field: "rsa.network.laddr", setter: fld_set}]}, - "language": {to:[{field: "rsa.misc.language", setter: fld_set}]}, - "latitude": {to:[{field: "rsa.misc.latitude", setter: fld_set}]}, - "lc.cid": {to:[{field: "rsa.internal.lc_cid", setter: fld_set}]}, - "lc.ctime": {convert: to_date, to:[{field: "rsa.internal.lc_ctime", setter: fld_set}]}, - "ldap": {to:[{field: "rsa.identity.ldap", setter: fld_set}]}, - "ldap.query": {to:[{field: "rsa.identity.ldap_query", setter: fld_set}]}, - "ldap.response": {to:[{field: "rsa.identity.ldap_response", setter: fld_set}]}, - "level": {convert: to_long, to:[{field: "rsa.internal.level", setter: fld_set}]}, - "lhost": {to:[{field: "rsa.network.lhost", setter: fld_set}]}, - "library": {to:[{field: "rsa.misc.library", setter: fld_set}]}, - "lifetime": {convert: to_long, to:[{field: "rsa.misc.lifetime", setter: fld_set}]}, - "linenum": {to:[{field: "rsa.misc.linenum", setter: fld_set}]}, - "link": {to:[{field: "rsa.misc.link", setter: fld_set}]}, - "linterface": {to:[{field: "rsa.network.linterface", setter: fld_set}]}, - "list_name": {to:[{field: "rsa.misc.list_name", setter: fld_set}]}, - "listnum": {to:[{field: "rsa.misc.listnum", setter: fld_set}]}, - "load_data": {to:[{field: "rsa.misc.load_data", setter: fld_set}]}, - "location_floor": {to:[{field: "rsa.misc.location_floor", setter: fld_set}]}, - "location_mark": {to:[{field: "rsa.misc.location_mark", setter: fld_set}]}, - "log_id": {to:[{field: "rsa.misc.log_id", setter: fld_set}]}, - "log_type": {to:[{field: "rsa.misc.log_type", setter: fld_set}]}, - "logid": {to:[{field: "rsa.misc.logid", setter: fld_set}]}, - "logip": {to:[{field: "rsa.misc.logip", setter: fld_set}]}, - "logname": {to:[{field: "rsa.misc.logname", setter: fld_set}]}, - "logon_type": {to:[{field: "rsa.identity.logon_type", setter: fld_set}]}, - "logon_type_desc": {to:[{field: "rsa.identity.logon_type_desc", setter: fld_set}]}, - "longitude": {to:[{field: "rsa.misc.longitude", setter: fld_set}]}, - "lport": {to:[{field: "rsa.misc.lport", setter: fld_set}]}, - "lread": {convert: to_long, to:[{field: "rsa.db.lread", setter: fld_set}]}, - "lun": {to:[{field: "rsa.storage.lun", setter: fld_set}]}, - "lwrite": {convert: to_long, to:[{field: "rsa.db.lwrite", setter: fld_set}]}, - "macaddr": {convert: to_mac, to:[{field: "rsa.network.eth_host", setter: fld_set}]}, - "mail_id": {to:[{field: "rsa.misc.mail_id", setter: fld_set}]}, - "mask": {to:[{field: "rsa.network.mask", setter: fld_set}]}, - "match": {to:[{field: "rsa.misc.match", setter: fld_set}]}, - "mbug_data": {to:[{field: "rsa.misc.mbug_data", setter: fld_set}]}, - "mcb.req": {convert: to_long, to:[{field: "rsa.internal.mcb_req", setter: fld_set}]}, - "mcb.res": {convert: to_long, to:[{field: "rsa.internal.mcb_res", setter: fld_set}]}, - "mcbc.req": {convert: to_long, to:[{field: "rsa.internal.mcbc_req", setter: fld_set}]}, - "mcbc.res": {convert: to_long, to:[{field: "rsa.internal.mcbc_res", setter: fld_set}]}, - "medium": {convert: to_long, to:[{field: "rsa.internal.medium", setter: fld_set}]}, - "message": {to:[{field: "rsa.internal.message", setter: fld_set}]}, - "message_body": {to:[{field: "rsa.misc.message_body", setter: fld_set}]}, - "messageid": {to:[{field: "rsa.internal.messageid", setter: fld_set}]}, - "min": {to:[{field: "rsa.time.min", setter: fld_set}]}, - "misc": {to:[{field: "rsa.misc.misc", setter: fld_set}]}, - "misc_name": {to:[{field: "rsa.misc.misc_name", setter: fld_set}]}, - "mode": {to:[{field: "rsa.misc.mode", setter: fld_set}]}, - "month": {to:[{field: "rsa.time.month", setter: fld_set}]}, - "msg": {to:[{field: "rsa.internal.msg", setter: fld_set}]}, - "msgIdPart1": {to:[{field: "rsa.misc.msgIdPart1", setter: fld_set}]}, - "msgIdPart2": {to:[{field: "rsa.misc.msgIdPart2", setter: fld_set}]}, - "msgIdPart3": {to:[{field: "rsa.misc.msgIdPart3", setter: fld_set}]}, - "msgIdPart4": {to:[{field: "rsa.misc.msgIdPart4", setter: fld_set}]}, - "msg_id": {to:[{field: "rsa.internal.msg_id", setter: fld_set}]}, - "msg_type": {to:[{field: "rsa.misc.msg_type", setter: fld_set}]}, - "msgid": {to:[{field: "rsa.misc.msgid", setter: fld_set}]}, - "name": {to:[{field: "rsa.misc.name", setter: fld_set}]}, - "netname": {to:[{field: "rsa.network.netname", setter: fld_set}]}, - "netsessid": {to:[{field: "rsa.misc.netsessid", setter: fld_set}]}, - "network_port": {convert: to_long, to:[{field: "rsa.network.network_port", setter: fld_set}]}, - "network_service": {to:[{field: "rsa.network.network_service", setter: fld_set}]}, - "node": {to:[{field: "rsa.misc.node", setter: fld_set}]}, - "nodename": {to:[{field: "rsa.internal.node_name", setter: fld_set}]}, - "ntype": {to:[{field: "rsa.misc.ntype", setter: fld_set}]}, - "num": {to:[{field: "rsa.misc.num", setter: fld_set}]}, - "number": {to:[{field: "rsa.misc.number", setter: fld_set}]}, - "number1": {to:[{field: "rsa.misc.number1", setter: fld_set}]}, - "number2": {to:[{field: "rsa.misc.number2", setter: fld_set}]}, - "nwe.callback_id": {to:[{field: "rsa.internal.nwe_callback_id", setter: fld_set}]}, - "nwwn": {to:[{field: "rsa.misc.nwwn", setter: fld_set}]}, - "obj_id": {to:[{field: "rsa.internal.obj_id", setter: fld_set}]}, - "obj_name": {to:[{field: "rsa.misc.obj_name", setter: fld_set}]}, - "obj_server": {to:[{field: "rsa.internal.obj_server", setter: fld_set}]}, - "obj_type": {to:[{field: "rsa.misc.obj_type", setter: fld_set}]}, - "obj_value": {to:[{field: "rsa.internal.obj_val", setter: fld_set}]}, - "object": {to:[{field: "rsa.misc.object", setter: fld_set}]}, - "observed_val": {to:[{field: "rsa.misc.observed_val", setter: fld_set}]}, - "operation": {to:[{field: "rsa.misc.operation", setter: fld_set}]}, - "operation_id": {to:[{field: "rsa.misc.operation_id", setter: fld_set}]}, - "opkt": {to:[{field: "rsa.misc.opkt", setter: fld_set}]}, - "org.dst": {to:[{field: "rsa.physical.org_dst", setter: fld_prio, prio: 1}]}, - "org.src": {to:[{field: "rsa.physical.org_src", setter: fld_set}]}, - "org_dst": {to:[{field: "rsa.physical.org_dst", setter: fld_prio, prio: 0}]}, - "orig_from": {to:[{field: "rsa.misc.orig_from", setter: fld_set}]}, - "origin": {to:[{field: "rsa.network.origin", setter: fld_set}]}, - "original_owner": {to:[{field: "rsa.identity.owner", setter: fld_set}]}, - "os": {to:[{field: "rsa.misc.OS", setter: fld_set}]}, - "owner_id": {to:[{field: "rsa.misc.owner_id", setter: fld_set}]}, - "p_action": {to:[{field: "rsa.misc.p_action", setter: fld_set}]}, - "p_date": {to:[{field: "rsa.time.p_date", setter: fld_set}]}, - "p_filter": {to:[{field: "rsa.misc.p_filter", setter: fld_set}]}, - "p_group_object": {to:[{field: "rsa.misc.p_group_object", setter: fld_set}]}, - "p_id": {to:[{field: "rsa.misc.p_id", setter: fld_set}]}, - "p_month": {to:[{field: "rsa.time.p_month", setter: fld_set}]}, - "p_msgid": {to:[{field: "rsa.misc.p_msgid", setter: fld_set}]}, - "p_msgid1": {to:[{field: "rsa.misc.p_msgid1", setter: fld_set}]}, - "p_msgid2": {to:[{field: "rsa.misc.p_msgid2", setter: fld_set}]}, - "p_result1": {to:[{field: "rsa.misc.p_result1", setter: fld_set}]}, - "p_time": {to:[{field: "rsa.time.p_time", setter: fld_set}]}, - "p_time1": {to:[{field: "rsa.time.p_time1", setter: fld_set}]}, - "p_time2": {to:[{field: "rsa.time.p_time2", setter: fld_set}]}, - "p_url": {to:[{field: "rsa.web.p_url", setter: fld_set}]}, - "p_user_agent": {to:[{field: "rsa.web.p_user_agent", setter: fld_set}]}, - "p_web_cookie": {to:[{field: "rsa.web.p_web_cookie", setter: fld_set}]}, - "p_web_method": {to:[{field: "rsa.web.p_web_method", setter: fld_set}]}, - "p_web_referer": {to:[{field: "rsa.web.p_web_referer", setter: fld_set}]}, - "p_year": {to:[{field: "rsa.time.p_year", setter: fld_set}]}, - "packet_length": {to:[{field: "rsa.network.packet_length", setter: fld_set}]}, - "paddr": {convert: to_ip, to:[{field: "rsa.network.paddr", setter: fld_set}]}, - "param": {to:[{field: "rsa.misc.param", setter: fld_set}]}, - "param.dst": {to:[{field: "rsa.misc.param_dst", setter: fld_set}]}, - "param.src": {to:[{field: "rsa.misc.param_src", setter: fld_set}]}, - "parent_node": {to:[{field: "rsa.misc.parent_node", setter: fld_set}]}, - "parse.error": {to:[{field: "rsa.internal.parse_error", setter: fld_set}]}, - "password": {to:[{field: "rsa.identity.password", setter: fld_set}]}, - "password_chg": {to:[{field: "rsa.misc.password_chg", setter: fld_set}]}, - "password_expire": {to:[{field: "rsa.misc.password_expire", setter: fld_set}]}, - "patient_fname": {to:[{field: "rsa.healthcare.patient_fname", setter: fld_set}]}, - "patient_id": {to:[{field: "rsa.healthcare.patient_id", setter: fld_set}]}, - "patient_lname": {to:[{field: "rsa.healthcare.patient_lname", setter: fld_set}]}, - "patient_mname": {to:[{field: "rsa.healthcare.patient_mname", setter: fld_set}]}, - "payload.req": {convert: to_long, to:[{field: "rsa.internal.payload_req", setter: fld_set}]}, - "payload.res": {convert: to_long, to:[{field: "rsa.internal.payload_res", setter: fld_set}]}, - "peer": {to:[{field: "rsa.crypto.peer", setter: fld_set}]}, - "peer_id": {to:[{field: "rsa.crypto.peer_id", setter: fld_set}]}, - "permgranted": {to:[{field: "rsa.misc.permgranted", setter: fld_set}]}, - "permissions": {to:[{field: "rsa.db.permissions", setter: fld_set}]}, - "permwanted": {to:[{field: "rsa.misc.permwanted", setter: fld_set}]}, - "pgid": {to:[{field: "rsa.misc.pgid", setter: fld_set}]}, - "phone_number": {to:[{field: "rsa.misc.phone", setter: fld_prio, prio: 2}]}, - "phost": {to:[{field: "rsa.network.phost", setter: fld_set}]}, - "pid": {to:[{field: "rsa.misc.pid", setter: fld_set}]}, - "policy": {to:[{field: "rsa.misc.policy", setter: fld_set}]}, - "policyUUID": {to:[{field: "rsa.misc.policyUUID", setter: fld_set}]}, - "policy_id": {to:[{field: "rsa.misc.policy_id", setter: fld_set}]}, - "policy_value": {to:[{field: "rsa.misc.policy_value", setter: fld_set}]}, - "policy_waiver": {to:[{field: "rsa.misc.policy_waiver", setter: fld_set}]}, - "policyname": {to:[{field: "rsa.misc.policy_name", setter: fld_prio, prio: 0}]}, - "pool_id": {to:[{field: "rsa.misc.pool_id", setter: fld_set}]}, - "pool_name": {to:[{field: "rsa.misc.pool_name", setter: fld_set}]}, - "port": {convert: to_long, to:[{field: "rsa.network.port", setter: fld_set}]}, - "portname": {to:[{field: "rsa.misc.port_name", setter: fld_set}]}, - "pread": {convert: to_long, to:[{field: "rsa.db.pread", setter: fld_set}]}, - "priority": {to:[{field: "rsa.misc.priority", setter: fld_set}]}, - "privilege": {to:[{field: "rsa.file.privilege", setter: fld_set}]}, - "process.vid.dst": {to:[{field: "rsa.internal.process_vid_dst", setter: fld_set}]}, - "process.vid.src": {to:[{field: "rsa.internal.process_vid_src", setter: fld_set}]}, - "process_id_val": {to:[{field: "rsa.misc.process_id_val", setter: fld_set}]}, - "processing_time": {to:[{field: "rsa.time.process_time", setter: fld_set}]}, - "profile": {to:[{field: "rsa.identity.profile", setter: fld_set}]}, - "prog_asp_num": {to:[{field: "rsa.misc.prog_asp_num", setter: fld_set}]}, - "program": {to:[{field: "rsa.misc.program", setter: fld_set}]}, - "protocol_detail": {to:[{field: "rsa.network.protocol_detail", setter: fld_set}]}, - "pwwn": {to:[{field: "rsa.storage.pwwn", setter: fld_set}]}, - "r_hostid": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "real_data": {to:[{field: "rsa.misc.real_data", setter: fld_set}]}, - "realm": {to:[{field: "rsa.identity.realm", setter: fld_set}]}, - "reason": {to:[{field: "rsa.misc.reason", setter: fld_set}]}, - "rec_asp_device": {to:[{field: "rsa.misc.rec_asp_device", setter: fld_set}]}, - "rec_asp_num": {to:[{field: "rsa.misc.rec_asp_num", setter: fld_set}]}, - "rec_library": {to:[{field: "rsa.misc.rec_library", setter: fld_set}]}, - "recorded_time": {convert: to_date, to:[{field: "rsa.time.recorded_time", setter: fld_set}]}, - "recordnum": {to:[{field: "rsa.misc.recordnum", setter: fld_set}]}, - "registry.key": {to:[{field: "rsa.endpoint.registry_key", setter: fld_set}]}, - "registry.value": {to:[{field: "rsa.endpoint.registry_value", setter: fld_set}]}, - "remote_domain": {to:[{field: "rsa.web.remote_domain", setter: fld_set}]}, - "remote_domain_id": {to:[{field: "rsa.network.remote_domain_id", setter: fld_set}]}, - "reputation_num": {convert: to_double, to:[{field: "rsa.web.reputation_num", setter: fld_set}]}, - "resource": {to:[{field: "rsa.internal.resource", setter: fld_set}]}, - "resource_class": {to:[{field: "rsa.internal.resource_class", setter: fld_set}]}, - "result": {to:[{field: "rsa.misc.result", setter: fld_set}]}, - "result_code": {to:[{field: "rsa.misc.result_code", setter: fld_prio, prio: 1}]}, - "resultcode": {to:[{field: "rsa.misc.result_code", setter: fld_prio, prio: 0}]}, - "rid": {convert: to_long, to:[{field: "rsa.internal.rid", setter: fld_set}]}, - "risk": {to:[{field: "rsa.misc.risk", setter: fld_set}]}, - "risk_info": {to:[{field: "rsa.misc.risk_info", setter: fld_set}]}, - "risk_num": {convert: to_double, to:[{field: "rsa.misc.risk_num", setter: fld_set}]}, - "risk_num_comm": {convert: to_double, to:[{field: "rsa.misc.risk_num_comm", setter: fld_set}]}, - "risk_num_next": {convert: to_double, to:[{field: "rsa.misc.risk_num_next", setter: fld_set}]}, - "risk_num_sand": {convert: to_double, to:[{field: "rsa.misc.risk_num_sand", setter: fld_set}]}, - "risk_num_static": {convert: to_double, to:[{field: "rsa.misc.risk_num_static", setter: fld_set}]}, - "risk_suspicious": {to:[{field: "rsa.misc.risk_suspicious", setter: fld_set}]}, - "risk_warning": {to:[{field: "rsa.misc.risk_warning", setter: fld_set}]}, - "rpayload": {to:[{field: "rsa.network.rpayload", setter: fld_set}]}, - "ruid": {to:[{field: "rsa.misc.ruid", setter: fld_set}]}, - "rule": {to:[{field: "rsa.misc.rule", setter: fld_set}]}, - "rule_group": {to:[{field: "rsa.misc.rule_group", setter: fld_set}]}, - "rule_template": {to:[{field: "rsa.misc.rule_template", setter: fld_set}]}, - "rule_uid": {to:[{field: "rsa.misc.rule_uid", setter: fld_set}]}, - "rulename": {to:[{field: "rsa.misc.rule_name", setter: fld_set}]}, - "s_certauth": {to:[{field: "rsa.crypto.s_certauth", setter: fld_set}]}, - "s_cipher": {to:[{field: "rsa.crypto.cipher_src", setter: fld_set}]}, - "s_ciphersize": {convert: to_long, to:[{field: "rsa.crypto.cipher_size_src", setter: fld_set}]}, - "s_context": {to:[{field: "rsa.misc.context_subject", setter: fld_set}]}, - "s_sslver": {to:[{field: "rsa.crypto.ssl_ver_src", setter: fld_set}]}, - "sburb": {to:[{field: "rsa.misc.sburb", setter: fld_set}]}, - "scheme": {to:[{field: "rsa.crypto.scheme", setter: fld_set}]}, - "sdomain_fld": {to:[{field: "rsa.misc.sdomain_fld", setter: fld_set}]}, - "search.text": {to:[{field: "rsa.misc.search_text", setter: fld_set}]}, - "sec": {to:[{field: "rsa.misc.sec", setter: fld_set}]}, - "second": {to:[{field: "rsa.misc.second", setter: fld_set}]}, - "sensor": {to:[{field: "rsa.misc.sensor", setter: fld_set}]}, - "sensorname": {to:[{field: "rsa.misc.sensorname", setter: fld_set}]}, - "seqnum": {to:[{field: "rsa.misc.seqnum", setter: fld_set}]}, - "serial_number": {to:[{field: "rsa.misc.serial_number", setter: fld_set}]}, - "service.account": {to:[{field: "rsa.identity.service_account", setter: fld_set}]}, - "session": {to:[{field: "rsa.misc.session", setter: fld_set}]}, - "session.split": {to:[{field: "rsa.internal.session_split", setter: fld_set}]}, - "sessionid": {to:[{field: "rsa.misc.log_session_id", setter: fld_set}]}, - "sessionid1": {to:[{field: "rsa.misc.log_session_id1", setter: fld_set}]}, - "sessiontype": {to:[{field: "rsa.misc.sessiontype", setter: fld_set}]}, - "severity": {to:[{field: "rsa.misc.severity", setter: fld_set}]}, - "sid": {to:[{field: "rsa.identity.user_sid_dst", setter: fld_set}]}, - "sig.name": {to:[{field: "rsa.misc.sig_name", setter: fld_set}]}, - "sigUUID": {to:[{field: "rsa.misc.sigUUID", setter: fld_set}]}, - "sigcat": {to:[{field: "rsa.misc.sigcat", setter: fld_set}]}, - "sigid": {convert: to_long, to:[{field: "rsa.misc.sig_id", setter: fld_set}]}, - "sigid1": {convert: to_long, to:[{field: "rsa.misc.sig_id1", setter: fld_set}]}, - "sigid_string": {to:[{field: "rsa.misc.sig_id_str", setter: fld_set}]}, - "signame": {to:[{field: "rsa.misc.policy_name", setter: fld_prio, prio: 1}]}, - "sigtype": {to:[{field: "rsa.crypto.sig_type", setter: fld_set}]}, - "sinterface": {to:[{field: "rsa.network.sinterface", setter: fld_set}]}, - "site": {to:[{field: "rsa.internal.site", setter: fld_set}]}, - "size": {convert: to_long, to:[{field: "rsa.internal.size", setter: fld_set}]}, - "smask": {to:[{field: "rsa.network.smask", setter: fld_set}]}, - "snmp.oid": {to:[{field: "rsa.misc.snmp_oid", setter: fld_set}]}, - "snmp.value": {to:[{field: "rsa.misc.snmp_value", setter: fld_set}]}, - "sourcefile": {to:[{field: "rsa.internal.sourcefile", setter: fld_set}]}, - "space": {to:[{field: "rsa.misc.space", setter: fld_set}]}, - "space1": {to:[{field: "rsa.misc.space1", setter: fld_set}]}, - "spi": {to:[{field: "rsa.misc.spi", setter: fld_set}]}, - "sql": {to:[{field: "rsa.misc.sql", setter: fld_set}]}, - "src_dn": {to:[{field: "rsa.identity.dn_src", setter: fld_set}]}, - "src_payload": {to:[{field: "rsa.misc.payload_src", setter: fld_set}]}, - "src_spi": {to:[{field: "rsa.misc.spi_src", setter: fld_set}]}, - "src_zone": {to:[{field: "rsa.network.zone_src", setter: fld_set}]}, - "srcburb": {to:[{field: "rsa.misc.srcburb", setter: fld_set}]}, - "srcdom": {to:[{field: "rsa.misc.srcdom", setter: fld_set}]}, - "srcservice": {to:[{field: "rsa.misc.srcservice", setter: fld_set}]}, - "ssid": {to:[{field: "rsa.wireless.wlan_ssid", setter: fld_prio, prio: 0}]}, - "stamp": {convert: to_date, to:[{field: "rsa.time.stamp", setter: fld_set}]}, - "starttime": {convert: to_date, to:[{field: "rsa.time.starttime", setter: fld_set}]}, - "state": {to:[{field: "rsa.misc.state", setter: fld_set}]}, - "statement": {to:[{field: "rsa.internal.statement", setter: fld_set}]}, - "status": {to:[{field: "rsa.misc.status", setter: fld_set}]}, - "status1": {to:[{field: "rsa.misc.status1", setter: fld_set}]}, - "streams": {convert: to_long, to:[{field: "rsa.misc.streams", setter: fld_set}]}, - "subcategory": {to:[{field: "rsa.misc.subcategory", setter: fld_set}]}, - "subject": {to:[{field: "rsa.email.subject", setter: fld_set}]}, - "svcno": {to:[{field: "rsa.misc.svcno", setter: fld_set}]}, - "system": {to:[{field: "rsa.misc.system", setter: fld_set}]}, - "t_context": {to:[{field: "rsa.misc.context_target", setter: fld_set}]}, - "task_name": {to:[{field: "rsa.file.task_name", setter: fld_set}]}, - "tbdstr1": {to:[{field: "rsa.misc.tbdstr1", setter: fld_set}]}, - "tbdstr2": {to:[{field: "rsa.misc.tbdstr2", setter: fld_set}]}, - "tbl_name": {to:[{field: "rsa.db.table_name", setter: fld_set}]}, - "tcp_flags": {convert: to_long, to:[{field: "rsa.misc.tcp_flags", setter: fld_set}]}, - "terminal": {to:[{field: "rsa.misc.terminal", setter: fld_set}]}, - "tgtdom": {to:[{field: "rsa.misc.tgtdom", setter: fld_set}]}, - "tgtdomain": {to:[{field: "rsa.misc.tgtdomain", setter: fld_set}]}, - "threat_name": {to:[{field: "rsa.threat.threat_category", setter: fld_set}]}, - "threat_source": {to:[{field: "rsa.threat.threat_source", setter: fld_set}]}, - "threat_val": {to:[{field: "rsa.threat.threat_desc", setter: fld_set}]}, - "threshold": {to:[{field: "rsa.misc.threshold", setter: fld_set}]}, - "time": {convert: to_date, to:[{field: "rsa.internal.time", setter: fld_set}]}, - "timestamp": {to:[{field: "rsa.time.timestamp", setter: fld_set}]}, - "timezone": {to:[{field: "rsa.time.timezone", setter: fld_set}]}, - "to": {to:[{field: "rsa.email.email_dst", setter: fld_set}]}, - "tos": {convert: to_long, to:[{field: "rsa.misc.tos", setter: fld_set}]}, - "trans_from": {to:[{field: "rsa.email.trans_from", setter: fld_set}]}, - "trans_id": {to:[{field: "rsa.db.transact_id", setter: fld_set}]}, - "trans_to": {to:[{field: "rsa.email.trans_to", setter: fld_set}]}, - "trigger_desc": {to:[{field: "rsa.misc.trigger_desc", setter: fld_set}]}, - "trigger_val": {to:[{field: "rsa.misc.trigger_val", setter: fld_set}]}, - "type": {to:[{field: "rsa.misc.type", setter: fld_set}]}, - "type1": {to:[{field: "rsa.misc.type1", setter: fld_set}]}, - "tzone": {to:[{field: "rsa.time.tzone", setter: fld_set}]}, - "ubc.req": {convert: to_long, to:[{field: "rsa.internal.ubc_req", setter: fld_set}]}, - "ubc.res": {convert: to_long, to:[{field: "rsa.internal.ubc_res", setter: fld_set}]}, - "udb_class": {to:[{field: "rsa.misc.udb_class", setter: fld_set}]}, - "url_fld": {to:[{field: "rsa.misc.url_fld", setter: fld_set}]}, - "urlpage": {to:[{field: "rsa.web.urlpage", setter: fld_set}]}, - "urlroot": {to:[{field: "rsa.web.urlroot", setter: fld_set}]}, - "user_address": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "user_dept": {to:[{field: "rsa.identity.user_dept", setter: fld_set}]}, - "user_div": {to:[{field: "rsa.misc.user_div", setter: fld_set}]}, - "user_fname": {to:[{field: "rsa.identity.firstname", setter: fld_set}]}, - "user_lname": {to:[{field: "rsa.identity.lastname", setter: fld_set}]}, - "user_mname": {to:[{field: "rsa.identity.middlename", setter: fld_set}]}, - "user_org": {to:[{field: "rsa.identity.org", setter: fld_set}]}, - "user_role": {to:[{field: "rsa.identity.user_role", setter: fld_set}]}, - "userid": {to:[{field: "rsa.misc.userid", setter: fld_set}]}, - "username_fld": {to:[{field: "rsa.misc.username_fld", setter: fld_set}]}, - "utcstamp": {to:[{field: "rsa.misc.utcstamp", setter: fld_set}]}, - "v_instafname": {to:[{field: "rsa.misc.v_instafname", setter: fld_set}]}, - "vendor_event_cat": {to:[{field: "rsa.investigations.event_vcat", setter: fld_set}]}, - "version": {to:[{field: "rsa.misc.version", setter: fld_set}]}, - "vid": {to:[{field: "rsa.internal.msg_vid", setter: fld_set}]}, - "virt_data": {to:[{field: "rsa.misc.virt_data", setter: fld_set}]}, - "virusname": {to:[{field: "rsa.misc.virusname", setter: fld_set}]}, - "vlan": {convert: to_long, to:[{field: "rsa.network.vlan", setter: fld_set}]}, - "vlan.name": {to:[{field: "rsa.network.vlan_name", setter: fld_set}]}, - "vm_target": {to:[{field: "rsa.misc.vm_target", setter: fld_set}]}, - "vpnid": {to:[{field: "rsa.misc.vpnid", setter: fld_set}]}, - "vsys": {to:[{field: "rsa.misc.vsys", setter: fld_set}]}, - "vuln_ref": {to:[{field: "rsa.misc.vuln_ref", setter: fld_set}]}, - "web_cookie": {to:[{field: "rsa.web.web_cookie", setter: fld_set}]}, - "web_extension_tmp": {to:[{field: "rsa.web.web_extension_tmp", setter: fld_set}]}, - "web_host": {to:[{field: "rsa.web.alias_host", setter: fld_set}]}, - "web_method": {to:[{field: "rsa.misc.action", setter: fld_append}]}, - "web_page": {to:[{field: "rsa.web.web_page", setter: fld_set}]}, - "web_ref_domain": {to:[{field: "rsa.web.web_ref_domain", setter: fld_set}]}, - "web_ref_host": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "web_ref_page": {to:[{field: "rsa.web.web_ref_page", setter: fld_set}]}, - "web_ref_query": {to:[{field: "rsa.web.web_ref_query", setter: fld_set}]}, - "web_ref_root": {to:[{field: "rsa.web.web_ref_root", setter: fld_set}]}, - "wifi_channel": {convert: to_long, to:[{field: "rsa.wireless.wlan_channel", setter: fld_set}]}, - "wlan": {to:[{field: "rsa.wireless.wlan_name", setter: fld_set}]}, - "word": {to:[{field: "rsa.internal.word", setter: fld_set}]}, - "workspace_desc": {to:[{field: "rsa.misc.workspace", setter: fld_set}]}, - "workstation": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "year": {to:[{field: "rsa.time.year", setter: fld_set}]}, - "zone": {to:[{field: "rsa.network.zone", setter: fld_set}]}, - }; - - function to_date(value) { - switch (typeof (value)) { - case "object": - // This is a Date. But as it was obtained from evt.Get(), the VM - // doesn't see it as a JS Date anymore, thus value instanceof Date === false. - // Have to trust that any object here is a valid Date for Go. - return value; - case "string": - var asDate = new Date(value); - if (!isNaN(asDate)) return asDate; - } - } - - // ECMAScript 5.1 doesn't have Object.MAX_SAFE_INTEGER / Object.MIN_SAFE_INTEGER. - var maxSafeInt = Math.pow(2, 53) - 1; - var minSafeInt = -maxSafeInt; - - function to_long(value) { - var num = parseInt(value); - // Better not to index a number if it's not safe (above 53 bits). - return !isNaN(num) && minSafeInt <= num && num <= maxSafeInt ? num : undefined; - } - - function to_ip(value) { - if (value.indexOf(":") === -1) - return to_ipv4(value); - return to_ipv6(value); - } - - var ipv4_regex = /^(\d+)\.(\d+)\.(\d+)\.(\d+)$/; - var ipv6_hex_regex = /^[0-9A-Fa-f]{1,4}$/; - - function to_ipv4(value) { - var result = ipv4_regex.exec(value); - if (result == null || result.length !== 5) return; - for (var i = 1; i < 5; i++) { - var num = strictToInt(result[i]); - if (isNaN(num) || num < 0 || num > 255) return; - } - return value; - } - - function to_ipv6(value) { - var sqEnd = value.indexOf("]"); - if (sqEnd > -1) { - if (value.charAt(0) !== "[") return; - value = value.substr(1, sqEnd - 1); - } - var zoneOffset = value.indexOf("%"); - if (zoneOffset > -1) { - value = value.substr(0, zoneOffset); - } - var parts = value.split(":"); - if (parts == null || parts.length < 3 || parts.length > 8) return; - var numEmpty = 0; - var innerEmpty = 0; - for (var i = 0; i < parts.length; i++) { - if (parts[i].length === 0) { - numEmpty++; - if (i > 0 && i + 1 < parts.length) innerEmpty++; - } else if (!parts[i].match(ipv6_hex_regex) && - // Accept an IPv6 with a valid IPv4 at the end. - ((i + 1 < parts.length) || !to_ipv4(parts[i]))) { - return; - } - } - return innerEmpty === 0 && parts.length === 8 || innerEmpty === 1 ? value : undefined; - } - - function to_double(value) { - return parseFloat(value); - } - - function to_mac(value) { - // ES doesn't have a mac datatype so it's safe to ingest whatever was captured. - return value; - } - - function to_lowercase(value) { - // to_lowercase is used against keyword fields, which can accept - // any other type (numbers, dates). - return typeof(value) === "string"? value.toLowerCase() : value; - } - - function fld_set(dst, value) { - dst[this.field] = { v: value }; - } - - function fld_append(dst, value) { - if (dst[this.field] === undefined) { - dst[this.field] = { v: [value] }; - } else { - var base = dst[this.field]; - if (base.v.indexOf(value)===-1) base.v.push(value); - } - } - - function fld_prio(dst, value) { - if (dst[this.field] === undefined) { - dst[this.field] = { v: value, prio: this.prio}; - } else if(this.prio < dst[this.field].prio) { - dst[this.field].v = value; - dst[this.field].prio = this.prio; - } - } - - var valid_ecs_outcome = { - 'failure': true, - 'success': true, - 'unknown': true - }; - - function fld_ecs_outcome(dst, value) { - value = value.toLowerCase(); - if (valid_ecs_outcome[value] === undefined) { - value = 'unknown'; - } - if (dst[this.field] === undefined) { - dst[this.field] = { v: value }; - } else if (dst[this.field].v === 'unknown') { - dst[this.field] = { v: value }; - } - } - - function map_all(evt, targets, value) { - for (var i = 0; i < targets.length; i++) { - evt.Put(targets[i], value); - } - } - - function populate_fields(evt) { - var base = evt.Get(FIELDS_OBJECT); - if (base === null) return; - alternate_datetime(evt); - if (map_ecs) { - do_populate(evt, base, ecs_mappings); - } - if (map_rsa) { - do_populate(evt, base, rsa_mappings); - } - if (keep_raw) { - evt.Put("rsa.raw", base); - } - evt.Delete(FIELDS_OBJECT); - } - - var datetime_alt_components = [ - {field: "day", fmts: [[dF]]}, - {field: "year", fmts: [[dW]]}, - {field: "month", fmts: [[dB],[dG]]}, - {field: "date", fmts: [[dW,dSkip,dG,dSkip,dF],[dW,dSkip,dB,dSkip,dF],[dW,dSkip,dR,dSkip,dF]]}, - {field: "hour", fmts: [[dN]]}, - {field: "min", fmts: [[dU]]}, - {field: "secs", fmts: [[dO]]}, - {field: "time", fmts: [[dN, dSkip, dU, dSkip, dO]]}, - ]; - - function alternate_datetime(evt) { - if (evt.Get(FIELDS_PREFIX + "event_time") != null) { - return; - } - var tzOffset = tz_offset; - if (tzOffset === "event") { - tzOffset = evt.Get("event.timezone"); - } - var container = new DateContainer(tzOffset); - for (var i=0; i} %{hfld2}.%{hfld3->} %{p0}"); - - var dup2 = call({ - dest: "nwparser.payload", - fn: STRCAT, - args: [ - field("hfld4"), - constant("_appliance "), - field("p0"), - ], - }); - - var dup3 = call({ - dest: "nwparser.payload", - fn: STRCAT, - args: [ - field("hfld4"), - constant(" "), - field("p0"), - ], - }); - - var dup4 = match_copy("MESSAGE#0:flows/2_1", "nwparser.p0", "p0"); - - var dup5 = setc("eventcategory","1605020000"); - - var dup6 = setf("msg","$MSG"); - - var dup7 = setc("event_source","appliance"); - - var dup8 = setf("sensor","node"); - - var dup9 = date_time({ - dest: "event_time", - args: ["hfld2"], - fmts: [ - [dX], - ], - }); - - var dup10 = match_copy("MESSAGE#1:flows:01/1_2", "nwparser.p0", ""); - - var dup11 = match("MESSAGE#10:ids-alerts:01/1_0", "nwparser.p0", "dhost=%{dmacaddr->} direction=%{p0}"); - - var dup12 = match("MESSAGE#10:ids-alerts:01/1_1", "nwparser.p0", "shost=%{smacaddr->} direction=%{p0}"); - - var dup13 = match("MESSAGE#10:ids-alerts:01/2", "nwparser.p0", "%{direction->} protocol=%{protocol->} src=%{p0}"); - - var dup14 = match_copy("MESSAGE#10:ids-alerts:01/4", "nwparser.p0", "signame"); - - var dup15 = setc("eventcategory","1607000000"); - - var dup16 = setc("event_type","ids-alerts"); - - var dup17 = date_time({ - dest: "event_time", - args: ["fld3"], - fmts: [ - [dX], - ], - }); - - var dup18 = setc("event_type","security_event"); - - var dup19 = constant("Allow"); - - var dup20 = match("HEADER#0:0003/1_0", "nwparser.p0", "%{hfld4}_appliance %{p0}", processor_chain([ - dup2, - ])); - - var dup21 = match("HEADER#0:0003/1_1", "nwparser.p0", "%{hfld4->} %{p0}", processor_chain([ - dup3, - ])); - - var dup22 = linear_select([ - dup11, - dup12, - ]); - - var dup23 = linear_select([ - dup20, - dup21, - ]); - - var part1 = match("HEADER#0:0003/2", "nwparser.p0", "urls %{p0}"); - - var all1 = all_match({ - processors: [ - dup1, - dup23, - part1, - ], - on_success: processor_chain([ - setc("header_id","0003"), - setc("messageid","urls"), - ]), - }); - - var part2 = match("HEADER#1:0002/1_0", "nwparser.p0", "%{node}_appliance events %{p0}"); - - var part3 = match("HEADER#1:0002/1_1", "nwparser.p0", "%{node->} events %{p0}"); - - var select1 = linear_select([ - part2, - part3, - ]); - - var part4 = match_copy("HEADER#1:0002/2", "nwparser.p0", "payload"); - - var all2 = all_match({ - processors: [ - dup1, - select1, - part4, - ], - on_success: processor_chain([ - setc("header_id","0002"), - setc("messageid","events"), - ]), - }); - - var part5 = match("HEADER#2:0001/2", "nwparser.p0", "%{messageid->} %{p0}"); - - var all3 = all_match({ - processors: [ - dup1, - dup23, - part5, - ], - on_success: processor_chain([ - setc("header_id","0001"), - ]), - }); - - var part6 = match("HEADER#3:0005/1_0", "nwparser.p0", "%{hfld4}_appliance %{p0}"); - - var part7 = match("HEADER#3:0005/1_1", "nwparser.p0", "%{hfld4->} %{p0}"); - - var select2 = linear_select([ - part6, - part7, - ]); - - var part8 = match("HEADER#3:0005/2", "nwparser.p0", "%{} %{hfld5->} %{hfld6->} %{messageid->} %{p0}", processor_chain([ - call({ - dest: "nwparser.payload", - fn: STRCAT, - args: [ - field("hfld6"), - constant(" "), - field("messageid"), - constant(" "), - field("p0"), - ], - }), - ])); - - var all4 = all_match({ - processors: [ - dup1, - select2, - part8, - ], - on_success: processor_chain([ - setc("header_id","0005"), - ]), - }); - - var hdr1 = match("HEADER#4:0004", "message", "%{hfld1->} %{hfld2}.%{hfld3->} %{hfld4}_%{space->} %{messageid->} %{payload}", processor_chain([ - setc("header_id","0004"), - ])); - - var select3 = linear_select([ - all1, - all2, - all3, - all4, - hdr1, - ]); - - var part9 = match("MESSAGE#0:flows/0_0", "nwparser.payload", "%{node}_appliance %{p0}"); - - var part10 = match("MESSAGE#0:flows/0_1", "nwparser.payload", "%{node->} %{p0}"); - - var select4 = linear_select([ - part9, - part10, - ]); - - var part11 = match("MESSAGE#0:flows/1", "nwparser.p0", "flows src=%{saddr->} dst=%{daddr->} %{p0}"); - - var part12 = match("MESSAGE#0:flows/2_0", "nwparser.p0", "mac=%{dmacaddr->} %{p0}"); - - var select5 = linear_select([ - part12, - dup4, - ]); - - var part13 = match("MESSAGE#0:flows/3", "nwparser.p0", "protocol=%{protocol->} %{p0}"); - - var part14 = match("MESSAGE#0:flows/4_0", "nwparser.p0", "sport=%{sport->} dport=%{dport->} %{p0}"); - - var part15 = match("MESSAGE#0:flows/4_1", "nwparser.p0", "type=%{event_type->} %{p0}"); - - var select6 = linear_select([ - part14, - part15, - dup4, - ]); - - var part16 = match("MESSAGE#0:flows/5", "nwparser.p0", "pattern: %{fld21->} %{info}"); - - var all5 = all_match({ - processors: [ - select4, - part11, - select5, - part13, - select6, - part16, - ], - on_success: processor_chain([ - dup5, - dup6, - lookup({ - dest: "nwparser.action", - map: map_actionType, - key: field("fld21"), - }), - dup7, - dup8, - dup9, - ]), - }); - - var msg1 = msg("flows", all5); - - var part17 = match("MESSAGE#1:flows:01/0", "nwparser.payload", "%{node->} flows %{action->} src=%{saddr->} dst=%{daddr->} mac=%{smacaddr->} protocol=%{protocol->} %{p0}"); - - var part18 = match("MESSAGE#1:flows:01/1_0", "nwparser.p0", "sport=%{sport->} dport=%{dport->} "); - - var part19 = match("MESSAGE#1:flows:01/1_1", "nwparser.p0", "type=%{event_type->} "); - - var select7 = linear_select([ - part18, - part19, - dup10, - ]); - - var all6 = all_match({ - processors: [ - part17, - select7, - ], - on_success: processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ]), - }); - - var msg2 = msg("flows:01", all6); - - var part20 = match("MESSAGE#2:flows:02", "nwparser.payload", "%{node->} flows %{action}", processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ])); - - var msg3 = msg("flows:02", part20); - - var select8 = linear_select([ - msg1, - msg2, - msg3, - ]); - - var part21 = match("MESSAGE#3:urls/0_0", "nwparser.payload", "%{node}_appliance urls src=%{p0}"); - - var part22 = match("MESSAGE#3:urls/0_1", "nwparser.payload", "%{node->} urls src=%{p0}"); - - var part23 = match("MESSAGE#3:urls/0_2", "nwparser.payload", "src=%{p0}"); - - var select9 = linear_select([ - part21, - part22, - part23, - ]); - - var part24 = match("MESSAGE#3:urls/1", "nwparser.p0", "%{sport}:%{saddr->} dst=%{daddr}:%{dport->} mac=%{macaddr->} %{p0}"); - - var part25 = match("MESSAGE#3:urls/2_0", "nwparser.p0", "agent='%{user_agent}' request: %{p0}"); - - var part26 = match("MESSAGE#3:urls/2_1", "nwparser.p0", "agent=%{user_agent->} request: %{p0}"); - - var part27 = match("MESSAGE#3:urls/2_2", "nwparser.p0", "request: %{p0}"); - - var select10 = linear_select([ - part25, - part26, - part27, - ]); - - var part28 = match("MESSAGE#3:urls/3", "nwparser.p0", "%{} %{web_method}%{url}"); - - var all7 = all_match({ - processors: [ - select9, - part24, - select10, - part28, - ], - on_success: processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ]), - }); - - var msg4 = msg("urls", all7); - - var part29 = match("MESSAGE#4:events/0", "nwparser.payload", "dhcp lease of ip %{saddr->} from server mac %{smacaddr->} for client mac %{p0}"); - - var part30 = match("MESSAGE#4:events/1_0", "nwparser.p0", "%{dmacaddr->} with hostname %{hostname->} from router %{p0}"); - - var part31 = match("MESSAGE#4:events/1_1", "nwparser.p0", "%{dmacaddr->} from router %{p0}"); - - var select11 = linear_select([ - part30, - part31, - ]); - - var part32 = match("MESSAGE#4:events/2", "nwparser.p0", "%{hostip->} on subnet %{mask->} with dns %{dns_a_record}"); - - var all8 = all_match({ - processors: [ - part29, - select11, - part32, - ], - on_success: processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ]), - }); - - var msg5 = msg("events", all8); - - var part33 = match("MESSAGE#5:events:02/0", "nwparser.payload", "content_filtering_block url='%{url}' category0='%{category}' server='%{daddr}:%{dport}'%{p0}"); - - var part34 = match("MESSAGE#5:events:02/1_0", "nwparser.p0", " client_mac='%{dmacaddr}'"); - - var select12 = linear_select([ - part34, - dup10, - ]); - - var all9 = all_match({ - processors: [ - part33, - select12, - ], - on_success: processor_chain([ - dup5, - dup6, - setc("event_description","content_filtering_block"), - dup8, - dup9, - ]), - }); - - var msg6 = msg("events:02", all9); - - var part35 = tagval("MESSAGE#6:events:01", "nwparser.payload", tvm, { - "aid": "fld1", - "arp_resp": "fld2", - "arp_src": "fld3", - "auth_neg_dur": "fld4", - "auth_neg_failed": "fld5", - "category0": "category", - "channel": "fld6", - "client_ip": "daddr", - "client_mac": "dmacaddr", - "connectivity": "fld28", - "dhcp_ip": "fld23", - "dhcp_lease_completed": "fld22", - "dhcp_resp": "fld26", - "dhcp_server": "fld24", - "dhcp_server_mac": "fld25", - "dns_req_rtt": "fld7", - "dns_resp": "fld8", - "dns_server": "fld9", - "duration": "duration", - "full_conn": "fld11", - "http_resp": "fld21", - "identity": "fld12", - "instigator": "fld20", - "ip_resp": "fld13", - "ip_src": "saddr", - "is_8021x": "fld15", - "is_wpa": "fld16", - "last_auth_ago": "fld17", - "radio": "fld18", - "reason": "fld19", - "rssi": "dclass_ratio1", - "server": "daddr", - "type": "event_type", - "url": "url", - "vap": "fld22", - "vpn_type": "fld27", - }, processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ])); - - var msg7 = msg("events:01", part35); - - var part36 = match("MESSAGE#7:events:03", "nwparser.payload", "IDS: %{info}", processor_chain([ - dup5, - dup6, - setc("event_description","events IDS"), - dup8, - dup9, - ])); - - var msg8 = msg("events:03", part36); - - var part37 = match("MESSAGE#8:events:04/0", "nwparser.payload", "dhcp %{p0}"); - - var part38 = match("MESSAGE#8:events:04/1_0", "nwparser.p0", "no offers%{p0}"); - - var part39 = match("MESSAGE#8:events:04/1_1", "nwparser.p0", "release%{p0}"); - - var select13 = linear_select([ - part38, - part39, - ]); - - var part40 = match("MESSAGE#8:events:04/2", "nwparser.p0", "%{}for mac %{macaddr}"); - - var all10 = all_match({ - processors: [ - part37, - select13, - part40, - ], - on_success: processor_chain([ - dup5, - dup6, - setc("event_description","events DHCP"), - dup8, - dup9, - ]), - }); - - var msg9 = msg("events:04", all10); - - var part41 = match("MESSAGE#9:events:05", "nwparser.payload", "MAC %{macaddr->} and MAC %{macaddr->} both claim IP: %{saddr}", processor_chain([ - dup5, - dup6, - setc("event_description"," events MAC"), - dup8, - dup9, - ])); - - var msg10 = msg("events:05", part41); - - var select14 = linear_select([ - msg5, - msg6, - msg7, - msg8, - msg9, - msg10, - ]); - - var part42 = match("MESSAGE#10:ids-alerts:01/0", "nwparser.payload", "%{node->} ids-alerts signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4->} %{p0}"); - - var part43 = match("MESSAGE#10:ids-alerts:01/3_0", "nwparser.p0", "%{saddr}:%{sport->} dst=%{daddr}:%{dport->} message: %{p0}"); - - var part44 = match("MESSAGE#10:ids-alerts:01/3_1", "nwparser.p0", "%{saddr->} dst=%{daddr->} message: %{p0}"); - - var select15 = linear_select([ - part43, - part44, - ]); - - var all11 = all_match({ - processors: [ - part42, - dup22, - dup13, - select15, - dup14, - ], - on_success: processor_chain([ - dup15, - dup6, - dup16, - dup8, - dup17, - ]), - }); - - var msg11 = msg("ids-alerts:01", all11); - - var part45 = match("MESSAGE#11:ids-alerts:03", "nwparser.payload", "%{node->} ids-alerts signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4}direction=%{direction->} protocol=%{protocol->} src=%{saddr}:%{sport}", processor_chain([ - dup15, - dup6, - dup16, - dup8, - dup17, - ])); - - var msg12 = msg("ids-alerts:03", part45); - - var part46 = match("MESSAGE#12:ids-alerts:02", "nwparser.payload", "%{node->} ids-alerts signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4}protocol=%{protocol->} src=%{saddr->} dst=%{daddr}message: %{signame}", processor_chain([ - dup15, - dup6, - dup16, - dup8, - dup17, - ])); - - var msg13 = msg("ids-alerts:02", part46); - - var select16 = linear_select([ - msg11, - msg12, - msg13, - ]); - - var part47 = match("MESSAGE#13:security_event", "nwparser.payload", "%{node}security_event %{event_description->} url=%{url->} src=%{saddr}:%{sport->} dst=%{daddr}:%{dport->} mac=%{smacaddr->} name=%{fld10->} sha256=%{fld11->} disposition=%{disposition->} action=%{action}", processor_chain([ - dup5, - dup6, - dup18, - dup8, - dup9, - ])); - - var msg14 = msg("security_event", part47); - - var part48 = match("MESSAGE#14:security_event:01/0", "nwparser.payload", "%{node->} security_event %{event_description->} signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4->} %{p0}"); - - var part49 = match("MESSAGE#14:security_event:01/3_0", "nwparser.p0", "%{saddr}:%{sport->} dst=%{daddr}:%{dport->} message:%{p0}"); - - var part50 = match("MESSAGE#14:security_event:01/3_1", "nwparser.p0", "%{saddr->} dst=%{daddr->} message:%{p0}"); - - var select17 = linear_select([ - part49, - part50, - ]); - - var all12 = all_match({ - processors: [ - part48, - dup22, - dup13, - select17, - dup14, - ], - on_success: processor_chain([ - dup15, - dup6, - dup18, - dup8, - dup17, - ]), - }); - - var msg15 = msg("security_event:01", all12); - - var select18 = linear_select([ - msg14, - msg15, - ]); - - var chain1 = processor_chain([ - select3, - msgid_select({ - "events": select14, - "flows": select8, - "ids-alerts": select16, - "security_event": select18, - "urls": msg4, - }), - ]); - - var hdr2 = match("HEADER#0:0003/0", "message", "%{hfld1->} %{hfld2}.%{hfld3->} %{p0}"); - - var part51 = match_copy("MESSAGE#0:flows/2_1", "nwparser.p0", "p0"); - - var part52 = match_copy("MESSAGE#1:flows:01/1_2", "nwparser.p0", ""); - - var part53 = match("MESSAGE#10:ids-alerts:01/1_0", "nwparser.p0", "dhost=%{dmacaddr->} direction=%{p0}"); - - var part54 = match("MESSAGE#10:ids-alerts:01/1_1", "nwparser.p0", "shost=%{smacaddr->} direction=%{p0}"); - - var part55 = match("MESSAGE#10:ids-alerts:01/2", "nwparser.p0", "%{direction->} protocol=%{protocol->} src=%{p0}"); - - var part56 = match_copy("MESSAGE#10:ids-alerts:01/4", "nwparser.p0", "signame"); - - var part57 = match("HEADER#0:0003/1_0", "nwparser.p0", "%{hfld4}_appliance %{p0}", processor_chain([ - dup2, - ])); - - var part58 = match("HEADER#0:0003/1_1", "nwparser.p0", "%{hfld4->} %{p0}", processor_chain([ - dup3, - ])); - - var select19 = linear_select([ - dup11, - dup12, - ]); - - var select20 = linear_select([ - dup20, - dup21, - ]); - -- community_id: -- registered_domain: - ignore_missing: true - ignore_failure: true - field: dns.question.name - target_field: dns.question.registered_domain - target_subdomain_field: dns.question.subdomain - target_etld_field: dns.question.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: client.domain - target_field: client.registered_domain - target_subdomain_field: client.subdomain - target_etld_field: client.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: server.domain - target_field: server.registered_domain - target_subdomain_field: server.subdomain - target_etld_field: server.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: destination.domain - target_field: destination.registered_domain - target_subdomain_field: destination.subdomain - target_etld_field: destination.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: source.domain - target_field: source.registered_domain - target_subdomain_field: source.subdomain - target_etld_field: source.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: url.domain - target_field: url.registered_domain - target_subdomain_field: url.subdomain - target_etld_field: url.top_level_domain -- add_locale: ~ diff --git a/packages/cisco_meraki/data_stream/log/agent/stream/udp.yml.hbs b/packages/cisco_meraki/data_stream/log/agent/stream/udp.yml.hbs deleted file mode 100644 index d88b14f8023..00000000000 --- a/packages/cisco_meraki/data_stream/log/agent/stream/udp.yml.hbs +++ /dev/null @@ -1,3253 +0,0 @@ -udp: -host: "{{udp_host}}:{{udp_port}}" -tags: -{{#if preserve_original_event}} - - preserve_original_event -{{/if}} -{{#each tags as |tag i|}} - - {{tag}} -{{/each}} -fields_under_root: true -fields: - observer: - vendor: "Cisco" - product: "Meraki" - type: "Wireless" -{{#contains "forwarded" tags}} -publisher_pipeline.disable_host: true -{{/contains}} -processors: -{{#if processors}} -{{processors}} -{{/if}} -- script: - lang: javascript - params: - ecs: true - rsa: {{rsa_fields}} - tz_offset: {{tz_offset}} - keep_raw: {{keep_raw_fields}} - debug: {{debug}} - source: | - // Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one - // or more contributor license agreements. Licensed under the Elastic License; - // you may not use this file except in compliance with the Elastic License. - - /* jshint -W014,-W016,-W097,-W116 */ - - var processor = require("processor"); - var console = require("console"); - - var FLAG_FIELD = "log.flags"; - var FIELDS_OBJECT = "nwparser"; - var FIELDS_PREFIX = FIELDS_OBJECT + "."; - - var defaults = { - debug: false, - ecs: true, - rsa: false, - keep_raw: false, - tz_offset: "local", - strip_priority: true - }; - - var saved_flags = null; - var debug; - var map_ecs; - var map_rsa; - var keep_raw; - var device; - var tz_offset; - var strip_priority; - - // Register params from configuration. - function register(params) { - debug = params.debug !== undefined ? params.debug : defaults.debug; - map_ecs = params.ecs !== undefined ? params.ecs : defaults.ecs; - map_rsa = params.rsa !== undefined ? params.rsa : defaults.rsa; - keep_raw = params.keep_raw !== undefined ? params.keep_raw : defaults.keep_raw; - tz_offset = parse_tz_offset(params.tz_offset !== undefined? params.tz_offset : defaults.tz_offset); - strip_priority = params.strip_priority !== undefined? params.strip_priority : defaults.strip_priority; - device = new DeviceProcessor(); - } - - function parse_tz_offset(offset) { - var date; - var m; - switch(offset) { - // local uses the tz offset from the JS VM. - case "local": - date = new Date(); - // Reversing the sign as we the offset from UTC, not to UTC. - return parse_local_tz_offset(-date.getTimezoneOffset()); - // event uses the tz offset from event.timezone (add_locale processor). - case "event": - return offset; - // Otherwise a tz offset in the form "[+-][0-9]{4}" is required. - default: - m = offset.match(/^([+\-])([0-9]{2}):?([0-9]{2})?$/); - if (m === null || m.length !== 4) { - throw("bad timezone offset: '" + offset + "'. Must have the form +HH:MM"); - } - return m[1] + m[2] + ":" + (m[3]!==undefined? m[3] : "00"); - } - } - - function parse_local_tz_offset(minutes) { - var neg = minutes < 0; - minutes = Math.abs(minutes); - var min = minutes % 60; - var hours = Math.floor(minutes / 60); - var pad2digit = function(n) { - if (n < 10) { return "0" + n;} - return "" + n; - }; - return (neg? "-" : "+") + pad2digit(hours) + ":" + pad2digit(min); - } - - function process(evt) { - // Function register is only called by the processor when `params` are set - // in the processor config. - if (device === undefined) { - register(defaults); - } - return device.process(evt); - } - - function processor_chain(subprocessors) { - var builder = new processor.Chain(); - subprocessors.forEach(builder.Add); - return builder.Build().Run; - } - - function linear_select(subprocessors) { - return function (evt) { - var flags = evt.Get(FLAG_FIELD); - var i; - for (i = 0; i < subprocessors.length; i++) { - evt.Delete(FLAG_FIELD); - if (debug) console.warn("linear_select trying entry " + i); - subprocessors[i](evt); - // Dissect processor succeeded? - if (evt.Get(FLAG_FIELD) == null) break; - if (debug) console.warn("linear_select failed entry " + i); - } - if (flags !== null) { - evt.Put(FLAG_FIELD, flags); - } - if (debug) { - if (i < subprocessors.length) { - console.warn("linear_select matched entry " + i); - } else { - console.warn("linear_select didn't match"); - } - } - }; - } - - function conditional(opt) { - return function(evt) { - if (opt.if(evt)) { - opt.then(evt); - } else if (opt.else) { - opt.else(evt); - } - }; - } - - var strip_syslog_priority = (function() { - var isEnabled = function() { return strip_priority === true; }; - var fetchPRI = field("_pri"); - var fetchPayload = field("payload"); - var removePayload = remove(["payload"]); - var cleanup = remove(["_pri", "payload"]); - var onMatch = function(evt) { - var pri, priStr = fetchPRI(evt); - if (priStr != null - && 0 < priStr.length && priStr.length < 4 - && !isNaN((pri = Number(priStr))) - && 0 <= pri && pri < 192) { - var severity = pri & 7, - facility = pri >> 3; - setc("_severity", "" + severity)(evt); - setc("_facility", "" + facility)(evt); - // Replace message with priority stripped. - evt.Put("message", fetchPayload(evt)); - removePayload(evt); - } else { - // not a valid syslog PRI, cleanup. - cleanup(evt); - } - }; - return conditional({ - if: isEnabled, - then: cleanup_flags(match( - "STRIP_PRI", - "message", - "<%{_pri}>%{payload}", - onMatch - )) - }); - })(); - - function match(id, src, pattern, on_success) { - var dissect = new processor.Dissect({ - field: src, - tokenizer: pattern, - target_prefix: FIELDS_OBJECT, - ignore_failure: true, - overwrite_keys: true, - trim_values: "right" - }); - return function (evt) { - var msg = evt.Get(src); - dissect.Run(evt); - var failed = evt.Get(FLAG_FIELD) != null; - if (debug) { - if (failed) { - console.debug("dissect fail: " + id + " field:" + src); - } else { - console.debug("dissect OK: " + id + " field:" + src); - } - console.debug(" expr: <<" + pattern + ">>"); - console.debug(" input: <<" + msg + ">>"); - } - if (on_success != null && !failed) { - on_success(evt); - } - }; - } - - function match_copy(id, src, dst, on_success) { - dst = FIELDS_PREFIX + dst; - if (dst === FIELDS_PREFIX || dst === src) { - return function (evt) { - if (debug) { - console.debug("noop OK: " + id + " field:" + src); - console.debug(" input: <<" + evt.Get(src) + ">>"); - } - if (on_success != null) on_success(evt); - } - } - return function (evt) { - var msg = evt.Get(src); - evt.Put(dst, msg); - if (debug) { - console.debug("copy OK: " + id + " field:" + src); - console.debug(" target: '" + dst + "'"); - console.debug(" input: <<" + msg + ">>"); - } - if (on_success != null) on_success(evt); - } - } - - function cleanup_flags(processor) { - return function(evt) { - processor(evt); - evt.Delete(FLAG_FIELD); - }; - } - - function all_match(opts) { - return function (evt) { - var i; - for (i = 0; i < opts.processors.length; i++) { - evt.Delete(FLAG_FIELD); - opts.processors[i](evt); - // Dissect processor succeeded? - if (evt.Get(FLAG_FIELD) != null) { - if (debug) console.warn("all_match failure at " + i); - if (opts.on_failure != null) opts.on_failure(evt); - return; - } - if (debug) console.warn("all_match success at " + i); - } - if (opts.on_success != null) opts.on_success(evt); - }; - } - - function msgid_select(mapping) { - return function (evt) { - var msgid = evt.Get(FIELDS_PREFIX + "messageid"); - if (msgid == null) { - if (debug) console.warn("msgid_select: no messageid captured!"); - return; - } - var next = mapping[msgid]; - if (next === undefined) { - if (debug) console.warn("msgid_select: no mapping for messageid:" + msgid); - return; - } - if (debug) console.info("msgid_select: matched key=" + msgid); - return next(evt); - }; - } - - function msg(msg_id, match) { - return function (evt) { - match(evt); - if (evt.Get(FLAG_FIELD) == null) { - evt.Put(FIELDS_PREFIX + "msg_id1", msg_id); - } - }; - } - - var start; - - function save_flags(evt) { - saved_flags = evt.Get(FLAG_FIELD); - evt.Put("event.original", evt.Get("message")); - } - - function restore_flags(evt) { - if (saved_flags !== null) { - evt.Put(FLAG_FIELD, saved_flags); - } - evt.Delete("message"); - } - - function constant(value) { - return function (evt) { - return value; - }; - } - - function field(name) { - var fullname = FIELDS_PREFIX + name; - return function (evt) { - return evt.Get(fullname); - }; - } - - function STRCAT(args) { - var s = ""; - var i; - for (i = 0; i < args.length; i++) { - s += args[i]; - } - return s; - } - - // TODO: Implement - function DIRCHK(args) { - unimplemented("DIRCHK"); - } - - function strictToInt(str) { - return str * 1; - } - - function CALC(args) { - if (args.length !== 3) { - console.warn("skipped call to CALC with " + args.length + " arguments."); - return; - } - var a = strictToInt(args[0]); - var b = strictToInt(args[2]); - if (isNaN(a) || isNaN(b)) { - console.warn("failed evaluating CALC arguments a='" + args[0] + "' b='" + args[2] + "'."); - return; - } - var result; - switch (args[1]) { - case "+": - result = a + b; - break; - case "-": - result = a - b; - break; - case "*": - result = a * b; - break; - default: - // Only * and + seen in the parsers. - console.warn("unknown CALC operation '" + args[1] + "'."); - return; - } - // Always return a string - return result !== undefined ? "" + result : result; - } - - var quoteChars = "\"'`"; - function RMQ(args) { - if(args.length !== 1) { - console.warn("RMQ: only one argument expected"); - return; - } - var value = args[0].trim(); - var n = value.length; - var char; - return n > 1 - && (char=value.charAt(0)) === value.charAt(n-1) - && quoteChars.indexOf(char) !== -1? - value.substr(1, n-2) - : value; - } - - function call(opts) { - var args = new Array(opts.args.length); - return function (evt) { - for (var i = 0; i < opts.args.length; i++) - if ((args[i] = opts.args[i](evt)) == null) return; - var result = opts.fn(args); - if (result != null) { - evt.Put(opts.dest, result); - } - }; - } - - function nop(evt) { - } - - function appendErrorMsg(evt, msg) { - var value = evt.Get("error.message"); - if (value == null) { - value = [msg]; - } else if (msg instanceof Array) { - value.push(msg); - } else { - value = [value, msg]; - } - evt.Put("error.message", value); - } - - function unimplemented(name) { - appendErrorMsg("unimplemented feature: " + name); - } - - function lookup(opts) { - return function (evt) { - var key = opts.key(evt); - if (key == null) return; - var value = opts.map.keyvaluepairs[key]; - if (value === undefined) { - value = opts.map.default; - } - if (value !== undefined) { - evt.Put(opts.dest, value(evt)); - } - }; - } - - function set(fields) { - return new processor.AddFields({ - target: FIELDS_OBJECT, - fields: fields, - }); - } - - function setf(dst, src) { - return function (evt) { - var val = evt.Get(FIELDS_PREFIX + src); - if (val != null) evt.Put(FIELDS_PREFIX + dst, val); - }; - } - - function setc(dst, value) { - return function (evt) { - evt.Put(FIELDS_PREFIX + dst, value); - }; - } - - function set_field(opts) { - return function (evt) { - var val = opts.value(evt); - if (val != null) evt.Put(opts.dest, val); - }; - } - - function dump(label) { - return function (evt) { - console.log("Dump of event at " + label + ": " + JSON.stringify(evt, null, "\t")); - }; - } - - function date_time_join_args(evt, arglist) { - var str = ""; - for (var i = 0; i < arglist.length; i++) { - var fname = FIELDS_PREFIX + arglist[i]; - var val = evt.Get(fname); - if (val != null) { - if (str !== "") str += " "; - str += val; - } else { - if (debug) console.warn("in date_time: input arg " + fname + " is not set"); - } - } - return str; - } - - function to2Digit(num) { - return num? (num < 10? "0" + num : num) : "00"; - } - - // Make two-digit dates 00-69 interpreted as 2000-2069 - // and dates 70-99 translated to 1970-1999. - var twoDigitYearEpoch = 70; - var twoDigitYearCentury = 2000; - - // This is to accept dates up to 2 days in the future, only used when - // no year is specified in a date. 2 days should be enough to account for - // time differences between systems and different tz offsets. - var maxFutureDelta = 2*24*60*60*1000; - - // DateContainer stores date fields and then converts those fields into - // a Date. Necessary because building a Date using its set() methods gives - // different results depending on the order of components. - function DateContainer(tzOffset) { - this.offset = tzOffset === undefined? "Z" : tzOffset; - } - - DateContainer.prototype = { - setYear: function(v) {this.year = v;}, - setMonth: function(v) {this.month = v;}, - setDay: function(v) {this.day = v;}, - setHours: function(v) {this.hours = v;}, - setMinutes: function(v) {this.minutes = v;}, - setSeconds: function(v) {this.seconds = v;}, - - setUNIX: function(v) {this.unix = v;}, - - set2DigitYear: function(v) { - this.year = v < twoDigitYearEpoch? twoDigitYearCentury + v : twoDigitYearCentury + v - 100; - }, - - toDate: function() { - if (this.unix !== undefined) { - return new Date(this.unix * 1000); - } - if (this.day === undefined || this.month === undefined) { - // Can't make a date from this. - return undefined; - } - if (this.year === undefined) { - // A date without a year. Set current year, or previous year - // if date would be in the future. - var now = new Date(); - this.year = now.getFullYear(); - var date = this.toDate(); - if (date.getTime() - now.getTime() > maxFutureDelta) { - date.setFullYear(now.getFullYear() - 1); - } - return date; - } - var MM = to2Digit(this.month); - var DD = to2Digit(this.day); - var hh = to2Digit(this.hours); - var mm = to2Digit(this.minutes); - var ss = to2Digit(this.seconds); - return new Date(this.year + "-" + MM + "-" + DD + "T" + hh + ":" + mm + ":" + ss + this.offset); - } - } - - function date_time_try_pattern(fmt, str, tzOffset) { - var date = new DateContainer(tzOffset); - var pos = date_time_try_pattern_at_pos(fmt, str, 0, date); - return pos !== undefined? date.toDate() : undefined; - } - - function date_time_try_pattern_at_pos(fmt, str, pos, date) { - var len = str.length; - for (var proc = 0; pos !== undefined && pos < len && proc < fmt.length; proc++) { - pos = fmt[proc](str, pos, date); - } - return pos; - } - - function date_time(opts) { - return function (evt) { - var tzOffset = opts.tz || tz_offset; - if (tzOffset === "event") { - tzOffset = evt.Get("event.timezone"); - } - var str = date_time_join_args(evt, opts.args); - for (var i = 0; i < opts.fmts.length; i++) { - var date = date_time_try_pattern(opts.fmts[i], str, tzOffset); - if (date !== undefined) { - evt.Put(FIELDS_PREFIX + opts.dest, date); - return; - } - } - if (debug) console.warn("in date_time: id=" + opts.id + " FAILED: " + str); - }; - } - - var uA = 60 * 60 * 24; - var uD = 60 * 60 * 24; - var uF = 60 * 60; - var uG = 60 * 60 * 24 * 30; - var uH = 60 * 60; - var uI = 60 * 60; - var uJ = 60 * 60 * 24; - var uM = 60 * 60 * 24 * 30; - var uN = 60 * 60; - var uO = 1; - var uS = 1; - var uT = 60; - var uU = 60; - var uc = dc; - - function duration(opts) { - return function(evt) { - var str = date_time_join_args(evt, opts.args); - for (var i = 0; i < opts.fmts.length; i++) { - var seconds = duration_try_pattern(opts.fmts[i], str); - if (seconds !== undefined) { - evt.Put(FIELDS_PREFIX + opts.dest, seconds); - return; - } - } - if (debug) console.warn("in duration: id=" + opts.id + " (s) FAILED: " + str); - }; - } - - function duration_try_pattern(fmt, str) { - var secs = 0; - var pos = 0; - for (var i=0; i [ month_id , how many chars to skip if month in long form ] - "Jan": [0, 4], - "Feb": [1, 5], - "Mar": [2, 2], - "Apr": [3, 2], - "May": [4, 0], - "Jun": [5, 1], - "Jul": [6, 1], - "Aug": [7, 3], - "Sep": [8, 6], - "Oct": [9, 4], - "Nov": [10, 5], - "Dec": [11, 4], - "jan": [0, 4], - "feb": [1, 5], - "mar": [2, 2], - "apr": [3, 2], - "may": [4, 0], - "jun": [5, 1], - "jul": [6, 1], - "aug": [7, 3], - "sep": [8, 6], - "oct": [9, 4], - "nov": [10, 5], - "dec": [11, 4], - }; - - // var dC = undefined; - var dR = dateMonthName(true); - var dB = dateMonthName(false); - var dM = dateFixedWidthNumber("M", 2, 1, 12, DateContainer.prototype.setMonth); - var dG = dateVariableWidthNumber("G", 1, 12, DateContainer.prototype.setMonth); - var dD = dateFixedWidthNumber("D", 2, 1, 31, DateContainer.prototype.setDay); - var dF = dateVariableWidthNumber("F", 1, 31, DateContainer.prototype.setDay); - var dH = dateFixedWidthNumber("H", 2, 0, 24, DateContainer.prototype.setHours); - var dI = dateVariableWidthNumber("I", 0, 24, DateContainer.prototype.setHours); // Accept hours >12 - var dN = dateVariableWidthNumber("N", 0, 24, DateContainer.prototype.setHours); - var dT = dateFixedWidthNumber("T", 2, 0, 59, DateContainer.prototype.setMinutes); - var dU = dateVariableWidthNumber("U", 0, 59, DateContainer.prototype.setMinutes); - var dP = parseAMPM; // AM|PM - var dQ = parseAMPM; // A.M.|P.M - var dS = dateFixedWidthNumber("S", 2, 0, 60, DateContainer.prototype.setSeconds); - var dO = dateVariableWidthNumber("O", 0, 60, DateContainer.prototype.setSeconds); - var dY = dateFixedWidthNumber("Y", 2, 0, 99, DateContainer.prototype.set2DigitYear); - var dW = dateFixedWidthNumber("W", 4, 1000, 9999, DateContainer.prototype.setYear); - var dZ = parseHMS; - var dX = dateVariableWidthNumber("X", 0, 0x10000000000, DateContainer.prototype.setUNIX); - - // parseAMPM parses "A.M", "AM", "P.M", "PM" from logs. - // Only works if this modifier appears after the hour has been read from logs - // which is always the case in the 300 devices. - function parseAMPM(str, pos, date) { - var n = str.length; - var start = skipws(str, pos); - if (start + 2 > n) return; - var head = str.substr(start, 2).toUpperCase(); - var isPM = false; - var skip = false; - switch (head) { - case "A.": - skip = true; - /* falls through */ - case "AM": - break; - case "P.": - skip = true; - /* falls through */ - case "PM": - isPM = true; - break; - default: - if (debug) console.warn("can't parse pos " + start + " as AM/PM: " + str + "(head:" + head + ")"); - return; - } - pos = start + 2; - if (skip) { - if (pos+2 > n || str.substr(pos, 2).toUpperCase() !== "M.") { - if (debug) console.warn("can't parse pos " + start + " as AM/PM: " + str + "(tail)"); - return; - } - pos += 2; - } - var hh = date.hours; - if (isPM) { - // Accept existing hour in 24h format. - if (hh < 12) hh += 12; - } else { - if (hh === 12) hh = 0; - } - date.setHours(hh); - return pos; - } - - function parseHMS(str, pos, date) { - return date_time_try_pattern_at_pos([dN, dc(":"), dU, dc(":"), dO], str, pos, date); - } - - function skipws(str, pos) { - for ( var n = str.length; - pos < n && str.charAt(pos) === " "; - pos++) - ; - return pos; - } - - function skipdigits(str, pos) { - var c; - for (var n = str.length; - pos < n && (c = str.charAt(pos)) >= "0" && c <= "9"; - pos++) - ; - return pos; - } - - function dSkip(str, pos, date) { - var chr; - for (;pos < str.length && (chr=str[pos])<'0' || chr>'9'; pos++) {} - return pos < str.length? pos : undefined; - } - - function dateVariableWidthNumber(fmtChar, min, max, setter) { - return function (str, pos, date) { - var start = skipws(str, pos); - pos = skipdigits(str, start); - var s = str.substr(start, pos - start); - var value = parseInt(s, 10); - if (value >= min && value <= max) { - setter.call(date, value); - return pos; - } - return; - }; - } - - function dateFixedWidthNumber(fmtChar, width, min, max, setter) { - return function (str, pos, date) { - pos = skipws(str, pos); - var n = str.length; - if (pos + width > n) return; - var s = str.substr(pos, width); - var value = parseInt(s, 10); - if (value >= min && value <= max) { - setter.call(date, value); - return pos + width; - } - return; - }; - } - - // Short month name (Jan..Dec). - function dateMonthName(long) { - return function (str, pos, date) { - pos = skipws(str, pos); - var n = str.length; - if (pos + 3 > n) return; - var mon = str.substr(pos, 3); - var idx = shortMonths[mon]; - if (idx === undefined) { - idx = shortMonths[mon.toLowerCase()]; - } - if (idx === undefined) { - //console.warn("parsing date_time: '" + mon + "' is not a valid short month (%B)"); - return; - } - date.setMonth(idx[0]+1); - return pos + 3 + (long ? idx[1] : 0); - }; - } - - function url_wrapper(dst, src, fn) { - return function(evt) { - var value = evt.Get(FIELDS_PREFIX + src), result; - if (value != null && (result = fn(value))!== undefined) { - evt.Put(FIELDS_PREFIX + dst, result); - } else { - console.debug(fn.name + " failed for '" + value + "'"); - } - }; - } - - // The following regular expression for parsing URLs from: - // https://github.com/wizard04wsu/URI_Parsing - // - // The MIT License (MIT) - // - // Copyright (c) 2014 Andrew Harrison - // - // Permission is hereby granted, free of charge, to any person obtaining a copy of - // this software and associated documentation files (the "Software"), to deal in - // the Software without restriction, including without limitation the rights to - // use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of - // the Software, and to permit persons to whom the Software is furnished to do so, - // subject to the following conditions: - // - // The above copyright notice and this permission notice shall be included in all - // copies or substantial portions of the Software. - // - // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - // IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS - // FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR - // COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER - // IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN - // CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. - var uriRegExp = /^([a-z][a-z0-9+.\-]*):(?:\/\/((?:(?=((?:[a-z0-9\-._~!$&'()*+,;=:]|%[0-9A-F]{2})*))(\3)@)?(?=(\[[0-9A-F:.]{2,}\]|(?:[a-z0-9\-._~!$&'()*+,;=]|%[0-9A-F]{2})*))\5(?::(?=(\d*))\6)?)(\/(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/]|%[0-9A-F]{2})*))\8)?|(\/?(?!\/)(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/]|%[0-9A-F]{2})*))\10)?)(?:\?(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/?]|%[0-9A-F]{2})*))\11)?(?:#(?=((?:[a-z0-9-._~!$&'()*+,;=:@\/?]|%[0-9A-F]{2})*))\12)?$/i; - - var uriScheme = 1; - var uriDomain = 5; - var uriPort = 6; - var uriPath = 7; - var uriPathAlt = 9; - var uriQuery = 11; - - function domain(dst, src) { - return url_wrapper(dst, src, extract_domain); - } - - function split_url(value) { - var m = value.match(uriRegExp); - if (m && m[uriDomain]) return m; - // Support input in the form "www.example.net/path", but not "/path". - m = ("null://" + value).match(uriRegExp); - if (m) return m; - } - - function extract_domain(value) { - var m = split_url(value); - if (m && m[uriDomain]) return m[uriDomain]; - } - - var extFromPage = /\.[^.]+$/; - function extract_ext(value) { - var page = extract_page(value); - if (page) { - var m = page.match(extFromPage); - if (m) return m[0]; - } - } - - function ext(dst, src) { - return url_wrapper(dst, src, extract_ext); - } - - function fqdn(dst, src) { - // TODO: fqdn and domain(eTLD+1) are currently the same. - return domain(dst, src); - } - - var pageFromPathRegExp = /\/([^\/]+)$/; - var pageName = 1; - - function extract_page(value) { - value = extract_path(value); - if (!value) return undefined; - var m = value.match(pageFromPathRegExp); - if (m) return m[pageName]; - } - - function page(dst, src) { - return url_wrapper(dst, src, extract_page); - } - - function extract_path(value) { - var m = split_url(value); - return m? m[uriPath] || m[uriPathAlt] : undefined; - } - - function path(dst, src) { - return url_wrapper(dst, src, extract_path); - } - - // Map common schemes to their default port. - // port has to be a string (will be converted at a later stage). - var schemePort = { - "ftp": "21", - "ssh": "22", - "http": "80", - "https": "443", - }; - - function extract_port(value) { - var m = split_url(value); - if (!m) return undefined; - if (m[uriPort]) return m[uriPort]; - if (m[uriScheme]) { - return schemePort[m[uriScheme]]; - } - } - - function port(dst, src) { - return url_wrapper(dst, src, extract_port); - } - - function extract_query(value) { - var m = split_url(value); - if (m && m[uriQuery]) return m[uriQuery]; - } - - function query(dst, src) { - return url_wrapper(dst, src, extract_query); - } - - function extract_root(value) { - var m = split_url(value); - if (m && m[uriDomain] && m[uriDomain]) { - var scheme = m[uriScheme] && m[uriScheme] !== "null"? - m[uriScheme] + "://" : ""; - var port = m[uriPort]? ":" + m[uriPort] : ""; - return scheme + m[uriDomain] + port; - } - } - - function root(dst, src) { - return url_wrapper(dst, src, extract_root); - } - - function tagval(id, src, cfg, keys, on_success) { - var fail = function(evt) { - evt.Put(FLAG_FIELD, "tagval_parsing_error"); - } - if (cfg.kv_separator.length !== 1) { - throw("Invalid TAGVALMAP ValueDelimiter (must have 1 character)"); - } - var quotes_len = cfg.open_quote.length > 0 && cfg.close_quote.length > 0? - cfg.open_quote.length + cfg.close_quote.length : 0; - var kv_regex = new RegExp('^([^' + cfg.kv_separator + ']*)*' + cfg.kv_separator + ' *(.*)*$'); - return function(evt) { - var msg = evt.Get(src); - if (msg === undefined) { - console.warn("tagval: input field is missing"); - return fail(evt); - } - var pairs = msg.split(cfg.pair_separator); - var i; - var success = false; - var prev = ""; - for (i=0; i 0 && - value.length >= cfg.open_quote.length + cfg.close_quote.length && - value.substr(0, cfg.open_quote.length) === cfg.open_quote && - value.substr(value.length - cfg.close_quote.length) === cfg.close_quote) { - value = value.substr(cfg.open_quote.length, value.length - quotes_len); - } - evt.Put(FIELDS_PREFIX + field, value); - success = true; - } - if (!success) { - return fail(evt); - } - if (on_success != null) { - on_success(evt); - } - } - } - - var ecs_mappings = { - "_facility": {convert: to_long, to:[{field: "log.syslog.facility.code", setter: fld_set}]}, - "_pri": {convert: to_long, to:[{field: "log.syslog.priority", setter: fld_set}]}, - "_severity": {convert: to_long, to:[{field: "log.syslog.severity.code", setter: fld_set}]}, - "action": {to:[{field: "event.action", setter: fld_prio, prio: 0}]}, - "administrator": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 4}]}, - "alias.ip": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 3},{field: "related.ip", setter: fld_append}]}, - "alias.ipv6": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 4},{field: "related.ip", setter: fld_append}]}, - "alias.mac": {convert: to_mac, to:[{field: "host.mac", setter: fld_prio, prio: 1}]}, - "application": {to:[{field: "network.application", setter: fld_set}]}, - "bytes": {convert: to_long, to:[{field: "network.bytes", setter: fld_set}]}, - "c_domain": {to:[{field: "source.domain", setter: fld_prio, prio: 1}]}, - "c_logon_id": {to:[{field: "user.id", setter: fld_prio, prio: 2}]}, - "c_user_name": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 8}]}, - "c_username": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 2}]}, - "cctld": {to:[{field: "url.top_level_domain", setter: fld_prio, prio: 1}]}, - "child_pid": {convert: to_long, to:[{field: "process.pid", setter: fld_prio, prio: 1}]}, - "child_pid_val": {to:[{field: "process.title", setter: fld_set}]}, - "child_process": {to:[{field: "process.name", setter: fld_prio, prio: 1}]}, - "city.dst": {to:[{field: "destination.geo.city_name", setter: fld_set}]}, - "city.src": {to:[{field: "source.geo.city_name", setter: fld_set}]}, - "daddr": {convert: to_ip, to:[{field: "destination.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "daddr_v6": {convert: to_ip, to:[{field: "destination.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "ddomain": {to:[{field: "destination.domain", setter: fld_prio, prio: 0}]}, - "devicehostip": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 2},{field: "related.ip", setter: fld_append}]}, - "devicehostmac": {convert: to_mac, to:[{field: "host.mac", setter: fld_prio, prio: 0}]}, - "dhost": {to:[{field: "destination.address", setter: fld_set},{field: "related.hosts", setter: fld_append}]}, - "dinterface": {to:[{field: "observer.egress.interface.name", setter: fld_set}]}, - "direction": {to:[{field: "network.direction", setter: fld_set}]}, - "directory": {to:[{field: "file.directory", setter: fld_set}]}, - "dmacaddr": {convert: to_mac, to:[{field: "destination.mac", setter: fld_set}]}, - "dns.responsetype": {to:[{field: "dns.answers.type", setter: fld_set}]}, - "dns.resptext": {to:[{field: "dns.answers.name", setter: fld_set}]}, - "dns_querytype": {to:[{field: "dns.question.type", setter: fld_set}]}, - "domain": {to:[{field: "server.domain", setter: fld_prio, prio: 0},{field: "related.hosts", setter: fld_append}]}, - "domain.dst": {to:[{field: "destination.domain", setter: fld_prio, prio: 1}]}, - "domain.src": {to:[{field: "source.domain", setter: fld_prio, prio: 2}]}, - "domain_id": {to:[{field: "user.domain", setter: fld_set}]}, - "domainname": {to:[{field: "server.domain", setter: fld_prio, prio: 1}]}, - "dport": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 0}]}, - "dtransaddr": {convert: to_ip, to:[{field: "destination.nat.ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "dtransport": {convert: to_long, to:[{field: "destination.nat.port", setter: fld_prio, prio: 0}]}, - "ec_outcome": {to:[{field: "event.outcome", setter: fld_ecs_outcome}]}, - "event_description": {to:[{field: "message", setter: fld_prio, prio: 0}]}, - "event_source": {to:[{field: "related.hosts", setter: fld_append}]}, - "event_time": {convert: to_date, to:[{field: "@timestamp", setter: fld_set}]}, - "event_type": {to:[{field: "event.action", setter: fld_prio, prio: 1}]}, - "extension": {to:[{field: "file.extension", setter: fld_prio, prio: 1}]}, - "file.attributes": {to:[{field: "file.attributes", setter: fld_set}]}, - "filename": {to:[{field: "file.name", setter: fld_prio, prio: 0}]}, - "filename_size": {convert: to_long, to:[{field: "file.size", setter: fld_set}]}, - "filepath": {to:[{field: "file.path", setter: fld_set}]}, - "filetype": {to:[{field: "file.type", setter: fld_set}]}, - "fqdn": {to:[{field: "related.hosts", setter: fld_append}]}, - "group": {to:[{field: "group.name", setter: fld_set}]}, - "groupid": {to:[{field: "group.id", setter: fld_set}]}, - "host": {to:[{field: "host.name", setter: fld_prio, prio: 1},{field: "related.hosts", setter: fld_append}]}, - "hostip": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "hostip_v6": {convert: to_ip, to:[{field: "host.ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "hostname": {to:[{field: "host.name", setter: fld_prio, prio: 0}]}, - "id": {to:[{field: "event.code", setter: fld_prio, prio: 0}]}, - "interface": {to:[{field: "network.interface.name", setter: fld_set}]}, - "ip.orig": {convert: to_ip, to:[{field: "network.forwarded_ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "ip.trans.dst": {convert: to_ip, to:[{field: "destination.nat.ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "ip.trans.src": {convert: to_ip, to:[{field: "source.nat.ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "ipv6.orig": {convert: to_ip, to:[{field: "network.forwarded_ip", setter: fld_prio, prio: 2},{field: "related.ip", setter: fld_append}]}, - "latdec_dst": {convert: to_double, to:[{field: "destination.geo.location.lat", setter: fld_set}]}, - "latdec_src": {convert: to_double, to:[{field: "source.geo.location.lat", setter: fld_set}]}, - "location_city": {to:[{field: "geo.city_name", setter: fld_set}]}, - "location_country": {to:[{field: "geo.country_name", setter: fld_set}]}, - "location_desc": {to:[{field: "geo.name", setter: fld_set}]}, - "location_dst": {to:[{field: "destination.geo.country_name", setter: fld_set}]}, - "location_src": {to:[{field: "source.geo.country_name", setter: fld_set}]}, - "location_state": {to:[{field: "geo.region_name", setter: fld_set}]}, - "logon_id": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 5}]}, - "longdec_dst": {convert: to_double, to:[{field: "destination.geo.location.lon", setter: fld_set}]}, - "longdec_src": {convert: to_double, to:[{field: "source.geo.location.lon", setter: fld_set}]}, - "macaddr": {convert: to_mac, to:[{field: "host.mac", setter: fld_prio, prio: 2}]}, - "messageid": {to:[{field: "event.code", setter: fld_prio, prio: 1}]}, - "method": {to:[{field: "http.request.method", setter: fld_set}]}, - "msg": {to:[{field: "message", setter: fld_set}]}, - "orig_ip": {convert: to_ip, to:[{field: "network.forwarded_ip", setter: fld_prio, prio: 1},{field: "related.ip", setter: fld_append}]}, - "owner": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 6}]}, - "packets": {convert: to_long, to:[{field: "network.packets", setter: fld_set}]}, - "parent_pid": {convert: to_long, to:[{field: "process.parent.pid", setter: fld_prio, prio: 0}]}, - "parent_pid_val": {to:[{field: "process.parent.title", setter: fld_set}]}, - "parent_process": {to:[{field: "process.parent.name", setter: fld_prio, prio: 0}]}, - "patient_fullname": {to:[{field: "user.full_name", setter: fld_prio, prio: 1}]}, - "port.dst": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 1}]}, - "port.src": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 1}]}, - "port.trans.dst": {convert: to_long, to:[{field: "destination.nat.port", setter: fld_prio, prio: 1}]}, - "port.trans.src": {convert: to_long, to:[{field: "source.nat.port", setter: fld_prio, prio: 1}]}, - "process": {to:[{field: "process.name", setter: fld_prio, prio: 0}]}, - "process_id": {convert: to_long, to:[{field: "process.pid", setter: fld_prio, prio: 0}]}, - "process_id_src": {convert: to_long, to:[{field: "process.parent.pid", setter: fld_prio, prio: 1}]}, - "process_src": {to:[{field: "process.parent.name", setter: fld_prio, prio: 1}]}, - "product": {to:[{field: "observer.product", setter: fld_set}]}, - "protocol": {to:[{field: "network.protocol", setter: fld_set}]}, - "query": {to:[{field: "url.query", setter: fld_prio, prio: 2}]}, - "rbytes": {convert: to_long, to:[{field: "destination.bytes", setter: fld_set}]}, - "referer": {to:[{field: "http.request.referrer", setter: fld_prio, prio: 1}]}, - "rulename": {to:[{field: "rule.name", setter: fld_set}]}, - "saddr": {convert: to_ip, to:[{field: "source.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "saddr_v6": {convert: to_ip, to:[{field: "source.ip", setter: fld_set},{field: "related.ip", setter: fld_append}]}, - "sbytes": {convert: to_long, to:[{field: "source.bytes", setter: fld_set}]}, - "sdomain": {to:[{field: "source.domain", setter: fld_prio, prio: 0}]}, - "service": {to:[{field: "service.name", setter: fld_prio, prio: 1}]}, - "service.name": {to:[{field: "service.name", setter: fld_prio, prio: 0}]}, - "service_account": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 7}]}, - "severity": {to:[{field: "log.level", setter: fld_set}]}, - "shost": {to:[{field: "host.hostname", setter: fld_set},{field: "source.address", setter: fld_set},{field: "related.hosts", setter: fld_append}]}, - "sinterface": {to:[{field: "observer.ingress.interface.name", setter: fld_set}]}, - "sld": {to:[{field: "url.registered_domain", setter: fld_set}]}, - "smacaddr": {convert: to_mac, to:[{field: "source.mac", setter: fld_set}]}, - "sport": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 0}]}, - "stransaddr": {convert: to_ip, to:[{field: "source.nat.ip", setter: fld_prio, prio: 0},{field: "related.ip", setter: fld_append}]}, - "stransport": {convert: to_long, to:[{field: "source.nat.port", setter: fld_prio, prio: 0}]}, - "tcp.dstport": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 2}]}, - "tcp.srcport": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 2}]}, - "timezone": {to:[{field: "event.timezone", setter: fld_set}]}, - "tld": {to:[{field: "url.top_level_domain", setter: fld_prio, prio: 0}]}, - "udp.dstport": {convert: to_long, to:[{field: "destination.port", setter: fld_prio, prio: 3}]}, - "udp.srcport": {convert: to_long, to:[{field: "source.port", setter: fld_prio, prio: 3}]}, - "uid": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 3}]}, - "url": {to:[{field: "url.original", setter: fld_prio, prio: 1}]}, - "url_raw": {to:[{field: "url.original", setter: fld_prio, prio: 0}]}, - "urldomain": {to:[{field: "url.domain", setter: fld_prio, prio: 0}]}, - "urlquery": {to:[{field: "url.query", setter: fld_prio, prio: 0}]}, - "user": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 0}]}, - "user.id": {to:[{field: "user.id", setter: fld_prio, prio: 1}]}, - "user_agent": {to:[{field: "user_agent.original", setter: fld_set}]}, - "user_fullname": {to:[{field: "user.full_name", setter: fld_prio, prio: 0}]}, - "user_id": {to:[{field: "user.id", setter: fld_prio, prio: 0}]}, - "username": {to:[{field: "related.user", setter: fld_append},{field: "user.name", setter: fld_prio, prio: 1}]}, - "version": {to:[{field: "observer.version", setter: fld_set}]}, - "web_domain": {to:[{field: "url.domain", setter: fld_prio, prio: 1},{field: "related.hosts", setter: fld_append}]}, - "web_extension": {to:[{field: "file.extension", setter: fld_prio, prio: 0}]}, - "web_query": {to:[{field: "url.query", setter: fld_prio, prio: 1}]}, - "web_ref_domain": {to:[{field: "related.hosts", setter: fld_append}]}, - "web_referer": {to:[{field: "http.request.referrer", setter: fld_prio, prio: 0}]}, - "web_root": {to:[{field: "url.path", setter: fld_set}]}, - "webpage": {to:[{field: "file.name", setter: fld_prio, prio: 1}]}, - }; - - var rsa_mappings = { - "access_point": {to:[{field: "rsa.wireless.access_point", setter: fld_set}]}, - "accesses": {to:[{field: "rsa.identity.accesses", setter: fld_set}]}, - "acl_id": {to:[{field: "rsa.misc.acl_id", setter: fld_set}]}, - "acl_op": {to:[{field: "rsa.misc.acl_op", setter: fld_set}]}, - "acl_pos": {to:[{field: "rsa.misc.acl_pos", setter: fld_set}]}, - "acl_table": {to:[{field: "rsa.misc.acl_table", setter: fld_set}]}, - "action": {to:[{field: "rsa.misc.action", setter: fld_append}]}, - "ad_computer_dst": {to:[{field: "rsa.network.ad_computer_dst", setter: fld_set}]}, - "addr": {to:[{field: "rsa.network.addr", setter: fld_set}]}, - "admin": {to:[{field: "rsa.misc.admin", setter: fld_set}]}, - "agent": {to:[{field: "rsa.misc.client", setter: fld_prio, prio: 0}]}, - "agent.id": {to:[{field: "rsa.misc.agent_id", setter: fld_set}]}, - "alarm_id": {to:[{field: "rsa.misc.alarm_id", setter: fld_set}]}, - "alarmname": {to:[{field: "rsa.misc.alarmname", setter: fld_set}]}, - "alert": {to:[{field: "rsa.threat.alert", setter: fld_set}]}, - "alert_id": {to:[{field: "rsa.misc.alert_id", setter: fld_set}]}, - "alias.host": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "analysis.file": {to:[{field: "rsa.investigations.analysis_file", setter: fld_set}]}, - "analysis.service": {to:[{field: "rsa.investigations.analysis_service", setter: fld_set}]}, - "analysis.session": {to:[{field: "rsa.investigations.analysis_session", setter: fld_set}]}, - "app_id": {to:[{field: "rsa.misc.app_id", setter: fld_set}]}, - "attachment": {to:[{field: "rsa.file.attachment", setter: fld_set}]}, - "audit": {to:[{field: "rsa.misc.audit", setter: fld_set}]}, - "audit_class": {to:[{field: "rsa.internal.audit_class", setter: fld_set}]}, - "audit_object": {to:[{field: "rsa.misc.audit_object", setter: fld_set}]}, - "auditdata": {to:[{field: "rsa.misc.auditdata", setter: fld_set}]}, - "authmethod": {to:[{field: "rsa.identity.auth_method", setter: fld_set}]}, - "autorun_type": {to:[{field: "rsa.misc.autorun_type", setter: fld_set}]}, - "bcc": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "benchmark": {to:[{field: "rsa.misc.benchmark", setter: fld_set}]}, - "binary": {to:[{field: "rsa.file.binary", setter: fld_set}]}, - "boc": {to:[{field: "rsa.investigations.boc", setter: fld_set}]}, - "bssid": {to:[{field: "rsa.wireless.wlan_ssid", setter: fld_prio, prio: 1}]}, - "bypass": {to:[{field: "rsa.misc.bypass", setter: fld_set}]}, - "c_sid": {to:[{field: "rsa.identity.user_sid_src", setter: fld_set}]}, - "cache": {to:[{field: "rsa.misc.cache", setter: fld_set}]}, - "cache_hit": {to:[{field: "rsa.misc.cache_hit", setter: fld_set}]}, - "calling_from": {to:[{field: "rsa.misc.phone", setter: fld_prio, prio: 1}]}, - "calling_to": {to:[{field: "rsa.misc.phone", setter: fld_prio, prio: 0}]}, - "category": {to:[{field: "rsa.misc.category", setter: fld_set}]}, - "cc": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "cc.number": {convert: to_long, to:[{field: "rsa.misc.cc_number", setter: fld_set}]}, - "cefversion": {to:[{field: "rsa.misc.cefversion", setter: fld_set}]}, - "cert.serial": {to:[{field: "rsa.crypto.cert_serial", setter: fld_set}]}, - "cert_ca": {to:[{field: "rsa.crypto.cert_ca", setter: fld_set}]}, - "cert_checksum": {to:[{field: "rsa.crypto.cert_checksum", setter: fld_set}]}, - "cert_common": {to:[{field: "rsa.crypto.cert_common", setter: fld_set}]}, - "cert_error": {to:[{field: "rsa.crypto.cert_error", setter: fld_set}]}, - "cert_hostname": {to:[{field: "rsa.crypto.cert_host_name", setter: fld_set}]}, - "cert_hostname_cat": {to:[{field: "rsa.crypto.cert_host_cat", setter: fld_set}]}, - "cert_issuer": {to:[{field: "rsa.crypto.cert_issuer", setter: fld_set}]}, - "cert_keysize": {to:[{field: "rsa.crypto.cert_keysize", setter: fld_set}]}, - "cert_status": {to:[{field: "rsa.crypto.cert_status", setter: fld_set}]}, - "cert_subject": {to:[{field: "rsa.crypto.cert_subject", setter: fld_set}]}, - "cert_username": {to:[{field: "rsa.crypto.cert_username", setter: fld_set}]}, - "cfg.attr": {to:[{field: "rsa.misc.cfg_attr", setter: fld_set}]}, - "cfg.obj": {to:[{field: "rsa.misc.cfg_obj", setter: fld_set}]}, - "cfg.path": {to:[{field: "rsa.misc.cfg_path", setter: fld_set}]}, - "change_attribute": {to:[{field: "rsa.misc.change_attrib", setter: fld_set}]}, - "change_new": {to:[{field: "rsa.misc.change_new", setter: fld_set}]}, - "change_old": {to:[{field: "rsa.misc.change_old", setter: fld_set}]}, - "changes": {to:[{field: "rsa.misc.changes", setter: fld_set}]}, - "checksum": {to:[{field: "rsa.misc.checksum", setter: fld_set}]}, - "checksum.dst": {to:[{field: "rsa.misc.checksum_dst", setter: fld_set}]}, - "checksum.src": {to:[{field: "rsa.misc.checksum_src", setter: fld_set}]}, - "cid": {to:[{field: "rsa.internal.cid", setter: fld_set}]}, - "client": {to:[{field: "rsa.misc.client", setter: fld_prio, prio: 1}]}, - "client_ip": {to:[{field: "rsa.misc.client_ip", setter: fld_set}]}, - "clustermembers": {to:[{field: "rsa.misc.clustermembers", setter: fld_set}]}, - "cmd": {to:[{field: "rsa.misc.cmd", setter: fld_set}]}, - "cn_acttimeout": {to:[{field: "rsa.misc.cn_acttimeout", setter: fld_set}]}, - "cn_asn_dst": {to:[{field: "rsa.web.cn_asn_dst", setter: fld_set}]}, - "cn_asn_src": {to:[{field: "rsa.misc.cn_asn_src", setter: fld_set}]}, - "cn_bgpv4nxthop": {to:[{field: "rsa.misc.cn_bgpv4nxthop", setter: fld_set}]}, - "cn_ctr_dst_code": {to:[{field: "rsa.misc.cn_ctr_dst_code", setter: fld_set}]}, - "cn_dst_tos": {to:[{field: "rsa.misc.cn_dst_tos", setter: fld_set}]}, - "cn_dst_vlan": {to:[{field: "rsa.misc.cn_dst_vlan", setter: fld_set}]}, - "cn_engine_id": {to:[{field: "rsa.misc.cn_engine_id", setter: fld_set}]}, - "cn_engine_type": {to:[{field: "rsa.misc.cn_engine_type", setter: fld_set}]}, - "cn_f_switch": {to:[{field: "rsa.misc.cn_f_switch", setter: fld_set}]}, - "cn_flowsampid": {to:[{field: "rsa.misc.cn_flowsampid", setter: fld_set}]}, - "cn_flowsampintv": {to:[{field: "rsa.misc.cn_flowsampintv", setter: fld_set}]}, - "cn_flowsampmode": {to:[{field: "rsa.misc.cn_flowsampmode", setter: fld_set}]}, - "cn_inacttimeout": {to:[{field: "rsa.misc.cn_inacttimeout", setter: fld_set}]}, - "cn_inpermbyts": {to:[{field: "rsa.misc.cn_inpermbyts", setter: fld_set}]}, - "cn_inpermpckts": {to:[{field: "rsa.misc.cn_inpermpckts", setter: fld_set}]}, - "cn_invalid": {to:[{field: "rsa.misc.cn_invalid", setter: fld_set}]}, - "cn_ip_proto_ver": {to:[{field: "rsa.misc.cn_ip_proto_ver", setter: fld_set}]}, - "cn_ipv4_ident": {to:[{field: "rsa.misc.cn_ipv4_ident", setter: fld_set}]}, - "cn_l_switch": {to:[{field: "rsa.misc.cn_l_switch", setter: fld_set}]}, - "cn_log_did": {to:[{field: "rsa.misc.cn_log_did", setter: fld_set}]}, - "cn_log_rid": {to:[{field: "rsa.misc.cn_log_rid", setter: fld_set}]}, - "cn_max_ttl": {to:[{field: "rsa.misc.cn_max_ttl", setter: fld_set}]}, - "cn_maxpcktlen": {to:[{field: "rsa.misc.cn_maxpcktlen", setter: fld_set}]}, - "cn_min_ttl": {to:[{field: "rsa.misc.cn_min_ttl", setter: fld_set}]}, - "cn_minpcktlen": {to:[{field: "rsa.misc.cn_minpcktlen", setter: fld_set}]}, - "cn_mpls_lbl_1": {to:[{field: "rsa.misc.cn_mpls_lbl_1", setter: fld_set}]}, - "cn_mpls_lbl_10": {to:[{field: "rsa.misc.cn_mpls_lbl_10", setter: fld_set}]}, - "cn_mpls_lbl_2": {to:[{field: "rsa.misc.cn_mpls_lbl_2", setter: fld_set}]}, - "cn_mpls_lbl_3": {to:[{field: "rsa.misc.cn_mpls_lbl_3", setter: fld_set}]}, - "cn_mpls_lbl_4": {to:[{field: "rsa.misc.cn_mpls_lbl_4", setter: fld_set}]}, - "cn_mpls_lbl_5": {to:[{field: "rsa.misc.cn_mpls_lbl_5", setter: fld_set}]}, - "cn_mpls_lbl_6": {to:[{field: "rsa.misc.cn_mpls_lbl_6", setter: fld_set}]}, - "cn_mpls_lbl_7": {to:[{field: "rsa.misc.cn_mpls_lbl_7", setter: fld_set}]}, - "cn_mpls_lbl_8": {to:[{field: "rsa.misc.cn_mpls_lbl_8", setter: fld_set}]}, - "cn_mpls_lbl_9": {to:[{field: "rsa.misc.cn_mpls_lbl_9", setter: fld_set}]}, - "cn_mplstoplabel": {to:[{field: "rsa.misc.cn_mplstoplabel", setter: fld_set}]}, - "cn_mplstoplabip": {to:[{field: "rsa.misc.cn_mplstoplabip", setter: fld_set}]}, - "cn_mul_dst_byt": {to:[{field: "rsa.misc.cn_mul_dst_byt", setter: fld_set}]}, - "cn_mul_dst_pks": {to:[{field: "rsa.misc.cn_mul_dst_pks", setter: fld_set}]}, - "cn_muligmptype": {to:[{field: "rsa.misc.cn_muligmptype", setter: fld_set}]}, - "cn_rpackets": {to:[{field: "rsa.web.cn_rpackets", setter: fld_set}]}, - "cn_sampalgo": {to:[{field: "rsa.misc.cn_sampalgo", setter: fld_set}]}, - "cn_sampint": {to:[{field: "rsa.misc.cn_sampint", setter: fld_set}]}, - "cn_seqctr": {to:[{field: "rsa.misc.cn_seqctr", setter: fld_set}]}, - "cn_spackets": {to:[{field: "rsa.misc.cn_spackets", setter: fld_set}]}, - "cn_src_tos": {to:[{field: "rsa.misc.cn_src_tos", setter: fld_set}]}, - "cn_src_vlan": {to:[{field: "rsa.misc.cn_src_vlan", setter: fld_set}]}, - "cn_sysuptime": {to:[{field: "rsa.misc.cn_sysuptime", setter: fld_set}]}, - "cn_template_id": {to:[{field: "rsa.misc.cn_template_id", setter: fld_set}]}, - "cn_totbytsexp": {to:[{field: "rsa.misc.cn_totbytsexp", setter: fld_set}]}, - "cn_totflowexp": {to:[{field: "rsa.misc.cn_totflowexp", setter: fld_set}]}, - "cn_totpcktsexp": {to:[{field: "rsa.misc.cn_totpcktsexp", setter: fld_set}]}, - "cn_unixnanosecs": {to:[{field: "rsa.misc.cn_unixnanosecs", setter: fld_set}]}, - "cn_v6flowlabel": {to:[{field: "rsa.misc.cn_v6flowlabel", setter: fld_set}]}, - "cn_v6optheaders": {to:[{field: "rsa.misc.cn_v6optheaders", setter: fld_set}]}, - "code": {to:[{field: "rsa.misc.code", setter: fld_set}]}, - "command": {to:[{field: "rsa.misc.command", setter: fld_set}]}, - "comments": {to:[{field: "rsa.misc.comments", setter: fld_set}]}, - "comp_class": {to:[{field: "rsa.misc.comp_class", setter: fld_set}]}, - "comp_name": {to:[{field: "rsa.misc.comp_name", setter: fld_set}]}, - "comp_rbytes": {to:[{field: "rsa.misc.comp_rbytes", setter: fld_set}]}, - "comp_sbytes": {to:[{field: "rsa.misc.comp_sbytes", setter: fld_set}]}, - "component_version": {to:[{field: "rsa.misc.comp_version", setter: fld_set}]}, - "connection_id": {to:[{field: "rsa.misc.connection_id", setter: fld_prio, prio: 1}]}, - "connectionid": {to:[{field: "rsa.misc.connection_id", setter: fld_prio, prio: 0}]}, - "content": {to:[{field: "rsa.misc.content", setter: fld_set}]}, - "content_type": {to:[{field: "rsa.misc.content_type", setter: fld_set}]}, - "content_version": {to:[{field: "rsa.misc.content_version", setter: fld_set}]}, - "context": {to:[{field: "rsa.misc.context", setter: fld_set}]}, - "count": {to:[{field: "rsa.misc.count", setter: fld_set}]}, - "cpu": {convert: to_long, to:[{field: "rsa.misc.cpu", setter: fld_set}]}, - "cpu_data": {to:[{field: "rsa.misc.cpu_data", setter: fld_set}]}, - "criticality": {to:[{field: "rsa.misc.criticality", setter: fld_set}]}, - "cs_agency_dst": {to:[{field: "rsa.misc.cs_agency_dst", setter: fld_set}]}, - "cs_analyzedby": {to:[{field: "rsa.misc.cs_analyzedby", setter: fld_set}]}, - "cs_av_other": {to:[{field: "rsa.misc.cs_av_other", setter: fld_set}]}, - "cs_av_primary": {to:[{field: "rsa.misc.cs_av_primary", setter: fld_set}]}, - "cs_av_secondary": {to:[{field: "rsa.misc.cs_av_secondary", setter: fld_set}]}, - "cs_bgpv6nxthop": {to:[{field: "rsa.misc.cs_bgpv6nxthop", setter: fld_set}]}, - "cs_bit9status": {to:[{field: "rsa.misc.cs_bit9status", setter: fld_set}]}, - "cs_context": {to:[{field: "rsa.misc.cs_context", setter: fld_set}]}, - "cs_control": {to:[{field: "rsa.misc.cs_control", setter: fld_set}]}, - "cs_data": {to:[{field: "rsa.misc.cs_data", setter: fld_set}]}, - "cs_datecret": {to:[{field: "rsa.misc.cs_datecret", setter: fld_set}]}, - "cs_dst_tld": {to:[{field: "rsa.misc.cs_dst_tld", setter: fld_set}]}, - "cs_eth_dst_ven": {to:[{field: "rsa.misc.cs_eth_dst_ven", setter: fld_set}]}, - "cs_eth_src_ven": {to:[{field: "rsa.misc.cs_eth_src_ven", setter: fld_set}]}, - "cs_event_uuid": {to:[{field: "rsa.misc.cs_event_uuid", setter: fld_set}]}, - "cs_filetype": {to:[{field: "rsa.misc.cs_filetype", setter: fld_set}]}, - "cs_fld": {to:[{field: "rsa.misc.cs_fld", setter: fld_set}]}, - "cs_if_desc": {to:[{field: "rsa.misc.cs_if_desc", setter: fld_set}]}, - "cs_if_name": {to:[{field: "rsa.misc.cs_if_name", setter: fld_set}]}, - "cs_ip_next_hop": {to:[{field: "rsa.misc.cs_ip_next_hop", setter: fld_set}]}, - "cs_ipv4dstpre": {to:[{field: "rsa.misc.cs_ipv4dstpre", setter: fld_set}]}, - "cs_ipv4srcpre": {to:[{field: "rsa.misc.cs_ipv4srcpre", setter: fld_set}]}, - "cs_lifetime": {to:[{field: "rsa.misc.cs_lifetime", setter: fld_set}]}, - "cs_log_medium": {to:[{field: "rsa.misc.cs_log_medium", setter: fld_set}]}, - "cs_loginname": {to:[{field: "rsa.misc.cs_loginname", setter: fld_set}]}, - "cs_modulescore": {to:[{field: "rsa.misc.cs_modulescore", setter: fld_set}]}, - "cs_modulesign": {to:[{field: "rsa.misc.cs_modulesign", setter: fld_set}]}, - "cs_opswatresult": {to:[{field: "rsa.misc.cs_opswatresult", setter: fld_set}]}, - "cs_payload": {to:[{field: "rsa.misc.cs_payload", setter: fld_set}]}, - "cs_registrant": {to:[{field: "rsa.misc.cs_registrant", setter: fld_set}]}, - "cs_registrar": {to:[{field: "rsa.misc.cs_registrar", setter: fld_set}]}, - "cs_represult": {to:[{field: "rsa.misc.cs_represult", setter: fld_set}]}, - "cs_rpayload": {to:[{field: "rsa.misc.cs_rpayload", setter: fld_set}]}, - "cs_sampler_name": {to:[{field: "rsa.misc.cs_sampler_name", setter: fld_set}]}, - "cs_sourcemodule": {to:[{field: "rsa.misc.cs_sourcemodule", setter: fld_set}]}, - "cs_streams": {to:[{field: "rsa.misc.cs_streams", setter: fld_set}]}, - "cs_targetmodule": {to:[{field: "rsa.misc.cs_targetmodule", setter: fld_set}]}, - "cs_v6nxthop": {to:[{field: "rsa.misc.cs_v6nxthop", setter: fld_set}]}, - "cs_whois_server": {to:[{field: "rsa.misc.cs_whois_server", setter: fld_set}]}, - "cs_yararesult": {to:[{field: "rsa.misc.cs_yararesult", setter: fld_set}]}, - "cve": {to:[{field: "rsa.misc.cve", setter: fld_set}]}, - "d_certauth": {to:[{field: "rsa.crypto.d_certauth", setter: fld_set}]}, - "d_cipher": {to:[{field: "rsa.crypto.cipher_dst", setter: fld_set}]}, - "d_ciphersize": {convert: to_long, to:[{field: "rsa.crypto.cipher_size_dst", setter: fld_set}]}, - "d_sslver": {to:[{field: "rsa.crypto.ssl_ver_dst", setter: fld_set}]}, - "data": {to:[{field: "rsa.internal.data", setter: fld_set}]}, - "data_type": {to:[{field: "rsa.misc.data_type", setter: fld_set}]}, - "date": {to:[{field: "rsa.time.date", setter: fld_set}]}, - "datetime": {to:[{field: "rsa.time.datetime", setter: fld_set}]}, - "day": {to:[{field: "rsa.time.day", setter: fld_set}]}, - "db_id": {to:[{field: "rsa.db.db_id", setter: fld_set}]}, - "db_name": {to:[{field: "rsa.db.database", setter: fld_set}]}, - "db_pid": {convert: to_long, to:[{field: "rsa.db.db_pid", setter: fld_set}]}, - "dclass_counter1": {convert: to_long, to:[{field: "rsa.counters.dclass_c1", setter: fld_set}]}, - "dclass_counter1_string": {to:[{field: "rsa.counters.dclass_c1_str", setter: fld_set}]}, - "dclass_counter2": {convert: to_long, to:[{field: "rsa.counters.dclass_c2", setter: fld_set}]}, - "dclass_counter2_string": {to:[{field: "rsa.counters.dclass_c2_str", setter: fld_set}]}, - "dclass_counter3": {convert: to_long, to:[{field: "rsa.counters.dclass_c3", setter: fld_set}]}, - "dclass_counter3_string": {to:[{field: "rsa.counters.dclass_c3_str", setter: fld_set}]}, - "dclass_ratio1": {to:[{field: "rsa.counters.dclass_r1", setter: fld_set}]}, - "dclass_ratio1_string": {to:[{field: "rsa.counters.dclass_r1_str", setter: fld_set}]}, - "dclass_ratio2": {to:[{field: "rsa.counters.dclass_r2", setter: fld_set}]}, - "dclass_ratio2_string": {to:[{field: "rsa.counters.dclass_r2_str", setter: fld_set}]}, - "dclass_ratio3": {to:[{field: "rsa.counters.dclass_r3", setter: fld_set}]}, - "dclass_ratio3_string": {to:[{field: "rsa.counters.dclass_r3_str", setter: fld_set}]}, - "dead": {convert: to_long, to:[{field: "rsa.internal.dead", setter: fld_set}]}, - "description": {to:[{field: "rsa.misc.description", setter: fld_set}]}, - "detail": {to:[{field: "rsa.misc.event_desc", setter: fld_set}]}, - "device": {to:[{field: "rsa.misc.device_name", setter: fld_set}]}, - "device.class": {to:[{field: "rsa.internal.device_class", setter: fld_set}]}, - "device.group": {to:[{field: "rsa.internal.device_group", setter: fld_set}]}, - "device.host": {to:[{field: "rsa.internal.device_host", setter: fld_set}]}, - "device.ip": {convert: to_ip, to:[{field: "rsa.internal.device_ip", setter: fld_set}]}, - "device.ipv6": {convert: to_ip, to:[{field: "rsa.internal.device_ipv6", setter: fld_set}]}, - "device.type": {to:[{field: "rsa.internal.device_type", setter: fld_set}]}, - "device.type.id": {convert: to_long, to:[{field: "rsa.internal.device_type_id", setter: fld_set}]}, - "devicehostname": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "devvendor": {to:[{field: "rsa.misc.devvendor", setter: fld_set}]}, - "dhost": {to:[{field: "rsa.network.host_dst", setter: fld_set}]}, - "did": {to:[{field: "rsa.internal.did", setter: fld_set}]}, - "dinterface": {to:[{field: "rsa.network.dinterface", setter: fld_set}]}, - "directory.dst": {to:[{field: "rsa.file.directory_dst", setter: fld_set}]}, - "directory.src": {to:[{field: "rsa.file.directory_src", setter: fld_set}]}, - "disk_volume": {to:[{field: "rsa.storage.disk_volume", setter: fld_set}]}, - "disposition": {to:[{field: "rsa.misc.disposition", setter: fld_set}]}, - "distance": {to:[{field: "rsa.misc.distance", setter: fld_set}]}, - "dmask": {to:[{field: "rsa.network.dmask", setter: fld_set}]}, - "dn": {to:[{field: "rsa.identity.dn", setter: fld_set}]}, - "dns_a_record": {to:[{field: "rsa.network.dns_a_record", setter: fld_set}]}, - "dns_cname_record": {to:[{field: "rsa.network.dns_cname_record", setter: fld_set}]}, - "dns_id": {to:[{field: "rsa.network.dns_id", setter: fld_set}]}, - "dns_opcode": {to:[{field: "rsa.network.dns_opcode", setter: fld_set}]}, - "dns_ptr_record": {to:[{field: "rsa.network.dns_ptr_record", setter: fld_set}]}, - "dns_resp": {to:[{field: "rsa.network.dns_resp", setter: fld_set}]}, - "dns_type": {to:[{field: "rsa.network.dns_type", setter: fld_set}]}, - "doc_number": {convert: to_long, to:[{field: "rsa.misc.doc_number", setter: fld_set}]}, - "domain": {to:[{field: "rsa.network.domain", setter: fld_set}]}, - "domain1": {to:[{field: "rsa.network.domain1", setter: fld_set}]}, - "dst_dn": {to:[{field: "rsa.identity.dn_dst", setter: fld_set}]}, - "dst_payload": {to:[{field: "rsa.misc.payload_dst", setter: fld_set}]}, - "dst_spi": {to:[{field: "rsa.misc.spi_dst", setter: fld_set}]}, - "dst_zone": {to:[{field: "rsa.network.zone_dst", setter: fld_set}]}, - "dstburb": {to:[{field: "rsa.misc.dstburb", setter: fld_set}]}, - "duration": {convert: to_double, to:[{field: "rsa.time.duration_time", setter: fld_set}]}, - "duration_string": {to:[{field: "rsa.time.duration_str", setter: fld_set}]}, - "ec_activity": {to:[{field: "rsa.investigations.ec_activity", setter: fld_set}]}, - "ec_outcome": {to:[{field: "rsa.investigations.ec_outcome", setter: fld_set}]}, - "ec_subject": {to:[{field: "rsa.investigations.ec_subject", setter: fld_set}]}, - "ec_theme": {to:[{field: "rsa.investigations.ec_theme", setter: fld_set}]}, - "edomain": {to:[{field: "rsa.misc.edomain", setter: fld_set}]}, - "edomaub": {to:[{field: "rsa.misc.edomaub", setter: fld_set}]}, - "effective_time": {convert: to_date, to:[{field: "rsa.time.effective_time", setter: fld_set}]}, - "ein.number": {convert: to_long, to:[{field: "rsa.misc.ein_number", setter: fld_set}]}, - "email": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "encryption_type": {to:[{field: "rsa.crypto.crypto", setter: fld_set}]}, - "endtime": {convert: to_date, to:[{field: "rsa.time.endtime", setter: fld_set}]}, - "entropy.req": {convert: to_long, to:[{field: "rsa.internal.entropy_req", setter: fld_set}]}, - "entropy.res": {convert: to_long, to:[{field: "rsa.internal.entropy_res", setter: fld_set}]}, - "entry": {to:[{field: "rsa.internal.entry", setter: fld_set}]}, - "eoc": {to:[{field: "rsa.investigations.eoc", setter: fld_set}]}, - "error": {to:[{field: "rsa.misc.error", setter: fld_set}]}, - "eth_type": {convert: to_long, to:[{field: "rsa.network.eth_type", setter: fld_set}]}, - "euid": {to:[{field: "rsa.misc.euid", setter: fld_set}]}, - "event.cat": {convert: to_long, to:[{field: "rsa.investigations.event_cat", setter: fld_prio, prio: 1}]}, - "event.cat.name": {to:[{field: "rsa.investigations.event_cat_name", setter: fld_prio, prio: 1}]}, - "event_cat": {convert: to_long, to:[{field: "rsa.investigations.event_cat", setter: fld_prio, prio: 0}]}, - "event_cat_name": {to:[{field: "rsa.investigations.event_cat_name", setter: fld_prio, prio: 0}]}, - "event_category": {to:[{field: "rsa.misc.event_category", setter: fld_set}]}, - "event_computer": {to:[{field: "rsa.misc.event_computer", setter: fld_set}]}, - "event_counter": {convert: to_long, to:[{field: "rsa.counters.event_counter", setter: fld_set}]}, - "event_description": {to:[{field: "rsa.internal.event_desc", setter: fld_set}]}, - "event_id": {to:[{field: "rsa.misc.event_id", setter: fld_set}]}, - "event_log": {to:[{field: "rsa.misc.event_log", setter: fld_set}]}, - "event_name": {to:[{field: "rsa.internal.event_name", setter: fld_set}]}, - "event_queue_time": {convert: to_date, to:[{field: "rsa.time.event_queue_time", setter: fld_set}]}, - "event_source": {to:[{field: "rsa.misc.event_source", setter: fld_set}]}, - "event_state": {to:[{field: "rsa.misc.event_state", setter: fld_set}]}, - "event_time": {convert: to_date, to:[{field: "rsa.time.event_time", setter: fld_set}]}, - "event_time_str": {to:[{field: "rsa.time.event_time_str", setter: fld_prio, prio: 1}]}, - "event_time_string": {to:[{field: "rsa.time.event_time_str", setter: fld_prio, prio: 0}]}, - "event_type": {to:[{field: "rsa.misc.event_type", setter: fld_set}]}, - "event_user": {to:[{field: "rsa.misc.event_user", setter: fld_set}]}, - "eventtime": {to:[{field: "rsa.time.eventtime", setter: fld_set}]}, - "expected_val": {to:[{field: "rsa.misc.expected_val", setter: fld_set}]}, - "expiration_time": {convert: to_date, to:[{field: "rsa.time.expire_time", setter: fld_set}]}, - "expiration_time_string": {to:[{field: "rsa.time.expire_time_str", setter: fld_set}]}, - "facility": {to:[{field: "rsa.misc.facility", setter: fld_set}]}, - "facilityname": {to:[{field: "rsa.misc.facilityname", setter: fld_set}]}, - "faddr": {to:[{field: "rsa.network.faddr", setter: fld_set}]}, - "fcatnum": {to:[{field: "rsa.misc.fcatnum", setter: fld_set}]}, - "federated_idp": {to:[{field: "rsa.identity.federated_idp", setter: fld_set}]}, - "federated_sp": {to:[{field: "rsa.identity.federated_sp", setter: fld_set}]}, - "feed.category": {to:[{field: "rsa.internal.feed_category", setter: fld_set}]}, - "feed_desc": {to:[{field: "rsa.internal.feed_desc", setter: fld_set}]}, - "feed_name": {to:[{field: "rsa.internal.feed_name", setter: fld_set}]}, - "fhost": {to:[{field: "rsa.network.fhost", setter: fld_set}]}, - "file_entropy": {convert: to_double, to:[{field: "rsa.file.file_entropy", setter: fld_set}]}, - "file_vendor": {to:[{field: "rsa.file.file_vendor", setter: fld_set}]}, - "filename_dst": {to:[{field: "rsa.file.filename_dst", setter: fld_set}]}, - "filename_src": {to:[{field: "rsa.file.filename_src", setter: fld_set}]}, - "filename_tmp": {to:[{field: "rsa.file.filename_tmp", setter: fld_set}]}, - "filesystem": {to:[{field: "rsa.file.filesystem", setter: fld_set}]}, - "filter": {to:[{field: "rsa.misc.filter", setter: fld_set}]}, - "finterface": {to:[{field: "rsa.misc.finterface", setter: fld_set}]}, - "flags": {to:[{field: "rsa.misc.flags", setter: fld_set}]}, - "forensic_info": {to:[{field: "rsa.misc.forensic_info", setter: fld_set}]}, - "forward.ip": {convert: to_ip, to:[{field: "rsa.internal.forward_ip", setter: fld_set}]}, - "forward.ipv6": {convert: to_ip, to:[{field: "rsa.internal.forward_ipv6", setter: fld_set}]}, - "found": {to:[{field: "rsa.misc.found", setter: fld_set}]}, - "fport": {to:[{field: "rsa.network.fport", setter: fld_set}]}, - "fqdn": {to:[{field: "rsa.web.fqdn", setter: fld_set}]}, - "fresult": {convert: to_long, to:[{field: "rsa.misc.fresult", setter: fld_set}]}, - "from": {to:[{field: "rsa.email.email_src", setter: fld_set}]}, - "gaddr": {to:[{field: "rsa.misc.gaddr", setter: fld_set}]}, - "gateway": {to:[{field: "rsa.network.gateway", setter: fld_set}]}, - "gmtdate": {to:[{field: "rsa.time.gmtdate", setter: fld_set}]}, - "gmttime": {to:[{field: "rsa.time.gmttime", setter: fld_set}]}, - "group": {to:[{field: "rsa.misc.group", setter: fld_set}]}, - "group_object": {to:[{field: "rsa.misc.group_object", setter: fld_set}]}, - "groupid": {to:[{field: "rsa.misc.group_id", setter: fld_set}]}, - "h_code": {to:[{field: "rsa.internal.hcode", setter: fld_set}]}, - "hardware_id": {to:[{field: "rsa.misc.hardware_id", setter: fld_set}]}, - "header.id": {to:[{field: "rsa.internal.header_id", setter: fld_set}]}, - "host.orig": {to:[{field: "rsa.network.host_orig", setter: fld_set}]}, - "host.state": {to:[{field: "rsa.endpoint.host_state", setter: fld_set}]}, - "host.type": {to:[{field: "rsa.network.host_type", setter: fld_set}]}, - "host_role": {to:[{field: "rsa.identity.host_role", setter: fld_set}]}, - "hostid": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "hostname": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "hour": {to:[{field: "rsa.time.hour", setter: fld_set}]}, - "https.insact": {to:[{field: "rsa.crypto.https_insact", setter: fld_set}]}, - "https.valid": {to:[{field: "rsa.crypto.https_valid", setter: fld_set}]}, - "icmpcode": {convert: to_long, to:[{field: "rsa.network.icmp_code", setter: fld_set}]}, - "icmptype": {convert: to_long, to:[{field: "rsa.network.icmp_type", setter: fld_set}]}, - "id": {to:[{field: "rsa.misc.reference_id", setter: fld_set}]}, - "id1": {to:[{field: "rsa.misc.reference_id1", setter: fld_set}]}, - "id2": {to:[{field: "rsa.misc.reference_id2", setter: fld_set}]}, - "id3": {to:[{field: "rsa.misc.id3", setter: fld_set}]}, - "ike": {to:[{field: "rsa.crypto.ike", setter: fld_set}]}, - "ike_cookie1": {to:[{field: "rsa.crypto.ike_cookie1", setter: fld_set}]}, - "ike_cookie2": {to:[{field: "rsa.crypto.ike_cookie2", setter: fld_set}]}, - "im_buddyid": {to:[{field: "rsa.misc.im_buddyid", setter: fld_set}]}, - "im_buddyname": {to:[{field: "rsa.misc.im_buddyname", setter: fld_set}]}, - "im_client": {to:[{field: "rsa.misc.im_client", setter: fld_set}]}, - "im_croomid": {to:[{field: "rsa.misc.im_croomid", setter: fld_set}]}, - "im_croomtype": {to:[{field: "rsa.misc.im_croomtype", setter: fld_set}]}, - "im_members": {to:[{field: "rsa.misc.im_members", setter: fld_set}]}, - "im_userid": {to:[{field: "rsa.misc.im_userid", setter: fld_set}]}, - "im_username": {to:[{field: "rsa.misc.im_username", setter: fld_set}]}, - "index": {to:[{field: "rsa.misc.index", setter: fld_set}]}, - "info": {to:[{field: "rsa.db.index", setter: fld_set}]}, - "inode": {convert: to_long, to:[{field: "rsa.internal.inode", setter: fld_set}]}, - "inout": {to:[{field: "rsa.misc.inout", setter: fld_set}]}, - "instance": {to:[{field: "rsa.db.instance", setter: fld_set}]}, - "interface": {to:[{field: "rsa.network.interface", setter: fld_set}]}, - "inv.category": {to:[{field: "rsa.investigations.inv_category", setter: fld_set}]}, - "inv.context": {to:[{field: "rsa.investigations.inv_context", setter: fld_set}]}, - "ioc": {to:[{field: "rsa.investigations.ioc", setter: fld_set}]}, - "ip_proto": {convert: to_long, to:[{field: "rsa.network.ip_proto", setter: fld_set}]}, - "ipkt": {to:[{field: "rsa.misc.ipkt", setter: fld_set}]}, - "ipscat": {to:[{field: "rsa.misc.ipscat", setter: fld_set}]}, - "ipspri": {to:[{field: "rsa.misc.ipspri", setter: fld_set}]}, - "jobname": {to:[{field: "rsa.misc.jobname", setter: fld_set}]}, - "jobnum": {to:[{field: "rsa.misc.job_num", setter: fld_set}]}, - "laddr": {to:[{field: "rsa.network.laddr", setter: fld_set}]}, - "language": {to:[{field: "rsa.misc.language", setter: fld_set}]}, - "latitude": {to:[{field: "rsa.misc.latitude", setter: fld_set}]}, - "lc.cid": {to:[{field: "rsa.internal.lc_cid", setter: fld_set}]}, - "lc.ctime": {convert: to_date, to:[{field: "rsa.internal.lc_ctime", setter: fld_set}]}, - "ldap": {to:[{field: "rsa.identity.ldap", setter: fld_set}]}, - "ldap.query": {to:[{field: "rsa.identity.ldap_query", setter: fld_set}]}, - "ldap.response": {to:[{field: "rsa.identity.ldap_response", setter: fld_set}]}, - "level": {convert: to_long, to:[{field: "rsa.internal.level", setter: fld_set}]}, - "lhost": {to:[{field: "rsa.network.lhost", setter: fld_set}]}, - "library": {to:[{field: "rsa.misc.library", setter: fld_set}]}, - "lifetime": {convert: to_long, to:[{field: "rsa.misc.lifetime", setter: fld_set}]}, - "linenum": {to:[{field: "rsa.misc.linenum", setter: fld_set}]}, - "link": {to:[{field: "rsa.misc.link", setter: fld_set}]}, - "linterface": {to:[{field: "rsa.network.linterface", setter: fld_set}]}, - "list_name": {to:[{field: "rsa.misc.list_name", setter: fld_set}]}, - "listnum": {to:[{field: "rsa.misc.listnum", setter: fld_set}]}, - "load_data": {to:[{field: "rsa.misc.load_data", setter: fld_set}]}, - "location_floor": {to:[{field: "rsa.misc.location_floor", setter: fld_set}]}, - "location_mark": {to:[{field: "rsa.misc.location_mark", setter: fld_set}]}, - "log_id": {to:[{field: "rsa.misc.log_id", setter: fld_set}]}, - "log_type": {to:[{field: "rsa.misc.log_type", setter: fld_set}]}, - "logid": {to:[{field: "rsa.misc.logid", setter: fld_set}]}, - "logip": {to:[{field: "rsa.misc.logip", setter: fld_set}]}, - "logname": {to:[{field: "rsa.misc.logname", setter: fld_set}]}, - "logon_type": {to:[{field: "rsa.identity.logon_type", setter: fld_set}]}, - "logon_type_desc": {to:[{field: "rsa.identity.logon_type_desc", setter: fld_set}]}, - "longitude": {to:[{field: "rsa.misc.longitude", setter: fld_set}]}, - "lport": {to:[{field: "rsa.misc.lport", setter: fld_set}]}, - "lread": {convert: to_long, to:[{field: "rsa.db.lread", setter: fld_set}]}, - "lun": {to:[{field: "rsa.storage.lun", setter: fld_set}]}, - "lwrite": {convert: to_long, to:[{field: "rsa.db.lwrite", setter: fld_set}]}, - "macaddr": {convert: to_mac, to:[{field: "rsa.network.eth_host", setter: fld_set}]}, - "mail_id": {to:[{field: "rsa.misc.mail_id", setter: fld_set}]}, - "mask": {to:[{field: "rsa.network.mask", setter: fld_set}]}, - "match": {to:[{field: "rsa.misc.match", setter: fld_set}]}, - "mbug_data": {to:[{field: "rsa.misc.mbug_data", setter: fld_set}]}, - "mcb.req": {convert: to_long, to:[{field: "rsa.internal.mcb_req", setter: fld_set}]}, - "mcb.res": {convert: to_long, to:[{field: "rsa.internal.mcb_res", setter: fld_set}]}, - "mcbc.req": {convert: to_long, to:[{field: "rsa.internal.mcbc_req", setter: fld_set}]}, - "mcbc.res": {convert: to_long, to:[{field: "rsa.internal.mcbc_res", setter: fld_set}]}, - "medium": {convert: to_long, to:[{field: "rsa.internal.medium", setter: fld_set}]}, - "message": {to:[{field: "rsa.internal.message", setter: fld_set}]}, - "message_body": {to:[{field: "rsa.misc.message_body", setter: fld_set}]}, - "messageid": {to:[{field: "rsa.internal.messageid", setter: fld_set}]}, - "min": {to:[{field: "rsa.time.min", setter: fld_set}]}, - "misc": {to:[{field: "rsa.misc.misc", setter: fld_set}]}, - "misc_name": {to:[{field: "rsa.misc.misc_name", setter: fld_set}]}, - "mode": {to:[{field: "rsa.misc.mode", setter: fld_set}]}, - "month": {to:[{field: "rsa.time.month", setter: fld_set}]}, - "msg": {to:[{field: "rsa.internal.msg", setter: fld_set}]}, - "msgIdPart1": {to:[{field: "rsa.misc.msgIdPart1", setter: fld_set}]}, - "msgIdPart2": {to:[{field: "rsa.misc.msgIdPart2", setter: fld_set}]}, - "msgIdPart3": {to:[{field: "rsa.misc.msgIdPart3", setter: fld_set}]}, - "msgIdPart4": {to:[{field: "rsa.misc.msgIdPart4", setter: fld_set}]}, - "msg_id": {to:[{field: "rsa.internal.msg_id", setter: fld_set}]}, - "msg_type": {to:[{field: "rsa.misc.msg_type", setter: fld_set}]}, - "msgid": {to:[{field: "rsa.misc.msgid", setter: fld_set}]}, - "name": {to:[{field: "rsa.misc.name", setter: fld_set}]}, - "netname": {to:[{field: "rsa.network.netname", setter: fld_set}]}, - "netsessid": {to:[{field: "rsa.misc.netsessid", setter: fld_set}]}, - "network_port": {convert: to_long, to:[{field: "rsa.network.network_port", setter: fld_set}]}, - "network_service": {to:[{field: "rsa.network.network_service", setter: fld_set}]}, - "node": {to:[{field: "rsa.misc.node", setter: fld_set}]}, - "nodename": {to:[{field: "rsa.internal.node_name", setter: fld_set}]}, - "ntype": {to:[{field: "rsa.misc.ntype", setter: fld_set}]}, - "num": {to:[{field: "rsa.misc.num", setter: fld_set}]}, - "number": {to:[{field: "rsa.misc.number", setter: fld_set}]}, - "number1": {to:[{field: "rsa.misc.number1", setter: fld_set}]}, - "number2": {to:[{field: "rsa.misc.number2", setter: fld_set}]}, - "nwe.callback_id": {to:[{field: "rsa.internal.nwe_callback_id", setter: fld_set}]}, - "nwwn": {to:[{field: "rsa.misc.nwwn", setter: fld_set}]}, - "obj_id": {to:[{field: "rsa.internal.obj_id", setter: fld_set}]}, - "obj_name": {to:[{field: "rsa.misc.obj_name", setter: fld_set}]}, - "obj_server": {to:[{field: "rsa.internal.obj_server", setter: fld_set}]}, - "obj_type": {to:[{field: "rsa.misc.obj_type", setter: fld_set}]}, - "obj_value": {to:[{field: "rsa.internal.obj_val", setter: fld_set}]}, - "object": {to:[{field: "rsa.misc.object", setter: fld_set}]}, - "observed_val": {to:[{field: "rsa.misc.observed_val", setter: fld_set}]}, - "operation": {to:[{field: "rsa.misc.operation", setter: fld_set}]}, - "operation_id": {to:[{field: "rsa.misc.operation_id", setter: fld_set}]}, - "opkt": {to:[{field: "rsa.misc.opkt", setter: fld_set}]}, - "org.dst": {to:[{field: "rsa.physical.org_dst", setter: fld_prio, prio: 1}]}, - "org.src": {to:[{field: "rsa.physical.org_src", setter: fld_set}]}, - "org_dst": {to:[{field: "rsa.physical.org_dst", setter: fld_prio, prio: 0}]}, - "orig_from": {to:[{field: "rsa.misc.orig_from", setter: fld_set}]}, - "origin": {to:[{field: "rsa.network.origin", setter: fld_set}]}, - "original_owner": {to:[{field: "rsa.identity.owner", setter: fld_set}]}, - "os": {to:[{field: "rsa.misc.OS", setter: fld_set}]}, - "owner_id": {to:[{field: "rsa.misc.owner_id", setter: fld_set}]}, - "p_action": {to:[{field: "rsa.misc.p_action", setter: fld_set}]}, - "p_date": {to:[{field: "rsa.time.p_date", setter: fld_set}]}, - "p_filter": {to:[{field: "rsa.misc.p_filter", setter: fld_set}]}, - "p_group_object": {to:[{field: "rsa.misc.p_group_object", setter: fld_set}]}, - "p_id": {to:[{field: "rsa.misc.p_id", setter: fld_set}]}, - "p_month": {to:[{field: "rsa.time.p_month", setter: fld_set}]}, - "p_msgid": {to:[{field: "rsa.misc.p_msgid", setter: fld_set}]}, - "p_msgid1": {to:[{field: "rsa.misc.p_msgid1", setter: fld_set}]}, - "p_msgid2": {to:[{field: "rsa.misc.p_msgid2", setter: fld_set}]}, - "p_result1": {to:[{field: "rsa.misc.p_result1", setter: fld_set}]}, - "p_time": {to:[{field: "rsa.time.p_time", setter: fld_set}]}, - "p_time1": {to:[{field: "rsa.time.p_time1", setter: fld_set}]}, - "p_time2": {to:[{field: "rsa.time.p_time2", setter: fld_set}]}, - "p_url": {to:[{field: "rsa.web.p_url", setter: fld_set}]}, - "p_user_agent": {to:[{field: "rsa.web.p_user_agent", setter: fld_set}]}, - "p_web_cookie": {to:[{field: "rsa.web.p_web_cookie", setter: fld_set}]}, - "p_web_method": {to:[{field: "rsa.web.p_web_method", setter: fld_set}]}, - "p_web_referer": {to:[{field: "rsa.web.p_web_referer", setter: fld_set}]}, - "p_year": {to:[{field: "rsa.time.p_year", setter: fld_set}]}, - "packet_length": {to:[{field: "rsa.network.packet_length", setter: fld_set}]}, - "paddr": {convert: to_ip, to:[{field: "rsa.network.paddr", setter: fld_set}]}, - "param": {to:[{field: "rsa.misc.param", setter: fld_set}]}, - "param.dst": {to:[{field: "rsa.misc.param_dst", setter: fld_set}]}, - "param.src": {to:[{field: "rsa.misc.param_src", setter: fld_set}]}, - "parent_node": {to:[{field: "rsa.misc.parent_node", setter: fld_set}]}, - "parse.error": {to:[{field: "rsa.internal.parse_error", setter: fld_set}]}, - "password": {to:[{field: "rsa.identity.password", setter: fld_set}]}, - "password_chg": {to:[{field: "rsa.misc.password_chg", setter: fld_set}]}, - "password_expire": {to:[{field: "rsa.misc.password_expire", setter: fld_set}]}, - "patient_fname": {to:[{field: "rsa.healthcare.patient_fname", setter: fld_set}]}, - "patient_id": {to:[{field: "rsa.healthcare.patient_id", setter: fld_set}]}, - "patient_lname": {to:[{field: "rsa.healthcare.patient_lname", setter: fld_set}]}, - "patient_mname": {to:[{field: "rsa.healthcare.patient_mname", setter: fld_set}]}, - "payload.req": {convert: to_long, to:[{field: "rsa.internal.payload_req", setter: fld_set}]}, - "payload.res": {convert: to_long, to:[{field: "rsa.internal.payload_res", setter: fld_set}]}, - "peer": {to:[{field: "rsa.crypto.peer", setter: fld_set}]}, - "peer_id": {to:[{field: "rsa.crypto.peer_id", setter: fld_set}]}, - "permgranted": {to:[{field: "rsa.misc.permgranted", setter: fld_set}]}, - "permissions": {to:[{field: "rsa.db.permissions", setter: fld_set}]}, - "permwanted": {to:[{field: "rsa.misc.permwanted", setter: fld_set}]}, - "pgid": {to:[{field: "rsa.misc.pgid", setter: fld_set}]}, - "phone_number": {to:[{field: "rsa.misc.phone", setter: fld_prio, prio: 2}]}, - "phost": {to:[{field: "rsa.network.phost", setter: fld_set}]}, - "pid": {to:[{field: "rsa.misc.pid", setter: fld_set}]}, - "policy": {to:[{field: "rsa.misc.policy", setter: fld_set}]}, - "policyUUID": {to:[{field: "rsa.misc.policyUUID", setter: fld_set}]}, - "policy_id": {to:[{field: "rsa.misc.policy_id", setter: fld_set}]}, - "policy_value": {to:[{field: "rsa.misc.policy_value", setter: fld_set}]}, - "policy_waiver": {to:[{field: "rsa.misc.policy_waiver", setter: fld_set}]}, - "policyname": {to:[{field: "rsa.misc.policy_name", setter: fld_prio, prio: 0}]}, - "pool_id": {to:[{field: "rsa.misc.pool_id", setter: fld_set}]}, - "pool_name": {to:[{field: "rsa.misc.pool_name", setter: fld_set}]}, - "port": {convert: to_long, to:[{field: "rsa.network.port", setter: fld_set}]}, - "portname": {to:[{field: "rsa.misc.port_name", setter: fld_set}]}, - "pread": {convert: to_long, to:[{field: "rsa.db.pread", setter: fld_set}]}, - "priority": {to:[{field: "rsa.misc.priority", setter: fld_set}]}, - "privilege": {to:[{field: "rsa.file.privilege", setter: fld_set}]}, - "process.vid.dst": {to:[{field: "rsa.internal.process_vid_dst", setter: fld_set}]}, - "process.vid.src": {to:[{field: "rsa.internal.process_vid_src", setter: fld_set}]}, - "process_id_val": {to:[{field: "rsa.misc.process_id_val", setter: fld_set}]}, - "processing_time": {to:[{field: "rsa.time.process_time", setter: fld_set}]}, - "profile": {to:[{field: "rsa.identity.profile", setter: fld_set}]}, - "prog_asp_num": {to:[{field: "rsa.misc.prog_asp_num", setter: fld_set}]}, - "program": {to:[{field: "rsa.misc.program", setter: fld_set}]}, - "protocol_detail": {to:[{field: "rsa.network.protocol_detail", setter: fld_set}]}, - "pwwn": {to:[{field: "rsa.storage.pwwn", setter: fld_set}]}, - "r_hostid": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "real_data": {to:[{field: "rsa.misc.real_data", setter: fld_set}]}, - "realm": {to:[{field: "rsa.identity.realm", setter: fld_set}]}, - "reason": {to:[{field: "rsa.misc.reason", setter: fld_set}]}, - "rec_asp_device": {to:[{field: "rsa.misc.rec_asp_device", setter: fld_set}]}, - "rec_asp_num": {to:[{field: "rsa.misc.rec_asp_num", setter: fld_set}]}, - "rec_library": {to:[{field: "rsa.misc.rec_library", setter: fld_set}]}, - "recorded_time": {convert: to_date, to:[{field: "rsa.time.recorded_time", setter: fld_set}]}, - "recordnum": {to:[{field: "rsa.misc.recordnum", setter: fld_set}]}, - "registry.key": {to:[{field: "rsa.endpoint.registry_key", setter: fld_set}]}, - "registry.value": {to:[{field: "rsa.endpoint.registry_value", setter: fld_set}]}, - "remote_domain": {to:[{field: "rsa.web.remote_domain", setter: fld_set}]}, - "remote_domain_id": {to:[{field: "rsa.network.remote_domain_id", setter: fld_set}]}, - "reputation_num": {convert: to_double, to:[{field: "rsa.web.reputation_num", setter: fld_set}]}, - "resource": {to:[{field: "rsa.internal.resource", setter: fld_set}]}, - "resource_class": {to:[{field: "rsa.internal.resource_class", setter: fld_set}]}, - "result": {to:[{field: "rsa.misc.result", setter: fld_set}]}, - "result_code": {to:[{field: "rsa.misc.result_code", setter: fld_prio, prio: 1}]}, - "resultcode": {to:[{field: "rsa.misc.result_code", setter: fld_prio, prio: 0}]}, - "rid": {convert: to_long, to:[{field: "rsa.internal.rid", setter: fld_set}]}, - "risk": {to:[{field: "rsa.misc.risk", setter: fld_set}]}, - "risk_info": {to:[{field: "rsa.misc.risk_info", setter: fld_set}]}, - "risk_num": {convert: to_double, to:[{field: "rsa.misc.risk_num", setter: fld_set}]}, - "risk_num_comm": {convert: to_double, to:[{field: "rsa.misc.risk_num_comm", setter: fld_set}]}, - "risk_num_next": {convert: to_double, to:[{field: "rsa.misc.risk_num_next", setter: fld_set}]}, - "risk_num_sand": {convert: to_double, to:[{field: "rsa.misc.risk_num_sand", setter: fld_set}]}, - "risk_num_static": {convert: to_double, to:[{field: "rsa.misc.risk_num_static", setter: fld_set}]}, - "risk_suspicious": {to:[{field: "rsa.misc.risk_suspicious", setter: fld_set}]}, - "risk_warning": {to:[{field: "rsa.misc.risk_warning", setter: fld_set}]}, - "rpayload": {to:[{field: "rsa.network.rpayload", setter: fld_set}]}, - "ruid": {to:[{field: "rsa.misc.ruid", setter: fld_set}]}, - "rule": {to:[{field: "rsa.misc.rule", setter: fld_set}]}, - "rule_group": {to:[{field: "rsa.misc.rule_group", setter: fld_set}]}, - "rule_template": {to:[{field: "rsa.misc.rule_template", setter: fld_set}]}, - "rule_uid": {to:[{field: "rsa.misc.rule_uid", setter: fld_set}]}, - "rulename": {to:[{field: "rsa.misc.rule_name", setter: fld_set}]}, - "s_certauth": {to:[{field: "rsa.crypto.s_certauth", setter: fld_set}]}, - "s_cipher": {to:[{field: "rsa.crypto.cipher_src", setter: fld_set}]}, - "s_ciphersize": {convert: to_long, to:[{field: "rsa.crypto.cipher_size_src", setter: fld_set}]}, - "s_context": {to:[{field: "rsa.misc.context_subject", setter: fld_set}]}, - "s_sslver": {to:[{field: "rsa.crypto.ssl_ver_src", setter: fld_set}]}, - "sburb": {to:[{field: "rsa.misc.sburb", setter: fld_set}]}, - "scheme": {to:[{field: "rsa.crypto.scheme", setter: fld_set}]}, - "sdomain_fld": {to:[{field: "rsa.misc.sdomain_fld", setter: fld_set}]}, - "search.text": {to:[{field: "rsa.misc.search_text", setter: fld_set}]}, - "sec": {to:[{field: "rsa.misc.sec", setter: fld_set}]}, - "second": {to:[{field: "rsa.misc.second", setter: fld_set}]}, - "sensor": {to:[{field: "rsa.misc.sensor", setter: fld_set}]}, - "sensorname": {to:[{field: "rsa.misc.sensorname", setter: fld_set}]}, - "seqnum": {to:[{field: "rsa.misc.seqnum", setter: fld_set}]}, - "serial_number": {to:[{field: "rsa.misc.serial_number", setter: fld_set}]}, - "service.account": {to:[{field: "rsa.identity.service_account", setter: fld_set}]}, - "session": {to:[{field: "rsa.misc.session", setter: fld_set}]}, - "session.split": {to:[{field: "rsa.internal.session_split", setter: fld_set}]}, - "sessionid": {to:[{field: "rsa.misc.log_session_id", setter: fld_set}]}, - "sessionid1": {to:[{field: "rsa.misc.log_session_id1", setter: fld_set}]}, - "sessiontype": {to:[{field: "rsa.misc.sessiontype", setter: fld_set}]}, - "severity": {to:[{field: "rsa.misc.severity", setter: fld_set}]}, - "sid": {to:[{field: "rsa.identity.user_sid_dst", setter: fld_set}]}, - "sig.name": {to:[{field: "rsa.misc.sig_name", setter: fld_set}]}, - "sigUUID": {to:[{field: "rsa.misc.sigUUID", setter: fld_set}]}, - "sigcat": {to:[{field: "rsa.misc.sigcat", setter: fld_set}]}, - "sigid": {convert: to_long, to:[{field: "rsa.misc.sig_id", setter: fld_set}]}, - "sigid1": {convert: to_long, to:[{field: "rsa.misc.sig_id1", setter: fld_set}]}, - "sigid_string": {to:[{field: "rsa.misc.sig_id_str", setter: fld_set}]}, - "signame": {to:[{field: "rsa.misc.policy_name", setter: fld_prio, prio: 1}]}, - "sigtype": {to:[{field: "rsa.crypto.sig_type", setter: fld_set}]}, - "sinterface": {to:[{field: "rsa.network.sinterface", setter: fld_set}]}, - "site": {to:[{field: "rsa.internal.site", setter: fld_set}]}, - "size": {convert: to_long, to:[{field: "rsa.internal.size", setter: fld_set}]}, - "smask": {to:[{field: "rsa.network.smask", setter: fld_set}]}, - "snmp.oid": {to:[{field: "rsa.misc.snmp_oid", setter: fld_set}]}, - "snmp.value": {to:[{field: "rsa.misc.snmp_value", setter: fld_set}]}, - "sourcefile": {to:[{field: "rsa.internal.sourcefile", setter: fld_set}]}, - "space": {to:[{field: "rsa.misc.space", setter: fld_set}]}, - "space1": {to:[{field: "rsa.misc.space1", setter: fld_set}]}, - "spi": {to:[{field: "rsa.misc.spi", setter: fld_set}]}, - "sql": {to:[{field: "rsa.misc.sql", setter: fld_set}]}, - "src_dn": {to:[{field: "rsa.identity.dn_src", setter: fld_set}]}, - "src_payload": {to:[{field: "rsa.misc.payload_src", setter: fld_set}]}, - "src_spi": {to:[{field: "rsa.misc.spi_src", setter: fld_set}]}, - "src_zone": {to:[{field: "rsa.network.zone_src", setter: fld_set}]}, - "srcburb": {to:[{field: "rsa.misc.srcburb", setter: fld_set}]}, - "srcdom": {to:[{field: "rsa.misc.srcdom", setter: fld_set}]}, - "srcservice": {to:[{field: "rsa.misc.srcservice", setter: fld_set}]}, - "ssid": {to:[{field: "rsa.wireless.wlan_ssid", setter: fld_prio, prio: 0}]}, - "stamp": {convert: to_date, to:[{field: "rsa.time.stamp", setter: fld_set}]}, - "starttime": {convert: to_date, to:[{field: "rsa.time.starttime", setter: fld_set}]}, - "state": {to:[{field: "rsa.misc.state", setter: fld_set}]}, - "statement": {to:[{field: "rsa.internal.statement", setter: fld_set}]}, - "status": {to:[{field: "rsa.misc.status", setter: fld_set}]}, - "status1": {to:[{field: "rsa.misc.status1", setter: fld_set}]}, - "streams": {convert: to_long, to:[{field: "rsa.misc.streams", setter: fld_set}]}, - "subcategory": {to:[{field: "rsa.misc.subcategory", setter: fld_set}]}, - "subject": {to:[{field: "rsa.email.subject", setter: fld_set}]}, - "svcno": {to:[{field: "rsa.misc.svcno", setter: fld_set}]}, - "system": {to:[{field: "rsa.misc.system", setter: fld_set}]}, - "t_context": {to:[{field: "rsa.misc.context_target", setter: fld_set}]}, - "task_name": {to:[{field: "rsa.file.task_name", setter: fld_set}]}, - "tbdstr1": {to:[{field: "rsa.misc.tbdstr1", setter: fld_set}]}, - "tbdstr2": {to:[{field: "rsa.misc.tbdstr2", setter: fld_set}]}, - "tbl_name": {to:[{field: "rsa.db.table_name", setter: fld_set}]}, - "tcp_flags": {convert: to_long, to:[{field: "rsa.misc.tcp_flags", setter: fld_set}]}, - "terminal": {to:[{field: "rsa.misc.terminal", setter: fld_set}]}, - "tgtdom": {to:[{field: "rsa.misc.tgtdom", setter: fld_set}]}, - "tgtdomain": {to:[{field: "rsa.misc.tgtdomain", setter: fld_set}]}, - "threat_name": {to:[{field: "rsa.threat.threat_category", setter: fld_set}]}, - "threat_source": {to:[{field: "rsa.threat.threat_source", setter: fld_set}]}, - "threat_val": {to:[{field: "rsa.threat.threat_desc", setter: fld_set}]}, - "threshold": {to:[{field: "rsa.misc.threshold", setter: fld_set}]}, - "time": {convert: to_date, to:[{field: "rsa.internal.time", setter: fld_set}]}, - "timestamp": {to:[{field: "rsa.time.timestamp", setter: fld_set}]}, - "timezone": {to:[{field: "rsa.time.timezone", setter: fld_set}]}, - "to": {to:[{field: "rsa.email.email_dst", setter: fld_set}]}, - "tos": {convert: to_long, to:[{field: "rsa.misc.tos", setter: fld_set}]}, - "trans_from": {to:[{field: "rsa.email.trans_from", setter: fld_set}]}, - "trans_id": {to:[{field: "rsa.db.transact_id", setter: fld_set}]}, - "trans_to": {to:[{field: "rsa.email.trans_to", setter: fld_set}]}, - "trigger_desc": {to:[{field: "rsa.misc.trigger_desc", setter: fld_set}]}, - "trigger_val": {to:[{field: "rsa.misc.trigger_val", setter: fld_set}]}, - "type": {to:[{field: "rsa.misc.type", setter: fld_set}]}, - "type1": {to:[{field: "rsa.misc.type1", setter: fld_set}]}, - "tzone": {to:[{field: "rsa.time.tzone", setter: fld_set}]}, - "ubc.req": {convert: to_long, to:[{field: "rsa.internal.ubc_req", setter: fld_set}]}, - "ubc.res": {convert: to_long, to:[{field: "rsa.internal.ubc_res", setter: fld_set}]}, - "udb_class": {to:[{field: "rsa.misc.udb_class", setter: fld_set}]}, - "url_fld": {to:[{field: "rsa.misc.url_fld", setter: fld_set}]}, - "urlpage": {to:[{field: "rsa.web.urlpage", setter: fld_set}]}, - "urlroot": {to:[{field: "rsa.web.urlroot", setter: fld_set}]}, - "user_address": {to:[{field: "rsa.email.email", setter: fld_append}]}, - "user_dept": {to:[{field: "rsa.identity.user_dept", setter: fld_set}]}, - "user_div": {to:[{field: "rsa.misc.user_div", setter: fld_set}]}, - "user_fname": {to:[{field: "rsa.identity.firstname", setter: fld_set}]}, - "user_lname": {to:[{field: "rsa.identity.lastname", setter: fld_set}]}, - "user_mname": {to:[{field: "rsa.identity.middlename", setter: fld_set}]}, - "user_org": {to:[{field: "rsa.identity.org", setter: fld_set}]}, - "user_role": {to:[{field: "rsa.identity.user_role", setter: fld_set}]}, - "userid": {to:[{field: "rsa.misc.userid", setter: fld_set}]}, - "username_fld": {to:[{field: "rsa.misc.username_fld", setter: fld_set}]}, - "utcstamp": {to:[{field: "rsa.misc.utcstamp", setter: fld_set}]}, - "v_instafname": {to:[{field: "rsa.misc.v_instafname", setter: fld_set}]}, - "vendor_event_cat": {to:[{field: "rsa.investigations.event_vcat", setter: fld_set}]}, - "version": {to:[{field: "rsa.misc.version", setter: fld_set}]}, - "vid": {to:[{field: "rsa.internal.msg_vid", setter: fld_set}]}, - "virt_data": {to:[{field: "rsa.misc.virt_data", setter: fld_set}]}, - "virusname": {to:[{field: "rsa.misc.virusname", setter: fld_set}]}, - "vlan": {convert: to_long, to:[{field: "rsa.network.vlan", setter: fld_set}]}, - "vlan.name": {to:[{field: "rsa.network.vlan_name", setter: fld_set}]}, - "vm_target": {to:[{field: "rsa.misc.vm_target", setter: fld_set}]}, - "vpnid": {to:[{field: "rsa.misc.vpnid", setter: fld_set}]}, - "vsys": {to:[{field: "rsa.misc.vsys", setter: fld_set}]}, - "vuln_ref": {to:[{field: "rsa.misc.vuln_ref", setter: fld_set}]}, - "web_cookie": {to:[{field: "rsa.web.web_cookie", setter: fld_set}]}, - "web_extension_tmp": {to:[{field: "rsa.web.web_extension_tmp", setter: fld_set}]}, - "web_host": {to:[{field: "rsa.web.alias_host", setter: fld_set}]}, - "web_method": {to:[{field: "rsa.misc.action", setter: fld_append}]}, - "web_page": {to:[{field: "rsa.web.web_page", setter: fld_set}]}, - "web_ref_domain": {to:[{field: "rsa.web.web_ref_domain", setter: fld_set}]}, - "web_ref_host": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "web_ref_page": {to:[{field: "rsa.web.web_ref_page", setter: fld_set}]}, - "web_ref_query": {to:[{field: "rsa.web.web_ref_query", setter: fld_set}]}, - "web_ref_root": {to:[{field: "rsa.web.web_ref_root", setter: fld_set}]}, - "wifi_channel": {convert: to_long, to:[{field: "rsa.wireless.wlan_channel", setter: fld_set}]}, - "wlan": {to:[{field: "rsa.wireless.wlan_name", setter: fld_set}]}, - "word": {to:[{field: "rsa.internal.word", setter: fld_set}]}, - "workspace_desc": {to:[{field: "rsa.misc.workspace", setter: fld_set}]}, - "workstation": {to:[{field: "rsa.network.alias_host", setter: fld_append}]}, - "year": {to:[{field: "rsa.time.year", setter: fld_set}]}, - "zone": {to:[{field: "rsa.network.zone", setter: fld_set}]}, - }; - - function to_date(value) { - switch (typeof (value)) { - case "object": - // This is a Date. But as it was obtained from evt.Get(), the VM - // doesn't see it as a JS Date anymore, thus value instanceof Date === false. - // Have to trust that any object here is a valid Date for Go. - return value; - case "string": - var asDate = new Date(value); - if (!isNaN(asDate)) return asDate; - } - } - - // ECMAScript 5.1 doesn't have Object.MAX_SAFE_INTEGER / Object.MIN_SAFE_INTEGER. - var maxSafeInt = Math.pow(2, 53) - 1; - var minSafeInt = -maxSafeInt; - - function to_long(value) { - var num = parseInt(value); - // Better not to index a number if it's not safe (above 53 bits). - return !isNaN(num) && minSafeInt <= num && num <= maxSafeInt ? num : undefined; - } - - function to_ip(value) { - if (value.indexOf(":") === -1) - return to_ipv4(value); - return to_ipv6(value); - } - - var ipv4_regex = /^(\d+)\.(\d+)\.(\d+)\.(\d+)$/; - var ipv6_hex_regex = /^[0-9A-Fa-f]{1,4}$/; - - function to_ipv4(value) { - var result = ipv4_regex.exec(value); - if (result == null || result.length !== 5) return; - for (var i = 1; i < 5; i++) { - var num = strictToInt(result[i]); - if (isNaN(num) || num < 0 || num > 255) return; - } - return value; - } - - function to_ipv6(value) { - var sqEnd = value.indexOf("]"); - if (sqEnd > -1) { - if (value.charAt(0) !== "[") return; - value = value.substr(1, sqEnd - 1); - } - var zoneOffset = value.indexOf("%"); - if (zoneOffset > -1) { - value = value.substr(0, zoneOffset); - } - var parts = value.split(":"); - if (parts == null || parts.length < 3 || parts.length > 8) return; - var numEmpty = 0; - var innerEmpty = 0; - for (var i = 0; i < parts.length; i++) { - if (parts[i].length === 0) { - numEmpty++; - if (i > 0 && i + 1 < parts.length) innerEmpty++; - } else if (!parts[i].match(ipv6_hex_regex) && - // Accept an IPv6 with a valid IPv4 at the end. - ((i + 1 < parts.length) || !to_ipv4(parts[i]))) { - return; - } - } - return innerEmpty === 0 && parts.length === 8 || innerEmpty === 1 ? value : undefined; - } - - function to_double(value) { - return parseFloat(value); - } - - function to_mac(value) { - // ES doesn't have a mac datatype so it's safe to ingest whatever was captured. - return value; - } - - function to_lowercase(value) { - // to_lowercase is used against keyword fields, which can accept - // any other type (numbers, dates). - return typeof(value) === "string"? value.toLowerCase() : value; - } - - function fld_set(dst, value) { - dst[this.field] = { v: value }; - } - - function fld_append(dst, value) { - if (dst[this.field] === undefined) { - dst[this.field] = { v: [value] }; - } else { - var base = dst[this.field]; - if (base.v.indexOf(value)===-1) base.v.push(value); - } - } - - function fld_prio(dst, value) { - if (dst[this.field] === undefined) { - dst[this.field] = { v: value, prio: this.prio}; - } else if(this.prio < dst[this.field].prio) { - dst[this.field].v = value; - dst[this.field].prio = this.prio; - } - } - - var valid_ecs_outcome = { - 'failure': true, - 'success': true, - 'unknown': true - }; - - function fld_ecs_outcome(dst, value) { - value = value.toLowerCase(); - if (valid_ecs_outcome[value] === undefined) { - value = 'unknown'; - } - if (dst[this.field] === undefined) { - dst[this.field] = { v: value }; - } else if (dst[this.field].v === 'unknown') { - dst[this.field] = { v: value }; - } - } - - function map_all(evt, targets, value) { - for (var i = 0; i < targets.length; i++) { - evt.Put(targets[i], value); - } - } - - function populate_fields(evt) { - var base = evt.Get(FIELDS_OBJECT); - if (base === null) return; - alternate_datetime(evt); - if (map_ecs) { - do_populate(evt, base, ecs_mappings); - } - if (map_rsa) { - do_populate(evt, base, rsa_mappings); - } - if (keep_raw) { - evt.Put("rsa.raw", base); - } - evt.Delete(FIELDS_OBJECT); - } - - var datetime_alt_components = [ - {field: "day", fmts: [[dF]]}, - {field: "year", fmts: [[dW]]}, - {field: "month", fmts: [[dB],[dG]]}, - {field: "date", fmts: [[dW,dSkip,dG,dSkip,dF],[dW,dSkip,dB,dSkip,dF],[dW,dSkip,dR,dSkip,dF]]}, - {field: "hour", fmts: [[dN]]}, - {field: "min", fmts: [[dU]]}, - {field: "secs", fmts: [[dO]]}, - {field: "time", fmts: [[dN, dSkip, dU, dSkip, dO]]}, - ]; - - function alternate_datetime(evt) { - if (evt.Get(FIELDS_PREFIX + "event_time") != null) { - return; - } - var tzOffset = tz_offset; - if (tzOffset === "event") { - tzOffset = evt.Get("event.timezone"); - } - var container = new DateContainer(tzOffset); - for (var i=0; i} %{hfld2}.%{hfld3->} %{p0}"); - - var dup2 = call({ - dest: "nwparser.payload", - fn: STRCAT, - args: [ - field("hfld4"), - constant("_appliance "), - field("p0"), - ], - }); - - var dup3 = call({ - dest: "nwparser.payload", - fn: STRCAT, - args: [ - field("hfld4"), - constant(" "), - field("p0"), - ], - }); - - var dup4 = match_copy("MESSAGE#0:flows/2_1", "nwparser.p0", "p0"); - - var dup5 = setc("eventcategory","1605020000"); - - var dup6 = setf("msg","$MSG"); - - var dup7 = setc("event_source","appliance"); - - var dup8 = setf("sensor","node"); - - var dup9 = date_time({ - dest: "event_time", - args: ["hfld2"], - fmts: [ - [dX], - ], - }); - - var dup10 = match_copy("MESSAGE#1:flows:01/1_2", "nwparser.p0", ""); - - var dup11 = match("MESSAGE#10:ids-alerts:01/1_0", "nwparser.p0", "dhost=%{dmacaddr->} direction=%{p0}"); - - var dup12 = match("MESSAGE#10:ids-alerts:01/1_1", "nwparser.p0", "shost=%{smacaddr->} direction=%{p0}"); - - var dup13 = match("MESSAGE#10:ids-alerts:01/2", "nwparser.p0", "%{direction->} protocol=%{protocol->} src=%{p0}"); - - var dup14 = match_copy("MESSAGE#10:ids-alerts:01/4", "nwparser.p0", "signame"); - - var dup15 = setc("eventcategory","1607000000"); - - var dup16 = setc("event_type","ids-alerts"); - - var dup17 = date_time({ - dest: "event_time", - args: ["fld3"], - fmts: [ - [dX], - ], - }); - - var dup18 = setc("event_type","security_event"); - - var dup19 = constant("Allow"); - - var dup20 = match("HEADER#0:0003/1_0", "nwparser.p0", "%{hfld4}_appliance %{p0}", processor_chain([ - dup2, - ])); - - var dup21 = match("HEADER#0:0003/1_1", "nwparser.p0", "%{hfld4->} %{p0}", processor_chain([ - dup3, - ])); - - var dup22 = linear_select([ - dup11, - dup12, - ]); - - var dup23 = linear_select([ - dup20, - dup21, - ]); - - var part1 = match("HEADER#0:0003/2", "nwparser.p0", "urls %{p0}"); - - var all1 = all_match({ - processors: [ - dup1, - dup23, - part1, - ], - on_success: processor_chain([ - setc("header_id","0003"), - setc("messageid","urls"), - ]), - }); - - var part2 = match("HEADER#1:0002/1_0", "nwparser.p0", "%{node}_appliance events %{p0}"); - - var part3 = match("HEADER#1:0002/1_1", "nwparser.p0", "%{node->} events %{p0}"); - - var select1 = linear_select([ - part2, - part3, - ]); - - var part4 = match_copy("HEADER#1:0002/2", "nwparser.p0", "payload"); - - var all2 = all_match({ - processors: [ - dup1, - select1, - part4, - ], - on_success: processor_chain([ - setc("header_id","0002"), - setc("messageid","events"), - ]), - }); - - var part5 = match("HEADER#2:0001/2", "nwparser.p0", "%{messageid->} %{p0}"); - - var all3 = all_match({ - processors: [ - dup1, - dup23, - part5, - ], - on_success: processor_chain([ - setc("header_id","0001"), - ]), - }); - - var part6 = match("HEADER#3:0005/1_0", "nwparser.p0", "%{hfld4}_appliance %{p0}"); - - var part7 = match("HEADER#3:0005/1_1", "nwparser.p0", "%{hfld4->} %{p0}"); - - var select2 = linear_select([ - part6, - part7, - ]); - - var part8 = match("HEADER#3:0005/2", "nwparser.p0", "%{} %{hfld5->} %{hfld6->} %{messageid->} %{p0}", processor_chain([ - call({ - dest: "nwparser.payload", - fn: STRCAT, - args: [ - field("hfld6"), - constant(" "), - field("messageid"), - constant(" "), - field("p0"), - ], - }), - ])); - - var all4 = all_match({ - processors: [ - dup1, - select2, - part8, - ], - on_success: processor_chain([ - setc("header_id","0005"), - ]), - }); - - var hdr1 = match("HEADER#4:0004", "message", "%{hfld1->} %{hfld2}.%{hfld3->} %{hfld4}_%{space->} %{messageid->} %{payload}", processor_chain([ - setc("header_id","0004"), - ])); - - var select3 = linear_select([ - all1, - all2, - all3, - all4, - hdr1, - ]); - - var part9 = match("MESSAGE#0:flows/0_0", "nwparser.payload", "%{node}_appliance %{p0}"); - - var part10 = match("MESSAGE#0:flows/0_1", "nwparser.payload", "%{node->} %{p0}"); - - var select4 = linear_select([ - part9, - part10, - ]); - - var part11 = match("MESSAGE#0:flows/1", "nwparser.p0", "flows src=%{saddr->} dst=%{daddr->} %{p0}"); - - var part12 = match("MESSAGE#0:flows/2_0", "nwparser.p0", "mac=%{dmacaddr->} %{p0}"); - - var select5 = linear_select([ - part12, - dup4, - ]); - - var part13 = match("MESSAGE#0:flows/3", "nwparser.p0", "protocol=%{protocol->} %{p0}"); - - var part14 = match("MESSAGE#0:flows/4_0", "nwparser.p0", "sport=%{sport->} dport=%{dport->} %{p0}"); - - var part15 = match("MESSAGE#0:flows/4_1", "nwparser.p0", "type=%{event_type->} %{p0}"); - - var select6 = linear_select([ - part14, - part15, - dup4, - ]); - - var part16 = match("MESSAGE#0:flows/5", "nwparser.p0", "pattern: %{fld21->} %{info}"); - - var all5 = all_match({ - processors: [ - select4, - part11, - select5, - part13, - select6, - part16, - ], - on_success: processor_chain([ - dup5, - dup6, - lookup({ - dest: "nwparser.action", - map: map_actionType, - key: field("fld21"), - }), - dup7, - dup8, - dup9, - ]), - }); - - var msg1 = msg("flows", all5); - - var part17 = match("MESSAGE#1:flows:01/0", "nwparser.payload", "%{node->} flows %{action->} src=%{saddr->} dst=%{daddr->} mac=%{smacaddr->} protocol=%{protocol->} %{p0}"); - - var part18 = match("MESSAGE#1:flows:01/1_0", "nwparser.p0", "sport=%{sport->} dport=%{dport->} "); - - var part19 = match("MESSAGE#1:flows:01/1_1", "nwparser.p0", "type=%{event_type->} "); - - var select7 = linear_select([ - part18, - part19, - dup10, - ]); - - var all6 = all_match({ - processors: [ - part17, - select7, - ], - on_success: processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ]), - }); - - var msg2 = msg("flows:01", all6); - - var part20 = match("MESSAGE#2:flows:02", "nwparser.payload", "%{node->} flows %{action}", processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ])); - - var msg3 = msg("flows:02", part20); - - var select8 = linear_select([ - msg1, - msg2, - msg3, - ]); - - var part21 = match("MESSAGE#3:urls/0_0", "nwparser.payload", "%{node}_appliance urls src=%{p0}"); - - var part22 = match("MESSAGE#3:urls/0_1", "nwparser.payload", "%{node->} urls src=%{p0}"); - - var part23 = match("MESSAGE#3:urls/0_2", "nwparser.payload", "src=%{p0}"); - - var select9 = linear_select([ - part21, - part22, - part23, - ]); - - var part24 = match("MESSAGE#3:urls/1", "nwparser.p0", "%{sport}:%{saddr->} dst=%{daddr}:%{dport->} mac=%{macaddr->} %{p0}"); - - var part25 = match("MESSAGE#3:urls/2_0", "nwparser.p0", "agent='%{user_agent}' request: %{p0}"); - - var part26 = match("MESSAGE#3:urls/2_1", "nwparser.p0", "agent=%{user_agent->} request: %{p0}"); - - var part27 = match("MESSAGE#3:urls/2_2", "nwparser.p0", "request: %{p0}"); - - var select10 = linear_select([ - part25, - part26, - part27, - ]); - - var part28 = match("MESSAGE#3:urls/3", "nwparser.p0", "%{} %{web_method}%{url}"); - - var all7 = all_match({ - processors: [ - select9, - part24, - select10, - part28, - ], - on_success: processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ]), - }); - - var msg4 = msg("urls", all7); - - var part29 = match("MESSAGE#4:events/0", "nwparser.payload", "dhcp lease of ip %{saddr->} from server mac %{smacaddr->} for client mac %{p0}"); - - var part30 = match("MESSAGE#4:events/1_0", "nwparser.p0", "%{dmacaddr->} with hostname %{hostname->} from router %{p0}"); - - var part31 = match("MESSAGE#4:events/1_1", "nwparser.p0", "%{dmacaddr->} from router %{p0}"); - - var select11 = linear_select([ - part30, - part31, - ]); - - var part32 = match("MESSAGE#4:events/2", "nwparser.p0", "%{hostip->} on subnet %{mask->} with dns %{dns_a_record}"); - - var all8 = all_match({ - processors: [ - part29, - select11, - part32, - ], - on_success: processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ]), - }); - - var msg5 = msg("events", all8); - - var part33 = match("MESSAGE#5:events:02/0", "nwparser.payload", "content_filtering_block url='%{url}' category0='%{category}' server='%{daddr}:%{dport}'%{p0}"); - - var part34 = match("MESSAGE#5:events:02/1_0", "nwparser.p0", " client_mac='%{dmacaddr}'"); - - var select12 = linear_select([ - part34, - dup10, - ]); - - var all9 = all_match({ - processors: [ - part33, - select12, - ], - on_success: processor_chain([ - dup5, - dup6, - setc("event_description","content_filtering_block"), - dup8, - dup9, - ]), - }); - - var msg6 = msg("events:02", all9); - - var part35 = tagval("MESSAGE#6:events:01", "nwparser.payload", tvm, { - "aid": "fld1", - "arp_resp": "fld2", - "arp_src": "fld3", - "auth_neg_dur": "fld4", - "auth_neg_failed": "fld5", - "category0": "category", - "channel": "fld6", - "client_ip": "daddr", - "client_mac": "dmacaddr", - "connectivity": "fld28", - "dhcp_ip": "fld23", - "dhcp_lease_completed": "fld22", - "dhcp_resp": "fld26", - "dhcp_server": "fld24", - "dhcp_server_mac": "fld25", - "dns_req_rtt": "fld7", - "dns_resp": "fld8", - "dns_server": "fld9", - "duration": "duration", - "full_conn": "fld11", - "http_resp": "fld21", - "identity": "fld12", - "instigator": "fld20", - "ip_resp": "fld13", - "ip_src": "saddr", - "is_8021x": "fld15", - "is_wpa": "fld16", - "last_auth_ago": "fld17", - "radio": "fld18", - "reason": "fld19", - "rssi": "dclass_ratio1", - "server": "daddr", - "type": "event_type", - "url": "url", - "vap": "fld22", - "vpn_type": "fld27", - }, processor_chain([ - dup5, - dup6, - dup7, - dup8, - dup9, - ])); - - var msg7 = msg("events:01", part35); - - var part36 = match("MESSAGE#7:events:03", "nwparser.payload", "IDS: %{info}", processor_chain([ - dup5, - dup6, - setc("event_description","events IDS"), - dup8, - dup9, - ])); - - var msg8 = msg("events:03", part36); - - var part37 = match("MESSAGE#8:events:04/0", "nwparser.payload", "dhcp %{p0}"); - - var part38 = match("MESSAGE#8:events:04/1_0", "nwparser.p0", "no offers%{p0}"); - - var part39 = match("MESSAGE#8:events:04/1_1", "nwparser.p0", "release%{p0}"); - - var select13 = linear_select([ - part38, - part39, - ]); - - var part40 = match("MESSAGE#8:events:04/2", "nwparser.p0", "%{}for mac %{macaddr}"); - - var all10 = all_match({ - processors: [ - part37, - select13, - part40, - ], - on_success: processor_chain([ - dup5, - dup6, - setc("event_description","events DHCP"), - dup8, - dup9, - ]), - }); - - var msg9 = msg("events:04", all10); - - var part41 = match("MESSAGE#9:events:05", "nwparser.payload", "MAC %{macaddr->} and MAC %{macaddr->} both claim IP: %{saddr}", processor_chain([ - dup5, - dup6, - setc("event_description"," events MAC"), - dup8, - dup9, - ])); - - var msg10 = msg("events:05", part41); - - var select14 = linear_select([ - msg5, - msg6, - msg7, - msg8, - msg9, - msg10, - ]); - - var part42 = match("MESSAGE#10:ids-alerts:01/0", "nwparser.payload", "%{node->} ids-alerts signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4->} %{p0}"); - - var part43 = match("MESSAGE#10:ids-alerts:01/3_0", "nwparser.p0", "%{saddr}:%{sport->} dst=%{daddr}:%{dport->} message: %{p0}"); - - var part44 = match("MESSAGE#10:ids-alerts:01/3_1", "nwparser.p0", "%{saddr->} dst=%{daddr->} message: %{p0}"); - - var select15 = linear_select([ - part43, - part44, - ]); - - var all11 = all_match({ - processors: [ - part42, - dup22, - dup13, - select15, - dup14, - ], - on_success: processor_chain([ - dup15, - dup6, - dup16, - dup8, - dup17, - ]), - }); - - var msg11 = msg("ids-alerts:01", all11); - - var part45 = match("MESSAGE#11:ids-alerts:03", "nwparser.payload", "%{node->} ids-alerts signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4}direction=%{direction->} protocol=%{protocol->} src=%{saddr}:%{sport}", processor_chain([ - dup15, - dup6, - dup16, - dup8, - dup17, - ])); - - var msg12 = msg("ids-alerts:03", part45); - - var part46 = match("MESSAGE#12:ids-alerts:02", "nwparser.payload", "%{node->} ids-alerts signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4}protocol=%{protocol->} src=%{saddr->} dst=%{daddr}message: %{signame}", processor_chain([ - dup15, - dup6, - dup16, - dup8, - dup17, - ])); - - var msg13 = msg("ids-alerts:02", part46); - - var select16 = linear_select([ - msg11, - msg12, - msg13, - ]); - - var part47 = match("MESSAGE#13:security_event", "nwparser.payload", "%{node}security_event %{event_description->} url=%{url->} src=%{saddr}:%{sport->} dst=%{daddr}:%{dport->} mac=%{smacaddr->} name=%{fld10->} sha256=%{fld11->} disposition=%{disposition->} action=%{action}", processor_chain([ - dup5, - dup6, - dup18, - dup8, - dup9, - ])); - - var msg14 = msg("security_event", part47); - - var part48 = match("MESSAGE#14:security_event:01/0", "nwparser.payload", "%{node->} security_event %{event_description->} signature=%{fld1->} priority=%{fld2->} timestamp=%{fld3}.%{fld4->} %{p0}"); - - var part49 = match("MESSAGE#14:security_event:01/3_0", "nwparser.p0", "%{saddr}:%{sport->} dst=%{daddr}:%{dport->} message:%{p0}"); - - var part50 = match("MESSAGE#14:security_event:01/3_1", "nwparser.p0", "%{saddr->} dst=%{daddr->} message:%{p0}"); - - var select17 = linear_select([ - part49, - part50, - ]); - - var all12 = all_match({ - processors: [ - part48, - dup22, - dup13, - select17, - dup14, - ], - on_success: processor_chain([ - dup15, - dup6, - dup18, - dup8, - dup17, - ]), - }); - - var msg15 = msg("security_event:01", all12); - - var select18 = linear_select([ - msg14, - msg15, - ]); - - var chain1 = processor_chain([ - select3, - msgid_select({ - "events": select14, - "flows": select8, - "ids-alerts": select16, - "security_event": select18, - "urls": msg4, - }), - ]); - - var hdr2 = match("HEADER#0:0003/0", "message", "%{hfld1->} %{hfld2}.%{hfld3->} %{p0}"); - - var part51 = match_copy("MESSAGE#0:flows/2_1", "nwparser.p0", "p0"); - - var part52 = match_copy("MESSAGE#1:flows:01/1_2", "nwparser.p0", ""); - - var part53 = match("MESSAGE#10:ids-alerts:01/1_0", "nwparser.p0", "dhost=%{dmacaddr->} direction=%{p0}"); - - var part54 = match("MESSAGE#10:ids-alerts:01/1_1", "nwparser.p0", "shost=%{smacaddr->} direction=%{p0}"); - - var part55 = match("MESSAGE#10:ids-alerts:01/2", "nwparser.p0", "%{direction->} protocol=%{protocol->} src=%{p0}"); - - var part56 = match_copy("MESSAGE#10:ids-alerts:01/4", "nwparser.p0", "signame"); - - var part57 = match("HEADER#0:0003/1_0", "nwparser.p0", "%{hfld4}_appliance %{p0}", processor_chain([ - dup2, - ])); - - var part58 = match("HEADER#0:0003/1_1", "nwparser.p0", "%{hfld4->} %{p0}", processor_chain([ - dup3, - ])); - - var select19 = linear_select([ - dup11, - dup12, - ]); - - var select20 = linear_select([ - dup20, - dup21, - ]); - -- community_id: -- registered_domain: - ignore_missing: true - ignore_failure: true - field: dns.question.name - target_field: dns.question.registered_domain - target_subdomain_field: dns.question.subdomain - target_etld_field: dns.question.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: client.domain - target_field: client.registered_domain - target_subdomain_field: client.subdomain - target_etld_field: client.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: server.domain - target_field: server.registered_domain - target_subdomain_field: server.subdomain - target_etld_field: server.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: destination.domain - target_field: destination.registered_domain - target_subdomain_field: destination.subdomain - target_etld_field: destination.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: source.domain - target_field: source.registered_domain - target_subdomain_field: source.subdomain - target_etld_field: source.top_level_domain -- registered_domain: - ignore_missing: true - ignore_failure: true - field: url.domain - target_field: url.registered_domain - target_subdomain_field: url.subdomain - target_etld_field: url.top_level_domain -- add_locale: ~ diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index a932e4cc8eb..c5959bcc06d 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -1,72 +1,51 @@ --- -description: Pipeline for Cisco Meraki - +description: Pipeline for processing Cisco Meraki events processors: - # ECS event.ingested - - set: - field: event.ingested - value: '{{_ingest.timestamp}}' - - set: - field: ecs.version - value: '8.0.0' - # User agent - - user_agent: - field: user_agent.original - ignore_missing: true - # IP Geolocation Lookup - - geoip: - field: source.ip - target_field: source.geo - ignore_missing: true - - geoip: - field: destination.ip - target_field: destination.geo - ignore_missing: true +- set: + field: ecs.version + value: '8.0.0' +- set: + field: cisco_meraki.log + copy_from: json +## +# Clean up +## +- remove: + field: + - json + ignore_missing: true +- remove: + field: event.original + if: "ctx?.tags == null || !(ctx.tags.contains('preserve_original_event'))" + ignore_failure: true + ignore_missing: true +- script: + lang: painless + description: This script processor iterates over the whole document to remove fields with null values. + source: | + void handleMap(Map map) { + for (def x : map.values()) { + if (x instanceof Map) { + handleMap(x); + } else if (x instanceof List) { + handleList(x); + } + } + map.values().removeIf(v -> v == null || v == '' || (v instanceof Map && v.size() == 0) || (v instanceof List && v.size() == 0)); + } + void handleList(List list) { + for (def x : list) { + if (x instanceof Map) { + handleMap(x); + } else if (x instanceof List) { + handleList(x); + } + } + list.removeIf(v -> v == null || v == '' || (v instanceof Map && v.size() == 0) || (v instanceof List && v.size() == 0)); + } + handleMap(ctx); - # IP Autonomous System (AS) Lookup - - geoip: - database_file: GeoLite2-ASN.mmdb - field: source.ip - target_field: source.as - properties: - - asn - - organization_name - ignore_missing: true - - geoip: - database_file: GeoLite2-ASN.mmdb - field: destination.ip - target_field: destination.as - properties: - - asn - - organization_name - ignore_missing: true - - rename: - field: source.as.asn - target_field: source.as.number - ignore_missing: true - - rename: - field: source.as.organization_name - target_field: source.as.organization.name - ignore_missing: true - - rename: - field: destination.as.asn - target_field: destination.as.number - ignore_missing: true - - rename: - field: destination.as.organization_name - target_field: destination.as.organization.name - ignore_missing: true - - append: - field: related.hosts - value: '{{host.name}}' - allow_duplicates: false - if: ctx.host?.name != null && ctx.host?.name != '' - - remove: - field: event.original - if: "ctx?.tags == null || !(ctx.tags.contains('preserve_original_event'))" - ignore_failure: true - ignore_missing: true on_failure: - - append: - field: error.message - value: "{{ _ingest.on_failure_message }}" +- set: + field: error.message + value: '{{ _ingest.on_failure_message }}' diff --git a/packages/cisco_meraki/data_stream/log/fields/agent.yml b/packages/cisco_meraki/data_stream/log/fields/agent.yml index da4e652c53b..b4f84cf84a4 100644 --- a/packages/cisco_meraki/data_stream/log/fields/agent.yml +++ b/packages/cisco_meraki/data_stream/log/fields/agent.yml @@ -1,198 +1,3 @@ -- name: cloud - title: Cloud - group: 2 - description: Fields related to the cloud or infrastructure the events are coming from. - footnote: 'Examples: If Metricbeat is running on an EC2 host and fetches data from its host, the cloud info contains the data about this machine. If Metricbeat runs on a remote machine outside the cloud and fetches data from a service running in the cloud, the field contains cloud data from the machine the service is running on.' - type: group - fields: - - name: account.id - level: extended - type: keyword - ignore_above: 1024 - description: 'The cloud account or organization id used to identify different entities in a multi-tenant environment. - - Examples: AWS account id, Google Cloud ORG Id, or other unique identifier.' - example: 666777888999 - - name: availability_zone - level: extended - type: keyword - ignore_above: 1024 - description: Availability zone in which this host is running. - example: us-east-1c - - name: instance.id - level: extended - type: keyword - ignore_above: 1024 - description: Instance ID of the host machine. - example: i-1234567890abcdef0 - - name: instance.name - level: extended - type: keyword - ignore_above: 1024 - description: Instance name of the host machine. - - name: machine.type - level: extended - type: keyword - ignore_above: 1024 - description: Machine type of the host machine. - example: t2.medium - - name: provider - level: extended - type: keyword - ignore_above: 1024 - description: Name of the cloud provider. Example values are aws, azure, gcp, or digitalocean. - example: aws - - name: region - level: extended - type: keyword - ignore_above: 1024 - description: Region in which this host is running. - example: us-east-1 - - name: project.id - type: keyword - description: Name of the project in Google Cloud. - - name: image.id - type: keyword - description: Image ID for the cloud instance. -- name: container - title: Container - group: 2 - description: 'Container fields are used for meta information about the specific container that is the source of information. - - These fields help correlate data based containers from any runtime.' - type: group - fields: - - name: id - level: core - type: keyword - ignore_above: 1024 - description: Unique container id. - - name: image.name - level: extended - type: keyword - ignore_above: 1024 - description: Name of the image the container was built on. - - name: labels - level: extended - type: object - object_type: keyword - description: Image labels. - - name: name - level: extended - type: keyword - ignore_above: 1024 - description: Container name. -- name: host - title: Host - group: 2 - description: 'A host is defined as a general computing instance. - - ECS host.* fields should be populated with details about the host on which the event happened, or from which the measurement was taken. Host types include hardware, virtual machines, Docker containers, and Kubernetes nodes.' - type: group - fields: - - name: architecture - level: core - type: keyword - ignore_above: 1024 - description: Operating system architecture. - example: x86_64 - - name: domain - level: extended - type: keyword - ignore_above: 1024 - description: 'Name of the domain of which the host is a member. - - For example, on Windows this could be the host''s Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host''s LDAP provider.' - example: CONTOSO - default_field: false - - name: hostname - level: core - type: keyword - ignore_above: 1024 - description: 'Hostname of the host. - - It normally contains what the `hostname` command returns on the host machine.' - - name: id - level: core - type: keyword - ignore_above: 1024 - description: 'Unique host id. - - As hostname is not always unique, use values that are meaningful in your environment. - - Example: The current usage of `beat.name`.' - - name: ip - level: core - type: ip - description: Host ip addresses. - - name: mac - level: core - type: keyword - ignore_above: 1024 - description: Host mac addresses. - - name: name - level: core - type: keyword - ignore_above: 1024 - description: 'Name of the host. - - It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use.' - - name: os.family - level: extended - type: keyword - ignore_above: 1024 - description: OS family (such as redhat, debian, freebsd, windows). - example: debian - - name: os.kernel - level: extended - type: keyword - ignore_above: 1024 - description: Operating system kernel version as a raw string. - example: 4.4.0-112-generic - - name: os.name - level: extended - type: keyword - ignore_above: 1024 - multi_fields: - - name: text - type: text - norms: false - default_field: false - description: Operating system name, without the version. - example: Mac OS X - - name: os.platform - level: extended - type: keyword - ignore_above: 1024 - description: Operating system platform (such centos, ubuntu, windows). - example: darwin - - name: os.version - level: extended - type: keyword - ignore_above: 1024 - description: Operating system version as a raw string. - example: 10.14.1 - - name: type - level: core - type: keyword - ignore_above: 1024 - description: 'Type of host. - - For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment.' - - name: containerized - type: boolean - description: > - If the host is a container. - - - name: os.build - type: keyword - example: "18D109" - description: > - OS build information. - - - name: os.codename - type: keyword - example: "stretch" - description: > - OS codename, if any. - +- name: input.type + type: keyword + description: Input type. diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index f59640c2754..3cb8285c0bb 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -1,1753 +1,72 @@ -- name: rsa +- name: cisco_meraki type: group fields: - - name: internal + - name: log type: group fields: - - name: msg - type: keyword - description: This key is used to capture the raw message that comes into the Log Decoder - - name: messageid - type: keyword - - name: event_desc - type: keyword - - name: message - type: keyword - description: This key captures the contents of instant messages - - name: time - type: date - description: This is the time at which a session hits a NetWitness Decoder. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness. - - name: level - type: long - description: Deprecated key defined only in table map. - - name: msg_id - type: keyword - description: This is the Message ID1 value that identifies the exact log parser definition which parses a particular log session. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: msg_vid - type: keyword - description: This is the Message ID2 value that identifies the exact log parser definition which parses a particular log session. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: data - type: keyword - description: Deprecated key defined only in table map. - - name: obj_server - type: keyword - description: Deprecated key defined only in table map. - - name: obj_val - type: keyword - description: Deprecated key defined only in table map. - - name: resource - type: keyword - description: Deprecated key defined only in table map. - - name: obj_id - type: keyword - description: Deprecated key defined only in table map. - - name: statement - type: keyword - description: Deprecated key defined only in table map. - - name: audit_class - type: keyword - description: Deprecated key defined only in table map. - - name: entry - type: keyword - description: Deprecated key defined only in table map. - - name: hcode - type: keyword - description: Deprecated key defined only in table map. - - name: inode - type: long - description: Deprecated key defined only in table map. - - name: resource_class - type: keyword - description: Deprecated key defined only in table map. - - name: dead - type: long - description: Deprecated key defined only in table map. - - name: feed_desc - type: keyword - description: This is used to capture the description of the feed. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: feed_name - type: keyword - description: This is used to capture the name of the feed. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: cid - type: keyword - description: This is the unique identifier used to identify a NetWitness Concentrator. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: device_class - type: keyword - description: This is the Classification of the Log Event Source under a predefined fixed set of Event Source Classifications. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: device_group - type: keyword - description: This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: device_host - type: keyword - description: This is the Hostname of the log Event Source sending the logs to NetWitness. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: device_ip - type: ip - description: This is the IPv4 address of the Log Event Source sending the logs to NetWitness. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: device_ipv6 - type: ip - description: This is the IPv6 address of the Log Event Source sending the logs to NetWitness. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: device_type - type: keyword - description: This is the name of the log parser which parsed a given session. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: device_type_id - type: long - description: Deprecated key defined only in table map. - - name: did - type: keyword - description: This is the unique identifier used to identify a NetWitness Decoder. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: entropy_req - type: long - description: This key is only used by the Entropy Parser, the Meta Type can be either UInt16 or Float32 based on the configuration - - name: entropy_res - type: long - description: This key is only used by the Entropy Parser, the Meta Type can be either UInt16 or Float32 based on the configuration - - name: event_name - type: keyword - description: Deprecated key defined only in table map. - - name: feed_category - type: keyword - description: This is used to capture the category of the feed. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: forward_ip - type: ip - description: This key should be used to capture the IPV4 address of a relay system which forwarded the events from the original system to NetWitness. - - name: forward_ipv6 - type: ip - description: This key is used to capture the IPV6 address of a relay system which forwarded the events from the original system to NetWitness. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: header_id - type: keyword - description: This is the Header ID value that identifies the exact log parser header definition that parses a particular log session. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: lc_cid - type: keyword - description: This is a unique Identifier of a Log Collector. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: lc_ctime - type: date - description: This is the time at which a log is collected in a NetWitness Log Collector. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: mcb_req - type: long - description: This key is only used by the Entropy Parser, the most common byte request is simply which byte for each side (0 thru 255) was seen the most - - name: mcb_res - type: long - description: This key is only used by the Entropy Parser, the most common byte response is simply which byte for each side (0 thru 255) was seen the most - - name: mcbc_req - type: long - description: This key is only used by the Entropy Parser, the most common byte count is the number of times the most common byte (above) was seen in the session streams - - name: mcbc_res - type: long - description: This key is only used by the Entropy Parser, the most common byte count is the number of times the most common byte (above) was seen in the session streams - - name: medium - type: long - description: "This key is used to identify if it’s a log/packet session or Layer 2 Encapsulation Type. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness. 32 = log, 33 = correlation session, < 32 is packet session" - - name: node_name - type: keyword - description: Deprecated key defined only in table map. - - name: nwe_callback_id - type: keyword - description: This key denotes that event is endpoint related - - name: parse_error - type: keyword - description: This is a special key that stores any Meta key validation error found while parsing a log session. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: payload_req - type: long - description: This key is only used by the Entropy Parser, the payload size metrics are the payload sizes of each session side at the time of parsing. However, in order to keep - - name: payload_res - type: long - description: This key is only used by the Entropy Parser, the payload size metrics are the payload sizes of each session side at the time of parsing. However, in order to keep - - name: process_vid_dst - type: keyword - description: Endpoint generates and uses a unique virtual ID to identify any similar group of process. This ID represents the target process. - - name: process_vid_src - type: keyword - description: Endpoint generates and uses a unique virtual ID to identify any similar group of process. This ID represents the source process. - - name: rid - type: long - description: This is a special ID of the Remote Session created by NetWitness Decoder. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: session_split - type: keyword - description: This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: site - type: keyword - description: Deprecated key defined only in table map. - - name: size - type: long - description: This is the size of the session as seen by the NetWitness Decoder. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: sourcefile - type: keyword - description: This is the name of the log file or PCAPs that can be imported into NetWitness. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: ubc_req - type: long - description: This key is only used by the Entropy Parser, Unique byte count is the number of unique bytes seen in each stream. 256 would mean all byte values of 0 thru 255 were seen at least once - - name: ubc_res - type: long - description: This key is only used by the Entropy Parser, Unique byte count is the number of unique bytes seen in each stream. 256 would mean all byte values of 0 thru 255 were seen at least once - - name: word - type: keyword - description: This is used by the Word Parsing technology to capture the first 5 character of every word in an unparsed log - - name: time - type: group - fields: - - name: event_time - type: date - description: This key is used to capture the time mentioned in a raw session that represents the actual time an event occured in a standard normalized form - - name: duration_time - type: double - description: This key is used to capture the normalized duration/lifetime in seconds. - - name: event_time_str - type: keyword - description: This key is used to capture the incomplete time mentioned in a session as a string - - name: starttime - type: date - description: This key is used to capture the Start time mentioned in a session in a standard form - - name: month + - name: version type: keyword - - name: day + description: Current version of webhook format + - name: sharedSecret type: keyword - - name: endtime + description: User defined secret to be validated by the webhook receiver (optional) + - name: sentAt type: date - description: This key is used to capture the End time mentioned in a session in a standard form - - name: timezone - type: keyword - description: This key is used to capture the timezone of the Event Time - - name: duration_str - type: keyword - description: A text string version of the duration - - name: date - type: keyword - - name: year + description: Timestamp of the sent message (UTC) + - name: organizationId type: keyword - - name: recorded_time - type: date - description: The event time as recorded by the system the event is collected from. The usage scenario is a multi-tier application where the management layer of the system records it's own timestamp at the time of collection from its child nodes. Must be in timestamp format. - - name: datetime + description: ID of the Meraki organization + - name: organizationName type: keyword - - name: effective_time - type: date - description: This key is the effective time referenced by an individual event in a Standard Timestamp format - - name: expire_time - type: date - description: This key is the timestamp that explicitly refers to an expiration. - - name: process_time + description: Name of the Meraki organization + - name: organizationUrl type: keyword - description: Deprecated, use duration.time - - name: hour + description: URL of the Meraki Dashboard organization + - name: networkId type: keyword - - name: min + description: ID for the Meraki network + - name: networkName type: keyword - - name: timestamp + description: Name for the Meraki network + - name: networkUrl type: keyword - - name: event_queue_time - type: date - description: This key is the Time that the event was queued. - - name: p_time1 + description: URL of the Meraki Dashboard network + - name: networkTags type: keyword - - name: tzone + description: Tags assigned to the Meraki network + - name: deviceSerial type: keyword - - name: eventtime + description: Serial number of the Meraki device + - name: deviceMac type: keyword - - name: gmtdate + description: MAC address of the Meraki device + - name: deviceName type: keyword - - name: gmttime + description: Name assigned to the Meraki device + - name: deviceUrl type: keyword - - name: p_date + description: URL of the Meraki device + - name: deviceTags type: keyword - - name: p_month + description: Tags assigned to the Meraki device + - name: deviceModel type: keyword - - name: p_time + description: Meraki device model + - name: alertId type: keyword - - name: p_time2 + description: ID for this alert message + - name: alertType type: keyword - - name: p_year + description: Type of alert (“Network usage alert”, “Settings changed”, etc.) + - name: alertTypeId type: keyword - - name: expire_time_str + description: Unique ID for the type of alert + - name: alertLevel type: keyword - description: This key is used to capture incomplete timestamp that explicitly refers to an expiration. - - name: stamp + description: Alert level (informational, critical etc.) + - name: occurredAt type: date - description: Deprecated key defined only in table map. - - name: misc - type: group - fields: - - name: action - type: keyword - - name: result - type: keyword - description: This key is used to capture the outcome/result string value of an action in a session. - - name: severity - type: keyword - description: This key is used to capture the severity given the session - - name: event_type - type: keyword - description: This key captures the event category type as specified by the event source. - - name: reference_id - type: keyword - description: This key is used to capture an event id from the session directly - - name: version - type: keyword - description: This key captures Version of the application or OS which is generating the event. - - name: disposition - type: keyword - description: This key captures the The end state of an action. - - name: result_code - type: keyword - description: This key is used to capture the outcome/result numeric value of an action in a session - - name: category - type: keyword - description: This key is used to capture the category of an event given by the vendor in the session - - name: obj_name - type: keyword - description: This is used to capture name of object - - name: obj_type - type: keyword - description: This is used to capture type of object - - name: event_source - type: keyword - description: "This key captures Source of the event that’s not a hostname" - - name: log_session_id - type: keyword - description: This key is used to capture a sessionid from the session directly - - name: group - type: keyword - description: This key captures the Group Name value - - name: policy_name - type: keyword - description: This key is used to capture the Policy Name only. - - name: rule_name - type: keyword - description: This key captures the Rule Name - - name: context - type: keyword - description: This key captures Information which adds additional context to the event. - - name: change_new - type: keyword - description: "This key is used to capture the new values of the attribute that’s changing in a session" - - name: space - type: keyword - - name: client - type: keyword - description: This key is used to capture only the name of the client application requesting resources of the server. See the user.agent meta key for capture of the specific user agent identifier or browser identification string. - - name: msgIdPart1 - type: keyword - - name: msgIdPart2 - type: keyword - - name: change_old - type: keyword - description: "This key is used to capture the old value of the attribute that’s changing in a session" - - name: operation_id - type: keyword - description: An alert number or operation number. The values should be unique and non-repeating. - - name: event_state - type: keyword - description: This key captures the current state of the object/item referenced within the event. Describing an on-going event. - - name: group_object - type: keyword - description: This key captures a collection/grouping of entities. Specific usage - - name: node - type: keyword - description: Common use case is the node name within a cluster. The cluster name is reflected by the host name. - - name: rule - type: keyword - description: This key captures the Rule number - - name: device_name - type: keyword - description: 'This is used to capture name of the Device associated with the node Like: a physical disk, printer, etc' - - name: param - type: keyword - description: This key is the parameters passed as part of a command or application, etc. - - name: change_attrib - type: keyword - description: "This key is used to capture the name of the attribute that’s changing in a session" - - name: event_computer - type: keyword - description: This key is a windows only concept, where this key is used to capture fully qualified domain name in a windows log. - - name: reference_id1 - type: keyword - description: This key is for Linked ID to be used as an addition to "reference.id" - - name: event_log - type: keyword - description: This key captures the Name of the event log - - name: OS - type: keyword - description: This key captures the Name of the Operating System - - name: terminal - type: keyword - description: This key captures the Terminal Names only - - name: msgIdPart3 - type: keyword - - name: filter - type: keyword - description: This key captures Filter used to reduce result set - - name: serial_number - type: keyword - description: This key is the Serial number associated with a physical asset. - - name: checksum - type: keyword - description: This key is used to capture the checksum or hash of the entity such as a file or process. Checksum should be used over checksum.src or checksum.dst when it is unclear whether the entity is a source or target of an action. - - name: event_user - type: keyword - description: This key is a windows only concept, where this key is used to capture combination of domain name and username in a windows log. - - name: virusname - type: keyword - description: This key captures the name of the virus - - name: content_type - type: keyword - description: This key is used to capture Content Type only. - - name: group_id - type: keyword - description: This key captures Group ID Number (related to the group name) - - name: policy_id - type: keyword - description: This key is used to capture the Policy ID only, this should be a numeric value, use policy.name otherwise - - name: vsys - type: keyword - description: This key captures Virtual System Name - - name: connection_id - type: keyword - description: This key captures the Connection ID - - name: reference_id2 - type: keyword - description: This key is for the 2nd Linked ID. Can be either linked to "reference.id" or "reference.id1" value but should not be used unless the other two variables are in play. - - name: sensor - type: keyword - description: This key captures Name of the sensor. Typically used in IDS/IPS based devices - - name: sig_id - type: long - description: This key captures IDS/IPS Int Signature ID - - name: port_name - type: keyword - description: 'This key is used for Physical or logical port connection but does NOT include a network port. (Example: Printer port name).' - - name: rule_group - type: keyword - description: This key captures the Rule group name - - name: risk_num - type: double - description: This key captures a Numeric Risk value - - name: trigger_val - type: keyword - description: This key captures the Value of the trigger or threshold condition. - - name: log_session_id1 - type: keyword - description: This key is used to capture a Linked (Related) Session ID from the session directly - - name: comp_version - type: keyword - description: This key captures the Version level of a sub-component of a product. - - name: content_version - type: keyword - description: This key captures Version level of a signature or database content. - - name: hardware_id - type: keyword - description: This key is used to capture unique identifier for a device or system (NOT a Mac address) - - name: risk - type: keyword - description: This key captures the non-numeric risk value - - name: event_id - type: keyword - - name: reason - type: keyword - - name: status - type: keyword - - name: mail_id - type: keyword - description: This key is used to capture the mailbox id/name - - name: rule_uid - type: keyword - description: This key is the Unique Identifier for a rule. - - name: trigger_desc - type: keyword - description: This key captures the Description of the trigger or threshold condition. - - name: inout - type: keyword - - name: p_msgid - type: keyword - - name: data_type - type: keyword - - name: msgIdPart4 - type: keyword - - name: error - type: keyword - description: This key captures All non successful Error codes or responses - - name: index - type: keyword - - name: listnum - type: keyword - description: This key is used to capture listname or listnumber, primarily for collecting access-list - - name: ntype - type: keyword - - name: observed_val - type: keyword - description: This key captures the Value observed (from the perspective of the device generating the log). - - name: policy_value - type: keyword - description: This key captures the contents of the policy. This contains details about the policy - - name: pool_name - type: keyword - description: This key captures the name of a resource pool - - name: rule_template - type: keyword - description: A default set of parameters which are overlayed onto a rule (or rulename) which efffectively constitutes a template - - name: count - type: keyword - - name: number - type: keyword - - name: sigcat - type: keyword - - name: type - type: keyword - - name: comments - type: keyword - description: Comment information provided in the log message - - name: doc_number - type: long - description: This key captures File Identification number - - name: expected_val - type: keyword - description: This key captures the Value expected (from the perspective of the device generating the log). - - name: job_num - type: keyword - description: This key captures the Job Number - - name: spi_dst - type: keyword - description: Destination SPI Index - - name: spi_src - type: keyword - description: Source SPI Index - - name: code - type: keyword - - name: agent_id - type: keyword - description: This key is used to capture agent id - - name: message_body - type: keyword - description: This key captures the The contents of the message body. - - name: phone - type: keyword - - name: sig_id_str - type: keyword - description: This key captures a string object of the sigid variable. - - name: cmd - type: keyword - - name: misc - type: keyword - - name: name - type: keyword - - name: cpu - type: long - description: This key is the CPU time used in the execution of the event being recorded. - - name: event_desc - type: keyword - description: This key is used to capture a description of an event available directly or inferred - - name: sig_id1 - type: long - description: This key captures IDS/IPS Int Signature ID. This must be linked to the sig.id - - name: im_buddyid - type: keyword - - name: im_client - type: keyword - - name: im_userid - type: keyword - - name: pid - type: keyword - - name: priority - type: keyword - - name: context_subject - type: keyword - description: This key is to be used in an audit context where the subject is the object being identified - - name: context_target - type: keyword - - name: cve - type: keyword - description: This key captures CVE (Common Vulnerabilities and Exposures) - an identifier for known information security vulnerabilities. - - name: fcatnum - type: keyword - description: This key captures Filter Category Number. Legacy Usage - - name: library - type: keyword - description: This key is used to capture library information in mainframe devices - - name: parent_node - type: keyword - description: This key captures the Parent Node Name. Must be related to node variable. - - name: risk_info - type: keyword - description: Deprecated, use New Hunting Model (inv.*, ioc, boc, eoc, analysis.*) - - name: tcp_flags - type: long - description: This key is captures the TCP flags set in any packet of session - - name: tos - type: long - description: This key describes the type of service - - name: vm_target - type: keyword - description: VMWare Target **VMWARE** only varaible. - - name: workspace - type: keyword - description: This key captures Workspace Description - - name: command - type: keyword - - name: event_category - type: keyword - - name: facilityname - type: keyword - - name: forensic_info - type: keyword - - name: jobname - type: keyword - - name: mode - type: keyword - - name: policy - type: keyword - - name: policy_waiver - type: keyword - - name: second - type: keyword - - name: space1 - type: keyword - - name: subcategory - type: keyword - - name: tbdstr2 - type: keyword - - name: alert_id - type: keyword - description: Deprecated, New Hunting Model (inv.*, ioc, boc, eoc, analysis.*) - - name: checksum_dst - type: keyword - description: This key is used to capture the checksum or hash of the the target entity such as a process or file. - - name: checksum_src - type: keyword - description: This key is used to capture the checksum or hash of the source entity such as a file or process. - - name: fresult - type: long - description: This key captures the Filter Result - - name: payload_dst - type: keyword - description: This key is used to capture destination payload - - name: payload_src - type: keyword - description: This key is used to capture source payload - - name: pool_id - type: keyword - description: This key captures the identifier (typically numeric field) of a resource pool - - name: process_id_val - type: keyword - description: This key is a failure key for Process ID when it is not an integer value - - name: risk_num_comm - type: double - description: This key captures Risk Number Community - - name: risk_num_next - type: double - description: This key captures Risk Number NextGen - - name: risk_num_sand - type: double - description: This key captures Risk Number SandBox - - name: risk_num_static - type: double - description: This key captures Risk Number Static - - name: risk_suspicious - type: keyword - description: Deprecated, use New Hunting Model (inv.*, ioc, boc, eoc, analysis.*) - - name: risk_warning - type: keyword - description: Deprecated, use New Hunting Model (inv.*, ioc, boc, eoc, analysis.*) - - name: snmp_oid - type: keyword - description: SNMP Object Identifier - - name: sql - type: keyword - description: This key captures the SQL query - - name: vuln_ref - type: keyword - description: This key captures the Vulnerability Reference details - - name: acl_id - type: keyword - - name: acl_op - type: keyword - - name: acl_pos - type: keyword - - name: acl_table - type: keyword - - name: admin - type: keyword - - name: alarm_id - type: keyword - - name: alarmname - type: keyword - - name: app_id - type: keyword - - name: audit - type: keyword - - name: audit_object - type: keyword - - name: auditdata - type: keyword - - name: benchmark - type: keyword - - name: bypass - type: keyword - - name: cache - type: keyword - - name: cache_hit - type: keyword - - name: cefversion - type: keyword - - name: cfg_attr - type: keyword - - name: cfg_obj - type: keyword - - name: cfg_path - type: keyword - - name: changes - type: keyword - - name: client_ip - type: keyword - - name: clustermembers - type: keyword - - name: cn_acttimeout - type: keyword - - name: cn_asn_src - type: keyword - - name: cn_bgpv4nxthop - type: keyword - - name: cn_ctr_dst_code - type: keyword - - name: cn_dst_tos - type: keyword - - name: cn_dst_vlan - type: keyword - - name: cn_engine_id - type: keyword - - name: cn_engine_type - type: keyword - - name: cn_f_switch - type: keyword - - name: cn_flowsampid - type: keyword - - name: cn_flowsampintv - type: keyword - - name: cn_flowsampmode - type: keyword - - name: cn_inacttimeout - type: keyword - - name: cn_inpermbyts - type: keyword - - name: cn_inpermpckts - type: keyword - - name: cn_invalid - type: keyword - - name: cn_ip_proto_ver - type: keyword - - name: cn_ipv4_ident - type: keyword - - name: cn_l_switch - type: keyword - - name: cn_log_did - type: keyword - - name: cn_log_rid - type: keyword - - name: cn_max_ttl - type: keyword - - name: cn_maxpcktlen - type: keyword - - name: cn_min_ttl - type: keyword - - name: cn_minpcktlen - type: keyword - - name: cn_mpls_lbl_1 - type: keyword - - name: cn_mpls_lbl_10 - type: keyword - - name: cn_mpls_lbl_2 - type: keyword - - name: cn_mpls_lbl_3 - type: keyword - - name: cn_mpls_lbl_4 - type: keyword - - name: cn_mpls_lbl_5 - type: keyword - - name: cn_mpls_lbl_6 - type: keyword - - name: cn_mpls_lbl_7 - type: keyword - - name: cn_mpls_lbl_8 - type: keyword - - name: cn_mpls_lbl_9 - type: keyword - - name: cn_mplstoplabel - type: keyword - - name: cn_mplstoplabip - type: keyword - - name: cn_mul_dst_byt - type: keyword - - name: cn_mul_dst_pks - type: keyword - - name: cn_muligmptype - type: keyword - - name: cn_sampalgo - type: keyword - - name: cn_sampint - type: keyword - - name: cn_seqctr - type: keyword - - name: cn_spackets - type: keyword - - name: cn_src_tos - type: keyword - - name: cn_src_vlan - type: keyword - - name: cn_sysuptime - type: keyword - - name: cn_template_id - type: keyword - - name: cn_totbytsexp - type: keyword - - name: cn_totflowexp - type: keyword - - name: cn_totpcktsexp - type: keyword - - name: cn_unixnanosecs - type: keyword - - name: cn_v6flowlabel - type: keyword - - name: cn_v6optheaders - type: keyword - - name: comp_class - type: keyword - - name: comp_name - type: keyword - - name: comp_rbytes - type: keyword - - name: comp_sbytes - type: keyword - - name: cpu_data - type: keyword - - name: criticality - type: keyword - - name: cs_agency_dst - type: keyword - - name: cs_analyzedby - type: keyword - - name: cs_av_other - type: keyword - - name: cs_av_primary - type: keyword - - name: cs_av_secondary - type: keyword - - name: cs_bgpv6nxthop - type: keyword - - name: cs_bit9status - type: keyword - - name: cs_context - type: keyword - - name: cs_control - type: keyword - - name: cs_data - type: keyword - - name: cs_datecret - type: keyword - - name: cs_dst_tld - type: keyword - - name: cs_eth_dst_ven - type: keyword - - name: cs_eth_src_ven - type: keyword - - name: cs_event_uuid - type: keyword - - name: cs_filetype - type: keyword - - name: cs_fld - type: keyword - - name: cs_if_desc - type: keyword - - name: cs_if_name - type: keyword - - name: cs_ip_next_hop - type: keyword - - name: cs_ipv4dstpre - type: keyword - - name: cs_ipv4srcpre - type: keyword - - name: cs_lifetime - type: keyword - - name: cs_log_medium - type: keyword - - name: cs_loginname - type: keyword - - name: cs_modulescore - type: keyword - - name: cs_modulesign - type: keyword - - name: cs_opswatresult - type: keyword - - name: cs_payload - type: keyword - - name: cs_registrant - type: keyword - - name: cs_registrar - type: keyword - - name: cs_represult - type: keyword - - name: cs_rpayload - type: keyword - - name: cs_sampler_name - type: keyword - - name: cs_sourcemodule - type: keyword - - name: cs_streams - type: keyword - - name: cs_targetmodule - type: keyword - - name: cs_v6nxthop - type: keyword - - name: cs_whois_server - type: keyword - - name: cs_yararesult - type: keyword - - name: description - type: keyword - - name: devvendor - type: keyword - - name: distance - type: keyword - - name: dstburb - type: keyword - - name: edomain - type: keyword - - name: edomaub - type: keyword - - name: euid - type: keyword - - name: facility - type: keyword - - name: finterface - type: keyword - - name: flags - type: keyword - - name: gaddr - type: keyword - - name: id3 - type: keyword - - name: im_buddyname - type: keyword - - name: im_croomid - type: keyword - - name: im_croomtype - type: keyword - - name: im_members - type: keyword - - name: im_username - type: keyword - - name: ipkt - type: keyword - - name: ipscat - type: keyword - - name: ipspri - type: keyword - - name: latitude - type: keyword - - name: linenum - type: keyword - - name: list_name - type: keyword - - name: load_data - type: keyword - - name: location_floor - type: keyword - - name: location_mark - type: keyword - - name: log_id - type: keyword - - name: log_type - type: keyword - - name: logid - type: keyword - - name: logip - type: keyword - - name: logname - type: keyword - - name: longitude - type: keyword - - name: lport - type: keyword - - name: mbug_data - type: keyword - - name: misc_name - type: keyword - - name: msg_type - type: keyword - - name: msgid - type: keyword - - name: netsessid - type: keyword - - name: num - type: keyword - - name: number1 - type: keyword - - name: number2 - type: keyword - - name: nwwn - type: keyword - - name: object - type: keyword - - name: operation - type: keyword - - name: opkt - type: keyword - - name: orig_from - type: keyword - - name: owner_id - type: keyword - - name: p_action - type: keyword - - name: p_filter - type: keyword - - name: p_group_object - type: keyword - - name: p_id - type: keyword - - name: p_msgid1 - type: keyword - - name: p_msgid2 - type: keyword - - name: p_result1 - type: keyword - - name: password_chg - type: keyword - - name: password_expire - type: keyword - - name: permgranted - type: keyword - - name: permwanted - type: keyword - - name: pgid - type: keyword - - name: policyUUID - type: keyword - - name: prog_asp_num - type: keyword - - name: program - type: keyword - - name: real_data - type: keyword - - name: rec_asp_device - type: keyword - - name: rec_asp_num - type: keyword - - name: rec_library - type: keyword - - name: recordnum - type: keyword - - name: ruid - type: keyword - - name: sburb - type: keyword - - name: sdomain_fld - type: keyword - - name: sec - type: keyword - - name: sensorname - type: keyword - - name: seqnum - type: keyword - - name: session - type: keyword - - name: sessiontype - type: keyword - - name: sigUUID - type: keyword - - name: spi - type: keyword - - name: srcburb - type: keyword - - name: srcdom - type: keyword - - name: srcservice - type: keyword - - name: state - type: keyword - - name: status1 - type: keyword - - name: svcno - type: keyword - - name: system - type: keyword - - name: tbdstr1 - type: keyword - - name: tgtdom - type: keyword - - name: tgtdomain - type: keyword - - name: threshold - type: keyword - - name: type1 - type: keyword - - name: udb_class - type: keyword - - name: url_fld - type: keyword - - name: user_div - type: keyword - - name: userid - type: keyword - - name: username_fld - type: keyword - - name: utcstamp - type: keyword - - name: v_instafname - type: keyword - - name: virt_data - type: keyword - - name: vpnid - type: keyword - - name: autorun_type - type: keyword - description: This is used to capture Auto Run type - - name: cc_number - type: long - description: Valid Credit Card Numbers only - - name: content - type: keyword - description: This key captures the content type from protocol headers - - name: ein_number - type: long - description: Employee Identification Numbers only - - name: found - type: keyword - description: This is used to capture the results of regex match - - name: language - type: keyword - description: This is used to capture list of languages the client support and what it prefers - - name: lifetime - type: long - description: This key is used to capture the session lifetime in seconds. - - name: link - type: keyword - description: This key is used to link the sessions together. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness - - name: match - type: keyword - description: This key is for regex match name from search.ini - - name: param_dst - type: keyword - description: This key captures the command line/launch argument of the target process or file - - name: param_src - type: keyword - description: This key captures source parameter - - name: search_text - type: keyword - description: This key captures the Search Text used - - name: sig_name - type: keyword - description: This key is used to capture the Signature Name only. - - name: snmp_value - type: keyword - description: SNMP set request value - - name: streams - type: long - description: This key captures number of streams in session - - name: db - type: group - fields: - - name: index - type: keyword - description: This key captures IndexID of the index. - - name: instance - type: keyword - description: This key is used to capture the database server instance name - - name: database - type: keyword - description: This key is used to capture the name of a database or an instance as seen in a session - - name: transact_id - type: keyword - description: This key captures the SQL transantion ID of the current session - - name: permissions - type: keyword - description: This key captures permission or privilege level assigned to a resource. - - name: table_name - type: keyword - description: This key is used to capture the table name - - name: db_id - type: keyword - description: This key is used to capture the unique identifier for a database - - name: db_pid - type: long - description: This key captures the process id of a connection with database server - - name: lread - type: long - description: This key is used for the number of logical reads - - name: lwrite - type: long - description: This key is used for the number of logical writes - - name: pread - type: long - description: This key is used for the number of physical writes - - name: network - type: group - fields: - - name: alias_host - type: keyword - description: This key should be used when the source or destination context of a hostname is not clear.Also it captures the Device Hostname. Any Hostname that isnt ad.computer. - - name: domain - type: keyword - - name: host_dst - type: keyword - description: "This key should only be used when it’s a Destination Hostname" - - name: network_service - type: keyword - description: This is used to capture layer 7 protocols/service names - - name: interface - type: keyword - description: This key should be used when the source or destination context of an interface is not clear - - name: network_port - type: long - description: 'Deprecated, use port. NOTE: There is a type discrepancy as currently used, TM: Int32, INDEX: UInt64 (why neither chose the correct UInt16?!)' - - name: eth_host - type: keyword - description: Deprecated, use alias.mac - - name: sinterface - type: keyword - description: "This key should only be used when it’s a Source Interface" - - name: dinterface - type: keyword - description: "This key should only be used when it’s a Destination Interface" - - name: vlan - type: long - description: This key should only be used to capture the ID of the Virtual LAN - - name: zone_src - type: keyword - description: "This key should only be used when it’s a Source Zone." - - name: zone - type: keyword - description: This key should be used when the source or destination context of a Zone is not clear - - name: zone_dst - type: keyword - description: "This key should only be used when it’s a Destination Zone." - - name: gateway - type: keyword - description: This key is used to capture the IP Address of the gateway - - name: icmp_type - type: long - description: This key is used to capture the ICMP type only - - name: mask - type: keyword - description: This key is used to capture the device network IPmask. - - name: icmp_code - type: long - description: This key is used to capture the ICMP code only - - name: protocol_detail - type: keyword - description: This key should be used to capture additional protocol information - - name: dmask - type: keyword - description: This key is used for Destionation Device network mask - - name: port - type: long - description: This key should only be used to capture a Network Port when the directionality is not clear - - name: smask - type: keyword - description: This key is used for capturing source Network Mask - - name: netname - type: keyword - description: This key is used to capture the network name associated with an IP range. This is configured by the end user. - - name: paddr - type: ip - description: Deprecated - - name: faddr - type: keyword - - name: lhost - type: keyword - - name: origin - type: keyword - - name: remote_domain_id - type: keyword - - name: addr - type: keyword - - name: dns_a_record - type: keyword - - name: dns_ptr_record - type: keyword - - name: fhost - type: keyword - - name: fport - type: keyword - - name: laddr - type: keyword - - name: linterface - type: keyword - - name: phost - type: keyword - - name: ad_computer_dst - type: keyword - description: Deprecated, use host.dst - - name: eth_type - type: long - description: This key is used to capture Ethernet Type, Used for Layer 3 Protocols Only - - name: ip_proto - type: long - description: This key should be used to capture the Protocol number, all the protocol nubers are converted into string in UI - - name: dns_cname_record - type: keyword - - name: dns_id - type: keyword - - name: dns_opcode - type: keyword - - name: dns_resp - type: keyword - - name: dns_type - type: keyword - - name: domain1 - type: keyword - - name: host_type - type: keyword - - name: packet_length - type: keyword - - name: host_orig - type: keyword - description: This is used to capture the original hostname in case of a Forwarding Agent or a Proxy in between. - - name: rpayload - type: keyword - description: This key is used to capture the total number of payload bytes seen in the retransmitted packets. - - name: vlan_name - type: keyword - description: This key should only be used to capture the name of the Virtual LAN - - name: investigations - type: group - fields: - - name: ec_activity - type: keyword - description: This key captures the particular event activity(Ex:Logoff) - - name: ec_theme - type: keyword - description: This key captures the Theme of a particular Event(Ex:Authentication) - - name: ec_subject - type: keyword - description: This key captures the Subject of a particular Event(Ex:User) - - name: ec_outcome - type: keyword - description: This key captures the outcome of a particular Event(Ex:Success) - - name: event_cat - type: long - description: This key captures the Event category number - - name: event_cat_name - type: keyword - description: This key captures the event category name corresponding to the event cat code - - name: event_vcat - type: keyword - description: This is a vendor supplied category. This should be used in situations where the vendor has adopted their own event_category taxonomy. - - name: analysis_file - type: keyword - description: This is used to capture all indicators used in a File Analysis. This key should be used to capture an analysis of a file - - name: analysis_service - type: keyword - description: This is used to capture all indicators used in a Service Analysis. This key should be used to capture an analysis of a service - - name: analysis_session - type: keyword - description: This is used to capture all indicators used for a Session Analysis. This key should be used to capture an analysis of a session - - name: boc - type: keyword - description: This is used to capture behaviour of compromise - - name: eoc - type: keyword - description: This is used to capture Enablers of Compromise - - name: inv_category - type: keyword - description: This used to capture investigation category - - name: inv_context - type: keyword - description: This used to capture investigation context - - name: ioc - type: keyword - description: This is key capture indicator of compromise - - name: counters - type: group - fields: - - name: dclass_c1 - type: long - description: This is a generic counter key that should be used with the label dclass.c1.str only - - name: dclass_c2 - type: long - description: This is a generic counter key that should be used with the label dclass.c2.str only - - name: event_counter - type: long - description: This is used to capture the number of times an event repeated - - name: dclass_r1 - type: keyword - description: This is a generic ratio key that should be used with the label dclass.r1.str only - - name: dclass_c3 - type: long - description: This is a generic counter key that should be used with the label dclass.c3.str only - - name: dclass_c1_str - type: keyword - description: This is a generic counter string key that should be used with the label dclass.c1 only - - name: dclass_c2_str - type: keyword - description: This is a generic counter string key that should be used with the label dclass.c2 only - - name: dclass_r1_str - type: keyword - description: This is a generic ratio string key that should be used with the label dclass.r1 only - - name: dclass_r2 - type: keyword - description: This is a generic ratio key that should be used with the label dclass.r2.str only - - name: dclass_c3_str - type: keyword - description: This is a generic counter string key that should be used with the label dclass.c3 only - - name: dclass_r3 - type: keyword - description: This is a generic ratio key that should be used with the label dclass.r3.str only - - name: dclass_r2_str - type: keyword - description: This is a generic ratio string key that should be used with the label dclass.r2 only - - name: dclass_r3_str - type: keyword - description: This is a generic ratio string key that should be used with the label dclass.r3 only - - name: identity - type: group - fields: - - name: auth_method - type: keyword - description: This key is used to capture authentication methods used only - - name: user_role - type: keyword - description: This key is used to capture the Role of a user only - - name: dn - type: keyword - description: X.500 (LDAP) Distinguished Name - - name: logon_type - type: keyword - description: This key is used to capture the type of logon method used. - - name: profile - type: keyword - description: This key is used to capture the user profile - - name: accesses - type: keyword - description: This key is used to capture actual privileges used in accessing an object - - name: realm - type: keyword - description: Radius realm or similar grouping of accounts - - name: user_sid_dst - type: keyword - description: This key captures Destination User Session ID - - name: dn_src - type: keyword - description: An X.500 (LDAP) Distinguished name that is used in a context that indicates a Source dn - - name: org - type: keyword - description: This key captures the User organization - - name: dn_dst - type: keyword - description: An X.500 (LDAP) Distinguished name that used in a context that indicates a Destination dn - - name: firstname - type: keyword - description: This key is for First Names only, this is used for Healthcare predominantly to capture Patients information - - name: lastname - type: keyword - description: This key is for Last Names only, this is used for Healthcare predominantly to capture Patients information - - name: user_dept - type: keyword - description: User's Department Names only - - name: user_sid_src - type: keyword - description: This key captures Source User Session ID - - name: federated_sp - type: keyword - description: This key is the Federated Service Provider. This is the application requesting authentication. - - name: federated_idp - type: keyword - description: This key is the federated Identity Provider. This is the server providing the authentication. - - name: logon_type_desc - type: keyword - description: This key is used to capture the textual description of an integer logon type as stored in the meta key 'logon.type'. - - name: middlename - type: keyword - description: This key is for Middle Names only, this is used for Healthcare predominantly to capture Patients information - - name: password - type: keyword - description: This key is for Passwords seen in any session, plain text or encrypted - - name: host_role - type: keyword - description: This key should only be used to capture the role of a Host Machine - - name: ldap - type: keyword - description: "This key is for Uninterpreted LDAP values. Ldap Values that don’t have a clear query or response context" - - name: ldap_query - type: keyword - description: This key is the Search criteria from an LDAP search - - name: ldap_response - type: keyword - description: This key is to capture Results from an LDAP search - - name: owner - type: keyword - description: This is used to capture username the process or service is running as, the author of the task - - name: service_account - type: keyword - description: This key is a windows specific key, used for capturing name of the account a service (referenced in the event) is running under. Legacy Usage - - name: email - type: group - fields: - - name: email_dst - type: keyword - description: This key is used to capture the Destination email address only, when the destination context is not clear use email - - name: email_src - type: keyword - description: This key is used to capture the source email address only, when the source context is not clear use email - - name: subject - type: keyword - description: This key is used to capture the subject string from an Email only. - - name: email - type: keyword - description: This key is used to capture a generic email address where the source or destination context is not clear - - name: trans_from - type: keyword - description: Deprecated key defined only in table map. - - name: trans_to - type: keyword - description: Deprecated key defined only in table map. - - name: file - type: group - fields: - - name: privilege - type: keyword - description: Deprecated, use permissions - - name: attachment - type: keyword - description: This key captures the attachment file name - - name: filesystem - type: keyword - - name: binary - type: keyword - description: Deprecated key defined only in table map. - - name: filename_dst - type: keyword - description: This is used to capture name of the file targeted by the action - - name: filename_src - type: keyword - description: This is used to capture name of the parent filename, the file which performed the action - - name: filename_tmp - type: keyword - - name: directory_dst - type: keyword - description: This key is used to capture the directory of the target process or file - - name: directory_src - type: keyword - description: This key is used to capture the directory of the source process or file - - name: file_entropy - type: double - description: This is used to capture entropy vale of a file - - name: file_vendor - type: keyword - description: This is used to capture Company name of file located in version_info - - name: task_name - type: keyword - description: This is used to capture name of the task - - name: web - type: group - fields: - - name: fqdn - type: keyword - description: Fully Qualified Domain Names - - name: web_cookie - type: keyword - description: This key is used to capture the Web cookies specifically. - - name: alias_host - type: keyword - - name: reputation_num - type: double - description: Reputation Number of an entity. Typically used for Web Domains - - name: web_ref_domain - type: keyword - description: Web referer's domain - - name: web_ref_query - type: keyword - description: This key captures Web referer's query portion of the URL - - name: remote_domain - type: keyword - - name: web_ref_page - type: keyword - description: This key captures Web referer's page information - - name: web_ref_root - type: keyword - description: Web referer's root URL path - - name: cn_asn_dst - type: keyword - - name: cn_rpackets - type: keyword - - name: urlpage - type: keyword - - name: urlroot - type: keyword - - name: p_url - type: keyword - - name: p_user_agent - type: keyword - - name: p_web_cookie - type: keyword - - name: p_web_method - type: keyword - - name: p_web_referer - type: keyword - - name: web_extension_tmp - type: keyword - - name: web_page - type: keyword - - name: threat - type: group - fields: - - name: threat_category - type: keyword - description: This key captures Threat Name/Threat Category/Categorization of alert - - name: threat_desc - type: keyword - description: This key is used to capture the threat description from the session directly or inferred - - name: alert - type: keyword - description: This key is used to capture name of the alert - - name: threat_source - type: keyword - description: This key is used to capture source of the threat - - name: crypto - type: group - fields: - - name: crypto - type: keyword - description: This key is used to capture the Encryption Type or Encryption Key only - - name: cipher_src - type: keyword - description: This key is for Source (Client) Cipher - - name: cert_subject - type: keyword - description: This key is used to capture the Certificate organization only - - name: peer - type: keyword - description: This key is for Encryption peer's IP Address - - name: cipher_size_src - type: long - description: This key captures Source (Client) Cipher Size - - name: ike - type: keyword - description: IKE negotiation phase. - - name: scheme - type: keyword - description: This key captures the Encryption scheme used - - name: peer_id - type: keyword - description: "This key is for Encryption peer’s identity" - - name: sig_type - type: keyword - description: This key captures the Signature Type - - name: cert_issuer - type: keyword - - name: cert_host_name - type: keyword - description: Deprecated key defined only in table map. - - name: cert_error - type: keyword - description: This key captures the Certificate Error String - - name: cipher_dst - type: keyword - description: This key is for Destination (Server) Cipher - - name: cipher_size_dst - type: long - description: This key captures Destination (Server) Cipher Size - - name: ssl_ver_src - type: keyword - description: Deprecated, use version - - name: d_certauth - type: keyword - - name: s_certauth - type: keyword - - name: ike_cookie1 - type: keyword - description: "ID of the negotiation — sent for ISAKMP Phase One" - - name: ike_cookie2 - type: keyword - description: "ID of the negotiation — sent for ISAKMP Phase Two" - - name: cert_checksum - type: keyword - - name: cert_host_cat - type: keyword - description: This key is used for the hostname category value of a certificate - - name: cert_serial - type: keyword - description: This key is used to capture the Certificate serial number only - - name: cert_status - type: keyword - description: This key captures Certificate validation status - - name: ssl_ver_dst - type: keyword - description: Deprecated, use version - - name: cert_keysize - type: keyword - - name: cert_username - type: keyword - - name: https_insact - type: keyword - - name: https_valid - type: keyword - - name: cert_ca - type: keyword - description: This key is used to capture the Certificate signing authority only - - name: cert_common - type: keyword - description: This key is used to capture the Certificate common name only - - name: wireless - type: group - fields: - - name: wlan_ssid - type: keyword - description: This key is used to capture the ssid of a Wireless Session - - name: access_point - type: keyword - description: This key is used to capture the access point name. - - name: wlan_channel - type: long - description: This is used to capture the channel names - - name: wlan_name - type: keyword - description: This key captures either WLAN number/name - - name: storage - type: group - fields: - - name: disk_volume - type: keyword - description: A unique name assigned to logical units (volumes) within a physical disk - - name: lun - type: keyword - description: Logical Unit Number.This key is a very useful concept in Storage. - - name: pwwn - type: keyword - description: This uniquely identifies a port on a HBA. - - name: physical - type: group - fields: - - name: org_dst - type: keyword - description: This is used to capture the destination organization based on the GEOPIP Maxmind database. - - name: org_src - type: keyword - description: This is used to capture the source organization based on the GEOPIP Maxmind database. - - name: healthcare - type: group - fields: - - name: patient_fname - type: keyword - description: This key is for First Names only, this is used for Healthcare predominantly to capture Patients information - - name: patient_id - type: keyword - description: This key captures the unique ID for a patient - - name: patient_lname - type: keyword - description: This key is for Last Names only, this is used for Healthcare predominantly to capture Patients information - - name: patient_mname - type: keyword - description: This key is for Middle Names only, this is used for Healthcare predominantly to capture Patients information - - name: endpoint - type: group - fields: - - name: host_state - type: keyword - description: This key is used to capture the current state of the machine, such as blacklisted, infected, firewall disabled and so on - - name: registry_key - type: keyword - description: This key captures the path to the registry key - - name: registry_value - type: keyword - description: This key captures values or decorators used within a registry entry -- name: network.interface.name - type: keyword -- name: dns.question.domain - type: keyword - description: Server domain. + description: Timestamp of the alert (UTC) + - name: alertData + type: flattened + description: Additional alert data (differs based on alert type) diff --git a/packages/cisco_meraki/data_stream/log/manifest.yml b/packages/cisco_meraki/data_stream/log/manifest.yml index 1e6886498d3..6d92d9261cb 100644 --- a/packages/cisco_meraki/data_stream/log/manifest.yml +++ b/packages/cisco_meraki/data_stream/log/manifest.yml @@ -1,158 +1,51 @@ -title: Cisco Meraki logs -release: experimental +title: "Cisco Meraki events" type: logs streams: - - input: udp - title: Cisco Meraki logs - description: Collect Cisco Meraki logs - template_path: udp.yml.hbs + - input: http_endpoint + title: Cisco Meraki log events + description: Receives log events from Cisco Meraki + template_path: http_endpoint.yml.hbs vars: - - name: tags + - name: listen_address type: text - title: Tags - multi: true - required: true - show_user: false - default: - - cisco-meraki - - forwarded - - name: udp_host - type: text - title: UDP host to listen on + title: Listen Address + description: Bind address for the listener. Use 0.0.0.0 to listen on all interfaces. multi: false required: true show_user: true default: localhost - - name: udp_port + - name: listen_port type: integer - title: UDP port to listen on + title: Listen Port multi: false required: true show_user: true - default: 9525 - - name: tz_offset + default: 8686 + - name: url type: text - title: Timezone offset (+HH:mm format) - required: false - show_user: true - default: "local" - - name: rsa_fields - type: bool - title: Add non-ECS fields - required: false - show_user: true - default: true - - name: keep_raw_fields - type: bool - title: Keep raw parser fields - required: false - show_user: false - default: false - - name: debug - type: bool - title: Enable debug logging - required: false - show_user: false - default: false - - name: preserve_original_event - required: true - show_user: true - title: Preserve original event - description: Preserves a raw copy of the original event, added to the field `event.original` - type: bool - multi: false - default: false - - name: processors - type: yaml - title: Processors + title: Webhook path + description: URL path where the webhook will accept requests. multi: false - required: false - show_user: false - description: > - Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. - - - input: tcp - title: Cisco Meraki logs - description: Collect Cisco Meraki logs - template_path: tcp.yml.hbs - vars: - - name: tags - type: text - title: Tags - multi: true required: true show_user: false - default: - - cisco-meraki - - forwarded - - name: tcp_host + default: /meraki/events + - name: secret_value type: text - title: TCP host to listen on - multi: false - required: true - show_user: true - default: localhost - - name: tcp_port - type: integer - title: TCP port to listen on + description: Authorization token multi: false - required: true - show_user: true - default: 9525 - - name: tz_offset - type: text - title: Timezone offset (+HH:mm format) required: false show_user: true - default: "local" - - name: rsa_fields - type: bool - title: Add non-ECS fields - required: false - show_user: true - default: true - - name: keep_raw_fields - type: bool - title: Keep raw parser fields - required: false - show_user: false - default: false - - name: debug - type: bool - title: Enable debug logging - required: false - show_user: false - default: false - - name: preserve_original_event - required: true - show_user: true - title: Preserve original event - description: Preserves a raw copy of the original event, added to the field `event.original` - type: bool - multi: false - default: false - - name: processors + - name: ssl type: yaml - title: Processors + title: TLS + description: Options for enabling TLS for the listening webhook endpoint. See the [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html) for a list of all options. multi: false required: false show_user: false - description: > - Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. - - - input: logfile - enabled: false - title: Cisco Meraki logs - description: Collect Cisco Meraki logs from file - vars: - - name: paths - type: text - title: Paths - multi: true - required: true - show_user: true - default: - - /var/log/cisco-meraki.log + default: | + enabled: false + certificate: "/etc/pki/client/cert.pem" + key: "/etc/pki/client/cert.key" - name: tags type: text title: Tags @@ -160,32 +53,8 @@ streams: required: true show_user: false default: - - cisco-meraki - forwarded - - name: tz_offset - type: text - title: Timezone offset (+HH:mm format) - required: false - show_user: true - default: "local" - - name: rsa_fields - type: bool - title: Add non-ECS fields - required: false - show_user: true - default: true - - name: keep_raw_fields - type: bool - title: Keep raw parser fields - required: false - show_user: false - default: false - - name: debug - type: bool - title: Enable debug logging - required: false - show_user: false - default: false + - meraki-events - name: preserve_original_event required: true show_user: true @@ -200,5 +69,6 @@ streams: multi: false required: false show_user: false - description: >- + description: > Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. + diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 17f05ec1da9..a38276567ef 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -1,936 +1,23 @@ -# Cisco Meraki Integration +# Cisco Meraki Syslog Integration -This integration is for Cisco Meraki device's logs. It includes the following -datasets for receiving logs over syslog or read from a file: +Cisco Meraki is the leader in cloud controlled Wi-Fi, routing, and security. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. -- `log` dataset: supports Cisco Meraki logs. +The Cisco Meraki Syslog integration package allows you to search, observe and visualize the Cisco Meraki Syslog events through Elasticsearch. Cisco Meraki Syslog sends events for "Meraki MX Security Appliance", "Meraki MS Switches" and "Meraki MR Access Points". -## Logs +## Compatibility + +A syslog server can be configured to store messages for reporting purposes from MX Security Appliances, MR Access Points, and MS switches. This package collects events from the configured syslog server. -### Meraki +## Configuration -The `log` dataset collects Cisco Meraki logs. +Cisco Meraki dashboard can be used to configure one or more syslog servers and Meraki message types to be sent to the syslog servers. Refer to [Syslog Server Overview and Configuration](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration#Configuring_a_Syslog_Server) page for more information on how to configure syslog server on Cisco Meraki. -An example event for `log` looks as following: +### Syslog Events -```json -{ - "@timestamp": "2016-01-29T06:09:59.000Z", - "agent": { - "ephemeral_id": "32decd4f-7a04-474b-8958-de335bfff10f", - "id": "4e3f135a-d5f9-40b6-ae01-2c834ecbead0", - "name": "docker-fleet-agent", - "type": "filebeat", - "version": "8.0.0" - }, - "data_stream": { - "dataset": "cisco_meraki.log", - "namespace": "ep", - "type": "logs" - }, - "destination": { - "ip": [ - "10.193.124.51" - ], - "port": 5293 - }, - "ecs": { - "version": "1.12.0" - }, - "elastic_agent": { - "id": "4e3f135a-d5f9-40b6-ae01-2c834ecbead0", - "snapshot": true, - "version": "8.0.0" - }, - "event": { - "action": "deny\n", - "agent_id_status": "verified", - "code": "security_event", - "dataset": "cisco_meraki.log", - "ingested": "2022-01-25T12:08:12Z", - "original": "modtempo 1454047799.olab nto_ security_event olaborissecurity_event tur url=https://example.org/odoco/ria.jpg?ritin=uredolor#tatemac src=10.15.44.253:5078 dst=10.193.124.51:5293 mac=01:00:5e:28:ae:7d name=psa sha256=umq disposition=ntium action=deny\n", - "timezone": "+00:00" - }, - "input": { - "type": "udp" - }, - "log": { - "source": { - "address": "172.30.0.4:37331" - } - }, - "observer": { - "product": "Meraki", - "type": "Wireless", - "vendor": "Cisco" - }, - "related": { - "ip": [ - "10.193.124.51", - "10.15.44.253" - ] - }, - "rsa": { - "internal": { - "event_desc": "olaborissecurity_event tur", - "messageid": "security_event" - }, - "misc": { - "action": [ - "deny\n" - ], - "disposition": "ntium", - "event_type": "security_event", - "node": "nto_", - "sensor": "nto_" - }, - "time": { - "event_time": "2016-01-29T06:09:59.000Z" - } - }, - "source": { - "ip": [ - "10.15.44.253" - ], - "mac": "01:00:5e:28:ae:7d", - "port": 5078 - }, - "tags": [ - "preserve_original_event", - "cisco-meraki", - "forwarded" - ], - "url": { - "original": "https://example.org/odoco/ria.jpg?ritin=uredolor#tatemac" - } -} -``` +Enable to collect Meraki syslog events from the specified syslog server. -**Exported fields** +## Logs -| Field | Description | Type | -|---|---|---| -| @timestamp | Date/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. | date | -| client.domain | The domain name of the client system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | -| client.registered_domain | The highest registered client domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | -| client.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | -| client.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | -| cloud.account.id | The cloud account or organization id used to identify different entities in a multi-tenant environment. Examples: AWS account id, Google Cloud ORG Id, or other unique identifier. | keyword | -| cloud.availability_zone | Availability zone in which this host is running. | keyword | -| cloud.image.id | Image ID for the cloud instance. | keyword | -| cloud.instance.id | Instance ID of the host machine. | keyword | -| cloud.instance.name | Instance name of the host machine. | keyword | -| cloud.machine.type | Machine type of the host machine. | keyword | -| cloud.project.id | Name of the project in Google Cloud. | keyword | -| cloud.provider | Name of the cloud provider. Example values are aws, azure, gcp, or digitalocean. | keyword | -| cloud.region | Region in which this host is running. | keyword | -| container.id | Unique container id. | keyword | -| container.image.name | Name of the image the container was built on. | keyword | -| container.labels | Image labels. | object | -| container.name | Container name. | keyword | -| data_stream.dataset | Data stream dataset. | constant_keyword | -| data_stream.namespace | Data stream namespace. | constant_keyword | -| data_stream.type | Data stream type. | constant_keyword | -| destination.address | Some event destination addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword | -| destination.as.number | Unique number allocated to the autonomous system. The autonomous system number (ASN) uniquely identifies each network on the Internet. | long | -| destination.as.organization.name | Organization name. | keyword | -| destination.bytes | Bytes sent from the destination to the source. | long | -| destination.domain | The domain name of the destination system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | -| destination.geo.city_name | City name. | keyword | -| destination.geo.country_name | Country name. | keyword | -| destination.geo.location | Longitude and latitude. | geo_point | -| destination.ip | IP address of the destination (IPv4 or IPv6). | ip | -| destination.mac | MAC address of the destination. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | -| destination.nat.ip | Translated ip of destination based NAT sessions (e.g. internet to private DMZ) Typically used with load balancers, firewalls, or routers. | ip | -| destination.nat.port | Port the source session is translated to by NAT Device. Typically used with load balancers, firewalls, or routers. | long | -| destination.port | Port of the destination. | long | -| destination.registered_domain | The highest registered destination domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | -| destination.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | -| destination.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | -| dns.answers.name | The domain name to which this resource record pertains. If a chain of CNAME is being resolved, each answer's `name` should be the one that corresponds with the answer's `data`. It should not simply be the original `question.name` repeated. | keyword | -| dns.answers.type | The type of data contained in this resource record. | keyword | -| dns.question.domain | Server domain. | keyword | -| dns.question.registered_domain | The highest registered domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | -| dns.question.subdomain | The subdomain is all of the labels under the registered_domain. If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | -| dns.question.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | -| dns.question.type | The type of record being queried. | keyword | -| ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword | -| error.message | Error message. | match_only_text | -| event.action | The action captured by the event. This describes the information in the event. It is more specific than `event.category`. Examples are `group-add`, `process-started`, `file-created`. The value is normally defined by the implementer. | keyword | -| event.code | Identification code for this event, if one exists. Some event sources use event codes to identify messages unambiguously, regardless of message language or wording adjustments over time. An example of this is the Windows Event ID. | keyword | -| event.dataset | Event dataset | constant_keyword | -| event.ingested | Timestamp when an event arrived in the central data store. This is different from `@timestamp`, which is when the event originally occurred. It's also different from `event.created`, which is meant to capture the first time an agent saw the event. In normal conditions, assuming no tampering, the timestamps should chronologically look like this: `@timestamp` \< `event.created` \< `event.ingested`. | date | -| event.module | Event module | constant_keyword | -| event.original | Raw text message of entire event. Used to demonstrate log integrity or where the full log message (before splitting it up in multiple parts) may be required, e.g. for reindex. This field is not indexed and doc_values are disabled. It cannot be searched, but it can be retrieved from `_source`. If users wish to override this and index this field, please see `Field data types` in the `Elasticsearch Reference`. | keyword | -| event.outcome | This is one of four ECS Categorization Fields, and indicates the lowest level in the ECS category hierarchy. `event.outcome` simply denotes whether the event represents a success or a failure from the perspective of the entity that produced the event. Note that when a single transaction is described in multiple events, each event may populate different values of `event.outcome`, according to their perspective. Also note that in the case of a compound event (a single event that contains multiple logical events), this field should be populated with the value that best captures the overall success or failure from the perspective of the event producer. Further note that not all events will have an associated outcome. For example, this field is generally not populated for metric events, events with `event.type:info`, or any events for which an outcome does not make logical sense. | keyword | -| event.timezone | This field should be populated when the event's timestamp does not include timezone information already (e.g. default Syslog timestamps). It's optional otherwise. Acceptable timezone formats are: a canonical ID (e.g. "Europe/Amsterdam"), abbreviated (e.g. "EST") or an HH:mm differential (e.g. "-05:00"). | keyword | -| file.attributes | Array of file attributes. Attributes names will vary by platform. Here's a non-exhaustive list of values that are expected in this field: archive, compressed, directory, encrypted, execute, hidden, read, readonly, system, write. | keyword | -| file.directory | Directory where the file is located. It should include the drive letter, when appropriate. | keyword | -| file.extension | File extension, excluding the leading dot. Note that when the file name has multiple extensions (example.tar.gz), only the last one should be captured ("gz", not "tar.gz"). | keyword | -| file.name | Name of the file including the extension, without the directory. | keyword | -| file.path | Full path to the file, including the file name. It should include the drive letter, when appropriate. | keyword | -| file.size | File size in bytes. Only relevant when `file.type` is "file". | long | -| file.type | File type (file, dir, or symlink). | keyword | -| geo.city_name | City name. | keyword | -| geo.country_name | Country name. | keyword | -| geo.name | User-defined description of a location, at the level of granularity they care about. Could be the name of their data centers, the floor number, if this describes a local physical entity, city names. Not typically used in automated geolocation. | keyword | -| geo.region_name | Region name. | keyword | -| group.id | Unique identifier for the group on the system/platform. | keyword | -| group.name | Name of the group. | keyword | -| host.architecture | Operating system architecture. | keyword | -| host.containerized | If the host is a container. | boolean | -| host.domain | Name of the domain of which the host is a member. For example, on Windows this could be the host's Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host's LDAP provider. | keyword | -| host.hostname | Hostname of the host. It normally contains what the `hostname` command returns on the host machine. | keyword | -| host.id | Unique host id. As hostname is not always unique, use values that are meaningful in your environment. Example: The current usage of `beat.name`. | keyword | -| host.ip | Host ip addresses. | ip | -| host.mac | Host MAC addresses. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | -| host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | -| host.os.build | OS build information. | keyword | -| host.os.codename | OS codename, if any. | keyword | -| host.os.family | OS family (such as redhat, debian, freebsd, windows). | keyword | -| host.os.kernel | Operating system kernel version as a raw string. | keyword | -| host.os.name | Operating system name, without the version. | keyword | -| host.os.platform | Operating system platform (such centos, ubuntu, windows). | keyword | -| host.os.version | Operating system version as a raw string. | keyword | -| host.type | Type of host. For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment. | keyword | -| http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | -| http.request.referrer | Referrer for this HTTP request. | keyword | -| input.type | Type of Filebeat input. | keyword | -| log.file.path | Full path to the log file this event came from. | keyword | -| log.flags | Flags for the log file. | keyword | -| log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | -| log.offset | Offset of the entry in the log file. | long | -| log.source.address | Source address from which the log event was read / sent from. | keyword | -| log.syslog.facility.code | The Syslog numeric facility of the log event, if available. According to RFCs 5424 and 3164, this value should be an integer between 0 and 23. | long | -| log.syslog.priority | Syslog numeric priority of the event, if available. According to RFCs 5424 and 3164, the priority is 8 \* facility + severity. This number is therefore expected to contain a value between 0 and 191. | long | -| log.syslog.severity.code | The Syslog numeric severity of the log event, if available. If the event source publishing via Syslog provides a different numeric severity value (e.g. firewall, IDS), your source's numeric severity should go to `event.severity`. If the event source does not specify a distinct severity, you can optionally copy the Syslog severity to `event.severity`. | long | -| message | For log events the message field contains the log message, optimized for viewing in a log viewer. For structured logs without an original message field, other fields can be concatenated to form a human-readable summary of the event. If multiple messages exist, they can be combined into one message. | match_only_text | -| network.application | When a specific application or service is identified from network connection details (source/dest IPs, ports, certificates, or wire format), this field captures the application's or service's name. For example, the original event identifies the network connection being from a specific web service in a `https` network connection, like `facebook` or `twitter`. The field value must be normalized to lowercase for querying. | keyword | -| network.bytes | Total bytes transferred in both directions. If `source.bytes` and `destination.bytes` are known, `network.bytes` is their sum. | long | -| network.direction | Direction of the network traffic. Recommended values are: \* ingress \* egress \* inbound \* outbound \* internal \* external \* unknown When mapping events from a host-based monitoring context, populate this field from the host's point of view, using the values "ingress" or "egress". When mapping events from a network or perimeter-based monitoring context, populate this field from the point of view of the network perimeter, using the values "inbound", "outbound", "internal" or "external". Note that "internal" is not crossing perimeter boundaries, and is meant to describe communication between two hosts within the perimeter. Note also that "external" is meant to describe traffic between two hosts that are external to the perimeter. This could for example be useful for ISPs or VPN service providers. | keyword | -| network.forwarded_ip | Host IP address when the source IP address is the proxy. | ip | -| network.interface.name | | keyword | -| network.packets | Total packets transferred in both directions. If `source.packets` and `destination.packets` are known, `network.packets` is their sum. | long | -| network.protocol | In the OSI Model this would be the Application Layer protocol. For example, `http`, `dns`, or `ssh`. The field value must be normalized to lowercase for querying. | keyword | -| observer.egress.interface.name | Interface name as reported by the system. | keyword | -| observer.ingress.interface.name | Interface name as reported by the system. | keyword | -| observer.product | The product name of the observer. | keyword | -| observer.type | The type of the observer the data is coming from. There is no predefined list of observer types. Some examples are `forwarder`, `firewall`, `ids`, `ips`, `proxy`, `poller`, `sensor`, `APM server`. | keyword | -| observer.vendor | Vendor name of the observer. | keyword | -| observer.version | Observer version. | keyword | -| process.name | Process name. Sometimes called program name or similar. | keyword | -| process.parent.name | Process name. Sometimes called program name or similar. | keyword | -| process.parent.pid | Process id. | long | -| process.parent.title | Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | keyword | -| process.pid | Process id. | long | -| process.title | Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | keyword | -| related.hosts | All hostnames or other host identifiers seen on your event. Example identifiers include FQDNs, domain names, workstation names, or aliases. | keyword | -| related.ip | All of the IPs seen on your event. | ip | -| related.user | All the user names or other user identifiers seen on the event. | keyword | -| rsa.counters.dclass_c1 | This is a generic counter key that should be used with the label dclass.c1.str only | long | -| rsa.counters.dclass_c1_str | This is a generic counter string key that should be used with the label dclass.c1 only | keyword | -| rsa.counters.dclass_c2 | This is a generic counter key that should be used with the label dclass.c2.str only | long | -| rsa.counters.dclass_c2_str | This is a generic counter string key that should be used with the label dclass.c2 only | keyword | -| rsa.counters.dclass_c3 | This is a generic counter key that should be used with the label dclass.c3.str only | long | -| rsa.counters.dclass_c3_str | This is a generic counter string key that should be used with the label dclass.c3 only | keyword | -| rsa.counters.dclass_r1 | This is a generic ratio key that should be used with the label dclass.r1.str only | keyword | -| rsa.counters.dclass_r1_str | This is a generic ratio string key that should be used with the label dclass.r1 only | keyword | -| rsa.counters.dclass_r2 | This is a generic ratio key that should be used with the label dclass.r2.str only | keyword | -| rsa.counters.dclass_r2_str | This is a generic ratio string key that should be used with the label dclass.r2 only | keyword | -| rsa.counters.dclass_r3 | This is a generic ratio key that should be used with the label dclass.r3.str only | keyword | -| rsa.counters.dclass_r3_str | This is a generic ratio string key that should be used with the label dclass.r3 only | keyword | -| rsa.counters.event_counter | This is used to capture the number of times an event repeated | long | -| rsa.crypto.cert_ca | This key is used to capture the Certificate signing authority only | keyword | -| rsa.crypto.cert_checksum | | keyword | -| rsa.crypto.cert_common | This key is used to capture the Certificate common name only | keyword | -| rsa.crypto.cert_error | This key captures the Certificate Error String | keyword | -| rsa.crypto.cert_host_cat | This key is used for the hostname category value of a certificate | keyword | -| rsa.crypto.cert_host_name | Deprecated key defined only in table map. | keyword | -| rsa.crypto.cert_issuer | | keyword | -| rsa.crypto.cert_keysize | | keyword | -| rsa.crypto.cert_serial | This key is used to capture the Certificate serial number only | keyword | -| rsa.crypto.cert_status | This key captures Certificate validation status | keyword | -| rsa.crypto.cert_subject | This key is used to capture the Certificate organization only | keyword | -| rsa.crypto.cert_username | | keyword | -| rsa.crypto.cipher_dst | This key is for Destination (Server) Cipher | keyword | -| rsa.crypto.cipher_size_dst | This key captures Destination (Server) Cipher Size | long | -| rsa.crypto.cipher_size_src | This key captures Source (Client) Cipher Size | long | -| rsa.crypto.cipher_src | This key is for Source (Client) Cipher | keyword | -| rsa.crypto.crypto | This key is used to capture the Encryption Type or Encryption Key only | keyword | -| rsa.crypto.d_certauth | | keyword | -| rsa.crypto.https_insact | | keyword | -| rsa.crypto.https_valid | | keyword | -| rsa.crypto.ike | IKE negotiation phase. | keyword | -| rsa.crypto.ike_cookie1 | ID of the negotiation — sent for ISAKMP Phase One | keyword | -| rsa.crypto.ike_cookie2 | ID of the negotiation — sent for ISAKMP Phase Two | keyword | -| rsa.crypto.peer | This key is for Encryption peer's IP Address | keyword | -| rsa.crypto.peer_id | This key is for Encryption peer’s identity | keyword | -| rsa.crypto.s_certauth | | keyword | -| rsa.crypto.scheme | This key captures the Encryption scheme used | keyword | -| rsa.crypto.sig_type | This key captures the Signature Type | keyword | -| rsa.crypto.ssl_ver_dst | Deprecated, use version | keyword | -| rsa.crypto.ssl_ver_src | Deprecated, use version | keyword | -| rsa.db.database | This key is used to capture the name of a database or an instance as seen in a session | keyword | -| rsa.db.db_id | This key is used to capture the unique identifier for a database | keyword | -| rsa.db.db_pid | This key captures the process id of a connection with database server | long | -| rsa.db.index | This key captures IndexID of the index. | keyword | -| rsa.db.instance | This key is used to capture the database server instance name | keyword | -| rsa.db.lread | This key is used for the number of logical reads | long | -| rsa.db.lwrite | This key is used for the number of logical writes | long | -| rsa.db.permissions | This key captures permission or privilege level assigned to a resource. | keyword | -| rsa.db.pread | This key is used for the number of physical writes | long | -| rsa.db.table_name | This key is used to capture the table name | keyword | -| rsa.db.transact_id | This key captures the SQL transantion ID of the current session | keyword | -| rsa.email.email | This key is used to capture a generic email address where the source or destination context is not clear | keyword | -| rsa.email.email_dst | This key is used to capture the Destination email address only, when the destination context is not clear use email | keyword | -| rsa.email.email_src | This key is used to capture the source email address only, when the source context is not clear use email | keyword | -| rsa.email.subject | This key is used to capture the subject string from an Email only. | keyword | -| rsa.email.trans_from | Deprecated key defined only in table map. | keyword | -| rsa.email.trans_to | Deprecated key defined only in table map. | keyword | -| rsa.endpoint.host_state | This key is used to capture the current state of the machine, such as \blacklisted\, \infected\, \firewall disabled\ and so on | keyword | -| rsa.endpoint.registry_key | This key captures the path to the registry key | keyword | -| rsa.endpoint.registry_value | This key captures values or decorators used within a registry entry | keyword | -| rsa.file.attachment | This key captures the attachment file name | keyword | -| rsa.file.binary | Deprecated key defined only in table map. | keyword | -| rsa.file.directory_dst | \This key is used to capture the directory of the target process or file\ | keyword | -| rsa.file.directory_src | This key is used to capture the directory of the source process or file | keyword | -| rsa.file.file_entropy | This is used to capture entropy vale of a file | double | -| rsa.file.file_vendor | This is used to capture Company name of file located in version_info | keyword | -| rsa.file.filename_dst | This is used to capture name of the file targeted by the action | keyword | -| rsa.file.filename_src | This is used to capture name of the parent filename, the file which performed the action | keyword | -| rsa.file.filename_tmp | | keyword | -| rsa.file.filesystem | | keyword | -| rsa.file.privilege | Deprecated, use permissions | keyword | -| rsa.file.task_name | This is used to capture name of the task | keyword | -| rsa.healthcare.patient_fname | This key is for First Names only, this is used for Healthcare predominantly to capture Patients information | keyword | -| rsa.healthcare.patient_id | This key captures the unique ID for a patient | keyword | -| rsa.healthcare.patient_lname | This key is for Last Names only, this is used for Healthcare predominantly to capture Patients information | keyword | -| rsa.healthcare.patient_mname | This key is for Middle Names only, this is used for Healthcare predominantly to capture Patients information | keyword | -| rsa.identity.accesses | This key is used to capture actual privileges used in accessing an object | keyword | -| rsa.identity.auth_method | This key is used to capture authentication methods used only | keyword | -| rsa.identity.dn | X.500 (LDAP) Distinguished Name | keyword | -| rsa.identity.dn_dst | An X.500 (LDAP) Distinguished name that used in a context that indicates a Destination dn | keyword | -| rsa.identity.dn_src | An X.500 (LDAP) Distinguished name that is used in a context that indicates a Source dn | keyword | -| rsa.identity.federated_idp | This key is the federated Identity Provider. This is the server providing the authentication. | keyword | -| rsa.identity.federated_sp | This key is the Federated Service Provider. This is the application requesting authentication. | keyword | -| rsa.identity.firstname | This key is for First Names only, this is used for Healthcare predominantly to capture Patients information | keyword | -| rsa.identity.host_role | This key should only be used to capture the role of a Host Machine | keyword | -| rsa.identity.lastname | This key is for Last Names only, this is used for Healthcare predominantly to capture Patients information | keyword | -| rsa.identity.ldap | This key is for Uninterpreted LDAP values. Ldap Values that don’t have a clear query or response context | keyword | -| rsa.identity.ldap_query | This key is the Search criteria from an LDAP search | keyword | -| rsa.identity.ldap_response | This key is to capture Results from an LDAP search | keyword | -| rsa.identity.logon_type | This key is used to capture the type of logon method used. | keyword | -| rsa.identity.logon_type_desc | This key is used to capture the textual description of an integer logon type as stored in the meta key 'logon.type'. | keyword | -| rsa.identity.middlename | This key is for Middle Names only, this is used for Healthcare predominantly to capture Patients information | keyword | -| rsa.identity.org | This key captures the User organization | keyword | -| rsa.identity.owner | This is used to capture username the process or service is running as, the author of the task | keyword | -| rsa.identity.password | This key is for Passwords seen in any session, plain text or encrypted | keyword | -| rsa.identity.profile | This key is used to capture the user profile | keyword | -| rsa.identity.realm | Radius realm or similar grouping of accounts | keyword | -| rsa.identity.service_account | This key is a windows specific key, used for capturing name of the account a service (referenced in the event) is running under. Legacy Usage | keyword | -| rsa.identity.user_dept | User's Department Names only | keyword | -| rsa.identity.user_role | This key is used to capture the Role of a user only | keyword | -| rsa.identity.user_sid_dst | This key captures Destination User Session ID | keyword | -| rsa.identity.user_sid_src | This key captures Source User Session ID | keyword | -| rsa.internal.audit_class | Deprecated key defined only in table map. | keyword | -| rsa.internal.cid | This is the unique identifier used to identify a NetWitness Concentrator. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.data | Deprecated key defined only in table map. | keyword | -| rsa.internal.dead | Deprecated key defined only in table map. | long | -| rsa.internal.device_class | This is the Classification of the Log Event Source under a predefined fixed set of Event Source Classifications. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.device_group | This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.device_host | This is the Hostname of the log Event Source sending the logs to NetWitness. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.device_ip | This is the IPv4 address of the Log Event Source sending the logs to NetWitness. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | ip | -| rsa.internal.device_ipv6 | This is the IPv6 address of the Log Event Source sending the logs to NetWitness. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | ip | -| rsa.internal.device_type | This is the name of the log parser which parsed a given session. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.device_type_id | Deprecated key defined only in table map. | long | -| rsa.internal.did | This is the unique identifier used to identify a NetWitness Decoder. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.entropy_req | This key is only used by the Entropy Parser, the Meta Type can be either UInt16 or Float32 based on the configuration | long | -| rsa.internal.entropy_res | This key is only used by the Entropy Parser, the Meta Type can be either UInt16 or Float32 based on the configuration | long | -| rsa.internal.entry | Deprecated key defined only in table map. | keyword | -| rsa.internal.event_desc | | keyword | -| rsa.internal.event_name | Deprecated key defined only in table map. | keyword | -| rsa.internal.feed_category | This is used to capture the category of the feed. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.feed_desc | This is used to capture the description of the feed. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.feed_name | This is used to capture the name of the feed. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.forward_ip | This key should be used to capture the IPV4 address of a relay system which forwarded the events from the original system to NetWitness. | ip | -| rsa.internal.forward_ipv6 | This key is used to capture the IPV6 address of a relay system which forwarded the events from the original system to NetWitness. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | ip | -| rsa.internal.hcode | Deprecated key defined only in table map. | keyword | -| rsa.internal.header_id | This is the Header ID value that identifies the exact log parser header definition that parses a particular log session. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.inode | Deprecated key defined only in table map. | long | -| rsa.internal.lc_cid | This is a unique Identifier of a Log Collector. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.lc_ctime | This is the time at which a log is collected in a NetWitness Log Collector. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | date | -| rsa.internal.level | Deprecated key defined only in table map. | long | -| rsa.internal.mcb_req | This key is only used by the Entropy Parser, the most common byte request is simply which byte for each side (0 thru 255) was seen the most | long | -| rsa.internal.mcb_res | This key is only used by the Entropy Parser, the most common byte response is simply which byte for each side (0 thru 255) was seen the most | long | -| rsa.internal.mcbc_req | This key is only used by the Entropy Parser, the most common byte count is the number of times the most common byte (above) was seen in the session streams | long | -| rsa.internal.mcbc_res | This key is only used by the Entropy Parser, the most common byte count is the number of times the most common byte (above) was seen in the session streams | long | -| rsa.internal.medium | This key is used to identify if it’s a log/packet session or Layer 2 Encapsulation Type. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness. 32 = log, 33 = correlation session, < 32 is packet session | long | -| rsa.internal.message | This key captures the contents of instant messages | keyword | -| rsa.internal.messageid | | keyword | -| rsa.internal.msg | This key is used to capture the raw message that comes into the Log Decoder | keyword | -| rsa.internal.msg_id | This is the Message ID1 value that identifies the exact log parser definition which parses a particular log session. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.msg_vid | This is the Message ID2 value that identifies the exact log parser definition which parses a particular log session. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.node_name | Deprecated key defined only in table map. | keyword | -| rsa.internal.nwe_callback_id | This key denotes that event is endpoint related | keyword | -| rsa.internal.obj_id | Deprecated key defined only in table map. | keyword | -| rsa.internal.obj_server | Deprecated key defined only in table map. | keyword | -| rsa.internal.obj_val | Deprecated key defined only in table map. | keyword | -| rsa.internal.parse_error | This is a special key that stores any Meta key validation error found while parsing a log session. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.payload_req | This key is only used by the Entropy Parser, the payload size metrics are the payload sizes of each session side at the time of parsing. However, in order to keep | long | -| rsa.internal.payload_res | This key is only used by the Entropy Parser, the payload size metrics are the payload sizes of each session side at the time of parsing. However, in order to keep | long | -| rsa.internal.process_vid_dst | Endpoint generates and uses a unique virtual ID to identify any similar group of process. This ID represents the target process. | keyword | -| rsa.internal.process_vid_src | Endpoint generates and uses a unique virtual ID to identify any similar group of process. This ID represents the source process. | keyword | -| rsa.internal.resource | Deprecated key defined only in table map. | keyword | -| rsa.internal.resource_class | Deprecated key defined only in table map. | keyword | -| rsa.internal.rid | This is a special ID of the Remote Session created by NetWitness Decoder. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | long | -| rsa.internal.session_split | This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.site | Deprecated key defined only in table map. | keyword | -| rsa.internal.size | This is the size of the session as seen by the NetWitness Decoder. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | long | -| rsa.internal.sourcefile | This is the name of the log file or PCAPs that can be imported into NetWitness. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.internal.statement | Deprecated key defined only in table map. | keyword | -| rsa.internal.time | This is the time at which a session hits a NetWitness Decoder. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness. | date | -| rsa.internal.ubc_req | This key is only used by the Entropy Parser, Unique byte count is the number of unique bytes seen in each stream. 256 would mean all byte values of 0 thru 255 were seen at least once | long | -| rsa.internal.ubc_res | This key is only used by the Entropy Parser, Unique byte count is the number of unique bytes seen in each stream. 256 would mean all byte values of 0 thru 255 were seen at least once | long | -| rsa.internal.word | This is used by the Word Parsing technology to capture the first 5 character of every word in an unparsed log | keyword | -| rsa.investigations.analysis_file | This is used to capture all indicators used in a File Analysis. This key should be used to capture an analysis of a file | keyword | -| rsa.investigations.analysis_service | This is used to capture all indicators used in a Service Analysis. This key should be used to capture an analysis of a service | keyword | -| rsa.investigations.analysis_session | This is used to capture all indicators used for a Session Analysis. This key should be used to capture an analysis of a session | keyword | -| rsa.investigations.boc | This is used to capture behaviour of compromise | keyword | -| rsa.investigations.ec_activity | This key captures the particular event activity(Ex:Logoff) | keyword | -| rsa.investigations.ec_outcome | This key captures the outcome of a particular Event(Ex:Success) | keyword | -| rsa.investigations.ec_subject | This key captures the Subject of a particular Event(Ex:User) | keyword | -| rsa.investigations.ec_theme | This key captures the Theme of a particular Event(Ex:Authentication) | keyword | -| rsa.investigations.eoc | This is used to capture Enablers of Compromise | keyword | -| rsa.investigations.event_cat | This key captures the Event category number | long | -| rsa.investigations.event_cat_name | This key captures the event category name corresponding to the event cat code | keyword | -| rsa.investigations.event_vcat | This is a vendor supplied category. This should be used in situations where the vendor has adopted their own event_category taxonomy. | keyword | -| rsa.investigations.inv_category | This used to capture investigation category | keyword | -| rsa.investigations.inv_context | This used to capture investigation context | keyword | -| rsa.investigations.ioc | This is key capture indicator of compromise | keyword | -| rsa.misc.OS | This key captures the Name of the Operating System | keyword | -| rsa.misc.acl_id | | keyword | -| rsa.misc.acl_op | | keyword | -| rsa.misc.acl_pos | | keyword | -| rsa.misc.acl_table | | keyword | -| rsa.misc.action | | keyword | -| rsa.misc.admin | | keyword | -| rsa.misc.agent_id | This key is used to capture agent id | keyword | -| rsa.misc.alarm_id | | keyword | -| rsa.misc.alarmname | | keyword | -| rsa.misc.alert_id | Deprecated, New Hunting Model (inv.\*, ioc, boc, eoc, analysis.\*) | keyword | -| rsa.misc.app_id | | keyword | -| rsa.misc.audit | | keyword | -| rsa.misc.audit_object | | keyword | -| rsa.misc.auditdata | | keyword | -| rsa.misc.autorun_type | This is used to capture Auto Run type | keyword | -| rsa.misc.benchmark | | keyword | -| rsa.misc.bypass | | keyword | -| rsa.misc.cache | | keyword | -| rsa.misc.cache_hit | | keyword | -| rsa.misc.category | This key is used to capture the category of an event given by the vendor in the session | keyword | -| rsa.misc.cc_number | Valid Credit Card Numbers only | long | -| rsa.misc.cefversion | | keyword | -| rsa.misc.cfg_attr | | keyword | -| rsa.misc.cfg_obj | | keyword | -| rsa.misc.cfg_path | | keyword | -| rsa.misc.change_attrib | This key is used to capture the name of the attribute that’s changing in a session | keyword | -| rsa.misc.change_new | This key is used to capture the new values of the attribute that’s changing in a session | keyword | -| rsa.misc.change_old | This key is used to capture the old value of the attribute that’s changing in a session | keyword | -| rsa.misc.changes | | keyword | -| rsa.misc.checksum | This key is used to capture the checksum or hash of the entity such as a file or process. Checksum should be used over checksum.src or checksum.dst when it is unclear whether the entity is a source or target of an action. | keyword | -| rsa.misc.checksum_dst | This key is used to capture the checksum or hash of the the target entity such as a process or file. | keyword | -| rsa.misc.checksum_src | This key is used to capture the checksum or hash of the source entity such as a file or process. | keyword | -| rsa.misc.client | This key is used to capture only the name of the client application requesting resources of the server. See the user.agent meta key for capture of the specific user agent identifier or browser identification string. | keyword | -| rsa.misc.client_ip | | keyword | -| rsa.misc.clustermembers | | keyword | -| rsa.misc.cmd | | keyword | -| rsa.misc.cn_acttimeout | | keyword | -| rsa.misc.cn_asn_src | | keyword | -| rsa.misc.cn_bgpv4nxthop | | keyword | -| rsa.misc.cn_ctr_dst_code | | keyword | -| rsa.misc.cn_dst_tos | | keyword | -| rsa.misc.cn_dst_vlan | | keyword | -| rsa.misc.cn_engine_id | | keyword | -| rsa.misc.cn_engine_type | | keyword | -| rsa.misc.cn_f_switch | | keyword | -| rsa.misc.cn_flowsampid | | keyword | -| rsa.misc.cn_flowsampintv | | keyword | -| rsa.misc.cn_flowsampmode | | keyword | -| rsa.misc.cn_inacttimeout | | keyword | -| rsa.misc.cn_inpermbyts | | keyword | -| rsa.misc.cn_inpermpckts | | keyword | -| rsa.misc.cn_invalid | | keyword | -| rsa.misc.cn_ip_proto_ver | | keyword | -| rsa.misc.cn_ipv4_ident | | keyword | -| rsa.misc.cn_l_switch | | keyword | -| rsa.misc.cn_log_did | | keyword | -| rsa.misc.cn_log_rid | | keyword | -| rsa.misc.cn_max_ttl | | keyword | -| rsa.misc.cn_maxpcktlen | | keyword | -| rsa.misc.cn_min_ttl | | keyword | -| rsa.misc.cn_minpcktlen | | keyword | -| rsa.misc.cn_mpls_lbl_1 | | keyword | -| rsa.misc.cn_mpls_lbl_10 | | keyword | -| rsa.misc.cn_mpls_lbl_2 | | keyword | -| rsa.misc.cn_mpls_lbl_3 | | keyword | -| rsa.misc.cn_mpls_lbl_4 | | keyword | -| rsa.misc.cn_mpls_lbl_5 | | keyword | -| rsa.misc.cn_mpls_lbl_6 | | keyword | -| rsa.misc.cn_mpls_lbl_7 | | keyword | -| rsa.misc.cn_mpls_lbl_8 | | keyword | -| rsa.misc.cn_mpls_lbl_9 | | keyword | -| rsa.misc.cn_mplstoplabel | | keyword | -| rsa.misc.cn_mplstoplabip | | keyword | -| rsa.misc.cn_mul_dst_byt | | keyword | -| rsa.misc.cn_mul_dst_pks | | keyword | -| rsa.misc.cn_muligmptype | | keyword | -| rsa.misc.cn_sampalgo | | keyword | -| rsa.misc.cn_sampint | | keyword | -| rsa.misc.cn_seqctr | | keyword | -| rsa.misc.cn_spackets | | keyword | -| rsa.misc.cn_src_tos | | keyword | -| rsa.misc.cn_src_vlan | | keyword | -| rsa.misc.cn_sysuptime | | keyword | -| rsa.misc.cn_template_id | | keyword | -| rsa.misc.cn_totbytsexp | | keyword | -| rsa.misc.cn_totflowexp | | keyword | -| rsa.misc.cn_totpcktsexp | | keyword | -| rsa.misc.cn_unixnanosecs | | keyword | -| rsa.misc.cn_v6flowlabel | | keyword | -| rsa.misc.cn_v6optheaders | | keyword | -| rsa.misc.code | | keyword | -| rsa.misc.command | | keyword | -| rsa.misc.comments | Comment information provided in the log message | keyword | -| rsa.misc.comp_class | | keyword | -| rsa.misc.comp_name | | keyword | -| rsa.misc.comp_rbytes | | keyword | -| rsa.misc.comp_sbytes | | keyword | -| rsa.misc.comp_version | This key captures the Version level of a sub-component of a product. | keyword | -| rsa.misc.connection_id | This key captures the Connection ID | keyword | -| rsa.misc.content | This key captures the content type from protocol headers | keyword | -| rsa.misc.content_type | This key is used to capture Content Type only. | keyword | -| rsa.misc.content_version | This key captures Version level of a signature or database content. | keyword | -| rsa.misc.context | This key captures Information which adds additional context to the event. | keyword | -| rsa.misc.context_subject | This key is to be used in an audit context where the subject is the object being identified | keyword | -| rsa.misc.context_target | | keyword | -| rsa.misc.count | | keyword | -| rsa.misc.cpu | This key is the CPU time used in the execution of the event being recorded. | long | -| rsa.misc.cpu_data | | keyword | -| rsa.misc.criticality | | keyword | -| rsa.misc.cs_agency_dst | | keyword | -| rsa.misc.cs_analyzedby | | keyword | -| rsa.misc.cs_av_other | | keyword | -| rsa.misc.cs_av_primary | | keyword | -| rsa.misc.cs_av_secondary | | keyword | -| rsa.misc.cs_bgpv6nxthop | | keyword | -| rsa.misc.cs_bit9status | | keyword | -| rsa.misc.cs_context | | keyword | -| rsa.misc.cs_control | | keyword | -| rsa.misc.cs_data | | keyword | -| rsa.misc.cs_datecret | | keyword | -| rsa.misc.cs_dst_tld | | keyword | -| rsa.misc.cs_eth_dst_ven | | keyword | -| rsa.misc.cs_eth_src_ven | | keyword | -| rsa.misc.cs_event_uuid | | keyword | -| rsa.misc.cs_filetype | | keyword | -| rsa.misc.cs_fld | | keyword | -| rsa.misc.cs_if_desc | | keyword | -| rsa.misc.cs_if_name | | keyword | -| rsa.misc.cs_ip_next_hop | | keyword | -| rsa.misc.cs_ipv4dstpre | | keyword | -| rsa.misc.cs_ipv4srcpre | | keyword | -| rsa.misc.cs_lifetime | | keyword | -| rsa.misc.cs_log_medium | | keyword | -| rsa.misc.cs_loginname | | keyword | -| rsa.misc.cs_modulescore | | keyword | -| rsa.misc.cs_modulesign | | keyword | -| rsa.misc.cs_opswatresult | | keyword | -| rsa.misc.cs_payload | | keyword | -| rsa.misc.cs_registrant | | keyword | -| rsa.misc.cs_registrar | | keyword | -| rsa.misc.cs_represult | | keyword | -| rsa.misc.cs_rpayload | | keyword | -| rsa.misc.cs_sampler_name | | keyword | -| rsa.misc.cs_sourcemodule | | keyword | -| rsa.misc.cs_streams | | keyword | -| rsa.misc.cs_targetmodule | | keyword | -| rsa.misc.cs_v6nxthop | | keyword | -| rsa.misc.cs_whois_server | | keyword | -| rsa.misc.cs_yararesult | | keyword | -| rsa.misc.cve | This key captures CVE (Common Vulnerabilities and Exposures) - an identifier for known information security vulnerabilities. | keyword | -| rsa.misc.data_type | | keyword | -| rsa.misc.description | | keyword | -| rsa.misc.device_name | This is used to capture name of the Device associated with the node Like: a physical disk, printer, etc | keyword | -| rsa.misc.devvendor | | keyword | -| rsa.misc.disposition | This key captures the The end state of an action. | keyword | -| rsa.misc.distance | | keyword | -| rsa.misc.doc_number | This key captures File Identification number | long | -| rsa.misc.dstburb | | keyword | -| rsa.misc.edomain | | keyword | -| rsa.misc.edomaub | | keyword | -| rsa.misc.ein_number | Employee Identification Numbers only | long | -| rsa.misc.error | This key captures All non successful Error codes or responses | keyword | -| rsa.misc.euid | | keyword | -| rsa.misc.event_category | | keyword | -| rsa.misc.event_computer | This key is a windows only concept, where this key is used to capture fully qualified domain name in a windows log. | keyword | -| rsa.misc.event_desc | This key is used to capture a description of an event available directly or inferred | keyword | -| rsa.misc.event_id | | keyword | -| rsa.misc.event_log | This key captures the Name of the event log | keyword | -| rsa.misc.event_source | This key captures Source of the event that’s not a hostname | keyword | -| rsa.misc.event_state | This key captures the current state of the object/item referenced within the event. Describing an on-going event. | keyword | -| rsa.misc.event_type | This key captures the event category type as specified by the event source. | keyword | -| rsa.misc.event_user | This key is a windows only concept, where this key is used to capture combination of domain name and username in a windows log. | keyword | -| rsa.misc.expected_val | This key captures the Value expected (from the perspective of the device generating the log). | keyword | -| rsa.misc.facility | | keyword | -| rsa.misc.facilityname | | keyword | -| rsa.misc.fcatnum | This key captures Filter Category Number. Legacy Usage | keyword | -| rsa.misc.filter | This key captures Filter used to reduce result set | keyword | -| rsa.misc.finterface | | keyword | -| rsa.misc.flags | | keyword | -| rsa.misc.forensic_info | | keyword | -| rsa.misc.found | This is used to capture the results of regex match | keyword | -| rsa.misc.fresult | This key captures the Filter Result | long | -| rsa.misc.gaddr | | keyword | -| rsa.misc.group | This key captures the Group Name value | keyword | -| rsa.misc.group_id | This key captures Group ID Number (related to the group name) | keyword | -| rsa.misc.group_object | This key captures a collection/grouping of entities. Specific usage | keyword | -| rsa.misc.hardware_id | This key is used to capture unique identifier for a device or system (NOT a Mac address) | keyword | -| rsa.misc.id3 | | keyword | -| rsa.misc.im_buddyid | | keyword | -| rsa.misc.im_buddyname | | keyword | -| rsa.misc.im_client | | keyword | -| rsa.misc.im_croomid | | keyword | -| rsa.misc.im_croomtype | | keyword | -| rsa.misc.im_members | | keyword | -| rsa.misc.im_userid | | keyword | -| rsa.misc.im_username | | keyword | -| rsa.misc.index | | keyword | -| rsa.misc.inout | | keyword | -| rsa.misc.ipkt | | keyword | -| rsa.misc.ipscat | | keyword | -| rsa.misc.ipspri | | keyword | -| rsa.misc.job_num | This key captures the Job Number | keyword | -| rsa.misc.jobname | | keyword | -| rsa.misc.language | This is used to capture list of languages the client support and what it prefers | keyword | -| rsa.misc.latitude | | keyword | -| rsa.misc.library | This key is used to capture library information in mainframe devices | keyword | -| rsa.misc.lifetime | This key is used to capture the session lifetime in seconds. | long | -| rsa.misc.linenum | | keyword | -| rsa.misc.link | This key is used to link the sessions together. This key should never be used to parse Meta data from a session (Logs/Packets) Directly, this is a Reserved key in NetWitness | keyword | -| rsa.misc.list_name | | keyword | -| rsa.misc.listnum | This key is used to capture listname or listnumber, primarily for collecting access-list | keyword | -| rsa.misc.load_data | | keyword | -| rsa.misc.location_floor | | keyword | -| rsa.misc.location_mark | | keyword | -| rsa.misc.log_id | | keyword | -| rsa.misc.log_session_id | This key is used to capture a sessionid from the session directly | keyword | -| rsa.misc.log_session_id1 | This key is used to capture a Linked (Related) Session ID from the session directly | keyword | -| rsa.misc.log_type | | keyword | -| rsa.misc.logid | | keyword | -| rsa.misc.logip | | keyword | -| rsa.misc.logname | | keyword | -| rsa.misc.longitude | | keyword | -| rsa.misc.lport | | keyword | -| rsa.misc.mail_id | This key is used to capture the mailbox id/name | keyword | -| rsa.misc.match | This key is for regex match name from search.ini | keyword | -| rsa.misc.mbug_data | | keyword | -| rsa.misc.message_body | This key captures the The contents of the message body. | keyword | -| rsa.misc.misc | | keyword | -| rsa.misc.misc_name | | keyword | -| rsa.misc.mode | | keyword | -| rsa.misc.msgIdPart1 | | keyword | -| rsa.misc.msgIdPart2 | | keyword | -| rsa.misc.msgIdPart3 | | keyword | -| rsa.misc.msgIdPart4 | | keyword | -| rsa.misc.msg_type | | keyword | -| rsa.misc.msgid | | keyword | -| rsa.misc.name | | keyword | -| rsa.misc.netsessid | | keyword | -| rsa.misc.node | Common use case is the node name within a cluster. The cluster name is reflected by the host name. | keyword | -| rsa.misc.ntype | | keyword | -| rsa.misc.num | | keyword | -| rsa.misc.number | | keyword | -| rsa.misc.number1 | | keyword | -| rsa.misc.number2 | | keyword | -| rsa.misc.nwwn | | keyword | -| rsa.misc.obj_name | This is used to capture name of object | keyword | -| rsa.misc.obj_type | This is used to capture type of object | keyword | -| rsa.misc.object | | keyword | -| rsa.misc.observed_val | This key captures the Value observed (from the perspective of the device generating the log). | keyword | -| rsa.misc.operation | | keyword | -| rsa.misc.operation_id | An alert number or operation number. The values should be unique and non-repeating. | keyword | -| rsa.misc.opkt | | keyword | -| rsa.misc.orig_from | | keyword | -| rsa.misc.owner_id | | keyword | -| rsa.misc.p_action | | keyword | -| rsa.misc.p_filter | | keyword | -| rsa.misc.p_group_object | | keyword | -| rsa.misc.p_id | | keyword | -| rsa.misc.p_msgid | | keyword | -| rsa.misc.p_msgid1 | | keyword | -| rsa.misc.p_msgid2 | | keyword | -| rsa.misc.p_result1 | | keyword | -| rsa.misc.param | This key is the parameters passed as part of a command or application, etc. | keyword | -| rsa.misc.param_dst | This key captures the command line/launch argument of the target process or file | keyword | -| rsa.misc.param_src | This key captures source parameter | keyword | -| rsa.misc.parent_node | This key captures the Parent Node Name. Must be related to node variable. | keyword | -| rsa.misc.password_chg | | keyword | -| rsa.misc.password_expire | | keyword | -| rsa.misc.payload_dst | This key is used to capture destination payload | keyword | -| rsa.misc.payload_src | This key is used to capture source payload | keyword | -| rsa.misc.permgranted | | keyword | -| rsa.misc.permwanted | | keyword | -| rsa.misc.pgid | | keyword | -| rsa.misc.phone | | keyword | -| rsa.misc.pid | | keyword | -| rsa.misc.policy | | keyword | -| rsa.misc.policyUUID | | keyword | -| rsa.misc.policy_id | This key is used to capture the Policy ID only, this should be a numeric value, use policy.name otherwise | keyword | -| rsa.misc.policy_name | This key is used to capture the Policy Name only. | keyword | -| rsa.misc.policy_value | This key captures the contents of the policy. This contains details about the policy | keyword | -| rsa.misc.policy_waiver | | keyword | -| rsa.misc.pool_id | This key captures the identifier (typically numeric field) of a resource pool | keyword | -| rsa.misc.pool_name | This key captures the name of a resource pool | keyword | -| rsa.misc.port_name | This key is used for Physical or logical port connection but does NOT include a network port. (Example: Printer port name). | keyword | -| rsa.misc.priority | | keyword | -| rsa.misc.process_id_val | This key is a failure key for Process ID when it is not an integer value | keyword | -| rsa.misc.prog_asp_num | | keyword | -| rsa.misc.program | | keyword | -| rsa.misc.real_data | | keyword | -| rsa.misc.reason | | keyword | -| rsa.misc.rec_asp_device | | keyword | -| rsa.misc.rec_asp_num | | keyword | -| rsa.misc.rec_library | | keyword | -| rsa.misc.recordnum | | keyword | -| rsa.misc.reference_id | This key is used to capture an event id from the session directly | keyword | -| rsa.misc.reference_id1 | This key is for Linked ID to be used as an addition to "reference.id" | keyword | -| rsa.misc.reference_id2 | This key is for the 2nd Linked ID. Can be either linked to "reference.id" or "reference.id1" value but should not be used unless the other two variables are in play. | keyword | -| rsa.misc.result | This key is used to capture the outcome/result string value of an action in a session. | keyword | -| rsa.misc.result_code | This key is used to capture the outcome/result numeric value of an action in a session | keyword | -| rsa.misc.risk | This key captures the non-numeric risk value | keyword | -| rsa.misc.risk_info | Deprecated, use New Hunting Model (inv.\*, ioc, boc, eoc, analysis.\*) | keyword | -| rsa.misc.risk_num | This key captures a Numeric Risk value | double | -| rsa.misc.risk_num_comm | This key captures Risk Number Community | double | -| rsa.misc.risk_num_next | This key captures Risk Number NextGen | double | -| rsa.misc.risk_num_sand | This key captures Risk Number SandBox | double | -| rsa.misc.risk_num_static | This key captures Risk Number Static | double | -| rsa.misc.risk_suspicious | Deprecated, use New Hunting Model (inv.\*, ioc, boc, eoc, analysis.\*) | keyword | -| rsa.misc.risk_warning | Deprecated, use New Hunting Model (inv.\*, ioc, boc, eoc, analysis.\*) | keyword | -| rsa.misc.ruid | | keyword | -| rsa.misc.rule | This key captures the Rule number | keyword | -| rsa.misc.rule_group | This key captures the Rule group name | keyword | -| rsa.misc.rule_name | This key captures the Rule Name | keyword | -| rsa.misc.rule_template | A default set of parameters which are overlayed onto a rule (or rulename) which efffectively constitutes a template | keyword | -| rsa.misc.rule_uid | This key is the Unique Identifier for a rule. | keyword | -| rsa.misc.sburb | | keyword | -| rsa.misc.sdomain_fld | | keyword | -| rsa.misc.search_text | This key captures the Search Text used | keyword | -| rsa.misc.sec | | keyword | -| rsa.misc.second | | keyword | -| rsa.misc.sensor | This key captures Name of the sensor. Typically used in IDS/IPS based devices | keyword | -| rsa.misc.sensorname | | keyword | -| rsa.misc.seqnum | | keyword | -| rsa.misc.serial_number | This key is the Serial number associated with a physical asset. | keyword | -| rsa.misc.session | | keyword | -| rsa.misc.sessiontype | | keyword | -| rsa.misc.severity | This key is used to capture the severity given the session | keyword | -| rsa.misc.sigUUID | | keyword | -| rsa.misc.sig_id | This key captures IDS/IPS Int Signature ID | long | -| rsa.misc.sig_id1 | This key captures IDS/IPS Int Signature ID. This must be linked to the sig.id | long | -| rsa.misc.sig_id_str | This key captures a string object of the sigid variable. | keyword | -| rsa.misc.sig_name | This key is used to capture the Signature Name only. | keyword | -| rsa.misc.sigcat | | keyword | -| rsa.misc.snmp_oid | SNMP Object Identifier | keyword | -| rsa.misc.snmp_value | SNMP set request value | keyword | -| rsa.misc.space | | keyword | -| rsa.misc.space1 | | keyword | -| rsa.misc.spi | | keyword | -| rsa.misc.spi_dst | Destination SPI Index | keyword | -| rsa.misc.spi_src | Source SPI Index | keyword | -| rsa.misc.sql | This key captures the SQL query | keyword | -| rsa.misc.srcburb | | keyword | -| rsa.misc.srcdom | | keyword | -| rsa.misc.srcservice | | keyword | -| rsa.misc.state | | keyword | -| rsa.misc.status | | keyword | -| rsa.misc.status1 | | keyword | -| rsa.misc.streams | This key captures number of streams in session | long | -| rsa.misc.subcategory | | keyword | -| rsa.misc.svcno | | keyword | -| rsa.misc.system | | keyword | -| rsa.misc.tbdstr1 | | keyword | -| rsa.misc.tbdstr2 | | keyword | -| rsa.misc.tcp_flags | This key is captures the TCP flags set in any packet of session | long | -| rsa.misc.terminal | This key captures the Terminal Names only | keyword | -| rsa.misc.tgtdom | | keyword | -| rsa.misc.tgtdomain | | keyword | -| rsa.misc.threshold | | keyword | -| rsa.misc.tos | This key describes the type of service | long | -| rsa.misc.trigger_desc | This key captures the Description of the trigger or threshold condition. | keyword | -| rsa.misc.trigger_val | This key captures the Value of the trigger or threshold condition. | keyword | -| rsa.misc.type | | keyword | -| rsa.misc.type1 | | keyword | -| rsa.misc.udb_class | | keyword | -| rsa.misc.url_fld | | keyword | -| rsa.misc.user_div | | keyword | -| rsa.misc.userid | | keyword | -| rsa.misc.username_fld | | keyword | -| rsa.misc.utcstamp | | keyword | -| rsa.misc.v_instafname | | keyword | -| rsa.misc.version | This key captures Version of the application or OS which is generating the event. | keyword | -| rsa.misc.virt_data | | keyword | -| rsa.misc.virusname | This key captures the name of the virus | keyword | -| rsa.misc.vm_target | VMWare Target \*\*VMWARE\*\* only varaible. | keyword | -| rsa.misc.vpnid | | keyword | -| rsa.misc.vsys | This key captures Virtual System Name | keyword | -| rsa.misc.vuln_ref | This key captures the Vulnerability Reference details | keyword | -| rsa.misc.workspace | This key captures Workspace Description | keyword | -| rsa.network.ad_computer_dst | Deprecated, use host.dst | keyword | -| rsa.network.addr | | keyword | -| rsa.network.alias_host | This key should be used when the source or destination context of a hostname is not clear.Also it captures the Device Hostname. Any Hostname that isnt ad.computer. | keyword | -| rsa.network.dinterface | This key should only be used when it’s a Destination Interface | keyword | -| rsa.network.dmask | This key is used for Destionation Device network mask | keyword | -| rsa.network.dns_a_record | | keyword | -| rsa.network.dns_cname_record | | keyword | -| rsa.network.dns_id | | keyword | -| rsa.network.dns_opcode | | keyword | -| rsa.network.dns_ptr_record | | keyword | -| rsa.network.dns_resp | | keyword | -| rsa.network.dns_type | | keyword | -| rsa.network.domain | | keyword | -| rsa.network.domain1 | | keyword | -| rsa.network.eth_host | Deprecated, use alias.mac | keyword | -| rsa.network.eth_type | This key is used to capture Ethernet Type, Used for Layer 3 Protocols Only | long | -| rsa.network.faddr | | keyword | -| rsa.network.fhost | | keyword | -| rsa.network.fport | | keyword | -| rsa.network.gateway | This key is used to capture the IP Address of the gateway | keyword | -| rsa.network.host_dst | This key should only be used when it’s a Destination Hostname | keyword | -| rsa.network.host_orig | This is used to capture the original hostname in case of a Forwarding Agent or a Proxy in between. | keyword | -| rsa.network.host_type | | keyword | -| rsa.network.icmp_code | This key is used to capture the ICMP code only | long | -| rsa.network.icmp_type | This key is used to capture the ICMP type only | long | -| rsa.network.interface | This key should be used when the source or destination context of an interface is not clear | keyword | -| rsa.network.ip_proto | This key should be used to capture the Protocol number, all the protocol nubers are converted into string in UI | long | -| rsa.network.laddr | | keyword | -| rsa.network.lhost | | keyword | -| rsa.network.linterface | | keyword | -| rsa.network.mask | This key is used to capture the device network IPmask. | keyword | -| rsa.network.netname | This key is used to capture the network name associated with an IP range. This is configured by the end user. | keyword | -| rsa.network.network_port | Deprecated, use port. NOTE: There is a type discrepancy as currently used, TM: Int32, INDEX: UInt64 (why neither chose the correct UInt16?!) | long | -| rsa.network.network_service | This is used to capture layer 7 protocols/service names | keyword | -| rsa.network.origin | | keyword | -| rsa.network.packet_length | | keyword | -| rsa.network.paddr | Deprecated | ip | -| rsa.network.phost | | keyword | -| rsa.network.port | This key should only be used to capture a Network Port when the directionality is not clear | long | -| rsa.network.protocol_detail | This key should be used to capture additional protocol information | keyword | -| rsa.network.remote_domain_id | | keyword | -| rsa.network.rpayload | This key is used to capture the total number of payload bytes seen in the retransmitted packets. | keyword | -| rsa.network.sinterface | This key should only be used when it’s a Source Interface | keyword | -| rsa.network.smask | This key is used for capturing source Network Mask | keyword | -| rsa.network.vlan | This key should only be used to capture the ID of the Virtual LAN | long | -| rsa.network.vlan_name | This key should only be used to capture the name of the Virtual LAN | keyword | -| rsa.network.zone | This key should be used when the source or destination context of a Zone is not clear | keyword | -| rsa.network.zone_dst | This key should only be used when it’s a Destination Zone. | keyword | -| rsa.network.zone_src | This key should only be used when it’s a Source Zone. | keyword | -| rsa.physical.org_dst | This is used to capture the destination organization based on the GEOPIP Maxmind database. | keyword | -| rsa.physical.org_src | This is used to capture the source organization based on the GEOPIP Maxmind database. | keyword | -| rsa.storage.disk_volume | A unique name assigned to logical units (volumes) within a physical disk | keyword | -| rsa.storage.lun | Logical Unit Number.This key is a very useful concept in Storage. | keyword | -| rsa.storage.pwwn | This uniquely identifies a port on a HBA. | keyword | -| rsa.threat.alert | This key is used to capture name of the alert | keyword | -| rsa.threat.threat_category | This key captures Threat Name/Threat Category/Categorization of alert | keyword | -| rsa.threat.threat_desc | This key is used to capture the threat description from the session directly or inferred | keyword | -| rsa.threat.threat_source | This key is used to capture source of the threat | keyword | -| rsa.time.date | | keyword | -| rsa.time.datetime | | keyword | -| rsa.time.day | | keyword | -| rsa.time.duration_str | A text string version of the duration | keyword | -| rsa.time.duration_time | This key is used to capture the normalized duration/lifetime in seconds. | double | -| rsa.time.effective_time | This key is the effective time referenced by an individual event in a Standard Timestamp format | date | -| rsa.time.endtime | This key is used to capture the End time mentioned in a session in a standard form | date | -| rsa.time.event_queue_time | This key is the Time that the event was queued. | date | -| rsa.time.event_time | This key is used to capture the time mentioned in a raw session that represents the actual time an event occured in a standard normalized form | date | -| rsa.time.event_time_str | This key is used to capture the incomplete time mentioned in a session as a string | keyword | -| rsa.time.eventtime | | keyword | -| rsa.time.expire_time | This key is the timestamp that explicitly refers to an expiration. | date | -| rsa.time.expire_time_str | This key is used to capture incomplete timestamp that explicitly refers to an expiration. | keyword | -| rsa.time.gmtdate | | keyword | -| rsa.time.gmttime | | keyword | -| rsa.time.hour | | keyword | -| rsa.time.min | | keyword | -| rsa.time.month | | keyword | -| rsa.time.p_date | | keyword | -| rsa.time.p_month | | keyword | -| rsa.time.p_time | | keyword | -| rsa.time.p_time1 | | keyword | -| rsa.time.p_time2 | | keyword | -| rsa.time.p_year | | keyword | -| rsa.time.process_time | Deprecated, use duration.time | keyword | -| rsa.time.recorded_time | The event time as recorded by the system the event is collected from. The usage scenario is a multi-tier application where the management layer of the system records it's own timestamp at the time of collection from its child nodes. Must be in timestamp format. | date | -| rsa.time.stamp | Deprecated key defined only in table map. | date | -| rsa.time.starttime | This key is used to capture the Start time mentioned in a session in a standard form | date | -| rsa.time.timestamp | | keyword | -| rsa.time.timezone | This key is used to capture the timezone of the Event Time | keyword | -| rsa.time.tzone | | keyword | -| rsa.time.year | | keyword | -| rsa.web.alias_host | | keyword | -| rsa.web.cn_asn_dst | | keyword | -| rsa.web.cn_rpackets | | keyword | -| rsa.web.fqdn | Fully Qualified Domain Names | keyword | -| rsa.web.p_url | | keyword | -| rsa.web.p_user_agent | | keyword | -| rsa.web.p_web_cookie | | keyword | -| rsa.web.p_web_method | | keyword | -| rsa.web.p_web_referer | | keyword | -| rsa.web.remote_domain | | keyword | -| rsa.web.reputation_num | Reputation Number of an entity. Typically used for Web Domains | double | -| rsa.web.urlpage | | keyword | -| rsa.web.urlroot | | keyword | -| rsa.web.web_cookie | This key is used to capture the Web cookies specifically. | keyword | -| rsa.web.web_extension_tmp | | keyword | -| rsa.web.web_page | | keyword | -| rsa.web.web_ref_domain | Web referer's domain | keyword | -| rsa.web.web_ref_page | This key captures Web referer's page information | keyword | -| rsa.web.web_ref_query | This key captures Web referer's query portion of the URL | keyword | -| rsa.web.web_ref_root | Web referer's root URL path | keyword | -| rsa.wireless.access_point | This key is used to capture the access point name. | keyword | -| rsa.wireless.wlan_channel | This is used to capture the channel names | long | -| rsa.wireless.wlan_name | This key captures either WLAN number/name | keyword | -| rsa.wireless.wlan_ssid | This key is used to capture the ssid of a Wireless Session | keyword | -| rule.name | The name of the rule or signature generating the event. | keyword | -| server.domain | The domain name of the server system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | -| server.registered_domain | The highest registered server domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | -| server.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | -| server.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | -| service.name | Name of the service data is collected from. The name of the service is normally user given. This allows for distributed services that run on multiple hosts to correlate the related instances based on the name. In the case of Elasticsearch the `service.name` could contain the cluster name. For Beats the `service.name` is by default a copy of the `service.type` field if no name is specified. | keyword | -| source.address | Some event source addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword | -| source.as.number | Unique number allocated to the autonomous system. The autonomous system number (ASN) uniquely identifies each network on the Internet. | long | -| source.as.organization.name | Organization name. | keyword | -| source.bytes | Bytes sent from the source to the destination. | long | -| source.domain | The domain name of the source system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | -| source.geo.city_name | City name. | keyword | -| source.geo.country_name | Country name. | keyword | -| source.geo.location | Longitude and latitude. | geo_point | -| source.ip | IP address of the source (IPv4 or IPv6). | ip | -| source.mac | MAC address of the source. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | -| source.nat.ip | Translated ip of source based NAT sessions (e.g. internal client to internet) Typically connections traversing load balancers, firewalls, or routers. | ip | -| source.nat.port | Translated port of source based NAT sessions. (e.g. internal client to internet) Typically used with load balancers, firewalls, or routers. | long | -| source.port | Port of the source. | long | -| source.registered_domain | The highest registered source domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | -| source.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | -| source.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | -| tags | List of keywords used to tag each event. | keyword | -| url.domain | Domain of the url, such as "www.elastic.co". In some cases a URL may refer to an IP and/or port directly, without a domain name. In this case, the IP address would go to the `domain` field. If the URL contains a literal IPv6 address enclosed by `[` and `]` (IETF RFC 2732), the `[` and `]` characters should also be captured in the `domain` field. | keyword | -| url.original | Unmodified original url as seen in the event source. Note that in network monitoring, the observed URL may be a full URL, whereas in access logs, the URL is often just represented as a path. This field is meant to represent the URL as it was observed, complete or not. | wildcard | -| url.path | Path of the request, such as "/search". | wildcard | -| url.query | The query field describes the query string of the request, such as "q=elasticsearch". The `?` is excluded from the query string. If a URL contains no `?`, there is no query field. If there is a `?` but no query, the query field exists with an empty string. The `exists` query can be used to differentiate between the two cases. | keyword | -| url.registered_domain | The highest registered url domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | -| url.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | -| user.domain | Name of the directory the user is a member of. For example, an LDAP or Active Directory domain name. | keyword | -| user.full_name | User's full name, if available. | keyword | -| user.id | Unique identifier of the user. | keyword | -| user.name | Short name or login of the user. | keyword | -| user_agent.original | Unparsed user_agent string. | keyword | +### Syslog +The Meraki syslog dataset provides events from the configured syslog server. All Cisco Meraki syslog specific fields are available in the `meraki.syslog` field group. diff --git a/packages/cisco_meraki/img/cisco-logo.svg b/packages/cisco_meraki/img/cisco-logo.svg new file mode 100644 index 00000000000..a174ad4488f --- /dev/null +++ b/packages/cisco_meraki/img/cisco-logo.svg @@ -0,0 +1 @@ + diff --git a/packages/cisco_meraki/img/sample-screenshot.png b/packages/cisco_meraki/img/sample-screenshot.png new file mode 100644 index 0000000000000000000000000000000000000000..d7a56a3ecc078c38636698cefba33f86291dd178 GIT binary patch literal 18849 zcmeEu^S~#!E#4Tq;}?6chqwB{?k=6jc5D4>l%v(rleJ2Y%tW zDj9g7px}|*e;{M?LDwiK3@FNS(lDRTd-MJYIyUJCN948~OJk1M(DrJyI#iV;P4k~& zFZo35IfQt0RwlUN`48^6(1dv_wm(y1xhEdMld=Y?!%u=fPT_*{3( zwBwz3#qR}_)t>C*jp5@U)Ti~B)Y;qq*TRxZJ7ZRN_^A3TDAEM*@7Ve%(Ro7=1%1B< zVj6GBUTxXev>_^SFA zgKZ=g4aTS}9>Ofj7cSB0WO?gQ)x=+!hs_)b$6#>ScFZ>XAoIX)%Bc|BDC~JFBk0f0 z0NY}6gb)&!qx^FWC(!ji+Kl$V$2|ocA=vN0TM0Y`U?tX+T)c*C zA!IL(T2Vm%MCLa85^if@J@Kkprx8QN5!6eCR@4Oa5S?4-4|ou?90mFCM8D!;n(5xz zO}-*t!TntN>|a$s(kGQg1P-U?hqvGF2_fGvd&~yZ_l3Qf&j~XWa=;>N3#-~#zjzcc z*m18L`A-K2o!d@J>a8SRbm4P&-q1(H>|JgIymDbnJF&@008`=X!P?4DGgZb>voUl^ zNJKgPR4S={)3vuk_{n@=M8q;;aJL>q+VLdTnO=}`&x;1DKjJA3*f*idS{jP5?+;!W zn-^7021Z4zv`Aq`hmX1aid997RNh3fa-@PG(W7TzKa1W&5^y3|lPeETP7j9qXpo4)7%(W0_2 z^Nmq;t@rb1eP3?%kOkH`P%!zTC7ZHjSfNN3*Sb#=3#jB*KpNGNfnRZ{N(6DrW(;B2Bwom<%m?VQP%K+ zsFeF1-(DY}oP@)w^Kw~gPg03q?N;)Ec6^|nikA34T~RynX*z}H>R~qgT$`Zbhn8wzZs$j2fsGN&rOK-mIBBvzD@a8FgbLpL!h5N^u&0wG} zq!#md3MHITv?3@$37J?lc_5*LWJTTjel;IiU-Yq;(g9I^D&KN_NKVS0O~GvB~FzPM6}=4d%fG4Nw4pZshcyLqK@`b8?RhD38haIyr@+8+0r5TC1*C7^WleJ zZN3_ngTD#RQvNL*;qD2H@cBWJbCC#d!}=oKfod5SE9a?!?j%DVt1z@inN}Iy$r+96 zM@P?AC+(`cM;z6J94BYGJ;+P-N#yj$?`G26ydS&OVH?~JY(N4l()Fh+x+DoJ@r<+i zhm^ck@QP`=fLApr62@KyOef~}zuG;(VbDQmw|Wb+oSHSw=%w9R)=et0cY*~ytX)#M zEXlK^p;zM@vTnXn+C1vwP)~TJv|TvDE2($;;EzC5_5IL#H;u z)#CO8)TSzbt8)wHB8$I8KcIojx&GoE)3QNu{CQ+_xBmQ&`mL5-u=BX(hs^hMY^ zae!!*Q;Tr$@(0~GoBJAohGw*d{l8~!aXop87aaSUb2jm)Tk>#$1*cdo5Sl+?oD!l4Og~yX+soottl4 zp4OartUuAN(dD~yLJ}`A1*!D4-|L^hM;`_DM^1KYs-VF(}h(BjRO``b+xV~%O=-)?p z7ciJH7Fnl?V&=ay_AB{oQoa2iR;6$^tiE|-eRCFy|3F@%j#6gUxkZX@?K`F$u#;T< z4IZORpUthmB?U`;zrOkp?P(Rvd5TFRWrBJmVg;KEZvJ+;Q}FRY%QZ?c^&$oPXW+C5 zdN#c>v%U?QuE+hMQdzxS1Q(BT90;29qu#^A?a^)Ui;{TJ;%`nLgm2ew$J4NvREjCJ z$`C7&?tH$CrVG@M3J1-KJw_*9BKeL*JX{ zN+Vg_TXb9^jJO$ZGkXO6BBFDjt~w5`w2TB*z$&1W5Il3IiDs=ZMDt|9iRtKET*wF6 z0Z+|N87p-5Fh)^(*l>OVr5^aY5LW(@PuM>Qo@&)yj6XRkPm1>eTF#Y_c*aRF^ZY5A z9FAU7lKEHG@i{wJMPg;n6z2|69d-)q9@<7t()d-zPy&X zdXG7{Uw{k23)CzzQAXw#iqj<1u~W@K_Ljc#?ukh;fRKHeJ2l~Z+52b2n^bGiDF2oX zm25FLx|4AP8>rAi@koY03lrtS#X?zK591c?2iZ_jjc>0y>q9>fU<08o6zG%z9WK+S zDwZMW4~28wu#ye#V*@#5t^S@NiAA`3{SF$xINmc_WW^u-C9M=H>RQ1>WM=|R!660{ z6E6%DwX`eu<3pkmz7Z=FCRd$(vhDkc3yMnSr)5C*aho)DZ<12$`$TXj<8Z70)|rK7 zXFD8QzksfWZU`qL2K8X{C~TcF{KVW`3Y{IMb&)T9%1V`tv(HY1 z+LXkLyM|3mtLD{x-#hOw-U?sr-iLeHFA|=-sGZ4#hX)atL!a91(tWJc+og&5W}VfZ zpgE7`{5D`~?yGR++y7~xA&eU0N*ZezDjF$> zUeK&1aTFQRg*?v^Z2e7u<`lk$czR6}b6Cl-qA9%A`#A6q0*zyTu)X`3rhjR86NK3= zLdw{+-F}+b2gxd-qF7>Rla}dFkj|L#c|pg5Ni+MRA|BZH(@ME*o<1ijKcoXb%PVfJ ztp_uf=G%kvU((pHcw90Xut=}atA!giM-5By)f40nKp zv7Wdb{;^<}VRvruH~rYr~wEuYY2ov-5Q|p@u3Da9+z7PeIpBAwi?RxnxN3Kt+N9L(LUS%wxY` z>e&1VV;{CYw8DNRlvBH)>!I49SU4R!t3I4=y;mCevPZh!-}~G+F>6hcL_Rli4r zC4(WN)`j$>^S=~GMGR=^)A6wrqi(-x{xK37&Vx!OS6t=KQ2JVZo#GrSODtTe=TVh%*qfF%91nqsMNLNL^Gp|_ zz%I*HUkMQGqb!1eh{{bp|0GSCDbkG_D_d)8<(0r<6-%Qi7qDa7xZjcdZ$?Rth9L!f z$erCcs3<~mtupywbaT8NWZF#v?iZkvqSz3@p`RiXs7P!GUa~-U9hEG(NgI#3BzO-# z!9JWf(;r!*A=@g$f}>wi|6Q@9z8AmYf~x8G%sp>C5cfuJY;hs1o3Ozu^{pH0AFbs%yU)Xy5>Cf?qXiHn*-PAfKDRiy`U0sFSKFsgEZ6_ z9#ma!<#Izr^}_z*>PRSt564u6We*XmZUx^jv*dK; z4zyFZ*ZFSE!00<6!|+#33&R)@RA8V9YRjp$HS9?CGq*xDSDRbX#i;}mateEF{fqTI zt?X}Efkq_Ap*_ETgaikOBbQ|;47}hwX44K`(DUI@C)QiG&6UJ1UmRn*Q@6%e`+x(gpQp74O{;yli8YLCV}qD z4gIyZd_(8ED~WWaeXOb0^r=9=AiDT}by~+$KVF~M{ywbQl zng-h?a_E;yX?DCr4|_h7JMc7>xgWf7Ek-VmH^hCYunVp3{(d{---&%-GZ=rK#V5Jo zJvP8b!2AA5?9)G8gwzB6ze3TU<5*Pqms^Q-?C9-CN~4hb-`U0D@kAkTWn23``cao^ z8IWAp8h7`%ZA+eI?w$sJktq5m>e&0@mQn>2BdpKAxbj1$m$8Z;`!iFvl9($Lb9Ff? zT^6cTZ~HgIeR6R*;G(rzpgsJP41Fx9Df;G6{;k6T(i}&8hX(jHSC@~#X@70h#)g(( z*9vUC+a*b%oAdf1$}Z3NR;|c5nY4^Z51pfqk(tmJbB;Q#ka#tf5eae;-kq$I{xO3<(TI$0lSe-JQzJ*es;il=Kn_?&?E zfLbs{qErPqm)-*ZfwbA*D-shgb|1;X;cH*yA|q8gS=HiosF=-kbdk6--SR+`F^H_` z0*i`J==@XSe=HT;_``G}ulE=H@*3GU*?gVd@h*`eT^GKjI;C@8+h~;(u3bA#b&bN{ zYw>dJ$(;RfHDLlndS`CWOE=g0jOocCc&;w(dOzrLf4-DK*MD@P_;u&CbfMw=#Q-B` zDq8hGwKN-O7(hQA_bP3f5XrZH+@*FGw~ppmDgNWcf|Lf*Pc%e5dw1DcJ1BWm!z7z3 zr^toEU*P(>G#;_1X}Rz(5lbDtCui%hY^d3lm)kw0vyk zX~K4$AG#7cG`6s2%9g9zsaQ9o?;3yzW4Pt!;NlS zzI#G7tiq&@eV&}qDtY(e$1JwscAfle%Al{3>Nr%``n?`Jac^CdOXUbFgI3;m{RkA~ zokl+lxuw9=%W&MmzA+G%ZdFMMP&N2^6BWjG2Lt|xKx)lMCR@b0n+xgw<)&Dwi?}>- z+$_e|@M;uW@3z6)q&L7bYitZ%huzGqH_qHOr&G5o!?(8TJv_MN1ka|&c6_!Q>#PgHSFoPWiLg|k_{ zQd#Zy&BPkU(0OE5S35!B5qb6%T3Wd#J(zBl8dw6I#xIDDF-LBPi-jXv1E?!gE|1OIdTejK)+U3ooC^otSIRsWZf-`&K}6}s!407Y58zH zK(oYx*7sN1O|Z_1YIJS_H$E@DH(hB4QKNCGQT3PTvwYoe2&8WKi5`5tU-r4!>_V3XUT}N)>8V;+z-!@-IGCKiD>E9RC(K`NMx=;Qp zf$2g^t?)zpU0L!BZi(oE#)^Z_biT*Svh>r#%1=O+Wo37G`Q)4@k#Pe?^mgBIugC)8 zyEICH=`{A~^x#X&%tr-$j|(nXrIrGQYNY+C3M+LO;yUU4-|v>a5#P)XYp>_|C0f0n{_p0mvwWmghfd%!Cm}$qBDxOqA3htLs~ghSA1>6^dVgd~ zVHHBBy6;Pp=El;dkTE=ttp~BoOJ$L@EB3Z37T1kTNG3tm4PY5O-7hP5DA$-k=vV&6 z?RiAm;W~*o)R7!x9>u$&@|&D4xMmJ*y+^-6t!F0u8G~78t&Bs#W>w_NbW>W9M3tXWXRf zI86FWVx%iXXh6MJ>dg#?lNu{K@S#nzMIG4PXQd%!Bvc*H0c7F_Y=adptJr*cHevMQ z%?Xu~q8CFw>^L*S_83kVhq=)hf0%_Lq}SE*g(Da_A{kXVZfAd*YCwp~bG32wi&SNM z#QZ7}Ug5-=+s^uqAh_|}gzya<(&E?XAZ%0ybd9nraj?|z1YfPr*{N?Q{ji}YG`T#| z=uwJZHIMlsmevnenT#-)t$L*=2wh|1EYXW?_36TR?L!sUItJVxaC0$Gb|gq4{|4gA z(v0ODFj!T)jc5>65ys)* z7$aBHfbKdz@QJq1b`NT`344*g()$>5*Ey`TPB7WI;|_8o8t9-_4ikFub|I{66>ge> zHA+6onzFKY*eaiA!77SD*^&LyumAR6gSvxY6Q?;!AvI{rZ##!G$%ZfIgce4F`aF;e z?jVh%+B-vj69ei~bh_zA9w}S4B4rzRKQ1~u$gwVu_x5PlRKDXX2(_2Mm7fs%6{SS7Qh1gWT8xaxc=f8`mW38ukIZxwU;lmHABwFSg50*o zrj%f%j~IKR?N5Dxwrq|sTa?!pd{b3sFM&~{4~_^YH4$bI^Fq2W4-y`))^|7fS?i0) zJ&Z9wY!8%l7@gAr`2{fqA;L;ptQR*X2|xUtrT47KK%XN+dydN$*M?65LuXTRabgERR{n>;E;(&vS0_@COY!p<%5LsRqGpER%~YjkSK zwBo9-2|-ZFiU3TT&S+@}3gDT35t0IXTzX@yHA(v>Y8;-mZNySQ&fE7RJ1^tzJfvdApX& z*!+tE)Y{oR%jk8A)3EiI3i*(TOwP!;B3hAOj?KQ6^h-q~1V^166uYS~mH*2Hh*0}r z`R3u1#^LG9IW|^QT^|61H(T1Jz?n;(Z>52lU0BO>Q6*zgpP*gTFk2Uw)!3zt>3F~_ ztil4!R*-j}wjh%&(kSB%}X=u4RbFRp@^l+$SmM@nW9B;yGbf@nasjFMEE{m9Oe

}qal5$moSACwfNXLXG5|3R0AtBcN` z?%yS)&>O>sqxU64U~C3&Q^>z-Zt}WuX4Wh3dKj9EO zfSbV!c3e;EOeKHQmWEw#NM4;*tw-2o@x&kKT?rsmy-F|$jw-F>WgA7?C@{O1qPg*J zf92|RTBMh&ptHADFc{T+cB?+mOj>h2HKgwkxq6w&XBxPc?>=JKvU2K9aU93@vp-R% z{5T=P$9U}AYZ5QU{3%7}YZ+ACWXw#-U zWyxU(OP#Q9-2AeGmCwcp`zWghf2hvsOjWjDQbU?U`v0&a--f1`v0Bd8HLiLmo)PKz5!A1|XVO+89 zm3h2~6yI~cpWor!_yt-?Lt>z`c0a7cJAW)#d8N8nNIf0H<+v;s4{0guDD(?T7Z<~$ zd`$vpZ_QQgFaMT0_d5&+(jwGU?M1FqUu6wjA-9z?mRM}(CmSdK;2e$Na}F-8jbhgN z9)@AIQeghf{xCC^{9P%VdYW1PP#}2BJwWt z0Hd8%st1NK5%h+)UB^mVwh{e#8TIm$xxgGo6I5;e{~VUeeMGRpM_Z%=eH5$X1}?Z5 z`|*_Vp~K&ziz45-Ih9y>EOr(Buy0&n$dbQ4$5eSr=Ti z#~7^n8dmem;$0D4+6eV7&G2D~d@ z+R#u8+nw_N%7_U_1e53P?~&10^m|ZUXrZhVp04lQLsGos%0fRDhS=@>8TOAAxK;Cy z9GZw_1pfSxD5~xoR!INI?tU0wrKDd6^Tv{jL>`Xb49kBaNPlhMaIfh_nq_)zB7NcX z05XeQKz`@BDUx7*i!V~%dc8XQ#ngBw0A2tSr(npSCrNy5Z7>48v&Zz?0{%FRElh_h zN2|?#EhJL5HQMIu6m1=ypTR?tVymHK)xQvS9ir7FzMp?CjlND39PK`od#GytVhZWp zQ1@>MTE1*Ip>hnXSWa?XbMH#708@j12yPbm`JfcqIgmJepn$5YgkJn_%5I)mr`Q(k z-a0yFR3A`houhvf&|wNpIsV{2p%MqhR@`@R(l6`}iufEgI*UxWq~26?WTpZCV{JtG zYL?&#I98fyf_;2S0?_V{=Aa4t^x%vy$pF$_Lh7W2f*~5uPvGYh;vZhMv|u+Z?2t0~ zcYPXdxbg6OS*LUjR_=jLDt)ab6;?g1IuySLG@UE;jLpt-wjLX&RlY>fnd@f&?0NyT zht5vhP^};k6`U76$%&I)iWPNxG6KPjdh`S6>g9GN@;KObQsLG zKyjfrPR0PU1B0a0=)3@9eCDl?mB9rFdlTMtTAeZv2}F*|@JWleq2+H1bt>>x!^wTk z+I)cgsZwzCMwoRpW_*!3IySTQu!`HWugAXe(Ai(a9Rsu;*0#o6torxwNMxPzEAjt` z>70Vw;HCQ?AnP`RKQ;2R8h%;LI#tx^(MO*lMWJe4_?)Q571P`kTmN#(ez21V!<6+S z@Uap+y%#8&cGgdf+E@y$dUx3g#)=#5k31Vqv0p!%L`*=-PiQAiSg-d9lKRZQDuJ-| zA96zwwomG+4}X$vR*IU=NC!vL<`rUTbf_uRJC4FS;k&HtV<=<)p(qymH)=MDV^aqK z#%sid7K|~!H`J!7hRr~Z!emxgWq6#GpQs%c#BM+scvNGz|Gi4G`;8Z~dP8)+51iB8 zw)0fazNz5(iK$LJeC_4e^8&@wT(DZ~~>SStz3P(>V8CLNlZqgv=2K-|Lu~si@XFwMN>QE^k zVS2U_A?Q$?M`NkU}^!M8m%O&T=kW>dG}1s2I~hxp9Y=a=1XX-(fB5) zej3`e5Et~R^r%?CZK0)UZsF_+tSOGIBMdrtMf#oJjGF9U`*P8t>i*TWed$Z2WNUZ* z_1Qw4Yr+Q0@bD?hD0P-^v}?FpPBg~zz5~g@J#J76C695|P>1l;OS8%~hZh5&-9Ji# z50%&56ZK4FC9}{jHL0!=qo9Yd(GGHCEX2|-F(f}q6@NMT4P3rQd{Q!=bz-8N(Z^!N;;ZzAWRf@C?X>mG=_NgyQX_?Jv$m(9$W>P;+e}O|&w&DjbsJPdWp0A2$yLr*!BY73Z z5d*BCaTI)w=sTlofc>n}@v_tSXIK?8(g`G_06u>SD*fOZJ~visq3lBVS2+cf-r$UQ zZ(8A0g&5M$IV7w5nqL(m$VS0X?=yy-e6>S>Ca3wZNT)b{GF39_gJdONflqc-j$b~o z2l@@h{$KVfC)V?#We*)@xYC;L^<@cHo>8axRMbSzw|eYTl|8pkabsQJ(3`z{>5H}c z`psz_Y6t)hvzL^=}P#++XUl6v`-j)SuXd6BynjNZ!&c2hnyE&4*K$nXn31Zk)cm+lx;> zya{T?{MRtSu?^3Y9bS&O$*mW^vRUpv!J3Tz12?3&Y62b_oiZ$24O(75Z)JWb+Rj)ACbK`f<&tSwtT$|Sy z$41kRPiM-jnPY9PKrLyI`pHm6LusMsrO*HpmE){Kp1^u2t%6nW^;GB|!4k!Ik8oav zjM?DBKh9G@W0gEwiU-M}0B)}olvoM71RccgiZBCs)L?q_GX&JDhegx4k2&cNatr5w zU)1#2USb8&`etO5Vk z?0}K+*2*@a5yt*X{qg0@8jEz~jcylVj>-042p1PBnabI#xUiCRD!ouw3?u-wwsqwF z8(@m8-Lk7q@v154g6yvx_tRDa>}oqpVda)wfI9(;ZVGt1v^{<|X?vC_(i@IJC+2I_lusrT=$h zF1lPc*Neb`;Xgrdf`p$w)~MzQW0M3_FYRKu{2$VU82J^B=X1#^<&P$_`=S$Ey04WU zTxG;hrFNLhWC*p+sH3x=JVcBJ9*7>eO20)n671SxQhZQlHMRP8FyO}yai~OTsbms0 zQ3b$C1Cn!>jMHDq{VX1ab^~_Q!z+f75+_AuwiN0*wA_#M#0|rU{+NlB%>Y+TNT0Gj z`3^LKMSJjz2(?lwg~ixDl_5%rzzZ}o_6Fj9e)T7gpH4=BgT1zmwJpC@g(f%&0`}8B z%7Y&qlP3aFmI#nmT`|R3+Lwzp+PLXt|5g%vlY_$fvse7zjus0D0fA##r+i4G4K-2Y zC#H95NGoYfWP#ZF_v$^Li{PZpm}fc&)aL?5doPcb835Cr6`T+EzzcEvLtmXcbAb<^ zw!_Zgk6Az7YA@*vb)(G{_W-B|zrf76z^`X%jOgqIIaqi~5nUup3vugzzg&rA^w(zR z+qCzvIV~nGR=47pDOcNTzuBw#5a=<=DMvGa)g zPw$^pmq9Fg&b#BZrPSoml(149rZS!fioV*Dy$z440U3MXDJmI?RZqLy0}IKSxN)o( z8+8wIZs#q(|KTg6y;Z(=96>xfpUsr@SP}I^v zN^R;ZVrDaWmNrM5-<X@k6JyjvA3;jHhma|Y|7!Vk& zgf(UK_6~cC;!|b!YTjke=nBiUqQdb#I9TY}!s5P)H+^c;9cW(QO8O%n5J^8Xfktd*qrn)+?-gP`m%B&q zi^}7jKm`yMW8ITFOMN#!QIB6$SWx*75tnCMaNg*_J*WuwBh~AT>0($nS8%&zmFQDp z$dL65niDtTV%!Kg1`6epWoQGNG`$`doy;Zjaa`keyL0F6iJMae6FIgnhAfzU%m@V+ zm5rQihLwS~b6{-bVR1ZSzBI7(Yj+V6T-8V*7I`ptWArGdy~8pnV>fALpi~NQLZ7;^ zpaj35=md<~-(tNmF69UX3?ua}A7UIn)q5i1iPYEGlhYSbkfeX`5epkxtzk3Qbu| zlgA`7ts%IvF4HJ}-98akyRnjCo{u-`A4&b+r?s|o`4wdYAHs-yh91p$7C_|+EdYH5 z10`!*=n+W9g>V&dfU1H!J}ASZi&-?`2IlDOAHnu306rD`y>jT)4^@S(X4XhN2{g9i zj-ym98+RT|d0ejIFJCM5>S{mT-8uGmRRqkJ3sMO_AQDrv77Q zv$t>zaVpVF6eBguE%9M2u?E-Oleft8z5+~W`G}KXD(Yc;7m4{Op>Le(k`g1UK7(1# zt6g}$n=Tdn{T4pu>v!c;xRCd_WI$Ali13x=U_0T!Ga-U~9W88q-lU+RLn2`N8Ouho z^0@SvC>$DguHWx)?^*ms-{PVq%dn(U3vrLj9zITDqQZ`H>Wsp@Gf%}SG=m)Vh}F$ztQAbwVGdDgd!28j&yX9wLW&s! zNR~6`nYg;ULAq8zi<;gUchAV5ib67Y##l2 zy+%gaD(|~G4@||{A;TYDSoS>q2o{t23t-^!NDSDEm8j3ao7Ei>KYLEpb$jz}7ciAM zD}trDN+AVVT_lXW<++~>8>Cj8fzJo@R;>%nGq)6+w?(#mNc#1J4W+!hA}?g$0Xqo? zn67qJmss)e%k(xO*&K@z6+}nHA(lCkb6n-|{pSztys$8HiOWTVR)tCO*Q9~if%3n7`uxGzE+OCu zwcVV|tgQdq60952$>85-GHk$lwM(uI+CU1?i{sVnKd0+UNq#eSSKjUKfDDgLnBG1y z^v?f#MRFkph~TgkoKBvM`L_~we8__xpLcjh`GwV|87q`vazJq?SX=mXhdvK>VqUf~ z4sYoTIpt5S)KrE-?>&=cRoBumD7;b5pq!Y07)#I$`)<@U+mo*dE*P~773p*u^6waO z2#thJahX_ySlYMpjx%h<)i43ao~Is`^Ya zMNZkuChEA7+ZJe6$>-C*dzTYf3#1SY82yFG?S&Q)5rTbKS-XLjckTLEc7>^sFcntQ zBeNXCSg&q1N3Bi^4zlQ%mcEBQ%2ab$?(;t-$HYd2%cnX$uuwU#I_6D3($m zR(>gHzM9ODf;r8b0l5LuEIQVZiQ0-|3Y_xzJkZc*CD=bPJ+&J+>>se%D4uTq?Ny{l z0Z5~og*Wa1O&anlcRWu_%o)(x?IZ0CfUNk_R-ik>GyvdFmpu1wHZaKTDGhL zqxsji)n<+)VKbV0_BRq9E;Kb`f=&vn(BK0Ba-gL?ZN;^^b3YFg6R=!q#zM;tcX0dM zdy5PPx@6pJPXHzH7$dGjM|6@6777nXPWV;CIQdNf(*Znv)sMy&Xcq> zhCq+6h6&v8<0}vd2(sKqU3j>fr7&#Xy%qZHcMU3m{wld^Nstkz8GagB?Y=SI&H z&{&BSA-|(i35$9(l6LpFyLm$0M0fK`Dz!~ezL?yEInsXAFR!bHe;ZL>Gd(#Hv?<$%`^b)oi?x%(jkylCPb=juPlF znMo&o961=NZ_$gd{xp1ZY2dNDOS!=XVj!M^A z+$z`EK4v=m{Bs{&I4W)({`&<5*^BV#z{IBAI_d+9Qx;~ zby?2zEjzUUeZWBDo5cz>%;z||z)<+6UtC)y60yD5J5`oo_zSM;l21@CY<0_|)NME5 zs)kHCMBa5YzB#N=W2aR?y9((~WuYwwf+HAc2mvU>NYlxOTvGf^Ye3za?*f-qUs^`a zT3>RPh9*Jf%3*bf|kqtnD_Buxv!<9N>BbuD#uYv-q^ z%RDnd7a3O4M9Y~TNISS@9K}JDkdg@>x8E6@n8jF=6qiDV+}{!V)(o?ykcr0sxBGEx zo!X;pc=r{H^vw6ztV5VZXBa4~(ujB$rZQ|AaGN@J7#q%2nU9gJ)g6dcj}zYB1& z@iFE0vMQVxa|v7tDHS$gwX$Ihc#M^DXRC>J@Zk?dC(3uB_s~*W&m-01DFMQGWjj5x z5po1@1gPl!v1Yra@qPG{D;$bYLM3qOwpl~7f~l)#n< zP+6`!NYe3EE~4RFR#_e=7YctPRBt6$He@`%e5m}f$M%yzC2S0<1}hRPjO>HJY~ z*dx(nbMbjv*;o&k{qzBdF|lS;UNVKziV=gbLq}UOCwr8GT5E9oRYQ}+>DhbQ1R=lj zgcNJN8|D)$Mx3#c+t@lhqcDUnHGVt0&EyQ{b5)=52B(VTzw=pQ^ba3`JB@BU^lS`_ zJEiLzgU#Acd_!}FMxCWC**FP^i#P}bYzNs78)#uSejEtYLbG>JJ7Igtho2oKQ;XW~ z4eMGO+t!_;G^V6c&R`5Tg+Pz2ToN(aybq4Q0ssie_{`t*DO%V7FaZ`{MBobFc9|pV z70o5ayHGJo9$$&Pgbs)pWNzduAcbh?~U?_P)(ve0S*3H%eNF&a5XR=!J#4c z;t992n7ZJr{*%`^dU1d-ALE8!3i#v;3r4r%j+JFCe=%3Vj=8{aXe zs)jrcUBZ=;LudcTUXj2ub>K5!{HHFHJ}Trx(PYugbQ8yK7&sqX;(;|UWjk3tGs3zuceeX)i4i_jA8Qz2Bc%DxN8 zXw!$+9jBtEHd1y90bYG4f8DcJM)Ab!M39tH5zz94*MAvnhA377@buNupSOUU3j8~> zd6&hk^ENRCp9T?_QUHk<=(&9Q^MJ^pi;nKOYNR@?L=RCSmKMJ5UQJQ`X!i~(gD*P! zs`RobzJG3Ra_Pg+WZUXUmMU$ilpwfcEti6)mw(~MZ0q!^sza>#jv!-+7B6F3QuMWg zVO!rXwD+lF1BBTito?ml-CV3vxuek~TKuOX^N6sol$v*{_%nAuD7i81eXm^Lz(Z~I z2Xj_Dts#G0&C;PV_Wkq*1QvB7+Post4={v;gk7b9u%#DC_bh(iJm$rqog^{JEx6NE zrs5^2SEL$|98#2WV#iG@L6cq|)SuTMSfGocPl65wUd^|5Lbpnb(;t>-Qu2jvANLgv zdte0vED-3C@^BdyHWLL(7{G$WA02z@JG!T-U^Q7HZ(7Bs&vchkh(p&}KvnS{MG^i6 z4r){gJp9p7WyWOEiKA2Cm6EXIn&&gk|Fc6^78OpPrX4ExCFE=SD$xcH;C2eB^{XTI zaxz_Cef*Yj==w_i_BTGXP;8C&f? z*QEM>={jFM8)lWAR870pG4XEWsl%%K|82S5b=9hVz7p_6i-d(Iyvq76&a#PV zR;VbQV|n?mg}&(ehClg%tK%IjgtnTR-u)lxH06XxXqH0soAZbB_Rm)XX=6Nge1uoG7 z9vQM_S~2h53n|W`y{{R9+=08rv~MohI_v4-BU^7fZ0-A}#b5{AOSTJm+(J;9yw%pD zX6u62GJ&@HKX5zQwq~j8T!Hrv-Mk^QSB5cu09L03{ToDO7jikM0WAcsjW>D}^jqCF zT0DEZ@K^KO_MD*%M!+V)lGVU6?LpX)eQVXEmq}R`NIJv;kBitJ!nW?0OxTVlu2ADf zE{A!*0g3%nwVcBD+AgT5bGx@WOnQk{zRpiZ4HhP`3BF%N|HdqPbbiV5)7x)kzC3ID zZ;27>0^mrMgWc7evsbQY`l`l})wr+e;=8U_!2&B77;1qL!N8y)eTJ2lf#CvhR~!Qa mc;sM|90DP5A*JW%f2r=u1xt!e4gwD_V(@hJb6Mw<&;$SznOm^{ literal 0 HcmV?d00001 diff --git a/packages/cisco_meraki/manifest.yml b/packages/cisco_meraki/manifest.yml index b97e69619e4..090f5989fa1 100644 --- a/packages/cisco_meraki/manifest.yml +++ b/packages/cisco_meraki/manifest.yml @@ -1,34 +1,32 @@ format_version: 1.0.0 name: cisco_meraki -title: Cisco Meraki -version: 0.4.0 +title: "Cisco Meraki" +version: 0.5.0 license: basic -description: Collect logs from Cisco Meraki with Elastic Agent. +description: "Collect events from Cisco Meraki Syslog server." type: integration categories: - network - security -release: experimental conditions: - kibana.version: "^7.16.0 || ^8.0.0" + kibana.version: ^7.17.0 || ^8.0.0 +screenshots: + - src: /img/sample-screenshot.png + title: Cisco Meraki + size: 600x600 + type: image/png icons: - - src: /img/cisco.svg - title: cisco - size: 216x216 + - src: /img/cisco-logo.svg + title: Cisco logo + size: 32x32 type: image/svg+xml policy_templates: - name: cisco_meraki - title: Cisco Meraki logs - description: Collect logs from Cisco Meraki instances + title: Cisco Meraki Syslogs + description: Collect syslog from Cisco Meraki inputs: - - type: udp - title: Collect logs from Cisco Meraki via UDP - description: Collecting logs from Cisco Meraki via UDP - - type: tcp - title: Collect logs from Cisco Meraki via TCP - description: Collecting logs from Cisco Meraki via TCP - - type: logfile - title: Collect logs from Cisco Meraki via file - description: Collecting logs from Cisco Meraki via file + - type: http_endpoint + title: Collect Cisco Meraki events via Webhooks + description: Collecting Cisco Meraki stream events via Webhooks. owner: github: elastic/security-external-integrations From 080ce7bee08719cca997e0e73609062853a25342 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Thu, 10 Mar 2022 18:55:52 +1100 Subject: [PATCH 02/67] fix title desc --- packages/cisco_meraki/data_stream/log/manifest.yml | 6 +++--- packages/cisco_meraki/manifest.yml | 13 +++++++------ 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/manifest.yml b/packages/cisco_meraki/data_stream/log/manifest.yml index 6d92d9261cb..f1b58137904 100644 --- a/packages/cisco_meraki/data_stream/log/manifest.yml +++ b/packages/cisco_meraki/data_stream/log/manifest.yml @@ -1,9 +1,9 @@ -title: "Cisco Meraki events" +title: "Cisco Meraki alerts" type: logs streams: - input: http_endpoint - title: Cisco Meraki log events - description: Receives log events from Cisco Meraki + title: Cisco Meraki webhook events + description: Receives events from Cisco Meraki webhook template_path: http_endpoint.yml.hbs vars: - name: listen_address diff --git a/packages/cisco_meraki/manifest.yml b/packages/cisco_meraki/manifest.yml index 090f5989fa1..aac312ce1f0 100644 --- a/packages/cisco_meraki/manifest.yml +++ b/packages/cisco_meraki/manifest.yml @@ -1,13 +1,14 @@ format_version: 1.0.0 name: cisco_meraki -title: "Cisco Meraki" +title: "Cisco Meraki Integration" version: 0.5.0 license: basic -description: "Collect events from Cisco Meraki Syslog server." +description: "Collect alerts via Cisco Meraki Webhook." type: integration categories: - network - security +release: experimental conditions: kibana.version: ^7.17.0 || ^8.0.0 screenshots: @@ -21,12 +22,12 @@ icons: size: 32x32 type: image/svg+xml policy_templates: - - name: cisco_meraki - title: Cisco Meraki Syslogs - description: Collect syslog from Cisco Meraki + - name: cisco_meraki_alerts + title: Cisco Meraki alerts via Webhooks + description: Collect alerts from Cisco Meraki via Webhooks. inputs: - type: http_endpoint title: Collect Cisco Meraki events via Webhooks - description: Collecting Cisco Meraki stream events via Webhooks. + description: Collecting Cisco Meraki alerts via Webhooks. owner: github: elastic/security-external-integrations From 9d180703b378c458e555c5ce4f49c6e25138ef8a Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Fri, 18 Mar 2022 17:54:43 +1100 Subject: [PATCH 03/67] Add support for syslog and webhook --- .../docker/sample_logs/airmarshal-events.log | 349 ++++++++++++++++ .../_dev/deploy/docker/sample_logs/events.log | 389 ++++++++++++++++++ .../_dev/deploy/docker/sample_logs/flows.log | 235 +++++++++++ .../deploy/docker/sample_logs/ip-flow-end.log | 369 +++++++++++++++++ .../docker/sample_logs/ip-flow-start.log | 301 ++++++++++++++ .../docker/sample_logs/security-events.log | 1 + .../_dev/deploy/docker/sample_logs/urls.log | 261 ++++++++++++ .../_dev/test/pipeline/test-common-config.yml | 2 + .../_dev/test/pipeline/test-mx-events.json | 0 .../test-mx-events.json-expected.json | 0 .../test/system/test-meraki-http-config.yml | 0 .../test/system/test-meraki-https-config.yml | 0 .../agent/stream/http_endpoint.yml.hbs | 0 .../elasticsearch/ingest_pipeline/default.yml | 51 +++ .../data_stream/events/fields/agent.yml | 3 + .../data_stream/events/fields/base-fields.yml | 46 +++ .../data_stream/events/fields/ecs.yml | 232 +++++++++++ .../data_stream/events/fields/fields.yml | 72 ++++ .../data_stream/events/manifest.yml | 75 ++++ .../{log => events}/sample_event.json | 0 .../_dev/test/pipeline/test-common-config.yml | 8 +- .../log/_dev/test/pipeline/test-flows.log | 3 + .../pipeline/test-flows.log-expected.json | 104 +++++ .../log/agent/stream/logfile.yml.hbs | 27 ++ .../data_stream/log/agent/stream/tcp.yml.hbs | 24 ++ .../data_stream/log/agent/stream/udp.yml.hbs | 24 ++ .../elasticsearch/ingest_pipeline/default.yml | 71 ++-- .../elasticsearch/ingest_pipeline/flows.yml | 44 ++ .../data_stream/log/fields/base-fields.yml | 2 +- .../data_stream/log/fields/ecs.yml | 2 + .../data_stream/log/fields/fields.yml | 73 +--- .../cisco_meraki/data_stream/log/manifest.yml | 138 +++++-- packages/cisco_meraki/manifest.yml | 23 +- 33 files changed, 2788 insertions(+), 141 deletions(-) create mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/airmarshal-events.log create mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/events.log create mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/flows.log create mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-end.log create mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-start.log create mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log create mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/urls.log create mode 100644 packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-common-config.yml rename packages/cisco_meraki/data_stream/{log => events}/_dev/test/pipeline/test-mx-events.json (100%) rename packages/cisco_meraki/data_stream/{log => events}/_dev/test/pipeline/test-mx-events.json-expected.json (100%) rename packages/cisco_meraki/data_stream/{log => events}/_dev/test/system/test-meraki-http-config.yml (100%) rename packages/cisco_meraki/data_stream/{log => events}/_dev/test/system/test-meraki-https-config.yml (100%) rename packages/cisco_meraki/data_stream/{log => events}/agent/stream/http_endpoint.yml.hbs (100%) create mode 100644 packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml create mode 100644 packages/cisco_meraki/data_stream/events/fields/agent.yml create mode 100644 packages/cisco_meraki/data_stream/events/fields/base-fields.yml create mode 100644 packages/cisco_meraki/data_stream/events/fields/ecs.yml create mode 100644 packages/cisco_meraki/data_stream/events/fields/fields.yml create mode 100644 packages/cisco_meraki/data_stream/events/manifest.yml rename packages/cisco_meraki/data_stream/{log => events}/sample_event.json (100%) create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json create mode 100644 packages/cisco_meraki/data_stream/log/agent/stream/logfile.yml.hbs create mode 100644 packages/cisco_meraki/data_stream/log/agent/stream/tcp.yml.hbs create mode 100644 packages/cisco_meraki/data_stream/log/agent/stream/udp.yml.hbs create mode 100644 packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/airmarshal-events.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/airmarshal-events.log new file mode 100644 index 00000000000..ff083b1dee7 --- /dev/null +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/airmarshal-events.log @@ -0,0 +1,349 @@ +Mar 17, 2022 @ 12:13:24.321 <134>1 1647479604.334549372 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:13:00.485 <134>1 1647479580.487048774 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:12:32.000 <134>1 1647479552.047395997 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:12:17.281 <134>1 1647479537.315779167 Nash_AP_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:12:08.061 <134>1 1647479528.067423267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:11:33.487 <134>1 1647479493.484285651 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:11:29.877 <134>1 1647479489.882680227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:11:24.968 <134>1 1647479484.972992227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:11:06.927 <134>1 1647479466.965046920 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:11:01.791 <134>1 1647479461.791503607 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:10:59.172 <134>1 1647479459.181348678 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:10:56.666 <134>1 1647479456.670048547 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:10:45.779 <134>1 1647479445.786718001 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:10:42.038 <134>1 1647479442.047436097 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:09:59.251 <134>1 1647479399.287689295 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:09:36.405 <134>1 1647479376.407283267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:09:35.383 <134>1 1647479375.390251687 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:09:31.593 <134>1 1647479371.594697827 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:09:16.437 <134>1 1647479356.473299205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:09:14.453 <134>1 1647479354.489175845 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:09:13.411 <134>1 1647479353.446408965 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:09:12.545 <134>1 1647479352.553639439 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:09:10.425 <134>1 1647479350.428006877 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:09:10.424 <134>1 1647479350.457045605 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:09:06.759 <134>1 1647479346.794313756 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:09:05.548 <134>1 1647479345.577452767 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:09:01.811 <134>1 1647479341.816936841 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:08:38.111 <134>1 1647479318.128184987 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:08:33.456 <134>1 1647479313.473165785 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:08:19.148 <134>1 1647479299.143407174 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:08:19.105 <134>1 1647479299.115949027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:08:14.275 <134>1 1647479294.302067007 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:08:08.453 <134>1 1647479288.469042416 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:08:01.832 <134>1 1647479281.848397134 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:07:58.846 <134>1 1647479278.839671334 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:07:11.918 <134>1 1647479231.942342036 Nash_AP_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:07:07.406 <134>1 1647479227.438567311 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:07:02.919 <134>1 1647479222.927379747 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:07:02.919 <134>1 1647479222.927802947 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:07:02.697 <134>1 1647479222.728876109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:06:58.074 <134>1 1647479218.076400635 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:06:43.367 <134>1 1647479203.375371107 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:06:39.584 <134>1 1647479199.622640025 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:06:02.639 <134>1 1647479162.641725608 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:06:02.639 <134>1 1647479162.670104087 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:06:01.186 <134>1 1647479161.182241827 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:05:58.319 <134>1 1647479158.314592227 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:05:51.944 <134>1 1647479151.958073405 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:05:33.022 <134>1 1647479133.020606043 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:05:27.362 <134>1 1647479127.384572447 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:05:22.550 <134>1 1647479122.570882475 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:05:22.550 <134>1 1647479122.592807847 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:05:22.549 <134>1 1647479122.578597672 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:05:20.515 <134>1 1647479120.544286631 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:04:51.239 <134>1 1647479091.258858944 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:04:20.384 <134>1 1647479060.425068327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:03:57.666 <134>1 1647479037.677902643 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:03:56.756 <134>1 1647479036.783442760 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:03:40.950 <134>1 1647479020.949227955 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:02:54.928 <134>1 1647478974.912056258 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:02:46.092 <134>1 1647478966.089203455 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:02:30.851 <134>1 1647478950.860971410 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:02:20.104 <134>1 1647478940.142724327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:02:16.640 <134>1 1647478936.678862087 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:01:47.712 <134>1 1647478907.739529447 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 12:00:55.310 <134>1 1647478855.303776534 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:00:49.481 <134>1 1647478849.532951889 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:00:45.872 <134>1 1647478845.877942207 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:00:22.091 <134>1 1647478822.111692485 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:00:18.018 <134>1 1647478818.039157925 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 12:00:00.358 <134>1 1647478800.349145072 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:59:59.181 <134>1 1647478799.177625347 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:59:48.811 <134>1 1647478788.838283552 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:59:42.920 <134>1 1647478782.939898885 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:59:42.920 <134>1 1647478782.932299301 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:59:42.918 <134>1 1647478782.930289746 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:58:15.510 <134>1 1647478695.528431433 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:58:13.476 <134>1 1647478693.465185593 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:57:49.550 <134>1 1647478669.549413486 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:57:06.526 <134>1 1647478626.517046787 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:56:31.587 <134>1 1647478591.602996834 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:56:09.022 <134>1 1647478569.035635205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:56:07.729 <134>1 1647478567.751044590 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:55:59.585 <134>1 1647478559.571303907 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:55:58.496 <134>1 1647478558.540066660 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:55:54.945 <134>1 1647478554.934781027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:55:41.528 <134>1 1647478541.587558726 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:55:34.628 <134>1 1647478534.671579931 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:55:07.996 <134>1 1647478508.007504325 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:54:46.986 <134>1 1647478487.013169927 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:54:43.368 <134>1 1647478483.410677512 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:54:38.557 <134>1 1647478478.614722093 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:54:00.547 <134>1 1647478440.565782942 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:53:28.111 <134>1 1647478408.128821330 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:53:22.965 <134>1 1647478403.005811325 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:53:03.040 <134>1 1647478383.070405853 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:52:53.819 <134>1 1647478373.816434235 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:52:19.132 <134>1 1647478339.127895652 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:51:38.236 <134>1 1647478298.296851316 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:51:33.320 <134>1 1647478293.380396754 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:51:08.926 <134>1 1647478268.953109023 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:50:57.071 <134>1 1647478257.084985274 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:50:56.298 <134>1 1647478256.341194724 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:50:21.243 <134>1 1647478221.255609741 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:49:05.736 <134>1 1647478145.758483684 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:48:41.570 <134>1 1647478121.589518727 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:48:39.882 <134>1 1647478119.868477795 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:48:34.222 <134>1 1647478114.277373007 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:48:25.341 <134>1 1647478105.395836204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:48:22.482 <134>1 1647478102.536782923 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:48:12.122 <134>1 1647478092.108472035 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:48:07.611 <134>1 1647478087.649007204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:47:43.449 <134>1 1647478063.434847715 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:47:34.827 <134>1 1647478054.846444450 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:47:19.891 <134>1 1647478039.876640835 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:47:15.887 <134>1 1647478035.923601924 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:47:14.778 <134>1 1647478034.762765475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:47:06.466 <134>1 1647478026.502834244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:47:00.545 <134>1 1647478020.564810050 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:46:55.998 <134>1 1647478015.983013635 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:46:46.721 <134>1 1647478006.707247789 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:46:41.574 <134>1 1647478001.603867573 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:46:03.201 <134>1 1647477963.236026884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:45:58.894 <134>1 1647477958.900449163 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:45:53.857 <134>1 1647477953.907583508 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:45:53.741 <134>1 1647477953.724449475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:45:45.302 <134>1 1647477945.336342244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:45:44.116 <134>1 1647477944.121686758 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:45:40.358 <134>1 1647477940.363429956 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:45:29.997 <134>1 1647477930.038516204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:45:27.187 <134>1 1647477927.225784460 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:45:20.701 <134>1 1647477920.683178115 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:45:20.474 <134>1 1647477920.510699794 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:44:51.992 <134>1 1647477891.986568005 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:44:41.292 <134>1 1647477881.304873506 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:44:33.788 <134>1 1647477873.769683395 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:44:32.756 <134>1 1647477872.782332783 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:44:31.682 <134>1 1647477871.675119845 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:44:24.062 <134>1 1647477864.088023180 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:54.786 <134>1 1647477834.810489249 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:48.861 <134>1 1647477828.886032606 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:48.860 <134>1 1647477828.885258686 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:48.759 <134>1 1647477828.799864712 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:45.161 <134>1 1647477825.209110701 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:45.019 <134>1 1647477825.021409913 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:43:44.993 <134>1 1647477825.024707684 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:43:41.362 <134>1 1647477821.364087032 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:16.374 <134>1 1647477796.382660565 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:16.373 <134>1 1647477796.382227661 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:16.372 <134>1 1647477796.381818586 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:15.377 <134>1 1647477795.407019364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:15.376 <134>1 1647477795.385494917 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:15.376 <134>1 1647477795.385835866 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:13.553 <134>1 1647477793.576467473 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:13.553 <134>1 1647477793.576769233 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:06.766 <134>1 1647477786.805604872 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:43:00.683 <134>1 1647477780.705460109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:42:58.351 <134>1 1647477778.398160444 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:42:53.571 <134>1 1647477773.586461164 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:42:44.121 <134>1 1647477764.149946084 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:42:44.121 <134>1 1647477764.145077176 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:42:44.120 <134>1 1647477764.143985243 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:42:44.120 <134>1 1647477764.144283174 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:42:43.215 <134>1 1647477763.225832662 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:42:23.994 <134>1 1647477744.039850991 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:42:13.425 <134>1 1647477733.453967364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:42:13.424 <134>1 1647477733.446493073 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:42:13.391 <134>1 1647477733.420037284 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:42:13.390 <134>1 1647477733.419042244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:42:13.389 <134>1 1647477733.411410011 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:41:56.387 <134>1 1647477716.431936901 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:41:56.386 <134>1 1647477716.431151781 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:41:56.384 <134>1 1647477716.429168101 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' + +Mar 17, 2022 @ 11:41:55.592 <134>1 1647477715.612600884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' + +Mar 17, 2022 @ 11:41:42.019 <134>1 1647477702.046252324 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5' diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/events.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/events.log new file mode 100644 index 00000000000..1250320cc3d --- /dev/null +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/events.log @@ -0,0 +1,389 @@ +Mar 17, 2022 @ 12:10:20.180 <134>1 1647479420.148681168 ATT_Primary events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 + +Mar 17, 2022 @ 12:09:07.264 <134>1 1647479347.230914786 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{273} established with SPIs c0036852(inbound) 0a3ecb6b(outbound) and TS 12.108.190.178/32[udp/l2f] === 74.51.152.224/32[udp/62587] + +Mar 17, 2022 @ 12:06:12.827 <134>1 1647479172.855481476 Nashville_MX100 events dhcp lease of ip 10.0.0.165 for client mac 28:29:86:1A:39:2D from router 10.0.0.1 on subnet 255.255.252.0 with dns 8.8.8.8, 8.8.4.4 + +Mar 17, 2022 @ 12:04:15.000 <134>1 1647479055.795119971 KT_SF_wireless events type=dfs_event channel='136' radio='2' + +Mar 17, 2022 @ 11:58:29.000 <134>1 1647478709.602354098 6F_South_West events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1478558813' + +Mar 17, 2022 @ 11:58:29.000 <134>1 1647478709.602628785 6F_South_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='10.146.118.117' arp_resp='0.093432188' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:F6' dhcp_resp='1.373967135' aid='1478558813' + +Mar 17, 2022 @ 11:58:25.000 <134>1 1647478705.599864412 6F_South_West events type=wpa_deauth radio='1' vap='1' client_mac='88:66:5A:38:45:A1' aid='1486258487' + +Mar 17, 2022 @ 11:58:25.000 <134>1 1647478705.600436912 6F_South_West events type=disassociation radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='108' duration='316.540953031' auth_neg_dur='0.508926659' last_auth_ago='316.027363704' is_wpa='1' arp_resp='0.992351127' arp_src='10.136.85.4' aid='1486258487' + +Mar 17, 2022 @ 11:58:24.000 <134>1 1647478704.513805918 6F_North_West events type=disassociation radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' duration='302.399831759' auth_neg_dur='0.008600417' last_auth_ago='302.387475249' is_wpa='1' aid='910537108' + +Mar 17, 2022 @ 11:58:19.000 <134>1 1647478699.528411077 6F_North_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='140' duration='307.308589154' auth_neg_dur='0.002363386' last_auth_ago='307.298502383' is_wpa='1' full_conn='0.716026823' ip_resp='0.716026823' ip_src='10.146.118.117' http_resp='3.341322499' arp_resp='0.090404532' arp_src='10.146.118.117' dhcp_lease_completed='1.403572864' dhcp_ip='10.146.118.117' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:CB' dhcp_resp='1.403572864' aid='185620206' + +Mar 17, 2022 @ 11:58:18.000 <134>1 1647478698.643493693 7_1 events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='250063808' + +Mar 17, 2022 @ 11:58:18.000 <134>1 1647478698.643628849 7_1 events type=disassociation radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='64' duration='303.039037593' auth_neg_dur='0.009699896' last_auth_ago='303.022124364' is_wpa='1' aid='250063808' + +Mar 17, 2022 @ 11:58:09.000 <134>1 1647478689.676616906 4_3 events type=disassociation radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='36' reason='34' instigator='1' duration='372.564160' auth_neg_dur='0.025363040' last_auth_ago='372.535533440' is_wpa='1' full_conn='0.091299200' ip_resp='0.091299200' ip_src='10.24.82.76' http_resp='1.959041120' arp_resp='0.161413120' arp_src='10.24.82.76' dns_server='10.128.128.128' dns_req_rtt='0.018259360' dns_resp='0.332719200' dhcp_lease_completed='0.166465760' dhcp_ip='10.24.82.76' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:26' dhcp_resp='0.166465760' aid='579764029' + +Mar 17, 2022 @ 11:57:58.000 <134>1 1647478678.648665694 KT_SF_wireless events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1931139111' + +Mar 17, 2022 @ 11:57:58.000 <134>1 1647478678.648887621 KT_SF_wireless events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='149' duration='304.579957040' auth_neg_dur='0.023276146' last_auth_ago='304.552626988' is_wpa='1' full_conn='-7928699.060057590' http_resp='3.332029061' arp_resp='0.184481250' arp_src='10.146.118.117' dhcp_lease_completed='1.470028697' dhcp_ip='10.146.118.117' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A7:41' dhcp_resp='1.470028697' aid='1931139111' + +Mar 17, 2022 @ 11:56:44.000 <134>1 1647478604.192048750 main_conf3 events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1073833963' + +Mar 17, 2022 @ 11:56:44.000 <134>1 1647478604.192922417 main_conf3 events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' reason='34' instigator='1' duration='452.993592104' auth_neg_dur='0.007313125' last_auth_ago='452.981426188' is_wpa='1' full_conn='-589126.080767116' http_resp='2.127261748' arp_resp='0.087406688' arp_src='10.84.159.54' dhcp_lease_completed='0.122614646' dhcp_ip='10.84.159.54' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:31:FB:65' dhcp_resp='0.122614646' aid='1073833963' + +Mar 17, 2022 @ 11:56:43.000 <134>1 1647478603.270665121 4_Front_Desk events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='122025436' + +Mar 17, 2022 @ 11:56:43.000 <134>1 1647478603.271350081 4_Front_Desk events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' reason='34' instigator='1' duration='449.587449308' auth_neg_dur='0.008350703' last_auth_ago='449.573738247' is_wpa='1' full_conn='-7885776.061734811' http_resp='0.041826277' arp_resp='0.079451614' arp_src='10.84.159.54' dhcp_lease_completed='0.133069272' dhcp_ip='10.84.159.54' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7C:74' dhcp_resp='0.133069272' aid='122025436' + +Mar 17, 2022 @ 11:56:40.000 <134>1 1647478600.668548801 4_Front_Desk events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='1867149989' + +Mar 17, 2022 @ 11:56:40.000 <134>1 1647478600.669228161 4_Front_Desk events type=disassociation radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='48' reason='34' instigator='1' duration='21047.673560946' auth_neg_dur='0.003433760' last_auth_ago='21047.665532466' is_wpa='1' full_conn='0.327943680' ip_resp='0.327943680' ip_src='10.24.82.76' http_resp='1039.548976352' arp_resp='145.951601159' arp_src='10.24.82.76' dns_server='10.128.128.128' dns_req_rtt='0.002354080' dns_resp='1038.394524672' dhcp_lease_completed='1038.511373472' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7C:74' dhcp_resp='1038.511373472' aid='1867149989' + +Mar 17, 2022 @ 11:56:28.000 <134>1 1647478588.237083320 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='816393088' + +Mar 17, 2022 @ 11:56:28.000 <134>1 1647478588.237462538 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' duration='362.467386945' auth_neg_dur='0.018815104' last_auth_ago='362.445392361' is_wpa='1' aid='816393088' + +Mar 17, 2022 @ 11:54:09.000 <134>1 1647478449.892356513 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='2123045445' + +Mar 17, 2022 @ 11:54:09.000 <134>1 1647478449.892960221 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='1' duration='304.806517223' auth_neg_dur='0.008075156' last_auth_ago='304.792009671' is_wpa='1' full_conn='-7928470.079940594' http_resp='1.875546979' arp_resp='0.063048802' arp_src='10.84.159.54' dns_server='10.128.128.128' dns_req_rtt='0.002257500' dns_resp='0.163227708' dhcp_lease_completed='0.091880781' dhcp_ip='10.84.159.54' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A7:41' dhcp_resp='0.091880781' aid='2123045445' + +Mar 17, 2022 @ 11:53:59.000 <134>1 1647478439.134217386 4_3 events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='6' reason='34' instigator='1' duration='300.872600160' auth_neg_dur='0.008558400' last_auth_ago='300.860743040' is_wpa='1' full_conn='-7928464.725906786' http_resp='1.399800160' arp_resp='0.099196960' arp_src='10.84.159.54' dns_server='10.128.128.128' dns_req_rtt='0.024177120' dns_resp='1.343550240' dhcp_lease_completed='0.099797120' dhcp_ip='10.84.159.54' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:26' dhcp_resp='0.099797120' aid='1587913555' + +Mar 17, 2022 @ 11:53:50.000 <134>1 1647478430.902320055 Luella_Bates_Ceiling events type=disassociation radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='64' reason='34' instigator='1' duration='307.729946894' auth_neg_dur='0.001928750' last_auth_ago='307.715445311' is_wpa='1' aid='1059121275' + +Mar 17, 2022 @ 11:53:31.000 <134>1 1647478411.783077546 4_3 events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='36' reason='34' instigator='1' duration='42.950104800' auth_neg_dur='0.004636' last_auth_ago='42.941972640' is_wpa='1' full_conn='2.707566240' ip_resp='2.707566240' ip_src='10.146.118.117' http_resp='3.446355680' arp_resp='0.180424320' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.018426400' dns_resp='2.864122720' dhcp_lease_completed='1.418512' dhcp_ip='10.146.118.117' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:26' dhcp_resp='1.418512' aid='1176770458' + +Mar 17, 2022 @ 11:53:29.000 <134>1 1647478409.720733066 4_3 events type=disassociation radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='36' reason='34' instigator='1' duration='92.524493920' auth_neg_dur='0.003232960' last_auth_ago='92.515783360' is_wpa='1' full_conn='6.004868960' ip_resp='6.004868960' ip_src='10.136.85.4' http_resp='6.055542720' arp_resp='0.058856480' arp_src='10.136.85.4' dns_server='10.128.128.128' dns_req_rtt='0.000932160' dns_resp='6.001859360' dhcp_lease_completed='1.911300320' dhcp_ip='10.136.85.4' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:26' dhcp_resp='1.911300320' aid='1059246983' + +Mar 17, 2022 @ 11:53:22.000 <134>1 1647478402.117726086 6F_North_West events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' rssi='20' aid='910537108' + +Mar 17, 2022 @ 11:53:22.000 <134>1 1647478402.118169836 6F_North_West events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='910537108' + +Mar 17, 2022 @ 11:53:22.000 <134>1 1647478402.126325721 6F_North_West events type=wpa_auth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='910537108' + +Mar 17, 2022 @ 11:53:21.000 <134>1 1647478401.385272388 6F_North_West events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' rssi='18' aid='1034533358' + +Mar 17, 2022 @ 11:53:21.000 <134>1 1647478401.421090826 6F_North_West events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='1034533358' + +Mar 17, 2022 @ 11:53:21.000 <134>1 1647478401.421217753 6F_North_West events type=disassociation radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' duration='0.039892500' auth_neg_failed='1' is_wpa='1' aid='1034533358' + +Mar 17, 2022 @ 11:53:20.000 <134>1 1647478400.067636091 6F_South_West events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='567650633' + +Mar 17, 2022 @ 11:53:20.000 <134>1 1647478400.067817966 6F_South_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' duration='20.635066714' auth_neg_dur='0.004943620' last_auth_ago='20.625529142' is_wpa='1' full_conn='0.248703710' ip_resp='0.248703710' ip_src='10.146.118.117' arp_resp='0.091848688' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.018233170' dns_resp='0.288612912' dhcp_lease_completed='1.376937800' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:F6' dhcp_resp='1.376937800' aid='567650633' + +Mar 17, 2022 @ 11:53:20.000 <134>1 1647478400.442523226 6F_South_West events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' rssi='22' aid='1478558813' + +Mar 17, 2022 @ 11:53:20.000 <134>1 1647478400.448088851 6F_South_West events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1478558813' + +Mar 17, 2022 @ 11:53:15.000 <134>1 1647478395.611807246 7_1 events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='64' rssi='13' aid='250063808' + +Mar 17, 2022 @ 11:53:15.000 <134>1 1647478395.621524954 7_1 events type=wpa_auth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='250063808' + +Mar 17, 2022 @ 11:53:12.000 <134>1 1647478392.227530360 6F_North_West events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='140' rssi='22' aid='185620206' + +Mar 17, 2022 @ 11:53:12.000 <134>1 1647478392.229912027 6F_North_West events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='185620206' + +Mar 17, 2022 @ 11:53:09.000 <134>1 1647478389.064141439 6F_South_West events type=association radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='108' rssi='16' aid='1486258487' + +Mar 17, 2022 @ 11:53:09.000 <134>1 1647478389.573086943 6F_South_West events type=wpa_auth radio='1' vap='1' client_mac='88:66:5A:38:45:A1' aid='1486258487' + +Mar 17, 2022 @ 11:52:59.000 <134>1 1647478379.076634990 6F_South_West events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='501214906' + +Mar 17, 2022 @ 11:52:59.000 <134>1 1647478379.077106004 6F_South_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' duration='23.523254708' auth_neg_dur='0.033581094' last_auth_ago='23.486121687' is_wpa='1' full_conn='1.497632758' ip_resp='1.577774112' ip_src='10.146.118.117' http_resp='1.497632758' arp_resp='0.081456302' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.017076406' dns_resp='1.407253539' dhcp_lease_completed='0.081560156' dhcp_ip='10.146.118.117' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:F6' dhcp_resp='0.081560156' aid='501214906' + +Mar 17, 2022 @ 11:52:59.000 <134>1 1647478379.437287646 6F_South_West events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' rssi='26' aid='567650633' + +Mar 17, 2022 @ 11:52:59.000 <134>1 1647478379.442250320 6F_South_West events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='567650633' + +Mar 17, 2022 @ 11:52:54.000 <134>1 1647478374.072976727 KT_SF_wireless events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='149' rssi='28' aid='1931139111' + +Mar 17, 2022 @ 11:52:54.000 <134>1 1647478374.073295842 KT_SF_wireless events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1931139111' + +Mar 17, 2022 @ 11:52:54.000 <134>1 1647478374.096252300 KT_SF_wireless events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1931139111' + +Mar 17, 2022 @ 11:52:48.000 <134>1 1647478368.836446826 4_3 events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='36' rssi='21' aid='1176770458' + +Mar 17, 2022 @ 11:52:48.000 <134>1 1647478368.841103786 4_3 events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1176770458' + +Mar 17, 2022 @ 11:52:35.000 <134>1 1647478355.557388757 6F_South_West events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' rssi='42' aid='501214906' + +Mar 17, 2022 @ 11:52:35.000 <134>1 1647478355.584394226 6F_South_West events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='501214906' + +Mar 17, 2022 @ 11:52:35.000 <134>1 1647478355.590970215 6F_South_West events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='501214906' + +Mar 17, 2022 @ 11:52:10.000 <134>1 1647478330.822338620 4_Front_Desk events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='653428312' + +Mar 17, 2022 @ 11:52:10.000 <134>1 1647478330.822747580 4_Front_Desk events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='48' reason='34' instigator='1' duration='22208.939088192' auth_neg_dur='0.001899520' last_auth_ago='22208.929382432' is_wpa='1' full_conn='3.015497921' ip_resp='3.016575681' ip_src='10.146.118.117' http_resp='3.015497921' arp_resp='2.778333441' dns_server='10.128.128.128' dns_req_rtt='0.017305440' dns_resp='2.924799041' dhcp_lease_completed='0.135817120' dhcp_ip='10.146.118.117' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7C:74' dhcp_resp='0.135817120' aid='653428312' + +Mar 17, 2022 @ 11:52:00.000 <134>1 1647478320.793079096 4_Front_Desk events type=disassociation radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='48' reason='34' instigator='1' duration='183.722684534' auth_neg_dur='0.008566115' last_auth_ago='183.710210614' is_wpa='1' full_conn='37.640332343' ip_resp='37.640332343' ip_src='10.136.85.4' arp_resp='4.930919068' arp_src='10.136.85.4' dns_server='10.128.128.128' dns_req_rtt='0.017465343' dns_resp='37.663653636' dhcp_lease_completed='37.780653347' dhcp_ip='10.136.85.4' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7C:74' dhcp_resp='37.780653347' aid='1114140300' + +Mar 17, 2022 @ 11:51:57.000 <134>1 1647478317.115696586 4_3 events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='36' rssi='11' aid='579764029' + +Mar 17, 2022 @ 11:51:57.000 <134>1 1647478317.141081706 4_3 events type=wpa_auth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='579764029' + +Mar 17, 2022 @ 11:51:57.000 <134>1 1647478317.201692746 4_3 events type=association radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='36' rssi='12' aid='1059246983' + +Mar 17, 2022 @ 11:51:57.000 <134>1 1647478317.204943946 4_3 events type=wpa_auth radio='1' vap='1' client_mac='88:66:5A:38:45:A1' aid='1059246983' + +Mar 17, 2022 @ 11:51:33.000 <134>1 1647478293.041614856 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1106368095' + +Mar 17, 2022 @ 11:51:32.000 <134>1 1647478292.995035976 4_all_hands events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' rssi='35' aid='1106368095' + +Mar 17, 2022 @ 11:50:43.000 <134>1 1647478243.054203798 4_all_hands events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' duration='1089.340407104' auth_neg_dur='0.009600960' last_auth_ago='1089.328127264' is_wpa='1' arp_resp='152.983108857' arp_src='10.157.105.180' aid='2090298755' + +Mar 17, 2022 @ 11:50:25.000 <134>1 1647478225.773247989 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' rssi='37' aid='816393088' + +Mar 17, 2022 @ 11:50:25.000 <134>1 1647478225.773930437 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='816393088' + +Mar 17, 2022 @ 11:50:25.000 <134>1 1647478225.792064239 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='816393088' + +Mar 17, 2022 @ 11:49:13.000 <134>1 1647478153.689244167 4_Front_Desk events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' rssi='32' aid='122025436' + +Mar 17, 2022 @ 11:49:13.000 <134>1 1647478153.697618697 4_Front_Desk events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='122025436' + +Mar 17, 2022 @ 11:49:11.000 <134>1 1647478151.218338157 4_Front_Desk events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' reason='1' instigator='2' duration='9286.992141445' auth_neg_dur='0.007549280' last_auth_ago='9286.981360165' is_wpa='1' arp_resp='0.040718720' arp_src='10.84.159.54' dhcp_lease_completed='0.042865120' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7C:74' dhcp_resp='0.042865120' aid='1655671710' + +Mar 17, 2022 @ 11:49:11.000 <134>1 1647478151.204143 main_conf3 events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' rssi='24' aid='1073833963' + +Mar 17, 2022 @ 11:49:11.000 <134>1 1647478151.211501 main_conf3 events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1073833963' + +Mar 17, 2022 @ 11:49:05.704 <134>1 1647478145.672779576 ATT_Primary events dhcp lease of ip 10.0.1.251 from mx mac 68:3A:1E:42:60:59 for client mac 00:0E:8E:6D:91:77 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 + +Mar 17, 2022 @ 11:49:05.000 <134>1 1647478145.092858273 KT_SF_wireless events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='1' rssi='48' aid='2123045445' + +Mar 17, 2022 @ 11:49:05.000 <134>1 1647478145.100953221 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='2123045445' + +Mar 17, 2022 @ 11:48:58.000 <134>1 1647478138.264891946 4_3 events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='6' rssi='29' aid='1587913555' + +Mar 17, 2022 @ 11:48:58.000 <134>1 1647478138.273470506 4_3 events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1587913555' + +Mar 17, 2022 @ 11:48:57.000 <134>1 1647478137.074281562 4_Front_Desk events type=association radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='48' rssi='46' aid='1114140300' + +Mar 17, 2022 @ 11:48:57.000 <134>1 1647478137.082870386 4_Front_Desk events type=wpa_auth radio='1' vap='1' client_mac='88:66:5A:38:45:A1' aid='1114140300' + +Mar 17, 2022 @ 11:48:54.000 <134>1 1647478134.099577037 4_all_hands events type=disassociation radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='149' reason='34' instigator='1' duration='4860.465314769' auth_neg_dur='0.005687040' last_auth_ago='4860.453872529' is_wpa='1' full_conn='0.235672800' ip_resp='0.235672800' ip_src='10.136.85.4' http_resp='1.757914721' arp_resp='0.022972480' arp_src='10.136.85.4' dns_server='10.128.128.128' dns_req_rtt='0.000779040' dns_resp='0.180302240' dhcp_lease_completed='0.030133920' dhcp_ip='10.136.85.4' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='0.030133920' aid='1249883413' + +Mar 17, 2022 @ 11:48:43.000 <134>1 1647478123.184931474 Luella_Bates_Ceiling events type=association radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='64' rssi='36' aid='1059121275' + +Mar 17, 2022 @ 11:48:43.000 <134>1 1647478123.186900870 Luella_Bates_Ceiling events type=wpa_auth radio='1' vap='1' client_mac='88:66:5A:38:45:A1' aid='1059121275' + +Mar 17, 2022 @ 11:48:13.056 <134>1 1647478093.022430458 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 12.108.190.178/32[udp/l2f] === 108.18.33.67/32[udp/l2f] + +Mar 17, 2022 @ 11:48:12.703 <134>1 1647478092.669153546 ATT_Primary events client_vpn_connect user id 'funmi.awopetu@keeptruckin.com' local ip 172.16.0.145 connected from 108.18.33.67 + +Mar 17, 2022 @ 11:48:12.063 <134>1 1647478092.029594666 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[241] established between 12.108.190.178[12.108.190.178]...108.18.33.67[192.168.1.201] + +Mar 17, 2022 @ 11:46:42.115 <134>1 1647478002.081497627 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{271} established with SPIs cd819030(inbound) 0faf07e5(outbound) and TS 12.108.190.178/32[udp/l2f] === 98.45.194.225/32[udp/55833] + +Mar 17, 2022 @ 11:40:05.917 <134>1 1647477605.882599199 ATT_Primary events client_vpn_disconnect user id 'khawar.baig@keeptruckin.com' local ip 172.16.0.172 connected from 103.255.5.106 + +Mar 17, 2022 @ 11:37:31.158 <134>1 1647477451.122662756 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[235] established between 12.108.190.178[12.108.190.178]...137.59.228.70[192.168.1.6] + +Mar 17, 2022 @ 11:37:31.023 <134>1 1647477450.988899148 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{265} established with SPIs cae9b02c(inbound) 0d344768(outbound) and TS 12.108.190.178/32[udp/l2f] === 98.45.194.225/32[udp/55833] + +Mar 17, 2022 @ 11:37:31.000 <134>1 1647477451.602070077 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='806124258' + +Mar 17, 2022 @ 11:37:31.000 <134>1 1647477451.602545337 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' duration='310.411436236' auth_neg_dur='0.015711042' last_auth_ago='310.391713267' is_wpa='1' aid='806124258' + +Mar 17, 2022 @ 11:37:24.000 <134>1 1647477444.338803828 4_CS events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' reason='34' instigator='1' duration='325.213055641' auth_neg_dur='0.007442080' last_auth_ago='325.201166041' is_wpa='1' aid='998108486' + +Mar 17, 2022 @ 11:37:05.964 <134>1 1647477425.929862558 ATT_Primary events Site-to-Site VPN: deleting IKE_SA l2tp-over-ipsec-1[234] between 12.108.190.178[12.108.190.178]...74.51.152.224[192.168.1.135] + +Mar 17, 2022 @ 11:37:00.096 <134>1 1647477420.061216910 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[240] established between 12.108.190.178[12.108.190.178]...74.51.152.224[192.168.1.135] + +Mar 17, 2022 @ 11:37:00.000 <134>1 1647477420.090705863 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1270961721' + +Mar 17, 2022 @ 11:37:00.000 <134>1 1647477420.091111436 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' duration='321.019712167' auth_neg_dur='0.013453281' last_auth_ago='321.003955656' is_wpa='1' aid='1270961721' + +Mar 17, 2022 @ 11:32:46.000 <134>1 1647477166.299180205 4_CS events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' reason='34' instigator='1' duration='341.530472928' auth_neg_dur='0.049730401' last_auth_ago='341.475916127' is_wpa='1' full_conn='-7927151.283802717' http_resp='0.837691041' arp_resp='0.717531521' arp_src='10.84.159.54' dns_server='10.128.128.128' dns_req_rtt='0.026888640' dns_resp='0.752516801' aid='1420025720' + +Mar 17, 2022 @ 11:32:33.000 <134>1 1647477153.716466454 4_all_hands events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' rssi='25' aid='2090298755' + +Mar 17, 2022 @ 11:32:33.000 <134>1 1647477153.726085494 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='2090298755' + +Mar 17, 2022 @ 11:32:21.000 <134>1 1647477141.195118164 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' rssi='35' aid='806124258' + +Mar 17, 2022 @ 11:32:21.000 <134>1 1647477141.195444154 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='806124258' + +Mar 17, 2022 @ 11:32:21.000 <134>1 1647477141.210829674 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='806124258' + +Mar 17, 2022 @ 11:32:06.000 <134>1 1647477126.400753378 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1680306279' + +Mar 17, 2022 @ 11:32:06.000 <134>1 1647477126.401283482 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' duration='310.867582121' auth_neg_dur='0.518303073' last_auth_ago='310.343277434' is_wpa='1' arp_resp='7.673308383' arp_src='10.84.159.54' dhcp_lease_completed='7.679418643' dhcp_ip='10.84.159.54' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A8:9F' dhcp_resp='7.679418643' aid='1680306279' + +Mar 17, 2022 @ 11:31:59.000 <134>1 1647477119.130190587 4_CS events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' rssi='20' aid='998108486' + +Mar 17, 2022 @ 11:31:59.000 <134>1 1647477119.137650587 4_CS events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='998108486' + +Mar 17, 2022 @ 11:31:58.000 <134>1 1647477118.815838121 4_all_hands events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' duration='644.912079223' auth_neg_dur='0.009778080' last_auth_ago='644.897841783' is_wpa='1' arp_resp='152.741953439' arp_src='10.157.105.180' aid='535200139' + +Mar 17, 2022 @ 11:31:55.000 <134>1 1647477115.899211484 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1092867449' + +Mar 17, 2022 @ 11:31:55.000 <134>1 1647477115.899335963 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='1' duration='328.074483510' auth_neg_dur='0.008111927' last_auth_ago='328.062226426' is_wpa='1' aid='1092867449' + +Mar 17, 2022 @ 11:31:39.000 <134>1 1647477099.073698645 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' rssi='38' aid='1270961721' + +Mar 17, 2022 @ 11:31:39.000 <134>1 1647477099.074258176 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1270961721' + +Mar 17, 2022 @ 11:31:39.000 <134>1 1647477099.087150155 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1270961721' + +Mar 17, 2022 @ 11:31:09.748 <134>1 1647477069.787080479 Nashville_MX100 events dhcp lease of ip 10.0.0.108 for client mac AC:17:C8:62:82:11 from router 10.0.0.1 on subnet 255.255.252.0 with dns 8.8.8.8, 8.8.4.4 + +Mar 17, 2022 @ 11:28:09.000 <134>1 1647476889.325701075 4_all_hands events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='6' reason='8' instigator='2' duration='17.391796166' auth_neg_dur='0.006058080' last_auth_ago='17.382771526' is_wpa='1' full_conn='-7927198.442460789' http_resp='16.577953766' arp_resp='13.411745925' arp_src='10.84.159.54' dns_server='10.128.128.128' dns_req_rtt='0.023505440' dns_resp='16.559012006' dhcp_lease_completed='14.706540165' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='14.706540165' aid='1171281888' + +Mar 17, 2022 @ 11:28:00.905 <134>1 1647476880.897705544 F6_R1_S2 events Port E0:CB:BC:01:E4:88/40 changed STP role from designated to disabled + +Mar 17, 2022 @ 11:28:00.897 <134>1 1647476880.861332690 F6_R1_S1 events port 40 status changed from 1Gfdx to down + +Mar 17, 2022 @ 11:27:51.000 <134>1 1647476871.936850669 4_all_hands events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='6' rssi='26' aid='1171281888' + +Mar 17, 2022 @ 11:27:51.000 <134>1 1647476871.942961389 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1171281888' + +Mar 17, 2022 @ 11:27:49.302 <134>1 1647476869.265391407 ATT_Primary events dhcp lease of ip 10.0.3.73 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:00:DD:98 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 + +Mar 17, 2022 @ 11:27:04.000 <134>1 1647476824.773514637 4_CS events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' rssi='24' aid='1420025720' + +Mar 17, 2022 @ 11:27:04.000 <134>1 1647476824.823269198 4_CS events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1420025720' + +Mar 17, 2022 @ 11:27:04.000 <134>1 1647476824.449909691 4_all_hands events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='6' duration='3280.479246042' auth_neg_dur='0.005284640' last_auth_ago='3280.470603322' is_wpa='1' arp_resp='0.088161440' arp_src='10.84.159.54' dns_server='10.128.128.128' dns_req_rtt='0.012561760' dns_resp='1.283098400' dhcp_lease_completed='0.096804320' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='0.096804320' aid='789757673' + +Mar 17, 2022 @ 11:26:56.000 <134>1 1647476816.058015840 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1680306279' + +Mar 17, 2022 @ 11:26:55.000 <134>1 1647476815.539692663 KT_SF_wireless events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' rssi='34' aid='1680306279' + +Mar 17, 2022 @ 11:26:27.000 <134>1 1647476787.828998599 KT_SF_wireless events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='1' rssi='41' aid='1092867449' + +Mar 17, 2022 @ 11:26:27.000 <134>1 1647476787.829403911 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1092867449' + +Mar 17, 2022 @ 11:26:27.000 <134>1 1647476787.837110057 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1092867449' + +Mar 17, 2022 @ 11:26:06.000 <134>1 1647476766.298516856 4_CS events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' reason='34' instigator='1' duration='311.255787796' auth_neg_dur='0.033532640' last_auth_ago='311.219160596' is_wpa='1' aid='355316894' + +Mar 17, 2022 @ 11:25:54.000 <134>1 1647476754.175990082 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='488315325' + +Mar 17, 2022 @ 11:25:54.000 <134>1 1647476754.176275916 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' duration='312.001999464' auth_neg_dur='0.010737812' last_auth_ago='311.986619100' is_wpa='1' aid='488315325' + +Mar 17, 2022 @ 11:25:38.000 <134>1 1647476738.663802268 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' duration='310.948342755' auth_neg_dur='0.014498698' last_auth_ago='310.931105567' is_wpa='1' aid='442252173' + +Mar 17, 2022 @ 11:25:29.000 <134>1 1647476729.948793847 6F_South events type=dfs_event channel='112' radio='2' + +Mar 17, 2022 @ 11:24:53.886 <134>1 1647476693.849901050 ATT_Primary events Site-to-Site VPN: deleting IKE_SA l2tp-over-ipsec-1[232] between 12.108.190.178[12.108.190.178]...98.45.194.225[192.168.55.85] + +Mar 17, 2022 @ 11:24:49.013 <134>1 1647476688.977196194 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[238] established between 12.108.190.178[12.108.190.178]...98.45.194.225[192.168.55.85] + +Mar 17, 2022 @ 11:24:37.754 <134>1 1647476677.718323694 ATT_Primary events dhcp lease of ip 10.0.3.254 from mx mac 68:3A:1E:42:60:59 for client mac AC:17:C8:62:56:DC from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 + +Mar 17, 2022 @ 11:21:50.417 <134>1 1647476510.380550361 ATT_Primary events client_vpn_connect user id 'khawar.baig@keeptruckin.com' local ip 172.16.0.172 connected from 103.255.5.106 + +Mar 17, 2022 @ 11:21:49.945 <134>1 1647476509.908796534 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{269} established with SPIs caab9da6(inbound) 0b3ed961(outbound) and TS 12.108.190.178/32[udp/l2f] === 103.255.5.106/32[udp/63366] + +Mar 17, 2022 @ 11:21:49.002 <134>1 1647476508.966275214 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[237] established between 12.108.190.178[12.108.190.178]...103.255.5.106[192.168.209.93] + +Mar 17, 2022 @ 11:21:37.883 <134>1 1647476497.846831957 ATT_Primary events Site-to-Site VPN: deleting IKE_SA l2tp-over-ipsec-1[235] between 12.108.190.178[12.108.190.178]...137.59.228.70[192.168.1.6] + +Mar 17, 2022 @ 11:21:37.867 <134>1 1647476497.831389163 ATT_Primary events Site-to-Site VPN: closing CHILD_SA net-1{266} with SPIs c53f27d7(inbound) (28253805 bytes) 0c14954a(outbound) (642061260 bytes) and TS 12.108.190.178/32[udp/l2f] === 137.59.228.70/32[udp/57085] + +Mar 17, 2022 @ 11:21:37.715 <134>1 1647476497.678584004 ATT_Primary events client_vpn_disconnect user id 'khawar.baig@keeptruckin.com' local ip 172.16.0.172 connected from 137.59.228.70 + +Mar 17, 2022 @ 11:21:13.000 <134>1 1647476473.908208658 4_all_hands events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' rssi='27' aid='535200139' + +Mar 17, 2022 @ 11:21:13.000 <134>1 1647476473.918027538 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='535200139' + +Mar 17, 2022 @ 11:21:06.938 <134>1 1647476466.901954544 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{268} established with SPIs c8ab43ea(inbound) 0fb3418d(outbound) and TS 12.108.190.178/32[udp/l2f] === 74.51.152.224/32[udp/62587] + +Mar 17, 2022 @ 11:20:55.000 <134>1 1647476455.045816260 4_CS events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' rssi='23' aid='355316894' + +Mar 17, 2022 @ 11:20:55.000 <134>1 1647476455.079370820 4_CS events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='355316894' + +Mar 17, 2022 @ 11:20:54.000 <134>1 1647476454.711760818 4_all_hands events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' duration='452.720491680' auth_neg_dur='0.007155040' last_auth_ago='452.708782080' is_wpa='1' arp_resp='0.089037600' arp_src='10.157.105.180' dhcp_lease_completed='0.097670400' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='0.097670400' aid='255927734' + +Mar 17, 2022 @ 11:20:42.000 <134>1 1647476442.178918847 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' rssi='33' aid='488315325' + +Mar 17, 2022 @ 11:20:42.000 <134>1 1647476442.179063222 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='488315325' + +Mar 17, 2022 @ 11:20:42.000 <134>1 1647476442.189655045 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='488315325' + +Mar 17, 2022 @ 11:20:27.000 <134>1 1647476427.718192117 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' rssi='34' aid='442252173' + +Mar 17, 2022 @ 11:20:27.000 <134>1 1647476427.722733211 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='442252173' + +Mar 17, 2022 @ 11:20:27.000 <134>1 1647476427.732691596 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='442252173' + +Mar 17, 2022 @ 11:16:04.011 <134>1 1647476163.974990346 ATT_Primary events client_vpn_disconnect user id 'sachin.thomas@keeptruckin.com' local ip 172.16.0.195 connected from 107.211.13.210 + +Mar 17, 2022 @ 11:15:08.000 <134>1 1647476108.806538974 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' duration='303.055563738' auth_neg_dur='0.015276927' last_auth_ago='303.035353165' is_wpa='1' aid='301389198' + +Mar 17, 2022 @ 11:13:22.000 <134>1 1647476002.002983538 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='255927734' + +Mar 17, 2022 @ 11:13:21.000 <134>1 1647476001.995806898 4_all_hands events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' rssi='31' aid='255927734' + +Mar 17, 2022 @ 11:12:05.696 <134>1 1647475925.660484636 ATT_Primary events dhcp lease of ip 10.0.3.107 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:40:D8 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 + +Mar 17, 2022 @ 11:10:21.000 <134>1 1647475821.160291151 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1966673591' + +Mar 17, 2022 @ 11:10:21.000 <134>1 1647475821.160569796 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' duration='27.766403166' auth_neg_dur='0.041169271' last_auth_ago='27.723097958' is_wpa='1' aid='1966673591' + +Mar 17, 2022 @ 11:10:20.000 <134>1 1647475820.832277778 4_all_hands events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' duration='238.762187040' auth_neg_dur='0.013115840' last_auth_ago='238.745483200' is_wpa='1' arp_resp='0.896543520' arp_src='10.157.105.180' dhcp_lease_completed='0.902431200' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='0.902431200' aid='250043676' + +Mar 17, 2022 @ 11:10:05.000 <134>1 1647475805.755902371 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' rssi='34' aid='301389198' + +Mar 17, 2022 @ 11:10:05.000 <134>1 1647475805.757513621 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='301389198' + +Mar 17, 2022 @ 11:10:05.000 <134>1 1647475805.771179767 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='301389198' + +Mar 17, 2022 @ 11:09:53.000 <134>1 1647475793.396298349 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' rssi='36' aid='1966673591' + +Mar 17, 2022 @ 11:09:53.000 <134>1 1647475793.398467932 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1966673591' + +Mar 17, 2022 @ 11:09:53.000 <134>1 1647475793.437468869 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1966673591' + +Mar 17, 2022 @ 11:08:17.000 <134>1 1647475697.611223663 7_1 events type=wpa_deauth radio='1' vap='1' client_mac='A0:78:17:AC:1E:89' aid='463161084' + +Mar 17, 2022 @ 11:08:17.000 <134>1 1647475697.611413767 7_1 events type=disassociation radio='1' vap='1' client_mac='A0:78:17:AC:1E:89' channel='64' duration='27.928247646' auth_neg_dur='0.003260052' last_auth_ago='27.917974' is_wpa='1' arp_resp='0.137193750' arp_src='10.31.165.9' dhcp_lease_completed='5.041739894' dhcp_ip='10.31.165.9' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:54:46:38' dhcp_resp='5.041739894' aid='463161084' + +Mar 17, 2022 @ 11:07:50.156 <134>1 1647475670.128529175 F6_R1_S2 events Port E0:CB:BC:01:E4:88/40 changed STP role from disabled to designated + +Mar 17, 2022 @ 11:07:50.138 <134>1 1647475670.113472052 F6_R1_S1 events port 40 status changed from down to 1Gfdx + +Mar 17, 2022 @ 11:07:49.000 <134>1 1647475669.690183830 7_1 events type=association radio='1' vap='1' client_mac='A0:78:17:AC:1E:89' channel='64' rssi='14' aid='463161084' + +Mar 17, 2022 @ 11:07:49.000 <134>1 1647475669.693449559 7_1 events type=wpa_auth radio='1' vap='1' client_mac='A0:78:17:AC:1E:89' aid='463161084' + +Mar 17, 2022 @ 11:06:22.000 <134>1 1647475582.073662898 4_all_hands events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' rssi='27' aid='250043676' + +Mar 17, 2022 @ 11:06:22.000 <134>1 1647475582.086798898 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='250043676' + +Mar 17, 2022 @ 11:04:21.425 <134>1 1647475461.389436302 ATT_Primary events dhcp lease of ip 10.0.3.229 from mx mac 68:3A:1E:42:60:59 for client mac B8:27:EB:F8:2C:34 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 + +Mar 17, 2022 @ 11:04:17.731 <134>1 1647475457.695340816 ATT_Primary events dhcp lease of ip 10.0.2.3 from mx mac 68:3A:1E:42:60:59 for client mac B8:27:EB:C2:3B:D2 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 + +Mar 17, 2022 @ 11:04:11.226 <134>1 1647475451.190810065 ATT_Primary events dhcp lease of ip 10.0.1.255 from mx mac 68:3A:1E:42:60:59 for client mac B8:27:EB:EA:DF:4B from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 + +Mar 17, 2022 @ 11:04:11.059 <134>1 1647475451.023393632 ATT_Primary events dhcp lease of ip 10.0.3.228 from mx mac 68:3A:1E:42:60:59 for client mac B8:27:EB:31:2A:F0 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 + +Mar 17, 2022 @ 11:00:40.723 <134>1 1647475240.685317994 ATT_Primary events client_vpn_connect user id 'khawar.baig@keeptruckin.com' local ip 172.16.0.172 connected from 137.59.228.70 + +Mar 17, 2022 @ 11:00:39.825 <134>1 1647475239.787091048 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{266} established with SPIs c53f27d7(inbound) 0c14954a(outbound) and TS 12.108.190.178/32[udp/l2f] === 137.59.228.70/32[udp/57085] + +Mar 17, 2022 @ 11:00:39.738 <134>1 1647475239.700724258 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[235] established between 12.108.190.178[12.108.190.178]...137.59.228.70[192.168.1.6] + +Mar 17, 2022 @ 10:58:40.801 <134>1 1647475120.763964611 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{265} established with SPIs cae9b02c(inbound) 0d344768(outbound) and TS 12.108.190.178/32[udp/l2f] === 98.45.194.225/32[udp/55833] + +Mar 17, 2022 @ 10:56:26.000 <134>1 1647474986.754846733 4_all_hands events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='921530910' + +Mar 17, 2022 @ 10:56:26.000 <134>1 1647474986.755114599 4_all_hands events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' reason='8' instigator='2' duration='306.715601681' auth_neg_dur='0.007460480' last_auth_ago='306.704412881' is_wpa='1' full_conn='-7925006.548833932' http_resp='0.196514400' arp_resp='0.021618720' arp_src='10.157.105.180' dns_server='10.128.128.128' dns_req_rtt='0.020013280' dns_resp='0.895795520' dhcp_lease_completed='72.979003707' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='72.979003707' aid='921530910' + +Mar 17, 2022 @ 10:56:21.000 <134>1 1647474981.690681036 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='840254242' + +Mar 17, 2022 @ 10:56:21.000 <134>1 1647474981.690964578 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' duration='302.071575998' auth_neg_dur='0.021768438' last_auth_ago='302.047996466' is_wpa='1' full_conn='-7925004.700578745' http_resp='0.348188020' arp_resp='0.087949583' arp_src='10.157.105.180' dns_server='10.128.128.128' dns_req_rtt='0.016751615' dns_resp='0.135021667' dhcp_lease_completed='0.097278542' dhcp_ip='10.157.105.180' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:11' dhcp_resp='0.097278542' aid='840254242' + +Mar 17, 2022 @ 10:56:13.000 <134>1 1647474973.228722301 4_CS events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' reason='34' instigator='1' duration='317.661799158' auth_neg_dur='0.018240' last_auth_ago='317.639298198' is_wpa='1' arp_resp='22.241890408' arp_src='10.157.105.180' dhcp_lease_completed='22.267249448' dhcp_ip='10.157.105.180' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:18' dhcp_resp='22.267249448' aid='1784592012' + +Mar 17, 2022 @ 10:56:07.000 <134>1 1647474967.336756050 4_Max events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' duration='380.988710382' auth_neg_dur='0.026468800' last_auth_ago='380.957422542' is_wpa='1' aid='1052954612' + +Mar 17, 2022 @ 10:56:05.211 <134>1 1647474965.238001536 Nashville_MX100 events dhcp lease of ip 10.0.0.94 for client mac AC:17:C8:62:62:64 from router 10.0.0.1 on subnet 255.255.252.0 with dns 8.8.8.8, 8.8.4.4 + +Mar 17, 2022 @ 10:54:41.000 <134>1 1647474881.420517548 4_3 events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1219993310' + +Mar 17, 2022 @ 10:54:41.000 <134>1 1647474881.420967308 4_3 events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' reason='34' instigator='1' duration='313.002078836' auth_neg_dur='0.007441760' last_auth_ago='312.991354196' is_wpa='1' ip_request_failed='1' ip_request_remote='172.20.20.20' ip_src='10.157.105.180' arp_resp='1.694616160' arp_src='10.157.105.180' dhcp_lease_completed='0.024290080' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:26' dhcp_resp='0.024290080' aid='1219993310' diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/flows.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/flows.log new file mode 100644 index 00000000000..b28eb162eed --- /dev/null +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/flows.log @@ -0,0 +1,235 @@ +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.289402144 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.476061795 ATT_Primary flows src=167.99.207.176 dst=12.108.190.178 protocol=tcp sport=54445 dport=44210 pattern: 1 all + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.596151424 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.606549891 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.0.34 mac=64:1C:AE:68:2A:01 protocol=tcp sport=15500 dport=49761 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.610435104 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.170 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=55395 dport=15500 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.620515225 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=15500 dport=55395 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.809731450 Nash_AP_4 flows allow src=10.0.0.234 dst=8.8.8.8 mac=64:1C:AE:68:2A:01 protocol=udp sport=58778 dport=53 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.835549254 Nash_AP_4 flows allow src=10.0.0.234 dst=3.222.255.68 mac=64:1C:AE:68:2A:01 protocol=tcp sport=54203 dport=443 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.083887003 Luella_Bates_Ceiling flows allow src=10.0.1.251 dst=142.251.46.238 mac=00:0E:8E:6D:91:77 protocol=tcp sport=55816 dport=80 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.179272917 Nash_AP_4 flows allow src=10.0.3.243 dst=173.194.219.102 mac=7C:2A:31:70:C7:18 protocol=udp sport=38752 dport=443 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.228886497 Nash_AP_4 flows allow src=10.0.3.243 dst=8.8.8.8 mac=7C:2A:31:70:C7:18 protocol=udp sport=50468 dport=53 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.234624064 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.3.255 mac=64:1C:B0:BA:F0:EC protocol=udp sport=34321 dport=15600 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.244864904 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.0.34 mac=64:1C:AE:68:2A:01 protocol=udp sport=56479 dport=15600 + +Mar 17, 2022 @ 12:03:08.000 <134>1 1647478988.250802574 Nash_AP_4 flows allow src=10.0.3.243 dst=108.177.122.94 mac=7C:2A:31:70:C7:18 protocol=udp sport=42111 dport=443 + +Mar 17, 2022 @ 12:03:07.000 <134>1 1647478987.255861347 KT_Nashville_wireless flows allow src=10.122.208.90 dst=17.248.200.4 mac=98:46:0A:BC:AF:5F protocol=tcp sport=58701 dport=443 + +Mar 17, 2022 @ 12:03:07.000 <134>1 1647478987.363359587 KT_Nashville_wireless flows allow src=10.122.208.90 dst=17.248.200.4 mac=98:46:0A:BC:AF:5F protocol=tcp sport=58702 dport=443 + +Mar 17, 2022 @ 12:03:07.000 <134>1 1647478987.506217293 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.3.255 mac=00:7C:2D:BD:76:F2 protocol=udp sport=45508 dport=15600 + +Mar 17, 2022 @ 12:03:07.000 <134>1 1647478987.501269824 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.170 mac=64:1C:B0:BA:F0:EC protocol=udp sport=34952 dport=15600 + +Mar 17, 2022 @ 12:03:07.000 <134>1 1647478987.508907307 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.170 mac=64:1C:AE:68:2A:01 protocol=udp sport=57122 dport=15600 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.469961028 Nash_AP_3 flows allow src=10.0.2.147 dst=173.194.219.138 mac=7C:2A:31:C1:1C:86 protocol=udp sport=35931 dport=443 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.494040914 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.234 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=54447 dport=15500 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.495233757 Nash_AP_4 flows allow src=10.0.0.234 dst=239.255.255.250 mac=64:1C:AE:68:2A:01 protocol=udp sport=47758 dport=15600 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.492670624 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=udp sport=52377 dport=15600 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.501673576 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.170 mac=64:1C:AE:68:2A:01 protocol=tcp sport=15500 dport=54447 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.504251486 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.234 mac=00:7C:2D:BD:76:F2 protocol=udp sport=46688 dport=15600 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.509609446 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=53624 dport=15500 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.503009984 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.170 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=15500 dport=53624 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.511106787 KT_Nashville_wireless flows allow src=10.122.208.90 dst=10.128.128.128 mac=98:46:0A:BC:AF:5F protocol=udp sport=51354 dport=53 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.537914947 KT_Nashville_wireless flows allow src=10.122.208.90 dst=17.248.200.4 mac=98:46:0A:BC:AF:5F protocol=tcp sport=58699 dport=443 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.654004092 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.170 mac=64:1C:AE:68:2A:01 protocol=tcp sport=49249 dport=15500 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.655925691 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.234 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=15500 dport=49249 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.675600009 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.0.34 mac=64:1C:AE:68:2A:01 protocol=tcp sport=53122 dport=15500 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.668720864 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=15500 dport=53122 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.720453827 KT_Nashville_wireless flows allow src=10.122.208.90 dst=17.248.200.4 mac=98:46:0A:BC:AF:5F protocol=tcp sport=58700 dport=443 + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.851949087 Nashville_MX100 flows src=190.171.137.146 dst=65.152.242.66 protocol=tcp sport=51393 dport=445 pattern: 1 all + +Mar 17, 2022 @ 12:03:06.000 <134>1 1647478986.002561027 KT_Nashville_wireless flows allow src=10.122.208.90 dst=173.223.192.54 mac=98:46:0A:BC:AF:5F protocol=tcp sport=58698 dport=443 + +Mar 17, 2022 @ 12:03:05.000 <134>1 1647478985.246678507 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.0.34 mac=64:1C:AE:68:2A:01 protocol=udp sport=42996 dport=15600 + +Mar 17, 2022 @ 12:03:05.000 <134>1 1647478985.252049900 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=50460 dport=15600 + +Mar 17, 2022 @ 12:03:05.000 <134>1 1647478985.414161611 ATT_Primary flows src=98.45.194.225 dst=12.108.190.178 protocol=udp sport=55833 dport=1701 pattern: 1 all + +Mar 17, 2022 @ 12:03:05.000 <134>1 1647478985.557232063 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49759 dport=15500 + +Mar 17, 2022 @ 12:03:05.000 <134>1 1647478985.569429211 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.0.34 mac=64:1C:AE:68:2A:01 protocol=tcp sport=15500 dport=49759 + +Mar 17, 2022 @ 12:03:05.000 <134>1 1647478985.589881354 Buffalo_appliance flows src=128.199.52.122 dst=38.122.36.131 protocol=tcp sport=56906 dport=32915 pattern: 1 all + +Mar 17, 2022 @ 12:03:05.000 <134>1 1647478985.575527423 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.170 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=55393 dport=15500 + +Mar 17, 2022 @ 12:03:05.000 <134>1 1647478985.586773814 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=15500 dport=55393 + +Mar 17, 2022 @ 12:03:05.000 <134>1 1647478985.959385507 KT_Nashville_wireless flows allow src=10.122.208.90 dst=10.128.128.128 mac=98:46:0A:BC:AF:5F protocol=udp sport=59964 dport=53 + +Mar 17, 2022 @ 12:03:05.000 <134>1 1647478985.233079103 Nash_AP_7 flows allow src=10.0.0.34 dst=239.255.255.250 mac=64:1C:B0:BA:F0:EC protocol=udp sport=50097 dport=15600 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.211701343 Nash_AP_7 flows allow src=10.0.3.254 dst=10.0.3.213 mac=3E:74:91:02:DB:E6 protocol=udp sport=5353 dport=5353 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.241618248 Nash_AP_4 flows allow src=10.0.3.243 dst=8.8.8.8 mac=7C:2A:31:70:C7:18 protocol=udp sport=52012 dport=53 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.228708547 KT_Nashville_wireless flows allow src=10.122.208.90 dst=10.128.128.128 mac=98:46:0A:BC:AF:5F protocol=udp sport=49797 dport=53 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.263991216 Nash_AP_4 flows allow src=10.0.3.243 dst=35.213.232.93 mac=7C:2A:31:70:C7:18 protocol=tcp sport=46828 dport=443 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.261853827 KT_Nashville_wireless flows allow src=10.122.208.90 dst=17.253.6.253 mac=98:46:0A:BC:AF:5F protocol=udp sport=61028 dport=123 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.282091267 KT_Nashville_wireless flows allow src=10.122.208.90 dst=17.253.6.125 mac=98:46:0A:BC:AF:5F protocol=udp sport=57344 dport=123 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.429578307 KT_Nashville_wireless flows allow src=10.122.208.90 dst=17.253.20.125 mac=98:46:0A:BC:AF:5F protocol=udp sport=53459 dport=123 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.492805232 Nash_AP_4 flows allow src=10.0.3.243 dst=35.213.232.93 mac=7C:2A:31:70:C7:18 protocol=tcp sport=46830 dport=443 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.507297982 Nash_AP_4 flows allow src=10.0.2.170 dst=239.255.255.250 mac=00:7C:2D:BD:76:F2 protocol=udp sport=56253 dport=15600 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.510384278 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.170 mac=64:1C:AE:68:2A:01 protocol=udp sport=40098 dport=15600 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.503585663 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.170 mac=64:1C:B0:BA:F0:EC protocol=udp sport=48692 dport=15600 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.610747907 KT_Nashville_wireless flows allow src=10.122.208.90 dst=10.128.128.128 mac=98:46:0A:BC:AF:5F protocol=udp sport=52779 dport=53 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.639046307 KT_Nashville_wireless flows allow src=10.122.208.90 dst=17.248.200.4 mac=98:46:0A:BC:AF:5F protocol=tcp sport=58697 dport=443 + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.880282561 Nashville_MX100 flows src=194.26.29.169 dst=205.171.61.44 protocol=tcp sport=48091 dport=16002 pattern: 1 all + +Mar 17, 2022 @ 12:03:04.000 <134>1 1647478984.927204291 ATT_Primary flows src=74.51.152.224 dst=12.108.190.178 protocol=udp sport=11822 dport=1701 pattern: 1 all + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.207922944 main_GlassConfRoom flows allow src=10.0.2.209 dst=10.0.0.1 mac=3E:19:49:88:DD:E9 protocol=udp sport=62327 dport=53 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.210294464 main_GlassConfRoom flows allow src=10.0.2.209 dst=17.248.245.6 mac=3E:19:49:88:DD:E9 protocol=tcp sport=65406 dport=443 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.360369567 ATT_Primary flows src=74.51.152.224 dst=12.108.190.178 protocol=udp sport=11822 dport=1701 pattern: 1 all + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.421119701 Nashville_MX100 flows src=62.233.50.173 dst=205.171.61.40 protocol=tcp sport=46236 dport=51873 pattern: 1 all + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.459775285 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.234 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=54445 dport=15500 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.464275274 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.170 mac=64:1C:AE:68:2A:01 protocol=tcp sport=15500 dport=54445 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.473916691 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=53622 dport=15500 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.471922302 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.170 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=15500 dport=53622 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.496271748 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.3.255 mac=64:1C:AE:68:2A:01 protocol=udp sport=51605 dport=15600 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.490102462 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=udp sport=36187 dport=15600 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.581995265 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.234 mac=00:7C:2D:BD:76:F2 protocol=udp sport=37511 dport=15600 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.602884975 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.170 mac=64:1C:AE:68:2A:01 protocol=tcp sport=49247 dport=15500 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.604996558 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.234 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=15500 dport=49247 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.617243736 Nashville_MX100 flows src=46.17.96.38 dst=205.171.61.40 protocol=tcp sport=48152 dport=2598 pattern: 1 all + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.629667737 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.0.34 mac=64:1C:AE:68:2A:01 protocol=tcp sport=53120 dport=15500 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.622439743 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=15500 dport=53120 + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.106520794 Nashville_MX100 flows src=46.17.96.38 dst=205.171.61.43 protocol=tcp sport=48152 dport=3542 pattern: 1 all + +Mar 17, 2022 @ 12:03:03.000 <134>1 1647478983.071210987 Luella_Bates_Ceiling flows allow src=10.0.1.251 dst=142.251.46.238 mac=00:0E:8E:6D:91:77 protocol=tcp sport=55815 dport=80 + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.232700542 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.3.255 mac=64:1C:B0:BA:F0:EC protocol=udp sport=39052 dport=15600 + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.246279776 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.0.34 mac=64:1C:AE:68:2A:01 protocol=udp sport=34786 dport=15600 + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.352799770 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=40351 dport=15600 + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.501246302 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49757 dport=15500 + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.514150094 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.0.34 mac=64:1C:AE:68:2A:01 protocol=tcp sport=15500 dport=49757 + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.520080702 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.170 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=55391 dport=15500 + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.533499775 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=15500 dport=55391 + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.584581349 Nashville_MX100 flows src=89.248.165.56 dst=205.171.61.45 protocol=tcp sport=50714 dport=3376 pattern: 1 all + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.667480943 4_Front_Desk flows allow src=10.198.201.145 dst=10.128.128.128 mac=2A:BD:6F:6A:A2:19 protocol=udp sport=60036 dport=53 + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.696520943 4_Front_Desk flows allow src=10.198.201.145 dst=17.248.245.50 mac=2A:BD:6F:6A:A2:19 protocol=tcp sport=56081 dport=443 + +Mar 17, 2022 @ 12:03:02.000 <134>1 1647478982.948713663 Nashville_MX100 flows src=222.186.46.200 dst=205.171.61.45 protocol=tcp sport=42260 dport=52981 pattern: 1 all + +Mar 17, 2022 @ 12:03:01.000 <134>1 1647478981.153028062 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.143 mac=64:1C:B0:BA:F0:EC protocol=udp sport=39584 dport=42757 + +Mar 17, 2022 @ 12:03:01.000 <134>1 1647478981.167740916 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.143 mac=64:1C:AE:68:2A:01 protocol=udp sport=48197 dport=42757 + +Mar 17, 2022 @ 12:03:01.000 <134>1 1647478981.175857815 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.2.143 mac=00:7C:2D:BD:76:F2 protocol=udp sport=37069 dport=42757 + +Mar 17, 2022 @ 12:03:01.000 <134>1 1647478981.409618160 Nashville_MX100 flows src=46.17.96.38 dst=205.171.61.43 protocol=tcp sport=48152 dport=7979 pattern: 1 all + +Mar 17, 2022 @ 12:03:01.000 <134>1 1647478981.508437522 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.3.255 mac=00:7C:2D:BD:76:F2 protocol=udp sport=44606 dport=15600 + +Mar 17, 2022 @ 12:03:01.000 <134>1 1647478981.499850622 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.170 mac=64:1C:B0:BA:F0:EC protocol=udp sport=56381 dport=15600 + +Mar 17, 2022 @ 12:03:01.000 <134>1 1647478981.511593064 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.170 mac=64:1C:AE:68:2A:01 protocol=udp sport=60324 dport=15600 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.156618461 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.143 mac=64:1C:B0:BA:F0:EC protocol=udp sport=46347 dport=42757 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.362078086 Nashville_MX100 flows src=146.88.240.4 dst=205.171.61.42 protocol=udp sport=50801 dport=5683 pattern: 1 all + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.432531904 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.234 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=54443 dport=15500 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.436605066 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.170 mac=64:1C:AE:68:2A:01 protocol=tcp sport=15500 dport=54443 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.448867252 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=53620 dport=15500 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.439844861 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.170 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=15500 dport=53620 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.496607370 Nash_AP_4 flows allow src=10.0.0.234 dst=239.255.255.250 mac=64:1C:AE:68:2A:01 protocol=udp sport=44243 dport=15600 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.493774621 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=udp sport=48147 dport=15600 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.506203050 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.234 mac=00:7C:2D:BD:76:F2 protocol=udp sport=58575 dport=15600 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.574942423 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.170 mac=64:1C:AE:68:2A:01 protocol=tcp sport=49245 dport=15500 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.576629739 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.234 mac=00:7C:2D:BD:76:F2 protocol=tcp sport=15500 dport=49245 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.591558431 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.0.34 mac=64:1C:AE:68:2A:01 protocol=tcp sport=53118 dport=15500 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.582422141 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=15500 dport=53118 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.770305353 4_all_hands flows allow src=10.213.203.232 dst=10.128.128.128 mac=88:66:5A:36:FC:86 protocol=udp sport=61848 dport=53 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.770527433 4_all_hands flows allow src=10.213.203.232 dst=10.128.128.128 mac=88:66:5A:36:FC:86 protocol=udp sport=40692 dport=53 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.797930153 4_all_hands flows allow src=10.213.203.232 dst=104.93.150.78 mac=88:66:5A:36:FC:86 protocol=tcp sport=60611 dport=443 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.164525014 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.2.143 mac=00:7C:2D:BD:76:F2 protocol=udp sport=37791 dport=42757 + +Mar 17, 2022 @ 12:03:00.000 <134>1 1647478980.165748562 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.143 mac=64:1C:AE:68:2A:01 protocol=udp sport=38332 dport=42757 + +Mar 17, 2022 @ 12:02:59.000 <134>1 1647478979.163757648 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.2.143 mac=00:7C:2D:BD:76:F2 protocol=udp sport=34263 dport=42757 + +Mar 17, 2022 @ 12:02:59.000 <134>1 1647478979.152716861 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.2.143 mac=64:1C:B0:BA:F0:EC protocol=udp sport=58577 dport=42757 + +Mar 17, 2022 @ 12:02:59.000 <134>1 1647478979.166245204 Nash_AP_4 flows allow src=10.0.0.234 dst=10.0.2.143 mac=64:1C:AE:68:2A:01 protocol=udp sport=36018 dport=42757 diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-end.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-end.log new file mode 100644 index 00000000000..5f6e5a374fb --- /dev/null +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-end.log @@ -0,0 +1,369 @@ +Mar 17, 2022 @ 12:08:45.923 <134>1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:45.878 <134>1 1647479325.842384731 ATT_Primary ip_flow_end src=10.0.3.116 dst=142.251.46.174 protocol=udp sport=38422 dport=443 translated_src_ip=12.108.190.178 translated_port=38422 + +Mar 17, 2022 @ 12:08:45.877 <134>1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:45.750 <134>1 1647479325.755292025 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36498 dport=80 translated_src_ip=65.152.242.66 translated_port=36498 + +Mar 17, 2022 @ 12:08:45.718 <134>1 1647479325.722063094 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36496 dport=80 translated_src_ip=65.152.242.66 translated_port=36496 + +Mar 17, 2022 @ 12:08:45.717 <134>1 1647479325.722042240 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36495 dport=80 translated_src_ip=65.152.242.66 translated_port=36495 + +Mar 17, 2022 @ 12:08:45.717 <134>1 1647479325.722055279 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36497 dport=80 translated_src_ip=65.152.242.66 translated_port=36497 + +Mar 17, 2022 @ 12:08:45.665 <134>1 1647479325.633248380 ATT_Primary ip_flow_end src=10.0.2.159 dst=142.250.189.234 protocol=udp sport=38936 dport=443 translated_src_ip=12.108.190.178 translated_port=38936 + +Mar 17, 2022 @ 12:08:45.622 <134>1 1647479325.627285500 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36493 dport=80 translated_src_ip=65.152.242.66 translated_port=36493 + +Mar 17, 2022 @ 12:08:45.622 <134>1 1647479325.627295737 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36494 dport=80 translated_src_ip=65.152.242.66 translated_port=36494 + +Mar 17, 2022 @ 12:08:45.524 <134>1 1647479325.529191651 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=10.0.3.255 protocol=udp sport=57022 dport=15600 translated_dst_ip=10.0.3.255 translated_port=15600 + +Mar 17, 2022 @ 12:08:45.432 <134>1 1647479325.433466020 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=52996 dport=53 translated_src_ip=65.152.242.66 translated_port=52996 + +Mar 17, 2022 @ 12:08:45.431 <134>1 1647479325.433452565 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51544 dport=53 translated_src_ip=65.152.242.66 translated_port=51544 + +Mar 17, 2022 @ 12:08:45.431 <134>1 1647479325.433459674 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=40053 dport=53 translated_src_ip=65.152.242.66 translated_port=40053 + +Mar 17, 2022 @ 12:08:45.430 <134>1 1647479325.433438863 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=60425 dport=53 translated_src_ip=65.152.242.66 translated_port=60425 + +Mar 17, 2022 @ 12:08:45.430 <134>1 1647479325.433445753 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=39888 dport=53 translated_src_ip=65.152.242.66 translated_port=39888 + +Mar 17, 2022 @ 12:08:45.429 <134>1 1647479325.433422561 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60641 dport=80 translated_src_ip=65.152.242.66 translated_port=60641 + +Mar 17, 2022 @ 12:08:45.429 <134>1 1647479325.433429257 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36492 dport=80 translated_src_ip=65.152.242.66 translated_port=36492 + +Mar 17, 2022 @ 12:08:45.428 <134>1 1647479325.433411524 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60640 dport=80 translated_src_ip=65.152.242.66 translated_port=60640 + +Mar 17, 2022 @ 12:08:45.247 <134>1 1647479325.214921066 ATT_Primary ip_flow_end src=10.0.2.183 dst=10.0.0.1 protocol=udp sport=63338 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:45.247 <134>1 1647479325.214929495 ATT_Primary ip_flow_end src=10.0.3.13 dst=142.251.46.174 protocol=udp sport=38881 dport=443 translated_src_ip=12.108.190.178 translated_port=38881 + +Mar 17, 2022 @ 12:08:45.127 <134>1 1647479325.129243922 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=47077 dport=53 translated_src_ip=65.152.242.66 translated_port=47077 + +Mar 17, 2022 @ 12:08:45.126 <134>1 1647479325.129237338 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=57656 dport=53 translated_src_ip=65.152.242.66 translated_port=57656 + +Mar 17, 2022 @ 12:08:45.125 <134>1 1647479325.129214312 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60639 dport=80 translated_src_ip=65.152.242.66 translated_port=60639 + +Mar 17, 2022 @ 12:08:45.125 <134>1 1647479325.129230094 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=56957 dport=53 translated_src_ip=65.152.242.66 translated_port=56957 + +Mar 17, 2022 @ 12:08:45.036 <134>1 1647479325.041526004 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=43368 dport=53 translated_src_ip=65.152.242.66 translated_port=43368 + +Mar 17, 2022 @ 12:08:45.036 <134>1 1647479325.041537380 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51329 dport=53 translated_src_ip=65.152.242.66 translated_port=51329 + +Mar 17, 2022 @ 12:08:44.719 <134>1 1647479324.686429609 ATT_Primary ip_flow_end src=10.0.2.242 dst=172.217.164.106 protocol=udp sport=37853 dport=443 translated_src_ip=12.108.190.178 translated_port=37853 + +Mar 17, 2022 @ 12:08:44.656 <134>1 1647479324.661538622 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36488 dport=80 translated_src_ip=65.152.242.66 translated_port=36488 + +Mar 17, 2022 @ 12:08:44.643 <134>1 1647479324.648290394 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60637 dport=80 translated_src_ip=65.152.242.66 translated_port=60637 + +Mar 17, 2022 @ 12:08:44.642 <134>1 1647479324.648279392 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60636 dport=80 translated_src_ip=65.152.242.66 translated_port=60636 + +Mar 17, 2022 @ 12:08:44.560 <134>1 1647479324.565734863 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36485 dport=80 translated_src_ip=65.152.242.66 translated_port=36485 + +Mar 17, 2022 @ 12:08:44.531 <134>1 1647479324.536081439 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36483 dport=80 translated_src_ip=65.152.242.66 translated_port=36483 + +Mar 17, 2022 @ 12:08:44.530 <134>1 1647479324.536067366 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60634 dport=80 translated_src_ip=65.152.242.66 translated_port=60634 + +Mar 17, 2022 @ 12:08:44.497 <134>1 1647479324.464810525 ATT_Primary ip_flow_end src=10.0.2.242 dst=10.0.0.1 protocol=udp sport=47387 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:44.310 <134>1 1647479324.309842258 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=33127 dport=53 translated_src_ip=65.152.242.66 translated_port=33127 + +Mar 17, 2022 @ 12:08:44.309 <134>1 1647479324.309829453 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=53921 dport=53 translated_src_ip=65.152.242.66 translated_port=53921 + +Mar 17, 2022 @ 12:08:44.309 <134>1 1647479324.309835674 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=52939 dport=53 translated_src_ip=65.152.242.66 translated_port=52939 + +Mar 17, 2022 @ 12:08:44.308 <134>1 1647479324.309816670 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=43935 dport=53 translated_src_ip=65.152.242.66 translated_port=43935 + +Mar 17, 2022 @ 12:08:44.308 <134>1 1647479324.309822966 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=44460 dport=53 translated_src_ip=65.152.242.66 translated_port=44460 + +Mar 17, 2022 @ 12:08:44.307 <134>1 1647479324.309809919 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=50807 dport=53 translated_src_ip=65.152.242.66 translated_port=50807 + +Mar 17, 2022 @ 12:08:44.306 <134>1 1647479324.309789804 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36482 dport=80 translated_src_ip=65.152.242.66 translated_port=36482 + +Mar 17, 2022 @ 12:08:44.306 <134>1 1647479324.309800715 Nashville_MX100 ip_flow_end src=10.0.0.34 dst=10.0.3.255 protocol=udp sport=56037 dport=15600 translated_dst_ip=10.0.3.255 translated_port=15600 + +Mar 17, 2022 @ 12:08:44.129 <134>1 1647479324.096659653 ATT_Primary ip_flow_end src=10.0.2.151 dst=34.209.229.236 protocol=tcp sport=33794 dport=443 translated_src_ip=12.108.190.178 translated_port=33794 + +Mar 17, 2022 @ 12:08:44.129 <134>1 1647479324.096678346 ATT_Primary ip_flow_end src=10.0.3.137 dst=142.250.191.46 protocol=udp sport=35104 dport=443 translated_src_ip=12.108.190.178 translated_port=35104 + +Mar 17, 2022 @ 12:08:44.022 <134>1 1647479324.027985302 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60629 dport=80 translated_src_ip=65.152.242.66 translated_port=60629 + +Mar 17, 2022 @ 12:08:44.000 <134>1 1647479324.003553954 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51549 dport=53 translated_src_ip=65.152.242.66 translated_port=51549 + +Mar 17, 2022 @ 12:08:43.999 <134>1 1647479324.003539348 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=47806 dport=53 translated_src_ip=65.152.242.66 translated_port=47806 + +Mar 17, 2022 @ 12:08:43.999 <134>1 1647479324.003546880 Nashville_MX100 ip_flow_end src=10.0.2.147 dst=64.233.185.101 protocol=udp sport=42683 dport=443 translated_src_ip=65.152.242.66 translated_port=42683 + +Mar 17, 2022 @ 12:08:43.998 <134>1 1647479324.003529049 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36477 dport=80 translated_src_ip=65.152.242.66 translated_port=36477 + +Mar 17, 2022 @ 12:08:43.997 <134>1 1647479324.003516729 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60628 dport=80 translated_src_ip=65.152.242.66 translated_port=60628 + +Mar 17, 2022 @ 12:08:43.915 <134>1 1647479323.920971598 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=33042 dport=53 translated_src_ip=65.152.242.66 translated_port=33042 + +Mar 17, 2022 @ 12:08:43.915 <134>1 1647479323.920984459 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=33075 dport=53 translated_src_ip=65.152.242.66 translated_port=33075 + +Mar 17, 2022 @ 12:08:43.736 <134>1 1647479323.703899120 ATT_Primary ip_flow_end src=10.0.2.151 dst=10.0.0.1 protocol=udp sport=33817 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:43.718 <134>1 1647479323.671864330 SMS_Data_Firewall ip_flow_end src=129.82.138.44 dst=208.82.138.146 protocol=icmp translated_dst_ip=208.82.138.146 + +Mar 17, 2022 @ 12:08:43.653 <134>1 1647479323.620721741 ATT_Primary ip_flow_end src=10.0.2.196 dst=142.250.189.234 protocol=udp sport=39231 dport=443 translated_src_ip=12.108.190.178 translated_port=39231 + +Mar 17, 2022 @ 12:08:43.627 <134>1 1647479323.632927472 Nashville_MX100 ip_flow_end src=10.0.2.143 dst=8.8.8.8 protocol=udp sport=36362 dport=53 translated_src_ip=65.152.242.66 translated_port=36362 + +Mar 17, 2022 @ 12:08:43.587 <134>1 1647479323.553835841 ATT_Primary ip_flow_end src=10.0.1.251 dst=142.251.46.238 protocol=tcp sport=55835 dport=80 translated_src_ip=12.108.190.178 translated_port=55835 + +Mar 17, 2022 @ 12:08:43.566 <134>1 1647479323.572063828 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36476 dport=80 translated_src_ip=65.152.242.66 translated_port=36476 + +Mar 17, 2022 @ 12:08:43.525 <134>1 1647479323.529375134 Nashville_MX100 ip_flow_end src=10.0.2.170 dst=10.0.3.255 protocol=udp sport=53960 dport=15600 translated_dst_ip=10.0.3.255 translated_port=15600 + +Mar 17, 2022 @ 12:08:43.524 <134>1 1647479323.529360954 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60625 dport=80 translated_src_ip=65.152.242.66 translated_port=60625 + +Mar 17, 2022 @ 12:08:43.524 <134>1 1647479323.529367761 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60623 dport=80 translated_src_ip=65.152.242.66 translated_port=60623 + +Mar 17, 2022 @ 12:08:43.523 <134>1 1647479323.529349434 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36474 dport=80 translated_src_ip=65.152.242.66 translated_port=36474 + +Mar 17, 2022 @ 12:08:43.449 <134>1 1647479323.416223143 ATT_Primary ip_flow_end src=172.16.0.115 dst=54.209.32.124 protocol=tcp sport=55399 dport=443 translated_src_ip=12.108.190.178 translated_port=55399 + +Mar 17, 2022 @ 12:08:43.448 <134>1 1647479323.416216211 ATT_Primary ip_flow_end src=10.0.2.183 dst=20.50.73.10 protocol=tcp sport=64774 dport=443 translated_src_ip=12.108.190.178 translated_port=64774 + +Mar 17, 2022 @ 12:08:43.435 <134>1 1647479323.387460311 ATT_Primary ip_flow_end src=10.0.3.229 dst=10.0.0.1 protocol=udp sport=59713 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:43.435 <134>1 1647479323.387463854 ATT_Primary ip_flow_end src=10.0.3.214 dst=10.0.0.1 protocol=udp sport=63524 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:43.434 <134>1 1647479323.387451672 ATT_Primary ip_flow_end src=10.0.3.77 dst=10.0.0.1 protocol=udp sport=50099 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:43.434 <134>1 1647479323.387456164 ATT_Primary ip_flow_end src=10.0.2.3 dst=10.0.0.1 protocol=udp sport=47107 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:43.433 <134>1 1647479323.387443702 ATT_Primary ip_flow_end src=10.0.1.255 dst=10.0.0.1 protocol=udp sport=41413 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:43.433 <134>1 1647479323.387447647 ATT_Primary ip_flow_end src=10.0.2.124 dst=10.0.0.1 protocol=udp sport=50916 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:43.431 <134>1 1647479323.387440100 ATT_Primary ip_flow_end src=10.0.3.228 dst=10.0.0.1 protocol=udp sport=57447 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:43.430 <134>1 1647479323.387435699 ATT_Primary ip_flow_end src=10.0.2.154 dst=10.0.0.1 protocol=udp sport=42113 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:43.429 <134>1 1647479323.387430829 ATT_Primary ip_flow_end src=10.0.3.77 dst=52.25.126.234 protocol=tcp sport=46170 dport=443 translated_src_ip=12.108.190.178 translated_port=46170 + +Mar 17, 2022 @ 12:08:43.428 <134>1 1647479323.387426771 ATT_Primary ip_flow_end src=10.0.2.124 dst=52.25.126.234 protocol=tcp sport=41778 dport=443 translated_src_ip=12.108.190.178 translated_port=41778 + +Mar 17, 2022 @ 12:08:43.426 <134>1 1647479323.387422534 ATT_Primary ip_flow_end src=10.0.1.255 dst=54.148.236.122 protocol=tcp sport=43178 dport=443 translated_src_ip=12.108.190.178 translated_port=43178 + +Mar 17, 2022 @ 12:08:43.425 <134>1 1647479323.387418612 ATT_Primary ip_flow_end src=10.0.2.154 dst=52.25.126.234 protocol=tcp sport=55870 dport=443 translated_src_ip=12.108.190.178 translated_port=55870 + +Mar 17, 2022 @ 12:08:43.423 <134>1 1647479323.387414771 ATT_Primary ip_flow_end src=10.0.3.229 dst=44.240.43.17 protocol=tcp sport=37490 dport=443 translated_src_ip=12.108.190.178 translated_port=37490 + +Mar 17, 2022 @ 12:08:43.421 <134>1 1647479323.387410882 ATT_Primary ip_flow_end src=10.0.2.3 dst=34.217.173.204 protocol=tcp sport=54038 dport=443 translated_src_ip=12.108.190.178 translated_port=54038 + +Mar 17, 2022 @ 12:08:43.419 <134>1 1647479323.387404909 ATT_Primary ip_flow_end src=10.0.3.228 dst=52.25.126.234 protocol=tcp sport=48886 dport=443 translated_src_ip=12.108.190.178 translated_port=48886 + +Mar 17, 2022 @ 12:08:43.403 <134>1 1647479323.409211731 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36472 dport=80 translated_src_ip=65.152.242.66 translated_port=36472 + +Mar 17, 2022 @ 12:08:43.403 <134>1 1647479323.409222633 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60621 dport=80 translated_src_ip=65.152.242.66 translated_port=60621 + +Mar 17, 2022 @ 12:08:43.267 <134>1 1647479323.268390473 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51532 dport=53 translated_src_ip=65.152.242.66 translated_port=51532 + +Mar 17, 2022 @ 12:08:43.266 <134>1 1647479323.268376456 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=54909 dport=53 translated_src_ip=65.152.242.66 translated_port=54909 + +Mar 17, 2022 @ 12:08:43.266 <134>1 1647479323.268383537 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=40089 dport=53 translated_src_ip=65.152.242.66 translated_port=40089 + +Mar 17, 2022 @ 12:08:43.265 <134>1 1647479323.268362521 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=36395 dport=53 translated_src_ip=65.152.242.66 translated_port=36395 + +Mar 17, 2022 @ 12:08:43.265 <134>1 1647479323.268369515 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=47608 dport=53 translated_src_ip=65.152.242.66 translated_port=47608 + +Mar 17, 2022 @ 12:08:43.264 <134>1 1647479323.268345567 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60620 dport=80 translated_src_ip=65.152.242.66 translated_port=60620 + +Mar 17, 2022 @ 12:08:43.264 <134>1 1647479323.268352553 Nashville_MX100 ip_flow_end src=10.0.2.202 dst=172.217.10.110 protocol=tcp sport=64254 dport=80 translated_src_ip=65.152.242.66 translated_port=64254 + +Mar 17, 2022 @ 12:08:43.263 <134>1 1647479323.268334420 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36469 dport=80 translated_src_ip=65.152.242.66 translated_port=36469 + +Mar 17, 2022 @ 12:08:43.146 <134>1 1647479323.113453910 ATT_Primary ip_flow_end src=10.0.3.131 dst=172.217.164.106 protocol=udp sport=43993 dport=443 translated_src_ip=12.108.190.178 translated_port=43993 + +Mar 17, 2022 @ 12:08:43.001 <134>1 1647479322.967971843 ATT_Primary ip_flow_end src=10.0.3.13 dst=172.217.164.106 protocol=udp sport=36767 dport=443 translated_src_ip=12.108.190.178 translated_port=36767 + +Mar 17, 2022 @ 12:08:43.000 <134>1 1647479322.967965569 ATT_Primary ip_flow_end src=10.0.2.242 dst=142.250.191.46 protocol=udp sport=37890 dport=443 translated_src_ip=12.108.190.178 translated_port=37890 + +Mar 17, 2022 @ 12:08:42.936 <134>1 1647479322.902340982 ATT_Primary ip_flow_end src=172.16.0.145 dst=8.8.8.8 protocol=udp sport=63016 dport=53 translated_src_ip=12.108.190.178 translated_port=63016 + +Mar 17, 2022 @ 12:08:42.935 <134>1 1647479322.902335825 ATT_Primary ip_flow_end src=10.0.3.13 dst=10.0.0.1 protocol=udp sport=57603 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:42.934 <134>1 1647479322.902329189 ATT_Primary ip_flow_end src=10.0.2.242 dst=142.250.191.46 protocol=udp sport=45276 dport=443 translated_src_ip=12.108.190.178 translated_port=45276 + +Mar 17, 2022 @ 12:08:42.916 <134>1 1647479322.921955880 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60618 dport=80 translated_src_ip=65.152.242.66 translated_port=60618 + +Mar 17, 2022 @ 12:08:42.915 <134>1 1647479322.921944646 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36467 dport=80 translated_src_ip=65.152.242.66 translated_port=36467 + +Mar 17, 2022 @ 12:08:42.869 <134>1 1647479322.874867829 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=55755 dport=53 translated_src_ip=65.152.242.66 translated_port=55755 + +Mar 17, 2022 @ 12:08:42.825 <134>1 1647479322.830708574 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=34365 dport=53 translated_src_ip=65.152.242.66 translated_port=34365 + +Mar 17, 2022 @ 12:08:42.824 <134>1 1647479322.830697654 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=48379 dport=53 translated_src_ip=65.152.242.66 translated_port=48379 + +Mar 17, 2022 @ 12:08:42.808 <134>1 1647479322.775483644 ATT_Primary ip_flow_end src=10.0.2.212 dst=10.0.0.1 protocol=udp sport=35959 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:42.808 <134>1 1647479322.775488249 ATT_Primary ip_flow_end src=10.0.2.212 dst=8.8.4.4 protocol=udp sport=14615 dport=53 translated_src_ip=12.108.190.178 translated_port=14615 + +Mar 17, 2022 @ 12:08:42.807 <134>1 1647479322.775477014 ATT_Primary ip_flow_end src=10.0.2.212 dst=10.0.0.1 protocol=udp sport=14615 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:42.640 <134>1 1647479322.606668368 ATT_Primary ip_flow_end src=10.0.2.249 dst=142.251.46.234 protocol=tcp sport=44536 dport=443 translated_src_ip=12.108.190.178 translated_port=44536 + +Mar 17, 2022 @ 12:08:42.639 <134>1 1647479322.606640529 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52984 dport=443 translated_src_ip=12.108.190.178 translated_port=52984 + +Mar 17, 2022 @ 12:08:42.639 <134>1 1647479322.606656776 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52992 dport=443 translated_src_ip=12.108.190.178 translated_port=52992 + +Mar 17, 2022 @ 12:08:42.463 <134>1 1647479322.465783941 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36466 dport=80 translated_src_ip=65.152.242.66 translated_port=36466 + +Mar 17, 2022 @ 12:08:42.437 <134>1 1647479322.442283769 Nashville_MX100 ip_flow_end src=10.0.0.200 dst=108.177.122.95 protocol=udp sport=40262 dport=443 translated_src_ip=65.152.242.66 translated_port=40262 + +Mar 17, 2022 @ 12:08:42.437 <134>1 1647479322.442290528 Nashville_MX100 ip_flow_end src=10.0.0.200 dst=216.58.195.131 protocol=udp sport=47024 dport=443 translated_src_ip=65.152.242.66 translated_port=47024 + +Mar 17, 2022 @ 12:08:42.436 <134>1 1647479322.442267841 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36464 dport=80 translated_src_ip=65.152.242.66 translated_port=36464 + +Mar 17, 2022 @ 12:08:42.436 <134>1 1647479322.442274597 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36465 dport=80 translated_src_ip=65.152.242.66 translated_port=36465 + +Mar 17, 2022 @ 12:08:42.435 <134>1 1647479322.442253536 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60613 dport=80 translated_src_ip=65.152.242.66 translated_port=60613 + +Mar 17, 2022 @ 12:08:42.282 <134>1 1647479322.288055012 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36462 dport=80 translated_src_ip=65.152.242.66 translated_port=36462 + +Mar 17, 2022 @ 12:08:42.282 <134>1 1647479322.288064431 Nashville_MX100 ip_flow_end src=10.0.0.200 dst=8.8.8.8 protocol=udp sport=27078 dport=53 translated_src_ip=65.152.242.66 translated_port=27078 + +Mar 17, 2022 @ 12:08:42.281 <134>1 1647479322.288043873 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36461 dport=80 translated_src_ip=65.152.242.66 translated_port=36461 + +Mar 17, 2022 @ 12:08:42.208 <134>1 1647479322.167703478 ATT_Primary ip_flow_end src=10.0.2.226 dst=35.190.71.73 protocol=tcp sport=55894 dport=443 translated_src_ip=12.108.190.178 translated_port=55894 + +Mar 17, 2022 @ 12:08:42.207 <134>1 1647479322.167695298 ATT_Primary ip_flow_end src=10.0.2.120 dst=10.0.0.1 protocol=udp sport=49501 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:42.207 <134>1 1647479322.167699347 ATT_Primary ip_flow_end src=10.0.2.120 dst=10.0.0.1 protocol=udp sport=51861 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:42.206 <134>1 1647479322.167691687 ATT_Primary ip_flow_end src=10.0.2.120 dst=10.0.0.1 protocol=udp sport=53511 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:42.205 <134>1 1647479322.167683334 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52995 dport=443 translated_src_ip=12.108.190.178 translated_port=52995 + +Mar 17, 2022 @ 12:08:42.205 <134>1 1647479322.167688025 ATT_Primary ip_flow_end src=10.0.2.142 dst=10.0.0.1 protocol=udp sport=56455 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:42.204 <134>1 1647479322.167675625 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52993 dport=443 translated_src_ip=12.108.190.178 translated_port=52993 + +Mar 17, 2022 @ 12:08:42.204 <134>1 1647479322.167679059 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52994 dport=443 translated_src_ip=12.108.190.178 translated_port=52994 + +Mar 17, 2022 @ 12:08:42.203 <134>1 1647479322.167667287 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52990 dport=443 translated_src_ip=12.108.190.178 translated_port=52990 + +Mar 17, 2022 @ 12:08:42.203 <134>1 1647479322.167671721 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52989 dport=443 translated_src_ip=12.108.190.178 translated_port=52989 + +Mar 17, 2022 @ 12:08:42.202 <134>1 1647479322.167660014 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52988 dport=443 translated_src_ip=12.108.190.178 translated_port=52988 + +Mar 17, 2022 @ 12:08:42.202 <134>1 1647479322.167663506 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52991 dport=443 translated_src_ip=12.108.190.178 translated_port=52991 + +Mar 17, 2022 @ 12:08:42.201 <134>1 1647479322.167650115 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52986 dport=443 translated_src_ip=12.108.190.178 translated_port=52986 + +Mar 17, 2022 @ 12:08:42.201 <134>1 1647479322.167656471 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52985 dport=443 translated_src_ip=12.108.190.178 translated_port=52985 + +Mar 17, 2022 @ 12:08:42.166 <134>1 1647479322.167572333 Nashville_MX100 ip_flow_end src=10.0.0.120 dst=8.8.8.8 protocol=udp sport=1696 dport=53 translated_src_ip=65.152.242.66 translated_port=1696 + +Mar 17, 2022 @ 12:08:42.165 <134>1 1647479322.167559240 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=38630 dport=53 translated_src_ip=65.152.242.66 translated_port=38630 + +Mar 17, 2022 @ 12:08:42.165 <134>1 1647479322.167565565 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=60739 dport=53 translated_src_ip=65.152.242.66 translated_port=60739 + +Mar 17, 2022 @ 12:08:42.164 <134>1 1647479322.167546260 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=50219 dport=53 translated_src_ip=65.152.242.66 translated_port=50219 + +Mar 17, 2022 @ 12:08:42.164 <134>1 1647479322.167552630 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=59576 dport=53 translated_src_ip=65.152.242.66 translated_port=59576 + +Mar 17, 2022 @ 12:08:42.163 <134>1 1647479322.167533125 Nashville_MX100 ip_flow_end src=10.0.0.118 dst=8.8.8.8 protocol=udp sport=1814 dport=53 translated_src_ip=65.152.242.66 translated_port=16644 + +Mar 17, 2022 @ 12:08:42.163 <134>1 1647479322.167539685 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=47457 dport=53 translated_src_ip=65.152.242.66 translated_port=47457 + +Mar 17, 2022 @ 12:08:42.162 <134>1 1647479322.167524106 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36460 dport=80 translated_src_ip=65.152.242.66 translated_port=36460 + +Mar 17, 2022 @ 12:08:42.161 <134>1 1647479322.167506853 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60607 dport=80 translated_src_ip=65.152.242.66 translated_port=60607 + +Mar 17, 2022 @ 12:08:42.161 <134>1 1647479322.167517744 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36459 dport=80 translated_src_ip=65.152.242.66 translated_port=36459 + +Mar 17, 2022 @ 12:08:41.796 <134>1 1647479321.803180323 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36458 dport=80 translated_src_ip=65.152.242.66 translated_port=36458 + +Mar 17, 2022 @ 12:08:41.796 <134>1 1647479321.803192898 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=60669 dport=53 translated_src_ip=65.152.242.66 translated_port=60669 + +Mar 17, 2022 @ 12:08:41.770 <134>1 1647479321.777340365 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=41625 dport=53 translated_src_ip=65.152.242.66 translated_port=41625 + +Mar 17, 2022 @ 12:08:41.724 <134>1 1647479321.731006694 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=58595 dport=53 translated_src_ip=65.152.242.66 translated_port=58595 + +Mar 17, 2022 @ 12:08:41.640 <134>1 1647479321.607863450 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52987 dport=443 translated_src_ip=12.108.190.178 translated_port=52987 + +Mar 17, 2022 @ 12:08:41.612 <134>1 1647479321.577021846 ATT_Primary ip_flow_end src=10.0.3.136 dst=142.251.46.238 protocol=udp sport=35522 dport=443 translated_src_ip=12.108.190.178 translated_port=35522 + +Mar 17, 2022 @ 12:08:41.612 <134>1 1647479321.577025487 ATT_Primary ip_flow_end src=10.0.2.159 dst=142.250.189.195 protocol=udp sport=38513 dport=443 translated_src_ip=12.108.190.178 translated_port=38513 + +Mar 17, 2022 @ 12:08:41.611 <134>1 1647479321.577012909 ATT_Primary ip_flow_end src=10.0.3.136 dst=10.0.0.1 protocol=udp sport=5474 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:41.611 <134>1 1647479321.577017779 ATT_Primary ip_flow_end src=10.0.2.120 dst=17.167.200.72 protocol=tcp sport=62081 dport=443 translated_src_ip=12.108.190.178 translated_port=62081 + +Mar 17, 2022 @ 12:08:41.610 <134>1 1647479321.577003916 ATT_Primary ip_flow_end src=10.0.2.167 dst=35.187.148.146 protocol=udp sport=36937 dport=443 translated_src_ip=12.108.190.178 translated_port=36937 + +Mar 17, 2022 @ 12:08:41.610 <134>1 1647479321.577008863 ATT_Primary ip_flow_end src=10.0.2.159 dst=10.0.0.1 protocol=udp sport=8412 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:41.609 <134>1 1647479321.576997889 ATT_Primary ip_flow_end src=10.0.2.99 dst=142.250.72.206 protocol=tcp sport=42770 dport=443 translated_src_ip=12.108.190.178 translated_port=42770 + +Mar 17, 2022 @ 12:08:41.582 <134>1 1647479321.588033791 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36456 dport=80 translated_src_ip=65.152.242.66 translated_port=36456 + +Mar 17, 2022 @ 12:08:41.316 <134>1 1647479321.321734034 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60604 dport=80 translated_src_ip=65.152.242.66 translated_port=60604 + +Mar 17, 2022 @ 12:08:41.316 <134>1 1647479321.321741209 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60605 dport=80 translated_src_ip=65.152.242.66 translated_port=60605 + +Mar 17, 2022 @ 12:08:41.315 <134>1 1647479321.321723168 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36453 dport=80 translated_src_ip=65.152.242.66 translated_port=36453 + +Mar 17, 2022 @ 12:08:41.189 <134>1 1647479321.196361961 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36452 dport=80 translated_src_ip=65.152.242.66 translated_port=36452 + +Mar 17, 2022 @ 12:08:41.189 <134>1 1647479321.196373160 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60601 dport=80 translated_src_ip=65.152.242.66 translated_port=60601 + +Mar 17, 2022 @ 12:08:41.004 <134>1 1647479320.968007147 ATT_Primary ip_flow_end src=172.16.0.65 dst=142.250.191.46 protocol=udp sport=58741 dport=443 translated_src_ip=12.108.190.178 translated_port=58741 + +Mar 17, 2022 @ 12:08:41.002 <134>1 1647479321.003851515 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=55242 dport=53 translated_src_ip=65.152.242.66 translated_port=55242 + +Mar 17, 2022 @ 12:08:41.002 <134>1 1647479321.003858114 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=56751 dport=53 translated_src_ip=65.152.242.66 translated_port=56751 + +Mar 17, 2022 @ 12:08:41.001 <134>1 1647479321.003838969 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=44075 dport=53 translated_src_ip=65.152.242.66 translated_port=44075 + +Mar 17, 2022 @ 12:08:41.001 <134>1 1647479321.003845427 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=37165 dport=53 translated_src_ip=65.152.242.66 translated_port=37165 + +Mar 17, 2022 @ 12:08:41.000 <134>1 1647479321.003825773 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=41858 dport=53 translated_src_ip=65.152.242.66 translated_port=41858 + +Mar 17, 2022 @ 12:08:41.000 <134>1 1647479321.003832498 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=35542 dport=53 translated_src_ip=65.152.242.66 translated_port=35542 + +Mar 17, 2022 @ 12:08:40.999 <134>1 1647479321.003810253 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60597 dport=80 translated_src_ip=65.152.242.66 translated_port=60597 + +Mar 17, 2022 @ 12:08:40.999 <134>1 1647479321.003816977 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36448 dport=80 translated_src_ip=65.152.242.66 translated_port=36448 + +Mar 17, 2022 @ 12:08:40.998 <134>1 1647479321.003794756 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60595 dport=80 translated_src_ip=65.152.242.66 translated_port=60595 + +Mar 17, 2022 @ 12:08:40.998 <134>1 1647479321.003803928 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60596 dport=80 translated_src_ip=65.152.242.66 translated_port=60596 + +Mar 17, 2022 @ 12:08:40.606 <134>1 1647479320.613067320 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=58528 dport=53 translated_src_ip=65.152.242.66 translated_port=58528 + +Mar 17, 2022 @ 12:08:40.606 <134>1 1647479320.613078666 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=59426 dport=53 translated_src_ip=65.152.242.66 translated_port=59426 + +Mar 17, 2022 @ 12:08:40.572 <134>1 1647479320.538064280 ATT_Primary ip_flow_end src=10.0.2.184 dst=10.0.0.1 protocol=udp sport=38731 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:40.572 <134>1 1647479320.538069001 ATT_Primary ip_flow_end src=10.0.3.136 dst=142.251.46.174 protocol=udp sport=38139 dport=443 translated_src_ip=12.108.190.178 translated_port=38139 + +Mar 17, 2022 @ 12:08:40.571 <134>1 1647479320.538056368 ATT_Primary ip_flow_end src=10.0.3.88 dst=10.0.0.1 protocol=udp sport=63706 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:40.571 <134>1 1647479320.538060297 ATT_Primary ip_flow_end src=10.0.3.88 dst=10.0.0.1 protocol=udp sport=50987 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:08:40.570 <134>1 1647479320.538049370 ATT_Primary ip_flow_end src=10.0.3.131 dst=35.187.148.146 protocol=udp sport=46252 dport=443 translated_src_ip=12.108.190.178 translated_port=46252 + +Mar 17, 2022 @ 12:08:40.482 <134>1 1647479320.490182870 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60594 dport=80 translated_src_ip=65.152.242.66 translated_port=60594 + +Mar 17, 2022 @ 12:08:40.225 <134>1 1647479320.233114192 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60593 dport=80 translated_src_ip=65.152.242.66 translated_port=60593 + +Mar 17, 2022 @ 12:08:40.205 <134>1 1647479320.212489408 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36441 dport=80 translated_src_ip=65.152.242.66 translated_port=36441 + +Mar 17, 2022 @ 12:08:40.205 <134>1 1647479320.212500605 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36442 dport=80 translated_src_ip=65.152.242.66 translated_port=36442 + +Mar 17, 2022 @ 12:08:40.089 <134>1 1647479320.097439118 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60590 dport=80 translated_src_ip=65.152.242.66 translated_port=60590 + +Mar 17, 2022 @ 12:08:40.065 <134>1 1647479320.073474353 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36439 dport=80 translated_src_ip=65.152.242.66 translated_port=36439 + +Mar 17, 2022 @ 12:08:39.873 <134>1 1647479319.875868880 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=60763 dport=53 translated_src_ip=65.152.242.66 translated_port=60763 + +Mar 17, 2022 @ 12:08:39.872 <134>1 1647479319.875855588 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=43583 dport=53 translated_src_ip=65.152.242.66 translated_port=43583 + +Mar 17, 2022 @ 12:08:39.872 <134>1 1647479319.875862262 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=59108 dport=53 translated_src_ip=65.152.242.66 translated_port=59108 diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-start.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-start.log new file mode 100644 index 00000000000..95b8f4fc174 --- /dev/null +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-start.log @@ -0,0 +1,301 @@ +Mar 17, 2022 @ 12:07:58.969 <134>1 1647479278.997155282 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=34294 dport=80 translated_src_ip=65.152.242.66 translated_port=34294 + +Mar 17, 2022 @ 12:07:58.968 <134>1 1647479278.995279215 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=45061 dport=53 translated_src_ip=65.152.242.66 translated_port=45061 + +Mar 17, 2022 @ 12:07:58.946 <134>1 1647479278.974067126 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=37401 dport=53 translated_src_ip=65.152.242.66 translated_port=37401 + +Mar 17, 2022 @ 12:07:58.944 <134>1 1647479278.911594876 ATT_Primary ip_flow_start src=10.0.3.138 dst=54.184.93.203 protocol=tcp sport=61272 dport=443 translated_src_ip=12.108.190.178 translated_port=61272 + +Mar 17, 2022 @ 12:07:58.939 <134>1 1647479278.966811719 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55276 dport=80 translated_src_ip=65.152.242.66 translated_port=55276 + +Mar 17, 2022 @ 12:07:58.933 <134>1 1647479278.901032047 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=61089 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:58.914 <134>1 1647479278.941969605 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51505 dport=53 translated_src_ip=65.152.242.66 translated_port=51505 + +Mar 17, 2022 @ 12:07:58.893 <134>1 1647479278.860932523 ATT_Primary ip_flow_start src=10.0.3.131 dst=142.251.46.195 protocol=tcp sport=35138 dport=80 translated_src_ip=12.108.190.178 translated_port=35138 + +Mar 17, 2022 @ 12:07:58.889 <134>1 1647479278.856701945 ATT_Primary ip_flow_start src=10.0.3.138 dst=96.16.172.131 protocol=tcp sport=61271 dport=443 translated_src_ip=12.108.190.178 translated_port=61271 + +Mar 17, 2022 @ 12:07:58.883 <134>1 1647479278.850684294 ATT_Primary ip_flow_start src=10.0.3.131 dst=10.0.0.1 protocol=udp sport=47098 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:58.853 <134>1 1647479278.820845702 ATT_Primary ip_flow_start src=10.0.3.131 dst=142.250.189.202 protocol=udp sport=37220 dport=443 translated_src_ip=12.108.190.178 translated_port=37220 + +Mar 17, 2022 @ 12:07:58.850 <134>1 1647479278.818562769 ATT_Primary ip_flow_start src=10.0.3.131 dst=10.0.0.1 protocol=udp sport=35344 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:58.847 <134>1 1647479278.812957736 ATT_Primary ip_flow_start src=10.0.2.167 dst=142.250.189.202 protocol=udp sport=33959 dport=443 translated_src_ip=12.108.190.178 translated_port=33959 + +Mar 17, 2022 @ 12:07:58.843 <134>1 1647479278.810074778 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.45.118 protocol=tcp sport=61270 dport=443 translated_src_ip=12.108.190.178 translated_port=61270 + +Mar 17, 2022 @ 12:07:58.843 <134>1 1647479278.810207697 ATT_Primary ip_flow_start src=10.0.2.167 dst=10.0.0.1 protocol=udp sport=53495 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:58.837 <134>1 1647479278.805088611 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=60861 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:58.806 <134>1 1647479278.833487044 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60132 dport=80 translated_src_ip=65.152.242.66 translated_port=60132 + +Mar 17, 2022 @ 12:07:58.781 <134>1 1647479278.808429355 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=53155 dport=53 translated_src_ip=65.152.242.66 translated_port=53155 + +Mar 17, 2022 @ 12:07:58.721 <134>1 1647479278.689565540 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.248.245.73 protocol=tcp sport=61269 dport=443 translated_src_ip=12.108.190.178 translated_port=61269 + +Mar 17, 2022 @ 12:07:58.700 <134>1 1647479278.664793096 ATT_Primary ip_flow_start src=10.0.2.242 dst=10.0.0.1 protocol=udp sport=3150 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:58.700 <134>1 1647479278.666845351 ATT_Primary ip_flow_start src=10.0.2.242 dst=142.251.46.195 protocol=udp sport=39899 dport=443 translated_src_ip=12.108.190.178 translated_port=39899 + +Mar 17, 2022 @ 12:07:58.696 <134>1 1647479278.723917010 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55272 dport=80 translated_src_ip=65.152.242.66 translated_port=55272 + +Mar 17, 2022 @ 12:07:58.673 <134>1 1647479278.701294974 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=41670 dport=53 translated_src_ip=65.152.242.66 translated_port=41670 + +Mar 17, 2022 @ 12:07:58.597 <134>1 1647479278.625342929 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55271 dport=80 translated_src_ip=65.152.242.66 translated_port=55271 + +Mar 17, 2022 @ 12:07:58.574 <134>1 1647479278.601614993 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=41245 dport=53 translated_src_ip=65.152.242.66 translated_port=41245 + +Mar 17, 2022 @ 12:07:58.572 <134>1 1647479278.597895239 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55270 dport=80 translated_src_ip=65.152.242.66 translated_port=55270 + +Mar 17, 2022 @ 12:07:58.404 <134>1 1647479278.372025402 ATT_Primary ip_flow_start src=10.0.3.138 dst=104.85.162.38 protocol=tcp sport=61268 dport=443 translated_src_ip=12.108.190.178 translated_port=61268 + +Mar 17, 2022 @ 12:07:58.401 <134>1 1647479278.427304590 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60128 dport=80 translated_src_ip=65.152.242.66 translated_port=60128 + +Mar 17, 2022 @ 12:07:58.380 <134>1 1647479278.347834296 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=54900 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:58.349 <134>1 1647479278.315003639 ATT_Primary ip_flow_start src=10.0.3.137 dst=142.250.188.10 protocol=udp sport=37666 dport=443 translated_src_ip=12.108.190.178 translated_port=37666 + +Mar 17, 2022 @ 12:07:58.289 <134>1 1647479278.316091803 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60127 dport=80 translated_src_ip=65.152.242.66 translated_port=60127 + +Mar 17, 2022 @ 12:07:58.266 <134>1 1647479278.292770886 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=50766 dport=53 translated_src_ip=65.152.242.66 translated_port=50766 + +Mar 17, 2022 @ 12:07:58.200 <134>1 1647479278.166554399 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.26.253 protocol=udp sport=53132 dport=123 translated_src_ip=12.108.190.178 translated_port=53132 + +Mar 17, 2022 @ 12:07:58.127 <134>1 1647479278.093478777 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.248.245.73 protocol=tcp sport=61267 dport=443 translated_src_ip=12.108.190.178 translated_port=61267 + +Mar 17, 2022 @ 12:07:58.102 <134>1 1647479278.069749757 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.44.47 protocol=tcp sport=61266 dport=443 translated_src_ip=12.108.190.178 translated_port=61266 + +Mar 17, 2022 @ 12:07:58.058 <134>1 1647479278.025277282 ATT_Primary ip_flow_start src=10.0.2.179 dst=172.217.6.35 protocol=udp sport=39524 dport=443 translated_src_ip=12.108.190.178 translated_port=39524 + +Mar 17, 2022 @ 12:07:58.056 <134>1 1647479278.084155312 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55267 dport=80 translated_src_ip=65.152.242.66 translated_port=55267 + +Mar 17, 2022 @ 12:07:58.028 <134>1 1647479278.055700469 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=35934 dport=53 translated_src_ip=65.152.242.66 translated_port=35934 + +Mar 17, 2022 @ 12:07:57.998 <134>1 1647479277.966599242 ATT_Primary ip_flow_start src=10.0.2.77 dst=142.250.188.10 protocol=udp sport=39821 dport=443 translated_src_ip=12.108.190.178 translated_port=39821 + +Mar 17, 2022 @ 12:07:57.938 <134>1 1647479277.906637359 ATT_Primary ip_flow_start src=10.0.3.138 dst=184.51.48.183 protocol=tcp sport=61265 dport=443 translated_src_ip=12.108.190.178 translated_port=61265 + +Mar 17, 2022 @ 12:07:57.893 <134>1 1647479277.860313358 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=59274 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:57.881 <134>1 1647479277.908585651 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60125 dport=80 translated_src_ip=65.152.242.66 translated_port=60125 + +Mar 17, 2022 @ 12:07:57.867 <134>1 1647479277.895093058 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60124 dport=80 translated_src_ip=65.152.242.66 translated_port=60124 + +Mar 17, 2022 @ 12:07:57.857 <134>1 1647479277.885382547 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=39038 dport=53 translated_src_ip=65.152.242.66 translated_port=39038 + +Mar 17, 2022 @ 12:07:57.844 <134>1 1647479277.872779981 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=33119 dport=53 translated_src_ip=65.152.242.66 translated_port=33119 + +Mar 17, 2022 @ 12:07:57.840 <134>1 1647479277.868204057 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60123 dport=80 translated_src_ip=65.152.242.66 translated_port=60123 + +Mar 17, 2022 @ 12:07:57.821 <134>1 1647479277.788429226 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.44.47 protocol=tcp sport=61264 dport=443 translated_src_ip=12.108.190.178 translated_port=61264 + +Mar 17, 2022 @ 12:07:57.815 <134>1 1647479277.842987131 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=53241 dport=53 translated_src_ip=65.152.242.66 translated_port=53241 + +Mar 17, 2022 @ 12:07:57.689 <134>1 1647479277.717025085 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55263 dport=80 translated_src_ip=65.152.242.66 translated_port=55263 + +Mar 17, 2022 @ 12:07:57.664 <134>1 1647479277.692801875 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=50732 dport=53 translated_src_ip=65.152.242.66 translated_port=50732 + +Mar 17, 2022 @ 12:07:57.590 <134>1 1647479277.617880152 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55262 dport=80 translated_src_ip=65.152.242.66 translated_port=55262 + +Mar 17, 2022 @ 12:07:57.567 <134>1 1647479277.595081096 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=35277 dport=53 translated_src_ip=65.152.242.66 translated_port=35277 + +Mar 17, 2022 @ 12:07:57.526 <134>1 1647479277.554423030 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=10.0.3.255 protocol=udp sport=54016 dport=15600 translated_dst_ip=10.0.3.255 translated_port=15600 + +Mar 17, 2022 @ 12:07:57.472 <134>1 1647479277.499908469 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55261 dport=80 translated_src_ip=65.152.242.66 translated_port=55261 + +Mar 17, 2022 @ 12:07:57.448 <134>1 1647479277.475955876 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60119 dport=80 translated_src_ip=65.152.242.66 translated_port=60119 + +Mar 17, 2022 @ 12:07:57.441 <134>1 1647479277.468600617 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=52076 dport=53 translated_src_ip=65.152.242.66 translated_port=52076 + +Mar 17, 2022 @ 12:07:57.426 <134>1 1647479277.451939131 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=40692 dport=53 translated_src_ip=65.152.242.66 translated_port=40692 + +Mar 17, 2022 @ 12:07:57.372 <134>1 1647479277.340026579 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.5.204 protocol=tcp sport=61263 dport=443 translated_src_ip=12.108.190.178 translated_port=61263 + +Mar 17, 2022 @ 12:07:57.361 <134>1 1647479277.328776197 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.45.118 protocol=tcp sport=61262 dport=443 translated_src_ip=12.108.190.178 translated_port=61262 + +Mar 17, 2022 @ 12:07:57.297 <134>1 1647479277.324570896 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55259 dport=80 translated_src_ip=65.152.242.66 translated_port=55259 + +Mar 17, 2022 @ 12:07:57.267 <134>1 1647479277.294694819 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=50323 dport=53 translated_src_ip=65.152.242.66 translated_port=50323 + +Mar 17, 2022 @ 12:07:57.256 <134>1 1647479277.224406175 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.44.243 protocol=tcp sport=61261 dport=443 translated_src_ip=12.108.190.178 translated_port=61261 + +Mar 17, 2022 @ 12:07:57.239 <134>1 1647479277.207425758 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.5.204 protocol=tcp sport=61260 dport=443 translated_src_ip=12.108.190.178 translated_port=61260 + +Mar 17, 2022 @ 12:07:57.229 <134>1 1647479277.196602448 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=54473 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:57.155 <134>1 1647479277.183056752 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60117 dport=80 translated_src_ip=65.152.242.66 translated_port=60117 + +Mar 17, 2022 @ 12:07:57.131 <134>1 1647479277.157791298 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=48419 dport=53 translated_src_ip=65.152.242.66 translated_port=48419 + +Mar 17, 2022 @ 12:07:57.082 <134>1 1647479277.049968784 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.248.245.71 protocol=tcp sport=61258 dport=443 translated_src_ip=12.108.190.178 translated_port=61258 + +Mar 17, 2022 @ 12:07:57.077 <134>1 1647479277.044426419 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=54799 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:57.039 <134>1 1647479277.007446644 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.57.21.63 protocol=tcp sport=61257 dport=443 translated_src_ip=12.108.190.178 translated_port=61257 + +Mar 17, 2022 @ 12:07:57.032 <134>1 1647479276.999862970 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=60455 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.987 <134>1 1647479276.953151485 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.103 protocol=tcp sport=56107 dport=443 translated_src_ip=12.108.190.178 translated_port=56107 + +Mar 17, 2022 @ 12:07:56.967 <134>1 1647479276.933446634 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.103 protocol=tcp sport=56106 dport=443 translated_src_ip=12.108.190.178 translated_port=56106 + +Mar 17, 2022 @ 12:07:56.947 <134>1 1647479276.915561028 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.103 protocol=tcp sport=56105 dport=443 translated_src_ip=12.108.190.178 translated_port=56105 + +Mar 17, 2022 @ 12:07:56.945 <134>1 1647479276.973534167 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55257 dport=80 translated_src_ip=65.152.242.66 translated_port=55257 + +Mar 17, 2022 @ 12:07:56.938 <134>1 1647479276.905833550 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.103 protocol=tcp sport=56103 dport=443 translated_src_ip=12.108.190.178 translated_port=56103 + +Mar 17, 2022 @ 12:07:56.938 <134>1 1647479276.906692078 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.103 protocol=tcp sport=56104 dport=443 translated_src_ip=12.108.190.178 translated_port=56104 + +Mar 17, 2022 @ 12:07:56.924 <134>1 1647479276.890791159 ATT_Primary ip_flow_start src=10.0.3.148 dst=10.0.0.1 protocol=udp sport=52127 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.922 <134>1 1647479276.950879141 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=58885 dport=53 translated_src_ip=65.152.242.66 translated_port=58885 + +Mar 17, 2022 @ 12:07:56.852 <134>1 1647479276.819250190 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.223.56.162 protocol=tcp sport=61256 dport=443 translated_src_ip=12.108.190.178 translated_port=61256 + +Mar 17, 2022 @ 12:07:56.819 <134>1 1647479276.785529700 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=65129 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.784 <134>1 1647479276.811821727 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55256 dport=80 translated_src_ip=65.152.242.66 translated_port=55256 + +Mar 17, 2022 @ 12:07:56.775 <134>1 1647479276.794042616 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60114 dport=80 translated_src_ip=65.152.242.66 translated_port=60114 + +Mar 17, 2022 @ 12:07:56.760 <134>1 1647479276.788868399 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51304 dport=53 translated_src_ip=65.152.242.66 translated_port=51304 + +Mar 17, 2022 @ 12:07:56.749 <134>1 1647479276.777691824 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60113 dport=80 translated_src_ip=65.152.242.66 translated_port=60113 + +Mar 17, 2022 @ 12:07:56.744 <134>1 1647479276.771864925 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=44502 dport=53 translated_src_ip=65.152.242.66 translated_port=44502 + +Mar 17, 2022 @ 12:07:56.725 <134>1 1647479276.753421642 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=44302 dport=53 translated_src_ip=65.152.242.66 translated_port=44302 + +Mar 17, 2022 @ 12:07:56.721 <134>1 1647479276.688877095 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.16.119 protocol=tcp sport=54479 dport=443 translated_src_ip=12.108.190.178 translated_port=54479 + +Mar 17, 2022 @ 12:07:56.686 <134>1 1647479276.653997315 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.248.245.73 protocol=tcp sport=61255 dport=443 translated_src_ip=12.108.190.178 translated_port=61255 + +Mar 17, 2022 @ 12:07:56.648 <134>1 1647479276.616435134 ATT_Primary ip_flow_start src=10.0.2.134 dst=10.0.0.1 protocol=udp sport=54462 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.645 <134>1 1647479276.612689052 ATT_Primary ip_flow_start src=10.0.2.134 dst=10.0.0.1 protocol=udp sport=9280 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.645 <134>1 1647479276.613331545 ATT_Primary ip_flow_start src=10.0.2.134 dst=10.0.0.1 protocol=udp sport=44374 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.644 <134>1 1647479276.612486049 ATT_Primary ip_flow_start src=10.0.2.134 dst=8.8.4.4 protocol=udp sport=9280 dport=53 translated_src_ip=12.108.190.178 translated_port=9280 + +Mar 17, 2022 @ 12:07:56.636 <134>1 1647479276.604452465 ATT_Primary ip_flow_start src=10.0.2.226 dst=35.190.71.73 protocol=tcp sport=55938 dport=443 translated_src_ip=12.108.190.178 translated_port=55938 + +Mar 17, 2022 @ 12:07:56.621 <134>1 1647479276.587852067 ATT_Primary ip_flow_start src=10.0.3.138 dst=64.78.201.1 protocol=tcp sport=54478 dport=443 translated_src_ip=12.108.190.178 translated_port=54478 + +Mar 17, 2022 @ 12:07:56.595 <134>1 1647479276.563519626 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=58650 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.582 <134>1 1647479276.549724624 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.17.206 protocol=tcp sport=61254 dport=443 translated_src_ip=12.108.190.178 translated_port=61254 + +Mar 17, 2022 @ 12:07:56.579 <134>1 1647479276.607850267 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60112 dport=80 translated_src_ip=65.152.242.66 translated_port=60112 + +Mar 17, 2022 @ 12:07:56.568 <134>1 1647479276.535482512 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=52058 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.568 <134>1 1647479276.535551596 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=50720 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.557 <134>1 1647479276.524088269 ATT_Primary ip_flow_start src=10.0.2.157 dst=10.0.0.1 protocol=udp sport=64926 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.557 <134>1 1647479276.524167167 ATT_Primary ip_flow_start src=10.0.2.157 dst=10.0.0.1 protocol=udp sport=63072 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.555 <134>1 1647479276.583816822 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=55296 dport=53 translated_src_ip=65.152.242.66 translated_port=55296 + +Mar 17, 2022 @ 12:07:56.470 <134>1 1647479276.499254518 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60111 dport=80 translated_src_ip=65.152.242.66 translated_port=60111 + +Mar 17, 2022 @ 12:07:56.447 <134>1 1647479276.476168782 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51930 dport=53 translated_src_ip=65.152.242.66 translated_port=51930 + +Mar 17, 2022 @ 12:07:56.443 <134>1 1647479276.411222711 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.1.201 protocol=tcp sport=61253 dport=443 translated_src_ip=12.108.190.178 translated_port=61253 + +Mar 17, 2022 @ 12:07:56.429 <134>1 1647479276.396654330 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=63658 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.408 <134>1 1647479276.375948558 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.45.118 protocol=tcp sport=61252 dport=443 translated_src_ip=12.108.190.178 translated_port=61252 + +Mar 17, 2022 @ 12:07:56.347 <134>1 1647479276.375888646 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55251 dport=80 translated_src_ip=65.152.242.66 translated_port=55251 + +Mar 17, 2022 @ 12:07:56.324 <134>1 1647479276.291432443 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.248.245.73 protocol=tcp sport=61251 dport=443 translated_src_ip=12.108.190.178 translated_port=61251 + +Mar 17, 2022 @ 12:07:56.324 <134>1 1647479276.353410115 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=40706 dport=53 translated_src_ip=65.152.242.66 translated_port=40706 + +Mar 17, 2022 @ 12:07:56.320 <134>1 1647479276.349490624 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60109 dport=80 translated_src_ip=65.152.242.66 translated_port=60109 + +Mar 17, 2022 @ 12:07:56.299 <134>1 1647479276.267657916 ATT_Primary ip_flow_start src=10.0.2.196 dst=142.250.191.46 protocol=udp sport=33544 dport=443 translated_src_ip=12.108.190.178 translated_port=33544 + +Mar 17, 2022 @ 12:07:56.298 <134>1 1647479276.326854785 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=55431 dport=53 translated_src_ip=65.152.242.66 translated_port=55431 + +Mar 17, 2022 @ 12:07:56.294 <134>1 1647479276.320170373 Nashville_MX100 ip_flow_start src=10.0.0.34 dst=10.0.3.255 protocol=udp sport=49353 dport=15600 translated_dst_ip=10.0.3.255 translated_port=15600 + +Mar 17, 2022 @ 12:07:56.224 <134>1 1647479276.192600193 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.1.100.233 protocol=tcp sport=61250 dport=443 translated_src_ip=12.108.190.178 translated_port=61250 + +Mar 17, 2022 @ 12:07:56.217 <134>1 1647479276.185036673 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.73 protocol=tcp sport=56102 dport=443 translated_src_ip=12.108.190.178 translated_port=56102 + +Mar 17, 2022 @ 12:07:56.198 <134>1 1647479276.166053016 ATT_Primary ip_flow_start src=10.0.3.148 dst=10.0.0.1 protocol=udp sport=29334 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.188 <134>1 1647479276.154899513 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=34411 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.187 <134>1 1647479276.215300433 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55249 dport=80 translated_src_ip=65.152.242.66 translated_port=55249 + +Mar 17, 2022 @ 12:07:56.184 <134>1 1647479276.152390098 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=1448 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.181 <134>1 1647479276.149180769 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=22634 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.180 <134>1 1647479276.148110373 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=55087 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.178 <134>1 1647479276.146587555 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=39982 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.176 <134>1 1647479276.143831015 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=3521 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.165 <134>1 1647479276.132271895 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=4662 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.163 <134>1 1647479276.192430864 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=46485 dport=53 translated_src_ip=65.152.242.66 translated_port=46485 + +Mar 17, 2022 @ 12:07:56.161 <134>1 1647479276.129451123 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=48267 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.158 <134>1 1647479276.126391573 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=45784 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.156 <134>1 1647479276.123781223 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=11001 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.153 <134>1 1647479276.121109860 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=44181 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.152 <134>1 1647479276.118640913 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=32770 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.151 <134>1 1647479276.118588649 ATT_Primary ip_flow_start src=10.0.2.128 dst=8.8.4.4 protocol=udp sport=32770 dport=53 translated_src_ip=12.108.190.178 translated_port=32770 + +Mar 17, 2022 @ 12:07:56.125 <134>1 1647479276.151095441 Nashville_MX100 ip_flow_start src=10.0.0.226 dst=8.8.4.4 protocol=udp sport=1130 dport=53 translated_src_ip=65.152.242.66 translated_port=1130 + +Mar 17, 2022 @ 12:07:56.124 <134>1 1647479276.150964743 Nashville_MX100 ip_flow_start src=10.0.0.226 dst=8.8.4.4 protocol=udp sport=17460 dport=53 translated_src_ip=65.152.242.66 translated_port=17460 + +Mar 17, 2022 @ 12:07:56.124 <134>1 1647479276.151034151 Nashville_MX100 ip_flow_start src=10.0.0.226 dst=8.8.8.8 protocol=udp sport=17460 dport=53 translated_src_ip=65.152.242.66 translated_port=17460 + +Mar 17, 2022 @ 12:07:56.091 <134>1 1647479276.059114020 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.1.100.233 protocol=tcp sport=61249 dport=443 translated_src_ip=12.108.190.178 translated_port=61249 + +Mar 17, 2022 @ 12:07:56.084 <134>1 1647479276.052110945 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.1.100.233 protocol=tcp sport=61248 dport=443 translated_src_ip=12.108.190.178 translated_port=61248 + +Mar 17, 2022 @ 12:07:56.076 <134>1 1647479276.044309827 ATT_Primary ip_flow_start src=10.0.2.196 dst=142.250.191.46 protocol=tcp sport=39522 dport=443 translated_src_ip=12.108.190.178 translated_port=39522 + +Mar 17, 2022 @ 12:07:56.057 <134>1 1647479276.086011541 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=34265 dport=80 translated_src_ip=65.152.242.66 translated_port=34265 + +Mar 17, 2022 @ 12:07:56.054 <134>1 1647479276.009043754 ATT_Primary ip_flow_start src=10.0.2.196 dst=142.250.191.46 protocol=udp sport=37889 dport=443 translated_src_ip=12.108.190.178 translated_port=37889 + +Mar 17, 2022 @ 12:07:56.053 <134>1 1647479276.006385774 ATT_Primary ip_flow_start src=10.0.2.196 dst=10.0.0.1 protocol=udp sport=3248 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:56.035 <134>1 1647479276.062227771 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51964 dport=53 translated_src_ip=65.152.242.66 translated_port=51964 + +Mar 17, 2022 @ 12:07:55.879 <134>1 1647479275.846171633 ATT_Primary ip_flow_start src=10.0.2.167 dst=142.250.188.10 protocol=udp sport=43443 dport=443 translated_src_ip=12.108.190.178 translated_port=43443 + +Mar 17, 2022 @ 12:07:55.830 <134>1 1647479275.858121385 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=34264 dport=80 translated_src_ip=65.152.242.66 translated_port=34264 + +Mar 17, 2022 @ 12:07:55.807 <134>1 1647479275.835437032 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=55760 dport=53 translated_src_ip=65.152.242.66 translated_port=55760 + +Mar 17, 2022 @ 12:07:55.722 <134>1 1647479275.690043481 ATT_Primary ip_flow_start src=10.0.3.138 dst=104.18.30.182 protocol=tcp sport=61247 dport=80 translated_src_ip=12.108.190.178 translated_port=61247 + +Mar 17, 2022 @ 12:07:55.693 <134>1 1647479275.660078992 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=53158 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 + +Mar 17, 2022 @ 12:07:55.681 <134>1 1647479275.710368589 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55244 dport=80 translated_src_ip=65.152.242.66 translated_port=55244 + +Mar 17, 2022 @ 12:07:55.658 <134>1 1647479275.687623382 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55243 dport=80 translated_src_ip=65.152.242.66 translated_port=55243 + +Mar 17, 2022 @ 12:07:55.641 <134>1 1647479275.670267416 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55242 dport=80 translated_src_ip=65.152.242.66 translated_port=55242 + +Mar 17, 2022 @ 12:07:55.635 <134>1 1647479275.664684367 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=48499 dport=53 translated_src_ip=65.152.242.66 translated_port=48499 diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log new file mode 100644 index 00000000000..9eff07c0b05 --- /dev/null +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log @@ -0,0 +1 @@ +Nov 24, 2021 @ 05:13:18.000 <134>1 1637691198.348361125 ATT_Primary security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=142.250.189.238:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/urls.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/urls.log new file mode 100644 index 00000000000..5fde45ffa9f --- /dev/null +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/urls.log @@ -0,0 +1,261 @@ +Mar 17, 2022 @ 12:11:44.000 <134>1 1647479504.194655095 Nash_AP_5 urls src=10.0.2.224:64792 dst=104.16.205.58:443 mac=B0:CA:68:BD:DB:0B request: UNKNOWN https://app.envoy.com/... + +Mar 17, 2022 @ 12:11:44.000 <134>1 1647479504.179727976 Nashville_MX100 urls src=10.0.2.224:64792 dst=104.16.205.58:443 mac=B0:CA:68:BD:DB:0B request: UNKNOWN https://app.envoy.com/... + +Mar 17, 2022 @ 12:11:44.000 <134>1 1647479504.272447442 ATT_Primary urls src=10.0.1.29:60340 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.676404537 Nash_AP_4 urls src=10.0.0.234:56424 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.639520345 Nashville_MX100 urls src=10.0.0.234:56424 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.679829657 Nash_AP_4 urls src=10.0.0.234:35442 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.642902427 Nashville_MX100 urls src=10.0.0.234:35442 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.743107045 Nashville_MX100 urls src=10.0.0.234:56426 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.779951897 Nash_AP_4 urls src=10.0.0.234:56426 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.728229468 ATT_Primary urls src=10.0.1.29:60338 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.808052896 Nashville_MX100 urls src=10.0.0.234:33053 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.844916857 Nash_AP_4 urls src=10.0.0.234:33053 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.862598188 ATT_Primary urls src=10.0.1.29:60339 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.931492380 ATT_Primary urls src=10.0.3.148:64930 dst=104.18.156.47:443 mac=E0:CB:BC:50:7C:74 request: UNKNOWN https://app.envoy.com/... + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.970704657 4_Front_Desk urls src=10.17.185.77:64930 dst=104.18.156.47:443 mac=9A:02:87:1F:BF:FA request: UNKNOWN https://app.envoy.com/... + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.973639282 ATT_Primary urls src=10.0.2.77:46540 dst=142.250.191.74:443 mac=D8:C4:97:3A:60:9A request: UNKNOWN https://safebrowsing.googleapis.com/... + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.348215340 ATT_Primary urls src=10.0.1.29:60336 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.384440247 Nashville_MX100 urls src=10.0.0.234:33044 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/36/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.421255257 Nash_AP_4 urls src=10.0.0.234:33044 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/36/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.395105259 Nashville_MX100 urls src=10.0.0.234:33045 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/35/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.431949817 Nash_AP_4 urls src=10.0.0.234:33045 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/35/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.374967664 ATT_Primary urls src=10.0.1.29:60337 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.449538883 Nashville_MX100 urls src=10.0.0.234:33046 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.486407257 Nash_AP_4 urls src=10.0.0.234:33046 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.476338501 Nashville_MX100 urls src=10.0.0.234:35438 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.513205017 Nash_AP_4 urls src=10.0.0.234:35438 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.564621174 Nashville_MX100 urls src=10.0.0.234:33048 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.601477817 Nash_AP_4 urls src=10.0.0.234:33048 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.629055582 Nashville_MX100 urls src=10.0.0.234:33049 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.665932377 Nash_AP_4 urls src=10.0.0.234:33049 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.156354482 ATT_Primary urls src=10.0.3.5:59730 dst=17.248.245.51:443 mac=00:60:01:81:60:8B request: UNKNOWN https://gateway.icloud.com/... + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.031244318 ATT_Primary urls src=10.0.1.29:60330 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.055015672 ATT_Primary urls src=10.0.1.29:60331 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.292260355 Nashville_MX100 urls src=10.0.0.234:33034 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.329072857 Nash_AP_4 urls src=10.0.0.234:33034 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.296802572 Nashville_MX100 urls src=10.0.0.234:35426 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.333652537 Nash_AP_4 urls src=10.0.0.234:35426 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.364080643 Nashville_MX100 urls src=10.0.0.234:35427 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.400988857 Nash_AP_4 urls src=10.0.0.234:35427 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.430648377 Nash_AP_4 urls src=10.0.0.234:35428 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.393838043 Nashville_MX100 urls src=10.0.0.234:35428 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.415252826 ATT_Primary urls src=10.0.1.29:60332 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.468725626 Nashville_MX100 urls src=10.0.0.234:33038 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.505447097 Nash_AP_4 urls src=10.0.0.234:33038 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.458750509 ATT_Primary urls src=10.0.1.29:60333 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.538850904 Nashville_MX100 urls src=10.0.0.234:33039 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.575641817 Nash_AP_4 urls src=10.0.0.234:33039 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.547235638 Nashville_MX100 urls src=10.0.0.234:33040 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.584047417 Nash_AP_4 urls src=10.0.0.234:33040 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.550510761 Nashville_MX100 urls src=10.0.0.234:33041 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.587413497 Nash_AP_4 urls src=10.0.0.234:33041 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.629210599 Nashville_MX100 urls src=10.0.0.234:33042 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.666072857 Nash_AP_4 urls src=10.0.0.234:33042 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.754892857 Nash_AP_4 urls src=10.0.0.234:56417 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.718047981 Nashville_MX100 urls src=10.0.0.234:56417 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/02/55/USAJ3504707A_20220223T042302.png + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.765031780 ATT_Primary urls src=10.0.3.5:59729 dst=17.248.188.101:443 mac=00:60:01:81:60:8B request: UNKNOWN https://gateway.icloud.com/... + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.808764601 ATT_Primary urls src=10.0.1.29:60334 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.983843402 ATT_Primary urls src=10.0.1.29:60335 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.134133370 ATT_Primary urls src=10.0.1.29:60326 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.139223480 ATT_Primary urls src=10.0.2.242:46224 dst=142.250.188.14:443 mac=D8:C4:97:4F:1F:97 request: UNKNOWN https://meet.google.com/... + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.197837920 Nashville_MX100 urls src=10.0.0.234:33024 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.197949608 Nashville_MX100 urls src=10.0.0.234:35415 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.234489336 Nash_AP_4 urls src=10.0.0.234:33024 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.234629176 Nash_AP_4 urls src=10.0.0.234:35415 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.225228380 ATT_Primary urls src=10.0.1.29:60327 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.270555898 Nashville_MX100 urls src=10.0.0.234:56400 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.307444536 Nash_AP_4 urls src=10.0.0.234:56400 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.308665286 Nashville_MX100 urls src=10.0.0.234:33027 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.345588056 Nash_AP_4 urls src=10.0.0.234:33027 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.387436263 Nashville_MX100 urls src=10.0.0.234:35419 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/36/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.424231576 Nash_AP_4 urls src=10.0.0.234:35419 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/36/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.402875562 Nashville_MX100 urls src=10.0.2.202:64341 dst=172.217.10.110:80 mac=00:24:9B:6F:29:45 request: GET http://google.com/generate_204 + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.450173523 Nashville_MX100 urls src=10.0.0.234:33030 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.450271329 Nashville_MX100 urls src=10.0.0.234:35420 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/35/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.486928856 Nash_AP_4 urls src=10.0.0.234:33030 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.487045816 Nash_AP_4 urls src=10.0.0.234:35420 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/35/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.494358616 Nash_AP_4 urls src=10.0.0.234:33031 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.457478 Nashville_MX100 urls src=10.0.0.234:33031 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.525853171 Nashville_MX100 urls src=10.0.0.234:33032 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.562614296 Nash_AP_4 urls src=10.0.0.234:33032 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.594384378 ATT_Primary urls src=10.0.1.29:60328 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.625181098 Nashville_MX100 urls src=10.0.0.234:33033 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.662005817 Nash_AP_4 urls src=10.0.0.234:33033 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/02/45/USAJ3504708A_20200910T024247.png + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.604341047 ATT_Primary urls src=10.0.1.29:60329 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.604774714 ATT_Primary urls src=10.0.2.226:56020 dst=35.190.71.73:443 mac=00:11:32:B7:24:A1 request: UNKNOWN https://keeptruckin.twingate.com/... + +Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.644764296 ATT_Primary urls src=10.0.3.13:37582 dst=142.250.72.206:443 mac=D8:C4:97:D8:EA:D5 request: UNKNOWN https://play.google.com/... + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.037221772 ATT_Primary urls src=10.0.1.29:60321 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.099890367 Nashville_MX100 urls src=10.0.0.234:33012 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.136619256 Nash_AP_4 urls src=10.0.0.234:33012 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.102131185 Nashville_MX100 urls src=10.0.0.234:35404 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.139011576 Nash_AP_4 urls src=10.0.0.234:35404 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.189274080 Nashville_MX100 urls src=10.0.0.234:56388 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.226081976 Nash_AP_4 urls src=10.0.0.234:56388 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.221651878 Nashville_MX100 urls src=10.0.0.234:33015 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.258463576 Nash_AP_4 urls src=10.0.0.234:33015 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.246638090 ATT_Primary urls src=10.0.1.251:55918 dst=142.251.46.238:80 mac=00:0E:8E:6D:91:77 request: GET http://google.com/generate_204 + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.218082306 Luella_Bates_Ceiling urls src=10.0.1.251:55918 dst=142.251.46.238:80 mac=00:0E:8E:6D:91:77 request: GET http://google.com/generate_204 + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.306729473 Nashville_MX100 urls src=10.0.0.234:56390 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.343555096 Nash_AP_4 urls src=10.0.0.234:56390 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.318189530 ATT_Primary urls src=10.0.1.29:60322 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.366259896 Nashville_MX100 urls src=10.0.0.234:35408 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.366368966 Nashville_MX100 urls src=10.0.0.234:33018 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.402951736 Nash_AP_4 urls src=10.0.0.234:35408 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.403102456 Nash_AP_4 urls src=10.0.0.234:33018 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.371364934 Nashville_MX100 urls src=10.0.0.234:33019 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.408212056 Nash_AP_4 urls src=10.0.0.234:33019 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.424504614 Nashville_MX100 urls src=10.0.0.234:35411 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.461281336 Nash_AP_4 urls src=10.0.0.234:35411 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.452177943 ATT_Primary urls src=10.0.1.29:60323 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.547243282 Nashville_MX100 urls src=10.0.0.234:56395 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.584124536 Nash_AP_4 urls src=10.0.0.234:56395 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.744445737 ATT_Primary urls src=10.0.1.29:60324 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.834892877 ATT_Primary urls src=10.0.1.29:60325 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.047416376 Nash_AP_4 urls src=10.0.0.234:33002 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/01/95/USAJ3504714A_20210413T065435.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.010580710 Nashville_MX100 urls src=10.0.0.234:33002 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/01/95/USAJ3504714A_20210413T065435.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.050453816 Nash_AP_4 urls src=10.0.0.234:33003 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/01/95/USAJ3504714A_20210413T065435.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.013573704 Nashville_MX100 urls src=10.0.0.234:33003 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/01/95/USAJ3504714A_20210413T065435.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.106427964 Nashville_MX100 urls src=10.0.0.234:35395 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/01/95/USAJ3504714A_20210413T065435.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.143285336 Nash_AP_4 urls src=10.0.0.234:35395 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/01/95/USAJ3504714A_20210413T065435.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.103549930 ATT_Primary urls src=10.0.1.29:60316 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.174630616 Nash_AP_4 urls src=10.0.0.234:33005 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/01/95/USAJ3504714A_20210413T065435.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.138018595 Nashville_MX100 urls src=10.0.0.234:33005 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/01/95/USAJ3504714A_20210413T065435.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.208614839 Nashville_MX100 urls src=10.0.0.234:33006 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.245281816 Nash_AP_4 urls src=10.0.0.234:33006 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.217698165 ATT_Primary urls src=10.0.1.29:60317 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.259895658 Nashville_MX100 urls src=10.0.0.234:33007 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.296480216 Nash_AP_4 urls src=10.0.0.234:33007 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.296616216 Nash_AP_4 urls src=10.0.0.234:33008 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.259996637 Nashville_MX100 urls src=10.0.0.234:33008 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.305732216 Nash_AP_4 urls src=10.0.0.234:35400 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/01/61/USAJ3504713A_20210525T051718.png + +Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.268900596 Nashville_MX100 urls src=10.0.0.234:35400 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/01/61/USAJ3504713A_20210525T051718.png diff --git a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-common-config.yml b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-common-config.yml new file mode 100644 index 00000000000..c39dc386179 --- /dev/null +++ b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-common-config.yml @@ -0,0 +1,2 @@ +dynamic_fields: + event.ingested: ".*" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json similarity index 100% rename from packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json rename to packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json-expected.json b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json similarity index 100% rename from packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-mx-events.json-expected.json rename to packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-http-config.yml b/packages/cisco_meraki/data_stream/events/_dev/test/system/test-meraki-http-config.yml similarity index 100% rename from packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-http-config.yml rename to packages/cisco_meraki/data_stream/events/_dev/test/system/test-meraki-http-config.yml diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-https-config.yml b/packages/cisco_meraki/data_stream/events/_dev/test/system/test-meraki-https-config.yml similarity index 100% rename from packages/cisco_meraki/data_stream/log/_dev/test/system/test-meraki-https-config.yml rename to packages/cisco_meraki/data_stream/events/_dev/test/system/test-meraki-https-config.yml diff --git a/packages/cisco_meraki/data_stream/log/agent/stream/http_endpoint.yml.hbs b/packages/cisco_meraki/data_stream/events/agent/stream/http_endpoint.yml.hbs similarity index 100% rename from packages/cisco_meraki/data_stream/log/agent/stream/http_endpoint.yml.hbs rename to packages/cisco_meraki/data_stream/events/agent/stream/http_endpoint.yml.hbs diff --git a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml new file mode 100644 index 00000000000..c5959bcc06d --- /dev/null +++ b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml @@ -0,0 +1,51 @@ +--- +description: Pipeline for processing Cisco Meraki events +processors: +- set: + field: ecs.version + value: '8.0.0' +- set: + field: cisco_meraki.log + copy_from: json +## +# Clean up +## +- remove: + field: + - json + ignore_missing: true +- remove: + field: event.original + if: "ctx?.tags == null || !(ctx.tags.contains('preserve_original_event'))" + ignore_failure: true + ignore_missing: true +- script: + lang: painless + description: This script processor iterates over the whole document to remove fields with null values. + source: | + void handleMap(Map map) { + for (def x : map.values()) { + if (x instanceof Map) { + handleMap(x); + } else if (x instanceof List) { + handleList(x); + } + } + map.values().removeIf(v -> v == null || v == '' || (v instanceof Map && v.size() == 0) || (v instanceof List && v.size() == 0)); + } + void handleList(List list) { + for (def x : list) { + if (x instanceof Map) { + handleMap(x); + } else if (x instanceof List) { + handleList(x); + } + } + list.removeIf(v -> v == null || v == '' || (v instanceof Map && v.size() == 0) || (v instanceof List && v.size() == 0)); + } + handleMap(ctx); + +on_failure: +- set: + field: error.message + value: '{{ _ingest.on_failure_message }}' diff --git a/packages/cisco_meraki/data_stream/events/fields/agent.yml b/packages/cisco_meraki/data_stream/events/fields/agent.yml new file mode 100644 index 00000000000..b4f84cf84a4 --- /dev/null +++ b/packages/cisco_meraki/data_stream/events/fields/agent.yml @@ -0,0 +1,3 @@ +- name: input.type + type: keyword + description: Input type. diff --git a/packages/cisco_meraki/data_stream/events/fields/base-fields.yml b/packages/cisco_meraki/data_stream/events/fields/base-fields.yml new file mode 100644 index 00000000000..b1447bb9e3c --- /dev/null +++ b/packages/cisco_meraki/data_stream/events/fields/base-fields.yml @@ -0,0 +1,46 @@ +- name: data_stream.type + type: constant_keyword + description: Data stream type. +- name: data_stream.dataset + type: constant_keyword + description: Data stream dataset. +- name: data_stream.namespace + type: constant_keyword + description: Data stream namespace. +- name: "@timestamp" + type: date + description: Event timestamp. +- name: event.module + type: constant_keyword + description: Event module + value: cisco_meraki +- name: event.dataset + type: constant_keyword + description: Event dataset + value: cisco_meraki.log +- name: container.id + description: Unique container id. + ignore_above: 1024 + type: keyword +- name: input.type + description: Type of Filebeat input. + type: keyword +- name: log.file.path + description: Full path to the log file this event came from. + example: /var/log/fun-times.log + ignore_above: 1024 + type: keyword +- name: log.source.address + description: Source address from which the log event was read / sent from. + type: keyword +- name: log.flags + description: Flags for the log file. + type: keyword +- name: log.offset + description: Offset of the entry in the log file. + type: long +- name: tags + description: List of keywords used to tag each event. + example: '["production", "env2"]' + ignore_above: 1024 + type: keyword diff --git a/packages/cisco_meraki/data_stream/events/fields/ecs.yml b/packages/cisco_meraki/data_stream/events/fields/ecs.yml new file mode 100644 index 00000000000..1da8c39a341 --- /dev/null +++ b/packages/cisco_meraki/data_stream/events/fields/ecs.yml @@ -0,0 +1,232 @@ +- external: ecs + name: '@timestamp' +- external: ecs + name: client.domain +- external: ecs + name: client.registered_domain +- external: ecs + name: client.subdomain +- external: ecs + name: client.top_level_domain +- external: ecs + name: destination.address +- external: ecs + name: destination.as.number +- external: ecs + name: destination.as.organization.name +- external: ecs + name: destination.bytes +- external: ecs + name: destination.domain +- external: ecs + name: destination.geo.city_name +- external: ecs + name: destination.geo.country_name +- description: Longitude and latitude. + level: core + name: destination.geo.location + type: geo_point +- external: ecs + name: destination.ip +- external: ecs + name: destination.mac +- external: ecs + name: destination.nat.ip +- external: ecs + name: destination.nat.port +- external: ecs + name: destination.port +- external: ecs + name: destination.registered_domain +- external: ecs + name: destination.subdomain +- external: ecs + name: destination.top_level_domain +- external: ecs + name: dns.answers.name +- external: ecs + name: dns.answers.type +- external: ecs + name: dns.question.registered_domain +- external: ecs + name: dns.question.subdomain +- external: ecs + name: dns.question.top_level_domain +- external: ecs + name: dns.question.type +- external: ecs + name: ecs.version +- external: ecs + name: error.message +- external: ecs + name: event.action +- external: ecs + name: event.code +- external: ecs + name: event.ingested +- external: ecs + name: event.original +- external: ecs + name: event.outcome +- external: ecs + name: event.timezone +- external: ecs + name: file.attributes +- external: ecs + name: file.directory +- external: ecs + name: file.extension +- external: ecs + name: file.name +- external: ecs + name: file.path +- external: ecs + name: file.size +- external: ecs + name: file.type +- external: ecs + name: geo.city_name +- external: ecs + name: geo.country_name +- external: ecs + name: geo.name +- external: ecs + name: geo.region_name +- external: ecs + name: group.id +- external: ecs + name: group.name +- external: ecs + name: host.hostname +- external: ecs + name: host.ip +- external: ecs + name: host.mac +- external: ecs + name: host.name +- external: ecs + name: http.request.method +- external: ecs + name: http.request.referrer +- external: ecs + name: log.level +- external: ecs + name: log.syslog.facility.code +- external: ecs + name: log.syslog.priority +- external: ecs + name: log.syslog.severity.code +- external: ecs + name: message +- external: ecs + name: network.application +- external: ecs + name: network.bytes +- external: ecs + name: network.direction +- external: ecs + name: network.forwarded_ip +- external: ecs + name: network.packets +- external: ecs + name: network.protocol +- external: ecs + name: observer.egress.interface.name +- external: ecs + name: observer.ingress.interface.name +- external: ecs + name: observer.product +- external: ecs + name: observer.type +- external: ecs + name: observer.vendor +- external: ecs + name: observer.version +- external: ecs + name: process.name +- external: ecs + name: process.parent.name +- external: ecs + name: process.parent.title +- external: ecs + name: process.pid +- external: ecs + name: process.parent.pid +- external: ecs + name: process.title +- external: ecs + name: related.hosts +- external: ecs + name: related.ip +- external: ecs + name: related.user +- external: ecs + name: rule.name +- external: ecs + name: server.domain +- external: ecs + name: server.registered_domain +- external: ecs + name: server.subdomain +- external: ecs + name: server.top_level_domain +- external: ecs + name: service.name +- external: ecs + name: source.address +- external: ecs + name: source.as.number +- external: ecs + name: source.as.organization.name +- external: ecs + name: source.bytes +- external: ecs + name: source.domain +- external: ecs + name: source.geo.city_name +- external: ecs + name: source.geo.country_name +- description: Longitude and latitude. + level: core + name: source.geo.location + type: geo_point +- external: ecs + name: source.ip +- external: ecs + name: source.mac +- external: ecs + name: source.nat.ip +- external: ecs + name: source.nat.port +- external: ecs + name: source.port +- external: ecs + name: source.registered_domain +- external: ecs + name: source.subdomain +- external: ecs + name: source.top_level_domain +- external: ecs + name: tags +- external: ecs + name: url.domain +- external: ecs + name: url.original +- external: ecs + name: url.path +- external: ecs + name: url.query +- external: ecs + name: url.registered_domain +- external: ecs + name: url.top_level_domain +- external: ecs + name: user.domain +- external: ecs + name: user.full_name +- external: ecs + name: user.id +- external: ecs + name: user.name +- external: ecs + name: user_agent.original diff --git a/packages/cisco_meraki/data_stream/events/fields/fields.yml b/packages/cisco_meraki/data_stream/events/fields/fields.yml new file mode 100644 index 00000000000..3cb8285c0bb --- /dev/null +++ b/packages/cisco_meraki/data_stream/events/fields/fields.yml @@ -0,0 +1,72 @@ +- name: cisco_meraki + type: group + fields: + - name: log + type: group + fields: + - name: version + type: keyword + description: Current version of webhook format + - name: sharedSecret + type: keyword + description: User defined secret to be validated by the webhook receiver (optional) + - name: sentAt + type: date + description: Timestamp of the sent message (UTC) + - name: organizationId + type: keyword + description: ID of the Meraki organization + - name: organizationName + type: keyword + description: Name of the Meraki organization + - name: organizationUrl + type: keyword + description: URL of the Meraki Dashboard organization + - name: networkId + type: keyword + description: ID for the Meraki network + - name: networkName + type: keyword + description: Name for the Meraki network + - name: networkUrl + type: keyword + description: URL of the Meraki Dashboard network + - name: networkTags + type: keyword + description: Tags assigned to the Meraki network + - name: deviceSerial + type: keyword + description: Serial number of the Meraki device + - name: deviceMac + type: keyword + description: MAC address of the Meraki device + - name: deviceName + type: keyword + description: Name assigned to the Meraki device + - name: deviceUrl + type: keyword + description: URL of the Meraki device + - name: deviceTags + type: keyword + description: Tags assigned to the Meraki device + - name: deviceModel + type: keyword + description: Meraki device model + - name: alertId + type: keyword + description: ID for this alert message + - name: alertType + type: keyword + description: Type of alert (“Network usage alert”, “Settings changed”, etc.) + - name: alertTypeId + type: keyword + description: Unique ID for the type of alert + - name: alertLevel + type: keyword + description: Alert level (informational, critical etc.) + - name: occurredAt + type: date + description: Timestamp of the alert (UTC) + - name: alertData + type: flattened + description: Additional alert data (differs based on alert type) diff --git a/packages/cisco_meraki/data_stream/events/manifest.yml b/packages/cisco_meraki/data_stream/events/manifest.yml new file mode 100644 index 00000000000..088914999bd --- /dev/null +++ b/packages/cisco_meraki/data_stream/events/manifest.yml @@ -0,0 +1,75 @@ +title: "Cisco Meraki webhook events" +release: experimental +type: logs +streams: + - input: http_endpoint + title: Cisco Meraki webhook events + description: Receives events from Cisco Meraki webhook + template_path: http_endpoint.yml.hbs + vars: + - name: listen_address + type: text + title: Listen Address + description: Bind address for the listener. Use 0.0.0.0 to listen on all interfaces. + multi: false + required: true + show_user: true + default: localhost + - name: listen_port + type: integer + title: Listen Port + multi: false + required: true + show_user: true + default: 8686 + - name: url + type: text + title: Webhook path + description: URL path where the webhook will accept requests. + multi: false + required: true + show_user: false + default: /meraki/events + - name: secret_value + type: text + description: Authorization token + multi: false + required: false + show_user: true + - name: ssl + type: yaml + title: TLS + description: Options for enabling TLS for the listening webhook endpoint. See the [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html) for a list of all options. + multi: false + required: false + show_user: false + default: | + enabled: false + certificate: "/etc/pki/client/cert.pem" + key: "/etc/pki/client/cert.key" + - name: tags + type: text + title: Tags + multi: true + required: true + show_user: false + default: + - forwarded + - meraki-events + - name: preserve_original_event + required: true + show_user: true + title: Preserve original event + description: Preserves a raw copy of the original event, added to the field `event.original` + type: bool + multi: false + default: false + - name: processors + type: yaml + title: Processors + multi: false + required: false + show_user: false + description: > + Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. + diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json similarity index 100% rename from packages/cisco_meraki/data_stream/log/sample_event.json rename to packages/cisco_meraki/data_stream/events/sample_event.json diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-common-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-common-config.yml index c39dc386179..00d4f1de2be 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-common-config.yml +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-common-config.yml @@ -1,2 +1,6 @@ -dynamic_fields: - event.ingested: ".*" +fields: + tags: + - forwarded + - preserve_original_event + _conf: + tz_offset: UTC diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log new file mode 100644 index 00000000000..e8afdfc7425 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log @@ -0,0 +1,3 @@ +<134>1 1647478988.289402144 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600 +<134>1 1647478988.476061795 ATT_Primary flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all +<134>1 1647478988.596151424 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500 diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json new file mode 100644 index 00000000000..725f13a2247 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -0,0 +1,104 @@ +{ + "expected": [ + { + "@timestamp": "2022-03-17T01:03:08.289Z", + "cisco_meraki": { + "mx": { + "flows": { + "op": "allow" + } + } + }, + "destination": { + "ip": "10.0.0.34", + "port": 15600 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "flows", + "original": "\u003c134\u003e1 1647478988.289402144 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600" + }, + "network": { + "protocol": "udp" + }, + "observer": { + "hostname": "Nash_AP_4" + }, + "source": { + "ip": "10.0.2.170", + "mac": "00-7C-2D-BD-76-F2", + "port": 54841 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:03:08.476Z", + "destination": { + "ip": "216.160.83.61", + "port": 44210 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "flows", + "original": "\u003c134\u003e1 1647478988.476061795 ATT_Primary flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all" + }, + "network": { + "protocol": "tcp" + }, + "observer": { + "hostname": "ATT_Primary" + }, + "source": { + "ip": "216.160.83.57", + "port": 54445 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:03:08.596Z", + "cisco_meraki": { + "mx": { + "flows": { + "op": "allow" + } + } + }, + "destination": { + "ip": "10.0.0.234", + "port": 15500 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "flows", + "original": "\u003c134\u003e1 1647478988.596151424 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500" + }, + "network": { + "protocol": "tcp" + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "ip": "10.0.0.34", + "mac": "64-1C-B0-BA-F0-EC", + "port": 49761 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + } + ] +} \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/agent/stream/logfile.yml.hbs b/packages/cisco_meraki/data_stream/log/agent/stream/logfile.yml.hbs new file mode 100644 index 00000000000..52b248876b5 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/agent/stream/logfile.yml.hbs @@ -0,0 +1,27 @@ +paths: +{{#each paths as |path i|}} + - {{path}} +{{/each}} +exclude_files: [".gz$"] + +tags: +{{#if preserve_original_event}} + - preserve_original_event +{{/if}} +{{#each tags as |tag i|}} + - {{tag}} +{{/each}} + +{{#contains "forwarded" tags}} +publisher_pipeline.disable_host: true +{{/contains}} + +fields_under_root: true +fields: + _conf: + tz_offset: '{{tz_offset}}' + +{{#if processors}} +processors: +{{processors}} +{{/if}} diff --git a/packages/cisco_meraki/data_stream/log/agent/stream/tcp.yml.hbs b/packages/cisco_meraki/data_stream/log/agent/stream/tcp.yml.hbs new file mode 100644 index 00000000000..993860734ef --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/agent/stream/tcp.yml.hbs @@ -0,0 +1,24 @@ +host: "{{listen_address}}:{{listen_port}}" +max_message_size: 1 MiB + +tags: +{{#if preserve_original_event}} + - preserve_original_event +{{/if}} +{{#each tags as |tag i|}} + - {{tag}} +{{/each}} + +{{#contains "forwarded" tags}} +publisher_pipeline.disable_host: true +{{/contains}} + +fields_under_root: true +fields: + _conf: + tz_offset: '{{tz_offset}}' + +{{#if processors}} +processors: +{{processors}} +{{/if}} diff --git a/packages/cisco_meraki/data_stream/log/agent/stream/udp.yml.hbs b/packages/cisco_meraki/data_stream/log/agent/stream/udp.yml.hbs new file mode 100644 index 00000000000..993860734ef --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/agent/stream/udp.yml.hbs @@ -0,0 +1,24 @@ +host: "{{listen_address}}:{{listen_port}}" +max_message_size: 1 MiB + +tags: +{{#if preserve_original_event}} + - preserve_original_event +{{/if}} +{{#each tags as |tag i|}} + - {{tag}} +{{/each}} + +{{#contains "forwarded" tags}} +publisher_pipeline.disable_host: true +{{/contains}} + +fields_under_root: true +fields: + _conf: + tz_offset: '{{tz_offset}}' + +{{#if processors}} +processors: +{{processors}} +{{/if}} diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index c5959bcc06d..01fd43f92f6 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -1,50 +1,39 @@ --- -description: Pipeline for processing Cisco Meraki events +description: Pipeline for Cisco Meraki syslog processors: - set: field: ecs.version - value: '8.0.0' -- set: - field: cisco_meraki.log - copy_from: json -## -# Clean up -## -- remove: - field: - - json - ignore_missing: true -- remove: + value: 1.12.0 +- rename: + field: message + target_field: event.original +- dissect: + description: Extract syslog words field: event.original - if: "ctx?.tags == null || !(ctx.tags.contains('preserve_original_event'))" - ignore_failure: true + pattern: "%{} %{_temp.ts_nano} %{observer.hostname} %{event.code} %{}" +- grok: + description: Reduce precision from nanos to millis and set timestamp + field: _temp.ts_nano + patterns: + - '%{TSMILLIS}' + pattern_definitions: + TSMILLIS: (?<_temp.ts_millis>\d{1,10}\.\d{1,6})(?:\d{3}) +- date: + field: _temp.ts_millis + formats: + - UNIX + timezone: '{{{_conf.tz_offset}}}' +- pipeline: + name: '{{ IngestPipeline "flows" }}' + if: ctx.event.code == 'flows' +- remove: + field: + - _temp + - _conf + - sport + - dport + - mac ignore_missing: true -- script: - lang: painless - description: This script processor iterates over the whole document to remove fields with null values. - source: | - void handleMap(Map map) { - for (def x : map.values()) { - if (x instanceof Map) { - handleMap(x); - } else if (x instanceof List) { - handleList(x); - } - } - map.values().removeIf(v -> v == null || v == '' || (v instanceof Map && v.size() == 0) || (v instanceof List && v.size() == 0)); - } - void handleList(List list) { - for (def x : list) { - if (x instanceof Map) { - handleMap(x); - } else if (x instanceof List) { - handleList(x); - } - } - list.removeIf(v -> v == null || v == '' || (v instanceof Map && v.size() == 0) || (v instanceof List && v.size() == 0)); - } - handleMap(ctx); - on_failure: - set: field: error.message diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml new file mode 100644 index 00000000000..d1cd5638a49 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml @@ -0,0 +1,44 @@ +--- +description: Pipeline for Cisco Meraki flows message type +processors: +- dissect: + description: Determine if the token is src= or operation + field: event.original + pattern: "%{} %{} %{} %{} %{_temp.token} %{}" +- dissect: + description: Case for src= follows flows keyword + field: event.original + pattern: "%{} flows %{*src}=%{&src} %{*dst}=%{&dst} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport} %{}" + if: ctx._temp.token.startsWith("src=") == true +- dissect: + description: Case for firewall action prepends src= + field: event.original + pattern: "%{} flows %{cisco_meraki.mx.flows.op} %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport}" + if: ctx._temp.token.startsWith("src=") == false +- rename: + field: src + target_field: source.ip +- rename: + field: dst + target_field: destination.ip +- rename: + field: protocol + target_field: network.protocol +- convert: + field: sport + target_field: source.port + type: long + if: ctx?.sport != "0" + ignore_failure: true +- convert: + field: dport + target_field: destination.port + type: long + if: ctx?.dport != "0" + ignore_failure: true +- gsub: + field: mac + target_field: source.mac + pattern: '[-:.]' + replacement: '-' + if: ctx._temp.token.startsWith("src=") == false diff --git a/packages/cisco_meraki/data_stream/log/fields/base-fields.yml b/packages/cisco_meraki/data_stream/log/fields/base-fields.yml index b1447bb9e3c..21342c9845a 100644 --- a/packages/cisco_meraki/data_stream/log/fields/base-fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/base-fields.yml @@ -27,7 +27,7 @@ type: keyword - name: log.file.path description: Full path to the log file this event came from. - example: /var/log/fun-times.log + example: /var/log/cisco-meraki.log ignore_above: 1024 type: keyword - name: log.source.address diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index 1da8c39a341..722ac59948c 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -230,3 +230,5 @@ name: user.name - external: ecs name: user_agent.original +- external: ecs + name: observer.hostname diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index 3cb8285c0bb..6a0e7d05a22 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -1,72 +1,11 @@ - name: cisco_meraki type: group fields: - - name: log + - name: mx type: group fields: - - name: version - type: keyword - description: Current version of webhook format - - name: sharedSecret - type: keyword - description: User defined secret to be validated by the webhook receiver (optional) - - name: sentAt - type: date - description: Timestamp of the sent message (UTC) - - name: organizationId - type: keyword - description: ID of the Meraki organization - - name: organizationName - type: keyword - description: Name of the Meraki organization - - name: organizationUrl - type: keyword - description: URL of the Meraki Dashboard organization - - name: networkId - type: keyword - description: ID for the Meraki network - - name: networkName - type: keyword - description: Name for the Meraki network - - name: networkUrl - type: keyword - description: URL of the Meraki Dashboard network - - name: networkTags - type: keyword - description: Tags assigned to the Meraki network - - name: deviceSerial - type: keyword - description: Serial number of the Meraki device - - name: deviceMac - type: keyword - description: MAC address of the Meraki device - - name: deviceName - type: keyword - description: Name assigned to the Meraki device - - name: deviceUrl - type: keyword - description: URL of the Meraki device - - name: deviceTags - type: keyword - description: Tags assigned to the Meraki device - - name: deviceModel - type: keyword - description: Meraki device model - - name: alertId - type: keyword - description: ID for this alert message - - name: alertType - type: keyword - description: Type of alert (“Network usage alert”, “Settings changed”, etc.) - - name: alertTypeId - type: keyword - description: Unique ID for the type of alert - - name: alertLevel - type: keyword - description: Alert level (informational, critical etc.) - - name: occurredAt - type: date - description: Timestamp of the alert (UTC) - - name: alertData - type: flattened - description: Additional alert data (differs based on alert type) + - name: flows + type: group + fields: + - name: op + type: keyword diff --git a/packages/cisco_meraki/data_stream/log/manifest.yml b/packages/cisco_meraki/data_stream/log/manifest.yml index f1b58137904..aeaeb48fbc0 100644 --- a/packages/cisco_meraki/data_stream/log/manifest.yml +++ b/packages/cisco_meraki/data_stream/log/manifest.yml @@ -1,15 +1,17 @@ -title: "Cisco Meraki alerts" +title: Cisco Meraki logs (via Syslog) +release: experimental type: logs streams: - - input: http_endpoint - title: Cisco Meraki webhook events - description: Receives events from Cisco Meraki webhook - template_path: http_endpoint.yml.hbs + - input: udp + template_path: udp.yml.hbs + title: Cisco Meraki logs + description: Collect Cisco Meraki logs (via Syslog) + enabled: true vars: - name: listen_address type: text title: Listen Address - description: Bind address for the listener. Use 0.0.0.0 to listen on all interfaces. + description: The bind address to listen for UDP connections. Set to `0.0.0.0` to bind to all available interfaces. multi: false required: true show_user: true @@ -17,28 +19,79 @@ streams: - name: listen_port type: integer title: Listen Port + description: The UDP port number to listen on. multi: false required: true show_user: true - default: 8686 - - name: url - type: text - title: Webhook path - description: URL path where the webhook will accept requests. + default: 8684 + - name: preserve_original_event + required: true + show_user: true + title: Preserve original event + description: Preserves a raw copy of the original event, added to the field `event.original`. + type: bool multi: false + default: false + - name: tags + type: text + title: Tags + multi: true required: true show_user: false - default: /meraki/events - - name: secret_value + default: + - cisco-meraki + - forwarded + - name: tz_offset type: text - description: Authorization token + title: Timezone + multi: false + required: false + show_user: false + default: UTC + description: IANA time zone or time offset (e.g. `+0200`) to use when interpreting syslog timestamps without a time zone. + - name: processors + type: yaml + title: Processors multi: false required: false + show_user: false + description: > + Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. + + - input: tcp + template_path: tcp.yml.hbs + title: Cisco Meraki logs + description: Collect Cisco Meraki logs (via Syslog) + enabled: false + vars: + - name: listen_address + type: text + title: Listen Address + description: The bind address to listen for TCP connections. Set to `0.0.0.0` to bind to all available interfaces. + multi: false + required: true + show_user: true + default: localhost + - name: listen_port + type: integer + title: Listen Port + description: The TCP port number to listen on. + multi: false + required: true + show_user: true + default: 8685 + - name: preserve_original_event + required: true show_user: true + title: Preserve original event + description: Preserves a raw copy of the original event, added to the field `event.original`. + type: bool + multi: false + default: false - name: ssl type: yaml title: TLS - description: Options for enabling TLS for the listening webhook endpoint. See the [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html) for a list of all options. + description: Options for enabling TLS for the listening TCP socket. See the [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html) for a list of all options. multi: false required: false show_user: false @@ -53,22 +106,61 @@ streams: required: true show_user: false default: + - cisco-meraki - forwarded - - meraki-events + - name: tz_offset + type: text + title: Timezone + multi: false + required: false + show_user: false + default: UTC + description: IANA time zone or time offset (e.g. `+0200`) to use when interpreting syslog timestamps without a time zone. + - name: processors + type: yaml + title: Processors + multi: false + required: false + show_user: false + description: > + Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. + + - input: logfile + template_path: logfile.yml.hbs + title: Cisco Meraki logs + description: Collect Cisco Meraki logs (via Syslog) + enabled: false + vars: + - name: paths + type: text + title: Paths + multi: true + required: false + show_user: true + default: + - /var/log/cisco-meraki.log - name: preserve_original_event required: true show_user: true title: Preserve original event - description: Preserves a raw copy of the original event, added to the field `event.original` + description: Preserves a raw copy of the original event, added to the field `event.original`. type: bool multi: false default: false - - name: processors - type: yaml - title: Processors + - name: tags + type: text + title: Tags + multi: true + required: true + show_user: true + default: + - cisco-meraki + - forwarded + - name: tz_offset + type: text + title: Timezone multi: false required: false show_user: false - description: > - Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. - + default: UTC + description: IANA time zone or time offset (e.g. `+0200`) to use when interpreting syslog timestamps without a time zone. diff --git a/packages/cisco_meraki/manifest.yml b/packages/cisco_meraki/manifest.yml index aac312ce1f0..982f3c5e9e2 100644 --- a/packages/cisco_meraki/manifest.yml +++ b/packages/cisco_meraki/manifest.yml @@ -1,9 +1,9 @@ format_version: 1.0.0 name: cisco_meraki -title: "Cisco Meraki Integration" +title: Cisco Meraki Integration version: 0.5.0 license: basic -description: "Collect alerts via Cisco Meraki Webhook." +description: Collect events from Cisco Meraki. type: integration categories: - network @@ -22,12 +22,21 @@ icons: size: 32x32 type: image/svg+xml policy_templates: - - name: cisco_meraki_alerts - title: Cisco Meraki alerts via Webhooks - description: Collect alerts from Cisco Meraki via Webhooks. + - name: cisco_meraki + title: Cisco Meraki logs or events + description: Collect logs or events from Cisco Meraki inputs: + - type: udp + title: Collect syslog from Cisco Meraki via UDP + description: Collecting syslog from Cisco Meraki via UDP + - type: tcp + title: Collect syslog from Cisco Meraki via TCP + description: Collecting syslog from Cisco Meraki via TCP + - type: logfile + title: Collect syslog from Cisco Meraki via file + description: Collecting syslog from Cisco Meraki via file - type: http_endpoint - title: Collect Cisco Meraki events via Webhooks - description: Collecting Cisco Meraki alerts via Webhooks. + title: Collect events from Cisco Meraki via Webhooks + description: Collecting events from Cisco Meraki via Webhooks owner: github: elastic/security-external-integrations From a2ec8777dae37a16070e86ac5c684a8b48e99c92 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 21 Mar 2022 15:49:48 +1100 Subject: [PATCH 04/67] Add pipeline tests for syslog flow, ipflow logs; Add sample_events for webhook system tests --- .../_dev/deploy/docker/docker-compose.yml | 8 +- .../{sample_logs => sample_events}/flows.log | 0 .../meraki-mx-ndjson.log | 0 .../test-mx-events.json-expected.json | 2 +- .../elasticsearch/ingest_pipeline/default.yml | 2 +- .../data_stream/events/fields/base-fields.yml | 2 +- .../data_stream/events/fields/fields.yml | 2 +- .../data_stream/events/sample_event.json | 120 +++---- .../log/_dev/test/pipeline/test-ip-flow.log | 8 + .../pipeline/test-ip-flow.log-expected.json | 339 ++++++++++++++++++ .../elasticsearch/ingest_pipeline/default.yml | 8 + .../elasticsearch/ingest_pipeline/ipflows.yml | 106 ++++++ .../data_stream/log/fields/ecs.yml | 16 + 13 files changed, 536 insertions(+), 77 deletions(-) rename packages/cisco_meraki/_dev/deploy/docker/{sample_logs => sample_events}/flows.log (100%) rename packages/cisco_meraki/_dev/deploy/docker/{sample_logs => sample_events}/meraki-mx-ndjson.log (100%) create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json create mode 100644 packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml diff --git a/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml b/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml index 38f6cc3cf3d..79cce343d11 100644 --- a/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml +++ b/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml @@ -3,19 +3,19 @@ services: meraki-webhook-http: image: docker.elastic.co/observability/stream:v0.6.2 volumes: - - ./sample_logs:/sample_logs:ro + - ./sample_events:/sample_events:ro environment: - STREAM_PROTOCOL=webhook - STREAM_ADDR=http://elastic-agent:8686/meraki/events - STREAM_WEBHOOK_HEADER=Authorization=abc123 - command: log --start-signal=SIGHUP --delay=5s /sample_logs/meraki-mx-ndjson.log + command: log --start-signal=SIGHUP --delay=5s /sample_events/meraki-mx-ndjson.log meraki-webhook-https: image: docker.elastic.co/observability/stream:v0.6.2 volumes: - - ./sample_logs:/sample_logs:ro + - ./sample_events:/sample_events:ro environment: - STREAM_PROTOCOL=webhook - STREAM_ADDR=https://elastic-agent:8686/meraki/events - STREAM_WEBHOOK_HEADER=Authorization=abc123 - STREAM_INSECURE=true - command: log --start-signal=SIGHUP --delay=5s /sample_logs/meraki-mx-ndjson.log + command: log --start-signal=SIGHUP --delay=5s /sample_events/meraki-mx-ndjson.log diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/flows.log b/packages/cisco_meraki/_dev/deploy/docker/sample_events/flows.log similarity index 100% rename from packages/cisco_meraki/_dev/deploy/docker/sample_logs/flows.log rename to packages/cisco_meraki/_dev/deploy/docker/sample_events/flows.log diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/meraki-mx-ndjson.log b/packages/cisco_meraki/_dev/deploy/docker/sample_events/meraki-mx-ndjson.log similarity index 100% rename from packages/cisco_meraki/_dev/deploy/docker/sample_logs/meraki-mx-ndjson.log rename to packages/cisco_meraki/_dev/deploy/docker/sample_events/meraki-mx-ndjson.log diff --git a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json index 9103f938a29..99733ed7dca 100644 --- a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json +++ b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json @@ -2,7 +2,7 @@ "expected": [ { "cisco_meraki": { - "log": { + "event": { "alertData": { "connection": "LTE", "local": "192.168.1.2", diff --git a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml index c5959bcc06d..a74736eaabe 100644 --- a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml @@ -5,7 +5,7 @@ processors: field: ecs.version value: '8.0.0' - set: - field: cisco_meraki.log + field: cisco_meraki.event copy_from: json ## # Clean up diff --git a/packages/cisco_meraki/data_stream/events/fields/base-fields.yml b/packages/cisco_meraki/data_stream/events/fields/base-fields.yml index b1447bb9e3c..d97bf03ed7e 100644 --- a/packages/cisco_meraki/data_stream/events/fields/base-fields.yml +++ b/packages/cisco_meraki/data_stream/events/fields/base-fields.yml @@ -17,7 +17,7 @@ - name: event.dataset type: constant_keyword description: Event dataset - value: cisco_meraki.log + value: cisco_meraki.events - name: container.id description: Unique container id. ignore_above: 1024 diff --git a/packages/cisco_meraki/data_stream/events/fields/fields.yml b/packages/cisco_meraki/data_stream/events/fields/fields.yml index 3cb8285c0bb..7443e7680ae 100644 --- a/packages/cisco_meraki/data_stream/events/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/events/fields/fields.yml @@ -1,7 +1,7 @@ - name: cisco_meraki type: group fields: - - name: log + - name: event type: group fields: - name: version diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index d8c468fb765..1ec6c38d507 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,90 +1,72 @@ { - "@timestamp": "2016-01-29T06:09:59.000Z", + "@timestamp": "2022-03-21T04:44:32.839Z", "agent": { - "ephemeral_id": "32decd4f-7a04-474b-8958-de335bfff10f", - "id": "4e3f135a-d5f9-40b6-ae01-2c834ecbead0", + "ephemeral_id": "43b74c6e-45c3-4403-8beb-685e7c112a74", + "hostname": "docker-fleet-agent", + "id": "4c5204b1-76bb-4986-b403-205808df776d", "name": "docker-fleet-agent", "type": "filebeat", - "version": "8.0.0" + "version": "7.17.0" + }, + "cisco_meraki": { + "event": { + "alertData": { + "connection": "LTE", + "local": "192.168.1.2", + "model": "UML290VW", + "provider": "Purview Wireless", + "remote": "1.2.3.5" + }, + "alertId": "0000000000000000", + "alertLevel": "informational", + "alertType": "Cellular came up", + "alertTypeId": "cellular_up", + "deviceMac": "00:11:22:33:44:55", + "deviceModel": "MX", + "deviceName": "My appliance", + "deviceSerial": "Q234-ABCD-5678", + "deviceTags": [ + "tag1", + "tag2" + ], + "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", + "networkId": "N_24329156", + "networkName": "Main Office", + "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", + "occurredAt": "2018-02-11T00:00:00.123450Z", + "organizationId": "2930418", + "organizationName": "My organization", + "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", + "sentAt": "2021-10-07T08:42:00.926325Z", + "sharedSecret": "secret", + "version": "0.1" + } }, "data_stream": { - "dataset": "cisco_meraki.log", + "dataset": "cisco_meraki.events", "namespace": "ep", "type": "logs" }, - "destination": { - "ip": [ - "10.193.124.51" - ], - "port": 5293 - }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "elastic_agent": { - "id": "4e3f135a-d5f9-40b6-ae01-2c834ecbead0", - "snapshot": true, - "version": "8.0.0" + "id": "4c5204b1-76bb-4986-b403-205808df776d", + "snapshot": false, + "version": "7.17.0" }, "event": { - "action": "deny\n", "agent_id_status": "verified", - "code": "security_event", - "dataset": "cisco_meraki.log", - "ingested": "2022-01-25T12:08:12Z", - "original": "modtempo 1454047799.olab nto_ security_event olaborissecurity_event tur url=https://example.org/odoco/ria.jpg?ritin=uredolor#tatemac src=10.15.44.253:5078 dst=10.193.124.51:5293 mac=01:00:5e:28:ae:7d name=psa sha256=umq disposition=ntium action=deny\n", - "timezone": "+00:00" + "dataset": "cisco_meraki.events", + "ingested": "2022-03-21T04:44:33Z", + "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}" }, "input": { - "type": "udp" - }, - "log": { - "source": { - "address": "172.30.0.4:37331" - } - }, - "observer": { - "product": "Meraki", - "type": "Wireless", - "vendor": "Cisco" - }, - "related": { - "ip": [ - "10.193.124.51", - "10.15.44.253" - ] - }, - "rsa": { - "internal": { - "event_desc": "olaborissecurity_event tur", - "messageid": "security_event" - }, - "misc": { - "action": [ - "deny\n" - ], - "disposition": "ntium", - "event_type": "security_event", - "node": "nto_", - "sensor": "nto_" - }, - "time": { - "event_time": "2016-01-29T06:09:59.000Z" - } - }, - "source": { - "ip": [ - "10.15.44.253" - ], - "mac": "01:00:5e:28:ae:7d", - "port": 5078 + "type": "http_endpoint" }, "tags": [ "preserve_original_event", - "cisco-meraki", - "forwarded" - ], - "url": { - "original": "https://example.org/odoco/ria.jpg?ritin=uredolor#tatemac" - } + "forwarded", + "meraki-events" + ] } \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log new file mode 100644 index 00000000000..afbb9200384 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log @@ -0,0 +1,8 @@ +<134>1 1647479278.997155282 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294 +<134>1 1647479278.995279215 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061 +<134>1 1647479278.974067126 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401 +<134>1 1647479278.911594876 ATT_Primary ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272 +<134>1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 +<134>1 1647479325.842384731 ATT_Primary ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422 +<134>1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 +<134>1 1647479325.755292025 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498 diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json new file mode 100644 index 00000000000..6b89d480323 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json @@ -0,0 +1,339 @@ +{ + "expected": [ + { + "@timestamp": "2022-03-17T01:07:58.997Z", + "destination": { + "geo": { + "city_name": "London", + "continent_name": "Europe", + "country_iso_code": "GB", + "country_name": "United Kingdom", + "location": { + "lat": 51.5142, + "lon": -0.0931 + }, + "region_iso_code": "GB-ENG", + "region_name": "England" + }, + "ip": "81.2.69.145", + "port": 80 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "ip_flow_start", + "original": "\u003c134\u003e1 1647479278.997155282 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294" + }, + "network": { + "protocol": "tcp" + }, + "observer": { + "hostname": "Nashville_MX100" + }, + "source": { + "as": { + "number": 1221, + "organization": { + "name": "Telstra Pty Ltd" + } + }, + "ip": "1.128.3.4", + "port": 34294 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:07:58.995Z", + "destination": { + "geo": { + "city_name": "London", + "continent_name": "Europe", + "country_iso_code": "GB", + "country_name": "United Kingdom", + "location": { + "lat": 51.5142, + "lon": -0.0931 + }, + "region_iso_code": "GB-ENG", + "region_name": "England" + }, + "ip": "81.2.69.143", + "port": 53 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "ip_flow_start", + "original": "\u003c134\u003e1 1647479278.995279215 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061" + }, + "network": { + "protocol": "udp" + }, + "observer": { + "hostname": "Nashville_MX100" + }, + "source": { + "as": { + "number": 1221, + "organization": { + "name": "Telstra Pty Ltd" + } + }, + "ip": "1.128.3.4", + "port": 45061 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:07:58.974Z", + "destination": { + "geo": { + "city_name": "London", + "continent_name": "Europe", + "country_iso_code": "GB", + "country_name": "United Kingdom", + "location": { + "lat": 51.5142, + "lon": -0.0931 + }, + "region_iso_code": "GB-ENG", + "region_name": "England" + }, + "ip": "81.2.69.143", + "port": 53 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "ip_flow_start", + "original": "\u003c134\u003e1 1647479278.974067126 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401" + }, + "network": { + "protocol": "udp" + }, + "observer": { + "hostname": "Nashville_MX100" + }, + "source": { + "as": { + "number": 1221, + "organization": { + "name": "Telstra Pty Ltd" + } + }, + "ip": "1.128.3.4", + "port": 37401 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:07:58.911Z", + "destination": { + "as": { + "number": 29518, + "organization": { + "name": "Bredband2 AB" + } + }, + "geo": { + "city_name": "Linköping", + "continent_name": "Europe", + "country_iso_code": "SE", + "country_name": "Sweden", + "location": { + "lat": 58.4167, + "lon": 15.6167 + }, + "region_iso_code": "SE-E", + "region_name": "Östergötland County" + }, + "ip": "89.160.20.156", + "port": 443 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "ip_flow_start", + "original": "\u003c134\u003e1 1647479278.911594876 ATT_Primary ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272" + }, + "network": { + "protocol": "tcp" + }, + "observer": { + "hostname": "ATT_Primary" + }, + "source": { + "as": { + "number": 209 + }, + "geo": { + "city_name": "Milton", + "continent_name": "North America", + "country_iso_code": "US", + "country_name": "United States", + "location": { + "lat": 47.2513, + "lon": -122.3149 + }, + "region_iso_code": "US-WA", + "region_name": "Washington" + }, + "ip": "216.160.83.61", + "port": 61272 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:45.891Z", + "destination": { + "ip": "10.0.0.1", + "port": 53 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "ip_flow_end", + "original": "\u003c134\u003e1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=192.0.2.1 translated_port=53" + }, + "network": { + "protocol": "udp" + }, + "observer": { + "hostname": "ATT_Primary" + }, + "source": { + "ip": "10.0.2.249", + "port": 7421 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:45.842Z", + "destination": { + "as": { + "number": 35908 + }, + "geo": { + "continent_name": "Asia", + "country_iso_code": "BT", + "country_name": "Bhutan", + "location": { + "lat": 27.5, + "lon": 90.5 + } + }, + "ip": "67.43.156.14", + "port": 443 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "ip_flow_end", + "original": "\u003c134\u003e1 1647479325.842384731 ATT_Primary ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422" + }, + "network": { + "protocol": "udp" + }, + "observer": { + "hostname": "ATT_Primary" + }, + "source": { + "ip": "10.0.3.116", + "port": 38422 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:45.842Z", + "destination": { + "ip": "10.0.0.1", + "port": 53 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "ip_flow_end", + "original": "\u003c134\u003e1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=192.0.2.1 translated_port=53" + }, + "network": { + "protocol": "udp" + }, + "observer": { + "hostname": "ATT_Primary" + }, + "source": { + "ip": "10.0.2.99", + "port": 29534 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:45.755Z", + "destination": { + "geo": { + "city_name": "London", + "continent_name": "Europe", + "country_iso_code": "GB", + "country_name": "United Kingdom", + "location": { + "lat": 51.5142, + "lon": -0.0931 + }, + "region_iso_code": "GB-ENG", + "region_name": "England" + }, + "ip": "81.2.69.144", + "port": 80 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "ip_flow_end", + "original": "\u003c134\u003e1 1647479325.755292025 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498" + }, + "network": { + "protocol": "tcp" + }, + "observer": { + "hostname": "Nashville_MX100" + }, + "source": { + "ip": "10.0.0.234", + "port": 36498 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + } + ] +} \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 01fd43f92f6..fe7757d467e 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -26,6 +26,9 @@ processors: - pipeline: name: '{{ IngestPipeline "flows" }}' if: ctx.event.code == 'flows' +- pipeline: + name: '{{ IngestPipeline "ipflows" }}' + if: ctx.event.code == 'ip_flow_start' || ctx.event.code == 'ip_flow_end' - remove: field: - _temp @@ -33,6 +36,11 @@ processors: - sport - dport - mac + - src + - dst + - translated_src_ip + - translated_dst_ip + - translated_port ignore_missing: true on_failure: - set: diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml new file mode 100644 index 00000000000..de891fb6841 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml @@ -0,0 +1,106 @@ +--- +description: Pipeline for Cisco Meraki ip_flow_start and ip_flow_end message type +processors: +- dissect: + description: Determine if the token is src= or operation + field: event.original + pattern: "%{} %{} %{} %{event.code} %{_temp.token} %{}" +- dissect: + description: Case for src= follows ip_flow_start + field: event.original + pattern: "%{} ip_flow_start %{*src}=%{&src} %{*dst}=%{&dst} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport} %{*tsi}=%{&tsi} %{*tp}=%{&tp}" + if: ctx.event.code == 'ip_flow_start' && ctx._temp.token.startsWith("src=") == true +- dissect: + description: Case for src= follows ip_flow_end + field: event.original + pattern: "%{} ip_flow_end %{*src}=%{&src} %{*dst}=%{&dst} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport} %{_temp.tsi_or_tdi} %{*tp}=%{&tp}" + if: ctx.event.code == 'ip_flow_end' && ctx._temp.token.startsWith("src=") == true +# source field IP:port handling +- set: + field: source.ip + copy_from: translated_src_ip + if: ctx?.translated_src_ip != null +- set: + field: source.ip + copy_from: src + if: ctx?.translated_src_ip == null && ctx?.src != null +- convert: + field: translated_port + target_field: source.port + type: long + if: ctx?.translated_src_ip != null && ctx?.translated_port != null +- convert: + field: sport + target_field: source.port + type: long + if: ctx?.translated_src_ip == null && ctx?.sport != null +# destination field IP:port handling +- set: + field: destination.ip + copy_from: translated_dst_ip + if: ctx?.translated_dst_ip != null +- set: + field: destination.ip + copy_from: dst + if: ctx?.translated_dst_ip == null && ctx?.dst != null +- convert: + field: translated_port + target_field: destination.port + type: long + if: ctx?.translated_dst_ip != null && ctx?.translated_port != null +- convert: + field: dport + target_field: destination.port + type: long + if: ctx?.translated_dst_ip == null && ctx?.dport != null +- rename: + field: protocol + target_field: network.protocol +# IP Geolocation Lookup (source) +- geoip: + field: source.ip + target_field: source.geo + ignore_missing: true + if: ctx.source?.geo == null && ctx?.source?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: source.ip + target_field: source.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.source?.ip != null +- rename: + field: source.as.asn + target_field: source.as.number + ignore_missing: true +- rename: + field: source.as.organization_name + target_field: source.as.organization.name + ignore_missing: true +# IP Geolocation Lookup (destination) +- geoip: + field: destination.ip + target_field: destination.geo + ignore_missing: true + if: ctx.destination?.geo == null && ctx?.destination?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: destination.ip + target_field: destination.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.destination?.ip != null +- rename: + field: destination.as.asn + target_field: destination.as.number + ignore_missing: true +- rename: + field: destination.as.organization_name + target_field: destination.as.organization.name + ignore_missing: true diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index 722ac59948c..2aad7b4280b 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -232,3 +232,19 @@ name: user_agent.original - external: ecs name: observer.hostname +- external: ecs + name: destination.geo.continent_name +- external: ecs + name: destination.geo.country_iso_code +- external: ecs + name: destination.geo.region_iso_code +- external: ecs + name: destination.geo.region_name +- external: ecs + name: source.geo.continent_name +- external: ecs + name: source.geo.country_iso_code +- external: ecs + name: source.geo.region_iso_code +- external: ecs + name: source.geo.region_name From 8c0c54a2690f58ecacfd159266fb729e124cf0f7 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 21 Mar 2022 16:19:08 +1100 Subject: [PATCH 05/67] Fix ip_flow_end pipeline for tsi or tdi case --- .../log/_dev/test/pipeline/test-ip-flow.log | 4 +- .../pipeline/test-ip-flow.log-expected.json | 69 +++++++++++++++++-- .../elasticsearch/ingest_pipeline/ipflows.yml | 2 +- 3 files changed, 66 insertions(+), 9 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log index afbb9200384..5d4f085e07c 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log @@ -2,7 +2,7 @@ <134>1 1647479278.995279215 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061 <134>1 1647479278.974067126 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401 <134>1 1647479278.911594876 ATT_Primary ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272 -<134>1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 +<134>1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53 <134>1 1647479325.842384731 ATT_Primary ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422 -<134>1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 +<134>1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53 <134>1 1647479325.755292025 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498 diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json index 6b89d480323..97023c5caec 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json @@ -202,7 +202,25 @@ { "@timestamp": "2022-03-17T01:08:45.891Z", "destination": { - "ip": "10.0.0.1", + "as": { + "number": 29518, + "organization": { + "name": "Bredband2 AB" + } + }, + "geo": { + "city_name": "Linköping", + "continent_name": "Europe", + "country_iso_code": "SE", + "country_name": "Sweden", + "location": { + "lat": 58.4167, + "lon": 15.6167 + }, + "region_iso_code": "SE-E", + "region_name": "Östergötland County" + }, + "ip": "89.160.20.112", "port": 53 }, "ecs": { @@ -210,7 +228,7 @@ }, "event": { "code": "ip_flow_end", - "original": "\u003c134\u003e1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=192.0.2.1 translated_port=53" + "original": "\u003c134\u003e1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" }, "network": { "protocol": "udp" @@ -259,7 +277,22 @@ "hostname": "ATT_Primary" }, "source": { - "ip": "10.0.3.116", + "as": { + "number": 209 + }, + "geo": { + "city_name": "Milton", + "continent_name": "North America", + "country_iso_code": "US", + "country_name": "United States", + "location": { + "lat": 47.2513, + "lon": -122.3149 + }, + "region_iso_code": "US-WA", + "region_name": "Washington" + }, + "ip": "216.160.83.61", "port": 38422 }, "tags": [ @@ -270,7 +303,25 @@ { "@timestamp": "2022-03-17T01:08:45.842Z", "destination": { - "ip": "10.0.0.1", + "as": { + "number": 29518, + "organization": { + "name": "Bredband2 AB" + } + }, + "geo": { + "city_name": "Linköping", + "continent_name": "Europe", + "country_iso_code": "SE", + "country_name": "Sweden", + "location": { + "lat": 58.4167, + "lon": 15.6167 + }, + "region_iso_code": "SE-E", + "region_name": "Östergötland County" + }, + "ip": "89.160.20.112", "port": 53 }, "ecs": { @@ -278,7 +329,7 @@ }, "event": { "code": "ip_flow_end", - "original": "\u003c134\u003e1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=192.0.2.1 translated_port=53" + "original": "\u003c134\u003e1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" }, "network": { "protocol": "udp" @@ -327,7 +378,13 @@ "hostname": "Nashville_MX100" }, "source": { - "ip": "10.0.0.234", + "as": { + "number": 1221, + "organization": { + "name": "Telstra Pty Ltd" + } + }, + "ip": "1.128.3.4", "port": 36498 }, "tags": [ diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml index de891fb6841..2371fa976ae 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml @@ -13,7 +13,7 @@ processors: - dissect: description: Case for src= follows ip_flow_end field: event.original - pattern: "%{} ip_flow_end %{*src}=%{&src} %{*dst}=%{&dst} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport} %{_temp.tsi_or_tdi} %{*tp}=%{&tp}" + pattern: "%{} ip_flow_end %{*src}=%{&src} %{*dst}=%{&dst} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport} %{*tsi_or_tdi}=%{&tsi_or_tdi} %{*tp}=%{&tp}" if: ctx.event.code == 'ip_flow_end' && ctx._temp.token.startsWith("src=") == true # source field IP:port handling - set: From b0fbf8bdd7c62392015d94ab5e57f03e65c95f4c Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 21 Mar 2022 17:49:19 +1100 Subject: [PATCH 06/67] Add support for airmarshal events --- .../test/pipeline/test-airmarshal-events.log | 175 + .../test-airmarshal-events.log-expected.json | 7094 +++++++++++++++++ .../ingest_pipeline/airmarshal.yml | 59 + .../elasticsearch/ingest_pipeline/default.yml | 5 + .../data_stream/log/fields/ecs.yml | 2 + .../data_stream/log/fields/fields.yml | 24 + 6 files changed, 7359 insertions(+) create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json create mode 100644 packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log new file mode 100644 index 00000000000..3a17a0aeea0 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log @@ -0,0 +1,175 @@ +<134>1 1647479604.334549372 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5' +<134>1 1647479580.487048774 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647479552.047395997 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647479537.315779167 Nash_AP_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5' +<134>1 1647479528.067423267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479493.484285651 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479489.882680227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8' +<134>1 1647479484.972992227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' +<134>1 1647479466.965046920 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8' +<134>1 1647479461.791503607 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5' +<134>1 1647479459.181348678 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647479456.670048547 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8' +<134>1 1647479445.786718001 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5' +<134>1 1647479442.047436097 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8' +<134>1 1647479399.287689295 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8' +<134>1 1647479376.407283267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647479375.390251687 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8' +<134>1 1647479371.594697827 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8' +<134>1 1647479356.473299205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647479354.489175845 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5' +<134>1 1647479353.446408965 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479352.553639439 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647479350.428006877 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479350.457045605 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479346.794313756 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5' +<134>1 1647479345.577452767 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5' +<134>1 1647479341.816936841 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647479318.128184987 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647479313.473165785 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5' +<134>1 1647479299.143407174 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5' +<134>1 1647479299.115949027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8' +<134>1 1647479294.302067007 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647479288.469042416 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647479281.848397134 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479278.839671334 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8' +<134>1 1647479231.942342036 Nash_AP_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479227.438567311 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8' +<134>1 1647479222.927379747 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647479222.927802947 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647479222.728876109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8' +<134>1 1647479218.076400635 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5' +<134>1 1647479203.375371107 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8' +<134>1 1647479199.622640025 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647479162.641725608 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647479162.670104087 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8' +<134>1 1647479161.182241827 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479158.314592227 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647479151.958073405 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479133.020606043 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647479127.384572447 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647479122.570882475 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' +<134>1 1647479122.592807847 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8' +<134>1 1647479122.578597672 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' +<134>1 1647479120.544286631 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5' +<134>1 1647479091.258858944 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' +<134>1 1647479060.425068327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5' +<134>1 1647479037.677902643 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647479036.783442760 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647479020.949227955 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' +<134>1 1647478974.912056258 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5' +<134>1 1647478966.089203455 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647478950.860971410 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647478940.142724327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5' +<134>1 1647478936.678862087 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647478907.739529447 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647478855.303776534 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' +<134>1 1647478849.532951889 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478845.877942207 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' +<134>1 1647478822.111692485 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8' +<134>1 1647478818.039157925 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8' +<134>1 1647478800.349145072 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647478799.177625347 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647478788.838283552 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8' +<134>1 1647478782.939898885 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5' +<134>1 1647478782.932299301 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' +<134>1 1647478782.930289746 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' +<134>1 1647478695.528431433 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5' +<134>1 1647478693.465185593 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478669.549413486 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478626.517046787 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8' +<134>1 1647478591.602996834 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478569.035635205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5' +<134>1 1647478567.751044590 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478559.571303907 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5' +<134>1 1647478558.540066660 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5' +<134>1 1647478554.934781027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8' +<134>1 1647478541.587558726 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647478534.671579931 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5' +<134>1 1647478508.007504325 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' +<134>1 1647478487.013169927 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647478483.410677512 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647478478.614722093 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8' +<134>1 1647478440.565782942 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647478408.128821330 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8' +<134>1 1647478403.005811325 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5' +<134>1 1647478383.070405853 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' +<134>1 1647478373.816434235 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647478339.127895652 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647478298.296851316 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647478293.380396754 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647478268.953109023 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8' +<134>1 1647478257.084985274 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5' +<134>1 1647478256.341194724 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8' +<134>1 1647478221.255609741 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647478145.758483684 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' +<134>1 1647478121.589518727 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647478119.868477795 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8' +<134>1 1647478114.277373007 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647478105.395836204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8' +<134>1 1647478102.536782923 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647478092.108472035 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478087.649007204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478063.434847715 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647478054.846444450 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5' +<134>1 1647478039.876640835 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647478035.923601924 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478034.762765475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478026.502834244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478020.564810050 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478015.983013635 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8' +<134>1 1647478006.707247789 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8' +<134>1 1647478001.603867573 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477963.236026884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8' +<134>1 1647477958.900449163 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647477953.907583508 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8' +<134>1 1647477953.724449475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647477945.336342244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5' +<134>1 1647477944.121686758 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5' +<134>1 1647477940.363429956 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5' +<134>1 1647477930.038516204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' +<134>1 1647477927.225784460 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477920.683178115 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647477920.510699794 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' +<134>1 1647477891.986568005 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647477881.304873506 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647477873.769683395 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647477872.782332783 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' +<134>1 1647477871.675119845 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5' +<134>1 1647477864.088023180 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647477834.810489249 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8' +<134>1 1647477828.886032606 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8' +<134>1 1647477828.885258686 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8' +<134>1 1647477828.799864712 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8' +<134>1 1647477825.209110701 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8' +<134>1 1647477825.021409913 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5' +<134>1 1647477825.024707684 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5' +<134>1 1647477821.364087032 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647477796.382660565 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8' +<134>1 1647477796.382227661 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' +<134>1 1647477796.381818586 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' +<134>1 1647477795.407019364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8' +<134>1 1647477795.385494917 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' +<134>1 1647477795.385835866 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' +<134>1 1647477793.576467473 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647477793.576769233 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477786.805604872 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8' +<134>1 1647477780.705460109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' +<134>1 1647477778.398160444 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8' +<134>1 1647477773.586461164 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647477764.149946084 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647477764.145077176 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8' +<134>1 1647477764.143985243 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647477764.144283174 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647477763.225832662 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647477744.039850991 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5' +<134>1 1647477733.453967364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8' +<134>1 1647477733.446493073 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647477733.420037284 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647477733.419042244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647477733.411410011 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5' +<134>1 1647477716.431936901 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477716.431151781 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477716.429168101 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477715.612600884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647477702.046252324 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5' diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json new file mode 100644 index 00000000000..ba4237850fe --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -0,0 +1,7094 @@ +{ + "expected": [ + { + "@timestamp": "2022-03-17T01:13:24.334Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "6A-3A-3E-85-D9-F6" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479604.334549372 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_5" + }, + "source": { + "mac": "92-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:13:00.487Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479580.487048774 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_2" + }, + "source": { + "mac": "AA-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:12:32.047Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479552.047395997 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:12:17.315Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "ssid_spoofing_detected", + "vap": "1" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-DD-BE" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479537.315779167 Nash_AP_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "Nash_AP_1" + }, + "source": { + "mac": "AA-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:12:08.067Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479528.067423267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "92-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:11:33.484Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479493.484285651 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_5" + }, + "source": { + "mac": "AE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:11:29.882Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479489.882680227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "92-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:11:24.972Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479484.972992227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "92-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:11:06.965Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479466.965046920 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:11:01.791Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "ssid_spoofing_detected", + "vap": "13" + } + } + }, + "destination": { + "mac": "AE-17-E8-C7-DF-FD" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479461.791503607 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "AA-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:10:59.181Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479459.181348678 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_5" + }, + "source": { + "mac": "BE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:10:56.670Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479456.670048547 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "92-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:10:45.786Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "6A-3A-3E-85-D9-F6" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479445.786718001 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "AA-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:10:42.047Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479442.047436097 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "AA-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:59.287Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479399.287689295 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:36.407Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479376.407283267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "BE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:35.390Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479375.390251687 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_5" + }, + "source": { + "mac": "BE-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:31.594Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479371.594697827 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "92-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:16.473Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "78-55-CD-18-8F-76" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479356.473299205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "AC-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:14.489Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "ssid_spoofing_detected", + "vap": "13" + } + } + }, + "destination": { + "mac": "78-28-CA-AA-6A-4A" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479354.489175845 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "AC-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:13.446Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479353.446408965 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "92-17-D8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:12.553Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479352.553639439 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:10.428Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479350.428006877 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_5" + }, + "source": { + "mac": "AA-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:10.457Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479350.457045605 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "AE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:06.794Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "AE-17-E8-C7-D8-51" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479346.794313756 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:05.577Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-D4-1E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479345.577452767 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_1" + }, + "source": { + "mac": "AE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:09:01.816Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479341.816936841 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_3" + }, + "source": { + "mac": "AA-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:38.128Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "5C-AA-FD-5D-76-0E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479318.128184987 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "AA-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:33.473Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-C5-68" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479313.473165785 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "92-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:19.143Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "ssid_spoofing_detected", + "vap": "1" + } + } + }, + "destination": { + "mac": "78-28-CA-AA-6A-0A" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479299.143407174 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "Nash_AP_2" + }, + "source": { + "mac": "AA-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:19.115Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479299.115949027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:14.302Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479294.302067007 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_1" + }, + "source": { + "mac": "AA-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:08.469Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "0E-8D-FB-70-0F-A8" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479288.469042416 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "92-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:08:01.848Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479281.848397134 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "AA-17-D8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:07:58.839Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479278.839671334 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_2" + }, + "source": { + "mac": "92-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:07:11.942Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "ssid_spoofing_detected", + "vap": "13" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479231.942342036 Nash_AP_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8'" + }, + "observer": { + "hostname": "Nash_AP_4" + }, + "source": { + "mac": "AE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:07:07.438Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479227.438567311 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:07:02.927Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479222.927379747 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:07:02.927Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479222.927802947 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:07:02.728Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479222.728876109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:06:58.076Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-DC-6E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479218.076400635 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_3" + }, + "source": { + "mac": "92-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:06:43.375Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479203.375371107 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:06:39.622Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "6A-3A-3E-85-CA-4E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479199.622640025 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:06:02.641Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479162.641725608 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:06:02.670Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479162.670104087 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:06:01.182Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "ssid_spoofing_detected", + "vap": "1" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479161.182241827 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8'" + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "AA-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:05:58.314Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "ssid_spoofing_detected", + "vap": "1" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479158.314592227 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8'" + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "AE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:05:51.958Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479151.958073405 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "BE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:05:33.020Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "6A-3A-3E-85-D7-D4" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479133.020606043 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_3" + }, + "source": { + "mac": "92-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:05:27.384Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479127.384572447 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_1" + }, + "source": { + "mac": "BE-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:05:22.570Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479122.570882475 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_4" + }, + "source": { + "mac": "92-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:05:22.592Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479122.592807847 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_2" + }, + "source": { + "mac": "92-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:05:22.578Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479122.578597672 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:05:20.544Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "ssid_spoofing_detected", + "vap": "1" + } + } + }, + "destination": { + "mac": "90-AC-3F-02-31-59" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479120.544286631 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:04:51.258Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479091.258858944 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_4" + }, + "source": { + "mac": "92-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:04:20.425Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "78-28-CA-AA-6A-4A" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479060.425068327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_2" + }, + "source": { + "mac": "AC-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:03:57.677Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479037.677902643 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "92-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:03:56.783Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479036.783442760 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:03:40.949Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647479020.949227955 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:02:54.912Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "ssid_spoofing_detected", + "vap": "13" + } + } + }, + "destination": { + "mac": "08-A7-C0-3B-5A-95" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478974.912056258 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:02:46.089Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478966.089203455 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AE-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:02:30.860Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "78-28-CA-AA-69-96" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478950.860971410 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "AC-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:02:20.142Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "AE-17-E8-C7-E2-9D" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478940.142724327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_2" + }, + "source": { + "mac": "AE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:02:16.678Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-DC-6E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478936.678862087 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_2" + }, + "source": { + "mac": "92-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:01:47.739Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "AE-17-E8-C7-DF-FD" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478907.739529447 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_2" + }, + "source": { + "mac": "92-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:00:55.303Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478855.303776534 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:00:49.532Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478849.532951889 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_3" + }, + "source": { + "mac": "AE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:00:45.877Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478845.877942207 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_1" + }, + "source": { + "mac": "AC-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:00:22.111Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478822.111692485 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "92-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:00:18.039Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478818.039157925 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "92-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:00:00.349Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "ssid_spoofing_detected", + "vap": "13" + } + } + }, + "destination": { + "mac": "6E-DA-36-A2-39-71" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478800.349145072 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "Nash_AP_5" + }, + "source": { + "mac": "AA-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:59:59.177Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478799.177625347 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:59:48.838Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478788.838283552 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:59:42.939Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-C5-68" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478782.939898885 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "AA-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:59:42.932Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-C5-68" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478782.932299301 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "AA-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:59:42.930Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-C5-68" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478782.930289746 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "AE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:58:15.528Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "ssid_spoofing_detected", + "vap": "1" + } + } + }, + "destination": { + "mac": "78-28-CA-AA-6A-4A" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478695.528431433 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:58:13.465Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478693.465185593 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:57:49.549Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478669.549413486 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:57:06.517Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478626.517046787 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:56:31.602Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478591.602996834 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:56:09.035Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-C5-68" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478569.035635205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "92-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:56:07.751Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478567.751044590 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:55:59.571Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "5C-AA-FD-5D-76-0E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478559.571303907 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:55:58.540Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-DC-6E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478558.540066660 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_3" + }, + "source": { + "mac": "92-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:55:54.934Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478554.934781027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:55:41.587Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-DA-7A" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478541.587558726 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:55:34.671Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-DA-7A" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478534.671579931 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_3" + }, + "source": { + "mac": "AA-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:55:08.007Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "6A-3A-3E-85-D7-D4" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478508.007504325 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "AE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:54:47.013Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478487.013169927 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_2" + }, + "source": { + "mac": "AA-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:54:43.410Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478483.410677512 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_3" + }, + "source": { + "mac": "92-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:54:38.614Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478478.614722093 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_1" + }, + "source": { + "mac": "92-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:54:00.565Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478440.565782942 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:53:28.128Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478408.128821330 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:53:23.005Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "ssid_spoofing_detected", + "vap": "13" + } + } + }, + "destination": { + "mac": "AE-17-E8-C7-DF-FD" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478403.005811325 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "Nash_AP_5" + }, + "source": { + "mac": "AC-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:53:03.070Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478383.070405853 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_4" + }, + "source": { + "mac": "BE-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:52:53.816Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478373.816434235 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "AA-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:52:19.127Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "ssid_spoofing_detected", + "vap": "1" + } + } + }, + "destination": { + "mac": "78-28-CA-AA-6A-0A" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478339.127895652 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:51:38.296Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478298.296851316 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:51:33.380Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478293.380396754 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:51:08.953Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478268.953109023 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "BE-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:50:57.084Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "ssid_spoofing_detected", + "vap": "13" + } + } + }, + "destination": { + "mac": "EE-CE-D5-6A-B6-22" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478257.084985274 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:50:56.341Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478256.341194724 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:50:21.255Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478221.255609741 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:49:05.758Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "6A-3A-3E-85-D7-D4" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478145.758483684 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_4" + }, + "source": { + "mac": "AA-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:48:41.589Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "ssid_spoofing_detected", + "vap": "1" + } + } + }, + "destination": { + "mac": "AE-17-E8-C7-E1-41" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478121.589518727 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "Nash_AP_2" + }, + "source": { + "mac": "AC-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:48:39.868Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478119.868477795 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "BE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:48:34.277Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "ssid_spoofing_detected", + "vap": "1" + } + } + }, + "destination": { + "mac": "78-28-CA-AA-69-96" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478114.277373007 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:48:25.395Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478105.395836204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:48:22.536Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-D7-80" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478102.536782923 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:48:12.108Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478092.108472035 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "BE-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:48:07.649Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478087.649007204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:47:43.434Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478063.434847715 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "AC-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:47:34.846Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-DD-BE" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478054.846444450 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_4" + }, + "source": { + "mac": "92-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:47:19.876Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478039.876640835 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "AC-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:47:15.923Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478035.923601924 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:47:14.762Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478034.762765475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "AA-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:47:06.502Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478026.502834244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:47:00.564Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478020.564810050 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_8" + }, + "source": { + "mac": "BE-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:46:55.983Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478015.983013635 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "AA-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:46:46.707Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478006.707247789 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:46:41.603Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647478001.603867573 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_3" + }, + "source": { + "mac": "AC-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:46:03.236Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477963.236026884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:45:58.900Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477958.900449163 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:45:53.907Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477953.907583508 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:45:53.724Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-C5-68" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477953.724449475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "92-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:45:45.336Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-D8-54" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477945.336342244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:45:44.121Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "6A-3A-3E-85-CA-4E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477944.121686758 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:45:40.363Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "ssid_spoofing_detected", + "vap": "13" + } + } + }, + "destination": { + "mac": "34-8F-27-25-CC-48" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477940.363429956 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5'" + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:45:30.038Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477930.038516204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:45:27.225Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477927.225784460 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:45:20.683Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477920.683178115 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "92-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:45:20.510Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477920.510699794 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:44:51.986Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477891.986568005 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "AA-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:44:41.304Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477881.304873506 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_4" + }, + "source": { + "mac": "92-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:44:33.769Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477873.769683395 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_7" + }, + "source": { + "mac": "AA-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:44:32.782Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477872.782332783 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:44:31.675Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-DD-BE" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477871.675119845 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_6" + }, + "source": { + "mac": "92-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:44:24.088Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477864.088023180 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:54.810Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477834.810489249 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:48.886Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477828.886032606 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:48.885Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477828.885258686 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:48.799Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477828.799864712 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_5" + }, + "source": { + "mac": "92-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:45.209Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477825.209110701 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:45.021Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "6A-3A-3E-85-CA-4E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477825.021409913 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:45.024Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "AE-17-E8-C7-DF-FD" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477825.024707684 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:41.364Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477821.364087032 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:16.382Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477796.382660565 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:16.382Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477796.382227661 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:16.381Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477796.381818586 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:15.407Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477795.407019364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:15.385Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477795.385494917 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:15.385Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477795.385835866 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:13.576Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477793.576467473 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AE-17-D8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:13.576Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477793.576769233 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-D8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:06.805Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477786.805604872 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_5" + }, + "source": { + "mac": "92-17-C8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:43:00.705Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-DF-FD" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477780.705460109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-DF-FD" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:58.398Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477778.398160444 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:53.586Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "AE-17-E8-C7-D8-51" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477773.586461164 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:44.149Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477764.149946084 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "BE-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:44.145Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477764.145077176 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:44.143Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477764.143985243 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AE-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:44.144Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477764.144283174 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:43.225Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-D4-1E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477763.225832662 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_4" + }, + "source": { + "mac": "92-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:24.039Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "AE-17-E8-C7-DF-FD" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477744.039850991 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-C8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:13.453Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477733.453967364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:13.446Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477733.446493073 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "Nash_AP_3" + }, + "source": { + "mac": "BE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:13.420Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "38-BA-F8-CC-82-2E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477733.420037284 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:13.419Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "38-BA-F8-CC-82-2E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477733.419042244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:42:13.411Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-D8-51" + } + } + }, + "destination": { + "mac": "38-BA-F8-CC-82-2E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477733.411410011 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AE-17-D8-C7-D8-51" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:41:56.431Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-D8-54" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477716.431936901 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AA-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:41:56.431Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-D8-54" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477716.431151781 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:41:56.429Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-D8-54" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477716.429168101 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AE-17-D8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:41:55.612Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E2-9D" + } + } + }, + "destination": { + "mac": "FF-FF-FF-FF-FF-FF" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477715.612600884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "AC-17-C8-C7-E2-9D" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:41:42.046Z", + "cisco_meraki": { + "mr": { + "airmarshal_events": { + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "type": "rogue_ssid_detected", + "wired_mac": "AC-17-C8-C7-E1-41" + } + } + }, + "destination": { + "mac": "E2-CB-9C-B5-DC-6E" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "code": "airmarshal_events", + "original": "\u003c134\u003e1 1647477702.046252324 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5'" + }, + "network": { + "vlan": { + "id": "0" + } + }, + "observer": { + "hostname": "KT_Nashville_wireless" + }, + "source": { + "mac": "92-17-D8-C7-E1-41" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + } + ] +} \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml new file mode 100644 index 00000000000..c77ee783e0f --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml @@ -0,0 +1,59 @@ +--- +description: Pipeline for Cisco Meraki airmarshal_events type +processors: +- dissect: + description: Determine the airmarshal event type + field: event.original + pattern: "%{} airmarshal_events %{*type}=%{&type} %{}" +- rename: + field: type + target_field: cisco_meraki.mr.airmarshal_events.type +- dissect: + description: When type is rogue_ssid_detected + field: event.original + pattern: "%{} airmarshal_events %{} %{*ssid}='%{&ssid}' %{*bssid}='%{&bssid}' %{*src}='%{&src}' %{*dst}='%{&dst}' %{*wmac}='%{&wmac}' %{*vlanid}='%{&vlanid}' %{*ch}='%{&ch}' %{*rssi}='%{&rssi}' %{*fc_type}='%{&fc_type}' %{*fc_subtype}='%{&fc_subtype}'" + if: ctx?.cisco_meraki?.mr?.airmarshal_events?.type == 'rogue_ssid_detected' +- dissect: + description: When type is ssid_spoofing_detected + field: event.original + pattern: "%{} airmarshal_events %{} %{*ssid}='%{&ssid}' %{*vap}='%{&vap}' %{*bssid}='%{&bssid}' %{*src}='%{&src}' %{*dst}='%{&dst}' %{*ch}='%{&ch}' %{*rssi}='%{&rssi}' %{*fc_type}='%{&fc_type}' %{*fc_subtype}='%{&fc_subtype}'" + if: ctx?.cisco_meraki?.mr?.airmarshal_events?.type == 'ssid_spoofing_detected' +- rename: + field: ssid + target_field: cisco_meraki.mr.airmarshal_events.ssid +- rename: + field: bssid + target_field: cisco_meraki.mr.airmarshal_events.bssid +- rename: + field: vap + target_field: cisco_meraki.mr.airmarshal_events.vap + if: ctx?.cisco_meraki?.mr?.airmarshal_events?.type == 'ssid_spoofing_detected' +- gsub: + field: src + target_field: source.mac + pattern: '[-:.]' + replacement: '-' +- gsub: + field: dst + target_field: destination.mac + pattern: '[-:.]' + replacement: '-' +- gsub: + field: wired_mac + target_field: cisco_meraki.mr.airmarshal_events.wired_mac + pattern: '[-:.]' + replacement: '-' + if: ctx?.cisco_meraki?.mr?.airmarshal_events?.type == 'rogue_ssid_detected' +- rename: + field: vlan_id + target_field: network.vlan.id + if: ctx?.cisco_meraki?.mr?.airmarshal_events?.type == 'rogue_ssid_detected' +- rename: + field: channel + target_field: cisco_meraki.mr.airmarshal_events.channel +- rename: + field: fc_type + target_field: cisco_meraki.mr.airmarshal_events.fc_type +- rename: + field: fc_subtype + target_field: cisco_meraki.mr.airmarshal_events.fc_subtype diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index fe7757d467e..3ebc39fb5ef 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -29,6 +29,9 @@ processors: - pipeline: name: '{{ IngestPipeline "ipflows" }}' if: ctx.event.code == 'ip_flow_start' || ctx.event.code == 'ip_flow_end' +- pipeline: + name: '{{ IngestPipeline "airmarshal" }}' + if: ctx.event.code == 'airmarshal_events' - remove: field: - _temp @@ -41,6 +44,8 @@ processors: - translated_src_ip - translated_dst_ip - translated_port + - wired_mac + - rssi ignore_missing: true on_failure: - set: diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index 2aad7b4280b..c18325b6fd2 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -248,3 +248,5 @@ name: source.geo.region_iso_code - external: ecs name: source.geo.region_name +- external: ecs + name: network.vlan.id diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index 6a0e7d05a22..d77d35d6082 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -9,3 +9,27 @@ fields: - name: op type: keyword + - name: mr + type: group + fields: + - name: airmarshal_events + type: group + fields: + - name: type + type: keyword + - name: ssid + type: keyword + - name: bssid + type: keyword + - name: wired_mac + type: keyword + - name: channel + type: keyword + - name: rssi + type: keyword + - name: fc_type + type: keyword + - name: fc_subtype + type: keyword + - name: vap + type: keyword From 059cc9d8b1e3b1354b357dd9451acca06e02aaaf Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 22 Mar 2022 15:03:22 +1100 Subject: [PATCH 07/67] Add support for security_event ids_alerted --- .../test-airmarshal-events.log-expected.json | 175 ------------------ .../pipeline/test-flows.log-expected.json | 3 - .../pipeline/test-ip-flow.log-expected.json | 8 - .../test/pipeline/test-security-events.log | 1 + .../test-security-events.log-expected.json | 49 +++++ .../elasticsearch/ingest_pipeline/default.yml | 13 +- .../elasticsearch/ingest_pipeline/ipflows.yml | 6 +- .../ingest_pipeline/security.yml | 77 ++++++++ .../data_stream/log/fields/ecs.yml | 8 + .../data_stream/log/fields/fields.yml | 13 ++ 10 files changed, 160 insertions(+), 193 deletions(-) create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json create mode 100644 packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index ba4237850fe..735bf064f98 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -22,7 +22,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479604.334549372 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5'" }, "network": { @@ -63,7 +62,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479580.487048774 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8'" }, "network": { @@ -104,7 +102,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479552.047395997 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" }, "network": { @@ -145,7 +142,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479537.315779167 Nash_AP_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5'" }, "observer": { @@ -181,7 +177,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479528.067423267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8'" }, "network": { @@ -222,7 +217,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479493.484285651 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" }, "network": { @@ -263,7 +257,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479489.882680227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8'" }, "network": { @@ -304,7 +297,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479484.972992227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" }, "network": { @@ -345,7 +337,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479466.965046920 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8'" }, "network": { @@ -386,7 +377,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479461.791503607 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5'" }, "observer": { @@ -422,7 +412,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479459.181348678 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8'" }, "network": { @@ -463,7 +452,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479456.670048547 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8'" }, "network": { @@ -504,7 +492,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479445.786718001 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5'" }, "network": { @@ -545,7 +532,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479442.047436097 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8'" }, "network": { @@ -586,7 +572,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479399.287689295 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8'" }, "network": { @@ -627,7 +612,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479376.407283267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" }, "network": { @@ -668,7 +652,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479375.390251687 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8'" }, "network": { @@ -709,7 +692,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479371.594697827 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8'" }, "network": { @@ -750,7 +732,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479356.473299205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" }, "network": { @@ -791,7 +772,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479354.489175845 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5'" }, "observer": { @@ -827,7 +807,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479353.446408965 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8'" }, "network": { @@ -868,7 +847,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479352.553639439 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" }, "network": { @@ -909,7 +887,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479350.428006877 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" }, "network": { @@ -950,7 +927,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479350.457045605 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { @@ -991,7 +967,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479346.794313756 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5'" }, "network": { @@ -1032,7 +1007,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479345.577452767 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5'" }, "network": { @@ -1073,7 +1047,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479341.816936841 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8'" }, "network": { @@ -1114,7 +1087,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479318.128184987 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" }, "network": { @@ -1155,7 +1127,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479313.473165785 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5'" }, "network": { @@ -1196,7 +1167,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479299.143407174 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5'" }, "observer": { @@ -1232,7 +1202,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479299.115949027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8'" }, "network": { @@ -1273,7 +1242,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479294.302067007 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8'" }, "network": { @@ -1314,7 +1282,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479288.469042416 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5'" }, "network": { @@ -1355,7 +1322,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479281.848397134 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { @@ -1396,7 +1362,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479278.839671334 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8'" }, "network": { @@ -1437,7 +1402,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479231.942342036 Nash_AP_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8'" }, "observer": { @@ -1473,7 +1437,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479227.438567311 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8'" }, "network": { @@ -1514,7 +1477,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479222.927379747 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { @@ -1555,7 +1517,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479222.927802947 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8'" }, "network": { @@ -1596,7 +1557,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479222.728876109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8'" }, "network": { @@ -1637,7 +1597,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479218.076400635 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5'" }, "network": { @@ -1678,7 +1637,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479203.375371107 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8'" }, "network": { @@ -1719,7 +1677,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479199.622640025 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" }, "network": { @@ -1760,7 +1717,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479162.641725608 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" }, "network": { @@ -1801,7 +1757,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479162.670104087 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8'" }, "network": { @@ -1842,7 +1797,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479161.182241827 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8'" }, "observer": { @@ -1878,7 +1832,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479158.314592227 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8'" }, "observer": { @@ -1914,7 +1867,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479151.958073405 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { @@ -1955,7 +1907,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479133.020606043 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5'" }, "network": { @@ -1996,7 +1947,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479127.384572447 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8'" }, "network": { @@ -2037,7 +1987,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479122.570882475 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" }, "network": { @@ -2078,7 +2027,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479122.592807847 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8'" }, "network": { @@ -2119,7 +2067,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479122.578597672 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" }, "network": { @@ -2160,7 +2107,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479120.544286631 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5'" }, "observer": { @@ -2196,7 +2142,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479091.258858944 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" }, "network": { @@ -2237,7 +2182,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479060.425068327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5'" }, "network": { @@ -2278,7 +2222,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479037.677902643 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" }, "network": { @@ -2319,7 +2262,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479036.783442760 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" }, "network": { @@ -2360,7 +2302,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647479020.949227955 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" }, "network": { @@ -2401,7 +2342,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478974.912056258 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5'" }, "observer": { @@ -2437,7 +2377,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478966.089203455 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8'" }, "network": { @@ -2478,7 +2417,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478950.860971410 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" }, "network": { @@ -2519,7 +2457,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478940.142724327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5'" }, "network": { @@ -2560,7 +2497,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478936.678862087 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5'" }, "network": { @@ -2601,7 +2537,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478907.739529447 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" }, "network": { @@ -2642,7 +2577,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478855.303776534 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" }, "network": { @@ -2683,7 +2617,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478849.532951889 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { @@ -2724,7 +2657,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478845.877942207 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" }, "network": { @@ -2765,7 +2697,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478822.111692485 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8'" }, "network": { @@ -2806,7 +2737,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478818.039157925 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8'" }, "network": { @@ -2847,7 +2777,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478800.349145072 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5'" }, "observer": { @@ -2883,7 +2812,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478799.177625347 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8'" }, "network": { @@ -2924,7 +2852,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478788.838283552 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8'" }, "network": { @@ -2965,7 +2892,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478782.939898885 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5'" }, "network": { @@ -3006,7 +2932,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478782.932299301 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" }, "network": { @@ -3047,7 +2972,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478782.930289746 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" }, "network": { @@ -3088,7 +3012,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478695.528431433 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5'" }, "observer": { @@ -3124,7 +3047,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478693.465185593 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { @@ -3165,7 +3087,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478669.549413486 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { @@ -3206,7 +3127,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478626.517046787 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8'" }, "network": { @@ -3247,7 +3167,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478591.602996834 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" }, "network": { @@ -3288,7 +3207,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478569.035635205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5'" }, "network": { @@ -3329,7 +3247,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478567.751044590 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" }, "network": { @@ -3370,7 +3287,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478559.571303907 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5'" }, "network": { @@ -3411,7 +3327,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478558.540066660 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5'" }, "network": { @@ -3452,7 +3367,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478554.934781027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8'" }, "network": { @@ -3493,7 +3407,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478541.587558726 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" }, "network": { @@ -3534,7 +3447,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478534.671579931 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5'" }, "network": { @@ -3575,7 +3487,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478508.007504325 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" }, "network": { @@ -3616,7 +3527,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478487.013169927 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8'" }, "network": { @@ -3657,7 +3567,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478483.410677512 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8'" }, "network": { @@ -3698,7 +3607,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478478.614722093 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8'" }, "network": { @@ -3739,7 +3647,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478440.565782942 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" }, "network": { @@ -3780,7 +3687,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478408.128821330 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8'" }, "network": { @@ -3821,7 +3727,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478403.005811325 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5'" }, "observer": { @@ -3857,7 +3762,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478383.070405853 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" }, "network": { @@ -3898,7 +3802,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478373.816434235 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8'" }, "network": { @@ -3939,7 +3842,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478339.127895652 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5'" }, "observer": { @@ -3975,7 +3877,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478298.296851316 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" }, "network": { @@ -4016,7 +3917,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478293.380396754 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" }, "network": { @@ -4057,7 +3957,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478268.953109023 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8'" }, "network": { @@ -4098,7 +3997,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478257.084985274 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5'" }, "observer": { @@ -4134,7 +4032,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478256.341194724 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8'" }, "network": { @@ -4175,7 +4072,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478221.255609741 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { @@ -4216,7 +4112,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478145.758483684 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" }, "network": { @@ -4257,7 +4152,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478121.589518727 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5'" }, "observer": { @@ -4293,7 +4187,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478119.868477795 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8'" }, "network": { @@ -4334,7 +4227,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478114.277373007 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5'" }, "observer": { @@ -4370,7 +4262,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478105.395836204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8'" }, "network": { @@ -4411,7 +4302,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478102.536782923 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" }, "network": { @@ -4452,7 +4342,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478092.108472035 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" }, "network": { @@ -4493,7 +4382,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478087.649007204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8'" }, "network": { @@ -4534,7 +4422,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478063.434847715 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8'" }, "network": { @@ -4575,7 +4462,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478054.846444450 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5'" }, "network": { @@ -4616,7 +4502,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478039.876640835 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8'" }, "network": { @@ -4657,7 +4542,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478035.923601924 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" }, "network": { @@ -4698,7 +4582,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478034.762765475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" }, "network": { @@ -4739,7 +4622,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478026.502834244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" }, "network": { @@ -4780,7 +4662,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478020.564810050 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { @@ -4821,7 +4702,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478015.983013635 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8'" }, "network": { @@ -4862,7 +4742,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478006.707247789 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8'" }, "network": { @@ -4903,7 +4782,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647478001.603867573 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8'" }, "network": { @@ -4944,7 +4822,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477963.236026884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8'" }, "network": { @@ -4985,7 +4862,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477958.900449163 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { @@ -5026,7 +4902,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477953.907583508 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8'" }, "network": { @@ -5067,7 +4942,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477953.724449475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" }, "network": { @@ -5108,7 +4982,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477945.336342244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5'" }, "network": { @@ -5149,7 +5022,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477944.121686758 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5'" }, "network": { @@ -5190,7 +5062,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477940.363429956 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5'" }, "observer": { @@ -5226,7 +5097,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477930.038516204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" }, "network": { @@ -5267,7 +5137,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477927.225784460 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" }, "network": { @@ -5308,7 +5177,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477920.683178115 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8'" }, "network": { @@ -5349,7 +5217,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477920.510699794 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" }, "network": { @@ -5390,7 +5257,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477891.986568005 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8'" }, "network": { @@ -5431,7 +5297,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477881.304873506 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { @@ -5472,7 +5337,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477873.769683395 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" }, "network": { @@ -5513,7 +5377,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477872.782332783 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" }, "network": { @@ -5554,7 +5417,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477871.675119845 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5'" }, "network": { @@ -5595,7 +5457,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477864.088023180 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8'" }, "network": { @@ -5636,7 +5497,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477834.810489249 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8'" }, "network": { @@ -5677,7 +5537,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477828.886032606 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8'" }, "network": { @@ -5718,7 +5577,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477828.885258686 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8'" }, "network": { @@ -5759,7 +5617,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477828.799864712 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8'" }, "network": { @@ -5800,7 +5657,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477825.209110701 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8'" }, "network": { @@ -5841,7 +5697,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477825.021409913 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5'" }, "network": { @@ -5882,7 +5737,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477825.024707684 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5'" }, "network": { @@ -5923,7 +5777,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477821.364087032 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { @@ -5964,7 +5817,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477796.382660565 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8'" }, "network": { @@ -6005,7 +5857,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477796.382227661 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" }, "network": { @@ -6046,7 +5897,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477796.381818586 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" }, "network": { @@ -6087,7 +5937,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477795.407019364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8'" }, "network": { @@ -6128,7 +5977,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477795.385494917 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" }, "network": { @@ -6169,7 +6017,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477795.385835866 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" }, "network": { @@ -6210,7 +6057,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477793.576467473 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8'" }, "network": { @@ -6251,7 +6097,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477793.576769233 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" }, "network": { @@ -6292,7 +6137,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477786.805604872 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8'" }, "network": { @@ -6333,7 +6177,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477780.705460109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" }, "network": { @@ -6374,7 +6217,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477778.398160444 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8'" }, "network": { @@ -6415,7 +6257,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477773.586461164 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" }, "network": { @@ -6456,7 +6297,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477764.149946084 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" }, "network": { @@ -6497,7 +6337,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477764.145077176 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8'" }, "network": { @@ -6538,7 +6377,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477764.143985243 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" }, "network": { @@ -6579,7 +6417,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477764.144283174 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" }, "network": { @@ -6620,7 +6457,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477763.225832662 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" }, "network": { @@ -6661,7 +6497,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477744.039850991 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5'" }, "network": { @@ -6702,7 +6537,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477733.453967364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8'" }, "network": { @@ -6743,7 +6577,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477733.446493073 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8'" }, "network": { @@ -6784,7 +6617,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477733.420037284 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" }, "network": { @@ -6825,7 +6657,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477733.419042244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" }, "network": { @@ -6866,7 +6697,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477733.411410011 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5'" }, "network": { @@ -6907,7 +6737,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477716.431936901 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" }, "network": { @@ -6948,7 +6777,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477716.431151781 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" }, "network": { @@ -6989,7 +6817,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477716.429168101 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" }, "network": { @@ -7030,7 +6857,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477715.612600884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" }, "network": { @@ -7071,7 +6897,6 @@ "version": "1.12.0" }, "event": { - "code": "airmarshal_events", "original": "\u003c134\u003e1 1647477702.046252324 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5'" }, "network": { diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index 725f13a2247..557f845e8e0 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -17,7 +17,6 @@ "version": "1.12.0" }, "event": { - "code": "flows", "original": "\u003c134\u003e1 1647478988.289402144 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600" }, "network": { @@ -46,7 +45,6 @@ "version": "1.12.0" }, "event": { - "code": "flows", "original": "\u003c134\u003e1 1647478988.476061795 ATT_Primary flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all" }, "network": { @@ -81,7 +79,6 @@ "version": "1.12.0" }, "event": { - "code": "flows", "original": "\u003c134\u003e1 1647478988.596151424 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500" }, "network": { diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json index 97023c5caec..e6c0fcbaf26 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json @@ -22,7 +22,6 @@ "version": "1.12.0" }, "event": { - "code": "ip_flow_start", "original": "\u003c134\u003e1 1647479278.997155282 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294" }, "network": { @@ -68,7 +67,6 @@ "version": "1.12.0" }, "event": { - "code": "ip_flow_start", "original": "\u003c134\u003e1 1647479278.995279215 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061" }, "network": { @@ -114,7 +112,6 @@ "version": "1.12.0" }, "event": { - "code": "ip_flow_start", "original": "\u003c134\u003e1 1647479278.974067126 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401" }, "network": { @@ -166,7 +163,6 @@ "version": "1.12.0" }, "event": { - "code": "ip_flow_start", "original": "\u003c134\u003e1 1647479278.911594876 ATT_Primary ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272" }, "network": { @@ -227,7 +223,6 @@ "version": "1.12.0" }, "event": { - "code": "ip_flow_end", "original": "\u003c134\u003e1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" }, "network": { @@ -267,7 +262,6 @@ "version": "1.12.0" }, "event": { - "code": "ip_flow_end", "original": "\u003c134\u003e1 1647479325.842384731 ATT_Primary ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422" }, "network": { @@ -328,7 +322,6 @@ "version": "1.12.0" }, "event": { - "code": "ip_flow_end", "original": "\u003c134\u003e1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" }, "network": { @@ -368,7 +361,6 @@ "version": "1.12.0" }, "event": { - "code": "ip_flow_end", "original": "\u003c134\u003e1 1647479325.755292025 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498" }, "network": { diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log new file mode 100644 index 00000000000..08cd8746633 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log @@ -0,0 +1 @@ +<134>1 1637691198.348361125 ATT_Primary security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json new file mode 100644 index 00000000000..829572908ed --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -0,0 +1,49 @@ +{ + "expected": [ + { + "@timestamp": "2021-11-23T18:13:18.348Z", + "cisco_meraki": { + "mx": { + "security_event": { + "decision": "allowed", + "dhost": "D0-AB-D5-7B-43-73", + "priority": "1", + "signature": "1:29708:4", + "type": "ids_alerted" + } + } + }, + "destination": { + "ip": "10.0.3.162", + "port": 56391 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1637691198.348361125 ATT_Primary security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected" + }, + "network": { + "direction": "ingress", + "protocol": "tcp/ip" + }, + "observer": { + "hostname": "ATT_Primary" + }, + "source": { + "ip": "67.43.156.12", + "port": 80 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ], + "threat": { + "indicator": { + "description": " BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", + "last_seen": "1637691198.330873" + } + } + } + ] +} \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 3ebc39fb5ef..bb2430fa64b 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -10,7 +10,7 @@ processors: - dissect: description: Extract syslog words field: event.original - pattern: "%{} %{_temp.ts_nano} %{observer.hostname} %{event.code} %{}" + pattern: "%{} %{_temp.ts_nano} %{observer.hostname} %{_temp.event_type} %{}" - grok: description: Reduce precision from nanos to millis and set timestamp field: _temp.ts_nano @@ -25,13 +25,16 @@ processors: timezone: '{{{_conf.tz_offset}}}' - pipeline: name: '{{ IngestPipeline "flows" }}' - if: ctx.event.code == 'flows' + if: ctx._temp.event_type == 'flows' - pipeline: name: '{{ IngestPipeline "ipflows" }}' - if: ctx.event.code == 'ip_flow_start' || ctx.event.code == 'ip_flow_end' + if: ctx._temp.event_type == 'ip_flow_start' || ctx._temp.event_type == 'ip_flow_end' - pipeline: name: '{{ IngestPipeline "airmarshal" }}' - if: ctx.event.code == 'airmarshal_events' + if: ctx._temp.event_type == 'airmarshal_events' +- pipeline: + name: '{{ IngestPipeline "security" }}' + if: ctx._temp.event_type == 'security_event' - remove: field: - _temp @@ -46,6 +49,8 @@ processors: - translated_port - wired_mac - rssi + - protocol + - dhost ignore_missing: true on_failure: - set: diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml index 2371fa976ae..c3a79e3c5ce 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml @@ -4,17 +4,17 @@ processors: - dissect: description: Determine if the token is src= or operation field: event.original - pattern: "%{} %{} %{} %{event.code} %{_temp.token} %{}" + pattern: "%{} %{} %{} %{_temp.event_type} %{_temp.token} %{}" - dissect: description: Case for src= follows ip_flow_start field: event.original pattern: "%{} ip_flow_start %{*src}=%{&src} %{*dst}=%{&dst} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport} %{*tsi}=%{&tsi} %{*tp}=%{&tp}" - if: ctx.event.code == 'ip_flow_start' && ctx._temp.token.startsWith("src=") == true + if: ctx._temp.event_type == 'ip_flow_start' && ctx._temp.token.startsWith("src=") == true - dissect: description: Case for src= follows ip_flow_end field: event.original pattern: "%{} ip_flow_end %{*src}=%{&src} %{*dst}=%{&dst} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport} %{*tsi_or_tdi}=%{&tsi_or_tdi} %{*tp}=%{&tp}" - if: ctx.event.code == 'ip_flow_end' && ctx._temp.token.startsWith("src=") == true + if: ctx._temp.event_type == 'ip_flow_end' && ctx._temp.token.startsWith("src=") == true # source field IP:port handling - set: field: source.ip diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml new file mode 100644 index 00000000000..4aad8f80f90 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml @@ -0,0 +1,77 @@ +--- +description: Pipeline for Cisco Meraki security_event type +processors: +- dissect: + description: Determine the security event type + field: event.original + pattern: "%{} security_event %{type} %{}" +- rename: + field: type + target_field: cisco_meraki.mx.security_event.type +- dissect: + field: event.original + pattern: "%{} ids_alerted %{*sig}=%{&sig} %{*pri}=%{&pri} %{*ts}=%{&ts} %{*dhost}=%{&dhost} %{*dir}=%{&dir} %{*prot}=%{&prot} %{*src}=%{&src} %{*dst}=%{&dst} %{}" + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- rename: + field: priority + target_field: cisco_meraki.mx.security_event.priority + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- rename: + field: signature + target_field: cisco_meraki.mx.security_event.signature + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- rename: + field: timestamp + target_field: threat.indicator.last_seen + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- gsub: + field: dhost + target_field: cisco_meraki.mx.security_event.dhost + pattern: '[-:.]' + replacement: '-' + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- rename: + field: direction + target_field: network.direction + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- lowercase: + field: protocol + target_field: network.protocol + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- dissect: + field: src + pattern: "%{source.ip}:%{sport}" + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- dissect: + field: dst + pattern: "%{destination.ip}:%{dport}" + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- convert: + field: sport + target_field: source.port + type: long + if: ctx?.sport != "0" && ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + ignore_failure: true +- convert: + field: dport + target_field: destination.port + type: long + if: ctx?.dport != "0" && ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + ignore_failure: true +# Process the remaining after dst=. It can have "decision= message: *" or just "message: *" +- dissect: + field: event.original + pattern: "%{} dst=%{?dst} %{*decision}=%{&decision} %{*message}:%{&message}" + ignore_failure: true +- dissect: + field: event.original + pattern: "%{} dst=%{?dst} %{*message}:%{&message}" + if: ctx?.decision == null +- rename: + field: message + target_field: threat.indicator.description + ignore_missing: true +- rename: + field: decision + target_field: cisco_meraki.mx.security_event.decision + ignore_missing: true diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index c18325b6fd2..a2a7b4fca23 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -250,3 +250,11 @@ name: source.geo.region_name - external: ecs name: network.vlan.id +- external: ecs + name: threat.indicator.last_seen +- external: ecs + name: threat.indicator.description +- external: ecs + name: network.direction +- external: ecs + name: network.protocol diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index d77d35d6082..703ab66a605 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -9,6 +9,19 @@ fields: - name: op type: keyword + - name: security_event + type: group + fields: + - name: type + type: keyword + - name: signature + type: keyword + - name: priority + type: keyword + - name: dhost + type: keyword + - name: decision + type: keyword - name: mr type: group fields: From 5cc4249a6bc82eb3ecede62f63c3a2a02328bb2d Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 22 Mar 2022 16:20:38 +1100 Subject: [PATCH 08/67] Add support for security_event security_filtering_file_scanned type --- .../test/pipeline/test-security-events.log | 1 + .../test-security-events.log-expected.json | 75 +++++++++++ .../ingest_pipeline/security.yml | 121 +++++++++++++++--- .../data_stream/log/fields/ecs.yml | 8 ++ .../data_stream/log/fields/fields.yml | 4 + 5 files changed, 192 insertions(+), 17 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log index 08cd8746633..98e665c6487 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log @@ -1 +1,2 @@ <134>1 1637691198.348361125 ATT_Primary security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected +<134>1 1637691298.984398273 ATT_Primary security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index 829572908ed..d693bc3b28c 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -31,6 +31,18 @@ "hostname": "ATT_Primary" }, "source": { + "as": { + "number": 35908 + }, + "geo": { + "continent_name": "Asia", + "country_iso_code": "BT", + "country_name": "Bhutan", + "location": { + "lat": 27.5, + "lon": 90.5 + } + }, "ip": "67.43.156.12", "port": 80 }, @@ -44,6 +56,69 @@ "last_seen": "1637691198.330873" } } + }, + { + "@timestamp": "2021-11-23T18:14:58.984Z", + "cisco_meraki": { + "mx": { + "security_event": { + "action": "block", + "mac": "98-5A-EB-E1-81-2F", + "type": "security_filtering_file_scanned" + } + } + }, + "destination": { + "as": { + "number": 35908 + }, + "geo": { + "continent_name": "Asia", + "country_iso_code": "BT", + "country_name": "Bhutan", + "location": { + "lat": 27.5, + "lon": 90.5 + } + }, + "ip": "67.43.156.15", + "port": 80 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1637691298.984398273 ATT_Primary security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block" + }, + "observer": { + "hostname": "ATT_Primary" + }, + "source": { + "ip": "192.168.128.2", + "port": 53150 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ], + "threat": { + "enrichments": { + "indicator": { + "file": { + "hash": { + "sha256": "275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f" + }, + "name": "EICAR:EICAR_Test_file_not_a_virus-tpd" + } + } + }, + "indicator": { + "reference": "http://www.eicar.org/download/eicar.com.txt" + }, + "software": { + "type": "malicious" + } + } } ] } \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml index 4aad8f80f90..e605180625f 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml @@ -8,10 +8,18 @@ processors: - rename: field: type target_field: cisco_meraki.mx.security_event.type + +# scan event based on event type - dissect: field: event.original pattern: "%{} ids_alerted %{*sig}=%{&sig} %{*pri}=%{&pri} %{*ts}=%{&ts} %{*dhost}=%{&dhost} %{*dir}=%{&dir} %{*prot}=%{&prot} %{*src}=%{&src} %{*dst}=%{&dst} %{}" if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- dissect: + field: event.original + pattern: "%{} security_filtering_file_scanned %{*url}=%{&url} %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} %{*name}='%{&name}' %{*sha256}=%{&sha256} %{*disp}=%{&disp} %{*action}=%{&action}" + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' + +# handle fields of ids_alerted type - rename: field: priority target_field: cisco_meraki.mx.security_event.priority @@ -38,40 +46,119 @@ processors: field: protocol target_field: network.protocol if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +# Process the remaining after dst=. It can have "decision= message: *" or just "message: *" +- dissect: + field: event.original + pattern: "%{} dst=%{?ignore} %{*decision}=%{&decision} %{*message}:%{&message}" + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + ignore_failure: true +- dissect: + field: event.original + pattern: "%{} dst=%{?ignore} %{*message}:%{&message}" + if: ctx?.decision == null && ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- rename: + field: message + target_field: threat.indicator.description + ignore_missing: true + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' +- rename: + field: decision + target_field: cisco_meraki.mx.security_event.decision + ignore_missing: true + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + +# handle fields of security_filtering_file_scanned type +- rename: + field: url + target_field: threat.indicator.reference + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' +- gsub: + field: mac + target_field: cisco_meraki.mx.security_event.mac + pattern: '[-:.]' + replacement: '-' + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' +- rename: + field: name + target_field: threat.enrichments.indicator.file.name + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' +- rename: + field: sha256 + target_field: threat.enrichments.indicator.file.hash.sha256 + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' +- rename: + field: disposition + target_field: threat.software.type + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' +- rename: + field: action + target_field: cisco_meraki.mx.security_event.action + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' + +# fields common to more than one event type - dissect: field: src pattern: "%{source.ip}:%{sport}" - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' - dissect: field: dst pattern: "%{destination.ip}:%{dport}" - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' - convert: field: sport target_field: source.port type: long - if: ctx?.sport != "0" && ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + if: ctx?.sport != "0" ignore_failure: true - convert: field: dport target_field: destination.port type: long - if: ctx?.dport != "0" && ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' - ignore_failure: true -# Process the remaining after dst=. It can have "decision= message: *" or just "message: *" -- dissect: - field: event.original - pattern: "%{} dst=%{?dst} %{*decision}=%{&decision} %{*message}:%{&message}" + if: ctx?.dport != "0" ignore_failure: true -- dissect: - field: event.original - pattern: "%{} dst=%{?dst} %{*message}:%{&message}" - if: ctx?.decision == null +# IP Geolocation Lookup (source) +- geoip: + field: source.ip + target_field: source.geo + ignore_missing: true + if: ctx.source?.geo == null && ctx?.source?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: source.ip + target_field: source.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.source?.ip != null - rename: - field: message - target_field: threat.indicator.description + field: source.as.asn + target_field: source.as.number ignore_missing: true - rename: - field: decision - target_field: cisco_meraki.mx.security_event.decision + field: source.as.organization_name + target_field: source.as.organization.name + ignore_missing: true +# IP Geolocation Lookup (destination) +- geoip: + field: destination.ip + target_field: destination.geo + ignore_missing: true + if: ctx.destination?.geo == null && ctx?.destination?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: destination.ip + target_field: destination.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.destination?.ip != null +- rename: + field: destination.as.asn + target_field: destination.as.number + ignore_missing: true +- rename: + field: destination.as.organization_name + target_field: destination.as.organization.name ignore_missing: true diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index a2a7b4fca23..8f3fe31f0f6 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -250,10 +250,18 @@ name: source.geo.region_name - external: ecs name: network.vlan.id +- external: ecs + name: threat.software.type - external: ecs name: threat.indicator.last_seen - external: ecs name: threat.indicator.description +- external: ecs + name: threat.indicator.reference +- external: ecs + name: threat.enrichments.indicator.file.name +- external: ecs + name: threat.enrichments.indicator.file.hash.sha256 - external: ecs name: network.direction - external: ecs diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index 703ab66a605..c289314b621 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -22,6 +22,10 @@ type: keyword - name: decision type: keyword + - name: mac + type: keyword + - name: action + type: keyword - name: mr type: group fields: From f5ad6e6df80663f40342258462f16eb6be26319c Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 22 Mar 2022 16:34:14 +1100 Subject: [PATCH 09/67] Add support for security_event security_filtering_disposition_change --- .../test/pipeline/test-security-events.log | 1 + .../test-security-events.log-expected.json | 39 +++++++++++++++++++ .../ingest_pipeline/security.yml | 20 ++++++---- 3 files changed, 53 insertions(+), 7 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log index 98e665c6487..12dba3ae0c2 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log @@ -1,2 +1,3 @@ <134>1 1637691198.348361125 ATT_Primary security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected <134>1 1637691298.984398273 ATT_Primary security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block +<134>1 1637783435.239819833 ATT_Primary security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index d693bc3b28c..95408fdcf37 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -119,6 +119,45 @@ "type": "malicious" } } + }, + { + "@timestamp": "2021-11-24T19:50:35.239Z", + "cisco_meraki": { + "mx": { + "security_event": { + "action": "allow", + "type": "security_filtering_disposition_change" + } + } + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1637783435.239819833 ATT_Primary security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow" + }, + "observer": { + "hostname": "ATT_Primary" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ], + "threat": { + "enrichments": { + "indicator": { + "file": { + "hash": { + "sha256": "275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f" + }, + "name": "EICAR:EICAR_Test_file_not_a_virus-tpd" + } + } + }, + "software": { + "type": "malicious" + } + } } ] } \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml index e605180625f..52b2c85adce 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml @@ -18,6 +18,10 @@ processors: field: event.original pattern: "%{} security_filtering_file_scanned %{*url}=%{&url} %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} %{*name}='%{&name}' %{*sha256}=%{&sha256} %{*disp}=%{&disp} %{*action}=%{&action}" if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' +- dissect: + field: event.original + pattern: "%{} security_filtering_disposition_change %{*name}=%{&name} %{*sha256}=%{&sha256} %{*disp}=%{&disp} %{*action}=%{&action}" + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_disposition_change' # handle fields of ids_alerted type - rename: @@ -67,7 +71,7 @@ processors: ignore_missing: true if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' -# handle fields of security_filtering_file_scanned type +# handle fields of security_filtering_file_scanned or security_filtering_disposition_change type - rename: field: url target_field: threat.indicator.reference @@ -81,38 +85,40 @@ processors: - rename: field: name target_field: threat.enrichments.indicator.file.name - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_disposition_change' - rename: field: sha256 target_field: threat.enrichments.indicator.file.hash.sha256 - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_disposition_change' - rename: field: disposition target_field: threat.software.type - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_disposition_change' - rename: field: action target_field: cisco_meraki.mx.security_event.action - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' + if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_disposition_change' # fields common to more than one event type - dissect: field: src pattern: "%{source.ip}:%{sport}" + if: ctx?.cisco_meraki?.mx?.security_event?.type != 'security_filtering_disposition_change' - dissect: field: dst pattern: "%{destination.ip}:%{dport}" + if: ctx?.cisco_meraki?.mx?.security_event?.type != 'security_filtering_disposition_change' - convert: field: sport target_field: source.port type: long - if: ctx?.sport != "0" + if: ctx?.sport != "0" && ctx?.cisco_meraki?.mx?.security_event?.type != 'security_filtering_disposition_change' ignore_failure: true - convert: field: dport target_field: destination.port type: long - if: ctx?.dport != "0" + if: ctx?.dport != "0" && ctx?.cisco_meraki?.mx?.security_event?.type != 'security_filtering_disposition_change' ignore_failure: true # IP Geolocation Lookup (source) - geoip: From 686d7f3d1eb2d923d5b15edaa4de8d79f715fea0 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Thu, 24 Mar 2022 01:06:44 +1100 Subject: [PATCH 10/67] Refactor - refactor fields to use flattened - refactor pipelines to use kv - have field groups for certain categories where src and dst ips are available --- .../test-airmarshal-events.log-expected.json | 3850 ++++++++--------- .../test/pipeline/test-events-inprogress.log | 5 + .../test-events-inprogress.log-expected.json | 181 + .../pipeline/test-flows.log-expected.json | 17 +- .../pipeline/test-ip-flow.log-expected.json | 24 + .../test-security-events.log-expected.json | 38 +- .../ingest_pipeline/airmarshal.yml | 29 +- .../elasticsearch/ingest_pipeline/default.yml | 16 +- .../elasticsearch/ingest_pipeline/events.yml | 69 + .../elasticsearch/ingest_pipeline/flows.yml | 2 +- .../ingest_pipeline/security.yml | 63 +- .../data_stream/log/fields/fields.yml | 91 +- 12 files changed, 2340 insertions(+), 2045 deletions(-) create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json create mode 100644 packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index 735bf064f98..882721d25f2 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -3,17 +3,17 @@ { "@timestamp": "2022-03-17T01:13:24.334Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "6A-3A-3E-85-D9-F6" @@ -43,17 +43,17 @@ { "@timestamp": "2022-03-17T01:13:00.487Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -83,17 +83,17 @@ { "@timestamp": "2022-03-17T01:12:32.047Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -123,17 +123,17 @@ { "@timestamp": "2022-03-17T01:12:17.315Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "ssid_spoofing_detected", - "vap": "1" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "vap": "1" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-DD-BE" @@ -158,17 +158,17 @@ { "@timestamp": "2022-03-17T01:12:08.067Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -198,17 +198,17 @@ { "@timestamp": "2022-03-17T01:11:33.484Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -238,17 +238,17 @@ { "@timestamp": "2022-03-17T01:11:29.882Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -278,17 +278,17 @@ { "@timestamp": "2022-03-17T01:11:24.972Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -318,17 +318,17 @@ { "@timestamp": "2022-03-17T01:11:06.965Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -358,17 +358,17 @@ { "@timestamp": "2022-03-17T01:11:01.791Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "ssid_spoofing_detected", - "vap": "13" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "vap": "13" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "AE-17-E8-C7-DF-FD" @@ -393,17 +393,17 @@ { "@timestamp": "2022-03-17T01:10:59.181Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -433,17 +433,17 @@ { "@timestamp": "2022-03-17T01:10:56.670Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -473,17 +473,17 @@ { "@timestamp": "2022-03-17T01:10:45.786Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "6A-3A-3E-85-D9-F6" @@ -513,17 +513,17 @@ { "@timestamp": "2022-03-17T01:10:42.047Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -553,17 +553,17 @@ { "@timestamp": "2022-03-17T01:09:59.287Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -593,17 +593,17 @@ { "@timestamp": "2022-03-17T01:09:36.407Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -633,17 +633,17 @@ { "@timestamp": "2022-03-17T01:09:35.390Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -673,17 +673,17 @@ { "@timestamp": "2022-03-17T01:09:31.594Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -713,17 +713,17 @@ { "@timestamp": "2022-03-17T01:09:16.473Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "78-55-CD-18-8F-76" @@ -753,17 +753,17 @@ { "@timestamp": "2022-03-17T01:09:14.489Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "ssid_spoofing_detected", - "vap": "13" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "vap": "13" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "78-28-CA-AA-6A-4A" @@ -788,17 +788,17 @@ { "@timestamp": "2022-03-17T01:09:13.446Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -828,17 +828,17 @@ { "@timestamp": "2022-03-17T01:09:12.553Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -868,17 +868,17 @@ { "@timestamp": "2022-03-17T01:09:10.428Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -908,17 +908,17 @@ { "@timestamp": "2022-03-17T01:09:10.457Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -948,17 +948,17 @@ { "@timestamp": "2022-03-17T01:09:06.794Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "AE-17-E8-C7-D8-51" @@ -988,17 +988,17 @@ { "@timestamp": "2022-03-17T01:09:05.577Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-D4-1E" @@ -1028,17 +1028,17 @@ { "@timestamp": "2022-03-17T01:09:01.816Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1068,17 +1068,17 @@ { "@timestamp": "2022-03-17T01:08:38.128Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "5C-AA-FD-5D-76-0E" @@ -1108,17 +1108,17 @@ { "@timestamp": "2022-03-17T01:08:33.473Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -1148,17 +1148,17 @@ { "@timestamp": "2022-03-17T01:08:19.143Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "ssid_spoofing_detected", - "vap": "1" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "vap": "1" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "78-28-CA-AA-6A-0A" @@ -1183,17 +1183,17 @@ { "@timestamp": "2022-03-17T01:08:19.115Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1223,17 +1223,17 @@ { "@timestamp": "2022-03-17T01:08:14.302Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1263,17 +1263,17 @@ { "@timestamp": "2022-03-17T01:08:08.469Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "0E-8D-FB-70-0F-A8" @@ -1303,17 +1303,17 @@ { "@timestamp": "2022-03-17T01:08:01.848Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1343,17 +1343,17 @@ { "@timestamp": "2022-03-17T01:07:58.839Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1383,17 +1383,17 @@ { "@timestamp": "2022-03-17T01:07:11.942Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "ssid_spoofing_detected", - "vap": "13" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "vap": "13" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1418,17 +1418,17 @@ { "@timestamp": "2022-03-17T01:07:07.438Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1458,17 +1458,17 @@ { "@timestamp": "2022-03-17T01:07:02.927Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1498,17 +1498,17 @@ { "@timestamp": "2022-03-17T01:07:02.927Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1538,17 +1538,17 @@ { "@timestamp": "2022-03-17T01:07:02.728Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1578,17 +1578,17 @@ { "@timestamp": "2022-03-17T01:06:58.076Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-DC-6E" @@ -1618,17 +1618,17 @@ { "@timestamp": "2022-03-17T01:06:43.375Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1658,17 +1658,17 @@ { "@timestamp": "2022-03-17T01:06:39.622Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "6A-3A-3E-85-CA-4E" @@ -1698,17 +1698,17 @@ { "@timestamp": "2022-03-17T01:06:02.641Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1738,17 +1738,17 @@ { "@timestamp": "2022-03-17T01:06:02.670Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1778,17 +1778,17 @@ { "@timestamp": "2022-03-17T01:06:01.182Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "ssid_spoofing_detected", - "vap": "1" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "vap": "1" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1813,17 +1813,17 @@ { "@timestamp": "2022-03-17T01:05:58.314Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "ssid_spoofing_detected", - "vap": "1" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "vap": "1" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1848,17 +1848,17 @@ { "@timestamp": "2022-03-17T01:05:51.958Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1888,17 +1888,17 @@ { "@timestamp": "2022-03-17T01:05:33.020Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "6A-3A-3E-85-D7-D4" @@ -1928,17 +1928,17 @@ { "@timestamp": "2022-03-17T01:05:27.384Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1968,17 +1968,17 @@ { "@timestamp": "2022-03-17T01:05:22.570Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2008,17 +2008,17 @@ { "@timestamp": "2022-03-17T01:05:22.592Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2048,17 +2048,17 @@ { "@timestamp": "2022-03-17T01:05:22.578Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2088,17 +2088,17 @@ { "@timestamp": "2022-03-17T01:05:20.544Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "ssid_spoofing_detected", - "vap": "1" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "vap": "1" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "90-AC-3F-02-31-59" @@ -2123,17 +2123,17 @@ { "@timestamp": "2022-03-17T01:04:51.258Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2163,17 +2163,17 @@ { "@timestamp": "2022-03-17T01:04:20.425Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "78-28-CA-AA-6A-4A" @@ -2203,17 +2203,17 @@ { "@timestamp": "2022-03-17T01:03:57.677Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2243,17 +2243,17 @@ { "@timestamp": "2022-03-17T01:03:56.783Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2283,17 +2283,17 @@ { "@timestamp": "2022-03-17T01:03:40.949Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2323,17 +2323,17 @@ { "@timestamp": "2022-03-17T01:02:54.912Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "ssid_spoofing_detected", - "vap": "13" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "vap": "13" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "08-A7-C0-3B-5A-95" @@ -2358,17 +2358,17 @@ { "@timestamp": "2022-03-17T01:02:46.089Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2398,17 +2398,17 @@ { "@timestamp": "2022-03-17T01:02:30.860Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "78-28-CA-AA-69-96" @@ -2438,17 +2438,17 @@ { "@timestamp": "2022-03-17T01:02:20.142Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "AE-17-E8-C7-E2-9D" @@ -2478,17 +2478,17 @@ { "@timestamp": "2022-03-17T01:02:16.678Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-DC-6E" @@ -2518,17 +2518,17 @@ { "@timestamp": "2022-03-17T01:01:47.739Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "AE-17-E8-C7-DF-FD" @@ -2558,17 +2558,17 @@ { "@timestamp": "2022-03-17T01:00:55.303Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2598,17 +2598,17 @@ { "@timestamp": "2022-03-17T01:00:49.532Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2638,17 +2638,17 @@ { "@timestamp": "2022-03-17T01:00:45.877Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2678,17 +2678,17 @@ { "@timestamp": "2022-03-17T01:00:22.111Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2718,17 +2718,17 @@ { "@timestamp": "2022-03-17T01:00:18.039Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2758,17 +2758,17 @@ { "@timestamp": "2022-03-17T01:00:00.349Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "ssid_spoofing_detected", - "vap": "13" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "vap": "13" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "6E-DA-36-A2-39-71" @@ -2793,17 +2793,17 @@ { "@timestamp": "2022-03-17T00:59:59.177Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2833,17 +2833,17 @@ { "@timestamp": "2022-03-17T00:59:48.838Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2873,17 +2873,17 @@ { "@timestamp": "2022-03-17T00:59:42.939Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -2913,17 +2913,17 @@ { "@timestamp": "2022-03-17T00:59:42.932Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -2953,17 +2953,17 @@ { "@timestamp": "2022-03-17T00:59:42.930Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -2993,17 +2993,17 @@ { "@timestamp": "2022-03-17T00:58:15.528Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "ssid_spoofing_detected", - "vap": "1" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "vap": "1" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "78-28-CA-AA-6A-4A" @@ -3028,17 +3028,17 @@ { "@timestamp": "2022-03-17T00:58:13.465Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3068,17 +3068,17 @@ { "@timestamp": "2022-03-17T00:57:49.549Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3108,17 +3108,17 @@ { "@timestamp": "2022-03-17T00:57:06.517Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3148,17 +3148,17 @@ { "@timestamp": "2022-03-17T00:56:31.602Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3188,17 +3188,17 @@ { "@timestamp": "2022-03-17T00:56:09.035Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -3228,17 +3228,17 @@ { "@timestamp": "2022-03-17T00:56:07.751Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3268,17 +3268,17 @@ { "@timestamp": "2022-03-17T00:55:59.571Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "5C-AA-FD-5D-76-0E" @@ -3308,17 +3308,17 @@ { "@timestamp": "2022-03-17T00:55:58.540Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-DC-6E" @@ -3348,17 +3348,17 @@ { "@timestamp": "2022-03-17T00:55:54.934Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3388,17 +3388,17 @@ { "@timestamp": "2022-03-17T00:55:41.587Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-DA-7A" @@ -3428,17 +3428,17 @@ { "@timestamp": "2022-03-17T00:55:34.671Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-DA-7A" @@ -3468,17 +3468,17 @@ { "@timestamp": "2022-03-17T00:55:08.007Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "6A-3A-3E-85-D7-D4" @@ -3508,17 +3508,17 @@ { "@timestamp": "2022-03-17T00:54:47.013Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3548,17 +3548,17 @@ { "@timestamp": "2022-03-17T00:54:43.410Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3588,17 +3588,17 @@ { "@timestamp": "2022-03-17T00:54:38.614Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3628,17 +3628,17 @@ { "@timestamp": "2022-03-17T00:54:00.565Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3668,17 +3668,17 @@ { "@timestamp": "2022-03-17T00:53:28.128Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3708,17 +3708,17 @@ { "@timestamp": "2022-03-17T00:53:23.005Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "ssid_spoofing_detected", - "vap": "13" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "vap": "13" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "AE-17-E8-C7-DF-FD" @@ -3743,17 +3743,17 @@ { "@timestamp": "2022-03-17T00:53:03.070Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3783,17 +3783,17 @@ { "@timestamp": "2022-03-17T00:52:53.816Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3823,17 +3823,17 @@ { "@timestamp": "2022-03-17T00:52:19.127Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "ssid_spoofing_detected", - "vap": "1" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "vap": "1" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "78-28-CA-AA-6A-0A" @@ -3858,17 +3858,17 @@ { "@timestamp": "2022-03-17T00:51:38.296Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3898,17 +3898,17 @@ { "@timestamp": "2022-03-17T00:51:33.380Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3938,17 +3938,17 @@ { "@timestamp": "2022-03-17T00:51:08.953Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3978,17 +3978,17 @@ { "@timestamp": "2022-03-17T00:50:57.084Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "ssid_spoofing_detected", - "vap": "13" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "vap": "13" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "EE-CE-D5-6A-B6-22" @@ -4013,17 +4013,17 @@ { "@timestamp": "2022-03-17T00:50:56.341Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4053,17 +4053,17 @@ { "@timestamp": "2022-03-17T00:50:21.255Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4093,17 +4093,17 @@ { "@timestamp": "2022-03-17T00:49:05.758Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "6A-3A-3E-85-D7-D4" @@ -4133,17 +4133,17 @@ { "@timestamp": "2022-03-17T00:48:41.589Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "ssid_spoofing_detected", - "vap": "1" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "vap": "1" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "AE-17-E8-C7-E1-41" @@ -4168,17 +4168,17 @@ { "@timestamp": "2022-03-17T00:48:39.868Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4208,17 +4208,17 @@ { "@timestamp": "2022-03-17T00:48:34.277Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "ssid_spoofing_detected", - "vap": "1" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "vap": "1" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "78-28-CA-AA-69-96" @@ -4243,17 +4243,17 @@ { "@timestamp": "2022-03-17T00:48:25.395Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4283,17 +4283,17 @@ { "@timestamp": "2022-03-17T00:48:22.536Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-D7-80" @@ -4323,17 +4323,17 @@ { "@timestamp": "2022-03-17T00:48:12.108Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4363,17 +4363,17 @@ { "@timestamp": "2022-03-17T00:48:07.649Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4403,17 +4403,17 @@ { "@timestamp": "2022-03-17T00:47:43.434Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4443,17 +4443,17 @@ { "@timestamp": "2022-03-17T00:47:34.846Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-DD-BE" @@ -4483,17 +4483,17 @@ { "@timestamp": "2022-03-17T00:47:19.876Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4523,17 +4523,17 @@ { "@timestamp": "2022-03-17T00:47:15.923Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4563,17 +4563,17 @@ { "@timestamp": "2022-03-17T00:47:14.762Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4603,17 +4603,17 @@ { "@timestamp": "2022-03-17T00:47:06.502Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4643,17 +4643,17 @@ { "@timestamp": "2022-03-17T00:47:00.564Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4683,17 +4683,17 @@ { "@timestamp": "2022-03-17T00:46:55.983Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4723,17 +4723,17 @@ { "@timestamp": "2022-03-17T00:46:46.707Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4763,17 +4763,17 @@ { "@timestamp": "2022-03-17T00:46:41.603Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4803,17 +4803,17 @@ { "@timestamp": "2022-03-17T00:46:03.236Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4843,17 +4843,17 @@ { "@timestamp": "2022-03-17T00:45:58.900Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4883,17 +4883,17 @@ { "@timestamp": "2022-03-17T00:45:53.907Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4923,17 +4923,17 @@ { "@timestamp": "2022-03-17T00:45:53.724Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -4963,17 +4963,17 @@ { "@timestamp": "2022-03-17T00:45:45.336Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-D8-54" @@ -5003,17 +5003,17 @@ { "@timestamp": "2022-03-17T00:45:44.121Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "6A-3A-3E-85-CA-4E" @@ -5043,17 +5043,17 @@ { "@timestamp": "2022-03-17T00:45:40.363Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "ssid_spoofing_detected", - "vap": "13" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "vap": "13" + }, + "device_type": "MR", + "event_subtype": "ssid_spoofing_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "34-8F-27-25-CC-48" @@ -5078,17 +5078,17 @@ { "@timestamp": "2022-03-17T00:45:30.038Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5118,17 +5118,17 @@ { "@timestamp": "2022-03-17T00:45:27.225Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5158,17 +5158,17 @@ { "@timestamp": "2022-03-17T00:45:20.683Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5198,17 +5198,17 @@ { "@timestamp": "2022-03-17T00:45:20.510Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5238,17 +5238,17 @@ { "@timestamp": "2022-03-17T00:44:51.986Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5278,17 +5278,17 @@ { "@timestamp": "2022-03-17T00:44:41.304Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5318,17 +5318,17 @@ { "@timestamp": "2022-03-17T00:44:33.769Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5358,17 +5358,17 @@ { "@timestamp": "2022-03-17T00:44:32.782Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5398,17 +5398,17 @@ { "@timestamp": "2022-03-17T00:44:31.675Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-DD-BE" @@ -5438,17 +5438,17 @@ { "@timestamp": "2022-03-17T00:44:24.088Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5478,17 +5478,17 @@ { "@timestamp": "2022-03-17T00:43:54.810Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5518,17 +5518,17 @@ { "@timestamp": "2022-03-17T00:43:48.886Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5558,17 +5558,17 @@ { "@timestamp": "2022-03-17T00:43:48.885Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5598,17 +5598,17 @@ { "@timestamp": "2022-03-17T00:43:48.799Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5638,17 +5638,17 @@ { "@timestamp": "2022-03-17T00:43:45.209Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5678,17 +5678,17 @@ { "@timestamp": "2022-03-17T00:43:45.021Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "6A-3A-3E-85-CA-4E" @@ -5718,17 +5718,17 @@ { "@timestamp": "2022-03-17T00:43:45.024Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "AE-17-E8-C7-DF-FD" @@ -5758,17 +5758,17 @@ { "@timestamp": "2022-03-17T00:43:41.364Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5798,17 +5798,17 @@ { "@timestamp": "2022-03-17T00:43:16.382Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5838,17 +5838,17 @@ { "@timestamp": "2022-03-17T00:43:16.382Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5878,17 +5878,17 @@ { "@timestamp": "2022-03-17T00:43:16.381Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5918,17 +5918,17 @@ { "@timestamp": "2022-03-17T00:43:15.407Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5958,17 +5958,17 @@ { "@timestamp": "2022-03-17T00:43:15.385Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5998,17 +5998,17 @@ { "@timestamp": "2022-03-17T00:43:15.385Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6038,17 +6038,17 @@ { "@timestamp": "2022-03-17T00:43:13.576Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6078,17 +6078,17 @@ { "@timestamp": "2022-03-17T00:43:13.576Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:DF:FD", + "channel": "56", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6118,17 +6118,17 @@ { "@timestamp": "2022-03-17T00:43:06.805Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6158,17 +6158,17 @@ { "@timestamp": "2022-03-17T00:43:00.705Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-DF-FD" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-DF-FD" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6198,17 +6198,17 @@ { "@timestamp": "2022-03-17T00:42:58.398Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6238,17 +6238,17 @@ { "@timestamp": "2022-03-17T00:42:53.586Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "AE-17-E8-C7-D8-51" @@ -6278,17 +6278,17 @@ { "@timestamp": "2022-03-17T00:42:44.149Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6318,17 +6318,17 @@ { "@timestamp": "2022-03-17T00:42:44.145Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6358,17 +6358,17 @@ { "@timestamp": "2022-03-17T00:42:44.143Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6398,17 +6398,17 @@ { "@timestamp": "2022-03-17T00:42:44.144Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6438,17 +6438,17 @@ { "@timestamp": "2022-03-17T00:42:43.225Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-D4-1E" @@ -6478,17 +6478,17 @@ { "@timestamp": "2022-03-17T00:42:24.039Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "AE-17-E8-C7-DF-FD" @@ -6518,17 +6518,17 @@ { "@timestamp": "2022-03-17T00:42:13.453Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6558,17 +6558,17 @@ { "@timestamp": "2022-03-17T00:42:13.446Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "BE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6598,17 +6598,17 @@ { "@timestamp": "2022-03-17T00:42:13.420Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "38-BA-F8-CC-82-2E" @@ -6638,17 +6638,17 @@ { "@timestamp": "2022-03-17T00:42:13.419Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "38-BA-F8-CC-82-2E" @@ -6678,17 +6678,17 @@ { "@timestamp": "2022-03-17T00:42:13.411Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-D8-51" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-D8-51" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "38-BA-F8-CC-82-2E" @@ -6718,17 +6718,17 @@ { "@timestamp": "2022-03-17T00:41:56.431Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin Guest", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin Guest", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-D8-54" @@ -6758,17 +6758,17 @@ { "@timestamp": "2022-03-17T00:41:56.431Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-D8-54" @@ -6798,17 +6798,17 @@ { "@timestamp": "2022-03-17T00:41:56.429Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "KeepTruckin", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "KeepTruckin", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-D8-54" @@ -6838,17 +6838,17 @@ { "@timestamp": "2022-03-17T00:41:55.612Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "AC:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E2-9D" - } - } + "airmarshal": { + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E2-9D" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6878,17 +6878,17 @@ { "@timestamp": "2022-03-17T00:41:42.046Z", "cisco_meraki": { - "mr": { - "airmarshal_events": { - "bssid": "92:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "", - "type": "rogue_ssid_detected", - "wired_mac": "AC-17-C8-C7-E1-41" - } - } + "airmarshal": { + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "", + "wired_mac": "AC-17-C8-C7-E1-41" + }, + "device_type": "MR", + "event_subtype": "rogue_ssid_detected", + "event_type": "airmarshal_events" }, "destination": { "mac": "E2-CB-9C-B5-DC-6E" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log new file mode 100644 index 00000000000..b5b6d63ec74 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log @@ -0,0 +1,5 @@ +<134>1 1647479055.795119971 KT_SF_wireless events type=dfs_event channel='136' radio='2' +<134>1 1647478401.421090826 6F_North_West events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='1034533358' +<134>1 1647478402.126325721 6F_North_West events type=wpa_auth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='910537108' +<134>1 1647478709.602628785 6F_South_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='10.146.118.117' arp_resp='0.093432188' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:F6' dhcp_resp='1.373967135' aid='1478558813' +<134>1 1647478402.117726086 6F_North_West events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' rssi='20' aid='910537108' diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json new file mode 100644 index 00000000000..2573d51c49e --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json @@ -0,0 +1,181 @@ +{ + "expected": [ + { + "@timestamp": "2022-03-17T01:04:15.795Z", + "cisco_meraki": { + "dfs_event": { + "channel": "136", + "radio": "2", + "type": "dfs_event" + }, + "event_subtype": "dfs_event", + "event_type": "events" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647479055.795119971 KT_SF_wireless events type=dfs_event channel='136' radio='2'" + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "KT_SF_wireless" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:53:21.421Z", + "cisco_meraki": { + "event_subtype": "wpa_deauth", + "event_type": "events", + "wpa_deauth": { + "aid": "1034533358", + "client_mac": "F4:D4:88:70:8A:F1", + "radio": "1", + "type": "wpa_deauth", + "vap": "1" + } + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647478401.421090826 6F_North_West events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='1034533358'" + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "6F_North_West" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:53:22.126Z", + "cisco_meraki": { + "event_subtype": "wpa_auth", + "event_type": "events", + "wpa_auth": { + "aid": "910537108", + "client_mac": "F4:D4:88:70:8A:F1", + "radio": "1", + "type": "wpa_auth", + "vap": "1" + } + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647478402.126325721 6F_North_West events type=wpa_auth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='910537108'" + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "6F_North_West" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:58:29.602Z", + "cisco_meraki": { + "disassociation": { + "aid": "1478558813", + "arp_resp": "0.093432188", + "arp_src": "10.146.118.117", + "auth_neg_dur": "0.005547865", + "channel": "108", + "client_mac": "52:6D:6B:6C:D4:C8", + "dhcp_lease_completed": "1.373967135", + "dhcp_resp": "1.373967135", + "dhcp_server": "10.128.128.128", + "dhcp_server_mac": "68:3A:1E:53:A6:F6", + "dns_req_rtt": "0.018446771", + "dns_resp": "0.190431042", + "dns_server": "10.128.128.128", + "duration": "309.163703632", + "full_conn": "0.121500990", + "ip_resp": "0.121500990", + "ip_src": "10.146.118.117", + "is_wpa": "1", + "last_auth_ago": "309.154547226", + "radio": "1", + "type": "disassociation", + "vap": "1" + }, + "event_subtype": "disassociation", + "event_type": "events" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647478709.602628785 6F_South_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='10.146.118.117' arp_resp='0.093432188' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:F6' dhcp_resp='1.373967135' aid='1478558813'" + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "6F_South_West" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:53:22.117Z", + "cisco_meraki": { + "association": { + "aid": "910537108", + "channel": "140", + "client_mac": "F4:D4:88:70:8A:F1", + "radio": "1", + "rssi": "20", + "type": "association", + "vap": "1" + }, + "event_subtype": "association", + "event_type": "events" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647478402.117726086 6F_North_West events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' rssi='20' aid='910537108'" + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "6F_North_West" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + } + ] +} \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index 557f845e8e0..6ea62a51329 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -3,10 +3,9 @@ { "@timestamp": "2022-03-17T01:03:08.289Z", "cisco_meraki": { - "mx": { - "flows": { - "op": "allow" - } + "event_type": "flows", + "flows": { + "op": "allow" } }, "destination": { @@ -37,6 +36,9 @@ }, { "@timestamp": "2022-03-17T01:03:08.476Z", + "cisco_meraki": { + "event_type": "flows" + }, "destination": { "ip": "216.160.83.61", "port": 44210 @@ -65,10 +67,9 @@ { "@timestamp": "2022-03-17T01:03:08.596Z", "cisco_meraki": { - "mx": { - "flows": { - "op": "allow" - } + "event_type": "flows", + "flows": { + "op": "allow" } }, "destination": { diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json index e6c0fcbaf26..854ec781df8 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json @@ -2,6 +2,9 @@ "expected": [ { "@timestamp": "2022-03-17T01:07:58.997Z", + "cisco_meraki": { + "event_type": "ip_flow_start" + }, "destination": { "geo": { "city_name": "London", @@ -47,6 +50,9 @@ }, { "@timestamp": "2022-03-17T01:07:58.995Z", + "cisco_meraki": { + "event_type": "ip_flow_start" + }, "destination": { "geo": { "city_name": "London", @@ -92,6 +98,9 @@ }, { "@timestamp": "2022-03-17T01:07:58.974Z", + "cisco_meraki": { + "event_type": "ip_flow_start" + }, "destination": { "geo": { "city_name": "London", @@ -137,6 +146,9 @@ }, { "@timestamp": "2022-03-17T01:07:58.911Z", + "cisco_meraki": { + "event_type": "ip_flow_start" + }, "destination": { "as": { "number": 29518, @@ -197,6 +209,9 @@ }, { "@timestamp": "2022-03-17T01:08:45.891Z", + "cisco_meraki": { + "event_type": "ip_flow_end" + }, "destination": { "as": { "number": 29518, @@ -242,6 +257,9 @@ }, { "@timestamp": "2022-03-17T01:08:45.842Z", + "cisco_meraki": { + "event_type": "ip_flow_end" + }, "destination": { "as": { "number": 35908 @@ -296,6 +314,9 @@ }, { "@timestamp": "2022-03-17T01:08:45.842Z", + "cisco_meraki": { + "event_type": "ip_flow_end" + }, "destination": { "as": { "number": 29518, @@ -341,6 +362,9 @@ }, { "@timestamp": "2022-03-17T01:08:45.755Z", + "cisco_meraki": { + "event_type": "ip_flow_end" + }, "destination": { "geo": { "city_name": "London", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index 95408fdcf37..7b8ec5fab70 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -3,14 +3,14 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "cisco_meraki": { - "mx": { - "security_event": { - "decision": "allowed", - "dhost": "D0-AB-D5-7B-43-73", - "priority": "1", - "signature": "1:29708:4", - "type": "ids_alerted" - } + "device_type": "MR", + "event_subtype": "ids_alerted", + "event_type": "security_event", + "security": { + "decision": "allowed", + "dhost": "D0-AB-D5-7B-43-73", + "priority": "1", + "signature": "1:29708:4" } }, "destination": { @@ -60,12 +60,12 @@ { "@timestamp": "2021-11-23T18:14:58.984Z", "cisco_meraki": { - "mx": { - "security_event": { - "action": "block", - "mac": "98-5A-EB-E1-81-2F", - "type": "security_filtering_file_scanned" - } + "device_type": "MR", + "event_subtype": "security_filtering_file_scanned", + "event_type": "security_event", + "security": { + "action": "block", + "mac": "98-5A-EB-E1-81-2F" } }, "destination": { @@ -123,11 +123,11 @@ { "@timestamp": "2021-11-24T19:50:35.239Z", "cisco_meraki": { - "mx": { - "security_event": { - "action": "allow", - "type": "security_filtering_disposition_change" - } + "device_type": "MR", + "event_subtype": "security_filtering_disposition_change", + "event_type": "security_event", + "security": { + "action": "allow" } }, "ecs": { diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml index c77ee783e0f..655eb9db6d6 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml @@ -7,27 +7,30 @@ processors: pattern: "%{} airmarshal_events %{*type}=%{&type} %{}" - rename: field: type - target_field: cisco_meraki.mr.airmarshal_events.type + target_field: cisco_meraki.event_subtype +- set: + field: cisco_meraki.device_type + value: MR - dissect: description: When type is rogue_ssid_detected field: event.original pattern: "%{} airmarshal_events %{} %{*ssid}='%{&ssid}' %{*bssid}='%{&bssid}' %{*src}='%{&src}' %{*dst}='%{&dst}' %{*wmac}='%{&wmac}' %{*vlanid}='%{&vlanid}' %{*ch}='%{&ch}' %{*rssi}='%{&rssi}' %{*fc_type}='%{&fc_type}' %{*fc_subtype}='%{&fc_subtype}'" - if: ctx?.cisco_meraki?.mr?.airmarshal_events?.type == 'rogue_ssid_detected' + if: ctx?.cisco_meraki?.event_subtype == 'rogue_ssid_detected' - dissect: description: When type is ssid_spoofing_detected field: event.original pattern: "%{} airmarshal_events %{} %{*ssid}='%{&ssid}' %{*vap}='%{&vap}' %{*bssid}='%{&bssid}' %{*src}='%{&src}' %{*dst}='%{&dst}' %{*ch}='%{&ch}' %{*rssi}='%{&rssi}' %{*fc_type}='%{&fc_type}' %{*fc_subtype}='%{&fc_subtype}'" - if: ctx?.cisco_meraki?.mr?.airmarshal_events?.type == 'ssid_spoofing_detected' + if: ctx?.cisco_meraki?.event_subtype == 'ssid_spoofing_detected' - rename: field: ssid - target_field: cisco_meraki.mr.airmarshal_events.ssid + target_field: cisco_meraki.airmarshal.ssid - rename: field: bssid - target_field: cisco_meraki.mr.airmarshal_events.bssid + target_field: cisco_meraki.airmarshal.bssid - rename: field: vap - target_field: cisco_meraki.mr.airmarshal_events.vap - if: ctx?.cisco_meraki?.mr?.airmarshal_events?.type == 'ssid_spoofing_detected' + target_field: cisco_meraki.airmarshal.vap + if: ctx?.cisco_meraki?.event_subtype == 'ssid_spoofing_detected' - gsub: field: src target_field: source.mac @@ -40,20 +43,20 @@ processors: replacement: '-' - gsub: field: wired_mac - target_field: cisco_meraki.mr.airmarshal_events.wired_mac + target_field: cisco_meraki.airmarshal.wired_mac pattern: '[-:.]' replacement: '-' - if: ctx?.cisco_meraki?.mr?.airmarshal_events?.type == 'rogue_ssid_detected' + if: ctx?.cisco_meraki?.event_subtype == 'rogue_ssid_detected' - rename: field: vlan_id target_field: network.vlan.id - if: ctx?.cisco_meraki?.mr?.airmarshal_events?.type == 'rogue_ssid_detected' + if: ctx?.cisco_meraki?.event_subtype == 'rogue_ssid_detected' - rename: field: channel - target_field: cisco_meraki.mr.airmarshal_events.channel + target_field: cisco_meraki.airmarshal.channel - rename: field: fc_type - target_field: cisco_meraki.mr.airmarshal_events.fc_type + target_field: cisco_meraki.airmarshal.fc_type - rename: field: fc_subtype - target_field: cisco_meraki.mr.airmarshal_events.fc_subtype + target_field: cisco_meraki.airmarshal.fc_subtype diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index bb2430fa64b..b67633777d9 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -11,6 +11,9 @@ processors: description: Extract syslog words field: event.original pattern: "%{} %{_temp.ts_nano} %{observer.hostname} %{_temp.event_type} %{}" +- rename: + field: _temp.event_type + target_field: cisco_meraki.event_type - grok: description: Reduce precision from nanos to millis and set timestamp field: _temp.ts_nano @@ -25,16 +28,19 @@ processors: timezone: '{{{_conf.tz_offset}}}' - pipeline: name: '{{ IngestPipeline "flows" }}' - if: ctx._temp.event_type == 'flows' + if: ctx.cisco_meraki.event_type == 'flows' - pipeline: name: '{{ IngestPipeline "ipflows" }}' - if: ctx._temp.event_type == 'ip_flow_start' || ctx._temp.event_type == 'ip_flow_end' + if: ctx.cisco_meraki.event_type == 'ip_flow_start' || ctx.cisco_meraki.event_type == 'ip_flow_end' - pipeline: name: '{{ IngestPipeline "airmarshal" }}' - if: ctx._temp.event_type == 'airmarshal_events' + if: ctx.cisco_meraki.event_type == 'airmarshal_events' - pipeline: name: '{{ IngestPipeline "security" }}' - if: ctx._temp.event_type == 'security_event' + if: ctx.cisco_meraki.event_type == 'security_event' +- pipeline: + name: '{{ IngestPipeline "events" }}' + if: ctx.cisco_meraki.event_type == 'events' - remove: field: - _temp @@ -51,6 +57,8 @@ processors: - rssi - protocol - dhost + - client_mac + - radio ignore_missing: true on_failure: - set: diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml new file mode 100644 index 00000000000..7844a094108 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -0,0 +1,69 @@ +--- +description: Pipeline for Cisco Meraki events type +processors: +- dissect: + description: type= follows events + field: event.original + pattern: "%{} events %{*type}=%{&type} %{}" +- rename: + field: type + target_field: cisco_meraki.event_subtype + if: ctx?.type != null + +# Process dfs_event +# - dissect: +# field: event.original +# pattern: "%{} type=dfs_event %{*channel}='%{&channel}' %{*radio}='%{&radio}'" +# if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' + +# Process wpa_deauth or wpa_auth +# - dissect: +# field: event.original +# pattern: "%{} type=%{?type} %{*radio}='%{&radio}' %{*vap}='%{&vap}' %{*client_mac}='%{&client_mac}' %{*aid}='%{&aid}'" +# if: ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' + +# Process dfs_event, wpa_auth, wpa_deauth, association or disassociation +- grok: + field: event.original + patterns: + - '%{SYSLOGHDR}%{SPACE}%{NUMBER}%{SPACE}%{WORD}%{SPACE}events%{SPACE}%{GREEDYDATA:_temp.rest}' + pattern_definitions: + SYSLOGPRI: '<%{NONNEGINT:log.syslog.priority:long}>' + SYSLOGVER: '\b(?:\d{1,2})\b' + SYSLOGHDR: '%{SYSLOGPRI}%{SYSLOGVER}' + if: ctx.event.original.startsWith('<') && (ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth') +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.association + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == 'association' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.disassociation + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == 'disassociation' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.dfs_event + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.wpa_auth + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == 'wpa_auth' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.wpa_deauth + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml index d1cd5638a49..2b32c168de4 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml @@ -13,7 +13,7 @@ processors: - dissect: description: Case for firewall action prepends src= field: event.original - pattern: "%{} flows %{cisco_meraki.mx.flows.op} %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport}" + pattern: "%{} flows %{cisco_meraki.flows.op} %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport}" if: ctx._temp.token.startsWith("src=") == false - rename: field: src diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml index 52b2c85adce..43cba86792f 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml @@ -7,118 +7,121 @@ processors: pattern: "%{} security_event %{type} %{}" - rename: field: type - target_field: cisco_meraki.mx.security_event.type + target_field: cisco_meraki.event_subtype +- set: + field: cisco_meraki.device_type + value: MR # scan event based on event type - dissect: field: event.original pattern: "%{} ids_alerted %{*sig}=%{&sig} %{*pri}=%{&pri} %{*ts}=%{&ts} %{*dhost}=%{&dhost} %{*dir}=%{&dir} %{*prot}=%{&prot} %{*src}=%{&src} %{*dst}=%{&dst} %{}" - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' - dissect: field: event.original pattern: "%{} security_filtering_file_scanned %{*url}=%{&url} %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} %{*name}='%{&name}' %{*sha256}=%{&sha256} %{*disp}=%{&disp} %{*action}=%{&action}" - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' + if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' - dissect: field: event.original pattern: "%{} security_filtering_disposition_change %{*name}=%{&name} %{*sha256}=%{&sha256} %{*disp}=%{&disp} %{*action}=%{&action}" - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_disposition_change' + if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_disposition_change' # handle fields of ids_alerted type - rename: field: priority - target_field: cisco_meraki.mx.security_event.priority - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + target_field: cisco_meraki.security.priority + if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' - rename: field: signature - target_field: cisco_meraki.mx.security_event.signature - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + target_field: cisco_meraki.security.signature + if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' - rename: field: timestamp target_field: threat.indicator.last_seen - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' - gsub: field: dhost - target_field: cisco_meraki.mx.security_event.dhost + target_field: cisco_meraki.security.dhost pattern: '[-:.]' replacement: '-' - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' - rename: field: direction target_field: network.direction - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' - lowercase: field: protocol target_field: network.protocol - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' # Process the remaining after dst=. It can have "decision= message: *" or just "message: *" - dissect: field: event.original pattern: "%{} dst=%{?ignore} %{*decision}=%{&decision} %{*message}:%{&message}" - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' ignore_failure: true - dissect: field: event.original pattern: "%{} dst=%{?ignore} %{*message}:%{&message}" - if: ctx?.decision == null && ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + if: ctx?.decision == null && ctx?.cisco_meraki?.event_subtype == 'ids_alerted' - rename: field: message target_field: threat.indicator.description ignore_missing: true - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' - rename: field: decision - target_field: cisco_meraki.mx.security_event.decision + target_field: cisco_meraki.security.decision ignore_missing: true - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'ids_alerted' + if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' # handle fields of security_filtering_file_scanned or security_filtering_disposition_change type - rename: field: url target_field: threat.indicator.reference - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' + if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' - gsub: field: mac - target_field: cisco_meraki.mx.security_event.mac + target_field: cisco_meraki.security.mac pattern: '[-:.]' replacement: '-' - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' + if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' - rename: field: name target_field: threat.enrichments.indicator.file.name - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_disposition_change' + if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.event_subtype == 'security_filtering_disposition_change' - rename: field: sha256 target_field: threat.enrichments.indicator.file.hash.sha256 - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_disposition_change' + if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.event_subtype == 'security_filtering_disposition_change' - rename: field: disposition target_field: threat.software.type - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_disposition_change' + if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.event_subtype == 'security_filtering_disposition_change' - rename: field: action - target_field: cisco_meraki.mx.security_event.action - if: ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.mx?.security_event?.type == 'security_filtering_disposition_change' + target_field: cisco_meraki.security.action + if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.event_subtype == 'security_filtering_disposition_change' # fields common to more than one event type - dissect: field: src pattern: "%{source.ip}:%{sport}" - if: ctx?.cisco_meraki?.mx?.security_event?.type != 'security_filtering_disposition_change' + if: ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' - dissect: field: dst pattern: "%{destination.ip}:%{dport}" - if: ctx?.cisco_meraki?.mx?.security_event?.type != 'security_filtering_disposition_change' + if: ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' - convert: field: sport target_field: source.port type: long - if: ctx?.sport != "0" && ctx?.cisco_meraki?.mx?.security_event?.type != 'security_filtering_disposition_change' + if: ctx?.sport != "0" && ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' ignore_failure: true - convert: field: dport target_field: destination.port type: long - if: ctx?.dport != "0" && ctx?.cisco_meraki?.mx?.security_event?.type != 'security_filtering_disposition_change' + if: ctx?.dport != "0" && ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' ignore_failure: true # IP Geolocation Lookup (source) - geoip: diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index c289314b621..d8808b152dd 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -1,52 +1,53 @@ - name: cisco_meraki type: group fields: - - name: mx + - name: event_type + type: keyword + - name: event_subtype + type: keyword + - name: device_type + type: keyword + - name: airmarshal type: group fields: - - name: flows - type: group - fields: - - name: op - type: keyword - - name: security_event - type: group - fields: - - name: type - type: keyword - - name: signature - type: keyword - - name: priority - type: keyword - - name: dhost - type: keyword - - name: decision - type: keyword - - name: mac - type: keyword - - name: action - type: keyword - - name: mr + - name: ssid + type: keyword + - name: bssid + type: keyword + - name: vap + type: keyword + - name: wired_mac + type: keyword + - name: channel + type: keyword + - name: fc_type + type: keyword + - name: fc_subtype + type: keyword + - name: flows + type: flattened + - name: dfs_event + type: flattened + - name: wpa_auth + type: flattened + - name: wpa_deauth + type: flattened + - name: association + type: flattened + - name: disassociation + type: flattened + - name: security type: group fields: - - name: airmarshal_events - type: group - fields: - - name: type - type: keyword - - name: ssid - type: keyword - - name: bssid - type: keyword - - name: wired_mac - type: keyword - - name: channel - type: keyword - - name: rssi - type: keyword - - name: fc_type - type: keyword - - name: fc_subtype - type: keyword - - name: vap - type: keyword + - name: priority + type: keyword + - name: signature + type: keyword + - name: dhost + type: keyword + - name: decision + type: keyword + - name: mac + type: keyword + - name: action + type: keyword From 07bc059e86bed912407f864fadd141c30a13ec9a Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Thu, 24 Mar 2022 15:44:35 +1100 Subject: [PATCH 11/67] Add support for site-to-site vpn event type Anonymise test data --- .../test/pipeline/test-events-inprogress.log | 12 ++- .../test-events-inprogress.log-expected.json | 100 ++++++++++++++---- .../elasticsearch/ingest_pipeline/default.yml | 1 + .../elasticsearch/ingest_pipeline/events.yml | 42 +++++--- .../data_stream/log/fields/fields.yml | 5 + 5 files changed, 122 insertions(+), 38 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log index b5b6d63ec74..593f8ef3471 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log @@ -1,5 +1,7 @@ -<134>1 1647479055.795119971 KT_SF_wireless events type=dfs_event channel='136' radio='2' -<134>1 1647478401.421090826 6F_North_West events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='1034533358' -<134>1 1647478402.126325721 6F_North_West events type=wpa_auth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='910537108' -<134>1 1647478709.602628785 6F_South_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='10.146.118.117' arp_resp='0.093432188' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:F6' dhcp_resp='1.373967135' aid='1478558813' -<134>1 1647478402.117726086 6F_North_West events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' rssi='20' aid='910537108' +<134>1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2' +<134>1 1647478401.421090826 MR_device_2 events type=wpa_deauth radio='1' vap='1' client_mac='E5:A4:98:71:9A:FE' aid='1034533358' +<134>1 1647478402.126325721 MR_device_2 events type=wpa_auth radio='1' vap='1' client_mac='E4:F4:18:79:1F:E1' aid='910537108' +<134>1 1647478709.602628785 MR_device_2 events type=disassociation radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='67.43.156.14' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='8.8.8.8' dhcp_server_mac='18:3B:2E:5C:A7:F6' dhcp_resp='1.373967135' aid='1478558813' +<134>1 1647478402.117726086 MR_device_2 events type=association radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='140' rssi='20' aid='910537108' +<134>1 1647478093.022430458 MX_device_1 events Site-to-Site VPN: CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f] +<134>1 1647478092.029594666 MX_device_1 events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201] diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json index 2573d51c49e..f9cc9b876c3 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json @@ -3,6 +3,7 @@ { "@timestamp": "2022-03-17T01:04:15.795Z", "cisco_meraki": { + "device_type": "MR", "dfs_event": { "channel": "136", "radio": "2", @@ -15,7 +16,7 @@ "version": "1.12.0" }, "event": { - "original": "\u003c134\u003e1 1647479055.795119971 KT_SF_wireless events type=dfs_event channel='136' radio='2'" + "original": "\u003c134\u003e1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2'" }, "log": { "syslog": { @@ -23,7 +24,7 @@ } }, "observer": { - "hostname": "KT_SF_wireless" + "hostname": "MR_device_2" }, "tags": [ "forwarded", @@ -33,11 +34,12 @@ { "@timestamp": "2022-03-17T00:53:21.421Z", "cisco_meraki": { + "device_type": "MR", "event_subtype": "wpa_deauth", "event_type": "events", "wpa_deauth": { "aid": "1034533358", - "client_mac": "F4:D4:88:70:8A:F1", + "client_mac": "E5:A4:98:71:9A:FE", "radio": "1", "type": "wpa_deauth", "vap": "1" @@ -47,7 +49,7 @@ "version": "1.12.0" }, "event": { - "original": "\u003c134\u003e1 1647478401.421090826 6F_North_West events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='1034533358'" + "original": "\u003c134\u003e1 1647478401.421090826 MR_device_2 events type=wpa_deauth radio='1' vap='1' client_mac='E5:A4:98:71:9A:FE' aid='1034533358'" }, "log": { "syslog": { @@ -55,7 +57,7 @@ } }, "observer": { - "hostname": "6F_North_West" + "hostname": "MR_device_2" }, "tags": [ "forwarded", @@ -65,11 +67,12 @@ { "@timestamp": "2022-03-17T00:53:22.126Z", "cisco_meraki": { + "device_type": "MR", "event_subtype": "wpa_auth", "event_type": "events", "wpa_auth": { "aid": "910537108", - "client_mac": "F4:D4:88:70:8A:F1", + "client_mac": "E4:F4:18:79:1F:E1", "radio": "1", "type": "wpa_auth", "vap": "1" @@ -79,7 +82,7 @@ "version": "1.12.0" }, "event": { - "original": "\u003c134\u003e1 1647478402.126325721 6F_North_West events type=wpa_auth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='910537108'" + "original": "\u003c134\u003e1 1647478402.126325721 MR_device_2 events type=wpa_auth radio='1' vap='1' client_mac='E4:F4:18:79:1F:E1' aid='910537108'" }, "log": { "syslog": { @@ -87,7 +90,7 @@ } }, "observer": { - "hostname": "6F_North_West" + "hostname": "MR_device_2" }, "tags": [ "forwarded", @@ -97,24 +100,22 @@ { "@timestamp": "2022-03-17T00:58:29.602Z", "cisco_meraki": { + "device_type": "MR", "disassociation": { "aid": "1478558813", - "arp_resp": "0.093432188", - "arp_src": "10.146.118.117", "auth_neg_dur": "0.005547865", "channel": "108", - "client_mac": "52:6D:6B:6C:D4:C8", + "client_mac": "12:8D:1B:8A:D4:C8", "dhcp_lease_completed": "1.373967135", "dhcp_resp": "1.373967135", - "dhcp_server": "10.128.128.128", - "dhcp_server_mac": "68:3A:1E:53:A6:F6", + "dhcp_server": "8.8.8.8", + "dhcp_server_mac": "18:3B:2E:5C:A7:F6", "dns_req_rtt": "0.018446771", "dns_resp": "0.190431042", - "dns_server": "10.128.128.128", "duration": "309.163703632", "full_conn": "0.121500990", "ip_resp": "0.121500990", - "ip_src": "10.146.118.117", + "ip_src": "67.43.156.14", "is_wpa": "1", "last_auth_ago": "309.154547226", "radio": "1", @@ -128,7 +129,7 @@ "version": "1.12.0" }, "event": { - "original": "\u003c134\u003e1 1647478709.602628785 6F_South_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='10.146.118.117' arp_resp='0.093432188' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:F6' dhcp_resp='1.373967135' aid='1478558813'" + "original": "\u003c134\u003e1 1647478709.602628785 MR_device_2 events type=disassociation radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='67.43.156.14' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='8.8.8.8' dhcp_server_mac='18:3B:2E:5C:A7:F6' dhcp_resp='1.373967135' aid='1478558813'" }, "log": { "syslog": { @@ -136,7 +137,7 @@ } }, "observer": { - "hostname": "6F_South_West" + "hostname": "MR_device_2" }, "tags": [ "forwarded", @@ -149,12 +150,13 @@ "association": { "aid": "910537108", "channel": "140", - "client_mac": "F4:D4:88:70:8A:F1", + "client_mac": "12:8D:1B:8A:D4:C8", "radio": "1", "rssi": "20", "type": "association", "vap": "1" }, + "device_type": "MR", "event_subtype": "association", "event_type": "events" }, @@ -162,7 +164,7 @@ "version": "1.12.0" }, "event": { - "original": "\u003c134\u003e1 1647478402.117726086 6F_North_West events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' rssi='20' aid='910537108'" + "original": "\u003c134\u003e1 1647478402.117726086 MR_device_2 events type=association radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='140' rssi='20' aid='910537108'" }, "log": { "syslog": { @@ -170,7 +172,65 @@ } }, "observer": { - "hostname": "6F_North_West" + "hostname": "MR_device_2" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:48:13.022Z", + "cisco_meraki": { + "device_type": "MX", + "event_subtype": "Site-to-Site VPN", + "event_type": "events", + "events": { + "raw": " \u003cl2tp-over-ipsec-1|241\u003e CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f]" + } + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647478093.022430458 MX_device_1 events Site-to-Site VPN: \u003cl2tp-over-ipsec-1|241\u003e CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f]" + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "MX_device_1" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T00:48:12.029Z", + "cisco_meraki": { + "device_type": "MX", + "event_subtype": "Site-to-Site VPN", + "event_type": "events", + "events": { + "raw": " \u003cl2tp-over-ipsec-1|241\u003e IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201]" + } + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647478092.029594666 MX_device_1 events Site-to-Site VPN: \u003cl2tp-over-ipsec-1|241\u003e IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201]" + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "MX_device_1" }, "tags": [ "forwarded", diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index b67633777d9..c2f6121821b 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -59,6 +59,7 @@ processors: - dhost - client_mac - radio + - sts ignore_missing: true on_failure: - set: diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index 7844a094108..a798ac067c8 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -2,25 +2,41 @@ description: Pipeline for Cisco Meraki events type processors: - dissect: - description: type= follows events + description: Check if this is Site-to-Site VPN events field: event.original - pattern: "%{} events %{*type}=%{&type} %{}" + pattern: "%{} events %{sts} %{}" +- set: + field: cisco_meraki.event_subtype + value: 'Site-to-Site VPN' + if: ctx?.sts.toLowerCase() == "site-to-site" +- dissect: + description: Get the event subtype + field: event.original + pattern: "%{} events type=%{type} %{}" + if: ctx?.sts.startsWith("type=") - rename: field: type target_field: cisco_meraki.event_subtype if: ctx?.type != null +- grok: + description: Process Site-to-Site VPN messages + field: event.original + patterns: + - '%{SYSLOGHDR}%{SPACE}%{NUMBER}%{SPACE}%{WORD}%{SPACE}events%{SPACE}(?i)Site-to-Site VPN:%{GREEDYDATA:cisco_meraki.events.raw}' + pattern_definitions: + SYSLOGPRI: '<%{NONNEGINT:log.syslog.priority:long}>' + SYSLOGVER: '\b(?:\d{1,2})\b' + SYSLOGHDR: '%{SYSLOGPRI}%{SYSLOGVER}' + if: ctx.event.original.startsWith('<') && ctx?.cisco_meraki?.event_subtype == "Site-to-Site VPN" +- set: + field: cisco_meraki.device_type + value: MX + if: ctx?.cisco_meraki?.event_subtype == "Site-to-Site VPN" +- set: + field: cisco_meraki.device_type + value: MR + if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' -# Process dfs_event -# - dissect: -# field: event.original -# pattern: "%{} type=dfs_event %{*channel}='%{&channel}' %{*radio}='%{&radio}'" -# if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' - -# Process wpa_deauth or wpa_auth -# - dissect: -# field: event.original -# pattern: "%{} type=%{?type} %{*radio}='%{&radio}' %{*vap}='%{&vap}' %{*client_mac}='%{&client_mac}' %{*aid}='%{&aid}'" -# if: ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' # Process dfs_event, wpa_auth, wpa_deauth, association or disassociation - grok: diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index d8808b152dd..d42ce88bee2 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -51,3 +51,8 @@ type: keyword - name: action type: keyword + - name: events + type: group + fields: + - name: raw + type: text From 6cdee00a2776ebc229c0120022196f2fda9578a0 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Thu, 24 Mar 2022 16:24:43 +1100 Subject: [PATCH 12/67] Add support for vpn_connectivity_change and refactor field groups --- .../test/pipeline/test-events-inprogress.log | 1 + .../test-events-inprogress.log-expected.json | 39 ++++++++++++++++++- .../elasticsearch/ingest_pipeline/events.yml | 14 +++++-- .../data_stream/log/fields/fields.yml | 4 +- 4 files changed, 51 insertions(+), 7 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log index 593f8ef3471..d77e0642622 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log @@ -5,3 +5,4 @@ <134>1 1647478402.117726086 MR_device_2 events type=association radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='140' rssi='20' aid='910537108' <134>1 1647478093.022430458 MX_device_1 events Site-to-Site VPN: CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f] <134>1 1647478092.029594666 MX_device_1 events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201] +<134>1 1380664922.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false' diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json index f9cc9b876c3..cafd02feaf0 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json @@ -185,7 +185,7 @@ "device_type": "MX", "event_subtype": "Site-to-Site VPN", "event_type": "events", - "events": { + "site_to_site_vpn": { "raw": " \u003cl2tp-over-ipsec-1|241\u003e CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f]" } }, @@ -214,7 +214,7 @@ "device_type": "MX", "event_subtype": "Site-to-Site VPN", "event_type": "events", - "events": { + "site_to_site_vpn": { "raw": " \u003cl2tp-over-ipsec-1|241\u003e IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201]" } }, @@ -236,6 +236,41 @@ "forwarded", "preserve_original_event" ] + }, + { + "@timestamp": "2013-10-01T22:02:02.583Z", + "cisco_meraki": { + "device_type": "MX", + "event_subtype": "vpn_connectivity_change", + "event_type": "events", + "site_to_site_vpn": { + "connectivity_change": { + "connectivity": "false", + "peer_contact": "216.160.83.61:51856", + "peer_ident": "2814ee002c075181bb1b7478ee073860", + "type": "vpn_connectivity_change", + "vpn_type": "site-to-site" + } + } + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1380664922.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false'" + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "MX84" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] } ] } \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index a798ac067c8..ecd2d101ae5 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -22,7 +22,7 @@ processors: description: Process Site-to-Site VPN messages field: event.original patterns: - - '%{SYSLOGHDR}%{SPACE}%{NUMBER}%{SPACE}%{WORD}%{SPACE}events%{SPACE}(?i)Site-to-Site VPN:%{GREEDYDATA:cisco_meraki.events.raw}' + - '%{SYSLOGHDR}%{SPACE}%{NUMBER}%{SPACE}%{WORD}%{SPACE}events%{SPACE}(?i)Site-to-Site VPN:%{GREEDYDATA:cisco_meraki.site_to_site_vpn.raw}' pattern_definitions: SYSLOGPRI: '<%{NONNEGINT:log.syslog.priority:long}>' SYSLOGVER: '\b(?:\d{1,2})\b' @@ -31,13 +31,12 @@ processors: - set: field: cisco_meraki.device_type value: MX - if: ctx?.cisco_meraki?.event_subtype == "Site-to-Site VPN" + if: ctx?.cisco_meraki?.event_subtype == "Site-to-Site VPN" || ctx?.cisco_meraki?.event_subtype == "vpn_connectivity_change" - set: field: cisco_meraki.device_type value: MR if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' - # Process dfs_event, wpa_auth, wpa_deauth, association or disassociation - grok: field: event.original @@ -47,7 +46,7 @@ processors: SYSLOGPRI: '<%{NONNEGINT:log.syslog.priority:long}>' SYSLOGVER: '\b(?:\d{1,2})\b' SYSLOGHDR: '%{SYSLOGPRI}%{SYSLOGVER}' - if: ctx.event.original.startsWith('<') && (ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth') + if: ctx.event.original.startsWith('<') && (ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' || ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change') - kv: field: _temp.rest field_split: " " @@ -83,3 +82,10 @@ processors: target_field: cisco_meraki.wpa_deauth strip_brackets: true if: ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.site_to_site_vpn.connectivity_change + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change' diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index d42ce88bee2..d6844363c46 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -51,8 +51,10 @@ type: keyword - name: action type: keyword - - name: events + - name: site_to_site_vpn type: group fields: - name: raw type: text + - name: connectivity_change + type: flattened From 36b8a6ddf892f23c7768370488de8dadd2482c8f Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Thu, 24 Mar 2022 21:16:18 +1100 Subject: [PATCH 13/67] Add support for dhcp lease and no offers Comment and rearrange events pipeline --- .../test/pipeline/test-events-inprogress.log | 4 +- .../test-events-inprogress.log-expected.json | 62 +++++++++- .../elasticsearch/ingest_pipeline/default.yml | 1 + .../elasticsearch/ingest_pipeline/events.yml | 106 +++++++++++++++--- .../data_stream/log/fields/ecs.yml | 7 ++ 5 files changed, 163 insertions(+), 17 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log index d77e0642622..869cf5a6fea 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log @@ -5,4 +5,6 @@ <134>1 1647478402.117726086 MR_device_2 events type=association radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='140' rssi='20' aid='910537108' <134>1 1647478093.022430458 MX_device_1 events Site-to-Site VPN: CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f] <134>1 1647478092.029594666 MX_device_1 events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201] -<134>1 1380664922.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false' +<134>1 1647478222.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false' +<134>1 1647479420.148681168 MX84 events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 +<134>1 1647479961.535491111 MX84 events dhcp no offers for mac A4:83:E7:02:A2:F1 host = 192.168.10.1 diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json index cafd02feaf0..004c7a975f4 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json @@ -238,7 +238,7 @@ ] }, { - "@timestamp": "2013-10-01T22:02:02.583Z", + "@timestamp": "2022-03-17T00:50:22.583Z", "cisco_meraki": { "device_type": "MX", "event_subtype": "vpn_connectivity_change", @@ -257,7 +257,7 @@ "version": "1.12.0" }, "event": { - "original": "\u003c134\u003e1 1380664922.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false'" + "original": "\u003c134\u003e1 1647478222.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false'" }, "log": { "syslog": { @@ -271,6 +271,62 @@ "forwarded", "preserve_original_event" ] + }, + { + "@timestamp": "2022-03-17T01:10:20.148Z", + "cisco_meraki": { + "event_subtype": "dhcp_offer", + "event_type": "events" + }, + "client": { + "ip": "10.0.2.213", + "mac": "E0-CB-BC-02-4F-80" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647479420.148681168 MX84 events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1" + }, + "network": { + "protocol": "dhcp" + }, + "observer": { + "hostname": "MX84" + }, + "server": { + "mac": "68-3A-1E-42-60-59" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2022-03-17T01:19:21.535Z", + "cisco_meraki": { + "event_subtype": "dhcp_no_offer", + "event_type": "events" + }, + "client": { + "mac": "A4-83-E7-02-A2-F1" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647479961.535491111 MX84 events dhcp no offers for mac A4:83:E7:02:A2:F1 host = 192.168.10.1" + }, + "network": { + "protocol": "dhcp" + }, + "observer": { + "hostname": "MX84" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] } ] -} \ No newline at end of file +} diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index c2f6121821b..0ead7b55a53 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -60,6 +60,7 @@ processors: - client_mac - radio - sts + - msgtype ignore_missing: true on_failure: - set: diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index ecd2d101ae5..2af10c66744 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -1,23 +1,96 @@ --- description: Pipeline for Cisco Meraki events type processors: +#################################################### +# set event_subtype based on type/format +#################################################### - dissect: - description: Check if this is Site-to-Site VPN events + description: Determine event type/format field: event.original - pattern: "%{} events %{sts} %{}" + pattern: "%{} events %{msgtype} %{}" - set: field: cisco_meraki.event_subtype value: 'Site-to-Site VPN' - if: ctx?.sts.toLowerCase() == "site-to-site" + if: ctx?.msgtype.toLowerCase() == "site-to-site" +#################################################### +# log event with type= format +# these are dfs_event, association, disassocation, +# vpn_connectivity_change, wpa_auth, wpa_deauth +#################################################### - dissect: description: Get the event subtype field: event.original pattern: "%{} events type=%{type} %{}" - if: ctx?.sts.startsWith("type=") + if: ctx?.msgtype.startsWith("type=") - rename: field: type target_field: cisco_meraki.event_subtype if: ctx?.type != null + +#################################################### +# Handle DHCP log events +#################################################### +- dissect: + field: event.original + pattern: "%{} events dhcp %{_temp.dhcp_op} %{_temp.dhcp_op2} %{}" + if: ctx?.msgtype.toLowerCase() == "dhcp" +- set: + field: network.protocol + value: dhcp + if: ctx?.msgtype.toLowerCase() == "dhcp" +- dissect: + field: event.original + pattern: "%{} events dhcp lease of ip %{client.ip} from %{} mac %{server.mac} for client mac %{client.mac} %{}" + if: ctx?.msgtype.toLowerCase() == "dhcp" && ctx?._temp?.dhcp_op.toLowerCase() == 'lease' +- dissect: + field: event.original + pattern: "%{} events dhcp no offers for mac %{client.mac} %{}" + if: ctx?.msgtype.toLowerCase() == "dhcp" && ctx?._temp?.dhcp_op.toLowerCase() == 'no' && ctx?._temp?.dhcp_op2.toLowerCase() == 'offers' +- set: + field: cisco_meraki.event_subtype + value: dhcp_offer + if: ctx?.msgtype.toLowerCase() == "dhcp" && ctx?._temp?.dhcp_op == 'lease' +- set: + field: cisco_meraki.event_subtype + value: dhcp_no_offer + if: ctx?.msgtype.toLowerCase() == "dhcp" && ctx?._temp?.dhcp_op.toLowerCase() == 'no' && ctx?._temp?.dhcp_op2.toLowerCase() == 'offers' +- gsub: + field: client.mac + pattern: '[-:.]' + replacement: '-' + if: ctx?.msgtype.toLowerCase() == "dhcp" +- gsub: + field: server.mac + pattern: '[-:.]' + replacement: '-' + if: ctx?.msgtype.toLowerCase() == "dhcp" && ctx?._temp.dhcp_op == 'lease' +# IP Geolocation Lookup (source) +- geoip: + field: client.ip + target_field: client.geo + ignore_missing: true + if: ctx.client?.geo == null && ctx?.client?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: client.ip + target_field: client.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.client?.ip != null +- rename: + field: client.as.asn + target_field: client.as.number + ignore_missing: true +- rename: + field: client.as.organization_name + target_field: client.as.organization.name + ignore_missing: true +#################################################### +# Handle Site-to-Site VPN message +#################################################### - grok: description: Process Site-to-Site VPN messages field: event.original @@ -28,16 +101,11 @@ processors: SYSLOGVER: '\b(?:\d{1,2})\b' SYSLOGHDR: '%{SYSLOGPRI}%{SYSLOGVER}' if: ctx.event.original.startsWith('<') && ctx?.cisco_meraki?.event_subtype == "Site-to-Site VPN" -- set: - field: cisco_meraki.device_type - value: MX - if: ctx?.cisco_meraki?.event_subtype == "Site-to-Site VPN" || ctx?.cisco_meraki?.event_subtype == "vpn_connectivity_change" -- set: - field: cisco_meraki.device_type - value: MR - if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' -# Process dfs_event, wpa_auth, wpa_deauth, association or disassociation +#################################################### +# Handle dfs_event, wpa_auth, wpa_deauth, +# association or disassociation +#################################################### - grok: field: event.original patterns: @@ -89,3 +157,15 @@ processors: target_field: cisco_meraki.site_to_site_vpn.connectivity_change strip_brackets: true if: ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change' + +#################################################### +# Set device_type based on log message subtype +#################################################### +- set: + field: cisco_meraki.device_type + value: MX + if: ctx?.cisco_meraki?.event_subtype == "Site-to-Site VPN" || ctx?.cisco_meraki?.event_subtype == "vpn_connectivity_change" +- set: + field: cisco_meraki.device_type + value: MR + if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index 8f3fe31f0f6..97096e0d9e4 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -1,5 +1,9 @@ - external: ecs name: '@timestamp' +- external: ecs + name: client.ip +- external: ecs + name: client.mac - external: ecs name: client.domain - external: ecs @@ -162,6 +166,9 @@ name: related.user - external: ecs name: rule.name + +- external: ecs + name: server.mac - external: ecs name: server.domain - external: ecs From c3f9a38e7614237ca8c954f6dba45461383da04f Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Fri, 25 Mar 2022 12:38:08 +1100 Subject: [PATCH 14/67] Add support for client_vpn_connect log messages --- .../test/pipeline/test-events-inprogress.log | 1 + .../test-events-inprogress.log-expected.json | 43 ++++++++++++- .../elasticsearch/ingest_pipeline/events.yml | 63 ++++++++++++------- .../data_stream/log/fields/ecs.yml | 16 +++++ 4 files changed, 98 insertions(+), 25 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log index 869cf5a6fea..6122a3b1a11 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log @@ -8,3 +8,4 @@ <134>1 1647478222.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false' <134>1 1647479420.148681168 MX84 events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 <134>1 1647479961.535491111 MX84 events dhcp no offers for mac A4:83:E7:02:A2:F1 host = 192.168.10.1 +<134>1 1647478092.669153546 MX_device_4 events client_vpn_connect user id 'jwick@wwvpn.net' local ip 172.16.0.145 connected from 81.2.69.193 diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json index 004c7a975f4..547a8a4038d 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json @@ -327,6 +327,47 @@ "forwarded", "preserve_original_event" ] + }, + { + "@timestamp": "2022-03-17T00:48:12.669Z", + "cisco_meraki": { + "event_subtype": "client_vpn_connect", + "event_type": "events" + }, + "client": { + "geo": { + "city_name": "London", + "continent_name": "Europe", + "country_iso_code": "GB", + "country_name": "United Kingdom", + "location": { + "lat": 51.5142, + "lon": -0.0931 + }, + "region_iso_code": "GB-ENG", + "region_name": "England" + }, + "ip": "81.2.69.193" + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647478092.669153546 MX_device_4 events client_vpn_connect user id 'jwick@wwvpn.net' local ip 172.16.0.145 connected from 81.2.69.193" + }, + "network": { + "forwarded_ip": "172.16.0.145" + }, + "observer": { + "hostname": "MX_device_4" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ], + "user": { + "name": "jwick@wwvpn.net" + } } ] -} +} \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index 2af10c66744..4dbaedb9433 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -12,6 +12,10 @@ processors: field: cisco_meraki.event_subtype value: 'Site-to-Site VPN' if: ctx?.msgtype.toLowerCase() == "site-to-site" +- set: + field: cisco_meraki.event_subtype + value: client_vpn_connect + if: ctx?.msgtype.toLowerCase() == "client_vpn_connect" #################################################### # log event with type= format # these are dfs_event, association, disassocation, @@ -64,30 +68,6 @@ processors: pattern: '[-:.]' replacement: '-' if: ctx?.msgtype.toLowerCase() == "dhcp" && ctx?._temp.dhcp_op == 'lease' -# IP Geolocation Lookup (source) -- geoip: - field: client.ip - target_field: client.geo - ignore_missing: true - if: ctx.client?.geo == null && ctx?.client?.ip != null -# IP Autonomous System (AS) Lookup -- geoip: - database_file: GeoLite2-ASN.mmdb - field: client.ip - target_field: client.as - properties: - - asn - - organization_name - ignore_missing: true - if: ctx?.client?.ip != null -- rename: - field: client.as.asn - target_field: client.as.number - ignore_missing: true -- rename: - field: client.as.organization_name - target_field: client.as.organization.name - ignore_missing: true #################################################### # Handle Site-to-Site VPN message #################################################### @@ -158,6 +138,14 @@ processors: strip_brackets: true if: ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change' +#################################################### +# Handle client_vpn_connect +#################################################### +- dissect: + field: event.original + pattern: "%{} events client_vpn_connect user id '%{user.name}' local ip %{network.forwarded_ip} connected from %{client.ip}" + if: ctx?.cisco_meraki?.event_subtype == "client_vpn_connect" + #################################################### # Set device_type based on log message subtype #################################################### @@ -169,3 +157,30 @@ processors: field: cisco_meraki.device_type value: MR if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' + +#################################################### +# IP Geolocation Lookup (source) +#################################################### +- geoip: + field: client.ip + target_field: client.geo + ignore_missing: true + if: ctx.client?.geo == null && ctx?.client?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: client.ip + target_field: client.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.client?.ip != null +- rename: + field: client.as.asn + target_field: client.as.number + ignore_missing: true +- rename: + field: client.as.organization_name + target_field: client.as.organization.name + ignore_missing: true diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index 97096e0d9e4..66fecea6d59 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -273,3 +273,19 @@ name: network.direction - external: ecs name: network.protocol +- external: ecs + name: client.geo.city_name +- external: ecs + name: client.geo.continent_name +- external: ecs + name: client.geo.country_iso_code +- external: ecs + name: client.geo.country_name +- external: ecs + name: client.geo.location.lat +- external: ecs + name: client.geo.location.lon +- external: ecs + name: client.geo.region_iso_code +- external: ecs + name: client.geo.region_name From 30d5bfd7c8fbf324b316c79b20623734ba35975d Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 26 Mar 2022 20:37:09 +1100 Subject: [PATCH 15/67] Add support for urls type --- .../log/_dev/test/pipeline/test-urls.log | 2 + .../test/pipeline/test-urls.log-expected.json | 118 ++++++++++++++++++ .../elasticsearch/ingest_pipeline/default.yml | 3 + .../elasticsearch/ingest_pipeline/urls.yml | 82 ++++++++++++ .../data_stream/log/fields/fields.yml | 5 + 5 files changed, 210 insertions(+) create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json create mode 100644 packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log new file mode 100644 index 00000000000..1ac88e104f5 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log @@ -0,0 +1,2 @@ +<134>1 1647479503.348215340 MX84 urls src=10.0.1.29:60336 dst=89.160.20.156:80 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... +<134>1 1647479503.676404537 MX84 urls src=10.0.0.234:56424 dst=89.160.20.112:443 mac=64:1C:AE:68:2A:01 request: GET https://lh3.googleusercontent.com/p/AFVnnY=w2048-h1024 diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json new file mode 100644 index 00000000000..3a3be74eda9 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json @@ -0,0 +1,118 @@ +{ + "expected": [ + { + "@timestamp": "2022-03-17T01:11:43.348Z", + "cisco_meraki": { + "device_type": "MX", + "event_type": "urls", + "urls": { + "mac": "78-7B-8A-CC-05-18" + } + }, + "destination": { + "as": { + "number": 29518, + "organization": { + "name": "Bredband2 AB" + } + }, + "geo": { + "city_name": "Linköping", + "continent_name": "Europe", + "country_iso_code": "SE", + "country_name": "Sweden", + "location": { + "lat": 58.4167, + "lon": 15.6167 + }, + "region_iso_code": "SE-E", + "region_name": "Östergötland County" + }, + "ip": "89.160.20.156", + "port": 80 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647479503.348215340 MX84 urls src=10.0.1.29:60336 dst=89.160.20.156:80 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/..." + }, + "http": { + "request": { + "method": "UNKNOWN" + } + }, + "observer": { + "hostname": "MX84" + }, + "source": { + "ip": "10.0.1.29", + "port": 60336 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ], + "url": { + "original": "https://bitbucket.org/..." + } + }, + { + "@timestamp": "2022-03-17T01:11:43.676Z", + "cisco_meraki": { + "device_type": "MX", + "event_type": "urls", + "urls": { + "mac": "64-1C-AE-68-2A-01" + } + }, + "destination": { + "as": { + "number": 29518, + "organization": { + "name": "Bredband2 AB" + } + }, + "geo": { + "city_name": "Linköping", + "continent_name": "Europe", + "country_iso_code": "SE", + "country_name": "Sweden", + "location": { + "lat": 58.4167, + "lon": 15.6167 + }, + "region_iso_code": "SE-E", + "region_name": "Östergötland County" + }, + "ip": "89.160.20.112", + "port": 443 + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1647479503.676404537 MX84 urls src=10.0.0.234:56424 dst=89.160.20.112:443 mac=64:1C:AE:68:2A:01 request: GET https://lh3.googleusercontent.com/p/AFVnnY=w2048-h1024" + }, + "http": { + "request": { + "method": "GET" + } + }, + "observer": { + "hostname": "MX84" + }, + "source": { + "ip": "10.0.0.234", + "port": 56424 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ], + "url": { + "original": "https://lh3.googleusercontent.com/p/AFVnnY=w2048-h1024" + } + } + ] +} \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 0ead7b55a53..1938413835a 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -41,6 +41,9 @@ processors: - pipeline: name: '{{ IngestPipeline "events" }}' if: ctx.cisco_meraki.event_type == 'events' +- pipeline: + name: '{{ IngestPipeline "urls" }}' + if: ctx.cisco_meraki.event_type == 'urls' - remove: field: - _temp diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml new file mode 100644 index 00000000000..d6df7d5adbb --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml @@ -0,0 +1,82 @@ +--- +description: Pipeline for Cisco Meraki urls type +processors: +- dissect: + description: Determine the security event type + field: event.original + pattern: "%{} urls %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} request: %{http.request.method} %{url.original}" +- set: + field: cisco_meraki.device_type + value: MX +- dissect: + field: src + pattern: "%{source.ip}:%{sport}" +- dissect: + field: dst + pattern: "%{destination.ip}:%{dport}" +- convert: + field: sport + target_field: source.port + type: long + if: ctx?.sport != "0" + ignore_failure: true +- convert: + field: dport + target_field: destination.port + type: long + if: ctx?.dport != "0" + ignore_failure: true +- gsub: + field: mac + target_field: cisco_meraki.urls.mac + pattern: '[-:.]' + replacement: '-' +# IP Geolocation Lookup (source) +- geoip: + field: source.ip + target_field: source.geo + ignore_missing: true + if: ctx.source?.geo == null && ctx?.source?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: source.ip + target_field: source.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.source?.ip != null +- rename: + field: source.as.asn + target_field: source.as.number + ignore_missing: true +- rename: + field: source.as.organization_name + target_field: source.as.organization.name + ignore_missing: true +# IP Geolocation Lookup (destination) +- geoip: + field: destination.ip + target_field: destination.geo + ignore_missing: true + if: ctx.destination?.geo == null && ctx?.destination?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: destination.ip + target_field: destination.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.destination?.ip != null +- rename: + field: destination.as.asn + target_field: destination.as.number + ignore_missing: true +- rename: + field: destination.as.organization_name + target_field: destination.as.organization.name + ignore_missing: true + diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index d6844363c46..4625010d14e 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -36,6 +36,11 @@ type: flattened - name: disassociation type: flattened + - name: urls + type: group + fields: + - name: mac + type: keyword - name: security type: group fields: From f90f099912c99ec7b2ae49218a95f8493aa2e7f4 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 26 Mar 2022 21:46:21 +1100 Subject: [PATCH 16/67] Add pipeline for ids-alerts --- .../docker/sample_logs/security-events.log | 2 +- .../test/pipeline/test-security-events.log | 8 +- .../test-security-events.log-expected.json | 98 +++++++++++++++++-- .../elasticsearch/ingest_pipeline/default.yml | 3 + .../ingest_pipeline/idsalerts.yml | 57 +++++++++++ 5 files changed, 158 insertions(+), 10 deletions(-) create mode 100644 packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log index 9eff07c0b05..c021f5700d2 100644 --- a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log @@ -1 +1 @@ -Nov 24, 2021 @ 05:13:18.000 <134>1 1637691198.348361125 ATT_Primary security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=142.250.189.238:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected +Nov 24, 2021 @ 05:13:18.000 <134>1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=142.250.189.238:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log index 12dba3ae0c2..10ed204c19c 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log @@ -1,3 +1,5 @@ -<134>1 1637691198.348361125 ATT_Primary security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected -<134>1 1637691298.984398273 ATT_Primary security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block -<134>1 1637783435.239819833 ATT_Primary security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow +<134>1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected +<134>1 1637691298.984398273 MX84 security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block +<134>1 1637783435.239819833 MX84 security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow +<134>1 1637783891.345984502 MX84 ids-alerts signature=129:4:1 priority=3 timestamp=1637783891.512569 direction=ingress protocol=tcp/ip src=67.43.156.15:80 +<134>1 1637790201.246576346 MX84 ids-alerts signature=119:15:1 priority=2 timestamp=1637790201.238064 direction=egress protocol=tcp/ip src=192.168.111.254:56240 diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index 7b8ec5fab70..cdfecc47f60 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -21,14 +21,14 @@ "version": "1.12.0" }, "event": { - "original": "\u003c134\u003e1 1637691198.348361125 ATT_Primary security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected" + "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected" }, "network": { "direction": "ingress", "protocol": "tcp/ip" }, "observer": { - "hostname": "ATT_Primary" + "hostname": "MX84" }, "source": { "as": { @@ -88,10 +88,10 @@ "version": "1.12.0" }, "event": { - "original": "\u003c134\u003e1 1637691298.984398273 ATT_Primary security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block" + "original": "\u003c134\u003e1 1637691298.984398273 MX84 security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block" }, "observer": { - "hostname": "ATT_Primary" + "hostname": "MX84" }, "source": { "ip": "192.168.128.2", @@ -134,10 +134,10 @@ "version": "1.12.0" }, "event": { - "original": "\u003c134\u003e1 1637783435.239819833 ATT_Primary security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow" + "original": "\u003c134\u003e1 1637783435.239819833 MX84 security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow" }, "observer": { - "hostname": "ATT_Primary" + "hostname": "MX84" }, "tags": [ "forwarded", @@ -158,6 +158,92 @@ "type": "malicious" } } + }, + { + "@timestamp": "2021-11-24T19:58:11.345Z", + "cisco_meraki": { + "device_type": "MX", + "event_type": "ids-alerts", + "security": { + "priority": "3", + "signature": "129:4:1" + } + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1637783891.345984502 MX84 ids-alerts signature=129:4:1 priority=3 timestamp=1637783891.512569 direction=ingress protocol=tcp/ip src=67.43.156.15:80" + }, + "network": { + "direction": "ingress", + "protocol": "tcp/ip" + }, + "observer": { + "hostname": "MX84" + }, + "source": { + "as": { + "number": 35908 + }, + "geo": { + "continent_name": "Asia", + "country_iso_code": "BT", + "country_name": "Bhutan", + "location": { + "lat": 27.5, + "lon": 90.5 + } + }, + "ip": "67.43.156.15", + "port": 80 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ], + "threat": { + "indicator": { + "last_seen": "1637783891.512569" + } + } + }, + { + "@timestamp": "2021-11-24T21:43:21.246Z", + "cisco_meraki": { + "device_type": "MX", + "event_type": "ids-alerts", + "security": { + "priority": "2", + "signature": "119:15:1" + } + }, + "ecs": { + "version": "1.12.0" + }, + "event": { + "original": "\u003c134\u003e1 1637790201.246576346 MX84 ids-alerts signature=119:15:1 priority=2 timestamp=1637790201.238064 direction=egress protocol=tcp/ip src=192.168.111.254:56240" + }, + "network": { + "direction": "egress", + "protocol": "tcp/ip" + }, + "observer": { + "hostname": "MX84" + }, + "source": { + "ip": "192.168.111.254", + "port": 56240 + }, + "tags": [ + "forwarded", + "preserve_original_event" + ], + "threat": { + "indicator": { + "last_seen": "1637790201.238064" + } + } } ] } \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 1938413835a..7eeb85c444d 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -38,6 +38,9 @@ processors: - pipeline: name: '{{ IngestPipeline "security" }}' if: ctx.cisco_meraki.event_type == 'security_event' +- pipeline: + name: '{{ IngestPipeline "idsalerts" }}' + if: ctx.cisco_meraki.event_type == 'ids-alerts' - pipeline: name: '{{ IngestPipeline "events" }}' if: ctx.cisco_meraki.event_type == 'events' diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml new file mode 100644 index 00000000000..ceec71b93f8 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml @@ -0,0 +1,57 @@ +--- +description: Pipeline for Cisco Meraki ids-alerts type +processors: +- dissect: + description: Determine the ids-alerts security event type + field: event.original + pattern: "%{} ids-alerts %{*sig}=%{&sig} %{*pri}=%{&pri} %{*ts}=%{&ts} %{*dir}=%{&dir} %{*prot}=%{&prot} %{*src}=%{&src}" +- set: + field: cisco_meraki.device_type + value: MX +- rename: + field: priority + target_field: cisco_meraki.security.priority +- rename: + field: signature + target_field: cisco_meraki.security.signature +- rename: + field: timestamp + target_field: threat.indicator.last_seen +- rename: + field: direction + target_field: network.direction +- lowercase: + field: protocol + target_field: network.protocol +- dissect: + field: src + pattern: "%{source.ip}:%{sport}" +- convert: + field: sport + target_field: source.port + type: long + ignore_failure: true +# IP Geolocation Lookup (source) +- geoip: + field: source.ip + target_field: source.geo + ignore_missing: true + if: ctx.source?.geo == null && ctx?.source?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: source.ip + target_field: source.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.source?.ip != null +- rename: + field: source.as.asn + target_field: source.as.number + ignore_missing: true +- rename: + field: source.as.organization_name + target_field: source.as.organization.name + ignore_missing: true From 68d96c14b8fbbb55ab538e260ad187af5210abe6 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sun, 27 Mar 2022 15:35:21 +1100 Subject: [PATCH 17/67] Update ECS version; add sub types for MR events --- .../test-airmarshal-events.log-expected.json | 350 +++++++++--------- .../test-events-inprogress.log-expected.json | 22 +- .../pipeline/test-flows.log-expected.json | 6 +- .../pipeline/test-ip-flow.log-expected.json | 16 +- .../test-security-events.log-expected.json | 10 +- .../test/pipeline/test-urls.log-expected.json | 4 +- .../elasticsearch/ingest_pipeline/default.yml | 2 +- .../elasticsearch/ingest_pipeline/events.yml | 39 +- .../data_stream/log/fields/fields.yml | 10 + 9 files changed, 252 insertions(+), 207 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index 882721d25f2..7ecc314f4e0 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -19,7 +19,7 @@ "mac": "6A-3A-3E-85-D9-F6" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479604.334549372 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5'" @@ -59,7 +59,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479580.487048774 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8'" @@ -99,7 +99,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479552.047395997 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" @@ -139,7 +139,7 @@ "mac": "E2-CB-9C-B5-DD-BE" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479537.315779167 Nash_AP_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5'" @@ -174,7 +174,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479528.067423267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8'" @@ -214,7 +214,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479493.484285651 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" @@ -254,7 +254,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479489.882680227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8'" @@ -294,7 +294,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479484.972992227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" @@ -334,7 +334,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479466.965046920 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8'" @@ -374,7 +374,7 @@ "mac": "AE-17-E8-C7-DF-FD" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479461.791503607 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5'" @@ -409,7 +409,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479459.181348678 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8'" @@ -449,7 +449,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479456.670048547 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8'" @@ -489,7 +489,7 @@ "mac": "6A-3A-3E-85-D9-F6" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479445.786718001 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5'" @@ -529,7 +529,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479442.047436097 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8'" @@ -569,7 +569,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479399.287689295 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8'" @@ -609,7 +609,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479376.407283267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" @@ -649,7 +649,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479375.390251687 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8'" @@ -689,7 +689,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479371.594697827 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8'" @@ -729,7 +729,7 @@ "mac": "78-55-CD-18-8F-76" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479356.473299205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" @@ -769,7 +769,7 @@ "mac": "78-28-CA-AA-6A-4A" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479354.489175845 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5'" @@ -804,7 +804,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479353.446408965 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8'" @@ -844,7 +844,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479352.553639439 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" @@ -884,7 +884,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479350.428006877 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" @@ -924,7 +924,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479350.457045605 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" @@ -964,7 +964,7 @@ "mac": "AE-17-E8-C7-D8-51" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479346.794313756 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5'" @@ -1004,7 +1004,7 @@ "mac": "E2-CB-9C-B5-D4-1E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479345.577452767 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5'" @@ -1044,7 +1044,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479341.816936841 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8'" @@ -1084,7 +1084,7 @@ "mac": "5C-AA-FD-5D-76-0E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479318.128184987 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" @@ -1124,7 +1124,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479313.473165785 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5'" @@ -1164,7 +1164,7 @@ "mac": "78-28-CA-AA-6A-0A" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479299.143407174 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5'" @@ -1199,7 +1199,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479299.115949027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8'" @@ -1239,7 +1239,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479294.302067007 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8'" @@ -1279,7 +1279,7 @@ "mac": "0E-8D-FB-70-0F-A8" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479288.469042416 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5'" @@ -1319,7 +1319,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479281.848397134 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8'" @@ -1359,7 +1359,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479278.839671334 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8'" @@ -1399,7 +1399,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479231.942342036 Nash_AP_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8'" @@ -1434,7 +1434,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479227.438567311 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8'" @@ -1474,7 +1474,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479222.927379747 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" @@ -1514,7 +1514,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479222.927802947 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8'" @@ -1554,7 +1554,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479222.728876109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8'" @@ -1594,7 +1594,7 @@ "mac": "E2-CB-9C-B5-DC-6E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479218.076400635 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5'" @@ -1634,7 +1634,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479203.375371107 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8'" @@ -1674,7 +1674,7 @@ "mac": "6A-3A-3E-85-CA-4E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479199.622640025 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" @@ -1714,7 +1714,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479162.641725608 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" @@ -1754,7 +1754,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479162.670104087 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8'" @@ -1794,7 +1794,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479161.182241827 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8'" @@ -1829,7 +1829,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479158.314592227 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8'" @@ -1864,7 +1864,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479151.958073405 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8'" @@ -1904,7 +1904,7 @@ "mac": "6A-3A-3E-85-D7-D4" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479133.020606043 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5'" @@ -1944,7 +1944,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479127.384572447 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8'" @@ -1984,7 +1984,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479122.570882475 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" @@ -2024,7 +2024,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479122.592807847 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8'" @@ -2064,7 +2064,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479122.578597672 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" @@ -2104,7 +2104,7 @@ "mac": "90-AC-3F-02-31-59" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479120.544286631 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5'" @@ -2139,7 +2139,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479091.258858944 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" @@ -2179,7 +2179,7 @@ "mac": "78-28-CA-AA-6A-4A" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479060.425068327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5'" @@ -2219,7 +2219,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479037.677902643 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" @@ -2259,7 +2259,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479036.783442760 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" @@ -2299,7 +2299,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479020.949227955 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" @@ -2339,7 +2339,7 @@ "mac": "08-A7-C0-3B-5A-95" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478974.912056258 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5'" @@ -2374,7 +2374,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478966.089203455 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8'" @@ -2414,7 +2414,7 @@ "mac": "78-28-CA-AA-69-96" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478950.860971410 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" @@ -2454,7 +2454,7 @@ "mac": "AE-17-E8-C7-E2-9D" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478940.142724327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5'" @@ -2494,7 +2494,7 @@ "mac": "E2-CB-9C-B5-DC-6E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478936.678862087 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5'" @@ -2534,7 +2534,7 @@ "mac": "AE-17-E8-C7-DF-FD" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478907.739529447 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" @@ -2574,7 +2574,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478855.303776534 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" @@ -2614,7 +2614,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478849.532951889 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8'" @@ -2654,7 +2654,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478845.877942207 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" @@ -2694,7 +2694,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478822.111692485 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8'" @@ -2734,7 +2734,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478818.039157925 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8'" @@ -2774,7 +2774,7 @@ "mac": "6E-DA-36-A2-39-71" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478800.349145072 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5'" @@ -2809,7 +2809,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478799.177625347 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8'" @@ -2849,7 +2849,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478788.838283552 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8'" @@ -2889,7 +2889,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478782.939898885 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5'" @@ -2929,7 +2929,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478782.932299301 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" @@ -2969,7 +2969,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478782.930289746 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" @@ -3009,7 +3009,7 @@ "mac": "78-28-CA-AA-6A-4A" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478695.528431433 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5'" @@ -3044,7 +3044,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478693.465185593 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" @@ -3084,7 +3084,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478669.549413486 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" @@ -3124,7 +3124,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478626.517046787 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8'" @@ -3164,7 +3164,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478591.602996834 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" @@ -3204,7 +3204,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478569.035635205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5'" @@ -3244,7 +3244,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478567.751044590 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" @@ -3284,7 +3284,7 @@ "mac": "5C-AA-FD-5D-76-0E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478559.571303907 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5'" @@ -3324,7 +3324,7 @@ "mac": "E2-CB-9C-B5-DC-6E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478558.540066660 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5'" @@ -3364,7 +3364,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478554.934781027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8'" @@ -3404,7 +3404,7 @@ "mac": "E2-CB-9C-B5-DA-7A" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478541.587558726 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" @@ -3444,7 +3444,7 @@ "mac": "E2-CB-9C-B5-DA-7A" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478534.671579931 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5'" @@ -3484,7 +3484,7 @@ "mac": "6A-3A-3E-85-D7-D4" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478508.007504325 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" @@ -3524,7 +3524,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478487.013169927 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8'" @@ -3564,7 +3564,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478483.410677512 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8'" @@ -3604,7 +3604,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478478.614722093 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8'" @@ -3644,7 +3644,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478440.565782942 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" @@ -3684,7 +3684,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478408.128821330 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8'" @@ -3724,7 +3724,7 @@ "mac": "AE-17-E8-C7-DF-FD" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478403.005811325 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5'" @@ -3759,7 +3759,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478383.070405853 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" @@ -3799,7 +3799,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478373.816434235 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8'" @@ -3839,7 +3839,7 @@ "mac": "78-28-CA-AA-6A-0A" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478339.127895652 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5'" @@ -3874,7 +3874,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478298.296851316 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" @@ -3914,7 +3914,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478293.380396754 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" @@ -3954,7 +3954,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478268.953109023 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8'" @@ -3994,7 +3994,7 @@ "mac": "EE-CE-D5-6A-B6-22" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478257.084985274 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5'" @@ -4029,7 +4029,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478256.341194724 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8'" @@ -4069,7 +4069,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478221.255609741 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" @@ -4109,7 +4109,7 @@ "mac": "6A-3A-3E-85-D7-D4" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478145.758483684 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" @@ -4149,7 +4149,7 @@ "mac": "AE-17-E8-C7-E1-41" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478121.589518727 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5'" @@ -4184,7 +4184,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478119.868477795 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8'" @@ -4224,7 +4224,7 @@ "mac": "78-28-CA-AA-69-96" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478114.277373007 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5'" @@ -4259,7 +4259,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478105.395836204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8'" @@ -4299,7 +4299,7 @@ "mac": "E2-CB-9C-B5-D7-80" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478102.536782923 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" @@ -4339,7 +4339,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478092.108472035 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" @@ -4379,7 +4379,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478087.649007204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8'" @@ -4419,7 +4419,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478063.434847715 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8'" @@ -4459,7 +4459,7 @@ "mac": "E2-CB-9C-B5-DD-BE" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478054.846444450 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5'" @@ -4499,7 +4499,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478039.876640835 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8'" @@ -4539,7 +4539,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478035.923601924 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" @@ -4579,7 +4579,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478034.762765475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" @@ -4619,7 +4619,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478026.502834244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" @@ -4659,7 +4659,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478020.564810050 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8'" @@ -4699,7 +4699,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478015.983013635 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8'" @@ -4739,7 +4739,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478006.707247789 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8'" @@ -4779,7 +4779,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478001.603867573 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8'" @@ -4819,7 +4819,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477963.236026884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8'" @@ -4859,7 +4859,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477958.900449163 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" @@ -4899,7 +4899,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477953.907583508 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8'" @@ -4939,7 +4939,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477953.724449475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" @@ -4979,7 +4979,7 @@ "mac": "E2-CB-9C-B5-D8-54" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477945.336342244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5'" @@ -5019,7 +5019,7 @@ "mac": "6A-3A-3E-85-CA-4E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477944.121686758 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5'" @@ -5059,7 +5059,7 @@ "mac": "34-8F-27-25-CC-48" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477940.363429956 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5'" @@ -5094,7 +5094,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477930.038516204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" @@ -5134,7 +5134,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477927.225784460 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" @@ -5174,7 +5174,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477920.683178115 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8'" @@ -5214,7 +5214,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477920.510699794 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" @@ -5254,7 +5254,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477891.986568005 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8'" @@ -5294,7 +5294,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477881.304873506 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" @@ -5334,7 +5334,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477873.769683395 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" @@ -5374,7 +5374,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477872.782332783 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" @@ -5414,7 +5414,7 @@ "mac": "E2-CB-9C-B5-DD-BE" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477871.675119845 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5'" @@ -5454,7 +5454,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477864.088023180 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8'" @@ -5494,7 +5494,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477834.810489249 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8'" @@ -5534,7 +5534,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477828.886032606 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8'" @@ -5574,7 +5574,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477828.885258686 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8'" @@ -5614,7 +5614,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477828.799864712 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8'" @@ -5654,7 +5654,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477825.209110701 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8'" @@ -5694,7 +5694,7 @@ "mac": "6A-3A-3E-85-CA-4E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477825.021409913 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5'" @@ -5734,7 +5734,7 @@ "mac": "AE-17-E8-C7-DF-FD" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477825.024707684 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5'" @@ -5774,7 +5774,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477821.364087032 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8'" @@ -5814,7 +5814,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477796.382660565 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8'" @@ -5854,7 +5854,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477796.382227661 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" @@ -5894,7 +5894,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477796.381818586 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" @@ -5934,7 +5934,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477795.407019364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8'" @@ -5974,7 +5974,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477795.385494917 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" @@ -6014,7 +6014,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477795.385835866 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" @@ -6054,7 +6054,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477793.576467473 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8'" @@ -6094,7 +6094,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477793.576769233 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" @@ -6134,7 +6134,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477786.805604872 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8'" @@ -6174,7 +6174,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477780.705460109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" @@ -6214,7 +6214,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477778.398160444 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8'" @@ -6254,7 +6254,7 @@ "mac": "AE-17-E8-C7-D8-51" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477773.586461164 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" @@ -6294,7 +6294,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477764.149946084 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" @@ -6334,7 +6334,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477764.145077176 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8'" @@ -6374,7 +6374,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477764.143985243 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" @@ -6414,7 +6414,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477764.144283174 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" @@ -6454,7 +6454,7 @@ "mac": "E2-CB-9C-B5-D4-1E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477763.225832662 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" @@ -6494,7 +6494,7 @@ "mac": "AE-17-E8-C7-DF-FD" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477744.039850991 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5'" @@ -6534,7 +6534,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477733.453967364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8'" @@ -6574,7 +6574,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477733.446493073 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8'" @@ -6614,7 +6614,7 @@ "mac": "38-BA-F8-CC-82-2E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477733.420037284 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" @@ -6654,7 +6654,7 @@ "mac": "38-BA-F8-CC-82-2E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477733.419042244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" @@ -6694,7 +6694,7 @@ "mac": "38-BA-F8-CC-82-2E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477733.411410011 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5'" @@ -6734,7 +6734,7 @@ "mac": "E2-CB-9C-B5-D8-54" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477716.431936901 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" @@ -6774,7 +6774,7 @@ "mac": "E2-CB-9C-B5-D8-54" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477716.431151781 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" @@ -6814,7 +6814,7 @@ "mac": "E2-CB-9C-B5-D8-54" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477716.429168101 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" @@ -6854,7 +6854,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477715.612600884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" @@ -6894,7 +6894,7 @@ "mac": "E2-CB-9C-B5-DC-6E" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647477702.046252324 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5'" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json index 547a8a4038d..7b7508a8caf 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json @@ -13,7 +13,7 @@ "event_type": "events" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2'" @@ -46,7 +46,7 @@ } }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478401.421090826 MR_device_2 events type=wpa_deauth radio='1' vap='1' client_mac='E5:A4:98:71:9A:FE' aid='1034533358'" @@ -79,7 +79,7 @@ } }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478402.126325721 MR_device_2 events type=wpa_auth radio='1' vap='1' client_mac='E4:F4:18:79:1F:E1' aid='910537108'" @@ -126,7 +126,7 @@ "event_type": "events" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478709.602628785 MR_device_2 events type=disassociation radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='67.43.156.14' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='8.8.8.8' dhcp_server_mac='18:3B:2E:5C:A7:F6' dhcp_resp='1.373967135' aid='1478558813'" @@ -161,7 +161,7 @@ "event_type": "events" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478402.117726086 MR_device_2 events type=association radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='140' rssi='20' aid='910537108'" @@ -190,7 +190,7 @@ } }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478093.022430458 MX_device_1 events Site-to-Site VPN: \u003cl2tp-over-ipsec-1|241\u003e CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f]" @@ -219,7 +219,7 @@ } }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478092.029594666 MX_device_1 events Site-to-Site VPN: \u003cl2tp-over-ipsec-1|241\u003e IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201]" @@ -254,7 +254,7 @@ } }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478222.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false'" @@ -283,7 +283,7 @@ "mac": "E0-CB-BC-02-4F-80" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479420.148681168 MX84 events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1" @@ -312,7 +312,7 @@ "mac": "A4-83-E7-02-A2-F1" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479961.535491111 MX84 events dhcp no offers for mac A4:83:E7:02:A2:F1 host = 192.168.10.1" @@ -350,7 +350,7 @@ "ip": "81.2.69.193" }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478092.669153546 MX_device_4 events client_vpn_connect user id 'jwick@wwvpn.net' local ip 172.16.0.145 connected from 81.2.69.193" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index 6ea62a51329..1cf7d4fa30b 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -13,7 +13,7 @@ "port": 15600 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478988.289402144 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600" @@ -44,7 +44,7 @@ "port": 44210 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478988.476061795 ATT_Primary flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all" @@ -77,7 +77,7 @@ "port": 15500 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647478988.596151424 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json index 854ec781df8..51ed7974d1e 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json @@ -22,7 +22,7 @@ "port": 80 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479278.997155282 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294" @@ -70,7 +70,7 @@ "port": 53 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479278.995279215 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061" @@ -118,7 +118,7 @@ "port": 53 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479278.974067126 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401" @@ -172,7 +172,7 @@ "port": 443 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479278.911594876 ATT_Primary ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272" @@ -235,7 +235,7 @@ "port": 53 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" @@ -277,7 +277,7 @@ "port": 443 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479325.842384731 ATT_Primary ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422" @@ -340,7 +340,7 @@ "port": 53 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" @@ -382,7 +382,7 @@ "port": 80 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479325.755292025 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index cdfecc47f60..f2510243c5c 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -18,7 +18,7 @@ "port": 56391 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected" @@ -85,7 +85,7 @@ "port": 80 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1637691298.984398273 MX84 security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block" @@ -131,7 +131,7 @@ } }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1637783435.239819833 MX84 security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow" @@ -170,7 +170,7 @@ } }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1637783891.345984502 MX84 ids-alerts signature=129:4:1 priority=3 timestamp=1637783891.512569 direction=ingress protocol=tcp/ip src=67.43.156.15:80" @@ -219,7 +219,7 @@ } }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1637790201.246576346 MX84 ids-alerts signature=119:15:1 priority=2 timestamp=1637790201.238064 direction=egress protocol=tcp/ip src=192.168.111.254:56240" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json index 3a3be74eda9..338f3c39f3e 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json @@ -32,7 +32,7 @@ "port": 80 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479503.348215340 MX84 urls src=10.0.1.29:60336 dst=89.160.20.156:80 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/..." @@ -89,7 +89,7 @@ "port": 443 }, "ecs": { - "version": "1.12.0" + "version": "8.0.0" }, "event": { "original": "\u003c134\u003e1 1647479503.676404537 MX84 urls src=10.0.0.234:56424 dst=89.160.20.112:443 mac=64:1C:AE:68:2A:01 request: GET https://lh3.googleusercontent.com/p/AFVnnY=w2048-h1024" diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 7eeb85c444d..8bb5ad88b6c 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -3,7 +3,7 @@ description: Pipeline for Cisco Meraki syslog processors: - set: field: ecs.version - value: 1.12.0 + value: 8.0.0 - rename: field: message target_field: event.original diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index 4dbaedb9433..7fc58274fb9 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -94,7 +94,7 @@ processors: SYSLOGPRI: '<%{NONNEGINT:log.syslog.priority:long}>' SYSLOGVER: '\b(?:\d{1,2})\b' SYSLOGHDR: '%{SYSLOGPRI}%{SYSLOGVER}' - if: ctx.event.original.startsWith('<') && (ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' || ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change') + if: ctx.event.original.startsWith('<') && (ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' || ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change' || ctx?.cisco_meraki?.event_subtype == '8021x_eap_failure' || ctx?.cisco_meraki?.event_subtype == '8021x_deauth' || ctx?.cisco_meraki?.event_subtype == '8021x_eap_success' || ctx?.cisco_meraki?.event_subtype == 'splash_auth' || ctx?.cisco_meraki?.event_subtype == 'device_packet_flood') - kv: field: _temp.rest field_split: " " @@ -137,6 +137,41 @@ processors: target_field: cisco_meraki.site_to_site_vpn.connectivity_change strip_brackets: true if: ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.site_to_site_vpn.8021x_eap_failure + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == '8021x_eap_failure' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.site_to_site_vpn.8021x_deauth + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == '8021x_deauth' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.site_to_site_vpn.8021x_eap_success + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == '8021x_eap_success' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.site_to_site_vpn.splash_auth + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == 'splash_auth' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.site_to_site_vpn.device_packet_flood + strip_brackets: true + if: ctx?.cisco_meraki?.event_subtype == 'device_packet_flood' #################################################### # Handle client_vpn_connect @@ -156,7 +191,7 @@ processors: - set: field: cisco_meraki.device_type value: MR - if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' + if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' || ctx?.cisco_meraki?.event_subtype == '8021x_eap_failure' || ctx?.cisco_meraki?.event_subtype == '8021x_deauth' || ctx?.cisco_meraki?.event_subtype == '8021x_eap_success' || ctx?.cisco_meraki?.event_subtype == 'splash_auth' || ctx?.cisco_meraki?.event_subtype == 'device_packet_flood' #################################################### # IP Geolocation Lookup (source) diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index 4625010d14e..b385feffc28 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -36,6 +36,16 @@ type: flattened - name: disassociation type: flattened + - name: 8021x_eap_failure + type: flattened + - name: 8021x_deauth + type: flattened + - name: 8021x_eap_success + type: flattened + - name: splash_auth + type: flattened + - name: device_packet_flood + type: flattened - name: urls type: group fields: From 094d2baaebaba5419fe447789738b555b65cdfb7 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sun, 27 Mar 2022 18:09:08 +1100 Subject: [PATCH 18/67] Add system tests --- .../_dev/deploy/docker/docker-compose.yml | 16 + .../docker/sample_logs/airmarshal-events.log | 349 ---------------- .../docker/sample_logs/cisco-meraki.log | 204 +++++++++ .../_dev/deploy/docker/sample_logs/events.log | 389 ------------------ .../deploy/docker/sample_logs/ip-flow-end.log | 369 ----------------- .../docker/sample_logs/ip-flow-start.log | 301 -------------- .../docker/sample_logs/security-events.log | 1 - .../_dev/deploy/docker/sample_logs/urls.log | 261 ------------ .../data_stream/events/sample_event.json | 10 +- .../test/pipeline/test-airmarshal-events.log | 350 ++++++++-------- .../log/_dev/test/pipeline/test-flows.log | 6 +- .../log/_dev/test/pipeline/test-ip-flow.log | 16 +- .../_dev/test/system/test-logfile-config.yml | 7 + .../log/_dev/test/system/test-tcp-config.yml | 8 + .../log/_dev/test/system/test-udp-config.yml | 8 + .../cisco_meraki/data_stream/log/manifest.yml | 2 +- .../data_stream/log/sample_event.json | 87 ++++ 17 files changed, 522 insertions(+), 1862 deletions(-) delete mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/airmarshal-events.log create mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log delete mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/events.log delete mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-end.log delete mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-start.log delete mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log delete mode 100644 packages/cisco_meraki/_dev/deploy/docker/sample_logs/urls.log create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/system/test-logfile-config.yml create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/system/test-tcp-config.yml create mode 100644 packages/cisco_meraki/data_stream/log/_dev/test/system/test-udp-config.yml create mode 100644 packages/cisco_meraki/data_stream/log/sample_event.json diff --git a/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml b/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml index 79cce343d11..7714b740861 100644 --- a/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml +++ b/packages/cisco_meraki/_dev/deploy/docker/docker-compose.yml @@ -19,3 +19,19 @@ services: - STREAM_WEBHOOK_HEADER=Authorization=abc123 - STREAM_INSECURE=true command: log --start-signal=SIGHUP --delay=5s /sample_events/meraki-mx-ndjson.log + cisco_meraki-log-logfile: + image: alpine + volumes: + - ./sample_logs:/sample_logs:ro + - ${SERVICE_LOGS_DIR}:/var/log + command: /bin/sh -c "cp /sample_logs/* /var/log/" + cisco_meraki-log-udp: + image: docker.elastic.co/observability/stream:v0.6.2 + volumes: + - ./sample_logs:/sample_logs:ro + command: log --start-signal=SIGHUP --delay=5s --addr elastic-agent:8685 -p=udp /sample_logs/cisco-meraki.log + cisco_meraki-log-tcp: + image: docker.elastic.co/observability/stream:v0.6.2 + volumes: + - ./sample_logs:/sample_logs:ro + command: log --start-signal=SIGHUP --delay=5s --addr elastic-agent:8685 -p=tcp /sample_logs/cisco-meraki.log diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/airmarshal-events.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/airmarshal-events.log deleted file mode 100644 index ff083b1dee7..00000000000 --- a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/airmarshal-events.log +++ /dev/null @@ -1,349 +0,0 @@ -Mar 17, 2022 @ 12:13:24.321 <134>1 1647479604.334549372 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:13:00.485 <134>1 1647479580.487048774 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:12:32.000 <134>1 1647479552.047395997 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:12:17.281 <134>1 1647479537.315779167 Nash_AP_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:12:08.061 <134>1 1647479528.067423267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:11:33.487 <134>1 1647479493.484285651 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:11:29.877 <134>1 1647479489.882680227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:11:24.968 <134>1 1647479484.972992227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:11:06.927 <134>1 1647479466.965046920 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:11:01.791 <134>1 1647479461.791503607 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:10:59.172 <134>1 1647479459.181348678 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:10:56.666 <134>1 1647479456.670048547 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:10:45.779 <134>1 1647479445.786718001 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:10:42.038 <134>1 1647479442.047436097 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:09:59.251 <134>1 1647479399.287689295 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:09:36.405 <134>1 1647479376.407283267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:09:35.383 <134>1 1647479375.390251687 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:09:31.593 <134>1 1647479371.594697827 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:09:16.437 <134>1 1647479356.473299205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:09:14.453 <134>1 1647479354.489175845 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:09:13.411 <134>1 1647479353.446408965 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:09:12.545 <134>1 1647479352.553639439 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:09:10.425 <134>1 1647479350.428006877 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:09:10.424 <134>1 1647479350.457045605 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:09:06.759 <134>1 1647479346.794313756 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:09:05.548 <134>1 1647479345.577452767 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:09:01.811 <134>1 1647479341.816936841 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:08:38.111 <134>1 1647479318.128184987 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:08:33.456 <134>1 1647479313.473165785 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:08:19.148 <134>1 1647479299.143407174 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:08:19.105 <134>1 1647479299.115949027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:08:14.275 <134>1 1647479294.302067007 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:08:08.453 <134>1 1647479288.469042416 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:08:01.832 <134>1 1647479281.848397134 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:07:58.846 <134>1 1647479278.839671334 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:07:11.918 <134>1 1647479231.942342036 Nash_AP_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:07:07.406 <134>1 1647479227.438567311 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:07:02.919 <134>1 1647479222.927379747 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:07:02.919 <134>1 1647479222.927802947 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:07:02.697 <134>1 1647479222.728876109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:06:58.074 <134>1 1647479218.076400635 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:06:43.367 <134>1 1647479203.375371107 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:06:39.584 <134>1 1647479199.622640025 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:06:02.639 <134>1 1647479162.641725608 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:06:02.639 <134>1 1647479162.670104087 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:06:01.186 <134>1 1647479161.182241827 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:05:58.319 <134>1 1647479158.314592227 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:05:51.944 <134>1 1647479151.958073405 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:05:33.022 <134>1 1647479133.020606043 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:05:27.362 <134>1 1647479127.384572447 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:05:22.550 <134>1 1647479122.570882475 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:05:22.550 <134>1 1647479122.592807847 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:05:22.549 <134>1 1647479122.578597672 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:05:20.515 <134>1 1647479120.544286631 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:04:51.239 <134>1 1647479091.258858944 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:04:20.384 <134>1 1647479060.425068327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:03:57.666 <134>1 1647479037.677902643 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:03:56.756 <134>1 1647479036.783442760 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:03:40.950 <134>1 1647479020.949227955 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:02:54.928 <134>1 1647478974.912056258 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:02:46.092 <134>1 1647478966.089203455 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:02:30.851 <134>1 1647478950.860971410 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:02:20.104 <134>1 1647478940.142724327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:02:16.640 <134>1 1647478936.678862087 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:01:47.712 <134>1 1647478907.739529447 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 12:00:55.310 <134>1 1647478855.303776534 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:00:49.481 <134>1 1647478849.532951889 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:00:45.872 <134>1 1647478845.877942207 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:00:22.091 <134>1 1647478822.111692485 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:00:18.018 <134>1 1647478818.039157925 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 12:00:00.358 <134>1 1647478800.349145072 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:59:59.181 <134>1 1647478799.177625347 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:59:48.811 <134>1 1647478788.838283552 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:59:42.920 <134>1 1647478782.939898885 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:59:42.920 <134>1 1647478782.932299301 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:59:42.918 <134>1 1647478782.930289746 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:58:15.510 <134>1 1647478695.528431433 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:58:13.476 <134>1 1647478693.465185593 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:57:49.550 <134>1 1647478669.549413486 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:57:06.526 <134>1 1647478626.517046787 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:56:31.587 <134>1 1647478591.602996834 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:56:09.022 <134>1 1647478569.035635205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:56:07.729 <134>1 1647478567.751044590 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:55:59.585 <134>1 1647478559.571303907 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:55:58.496 <134>1 1647478558.540066660 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:55:54.945 <134>1 1647478554.934781027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:55:41.528 <134>1 1647478541.587558726 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:55:34.628 <134>1 1647478534.671579931 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:55:07.996 <134>1 1647478508.007504325 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:54:46.986 <134>1 1647478487.013169927 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:54:43.368 <134>1 1647478483.410677512 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:54:38.557 <134>1 1647478478.614722093 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:54:00.547 <134>1 1647478440.565782942 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:53:28.111 <134>1 1647478408.128821330 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:53:22.965 <134>1 1647478403.005811325 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:53:03.040 <134>1 1647478383.070405853 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:52:53.819 <134>1 1647478373.816434235 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:52:19.132 <134>1 1647478339.127895652 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:51:38.236 <134>1 1647478298.296851316 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:51:33.320 <134>1 1647478293.380396754 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:51:08.926 <134>1 1647478268.953109023 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:50:57.071 <134>1 1647478257.084985274 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:50:56.298 <134>1 1647478256.341194724 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:50:21.243 <134>1 1647478221.255609741 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:49:05.736 <134>1 1647478145.758483684 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:48:41.570 <134>1 1647478121.589518727 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:48:39.882 <134>1 1647478119.868477795 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:48:34.222 <134>1 1647478114.277373007 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:48:25.341 <134>1 1647478105.395836204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:48:22.482 <134>1 1647478102.536782923 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:48:12.122 <134>1 1647478092.108472035 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:48:07.611 <134>1 1647478087.649007204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:47:43.449 <134>1 1647478063.434847715 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:47:34.827 <134>1 1647478054.846444450 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:47:19.891 <134>1 1647478039.876640835 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:47:15.887 <134>1 1647478035.923601924 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:47:14.778 <134>1 1647478034.762765475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:47:06.466 <134>1 1647478026.502834244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:47:00.545 <134>1 1647478020.564810050 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:46:55.998 <134>1 1647478015.983013635 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:46:46.721 <134>1 1647478006.707247789 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:46:41.574 <134>1 1647478001.603867573 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:46:03.201 <134>1 1647477963.236026884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:45:58.894 <134>1 1647477958.900449163 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:45:53.857 <134>1 1647477953.907583508 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:45:53.741 <134>1 1647477953.724449475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:45:45.302 <134>1 1647477945.336342244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:45:44.116 <134>1 1647477944.121686758 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:45:40.358 <134>1 1647477940.363429956 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:45:29.997 <134>1 1647477930.038516204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:45:27.187 <134>1 1647477927.225784460 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:45:20.701 <134>1 1647477920.683178115 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:45:20.474 <134>1 1647477920.510699794 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:44:51.992 <134>1 1647477891.986568005 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:44:41.292 <134>1 1647477881.304873506 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:44:33.788 <134>1 1647477873.769683395 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:44:32.756 <134>1 1647477872.782332783 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:44:31.682 <134>1 1647477871.675119845 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:44:24.062 <134>1 1647477864.088023180 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:54.786 <134>1 1647477834.810489249 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:48.861 <134>1 1647477828.886032606 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:48.860 <134>1 1647477828.885258686 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:48.759 <134>1 1647477828.799864712 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:45.161 <134>1 1647477825.209110701 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:45.019 <134>1 1647477825.021409913 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:43:44.993 <134>1 1647477825.024707684 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:43:41.362 <134>1 1647477821.364087032 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:16.374 <134>1 1647477796.382660565 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:16.373 <134>1 1647477796.382227661 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:16.372 <134>1 1647477796.381818586 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:15.377 <134>1 1647477795.407019364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:15.376 <134>1 1647477795.385494917 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:15.376 <134>1 1647477795.385835866 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:13.553 <134>1 1647477793.576467473 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:13.553 <134>1 1647477793.576769233 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:06.766 <134>1 1647477786.805604872 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:43:00.683 <134>1 1647477780.705460109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:42:58.351 <134>1 1647477778.398160444 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:42:53.571 <134>1 1647477773.586461164 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:42:44.121 <134>1 1647477764.149946084 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:42:44.121 <134>1 1647477764.145077176 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:42:44.120 <134>1 1647477764.143985243 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:42:44.120 <134>1 1647477764.144283174 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:42:43.215 <134>1 1647477763.225832662 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:42:23.994 <134>1 1647477744.039850991 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:42:13.425 <134>1 1647477733.453967364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:42:13.424 <134>1 1647477733.446493073 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:42:13.391 <134>1 1647477733.420037284 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:42:13.390 <134>1 1647477733.419042244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:42:13.389 <134>1 1647477733.411410011 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:41:56.387 <134>1 1647477716.431936901 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:41:56.386 <134>1 1647477716.431151781 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:41:56.384 <134>1 1647477716.429168101 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' - -Mar 17, 2022 @ 11:41:55.592 <134>1 1647477715.612600884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' - -Mar 17, 2022 @ 11:41:42.019 <134>1 1647477702.046252324 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5' diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log new file mode 100644 index 00000000000..a9625653a64 --- /dev/null +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log @@ -0,0 +1,204 @@ +<134>1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected +<134>1 1647479604.334549372 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5' +<134>1 1647479580.487048774 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647479552.047395997 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5' +<134>1 1647479528.067423267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479489.882680227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8' +<134>1 1647479484.972992227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' +<134>1 1647479466.965046920 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8' +<134>1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5' +<134>1 1647479459.181348678 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647479456.670048547 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8' +<134>1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5' +<134>1 1647479442.047436097 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8' +<134>1 1647479399.287689295 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8' +<134>1 1647479376.407283267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647479375.390251687 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8' +<134>1 1647479371.594697827 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8' +<134>1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5' +<134>1 1647479353.446408965 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479352.553639439 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479346.794313756 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5' +<134>1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5' +<134>1 1647479341.816936841 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647479313.473165785 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5' +<134>1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5' +<134>1 1647479299.115949027 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8' +<134>1 1647479294.302067007 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647479288.469042416 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479278.839671334 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8' +<134>1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479227.438567311 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8' +<134>1 1647479222.927379747 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647479222.927802947 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647479222.728876109 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8' +<134>1 1647479218.076400635 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5' +<134>1 1647479203.375371107 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8' +<134>1 1647479199.622640025 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647479162.641725608 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647479162.670104087 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8' +<134>1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647479151.958073405 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479133.020606043 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647479127.384572447 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647479122.570882475 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' +<134>1 1647479122.592807847 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8' +<134>1 1647479122.578597672 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' +<134>1 1647479120.544286631 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5' +<134>1 1647479091.258858944 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' +<134>1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5' +<134>1 1647479037.677902643 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647479036.783442760 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647479020.949227955 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' +<134>1 1647478974.912056258 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5' +<134>1 1647478966.089203455 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5' +<134>1 1647478936.678862087 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647478907.739529447 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647478855.303776534 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' +<134>1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478845.877942207 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' +<134>1 1647478822.111692485 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8' +<134>1 1647478818.039157925 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8' +<134>1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647478799.177625347 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647478788.838283552 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8' +<134>1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5' +<134>1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' +<134>1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' +<134>1 1647478695.528431433 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5' +<134>1 1647478693.465185593 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478669.549413486 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478626.517046787 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8' +<134>1 1647478591.602996834 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478569.035635205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5' +<134>1 1647478567.751044590 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478559.571303907 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5' +<134>1 1647478558.540066660 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5' +<134>1 1647478554.934781027 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8' +<134>1 1647478541.587558726 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5' +<134>1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' +<134>1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647478483.410677512 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647478478.614722093 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8' +<134>1 1647478440.565782942 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647478408.128821330 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8' +<134>1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5' +<134>1 1647478383.070405853 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' +<134>1 1647478373.816434235 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647478339.127895652 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647478298.296851316 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647478293.380396754 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647478268.953109023 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8' +<134>1 1647478257.084985274 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5' +<134>1 1647478256.341194724 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8' +<134>1 1647478221.255609741 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' +<134>1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647478119.868477795 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8' +<134>1 1647478114.277373007 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647478105.395836204 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8' +<134>1 1647478102.536782923 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647478092.108472035 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478087.649007204 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478063.434847715 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647478054.846444450 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5' +<134>1 1647478039.876640835 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647478035.923601924 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478034.762765475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478026.502834244 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478020.564810050 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478015.983013635 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8' +<134>1 1647478006.707247789 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8' +<134>1 1647478001.603867573 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477963.236026884 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8' +<134>1 1647477958.900449163 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647477953.907583508 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8' +<134>1 1647477953.724449475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647477945.336342244 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5' +<134>1 1647477944.121686758 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5' +<134>1 1647477940.363429956 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5' +<134>1 1647477930.038516204 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' +<134>1 1647477927.225784460 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477920.683178115 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647477920.510699794 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' +<134>1 1647477891.986568005 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647477881.304873506 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647477872.782332783 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' +<134>1 1647477871.675119845 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5' +<134>1 1647477864.088023180 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647477834.810489249 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8' +<134>1 1647477828.886032606 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8' +<134>1 1647477828.885258686 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8' +<134>1 1647477828.799864712 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8' +<134>1 1647477825.209110701 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8' +<134>1 1647477825.021409913 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5' +<134>1 1647477825.024707684 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5' +<134>1 1647477821.364087032 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647477796.382660565 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8' +<134>1 1647477796.382227661 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' +<134>1 1647477796.381818586 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' +<134>1 1647477795.407019364 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8' +<134>1 1647477795.385494917 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' +<134>1 1647477795.385835866 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' +<134>1 1647477793.576467473 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647477793.576769233 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477786.805604872 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8' +<134>1 1647477780.705460109 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' +<134>1 1647477778.398160444 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8' +<134>1 1647477773.586461164 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647477764.149946084 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647477764.145077176 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8' +<134>1 1647477764.143985243 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647477764.144283174 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647477763.225832662 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647477744.039850991 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5' +<134>1 1647477733.453967364 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8' +<134>1 1647477733.446493073 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647477733.420037284 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647477733.419042244 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647477733.411410011 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5' +<134>1 1647477716.431936901 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477716.431151781 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477716.429168101 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477715.612600884 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647477702.046252324 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2' +<134>1 1647478401.421090826 MR_device_2 events type=wpa_deauth radio='1' vap='1' client_mac='E5:A4:98:71:9A:FE' aid='1034533358' +<134>1 1647478402.126325721 MR_device_2 events type=wpa_auth radio='1' vap='1' client_mac='E4:F4:18:79:1F:E1' aid='910537108' +<134>1 1647478709.602628785 MR_device_2 events type=disassociation radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='67.43.156.14' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='8.8.8.8' dhcp_server_mac='18:3B:2E:5C:A7:F6' dhcp_resp='1.373967135' aid='1478558813' +<134>1 1647478402.117726086 MR_device_2 events type=association radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='140' rssi='20' aid='910537108' +<134>1 1647478093.022430458 MX_device_1 events Site-to-Site VPN: CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f] +<134>1 1647478092.029594666 MX_device_1 events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201] +<134>1 1647478222.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false' +<134>1 1647479420.148681168 MX84 events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 +<134>1 1647479961.535491111 MX84 events dhcp no offers for mac A4:83:E7:02:A2:F1 host = 192.168.10.1 +<134>1 1647478092.669153546 MX_device_4 events client_vpn_connect user id 'jwick@wwvpn.net' local ip 172.16.0.145 connected from 81.2.69.193 +<134>1 1647478988.289402144 MX84_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600 +<134>1 1647478988.476061795 MX84 flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all +<134>1 1647478988.596151424 MX84_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500 +<134>1 1647479278.997155282 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294 +<134>1 1647479278.995279215 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061 +<134>1 1647479278.974067126 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401 +<134>1 1647479278.911594876 MX84 ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272 +<134>1 1647479325.891451682 MX84 ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53 +<134>1 1647479325.842384731 MX84 ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422 +<134>1 1647479325.842377481 MX84 ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53 +<134>1 1647479325.755292025 MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498 +<134>1 1637691298.984398273 MX84 security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block +<134>1 1637783435.239819833 MX84 security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow +<134>1 1637783891.345984502 MX84 ids-alerts signature=129:4:1 priority=3 timestamp=1637783891.512569 direction=ingress protocol=tcp/ip src=67.43.156.15:80 +<134>1 1637790201.246576346 MX84 ids-alerts signature=119:15:1 priority=2 timestamp=1637790201.238064 direction=egress protocol=tcp/ip src=192.168.111.254:56240 +<134>1 1647479503.348215340 MX84 urls src=10.0.1.29:60336 dst=89.160.20.156:80 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... +<134>1 1647479503.676404537 MX84 urls src=10.0.0.234:56424 dst=89.160.20.112:443 mac=64:1C:AE:68:2A:01 request: GET https://lh3.googleusercontent.com/p/AFVnnY=w2048-h1024 diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/events.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/events.log deleted file mode 100644 index 1250320cc3d..00000000000 --- a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/events.log +++ /dev/null @@ -1,389 +0,0 @@ -Mar 17, 2022 @ 12:10:20.180 <134>1 1647479420.148681168 ATT_Primary events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 - -Mar 17, 2022 @ 12:09:07.264 <134>1 1647479347.230914786 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{273} established with SPIs c0036852(inbound) 0a3ecb6b(outbound) and TS 12.108.190.178/32[udp/l2f] === 74.51.152.224/32[udp/62587] - -Mar 17, 2022 @ 12:06:12.827 <134>1 1647479172.855481476 Nashville_MX100 events dhcp lease of ip 10.0.0.165 for client mac 28:29:86:1A:39:2D from router 10.0.0.1 on subnet 255.255.252.0 with dns 8.8.8.8, 8.8.4.4 - -Mar 17, 2022 @ 12:04:15.000 <134>1 1647479055.795119971 KT_SF_wireless events type=dfs_event channel='136' radio='2' - -Mar 17, 2022 @ 11:58:29.000 <134>1 1647478709.602354098 6F_South_West events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1478558813' - -Mar 17, 2022 @ 11:58:29.000 <134>1 1647478709.602628785 6F_South_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='10.146.118.117' arp_resp='0.093432188' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:F6' dhcp_resp='1.373967135' aid='1478558813' - -Mar 17, 2022 @ 11:58:25.000 <134>1 1647478705.599864412 6F_South_West events type=wpa_deauth radio='1' vap='1' client_mac='88:66:5A:38:45:A1' aid='1486258487' - -Mar 17, 2022 @ 11:58:25.000 <134>1 1647478705.600436912 6F_South_West events type=disassociation radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='108' duration='316.540953031' auth_neg_dur='0.508926659' last_auth_ago='316.027363704' is_wpa='1' arp_resp='0.992351127' arp_src='10.136.85.4' aid='1486258487' - -Mar 17, 2022 @ 11:58:24.000 <134>1 1647478704.513805918 6F_North_West events type=disassociation radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' duration='302.399831759' auth_neg_dur='0.008600417' last_auth_ago='302.387475249' is_wpa='1' aid='910537108' - -Mar 17, 2022 @ 11:58:19.000 <134>1 1647478699.528411077 6F_North_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='140' duration='307.308589154' auth_neg_dur='0.002363386' last_auth_ago='307.298502383' is_wpa='1' full_conn='0.716026823' ip_resp='0.716026823' ip_src='10.146.118.117' http_resp='3.341322499' arp_resp='0.090404532' arp_src='10.146.118.117' dhcp_lease_completed='1.403572864' dhcp_ip='10.146.118.117' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:CB' dhcp_resp='1.403572864' aid='185620206' - -Mar 17, 2022 @ 11:58:18.000 <134>1 1647478698.643493693 7_1 events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='250063808' - -Mar 17, 2022 @ 11:58:18.000 <134>1 1647478698.643628849 7_1 events type=disassociation radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='64' duration='303.039037593' auth_neg_dur='0.009699896' last_auth_ago='303.022124364' is_wpa='1' aid='250063808' - -Mar 17, 2022 @ 11:58:09.000 <134>1 1647478689.676616906 4_3 events type=disassociation radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='36' reason='34' instigator='1' duration='372.564160' auth_neg_dur='0.025363040' last_auth_ago='372.535533440' is_wpa='1' full_conn='0.091299200' ip_resp='0.091299200' ip_src='10.24.82.76' http_resp='1.959041120' arp_resp='0.161413120' arp_src='10.24.82.76' dns_server='10.128.128.128' dns_req_rtt='0.018259360' dns_resp='0.332719200' dhcp_lease_completed='0.166465760' dhcp_ip='10.24.82.76' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:26' dhcp_resp='0.166465760' aid='579764029' - -Mar 17, 2022 @ 11:57:58.000 <134>1 1647478678.648665694 KT_SF_wireless events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1931139111' - -Mar 17, 2022 @ 11:57:58.000 <134>1 1647478678.648887621 KT_SF_wireless events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='149' duration='304.579957040' auth_neg_dur='0.023276146' last_auth_ago='304.552626988' is_wpa='1' full_conn='-7928699.060057590' http_resp='3.332029061' arp_resp='0.184481250' arp_src='10.146.118.117' dhcp_lease_completed='1.470028697' dhcp_ip='10.146.118.117' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A7:41' dhcp_resp='1.470028697' aid='1931139111' - -Mar 17, 2022 @ 11:56:44.000 <134>1 1647478604.192048750 main_conf3 events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1073833963' - -Mar 17, 2022 @ 11:56:44.000 <134>1 1647478604.192922417 main_conf3 events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' reason='34' instigator='1' duration='452.993592104' auth_neg_dur='0.007313125' last_auth_ago='452.981426188' is_wpa='1' full_conn='-589126.080767116' http_resp='2.127261748' arp_resp='0.087406688' arp_src='10.84.159.54' dhcp_lease_completed='0.122614646' dhcp_ip='10.84.159.54' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:31:FB:65' dhcp_resp='0.122614646' aid='1073833963' - -Mar 17, 2022 @ 11:56:43.000 <134>1 1647478603.270665121 4_Front_Desk events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='122025436' - -Mar 17, 2022 @ 11:56:43.000 <134>1 1647478603.271350081 4_Front_Desk events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' reason='34' instigator='1' duration='449.587449308' auth_neg_dur='0.008350703' last_auth_ago='449.573738247' is_wpa='1' full_conn='-7885776.061734811' http_resp='0.041826277' arp_resp='0.079451614' arp_src='10.84.159.54' dhcp_lease_completed='0.133069272' dhcp_ip='10.84.159.54' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7C:74' dhcp_resp='0.133069272' aid='122025436' - -Mar 17, 2022 @ 11:56:40.000 <134>1 1647478600.668548801 4_Front_Desk events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='1867149989' - -Mar 17, 2022 @ 11:56:40.000 <134>1 1647478600.669228161 4_Front_Desk events type=disassociation radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='48' reason='34' instigator='1' duration='21047.673560946' auth_neg_dur='0.003433760' last_auth_ago='21047.665532466' is_wpa='1' full_conn='0.327943680' ip_resp='0.327943680' ip_src='10.24.82.76' http_resp='1039.548976352' arp_resp='145.951601159' arp_src='10.24.82.76' dns_server='10.128.128.128' dns_req_rtt='0.002354080' dns_resp='1038.394524672' dhcp_lease_completed='1038.511373472' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7C:74' dhcp_resp='1038.511373472' aid='1867149989' - -Mar 17, 2022 @ 11:56:28.000 <134>1 1647478588.237083320 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='816393088' - -Mar 17, 2022 @ 11:56:28.000 <134>1 1647478588.237462538 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' duration='362.467386945' auth_neg_dur='0.018815104' last_auth_ago='362.445392361' is_wpa='1' aid='816393088' - -Mar 17, 2022 @ 11:54:09.000 <134>1 1647478449.892356513 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='2123045445' - -Mar 17, 2022 @ 11:54:09.000 <134>1 1647478449.892960221 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='1' duration='304.806517223' auth_neg_dur='0.008075156' last_auth_ago='304.792009671' is_wpa='1' full_conn='-7928470.079940594' http_resp='1.875546979' arp_resp='0.063048802' arp_src='10.84.159.54' dns_server='10.128.128.128' dns_req_rtt='0.002257500' dns_resp='0.163227708' dhcp_lease_completed='0.091880781' dhcp_ip='10.84.159.54' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A7:41' dhcp_resp='0.091880781' aid='2123045445' - -Mar 17, 2022 @ 11:53:59.000 <134>1 1647478439.134217386 4_3 events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='6' reason='34' instigator='1' duration='300.872600160' auth_neg_dur='0.008558400' last_auth_ago='300.860743040' is_wpa='1' full_conn='-7928464.725906786' http_resp='1.399800160' arp_resp='0.099196960' arp_src='10.84.159.54' dns_server='10.128.128.128' dns_req_rtt='0.024177120' dns_resp='1.343550240' dhcp_lease_completed='0.099797120' dhcp_ip='10.84.159.54' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:26' dhcp_resp='0.099797120' aid='1587913555' - -Mar 17, 2022 @ 11:53:50.000 <134>1 1647478430.902320055 Luella_Bates_Ceiling events type=disassociation radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='64' reason='34' instigator='1' duration='307.729946894' auth_neg_dur='0.001928750' last_auth_ago='307.715445311' is_wpa='1' aid='1059121275' - -Mar 17, 2022 @ 11:53:31.000 <134>1 1647478411.783077546 4_3 events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='36' reason='34' instigator='1' duration='42.950104800' auth_neg_dur='0.004636' last_auth_ago='42.941972640' is_wpa='1' full_conn='2.707566240' ip_resp='2.707566240' ip_src='10.146.118.117' http_resp='3.446355680' arp_resp='0.180424320' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.018426400' dns_resp='2.864122720' dhcp_lease_completed='1.418512' dhcp_ip='10.146.118.117' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:26' dhcp_resp='1.418512' aid='1176770458' - -Mar 17, 2022 @ 11:53:29.000 <134>1 1647478409.720733066 4_3 events type=disassociation radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='36' reason='34' instigator='1' duration='92.524493920' auth_neg_dur='0.003232960' last_auth_ago='92.515783360' is_wpa='1' full_conn='6.004868960' ip_resp='6.004868960' ip_src='10.136.85.4' http_resp='6.055542720' arp_resp='0.058856480' arp_src='10.136.85.4' dns_server='10.128.128.128' dns_req_rtt='0.000932160' dns_resp='6.001859360' dhcp_lease_completed='1.911300320' dhcp_ip='10.136.85.4' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:26' dhcp_resp='1.911300320' aid='1059246983' - -Mar 17, 2022 @ 11:53:22.000 <134>1 1647478402.117726086 6F_North_West events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' rssi='20' aid='910537108' - -Mar 17, 2022 @ 11:53:22.000 <134>1 1647478402.118169836 6F_North_West events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='910537108' - -Mar 17, 2022 @ 11:53:22.000 <134>1 1647478402.126325721 6F_North_West events type=wpa_auth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='910537108' - -Mar 17, 2022 @ 11:53:21.000 <134>1 1647478401.385272388 6F_North_West events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' rssi='18' aid='1034533358' - -Mar 17, 2022 @ 11:53:21.000 <134>1 1647478401.421090826 6F_North_West events type=wpa_deauth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='1034533358' - -Mar 17, 2022 @ 11:53:21.000 <134>1 1647478401.421217753 6F_North_West events type=disassociation radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='140' duration='0.039892500' auth_neg_failed='1' is_wpa='1' aid='1034533358' - -Mar 17, 2022 @ 11:53:20.000 <134>1 1647478400.067636091 6F_South_West events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='567650633' - -Mar 17, 2022 @ 11:53:20.000 <134>1 1647478400.067817966 6F_South_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' duration='20.635066714' auth_neg_dur='0.004943620' last_auth_ago='20.625529142' is_wpa='1' full_conn='0.248703710' ip_resp='0.248703710' ip_src='10.146.118.117' arp_resp='0.091848688' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.018233170' dns_resp='0.288612912' dhcp_lease_completed='1.376937800' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:F6' dhcp_resp='1.376937800' aid='567650633' - -Mar 17, 2022 @ 11:53:20.000 <134>1 1647478400.442523226 6F_South_West events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' rssi='22' aid='1478558813' - -Mar 17, 2022 @ 11:53:20.000 <134>1 1647478400.448088851 6F_South_West events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1478558813' - -Mar 17, 2022 @ 11:53:15.000 <134>1 1647478395.611807246 7_1 events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='64' rssi='13' aid='250063808' - -Mar 17, 2022 @ 11:53:15.000 <134>1 1647478395.621524954 7_1 events type=wpa_auth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='250063808' - -Mar 17, 2022 @ 11:53:12.000 <134>1 1647478392.227530360 6F_North_West events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='140' rssi='22' aid='185620206' - -Mar 17, 2022 @ 11:53:12.000 <134>1 1647478392.229912027 6F_North_West events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='185620206' - -Mar 17, 2022 @ 11:53:09.000 <134>1 1647478389.064141439 6F_South_West events type=association radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='108' rssi='16' aid='1486258487' - -Mar 17, 2022 @ 11:53:09.000 <134>1 1647478389.573086943 6F_South_West events type=wpa_auth radio='1' vap='1' client_mac='88:66:5A:38:45:A1' aid='1486258487' - -Mar 17, 2022 @ 11:52:59.000 <134>1 1647478379.076634990 6F_South_West events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='501214906' - -Mar 17, 2022 @ 11:52:59.000 <134>1 1647478379.077106004 6F_South_West events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' duration='23.523254708' auth_neg_dur='0.033581094' last_auth_ago='23.486121687' is_wpa='1' full_conn='1.497632758' ip_resp='1.577774112' ip_src='10.146.118.117' http_resp='1.497632758' arp_resp='0.081456302' arp_src='10.146.118.117' dns_server='10.128.128.128' dns_req_rtt='0.017076406' dns_resp='1.407253539' dhcp_lease_completed='0.081560156' dhcp_ip='10.146.118.117' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:F6' dhcp_resp='0.081560156' aid='501214906' - -Mar 17, 2022 @ 11:52:59.000 <134>1 1647478379.437287646 6F_South_West events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' rssi='26' aid='567650633' - -Mar 17, 2022 @ 11:52:59.000 <134>1 1647478379.442250320 6F_South_West events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='567650633' - -Mar 17, 2022 @ 11:52:54.000 <134>1 1647478374.072976727 KT_SF_wireless events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='149' rssi='28' aid='1931139111' - -Mar 17, 2022 @ 11:52:54.000 <134>1 1647478374.073295842 KT_SF_wireless events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1931139111' - -Mar 17, 2022 @ 11:52:54.000 <134>1 1647478374.096252300 KT_SF_wireless events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1931139111' - -Mar 17, 2022 @ 11:52:48.000 <134>1 1647478368.836446826 4_3 events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='36' rssi='21' aid='1176770458' - -Mar 17, 2022 @ 11:52:48.000 <134>1 1647478368.841103786 4_3 events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='1176770458' - -Mar 17, 2022 @ 11:52:35.000 <134>1 1647478355.557388757 6F_South_West events type=association radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='108' rssi='42' aid='501214906' - -Mar 17, 2022 @ 11:52:35.000 <134>1 1647478355.584394226 6F_South_West events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='501214906' - -Mar 17, 2022 @ 11:52:35.000 <134>1 1647478355.590970215 6F_South_West events type=wpa_auth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='501214906' - -Mar 17, 2022 @ 11:52:10.000 <134>1 1647478330.822338620 4_Front_Desk events type=wpa_deauth radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' aid='653428312' - -Mar 17, 2022 @ 11:52:10.000 <134>1 1647478330.822747580 4_Front_Desk events type=disassociation radio='1' vap='1' client_mac='52:6D:6B:6C:D4:C8' channel='48' reason='34' instigator='1' duration='22208.939088192' auth_neg_dur='0.001899520' last_auth_ago='22208.929382432' is_wpa='1' full_conn='3.015497921' ip_resp='3.016575681' ip_src='10.146.118.117' http_resp='3.015497921' arp_resp='2.778333441' dns_server='10.128.128.128' dns_req_rtt='0.017305440' dns_resp='2.924799041' dhcp_lease_completed='0.135817120' dhcp_ip='10.146.118.117' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7C:74' dhcp_resp='0.135817120' aid='653428312' - -Mar 17, 2022 @ 11:52:00.000 <134>1 1647478320.793079096 4_Front_Desk events type=disassociation radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='48' reason='34' instigator='1' duration='183.722684534' auth_neg_dur='0.008566115' last_auth_ago='183.710210614' is_wpa='1' full_conn='37.640332343' ip_resp='37.640332343' ip_src='10.136.85.4' arp_resp='4.930919068' arp_src='10.136.85.4' dns_server='10.128.128.128' dns_req_rtt='0.017465343' dns_resp='37.663653636' dhcp_lease_completed='37.780653347' dhcp_ip='10.136.85.4' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7C:74' dhcp_resp='37.780653347' aid='1114140300' - -Mar 17, 2022 @ 11:51:57.000 <134>1 1647478317.115696586 4_3 events type=association radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' channel='36' rssi='11' aid='579764029' - -Mar 17, 2022 @ 11:51:57.000 <134>1 1647478317.141081706 4_3 events type=wpa_auth radio='1' vap='1' client_mac='F4:D4:88:70:8A:F1' aid='579764029' - -Mar 17, 2022 @ 11:51:57.000 <134>1 1647478317.201692746 4_3 events type=association radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='36' rssi='12' aid='1059246983' - -Mar 17, 2022 @ 11:51:57.000 <134>1 1647478317.204943946 4_3 events type=wpa_auth radio='1' vap='1' client_mac='88:66:5A:38:45:A1' aid='1059246983' - -Mar 17, 2022 @ 11:51:33.000 <134>1 1647478293.041614856 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1106368095' - -Mar 17, 2022 @ 11:51:32.000 <134>1 1647478292.995035976 4_all_hands events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' rssi='35' aid='1106368095' - -Mar 17, 2022 @ 11:50:43.000 <134>1 1647478243.054203798 4_all_hands events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' duration='1089.340407104' auth_neg_dur='0.009600960' last_auth_ago='1089.328127264' is_wpa='1' arp_resp='152.983108857' arp_src='10.157.105.180' aid='2090298755' - -Mar 17, 2022 @ 11:50:25.000 <134>1 1647478225.773247989 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' rssi='37' aid='816393088' - -Mar 17, 2022 @ 11:50:25.000 <134>1 1647478225.773930437 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='816393088' - -Mar 17, 2022 @ 11:50:25.000 <134>1 1647478225.792064239 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='816393088' - -Mar 17, 2022 @ 11:49:13.000 <134>1 1647478153.689244167 4_Front_Desk events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' rssi='32' aid='122025436' - -Mar 17, 2022 @ 11:49:13.000 <134>1 1647478153.697618697 4_Front_Desk events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='122025436' - -Mar 17, 2022 @ 11:49:11.000 <134>1 1647478151.218338157 4_Front_Desk events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' reason='1' instigator='2' duration='9286.992141445' auth_neg_dur='0.007549280' last_auth_ago='9286.981360165' is_wpa='1' arp_resp='0.040718720' arp_src='10.84.159.54' dhcp_lease_completed='0.042865120' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7C:74' dhcp_resp='0.042865120' aid='1655671710' - -Mar 17, 2022 @ 11:49:11.000 <134>1 1647478151.204143 main_conf3 events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' rssi='24' aid='1073833963' - -Mar 17, 2022 @ 11:49:11.000 <134>1 1647478151.211501 main_conf3 events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1073833963' - -Mar 17, 2022 @ 11:49:05.704 <134>1 1647478145.672779576 ATT_Primary events dhcp lease of ip 10.0.1.251 from mx mac 68:3A:1E:42:60:59 for client mac 00:0E:8E:6D:91:77 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 - -Mar 17, 2022 @ 11:49:05.000 <134>1 1647478145.092858273 KT_SF_wireless events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='1' rssi='48' aid='2123045445' - -Mar 17, 2022 @ 11:49:05.000 <134>1 1647478145.100953221 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='2123045445' - -Mar 17, 2022 @ 11:48:58.000 <134>1 1647478138.264891946 4_3 events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='6' rssi='29' aid='1587913555' - -Mar 17, 2022 @ 11:48:58.000 <134>1 1647478138.273470506 4_3 events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1587913555' - -Mar 17, 2022 @ 11:48:57.000 <134>1 1647478137.074281562 4_Front_Desk events type=association radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='48' rssi='46' aid='1114140300' - -Mar 17, 2022 @ 11:48:57.000 <134>1 1647478137.082870386 4_Front_Desk events type=wpa_auth radio='1' vap='1' client_mac='88:66:5A:38:45:A1' aid='1114140300' - -Mar 17, 2022 @ 11:48:54.000 <134>1 1647478134.099577037 4_all_hands events type=disassociation radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='149' reason='34' instigator='1' duration='4860.465314769' auth_neg_dur='0.005687040' last_auth_ago='4860.453872529' is_wpa='1' full_conn='0.235672800' ip_resp='0.235672800' ip_src='10.136.85.4' http_resp='1.757914721' arp_resp='0.022972480' arp_src='10.136.85.4' dns_server='10.128.128.128' dns_req_rtt='0.000779040' dns_resp='0.180302240' dhcp_lease_completed='0.030133920' dhcp_ip='10.136.85.4' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='0.030133920' aid='1249883413' - -Mar 17, 2022 @ 11:48:43.000 <134>1 1647478123.184931474 Luella_Bates_Ceiling events type=association radio='1' vap='1' client_mac='88:66:5A:38:45:A1' channel='64' rssi='36' aid='1059121275' - -Mar 17, 2022 @ 11:48:43.000 <134>1 1647478123.186900870 Luella_Bates_Ceiling events type=wpa_auth radio='1' vap='1' client_mac='88:66:5A:38:45:A1' aid='1059121275' - -Mar 17, 2022 @ 11:48:13.056 <134>1 1647478093.022430458 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 12.108.190.178/32[udp/l2f] === 108.18.33.67/32[udp/l2f] - -Mar 17, 2022 @ 11:48:12.703 <134>1 1647478092.669153546 ATT_Primary events client_vpn_connect user id 'funmi.awopetu@keeptruckin.com' local ip 172.16.0.145 connected from 108.18.33.67 - -Mar 17, 2022 @ 11:48:12.063 <134>1 1647478092.029594666 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[241] established between 12.108.190.178[12.108.190.178]...108.18.33.67[192.168.1.201] - -Mar 17, 2022 @ 11:46:42.115 <134>1 1647478002.081497627 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{271} established with SPIs cd819030(inbound) 0faf07e5(outbound) and TS 12.108.190.178/32[udp/l2f] === 98.45.194.225/32[udp/55833] - -Mar 17, 2022 @ 11:40:05.917 <134>1 1647477605.882599199 ATT_Primary events client_vpn_disconnect user id 'khawar.baig@keeptruckin.com' local ip 172.16.0.172 connected from 103.255.5.106 - -Mar 17, 2022 @ 11:37:31.158 <134>1 1647477451.122662756 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[235] established between 12.108.190.178[12.108.190.178]...137.59.228.70[192.168.1.6] - -Mar 17, 2022 @ 11:37:31.023 <134>1 1647477450.988899148 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{265} established with SPIs cae9b02c(inbound) 0d344768(outbound) and TS 12.108.190.178/32[udp/l2f] === 98.45.194.225/32[udp/55833] - -Mar 17, 2022 @ 11:37:31.000 <134>1 1647477451.602070077 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='806124258' - -Mar 17, 2022 @ 11:37:31.000 <134>1 1647477451.602545337 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' duration='310.411436236' auth_neg_dur='0.015711042' last_auth_ago='310.391713267' is_wpa='1' aid='806124258' - -Mar 17, 2022 @ 11:37:24.000 <134>1 1647477444.338803828 4_CS events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' reason='34' instigator='1' duration='325.213055641' auth_neg_dur='0.007442080' last_auth_ago='325.201166041' is_wpa='1' aid='998108486' - -Mar 17, 2022 @ 11:37:05.964 <134>1 1647477425.929862558 ATT_Primary events Site-to-Site VPN: deleting IKE_SA l2tp-over-ipsec-1[234] between 12.108.190.178[12.108.190.178]...74.51.152.224[192.168.1.135] - -Mar 17, 2022 @ 11:37:00.096 <134>1 1647477420.061216910 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[240] established between 12.108.190.178[12.108.190.178]...74.51.152.224[192.168.1.135] - -Mar 17, 2022 @ 11:37:00.000 <134>1 1647477420.090705863 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1270961721' - -Mar 17, 2022 @ 11:37:00.000 <134>1 1647477420.091111436 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' duration='321.019712167' auth_neg_dur='0.013453281' last_auth_ago='321.003955656' is_wpa='1' aid='1270961721' - -Mar 17, 2022 @ 11:32:46.000 <134>1 1647477166.299180205 4_CS events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' reason='34' instigator='1' duration='341.530472928' auth_neg_dur='0.049730401' last_auth_ago='341.475916127' is_wpa='1' full_conn='-7927151.283802717' http_resp='0.837691041' arp_resp='0.717531521' arp_src='10.84.159.54' dns_server='10.128.128.128' dns_req_rtt='0.026888640' dns_resp='0.752516801' aid='1420025720' - -Mar 17, 2022 @ 11:32:33.000 <134>1 1647477153.716466454 4_all_hands events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' rssi='25' aid='2090298755' - -Mar 17, 2022 @ 11:32:33.000 <134>1 1647477153.726085494 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='2090298755' - -Mar 17, 2022 @ 11:32:21.000 <134>1 1647477141.195118164 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' rssi='35' aid='806124258' - -Mar 17, 2022 @ 11:32:21.000 <134>1 1647477141.195444154 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='806124258' - -Mar 17, 2022 @ 11:32:21.000 <134>1 1647477141.210829674 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='806124258' - -Mar 17, 2022 @ 11:32:06.000 <134>1 1647477126.400753378 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1680306279' - -Mar 17, 2022 @ 11:32:06.000 <134>1 1647477126.401283482 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' duration='310.867582121' auth_neg_dur='0.518303073' last_auth_ago='310.343277434' is_wpa='1' arp_resp='7.673308383' arp_src='10.84.159.54' dhcp_lease_completed='7.679418643' dhcp_ip='10.84.159.54' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A8:9F' dhcp_resp='7.679418643' aid='1680306279' - -Mar 17, 2022 @ 11:31:59.000 <134>1 1647477119.130190587 4_CS events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' rssi='20' aid='998108486' - -Mar 17, 2022 @ 11:31:59.000 <134>1 1647477119.137650587 4_CS events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='998108486' - -Mar 17, 2022 @ 11:31:58.000 <134>1 1647477118.815838121 4_all_hands events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' duration='644.912079223' auth_neg_dur='0.009778080' last_auth_ago='644.897841783' is_wpa='1' arp_resp='152.741953439' arp_src='10.157.105.180' aid='535200139' - -Mar 17, 2022 @ 11:31:55.000 <134>1 1647477115.899211484 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1092867449' - -Mar 17, 2022 @ 11:31:55.000 <134>1 1647477115.899335963 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='1' duration='328.074483510' auth_neg_dur='0.008111927' last_auth_ago='328.062226426' is_wpa='1' aid='1092867449' - -Mar 17, 2022 @ 11:31:39.000 <134>1 1647477099.073698645 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' rssi='38' aid='1270961721' - -Mar 17, 2022 @ 11:31:39.000 <134>1 1647477099.074258176 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1270961721' - -Mar 17, 2022 @ 11:31:39.000 <134>1 1647477099.087150155 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1270961721' - -Mar 17, 2022 @ 11:31:09.748 <134>1 1647477069.787080479 Nashville_MX100 events dhcp lease of ip 10.0.0.108 for client mac AC:17:C8:62:82:11 from router 10.0.0.1 on subnet 255.255.252.0 with dns 8.8.8.8, 8.8.4.4 - -Mar 17, 2022 @ 11:28:09.000 <134>1 1647476889.325701075 4_all_hands events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='6' reason='8' instigator='2' duration='17.391796166' auth_neg_dur='0.006058080' last_auth_ago='17.382771526' is_wpa='1' full_conn='-7927198.442460789' http_resp='16.577953766' arp_resp='13.411745925' arp_src='10.84.159.54' dns_server='10.128.128.128' dns_req_rtt='0.023505440' dns_resp='16.559012006' dhcp_lease_completed='14.706540165' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='14.706540165' aid='1171281888' - -Mar 17, 2022 @ 11:28:00.905 <134>1 1647476880.897705544 F6_R1_S2 events Port E0:CB:BC:01:E4:88/40 changed STP role from designated to disabled - -Mar 17, 2022 @ 11:28:00.897 <134>1 1647476880.861332690 F6_R1_S1 events port 40 status changed from 1Gfdx to down - -Mar 17, 2022 @ 11:27:51.000 <134>1 1647476871.936850669 4_all_hands events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='6' rssi='26' aid='1171281888' - -Mar 17, 2022 @ 11:27:51.000 <134>1 1647476871.942961389 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1171281888' - -Mar 17, 2022 @ 11:27:49.302 <134>1 1647476869.265391407 ATT_Primary events dhcp lease of ip 10.0.3.73 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:00:DD:98 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 - -Mar 17, 2022 @ 11:27:04.000 <134>1 1647476824.773514637 4_CS events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' rssi='24' aid='1420025720' - -Mar 17, 2022 @ 11:27:04.000 <134>1 1647476824.823269198 4_CS events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1420025720' - -Mar 17, 2022 @ 11:27:04.000 <134>1 1647476824.449909691 4_all_hands events type=disassociation radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='6' duration='3280.479246042' auth_neg_dur='0.005284640' last_auth_ago='3280.470603322' is_wpa='1' arp_resp='0.088161440' arp_src='10.84.159.54' dns_server='10.128.128.128' dns_req_rtt='0.012561760' dns_resp='1.283098400' dhcp_lease_completed='0.096804320' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='0.096804320' aid='789757673' - -Mar 17, 2022 @ 11:26:56.000 <134>1 1647476816.058015840 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1680306279' - -Mar 17, 2022 @ 11:26:55.000 <134>1 1647476815.539692663 KT_SF_wireless events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='11' rssi='34' aid='1680306279' - -Mar 17, 2022 @ 11:26:27.000 <134>1 1647476787.828998599 KT_SF_wireless events type=association radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' channel='1' rssi='41' aid='1092867449' - -Mar 17, 2022 @ 11:26:27.000 <134>1 1647476787.829403911 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1092867449' - -Mar 17, 2022 @ 11:26:27.000 <134>1 1647476787.837110057 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='8E:D1:A3:F2:15:12' aid='1092867449' - -Mar 17, 2022 @ 11:26:06.000 <134>1 1647476766.298516856 4_CS events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' reason='34' instigator='1' duration='311.255787796' auth_neg_dur='0.033532640' last_auth_ago='311.219160596' is_wpa='1' aid='355316894' - -Mar 17, 2022 @ 11:25:54.000 <134>1 1647476754.175990082 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='488315325' - -Mar 17, 2022 @ 11:25:54.000 <134>1 1647476754.176275916 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' duration='312.001999464' auth_neg_dur='0.010737812' last_auth_ago='311.986619100' is_wpa='1' aid='488315325' - -Mar 17, 2022 @ 11:25:38.000 <134>1 1647476738.663802268 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' duration='310.948342755' auth_neg_dur='0.014498698' last_auth_ago='310.931105567' is_wpa='1' aid='442252173' - -Mar 17, 2022 @ 11:25:29.000 <134>1 1647476729.948793847 6F_South events type=dfs_event channel='112' radio='2' - -Mar 17, 2022 @ 11:24:53.886 <134>1 1647476693.849901050 ATT_Primary events Site-to-Site VPN: deleting IKE_SA l2tp-over-ipsec-1[232] between 12.108.190.178[12.108.190.178]...98.45.194.225[192.168.55.85] - -Mar 17, 2022 @ 11:24:49.013 <134>1 1647476688.977196194 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[238] established between 12.108.190.178[12.108.190.178]...98.45.194.225[192.168.55.85] - -Mar 17, 2022 @ 11:24:37.754 <134>1 1647476677.718323694 ATT_Primary events dhcp lease of ip 10.0.3.254 from mx mac 68:3A:1E:42:60:59 for client mac AC:17:C8:62:56:DC from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 - -Mar 17, 2022 @ 11:21:50.417 <134>1 1647476510.380550361 ATT_Primary events client_vpn_connect user id 'khawar.baig@keeptruckin.com' local ip 172.16.0.172 connected from 103.255.5.106 - -Mar 17, 2022 @ 11:21:49.945 <134>1 1647476509.908796534 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{269} established with SPIs caab9da6(inbound) 0b3ed961(outbound) and TS 12.108.190.178/32[udp/l2f] === 103.255.5.106/32[udp/63366] - -Mar 17, 2022 @ 11:21:49.002 <134>1 1647476508.966275214 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[237] established between 12.108.190.178[12.108.190.178]...103.255.5.106[192.168.209.93] - -Mar 17, 2022 @ 11:21:37.883 <134>1 1647476497.846831957 ATT_Primary events Site-to-Site VPN: deleting IKE_SA l2tp-over-ipsec-1[235] between 12.108.190.178[12.108.190.178]...137.59.228.70[192.168.1.6] - -Mar 17, 2022 @ 11:21:37.867 <134>1 1647476497.831389163 ATT_Primary events Site-to-Site VPN: closing CHILD_SA net-1{266} with SPIs c53f27d7(inbound) (28253805 bytes) 0c14954a(outbound) (642061260 bytes) and TS 12.108.190.178/32[udp/l2f] === 137.59.228.70/32[udp/57085] - -Mar 17, 2022 @ 11:21:37.715 <134>1 1647476497.678584004 ATT_Primary events client_vpn_disconnect user id 'khawar.baig@keeptruckin.com' local ip 172.16.0.172 connected from 137.59.228.70 - -Mar 17, 2022 @ 11:21:13.000 <134>1 1647476473.908208658 4_all_hands events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' rssi='27' aid='535200139' - -Mar 17, 2022 @ 11:21:13.000 <134>1 1647476473.918027538 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='535200139' - -Mar 17, 2022 @ 11:21:06.938 <134>1 1647476466.901954544 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{268} established with SPIs c8ab43ea(inbound) 0fb3418d(outbound) and TS 12.108.190.178/32[udp/l2f] === 74.51.152.224/32[udp/62587] - -Mar 17, 2022 @ 11:20:55.000 <134>1 1647476455.045816260 4_CS events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' rssi='23' aid='355316894' - -Mar 17, 2022 @ 11:20:55.000 <134>1 1647476455.079370820 4_CS events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='355316894' - -Mar 17, 2022 @ 11:20:54.000 <134>1 1647476454.711760818 4_all_hands events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' duration='452.720491680' auth_neg_dur='0.007155040' last_auth_ago='452.708782080' is_wpa='1' arp_resp='0.089037600' arp_src='10.157.105.180' dhcp_lease_completed='0.097670400' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='0.097670400' aid='255927734' - -Mar 17, 2022 @ 11:20:42.000 <134>1 1647476442.178918847 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' rssi='33' aid='488315325' - -Mar 17, 2022 @ 11:20:42.000 <134>1 1647476442.179063222 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='488315325' - -Mar 17, 2022 @ 11:20:42.000 <134>1 1647476442.189655045 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='488315325' - -Mar 17, 2022 @ 11:20:27.000 <134>1 1647476427.718192117 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' rssi='34' aid='442252173' - -Mar 17, 2022 @ 11:20:27.000 <134>1 1647476427.722733211 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='442252173' - -Mar 17, 2022 @ 11:20:27.000 <134>1 1647476427.732691596 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='442252173' - -Mar 17, 2022 @ 11:16:04.011 <134>1 1647476163.974990346 ATT_Primary events client_vpn_disconnect user id 'sachin.thomas@keeptruckin.com' local ip 172.16.0.195 connected from 107.211.13.210 - -Mar 17, 2022 @ 11:15:08.000 <134>1 1647476108.806538974 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' duration='303.055563738' auth_neg_dur='0.015276927' last_auth_ago='303.035353165' is_wpa='1' aid='301389198' - -Mar 17, 2022 @ 11:13:22.000 <134>1 1647476002.002983538 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='255927734' - -Mar 17, 2022 @ 11:13:21.000 <134>1 1647476001.995806898 4_all_hands events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' rssi='31' aid='255927734' - -Mar 17, 2022 @ 11:12:05.696 <134>1 1647475925.660484636 ATT_Primary events dhcp lease of ip 10.0.3.107 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:40:D8 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 - -Mar 17, 2022 @ 11:10:21.000 <134>1 1647475821.160291151 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1966673591' - -Mar 17, 2022 @ 11:10:21.000 <134>1 1647475821.160569796 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' duration='27.766403166' auth_neg_dur='0.041169271' last_auth_ago='27.723097958' is_wpa='1' aid='1966673591' - -Mar 17, 2022 @ 11:10:20.000 <134>1 1647475820.832277778 4_all_hands events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' duration='238.762187040' auth_neg_dur='0.013115840' last_auth_ago='238.745483200' is_wpa='1' arp_resp='0.896543520' arp_src='10.157.105.180' dhcp_lease_completed='0.902431200' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='0.902431200' aid='250043676' - -Mar 17, 2022 @ 11:10:05.000 <134>1 1647475805.755902371 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' rssi='34' aid='301389198' - -Mar 17, 2022 @ 11:10:05.000 <134>1 1647475805.757513621 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='301389198' - -Mar 17, 2022 @ 11:10:05.000 <134>1 1647475805.771179767 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='301389198' - -Mar 17, 2022 @ 11:09:53.000 <134>1 1647475793.396298349 KT_SF_wireless events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' rssi='36' aid='1966673591' - -Mar 17, 2022 @ 11:09:53.000 <134>1 1647475793.398467932 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1966673591' - -Mar 17, 2022 @ 11:09:53.000 <134>1 1647475793.437468869 KT_SF_wireless events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1966673591' - -Mar 17, 2022 @ 11:08:17.000 <134>1 1647475697.611223663 7_1 events type=wpa_deauth radio='1' vap='1' client_mac='A0:78:17:AC:1E:89' aid='463161084' - -Mar 17, 2022 @ 11:08:17.000 <134>1 1647475697.611413767 7_1 events type=disassociation radio='1' vap='1' client_mac='A0:78:17:AC:1E:89' channel='64' duration='27.928247646' auth_neg_dur='0.003260052' last_auth_ago='27.917974' is_wpa='1' arp_resp='0.137193750' arp_src='10.31.165.9' dhcp_lease_completed='5.041739894' dhcp_ip='10.31.165.9' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:54:46:38' dhcp_resp='5.041739894' aid='463161084' - -Mar 17, 2022 @ 11:07:50.156 <134>1 1647475670.128529175 F6_R1_S2 events Port E0:CB:BC:01:E4:88/40 changed STP role from disabled to designated - -Mar 17, 2022 @ 11:07:50.138 <134>1 1647475670.113472052 F6_R1_S1 events port 40 status changed from down to 1Gfdx - -Mar 17, 2022 @ 11:07:49.000 <134>1 1647475669.690183830 7_1 events type=association radio='1' vap='1' client_mac='A0:78:17:AC:1E:89' channel='64' rssi='14' aid='463161084' - -Mar 17, 2022 @ 11:07:49.000 <134>1 1647475669.693449559 7_1 events type=wpa_auth radio='1' vap='1' client_mac='A0:78:17:AC:1E:89' aid='463161084' - -Mar 17, 2022 @ 11:06:22.000 <134>1 1647475582.073662898 4_all_hands events type=association radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' rssi='27' aid='250043676' - -Mar 17, 2022 @ 11:06:22.000 <134>1 1647475582.086798898 4_all_hands events type=wpa_auth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='250043676' - -Mar 17, 2022 @ 11:04:21.425 <134>1 1647475461.389436302 ATT_Primary events dhcp lease of ip 10.0.3.229 from mx mac 68:3A:1E:42:60:59 for client mac B8:27:EB:F8:2C:34 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 - -Mar 17, 2022 @ 11:04:17.731 <134>1 1647475457.695340816 ATT_Primary events dhcp lease of ip 10.0.2.3 from mx mac 68:3A:1E:42:60:59 for client mac B8:27:EB:C2:3B:D2 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 - -Mar 17, 2022 @ 11:04:11.226 <134>1 1647475451.190810065 ATT_Primary events dhcp lease of ip 10.0.1.255 from mx mac 68:3A:1E:42:60:59 for client mac B8:27:EB:EA:DF:4B from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 - -Mar 17, 2022 @ 11:04:11.059 <134>1 1647475451.023393632 ATT_Primary events dhcp lease of ip 10.0.3.228 from mx mac 68:3A:1E:42:60:59 for client mac B8:27:EB:31:2A:F0 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 - -Mar 17, 2022 @ 11:00:40.723 <134>1 1647475240.685317994 ATT_Primary events client_vpn_connect user id 'khawar.baig@keeptruckin.com' local ip 172.16.0.172 connected from 137.59.228.70 - -Mar 17, 2022 @ 11:00:39.825 <134>1 1647475239.787091048 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{266} established with SPIs c53f27d7(inbound) 0c14954a(outbound) and TS 12.108.190.178/32[udp/l2f] === 137.59.228.70/32[udp/57085] - -Mar 17, 2022 @ 11:00:39.738 <134>1 1647475239.700724258 ATT_Primary events Site-to-Site VPN: IKE_SA l2tp-over-ipsec-1[235] established between 12.108.190.178[12.108.190.178]...137.59.228.70[192.168.1.6] - -Mar 17, 2022 @ 10:58:40.801 <134>1 1647475120.763964611 ATT_Primary events Site-to-Site VPN: CHILD_SA net-1{265} established with SPIs cae9b02c(inbound) 0d344768(outbound) and TS 12.108.190.178/32[udp/l2f] === 98.45.194.225/32[udp/55833] - -Mar 17, 2022 @ 10:56:26.000 <134>1 1647474986.754846733 4_all_hands events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='921530910' - -Mar 17, 2022 @ 10:56:26.000 <134>1 1647474986.755114599 4_all_hands events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' reason='8' instigator='2' duration='306.715601681' auth_neg_dur='0.007460480' last_auth_ago='306.704412881' is_wpa='1' full_conn='-7925006.548833932' http_resp='0.196514400' arp_resp='0.021618720' arp_src='10.157.105.180' dns_server='10.128.128.128' dns_req_rtt='0.020013280' dns_resp='0.895795520' dhcp_lease_completed='72.979003707' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:5A' dhcp_resp='72.979003707' aid='921530910' - -Mar 17, 2022 @ 10:56:21.000 <134>1 1647474981.690681036 KT_SF_wireless events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='840254242' - -Mar 17, 2022 @ 10:56:21.000 <134>1 1647474981.690964578 KT_SF_wireless events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='1' duration='302.071575998' auth_neg_dur='0.021768438' last_auth_ago='302.047996466' is_wpa='1' full_conn='-7925004.700578745' http_resp='0.348188020' arp_resp='0.087949583' arp_src='10.157.105.180' dns_server='10.128.128.128' dns_req_rtt='0.016751615' dns_resp='0.135021667' dhcp_lease_completed='0.097278542' dhcp_ip='10.157.105.180' dhcp_server='10.128.128.128' dhcp_server_mac='68:3A:1E:53:A6:11' dhcp_resp='0.097278542' aid='840254242' - -Mar 17, 2022 @ 10:56:13.000 <134>1 1647474973.228722301 4_CS events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='11' reason='34' instigator='1' duration='317.661799158' auth_neg_dur='0.018240' last_auth_ago='317.639298198' is_wpa='1' arp_resp='22.241890408' arp_src='10.157.105.180' dhcp_lease_completed='22.267249448' dhcp_ip='10.157.105.180' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:18' dhcp_resp='22.267249448' aid='1784592012' - -Mar 17, 2022 @ 10:56:07.000 <134>1 1647474967.336756050 4_Max events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' duration='380.988710382' auth_neg_dur='0.026468800' last_auth_ago='380.957422542' is_wpa='1' aid='1052954612' - -Mar 17, 2022 @ 10:56:05.211 <134>1 1647474965.238001536 Nashville_MX100 events dhcp lease of ip 10.0.0.94 for client mac AC:17:C8:62:62:64 from router 10.0.0.1 on subnet 255.255.252.0 with dns 8.8.8.8, 8.8.4.4 - -Mar 17, 2022 @ 10:54:41.000 <134>1 1647474881.420517548 4_3 events type=wpa_deauth radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' aid='1219993310' - -Mar 17, 2022 @ 10:54:41.000 <134>1 1647474881.420967308 4_3 events type=disassociation radio='0' vap='1' client_mac='4A:0B:32:DD:7E:C3' channel='6' reason='34' instigator='1' duration='313.002078836' auth_neg_dur='0.007441760' last_auth_ago='312.991354196' is_wpa='1' ip_request_failed='1' ip_request_remote='172.20.20.20' ip_src='10.157.105.180' arp_resp='1.694616160' arp_src='10.157.105.180' dhcp_lease_completed='0.024290080' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:50:7E:26' dhcp_resp='0.024290080' aid='1219993310' diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-end.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-end.log deleted file mode 100644 index 5f6e5a374fb..00000000000 --- a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-end.log +++ /dev/null @@ -1,369 +0,0 @@ -Mar 17, 2022 @ 12:08:45.923 <134>1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:45.878 <134>1 1647479325.842384731 ATT_Primary ip_flow_end src=10.0.3.116 dst=142.251.46.174 protocol=udp sport=38422 dport=443 translated_src_ip=12.108.190.178 translated_port=38422 - -Mar 17, 2022 @ 12:08:45.877 <134>1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:45.750 <134>1 1647479325.755292025 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36498 dport=80 translated_src_ip=65.152.242.66 translated_port=36498 - -Mar 17, 2022 @ 12:08:45.718 <134>1 1647479325.722063094 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36496 dport=80 translated_src_ip=65.152.242.66 translated_port=36496 - -Mar 17, 2022 @ 12:08:45.717 <134>1 1647479325.722042240 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36495 dport=80 translated_src_ip=65.152.242.66 translated_port=36495 - -Mar 17, 2022 @ 12:08:45.717 <134>1 1647479325.722055279 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36497 dport=80 translated_src_ip=65.152.242.66 translated_port=36497 - -Mar 17, 2022 @ 12:08:45.665 <134>1 1647479325.633248380 ATT_Primary ip_flow_end src=10.0.2.159 dst=142.250.189.234 protocol=udp sport=38936 dport=443 translated_src_ip=12.108.190.178 translated_port=38936 - -Mar 17, 2022 @ 12:08:45.622 <134>1 1647479325.627285500 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36493 dport=80 translated_src_ip=65.152.242.66 translated_port=36493 - -Mar 17, 2022 @ 12:08:45.622 <134>1 1647479325.627295737 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36494 dport=80 translated_src_ip=65.152.242.66 translated_port=36494 - -Mar 17, 2022 @ 12:08:45.524 <134>1 1647479325.529191651 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=10.0.3.255 protocol=udp sport=57022 dport=15600 translated_dst_ip=10.0.3.255 translated_port=15600 - -Mar 17, 2022 @ 12:08:45.432 <134>1 1647479325.433466020 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=52996 dport=53 translated_src_ip=65.152.242.66 translated_port=52996 - -Mar 17, 2022 @ 12:08:45.431 <134>1 1647479325.433452565 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51544 dport=53 translated_src_ip=65.152.242.66 translated_port=51544 - -Mar 17, 2022 @ 12:08:45.431 <134>1 1647479325.433459674 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=40053 dport=53 translated_src_ip=65.152.242.66 translated_port=40053 - -Mar 17, 2022 @ 12:08:45.430 <134>1 1647479325.433438863 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=60425 dport=53 translated_src_ip=65.152.242.66 translated_port=60425 - -Mar 17, 2022 @ 12:08:45.430 <134>1 1647479325.433445753 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=39888 dport=53 translated_src_ip=65.152.242.66 translated_port=39888 - -Mar 17, 2022 @ 12:08:45.429 <134>1 1647479325.433422561 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60641 dport=80 translated_src_ip=65.152.242.66 translated_port=60641 - -Mar 17, 2022 @ 12:08:45.429 <134>1 1647479325.433429257 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36492 dport=80 translated_src_ip=65.152.242.66 translated_port=36492 - -Mar 17, 2022 @ 12:08:45.428 <134>1 1647479325.433411524 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60640 dport=80 translated_src_ip=65.152.242.66 translated_port=60640 - -Mar 17, 2022 @ 12:08:45.247 <134>1 1647479325.214921066 ATT_Primary ip_flow_end src=10.0.2.183 dst=10.0.0.1 protocol=udp sport=63338 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:45.247 <134>1 1647479325.214929495 ATT_Primary ip_flow_end src=10.0.3.13 dst=142.251.46.174 protocol=udp sport=38881 dport=443 translated_src_ip=12.108.190.178 translated_port=38881 - -Mar 17, 2022 @ 12:08:45.127 <134>1 1647479325.129243922 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=47077 dport=53 translated_src_ip=65.152.242.66 translated_port=47077 - -Mar 17, 2022 @ 12:08:45.126 <134>1 1647479325.129237338 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=57656 dport=53 translated_src_ip=65.152.242.66 translated_port=57656 - -Mar 17, 2022 @ 12:08:45.125 <134>1 1647479325.129214312 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60639 dport=80 translated_src_ip=65.152.242.66 translated_port=60639 - -Mar 17, 2022 @ 12:08:45.125 <134>1 1647479325.129230094 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=56957 dport=53 translated_src_ip=65.152.242.66 translated_port=56957 - -Mar 17, 2022 @ 12:08:45.036 <134>1 1647479325.041526004 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=43368 dport=53 translated_src_ip=65.152.242.66 translated_port=43368 - -Mar 17, 2022 @ 12:08:45.036 <134>1 1647479325.041537380 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51329 dport=53 translated_src_ip=65.152.242.66 translated_port=51329 - -Mar 17, 2022 @ 12:08:44.719 <134>1 1647479324.686429609 ATT_Primary ip_flow_end src=10.0.2.242 dst=172.217.164.106 protocol=udp sport=37853 dport=443 translated_src_ip=12.108.190.178 translated_port=37853 - -Mar 17, 2022 @ 12:08:44.656 <134>1 1647479324.661538622 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36488 dport=80 translated_src_ip=65.152.242.66 translated_port=36488 - -Mar 17, 2022 @ 12:08:44.643 <134>1 1647479324.648290394 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60637 dport=80 translated_src_ip=65.152.242.66 translated_port=60637 - -Mar 17, 2022 @ 12:08:44.642 <134>1 1647479324.648279392 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60636 dport=80 translated_src_ip=65.152.242.66 translated_port=60636 - -Mar 17, 2022 @ 12:08:44.560 <134>1 1647479324.565734863 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36485 dport=80 translated_src_ip=65.152.242.66 translated_port=36485 - -Mar 17, 2022 @ 12:08:44.531 <134>1 1647479324.536081439 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36483 dport=80 translated_src_ip=65.152.242.66 translated_port=36483 - -Mar 17, 2022 @ 12:08:44.530 <134>1 1647479324.536067366 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60634 dport=80 translated_src_ip=65.152.242.66 translated_port=60634 - -Mar 17, 2022 @ 12:08:44.497 <134>1 1647479324.464810525 ATT_Primary ip_flow_end src=10.0.2.242 dst=10.0.0.1 protocol=udp sport=47387 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:44.310 <134>1 1647479324.309842258 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=33127 dport=53 translated_src_ip=65.152.242.66 translated_port=33127 - -Mar 17, 2022 @ 12:08:44.309 <134>1 1647479324.309829453 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=53921 dport=53 translated_src_ip=65.152.242.66 translated_port=53921 - -Mar 17, 2022 @ 12:08:44.309 <134>1 1647479324.309835674 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=52939 dport=53 translated_src_ip=65.152.242.66 translated_port=52939 - -Mar 17, 2022 @ 12:08:44.308 <134>1 1647479324.309816670 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=43935 dport=53 translated_src_ip=65.152.242.66 translated_port=43935 - -Mar 17, 2022 @ 12:08:44.308 <134>1 1647479324.309822966 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=44460 dport=53 translated_src_ip=65.152.242.66 translated_port=44460 - -Mar 17, 2022 @ 12:08:44.307 <134>1 1647479324.309809919 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=50807 dport=53 translated_src_ip=65.152.242.66 translated_port=50807 - -Mar 17, 2022 @ 12:08:44.306 <134>1 1647479324.309789804 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36482 dport=80 translated_src_ip=65.152.242.66 translated_port=36482 - -Mar 17, 2022 @ 12:08:44.306 <134>1 1647479324.309800715 Nashville_MX100 ip_flow_end src=10.0.0.34 dst=10.0.3.255 protocol=udp sport=56037 dport=15600 translated_dst_ip=10.0.3.255 translated_port=15600 - -Mar 17, 2022 @ 12:08:44.129 <134>1 1647479324.096659653 ATT_Primary ip_flow_end src=10.0.2.151 dst=34.209.229.236 protocol=tcp sport=33794 dport=443 translated_src_ip=12.108.190.178 translated_port=33794 - -Mar 17, 2022 @ 12:08:44.129 <134>1 1647479324.096678346 ATT_Primary ip_flow_end src=10.0.3.137 dst=142.250.191.46 protocol=udp sport=35104 dport=443 translated_src_ip=12.108.190.178 translated_port=35104 - -Mar 17, 2022 @ 12:08:44.022 <134>1 1647479324.027985302 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60629 dport=80 translated_src_ip=65.152.242.66 translated_port=60629 - -Mar 17, 2022 @ 12:08:44.000 <134>1 1647479324.003553954 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51549 dport=53 translated_src_ip=65.152.242.66 translated_port=51549 - -Mar 17, 2022 @ 12:08:43.999 <134>1 1647479324.003539348 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=47806 dport=53 translated_src_ip=65.152.242.66 translated_port=47806 - -Mar 17, 2022 @ 12:08:43.999 <134>1 1647479324.003546880 Nashville_MX100 ip_flow_end src=10.0.2.147 dst=64.233.185.101 protocol=udp sport=42683 dport=443 translated_src_ip=65.152.242.66 translated_port=42683 - -Mar 17, 2022 @ 12:08:43.998 <134>1 1647479324.003529049 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36477 dport=80 translated_src_ip=65.152.242.66 translated_port=36477 - -Mar 17, 2022 @ 12:08:43.997 <134>1 1647479324.003516729 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60628 dport=80 translated_src_ip=65.152.242.66 translated_port=60628 - -Mar 17, 2022 @ 12:08:43.915 <134>1 1647479323.920971598 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=33042 dport=53 translated_src_ip=65.152.242.66 translated_port=33042 - -Mar 17, 2022 @ 12:08:43.915 <134>1 1647479323.920984459 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=33075 dport=53 translated_src_ip=65.152.242.66 translated_port=33075 - -Mar 17, 2022 @ 12:08:43.736 <134>1 1647479323.703899120 ATT_Primary ip_flow_end src=10.0.2.151 dst=10.0.0.1 protocol=udp sport=33817 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:43.718 <134>1 1647479323.671864330 SMS_Data_Firewall ip_flow_end src=129.82.138.44 dst=208.82.138.146 protocol=icmp translated_dst_ip=208.82.138.146 - -Mar 17, 2022 @ 12:08:43.653 <134>1 1647479323.620721741 ATT_Primary ip_flow_end src=10.0.2.196 dst=142.250.189.234 protocol=udp sport=39231 dport=443 translated_src_ip=12.108.190.178 translated_port=39231 - -Mar 17, 2022 @ 12:08:43.627 <134>1 1647479323.632927472 Nashville_MX100 ip_flow_end src=10.0.2.143 dst=8.8.8.8 protocol=udp sport=36362 dport=53 translated_src_ip=65.152.242.66 translated_port=36362 - -Mar 17, 2022 @ 12:08:43.587 <134>1 1647479323.553835841 ATT_Primary ip_flow_end src=10.0.1.251 dst=142.251.46.238 protocol=tcp sport=55835 dport=80 translated_src_ip=12.108.190.178 translated_port=55835 - -Mar 17, 2022 @ 12:08:43.566 <134>1 1647479323.572063828 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36476 dport=80 translated_src_ip=65.152.242.66 translated_port=36476 - -Mar 17, 2022 @ 12:08:43.525 <134>1 1647479323.529375134 Nashville_MX100 ip_flow_end src=10.0.2.170 dst=10.0.3.255 protocol=udp sport=53960 dport=15600 translated_dst_ip=10.0.3.255 translated_port=15600 - -Mar 17, 2022 @ 12:08:43.524 <134>1 1647479323.529360954 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60625 dport=80 translated_src_ip=65.152.242.66 translated_port=60625 - -Mar 17, 2022 @ 12:08:43.524 <134>1 1647479323.529367761 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60623 dport=80 translated_src_ip=65.152.242.66 translated_port=60623 - -Mar 17, 2022 @ 12:08:43.523 <134>1 1647479323.529349434 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36474 dport=80 translated_src_ip=65.152.242.66 translated_port=36474 - -Mar 17, 2022 @ 12:08:43.449 <134>1 1647479323.416223143 ATT_Primary ip_flow_end src=172.16.0.115 dst=54.209.32.124 protocol=tcp sport=55399 dport=443 translated_src_ip=12.108.190.178 translated_port=55399 - -Mar 17, 2022 @ 12:08:43.448 <134>1 1647479323.416216211 ATT_Primary ip_flow_end src=10.0.2.183 dst=20.50.73.10 protocol=tcp sport=64774 dport=443 translated_src_ip=12.108.190.178 translated_port=64774 - -Mar 17, 2022 @ 12:08:43.435 <134>1 1647479323.387460311 ATT_Primary ip_flow_end src=10.0.3.229 dst=10.0.0.1 protocol=udp sport=59713 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:43.435 <134>1 1647479323.387463854 ATT_Primary ip_flow_end src=10.0.3.214 dst=10.0.0.1 protocol=udp sport=63524 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:43.434 <134>1 1647479323.387451672 ATT_Primary ip_flow_end src=10.0.3.77 dst=10.0.0.1 protocol=udp sport=50099 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:43.434 <134>1 1647479323.387456164 ATT_Primary ip_flow_end src=10.0.2.3 dst=10.0.0.1 protocol=udp sport=47107 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:43.433 <134>1 1647479323.387443702 ATT_Primary ip_flow_end src=10.0.1.255 dst=10.0.0.1 protocol=udp sport=41413 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:43.433 <134>1 1647479323.387447647 ATT_Primary ip_flow_end src=10.0.2.124 dst=10.0.0.1 protocol=udp sport=50916 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:43.431 <134>1 1647479323.387440100 ATT_Primary ip_flow_end src=10.0.3.228 dst=10.0.0.1 protocol=udp sport=57447 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:43.430 <134>1 1647479323.387435699 ATT_Primary ip_flow_end src=10.0.2.154 dst=10.0.0.1 protocol=udp sport=42113 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:43.429 <134>1 1647479323.387430829 ATT_Primary ip_flow_end src=10.0.3.77 dst=52.25.126.234 protocol=tcp sport=46170 dport=443 translated_src_ip=12.108.190.178 translated_port=46170 - -Mar 17, 2022 @ 12:08:43.428 <134>1 1647479323.387426771 ATT_Primary ip_flow_end src=10.0.2.124 dst=52.25.126.234 protocol=tcp sport=41778 dport=443 translated_src_ip=12.108.190.178 translated_port=41778 - -Mar 17, 2022 @ 12:08:43.426 <134>1 1647479323.387422534 ATT_Primary ip_flow_end src=10.0.1.255 dst=54.148.236.122 protocol=tcp sport=43178 dport=443 translated_src_ip=12.108.190.178 translated_port=43178 - -Mar 17, 2022 @ 12:08:43.425 <134>1 1647479323.387418612 ATT_Primary ip_flow_end src=10.0.2.154 dst=52.25.126.234 protocol=tcp sport=55870 dport=443 translated_src_ip=12.108.190.178 translated_port=55870 - -Mar 17, 2022 @ 12:08:43.423 <134>1 1647479323.387414771 ATT_Primary ip_flow_end src=10.0.3.229 dst=44.240.43.17 protocol=tcp sport=37490 dport=443 translated_src_ip=12.108.190.178 translated_port=37490 - -Mar 17, 2022 @ 12:08:43.421 <134>1 1647479323.387410882 ATT_Primary ip_flow_end src=10.0.2.3 dst=34.217.173.204 protocol=tcp sport=54038 dport=443 translated_src_ip=12.108.190.178 translated_port=54038 - -Mar 17, 2022 @ 12:08:43.419 <134>1 1647479323.387404909 ATT_Primary ip_flow_end src=10.0.3.228 dst=52.25.126.234 protocol=tcp sport=48886 dport=443 translated_src_ip=12.108.190.178 translated_port=48886 - -Mar 17, 2022 @ 12:08:43.403 <134>1 1647479323.409211731 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36472 dport=80 translated_src_ip=65.152.242.66 translated_port=36472 - -Mar 17, 2022 @ 12:08:43.403 <134>1 1647479323.409222633 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60621 dport=80 translated_src_ip=65.152.242.66 translated_port=60621 - -Mar 17, 2022 @ 12:08:43.267 <134>1 1647479323.268390473 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51532 dport=53 translated_src_ip=65.152.242.66 translated_port=51532 - -Mar 17, 2022 @ 12:08:43.266 <134>1 1647479323.268376456 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=54909 dport=53 translated_src_ip=65.152.242.66 translated_port=54909 - -Mar 17, 2022 @ 12:08:43.266 <134>1 1647479323.268383537 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=40089 dport=53 translated_src_ip=65.152.242.66 translated_port=40089 - -Mar 17, 2022 @ 12:08:43.265 <134>1 1647479323.268362521 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=36395 dport=53 translated_src_ip=65.152.242.66 translated_port=36395 - -Mar 17, 2022 @ 12:08:43.265 <134>1 1647479323.268369515 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=47608 dport=53 translated_src_ip=65.152.242.66 translated_port=47608 - -Mar 17, 2022 @ 12:08:43.264 <134>1 1647479323.268345567 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60620 dport=80 translated_src_ip=65.152.242.66 translated_port=60620 - -Mar 17, 2022 @ 12:08:43.264 <134>1 1647479323.268352553 Nashville_MX100 ip_flow_end src=10.0.2.202 dst=172.217.10.110 protocol=tcp sport=64254 dport=80 translated_src_ip=65.152.242.66 translated_port=64254 - -Mar 17, 2022 @ 12:08:43.263 <134>1 1647479323.268334420 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36469 dport=80 translated_src_ip=65.152.242.66 translated_port=36469 - -Mar 17, 2022 @ 12:08:43.146 <134>1 1647479323.113453910 ATT_Primary ip_flow_end src=10.0.3.131 dst=172.217.164.106 protocol=udp sport=43993 dport=443 translated_src_ip=12.108.190.178 translated_port=43993 - -Mar 17, 2022 @ 12:08:43.001 <134>1 1647479322.967971843 ATT_Primary ip_flow_end src=10.0.3.13 dst=172.217.164.106 protocol=udp sport=36767 dport=443 translated_src_ip=12.108.190.178 translated_port=36767 - -Mar 17, 2022 @ 12:08:43.000 <134>1 1647479322.967965569 ATT_Primary ip_flow_end src=10.0.2.242 dst=142.250.191.46 protocol=udp sport=37890 dport=443 translated_src_ip=12.108.190.178 translated_port=37890 - -Mar 17, 2022 @ 12:08:42.936 <134>1 1647479322.902340982 ATT_Primary ip_flow_end src=172.16.0.145 dst=8.8.8.8 protocol=udp sport=63016 dport=53 translated_src_ip=12.108.190.178 translated_port=63016 - -Mar 17, 2022 @ 12:08:42.935 <134>1 1647479322.902335825 ATT_Primary ip_flow_end src=10.0.3.13 dst=10.0.0.1 protocol=udp sport=57603 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:42.934 <134>1 1647479322.902329189 ATT_Primary ip_flow_end src=10.0.2.242 dst=142.250.191.46 protocol=udp sport=45276 dport=443 translated_src_ip=12.108.190.178 translated_port=45276 - -Mar 17, 2022 @ 12:08:42.916 <134>1 1647479322.921955880 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60618 dport=80 translated_src_ip=65.152.242.66 translated_port=60618 - -Mar 17, 2022 @ 12:08:42.915 <134>1 1647479322.921944646 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36467 dport=80 translated_src_ip=65.152.242.66 translated_port=36467 - -Mar 17, 2022 @ 12:08:42.869 <134>1 1647479322.874867829 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=55755 dport=53 translated_src_ip=65.152.242.66 translated_port=55755 - -Mar 17, 2022 @ 12:08:42.825 <134>1 1647479322.830708574 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=34365 dport=53 translated_src_ip=65.152.242.66 translated_port=34365 - -Mar 17, 2022 @ 12:08:42.824 <134>1 1647479322.830697654 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=48379 dport=53 translated_src_ip=65.152.242.66 translated_port=48379 - -Mar 17, 2022 @ 12:08:42.808 <134>1 1647479322.775483644 ATT_Primary ip_flow_end src=10.0.2.212 dst=10.0.0.1 protocol=udp sport=35959 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:42.808 <134>1 1647479322.775488249 ATT_Primary ip_flow_end src=10.0.2.212 dst=8.8.4.4 protocol=udp sport=14615 dport=53 translated_src_ip=12.108.190.178 translated_port=14615 - -Mar 17, 2022 @ 12:08:42.807 <134>1 1647479322.775477014 ATT_Primary ip_flow_end src=10.0.2.212 dst=10.0.0.1 protocol=udp sport=14615 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:42.640 <134>1 1647479322.606668368 ATT_Primary ip_flow_end src=10.0.2.249 dst=142.251.46.234 protocol=tcp sport=44536 dport=443 translated_src_ip=12.108.190.178 translated_port=44536 - -Mar 17, 2022 @ 12:08:42.639 <134>1 1647479322.606640529 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52984 dport=443 translated_src_ip=12.108.190.178 translated_port=52984 - -Mar 17, 2022 @ 12:08:42.639 <134>1 1647479322.606656776 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52992 dport=443 translated_src_ip=12.108.190.178 translated_port=52992 - -Mar 17, 2022 @ 12:08:42.463 <134>1 1647479322.465783941 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36466 dport=80 translated_src_ip=65.152.242.66 translated_port=36466 - -Mar 17, 2022 @ 12:08:42.437 <134>1 1647479322.442283769 Nashville_MX100 ip_flow_end src=10.0.0.200 dst=108.177.122.95 protocol=udp sport=40262 dport=443 translated_src_ip=65.152.242.66 translated_port=40262 - -Mar 17, 2022 @ 12:08:42.437 <134>1 1647479322.442290528 Nashville_MX100 ip_flow_end src=10.0.0.200 dst=216.58.195.131 protocol=udp sport=47024 dport=443 translated_src_ip=65.152.242.66 translated_port=47024 - -Mar 17, 2022 @ 12:08:42.436 <134>1 1647479322.442267841 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36464 dport=80 translated_src_ip=65.152.242.66 translated_port=36464 - -Mar 17, 2022 @ 12:08:42.436 <134>1 1647479322.442274597 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36465 dport=80 translated_src_ip=65.152.242.66 translated_port=36465 - -Mar 17, 2022 @ 12:08:42.435 <134>1 1647479322.442253536 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60613 dport=80 translated_src_ip=65.152.242.66 translated_port=60613 - -Mar 17, 2022 @ 12:08:42.282 <134>1 1647479322.288055012 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36462 dport=80 translated_src_ip=65.152.242.66 translated_port=36462 - -Mar 17, 2022 @ 12:08:42.282 <134>1 1647479322.288064431 Nashville_MX100 ip_flow_end src=10.0.0.200 dst=8.8.8.8 protocol=udp sport=27078 dport=53 translated_src_ip=65.152.242.66 translated_port=27078 - -Mar 17, 2022 @ 12:08:42.281 <134>1 1647479322.288043873 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36461 dport=80 translated_src_ip=65.152.242.66 translated_port=36461 - -Mar 17, 2022 @ 12:08:42.208 <134>1 1647479322.167703478 ATT_Primary ip_flow_end src=10.0.2.226 dst=35.190.71.73 protocol=tcp sport=55894 dport=443 translated_src_ip=12.108.190.178 translated_port=55894 - -Mar 17, 2022 @ 12:08:42.207 <134>1 1647479322.167695298 ATT_Primary ip_flow_end src=10.0.2.120 dst=10.0.0.1 protocol=udp sport=49501 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:42.207 <134>1 1647479322.167699347 ATT_Primary ip_flow_end src=10.0.2.120 dst=10.0.0.1 protocol=udp sport=51861 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:42.206 <134>1 1647479322.167691687 ATT_Primary ip_flow_end src=10.0.2.120 dst=10.0.0.1 protocol=udp sport=53511 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:42.205 <134>1 1647479322.167683334 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52995 dport=443 translated_src_ip=12.108.190.178 translated_port=52995 - -Mar 17, 2022 @ 12:08:42.205 <134>1 1647479322.167688025 ATT_Primary ip_flow_end src=10.0.2.142 dst=10.0.0.1 protocol=udp sport=56455 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:42.204 <134>1 1647479322.167675625 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52993 dport=443 translated_src_ip=12.108.190.178 translated_port=52993 - -Mar 17, 2022 @ 12:08:42.204 <134>1 1647479322.167679059 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52994 dport=443 translated_src_ip=12.108.190.178 translated_port=52994 - -Mar 17, 2022 @ 12:08:42.203 <134>1 1647479322.167667287 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52990 dport=443 translated_src_ip=12.108.190.178 translated_port=52990 - -Mar 17, 2022 @ 12:08:42.203 <134>1 1647479322.167671721 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52989 dport=443 translated_src_ip=12.108.190.178 translated_port=52989 - -Mar 17, 2022 @ 12:08:42.202 <134>1 1647479322.167660014 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52988 dport=443 translated_src_ip=12.108.190.178 translated_port=52988 - -Mar 17, 2022 @ 12:08:42.202 <134>1 1647479322.167663506 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52991 dport=443 translated_src_ip=12.108.190.178 translated_port=52991 - -Mar 17, 2022 @ 12:08:42.201 <134>1 1647479322.167650115 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52986 dport=443 translated_src_ip=12.108.190.178 translated_port=52986 - -Mar 17, 2022 @ 12:08:42.201 <134>1 1647479322.167656471 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52985 dport=443 translated_src_ip=12.108.190.178 translated_port=52985 - -Mar 17, 2022 @ 12:08:42.166 <134>1 1647479322.167572333 Nashville_MX100 ip_flow_end src=10.0.0.120 dst=8.8.8.8 protocol=udp sport=1696 dport=53 translated_src_ip=65.152.242.66 translated_port=1696 - -Mar 17, 2022 @ 12:08:42.165 <134>1 1647479322.167559240 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=38630 dport=53 translated_src_ip=65.152.242.66 translated_port=38630 - -Mar 17, 2022 @ 12:08:42.165 <134>1 1647479322.167565565 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=60739 dport=53 translated_src_ip=65.152.242.66 translated_port=60739 - -Mar 17, 2022 @ 12:08:42.164 <134>1 1647479322.167546260 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=50219 dport=53 translated_src_ip=65.152.242.66 translated_port=50219 - -Mar 17, 2022 @ 12:08:42.164 <134>1 1647479322.167552630 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=59576 dport=53 translated_src_ip=65.152.242.66 translated_port=59576 - -Mar 17, 2022 @ 12:08:42.163 <134>1 1647479322.167533125 Nashville_MX100 ip_flow_end src=10.0.0.118 dst=8.8.8.8 protocol=udp sport=1814 dport=53 translated_src_ip=65.152.242.66 translated_port=16644 - -Mar 17, 2022 @ 12:08:42.163 <134>1 1647479322.167539685 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=47457 dport=53 translated_src_ip=65.152.242.66 translated_port=47457 - -Mar 17, 2022 @ 12:08:42.162 <134>1 1647479322.167524106 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36460 dport=80 translated_src_ip=65.152.242.66 translated_port=36460 - -Mar 17, 2022 @ 12:08:42.161 <134>1 1647479322.167506853 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60607 dport=80 translated_src_ip=65.152.242.66 translated_port=60607 - -Mar 17, 2022 @ 12:08:42.161 <134>1 1647479322.167517744 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36459 dport=80 translated_src_ip=65.152.242.66 translated_port=36459 - -Mar 17, 2022 @ 12:08:41.796 <134>1 1647479321.803180323 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36458 dport=80 translated_src_ip=65.152.242.66 translated_port=36458 - -Mar 17, 2022 @ 12:08:41.796 <134>1 1647479321.803192898 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=60669 dport=53 translated_src_ip=65.152.242.66 translated_port=60669 - -Mar 17, 2022 @ 12:08:41.770 <134>1 1647479321.777340365 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=41625 dport=53 translated_src_ip=65.152.242.66 translated_port=41625 - -Mar 17, 2022 @ 12:08:41.724 <134>1 1647479321.731006694 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=58595 dport=53 translated_src_ip=65.152.242.66 translated_port=58595 - -Mar 17, 2022 @ 12:08:41.640 <134>1 1647479321.607863450 ATT_Primary ip_flow_end src=10.0.3.249 dst=23.196.44.243 protocol=tcp sport=52987 dport=443 translated_src_ip=12.108.190.178 translated_port=52987 - -Mar 17, 2022 @ 12:08:41.612 <134>1 1647479321.577021846 ATT_Primary ip_flow_end src=10.0.3.136 dst=142.251.46.238 protocol=udp sport=35522 dport=443 translated_src_ip=12.108.190.178 translated_port=35522 - -Mar 17, 2022 @ 12:08:41.612 <134>1 1647479321.577025487 ATT_Primary ip_flow_end src=10.0.2.159 dst=142.250.189.195 protocol=udp sport=38513 dport=443 translated_src_ip=12.108.190.178 translated_port=38513 - -Mar 17, 2022 @ 12:08:41.611 <134>1 1647479321.577012909 ATT_Primary ip_flow_end src=10.0.3.136 dst=10.0.0.1 protocol=udp sport=5474 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:41.611 <134>1 1647479321.577017779 ATT_Primary ip_flow_end src=10.0.2.120 dst=17.167.200.72 protocol=tcp sport=62081 dport=443 translated_src_ip=12.108.190.178 translated_port=62081 - -Mar 17, 2022 @ 12:08:41.610 <134>1 1647479321.577003916 ATT_Primary ip_flow_end src=10.0.2.167 dst=35.187.148.146 protocol=udp sport=36937 dport=443 translated_src_ip=12.108.190.178 translated_port=36937 - -Mar 17, 2022 @ 12:08:41.610 <134>1 1647479321.577008863 ATT_Primary ip_flow_end src=10.0.2.159 dst=10.0.0.1 protocol=udp sport=8412 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:41.609 <134>1 1647479321.576997889 ATT_Primary ip_flow_end src=10.0.2.99 dst=142.250.72.206 protocol=tcp sport=42770 dport=443 translated_src_ip=12.108.190.178 translated_port=42770 - -Mar 17, 2022 @ 12:08:41.582 <134>1 1647479321.588033791 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36456 dport=80 translated_src_ip=65.152.242.66 translated_port=36456 - -Mar 17, 2022 @ 12:08:41.316 <134>1 1647479321.321734034 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60604 dport=80 translated_src_ip=65.152.242.66 translated_port=60604 - -Mar 17, 2022 @ 12:08:41.316 <134>1 1647479321.321741209 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60605 dport=80 translated_src_ip=65.152.242.66 translated_port=60605 - -Mar 17, 2022 @ 12:08:41.315 <134>1 1647479321.321723168 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36453 dport=80 translated_src_ip=65.152.242.66 translated_port=36453 - -Mar 17, 2022 @ 12:08:41.189 <134>1 1647479321.196361961 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36452 dport=80 translated_src_ip=65.152.242.66 translated_port=36452 - -Mar 17, 2022 @ 12:08:41.189 <134>1 1647479321.196373160 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60601 dport=80 translated_src_ip=65.152.242.66 translated_port=60601 - -Mar 17, 2022 @ 12:08:41.004 <134>1 1647479320.968007147 ATT_Primary ip_flow_end src=172.16.0.65 dst=142.250.191.46 protocol=udp sport=58741 dport=443 translated_src_ip=12.108.190.178 translated_port=58741 - -Mar 17, 2022 @ 12:08:41.002 <134>1 1647479321.003851515 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=55242 dport=53 translated_src_ip=65.152.242.66 translated_port=55242 - -Mar 17, 2022 @ 12:08:41.002 <134>1 1647479321.003858114 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=56751 dport=53 translated_src_ip=65.152.242.66 translated_port=56751 - -Mar 17, 2022 @ 12:08:41.001 <134>1 1647479321.003838969 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=44075 dport=53 translated_src_ip=65.152.242.66 translated_port=44075 - -Mar 17, 2022 @ 12:08:41.001 <134>1 1647479321.003845427 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=37165 dport=53 translated_src_ip=65.152.242.66 translated_port=37165 - -Mar 17, 2022 @ 12:08:41.000 <134>1 1647479321.003825773 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=41858 dport=53 translated_src_ip=65.152.242.66 translated_port=41858 - -Mar 17, 2022 @ 12:08:41.000 <134>1 1647479321.003832498 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=35542 dport=53 translated_src_ip=65.152.242.66 translated_port=35542 - -Mar 17, 2022 @ 12:08:40.999 <134>1 1647479321.003810253 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60597 dport=80 translated_src_ip=65.152.242.66 translated_port=60597 - -Mar 17, 2022 @ 12:08:40.999 <134>1 1647479321.003816977 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36448 dport=80 translated_src_ip=65.152.242.66 translated_port=36448 - -Mar 17, 2022 @ 12:08:40.998 <134>1 1647479321.003794756 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60595 dport=80 translated_src_ip=65.152.242.66 translated_port=60595 - -Mar 17, 2022 @ 12:08:40.998 <134>1 1647479321.003803928 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60596 dport=80 translated_src_ip=65.152.242.66 translated_port=60596 - -Mar 17, 2022 @ 12:08:40.606 <134>1 1647479320.613067320 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=58528 dport=53 translated_src_ip=65.152.242.66 translated_port=58528 - -Mar 17, 2022 @ 12:08:40.606 <134>1 1647479320.613078666 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=59426 dport=53 translated_src_ip=65.152.242.66 translated_port=59426 - -Mar 17, 2022 @ 12:08:40.572 <134>1 1647479320.538064280 ATT_Primary ip_flow_end src=10.0.2.184 dst=10.0.0.1 protocol=udp sport=38731 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:40.572 <134>1 1647479320.538069001 ATT_Primary ip_flow_end src=10.0.3.136 dst=142.251.46.174 protocol=udp sport=38139 dport=443 translated_src_ip=12.108.190.178 translated_port=38139 - -Mar 17, 2022 @ 12:08:40.571 <134>1 1647479320.538056368 ATT_Primary ip_flow_end src=10.0.3.88 dst=10.0.0.1 protocol=udp sport=63706 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:40.571 <134>1 1647479320.538060297 ATT_Primary ip_flow_end src=10.0.3.88 dst=10.0.0.1 protocol=udp sport=50987 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:08:40.570 <134>1 1647479320.538049370 ATT_Primary ip_flow_end src=10.0.3.131 dst=35.187.148.146 protocol=udp sport=46252 dport=443 translated_src_ip=12.108.190.178 translated_port=46252 - -Mar 17, 2022 @ 12:08:40.482 <134>1 1647479320.490182870 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60594 dport=80 translated_src_ip=65.152.242.66 translated_port=60594 - -Mar 17, 2022 @ 12:08:40.225 <134>1 1647479320.233114192 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60593 dport=80 translated_src_ip=65.152.242.66 translated_port=60593 - -Mar 17, 2022 @ 12:08:40.205 <134>1 1647479320.212489408 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36441 dport=80 translated_src_ip=65.152.242.66 translated_port=36441 - -Mar 17, 2022 @ 12:08:40.205 <134>1 1647479320.212500605 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36442 dport=80 translated_src_ip=65.152.242.66 translated_port=36442 - -Mar 17, 2022 @ 12:08:40.089 <134>1 1647479320.097439118 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=60590 dport=80 translated_src_ip=65.152.242.66 translated_port=60590 - -Mar 17, 2022 @ 12:08:40.065 <134>1 1647479320.073474353 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=13.249.120.45 protocol=tcp sport=36439 dport=80 translated_src_ip=65.152.242.66 translated_port=36439 - -Mar 17, 2022 @ 12:08:39.873 <134>1 1647479319.875868880 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=60763 dport=53 translated_src_ip=65.152.242.66 translated_port=60763 - -Mar 17, 2022 @ 12:08:39.872 <134>1 1647479319.875855588 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=43583 dport=53 translated_src_ip=65.152.242.66 translated_port=43583 - -Mar 17, 2022 @ 12:08:39.872 <134>1 1647479319.875862262 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=59108 dport=53 translated_src_ip=65.152.242.66 translated_port=59108 diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-start.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-start.log deleted file mode 100644 index 95b8f4fc174..00000000000 --- a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/ip-flow-start.log +++ /dev/null @@ -1,301 +0,0 @@ -Mar 17, 2022 @ 12:07:58.969 <134>1 1647479278.997155282 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=34294 dport=80 translated_src_ip=65.152.242.66 translated_port=34294 - -Mar 17, 2022 @ 12:07:58.968 <134>1 1647479278.995279215 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=45061 dport=53 translated_src_ip=65.152.242.66 translated_port=45061 - -Mar 17, 2022 @ 12:07:58.946 <134>1 1647479278.974067126 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=37401 dport=53 translated_src_ip=65.152.242.66 translated_port=37401 - -Mar 17, 2022 @ 12:07:58.944 <134>1 1647479278.911594876 ATT_Primary ip_flow_start src=10.0.3.138 dst=54.184.93.203 protocol=tcp sport=61272 dport=443 translated_src_ip=12.108.190.178 translated_port=61272 - -Mar 17, 2022 @ 12:07:58.939 <134>1 1647479278.966811719 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55276 dport=80 translated_src_ip=65.152.242.66 translated_port=55276 - -Mar 17, 2022 @ 12:07:58.933 <134>1 1647479278.901032047 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=61089 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:58.914 <134>1 1647479278.941969605 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51505 dport=53 translated_src_ip=65.152.242.66 translated_port=51505 - -Mar 17, 2022 @ 12:07:58.893 <134>1 1647479278.860932523 ATT_Primary ip_flow_start src=10.0.3.131 dst=142.251.46.195 protocol=tcp sport=35138 dport=80 translated_src_ip=12.108.190.178 translated_port=35138 - -Mar 17, 2022 @ 12:07:58.889 <134>1 1647479278.856701945 ATT_Primary ip_flow_start src=10.0.3.138 dst=96.16.172.131 protocol=tcp sport=61271 dport=443 translated_src_ip=12.108.190.178 translated_port=61271 - -Mar 17, 2022 @ 12:07:58.883 <134>1 1647479278.850684294 ATT_Primary ip_flow_start src=10.0.3.131 dst=10.0.0.1 protocol=udp sport=47098 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:58.853 <134>1 1647479278.820845702 ATT_Primary ip_flow_start src=10.0.3.131 dst=142.250.189.202 protocol=udp sport=37220 dport=443 translated_src_ip=12.108.190.178 translated_port=37220 - -Mar 17, 2022 @ 12:07:58.850 <134>1 1647479278.818562769 ATT_Primary ip_flow_start src=10.0.3.131 dst=10.0.0.1 protocol=udp sport=35344 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:58.847 <134>1 1647479278.812957736 ATT_Primary ip_flow_start src=10.0.2.167 dst=142.250.189.202 protocol=udp sport=33959 dport=443 translated_src_ip=12.108.190.178 translated_port=33959 - -Mar 17, 2022 @ 12:07:58.843 <134>1 1647479278.810074778 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.45.118 protocol=tcp sport=61270 dport=443 translated_src_ip=12.108.190.178 translated_port=61270 - -Mar 17, 2022 @ 12:07:58.843 <134>1 1647479278.810207697 ATT_Primary ip_flow_start src=10.0.2.167 dst=10.0.0.1 protocol=udp sport=53495 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:58.837 <134>1 1647479278.805088611 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=60861 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:58.806 <134>1 1647479278.833487044 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60132 dport=80 translated_src_ip=65.152.242.66 translated_port=60132 - -Mar 17, 2022 @ 12:07:58.781 <134>1 1647479278.808429355 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=53155 dport=53 translated_src_ip=65.152.242.66 translated_port=53155 - -Mar 17, 2022 @ 12:07:58.721 <134>1 1647479278.689565540 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.248.245.73 protocol=tcp sport=61269 dport=443 translated_src_ip=12.108.190.178 translated_port=61269 - -Mar 17, 2022 @ 12:07:58.700 <134>1 1647479278.664793096 ATT_Primary ip_flow_start src=10.0.2.242 dst=10.0.0.1 protocol=udp sport=3150 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:58.700 <134>1 1647479278.666845351 ATT_Primary ip_flow_start src=10.0.2.242 dst=142.251.46.195 protocol=udp sport=39899 dport=443 translated_src_ip=12.108.190.178 translated_port=39899 - -Mar 17, 2022 @ 12:07:58.696 <134>1 1647479278.723917010 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55272 dport=80 translated_src_ip=65.152.242.66 translated_port=55272 - -Mar 17, 2022 @ 12:07:58.673 <134>1 1647479278.701294974 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=41670 dport=53 translated_src_ip=65.152.242.66 translated_port=41670 - -Mar 17, 2022 @ 12:07:58.597 <134>1 1647479278.625342929 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55271 dport=80 translated_src_ip=65.152.242.66 translated_port=55271 - -Mar 17, 2022 @ 12:07:58.574 <134>1 1647479278.601614993 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=41245 dport=53 translated_src_ip=65.152.242.66 translated_port=41245 - -Mar 17, 2022 @ 12:07:58.572 <134>1 1647479278.597895239 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55270 dport=80 translated_src_ip=65.152.242.66 translated_port=55270 - -Mar 17, 2022 @ 12:07:58.404 <134>1 1647479278.372025402 ATT_Primary ip_flow_start src=10.0.3.138 dst=104.85.162.38 protocol=tcp sport=61268 dport=443 translated_src_ip=12.108.190.178 translated_port=61268 - -Mar 17, 2022 @ 12:07:58.401 <134>1 1647479278.427304590 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60128 dport=80 translated_src_ip=65.152.242.66 translated_port=60128 - -Mar 17, 2022 @ 12:07:58.380 <134>1 1647479278.347834296 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=54900 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:58.349 <134>1 1647479278.315003639 ATT_Primary ip_flow_start src=10.0.3.137 dst=142.250.188.10 protocol=udp sport=37666 dport=443 translated_src_ip=12.108.190.178 translated_port=37666 - -Mar 17, 2022 @ 12:07:58.289 <134>1 1647479278.316091803 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60127 dport=80 translated_src_ip=65.152.242.66 translated_port=60127 - -Mar 17, 2022 @ 12:07:58.266 <134>1 1647479278.292770886 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=50766 dport=53 translated_src_ip=65.152.242.66 translated_port=50766 - -Mar 17, 2022 @ 12:07:58.200 <134>1 1647479278.166554399 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.26.253 protocol=udp sport=53132 dport=123 translated_src_ip=12.108.190.178 translated_port=53132 - -Mar 17, 2022 @ 12:07:58.127 <134>1 1647479278.093478777 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.248.245.73 protocol=tcp sport=61267 dport=443 translated_src_ip=12.108.190.178 translated_port=61267 - -Mar 17, 2022 @ 12:07:58.102 <134>1 1647479278.069749757 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.44.47 protocol=tcp sport=61266 dport=443 translated_src_ip=12.108.190.178 translated_port=61266 - -Mar 17, 2022 @ 12:07:58.058 <134>1 1647479278.025277282 ATT_Primary ip_flow_start src=10.0.2.179 dst=172.217.6.35 protocol=udp sport=39524 dport=443 translated_src_ip=12.108.190.178 translated_port=39524 - -Mar 17, 2022 @ 12:07:58.056 <134>1 1647479278.084155312 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55267 dport=80 translated_src_ip=65.152.242.66 translated_port=55267 - -Mar 17, 2022 @ 12:07:58.028 <134>1 1647479278.055700469 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=35934 dport=53 translated_src_ip=65.152.242.66 translated_port=35934 - -Mar 17, 2022 @ 12:07:57.998 <134>1 1647479277.966599242 ATT_Primary ip_flow_start src=10.0.2.77 dst=142.250.188.10 protocol=udp sport=39821 dport=443 translated_src_ip=12.108.190.178 translated_port=39821 - -Mar 17, 2022 @ 12:07:57.938 <134>1 1647479277.906637359 ATT_Primary ip_flow_start src=10.0.3.138 dst=184.51.48.183 protocol=tcp sport=61265 dport=443 translated_src_ip=12.108.190.178 translated_port=61265 - -Mar 17, 2022 @ 12:07:57.893 <134>1 1647479277.860313358 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=59274 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:57.881 <134>1 1647479277.908585651 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60125 dport=80 translated_src_ip=65.152.242.66 translated_port=60125 - -Mar 17, 2022 @ 12:07:57.867 <134>1 1647479277.895093058 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60124 dport=80 translated_src_ip=65.152.242.66 translated_port=60124 - -Mar 17, 2022 @ 12:07:57.857 <134>1 1647479277.885382547 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=39038 dport=53 translated_src_ip=65.152.242.66 translated_port=39038 - -Mar 17, 2022 @ 12:07:57.844 <134>1 1647479277.872779981 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=33119 dport=53 translated_src_ip=65.152.242.66 translated_port=33119 - -Mar 17, 2022 @ 12:07:57.840 <134>1 1647479277.868204057 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60123 dport=80 translated_src_ip=65.152.242.66 translated_port=60123 - -Mar 17, 2022 @ 12:07:57.821 <134>1 1647479277.788429226 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.44.47 protocol=tcp sport=61264 dport=443 translated_src_ip=12.108.190.178 translated_port=61264 - -Mar 17, 2022 @ 12:07:57.815 <134>1 1647479277.842987131 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=53241 dport=53 translated_src_ip=65.152.242.66 translated_port=53241 - -Mar 17, 2022 @ 12:07:57.689 <134>1 1647479277.717025085 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55263 dport=80 translated_src_ip=65.152.242.66 translated_port=55263 - -Mar 17, 2022 @ 12:07:57.664 <134>1 1647479277.692801875 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=50732 dport=53 translated_src_ip=65.152.242.66 translated_port=50732 - -Mar 17, 2022 @ 12:07:57.590 <134>1 1647479277.617880152 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55262 dport=80 translated_src_ip=65.152.242.66 translated_port=55262 - -Mar 17, 2022 @ 12:07:57.567 <134>1 1647479277.595081096 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=35277 dport=53 translated_src_ip=65.152.242.66 translated_port=35277 - -Mar 17, 2022 @ 12:07:57.526 <134>1 1647479277.554423030 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=10.0.3.255 protocol=udp sport=54016 dport=15600 translated_dst_ip=10.0.3.255 translated_port=15600 - -Mar 17, 2022 @ 12:07:57.472 <134>1 1647479277.499908469 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55261 dport=80 translated_src_ip=65.152.242.66 translated_port=55261 - -Mar 17, 2022 @ 12:07:57.448 <134>1 1647479277.475955876 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60119 dport=80 translated_src_ip=65.152.242.66 translated_port=60119 - -Mar 17, 2022 @ 12:07:57.441 <134>1 1647479277.468600617 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=52076 dport=53 translated_src_ip=65.152.242.66 translated_port=52076 - -Mar 17, 2022 @ 12:07:57.426 <134>1 1647479277.451939131 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=40692 dport=53 translated_src_ip=65.152.242.66 translated_port=40692 - -Mar 17, 2022 @ 12:07:57.372 <134>1 1647479277.340026579 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.5.204 protocol=tcp sport=61263 dport=443 translated_src_ip=12.108.190.178 translated_port=61263 - -Mar 17, 2022 @ 12:07:57.361 <134>1 1647479277.328776197 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.45.118 protocol=tcp sport=61262 dport=443 translated_src_ip=12.108.190.178 translated_port=61262 - -Mar 17, 2022 @ 12:07:57.297 <134>1 1647479277.324570896 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55259 dport=80 translated_src_ip=65.152.242.66 translated_port=55259 - -Mar 17, 2022 @ 12:07:57.267 <134>1 1647479277.294694819 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=50323 dport=53 translated_src_ip=65.152.242.66 translated_port=50323 - -Mar 17, 2022 @ 12:07:57.256 <134>1 1647479277.224406175 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.44.243 protocol=tcp sport=61261 dport=443 translated_src_ip=12.108.190.178 translated_port=61261 - -Mar 17, 2022 @ 12:07:57.239 <134>1 1647479277.207425758 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.5.204 protocol=tcp sport=61260 dport=443 translated_src_ip=12.108.190.178 translated_port=61260 - -Mar 17, 2022 @ 12:07:57.229 <134>1 1647479277.196602448 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=54473 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:57.155 <134>1 1647479277.183056752 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60117 dport=80 translated_src_ip=65.152.242.66 translated_port=60117 - -Mar 17, 2022 @ 12:07:57.131 <134>1 1647479277.157791298 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=48419 dport=53 translated_src_ip=65.152.242.66 translated_port=48419 - -Mar 17, 2022 @ 12:07:57.082 <134>1 1647479277.049968784 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.248.245.71 protocol=tcp sport=61258 dport=443 translated_src_ip=12.108.190.178 translated_port=61258 - -Mar 17, 2022 @ 12:07:57.077 <134>1 1647479277.044426419 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=54799 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:57.039 <134>1 1647479277.007446644 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.57.21.63 protocol=tcp sport=61257 dport=443 translated_src_ip=12.108.190.178 translated_port=61257 - -Mar 17, 2022 @ 12:07:57.032 <134>1 1647479276.999862970 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=60455 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.987 <134>1 1647479276.953151485 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.103 protocol=tcp sport=56107 dport=443 translated_src_ip=12.108.190.178 translated_port=56107 - -Mar 17, 2022 @ 12:07:56.967 <134>1 1647479276.933446634 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.103 protocol=tcp sport=56106 dport=443 translated_src_ip=12.108.190.178 translated_port=56106 - -Mar 17, 2022 @ 12:07:56.947 <134>1 1647479276.915561028 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.103 protocol=tcp sport=56105 dport=443 translated_src_ip=12.108.190.178 translated_port=56105 - -Mar 17, 2022 @ 12:07:56.945 <134>1 1647479276.973534167 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55257 dport=80 translated_src_ip=65.152.242.66 translated_port=55257 - -Mar 17, 2022 @ 12:07:56.938 <134>1 1647479276.905833550 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.103 protocol=tcp sport=56103 dport=443 translated_src_ip=12.108.190.178 translated_port=56103 - -Mar 17, 2022 @ 12:07:56.938 <134>1 1647479276.906692078 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.103 protocol=tcp sport=56104 dport=443 translated_src_ip=12.108.190.178 translated_port=56104 - -Mar 17, 2022 @ 12:07:56.924 <134>1 1647479276.890791159 ATT_Primary ip_flow_start src=10.0.3.148 dst=10.0.0.1 protocol=udp sport=52127 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.922 <134>1 1647479276.950879141 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=58885 dport=53 translated_src_ip=65.152.242.66 translated_port=58885 - -Mar 17, 2022 @ 12:07:56.852 <134>1 1647479276.819250190 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.223.56.162 protocol=tcp sport=61256 dport=443 translated_src_ip=12.108.190.178 translated_port=61256 - -Mar 17, 2022 @ 12:07:56.819 <134>1 1647479276.785529700 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=65129 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.784 <134>1 1647479276.811821727 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55256 dport=80 translated_src_ip=65.152.242.66 translated_port=55256 - -Mar 17, 2022 @ 12:07:56.775 <134>1 1647479276.794042616 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60114 dport=80 translated_src_ip=65.152.242.66 translated_port=60114 - -Mar 17, 2022 @ 12:07:56.760 <134>1 1647479276.788868399 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51304 dport=53 translated_src_ip=65.152.242.66 translated_port=51304 - -Mar 17, 2022 @ 12:07:56.749 <134>1 1647479276.777691824 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60113 dport=80 translated_src_ip=65.152.242.66 translated_port=60113 - -Mar 17, 2022 @ 12:07:56.744 <134>1 1647479276.771864925 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=44502 dport=53 translated_src_ip=65.152.242.66 translated_port=44502 - -Mar 17, 2022 @ 12:07:56.725 <134>1 1647479276.753421642 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=44302 dport=53 translated_src_ip=65.152.242.66 translated_port=44302 - -Mar 17, 2022 @ 12:07:56.721 <134>1 1647479276.688877095 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.16.119 protocol=tcp sport=54479 dport=443 translated_src_ip=12.108.190.178 translated_port=54479 - -Mar 17, 2022 @ 12:07:56.686 <134>1 1647479276.653997315 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.248.245.73 protocol=tcp sport=61255 dport=443 translated_src_ip=12.108.190.178 translated_port=61255 - -Mar 17, 2022 @ 12:07:56.648 <134>1 1647479276.616435134 ATT_Primary ip_flow_start src=10.0.2.134 dst=10.0.0.1 protocol=udp sport=54462 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.645 <134>1 1647479276.612689052 ATT_Primary ip_flow_start src=10.0.2.134 dst=10.0.0.1 protocol=udp sport=9280 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.645 <134>1 1647479276.613331545 ATT_Primary ip_flow_start src=10.0.2.134 dst=10.0.0.1 protocol=udp sport=44374 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.644 <134>1 1647479276.612486049 ATT_Primary ip_flow_start src=10.0.2.134 dst=8.8.4.4 protocol=udp sport=9280 dport=53 translated_src_ip=12.108.190.178 translated_port=9280 - -Mar 17, 2022 @ 12:07:56.636 <134>1 1647479276.604452465 ATT_Primary ip_flow_start src=10.0.2.226 dst=35.190.71.73 protocol=tcp sport=55938 dport=443 translated_src_ip=12.108.190.178 translated_port=55938 - -Mar 17, 2022 @ 12:07:56.621 <134>1 1647479276.587852067 ATT_Primary ip_flow_start src=10.0.3.138 dst=64.78.201.1 protocol=tcp sport=54478 dport=443 translated_src_ip=12.108.190.178 translated_port=54478 - -Mar 17, 2022 @ 12:07:56.595 <134>1 1647479276.563519626 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=58650 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.582 <134>1 1647479276.549724624 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.17.206 protocol=tcp sport=61254 dport=443 translated_src_ip=12.108.190.178 translated_port=61254 - -Mar 17, 2022 @ 12:07:56.579 <134>1 1647479276.607850267 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60112 dport=80 translated_src_ip=65.152.242.66 translated_port=60112 - -Mar 17, 2022 @ 12:07:56.568 <134>1 1647479276.535482512 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=52058 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.568 <134>1 1647479276.535551596 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=50720 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.557 <134>1 1647479276.524088269 ATT_Primary ip_flow_start src=10.0.2.157 dst=10.0.0.1 protocol=udp sport=64926 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.557 <134>1 1647479276.524167167 ATT_Primary ip_flow_start src=10.0.2.157 dst=10.0.0.1 protocol=udp sport=63072 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.555 <134>1 1647479276.583816822 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=55296 dport=53 translated_src_ip=65.152.242.66 translated_port=55296 - -Mar 17, 2022 @ 12:07:56.470 <134>1 1647479276.499254518 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60111 dport=80 translated_src_ip=65.152.242.66 translated_port=60111 - -Mar 17, 2022 @ 12:07:56.447 <134>1 1647479276.476168782 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51930 dport=53 translated_src_ip=65.152.242.66 translated_port=51930 - -Mar 17, 2022 @ 12:07:56.443 <134>1 1647479276.411222711 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.253.1.201 protocol=tcp sport=61253 dport=443 translated_src_ip=12.108.190.178 translated_port=61253 - -Mar 17, 2022 @ 12:07:56.429 <134>1 1647479276.396654330 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=63658 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.408 <134>1 1647479276.375948558 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.196.45.118 protocol=tcp sport=61252 dport=443 translated_src_ip=12.108.190.178 translated_port=61252 - -Mar 17, 2022 @ 12:07:56.347 <134>1 1647479276.375888646 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55251 dport=80 translated_src_ip=65.152.242.66 translated_port=55251 - -Mar 17, 2022 @ 12:07:56.324 <134>1 1647479276.291432443 ATT_Primary ip_flow_start src=10.0.3.138 dst=17.248.245.73 protocol=tcp sport=61251 dport=443 translated_src_ip=12.108.190.178 translated_port=61251 - -Mar 17, 2022 @ 12:07:56.324 <134>1 1647479276.353410115 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=40706 dport=53 translated_src_ip=65.152.242.66 translated_port=40706 - -Mar 17, 2022 @ 12:07:56.320 <134>1 1647479276.349490624 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.9 protocol=tcp sport=60109 dport=80 translated_src_ip=65.152.242.66 translated_port=60109 - -Mar 17, 2022 @ 12:07:56.299 <134>1 1647479276.267657916 ATT_Primary ip_flow_start src=10.0.2.196 dst=142.250.191.46 protocol=udp sport=33544 dport=443 translated_src_ip=12.108.190.178 translated_port=33544 - -Mar 17, 2022 @ 12:07:56.298 <134>1 1647479276.326854785 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=55431 dport=53 translated_src_ip=65.152.242.66 translated_port=55431 - -Mar 17, 2022 @ 12:07:56.294 <134>1 1647479276.320170373 Nashville_MX100 ip_flow_start src=10.0.0.34 dst=10.0.3.255 protocol=udp sport=49353 dport=15600 translated_dst_ip=10.0.3.255 translated_port=15600 - -Mar 17, 2022 @ 12:07:56.224 <134>1 1647479276.192600193 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.1.100.233 protocol=tcp sport=61250 dport=443 translated_src_ip=12.108.190.178 translated_port=61250 - -Mar 17, 2022 @ 12:07:56.217 <134>1 1647479276.185036673 ATT_Primary ip_flow_start src=10.0.3.148 dst=17.248.245.73 protocol=tcp sport=56102 dport=443 translated_src_ip=12.108.190.178 translated_port=56102 - -Mar 17, 2022 @ 12:07:56.198 <134>1 1647479276.166053016 ATT_Primary ip_flow_start src=10.0.3.148 dst=10.0.0.1 protocol=udp sport=29334 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.188 <134>1 1647479276.154899513 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=34411 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.187 <134>1 1647479276.215300433 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55249 dport=80 translated_src_ip=65.152.242.66 translated_port=55249 - -Mar 17, 2022 @ 12:07:56.184 <134>1 1647479276.152390098 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=1448 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.181 <134>1 1647479276.149180769 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=22634 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.180 <134>1 1647479276.148110373 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=55087 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.178 <134>1 1647479276.146587555 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=39982 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.176 <134>1 1647479276.143831015 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=3521 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.165 <134>1 1647479276.132271895 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=4662 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.163 <134>1 1647479276.192430864 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=46485 dport=53 translated_src_ip=65.152.242.66 translated_port=46485 - -Mar 17, 2022 @ 12:07:56.161 <134>1 1647479276.129451123 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=48267 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.158 <134>1 1647479276.126391573 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=45784 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.156 <134>1 1647479276.123781223 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=11001 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.153 <134>1 1647479276.121109860 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=44181 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.152 <134>1 1647479276.118640913 ATT_Primary ip_flow_start src=10.0.2.128 dst=10.0.0.1 protocol=udp sport=32770 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.151 <134>1 1647479276.118588649 ATT_Primary ip_flow_start src=10.0.2.128 dst=8.8.4.4 protocol=udp sport=32770 dport=53 translated_src_ip=12.108.190.178 translated_port=32770 - -Mar 17, 2022 @ 12:07:56.125 <134>1 1647479276.151095441 Nashville_MX100 ip_flow_start src=10.0.0.226 dst=8.8.4.4 protocol=udp sport=1130 dport=53 translated_src_ip=65.152.242.66 translated_port=1130 - -Mar 17, 2022 @ 12:07:56.124 <134>1 1647479276.150964743 Nashville_MX100 ip_flow_start src=10.0.0.226 dst=8.8.4.4 protocol=udp sport=17460 dport=53 translated_src_ip=65.152.242.66 translated_port=17460 - -Mar 17, 2022 @ 12:07:56.124 <134>1 1647479276.151034151 Nashville_MX100 ip_flow_start src=10.0.0.226 dst=8.8.8.8 protocol=udp sport=17460 dport=53 translated_src_ip=65.152.242.66 translated_port=17460 - -Mar 17, 2022 @ 12:07:56.091 <134>1 1647479276.059114020 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.1.100.233 protocol=tcp sport=61249 dport=443 translated_src_ip=12.108.190.178 translated_port=61249 - -Mar 17, 2022 @ 12:07:56.084 <134>1 1647479276.052110945 ATT_Primary ip_flow_start src=10.0.3.138 dst=23.1.100.233 protocol=tcp sport=61248 dport=443 translated_src_ip=12.108.190.178 translated_port=61248 - -Mar 17, 2022 @ 12:07:56.076 <134>1 1647479276.044309827 ATT_Primary ip_flow_start src=10.0.2.196 dst=142.250.191.46 protocol=tcp sport=39522 dport=443 translated_src_ip=12.108.190.178 translated_port=39522 - -Mar 17, 2022 @ 12:07:56.057 <134>1 1647479276.086011541 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=34265 dport=80 translated_src_ip=65.152.242.66 translated_port=34265 - -Mar 17, 2022 @ 12:07:56.054 <134>1 1647479276.009043754 ATT_Primary ip_flow_start src=10.0.2.196 dst=142.250.191.46 protocol=udp sport=37889 dport=443 translated_src_ip=12.108.190.178 translated_port=37889 - -Mar 17, 2022 @ 12:07:56.053 <134>1 1647479276.006385774 ATT_Primary ip_flow_start src=10.0.2.196 dst=10.0.0.1 protocol=udp sport=3248 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:56.035 <134>1 1647479276.062227771 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=51964 dport=53 translated_src_ip=65.152.242.66 translated_port=51964 - -Mar 17, 2022 @ 12:07:55.879 <134>1 1647479275.846171633 ATT_Primary ip_flow_start src=10.0.2.167 dst=142.250.188.10 protocol=udp sport=43443 dport=443 translated_src_ip=12.108.190.178 translated_port=43443 - -Mar 17, 2022 @ 12:07:55.830 <134>1 1647479275.858121385 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.34 protocol=tcp sport=34264 dport=80 translated_src_ip=65.152.242.66 translated_port=34264 - -Mar 17, 2022 @ 12:07:55.807 <134>1 1647479275.835437032 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=55760 dport=53 translated_src_ip=65.152.242.66 translated_port=55760 - -Mar 17, 2022 @ 12:07:55.722 <134>1 1647479275.690043481 ATT_Primary ip_flow_start src=10.0.3.138 dst=104.18.30.182 protocol=tcp sport=61247 dport=80 translated_src_ip=12.108.190.178 translated_port=61247 - -Mar 17, 2022 @ 12:07:55.693 <134>1 1647479275.660078992 ATT_Primary ip_flow_start src=10.0.3.138 dst=10.0.0.1 protocol=udp sport=53158 dport=53 translated_dst_ip=192.0.2.1 translated_port=53 - -Mar 17, 2022 @ 12:07:55.681 <134>1 1647479275.710368589 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55244 dport=80 translated_src_ip=65.152.242.66 translated_port=55244 - -Mar 17, 2022 @ 12:07:55.658 <134>1 1647479275.687623382 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55243 dport=80 translated_src_ip=65.152.242.66 translated_port=55243 - -Mar 17, 2022 @ 12:07:55.641 <134>1 1647479275.670267416 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=13.249.120.84 protocol=tcp sport=55242 dport=80 translated_src_ip=65.152.242.66 translated_port=55242 - -Mar 17, 2022 @ 12:07:55.635 <134>1 1647479275.664684367 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=8.8.8.8 protocol=udp sport=48499 dport=53 translated_src_ip=65.152.242.66 translated_port=48499 diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log deleted file mode 100644 index c021f5700d2..00000000000 --- a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/security-events.log +++ /dev/null @@ -1 +0,0 @@ -Nov 24, 2021 @ 05:13:18.000 <134>1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=142.250.189.238:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/urls.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/urls.log deleted file mode 100644 index 5fde45ffa9f..00000000000 --- a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/urls.log +++ /dev/null @@ -1,261 +0,0 @@ -Mar 17, 2022 @ 12:11:44.000 <134>1 1647479504.194655095 Nash_AP_5 urls src=10.0.2.224:64792 dst=104.16.205.58:443 mac=B0:CA:68:BD:DB:0B request: UNKNOWN https://app.envoy.com/... - -Mar 17, 2022 @ 12:11:44.000 <134>1 1647479504.179727976 Nashville_MX100 urls src=10.0.2.224:64792 dst=104.16.205.58:443 mac=B0:CA:68:BD:DB:0B request: UNKNOWN https://app.envoy.com/... - -Mar 17, 2022 @ 12:11:44.000 <134>1 1647479504.272447442 ATT_Primary urls src=10.0.1.29:60340 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.676404537 Nash_AP_4 urls src=10.0.0.234:56424 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.639520345 Nashville_MX100 urls src=10.0.0.234:56424 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.679829657 Nash_AP_4 urls src=10.0.0.234:35442 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.642902427 Nashville_MX100 urls src=10.0.0.234:35442 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.743107045 Nashville_MX100 urls src=10.0.0.234:56426 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.779951897 Nash_AP_4 urls src=10.0.0.234:56426 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.728229468 ATT_Primary urls src=10.0.1.29:60338 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.808052896 Nashville_MX100 urls src=10.0.0.234:33053 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.844916857 Nash_AP_4 urls src=10.0.0.234:33053 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.862598188 ATT_Primary urls src=10.0.1.29:60339 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.931492380 ATT_Primary urls src=10.0.3.148:64930 dst=104.18.156.47:443 mac=E0:CB:BC:50:7C:74 request: UNKNOWN https://app.envoy.com/... - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.970704657 4_Front_Desk urls src=10.17.185.77:64930 dst=104.18.156.47:443 mac=9A:02:87:1F:BF:FA request: UNKNOWN https://app.envoy.com/... - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.973639282 ATT_Primary urls src=10.0.2.77:46540 dst=142.250.191.74:443 mac=D8:C4:97:3A:60:9A request: UNKNOWN https://safebrowsing.googleapis.com/... - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.348215340 ATT_Primary urls src=10.0.1.29:60336 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.384440247 Nashville_MX100 urls src=10.0.0.234:33044 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/36/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.421255257 Nash_AP_4 urls src=10.0.0.234:33044 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/36/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.395105259 Nashville_MX100 urls src=10.0.0.234:33045 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/35/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.431949817 Nash_AP_4 urls src=10.0.0.234:33045 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/35/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.374967664 ATT_Primary urls src=10.0.1.29:60337 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.449538883 Nashville_MX100 urls src=10.0.0.234:33046 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.486407257 Nash_AP_4 urls src=10.0.0.234:33046 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.476338501 Nashville_MX100 urls src=10.0.0.234:35438 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.513205017 Nash_AP_4 urls src=10.0.0.234:35438 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.564621174 Nashville_MX100 urls src=10.0.0.234:33048 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.601477817 Nash_AP_4 urls src=10.0.0.234:33048 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.629055582 Nashville_MX100 urls src=10.0.0.234:33049 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.665932377 Nash_AP_4 urls src=10.0.0.234:33049 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:43.000 <134>1 1647479503.156354482 ATT_Primary urls src=10.0.3.5:59730 dst=17.248.245.51:443 mac=00:60:01:81:60:8B request: UNKNOWN https://gateway.icloud.com/... - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.031244318 ATT_Primary urls src=10.0.1.29:60330 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.055015672 ATT_Primary urls src=10.0.1.29:60331 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.292260355 Nashville_MX100 urls src=10.0.0.234:33034 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.329072857 Nash_AP_4 urls src=10.0.0.234:33034 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.296802572 Nashville_MX100 urls src=10.0.0.234:35426 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.333652537 Nash_AP_4 urls src=10.0.0.234:35426 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.364080643 Nashville_MX100 urls src=10.0.0.234:35427 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.400988857 Nash_AP_4 urls src=10.0.0.234:35427 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.430648377 Nash_AP_4 urls src=10.0.0.234:35428 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.393838043 Nashville_MX100 urls src=10.0.0.234:35428 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.415252826 ATT_Primary urls src=10.0.1.29:60332 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.468725626 Nashville_MX100 urls src=10.0.0.234:33038 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.505447097 Nash_AP_4 urls src=10.0.0.234:33038 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.458750509 ATT_Primary urls src=10.0.1.29:60333 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.538850904 Nashville_MX100 urls src=10.0.0.234:33039 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.575641817 Nash_AP_4 urls src=10.0.0.234:33039 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.547235638 Nashville_MX100 urls src=10.0.0.234:33040 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.584047417 Nash_AP_4 urls src=10.0.0.234:33040 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.550510761 Nashville_MX100 urls src=10.0.0.234:33041 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.587413497 Nash_AP_4 urls src=10.0.0.234:33041 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.629210599 Nashville_MX100 urls src=10.0.0.234:33042 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.666072857 Nash_AP_4 urls src=10.0.0.234:33042 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.754892857 Nash_AP_4 urls src=10.0.0.234:56417 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.718047981 Nashville_MX100 urls src=10.0.0.234:56417 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/02/55/USAJ3504707A_20220223T042302.png - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.765031780 ATT_Primary urls src=10.0.3.5:59729 dst=17.248.188.101:443 mac=00:60:01:81:60:8B request: UNKNOWN https://gateway.icloud.com/... - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.808764601 ATT_Primary urls src=10.0.1.29:60334 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:42.000 <134>1 1647479502.983843402 ATT_Primary urls src=10.0.1.29:60335 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.134133370 ATT_Primary urls src=10.0.1.29:60326 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.139223480 ATT_Primary urls src=10.0.2.242:46224 dst=142.250.188.14:443 mac=D8:C4:97:4F:1F:97 request: UNKNOWN https://meet.google.com/... - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.197837920 Nashville_MX100 urls src=10.0.0.234:33024 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.197949608 Nashville_MX100 urls src=10.0.0.234:35415 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.234489336 Nash_AP_4 urls src=10.0.0.234:33024 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.234629176 Nash_AP_4 urls src=10.0.0.234:35415 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.225228380 ATT_Primary urls src=10.0.1.29:60327 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.270555898 Nashville_MX100 urls src=10.0.0.234:56400 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.307444536 Nash_AP_4 urls src=10.0.0.234:56400 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.308665286 Nashville_MX100 urls src=10.0.0.234:33027 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.345588056 Nash_AP_4 urls src=10.0.0.234:33027 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.387436263 Nashville_MX100 urls src=10.0.0.234:35419 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/36/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.424231576 Nash_AP_4 urls src=10.0.0.234:35419 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/36/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.402875562 Nashville_MX100 urls src=10.0.2.202:64341 dst=172.217.10.110:80 mac=00:24:9B:6F:29:45 request: GET http://google.com/generate_204 - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.450173523 Nashville_MX100 urls src=10.0.0.234:33030 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.450271329 Nashville_MX100 urls src=10.0.0.234:35420 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/35/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.486928856 Nash_AP_4 urls src=10.0.0.234:33030 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.487045816 Nash_AP_4 urls src=10.0.0.234:35420 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/35/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.494358616 Nash_AP_4 urls src=10.0.0.234:33031 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.457478 Nashville_MX100 urls src=10.0.0.234:33031 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.525853171 Nashville_MX100 urls src=10.0.0.234:33032 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.562614296 Nash_AP_4 urls src=10.0.0.234:33032 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.594384378 ATT_Primary urls src=10.0.1.29:60328 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.625181098 Nashville_MX100 urls src=10.0.0.234:33033 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.662005817 Nash_AP_4 urls src=10.0.0.234:33033 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/02/45/USAJ3504708A_20200910T024247.png - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.604341047 ATT_Primary urls src=10.0.1.29:60329 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.604774714 ATT_Primary urls src=10.0.2.226:56020 dst=35.190.71.73:443 mac=00:11:32:B7:24:A1 request: UNKNOWN https://keeptruckin.twingate.com/... - -Mar 17, 2022 @ 12:11:41.000 <134>1 1647479501.644764296 ATT_Primary urls src=10.0.3.13:37582 dst=142.250.72.206:443 mac=D8:C4:97:D8:EA:D5 request: UNKNOWN https://play.google.com/... - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.037221772 ATT_Primary urls src=10.0.1.29:60321 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.099890367 Nashville_MX100 urls src=10.0.0.234:33012 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.136619256 Nash_AP_4 urls src=10.0.0.234:33012 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/24/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.102131185 Nashville_MX100 urls src=10.0.0.234:35404 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.139011576 Nash_AP_4 urls src=10.0.0.234:35404 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/23/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.189274080 Nashville_MX100 urls src=10.0.0.234:56388 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.226081976 Nash_AP_4 urls src=10.0.0.234:56388 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/22/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.221651878 Nashville_MX100 urls src=10.0.0.234:33015 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.258463576 Nash_AP_4 urls src=10.0.0.234:33015 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/21/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.246638090 ATT_Primary urls src=10.0.1.251:55918 dst=142.251.46.238:80 mac=00:0E:8E:6D:91:77 request: GET http://google.com/generate_204 - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.218082306 Luella_Bates_Ceiling urls src=10.0.1.251:55918 dst=142.251.46.238:80 mac=00:0E:8E:6D:91:77 request: GET http://google.com/generate_204 - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.306729473 Nashville_MX100 urls src=10.0.0.234:56390 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.343555096 Nash_AP_4 urls src=10.0.0.234:56390 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/15/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.318189530 ATT_Primary urls src=10.0.1.29:60322 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.366259896 Nashville_MX100 urls src=10.0.0.234:35408 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.366368966 Nashville_MX100 urls src=10.0.0.234:33018 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.402951736 Nash_AP_4 urls src=10.0.0.234:35408 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.403102456 Nash_AP_4 urls src=10.0.0.234:33018 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.371364934 Nashville_MX100 urls src=10.0.0.234:33019 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.408212056 Nash_AP_4 urls src=10.0.0.234:33019 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/14/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.424504614 Nashville_MX100 urls src=10.0.0.234:35411 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.461281336 Nash_AP_4 urls src=10.0.0.234:35411 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.452177943 ATT_Primary urls src=10.0.1.29:60323 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.547243282 Nashville_MX100 urls src=10.0.0.234:56395 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.584124536 Nash_AP_4 urls src=10.0.0.234:56395 dst=13.249.120.84:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.744445737 ATT_Primary urls src=10.0.1.29:60324 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:40.000 <134>1 1647479500.834892877 ATT_Primary urls src=10.0.1.29:60325 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.047416376 Nash_AP_4 urls src=10.0.0.234:33002 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/01/95/USAJ3504714A_20210413T065435.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.010580710 Nashville_MX100 urls src=10.0.0.234:33002 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/13/01/95/USAJ3504714A_20210413T065435.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.050453816 Nash_AP_4 urls src=10.0.0.234:33003 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/01/95/USAJ3504714A_20210413T065435.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.013573704 Nashville_MX100 urls src=10.0.0.234:33003 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/12/01/95/USAJ3504714A_20210413T065435.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.106427964 Nashville_MX100 urls src=10.0.0.234:35395 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/01/95/USAJ3504714A_20210413T065435.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.143285336 Nash_AP_4 urls src=10.0.0.234:35395 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/11/01/95/USAJ3504714A_20210413T065435.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.103549930 ATT_Primary urls src=10.0.1.29:60316 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.174630616 Nash_AP_4 urls src=10.0.0.234:33005 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/01/95/USAJ3504714A_20210413T065435.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.138018595 Nashville_MX100 urls src=10.0.0.234:33005 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/10/01/95/USAJ3504714A_20210413T065435.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.208614839 Nashville_MX100 urls src=10.0.0.234:33006 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.245281816 Nash_AP_4 urls src=10.0.0.234:33006 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/70/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.217698165 ATT_Primary urls src=10.0.1.29:60317 dst=104.192.141.1:443 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/... - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.259895658 Nashville_MX100 urls src=10.0.0.234:33007 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.296480216 Nash_AP_4 urls src=10.0.0.234:33007 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/62/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.296616216 Nash_AP_4 urls src=10.0.0.234:33008 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.259996637 Nashville_MX100 urls src=10.0.0.234:33008 dst=13.249.120.9:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/61/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.305732216 Nash_AP_4 urls src=10.0.0.234:35400 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/01/61/USAJ3504713A_20210525T051718.png - -Mar 17, 2022 @ 12:11:39.000 <134>1 1647479499.268900596 Nashville_MX100 urls src=10.0.0.234:35400 dst=13.249.120.34:80 mac=64:1C:AE:68:2A:01 request: GET http://tvpnlogopus.samsungcloud.tv/platform/image/sourcelogo/vc/39/01/61/USAJ3504713A_20210525T051718.png diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index 1ec6c38d507..80cd8321948 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { - "@timestamp": "2022-03-21T04:44:32.839Z", + "@timestamp": "2022-03-27T06:43:09.866Z", "agent": { - "ephemeral_id": "43b74c6e-45c3-4403-8beb-685e7c112a74", + "ephemeral_id": "1e92355f-993c-4cac-863c-4023c57c14ee", "hostname": "docker-fleet-agent", - "id": "4c5204b1-76bb-4986-b403-205808df776d", + "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -51,14 +51,14 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "4c5204b1-76bb-4986-b403-205808df776d", + "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", "snapshot": false, "version": "7.17.0" }, "event": { "agent_id_status": "verified", "dataset": "cisco_meraki.events", - "ingested": "2022-03-21T04:44:33Z", + "ingested": "2022-03-27T06:43:10Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}" }, "input": { diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log index 3a17a0aeea0..851559291b7 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log @@ -1,175 +1,175 @@ -<134>1 1647479604.334549372 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5' -<134>1 1647479580.487048774 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8' -<134>1 1647479552.047395997 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' -<134>1 1647479537.315779167 Nash_AP_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5' -<134>1 1647479528.067423267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8' -<134>1 1647479493.484285651 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' -<134>1 1647479489.882680227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8' -<134>1 1647479484.972992227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' -<134>1 1647479466.965046920 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8' -<134>1 1647479461.791503607 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5' -<134>1 1647479459.181348678 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8' -<134>1 1647479456.670048547 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8' -<134>1 1647479445.786718001 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5' -<134>1 1647479442.047436097 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8' -<134>1 1647479399.287689295 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8' -<134>1 1647479376.407283267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' -<134>1 1647479375.390251687 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8' -<134>1 1647479371.594697827 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8' -<134>1 1647479356.473299205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' -<134>1 1647479354.489175845 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5' -<134>1 1647479353.446408965 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647479352.553639439 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647479350.428006877 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' -<134>1 1647479350.457045605 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' -<134>1 1647479346.794313756 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5' -<134>1 1647479345.577452767 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5' -<134>1 1647479341.816936841 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647479318.128184987 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' -<134>1 1647479313.473165785 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5' -<134>1 1647479299.143407174 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5' -<134>1 1647479299.115949027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8' -<134>1 1647479294.302067007 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8' -<134>1 1647479288.469042416 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5' -<134>1 1647479281.848397134 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8' -<134>1 1647479278.839671334 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8' -<134>1 1647479231.942342036 Nash_AP_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647479227.438567311 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8' -<134>1 1647479222.927379747 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' -<134>1 1647479222.927802947 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8' -<134>1 1647479222.728876109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8' -<134>1 1647479218.076400635 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5' -<134>1 1647479203.375371107 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8' -<134>1 1647479199.622640025 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' -<134>1 1647479162.641725608 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' -<134>1 1647479162.670104087 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8' -<134>1 1647479161.182241827 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647479158.314592227 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8' -<134>1 1647479151.958073405 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8' -<134>1 1647479133.020606043 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5' -<134>1 1647479127.384572447 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8' -<134>1 1647479122.570882475 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' -<134>1 1647479122.592807847 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8' -<134>1 1647479122.578597672 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' -<134>1 1647479120.544286631 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5' -<134>1 1647479091.258858944 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' -<134>1 1647479060.425068327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5' -<134>1 1647479037.677902643 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' -<134>1 1647479036.783442760 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' -<134>1 1647479020.949227955 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' -<134>1 1647478974.912056258 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5' -<134>1 1647478966.089203455 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8' -<134>1 1647478950.860971410 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' -<134>1 1647478940.142724327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5' -<134>1 1647478936.678862087 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5' -<134>1 1647478907.739529447 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' -<134>1 1647478855.303776534 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' -<134>1 1647478849.532951889 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8' -<134>1 1647478845.877942207 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' -<134>1 1647478822.111692485 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8' -<134>1 1647478818.039157925 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8' -<134>1 1647478800.349145072 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5' -<134>1 1647478799.177625347 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8' -<134>1 1647478788.838283552 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8' -<134>1 1647478782.939898885 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5' -<134>1 1647478782.932299301 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' -<134>1 1647478782.930289746 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' -<134>1 1647478695.528431433 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5' -<134>1 1647478693.465185593 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' -<134>1 1647478669.549413486 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' -<134>1 1647478626.517046787 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8' -<134>1 1647478591.602996834 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' -<134>1 1647478569.035635205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5' -<134>1 1647478567.751044590 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' -<134>1 1647478559.571303907 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5' -<134>1 1647478558.540066660 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5' -<134>1 1647478554.934781027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8' -<134>1 1647478541.587558726 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' -<134>1 1647478534.671579931 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5' -<134>1 1647478508.007504325 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' -<134>1 1647478487.013169927 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8' -<134>1 1647478483.410677512 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647478478.614722093 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8' -<134>1 1647478440.565782942 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' -<134>1 1647478408.128821330 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8' -<134>1 1647478403.005811325 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5' -<134>1 1647478383.070405853 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' -<134>1 1647478373.816434235 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647478339.127895652 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5' -<134>1 1647478298.296851316 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' -<134>1 1647478293.380396754 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' -<134>1 1647478268.953109023 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8' -<134>1 1647478257.084985274 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5' -<134>1 1647478256.341194724 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8' -<134>1 1647478221.255609741 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' -<134>1 1647478145.758483684 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' -<134>1 1647478121.589518727 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5' -<134>1 1647478119.868477795 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8' -<134>1 1647478114.277373007 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5' -<134>1 1647478105.395836204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8' -<134>1 1647478102.536782923 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' -<134>1 1647478092.108472035 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' -<134>1 1647478087.649007204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8' -<134>1 1647478063.434847715 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8' -<134>1 1647478054.846444450 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5' -<134>1 1647478039.876640835 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8' -<134>1 1647478035.923601924 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' -<134>1 1647478034.762765475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' -<134>1 1647478026.502834244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' -<134>1 1647478020.564810050 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8' -<134>1 1647478015.983013635 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8' -<134>1 1647478006.707247789 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8' -<134>1 1647478001.603867573 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8' -<134>1 1647477963.236026884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8' -<134>1 1647477958.900449163 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' -<134>1 1647477953.907583508 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8' -<134>1 1647477953.724449475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' -<134>1 1647477945.336342244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5' -<134>1 1647477944.121686758 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5' -<134>1 1647477940.363429956 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5' -<134>1 1647477930.038516204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' -<134>1 1647477927.225784460 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' -<134>1 1647477920.683178115 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8' -<134>1 1647477920.510699794 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' -<134>1 1647477891.986568005 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8' -<134>1 1647477881.304873506 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' -<134>1 1647477873.769683395 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' -<134>1 1647477872.782332783 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' -<134>1 1647477871.675119845 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5' -<134>1 1647477864.088023180 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647477834.810489249 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8' -<134>1 1647477828.886032606 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8' -<134>1 1647477828.885258686 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8' -<134>1 1647477828.799864712 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8' -<134>1 1647477825.209110701 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8' -<134>1 1647477825.021409913 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5' -<134>1 1647477825.024707684 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5' -<134>1 1647477821.364087032 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8' -<134>1 1647477796.382660565 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8' -<134>1 1647477796.382227661 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' -<134>1 1647477796.381818586 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' -<134>1 1647477795.407019364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8' -<134>1 1647477795.385494917 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' -<134>1 1647477795.385835866 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' -<134>1 1647477793.576467473 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647477793.576769233 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' -<134>1 1647477786.805604872 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8' -<134>1 1647477780.705460109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' -<134>1 1647477778.398160444 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8' -<134>1 1647477773.586461164 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' -<134>1 1647477764.149946084 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647477764.145077176 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8' -<134>1 1647477764.143985243 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' -<134>1 1647477764.144283174 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' -<134>1 1647477763.225832662 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' -<134>1 1647477744.039850991 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5' -<134>1 1647477733.453967364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8' -<134>1 1647477733.446493073 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8' -<134>1 1647477733.420037284 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' -<134>1 1647477733.419042244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' -<134>1 1647477733.411410011 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5' -<134>1 1647477716.431936901 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' -<134>1 1647477716.431151781 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' -<134>1 1647477716.429168101 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' -<134>1 1647477715.612600884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' -<134>1 1647477702.046252324 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647479604.334549372 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5' +<134>1 1647479580.487048774 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647479552.047395997 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5' +<134>1 1647479528.067423267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479489.882680227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8' +<134>1 1647479484.972992227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' +<134>1 1647479466.965046920 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8' +<134>1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5' +<134>1 1647479459.181348678 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647479456.670048547 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8' +<134>1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5' +<134>1 1647479442.047436097 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8' +<134>1 1647479399.287689295 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8' +<134>1 1647479376.407283267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647479375.390251687 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8' +<134>1 1647479371.594697827 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8' +<134>1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5' +<134>1 1647479353.446408965 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479352.553639439 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479346.794313756 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5' +<134>1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5' +<134>1 1647479341.816936841 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647479313.473165785 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5' +<134>1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5' +<134>1 1647479299.115949027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8' +<134>1 1647479294.302067007 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647479288.469042416 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479278.839671334 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8' +<134>1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479227.438567311 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8' +<134>1 1647479222.927379747 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647479222.927802947 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647479222.728876109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8' +<134>1 1647479218.076400635 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5' +<134>1 1647479203.375371107 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8' +<134>1 1647479199.622640025 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647479162.641725608 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647479162.670104087 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8' +<134>1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647479151.958073405 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479133.020606043 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647479127.384572447 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647479122.570882475 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' +<134>1 1647479122.592807847 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8' +<134>1 1647479122.578597672 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' +<134>1 1647479120.544286631 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5' +<134>1 1647479091.258858944 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' +<134>1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5' +<134>1 1647479037.677902643 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647479036.783442760 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647479020.949227955 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' +<134>1 1647478974.912056258 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5' +<134>1 1647478966.089203455 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5' +<134>1 1647478936.678862087 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647478907.739529447 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647478855.303776534 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' +<134>1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478845.877942207 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' +<134>1 1647478822.111692485 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8' +<134>1 1647478818.039157925 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8' +<134>1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647478799.177625347 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647478788.838283552 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8' +<134>1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5' +<134>1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' +<134>1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' +<134>1 1647478695.528431433 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5' +<134>1 1647478693.465185593 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478669.549413486 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478626.517046787 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8' +<134>1 1647478591.602996834 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478569.035635205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5' +<134>1 1647478567.751044590 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478559.571303907 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5' +<134>1 1647478558.540066660 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5' +<134>1 1647478554.934781027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8' +<134>1 1647478541.587558726 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5' +<134>1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' +<134>1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647478483.410677512 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647478478.614722093 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8' +<134>1 1647478440.565782942 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' +<134>1 1647478408.128821330 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8' +<134>1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5' +<134>1 1647478383.070405853 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' +<134>1 1647478373.816434235 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647478339.127895652 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647478298.296851316 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647478293.380396754 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647478268.953109023 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8' +<134>1 1647478257.084985274 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5' +<134>1 1647478256.341194724 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8' +<134>1 1647478221.255609741 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' +<134>1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647478119.868477795 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8' +<134>1 1647478114.277373007 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647478105.395836204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8' +<134>1 1647478102.536782923 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647478092.108472035 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478087.649007204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478063.434847715 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647478054.846444450 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5' +<134>1 1647478039.876640835 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647478035.923601924 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478034.762765475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' +<134>1 1647478026.502834244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478020.564810050 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478015.983013635 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8' +<134>1 1647478006.707247789 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8' +<134>1 1647478001.603867573 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477963.236026884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8' +<134>1 1647477958.900449163 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647477953.907583508 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8' +<134>1 1647477953.724449475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647477945.336342244 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5' +<134>1 1647477944.121686758 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5' +<134>1 1647477940.363429956 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5' +<134>1 1647477930.038516204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' +<134>1 1647477927.225784460 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477920.683178115 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647477920.510699794 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' +<134>1 1647477891.986568005 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647477881.304873506 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647477872.782332783 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' +<134>1 1647477871.675119845 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5' +<134>1 1647477864.088023180 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647477834.810489249 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8' +<134>1 1647477828.886032606 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8' +<134>1 1647477828.885258686 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8' +<134>1 1647477828.799864712 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8' +<134>1 1647477825.209110701 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8' +<134>1 1647477825.021409913 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5' +<134>1 1647477825.024707684 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5' +<134>1 1647477821.364087032 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647477796.382660565 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8' +<134>1 1647477796.382227661 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' +<134>1 1647477796.381818586 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' +<134>1 1647477795.407019364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8' +<134>1 1647477795.385494917 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' +<134>1 1647477795.385835866 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' +<134>1 1647477793.576467473 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647477793.576769233 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477786.805604872 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8' +<134>1 1647477780.705460109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' +<134>1 1647477778.398160444 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8' +<134>1 1647477773.586461164 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647477764.149946084 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647477764.145077176 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8' +<134>1 1647477764.143985243 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647477764.144283174 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647477763.225832662 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647477744.039850991 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5' +<134>1 1647477733.453967364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8' +<134>1 1647477733.446493073 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647477733.420037284 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647477733.419042244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647477733.411410011 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5' +<134>1 1647477716.431936901 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477716.431151781 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477716.429168101 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477715.612600884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' +<134>1 1647477702.046252324 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5' diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log index e8afdfc7425..2dd020a31c7 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log @@ -1,3 +1,3 @@ -<134>1 1647478988.289402144 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600 -<134>1 1647478988.476061795 ATT_Primary flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all -<134>1 1647478988.596151424 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500 +<134>1 1647478988.289402144 MX84_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600 +<134>1 1647478988.476061795 MX84 flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all +<134>1 1647478988.596151424 MX84_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500 diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log index 5d4f085e07c..7b28b1d3071 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log @@ -1,8 +1,8 @@ -<134>1 1647479278.997155282 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294 -<134>1 1647479278.995279215 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061 -<134>1 1647479278.974067126 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401 -<134>1 1647479278.911594876 ATT_Primary ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272 -<134>1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53 -<134>1 1647479325.842384731 ATT_Primary ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422 -<134>1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53 -<134>1 1647479325.755292025 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498 +<134>1 1647479278.997155282 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294 +<134>1 1647479278.995279215 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061 +<134>1 1647479278.974067126 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401 +<134>1 1647479278.911594876 MX84 ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272 +<134>1 1647479325.891451682 MX84 ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53 +<134>1 1647479325.842384731 MX84 ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422 +<134>1 1647479325.842377481 MX84 ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53 +<134>1 1647479325.755292025 MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498 diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-logfile-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-logfile-config.yml new file mode 100644 index 00000000000..075ff2cfb2c --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-logfile-config.yml @@ -0,0 +1,7 @@ +service: cisco_meraki-log-logfile +input: logfile +data_stream: + vars: + paths: + - "{{SERVICE_LOGS_DIR}}/cisco-meraki*.log" + preserve_original_event: true diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-tcp-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-tcp-config.yml new file mode 100644 index 00000000000..1a0939ace90 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-tcp-config.yml @@ -0,0 +1,8 @@ +service: cisco_meraki-log-tcp +service_notify_signal: SIGHUP +input: tcp +data_stream: + vars: + listen_address: 0.0.0.0 + listen_port: 8685 + preserve_original_event: true diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/system/test-udp-config.yml b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-udp-config.yml new file mode 100644 index 00000000000..5699b412d51 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/_dev/test/system/test-udp-config.yml @@ -0,0 +1,8 @@ +service: cisco_meraki-log-udp +service_notify_signal: SIGHUP +input: udp +data_stream: + vars: + listen_address: 0.0.0.0 + listen_port: 8685 + preserve_original_event: true diff --git a/packages/cisco_meraki/data_stream/log/manifest.yml b/packages/cisco_meraki/data_stream/log/manifest.yml index aeaeb48fbc0..5872afe1e0a 100644 --- a/packages/cisco_meraki/data_stream/log/manifest.yml +++ b/packages/cisco_meraki/data_stream/log/manifest.yml @@ -23,7 +23,7 @@ streams: multi: false required: true show_user: true - default: 8684 + default: 8685 - name: preserve_original_event required: true show_user: true diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json new file mode 100644 index 00000000000..9dc5bd20a28 --- /dev/null +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -0,0 +1,87 @@ +{ + "@timestamp": "2021-11-23T18:13:18.348Z", + "agent": { + "ephemeral_id": "608bab32-5db5-4c16-9004-3328b2f4a73a", + "hostname": "docker-fleet-agent", + "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "name": "docker-fleet-agent", + "type": "filebeat", + "version": "7.17.0" + }, + "cisco_meraki": { + "device_type": "MR", + "event_subtype": "ids_alerted", + "event_type": "security_event", + "security": { + "decision": "allowed", + "dhost": "D0-AB-D5-7B-43-73", + "priority": "1", + "signature": "1:29708:4" + } + }, + "data_stream": { + "dataset": "cisco_meraki.log", + "namespace": "ep", + "type": "logs" + }, + "destination": { + "ip": "10.0.3.162", + "port": 56391 + }, + "ecs": { + "version": "8.0.0" + }, + "elastic_agent": { + "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "snapshot": false, + "version": "7.17.0" + }, + "event": { + "agent_id_status": "verified", + "dataset": "cisco_meraki.log", + "ingested": "2022-03-27T06:45:39Z", + "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected" + }, + "input": { + "type": "udp" + }, + "log": { + "source": { + "address": "172.22.0.5:35310" + } + }, + "network": { + "direction": "ingress", + "protocol": "tcp/ip" + }, + "observer": { + "hostname": "MX84" + }, + "source": { + "as": { + "number": 35908 + }, + "geo": { + "continent_name": "Asia", + "country_iso_code": "BT", + "country_name": "Bhutan", + "location": { + "lat": 27.5, + "lon": 90.5 + } + }, + "ip": "67.43.156.12", + "port": 80 + }, + "tags": [ + "preserve_original_event", + "cisco-meraki", + "forwarded" + ], + "threat": { + "indicator": { + "description": " BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", + "last_seen": "1637691198.330873" + } + } +} \ No newline at end of file From 293fe353bbb0dde9c5a5b7a8ca75565e29c9f7e1 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 28 Mar 2022 11:11:59 +1100 Subject: [PATCH 19/67] set meraki device type for flows log messages --- .../test-airmarshal-events.log-expected.json | 700 +++++++++--------- .../pipeline/test-flows.log-expected.json | 15 +- .../pipeline/test-ip-flow.log-expected.json | 32 +- .../elasticsearch/ingest_pipeline/flows.yml | 8 + 4 files changed, 383 insertions(+), 372 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index 7ecc314f4e0..4d592ee5b3e 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -22,7 +22,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479604.334549372 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479604.334549372 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -30,7 +30,7 @@ } }, "observer": { - "hostname": "Nash_AP_5" + "hostname": "MX84_5" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -62,7 +62,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479580.487048774 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479580.487048774 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -70,7 +70,7 @@ } }, "observer": { - "hostname": "Nash_AP_2" + "hostname": "MX84_2" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -102,7 +102,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479552.047395997 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479552.047395997 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -110,7 +110,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-DF-FD" @@ -142,10 +142,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479537.315779167 Nash_AP_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "Nash_AP_1" + "hostname": "MX84_1" }, "source": { "mac": "AA-17-C8-C7-E1-41" @@ -177,7 +177,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479528.067423267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479528.067423267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -185,7 +185,7 @@ } }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -217,7 +217,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479493.484285651 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -225,7 +225,7 @@ } }, "observer": { - "hostname": "Nash_AP_5" + "hostname": "MX84_5" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -257,7 +257,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479489.882680227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479489.882680227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -265,7 +265,7 @@ } }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -297,7 +297,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479484.972992227 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479484.972992227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -305,7 +305,7 @@ } }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -337,7 +337,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479466.965046920 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479466.965046920 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -345,7 +345,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-E2-9D" @@ -377,10 +377,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479461.791503607 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -412,7 +412,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479459.181348678 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479459.181348678 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -420,7 +420,7 @@ } }, "observer": { - "hostname": "Nash_AP_5" + "hostname": "MX84_5" }, "source": { "mac": "BE-17-D8-C7-D8-51" @@ -452,7 +452,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479456.670048547 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479456.670048547 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -460,7 +460,7 @@ } }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -492,7 +492,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479445.786718001 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -500,7 +500,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -532,7 +532,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479442.047436097 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479442.047436097 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -540,7 +540,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -572,7 +572,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479399.287689295 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479399.287689295 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -580,7 +580,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-E2-9D" @@ -612,7 +612,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479376.407283267 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479376.407283267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -620,7 +620,7 @@ } }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "BE-17-D8-C7-E2-9D" @@ -652,7 +652,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479375.390251687 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479375.390251687 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -660,7 +660,7 @@ } }, "observer": { - "hostname": "Nash_AP_5" + "hostname": "MX84_5" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -692,7 +692,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479371.594697827 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479371.594697827 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -700,7 +700,7 @@ } }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -732,7 +732,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479356.473299205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -740,7 +740,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "AC-17-C8-C7-DF-FD" @@ -772,10 +772,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479354.489175845 Nash_AP_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "AC-17-C8-C7-DF-FD" @@ -807,7 +807,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479353.446408965 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479353.446408965 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -815,7 +815,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "92-17-D8-C7-DF-FD" @@ -847,7 +847,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479352.553639439 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479352.553639439 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -855,7 +855,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -887,7 +887,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479350.428006877 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -895,7 +895,7 @@ } }, "observer": { - "hostname": "Nash_AP_5" + "hostname": "MX84_5" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -927,7 +927,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479350.457045605 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -935,7 +935,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -967,7 +967,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479346.794313756 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479346.794313756 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -975,7 +975,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -1007,7 +1007,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479345.577452767 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -1015,7 +1015,7 @@ } }, "observer": { - "hostname": "Nash_AP_1" + "hostname": "MX84_1" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -1047,7 +1047,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479341.816936841 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479341.816936841 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1055,7 +1055,7 @@ } }, "observer": { - "hostname": "Nash_AP_3" + "hostname": "MX84_3" }, "source": { "mac": "AA-17-C8-C7-E1-41" @@ -1087,7 +1087,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479318.128184987 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -1095,7 +1095,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -1127,7 +1127,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479313.473165785 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479313.473165785 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -1135,7 +1135,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -1167,10 +1167,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479299.143407174 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "Nash_AP_2" + "hostname": "MX84_2" }, "source": { "mac": "AA-17-C8-C7-E1-41" @@ -1202,7 +1202,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479299.115949027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479299.115949027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1210,7 +1210,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-E2-9D" @@ -1242,7 +1242,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479294.302067007 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479294.302067007 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1250,7 +1250,7 @@ } }, "observer": { - "hostname": "Nash_AP_1" + "hostname": "MX84_1" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -1282,7 +1282,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479288.469042416 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479288.469042416 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -1290,7 +1290,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -1322,7 +1322,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479281.848397134 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1330,7 +1330,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "AA-17-D8-C7-DF-FD" @@ -1362,7 +1362,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479278.839671334 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479278.839671334 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1370,7 +1370,7 @@ } }, "observer": { - "hostname": "Nash_AP_2" + "hostname": "MX84_2" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -1402,10 +1402,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479231.942342036 Nash_AP_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8'" }, "observer": { - "hostname": "Nash_AP_4" + "hostname": "MX84_4" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -1437,7 +1437,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479227.438567311 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479227.438567311 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1445,7 +1445,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -1477,7 +1477,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479222.927379747 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479222.927379747 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1485,7 +1485,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-E2-9D" @@ -1517,7 +1517,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479222.927802947 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479222.927802947 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1525,7 +1525,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-E2-9D" @@ -1557,7 +1557,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479222.728876109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479222.728876109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1565,7 +1565,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -1597,7 +1597,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479218.076400635 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479218.076400635 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -1605,7 +1605,7 @@ } }, "observer": { - "hostname": "Nash_AP_3" + "hostname": "MX84_3" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -1637,7 +1637,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479203.375371107 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479203.375371107 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1645,7 +1645,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -1677,7 +1677,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479199.622640025 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479199.622640025 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -1685,7 +1685,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -1717,7 +1717,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479162.641725608 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479162.641725608 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1725,7 +1725,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-DF-FD" @@ -1757,7 +1757,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479162.670104087 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479162.670104087 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1765,7 +1765,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-DF-FD" @@ -1797,10 +1797,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479161.182241827 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8'" }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -1832,10 +1832,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479158.314592227 Nash_AP_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8'" }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -1867,7 +1867,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479151.958073405 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479151.958073405 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1875,7 +1875,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "BE-17-D8-C7-E2-9D" @@ -1907,7 +1907,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479133.020606043 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479133.020606043 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -1915,7 +1915,7 @@ } }, "observer": { - "hostname": "Nash_AP_3" + "hostname": "MX84_3" }, "source": { "mac": "92-17-D8-C7-E1-41" @@ -1947,7 +1947,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479127.384572447 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479127.384572447 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1955,7 +1955,7 @@ } }, "observer": { - "hostname": "Nash_AP_1" + "hostname": "MX84_1" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -1987,7 +1987,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479122.570882475 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479122.570882475 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -1995,7 +1995,7 @@ } }, "observer": { - "hostname": "Nash_AP_4" + "hostname": "MX84_4" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -2027,7 +2027,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479122.592807847 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479122.592807847 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2035,7 +2035,7 @@ } }, "observer": { - "hostname": "Nash_AP_2" + "hostname": "MX84_2" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -2067,7 +2067,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479122.578597672 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479122.578597672 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2075,7 +2075,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -2107,10 +2107,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479120.544286631 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479120.544286631 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -2142,7 +2142,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479091.258858944 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479091.258858944 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2150,7 +2150,7 @@ } }, "observer": { - "hostname": "Nash_AP_4" + "hostname": "MX84_4" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -2182,7 +2182,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479060.425068327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -2190,7 +2190,7 @@ } }, "observer": { - "hostname": "Nash_AP_2" + "hostname": "MX84_2" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -2222,7 +2222,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479037.677902643 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479037.677902643 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2230,7 +2230,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -2262,7 +2262,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479036.783442760 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479036.783442760 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2270,7 +2270,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -2302,7 +2302,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479020.949227955 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647479020.949227955 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2310,7 +2310,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-DF-FD" @@ -2342,10 +2342,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478974.912056258 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478974.912056258 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -2377,7 +2377,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478966.089203455 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478966.089203455 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2385,7 +2385,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AE-17-D8-C7-E1-41" @@ -2417,7 +2417,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478950.860971410 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -2425,7 +2425,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -2457,7 +2457,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478940.142724327 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -2465,7 +2465,7 @@ } }, "observer": { - "hostname": "Nash_AP_2" + "hostname": "MX84_2" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -2497,7 +2497,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478936.678862087 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478936.678862087 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -2505,7 +2505,7 @@ } }, "observer": { - "hostname": "Nash_AP_2" + "hostname": "MX84_2" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -2537,7 +2537,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478907.739529447 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478907.739529447 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -2545,7 +2545,7 @@ } }, "observer": { - "hostname": "Nash_AP_2" + "hostname": "MX84_2" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -2577,7 +2577,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478855.303776534 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478855.303776534 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2585,7 +2585,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-E1-41" @@ -2617,7 +2617,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478849.532951889 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2625,7 +2625,7 @@ } }, "observer": { - "hostname": "Nash_AP_3" + "hostname": "MX84_3" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -2657,7 +2657,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478845.877942207 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478845.877942207 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2665,7 +2665,7 @@ } }, "observer": { - "hostname": "Nash_AP_1" + "hostname": "MX84_1" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -2697,7 +2697,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478822.111692485 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478822.111692485 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2705,7 +2705,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -2737,7 +2737,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478818.039157925 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478818.039157925 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2745,7 +2745,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -2777,10 +2777,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478800.349145072 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "Nash_AP_5" + "hostname": "MX84_5" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -2812,7 +2812,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478799.177625347 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478799.177625347 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2820,7 +2820,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-E1-41" @@ -2852,7 +2852,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478788.838283552 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478788.838283552 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -2860,7 +2860,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -2892,7 +2892,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478782.939898885 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -2900,7 +2900,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -2932,7 +2932,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478782.932299301 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -2940,7 +2940,7 @@ } }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -2972,7 +2972,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478782.930289746 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -2980,7 +2980,7 @@ } }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -3012,10 +3012,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478695.528431433 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478695.528431433 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -3047,7 +3047,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478693.465185593 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478693.465185593 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3055,7 +3055,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -3087,7 +3087,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478669.549413486 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478669.549413486 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3095,7 +3095,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -3127,7 +3127,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478626.517046787 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478626.517046787 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3135,7 +3135,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -3167,7 +3167,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478591.602996834 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478591.602996834 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3175,7 +3175,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -3207,7 +3207,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478569.035635205 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478569.035635205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -3215,7 +3215,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -3247,7 +3247,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478567.751044590 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478567.751044590 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3255,7 +3255,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -3287,7 +3287,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478559.571303907 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478559.571303907 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -3295,7 +3295,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -3327,7 +3327,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478558.540066660 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478558.540066660 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -3335,7 +3335,7 @@ } }, "observer": { - "hostname": "Nash_AP_3" + "hostname": "MX84_3" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -3367,7 +3367,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478554.934781027 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478554.934781027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3375,7 +3375,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -3407,7 +3407,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478541.587558726 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478541.587558726 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -3415,7 +3415,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-D8-C7-E1-41" @@ -3447,7 +3447,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478534.671579931 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -3455,7 +3455,7 @@ } }, "observer": { - "hostname": "Nash_AP_3" + "hostname": "MX84_3" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -3487,7 +3487,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478508.007504325 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -3495,7 +3495,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -3527,7 +3527,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478487.013169927 Nash_AP_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3535,7 +3535,7 @@ } }, "observer": { - "hostname": "Nash_AP_2" + "hostname": "MX84_2" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -3567,7 +3567,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478483.410677512 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478483.410677512 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3575,7 +3575,7 @@ } }, "observer": { - "hostname": "Nash_AP_3" + "hostname": "MX84_3" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -3607,7 +3607,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478478.614722093 Nash_AP_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478478.614722093 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3615,7 +3615,7 @@ } }, "observer": { - "hostname": "Nash_AP_1" + "hostname": "MX84_1" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -3647,7 +3647,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478440.565782942 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478440.565782942 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3655,7 +3655,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-DF-FD" @@ -3687,7 +3687,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478408.128821330 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478408.128821330 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3695,7 +3695,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-E2-9D" @@ -3727,10 +3727,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478403.005811325 Nash_AP_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "Nash_AP_5" + "hostname": "MX84_5" }, "source": { "mac": "AC-17-C8-C7-DF-FD" @@ -3762,7 +3762,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478383.070405853 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478383.070405853 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3770,7 +3770,7 @@ } }, "observer": { - "hostname": "Nash_AP_4" + "hostname": "MX84_4" }, "source": { "mac": "BE-17-C8-C7-E1-41" @@ -3802,7 +3802,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478373.816434235 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478373.816434235 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3810,7 +3810,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "AA-17-C8-C7-E2-9D" @@ -3842,10 +3842,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478339.127895652 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478339.127895652 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-E1-41" @@ -3877,7 +3877,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478298.296851316 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478298.296851316 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3885,7 +3885,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -3917,7 +3917,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478293.380396754 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478293.380396754 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3925,7 +3925,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -3957,7 +3957,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478268.953109023 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478268.953109023 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -3965,7 +3965,7 @@ } }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "BE-17-C8-C7-DF-FD" @@ -3997,10 +3997,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478257.084985274 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478257.084985274 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-DF-FD" @@ -4032,7 +4032,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478256.341194724 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478256.341194724 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4040,7 +4040,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-DF-FD" @@ -4072,7 +4072,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478221.255609741 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478221.255609741 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4080,7 +4080,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-E2-9D" @@ -4112,7 +4112,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478145.758483684 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -4120,7 +4120,7 @@ } }, "observer": { - "hostname": "Nash_AP_4" + "hostname": "MX84_4" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -4152,10 +4152,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478121.589518727 Nash_AP_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "Nash_AP_2" + "hostname": "MX84_2" }, "source": { "mac": "AC-17-C8-C7-E1-41" @@ -4187,7 +4187,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478119.868477795 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478119.868477795 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4195,7 +4195,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "BE-17-D8-C7-D8-51" @@ -4227,10 +4227,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478114.277373007 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478114.277373007 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -4262,7 +4262,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478105.395836204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478105.395836204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4270,7 +4270,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-D8-51" @@ -4302,7 +4302,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478102.536782923 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478102.536782923 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -4310,7 +4310,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-E1-41" @@ -4342,7 +4342,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478092.108472035 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478092.108472035 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4350,7 +4350,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "BE-17-C8-C7-E1-41" @@ -4382,7 +4382,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478087.649007204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478087.649007204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4390,7 +4390,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-E2-9D" @@ -4422,7 +4422,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478063.434847715 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478063.434847715 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4430,7 +4430,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "AC-17-C8-C7-E1-41" @@ -4462,7 +4462,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478054.846444450 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647478054.846444450 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -4470,7 +4470,7 @@ } }, "observer": { - "hostname": "Nash_AP_4" + "hostname": "MX84_4" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -4502,7 +4502,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478039.876640835 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478039.876640835 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4510,7 +4510,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "AC-17-C8-C7-E2-9D" @@ -4542,7 +4542,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478035.923601924 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478035.923601924 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4550,7 +4550,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -4582,7 +4582,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478034.762765475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478034.762765475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4590,7 +4590,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "AA-17-C8-C7-E1-41" @@ -4622,7 +4622,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478026.502834244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478026.502834244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4630,7 +4630,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -4662,7 +4662,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478020.564810050 Nash_AP_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478020.564810050 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4670,7 +4670,7 @@ } }, "observer": { - "hostname": "Nash_AP_8" + "hostname": "MX84_8" }, "source": { "mac": "BE-17-C8-C7-E1-41" @@ -4702,7 +4702,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478015.983013635 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478015.983013635 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4710,7 +4710,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -4742,7 +4742,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478006.707247789 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478006.707247789 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4750,7 +4750,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-E1-41" @@ -4782,7 +4782,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478001.603867573 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647478001.603867573 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4790,7 +4790,7 @@ } }, "observer": { - "hostname": "Nash_AP_3" + "hostname": "MX84_3" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -4822,7 +4822,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477963.236026884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477963.236026884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4830,7 +4830,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -4862,7 +4862,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477958.900449163 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477958.900449163 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4870,7 +4870,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-E2-9D" @@ -4902,7 +4902,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477953.907583508 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477953.907583508 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -4910,7 +4910,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -4942,7 +4942,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477953.724449475 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477953.724449475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -4950,7 +4950,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -4982,7 +4982,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477945.336342244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477945.336342244 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -4990,7 +4990,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -5022,7 +5022,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477944.121686758 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477944.121686758 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -5030,7 +5030,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -5062,10 +5062,10 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477940.363429956 KT_Nashville_wireless airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477940.363429956 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5'" }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -5097,7 +5097,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477930.038516204 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477930.038516204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5105,7 +5105,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -5137,7 +5137,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477927.225784460 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477927.225784460 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5145,7 +5145,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-DF-FD" @@ -5177,7 +5177,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477920.683178115 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477920.683178115 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5185,7 +5185,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -5217,7 +5217,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477920.510699794 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477920.510699794 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5225,7 +5225,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -5257,7 +5257,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477891.986568005 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477891.986568005 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5265,7 +5265,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -5297,7 +5297,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477881.304873506 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477881.304873506 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5305,7 +5305,7 @@ } }, "observer": { - "hostname": "Nash_AP_4" + "hostname": "MX84_4" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -5337,7 +5337,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477873.769683395 Nash_AP_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5345,7 +5345,7 @@ } }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -5377,7 +5377,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477872.782332783 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477872.782332783 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5385,7 +5385,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -5417,7 +5417,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477871.675119845 Nash_AP_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477871.675119845 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -5425,7 +5425,7 @@ } }, "observer": { - "hostname": "Nash_AP_6" + "hostname": "MX84_6" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -5457,7 +5457,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477864.088023180 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477864.088023180 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5465,7 +5465,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-E1-41" @@ -5497,7 +5497,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477834.810489249 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477834.810489249 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5505,7 +5505,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-E2-9D" @@ -5537,7 +5537,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477828.886032606 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477828.886032606 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5545,7 +5545,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -5577,7 +5577,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477828.885258686 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477828.885258686 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5585,7 +5585,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -5617,7 +5617,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477828.799864712 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477828.799864712 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5625,7 +5625,7 @@ } }, "observer": { - "hostname": "Nash_AP_5" + "hostname": "MX84_5" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -5657,7 +5657,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477825.209110701 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477825.209110701 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5665,7 +5665,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -5697,7 +5697,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477825.021409913 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477825.021409913 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -5705,7 +5705,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -5737,7 +5737,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477825.024707684 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477825.024707684 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -5745,7 +5745,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -5777,7 +5777,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477821.364087032 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477821.364087032 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5785,7 +5785,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-E1-41" @@ -5817,7 +5817,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477796.382660565 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477796.382660565 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5825,7 +5825,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -5857,7 +5857,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477796.382227661 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477796.382227661 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5865,7 +5865,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -5897,7 +5897,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477796.381818586 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477796.381818586 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5905,7 +5905,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -5937,7 +5937,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477795.407019364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477795.407019364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5945,7 +5945,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-D8-51" @@ -5977,7 +5977,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477795.385494917 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477795.385494917 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -5985,7 +5985,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -6017,7 +6017,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477795.385835866 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477795.385835866 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6025,7 +6025,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -6057,7 +6057,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477793.576467473 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477793.576467473 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6065,7 +6065,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AE-17-D8-C7-DF-FD" @@ -6097,7 +6097,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477793.576769233 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477793.576769233 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6105,7 +6105,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-D8-C7-DF-FD" @@ -6137,7 +6137,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477786.805604872 Nash_AP_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477786.805604872 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6145,7 +6145,7 @@ } }, "observer": { - "hostname": "Nash_AP_5" + "hostname": "MX84_5" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -6177,7 +6177,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477780.705460109 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477780.705460109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6185,7 +6185,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-DF-FD" @@ -6217,7 +6217,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477778.398160444 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477778.398160444 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6225,7 +6225,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-E2-9D" @@ -6257,7 +6257,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477773.586461164 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477773.586461164 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -6265,7 +6265,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -6297,7 +6297,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477764.149946084 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477764.149946084 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6305,7 +6305,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "BE-17-D8-C7-E1-41" @@ -6337,7 +6337,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477764.145077176 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477764.145077176 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6345,7 +6345,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-E1-41" @@ -6377,7 +6377,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477764.143985243 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477764.143985243 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6385,7 +6385,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AE-17-D8-C7-E1-41" @@ -6417,7 +6417,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477764.144283174 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477764.144283174 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6425,7 +6425,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-D8-C7-E1-41" @@ -6457,7 +6457,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477763.225832662 Nash_AP_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477763.225832662 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -6465,7 +6465,7 @@ } }, "observer": { - "hostname": "Nash_AP_4" + "hostname": "MX84_4" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -6497,7 +6497,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477744.039850991 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477744.039850991 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -6505,7 +6505,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -6537,7 +6537,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477733.453967364 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477733.453967364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6545,7 +6545,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -6577,7 +6577,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477733.446493073 Nash_AP_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477733.446493073 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6585,7 +6585,7 @@ } }, "observer": { - "hostname": "Nash_AP_3" + "hostname": "MX84_3" }, "source": { "mac": "BE-17-D8-C7-D8-51" @@ -6617,7 +6617,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477733.420037284 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477733.420037284 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -6625,7 +6625,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -6657,7 +6657,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477733.419042244 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477733.419042244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -6665,7 +6665,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -6697,7 +6697,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477733.411410011 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477733.411410011 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -6705,7 +6705,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -6737,7 +6737,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477716.431936901 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477716.431936901 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -6745,7 +6745,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -6777,7 +6777,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477716.431151781 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477716.431151781 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -6785,7 +6785,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -6817,7 +6817,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477716.429168101 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477716.429168101 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -6825,7 +6825,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -6857,7 +6857,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477715.612600884 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" + "original": "\u003c134\u003e1 1647477715.612600884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" }, "network": { "vlan": { @@ -6865,7 +6865,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "AC-17-C8-C7-E2-9D" @@ -6897,7 +6897,7 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477702.046252324 KT_Nashville_wireless airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5'" + "original": "\u003c134\u003e1 1647477702.046252324 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5'" }, "network": { "vlan": { @@ -6905,7 +6905,7 @@ } }, "observer": { - "hostname": "KT_Nashville_wireless" + "hostname": "MX84" }, "source": { "mac": "92-17-D8-C7-E1-41" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index 1cf7d4fa30b..1cafef859ce 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -3,6 +3,7 @@ { "@timestamp": "2022-03-17T01:03:08.289Z", "cisco_meraki": { + "device_type": "MR", "event_type": "flows", "flows": { "op": "allow" @@ -16,13 +17,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478988.289402144 Nash_AP_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600" + "original": "\u003c134\u003e1 1647478988.289402144 MX84_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600" }, "network": { "protocol": "udp" }, "observer": { - "hostname": "Nash_AP_4" + "hostname": "MX84_4" }, "source": { "ip": "10.0.2.170", @@ -37,6 +38,7 @@ { "@timestamp": "2022-03-17T01:03:08.476Z", "cisco_meraki": { + "device_type": "MX", "event_type": "flows" }, "destination": { @@ -47,13 +49,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478988.476061795 ATT_Primary flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all" + "original": "\u003c134\u003e1 1647478988.476061795 MX84 flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all" }, "network": { "protocol": "tcp" }, "observer": { - "hostname": "ATT_Primary" + "hostname": "MX84" }, "source": { "ip": "216.160.83.57", @@ -67,6 +69,7 @@ { "@timestamp": "2022-03-17T01:03:08.596Z", "cisco_meraki": { + "device_type": "MR", "event_type": "flows", "flows": { "op": "allow" @@ -80,13 +83,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478988.596151424 Nash_AP_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500" + "original": "\u003c134\u003e1 1647478988.596151424 MX84_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500" }, "network": { "protocol": "tcp" }, "observer": { - "hostname": "Nash_AP_7" + "hostname": "MX84_7" }, "source": { "ip": "10.0.0.34", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json index 51ed7974d1e..4e8eee36b54 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json @@ -25,13 +25,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479278.997155282 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294" + "original": "\u003c134\u003e1 1647479278.997155282 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294" }, "network": { "protocol": "tcp" }, "observer": { - "hostname": "Nashville_MX100" + "hostname": "MX100" }, "source": { "as": { @@ -73,13 +73,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479278.995279215 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061" + "original": "\u003c134\u003e1 1647479278.995279215 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061" }, "network": { "protocol": "udp" }, "observer": { - "hostname": "Nashville_MX100" + "hostname": "MX100" }, "source": { "as": { @@ -121,13 +121,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479278.974067126 Nashville_MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401" + "original": "\u003c134\u003e1 1647479278.974067126 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401" }, "network": { "protocol": "udp" }, "observer": { - "hostname": "Nashville_MX100" + "hostname": "MX100" }, "source": { "as": { @@ -175,13 +175,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479278.911594876 ATT_Primary ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272" + "original": "\u003c134\u003e1 1647479278.911594876 MX84 ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272" }, "network": { "protocol": "tcp" }, "observer": { - "hostname": "ATT_Primary" + "hostname": "MX84" }, "source": { "as": { @@ -238,13 +238,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479325.891451682 ATT_Primary ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" + "original": "\u003c134\u003e1 1647479325.891451682 MX84 ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" }, "network": { "protocol": "udp" }, "observer": { - "hostname": "ATT_Primary" + "hostname": "MX84" }, "source": { "ip": "10.0.2.249", @@ -280,13 +280,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479325.842384731 ATT_Primary ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422" + "original": "\u003c134\u003e1 1647479325.842384731 MX84 ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422" }, "network": { "protocol": "udp" }, "observer": { - "hostname": "ATT_Primary" + "hostname": "MX84" }, "source": { "as": { @@ -343,13 +343,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479325.842377481 ATT_Primary ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" + "original": "\u003c134\u003e1 1647479325.842377481 MX84 ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" }, "network": { "protocol": "udp" }, "observer": { - "hostname": "ATT_Primary" + "hostname": "MX84" }, "source": { "ip": "10.0.2.99", @@ -385,13 +385,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479325.755292025 Nashville_MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498" + "original": "\u003c134\u003e1 1647479325.755292025 MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498" }, "network": { "protocol": "tcp" }, "observer": { - "hostname": "Nashville_MX100" + "hostname": "MX100" }, "source": { "as": { diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml index 2b32c168de4..7ea78225496 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml @@ -42,3 +42,11 @@ processors: pattern: '[-:.]' replacement: '-' if: ctx._temp.token.startsWith("src=") == false +- set: + field: cisco_meraki.device_type + value: MR + if: ctx._temp.token.startsWith("src=") == false +- set: + field: cisco_meraki.device_type + value: MX + if: ctx._temp.token.startsWith("src=") == true From f5184d10af79dcb7e602c63d671bb449391ca335 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 28 Mar 2022 12:52:15 +1100 Subject: [PATCH 20/67] Update README; Disable webhook events by default; only enable syslog UDP by default --- .../cisco_meraki/_dev/build/docs/README.md | 53 +- .../data_stream/events/manifest.yml | 4 +- packages/cisco_meraki/docs/README.md | 555 +++++++++++++++++- 3 files changed, 598 insertions(+), 14 deletions(-) diff --git a/packages/cisco_meraki/_dev/build/docs/README.md b/packages/cisco_meraki/_dev/build/docs/README.md index a38276567ef..d22c8c48374 100644 --- a/packages/cisco_meraki/_dev/build/docs/README.md +++ b/packages/cisco_meraki/_dev/build/docs/README.md @@ -1,23 +1,64 @@ # Cisco Meraki Syslog Integration -Cisco Meraki is the leader in cloud controlled Wi-Fi, routing, and security. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. +Cisco Meraki offers a centralized cloud management platform for all Meraki devices such as MX Security Appliances, MR Access Points and so on. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. -The Cisco Meraki Syslog integration package allows you to search, observe and visualize the Cisco Meraki Syslog events through Elasticsearch. Cisco Meraki Syslog sends events for "Meraki MX Security Appliance", "Meraki MS Switches" and "Meraki MR Access Points". +Cisco Meraki offers [several methods for device reporting](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API). This integration supports gathering events via the Cisco Meraki Syslog events and API reporting (via Webhooks). ## Compatibility -A syslog server can be configured to store messages for reporting purposes from MX Security Appliances, MR Access Points, and MS switches. This package collects events from the configured syslog server. +A syslog server can be configured to store messages for reporting purposes from MX Security Appliances, MR Access Points, and MS switches. This package collects events from the configured syslog server. The integration supports collection of events from "MX Security Appliances" and "MR Access Points". The "MS Switch" events are not recognized. ## Configuration +### Enabling the integration in Elastic + +1. In Kibana go to **Management > Integrations** +2. In "Search for integrations" search bar type **Meraki** +3. Click on "Cisco Meraki" integration from the search results. +4. Click on **Add Cisco Meraki Integration** button to add the integration. + +### Cisco Meraki Dashboard Configuration + +#### Syslog + Cisco Meraki dashboard can be used to configure one or more syslog servers and Meraki message types to be sent to the syslog servers. Refer to [Syslog Server Overview and Configuration](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration#Configuring_a_Syslog_Server) page for more information on how to configure syslog server on Cisco Meraki. -### Syslog Events +#### API Endpoint (Webhooks) + +Cisco Meraki dashboard can be used to configure Meraki webhooks. Refer to the [Webhooks Dashboard Setup](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API#Webhooks_Dashboard_Setup) section. + +### Configure the Cisco Meraki integration + +#### Syslog + +Depending on the syslog server setup in your environment check one/more of the following options "Collect syslog from Cisco Meraki via UDP", "Collect syslog from Cisco Meraki via TCP", "Collect syslog from Cisco Meraki via file". + +Enter the values for syslog host and port OR file path based on the chosen configuration options. -Enable to collect Meraki syslog events from the specified syslog server. +### API Endpoint (Webhooks) + +Check the option "Collect events from Cisco Meraki via Webhooks" option. + +1. Enter values for "Listen Address", "Listen Port" and "Webhook path" to form the endpoint URL. Make note of the **Endpoint URL** https://{AGENT_ADDRESS}:8686/meraki/events. +2. Enter value for "Secret value". This must match the "Shared Secret" value entered when configuring the webhook from Meraki cloud. +3. Enter values for "TLS". Cisco Meraki requires that the webhook accept requests over HTTPS. So you must either configure the integration with a valid TLS certificate or use a reverse proxy in front of the integration. + +### Log Events + +Enable to collect Cisco Meraki log events for all the applications configured for the chosen log stream. ## Logs ### Syslog -The Meraki syslog dataset provides events from the configured syslog server. All Cisco Meraki syslog specific fields are available in the `meraki.syslog` field group. +The `cisco_meraki.log` dataset provides events from the configured syslog server. All Cisco Meraki syslog specific fields are available in the `cisco_meraki.log` field group. + +{{fields "log"}} + +{{event "log"}} + +### API Endpoint (Webhooks) + +{{fields "events"}} + +{{event "events"}} diff --git a/packages/cisco_meraki/data_stream/events/manifest.yml b/packages/cisco_meraki/data_stream/events/manifest.yml index 088914999bd..108abeda59e 100644 --- a/packages/cisco_meraki/data_stream/events/manifest.yml +++ b/packages/cisco_meraki/data_stream/events/manifest.yml @@ -1,4 +1,4 @@ -title: "Cisco Meraki webhook events" +title: Cisco Meraki webhook events release: experimental type: logs streams: @@ -6,6 +6,7 @@ streams: title: Cisco Meraki webhook events description: Receives events from Cisco Meraki webhook template_path: http_endpoint.yml.hbs + enabled: false vars: - name: listen_address type: text @@ -72,4 +73,3 @@ streams: show_user: false description: > Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. - diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index a38276567ef..1208ad03cce 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -1,23 +1,566 @@ # Cisco Meraki Syslog Integration -Cisco Meraki is the leader in cloud controlled Wi-Fi, routing, and security. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. +Cisco Meraki offers a centralized cloud management platform for all Meraki devices such as MX Security Appliances, MR Access Points and so on. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. -The Cisco Meraki Syslog integration package allows you to search, observe and visualize the Cisco Meraki Syslog events through Elasticsearch. Cisco Meraki Syslog sends events for "Meraki MX Security Appliance", "Meraki MS Switches" and "Meraki MR Access Points". +Cisco Meraki offers [several methods for device reporting](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API). This integration supports gathering events via the Cisco Meraki Syslog events and API reporting (via Webhooks). ## Compatibility -A syslog server can be configured to store messages for reporting purposes from MX Security Appliances, MR Access Points, and MS switches. This package collects events from the configured syslog server. +A syslog server can be configured to store messages for reporting purposes from MX Security Appliances, MR Access Points, and MS switches. This package collects events from the configured syslog server. The integration supports collection of events from "MX Security Appliances" and "MR Access Points". The "MS Switch" events are not recognized. ## Configuration +### Enabling the integration in Elastic + +1. In Kibana go to **Management > Integrations** +2. In "Search for integrations" search bar type **Meraki** +3. Click on "Cisco Meraki" integration from the search results. +4. Click on **Add Cisco Meraki Integration** button to add the integration. + +### Cisco Meraki Dashboard Configuration + +#### Syslog + Cisco Meraki dashboard can be used to configure one or more syslog servers and Meraki message types to be sent to the syslog servers. Refer to [Syslog Server Overview and Configuration](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration#Configuring_a_Syslog_Server) page for more information on how to configure syslog server on Cisco Meraki. -### Syslog Events +#### API Endpoint (Webhooks) + +Cisco Meraki dashboard can be used to configure Meraki webhooks. Refer to the [Webhooks Dashboard Setup](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API#Webhooks_Dashboard_Setup) section. + +### Configure the Cisco Meraki integration + +#### Syslog + +Depending on the syslog server setup in your environment check one/more of the following options "Collect syslog from Cisco Meraki via UDP", "Collect syslog from Cisco Meraki via TCP", "Collect syslog from Cisco Meraki via file". + +Enter the values for syslog host and port OR file path based on the chosen configuration options. + +### API Endpoint (Webhooks) + +Check the option "Collect events from Cisco Meraki via Webhooks" option. + +1. Enter values for "Listen Address", "Listen Port" and "Webhook path" to form the endpoint URL. Make note of the **Endpoint URL** https://{AGENT_ADDRESS}:8686/meraki/events. +2. Enter value for "Secret value". This must match the "Shared Secret" value entered when configuring the webhook from Meraki cloud. +3. Enter values for "TLS". Cisco Meraki requires that the webhook accept requests over HTTPS. So you must either configure the integration with a valid TLS certificate or use a reverse proxy in front of the integration. -Enable to collect Meraki syslog events from the specified syslog server. +### Log Events + +Enable to collect Cisco Meraki log events for all the applications configured for the chosen log stream. ## Logs ### Syslog -The Meraki syslog dataset provides events from the configured syslog server. All Cisco Meraki syslog specific fields are available in the `meraki.syslog` field group. +The `cisco_meraki.log` dataset provides events from the configured syslog server. All Cisco Meraki syslog specific fields are available in the `cisco_meraki.log` field group. + +**Exported fields** + +| Field | Description | Type | +|---|---|---| +| @timestamp | Event timestamp. | date | +| cisco_meraki.8021x_deauth | | flattened | +| cisco_meraki.8021x_eap_failure | | flattened | +| cisco_meraki.8021x_eap_success | | flattened | +| cisco_meraki.airmarshal.bssid | | keyword | +| cisco_meraki.airmarshal.channel | | keyword | +| cisco_meraki.airmarshal.fc_subtype | | keyword | +| cisco_meraki.airmarshal.fc_type | | keyword | +| cisco_meraki.airmarshal.ssid | | keyword | +| cisco_meraki.airmarshal.vap | | keyword | +| cisco_meraki.airmarshal.wired_mac | | keyword | +| cisco_meraki.association | | flattened | +| cisco_meraki.device_packet_flood | | flattened | +| cisco_meraki.device_type | | keyword | +| cisco_meraki.dfs_event | | flattened | +| cisco_meraki.disassociation | | flattened | +| cisco_meraki.event_subtype | | keyword | +| cisco_meraki.event_type | | keyword | +| cisco_meraki.flows | | flattened | +| cisco_meraki.security.action | | keyword | +| cisco_meraki.security.decision | | keyword | +| cisco_meraki.security.dhost | | keyword | +| cisco_meraki.security.mac | | keyword | +| cisco_meraki.security.priority | | keyword | +| cisco_meraki.security.signature | | keyword | +| cisco_meraki.site_to_site_vpn.connectivity_change | | flattened | +| cisco_meraki.site_to_site_vpn.raw | | text | +| cisco_meraki.splash_auth | | flattened | +| cisco_meraki.urls.mac | | keyword | +| cisco_meraki.wpa_auth | | flattened | +| cisco_meraki.wpa_deauth | | flattened | +| client.domain | The domain name of the client system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| client.geo.city_name | City name. | keyword | +| client.geo.continent_name | Name of the continent. | keyword | +| client.geo.country_iso_code | Country ISO code. | keyword | +| client.geo.country_name | Country name. | keyword | +| client.geo.location.lat | Longitude and latitude. | geo_point | +| client.geo.location.lon | Longitude and latitude. | geo_point | +| client.geo.region_iso_code | Region ISO code. | keyword | +| client.geo.region_name | Region name. | keyword | +| client.ip | IP address of the client (IPv4 or IPv6). | ip | +| client.mac | MAC address of the client. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | +| client.registered_domain | The highest registered client domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| client.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | +| client.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| container.id | Unique container id. | keyword | +| data_stream.dataset | Data stream dataset. | constant_keyword | +| data_stream.namespace | Data stream namespace. | constant_keyword | +| data_stream.type | Data stream type. | constant_keyword | +| destination.address | Some event destination addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword | +| destination.as.number | Unique number allocated to the autonomous system. The autonomous system number (ASN) uniquely identifies each network on the Internet. | long | +| destination.as.organization.name | Organization name. | keyword | +| destination.bytes | Bytes sent from the destination to the source. | long | +| destination.domain | The domain name of the destination system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| destination.geo.city_name | City name. | keyword | +| destination.geo.continent_name | Name of the continent. | keyword | +| destination.geo.country_iso_code | Country ISO code. | keyword | +| destination.geo.country_name | Country name. | keyword | +| destination.geo.location | Longitude and latitude. | geo_point | +| destination.geo.region_iso_code | Region ISO code. | keyword | +| destination.geo.region_name | Region name. | keyword | +| destination.ip | IP address of the destination (IPv4 or IPv6). | ip | +| destination.mac | MAC address of the destination. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | +| destination.nat.ip | Translated ip of destination based NAT sessions (e.g. internet to private DMZ) Typically used with load balancers, firewalls, or routers. | ip | +| destination.nat.port | Port the source session is translated to by NAT Device. Typically used with load balancers, firewalls, or routers. | long | +| destination.port | Port of the destination. | long | +| destination.registered_domain | The highest registered destination domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| destination.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | +| destination.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| dns.answers.name | The domain name to which this resource record pertains. If a chain of CNAME is being resolved, each answer's `name` should be the one that corresponds with the answer's `data`. It should not simply be the original `question.name` repeated. | keyword | +| dns.answers.type | The type of data contained in this resource record. | keyword | +| dns.question.registered_domain | The highest registered domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| dns.question.subdomain | The subdomain is all of the labels under the registered_domain. If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | +| dns.question.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| dns.question.type | The type of record being queried. | keyword | +| ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword | +| error.message | Error message. | match_only_text | +| event.action | The action captured by the event. This describes the information in the event. It is more specific than `event.category`. Examples are `group-add`, `process-started`, `file-created`. The value is normally defined by the implementer. | keyword | +| event.code | Identification code for this event, if one exists. Some event sources use event codes to identify messages unambiguously, regardless of message language or wording adjustments over time. An example of this is the Windows Event ID. | keyword | +| event.dataset | Event dataset | constant_keyword | +| event.ingested | Timestamp when an event arrived in the central data store. This is different from `@timestamp`, which is when the event originally occurred. It's also different from `event.created`, which is meant to capture the first time an agent saw the event. In normal conditions, assuming no tampering, the timestamps should chronologically look like this: `@timestamp` \< `event.created` \< `event.ingested`. | date | +| event.module | Event module | constant_keyword | +| event.original | Raw text message of entire event. Used to demonstrate log integrity or where the full log message (before splitting it up in multiple parts) may be required, e.g. for reindex. This field is not indexed and doc_values are disabled. It cannot be searched, but it can be retrieved from `_source`. If users wish to override this and index this field, please see `Field data types` in the `Elasticsearch Reference`. | keyword | +| event.outcome | This is one of four ECS Categorization Fields, and indicates the lowest level in the ECS category hierarchy. `event.outcome` simply denotes whether the event represents a success or a failure from the perspective of the entity that produced the event. Note that when a single transaction is described in multiple events, each event may populate different values of `event.outcome`, according to their perspective. Also note that in the case of a compound event (a single event that contains multiple logical events), this field should be populated with the value that best captures the overall success or failure from the perspective of the event producer. Further note that not all events will have an associated outcome. For example, this field is generally not populated for metric events, events with `event.type:info`, or any events for which an outcome does not make logical sense. | keyword | +| event.timezone | This field should be populated when the event's timestamp does not include timezone information already (e.g. default Syslog timestamps). It's optional otherwise. Acceptable timezone formats are: a canonical ID (e.g. "Europe/Amsterdam"), abbreviated (e.g. "EST") or an HH:mm differential (e.g. "-05:00"). | keyword | +| file.attributes | Array of file attributes. Attributes names will vary by platform. Here's a non-exhaustive list of values that are expected in this field: archive, compressed, directory, encrypted, execute, hidden, read, readonly, system, write. | keyword | +| file.directory | Directory where the file is located. It should include the drive letter, when appropriate. | keyword | +| file.extension | File extension, excluding the leading dot. Note that when the file name has multiple extensions (example.tar.gz), only the last one should be captured ("gz", not "tar.gz"). | keyword | +| file.name | Name of the file including the extension, without the directory. | keyword | +| file.path | Full path to the file, including the file name. It should include the drive letter, when appropriate. | keyword | +| file.size | File size in bytes. Only relevant when `file.type` is "file". | long | +| file.type | File type (file, dir, or symlink). | keyword | +| geo.city_name | City name. | keyword | +| geo.country_name | Country name. | keyword | +| geo.name | User-defined description of a location, at the level of granularity they care about. Could be the name of their data centers, the floor number, if this describes a local physical entity, city names. Not typically used in automated geolocation. | keyword | +| geo.region_name | Region name. | keyword | +| group.id | Unique identifier for the group on the system/platform. | keyword | +| group.name | Name of the group. | keyword | +| host.hostname | Hostname of the host. It normally contains what the `hostname` command returns on the host machine. | keyword | +| host.ip | Host ip addresses. | ip | +| host.mac | Host MAC addresses. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | +| host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | +| http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | +| http.request.referrer | Referrer for this HTTP request. | keyword | +| input.type | Input type. | keyword | +| log.file.path | Full path to the log file this event came from. | keyword | +| log.flags | Flags for the log file. | keyword | +| log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | +| log.offset | Offset of the entry in the log file. | long | +| log.source.address | Source address from which the log event was read / sent from. | keyword | +| log.syslog.facility.code | The Syslog numeric facility of the log event, if available. According to RFCs 5424 and 3164, this value should be an integer between 0 and 23. | long | +| log.syslog.priority | Syslog numeric priority of the event, if available. According to RFCs 5424 and 3164, the priority is 8 \* facility + severity. This number is therefore expected to contain a value between 0 and 191. | long | +| log.syslog.severity.code | The Syslog numeric severity of the log event, if available. If the event source publishing via Syslog provides a different numeric severity value (e.g. firewall, IDS), your source's numeric severity should go to `event.severity`. If the event source does not specify a distinct severity, you can optionally copy the Syslog severity to `event.severity`. | long | +| message | For log events the message field contains the log message, optimized for viewing in a log viewer. For structured logs without an original message field, other fields can be concatenated to form a human-readable summary of the event. If multiple messages exist, they can be combined into one message. | match_only_text | +| network.application | When a specific application or service is identified from network connection details (source/dest IPs, ports, certificates, or wire format), this field captures the application's or service's name. For example, the original event identifies the network connection being from a specific web service in a `https` network connection, like `facebook` or `twitter`. The field value must be normalized to lowercase for querying. | keyword | +| network.bytes | Total bytes transferred in both directions. If `source.bytes` and `destination.bytes` are known, `network.bytes` is their sum. | long | +| network.direction | Direction of the network traffic. Recommended values are: \* ingress \* egress \* inbound \* outbound \* internal \* external \* unknown When mapping events from a host-based monitoring context, populate this field from the host's point of view, using the values "ingress" or "egress". When mapping events from a network or perimeter-based monitoring context, populate this field from the point of view of the network perimeter, using the values "inbound", "outbound", "internal" or "external". Note that "internal" is not crossing perimeter boundaries, and is meant to describe communication between two hosts within the perimeter. Note also that "external" is meant to describe traffic between two hosts that are external to the perimeter. This could for example be useful for ISPs or VPN service providers. | keyword | +| network.forwarded_ip | Host IP address when the source IP address is the proxy. | ip | +| network.packets | Total packets transferred in both directions. If `source.packets` and `destination.packets` are known, `network.packets` is their sum. | long | +| network.protocol | In the OSI Model this would be the Application Layer protocol. For example, `http`, `dns`, or `ssh`. The field value must be normalized to lowercase for querying. | keyword | +| network.vlan.id | VLAN ID as reported by the observer. | keyword | +| observer.egress.interface.name | Interface name as reported by the system. | keyword | +| observer.hostname | Hostname of the observer. | keyword | +| observer.ingress.interface.name | Interface name as reported by the system. | keyword | +| observer.product | The product name of the observer. | keyword | +| observer.type | The type of the observer the data is coming from. There is no predefined list of observer types. Some examples are `forwarder`, `firewall`, `ids`, `ips`, `proxy`, `poller`, `sensor`, `APM server`. | keyword | +| observer.vendor | Vendor name of the observer. | keyword | +| observer.version | Observer version. | keyword | +| process.name | Process name. Sometimes called program name or similar. | keyword | +| process.parent.name | Process name. Sometimes called program name or similar. | keyword | +| process.parent.pid | Process id. | long | +| process.parent.title | Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | keyword | +| process.pid | Process id. | long | +| process.title | Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | keyword | +| related.hosts | All hostnames or other host identifiers seen on your event. Example identifiers include FQDNs, domain names, workstation names, or aliases. | keyword | +| related.ip | All of the IPs seen on your event. | ip | +| related.user | All the user names or other user identifiers seen on the event. | keyword | +| rule.name | The name of the rule or signature generating the event. | keyword | +| server.domain | The domain name of the server system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| server.mac | MAC address of the server. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | +| server.registered_domain | The highest registered server domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| server.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | +| server.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| service.name | Name of the service data is collected from. The name of the service is normally user given. This allows for distributed services that run on multiple hosts to correlate the related instances based on the name. In the case of Elasticsearch the `service.name` could contain the cluster name. For Beats the `service.name` is by default a copy of the `service.type` field if no name is specified. | keyword | +| source.address | Some event source addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword | +| source.as.number | Unique number allocated to the autonomous system. The autonomous system number (ASN) uniquely identifies each network on the Internet. | long | +| source.as.organization.name | Organization name. | keyword | +| source.bytes | Bytes sent from the source to the destination. | long | +| source.domain | The domain name of the source system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| source.geo.city_name | City name. | keyword | +| source.geo.continent_name | Name of the continent. | keyword | +| source.geo.country_iso_code | Country ISO code. | keyword | +| source.geo.country_name | Country name. | keyword | +| source.geo.location | Longitude and latitude. | geo_point | +| source.geo.region_iso_code | Region ISO code. | keyword | +| source.geo.region_name | Region name. | keyword | +| source.ip | IP address of the source (IPv4 or IPv6). | ip | +| source.mac | MAC address of the source. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | +| source.nat.ip | Translated ip of source based NAT sessions (e.g. internal client to internet) Typically connections traversing load balancers, firewalls, or routers. | ip | +| source.nat.port | Translated port of source based NAT sessions. (e.g. internal client to internet) Typically used with load balancers, firewalls, or routers. | long | +| source.port | Port of the source. | long | +| source.registered_domain | The highest registered source domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| source.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | +| source.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| tags | List of keywords used to tag each event. | keyword | +| threat.enrichments.indicator.file.hash.sha256 | SHA256 hash. | keyword | +| threat.enrichments.indicator.file.name | Name of the file including the extension, without the directory. | keyword | +| threat.indicator.description | Describes the type of action conducted by the threat. | keyword | +| threat.indicator.last_seen | The date and time when intelligence source last reported sighting this indicator. | date | +| threat.indicator.reference | Reference URL linking to additional information about this indicator. | keyword | +| threat.software.type | The type of software used by this threat to conduct behavior commonly modeled using MITRE ATT&CK®. Recommended values \* Malware \* Tool While not required, you can use a MITRE ATT&CK® software type. | keyword | +| url.domain | Domain of the url, such as "www.elastic.co". In some cases a URL may refer to an IP and/or port directly, without a domain name. In this case, the IP address would go to the `domain` field. If the URL contains a literal IPv6 address enclosed by `[` and `]` (IETF RFC 2732), the `[` and `]` characters should also be captured in the `domain` field. | keyword | +| url.original | Unmodified original url as seen in the event source. Note that in network monitoring, the observed URL may be a full URL, whereas in access logs, the URL is often just represented as a path. This field is meant to represent the URL as it was observed, complete or not. | wildcard | +| url.path | Path of the request, such as "/search". | wildcard | +| url.query | The query field describes the query string of the request, such as "q=elasticsearch". The `?` is excluded from the query string. If a URL contains no `?`, there is no query field. If there is a `?` but no query, the query field exists with an empty string. The `exists` query can be used to differentiate between the two cases. | keyword | +| url.registered_domain | The highest registered url domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| url.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| user.domain | Name of the directory the user is a member of. For example, an LDAP or Active Directory domain name. | keyword | +| user.full_name | User's full name, if available. | keyword | +| user.id | Unique identifier of the user. | keyword | +| user.name | Short name or login of the user. | keyword | +| user_agent.original | Unparsed user_agent string. | keyword | + + +An example event for `log` looks as following: + +```json +{ + "@timestamp": "2021-11-23T18:13:18.348Z", + "agent": { + "ephemeral_id": "608bab32-5db5-4c16-9004-3328b2f4a73a", + "hostname": "docker-fleet-agent", + "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "name": "docker-fleet-agent", + "type": "filebeat", + "version": "7.17.0" + }, + "cisco_meraki": { + "device_type": "MR", + "event_subtype": "ids_alerted", + "event_type": "security_event", + "security": { + "decision": "allowed", + "dhost": "D0-AB-D5-7B-43-73", + "priority": "1", + "signature": "1:29708:4" + } + }, + "data_stream": { + "dataset": "cisco_meraki.log", + "namespace": "ep", + "type": "logs" + }, + "destination": { + "ip": "10.0.3.162", + "port": 56391 + }, + "ecs": { + "version": "8.0.0" + }, + "elastic_agent": { + "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "snapshot": false, + "version": "7.17.0" + }, + "event": { + "agent_id_status": "verified", + "dataset": "cisco_meraki.log", + "ingested": "2022-03-27T06:45:39Z", + "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected" + }, + "input": { + "type": "udp" + }, + "log": { + "source": { + "address": "172.22.0.5:35310" + } + }, + "network": { + "direction": "ingress", + "protocol": "tcp/ip" + }, + "observer": { + "hostname": "MX84" + }, + "source": { + "as": { + "number": 35908 + }, + "geo": { + "continent_name": "Asia", + "country_iso_code": "BT", + "country_name": "Bhutan", + "location": { + "lat": 27.5, + "lon": 90.5 + } + }, + "ip": "67.43.156.12", + "port": 80 + }, + "tags": [ + "preserve_original_event", + "cisco-meraki", + "forwarded" + ], + "threat": { + "indicator": { + "description": " BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", + "last_seen": "1637691198.330873" + } + } +} +``` + +### API Endpoint (Webhooks) + +**Exported fields** + +| Field | Description | Type | +|---|---|---| +| @timestamp | Date/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. | date | +| cisco_meraki.event.alertData | Additional alert data (differs based on alert type) | flattened | +| cisco_meraki.event.alertId | ID for this alert message | keyword | +| cisco_meraki.event.alertLevel | Alert level (informational, critical etc.) | keyword | +| cisco_meraki.event.alertType | Type of alert (“Network usage alert”, “Settings changed”, etc.) | keyword | +| cisco_meraki.event.alertTypeId | Unique ID for the type of alert | keyword | +| cisco_meraki.event.deviceMac | MAC address of the Meraki device | keyword | +| cisco_meraki.event.deviceModel | Meraki device model | keyword | +| cisco_meraki.event.deviceName | Name assigned to the Meraki device | keyword | +| cisco_meraki.event.deviceSerial | Serial number of the Meraki device | keyword | +| cisco_meraki.event.deviceTags | Tags assigned to the Meraki device | keyword | +| cisco_meraki.event.deviceUrl | URL of the Meraki device | keyword | +| cisco_meraki.event.networkId | ID for the Meraki network | keyword | +| cisco_meraki.event.networkName | Name for the Meraki network | keyword | +| cisco_meraki.event.networkTags | Tags assigned to the Meraki network | keyword | +| cisco_meraki.event.networkUrl | URL of the Meraki Dashboard network | keyword | +| cisco_meraki.event.occurredAt | Timestamp of the alert (UTC) | date | +| cisco_meraki.event.organizationId | ID of the Meraki organization | keyword | +| cisco_meraki.event.organizationName | Name of the Meraki organization | keyword | +| cisco_meraki.event.organizationUrl | URL of the Meraki Dashboard organization | keyword | +| cisco_meraki.event.sentAt | Timestamp of the sent message (UTC) | date | +| cisco_meraki.event.sharedSecret | User defined secret to be validated by the webhook receiver (optional) | keyword | +| cisco_meraki.event.version | Current version of webhook format | keyword | +| client.domain | The domain name of the client system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| client.registered_domain | The highest registered client domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| client.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | +| client.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| container.id | Unique container id. | keyword | +| data_stream.dataset | Data stream dataset. | constant_keyword | +| data_stream.namespace | Data stream namespace. | constant_keyword | +| data_stream.type | Data stream type. | constant_keyword | +| destination.address | Some event destination addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword | +| destination.as.number | Unique number allocated to the autonomous system. The autonomous system number (ASN) uniquely identifies each network on the Internet. | long | +| destination.as.organization.name | Organization name. | keyword | +| destination.bytes | Bytes sent from the destination to the source. | long | +| destination.domain | The domain name of the destination system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| destination.geo.city_name | City name. | keyword | +| destination.geo.country_name | Country name. | keyword | +| destination.geo.location | Longitude and latitude. | geo_point | +| destination.ip | IP address of the destination (IPv4 or IPv6). | ip | +| destination.mac | MAC address of the destination. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | +| destination.nat.ip | Translated ip of destination based NAT sessions (e.g. internet to private DMZ) Typically used with load balancers, firewalls, or routers. | ip | +| destination.nat.port | Port the source session is translated to by NAT Device. Typically used with load balancers, firewalls, or routers. | long | +| destination.port | Port of the destination. | long | +| destination.registered_domain | The highest registered destination domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| destination.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | +| destination.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| dns.answers.name | The domain name to which this resource record pertains. If a chain of CNAME is being resolved, each answer's `name` should be the one that corresponds with the answer's `data`. It should not simply be the original `question.name` repeated. | keyword | +| dns.answers.type | The type of data contained in this resource record. | keyword | +| dns.question.registered_domain | The highest registered domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| dns.question.subdomain | The subdomain is all of the labels under the registered_domain. If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | +| dns.question.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| dns.question.type | The type of record being queried. | keyword | +| ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword | +| error.message | Error message. | match_only_text | +| event.action | The action captured by the event. This describes the information in the event. It is more specific than `event.category`. Examples are `group-add`, `process-started`, `file-created`. The value is normally defined by the implementer. | keyword | +| event.code | Identification code for this event, if one exists. Some event sources use event codes to identify messages unambiguously, regardless of message language or wording adjustments over time. An example of this is the Windows Event ID. | keyword | +| event.dataset | Event dataset | constant_keyword | +| event.ingested | Timestamp when an event arrived in the central data store. This is different from `@timestamp`, which is when the event originally occurred. It's also different from `event.created`, which is meant to capture the first time an agent saw the event. In normal conditions, assuming no tampering, the timestamps should chronologically look like this: `@timestamp` \< `event.created` \< `event.ingested`. | date | +| event.module | Event module | constant_keyword | +| event.original | Raw text message of entire event. Used to demonstrate log integrity or where the full log message (before splitting it up in multiple parts) may be required, e.g. for reindex. This field is not indexed and doc_values are disabled. It cannot be searched, but it can be retrieved from `_source`. If users wish to override this and index this field, please see `Field data types` in the `Elasticsearch Reference`. | keyword | +| event.outcome | This is one of four ECS Categorization Fields, and indicates the lowest level in the ECS category hierarchy. `event.outcome` simply denotes whether the event represents a success or a failure from the perspective of the entity that produced the event. Note that when a single transaction is described in multiple events, each event may populate different values of `event.outcome`, according to their perspective. Also note that in the case of a compound event (a single event that contains multiple logical events), this field should be populated with the value that best captures the overall success or failure from the perspective of the event producer. Further note that not all events will have an associated outcome. For example, this field is generally not populated for metric events, events with `event.type:info`, or any events for which an outcome does not make logical sense. | keyword | +| event.timezone | This field should be populated when the event's timestamp does not include timezone information already (e.g. default Syslog timestamps). It's optional otherwise. Acceptable timezone formats are: a canonical ID (e.g. "Europe/Amsterdam"), abbreviated (e.g. "EST") or an HH:mm differential (e.g. "-05:00"). | keyword | +| file.attributes | Array of file attributes. Attributes names will vary by platform. Here's a non-exhaustive list of values that are expected in this field: archive, compressed, directory, encrypted, execute, hidden, read, readonly, system, write. | keyword | +| file.directory | Directory where the file is located. It should include the drive letter, when appropriate. | keyword | +| file.extension | File extension, excluding the leading dot. Note that when the file name has multiple extensions (example.tar.gz), only the last one should be captured ("gz", not "tar.gz"). | keyword | +| file.name | Name of the file including the extension, without the directory. | keyword | +| file.path | Full path to the file, including the file name. It should include the drive letter, when appropriate. | keyword | +| file.size | File size in bytes. Only relevant when `file.type` is "file". | long | +| file.type | File type (file, dir, or symlink). | keyword | +| geo.city_name | City name. | keyword | +| geo.country_name | Country name. | keyword | +| geo.name | User-defined description of a location, at the level of granularity they care about. Could be the name of their data centers, the floor number, if this describes a local physical entity, city names. Not typically used in automated geolocation. | keyword | +| geo.region_name | Region name. | keyword | +| group.id | Unique identifier for the group on the system/platform. | keyword | +| group.name | Name of the group. | keyword | +| host.hostname | Hostname of the host. It normally contains what the `hostname` command returns on the host machine. | keyword | +| host.ip | Host ip addresses. | ip | +| host.mac | Host MAC addresses. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | +| host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | +| http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | +| http.request.referrer | Referrer for this HTTP request. | keyword | +| input.type | Type of Filebeat input. | keyword | +| log.file.path | Full path to the log file this event came from. | keyword | +| log.flags | Flags for the log file. | keyword | +| log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | +| log.offset | Offset of the entry in the log file. | long | +| log.source.address | Source address from which the log event was read / sent from. | keyword | +| log.syslog.facility.code | The Syslog numeric facility of the log event, if available. According to RFCs 5424 and 3164, this value should be an integer between 0 and 23. | long | +| log.syslog.priority | Syslog numeric priority of the event, if available. According to RFCs 5424 and 3164, the priority is 8 \* facility + severity. This number is therefore expected to contain a value between 0 and 191. | long | +| log.syslog.severity.code | The Syslog numeric severity of the log event, if available. If the event source publishing via Syslog provides a different numeric severity value (e.g. firewall, IDS), your source's numeric severity should go to `event.severity`. If the event source does not specify a distinct severity, you can optionally copy the Syslog severity to `event.severity`. | long | +| message | For log events the message field contains the log message, optimized for viewing in a log viewer. For structured logs without an original message field, other fields can be concatenated to form a human-readable summary of the event. If multiple messages exist, they can be combined into one message. | match_only_text | +| network.application | When a specific application or service is identified from network connection details (source/dest IPs, ports, certificates, or wire format), this field captures the application's or service's name. For example, the original event identifies the network connection being from a specific web service in a `https` network connection, like `facebook` or `twitter`. The field value must be normalized to lowercase for querying. | keyword | +| network.bytes | Total bytes transferred in both directions. If `source.bytes` and `destination.bytes` are known, `network.bytes` is their sum. | long | +| network.direction | Direction of the network traffic. Recommended values are: \* ingress \* egress \* inbound \* outbound \* internal \* external \* unknown When mapping events from a host-based monitoring context, populate this field from the host's point of view, using the values "ingress" or "egress". When mapping events from a network or perimeter-based monitoring context, populate this field from the point of view of the network perimeter, using the values "inbound", "outbound", "internal" or "external". Note that "internal" is not crossing perimeter boundaries, and is meant to describe communication between two hosts within the perimeter. Note also that "external" is meant to describe traffic between two hosts that are external to the perimeter. This could for example be useful for ISPs or VPN service providers. | keyword | +| network.forwarded_ip | Host IP address when the source IP address is the proxy. | ip | +| network.packets | Total packets transferred in both directions. If `source.packets` and `destination.packets` are known, `network.packets` is their sum. | long | +| network.protocol | In the OSI Model this would be the Application Layer protocol. For example, `http`, `dns`, or `ssh`. The field value must be normalized to lowercase for querying. | keyword | +| observer.egress.interface.name | Interface name as reported by the system. | keyword | +| observer.ingress.interface.name | Interface name as reported by the system. | keyword | +| observer.product | The product name of the observer. | keyword | +| observer.type | The type of the observer the data is coming from. There is no predefined list of observer types. Some examples are `forwarder`, `firewall`, `ids`, `ips`, `proxy`, `poller`, `sensor`, `APM server`. | keyword | +| observer.vendor | Vendor name of the observer. | keyword | +| observer.version | Observer version. | keyword | +| process.name | Process name. Sometimes called program name or similar. | keyword | +| process.parent.name | Process name. Sometimes called program name or similar. | keyword | +| process.parent.pid | Process id. | long | +| process.parent.title | Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | keyword | +| process.pid | Process id. | long | +| process.title | Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | keyword | +| related.hosts | All hostnames or other host identifiers seen on your event. Example identifiers include FQDNs, domain names, workstation names, or aliases. | keyword | +| related.ip | All of the IPs seen on your event. | ip | +| related.user | All the user names or other user identifiers seen on the event. | keyword | +| rule.name | The name of the rule or signature generating the event. | keyword | +| server.domain | The domain name of the server system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| server.registered_domain | The highest registered server domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| server.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | +| server.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| service.name | Name of the service data is collected from. The name of the service is normally user given. This allows for distributed services that run on multiple hosts to correlate the related instances based on the name. In the case of Elasticsearch the `service.name` could contain the cluster name. For Beats the `service.name` is by default a copy of the `service.type` field if no name is specified. | keyword | +| source.address | Some event source addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword | +| source.as.number | Unique number allocated to the autonomous system. The autonomous system number (ASN) uniquely identifies each network on the Internet. | long | +| source.as.organization.name | Organization name. | keyword | +| source.bytes | Bytes sent from the source to the destination. | long | +| source.domain | The domain name of the source system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| source.geo.city_name | City name. | keyword | +| source.geo.country_name | Country name. | keyword | +| source.geo.location | Longitude and latitude. | geo_point | +| source.ip | IP address of the source (IPv4 or IPv6). | ip | +| source.mac | MAC address of the source. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | +| source.nat.ip | Translated ip of source based NAT sessions (e.g. internal client to internet) Typically connections traversing load balancers, firewalls, or routers. | ip | +| source.nat.port | Translated port of source based NAT sessions. (e.g. internal client to internet) Typically used with load balancers, firewalls, or routers. | long | +| source.port | Port of the source. | long | +| source.registered_domain | The highest registered source domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| source.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | +| source.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| tags | List of keywords used to tag each event. | keyword | +| url.domain | Domain of the url, such as "www.elastic.co". In some cases a URL may refer to an IP and/or port directly, without a domain name. In this case, the IP address would go to the `domain` field. If the URL contains a literal IPv6 address enclosed by `[` and `]` (IETF RFC 2732), the `[` and `]` characters should also be captured in the `domain` field. | keyword | +| url.original | Unmodified original url as seen in the event source. Note that in network monitoring, the observed URL may be a full URL, whereas in access logs, the URL is often just represented as a path. This field is meant to represent the URL as it was observed, complete or not. | wildcard | +| url.path | Path of the request, such as "/search". | wildcard | +| url.query | The query field describes the query string of the request, such as "q=elasticsearch". The `?` is excluded from the query string. If a URL contains no `?`, there is no query field. If there is a `?` but no query, the query field exists with an empty string. The `exists` query can be used to differentiate between the two cases. | keyword | +| url.registered_domain | The highest registered url domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | +| url.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| user.domain | Name of the directory the user is a member of. For example, an LDAP or Active Directory domain name. | keyword | +| user.full_name | User's full name, if available. | keyword | +| user.id | Unique identifier of the user. | keyword | +| user.name | Short name or login of the user. | keyword | +| user_agent.original | Unparsed user_agent string. | keyword | + + +An example event for `events` looks as following: + +```json +{ + "@timestamp": "2022-03-27T06:43:09.866Z", + "agent": { + "ephemeral_id": "1e92355f-993c-4cac-863c-4023c57c14ee", + "hostname": "docker-fleet-agent", + "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "name": "docker-fleet-agent", + "type": "filebeat", + "version": "7.17.0" + }, + "cisco_meraki": { + "event": { + "alertData": { + "connection": "LTE", + "local": "192.168.1.2", + "model": "UML290VW", + "provider": "Purview Wireless", + "remote": "1.2.3.5" + }, + "alertId": "0000000000000000", + "alertLevel": "informational", + "alertType": "Cellular came up", + "alertTypeId": "cellular_up", + "deviceMac": "00:11:22:33:44:55", + "deviceModel": "MX", + "deviceName": "My appliance", + "deviceSerial": "Q234-ABCD-5678", + "deviceTags": [ + "tag1", + "tag2" + ], + "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", + "networkId": "N_24329156", + "networkName": "Main Office", + "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", + "occurredAt": "2018-02-11T00:00:00.123450Z", + "organizationId": "2930418", + "organizationName": "My organization", + "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", + "sentAt": "2021-10-07T08:42:00.926325Z", + "sharedSecret": "secret", + "version": "0.1" + } + }, + "data_stream": { + "dataset": "cisco_meraki.events", + "namespace": "ep", + "type": "logs" + }, + "ecs": { + "version": "8.0.0" + }, + "elastic_agent": { + "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "snapshot": false, + "version": "7.17.0" + }, + "event": { + "agent_id_status": "verified", + "dataset": "cisco_meraki.events", + "ingested": "2022-03-27T06:43:10Z", + "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}" + }, + "input": { + "type": "http_endpoint" + }, + "tags": [ + "preserve_original_event", + "forwarded", + "meraki-events" + ] +} +``` From db5cdb201cc56ded84e47c892cbce25a4385c913 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 28 Mar 2022 21:06:31 +1100 Subject: [PATCH 21/67] script to create event.category, type and action --- .../data_stream/events/sample_event.json | 10 +- .../test-airmarshal-events.log-expected.json | 1693 ++++++++++++++--- .../test-events-inprogress.log-expected.json | 112 +- .../pipeline/test-flows.log-expected.json | 34 +- .../test-security-events.log-expected.json | 51 +- .../test/pipeline/test-urls.log-expected.json | 20 +- .../elasticsearch/ingest_pipeline/default.yml | 230 +++ .../elasticsearch/ingest_pipeline/flows.yml | 12 + .../ingest_pipeline/idsalerts.yml | 3 + .../elasticsearch/ingest_pipeline/urls.yml | 9 +- .../data_stream/log/sample_event.json | 19 +- 11 files changed, 1867 insertions(+), 326 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index 80cd8321948..9cb4dd33c23 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { - "@timestamp": "2022-03-27T06:43:09.866Z", + "@timestamp": "2022-03-28T09:16:48.186Z", "agent": { - "ephemeral_id": "1e92355f-993c-4cac-863c-4023c57c14ee", + "ephemeral_id": "3517f8ad-5a73-4384-89d0-77800a1b623a", "hostname": "docker-fleet-agent", - "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -51,14 +51,14 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", "snapshot": false, "version": "7.17.0" }, "event": { "agent_id_status": "verified", "dataset": "cisco_meraki.events", - "ingested": "2022-03-27T06:43:10Z", + "ingested": "2022-03-28T09:16:49Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}" }, "input": { diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index 4d592ee5b3e..27601178cf4 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -8,7 +8,6 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -22,7 +21,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479604.334549372 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479604.334549372 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -48,7 +54,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -62,7 +67,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479580.487048774 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479580.487048774 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -88,7 +100,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -102,7 +113,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479552.047395997 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479552.047395997 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -142,7 +160,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84_1" @@ -163,7 +188,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -177,7 +201,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479528.067423267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479528.067423267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -217,7 +248,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -243,7 +281,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -257,7 +294,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479489.882680227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479489.882680227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -283,7 +327,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -297,7 +340,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479484.972992227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479484.972992227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -323,7 +373,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -337,7 +386,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479466.965046920 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479466.965046920 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -377,7 +433,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84_6" @@ -398,7 +461,6 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -412,7 +474,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479459.181348678 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479459.181348678 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -438,7 +507,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -452,7 +520,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479456.670048547 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479456.670048547 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -492,7 +567,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -518,7 +600,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -532,7 +613,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479442.047436097 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479442.047436097 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -558,7 +646,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -572,7 +659,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479399.287689295 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479399.287689295 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -598,7 +692,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -612,7 +705,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479376.407283267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479376.407283267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -638,7 +738,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -652,7 +751,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479375.390251687 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479375.390251687 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -678,7 +784,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -692,7 +797,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479371.594697827 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479371.594697827 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -732,7 +844,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -772,7 +891,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84_6" @@ -793,7 +919,6 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -807,7 +932,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479353.446408965 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479353.446408965 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -847,7 +979,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479352.553639439 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479352.553639439 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -887,7 +1026,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -927,7 +1073,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -953,7 +1106,6 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -967,7 +1119,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479346.794313756 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479346.794313756 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1007,7 +1166,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1033,7 +1199,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -1047,7 +1212,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479341.816936841 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479341.816936841 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1087,7 +1259,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1113,7 +1292,6 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -1127,7 +1305,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479313.473165785 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479313.473165785 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1167,7 +1352,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84_2" @@ -1188,7 +1380,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -1202,7 +1393,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479299.115949027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479299.115949027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1228,7 +1426,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1242,7 +1439,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479294.302067007 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479294.302067007 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1268,7 +1472,6 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1282,7 +1485,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479288.469042416 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479288.469042416 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1322,7 +1532,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1348,7 +1565,6 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1362,7 +1578,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479278.839671334 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479278.839671334 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1402,7 +1625,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84_4" @@ -1423,7 +1653,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1437,7 +1666,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479227.438567311 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479227.438567311 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1463,7 +1699,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -1477,7 +1712,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479222.927379747 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479222.927379747 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1503,7 +1745,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -1517,7 +1758,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479222.927802947 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479222.927802947 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1543,7 +1791,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1557,7 +1804,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479222.728876109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479222.728876109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1583,7 +1837,6 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -1597,7 +1850,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479218.076400635 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479218.076400635 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1623,7 +1883,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -1637,7 +1896,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479203.375371107 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479203.375371107 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1677,7 +1943,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479199.622640025 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479199.622640025 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1703,7 +1976,6 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -1717,7 +1989,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479162.641725608 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479162.641725608 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1743,7 +2022,6 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -1757,7 +2035,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479162.670104087 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479162.670104087 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1797,7 +2082,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84_8" @@ -1832,7 +2124,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84_8" @@ -1853,7 +2152,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -1867,7 +2165,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479151.958073405 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479151.958073405 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1893,7 +2198,6 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -1907,7 +2211,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479133.020606043 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479133.020606043 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1933,7 +2244,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1947,7 +2257,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479127.384572447 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479127.384572447 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -1973,7 +2290,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1987,7 +2303,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479122.570882475 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479122.570882475 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2013,7 +2336,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -2027,7 +2349,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479122.592807847 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479122.592807847 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2053,7 +2382,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -2067,7 +2395,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479122.578597672 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479122.578597672 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2107,7 +2442,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479120.544286631 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479120.544286631 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84" @@ -2128,7 +2470,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -2142,7 +2483,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479091.258858944 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479091.258858944 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2182,7 +2530,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2208,7 +2563,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -2222,7 +2576,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479037.677902643 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479037.677902643 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2248,7 +2609,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -2262,7 +2622,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479036.783442760 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479036.783442760 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2288,7 +2655,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -2302,7 +2668,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479020.949227955 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647479020.949227955 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2342,7 +2715,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478974.912056258 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478974.912056258 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84" @@ -2377,7 +2757,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478966.089203455 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478966.089203455 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2417,7 +2804,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2457,7 +2851,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2483,7 +2884,6 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -2497,7 +2897,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478936.678862087 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478936.678862087 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2523,7 +2930,6 @@ "channel": "1", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -2537,7 +2943,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478907.739529447 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478907.739529447 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2563,7 +2976,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -2577,7 +2989,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478855.303776534 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478855.303776534 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2617,7 +3036,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2643,7 +3069,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -2657,7 +3082,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478845.877942207 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478845.877942207 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2683,7 +3115,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -2697,7 +3128,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478822.111692485 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478822.111692485 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2723,7 +3161,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -2737,7 +3174,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478818.039157925 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478818.039157925 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2777,7 +3221,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84_5" @@ -2798,7 +3249,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -2812,7 +3262,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478799.177625347 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478799.177625347 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2838,7 +3295,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -2852,7 +3308,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478788.838283552 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478788.838283552 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2892,7 +3355,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2932,7 +3402,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -2972,7 +3449,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3012,7 +3496,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478695.528431433 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478695.528431433 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84" @@ -3033,7 +3524,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -3047,7 +3537,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478693.465185593 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478693.465185593 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3073,7 +3570,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -3087,7 +3583,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478669.549413486 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478669.549413486 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3113,7 +3616,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -3127,7 +3629,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478626.517046787 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478626.517046787 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3153,7 +3662,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -3167,7 +3675,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478591.602996834 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478591.602996834 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3193,7 +3708,6 @@ "channel": "1", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -3207,7 +3721,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478569.035635205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478569.035635205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3233,7 +3754,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -3247,7 +3767,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478567.751044590 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478567.751044590 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3287,7 +3814,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478559.571303907 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478559.571303907 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3313,7 +3847,6 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -3327,7 +3860,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478558.540066660 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478558.540066660 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3353,7 +3893,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -3367,7 +3906,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478554.934781027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478554.934781027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3407,7 +3953,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478541.587558726 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478541.587558726 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3447,7 +4000,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3487,7 +4047,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3527,7 +4094,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3553,7 +4127,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -3567,7 +4140,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478483.410677512 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478483.410677512 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3593,7 +4173,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -3607,7 +4186,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478478.614722093 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478478.614722093 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3633,7 +4219,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -3647,7 +4232,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478440.565782942 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478440.565782942 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3673,7 +4265,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -3687,7 +4278,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478408.128821330 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478408.128821330 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3727,7 +4325,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84_5" @@ -3748,7 +4353,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -3762,7 +4366,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478383.070405853 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478383.070405853 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3788,7 +4399,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -3802,7 +4412,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478373.816434235 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478373.816434235 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3842,7 +4459,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478339.127895652 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478339.127895652 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84" @@ -3863,7 +4487,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -3877,7 +4500,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478298.296851316 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478298.296851316 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3917,7 +4547,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478293.380396754 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478293.380396754 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3943,7 +4580,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -3957,7 +4593,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478268.953109023 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478268.953109023 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -3997,7 +4640,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478257.084985274 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478257.084985274 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84" @@ -4018,7 +4668,6 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -4032,7 +4681,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478256.341194724 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478256.341194724 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4058,7 +4714,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -4072,7 +4727,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478221.255609741 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478221.255609741 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4112,7 +4774,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4152,7 +4821,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84_2" @@ -4173,7 +4849,6 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -4187,7 +4862,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478119.868477795 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478119.868477795 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4227,7 +4909,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478114.277373007 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478114.277373007 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84" @@ -4248,7 +4937,6 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -4262,7 +4950,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478105.395836204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478105.395836204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4288,7 +4983,6 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -4302,7 +4996,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478102.536782923 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478102.536782923 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4328,7 +5029,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -4342,7 +5042,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478092.108472035 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478092.108472035 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4368,7 +5075,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -4382,7 +5088,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478087.649007204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478087.649007204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4408,7 +5121,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -4422,7 +5134,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478063.434847715 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478063.434847715 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4448,7 +5167,6 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -4462,7 +5180,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478054.846444450 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478054.846444450 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4488,7 +5213,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -4502,7 +5226,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478039.876640835 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478039.876640835 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4542,7 +5273,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478035.923601924 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478035.923601924 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4568,7 +5306,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -4582,7 +5319,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478034.762765475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478034.762765475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4622,7 +5366,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478026.502834244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478026.502834244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4648,7 +5399,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -4662,7 +5412,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478020.564810050 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478020.564810050 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4688,7 +5445,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -4702,7 +5458,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478015.983013635 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478015.983013635 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4728,7 +5491,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -4742,7 +5504,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478006.707247789 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478006.707247789 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4768,7 +5537,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -4782,7 +5550,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478001.603867573 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647478001.603867573 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4808,7 +5583,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -4822,7 +5596,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477963.236026884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477963.236026884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4848,7 +5629,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -4862,7 +5642,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477958.900449163 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477958.900449163 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4888,7 +5675,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -4902,7 +5688,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477953.907583508 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477953.907583508 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4928,7 +5721,6 @@ "channel": "1", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -4942,7 +5734,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477953.724449475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477953.724449475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -4968,7 +5767,6 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -4982,7 +5780,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477945.336342244 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477945.336342244 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5008,7 +5813,6 @@ "channel": "1", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -5022,7 +5826,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477944.121686758 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477944.121686758 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5062,7 +5873,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477940.363429956 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5'" + "action": "ssid-spoofing-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477940.363429956 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "observer": { "hostname": "MX84" @@ -5083,7 +5901,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5097,7 +5914,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477930.038516204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477930.038516204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5123,7 +5947,6 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -5137,7 +5960,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477927.225784460 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477927.225784460 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5163,7 +5993,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -5177,7 +6006,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477920.683178115 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477920.683178115 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5203,7 +6039,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5217,7 +6052,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477920.510699794 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477920.510699794 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5243,7 +6085,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -5257,7 +6098,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477891.986568005 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477891.986568005 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5283,7 +6131,6 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5297,7 +6144,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477881.304873506 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477881.304873506 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5337,7 +6191,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5363,7 +6224,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5377,7 +6237,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477872.782332783 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477872.782332783 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5403,7 +6270,6 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5417,7 +6283,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477871.675119845 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477871.675119845 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5443,7 +6316,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -5457,7 +6329,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477864.088023180 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477864.088023180 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5483,7 +6362,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -5497,7 +6375,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477834.810489249 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477834.810489249 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5523,7 +6408,6 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5537,7 +6421,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477828.886032606 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477828.886032606 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5577,7 +6468,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477828.885258686 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477828.885258686 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5603,7 +6501,6 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5617,7 +6514,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477828.799864712 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477828.799864712 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5643,7 +6547,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -5657,7 +6560,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477825.209110701 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477825.209110701 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5683,7 +6593,6 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5697,7 +6606,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477825.021409913 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477825.021409913 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5723,7 +6639,6 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5737,7 +6652,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477825.024707684 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477825.024707684 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5763,7 +6685,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -5777,7 +6698,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477821.364087032 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477821.364087032 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5803,7 +6731,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5817,7 +6744,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477796.382660565 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477796.382660565 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5843,7 +6777,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5857,7 +6790,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477796.382227661 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477796.382227661 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5883,7 +6823,6 @@ "channel": "6", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5897,7 +6836,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477796.381818586 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477796.381818586 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5923,7 +6869,6 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -5937,7 +6882,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477795.407019364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477795.407019364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -5977,7 +6929,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477795.385494917 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477795.385494917 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6017,7 +6976,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477795.385835866 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477795.385835866 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6057,7 +7023,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477793.576467473 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477793.576467473 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6097,7 +7070,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477793.576769233 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477793.576769233 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6123,7 +7103,6 @@ "channel": "1", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -6137,7 +7116,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477786.805604872 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477786.805604872 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6163,7 +7149,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -6177,7 +7162,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477780.705460109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477780.705460109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6203,7 +7195,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -6217,7 +7208,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477778.398160444 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477778.398160444 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6243,7 +7241,6 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -6257,7 +7254,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477773.586461164 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477773.586461164 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6283,7 +7287,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -6297,7 +7300,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477764.149946084 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477764.149946084 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6323,7 +7333,6 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -6337,7 +7346,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477764.145077176 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477764.145077176 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6377,7 +7393,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477764.143985243 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477764.143985243 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6417,7 +7440,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477764.144283174 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477764.144283174 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6443,7 +7473,6 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -6457,7 +7486,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477763.225832662 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477763.225832662 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6483,7 +7519,6 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -6497,7 +7532,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477744.039850991 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477744.039850991 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6523,7 +7565,6 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -6537,7 +7578,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477733.453967364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477733.453967364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6563,7 +7611,6 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -6577,7 +7624,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477733.446493073 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477733.446493073 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6617,7 +7671,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477733.420037284 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477733.420037284 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6657,7 +7718,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477733.419042244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477733.419042244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6697,7 +7765,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477733.411410011 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477733.411410011 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6737,7 +7812,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477716.431936901 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477716.431936901 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6763,7 +7845,6 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -6777,7 +7858,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477716.431151781 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477716.431151781 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6817,7 +7905,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477716.429168101 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477716.429168101 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6843,7 +7938,6 @@ "channel": "11", "fc_subtype": "8", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -6857,7 +7951,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477715.612600884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477715.612600884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'", + "type": [ + "indicator" + ] }, "network": { "vlan": { @@ -6883,7 +7984,6 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -6897,7 +7997,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647477702.046252324 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5'" + "action": "rogue-ssid-detected", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1647477702.046252324 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5'", + "type": [ + "indicator" + ] }, "network": { "vlan": { diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json index 7b7508a8caf..1648ad72238 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json @@ -16,7 +16,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2'" + "action": "unknown-dfs_event", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2'", + "type": [ + "info" + ] }, "log": { "syslog": { @@ -49,7 +56,16 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478401.421090826 MR_device_2 events type=wpa_deauth radio='1' vap='1' client_mac='E5:A4:98:71:9A:FE' aid='1034533358'" + "action": "wifi-wpa-failed-auth-or-deauth", + "category": [ + "network", + "authentication" + ], + "original": "\u003c134\u003e1 1647478401.421090826 MR_device_2 events type=wpa_deauth radio='1' vap='1' client_mac='E5:A4:98:71:9A:FE' aid='1034533358'", + "type": [ + "end", + "denied" + ] }, "log": { "syslog": { @@ -82,7 +98,16 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478402.126325721 MR_device_2 events type=wpa_auth radio='1' vap='1' client_mac='E4:F4:18:79:1F:E1' aid='910537108'" + "action": "wifi-wpa-authentication", + "category": [ + "authentication", + "network" + ], + "original": "\u003c134\u003e1 1647478402.126325721 MR_device_2 events type=wpa_auth radio='1' vap='1' client_mac='E4:F4:18:79:1F:E1' aid='910537108'", + "type": [ + "start", + "access" + ] }, "log": { "syslog": { @@ -129,7 +154,16 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478709.602628785 MR_device_2 events type=disassociation radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='67.43.156.14' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='8.8.8.8' dhcp_server_mac='18:3B:2E:5C:A7:F6' dhcp_resp='1.373967135' aid='1478558813'" + "action": "wifi-disassociation-request", + "category": [ + "network", + "session" + ], + "original": "\u003c134\u003e1 1647478709.602628785 MR_device_2 events type=disassociation radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='67.43.156.14' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='8.8.8.8' dhcp_server_mac='18:3B:2E:5C:A7:F6' dhcp_resp='1.373967135' aid='1478558813'", + "type": [ + "access", + "end" + ] }, "log": { "syslog": { @@ -164,7 +198,15 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478402.117726086 MR_device_2 events type=association radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='140' rssi='20' aid='910537108'" + "action": "wifi-association-request", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647478402.117726086 MR_device_2 events type=association radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='140' rssi='20' aid='910537108'", + "type": [ + "access", + "connection" + ] }, "log": { "syslog": { @@ -193,7 +235,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478093.022430458 MX_device_1 events Site-to-Site VPN: \u003cl2tp-over-ipsec-1|241\u003e CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f]" + "action": "site-to-site-vpn", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647478093.022430458 MX_device_1 events Site-to-Site VPN: \u003cl2tp-over-ipsec-1|241\u003e CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f]", + "type": [ + "access" + ] }, "log": { "syslog": { @@ -222,7 +271,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478092.029594666 MX_device_1 events Site-to-Site VPN: \u003cl2tp-over-ipsec-1|241\u003e IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201]" + "action": "site-to-site-vpn", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647478092.029594666 MX_device_1 events Site-to-Site VPN: \u003cl2tp-over-ipsec-1|241\u003e IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201]", + "type": [ + "access" + ] }, "log": { "syslog": { @@ -257,7 +313,15 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478222.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false'" + "action": "vpn-connectivity-change", + "category": [ + "session", + "network" + ], + "original": "\u003c134\u003e1 1647478222.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false'", + "type": [ + "connection" + ] }, "log": { "syslog": { @@ -286,7 +350,15 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479420.148681168 MX84 events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1" + "action": "dhcp-offer", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479420.148681168 MX84 events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1", + "type": [ + "access", + "allowed" + ] }, "network": { "protocol": "dhcp" @@ -315,7 +387,15 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479961.535491111 MX84 events dhcp no offers for mac A4:83:E7:02:A2:F1 host = 192.168.10.1" + "action": "dhcp-no-offer", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479961.535491111 MX84 events dhcp no offers for mac A4:83:E7:02:A2:F1 host = 192.168.10.1", + "type": [ + "access", + "denied" + ] }, "network": { "protocol": "dhcp" @@ -353,7 +433,17 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478092.669153546 MX_device_4 events client_vpn_connect user id 'jwick@wwvpn.net' local ip 172.16.0.145 connected from 81.2.69.193" + "action": "site-to-site-vpn", + "category": [ + "network", + "session" + ], + "original": "\u003c134\u003e1 1647478092.669153546 MX_device_4 events client_vpn_connect user id 'jwick@wwvpn.net' local ip 172.16.0.145 connected from 81.2.69.193", + "type": [ + "access", + "allowed", + "start" + ] }, "network": { "forwarded_ip": "172.16.0.145" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index 1cafef859ce..28513498f08 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -4,6 +4,7 @@ "@timestamp": "2022-03-17T01:03:08.289Z", "cisco_meraki": { "device_type": "MR", + "event_subtype": "flow_allowed", "event_type": "flows", "flows": { "op": "allow" @@ -17,7 +18,15 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478988.289402144 MX84_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600" + "action": "layer3-firewall-allowed-flow", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647478988.289402144 MX84_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600", + "type": [ + "access", + "allowed" + ] }, "network": { "protocol": "udp" @@ -39,6 +48,7 @@ "@timestamp": "2022-03-17T01:03:08.476Z", "cisco_meraki": { "device_type": "MX", + "event_subtype": "ip_session_initiated", "event_type": "flows" }, "destination": { @@ -49,7 +59,16 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478988.476061795 MX84 flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all" + "action": "ip-session-initiated", + "category": [ + "network", + "session" + ], + "original": "\u003c134\u003e1 1647478988.476061795 MX84 flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all", + "type": [ + "access", + "start" + ] }, "network": { "protocol": "tcp" @@ -70,6 +89,7 @@ "@timestamp": "2022-03-17T01:03:08.596Z", "cisco_meraki": { "device_type": "MR", + "event_subtype": "flow_allowed", "event_type": "flows", "flows": { "op": "allow" @@ -83,7 +103,15 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647478988.596151424 MX84_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500" + "action": "layer3-firewall-allowed-flow", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647478988.596151424 MX84_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500", + "type": [ + "access", + "allowed" + ] }, "network": { "protocol": "tcp" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index f2510243c5c..b92cbcc8211 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -21,7 +21,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected" + "action": "ids-signature-matched", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", + "type": [ + "indicator" + ] }, "network": { "direction": "ingress", @@ -88,7 +95,16 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1637691298.984398273 MX84 security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block" + "action": "malicious-file-actioned", + "category": [ + "threat", + "malware" + ], + "original": "\u003c134\u003e1 1637691298.984398273 MX84 security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block", + "type": [ + "indicator", + "info" + ] }, "observer": { "hostname": "MX84" @@ -134,7 +150,16 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1637783435.239819833 MX84 security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow" + "action": "issued-retrospective-malicious-disposition", + "category": [ + "threat", + "malware" + ], + "original": "\u003c134\u003e1 1637783435.239819833 MX84 security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow", + "type": [ + "indicator", + "info" + ] }, "observer": { "hostname": "MX84" @@ -163,6 +188,7 @@ "@timestamp": "2021-11-24T19:58:11.345Z", "cisco_meraki": { "device_type": "MX", + "event_subtype": "ids_alerted", "event_type": "ids-alerts", "security": { "priority": "3", @@ -173,7 +199,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1637783891.345984502 MX84 ids-alerts signature=129:4:1 priority=3 timestamp=1637783891.512569 direction=ingress protocol=tcp/ip src=67.43.156.15:80" + "action": "ids-signature-matched", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1637783891.345984502 MX84 ids-alerts signature=129:4:1 priority=3 timestamp=1637783891.512569 direction=ingress protocol=tcp/ip src=67.43.156.15:80", + "type": [ + "indicator" + ] }, "network": { "direction": "ingress", @@ -212,6 +245,7 @@ "@timestamp": "2021-11-24T21:43:21.246Z", "cisco_meraki": { "device_type": "MX", + "event_subtype": "ids_alerted", "event_type": "ids-alerts", "security": { "priority": "2", @@ -222,7 +256,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1637790201.246576346 MX84 ids-alerts signature=119:15:1 priority=2 timestamp=1637790201.238064 direction=egress protocol=tcp/ip src=192.168.111.254:56240" + "action": "ids-signature-matched", + "category": [ + "threat" + ], + "original": "\u003c134\u003e1 1637790201.246576346 MX84 ids-alerts signature=119:15:1 priority=2 timestamp=1637790201.238064 direction=egress protocol=tcp/ip src=192.168.111.254:56240", + "type": [ + "indicator" + ] }, "network": { "direction": "egress", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json index 338f3c39f3e..4414ebfacea 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json @@ -4,6 +4,7 @@ "@timestamp": "2022-03-17T01:11:43.348Z", "cisco_meraki": { "device_type": "MX", + "event_subtype": "http_access_error", "event_type": "urls", "urls": { "mac": "78-7B-8A-CC-05-18" @@ -35,7 +36,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479503.348215340 MX84 urls src=10.0.1.29:60336 dst=89.160.20.156:80 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/..." + "action": "http-access-error", + "category": [ + "web" + ], + "original": "\u003c134\u003e1 1647479503.348215340 MX84 urls src=10.0.1.29:60336 dst=89.160.20.156:80 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/...", + "type": [ + "error" + ] }, "http": { "request": { @@ -61,6 +69,7 @@ "@timestamp": "2022-03-17T01:11:43.676Z", "cisco_meraki": { "device_type": "MX", + "event_subtype": "http_access", "event_type": "urls", "urls": { "mac": "64-1C-AE-68-2A-01" @@ -92,7 +101,14 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479503.676404537 MX84 urls src=10.0.0.234:56424 dst=89.160.20.112:443 mac=64:1C:AE:68:2A:01 request: GET https://lh3.googleusercontent.com/p/AFVnnY=w2048-h1024" + "action": "http-access", + "category": [ + "web" + ], + "original": "\u003c134\u003e1 1647479503.676404537 MX84 urls src=10.0.0.234:56424 dst=89.160.20.112:443 mac=64:1C:AE:68:2A:01 request: GET https://lh3.googleusercontent.com/p/AFVnnY=w2048-h1024", + "type": [ + "access" + ] }, "http": { "request": { diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 8bb5ad88b6c..ce5a4b954b4 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -47,6 +47,211 @@ processors: - pipeline: name: '{{ IngestPipeline "urls" }}' if: ctx.cisco_meraki.event_type == 'urls' +- script: + lang: painless + description: The script sets event type, action and category based on type and sub-type fields + params: + eventmap: + "vpn_connectivity_change": + category: + - session + - network + type: + - connection + action: vpn-connectivity-change + "dhcp_offer": + category: + - network + type: + - access + - allowed + action: dhcp-offer + "dhcp_no_offer": + category: + - network + type: + - access + - denied + action: dhcp-no-offer + "Site-to-Site VPN": + category: + - network + type: + - access + action: site-to-site-vpn + "client_vpn_connect": + category: + - network + - session + type: + - access + - allowed + - start + action: site-to-site-vpn + "ip_session_initiated": + category: + - network + - session + type: + - access + - start + action: ip-session-initiated + "flow_allowed": + category: + - network + type: + - access + - allowed + action: layer3-firewall-allowed-flow + "flow_denied": + category: + - network + type: + - access + - denied + action: layer3-firewall-denied-flow + "http_access": + category: + - web + type: + - access + action: http-access + "http_access_error": + category: + - web + type: + - error + action: http-access-error + "ids_alerted": + category: + - threat + type: + - indicator + action: ids-signature-matched + "security_filtering_file_scanned": + category: + - threat + - malware + type: + - indicator + - info + action: malicious-file-actioned + "security_filtering_disposition_change": + category: + - threat + - malware + type: + - indicator + - info + action: issued-retrospective-malicious-disposition + "association": + category: + - network + type: + - access + - connection + action: wifi-association-request + "disassociation": + category: + - network + - session + type: + - access + - end + action: wifi-disassociation-request + "wpa_auth": + category: + - authentication + - network + type: + - start + - access + action: wifi-wpa-authentication + "wpa_deauth": + category: + - network + - authentication + type: + - end + - denied + action: wifi-wpa-failed-auth-or-deauth + "8021x_eap_failure": + category: + - network + - authentication + type: + - end + - denied + action: wifi-8021x-failed-authentication-attempt + "8021x_deauth": + category: + - network + - authentication + type: + - end + - denied + action: wifi-8021x-failed-auth-or-deauth + "8021x_eap_success": + category: + - network + - authentication + type: + - start + action: wifi-8021x-auth + "splash_auth": + category: + - network + - authentication + type: + - start + action: splash-authentication + "device_packet_flood": + category: + - threat + type: + - indicator + action: wireless-packet-flood-detected + "rogue_ssid_detected": + category: + - threat + type: + - indicator + action: rogue-ssid-detected + "ssid_spoofing_detected": + category: + - threat + type: + - indicator + action: ssid-spoofing-detected + source: |- + def eventSubtype = ctx.cisco_meraki.event_subtype; + if (eventSubtype == null) { + return; + } + def eventMap = params.get('eventmap'); + def eventData = eventMap.get(eventSubtype); + if (eventData == null) { + ctx.event.action = 'unknown-' + eventSubtype; + ctx.event.category = ['network']; + ctx.event.type = ['info']; + return; + } + def eventCategory = eventData.get('category'); + def eventType = eventData.get('type'); + def eventAction = eventData.get('action'); + if (eventType != null) { + ctx.event.type = new ArrayList(eventType); + } + if (eventCategory != null) { + ctx.event.category = new ArrayList(eventCategory); + } + if (eventAction != null) { + ctx.event.action = eventAction; + } + +## +# Clean up +## - remove: field: - _temp @@ -68,6 +273,31 @@ processors: - sts - msgtype ignore_missing: true +- script: + lang: painless + description: This script processor iterates over the whole document to remove fields with null values. + source: | + void handleMap(Map map) { + for (def x : map.values()) { + if (x instanceof Map) { + handleMap(x); + } else if (x instanceof List) { + handleList(x); + } + } + map.values().removeIf(v -> v == null || v == '' || (v instanceof Map && v.size() == 0) || (v instanceof List && v.size() == 0)); + } + void handleList(List list) { + for (def x : list) { + if (x instanceof Map) { + handleMap(x); + } else if (x instanceof List) { + handleList(x); + } + } + list.removeIf(v -> v == null || v == '' || (v instanceof Map && v.size() == 0) || (v instanceof List && v.size() == 0)); + } + handleMap(ctx); on_failure: - set: field: error.message diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml index 7ea78225496..358bac1d523 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml @@ -50,3 +50,15 @@ processors: field: cisco_meraki.device_type value: MX if: ctx._temp.token.startsWith("src=") == true +- set: + field: cisco_meraki.event_subtype + value: "ip_session_initiated" + if: ctx._temp.token.startsWith("src=") == true +- set: + field: cisco_meraki.event_subtype + value: "flow_allowed" + if: ctx._temp.token.startsWith("src=") == false && ctx?.cisco_meraki?.flows?.op == 'allow' +- set: + field: cisco_meraki.event_subtype + value: "flow_denied" + if: ctx._temp.token.startsWith("src=") == false && ctx?.cisco_meraki?.flows?.op == 'deny' diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml index ceec71b93f8..043da6a9745 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml @@ -5,6 +5,9 @@ processors: description: Determine the ids-alerts security event type field: event.original pattern: "%{} ids-alerts %{*sig}=%{&sig} %{*pri}=%{&pri} %{*ts}=%{&ts} %{*dir}=%{&dir} %{*prot}=%{&prot} %{*src}=%{&src}" +- set: + field: cisco_meraki.event_subtype + value: ids_alerted - set: field: cisco_meraki.device_type value: MX diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml index d6df7d5adbb..5a500f2b258 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml @@ -79,4 +79,11 @@ processors: field: destination.as.organization_name target_field: destination.as.organization.name ignore_missing: true - +- set: + field: cisco_meraki.event_subtype + value: 'http_access' + if: ctx?.http?.request?.method.toLowerCase() != 'unknown' +- set: + field: cisco_meraki.event_subtype + value: 'http_access_error' + if: ctx?.http?.request?.method.toLowerCase() == 'unknown' diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index 9dc5bd20a28..3555cb4bce3 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "608bab32-5db5-4c16-9004-3328b2f4a73a", + "ephemeral_id": "ab911d64-36b6-4d9c-8671-b96040dfb2c0", "hostname": "docker-fleet-agent", - "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -32,22 +32,29 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", "snapshot": false, "version": "7.17.0" }, "event": { + "action": "ids-signature-matched", "agent_id_status": "verified", + "category": [ + "threat" + ], "dataset": "cisco_meraki.log", - "ingested": "2022-03-27T06:45:39Z", - "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected" + "ingested": "2022-03-28T09:18:58Z", + "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", + "type": [ + "indicator" + ] }, "input": { "type": "udp" }, "log": { "source": { - "address": "172.22.0.5:35310" + "address": "192.168.96.4:47237" } }, "network": { From 3d0910a8f2810771af0c211be8c612d25d9746e4 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 28 Mar 2022 22:32:41 +1100 Subject: [PATCH 22/67] fix formatting --- packages/cisco_meraki/data_stream/events/manifest.yml | 1 + packages/cisco_meraki/data_stream/log/fields/ecs.yml | 1 - 2 files changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/cisco_meraki/data_stream/events/manifest.yml b/packages/cisco_meraki/data_stream/events/manifest.yml index 108abeda59e..bc4b29aa450 100644 --- a/packages/cisco_meraki/data_stream/events/manifest.yml +++ b/packages/cisco_meraki/data_stream/events/manifest.yml @@ -73,3 +73,4 @@ streams: show_user: false description: > Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. + diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index 66fecea6d59..7bd52db20ce 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -166,7 +166,6 @@ name: related.user - external: ecs name: rule.name - - external: ecs name: server.mac - external: ecs From 67c25171a36d877544791e783d3e0c50b2bce299 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 28 Mar 2022 22:44:26 +1100 Subject: [PATCH 23/67] regenerate README --- packages/cisco_meraki/docs/README.md | 29 +++++++++++++++++----------- 1 file changed, 18 insertions(+), 11 deletions(-) diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 1208ad03cce..3b6bc012baa 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -247,9 +247,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "608bab32-5db5-4c16-9004-3328b2f4a73a", + "ephemeral_id": "ab911d64-36b6-4d9c-8671-b96040dfb2c0", "hostname": "docker-fleet-agent", - "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -278,22 +278,29 @@ An example event for `log` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", "snapshot": false, "version": "7.17.0" }, "event": { + "action": "ids-signature-matched", "agent_id_status": "verified", + "category": [ + "threat" + ], "dataset": "cisco_meraki.log", - "ingested": "2022-03-27T06:45:39Z", - "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected" + "ingested": "2022-03-28T09:18:58Z", + "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", + "type": [ + "indicator" + ] }, "input": { "type": "udp" }, "log": { "source": { - "address": "172.22.0.5:35310" + "address": "192.168.96.4:47237" } }, "network": { @@ -492,11 +499,11 @@ An example event for `events` looks as following: ```json { - "@timestamp": "2022-03-27T06:43:09.866Z", + "@timestamp": "2022-03-28T09:16:48.186Z", "agent": { - "ephemeral_id": "1e92355f-993c-4cac-863c-4023c57c14ee", + "ephemeral_id": "3517f8ad-5a73-4384-89d0-77800a1b623a", "hostname": "docker-fleet-agent", - "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -544,14 +551,14 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "0768ae0c-d922-43a2-8629-7b93f6b2e46b", + "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", "snapshot": false, "version": "7.17.0" }, "event": { "agent_id_status": "verified", "dataset": "cisco_meraki.events", - "ingested": "2022-03-27T06:43:10Z", + "ingested": "2022-03-28T09:16:49Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}" }, "input": { From 85567690e9acca384e0e53308824c324cd3d3c55 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 29 Mar 2022 11:47:30 +1100 Subject: [PATCH 24/67] Update README --- packages/cisco_meraki/_dev/build/docs/README.md | 2 +- packages/cisco_meraki/docs/README.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/cisco_meraki/_dev/build/docs/README.md b/packages/cisco_meraki/_dev/build/docs/README.md index d22c8c48374..52ca37b11c0 100644 --- a/packages/cisco_meraki/_dev/build/docs/README.md +++ b/packages/cisco_meraki/_dev/build/docs/README.md @@ -2,7 +2,7 @@ Cisco Meraki offers a centralized cloud management platform for all Meraki devices such as MX Security Appliances, MR Access Points and so on. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. -Cisco Meraki offers [several methods for device reporting](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API). This integration supports gathering events via the Cisco Meraki Syslog events and API reporting (via Webhooks). +Cisco Meraki offers [several methods for device reporting](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API). This integration supports gathering events via the Cisco Meraki Syslog events and API reporting (via Webhooks). The integration package allows you to search, observe and visualize the events through Elasticsearch. ## Compatibility diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 3b6bc012baa..cff9a4d9ce4 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -2,7 +2,7 @@ Cisco Meraki offers a centralized cloud management platform for all Meraki devices such as MX Security Appliances, MR Access Points and so on. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. -Cisco Meraki offers [several methods for device reporting](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API). This integration supports gathering events via the Cisco Meraki Syslog events and API reporting (via Webhooks). +Cisco Meraki offers [several methods for device reporting](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API). This integration supports gathering events via the Cisco Meraki Syslog events and API reporting (via Webhooks). The integration package allows you to search, observe and visualize the events through Elasticsearch. ## Compatibility From 9ef3fbe13dde529d9ac059864e85e465a24ee4b6 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 29 Mar 2022 11:50:40 +1100 Subject: [PATCH 25/67] Update changelog --- packages/cisco_meraki/changelog.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/cisco_meraki/changelog.yml b/packages/cisco_meraki/changelog.yml index 8be1223660d..93bac60e6e9 100644 --- a/packages/cisco_meraki/changelog.yml +++ b/packages/cisco_meraki/changelog.yml @@ -3,7 +3,7 @@ changes: - description: Replace RSA2ELK with Webhook integration type: enhancement - link: https://github.com/elastic/integrations/pull/ + link: https://github.com/elastic/integrations/pull/2897 - version: "0.4.0" changes: - description: Update to ECS 8.0.0 From 35c5d15166ca834b86f856e4e4067734d0ec17d4 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 29 Mar 2022 11:55:19 +1100 Subject: [PATCH 26/67] rename: test-events file --- .../test/pipeline/{test-events-inprogress.log => test-events.log} | 0 ...inprogress.log-expected.json => test-events.log-expected.json} | 0 2 files changed, 0 insertions(+), 0 deletions(-) rename packages/cisco_meraki/data_stream/log/_dev/test/pipeline/{test-events-inprogress.log => test-events.log} (100%) rename packages/cisco_meraki/data_stream/log/_dev/test/pipeline/{test-events-inprogress.log-expected.json => test-events.log-expected.json} (100%) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log similarity index 100% rename from packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log rename to packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json similarity index 100% rename from packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events-inprogress.log-expected.json rename to packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json From e587ef0ab4c8acd226250ac51801c50ef0f0f796 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 29 Mar 2022 16:40:57 +1100 Subject: [PATCH 27/67] Add dashboards and anonymize data --- .../docker/sample_logs/cisco-meraki.log | 114 +- .../test/pipeline/test-airmarshal-events.log | 114 +- .../test-airmarshal-events.log-expected.json | 228 +-- ...-4832a430-af22-11ec-a899-6f7e676e0fb4.json | 1413 +++++++++++++++++ 4 files changed, 1641 insertions(+), 228 deletions(-) create mode 100644 packages/cisco_meraki/kibana/dashboard/cisco_meraki-4832a430-af22-11ec-a899-6f7e676e0fb4.json diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log index a9625653a64..9deba27ac64 100644 --- a/packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_logs/cisco-meraki.log @@ -2,111 +2,111 @@ <134>1 1647479604.334549372 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5' <134>1 1647479580.487048774 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8' <134>1 1647479552.047395997 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' -<134>1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5' +<134>1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5' <134>1 1647479528.067423267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8' -<134>1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' <134>1 1647479489.882680227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8' <134>1 1647479484.972992227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' <134>1 1647479466.965046920 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8' -<134>1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5' +<134>1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5' <134>1 1647479459.181348678 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8' <134>1 1647479456.670048547 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8' -<134>1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5' +<134>1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5' <134>1 1647479442.047436097 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8' <134>1 1647479399.287689295 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8' <134>1 1647479376.407283267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' <134>1 1647479375.390251687 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8' <134>1 1647479371.594697827 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8' -<134>1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' -<134>1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5' +<134>1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5' <134>1 1647479353.446408965 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647479352.553639439 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' -<134>1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479352.553639439 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' <134>1 1647479346.794313756 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5' -<134>1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5' +<134>1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5' <134>1 1647479341.816936841 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' <134>1 1647479313.473165785 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5' -<134>1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5' +<134>1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5' <134>1 1647479299.115949027 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8' <134>1 1647479294.302067007 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8' <134>1 1647479288.469042416 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5' -<134>1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8' <134>1 1647479278.839671334 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8' -<134>1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8' <134>1 1647479227.438567311 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8' <134>1 1647479222.927379747 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' <134>1 1647479222.927802947 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8' <134>1 1647479222.728876109 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8' <134>1 1647479218.076400635 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5' <134>1 1647479203.375371107 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8' -<134>1 1647479199.622640025 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647479199.622640025 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' <134>1 1647479162.641725608 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' <134>1 1647479162.670104087 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8' -<134>1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8' <134>1 1647479151.958073405 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8' <134>1 1647479133.020606043 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5' <134>1 1647479127.384572447 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8' <134>1 1647479122.570882475 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' <134>1 1647479122.592807847 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8' <134>1 1647479122.578597672 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' -<134>1 1647479120.544286631 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5' +<134>1 1647479120.544286631 MR36 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5' <134>1 1647479091.258858944 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' -<134>1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5' +<134>1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5' <134>1 1647479037.677902643 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' <134>1 1647479036.783442760 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' <134>1 1647479020.949227955 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' -<134>1 1647478974.912056258 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5' -<134>1 1647478966.089203455 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8' -<134>1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' -<134>1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5' +<134>1 1647478974.912056258 MR36 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5' +<134>1 1647478966.089203455 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5' <134>1 1647478936.678862087 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5' <134>1 1647478907.739529447 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' <134>1 1647478855.303776534 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' -<134>1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8' <134>1 1647478845.877942207 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' <134>1 1647478822.111692485 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8' <134>1 1647478818.039157925 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8' -<134>1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5' <134>1 1647478799.177625347 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8' <134>1 1647478788.838283552 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8' -<134>1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5' -<134>1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' -<134>1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' -<134>1 1647478695.528431433 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5' +<134>1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5' +<134>1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' +<134>1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' +<134>1 1647478695.528431433 MR36 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5' <134>1 1647478693.465185593 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' <134>1 1647478669.549413486 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' <134>1 1647478626.517046787 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8' <134>1 1647478591.602996834 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' <134>1 1647478569.035635205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5' <134>1 1647478567.751044590 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' -<134>1 1647478559.571303907 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5' +<134>1 1647478559.571303907 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5' <134>1 1647478558.540066660 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5' <134>1 1647478554.934781027 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8' -<134>1 1647478541.587558726 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' -<134>1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5' -<134>1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' -<134>1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647478541.587558726 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5' +<134>1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' +<134>1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8' <134>1 1647478483.410677512 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8' <134>1 1647478478.614722093 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8' <134>1 1647478440.565782942 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' <134>1 1647478408.128821330 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8' -<134>1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5' +<134>1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5' <134>1 1647478383.070405853 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' <134>1 1647478373.816434235 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647478339.127895652 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647478339.127895652 MR36 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5' <134>1 1647478298.296851316 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' -<134>1 1647478293.380396754 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647478293.380396754 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' <134>1 1647478268.953109023 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8' -<134>1 1647478257.084985274 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5' +<134>1 1647478257.084985274 MR36 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5' <134>1 1647478256.341194724 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8' <134>1 1647478221.255609741 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' -<134>1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' -<134>1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' +<134>1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5' <134>1 1647478119.868477795 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8' -<134>1 1647478114.277373007 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647478114.277373007 MR36 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5' <134>1 1647478105.395836204 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8' <134>1 1647478102.536782923 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' <134>1 1647478092.108472035 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' @@ -114,9 +114,9 @@ <134>1 1647478063.434847715 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8' <134>1 1647478054.846444450 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5' <134>1 1647478039.876640835 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8' -<134>1 1647478035.923601924 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478035.923601924 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' <134>1 1647478034.762765475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' -<134>1 1647478026.502834244 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478026.502834244 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' <134>1 1647478020.564810050 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8' <134>1 1647478015.983013635 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8' <134>1 1647478006.707247789 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8' @@ -127,20 +127,20 @@ <134>1 1647477953.724449475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' <134>1 1647477945.336342244 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5' <134>1 1647477944.121686758 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5' -<134>1 1647477940.363429956 MR36 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5' +<134>1 1647477940.363429956 MR36 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5' <134>1 1647477930.038516204 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' <134>1 1647477927.225784460 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' <134>1 1647477920.683178115 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8' <134>1 1647477920.510699794 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' <134>1 1647477891.986568005 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8' <134>1 1647477881.304873506 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' -<134>1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' <134>1 1647477872.782332783 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' <134>1 1647477871.675119845 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5' <134>1 1647477864.088023180 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8' <134>1 1647477834.810489249 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8' <134>1 1647477828.886032606 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8' -<134>1 1647477828.885258686 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8' +<134>1 1647477828.885258686 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8' <134>1 1647477828.799864712 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8' <134>1 1647477825.209110701 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8' <134>1 1647477825.021409913 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5' @@ -150,28 +150,28 @@ <134>1 1647477796.382227661 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' <134>1 1647477796.381818586 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' <134>1 1647477795.407019364 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8' -<134>1 1647477795.385494917 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' -<134>1 1647477795.385835866 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' -<134>1 1647477793.576467473 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647477793.576769233 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477795.385494917 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' +<134>1 1647477795.385835866 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' +<134>1 1647477793.576467473 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647477793.576769233 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' <134>1 1647477786.805604872 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8' <134>1 1647477780.705460109 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' <134>1 1647477778.398160444 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8' <134>1 1647477773.586461164 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' <134>1 1647477764.149946084 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' <134>1 1647477764.145077176 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8' -<134>1 1647477764.143985243 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' -<134>1 1647477764.144283174 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647477764.143985243 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647477764.144283174 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' <134>1 1647477763.225832662 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' <134>1 1647477744.039850991 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5' <134>1 1647477733.453967364 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8' <134>1 1647477733.446493073 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8' -<134>1 1647477733.420037284 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' -<134>1 1647477733.419042244 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' -<134>1 1647477733.411410011 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5' -<134>1 1647477716.431936901 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477733.420037284 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647477733.419042244 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647477733.411410011 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5' +<134>1 1647477716.431936901 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' <134>1 1647477716.431151781 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' -<134>1 1647477716.429168101 MR36 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477716.429168101 MR36 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' <134>1 1647477715.612600884 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' <134>1 1647477702.046252324 MR36 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5' <134>1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2' diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log index 851559291b7..777b6d1a05b 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log @@ -1,111 +1,111 @@ <134>1 1647479604.334549372 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5' <134>1 1647479580.487048774 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8' <134>1 1647479552.047395997 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' -<134>1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5' +<134>1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5' <134>1 1647479528.067423267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8' -<134>1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' <134>1 1647479489.882680227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8' <134>1 1647479484.972992227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' <134>1 1647479466.965046920 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8' -<134>1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5' +<134>1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5' <134>1 1647479459.181348678 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8' <134>1 1647479456.670048547 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8' -<134>1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5' +<134>1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5' <134>1 1647479442.047436097 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8' <134>1 1647479399.287689295 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8' <134>1 1647479376.407283267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' <134>1 1647479375.390251687 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8' <134>1 1647479371.594697827 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8' -<134>1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' -<134>1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5' +<134>1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5' <134>1 1647479353.446408965 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647479352.553639439 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' -<134>1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479352.553639439 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8' +<134>1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' <134>1 1647479346.794313756 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5' -<134>1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5' +<134>1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5' <134>1 1647479341.816936841 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' <134>1 1647479313.473165785 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5' -<134>1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5' +<134>1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5' <134>1 1647479299.115949027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8' <134>1 1647479294.302067007 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8' <134>1 1647479288.469042416 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5' -<134>1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8' +<134>1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8' <134>1 1647479278.839671334 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8' -<134>1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8' <134>1 1647479227.438567311 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8' <134>1 1647479222.927379747 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' <134>1 1647479222.927802947 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8' <134>1 1647479222.728876109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8' <134>1 1647479218.076400635 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5' <134>1 1647479203.375371107 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8' -<134>1 1647479199.622640025 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647479199.622640025 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' <134>1 1647479162.641725608 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' <134>1 1647479162.670104087 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8' -<134>1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8' +<134>1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8' <134>1 1647479151.958073405 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8' <134>1 1647479133.020606043 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5' <134>1 1647479127.384572447 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8' <134>1 1647479122.570882475 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' <134>1 1647479122.592807847 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8' <134>1 1647479122.578597672 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' -<134>1 1647479120.544286631 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5' +<134>1 1647479120.544286631 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5' <134>1 1647479091.258858944 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' -<134>1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5' +<134>1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5' <134>1 1647479037.677902643 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' <134>1 1647479036.783442760 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' <134>1 1647479020.949227955 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' -<134>1 1647478974.912056258 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5' -<134>1 1647478966.089203455 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8' -<134>1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' -<134>1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5' +<134>1 1647478974.912056258 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5' +<134>1 1647478966.089203455 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8' +<134>1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5' <134>1 1647478936.678862087 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5' <134>1 1647478907.739529447 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' <134>1 1647478855.303776534 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8' -<134>1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8' +<134>1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8' <134>1 1647478845.877942207 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8' <134>1 1647478822.111692485 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8' <134>1 1647478818.039157925 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8' -<134>1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5' +<134>1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5' <134>1 1647478799.177625347 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8' <134>1 1647478788.838283552 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8' -<134>1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5' -<134>1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' -<134>1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' -<134>1 1647478695.528431433 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5' +<134>1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5' +<134>1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' +<134>1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5' +<134>1 1647478695.528431433 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5' <134>1 1647478693.465185593 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' <134>1 1647478669.549413486 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8' <134>1 1647478626.517046787 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8' <134>1 1647478591.602996834 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' <134>1 1647478569.035635205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5' <134>1 1647478567.751044590 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8' -<134>1 1647478559.571303907 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5' +<134>1 1647478559.571303907 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5' <134>1 1647478558.540066660 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5' <134>1 1647478554.934781027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8' -<134>1 1647478541.587558726 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' -<134>1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5' -<134>1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' -<134>1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647478541.587558726 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' +<134>1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5' +<134>1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' +<134>1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8' <134>1 1647478483.410677512 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8' <134>1 1647478478.614722093 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8' <134>1 1647478440.565782942 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8' <134>1 1647478408.128821330 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8' -<134>1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5' +<134>1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5' <134>1 1647478383.070405853 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8' <134>1 1647478373.816434235 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8' -<134>1 1647478339.127895652 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5' +<134>1 1647478339.127895652 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5' <134>1 1647478298.296851316 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' -<134>1 1647478293.380396754 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' +<134>1 1647478293.380396754 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8' <134>1 1647478268.953109023 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8' -<134>1 1647478257.084985274 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5' +<134>1 1647478257.084985274 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5' <134>1 1647478256.341194724 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8' <134>1 1647478221.255609741 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8' -<134>1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' -<134>1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5' +<134>1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5' +<134>1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5' <134>1 1647478119.868477795 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8' -<134>1 1647478114.277373007 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647478114.277373007 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5' <134>1 1647478105.395836204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8' <134>1 1647478102.536782923 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5' <134>1 1647478092.108472035 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' @@ -113,9 +113,9 @@ <134>1 1647478063.434847715 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8' <134>1 1647478054.846444450 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5' <134>1 1647478039.876640835 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8' -<134>1 1647478035.923601924 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478035.923601924 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' <134>1 1647478034.762765475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8' -<134>1 1647478026.502834244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' +<134>1 1647478026.502834244 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8' <134>1 1647478020.564810050 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8' <134>1 1647478015.983013635 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8' <134>1 1647478006.707247789 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8' @@ -126,20 +126,20 @@ <134>1 1647477953.724449475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5' <134>1 1647477945.336342244 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5' <134>1 1647477944.121686758 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5' -<134>1 1647477940.363429956 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5' +<134>1 1647477940.363429956 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5' <134>1 1647477930.038516204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' <134>1 1647477927.225784460 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' <134>1 1647477920.683178115 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8' <134>1 1647477920.510699794 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8' <134>1 1647477891.986568005 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8' <134>1 1647477881.304873506 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8' -<134>1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' +<134>1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8' <134>1 1647477872.782332783 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8' <134>1 1647477871.675119845 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5' <134>1 1647477864.088023180 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8' <134>1 1647477834.810489249 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8' <134>1 1647477828.886032606 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8' -<134>1 1647477828.885258686 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8' +<134>1 1647477828.885258686 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8' <134>1 1647477828.799864712 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8' <134>1 1647477825.209110701 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8' <134>1 1647477825.021409913 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5' @@ -149,27 +149,27 @@ <134>1 1647477796.382227661 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' <134>1 1647477796.381818586 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8' <134>1 1647477795.407019364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8' -<134>1 1647477795.385494917 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' -<134>1 1647477795.385835866 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' -<134>1 1647477793.576467473 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8' -<134>1 1647477793.576769233 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' +<134>1 1647477795.385494917 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' +<134>1 1647477795.385835866 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8' +<134>1 1647477793.576467473 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8' +<134>1 1647477793.576769233 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8' <134>1 1647477786.805604872 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8' <134>1 1647477780.705460109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8' <134>1 1647477778.398160444 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8' <134>1 1647477773.586461164 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5' <134>1 1647477764.149946084 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8' <134>1 1647477764.145077176 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8' -<134>1 1647477764.143985243 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' -<134>1 1647477764.144283174 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647477764.143985243 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' +<134>1 1647477764.144283174 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8' <134>1 1647477763.225832662 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5' <134>1 1647477744.039850991 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5' <134>1 1647477733.453967364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8' <134>1 1647477733.446493073 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8' -<134>1 1647477733.420037284 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' -<134>1 1647477733.419042244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' -<134>1 1647477733.411410011 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5' -<134>1 1647477716.431936901 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477733.420037284 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647477733.419042244 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5' +<134>1 1647477733.411410011 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5' +<134>1 1647477716.431936901 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' <134>1 1647477716.431151781 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' -<134>1 1647477716.429168101 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' +<134>1 1647477716.429168101 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5' <134>1 1647477715.612600884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8' <134>1 1647477702.046252324 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5' diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index 27601178cf4..b0925845a12 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -146,7 +146,7 @@ "channel": "1", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "vap": "1" }, "device_type": "MR", @@ -164,7 +164,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -234,7 +234,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -252,7 +252,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -419,7 +419,7 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "vap": "13" }, "device_type": "MR", @@ -437,7 +437,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -553,7 +553,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -571,7 +571,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -830,7 +830,7 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -848,7 +848,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -877,7 +877,7 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "vap": "13" }, "device_type": "MR", @@ -895,7 +895,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -965,7 +965,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -983,7 +983,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479352.553639439 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647479352.553639439 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -1012,7 +1012,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1030,7 +1030,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -1059,7 +1059,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1077,7 +1077,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -1152,7 +1152,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1170,7 +1170,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -1245,7 +1245,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -1263,7 +1263,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -1338,7 +1338,7 @@ "channel": "1", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "vap": "1" }, "device_type": "MR", @@ -1356,7 +1356,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -1518,7 +1518,7 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -1536,7 +1536,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -1611,7 +1611,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "vap": "13" }, "device_type": "MR", @@ -1629,7 +1629,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -1929,7 +1929,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -1947,7 +1947,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479199.622640025 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479199.622640025 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -2068,7 +2068,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "vap": "1" }, "device_type": "MR", @@ -2086,7 +2086,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -2110,7 +2110,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "vap": "1" }, "device_type": "MR", @@ -2128,7 +2128,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -2428,7 +2428,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "vap": "1" }, "device_type": "MR", @@ -2446,7 +2446,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479120.544286631 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479120.544286631 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -2516,7 +2516,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -2534,7 +2534,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -2701,7 +2701,7 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "vap": "13" }, "device_type": "MR", @@ -2719,7 +2719,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478974.912056258 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478974.912056258 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -2743,7 +2743,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -2761,7 +2761,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478966.089203455 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647478966.089203455 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -2790,7 +2790,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -2808,7 +2808,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -2837,7 +2837,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -2855,7 +2855,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -3022,7 +3022,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -3040,7 +3040,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -3207,7 +3207,7 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "vap": "13" }, "device_type": "MR", @@ -3225,7 +3225,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -3341,7 +3341,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -3359,7 +3359,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -3388,7 +3388,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -3406,7 +3406,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -3435,7 +3435,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -3453,7 +3453,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -3482,7 +3482,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "vap": "1" }, "device_type": "MR", @@ -3500,7 +3500,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478695.528431433 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478695.528431433 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -3800,7 +3800,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -3818,7 +3818,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478559.571303907 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478559.571303907 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -3939,7 +3939,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -3957,7 +3957,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478541.587558726 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478541.587558726 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -3986,7 +3986,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -4004,7 +4004,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -4033,7 +4033,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -4051,7 +4051,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -4080,7 +4080,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -4098,7 +4098,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -4311,7 +4311,7 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "vap": "13" }, "device_type": "MR", @@ -4329,7 +4329,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -4445,7 +4445,7 @@ "channel": "1", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "vap": "1" }, "device_type": "MR", @@ -4463,7 +4463,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478339.127895652 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478339.127895652 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -4533,7 +4533,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -4551,7 +4551,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478293.380396754 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647478293.380396754 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -4626,7 +4626,7 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "vap": "13" }, "device_type": "MR", @@ -4644,7 +4644,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478257.084985274 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478257.084985274 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -4760,7 +4760,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -4778,7 +4778,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -4807,7 +4807,7 @@ "channel": "1", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "vap": "1" }, "device_type": "MR", @@ -4825,7 +4825,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -4895,7 +4895,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "vap": "1" }, "device_type": "MR", @@ -4913,7 +4913,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478114.277373007 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647478114.277373007 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -5259,7 +5259,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -5277,7 +5277,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478035.923601924 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647478035.923601924 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -5352,7 +5352,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -5370,7 +5370,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647478026.502834244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647478026.502834244 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -5859,7 +5859,7 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "vap": "13" }, "device_type": "MR", @@ -5877,7 +5877,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477940.363429956 MX84 airmarshal_events type=ssid_spoofing_detected ssid='KeepTruckin Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647477940.363429956 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -6177,7 +6177,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -6195,7 +6195,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -6454,7 +6454,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -6472,7 +6472,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477828.885258686 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647477828.885258686 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -6915,7 +6915,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -6933,7 +6933,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477795.385494917 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647477795.385494917 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -6962,7 +6962,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -6980,7 +6980,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477795.385835866 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647477795.385835866 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -7009,7 +7009,7 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -7027,7 +7027,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477793.576467473 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647477793.576467473 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -7056,7 +7056,7 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-DF-FD" }, "device_type": "MR", @@ -7074,7 +7074,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477793.576769233 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647477793.576769233 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -7379,7 +7379,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -7397,7 +7397,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477764.143985243 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647477764.143985243 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -7426,7 +7426,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-E1-41" }, "device_type": "MR", @@ -7444,7 +7444,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477764.144283174 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'", + "original": "\u003c134\u003e1 1647477764.144283174 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'", "type": [ "indicator" ] @@ -7657,7 +7657,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -7675,7 +7675,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477733.420037284 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647477733.420037284 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -7704,7 +7704,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -7722,7 +7722,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477733.419042244 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647477733.419042244 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -7751,7 +7751,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-D8-51" }, "device_type": "MR", @@ -7769,7 +7769,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477733.411410011 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647477733.411410011 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -7798,7 +7798,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin Guest", + "ssid": "AwesomeWifi Guest", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -7816,7 +7816,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477716.431936901 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647477716.431936901 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] @@ -7891,7 +7891,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "KeepTruckin", + "ssid": "AwesomeWifi", "wired_mac": "AC-17-C8-C7-E2-9D" }, "device_type": "MR", @@ -7909,7 +7909,7 @@ "category": [ "threat" ], - "original": "\u003c134\u003e1 1647477716.429168101 MX84 airmarshal_events type=rogue_ssid_detected ssid='KeepTruckin' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'", + "original": "\u003c134\u003e1 1647477716.429168101 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'", "type": [ "indicator" ] diff --git a/packages/cisco_meraki/kibana/dashboard/cisco_meraki-4832a430-af22-11ec-a899-6f7e676e0fb4.json b/packages/cisco_meraki/kibana/dashboard/cisco_meraki-4832a430-af22-11ec-a899-6f7e676e0fb4.json new file mode 100644 index 00000000000..34e854a18f1 --- /dev/null +++ b/packages/cisco_meraki/kibana/dashboard/cisco_meraki-4832a430-af22-11ec-a899-6f7e676e0fb4.json @@ -0,0 +1,1413 @@ +{ + "attributes": { + "description": "", + "hits": 0, + "kibanaSavedObjectMeta": { + "searchSourceJSON": { + "filter": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "cisco_meraki.log" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "cisco_meraki.log" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + } + } + }, + "optionsJSON": { + "hidePanelTitles": false, + "syncColors": false, + "useMargins": true + }, + "panelsJSON": [ + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-3a3dcc13-f41b-4ec8-bdee-41984ac44462", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "3a3dcc13-f41b-4ec8-bdee-41984ac44462": { + "columnOrder": [ + "ddc600aa-3c7e-44b9-9105-f2d28bbb21e2", + "f5197da9-e7af-4f34-8a29-be682cb06517" + ], + "columns": { + "ddc600aa-3c7e-44b9-9105-f2d28bbb21e2": { + "dataType": "string", + "isBucketed": true, + "label": "Top values of cisco_meraki.device_type", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "f5197da9-e7af-4f34-8a29-be682cb06517", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 5 + }, + "scale": "ordinal", + "sourceField": "cisco_meraki.device_type" + }, + "f5197da9-e7af-4f34-8a29-be682cb06517": { + "dataType": "number", + "isBucketed": false, + "label": "Count of records", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "cisco_meraki.log" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "cisco_meraki.log" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "layers": [ + { + "categoryDisplay": "default", + "groups": [ + "ddc600aa-3c7e-44b9-9105-f2d28bbb21e2" + ], + "layerId": "3a3dcc13-f41b-4ec8-bdee-41984ac44462", + "layerType": "data", + "legendDisplay": "default", + "metric": "f5197da9-e7af-4f34-8a29-be682cb06517", + "nestedLegend": false, + "numberDisplay": "percent" + } + ], + "shape": "pie" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsPie" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 13, + "i": "b57a8af9-b342-44e6-8cf5-30fb80140cd7", + "w": 9, + "x": 0, + "y": 0 + }, + "panelIndex": "b57a8af9-b342-44e6-8cf5-30fb80140cd7", + "title": "Events by device type", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-511effff-5682-4cfa-a2de-739bbefa93ea", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "511effff-5682-4cfa-a2de-739bbefa93ea": { + "columnOrder": [ + "b6287f3a-b96b-4973-b2d2-1e4f7830f9e5", + "0929169c-0ee9-4eb6-93b6-effcb648c779", + "c66ed022-eab0-4834-8a01-f508aa4b32b3" + ], + "columns": { + "0929169c-0ee9-4eb6-93b6-effcb648c779": { + "dataType": "date", + "isBucketed": true, + "label": "@timestamp", + "operationType": "date_histogram", + "params": { + "interval": "auto" + }, + "scale": "interval", + "sourceField": "@timestamp" + }, + "b6287f3a-b96b-4973-b2d2-1e4f7830f9e5": { + "dataType": "string", + "isBucketed": true, + "label": "Top values of cisco_meraki.event_type", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "c66ed022-eab0-4834-8a01-f508aa4b32b3", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 10 + }, + "scale": "ordinal", + "sourceField": "cisco_meraki.event_type" + }, + "c66ed022-eab0-4834-8a01-f508aa4b32b3": { + "dataType": "number", + "isBucketed": false, + "label": "Count of records", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "cisco_meraki.log" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "cisco_meraki.log" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "axisTitlesVisibilitySettings": { + "x": true, + "yLeft": true, + "yRight": true + }, + "fittingFunction": "None", + "gridlinesVisibilitySettings": { + "x": true, + "yLeft": true, + "yRight": true + }, + "labelsOrientation": { + "x": 0, + "yLeft": 0, + "yRight": 0 + }, + "layers": [ + { + "accessors": [ + "c66ed022-eab0-4834-8a01-f508aa4b32b3" + ], + "layerId": "511effff-5682-4cfa-a2de-739bbefa93ea", + "layerType": "data", + "position": "top", + "seriesType": "line", + "showGridlines": false, + "splitAccessor": "b6287f3a-b96b-4973-b2d2-1e4f7830f9e5", + "xAccessor": "0929169c-0ee9-4eb6-93b6-effcb648c779" + } + ], + "legend": { + "isVisible": true, + "position": "right" + }, + "preferredSeriesType": "line", + "tickLabelsVisibilitySettings": { + "x": true, + "yLeft": true, + "yRight": true + }, + "valueLabels": "hide", + "yLeftExtent": { + "mode": "full" + }, + "yRightExtent": { + "mode": "full" + } + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsXY" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 13, + "i": "03bf41fe-673d-4f95-9d6e-510d8dc46ba6", + "w": 13, + "x": 9, + "y": 0 + }, + "panelIndex": "03bf41fe-673d-4f95-9d6e-510d8dc46ba6", + "title": "Rate of events by type", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-abda3ec0-db97-4e02-a42e-45e716110de2", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "abda3ec0-db97-4e02-a42e-45e716110de2": { + "columnOrder": [ + "c59ef8c2-80ea-4386-834f-378f4a76b87c", + "c1fce02c-25a5-4a5c-a3a3-9412786a5520" + ], + "columns": { + "c1fce02c-25a5-4a5c-a3a3-9412786a5520": { + "dataType": "number", + "isBucketed": false, + "label": "Count of records", + "operationType": "count", + "params": {}, + "scale": "ratio", + "sourceField": "Records" + }, + "c59ef8c2-80ea-4386-834f-378f4a76b87c": { + "dataType": "string", + "isBucketed": true, + "label": "Top values of cisco_meraki.event_type", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "c1fce02c-25a5-4a5c-a3a3-9412786a5520", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 10 + }, + "scale": "ordinal", + "sourceField": "cisco_meraki.event_type" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "cisco_meraki.log" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "cisco_meraki.log" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "layers": [ + { + "categoryDisplay": "default", + "groups": [ + "c59ef8c2-80ea-4386-834f-378f4a76b87c" + ], + "layerId": "abda3ec0-db97-4e02-a42e-45e716110de2", + "layerType": "data", + "legendDisplay": "default", + "metric": "c1fce02c-25a5-4a5c-a3a3-9412786a5520", + "nestedLegend": false, + "numberDisplay": "percent" + } + ], + "shape": "donut" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsPie" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 13, + "i": "475cb47c-34d7-4c56-b57d-e27d25678fc8", + "w": 13, + "x": 22, + "y": 0 + }, + "panelIndex": "475cb47c-34d7-4c56-b57d-e27d25678fc8", + "title": "Event distribution by type", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-d8f74b4f-a83b-47bc-b862-2bc47ee790eb", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "d8f74b4f-a83b-47bc-b862-2bc47ee790eb": { + "columnOrder": [ + "d1a56033-ffe5-44ed-a05f-ab79d5db90aa", + "a6d64dae-3a8d-49c1-8e4d-b08758c35a09" + ], + "columns": { + "a6d64dae-3a8d-49c1-8e4d-b08758c35a09": { + "dataType": "number", + "isBucketed": false, + "label": "Unique count of cisco_meraki.event_type", + "operationType": "unique_count", + "scale": "ratio", + "sourceField": "cisco_meraki.event_type" + }, + "d1a56033-ffe5-44ed-a05f-ab79d5db90aa": { + "dataType": "string", + "isBucketed": true, + "label": "Top values of cisco_meraki.event_subtype", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "a6d64dae-3a8d-49c1-8e4d-b08758c35a09", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 10 + }, + "scale": "ordinal", + "sourceField": "cisco_meraki.event_subtype" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "layers": [ + { + "categoryDisplay": "default", + "groups": [ + "d1a56033-ffe5-44ed-a05f-ab79d5db90aa" + ], + "layerId": "d8f74b4f-a83b-47bc-b862-2bc47ee790eb", + "layerType": "data", + "legendDisplay": "default", + "metric": "a6d64dae-3a8d-49c1-8e4d-b08758c35a09", + "nestedLegend": false, + "numberDisplay": "percent" + } + ], + "shape": "donut" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsPie" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 13, + "i": "58bbda58-7c31-44e1-8568-d37c2c585e53", + "w": 13, + "x": 35, + "y": 0 + }, + "panelIndex": "58bbda58-7c31-44e1-8568-d37c2c585e53", + "title": "Event distribution by sub-type", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-9f3c668f-fec6-4125-ae7b-fcb073df79c1", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "9f3c668f-fec6-4125-ae7b-fcb073df79c1": { + "columnOrder": [ + "c379da24-eba4-47a5-b9aa-213324504619" + ], + "columns": { + "c379da24-eba4-47a5-b9aa-213324504619": { + "dataType": "number", + "isBucketed": false, + "label": "Unique count of source.mac", + "operationType": "unique_count", + "scale": "ratio", + "sourceField": "source.mac" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "cisco_meraki.log" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "cisco_meraki.log" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "accessor": "c379da24-eba4-47a5-b9aa-213324504619", + "layerId": "9f3c668f-fec6-4125-ae7b-fcb073df79c1", + "layerType": "data" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsMetric" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 5, + "i": "372a6801-2e52-4c4c-a674-746eec7f7e09", + "w": 9, + "x": 0, + "y": 13 + }, + "panelIndex": "372a6801-2e52-4c4c-a674-746eec7f7e09", + "title": "Count of source MAC address", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-5dc18b67-2c60-44c0-b3b5-7dd507bd4c3d", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-1", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "5dc18b67-2c60-44c0-b3b5-7dd507bd4c3d": { + "columnOrder": [ + "66ede758-6532-443e-834d-a847c964682f" + ], + "columns": { + "66ede758-6532-443e-834d-a847c964682f": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "No. of rogue SSIDs detected", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "cisco_meraki.log" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "cisco_meraki.log" + } + } + }, + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-1", + "key": "cisco_meraki.event_subtype", + "negate": false, + "params": { + "query": "rogue_ssid_detected" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "cisco_meraki.event_subtype": "rogue_ssid_detected" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "accessor": "66ede758-6532-443e-834d-a847c964682f", + "layerId": "5dc18b67-2c60-44c0-b3b5-7dd507bd4c3d", + "layerType": "data" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsMetric" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 5, + "i": "8baff03a-7860-4fcc-90ff-3d5534e70845", + "w": 9, + "x": 9, + "y": 13 + }, + "panelIndex": "8baff03a-7860-4fcc-90ff-3d5534e70845", + "title": "Number of rogue SSIDs detected", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-bcffdee9-d006-4e9c-abcc-081ac4739d02", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-1", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "bcffdee9-d006-4e9c-abcc-081ac4739d02": { + "columnOrder": [ + "86b75fce-daae-4725-8de4-6bcd5c7cc80a" + ], + "columns": { + "86b75fce-daae-4725-8de4-6bcd5c7cc80a": { + "customLabel": true, + "dataType": "number", + "isBucketed": false, + "label": "No. of SSID spoofing detected", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "cisco_meraki.log" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "cisco_meraki.log" + } + } + }, + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-1", + "key": "cisco_meraki.event_subtype", + "negate": false, + "params": { + "query": "ssid_spoofing_detected" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "cisco_meraki.event_subtype": "ssid_spoofing_detected" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "accessor": "86b75fce-daae-4725-8de4-6bcd5c7cc80a", + "layerId": "bcffdee9-d006-4e9c-abcc-081ac4739d02", + "layerType": "data" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsMetric" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 5, + "i": "bcfe3eee-750d-476f-b7c1-afec41803720", + "w": 9, + "x": 18, + "y": 13 + }, + "panelIndex": "bcfe3eee-750d-476f-b7c1-afec41803720", + "title": "Number of SSID spoofing detected", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "description": "", + "layerListJSON": "[{\"sourceDescriptor\":{\"type\":\"EMS_TMS\",\"isAutoSelect\":true},\"id\":\"09082ad3-0055-461d-bf69-2b69a5dfb298\",\"label\":null,\"minZoom\":0,\"maxZoom\":24,\"alpha\":1,\"visible\":true,\"style\":{\"type\":\"TILE\"},\"includeInFitToBounds\":true,\"type\":\"VECTOR_TILE\"},{\"sourceDescriptor\":{\"indexPatternId\":\"logs-*\",\"sourceGeoField\":\"source.geo.location\",\"destGeoField\":\"destination.geo.location\",\"id\":\"ce84cee6-da49-4261-beaa-628ca03abc52\",\"type\":\"ES_PEW_PEW\",\"applyGlobalQuery\":true,\"applyGlobalTime\":true,\"applyForceRefresh\":true,\"metrics\":[{\"type\":\"count\"}]},\"style\":{\"type\":\"VECTOR\",\"properties\":{\"icon\":{\"type\":\"STATIC\",\"options\":{\"value\":\"marker\"}},\"fillColor\":{\"type\":\"STATIC\",\"options\":{\"color\":\"#54B399\"}},\"lineColor\":{\"type\":\"DYNAMIC\",\"options\":{\"color\":\"Green to Red\",\"colorCategory\":\"palette_0\",\"field\":{\"name\":\"doc_count\",\"origin\":\"source\"},\"fieldMetaOptions\":{\"isEnabled\":true,\"sigma\":3},\"type\":\"ORDINAL\",\"useCustomColorRamp\":false}},\"lineWidth\":{\"type\":\"STATIC\",\"options\":{\"size\":3}},\"iconSize\":{\"type\":\"STATIC\",\"options\":{\"size\":6}},\"iconOrientation\":{\"type\":\"STATIC\",\"options\":{\"orientation\":0}},\"labelText\":{\"type\":\"DYNAMIC\",\"options\":{\"field\":{\"label\":\"count\",\"name\":\"doc_count\",\"origin\":\"source\",\"type\":\"number\",\"supportsAutoDomain\":true}}},\"labelColor\":{\"type\":\"STATIC\",\"options\":{\"color\":\"#000000\"}},\"labelSize\":{\"type\":\"STATIC\",\"options\":{\"size\":14}},\"labelBorderColor\":{\"type\":\"STATIC\",\"options\":{\"color\":\"#FFFFFF\"}},\"symbolizeAs\":{\"options\":{\"value\":\"circle\"}},\"labelBorderSize\":{\"options\":{\"size\":\"SMALL\"}}},\"isTimeAware\":true},\"id\":\"8dec8632-de8b-43df-9731-5c6c45ecb45f\",\"label\":\"src-dst-ip-p2p\",\"minZoom\":0,\"maxZoom\":24,\"alpha\":0.75,\"visible\":true,\"includeInFitToBounds\":true,\"type\":\"VECTOR\",\"joins\":[]}]", + "mapStateJSON": "{\"zoom\":1.61,\"center\":{\"lon\":0,\"lat\":19.94277},\"timeFilters\":{\"from\":\"now-2y\",\"to\":\"now\"},\"refreshConfig\":{\"isPaused\":true,\"interval\":0},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[{\"meta\":{\"index\":\"logs-*\",\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"data_stream.dataset\",\"params\":{\"query\":\"cisco_meraki.log\"}},\"query\":{\"match_phrase\":{\"data_stream.dataset\":\"cisco_meraki.log\"}},\"$state\":{\"store\":\"appState\"}}],\"settings\":{\"autoFitToDataBounds\":false,\"backgroundColor\":\"#ffffff\",\"disableInteractive\":false,\"disableTooltipControl\":false,\"hideToolbarOverlay\":false,\"hideLayerControl\":false,\"hideViewControl\":false,\"initialLocation\":\"LAST_SAVED_LOCATION\",\"fixedLocation\":{\"lat\":0,\"lon\":0,\"zoom\":2},\"browserLocation\":{\"zoom\":2},\"maxZoom\":24,\"minZoom\":0,\"showScaleControl\":false,\"showSpatialFilters\":true,\"showTimesliderToggleButton\":true,\"spatialFiltersAlpa\":0.3,\"spatialFiltersFillColor\":\"#DA8B45\",\"spatialFiltersLineColor\":\"#DA8B45\"}}", + "title": "", + "uiStateJSON": "{\"isLayerTOCOpen\":true,\"openTOCDetails\":[]}" + }, + "enhancements": {}, + "hiddenLayers": [], + "hidePanelTitles": false, + "isLayerTOCOpen": false, + "mapBuffer": { + "maxLat": 85.05113, + "maxLon": 180, + "minLat": -85.05113, + "minLon": -180 + }, + "mapCenter": { + "lat": 19.50912, + "lon": -10.59576, + "zoom": 0.61 + }, + "openTOCDetails": [] + }, + "gridData": { + "h": 12, + "i": "beacf090-799a-415a-bbad-302cd02d50be", + "w": 21, + "x": 27, + "y": 13 + }, + "panelIndex": "beacf090-799a-415a-bbad-302cd02d50be", + "title": "IP Flows", + "type": "map", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-9a165bef-572a-44fb-9285-70d75530b799", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "9a165bef-572a-44fb-9285-70d75530b799": { + "columnOrder": [ + "9df0ec49-bc15-494a-8ca7-437cd63ee7cd", + "aca7f561-3ca9-4705-bf6e-e470d1fb0536", + "5a195aa9-a6fa-45cd-94a7-89f782c9a638" + ], + "columns": { + "5a195aa9-a6fa-45cd-94a7-89f782c9a638": { + "dataType": "number", + "isBucketed": false, + "label": "Unique count of event.action", + "operationType": "unique_count", + "scale": "ratio", + "sourceField": "event.action" + }, + "9df0ec49-bc15-494a-8ca7-437cd63ee7cd": { + "dataType": "string", + "isBucketed": true, + "label": "Top values of event.category", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "5a195aa9-a6fa-45cd-94a7-89f782c9a638", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 5 + }, + "scale": "ordinal", + "sourceField": "event.category" + }, + "aca7f561-3ca9-4705-bf6e-e470d1fb0536": { + "dataType": "string", + "isBucketed": true, + "label": "Top values of event.action", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "5a195aa9-a6fa-45cd-94a7-89f782c9a638", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 10 + }, + "scale": "ordinal", + "sourceField": "event.action" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "cisco_meraki.log" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "cisco_meraki.log" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "layers": [ + { + "categoryDisplay": "default", + "groups": [ + "9df0ec49-bc15-494a-8ca7-437cd63ee7cd", + "aca7f561-3ca9-4705-bf6e-e470d1fb0536" + ], + "layerId": "9a165bef-572a-44fb-9285-70d75530b799", + "layerType": "data", + "legendDisplay": "default", + "metric": "5a195aa9-a6fa-45cd-94a7-89f782c9a638", + "nestedLegend": false, + "numberDisplay": "percent" + } + ], + "shape": "pie" + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsPie" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 19, + "i": "e359d544-a8d6-4019-9756-74519a9d3335", + "w": 27, + "x": 0, + "y": 18 + }, + "panelIndex": "e359d544-a8d6-4019-9756-74519a9d3335", + "title": "Events by category and action", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "attributes": { + "references": [ + { + "id": "logs-*", + "name": "indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "indexpattern-datasource-layer-04c98418-d7c7-4552-9ed3-d0380795febd", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "filter-index-pattern-0", + "type": "index-pattern" + } + ], + "state": { + "datasourceStates": { + "indexpattern": { + "layers": { + "04c98418-d7c7-4552-9ed3-d0380795febd": { + "columnOrder": [ + "1e47d004-4347-46ee-aed2-280f64e8888d", + "4c2300ef-9033-45bd-8b0e-06deea3996f1" + ], + "columns": { + "1e47d004-4347-46ee-aed2-280f64e8888d": { + "dataType": "string", + "isBucketed": true, + "label": "Top values of url.original", + "operationType": "terms", + "params": { + "missingBucket": false, + "orderBy": { + "columnId": "4c2300ef-9033-45bd-8b0e-06deea3996f1", + "type": "column" + }, + "orderDirection": "desc", + "otherBucket": true, + "size": 5 + }, + "scale": "ordinal", + "sourceField": "url.original" + }, + "4c2300ef-9033-45bd-8b0e-06deea3996f1": { + "dataType": "number", + "filter": { + "language": "kuery", + "query": "" + }, + "isBucketed": false, + "label": "Count of records", + "operationType": "count", + "scale": "ratio", + "sourceField": "Records" + } + }, + "incompleteColumns": {} + } + } + } + }, + "filters": [ + { + "$state": { + "store": "appState" + }, + "meta": { + "alias": null, + "disabled": false, + "indexRefName": "filter-index-pattern-0", + "key": "data_stream.dataset", + "negate": false, + "params": { + "query": "cisco_meraki.log" + }, + "type": "phrase" + }, + "query": { + "match_phrase": { + "data_stream.dataset": "cisco_meraki.log" + } + } + } + ], + "query": { + "language": "kuery", + "query": "" + }, + "visualization": { + "layers": [ + { + "accessors": [ + "4c2300ef-9033-45bd-8b0e-06deea3996f1" + ], + "layerId": "04c98418-d7c7-4552-9ed3-d0380795febd", + "layerType": "data", + "position": "top", + "seriesType": "bar_horizontal", + "showGridlines": false, + "xAccessor": "1e47d004-4347-46ee-aed2-280f64e8888d", + "yConfig": [ + { + "axisMode": "auto", + "forAccessor": "4c2300ef-9033-45bd-8b0e-06deea3996f1" + } + ] + } + ], + "legend": { + "isVisible": true, + "position": "right" + }, + "preferredSeriesType": "bar_horizontal", + "title": "Empty XY chart", + "valueLabels": "hide", + "yLeftExtent": { + "mode": "full" + }, + "yRightExtent": { + "mode": "full" + } + } + }, + "title": "", + "type": "lens", + "visualizationType": "lnsXY" + }, + "enhancements": {}, + "hidePanelTitles": false + }, + "gridData": { + "h": 12, + "i": "58d65007-15fc-492f-a8db-f509b7d28aad", + "w": 21, + "x": 27, + "y": 25 + }, + "panelIndex": "58d65007-15fc-492f-a8db-f509b7d28aad", + "title": "Top URL access", + "type": "lens", + "version": "7.17.0" + }, + { + "embeddableConfig": { + "enhancements": {} + }, + "gridData": { + "h": 20, + "i": "a7fc4a8a-954f-4fc0-acfc-2d358c89b2c6", + "w": 48, + "x": 0, + "y": 37 + }, + "panelIndex": "a7fc4a8a-954f-4fc0-acfc-2d358c89b2c6", + "title": "Log stream", + "type": "LOG_STREAM_EMBEDDABLE", + "version": "7.17.0" + } + ], + "timeRestore": false, + "title": "[Logs Cisco Meraki Syslog Events] Overview", + "version": 1 + }, + "coreMigrationVersion": "7.17.0", + "id": "cisco_meraki-4832a430-af22-11ec-a899-6f7e676e0fb4", + "migrationVersion": { + "dashboard": "7.17.0" + }, + "references": [ + { + "id": "logs-*", + "name": "kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "b57a8af9-b342-44e6-8cf5-30fb80140cd7:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "b57a8af9-b342-44e6-8cf5-30fb80140cd7:indexpattern-datasource-layer-3a3dcc13-f41b-4ec8-bdee-41984ac44462", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "b57a8af9-b342-44e6-8cf5-30fb80140cd7:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "03bf41fe-673d-4f95-9d6e-510d8dc46ba6:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "03bf41fe-673d-4f95-9d6e-510d8dc46ba6:indexpattern-datasource-layer-511effff-5682-4cfa-a2de-739bbefa93ea", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "03bf41fe-673d-4f95-9d6e-510d8dc46ba6:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "475cb47c-34d7-4c56-b57d-e27d25678fc8:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "475cb47c-34d7-4c56-b57d-e27d25678fc8:indexpattern-datasource-layer-abda3ec0-db97-4e02-a42e-45e716110de2", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "475cb47c-34d7-4c56-b57d-e27d25678fc8:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "58bbda58-7c31-44e1-8568-d37c2c585e53:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "58bbda58-7c31-44e1-8568-d37c2c585e53:indexpattern-datasource-layer-d8f74b4f-a83b-47bc-b862-2bc47ee790eb", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "372a6801-2e52-4c4c-a674-746eec7f7e09:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "372a6801-2e52-4c4c-a674-746eec7f7e09:indexpattern-datasource-layer-9f3c668f-fec6-4125-ae7b-fcb073df79c1", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "372a6801-2e52-4c4c-a674-746eec7f7e09:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "8baff03a-7860-4fcc-90ff-3d5534e70845:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "8baff03a-7860-4fcc-90ff-3d5534e70845:indexpattern-datasource-layer-5dc18b67-2c60-44c0-b3b5-7dd507bd4c3d", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "8baff03a-7860-4fcc-90ff-3d5534e70845:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "8baff03a-7860-4fcc-90ff-3d5534e70845:filter-index-pattern-1", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "bcfe3eee-750d-476f-b7c1-afec41803720:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "bcfe3eee-750d-476f-b7c1-afec41803720:indexpattern-datasource-layer-bcffdee9-d006-4e9c-abcc-081ac4739d02", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "bcfe3eee-750d-476f-b7c1-afec41803720:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "bcfe3eee-750d-476f-b7c1-afec41803720:filter-index-pattern-1", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "beacf090-799a-415a-bbad-302cd02d50be:layer_1_source_index_pattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "e359d544-a8d6-4019-9756-74519a9d3335:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "e359d544-a8d6-4019-9756-74519a9d3335:indexpattern-datasource-layer-9a165bef-572a-44fb-9285-70d75530b799", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "e359d544-a8d6-4019-9756-74519a9d3335:filter-index-pattern-0", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "58d65007-15fc-492f-a8db-f509b7d28aad:indexpattern-datasource-current-indexpattern", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "58d65007-15fc-492f-a8db-f509b7d28aad:indexpattern-datasource-layer-04c98418-d7c7-4552-9ed3-d0380795febd", + "type": "index-pattern" + }, + { + "id": "logs-*", + "name": "58d65007-15fc-492f-a8db-f509b7d28aad:filter-index-pattern-0", + "type": "index-pattern" + } + ], + "type": "dashboard" +} \ No newline at end of file From dd29325472f2c18fa120a96b9b640c337020a0a2 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 29 Mar 2022 16:53:45 +1100 Subject: [PATCH 28/67] Add dashboard screenshots --- .../img/cisco-meraki-dashboard-1.png | Bin 0 -> 407070 bytes .../img/cisco-meraki-dashboard-2.png | Bin 0 -> 854896 bytes .../img/cisco-meraki-dashboard-3.png | Bin 0 -> 632033 bytes packages/cisco_meraki/img/cisco.svg | 1 - .../cisco_meraki/img/sample-screenshot.png | Bin 18849 -> 0 bytes packages/cisco_meraki/manifest.yml | 12 ++++++++++-- 6 files changed, 10 insertions(+), 3 deletions(-) create mode 100644 packages/cisco_meraki/img/cisco-meraki-dashboard-1.png create mode 100644 packages/cisco_meraki/img/cisco-meraki-dashboard-2.png create mode 100644 packages/cisco_meraki/img/cisco-meraki-dashboard-3.png delete mode 100644 packages/cisco_meraki/img/cisco.svg delete mode 100644 packages/cisco_meraki/img/sample-screenshot.png diff --git a/packages/cisco_meraki/img/cisco-meraki-dashboard-1.png b/packages/cisco_meraki/img/cisco-meraki-dashboard-1.png new file mode 100644 index 0000000000000000000000000000000000000000..7f6816cf7318e3b7e3df29a5a5166769a1e67b9c GIT binary patch literal 407070 zcmZ^K1z1#D+cqVj2q*{$NJuvV(kUqoQqm&L00YC2LrO_ENP|e1(hQ}7bV`i0^w7;v z1OIT&dDZW{??2Zy?8V-z_F7Ne>wcaI(@;~uze8~c4Gj%n@ww~^)MXeA4Pyou8+FIn z!R0X;+Fg5F85s>l85vp)5YWoj-VzP%d03Jj&P%Nx(k#RH*w|r=`>{k`3SLP>(s;DA zIv?-HOG$_EJTCh2k%O(l?f#eWif|Sv6r-x>Z3{SdKk)1PamRL z7F{WFq<{8V9dq^?m^dL`pcj>gZH!ajg4wM0F}hvzvNtFT1e!S%ZJ`Cb14 z`i=mx$0>xL=-j$4FIn#xp?~76Ns+p{gf5Xf?__lyCF$}myKjKHv$q*rj#HZgp4xCDD%EsTZMfUzSlnfMvaWbDV}yB)Z>#BX>w83Bwc2F z&Oz{mwc;d4(iMlE2wZPrGeAr*HGk2M{(+PB!wd4);7 z)Lx$K_T(oSfft@{=zNvm5@RjCy~il2`;HM`U1Kt3wJ+r0TOF=k#!C_j4O*3O?Fk&w zo+W}#LYFUGcpYWSkEsLfjrujXyr0>;<8|L^l*-5`T3k~=`MuSk&rAP7yS_wsRW|PGBsBpc`z)Cb8e|%|l;%>7(EG;R5d$q2D z;C9iK=R!X*Si7+?et!6Vci=hIqxKjkxKM52i;?j zsu)7<%Y?;sIK8KGe2cSq<#D$eyL~m};%BRjr*|#07-J1F_5BKB5!`y_h*jmb2+&=) z|K&o7frYOj-V6oEYw@uMnnh^85T+oOS_95e``5r6YxN?_(nVeE;4>=3Jn!kMZP8XY zmqnu3n@1{jNZ*2xmXNh45$`AFClts5t4=MG?ey~()_z((5?gs~^&O<UvWyIh#umcy&|4XwE~xRLF@47P@zs0ApKK533+-Lm z0HIi{@1GeSw%n_5VSR^f72uhJl^8(sin9nS{fodyyscX}QkXW_U0-aS(2cNRUyK{P zM7}5wW6lNmVm*6~i=Ru6{g(B0un?`|TSB6@L63Q!W5kD8&`!R67)M_nd+RxQ)tzG5 zIy(ODp>DHfArOJBf+Ia)9M>}b!ToO5gQ_r`vdZY@8#gqU~+>1 z-8{&!*O8DHdP}rh4)=)3-B%kAG5Ojvp3p=_eKT8sNy_wX^;P~$Vcn>4Gu1s|({Cal z9k(#mI@X1V-QTba5vg~2o@#p&v_7cpa9=n+RlH=oy0`nK?Vb%5{Ts|LF`pkt(pwN0 z+*iU~38D&;3DR=nb|sp-A0~@E5(39Zyr$p@6-sDGY=~=!`5|r3EWvaV|C|9c9+TDo zfx=?^o#%`njz5ThF#o{*LG49$8Z@mqE#08O0GjsFq1B*q%CR=jPH!x$_&A}qTh~Go z^e9z5>zRq#oSGw@DV=-#1?$uUN+mSLuy~nNh2oqsO*PFO&AF1&()7}ck{BJbVzN@b zqFp`7(kl%lrcS7xx}_Gg#>$xGSmqe%hQo#-MU<5)UP1oo9h*KI{u<&MoEiyyXh=1- zLSQA2UY=5($x?VHyJ}TI5|gq^yj7f4C){2nrq#bS(>HvsSb3~=WCgwo zPhQ^{cNpCs867zsRvt;O(93t1tqcs{DI8PzJqDU(W2R^9H7{LDZBQp*j6QK9khUp+PBKvsrs?Oyi#T3@rr^DJ7(9WZG z>v#p!3E%q7b)Ts7Li!{7=?0dq3aKceK4LdwZfhsp z2}-ssU!h{JN{UGuw#ytRFGWlUOcYN6$e+kh@qfQ!k}H-#r9@y_+rpmDrb1_8B}U@|N*lI~Ta{ z-8(#B-xK|bC~QmctGIT&UdwZk$CC%rAca1Q`BQ%6&!LYce|Nuu@gsdV$6HEmsw0*k zbnj@I=}*b~qLbRE+Pz2?iRkc!9~@+DcV!JY-u@;{FRd&y{T2K*zMZX|Iw(EVIusUy zkoA!7kF*J6kd;@ch-~iRS=|%j&&XogEt=G1&MO`X8%Y|8dA()+fk)MRm`BrGH>Qyc zK*ApF@D|fKqhZ_`vE;B=*m*6IEF|D-KmMcecE#;#qCtl5#LUb)YThXi;%mg#9jhFw z#2WeK_$;NBRC_PRhR1Y@sg~rU(#3bA)6CLX%6T#qv*KInTim^WoYpRhGJB}8q&k_u zALv*o9#ZAaNEBS}wixJ{>A~T{B`+p#;*)S*Y8aoHQ&C$D>8GYnua8E=)AXCR?-F6* z>fX+>yk$||>y=hjP8s9;a!&{kozjZa{lUepI+ZkwD_e=N-{C&DWs*n`taeSFEc2|U9<&;m6TwMM5H57B_%;*lA{s#- z?mm#$-)12smxoUT4Kdq=YYI}_=R5DvRE{QGip^OyZnB4QF_ghL* z{gS>RKndiUzI2YT=_@b4Z@5`nUfNfGzn;Vq0u{HsNX_>4EtxcH$g}TS%UsN)Y9eyW zEZeUro^+^zcyb!BS8h-7nGLP9`^#W&tROjPou*?Cg0Ud>-XbwpwVdx(G^QZUb zEu8VmJ4=&YH1%qZEs)nUVF2c?EPGKBpN*~cy;0`DkAsgyDV^%hGUglG*L(&AjrO1# zej|sAx$|OvqGPM$x_&(uFP1Fl`&75{rejQQLqV5z@bOWY5RA(xre)5T{;ab+o!HTB zW^vxjS9JGeQ#9E9e3x{deullJ(zWd}U?gy3e%p5*wlMCzYzA+Sh#{hx_34LP9)xZ6 z6b=Tf+p70vr%IH1?wm9?vNvxYMC@~mm@1i^xTjp^BD+HL>MDKD_)do+#FxB8OqERu zoAu8per^x8iCx)kNA3FTaa|i&cJdG7hx4EiC_JY&5DX8I4Z%p*MkVScWPCaW9$6#JCB<$0OnOn2p34ry5=lVE+Av$NB#%2>tWF33nmk`;vOgNX@@LZ{_N-_sX)GTi3;>gS=` z!z~9ig95gpoI8)d^0g;x+=8}vz2-SpOI#ZTf-YNe!g0kuBam%q4~FA1s2@0ap^hKn zmM;~pR8`T~P-R>+EOZLATc{E`>MMax`Kv6C&Vq*d*L@5$v`||#tbgjLp{_TdSk(8X z&EHqd_z*N4)PF>%uSX8Xe`@0o=V1P)j4^|HhW1QLMo|%U)iMWJS~|Me0Kq^>s$kTO z+fL8*UC_`-8E?MmiZ2-UQ2oPfwO@i?s;Y>X10A@`EP$^qxjY=4Zu&tJ^AJH59W23S zv>p!jjxHh|;&gx25J8o1ZgbPo{#6AG5T|>oszECQ1X1@DYClPLLcXxL#cRns4$eNo+SXh|*2`@JDTNv&=o9BM|U&Oug~A}wDhq3J(8o#Kd*&)LGGI;+&o-Q zxPSGHYASYfS46|s!_r<~*46>FW~ebF1o?Qy{;L09PkxX1N6VMLTk`Sq3H;ggk4OJ* zs^ek_k^wrP#so|J-miZe|M~ErhGN_|ul~nU{JqY9-9;_5#2qp2Uz;XzC+pf~1+|Zl zY-QE8QCF0d-F(m;QGZzezM{$)UwWt9Gw9IJq|g*)pJ{ubZ)M)fcqBLRd0y!*T|-kl z&a=SH6@Sb(IH6Lwq%+4(?l7sn_BX^ku|FAXoP>=CpG#x##1Hi9Ra%<@UAOzU`pX6e zuQt0JJ>AFKMD1IAk2jKZ21<$(FrPDxV`lArk;?aX@Bj2NOpg1YZAR3kGZOwRk>66vI(+s>9)w$$x!`IQ{hxloSQt@c zIdzjCUkXrERcztz-Zu~WXOjPPqhXH~ZaT;Ry1PaG&BOmQKh)cRnEhwcMcECc|EYZQ zayLb(F8X1Vy^_a-cHS|GTo#$b>wNq8KM(!YX=_jI0f8bDNmqQd`2RHdH7ciij?c1j zIu58ZjyB}i-M=RsF!9)bW?ICkk?sGyDyruPI01EW5K8jl;`jAm`X0%n?f zbB>qie)v0D>9`^v7f(j5Zcx^WWA5PouBdS@pa6flSGMIl|14Miw4gn$g>fn+kHNn- z+h6K2R$8*Tq3&EQ4;_Ny_Um6$|7Y23R57|+$`w-pGXGv{2(b;IQBWW!oySEtk7_VA zYQ>w|bvr8Z;*Xji=yT+q2RXQmb+FAFR~jGk3EvLFrqy8n4zx#Y3l~cZAOiA~@ zm!AQ({Au7ufq%EE5eztqhm2AT2UBLG_tp!F?GXN6g4ir64-pxyvoW3C56xmN3&!V7 zZ^tG!^zTLun#UGQ#F_aNY-$nwuK&*)@7;dNI3IFc+) z_ZD^r%}kRHg+TrizCUC}>JZh(8mbRbQZ9tubr8BS2-Bsv&!~z6$&e@DT4y%32sSJl zMHD{xE!nh^7>b8==NY2$kCAV9JRKZ}v*v~yOdaRoV5)Zp*aBtf$BsSx44b{n#I*k< zMya?@73RuaG3+em8k@lFI(L%X9lZai>KMF{3hXG+14xQj4%}*lJ-_$IZvCx8%J*0V z8e!R5_EHE~WXZYlkn1tEtZeV>;0CDBzJi52raAVh?$e7Dx<6D%qYO)XKeuoNHa4N; z5Otxb-!cwK1H7ydFxj<~D1SV=ev!LiRD!?R``U;5A=&@k#Q<;I$m~6c#K822@}8zz zSGL^=#ne%2@b(MVS*W{KlhjDk910B>h{KR ztweE67kstveK4EzFthh(MHjTH!-TW|^Z!UI*b9T|i~k_?i}A9J=X2W=wWa+M7xp`! zKhH$LQS+qx?|HHZNFV+G*7KWEjxY#VAk26dKDKED<6>n56%Zu;Awr3y=(E~I%mOyu zR^^umQqb*?w!=at0 zhfQQ}6YJ2{B0=y7&9cdg?0>x2e{4p;B2#Qk7FlC`LpEbx;2+v|Qw-?Dx`VRIrun%H zHx{b8gkZ=8|JCzf)-PaCmUdPVe<4J=K6u!Hjw3>lgo1`IgHJ|8Y>1rv-&QbRE+>zC znAJz8WNczgX?L#WL+PRX8qK36$xM~dP8-T)lk5k!|F)bgOc;&pp2ts8k3#b|jA9`X z>tVd4|E{!mdzl_FwZP-+CrL#)Ed1<8W~tI2FA6Wix=Q02WmTY1TU2*sD@&M~8Uyio z^0rZo=lAkYe6x<(nH6D|Uj0KAZ>(6(hudITOc5X29kgfbbLHuW(l92W zc?}7u@)O;E`MB3~vBpCHdb$7M?`elW;Vv^F3J79)tYkycjk~;dB7ftG8j1k@9c^Fn z)cN`6FHI_#@0aj0)@o`1D~@;EEjaWH4NK)ln51W)|EN{Y2Rln*{d)~q#4)JG{VSkQ zgA8JkRKTF{hNVGVVl!Zfg%MEzQXJasZs~mcUl<@fNyHbNawCZUGJ|CWGz zEIc=pRHF&ZQW6?6a$#IHKK_`sJ^T(eYZ7;@18xv7tYtt2=eJe)3y;{|e_psIx5HU( z-EaSg9^VwfRv4)(a|}uL^5BQVjQVlEB{(zfbAPH%92xY^nrB5nvM4Sis~6Y_!d4)A zSFClK*_b)4@p4IQq!`iYI14rS-&39RuPCugKH8ZzRGAxB&@!nAZT~l)7NK8`#roL}F%&lpAyMezKxng2{x$`{MKQ4fDj z8=C+jI89Qk7Wgf#(_fAC-XE{~8pBU5D@~)!CYbXne>o-2xc}hyV(-lUkwRqAe<VB# z|I6dbe@=l69A@-bnv<2JZir8L0?j77|R6Tjo_21*&u7H6eS$582!OxxQ+R zwY6R^;4~uUE-WX?^m%QvTP%7QQ&`gWNe_QiJ=-W+8WdpO_+x2lHA=AT>2n7O8|$BD zgLwLEzKPY@17#Gb-0Orj{{)5sFBo5eDtnqqL(fez+a~lsf+IX~nhq-<%imH=>Hvb| zgyhZH_BA8es&$)N_-Z0&PtP1?8gOM$qOyDrs7yuyrS~16t6OA!DW*OoG20vL+yJun zTIZ#%z70Sbag6!(my6!UwG8sLU(y_#>7P|4xgOJl!b10fv^BS^Y7)V1MhV?`nRVki zlz0F;JBte8bYM-EgR#E8CTj#|T@gp^GEvn+2xT{sG6(f63ZtE$ZvvP7F++RFOnpdw28owKn1+;^ogDFwlt(y}e0o~BP3 zhLuk>J?qPw#k{m#U2EfJO34pp3r*m50D#4yu$O{E+97-TO!^KKu0^5cc^cQX+*2su zNfL@LE_;4#$meBZ=uq9_eKgXgIScCJV&{%LSCPmBnqOKd$~8so%r1%D{@b2NLGBL| zb`UccqZ@nH6l)yT4Ig!VSb-J~JMctCuGs75@@ZvMbU#ssVp)BFhjQ2eQU6nr(U`V1R<*4-k4eZ;Etn4GKWlCANe1hDwk ztbT^Y5LlaEq*61+s~EGD?R#lbO>hBV6=t9QF{M>uue6)wFtd-z@}{G*?TQU>0vLvs zSG!4iE-&CrIat8`r|`uEfBU4&EdLFZGn!uIw^7Qn8)S)vq|0zm))%h@&7?2uL^jqX zo*8b4YVd$8RDN0Z9Btgwi*#4Dt1GKf#FSA2HkdUAg$c+rA1!L;nIt~Dzz;K|_8vwD zb*>k7o+YcjlG1xPf;^Gb$bvW~qTq6q5o92#>f5Rx_m*_|k4+jwV9JlZs~!b&%V^cw#O?!zGos}4EB_l=wu7(qyU!EcCW^V27j-iKGtt&GImjUzl63aG7Y-%kkr zjoVp#F{tMJE1KyJp6cEI=GFUZW9(T}AOH51mW*&hj4_>(o&q+wmKR|(a2=9fIWw(^ z4>!=tj<==Hy~2a;7Z@%#A99CZ@lg4U-3NW$?|QmPqpRGjpV~Q*1+wHCVjXQrzf~73 zTEAiiH42F)U?Eeg3HUv@4L-`5=n$fyX8AKg&jF+5VvCp=m+qFvYP%9t>)Va>tl`^+ z^U1t^%Dy;urgk$_zwCP=S3n4Ipah}115{gw_*A;E<~3qdSiazQkx%3-b;-@8Ytt^; z+n)F1)3+;T%C*G+m2?+gWBc8qWDU_HhcN zSSITmlvwHX04k%Bha@g$Lhg0NNQy{L7yzP#OrO8c^TG95om{iHevH$lHS0F*uv|b{ z5p|d;9)NDVfzRS5Gdy^e#q0M=!-ntQ27@u7AZww*aN=o|B5W77-KiJ};w1NNg>iN} zu|k|~_yW&i|Lg%a7_N12of7LnpKIc<*rE7B%aHzXkWc-JjL@s*2=NAN&hCZ@O}3(- zb&Rt&bS&tz{0#R8<;qh28VfC8f;Pv?WO;6acKS3ePri2U*=2W2lqZ=%{HBW%b0wMA z&;(r19s~sR^NjLOgLXKPR4k(zEPqN-hW|EDz^9U8B((ze`g+4);+{c||4yADFy7C; zQLf#G_k)SYK4YqcgO^cL4-=(grAfjx?SO{eW_YDl#@1p551hx^+`sF9-CZe1G z(L9O(B|o@4@s zQUjZ3`oLLNkidqLwUl6WiPD_g(&gphb?;&XHy5Sj$E>6EQD*0PG7}Hh7kdCRl&Ajg zHLbCr(Pd+n=?WX{?w_(Lb1a!hVH*e+O*hfb6`-OK%JK0tMpe67Q-gC0rJ&DsOZ|6~ z-M-4!ctVNO=e}nvu(w@lgR!9fZ)6eb=i_+rhD%}a`ji~_(EH(6VR&_!(;Ude_iVgj z{qk^#dn1bRu1E|_AtsJywu#@eS6kmXc*SxhNsq`On-ku&cfMIMuPzx@a4fz)U0->_ zG)zLjxzaSc!!LIIVyg#*xnI8`NilW%bd=$90-xQPZK`iZAs<~5=R5dnNpXYogoX~a zmQS-|B(E5_O!9Yot4?1>G$Jk%;K*^F%CCh#Eu- zpFi*G{B$LbJWmJawKcj3?|SrcHAQl?%~XZeCJ0RM7gxZdg-<#fcHiJ}(OPHj53#hJ zh#=|OFB`ryb~c>=TlbSMj}C`MrX2C>uZ*0(kq~b_YxB{vMbb)6m8*h%?Kp}y*^QYw zKXojIRrp=*D_A@~T{Q&u?M?4SZerj4VNf?~waHQm7(-D=9j>WFjTL#W;_16nvf>XN zwJlI9M~Xe|YV?FwsKOyDZ7v=e1c* z&t?v9W5i=Ky!<&4Olm)Cos+{^^-W?LH92OD`blV~K6M||XbtE%gK3cGN_%R4*M zZgo*XtpqHY_9cj39fE$j!S8{W(w??1Yv?``Wp*Q|-jgpC1?2L}T( z7bOz%$C_qRI1h*(|G_^GPhc@!N}yZ^F5wkzW*e(xF14*=YigDr}<2)i_Z6(Syk|zPw6EyLd*%vw_ zn>r_XwAWJT8iT)hRw1J?mw1~72SvAO$uj&Z;9q@b8l0=n(>4usrcO(_CBg*R=6$=2 zK_lN%1fT_OW1E>?y^2-4IW40mUED@~fvUtVlxNF%pwG`_h(q+Id@r`^k^mL0bWc940SuVG@&&QsvrgL-M;Onv(L0j#U5u9BS`nD|-bH~;dUE#GEyv5Czi>s8C z35KEbStx!cI7cRg`Z0IQWw>jExh3dWC#6e1WqoyTg0iybD<1a)#E9x@Y1xzq0krrW zh@=z%lrGHfO*=+k*h(jjFlTruO|4b;va$E=83LmP)R;vY`;xi7aC!DhePh-hsnXIf3Qc5J+;n9i?E2R=OT)HO3b_zMvZJKz3rcj3j- z^(-=TTc z{S44vAX%=CratUUU#wIe6Y@LS#QR0D}R(kV4=Lktc_~k zW_S9G0hrIaKi_P*+pq6g=p(CohXb{Zdt_2#D-ljk49t^yHBEjFS10ZTS%7Y%9$^%Zr=EF|-}H+eRYZrfPIkOwg+T$7 zK8X*B39dm!Xf*>ll8QO*Hm!7?-Xk-``EV?GeHz7|;JxzMXqf|Pa<5kz1;yyTi%v#u z|IGf|Qf*!%BDmAX!t9%ngCk~q0$GU8)?ylW&;-PiqTX1YFjjbYy`uH3V85OuDYz1P zz&ipI^uUKS=*5noMzmzE8D9kheO@qx9rJ4g9#n}$U5s< zyY(J#Fv(}8bKCy$)11*Wi?qr+R8VrG_63DUoG}t7vfj3qCH9rWf;AaJQ8tH6(v9kUlF3#ak>lh#*xW^!mr@VuCH{c|wQHH!Ww*KWVINn^^OGMw zFd-VY#0yb%cK2Cl!vyI=m!YWe#GU=%?+l5DK8QII&)c6ijLyr~#F}PZyUO*W;2_N` zl;p-$bsB6kWgVxRo2c5)5me?;gN}UgZDIIfCrk0o%V^AE0gQ37jn`I;$6eT)VzeO1YaSDKS)1Uy&r z*N6dI!+Rt1k-FU?Y(}FjfqEuBob-L}a}-pWRwW7my)AZPuw)Pry!2C#bwle7Yp4G4Yk^nO zRKy~oD2OKQ$v}n)m0td=fpVNVwxUkVi7DF2m#gW(rPVWv;T1N$4g5Q^{u3w=(%9`K zG6>me6_>b_KYUzm4{DB%TU**qe2T|7iE-MC#%xLRgHkLc;o`23TC0RkUmQdW z94@yrK61J1*Vb)?tnWUZW#WGw=TJY(B=SJvFj%4sj16`}s(k9XOx@s1T0?n#l z#+?qfi@QMmcJCrtlB?X@v`{_h=`a6pLwm2crR0#`r*gwnD+~VOBC|GSJ!tz*`C@+ul^ujx~dyFL!s}tVxwmvK&Z`( z+h>7;1NKU$2MGoe=d~&3l~k?h#@=Qr-5+8vf40=;wOWe~0kZwBJiqp(WvPu;n)c#N zovme3u}o)?s- z#AIbdD6Y+VIX}fjtr^cCe>W_vp=#19UDgG^B`OFz2vFYQyLi@yT-}U=HERr4@xZIU z|AcstHCO4blHT#uok;mRd?g})u2b}K_*MZIoewt{`qtiNi8RG^@FHU~#}XQ+p}q#h z!-Q^ZQ0TiOqlo-)#sMi=Y!zlP;y8?V%f~1u<}-6!D)haVyd5r%Q?iv%6x~W10O+*Y zd@Vm`RcjPj;X2k=8S+>LyYHY+c(=2DmdiRTi5D8dHdA@EGbL`ln+h*=wa#{hKKglX ziPs*2pK@~|8frfYc~Mbh5@UhJh!-MT$XO`f-3JqzmbRgr01+*f_$KMp?$?-f5kiSn)n+hQpnpOXMQn(A%9)oJSXO z0+>)Ei!1B{)j|-GprduLK>s_&FTSgW3FXYkTLubt$1mj1Uls1UhS@wc*u~+?866n9 z6`G)aW<4t%!I3&TG%;i{$w`;ti{T zlIV>LQ0<_@p6XbP$LYvvT3`7`(0j*SA8Z)%bV=QHC$R^bV&coFS?J=mG*G|TI{1WB z)9*xht;;p-6m@(eKKA0KiV0TcYI(1=*0yGHF+nAEvX| zJQ?C6cD;h+8C_J=>As(92tv*jY@DWvFsxJ2J^;r@=UbAMQG&=Pc)E8sxP(_$g9rkx@DAyj0G0((4sm2 z+J{NQMg|X!7kzst-W(trPXP%i+ps?IbT9&RB<7k~44}WxYTBwR#Agnd@%%Yyovl7b z1DOd6yE>27*O-)o*@+PPSnohLsY{h8Mb!tw0P79Z9(%bB+i)J>(~|n*Mb7#e)JzaF zU&Rq~DMd|-y`|-B<{5nuBe=MZ?|$m0*X1;@Eu!mvRh((%UCsyRbNYUN#1aD*A3t%t z#A3d-yjrgxEO0$1uCuKK`8{fjqNM4mU~4Z}o=Ged_3W(?L7urBjGbp|&n>@lm`(## zwnY<+-Y^zNx=ol!qN-rt{o|)QPM_tEcl?`ALAg7h+3qA^y2MpWdn$H$7bY;OM(c@( zhp3nXqK(LXCHGwE1Q6)c+ljAMHw&bxRErS30y`QLqd?XIy%8W??hd@HdZ_xboCxo= zj~=ogvg>zmd^1BD`C}YrM21jJIbBIHC2|=9Yzi`(@2YiGjsp3w#J5FNa?js^mp<}> zrT$OaWDe(TxX8?nF<=!|Ne%LnNw{@183Zy=-l6Y5+Cm`_h>FX2Au1za?!)VNNV|Bl zsn4zIcb>^c8Id}d0SP}CeFSwv+g9~JTGKCUaTUop@sreHh~S>pN$bJ9_!GPH1^rs z}2tFK8aZsNCR>tA->Xot}tX={gidRm&9N zWYd!0ZRQtI3U&EteLM%*jnF#ngzc@xZr8*QPj^Dh=O2jYcf9cuL&2s(4tC~Da5Kb_ zU15$u@?z_-;j&iGB(|3;$@%J2S5{&KSL@S3Qw^mjlQ7Gc&6K~femk#5j z>?LeU$7CT(L=*6e-AhE%;L*h5VNFEn?l?W6B<*I|ta{pE+1AwG zIRnEyw}bkm#B-mi8y6K7y=8tt)vaNY)!Wpjwe!}$VbDQ7{CoLA09UJGNKlqkB>+qO z8J+QPBND}>pP|TX3)JQ^sqwU(em%6^=Or zdi;RjnECvfc-s2B7M{6$8%Kn2jP<&-hq%Kbvffl^w*wy#Ih;P%w$s8V^38ZU1OO+F zmXwc{*uX9CrMP3PP-vKbiKvcwpKt_(dcMnm%mwfJa5tV}Oag{x^Sm3bdR?hVDr^%G z<}pt_G~CjeE!P5yA@HcL{6n|MOz2?qPFi9Gq9KG4Vs{O{d^F5Nw4s#JetG5WGiHb^ zD8P$Sdnl+eWUoW^m}_snYnS;7Y0vix$C>8)lJZo~846`f>O*GnmkzFwf(cDK4V=B9 z%!roDMVG36Uga)_QN}c{m|FE*#N8ImQ{H3~n1g(x@8;8P9fOl?Shj-6=^dZlBZ@!r zr2-b|VoPyQ5*PLSu6H^*W}dfU%0-|?qrCbfZBIQ*?ls_`XS$20!-EVl8&H)fIb(@d zqh8;X!49XTPx!U{WzDn@gA9QX1J@n$BJ1;OL(AHig*o^x`%-#EkKRROkn}1y?eJ<; zG%v<`5G3OsYo&?}uh8pRjfVa38THKJo9!;roIE!1ic(o}>vRM4eN4Ptx~*+m;Khfx z^I2sQ6=>#QzpB2Qn(8=AAsQ&`9QwjQ;CwJ=o{~2hObyS1SbZp~`5x|^g2xS&t!Qdp zF#Pfihaiq`NQm>i-uSHqQ>#-NmPpQ14VE{51m<)wn7VF`QSPbl+#%cakvR7lVj)^{ zQ-9kllN^-2a^)^+<9Q)8ixw)LZn)p^>>PeRJcDk!cKA7M{VgGIk@V~l~1O2{E2rU z6$eVnpQDB7MuoEVHXOeIU3<3J8^@fKl7OW4)d%l*fNv?P_4lI2zv357Flk-Z4+xO( zSB>6dJ8!){Q7+^F{&+;qwo=i$0U}48i8SYp9)vB(!-~w2-250bpojs>lmJnM^a>;t zyzca@tkb!->uVybmPK%qZms8nR#NW!j45Hz`a$N)Q>5NVM8-Om6SeMgRUc*K)g}H&YEU_= zR$=cQ_LHd4++BDnx1haK4Er0|AKXQ1>Bu!(=DuMW0wqK1U{zN2T4Nz~KJYYP7un&d zT%+8hK-0|bGQe-0NO-Hf1u-SV)e65v5t`EN9fyPB%GkSt&rx=QNRamLL{zG1e^zb# zpLL&~<~=nOGcdvb$v-yU*ifNjX9sxiZ3tu#+xv`M$u7*wcp@?y0QZt2B+|%(%-gV1 zd_b_HIGz+!Pn`@Hf2I3q4>OJ5%ZZof$2Iuvn`fIkn@$6@u%@=56hi?K3u(bbTb42Z z3gJz-lf!Gk$4s|5)j99YZI29^)@wBeyrIHciFt7p68HBf0Z% zLVi@=J@YyK#yn!+QEW*ea8~?%K~i1vK4K`bdnK^-gmXD-VYPF!vdO^hhwpTUhVVuK(xe7H7~fF}$MCJ(BZ$X}jMOG_&< z26VS%>Sw=hMxGw9SCFm+h;oT+bhoc`5JyKHrV0K0oO`f)Ek>NOf;x))N0kZZ{3_uA zl4du0d>4KY$IiDddkLveMmJ{JL@^umRp%S{p~M64cw~}I+!*~>-tz)usKps9PEPaa zEy`;r-cE<$tZlVUbAiq*$-0is=w?(>266XM$wQ=Ts&qRgICv#UIxux`7-?4Cud3Bg^Wj zBrjKB^}6RaEzb0AhKQsNq2Bo6i`mNaVK!`V{j68QrFkFc7PV?;D2;QC*!j!$kYV?E z>g{Ix*`z%RGwQLU*SULBWB8X^ob9azIW++IdV<%T{9tc<_*i=nPgf?boqY;t2IwFR zbZUm5?mt?KFPP(dH5vN7)OtvE)JXyu?WsemZ?Vu_ zGj4KIHR9_pt35eC=;Lnd{8rg~)XdQWe(@2vCE^{raS>J&cRb_%w>6r+t?Ho(8-fV# zx_6PjNXC7V7!jP=53}Wl_3&_%x^lN(z7V*WPTn_;QZR~reE+0xm_zfC7hG9;!unF! zMiU;O*7p@ss+TGgN}aI>YB*a($_Z8);@;w%eVIdf_tL37O0e&Y>?uo{D<9NR2{>4N zP^tbm=Pg2wu2uA-+aaJhLjGbz#L(s(8|;{!`?8f^fM{d>T6ir(ra=9g{e0TSeC%{I zW9y;(#Xy@46E^MJXMhkZO-|)@9cR^u4F>n;hyyuRbVz5h+v| z)ULt(pASOvAzATAB8B?d!hb?ET)p4?)hNm6a8~K8 zgAd}Vn1~2JO5E?2FUYowHcC}wUYu{Ly$k<(_Rgfc&ArIf3pq|^8OBHo{1Ahi+HyGf za?-aeaZRbkq!k;?Hq>@19T=ByLVsDYkbOk$+ukillLza6FpO?VCnNj^5dc8_Mgn$& z{Zkb$&WAKAc!USM1l?(Jjk{vvAdKH3t0n4kJE|?>x%c%UeJ$>Dt}z*21|Yw{>nwoR zXaDk*-ahU)6xmfShYvr($5$^=i|LkjlwoM*2uj9kxAvwnc za%NJ9n+ymP1Mt?`dxa!LmYSmVY<0RwMNqBnYAWK>$~-lMApVAPcJ$lk*XtyX!E5Qj z!0YGUtf+R={;vCGw=mn6X-JeF>OSYAHwR9486P!yXyUc6ukV(Mow9G{V{jDX_RWh z$Kb|3&zS00l()y1exO+8dxkW2$orv$uGmJ*FSSyIoa4)?HquaMkP@`XDNigzv$K_z zKtjm};v+-S64>B{PEI6cQ~SyEWd8TgbO)$2J*Ff;$ZZSqp7ICBhr=gs6T)jfAI;j! z!!mp()PEKF-H8&da3tmezhd4v*aMcaYCLNFk0;t47+1DAg; z9^iWf7hFai#w0GbTsYN&{yr_$eYtRc|K0LyR5bD&#k-0hXuMC&`drAoufLa_PyKns zy|%WD?ZBc;diGdw=0QpeifFAGmd5KmQwcK?aI>42-XV9y#g97w?wL=GoKlY4H*=Y9 zQaQ|j^vg|1T-W~L1^7H`&6>IAo>?=q>$!(>W*-jb?mMaT zY0evAd3DJw+IuTtU&FCp-K+g7n{RZg*-NW@Vt>(2b1KQH3BXS%&nddqCaB>}jf zZT+*8@2~tc4)AeBn5C~zW=!`H{tTRcQqCRz>!5aryxcX`1l_40R1#+)>8!d}Sy zlTL|a-%|J?YNZ8kd*h=FTrtG{h05-5Y=ltG`=e%J4gJ(F z$CTt*%hJBMB8Qsp-NLooE0Yfnx7V+GFm+@vaemKyufdHAMWgy!_aJ5TtKKZALU{?o zDwP}%u&dyK%8UCS8A=dYC@P z9u8dG;R%BEcd?-b&iG; zaZqx?SfBb{&wj6DS<%!~Qa7CypILFpI7DCIsuee0C z!;SFq$;p4sF-2HAliwgF% zXEeW@#JJ^=uGqe)h-c)9^_)k~V<%(4Bc@PyV9ZZ#E1jP!=l2xXY@~|V_5Vq_A7s3u z=v@w6+6-xrK}>y6IFr);DMv{emZSlK>8~*pg%0xDoFJfL*<09zK9B^prX@2jR?`m> zb}{Cu?sRTmARs+K4XP#BG(X7c5Wre@biFpU5ANw|;SHZUxCx>e%JX zyB-^yyvpfaKCFWtmMwDM8dg@U=leTK!b*z+H&X$>bT}PdOp6DVS44|ElP1PBduak$ zo+_Q%AAHsg_NHzn+tew0o*737DN}joy${;k{}vHv93jk6(xX95=pq*lL5o4fl>B3V z#j+4nE$jl&e3}OZ*k9RH0*!i%#yv2mH9p{O*RX&-)%9Gkso6>$+|SYgVp{A!CluzQAcpqBss}> z>+t*7=+z~CkfI#*>OpRCN7_Wp12eCVir`_l) zm76d*Kb^TPXpuQK(FSYph*ei^5#>JX0re{+_CG46fU#f_!(Qyp1g?_`)rf!WD6M1m zSg$N~4h_Q@f^>akFjkEjTEP#_L9g{vu(%`x) zRL~!p>cpwChi%du(jyIDKRh6yg6vY)*+Y>E$@`WU_KGj7jAL%>}7WR1LfFj{+9t5ozog~mHScf`TPuYu5KacP}aveu@Lr%!MX z_2$M)MM&$-ozm52vrI1PjK$BXhWo_3pM6$2#^c(1{@t9IRyo>pY`e&({{oI%>^ zF^^~B?KXqt?oHYS`mS%k-J4zAfOSBWH$Ib>)a;_x?7!@o<)2%zH4?6m8oKARuzJF;PJ<#T zVZNOT&f|s6%d5^;Z^f{elFB27Db7GetjU@)k6c&>#|p7V{kOx+UO2@3OnqJewR#}iy1Jx~mZGq@?8&SaDABO(pCxY3^C)J+yIw7K-n@zaZzPi`Wa zX(ZbSp}L?rvP_Q=IEZA59ez*@7jbpMjZyjaXCqL4Ld{3dkJT_^;502z%kW35E#!z0 z*{5vpi(|&Py-9#5B-29CFoh10KWp{l;XM>deJT2V{p30@wW~`>z6Gl9qCYl#O#`@Lwpj|I&4 z_b5Cw>NZ!bgLeyg?Tx0rkBS8*A8BVzXsDY#+|~-TL4_ug)IXWcbEnj**+_bl&!kRk zwB~&>ai5#|Cik+{yoP}%9q4qCso3LOzPfaL$X-n05gSj<+Bj>a9Eoeh3kq@_$MPBd zKU;2r+r<~fXy1EVWms*$9g2a=(xNm-0pp89(M0(~{?{*N)v>P+eeJ`A9gOk>RqzwO zxn1hOjm)q1r9iqtN$dMw^|tW(35elx$-R%48OgpL$|wA&Rg?ZO{qg~8;+Gpmu`suz zuDhkp$>ZN}L}x!mE5v%7IX_im?h9sVa3QkAW7aN?ZtNRx@5j(qk7uQNd*uaDpgR|-%97KNYuCs4Xb>;Lu3URNpY^26xaqHai*E`4jUAntlQ+u=rEx) zV_Xgl@ZwjGy=mrT?KEv%7MJec9_;ufGth#=R>m9>UuEQF1QW*_eDxD#Gv&wc+^c#p z-pXRLB2<-ga9#{B(nd7xxP|=|R7M9C=*-r4K&jjR(9^Lv$gOL=iFJi7R~O76j1N`x zSSp>1jUgk0gtyhaWUJh$*Kw9yx62sca@`*U15I+nlj+g8Z^GmE(&$aJr28U6x;2h~ zEQWfQw{l$=)^<{2v)-B@jQVk}lG}QXviy|$&(9>$E!5Qb*ZuOtlOGKO;~YhOO|h0n zb@1*eXMnTsHno>rmT{CQ8W935*6-f2-W3$Nr>pP=*KrqWqpCpQzrz*2iO++`oxc|f z5>Do5i$hg86BJZ}Mb(pr&v#PHVfQz|HLAxeJh$UM{4)9ov2Kbbv;>tN6>W@!P0A6HW)TPsctfzv@korMG zF;TO88iqlCv%Z@wH=P-c8VY&!Kp|aNZ+F7OzztmTQw$wkSs^x>7WHV6OeFFerb$Lj z^|rZIu@O}f(%K_(0&(A2xv40$Q$Z=X{kT@QSyL!*d0`Y@xwi^BWXQNyK3C}3)$TAH zw8ZJ$E5O2TFM8jY?k#o*lmAeIDkNmmQH*+zLt*gL>R#2?XIKnjZJx;dwoafHfM>HV zbKd(4yrG4EvA+226#3vv!|@8sD73u!yw>>bm{p;6ITOxe?L0{`sKB?2823Co!R>bH z>JFbOf9LyvX_2C|aoFv7@*P(7QZ51Pi96OJw#Q%Saqo+`yi`^Zoz@}F`0)7CjQBjL zCXpe^B}^M+-+F~R6)xCv5dN`hKa>(F zN3IWFXN-simI3vD#K@HmV8FX_{f4(tYU7=&OWWQvfkTb9RrwQMBai!bX1I}`*qC(Y zc->nH?6+??;Er`@6i0?p*wtxuH-4RcH$|{F;ZwalQbu2`e7Q9k-?Y7wxI=z|68 zG5Yk9HPkhp8{_kH{}IK$93_x8lgV7QpzxtW%Ak0EoM9b}JN=Y#^W8$cH7pA5L)%7t z6hyl1ho6Q@S@Q__8wg>o_)>U$=VF@aVyCQL*b#3m!CFl7D1iw4_bOjm4 z!MIvL_qy{snTozLS=$FV1!tx>qFSmb;@+$)akTI7$QW2P$2xBhuoqg>!A)@k1rr0@ z7|u6quJv+B6~?N$;J1uw$?q1);PhXQsC-p9YP`N<=J%QwySVUg zTiuN^c6G~fyrmdB3ze;OSd8trIZfMRT5CsqoeQMAtlVu!~(AJ+e76CzxU zi@gM@@T^9?Yi%o;F;`3#c+{s|&YpuZss=GtVh>o9H)tOtuvNX4i#0udWhhO>)`M?_x{DD5rg(YLE{>bWWa5t zPm0HY@Taq|Hfk#H%|qRm=QU;QnrRrc=3!=|2eiP+u$v7D|z3UyLION%Cn#seoF6 zNf^Q=>Jm>$JKqUuOTZeJt1Jein|CBoCpEvsp+eKW4-;(~=D9ISo;W6^rFgF&kTRU= zuS&u1(NwsnT*Z|)EJ;A}I`w(UmD0wU=1*gwg{(X7WOuR!CW%I_>)hoW9##r1c4>W& z)(*#u12dilJdZwZz<~IEDJoiv|CFaeV{$@ zMp(I(f2`yuD4Ke`VP&nw9kMs(SBQ7)-8FsjEoOo5B6D9QhQfJt>BnsaXq1Ol8AkRrOQQiybcI_5 z?T2`{ursmu3wZmmSIHBVL}|?EQ(oWVOmepw1t$ z-gIr+N1=_MR>Ra-PouD|5bZ4gb_z#Ep=IoI<0SWt*Cn90=*;0;vn0piz}cx{k&4o& zqFdeBd$bqQe5-|Mk$HWI0XF;@V)IQob49NrgcYO&kMpplJ-w856HIOH&}w*}9z2~# zarx2(5@nLrs(h-rdV+^}^mM7i&vC4@C zHPouyU>@ee4;<-h7hRuP-o6_gVac)N(+|n~W3)hq8hS#62Air`2EZH6Y_>xRyZ3`W;)JJM^NaNtY*A8YgRakLa?HaC!5&si zj&ouI{hQJOM(N-9L!{8O%Tt)9@qEob;_8yFK5lGT#-Tn}l8RTUzm}Ss@>?xXqFlBc zV&0W>v+;B{`B->nuN7-T4C@XPAjTF$GfP5edmU^KHFOxUZnHntW+MRgcVW$3ZEj7y zcjssQZ^VnPnmO;F=Z>VxeSd&R@DV{nR11JU?+|L11%k>S8+Esqt-elmvxFKw1$eRj~*sFBETn{>OjvtRyg zg@a~eTQsBe)$N0E5kc!{#iDl0$)G87kUHs^aAG|5U2#@DD4HVcvQX}zqH<^~s#WOE zQ|K7L(1ryYJok1@Tt0oz25Y5LZpb(Iyj_$;&a!i!WKrS;w`Q6}8i!q}a(SWmxhVTL zLqZ()_U=EOpnE&zqtIbJfpM&zO|@iYwPN!A$^wfg&7BDqp3f()7Y|%5+ zmFX_aft=dLoh=zKSE!g7{|xk!Zokqm(djz{+ z`mEn9R-K^_N?$o9z7m!eiY@WjTjw}ChS?R$KnGmh`m;smco-Fz1WE$2p=)DYeL20I zD2(ZHPS#z}+_Aust2}5{^;8)zHr&Tck~=(7dW6K0`N#1J_6~lwq)#+P>vI5P99t`I zwmq3Ly?!k|Q+^x&|s$YoT}B z>fMBROC3ClTAccFUBzu;jt>^kB&m899nj_~B$!m;ZG2Y2KMzJ)rAr3AS3W~bb%*Nb zD3Xp+R9$vLqZ=8+(($|=^xdtfDq)T1TXFF{JJ}S`atyvn;YEmkwD>9#_^o zfa4zx#Bp>P91*DDEj2s5j`j|qyluDcg@@BXF0=UDRI~j~<&k{bYgzz{wZht7Z z^zX8Hram5)RC|%Dm8Sp7qH6QKs%aY}{D}fK9VcZH9yVBvfAIkmbB5lDUy(JU&%8?$ z0MWtgefktP+?AJKX;xzK7KBGi`&!*J4d2E@`R(yX4w-wMCXkUw$lt{NIIHW=;B#sQ zDjyd|>#4cTQuOAhSW|cm1}RiuPpY#rTKC=7tH6ti5WQFyJ%V8I8g#+wcIdo!av zvXC)pUi$wo#0f&r0|^S_0Wdd6N@o8GBKja9lLYD&eKREg9}+n|ozdjKP9X}{H+!Pc zUEkSVnPk<&i}BhDP4*3;-g)Gr@(Q7)ui~b2180`^Cd<2zb17Y$PQ%-8F|i`K^LLyT zzt#S*niBqaP9?Gp45p~Gp_A&B{d!qQ!iT3M8FIQ0x_m*#Ew%Hj`pZ+xW7umY9$YIW zTqq3VMYx}^WIvuoQj>YQ7wgmMN2^lULxmp-*&^GQPTnX73Swf`GonJ>AUU^wohg$M z(rfTEH*F375cjMHmP%Q? z5A}hwYRPcEHOkAC1;^2>PK<%J)Pa0=Zx;v>r&(tdXl={yYdzZ0QK9l)I{gBBtBi~p z63`^D5f;1VLixo)Q2M&tyA;> zquOd2*b2n}M~^sL=Rig`p;O8eW*FFUyv4Si25;Vf@Vj}x_W(WNxPX&K$ld}HI5B=O zg=KaXksipy>LfTC1#>=FE`3f0=U13XBujH^j~fKu6QPKDnI-~{8$m<7nu72S^Z*Qi z$!e2&Q(EiY9aS9-6scX9Nr&L@{96fz@!kdCzHRi$3QmXY@+3B!3`k=kk3~^p-Cg}8YW2N+`syS<2jhZgC#4^ zDA-#gAB4pkgqV8wkKFx*R|`Rr?egiq|L#SY^=7FMXRM37egyVXK`P>P$5PsVr^eCI z8g3Tiv~1UzfkW51fg5b}_h>6fD4tAv{e2L6`cmbrpaFd(&;FHufiN-}N<9`1u<+H= zr%M0S+v?NJrLMxis-vPp?`-EpOM&4P^82qZ&?tt=_a%FV)25wiJnQ;Qo(aXZ-XRY? z5VjN)n%}>J))F&?)fM(fPZ|85F$jnQqbsU%aG4_E#@+g7k@QISYk0yDQwOfp5~_al zzSjGhN#>6~+Q%e*WrQW?WJ;O#$$qVf4HYWo_xt|y0?I83nM{%Sr&sw=p|4M zcmd2Ok4+azIac-Xab&2V?&vQ8)ci^MZ28xNe04GWFo{9*-U+g)!y3k502}2W8Gv&l z-_OAA&`+JE-zxC1wacfZlMI!+vpwFek_Z`w%ANg}kRYHrH{sZdoozP6U>)KC=Z6xSZ_Y6{O4w9WXGft>MK-JRZ?d`7>+BvaajM z{C`fK=Juy1p9!}dU1Y! zEGFYBcg>4l0d`b?=0CE@=>J2IizWMZ-=~QI-Yj%toNpSUsB{}MjY7EF4|%jDkbZ+By%i%Nb`qnURd8P zJoI_}ShqFl#av4)Gr`=lD}w*if`ZW#=srJsx>D67N7g&UM_)6DG+_TK86AwPX?9*W ze}83hFFES>P3EOk2ySEq=7V{WdS=~4%!i}-ovR)7AlKi2ot&_(X2+|tAty)MDs_*4 zZYt~P+*Q0^?(Jexxd0tYKJz;aY=M$GP{O$oYnb)d-el7tOnXT`Q^>ltifB}+s;H5l zBc}d2f;u(G=hnm9ySa8)a$Fe$?mC8tfSPPs{=L-R8uUE;Ndr!^)~k!btn<@#yo;qA z#cX?^A~dBZ`0pX#K9Exsxv5IcQbTurP#n5=ANMb`!ULB9nG@DW$z6}TAEgG9^;p^< z{-u%lh$`8d-xW_r3|j6>O8SG$cU4ry698W1}Xpnuu?b96`hq0)-@y`3=)Qp%*{0>Mj&wVW3 zr>&M`)dCLa;|)ClwZB~6e^Uxq;rhUppyE}s>_G_X8PQ?50VFUM#7rotA|NDLd=MdEkes+Yt4 zxYjeSxoC#18iQ&RXE2rTIyF=EKWc=680~UrSaxm-h3?O~-*a71dW0fY1NxK+JevL( zAX&rw%bPyu>IO!*bbk2jA$^tGr+K+uKFZ6pwO9lRh^gZ zyLXdMcdqC^#~Kpu!?t>8IXCsl<6+oe!&JeI;!Ci;G58Ii)fBF}z3E>r@;>^$ERl%q zz{nLdNl7;o-uPrtx@96)-TMsd%gukLtAnCzFdx$Sq@t}h7W9IvX*`g>lQuHG=Idzu zw<*Zr{V>%N37<%Al0f~XJC}+m8wNLDUrJQy&E1SdoL`t~aSN$|;IrcRj;*hjdK`Z+ z2wSvE8MmydPwwJE$w!8UFad>#`o}oNqR#~o?E>O)gY_YYKq@%((z}BST|1De;raFW zOG@jC;;A*FNWbSECG%gHaXIAlIzi3VQ~p z&p-1(dqF?}-jH0E3GR1cdO%cz-Cth0wNbeG|KVy2mUUzaU>ng$DTlBc~9bOF5O3 zfvY=;osT{x=xGe%mtwg*8!!es>QbMgh}`}@Ri>K&;8rQRWBH8vx{d(2rKA3~^j-{% zb7f+(@eM{y#s7EeY=p$6@?7h6&dzPq{EHhwXl{J%fO(VG@Z6C6W7PPiodpA(0k|xy z7+>>ysp>ReS(J|}Cfi98x*f`7PJ*wxb3CW6NO#L9bf8+2STV`GLi*!h4~2+cf%Tt- zsjEtDmJE;H_hZ;gsw*rzjfs!H@9Z2N?Q0$7F+OkUsPeZA&@uArtlk3!BL9c$;4w)8 z`HX`Lz~yJ*pNk3#n6%)x4Q*pq!GG*kHo~Xz`_=%rvW_8a(l4BwK$~JM5Ha^dcgitY*-H6#7L^@J;Nh7;k1*^SpsW10Oi zSLytha6ST9`0LY8iPXRJ%z^>YAb2)+?QK<4Cn&T&%DuY$17d#skL?4z+<#k=&h5qn z3dy;ORC-pg^;T|h&aeOFn`wIg(`ID)hkyT0$^8Ph`#qXFf2U+Cm@byUP}TIwr#t9x z>f-~E{!b1-vb?xZg-vHv#~jT*J}VC)CMn~S_dX@`LT=5Nf6L+$g2wsMM9TmAs*GMO zj2rV)s6wU79$dT6m!B2e{0H4C#DssaXW7(?v$EGQ1R==4E-Yj43pdfMZ+9#HKURGA z{C&2YcKpcv*Ik%4lCFlK!5+C5g#GTkxYXRR3k%by|CfiqmI0wD1NIWMftZ*$*wPph z-z54QK%uNi4M>vaR11}zBnj7gZ($?-I>$>hhTcHROj%u&p8}P3^g_yi3k3m57}216 z$WbJ6Vm12DZzH%Q>r&wDz{;$8;tzgX8OhDBEK1uSjPyIsExZ3;A}LLW*Iwg2H8pW;W~|ECBN+dY5Q8sLX$-}aPs4m=@rB2OqtSmtzSL9@h=9eHH{y0u z|MDCr@Fi3jC5&+B8OFuO*T_Gc?~{7Jxv6Ti=Dd}$TUcBiZtQYX%i{f&3XFfmP19?K zBE~n;a|9|pGuq!V?^!**&j=M=7j6Yy-URy+clqiV3=XPHaF@JnVOdgkzb+(x?Kynd}Wc9WuM;t!>Q|1*Z$SE+kv zt3m8D)4nVrU;&u_vH%wNQQbXs1Fqf6Dh%tFFfQMs{R}kSC8do#ss}abcSIAdf4$w8 zfEI`gDhp1GJwpZak8a2d6IlxSPaet1rApwd4*m%@d>~~6Kjw9>ze<;0zcZZM{O+&i zLo#jxL4h#$&hRQI`yhy^LH(tPO!#mm%_Ul>yb8Xh0P>H2iIAa*aXP6hRVu4Fz$E_v zX6xkWa)l)?^VK*_V4;Op)+Xw zYe*byz724Tx@^~s!GxbN-vKz|hi>hi$meG~_R^=ln0ZSfUG3)68qImb@LY|af_QUl zW4?DV)>v*no<#dR9sA6A^0sK#Y#;y@WlkRB6O%1)(`(}NT5$Cq)*x3?as%) z=98amKn6Vl`n;~l2FSnLHGmu^|0}VJRKjb8jAq;YWPWQilWRPZ-?TV&wT<^wgj8~B zj_<{%EnHo+T3ykmY(d3hOaCI{x)(ZKxi7T+tlYWqF$E^eD|vrqK^@X%q2z^HS$mDC zaa->13t^j=i2+|YZ*X#+@TRJ%rWd+@32DWW844>Vvz^PEi($(c#=Kl156GHdKa%fx zEae1hqxv(8=k!lzS0$0!wO!8b*tyt|5XPk2T_8o3h%Mw=2FPjivq;-G3%x!E+A5 zUZ4e~S0hg|v8{GYW7RsPIz_uW7^!9i{larV?h^J!Z?-6=-+p0~!s(N|vT22v+w5R= zZ7+VD=1W>;F*m^ihqTa;LHIJ%*vLdTmjZj0=bE;l0OR4}vzOfGC)q0nhf@1x0Hxzg zw2v?H$`&q2R@>YT&G!=TIVFYW)@nY@X`^13#$Fr~Ac~$Sysf$$9=0-($+1$|jg$Bj zdrg(Kq$$?Jqmh5&0&bINE|sJ95o81fQt*qpK+Ngj;+O*B0F_v*2KvhQw%4HHcQaHV z{~!#L_J1;Hf2Z&zd~R}cGkcNj>Qcxq_^zjOM)d=|vnW5#p;has{k{oaaRQH zY+PN@_vjn}!L^SPu7edNPaoN5`H-;r9BEWXtJ}F$1EGA-do?4P-FH1m6RQbH&0r9U7CqeIFjidgQ zlCMv9SRq!jC;|$kDG7x7>DwxU=B%`{T7y0F z_XoMT-Z@&t@2<&vvr#ig;}J6n-!3Ago^242u(8J~sP22*kX3$iIsQ0g2}8B#MO1U|f)+7^Q~N zmZAioLl+yiyUu0~DaN>Va>9?M=UK1>yqns37EuN|L&`Wv@c#r7m<%*WH4`%3A2-(6 zrBpBW^8>**V1c2%h$*MDouHi{J*E9o0cqb*{avm18`v1zDs)2*elQXvz0h|!Xzi}w z2*df{`+*+?d^62jq?$;VPX{juxItr|@y2&dFkTeWLKO9ToB!>%QwFlS*zV>geg%o2 zvxLLXHKGC?tG5P@ViY`u&&>vpd=i?0z}Ll98v!hOE)i9r@^3que7(6?^**{o~-@6N{1 z4k=OWc08@Z*di%f`DbT&@%kFZ!7Ho9$8?z_6w-9Drt7NQ-+Z zKxX)U#Q1OE^B^RT!YBqJGgHm;>_qxDHZan&+k;K(h5_4sQn4y z!T2y@z^yY7Sm!bFz{p6Tr>E!rQ{Of=QYySX zFHg^yCtb5o6>Ef^hNk6tI1=zkBmHf?V9SyCmj-M^t-<>)Byx3i)!MwYYkI!wJ2Fpj zBRzL$BiDzG%8!0m&kY44fU@%GlsI&r<1?d9-Ms`IEm`cY@U@CJ!*}XrzMQ(Fg`Rwx z!Y~?SESo2!h=@KMXAG!?n}XpTq_^oEobg*fJc@U28&<)8_Vqpz@vM--uAA2Fc$TaJ zClhDyc*1;tgyX5*biW|Hrz`l>1(+)Y5})}01D+*x#LvNxK?mVBxSNqXTR}3uAll zHIqY#7e`<{SIo`mT zZp8h1+j0k}H2&ace@tb)Ai9DF5f~1t*rsrif=@=>w9WX2zYh*B3P2573{|e-YKib~ zOAe2a%icC994x5FFvoa4xWT7LW`EDzpXYsyq6~uMW~IDgt}Yrg{!hWrnBSfupeLmJ z)cJlW?^~$3io~DegK}vxmoI^zs1%a6h(`A}Nioh6rVCgxCSc0T#}li0*iQ0d-ciDj zua5UijWfsClO31`B1su9A&>=Pv=2$2CF3ciu;>4tT@kLCHRuoaO?d+ zh4dEg#P*6<%#e_BZYa@bwa%->t2AupXB;OvG82tpcgY8&MUJM#DmfI~kS-|4Se?y! z#&nBc^I-qr(eut;T#7JcL}a`u9;GjowrL&vXbf~+WDF66V~E@(cJ~uJuOn6UBX#Dl7XG?B(n9j{Nz{i~=muSk ziVUap1y~r{tITv2Xh3FkNSmmbiVyyGko#313E*10<&ouV#YtEQQW>uLsy=d^>plCi zWX>@T|0_oMior`fI(XW49i+LF*nbgSohAwXDl!EiI)>R+e{ zdun)ico-EK$<`*qelY(5dA1=kGP1vBCWDD4TE{0u-lZ*Z#K`Be>OjAT;j5eEYQ$b#q{L?{qKLi}rK{K! z;^9=1J648&=z^Q;J4qj-_%292@Y48&;hI0(0W^O>M^W=C{7BYmqSUmq_8X4;&N>1= z)6}FP9P5v8KDmb^ZMql)J@HE@X$(>zB{Dp#ekyHy$xaMef%UUA!qIPMYpXmNZ)0a{ z{bzWKYx*!#JyTR6xP9s^9CM9O?7p&S z%ry$R$pe1=FW_6$4U=dLuOp46dyWZ4`}lP8_aK{LUh2#`LlnJd@ArPX_S-C3UN;YB zqouu!qx0-_33kFlUZwT@B%&r?wkv0+I(M8tr2ioXV9KE+*HsXKGxk*=U@9$DQy5qL z#^gkNMO9g2yp2k!z7XXN&xqPHJ^LOud>omG48&Wv^Fp%`$`pexC58i+7|FTBG{rSB z;0r2YXnIey8%K;jT`j|RI{^6>O-(!y+TP}qd)h(h9DRxs*{jL7vj#BkUPnuXTrdH4 z5#Ub!eY%fVgUNh+I?z?`4fYG0(kr1aFo)*l!9JK8Cl(v?ve=eh6TtQ&_;`BYrxJti z5)KvtC>KDD9tnUNr@q1HP&p)wb2bRL9fS=jc`tXMe=^y^{^zOq6F&YLwp2lr+c*7N zDBrR&Uy?naIG^F3*saX~OcbcLW9zx9l36-8v?yLx`E`Ro(Q#4#6M^I8z_ns2oLBQ5nM!OS^Flw^#ULA63}HZ=7-yF91z zE7uel5E?adW)7@{C2~rCxWq0&X9eg`Hr~5?s~IA~4~JL!97UZXXtjNPGzbg>nZzaH zI=&8^6w1;hSewTJ{Xmv>VqxWoa(BTZ?3TE;Lz3%+azOv75*7a~jiD=C78HeDPGl%h zImAB&u{BbfJ(MWGKRH=;BHgzv9=QY+xOd@2-f$xpr?V{1V-uq<6`iCQ?t(KMrcu&2 z5FeLyw5;WArGM}}k(MkFVRs>{oJ9KpEV#Z2@fJQEvmVM$5Z2I?6xF%Fn-EY;MB=+% z0MCj22EvXA|KWs8#(heh@=DG9`VV`Pw;EoAi6eNIIt+_h2R8;al>{xn^v_U0i4VfT z8dMj(d`uIHNh2u|KQbGU95SK?AyZL)c9<+}T;XkB!;1l4+TPo~!le$4nQ znwoIiHS~mUT<717<09>Oo*}9Yjqp#ZNhmQ1J(-nMsFoJLAlR#a*nxWwsu{3%U||BX zdn{Qssk2u;9Og)^%1uacex6FZQ1D2@fPmdU)g%{=bo#15;2>mH1z4X&?QyzFf)Ex9+DQ}G6VigGAt2FWcV z5Qf0HT$9qpuEpJ?Ua})&f~XVygA=oH@6z=2^wgQU5$oC( z9`cpd*dyT&i3@v~FTlF4%4SsM`#yad_by(~iFa`^gyg zm_N{(_mu|T(rv^wMPb{tqi@s+c)iYXw^!gOasFvV;htZA#dCJ7%$k+fhXMU;G{D4q z??Z`hw+-H!@YI`^R^%&lk6wyv6OjEp*kfqM1zv6Nfrr0 z7oNm^=ZXJGQcdFFwBUtseBv3Sa)8G42quGx`9>tDsgCpcJp4(9fM=$6sGsAnmbB)% zL%4o3N?$o!B6*xPt4nQo@6hUPABB4F zVxsfX03P$h_8%V84Rn|}moc6#3)O)j=Z^e}P)s*9-)NlB+}?8$FR`0+&;0IS2dygb z$P0gt`^S#-|724PdRab+sL;2sn(qQQ+^-6(qs(06hFtuF!>Cz zI>C4H63NChx@K;fW#RtLfj4~WYsBd|^!)wuXvl|ILZpJ?G3kYag<1cb1t5+rXD)K} zJmJC#XTDWBAP>YfAp1cbj#n1)hAvvdwrnJ5%|wezwkqPQm`r!EL3Ed+Re(b=CO{h& zkS*2!BTYG|dCJHt4;}904+(*dp)YMOhEj<(*`n;mk>+L9yi8)Q4iEJW`dZ|=drJl% ze|cZE9kC7nQ?fOj-Msj*+hTIsDSw7euU?z9~@Q zt%Y4KUeD0Xyy&+(QPCtu_TBd%Ggy!ieSPrJKgiB?gNZWB^4ZR_V6ei48z4s}hzyT> zQ>-xy0Tva>XS^#3sUi+WHkNg=d}^9sY2@1XeP++S?~zpw0oAPHN53e$JiPwbp8_n_ z>COXgny*$Dv0tI(tEYIqi9mVF=#s|u;-vkD=K1#`*7;=-x@D#B*EHx)XFtYIRPgjm zz{ypCrSV9;VL)_4_Q$Z;(nUqQu5w9@zyUoDfN0qgPd1t~jHyNl?;QW2pB_0sR z=u8}bO&CPM&*Z0lDYdi8pimt7DrNJLyW;^}W$BwHL-*P22ZMsFa2$qv8T{X#p0ZDz z3~m?Korbq_}NE-+vW z#YMbiKll4`x+wC6KBW7GGeo%ukKzzeZp-~v9xRa?3H-oE8e#l+A5DSDY3U>yU}WoO zbcok9l_E^p)&JlT6c2lY_zvBGAIPy0b1bqTREWV4oOFVoCeH=KJaS1+77j$6p zS{5<-yA(*8>!^J^UYA35jZN7>pvi5d$Le8~RNB@bo}Kt7M9>dN_9HkvLIeL7G6GMN zPelKdCO1bfk{g%B;yKIVUZds@dSYX%w3S+e4w6rUh!U1uwL@l$k^CVHJLE+R4v3dw zh4y(`rGtVQuh+8eB2$@0|0cHxg5Pb+*1ns9e{HlF;P9gQL;%_C8@-BriBJ9T23~*i zzt+rp?L0GVMh^_irWST7(^}xi`X`418?QVBI#0kr{b+nuAWG<>RP5a?dZ+cTe zBvSMi{vG9Iyzu(1AH7KMgW-o<vwYsNe{ecm6N%T;SlC~BRMlsm?5zf~FTuz`cALD8 zLrhKysVAh*kKfOpkL#P7cvxU>^F(umhcD3cnN_R@X@qbRLpF}1Cayo&F8tH<8^u3v zor@)n@lCx+Bd?oC^lr@hUfta{P5;S}(k8<-^Ra8G4EY#+d(`fGCOAH`a{!KMDgY-$ z^re(GAgTL?4pAq2=gx;cA(~U%Hhy4i+UCXMNtO@g*u$48#En0<1QJtS<`iIf=SU3| z4N-t(Sff0NS?HUd_3O0dy;*KeGx>$QJA}e$l~;A|3m!QQ_Xsb)-Xo$9`l~@CdTxAh z5#|}v!Cvmt}Cw2P7T;un0 z6j_NjIeVsCk9TM*&z5zC<;g=!(^M~kX|v4-lesaI0&6z1n2}|Tk(6*F0Uw#)LW<6q zA%LI#gq)#@GKnn_8?IRlDa_5}syPwBCC+wP*C`xtxR990)5s-f-k+xNpp(F#;)8LX zp&<}wVSr}6zL z4O1G9s>GPQ*~(HHbhi(At)0?zfmK_&_U)RNb^6ky5ZNL?66(Gv6JCaxK0dO)VTzcH z^&HagpzJ@593eJi`cR|${dJ9h%?q^mQz@skYvq)oci1zX^?bxYs? zRn>*?e{Yd5w;;^Xv|?H?#T^z4`7U zlH!9zrYrh?EK%wP0;qt~_$*q9xT9iI_NIG!zF9Vzkw#QO^HujQ z`M%c<$E+D6cwz%_4=>N&DtqS)eG#*uW0I3e>aHN-_bxK;U_q;|88PVOlRN>aHv&Bd zaju?oVX2#N$a)2btUiScYDUPSQf4+UVw%-aN z@4#R7o2K|0Xo#<_?a@gLw21mbi-hI+u+S-AHmT!lC;L0q$~xj|krIa~B6NrR9BC!P z3Vbbvc~|cq_ehFwAou@+?l7W2UFs@htO{_tzb(BGTB^JC9ESw@!)iCM@K*J{p>)0w z((-zF#EPM{YB>QSNl)sN<^$D-4`p-H90`OTpG~SKdDl8kmN}7jCGWBN2l)5C!kr$m z(-X2|J@{#UI1~8#p65Ou%oCMPYUTZ4s~6>6qXO}*;UfKoHxqjP@C^I8E2y!SWXA!f zr3NR|!KCP%map)7Vuz`Y_3YKC5~_uOa7VWw-FJQ83(;BVo@uT`<1M^Hl7&0krYtxw z$A@Q@NxYcYZNce8f+QG`x4k!mEpvO;Y!YVV7a!5^2k<1pNHbI1XGxU)gr|N`(NnyB zGE+T6H1OV^7reaLfKAil5z;(%WrbD>!H3zJ;{p!C9+Vtw;1c=>ewKLl>?;8-{8B1g zN<|5Q5_>~iud|s99xqpqT;3#@NFd?$k~ye#8WW;G7qnP33)m1{u$IV^la_Z!;#5?& zz|>RU*~k-IU5*!z=$;7(mC1WxE$!HI=dV4SrC*xDid5Qqhk!`odwh(pIWhobFzkG4nDuQrLd^fxq-f7+X}$r*2?^lm*Yp3SAJ2f0j@o`7dfDeom19heL-TlI|2!FNoTc+ zGMWc<4=@`?>gT$+$dC1%isKoJ!%b;ZgQR%WJ%4x?GHM_hgD5w_-=_|Kk)frI{Uj*_ z&Se2rOy<3nU6ub{wd&)S2z;ON{<{ihrNm?_Y;^sSee7jzasP+2w~nfU>%KF$(1qzIyPgS6zKyX)?wKEL<9-}m148}}RI`NQ!H z3HMoht-0o!Yi`ofvv`+YQJ)DM2ruHq<1PPtM*JB-ba;Bnvwk1e88BEJ#+ZNBr#HgG zJvd`uoE`YhtomniQB-dEJQ4!!m*btTOzl|Cz#^bypKkC6`vWIKAKqXgr|ePr5#*&6 zNGm2^!LOigd&A-8MoetR$TJ#T90Y0i6pHv}J>!ATkO(?l@C&ZS?|4i?U((VV2$Xc# z_m;Rd`ckYnDQ=9x5#&$Ba(A!1taIt%my+`F6a))Ljvc6ouSgexOkU{=aJ0w=zcZQ4 z3id#p=ztqUfDYa!`|HGxcyNq7kz8mFS?5J40C|cJYuP_WVB@F;KxzHFVTU2gzjH46 zpAep{YfJbjhfa}>QdQ5Kbj{wC(UjvxRe}5t76q!zNd<40{8x4QfCTnLkf6vr?oS{? z?C23aRQf*vI9whHB1m5v>SpuSw@=s_P4S3f-VS*Nrhf+BS?FEA4_X3Qt+dDLy)MTK z^#RtFD#`_uo9Dx_!{xIMR#YV5m)|1r^)2-hO|1i;@kW95AGN`}jO2J3nk;}G<+uDA z*WaA8is|F^@lf--o(AxkMQIBvB6&FWeUK8O-qY-v@aB}1CsCZC1G_uFu{0P2Io|U{ zB+wsnkdL70e9h@swJ%AV+@0AH;EIib3K}49d$}hWsd3`ZCnRX~EpYvzI--A=SHvhj zXcZY1CZGPoe|%OwK?$%v`T4n-VNDtJ+UNl8bt|mdoB!)_(_dC!yAEba{2oAO{)2nz z@c~61Tx3j@1Tag#&KGqrj5=NMlPzkGwFa@Fkta{ZGI3G_Gs+ToHaqx=PKFkEZeIww zc~T3SHXd9#IeQk3_p`HRDqRd)*76%ME9yC};}OYSEy9MsXB))OmFj=`{MpfBs)jNq zsUhw1>Z-uJpODO_{UsqO>4epUQqoQC+e^s$cninTc5LDF>Kv@)5*7*wD9bi~`tSYy zQM|UZlH`1Lx&Hok&~wW?=9ZvkK?w=JDz6LW$vR6+1_p+qx{53oK|uvd4#V&YiK@94 zu_$$q<8=CO)Up}0wsK;x&9L9y!pYwL@ubS6ll}al%;~v?hRnF07uwnRd7<<3=g)_> zXFM#&w`WEM2J$BaUtazqBqlB#`-NHJTUt>O?YuqxkpHse(bjMtNyI%7g~MJS9p~h( zZW-=-oU6&ndWA(r&nA=zg-zLO;>!9xf@a+>yb`$`gnPZNpXgQ$&mCc59j+!;$9#%a zvhhfpZL*jsr!D!ma`b?WIor-yUoMh#<+ZRuL$C2{GNVeW{Fg7s986<|t}j)H*Y4a5Jvh>h*^ z?5Qyb@x&wF4&Mxl;zeiSGoxg$mveWtT6t#{M9vPW}ipbuh2$D7)0e#McTa%wn zS!XT9#TX>kT-Zg^6XHqiL60WOu;ix%v?P;CmUdvZiz4A5JSx*K{*3H(BkH ztO6qE-@Txh4#O75CXVnV`<8fn7UR$6X>Q>F&lzdW#tKY3t(H_l*WSnkzuJI~+KaJ3 z#QP4KJj_IF8gjh3lFZXml@`B6sCB;eOG)ganK8?WBMQth(ga-fPR_Yrxf-*6wBz=O)Y7H?CJUbv3JUb-*Po z{`+X`1_l9kp3qKRfcvq0MT5D=tl5l55blg^4tU41Z(B5KZ};8F0B0vf0Wh1JtS?D@ zIMs`m)~o_-zMp?KHC;ZOmx>zRDY`D7(QL_kDiE6Lc}eRuyN-pUU+&wd2GTp;pGlMN z39eDav=!(`^3+VdN=}~M<#J#Jn5&+sRttw1A1-Hd5f%(x$Y~3Hk5rb*%6J>mgYy1c z)v{^d#X|hQ6na$}2uJx`Ljg^bBbFLD>U}WOXCSTH#P{2MPfR=W>&h4dZw=;;9{~zq zqyHa~6hm03WnENj>5!)m69r{5{(|U=ECohiD8TZLyjY46gvKxnviB6*0`!j_qu0Gh zOnkroLuWmv`;YC=&wyA^{NH6p8H7Yb$K8U2L<)pfOS0D|Z&hD?Bjr zZP&-kq7rK{5-0Hoem*!R!CQ9^L3awFQ~y~~t7p%YZn8&&x%q;-W3bPL_q8rD`$NNP zOe`vH-&>*m>!Ut}#?0FX?@m?Gf{a8e|IC45_rxS@xKUq}iwixq@V%C_L z{qd18SYTvGMe=!PNVn+4l1ON1==1&0zU&MPpFUSQ#@4ro2Age++ha&Gt5 z&gQwq_KtYn!zl-1QAkEnORHLto9!F>~cL)N5{k5$CMfQIydTW=yg^Q zj6Fg3^c63KpWUy_8o1Vva$X{TPEoCz^R`Dv~Jf6G1(Ds?fS!>v5H|Nc;umH$C3o^PTs4kx!*25Ev|w5q4F*ynbKu9SVG{C`uC$Y4THsvi+XUs*grR*u%~Axih%*(@P0Z zv5DOJ)Z)#t((-lh!>HrfaxSP7O74Ee>tk;?gz!vi8W@OPZ5+nI-{{~)D-DdK`bNrF z$WaRXu)FgHRj`?Jr-fqxK1d%ccrnBUpFUuJwvpyEW(ggqti9vm88bIXv9}4H0@vK` zzuA3gj7OAL+UIwX0G{B5f_D)LGlkg~p;JEF8FSvcCE*NV$AyK3YYU3z4;DTva@325 z417B>MWzh<`a*B4(j2EbM>@e{8j!M9hvSHg7ZY z^UMF>ssJMh;i0=1Lo+E#4qO3J(vjixfbFJHQ3^ zM&XA~Gn{@sdPu)s^kQ0(@YlVv;hPz!Bz3ckpsb(zjx!Gxj;~w{wWKYRUvf?*=dC_i z#u0;ZD2c75lg6xqXG?F?q&;s$H=wYKQr%eh%cw24#SQDyWZM{1@|nhQ``cIert9Y!y%u%?zfrB@(?^uy)@s zSdG~{ne!?|-?ll~wN?2Sx#D5>9noZod!W|DF5UU1M`jvF9gaO?;5CinCxzEKJDq|4 ztGN<2^DD$++LxGC-#4wSaweS;L1d98B6I*52pvF1JoY#6ZAcSZ&)e?m&}a7jY9&SC z`0(Q?5O97*zdy#@x6aMPg zr>$mN;XdoESsosq!S)}WEE;KU=bVD)`R^7QOMCpXB6~fqWcK%diJeU5u?#D#q3TDj zd<3}C$;oM?%$~Zsge~2}z0XE)1^&aC^7F3UdPN?ysm>Q-xtA9j!AFro$D|DS>C^9J zTvU2L6~%Dqo<|6#Qb7bG=a18b%vij9&dxkTBO^ZqF%l1^xLlitwkjL!;D}xVSaar- zGxLGEIlI*tshTou=>^+(o(jkL;iAjvJ|;)=2j`tx#c=~iG<}CN2CMq51prg><>kXtnVriK~7=&pj%?fd8GvOILzeE(a*I*Xx7s2NmLu4@M2C+=KD-kiBTX8|myYqU+Es zGG@U1A|W4u>9$^K0HVK|bqYXCfm3PAYm0p~SGRJihCKU8ebt)c5CaB%ov%-AEc)dc z==2rzf?wLarA36-JW%W)8hW8%le^FGzZbIM;jIp>?X*38Hi?s^uL!s)>oa%7o!`Ch zl?k)JE$pD$;sT9TTA)@#`7iw4uD`F{AV&jy_2`~6LH+WaiKUT3xW2Z>rvO%$q0d;y zqL&?=SQ#Nwx^zm_6Iv;V_3vme5u^$sRYlK2u9w>kx-_*qjyLyX(=jg4&k+%%nWYdh8++KI!|&E z5{}^C>(i9GjzfbgHs5@XC5_maq^q6TOG{dtcI=Bus)d=|WR#Z&Cv;y%kuaacU!TU3 z(JJF0&yd?UE7~`nQKdLf{(#Okxzv32!*o@exK$rXk)dkP9T+Gpc-=ls^y?RZ8!99Q zuOo-dm6RS*ayh}?^h!2u&wPxvK1A;RUQ1uudjEJZ_brqw5hqDW9JDq-H^ITl$-OVZG zN$KLkB_UTrIX}uBRu+kF`${4AOK)$3`fwZ;5tACNg!k(ucexL>;L*}z$P|oDLLAV) zV`~Hu!Hr@bGb@!=@TZ#jA5r6~W)cA@oPgr?*{zBCFwN4-l$tPksAn%7kAP*s6JCjDx)50H zoO^5_4mq7mhF&*BP|oSaecqD*tpcB$X6~D>wK~=ID&l#a6jdl)Z~2=^Ku;A!%^MiW zzwn3wVqk3iR-d5WTQ@WJo|c}RZmnJ3lwFe_JO7PM!*S2mswwN*PRW$TYTryu+}JsT zdlMRzZ_b^h#NaB=_%(VMQ zkgA<_uYGg1#fMp->#3OCj^HakY0c!v)be1@RYe>PVX6$D?ggKk+%PW3IVKSP>%y|@)BKQcxw*PF!u3w@aj(3SfqC$%&Cr+k?3Z;|(8Y)JC{vX=!V z=Dqs2{?ba~;;a9}C7tT5s-pFA-r!^-x0Q|EmJVQe6Mhq?jX~Ez^=Xwtb33T96xE8q0+lA92hvwG?g|-&_(zesLkXM1w$|;pn z$2nEpHMj*o!mbf_=TepfG2u@W(}5XL;1r3J7XAZom3L()3nj%mbdvZ!l6lA5 zu-Oili;FX6I+(+iF$=G7IiQ^c(Cgw6jST(YVd8FN`^Lpr6;^mshvFzkitF^?AqVZ7 zkI%fkM4EQjr$TWfyS==;3V@om0H3kl(Ph>htE01{P^oTCg~VH_rPRu;LO{H+eQIDL ze;Vh`o$Q-wPb?>u8Xq@Z+vxyIbT|wNM+pp!gi$pa=2^gF^a~H%55JCCg{F%byfvGD9g{ze!d;|;^|4xaFkj<6^rw7YFD|ha%6%<7!^8l zN}eVvVn4vw_W<<;TWw;1 z_MspsqpvxTx2}P-#_)do7tU>cl5ntA1Vn`7m|SZ(cuu9_jk=+zK*$OdLZkkJE%cBd z6<+9U7X8CfotHPT;+&Pt%%FJ$~ocv^#CGwcx=1kP8V+>RA}B zZ>4c`fb$pbcPLkcv@OH^fA&mKrT>a!nS_w#Eq~-4 zE!7uKBT=E$-i^VUH}!t_u#UlqaRcQFPPG`8O!uCfCCp_H_&hT7YBau3mDgrc!M^#T z;zP^c(p8N1U)$^ z|8t?N%r6dU3%r-KR1=_KA}-}GU~qLDuiNXC1)x;U@pmR`%DIg z-CNy;oL>A9_RKNI_{UO?#1#>wzokKtW!zG|KJcyzF-AJLtQ4{luOU z{lXWS8E8=VzKkXfGl$WYhq{(c!KX(Z@pGz9PSxsH|IOM!QJeG2z>d8=^WD`+S1nF~7CUus&-XWI)%c)!OY@rK~5C zB|biS#cnKgy1(Tb=GMnCf-TSr%}?42eEa0QMLP3O4d0nGE^PaZQ73&1TjjI zv_D+G;bh2+HbJk(li})U+CpQ;ey)APLn<}2Xw|^{u%Ip(4gNwA|E!l*i zx!{OhH-7N4I&LB)o}{ZYdTHP;%bViUw+3Bm|7tT@pw_q~w2>hI2xz6+S^kgbCr%VE zQfd{Kp%Oh-I# zl|l#EBFi_xq;~pEe4E{FI`ZMQ$3aXY$R#$>?fjF|<8*DhM!r`WoZay^k}g+sD8HkJ z|9q0Qta)&SYv2~7+Vyx*WmwD5OYT`Ng$z>~w9#s{YkBV3>(}pf$}%#d8L3C{Ke=7Y z*{j`ndyRSo!CnXXDqFwnxdaH5hB(1p5RC1nCkDASJ^8`Qnto%UICKMU?xv4K5pW0^ z-dgiPk2YB`t7ktml1Ka@?m#pkKcN00rOAws8nt5ZquDthOst6x;3A?*SVFv^1&Fap zFlf^c+SiSqf{&dZ=w6C4N9#Q--=Tj4`%l}5yfo9!nMw~a>9{CfyxpO$clzauQ|{=G z?9GhscW(M*xolL#j@q?h4KEYMb0~dHJ<7`sA7T=$paNksrt7HH%P+{5E+aoK76`fY z)aSW-j^@XX7}VF%{{{LhDyGXsRhHenf>uL#U9Xx?*FAzDu;rHG+yFyQ#o@?L(&j0m zO{4AFcgIJjpGM>T>T22#Re+s*$&1N%?iUsfgP`Et*{*BTn!A=)j4RFF3yR29WWRJN zx`wGEA?s_wGajNsU2hdDv<^cAR}6GCRMIXRBY5+OoL%oll0{3JQwjLKg}fG*3CdVg zb=Zrnu5#@Z%yUl^wO~`C=I$$~d6RX(o*-dqxd#1mWYtyE$6H_zIF(&PX%h-#tT}#%l7W>+5W0r+h5UZw%Ho-rh z?Yxh|xml}csKDXeXqJQL<#fkFK#lv{%ZB<&B0YJ%V-Cr@*F7OKGYh`7#xyX&nYA<( z>bn8kuz%L|V!GpPDR_Q5cKfX5W@2J>c2~0r{bRbM0k$9c2IW$YbG!Z{ZS*ugOUO6w^a(V!|ux~#W#0`$Rd&xwnU+nrr zH3)kU4IM6zXb0@7|4?zRhE|H=Cxdy01BGH^gT3R15?|=fr_UpFEly^k3R{CIf!Oz? zrEZ_pdb||0HDnaISP*9TJVRNlH+*Mg*6ZHkbeO$r+N{W$7@y(Hy0_LHn)Ho3B2{2B zu^-47NPz~$cbbO-*DZkYmg-Zd;$0({@!~_Ghe@2ZwjOiu6~V?k~toDMCO0r)iBTJxYFOWBrFD zJc!B6icFSvnQ_BpU}VJYe>roGb+}8f@}P~4*nI{JOB6)3!^h(CEx!?s4~~^g5q+V< zBoU~1y?HFOtx;+|<8eC$y5K;k?tn`~5hO~V>^se~X5 zd56Tf;>pKvthf1>R<`rN&^)U7?AW8D=Js|=lCnsSX+$h!PodmCpVnB1ChuRC z(pLM(V|1Md+Fjzp>PDPB^ZIJEE5V6Q;UEwzX)RZG`}uZG_Wj|vDsxOeK0XXPaJOed zL?l}nf9g1`^cyy1&-IWX7B*o$A}LWGbM}Ylmp%$w{h|k?5!60)_*Wdygm0+B%%d-s z54XlK^L1-om&tCb82_$>y(PiWt(3w5VDN-sf?3+JWoa|}vrcErkES#vGmF2%u~uwy zKd}DIZTXr4Ya7p!we7d;oHP!>*hM24yO;4;i0H2iX?4c4y^2rPk1^C($;IQmi_VY8 zxtt_1?vdh>&)?$?bqv90Ia9eH^oUIWU+h1GGo^1P<|4sq1Ama_@^-E;zrZ&`wvR8+ z%{%U6no4qgG=AGr5bMBQY#xJA67*wM0TJN>f5l?E%_DKX+d1R28I%pjLwm!K+0;JQ z)uZilQ4|VV2F}e7GIeWTVm4h}=d~|$nd=P{daF6Gi11%%18OV#Cr(x4>*>M|AJM?2 z$H49dE_?&OB+4Hk(__GGtW|aAq|b6R7M{_!Lp5S3$dyAlX%`4&*)pZ}+5DD0Y6n(z zHJ!SGD+5)sS-gT=3YBzYT{fp>;`Q8B{q4g}HS}lpKk#7|^1H`JBM_WK_YYz~mh^er z*wlreHJ51h)@{?v1O;%Es9;=h&O||ER(CECI5vi(*{0sIvNP;>jit z4)fUiQ9sZ=GO47Suk$)MN7mb z2{9rTf&RC}igXS?GKWX=p_}?uygT!AF-MfhO@895=&d_j6dWVY)PBuResR0W3m>f$ zuQyBlS(pS_46%wojK>ChO!Zqyp)Z{>r32mVpj_0(2dWRH%MNPz{KZ zdx$8x122XVn%no~ttqVr{1n&{6P<48W8%#0zdqzM%#)_| z@ZM(ShQf{9PqxNKW+`M)g`PtN>^$=YDJ-`>nH$IAF;dh-Nrk&fw(W?s!#-qmOXwYd185uN@!`+XE-DNFB zS9@r3R!QDNd(auITGr)mpX)dq$rVxz-nzrL1hFk^e&u=~~#4&DOPpl|!Bf&1z3@TuTxqhjm=m?b2a zHfApC==R6m*zMuVypB&vv1V0o*3Ne69o1sq;Fx=T*!bgQieSK@sjNl&DM!m=75%Sy zshq{AlUS8&LxC_)Zjl-aMMX-NBecg1KCuHa_ zUmA5v&1*Ophtg1ed$;SvwG`{cIoQI*E55hltMpsQPS8h!u=W{KZ;;ZnV ztBycx%vmxs>T8Y)&VjA+WSOo+W#rV>`J{q7j~jhUc@b%^URi!fWb`|+j( zGV*m~;XPQ7hNFcQel*1aW`2HtLS{gEvB#S?NqA$hJHax6Z0p8z8Cqqjg)d68u9QDH zhw4jLA5S)M?l6$?ys6VCiu_jN<0Gn}siD@0dz+Dwkw09}eEfUJQ^y132h7a4X_9w{ zTOtSu8ZbBw{Ru>z8ZpW;qE4l}YftMmBVM#7#A}H=E#RDbx#u}2dK6*ntG-6iw;uZc zU-WG%o$8>fBI{@8p>J=YDxZ8EB*38HPmf6&EUw_0KQSJbBf%1V>+|1*(PoB0~I1$aM$#HxEh^BU}0N=L6s2`LmV+q}s2k>2DBw0e(Y)X}6@miqP_w+Lxo z?chKJrwDxQ&CwBqs@$s!3$2&zrt!7X#Y!RJS;%`oxE~krzQ>0 zyjrqz@gIq|zDGdj@1}lgwz#A}g%mcoI-Yq-tCI7mf?@%-#2Nl+?)mw@HEp~d1g+e( z;{476MaRxV;BK_jN{WRlC=YaRwOef*_2VmPvVeXUh{jIDUQEgY9#(xCcHh# zsX>LNJv>j;ysioC6Z8^P5;9XS3K2WnEQGm6+-RGUYat&>idRp~0(as06xKlo~jlTZ=UrJ9J9C9^W3 zK^`NQ`1TnJpWrQ={p020SBh`+KVnNQFce{L+FS7e>ykullL(L`PJ#{u!-JulDOI#S zh9vG1&v0KO#KQHdoU#M);_~U#ln<4c#TtEzn<=yS5Pi$*x4zCkKy}Q45A1nR^|(R$ zd?XB_IM9%e^b`mD!IiK_)=2yWoq+?J- znQ%GvjO*6jh7jO4FuZkhlCOR|{qf|Pkx}{^5d`g_X&^DK@5F*d{EUqlVta8pxA6{Jle>j61Ns)8%$1BZ&@A z_6=hM-!PD|b#Tn5_ve$2;2Jx)(_4p!pg&u9@`&EgXis#5lVA8-xZ>?3iB|PLv8MR2 z=|sud+>)vUUv2gCgV09%Hwn=hh>e=V{TFR@se2jRYSLNc6C%_22OalC6v0h@src_V zeSBa-{zP<_aCBsBNINe@dN}u~Cga@1h_s`j_s8QLbKvA44Lj*0*I@3JiK!2u>(Y~d z{iqjq!5A7D`h45#;!0ho@s$7?8rslsR4<*Op<#6d6@sLc7=(EN%4nv#_8iog%5wtW zv)?Ft1HJrzAzJzqN4xd-EN;7x{jvT6niERjkO$x_a%ogYU#K8b=lLb~vk6Rk3118& zd+dI{PZ;g8s1N91v?4m!>~<^lt$iL>>RB_b^k2UYyDY=)KenAYVZfP8a!9*nSHk3gWfIT zx55wKqs|vo;Nv|2eFeOEkXsvl&A3gMPPpFk#a$Clgg{#5uLszl8!S9ry}>suMD3aT zRFI7=W?|8onTs_(F)4|Nb6Uh@nx@NGgPG#f_9v1RHD$Y0x(^#a=|3qbcE{#J_0~ca z`?D&tf{KogV7|V}93RFuZ$kvFONGpoP?0H9A&6^*gsg>Ugq)HEL@o3W{>+reaVK<= z6+zFG-ex78;)wO~aQy)y`iQg-H!Z&hVJZqw@C2!BFVhyzv;=QYZ*zwc%{_| zm6ynLkb`d0-O@I84SD^Gc{zWaJhy z$JjbaLHUleRi&DVn8z!{Rg<$K<0Jm6iGsp@?%#skPoz18z!^&+_H22dBKB-Y)W48| z3(k(qTvV13E6HD5K$C^pl+J?g8VTm~{S}?x&+$nISwnNf<x!$8PRHx85w)P?Tx+fw4=44!fJcac+;sgb)O;;4e%>>`Z6cV*%j{>_lZ zov`rhbd9TGoulh2Cx#Bxuh(Y zNL$D<3=~G%tENqtbE`h<=Nfur8Ee=A?!qaa7f)%k6*pDAs#Y;B#7>nO(K)Nc}fPozw3JRck@9%6_6ZdkvPS6(1>UdS{!1 znmw+umJMFj@(bD@r#K%00Q&XU(A`Ue_yw6&s{6Rq_n0#W83x`{MN?Hlq(Fsw0iqV6 zd{}1sGVf>z3cyudB9{)#w{EeX~KEmz=z-OxeA~*#5 z9bRskzu^!P^5Q?*N?_b`YK?&jf<*`2hLCB8qjy@C2g^wu0x^&R0uO`Am;`xp)JRfX zR_xBF*+^n5@9TU2@dDUftM)_h0C!R!j4QSoYr5Pg#66j2ZQ2#^wj}7JNJ9Wn;X{tXad_758rA&2vD*Fr zu<9W$p2wkb_{S*{Om+Wfb?u(d!Wm0S}&X4Bf{sk8fT6s zs(QP@>TA)vhIH)MZK@okn089S!b`T=4cXr=|73@JfpA1lu??eU6 z4UVhajN4tR4d)HCY}W<8{YrUbH(h&ee||d4R8UygQ##Wm<}IBOjpqz3On?5`wYcS7 zCbwtunh$T@<%J6ANBJL|w02~8UlFUU;@ua$-rmhitE(!2qzQRM=%-Qd5%W=kEHUY> zDG9KMc?b%m4&8V16yG%dk~fpzQOU$;`rx^3qA2(X%Q)fxqSOMoz%Uh#g~$}*t*5_9 zvd%F7Z-!zofV0DZBv|Ww3P>siP-+nIgxG~Js4q^4L4k-aJWMTEFzR{oZjo|Y1`jda zLiiOq*55`rCJ5wOpn;?DhBS2V6SdTq!`iOid04c6JHO?Ae#pA%|Jqy(N*<9adi0)H zBQ|dEvLP+~5KDIy_N)x%8=2zfm$(Y%g`2Nkxlvlivrakd$T9qHoel0uO7qe2Oh#lG zBUYhV|G=!`%lo7j+h{yQRczL`w;uf9d9U#Z4Rw+cWM5m}IujcRSeuG{G@+J({Ee4z z>|Q7$-30!Z9klGotRqfSrH&nK0Nfu3V8zW(8yy_Hp_nS-hxuqkVB|Bm>u zfLClWM^Cyb-M$_${A7j6rO_Cn1Ng+%{zWi%P?)sgN|QA7%NXe#{t zrVDqWai~#p**@pTyK{B*n^{6q{Ngc@5gA)kqUEh8d6`f5X3I~9t)XxD6etA}E>TdX zY$n;Rw{;$VTWLS8NJ+jkRLShIVYeVEm+A^FlJ`(xcy|LnsCi7(11QrYHw$4U%G7j^ z7WnTWX4Rht<00kJjIxowgkVX}tc1pqlN~iV%3I$`0EYP$vA4p-X&8mYLuC1~`E{%^LTz+CPBChzFu{J8`Wu+_s9>zHBr%@=OPD zt=a0}36BGUPKPV9PM>>kuKjWV5ExE|_yAIugfC}HD}FmRj^pRs6_a@HXilmptWEme zoe;w8SV?uHBr@O8Drs2su~&zxueLMJ^?HSQ-<*K){Sa=l4jT}CdNp!fsj zqR_2U56A?%6}~8oVBFotlVA#0&Xh;>A0S{o2ir*le-{3^U%z*v_S-)vV^~inN+CZ{ z`zBvX2gYq0uLjG6FrHFS$PLTh-~X~EPcy)d0M)GjWo`XGUyy(5v2QH;E3LSpq2iJl zZG%@imL{ddjJ{0*m>it;6hy~YiV#mL4bHo>)T_pF+;NGMpgLkQS4i>STFo`kk;UBu7j7zW^$ zmb@ZYA@{R8b&wm1OY^oZ`lK$pUA4Ft?qNp=sTleslB z`yexgEq%jdLjDdmPEJX;*3{8$Vhc>e>cI0`YH+zCF4~EglzQm2~h|29)+`?eE`hsMmgL}e9<=>o)`d=H% z4|o`$mu=VJj8Xz-FyvMRizN|v=8BE3f0T#k zg=tp;6FTnk$}aAUl-7LFL2fUb$7dJS-WWgEZ65g`gmAxi`X2(cN0mrz1x~pxtu^h; zvg)~Xs2fEnvF9&}TmG$J# z_!I-lkS?>2{ViMFv!KZtPOd(+(u;6P<*UvpOCrBMO-?r6P+65U1Jc+TlaUec|2a9m*QO*0S*5{eG3gdZBlp)z_FK_{bH?ROf?KB{K` zpu_JVa*Frwobp~q7yQ;u7~JSBE+M#p2$;)r8PDC=iINFh+Yl%#a5lWTJ{ZwQ?@E5M zgF!pXPWyea9a7oQ>@Bxtwp!>UnSb*BgSpzYNSK)F&Rzg7czw{pzy70r(i1k{%ACfg zHSV3RhUa)QFU^zFr86pL?DI>q%=?m`Xmpq=sI7meg7(t%1Hq zCk46tis&gP1d&*_{&DX8Py6=3LTWi=76C<&P{aRi17op_fejVeo)MUDN-74pvKM78 zx4YV>vaZ~ML?VnB!8V+BwD|KENGbQ}2C?L^YZneV&B2)iBWiDU7lcq$5QC@}d{ZdX z`-hja)Lgad&N3C-UP%>SJ2;w^TD%T(tj>$mfCaI?V+(Ri(nVYf^VTmzF|90^6W}_N zK1lOYdOohn63{$$&bg8SmCATWPXku}&!s*6QbNrZMY@Fp?MG0H2#I8;E_0R4l^ z?FM(|LtwINg!e}+AwxVfJgmnEey!Eb!>W6v)TmIPl91txfqyqbU7&*y;myp)$iLIR zRJ!${4@%v_|2oUtFYA9I%@`C+^>UaM1kLY%;oi$L2Nh&^JjA7I%{KPL=fys1z7 z+82A^!(qvx*6eI4bTQV}2P^<-2It$>9L|TL0d)7O+j-sNdM0XkY`G|wmqKFuxPP@^ zONcc+>FoUDh{vI7b(3esTBjkr@*-6;l#XBlURpM%R+^NQ2={wpUZ~OUb%;&&$e}oK z+#qIUWtcU7x{&yHI`UE#V<;mUa0&<$^p#+r2S&lPMu8dV6avNMN_f=2y%iBT4%oDo zvfdx8(T8|+-+>2(KYXtD?5CZ`G%7L|qRsuL@vb+8VStY%Ss6c1>s#P$=NguEk9&wj zkeB;^f2z_nwT0o$Bo{UUL>;r-4|~v1lMxsrZ!jYxo&bTchdUXb)$ylL|5kcW0tH;X zo*W?GY{SS9PR)8sG&eUtg>X)p3m=C2+^6+JMSp_cL{NA*i-(IW@t!eQUD`7AtuOk6 z&``93%(svSH0rj@%tJ{-9y?7RRX^fFe)Xm_rc8gbIk$UUdC_|zv0Zj_iIl;Uc!zi48z!(+s*;MwR@C-LIc(he~ zs_BqWXzY8^+ZfrOkos4K!rv3rJ@OM4@OqA?|AoeoB=SQ>G!jNOa1-e#I{40e(qu{7 zU2$I=Qo!)~+?hEpb@pA-N!v4_fbJ-vYHP9PjguN;^OGk#SuwzuD*Mm?(Uga zZ#$(~hvnUB%KphhG!UUzi6q*rUA^~)mKJ&D$Ck(5RnbnD{iC9DNb)>R45gFA%dOzOE%!&2mV`OGMZlPs_{&hL{2$#e1h|&l?a^zy&+gkdGon} z`q_7)wwHJB&p(0)CpnTTC@*EAetvZQy6KCA=^nNbQ7WO15Nd9+jMUv#=Ew8Wf+D_(^Lox~uCe zNv>r^LGP&1Ui|*oPg;>tm%KR8px8)VEXEkq5s_`5xh@=}1tu1yAf?K_LD16Fm*32z z#E;%1RjJx#EiQVaE};kUcamkauBX{jux4PO*f-MV5z&cmJmnf$E$jXKHwfqY3j zZsw$JGG+>~+4sVZ(SYu7I&w=X|SMc}r>SQSIgpGvh6jsb>Ev zEvf3$+c&&eerE?(&gubjoKcSo9DV##BQBJ8c1h|678M*Ab&P&6({}^elEwLBJoK-ggP$MCNVDU?lJ3Z@&zG`uIYVCP zx~*`k#K+KDJ`;h2vo`&3F??J$-F4O`G?<+OQt38Tcsh)Q{{1#HonF?%b>?&e!qbFk zBs8d5PpFe;Ch+#I&&-Qt5JyfiaeKpyxOgX>LFn2tOEZ3Z5URW{>O$Jio4IZkG;lPsxD&2> z{9`F%F?fo)&b>1}WncQU7_F|gd{&+aa~b=ZF=B8H>L`|GwHpIKU7@dU0RD$R6%i%-=+PLM6*I85MDVUIEorepTV; zD>fDe-1iT;5?Pa?aAlr$c8dHyD&zn2QCSnbXg21#J~JokisuL;@mR-+Eup;E#N-!F zt6J%7(tv3{)A-HK%Uy%)pGb>0xc5u&{=7G8T$)I*ZM;gI;e2=ks=BzZxg(2jN9p}^ zT;{|n6@mWluz3p6C6Fw{A$xr;^*hT!Z&BrGnlN6^B?&HY;!rPyv6rpey)T+85lP(~ z$D%Sw4N<{UqkL&kK^TD2}JH#L8B|Aipw4KZ-O`&(e4ZP;1|3d10bI59Q<5fS& z=Taf*>UBMy*iSfM$^3!_xt2*aBUo&5?7{pokgkCrW(nDM1K01#fpL^HdU4BZLUMMB zC)u}?6<7hOl~^q30VuY(25~ipbYa_~l5*slD1XPoRTP)XS^K zSpoa%Js-|a)t?SC1Yt*u3lcm^-RY{il#y)aXG|gZx-8#{h2Adgp1tjX^B|sk_X(xn zSMnO;zJWp57nuj~Qb8xTX&?C*=r=veq@ydhUejT_cM?%rqJ3j$F;e-lRGIWMjnc%| zxJzG(FA|ygq6@rr{kkm{T%2!uA*ZKiqc-*B_8qcpt|yMw3c*W(S7-0WJbw*1Jlzs_ zQMn;HPW;ed0|Q5;3HSBR{?QBmH_2mV%jxl|Dr?pruY4k`C(d6SF`YDN_EKE+$wPAP zywZ|^iW*SeTe~&R2udL^N1Rhc{(mTY%c!ik?h8~NK?!LP0i{bC=|;Lsy1To(QMyZM z5J6Hzx*I`Cy1Tm@?tb*V@!^j9{_hxmIpa8n@Y`#zHRoJ&t)2ce-dN=#$Bh5RX zZhz%s_wJIG&SVM)dj#{s2%wepv46gPlkoYEk*l0PsT9# zqrsz*Z^pyF-K3C+HCvDK(3PkN2}Jo@YP~<$pDEoYpDKYI@xyyZ+2|Ne7k7gHUuiP& zN-|j>^iv|5qR^Fc5#meoEKDR?0%o`wAMGzCjzVDq=9{?*rh#Px*jJ6*q%3NX0&EJoxFOG)P#8)b8?^YIh*yKTs6^*&Ju){Y5TNigx#2myp?dIy7xno{qequAnvh_K-m_Wv7C%(S-Rw~oMzQ5-j<*Txv z=bJZ^Z>G1IZwR)Yab2D)$1G6K{q(yUF%DxWlrxHuKh&^0npDHR-g3UdUA|rg`SR+j z>m(2xAJPSjnVs&!;{p=z$O(TUG?i@4F6N|CFSqqV|-e-&yOUKoQ=Re4d&g&4->z5M3BV05*u=OszMu!>SCNe$aS3d6CDl;Rdshi{{2S{Y&9Z=Cl6dQHY$D51_b&e0sKc3 zpK*_-t*|S(Dg}i^E;ll{lS?FT+$}bIye1y3$7IcrODZ}MXD>8p^_?c1V0jWW**w`^ zhu!+C%WUAkB7wo^QTqc~>mvGt^Hdg`wqR8h) zj1egM@b&>2ip7SF{#P+@{bb$0?|A9nJ`5`~u)P;NUKzG>)EkVk8~^Ej$&8C$i>1(5 z_PH=eZ0yBQfxT4a-G_tx<#GpOgPVI_Edc@9hKG5(XC8(%RbI_ajYB(~Hlc`{DkU1> z=m%a|k>%K4-rh_;yJkv7DxE5wncz$xC_#=pC-C%j**kMoNw?3WnK|}HgmW6`eY8Oi zb3tr(x{giDRX64hG5JikC;)}XMAEWrxNc1> z;BCC$2>i=BdxU0!cRFs}-Ctq%=a9R9?%mk!{c;als0r?wagAXWb1_2tg+NSAqfmkI z-9&CmYKU+)x+^i>^oWrQkIzRPU5Syup@Es34h6k^ZN=2?YVvgu4FkuiicMPINA4HI zl{ER2uKAoF2QaxU7d)?rP=x2|i$vdj6L!B`gO^k`x?yKf)ltFy+A#PAlc4B~?2YFP zj^Y;!2TbI!XU&lnVy<5au8fX^hQE)=tfq5nh1TKt2WqMo3>Y2tM|~elO=&NG@I1O* z5s{~@&iv|?!wkL_F0f!-C<-K(*M9r8?VC9jovtdY-lfYW2^pYREbb4hxLdy^iy?q5 z`~aI3?12A@aDteKFe{`WqN*U*PgZ`>P!zDak4!Y4o8V-JP025r)jkU$b?RE6c`iMGc|g2ziV$f&Y3%N>yC z-PzBriv|5u%WSM?>s?W4uocqXgy-6>Dt^rDk4oN)0&=AR>GCeM>U&BJ{%N*grwCZu zw|Yem166{YwtzU0#c+W`m3qYzEs8ey5XxooS^4MYpKM_al!Kb zb{J3sME^*fXv4WHAr<>%pE$oQcn-@2?xnN!8vC^dJlo_}Oywg@ivYs83W^+(_Oa~1 zX7G&4;_cUuU8jb!y9+@d2^)*AKax_R&Zm8!KIO}=4pbe?Y)KZHPWhye?*XS!ClGZi z+I|LdgEW}V0N>j5H`&L|k{c$}qnl7|jxPd9lzBkMKH*&{QTcKRoFOzep3jv+>Vd9OVe2DQ%|E|rDXuZ{UVE+UP0vlCGj{*);w&J zHifHB8uFC{%B5hTT&gg}0Sz32f6H=wefh&Rrx2YCsL}~&cH@99*CiOiFsAzLFaHd@ zv~=0UHI8bTbvr+^e~r|G&{#s0g{jZ4&CE}Y-MFMdlRo4Zc^=?Ptu&jt%@*jr5up{!<;%peMQhB?IWY@nl{VJsQ^xe;=RBh`2 zvr=9EsZ{wV)n7P%70>Iu7;U0Pd}1nhq_*-%41Tle-hszrw7?>bs}+Bf!1lLfV|nRC zAMeo3T1K7y#(=JXk`k6A7Q=h#j~)EY$HV~UasQX%ks)y{2Hpr@yx4r6R_8vJHZV+s z@eK_M3aHeb#@@gZl*Qnm^{s!8Xm&~f75WUCl~P2iY7b<1RinsYFha-=+p~S`k7Qri zgM$4z)~^Cg)DGp*GMQiwy_%^&ui)P*da|@Z7_v0N_L-K5^0X??Br)sCwk-8kb&u9@B&CWxxW$G;YDABsRfQeHqnC7 zsR>R6G%ACl{}&c=I-9zmcEFIT&X812DY1Co{;o1C-=dhO2OUy}ypz=0-7S`(LPzQJ zSo?slOn-3x?(poa^Beoq9P@Zlm+tP=7;Lh|by$mW8>{4&@qWwQ@qE?1f9LeAMD$Xi z6bLQuG#1&P=+x}Mc8H4;Jw`aRqJO;PXr4?lv{yu*F6MiW5W^wqO=Z8L)v9UJ%NKaTo)Q)_a&4;@jGdtFGxw0I} z?UMW|*l1RzAf@6&;nkE}qjVt#wRc)fJk=o*d;;h&_|^&lw`R3;M*tedY^YMaf(hp| z{u7(mnHH!)FZ)KuOmCKx(>XkjL<`$!6Zs!K=I&@dqsxou6ck8~aib)LNpJXas0zPj zp;Q*|iM1$KKd`PRp3+saUC$T84hbSCpjs(O4l1R3q-%H7++?jKD#kT)ijMq0aEB^O zsw~3p6^0!$gwXbGgcYKXMW%-Vaw)R}$>w`0i~@x>kNS&N9e+-~zycYI7REi3#={JnPSKn*RoJwCMdHIn5*T(<1 zs+eCi$aXs89MbSWq^xgpcGOnG7pcgqLO>QiwHs+^&?gaz znT`QqVpZb}ir)3<$I0)`^^DGgG;%1GYw=BbA>=c)o z$-9dd41@b!#)B+m41XvUL?18t#DE0)u@v5HhJlYI-$7_?iEa1K$GSbyzG_efU|#oS zyBrc!wt(_{EyZ0i$WO|}V()|Y52%UF&pHaC+}u3KJzSjmsWFmeU$v#DPQ(e_~*%YYb`I+O-ufjFiKd$p}?^AzAMI0!sT@g_zyRw21I* zEgb*Dqg8pYo|29PQbxIeP>C&Mr`V-xVw)?ZMhDT`JS5IQq%6Cyy@$QK@r!r?CwC7E z>&cxA_0t!zak(em7fWHw6>(%r#SlQ`R=d4{G&O#^%LRy3!O%Ms1n!Ki08mS- z^iWh$N7k0(K|!?pKct@DWLYOFuuk6T3|aLqyjUd~u1fEg#9`9us@ZL3JDTpEmP^%& z>{Kr#6OoVzT6^q`HEoWUgqPs^0y&fl+`^S^C}DgBJ>dNql zIzdw+?!**?;HR7*{SO(g)!D~IN8kv2bkR7F)ypZ-;=Uk}&a(MBNJp_lyLZHS(daH$N(fBrm9sbMfm)z3f7ICc zZ&qs2*zaRQ?u#7xNLy{CX`R;#`G(!wx{>r|E*~u-hYP%Qv7UX+8k<7=i9Mvv=ZMuT z4t+u`d`+Zzlv z`g_@mNVwtoh8;a^=Z^GLH6Cv)6dU#IqH0|1ooc}yodc30-Q|Ua*(M9(aT?2o8i#o{ zrMuV57MIet@IJaI)tK~?e3!pM7BdgDy5#we+6)?WGff(PYOJ4IlEk%Mw8t=E@Z)CTT!@>naC|0Y zfLY^K7`)1)%Bqkp-TZ0@`U@Ls8KrzPIL*5q!{O|T*d||ZVO~sTTNHNn2A=QEMbCTd zyeqm_KgWkSY=eQs37eL0O9x-~2GE9nHVF%h8Z5Txqwyua*2btXm5EPPrvO43;1FYl zDx%73$!=h+apbFB2G44-FO;vO`(%PWevub0+) zxLxgcdYvnU1ny@Kk7Vw&5Xy3HUHR70_o*2k>b>ct)k%>Y*87ne4t|9qGbyJo(i!x8 zo^4xO!q)XNqBecC83BqvrVe;jB)jfeMo6~>@7I&-p(^DR?tN$N^kFKkI>Z5jsXS$T zI4ACjyY~xU8j30@mCzu?Hl$y&#kVGz1A?yes&r;y*{zLKWj2#XdAvmjMY7`(o#x_5 zvu2t+(4YHqOR^7SC{(RuZgMPExUqMZ=$vAY-|{HGQmkJ?;`r`Zl0-Vgb2f9X2u5mW ze!20Bc%GCB{qP_TNMpZe4O&1P+1|wtIL3Z^fxbY*D0iEjAEJ4vLZ1?G)+|%au2dAy zkE((>6iU?Lt2w`=q!RuCXgDwvlz$`U&WjRvX@2PB@uIk@3LRR{yT{{y!3wdM@X)0E4j{-weizVub2^Bt%cPG{S!KWt8l zHCPQU(SCS-sT}v>=fZ1$AKBrXYOpW~UTU8E$h^VmIxqN=%L#U++c#`c>+Q5h4x{C{ zmKU!v7X;$4oZ0L^-w_{Ndi~;;tWjN;y>pb|8hDtV1(1&1}tTnv9MlcCq)xX4@}O8qo<{kOBrn znoW=@!y8NKRX2*gZ4DrG@lUIkKcMQ4mOuNdB-i+HPp3n>zKwoZ{rONR{sKkQykaV8 zjUK{TQoSHK&9aXYEd9%c=!Ya~_uB_jSgo?i2h5C&C>*f?+>@~76RsJ>g5yhODxGY$ z?;FoVJJRtjW-`uvE%vU$6NMfIpPN@vk&$Q3+$<>4UK^yaiH1Om*vz9BZ#&Vx%uc#E zESSudI2j-lkDi={VV3toxU5OO620IXTcJziszHX5xFu_Q_6Am~3C%tAVlCt#rQ-ag zNKUlG<@J^TVr+YcTeg8$bCJ3AYz5w(wrv|tnY8lWbsP%5KH7j;nN9 zlA(KP9u?_(&jmFpX%IJq4(4?TUW{k34^JKUWRfjz1ISo*sTus?_~C7#{6f1B^4#Tv zghT2kn)gG~G(-INk3OH1E>n#WteQRW9@6Gb)gQJv5R9;(gz*hEL8%l3_idK@SVI9i zMhd!=V?P!K<9*_wS@;&fbHqw6a_oSi=iyrscca2>j? z%ky_nHMAWN)f*ZQMQ;kJUZnAI&SCCh=Dy^swi<(BPpJMHwy}pUBwu9WtkvL#z--#z znN%`Uc@%{Nn-CK;aj6Z?d#98`=MY+&AwAYDurnX0aSo%mO5hWUUI zb5Uzx0A#g^>;g_)gc@2H*O`lq=}JP!C%#y6K_=4Q(DEwXi<+swFjsx8I>z4N@A3&O zX}-0to>JLbNyQ$F^1;m8QLa|byEIjDgKhG4CIbR#(x%#y;~)cn(51O&lgGWY79ZFY z@a57pHzR$h*q7aTcFi!K@nDbXs3V|C!qUYHQ4V=GG3yYBJ|b$IXJVB%%%o4U>PRjf zle^V#<~v}Wm_?ntKMHZPbTBlWu}Z3XYgObPEVTb7mQ}EGx52Ye{nD_6ZC^qBN`Gf2(%<>I)jXXuh`J{{e zV(Y`77_Rt6;3C~9#HJih$4}GQE>lzu1a^^%=@D2X99NF|ia3-1`p z38*&7BC+gTKY;`w73833ZWwy98JtskD~}BFqqXOEA}m>Xugkpn95xd~cg^##u6krM zKGS?fNSnej$p-7J=`7Z_Z);u^n~BE7$G>Zt-m|Z=Nxqg;|F*`?pqXu;5WQjdE}R#*p% zMH?`#m7vskQS8&oKOeedS`o6+EEm|*$<~qLxw+<;k)M-OFP_*>94?qHNH66r>FRv< zl*!qR()v?uMRofOWs%7YB5KaTN+3?*r1TnF1AmNW?NR?Z8AX=n#Z0vtr|x{*~X1~AFB2#Gi9nA zJ+!6cs~)*GcWG26!a0$Iylnb-c) z;wi_<)B~#~zI(UF4SBOXI9MI{)z;F0QT~$skJ46Q8h0NnaE)nK&4B)eU%ylwVh<1~UgdAW$zz^$4ktax)>;us&y_neop{^T`Ig z(CMqI!3EJN(aIH6rzJeoJx@%Gp`UH+_A`@~D-S{W`QEL|+15pjuCqIM-s%Du7rRV# zGvhih_~7!2SbkqmBQBp;eL&4o9)U*J$VlJ#YE0(x6INn2OgXj(A}rtHq&fHY(zN!D z2~9KW*XTns1izn53}ni8v$?xG!gJj$>o=r*VO!^Ub0gEUoh-Cxf;AMGQjXp<^*G{P zfr}!fuGz%*y^NHv(#`YNn#c^%pR8R86mUJRo>3r2U`q5Fa9=qp-i6AV&3GyWob+&3 z*ZIl9;wH@D-)X)ld%=JY)Q)1gzgq5{*B6d}TCwWI(f*>>1l=$orPu=ZX9p)Jv~|zgz6RN2&2VwlQ!++{pGg$ zl`|r8oKXX77xWSP`I?}_V2?XKQcw2fq@X9LZ2=U0Z_f>kw~va>{{UUf2V zsKjAJgYRlvt@nyE%N;C=Te`-}>^i@1GJ8i@lwSG3*yu=Jb9XZJe(WjDE3$rP#@}h} z65N~IB^JrO)8Sz~?*XT*!P=U>qkrkRTg_2r{(()D(fU}?w7<#c975q7hD{n;dp&UZ zvR6NPd>;i4gru>)5)k)~)JiCo(-yoZG4oNa-t{5RoV~4}e~j5d+hLx0T9{ke2dNX9 zQ7x)2F^`laR;wK@u~<2$QmNuPeonVySDx0OVz8Ey@}b7_gv%yar>lPl$9}I(qF9|p zgq^Gw!evjv0p3Hgw#xU<%rzpvVQ&nTWiQL<#@Z5XxX+{$yf;`IJ^JofYPUtbdAIb^ zTE~zWq{Cvl>&43q-!XmGRM%F_bj*R=O_uvHN;GWT(sSD>N7(HuueaE2Q65d-H7I>{ zjs{qu$aJc!EmnJnaicDNOF`(U?`(Bqy)g^&81rs~`X|A4~i>pwZ8_;>k{;fei_e85V?6%pRt$d0#BoU(q zr0j37Fs`>4+2j~Pl-i#FnbzWJd^P}q{cd{J){-x!-tw+a9015@zauYT7i7RV?qoXO z1a0ftcqpB|D4p~RK8PA4Zt zbGnbMIC!JGDYximZ-t?JB^tY~F1h&%OQeYBOOe#COTc?BZRZWNlU0PSvj!?kR<;Rv z+cvB{md?k9YPj-PEZP|kj|YmuU;S1+UXi)*E@BJXPro^9%YW2Y)-eXFuM=4(x@d-grc}Dk)*L)|nRyjawC=B!p9( z`;M=XHiN|XE^HUtODmfxIhw5cDdoRhuTW_=esw|83`ifDBazqYLK?vYI45QNYN2|cT;#@;U!P%}90*oK$;(D-41HO)ScvBP zokS_Rrsy*{1Ij*BsupRB2v7#Rj_Jc;V0&HI)wuv}yH@yLRj$$@)rn@Y0~!%h_qhJ|3jqxm-RE`zuYJ)vYAYnBc{J{ z{OD28r9enNCt57kCHWy>v6&N&32bQLlqpN<0Rr+awx_l~9eJe4!e!(9{QngUpsV&s zEFN|?!H@gEbE01>2>X5N^mYHs=m2A>Z9Zhms=Zd!$D-TYtN3%f2>nm!K80xogT2xr z_;bLEGBoDy?nxT|;nKqOn85xfttNQj{1Wck@bb5M?@NLz>a&f&n_)LB%-o{Bv`#To zN|Rl!?}*Jlr@^J+w0O_z-Ec7zG=Evi9c^O|@9c0W$WLBLr3?|P=uurK6u(2}rD!a3 z;jeyxZ}Q%fskFix|C(rXoC+`+*gA%qlY7{Tq|Ew#5C!i8qO*oYRbv28G;J29H+V*R zCk#&QrcX&G!PFK-A^Bywj-X+D;X;)I%>74ZoqGL#orf$h5j2mjh;bvV@bt-M1ZI8@ zb?f9#eM(fTR#d|C-(7h>4%-f2Q)%bLa!EfQQnsB|&_8|~FhWj|#k|hcDuH2Euy9V! za=`VXYx2F^!lUMw{s<8P4!H~D5uR%ZmD(l=i;s|4v6Sik-TadU)Tj)d5@F-ObTPDF z%wv*taJE%N9-=T$(hBT=Elkj=XCL9377QAgEfd|Cfip=}E@<@YjUXfh|L-9IERipf zlAskxH)^g(wZe9 zAl5Q>(Rgl?gkSE3a(nBz$uU>sguRj(iaj}r=dg;>_Kn|HzW*!lhsCyR!zv1Rg&FuY zQQ8^Ilf`W6IOecftG%ChxYz{#(Vv`#oy&gLz2=H|SulpMq$O$dapZ|)u%>F6;qHjX zlKj3w@R0Agu+jOEiYH%~dr++Nv}CRyPV+T9xrLJ8X(JUaF29WHjLtt)vhv}_yzLS| z`W9DbaPMO3&EC%O>>GeiGY!(hzr;Gk`FY>cocC4jesT)6Z}I!9RK+)+aMd0NiC}r$ zU-G5RUJynd+@YFA@5ZH8e(y&uX@d!Vtf{JZfBClV>y#$1UWN}}Y zghhdRGb|PAVNIpT&`*sM$kx+6HPaeRXc~SEWW^h3FLjd`=(5wMT^bm6VvyMj$i$#d zO9{<{^A>|ni9rMY5=!w@kb67-*csASZ8+ZMOM%)ox~3TE*{X3b0o39V9G}4!q(Bv-LzCt7P-N6MU0jY`fk&-}BU~u% zU)p$WNgL#z>-1lmE2~ zz|!pG^XEk>m~^#wQT65<6Nhd$KCkUX_VDdDp743sHnHvJDO4!@uww0Jdmgo`70zj> zqg~Bm5BG82lABIWG;oB40 zQ)M!)ALk_Eu#c8$V#?r+RnBg9V+rl#ey;$9pE#hgu19VFwh`eo~Xb?SMUv(=vt(q9RX(Jz@{1+(8jN| zT*s|eN5C3PMb^eYj=VMLN4+C~A%$7F0tOacvej_Ih*h(AzZelAJiL2IEDzdTNPQ;0r6os8x87kj{X!KZ zii}}1(~WQNl<_MoxYt7OQkhP2lYdl!AnNcN=Cu?Ifpm_1-+&*rz6#K&x|rGfMxzE4 z1&jFJFEfm89>yxxVu+j1y*ZzGvePSX(EU*ouJd?ZN9zFkR%7zT*ni-EKTW42VCO%H z-?cW0SG5ypqP=`(xNq`Q<(D#DD7z!D@ITC*- zvKDXKV}1S_U&3%vnGS#Dhc5in=~;%@d|~w2KUGpfL-@HZBroT{)li|p%iL4OWyj^A z@i~9=C%tOAa!KMzPs3sMo}7kLj&iXOxb8|%^~O%wefG-t#r>SES}=f`cHH}WLI)33REx2kw-f&A75T~ki!q?N^45d?@rag z^7~#Tsho}faPC>pl&UoK{{6K3qT{|=W_Iyn{Kr|(Zo0^hCCv-lB1dDG^pIMIqck&Z z-ex+ldnmD?`fE5AiBCzGsX)2=aN;WXx4Z4HgaIX9iTidh5NcTb7hleA&X9EE8M1iV zfu`r-*gs9r9k7>j-oF;fSM~AhoCa&@Sq#by0O-Y{(mRrS_Z+LbGyH5W<^xlh95bek z1)4Lc-W9^`i-;`Us3X}O9x|;xse9ygxUV;Zg>oYSlin_0w0`#b|^ z3;dal^!vB5X8-)BUIUrH(M$fvWO@`(SHnBDO(cX4^a8a}LTd|<$n1sHNT8$a7qx9d zP{k>YGgp-?MhCX*K<&LJYVL?7r&O6E`|gwV$QOak^{8Fpxsp3yHW}ZXSA7|B#9=Bo zY<**LHT~9BHD%e?LTxYHatPl`QXEHqV951btJ zhv`fC_(f-yaV6Gt9xN|m)_C2rym|f5hp7k)*ZZFA^(FJQKI_ciIJ_V^FwlCSn2xl7 zaYtP4j9nll;@Cg9SUv#LCY9&OwoV+@5H1DIyG9(l^B(%jyK=7nVe^(3dtX>*h?oZB z2t^Hd_)o?PF|c=XHn>Nu`_1pK>q zhsWm2&$?pD?Jj(tmB*n8U=3>z3Xu;%u$D_#nH##jVqcl7tG;N?Q#%!zy{4-}6>3!B zwQ5)TV(F7nI6ao?B0R%KXlC6Nup4dW>9}pN3jZtD8Ph$DV z@fIyu#MR@@aG9`AeXrS%MS-_T{~vFY-rYtjuA>r@X17bpP?imH1KTPuYXNASpeAUp ziu!P%xbDBtwOBizto7vIMcC|;y%xn@b>13PF)u4^^~kz?JjR{NC+6k``vlnym$)JMyG+=`~b`719Cft9sj@DO(5Q(d9$9~AEEyKtI-^8%OcUD1Vx8-(!goQs$97F4B<14Kkn1<70JsI zC+(3!z_+TNA}!$K98j=9W0L&vcf#m9rflj~CP|MTBMZI-TbW$txFf&0!NtpB*@PhA-f-zA8Njrf+KRrY-;jyLTvs zEja@Mm&d}x3PQxa<_q)pDL8Y7`u7Ed@@hH<`nW4dKAj9z7N^$2(|oxv7_U^R8Qnik z(3rowz`MP=Vy|-+2~?|}t1rv-8u75;SH1238|48&#t8p*Iir9l%l{ytWceHBDlDn} z&ePT2u21siRIRLKH8ywwcOThzF}X~1@>5K+8t16x2}!^)*85A@;abD`QBGOH$uDQ- z7rkam)}yi&uM}cz|Ma-*7oUc}!099x@+e=1m(){e3!+6WM`*D3^@T; zO?U3enS*Hm567rED}3%x=jZ3S)O=~R{nv`db5+iIH^(ajOX*4gIxr{SoL>Q`;NZ62 z@f5_f<2f!jbV{R!@;`pk*^`sjg1PvXi>K_%zvuAxad~nnVB(<^NCH!+T72;Vb~{0# zNm?ydmtys40PHW|NZvpsGzK2N3X@2mSU*PuTCS$YV(s)?uIQ>M+O@2fB_vLoSH9WF zOl0;&(OasJ* z4~4!=4|_~?Cd8wj-utSDNFgV$xwe}eXmoUEoA3&EW*m>70^5R!swp!YomM~|cvVyS z%yeabFng=do?U4R@10)If;{Y7y1K8VQ0~5{`{gSMx4q@uC){%O1ag)+sJ5)n-tALH zmR?~Gv5FFiX^b9LLk-f3c_w~wop zsxb4gyT$c8O%4wAnI@!88U&|=%4i&HWrPjwQMi=cX-`KXk)J?Pop*V=s^S3YU4?;!W&&SQk3aG+Seb$ONBsN z+|KfEFa&n9y|wCM$`3Fp%O9l{nckiXp$5+Xd$2>6P>@c{GEV38eFQKgXny6D!XN zW?VhvJDMI*d<&zkv1v~W=XCoF&=?@Du%1K!N(Mke@_&JZ8(jU>eUZg#%z8V<(*{qt zelv*{2sESmlMRbhQx1LeV#G^Aa`8lg6#&l$f?h(fFYthu;WCS6inr9ls-*FTlq8?A z!*jZdSPsw&n=ZRl^ZJ%m;tR}eOy_j^WgH$Jk5+c`xP@G7Z`qC`(#GHf`i_MUcVt!E zpcqc~wL7i!u@v~@bVZJiksGDWd!sR5qfD?)m@Po87d%8%DI?A*d|Qvp&Xzxc@$QJa z!OGAHRVC^DW9rfju6#@U+rDae+LZIu56QAAQ8GyPN*h&kHLm+D3SKjo1vZUA5itBR zqVq912&|e_(Abg)%=m4ivva+k45U~I9?=<9x{hUY!j2*wY~w;!(V3>)!@ddIqUxH^ zI`;fh(WsUh95dm$@D_f@t}PoA%)1D=6B{9gdUw@1YpX6k^YX!$Q;`c_no2rp2FYzE zEYFr_3gq+isA1EN?vX;mo=wzE!aC)n*tA~|o+|A;PQagiA{T`nX8tO%Emw@`^5B3| zjZKO{FYzWMbr0{yR^F^M&cooZPr6?W&e|qtNGR)zAGPnZ^))dYU9q{{EHzOKMcD%$j`*HvX&WU7{H*Vej%@lj=q z?KWehbwMx8A8UO+G#CL}(-Ou+a`az7XI%e`Z_~#;ByOPS_vNk7V<5Lf2a5r!?Yxa0 z5yI$kgCvHp3Gd)tG0&s39}D~!7Fg7X?r}7La1HZ${4&z2^>{VtYV(1sve4k9YR&~% z)Laj`FDh`d96BA`YBwB@1cKksb=>53lbQ~^d~r9Q`u{Ubh4kivb0^)FLT+GxiA%Hy zLc=uMXjr+L;!t>vr$C#!rv#VL4TF&s>T14?x8C>cPhq+ih76E?lc~+puXRv(oY{dO zJlhn=DI^MQ*&lITUz&*Iqka&CpTqFrvz|g;(y#upu6S0MdlPgC!S$>jTcgp2lnrDQ zM9LJ~-R;6jZ;$FuC2oVdZi|oYaezM)nq)< z-CJ_$O|+Y3WAq&wW=f)XF^U(qD@fF7x}ht$JYk`&&5pielfiw{4r9|SLiMgXBUY-f zjZT}`fyzUl!Q~fDiCQRrf=w5A+u7I7p6dG@eWBJK+caudah)?{v%oVpqhU|?o#`myQ{(z~(if+5BU3B4Dl)!3-l{8;@orD5;c9Ge*ik!of?b?+P6(5tM z{x7o@s%mSNFKJ-yK(n?bkNJcB$u&73_oC;1dRVWuS?6Wky2`(M)9k*1+P;c5qG{}n zg|cH1do(})aKO}mUYn|!a8pU^uQlcUL+v2F`8_S%)$t2tcqB4Cn7@{CBr@99IP6+H z@6R?+DaRuBKr%%kiy2PEe)_)ct9VNstVJS(+rcz&7G&ai2|~Cu7oIpe9sSZ<)y-(>3R%1_WuH(Gn9cxb@=|?**J&Yq3Qe2*;dG5`k>1Pj1@)1BmnMQ z6RO03A%m`tAc4*))Q|&R@)MPUQ!s3r^x|bnk(!-Rc)Y5;|5oCG+1VBIjUps7%B#xW^(e)du4CX8yIv?9%xSD5n5`X4tgIa^-G^Z z9Z-B0zeOhU6$WL^#+y^Y*faNoRdz_^SJTO zHVcZRBAFi22g`leM4ipb%EWTr&cZC*1#kGcV$-~4=EmNcCgLAGG3yJR+328iDm}Mb z*s;Jh=24+s+*|X%4|AjU9RH<3wInvMG~IyRGxinXJFkjTktx)w@gK1-Zr-}l0g+~4 zSMEC@H^4U>NnrdiYVGHgI1wu>UJ|NkyMtG}n8jqCQv_%&bm9G-n)s7V1R-^ry))xb zBEi&~+9cX|^27nI^M1t+{ErgubG>sp{#=bjM7Q#piX(x!250;OAI9fX6<13ms2{p5 z<)ngT1UA;NFP^_%@tV5(j#uPVg{DA$Zr8AL%#66n!^^weXdiLqI(Hk+f3bhPu>iI# z*iK_+`mPwB4>k|$LQ6OFPYl|B02u~Jj|av#K7S-vTZ8phb4IfCZvLb>>pihbIN0lXunk%tT0&t0ELG+aHE1aMq|Ba%RJlb!(aE z=>}^biyc{)Wp87V?VTJ2oa&EHCTGr!I5(MMS4qRKdHy?_s_ z6kkvd64poE-EZ_RS?=p~KD~8-yn-%oIc!_$j2YwJZ@zMMc_p;DJURHu)I}GTe+Ek( z@#vOuCa)a@DhWW^vTq(jA$1f$fr ztKY6TV!a_iGTGGsJB}J)$xAW_Oi)eNCKM=yy#D#0*j0R3haqy}08&MHY z4(hIOu3RSgAE5s|*i^uLv%yc?tSvF+4hVZ_p36rd+}NJ`hYK?P*uB8ogQi>8w8$+lY7{IE)Bn1t9?f zUm;V&O)hWU+`I1Cl}6`oT?uVUCn>_FSG1|v9cb8x-PaDsw!sPu3`WYoVj8Do!e`YF zwpv{b-KP)4vJPl}QbmMcy|v2ACsCNOewgq-Ne4$Q&a=oTnt(|R;dj%5>BFDG}{NJ#Fwa4r3M+>SpNf#T4Rj~+Tu^@cy!kG{wu zWy!cEIQ&oAK>eP`-)w#aO&ryOSN9K$a`%sIKHAmic=2DkBe#bQ;~Txd?Rkla z+3KsECjx^KEi&+jRs%8^{fydSe$BcjP71A-WcMek^Mcz@V7T!Wn(`U6AJPG_A(szEg+Ace&GRx;FoE+WM zQc7O*gZvh9r_gBaI5yvON%*Sh(<_afe#S-t1$?t5$VKCGSpscWT*#OZ1gbx!-m68@ zNTUzTfr*}Tf`#s|LJ}@dYp@XpgAw&_P`Dq*S;@)HHI;^JRFO)$lR{^6z@nCxe#tJo zjY5!^{ZX8ea;#ckBCuBQMMCG-nG*jox0IfR@PNmdrfkBcWPe0%PYC9pm)nMWn2v7L zINzXLU+hP9_a==ZKU|(Lj19_1<8Wn*j)m1#{lEk73n^BUe=u5a0EP6P{K~|pEK5CxQGaW_2K#smv5_04i7{tBq%C? zixb9?XhHGMsl8J|PrqIF;hs|iJDV1bpxA&GiVe7M`SL0KpHY0lL9dRKpoxa?gZ!!LMC1BLecg!{9%{f4$EtW_WlVlY1a=h`~NSuxPR zU+5U@{jx5rWc0oJ8}O6(tsvM{EW3S4i-r9yNK}#hlxvJ8XxaVt_Z#GH3IQl-(Ee9b zuS9HhD#K4!7#9=MkbSaW(^Y@JZ9$>Th1F?)Qnb;W{vAd6+M{vm>R)%ovu~1FrJgsO zj9d0>5z=^Q*I8kM_5RPHZI_!P?!&{wZ``gHG_SLy=s2S=p~GGqE!xmwqSBA1v(W3f z*aZ9U$wS)^DS3hQ{8Z>5K>~Ht(W_s zp!H(%>xDN7OgEaE%lac1EzYf!pR-0u=8X#hXia(ROrZPq63k$rgo->xpIzg+q!dZp6?GUPAJ=*1bJ&0j$c=l`-~4dU{9m?VzW+n&Ogbw6#r6w zGN^p%e2Qan@MMlV>#B%%H|huFJhO|}`rbrB>eeURBJDN+E69KM5Yb9zIrrZdXtCrE z+|Zn;5FPh$YHJIM`jKRvs0KNC0ha#@Y=MMMssj)4+4lLJ_%H4{>wJaTb$i?CX(~S=j|OA>rmc1 zeC_I+ivz=1oDsXD-`L7zs^aeWll`gHW13sS-8ysJPyx7(DT)#75`q=ENDqW?UGz8B zi^;;I*ZV?V@c+3&g#Wohvj-KeA==3;*GOXJOKs>A$T6|8en?Qw3yC6;xE9-A6x$*9 zt@>T+?HuBxKyq+rph^S{bQ=8$<%hm_zj*jt&n=Ge45@UqUlR1{2Ga<8H$=N_Yf4uZ zasreTT*n74wD-G~pnzJq>NE@Z@?8A1!z#hhbt_*POuV!{HJYoTE=kR4@A0qW(&qtQ z5M=(lFy{pZVWpruBre26hLW%ihjoM~_IZ_Zw_jLRH_jjXm3;Xwrr>$TYobc&YrDWI zI?%9SZ)>-C%ZPW~?b`E+S2LhJ+IA{fB$uM#ZcUcc;c50tK`WI`Nr2X#qVc|`Hg)>5 zF2R2WWS8&ju`t~UlQ-zQ?;KU%VTl}8$SkRriidT5V}_m=@C8GM!ciSR6n|fwWP8~h zTi2Y%-2nqCFIg5iOc9}02trC2)La#UEThL}`|irv*%Z2IE&RW-BiJ%n?c7c9>we3W zr9e}t(SJaE_5RN6*R?tN`74f`IfG(c*iEmt7L%_Z+A;!8rG9Xo2Z_n}B z0Tt<*DS$zvA_YkbuduuNC+6%f3+%ABw?kbm+$E>D5!naC*s0}w{`qp1NVWC zTLo>lsO3_peAfX5(@H$4vteJ*JWEeR?mbf|r=#U!pDP%h;IdnOm9M5j}kb>Scyf zyTz|h0BBJj=UKmlc|?hy|KbrzA$bO52ha-}3=nSN%&@@At2h+5lxigNW=a(7 z7w2t`Zb&gMBHsd@g#`3XuLVuO80Yq*)exG9NO-w9A3 z(!V*R#Pi*V`c{*VI9`ri$=Bu0K#s^8ccpR|b_-?)zdu%YZFoBeVbHNuUE;`EC*B|5xcl$&kj-&q%`BmWseMEF+;P$jcoYK5LKg zpMPhnWux?4A5VoJ6oXyXM=;_)%aOUFhy4`KyZE!!N-o0L)Z+J~8gO8(r@wODu^I8*T_V#ZTJF#)?v-TYRM-6*jW}r7x5SFbg@C@r$?Mpp z)VL3p)mgu8-ba_e{0UPCMgL1&@u`-Cyd%&9Itir+ON&2(X`qFAjc_rV1jl7df!W?9 z)t=x-l-{Fuvu|}^y=t8QWv|-*DXkbm=*=s^wbWf;_R;uF3a7^VyQ|3Bu~?S+duk$s>vc_oi7cOZPz$(Wg3nG-=gLPTFaRtXh1Xh z6AFbIJBqZ=G29QR$78|oV}{jy6C_~jDyZsVv~Wk5YA!D14!VNoWC82QAd&_lCpgbt zQShOhHSNvs7CcQ6swHJylO3E9Fhb>GgPWO29%D1?L7zwT)-Co889h?WN!<AV_b_pMZMDt4 zs@f*G$8NpPYqerQH!nqWZTT%Q_b-3?GG$0b^TJ&)k1%cV4yLQ8#!~C?31IW+ym0K6 zDoSK%60p%dq+fAFeVj}m8sE5~ERhNu{ z0-D!Yhm%}@#x1j}aFygu?1~l8x8@1HITiSvDw< z36V*vt%-!mZF`A*L(O2xniUJ^T;z>sH3BN9RQ=V@-^6ssGiS%G{h*oWf;|x=4e&(l zlf&We+bcqh_I%&mM)m}%u)LoK1f8Ba#BlbEPXt=&bouzbZnb25&QIL}DAdZMV0V2N zEvUF4-7r`rEJMJ_R(fzz(7AtHHEG^q9j~BsmgKHG)hjf(VdyeY}$Fu3HTA>HU6lPVFM7Tl1Rl7qk-`Q*+Xx*3#Qk{~Fjqo<_ zA9sD2?h{5%zrH+4Ex}&{om-L#zb7DA-pCP+mg+d;tRmDSvp1jHzQLA6hdr98CE=?G zuNth+WY}K#oy212IbmMFT^atj;@5%HKtpzkN0h;QruIeYV1x1BqR!fvYyON;Pz|K% zdQS{t(h1+q++JU$J3`PKL!thlh zZWm04S`mZ%@zrb(pn&`vq;@98=>=`tB*6EBPA2F0DfCZ9)2 zx8p|>{oZ03!?e8!dcJJAI`5)P^Sj8YuDxvL_ryH3Ge_@xubxu} z%2|&gw>%~6)N!jx;JcnsfCnOt(xj(~ZN>PPbAeU{O(_2C1Ra}l|3&PUWb_snz6*1W zJX0vrF~?=q;V2lg7C?Uc7>+U{Un3X$t8)Ig%aY%7ODDpoz4xC6ZE7x&o8&|wNJ(b; z9M8Jq!R1OyFawp{jsLo0!7N9 zEHUwBweIcOsjY{RJ8J;{+;nq>SD{#QQ>zrT65a!RJ^fNuZZ3 z@@L*XJpHodF)CRnEuQc6?H_Hl5d^&pebS$87(L#eI7d~&E+P&>`mA>UL?bC}KhBMv ztgPLU;}nZ~HSc>O$EuQ~jBHzP1*)uuDd!GNU-mbFk~7Qe!v*$EhVs2L9v6YjS}g)n z4|Mv|+joPro8A)hyCw{68Z}m24h0t-Idl6Px*00ba)aqA>Q3fr_oKfL6nO+}o=i~) zGUJ)8HTd-RFoy1sUWH4Xy?M2ASXqSDzA}Wka+SAM_`y@s-avR3H>5G*6i<P3s*yV}gDVM|gOV#q)ijvJOZw;1Y$u~vd6$&P>(_7Ai~eI+9kN;XOa)Vb8a&oV|YKRpYaddYC~M2pY< zo^VeZJmusoouP&sL^7QT)=OQckH>P-`hqLUET5l66}GPsavyr?F4e!-v1YJC#qa6B zr~1AwgzMg3_lczU3W7;EQh>q`XUl#1GQ7sySV|y1F~ay;*-5Blyy5;%%#p9S=G4y< z$wo5d$48)#>h&R-WT#|vk)aq=w_CX{_Vrf5@l(ogb3=2tGrURJi6S z89myI87X0JkD;p*5&20*nK(xk0oZ?%D!^eJ(^c)hbqAE_dMqgPoU!t&(%*2Y;s?><93UKYb ziaxPr+}1i{$IfcTBK5$3Gx)@9bLuV|s!(N2Yq;*L%Ufd6Zkh$O6 zz1~*=D7xvugV1< ze%PCJ-Sl{pMy`I0UCmdnp=0ocmoZqh+V95_6Bo}`YDF=gu6lz`e6}YXNX%`aH#)UP zO-uVgG~gk0=>^*I7w|KD26Oi&qhsw67Zy~lcBh@S(8HnCrS+fH%MeUuwhpM^II%Dx zKMZAwv%efu7v4uir+j@mQR6D}G07xt4VVWSo{*$k)|iaRe;Z{Rg{u@|&ql+swCgCn3)j}M&|4*NXZ>scS3a_6%n9S>Pas3yD; zJA1L3i^;hTEH%=czC9tkI=bR6aa@Yh8bkS_L%w8q z3s1l1+7RQpJ0wU0HxsM1w!ydj#E$4(EbKdb6pz(L?V4@i=|j@|VKZ-uv{Xb#d2(M1 zb?>=`P9f{wD4d&zwo^lS!DaX9q!xKuxs9@?I_Oy`9XjX?s&gz;?z>^}loF71RmGJ* z(MpHk4)S^i6xrk+WZp4e)11CYd*w~b0qXP_8Sv$C-*AUnPpRQtDf?^vSzWl$N(mg9 zPhVAgQ_-=r{*md@F@?!=J<84^O@5p)B=^nui#_a#YNwrYXfA(pN76iXOk?5y5&I%n zh!k_ULOji#$%MygAL-NGo;?jsg3!~w-QBP}I{8MgTle|-c?#Bpg=zVcw;R%6Z=&AL z=8Bb_U3bZGUb=f|y2mY^{OhSG`_#3WKb=9%so?O zjZ@TcfbOu{c@fvuo64_u%5O<{(`(K$8tKIhT)nmh!2`SM-T5EJBngNLl|ow&ax=fGfBM=?e4CnyshlXpLAKG&Q&n9>Nb(m!`}oP2 zZ?Bne}tec%s_Mp+xI_OuCm`%a^JCC+h-w zgMy-Q;ExZ<4h~g6PgIG9Ib-AK7dua^A@P^=IsMSe)sXEkcDF3w7J|=}=7mLB+dKh^ z^cL00p8G@f3F0 zPtP3H5xF3Y-A-rnk?e+=Qe=2aj7*68NJ9JIV_*veXh}A12I*!IOxVK-fb01VbLs>5 z+8Q#D@09)7CKMXOkIj->IqHLK?u%FH>-^c?Q9BIV-og1ooS#b(nwP3JptJ?sC-6gH z=iT>Lx-9YXX^epl?}*35cBJm34pua}x0qOEx4n##H^uSMsCdtkin2zZdgwrig%x=y z&?lD~BH@n~wHKbw5t@w#-wManQ!vTAHr-DI~x;4-Pf))zLX z$t=WDwn4AfPIpno)y8S7_hLG5*z{YTUZgdExMD-E_m6W);1?c^^3p)^ZPRJGET%SP z3vhsCzKOt=zCDZ?iu4LX9!5E6nRl3A4OJ{jz@1#Ix=;3a#|JYD!phJyN_JHj9S$Q;YZLV0!p$V=5o5R&zu#RhuIa{#Y8C z2r5ge9~6Z=sS#xQw#7$N`Du+G!~nwsG zuP1no9_pAOtv_RDw`RORPiT2j_%`l0y zu37o+fdmQh!ycz@vUGQbMAhm;r_-gAQqtsjcYo%thHit`4k!1+1q0CC+gGO~ib8u# z&$A?=DXuGb7;172k?kvRQe*1AoQzsV_d91K4!^2e$~6szOnKIrE7 zu3i=_W0!h$fr7i52-K`2h_)W=@L5mvvLrGR7%X|#8D~9EmW+S(2^d!NzZzCuUmOWp zXtU*=f-yJgjCA&`ZTQb@{R@$BPI3x4D_4(6Mk`0h_B}>|=JxifoM6lWG*T{U{Bc3S zci8^IT(2$eHr8|xHjH$;mbfg=Nm+V(+pI-s=v!=*^HtiSbXSSD$Vr9p*Lt-Zb3TSI z9k5Y{ocJe?n2j#=s80}E)Hqs1iP@mrL<7^3i%7m(8hde&@@6_j)#%NVZt^?06wIb4 zMc43l(vj2OnYZRwS4~M6ZY|~-?kF~gzr3?~lvZ-z68M=A`0gXEck0!dU}F>(k))r0gu4!fBX{1*Y!17ve z@=CjFReK_{&1oWJDOMc#@MZdvUdT}4=z!ehk{0A9V~>DDxG~*at-qx%aoG7U89G__ zwz{CWnSjJ$bqx@2Ai8qoDF#V-vv;H`j5G1sLPbG>#GaAz0k6KJQqG24xW+1<)#|d} zX>aSCl}%gz8pi0)kY)8v7yMvp_%>a{u?U&2??M)vXtY+9Tf4&1Vm|!T{#w>8NWB{E zi9~Pm@E5QIRLL1WY|~FEY~rfJv?AIe(u?d5AeMfd)z#~_*jlv5oFH3)WVEDD z{f$NaaoIihE1^K5J6Fmv6QSE>877U|;T(B8yN8#@UHC)p#|t&aV}%t0T+~ZkKhD_d|02U$9geyA01mhGRdQNcjBq)q|gt?|SUnZniWnL64r z7ft1)wd&4N8&RO=t|{)j6#-p9y0*W7KYd}clo{CM+%^lYQyLh=tHF6e4@V8KVq%%*3bw`r2nHLLr&d0N{D6TB zx77^fDK8Yx`7LsNC3=+Pc+W8AuKK56EH4@rj)|_4q_lPX&Ogfp2G<%7YUMiEA}JCrgYIHEzxAee=%bP1^R>NL*RXb?ZO)XnJyQOx<-<_Lsl%bUSO4)Z!yD9X#y}uUXjKH37C+ zMsEi_3^k)Wc_pk9Y~vj(yLrgKlz1i(wxhwy9qzn?_&R?~x<38N4g)7L#ilo5-}c;2 zLwG4>@tD^dB~?&MbW&BUXTHYz*GnnUAX1bYi~fGaY)>bsDHhQlLNbThT=%>dJKh}SCRQhM>MlNjW z#uqk*$r7-1W2Yr3P9q+q>Z2=P&L&O;_z4ofn26g9bkM9T$>zIOYH0U#%+|* zet%|}tQBluiq6Z;ee<)aRjtGZ4^UspYBVi&V>(!}#f*l?L`>DsNP7{S_nGy?Hq-qxq+x%YYdRAX`mBxS5Is#&ct7jA*OZmgD%@ zx)-B4a=4>69Ekj?tWUq}u`NC*-xJg*#PMu@`)-!Ygmq>99wMSd^)6s=N*0GU=yqnv z6NADq!nwcT9Jw6~-V@X2Gf)yf*wIzYd~yH!_9P!^rgkvLd^%Y;+ophy&c1`Y=*{VQ z%3>`yKDl?c!FO4@``suDM&a|xMB%?GIFs!f12=SuTx*g> zLuOu!!NT^Y&xOhgihKprR=Mpu@vXLrW6=+lldkNJ?IbQD1s4|gvU#UWo+2Cj{m#F8 z{S{^EQ^Q*G9I5Fp{Lxfbl)zJHeGU+fwDr^Z6q*cf$cljWzS>&nzK!i@vKjtW_J4_J z3_p7H4is=`xF4sq2I@FjBYZc%BM?P6Yc~i->v0sKH_7gto9i2=r{%;;tr2(}Kj*%N zR&F-+h?M^->Aw}Z@9~tUIux+y_pK3Iot6XJ#q{@;OnG6@Qu-cR7K6jLAaOhZTho( zUDgdEkVblgyyqbeK)Af;BJh;ZXa3(oO* zq<``43!bqJ3U)sNT)|46A6EZ6=?|6MWacr{m_F&w`nTqHOvc&R$LP))d{uLUfyqUTkNb&^omHnbmmz zc=hUwz=m831-)DpyH>iu96^a{FLBTzvaSDVK7rhPS3Dx|)Q9}hR-CeU5SMBb$IJMx z>!gXbW$Fn15?YC^>1SRmm~3Zc5|1U}VVxU0qN%@pB?aiD-&r_U$jl!KVZxu$1}NNk zFH&Vxyv?oRvC_frC-z2&ts5x9lQ(=Co)3Uc`G0|W9p3L!O$)p#_uM=Ds*Ze;?%J&{ zws>68*Km#x)^fGgST^XaU(C9!xqs8Bz)$6OZ1fSVS!&&wNVb@&EDXrsnvqQi37Ik; zqjX);Kgils%yy}O6um=*ORZ+pth_ZiUdhIo6R&Y7=&31w3E_gtWcMU-y?C`Dp@oP} zBJ%mT8E5@H848OeB#FM5dGVoxSjuQExg98CX3PVwP1Q*BVs^qX5m1cWcy*C#jv>Wy^mv49!Y?nm&Ml^;0SbwGa}&Nd;fi}|YDopYUj z>wChGKl2UsL;i@k$a{EniyJ|SrvNatz1q7&pkLb-thq^!TMV}}Ogc6jF2O*M?Zt2Y z*kCK6(*zwBXb-4jpK{ELfkGX;cywq=9ulCCPif$1X@*QzIdV=bvvi0}S z#UJI9lsoD^PD^?wTc`n0=y0KZdMVKc5s}kMY~uduL7Pt<8FYy5lVug|Vk&)_n+h4V zuVB{n-NLMs^W_oUQQ(K?Nc1fZwuTLf+3xLO+G^!aPbSMvK0d#H^*rVF6Uo_ej1*y7 z*AwS1)oX9wy*|;u(2DHp&Yv=j!6v)>;()|%y_Axj#`kN-_wjObX2YN1+CoW9p2?+1 zj(wWBv6%@`)e)N$s(U%9PT?Iz0gSC$8@GSug`Yh*7H2FTTfs+Nz1uzci6`LCe6*lc zkctoo8lxzY>@2m&3QXe|TaX+;y72TLtO5?0qD>zAvHIVni_9oep&S5&wh)ajS5(G~ z;JQctMY+)ngG$k;tq$A7s0z7qwo3_sZxL%>a^+eatDbQ6Z1X;=!h+PS3C$n@!q%X# z0@cW1EGa!?<-_#rf;kieL$`3HTwgKjJ(=w#_e(eO?0b9FeYYQqJc~QL2se(a<#S)H zqu9vaI2ACVGfC<)pCIqEgkoubZR}|sFh1?M$+I>;X=p1=v$!VTKo8fzJ6Xndr-V}m z;2qS+CMalBqp*w5hb`W|HMt8^Af8{urpZ8t0a^~Y*cVY=(nvh~yn0S~ok&mCK4Aw- z&pup12r6#-w;I8w`}gI2W0ET?tY?|1<5{pqI6`i+8ov`J}cY5&>6o4}7BIY&K@ zM%n?@pIP$0YNEoGH7)TnN(=Wxd564Q#Mnz2ndVGU3AU9)g5~cK5fn_CrI>PZayAnb zwTwYtyM6>lddW0V`5G0^W?dcW1Uh598+1?a`|R~32H-K?MU0*A`&15mRYtAi;itZq zhWEI5N96ldUd!xO3&GP<_%Ff^`)QwT?7J0z6mpvGjxbIdJu`?DQDyP^u|-QR&7_M- zp#+3Rp$X=on&9RSX)+*?u&~@^!P+2?3D$f?Zz({dbBMy|nC#!Q9Wpgq1rDS{ss3tc zBUQ3TvJxkJgANw`etRh(7oTpe7{9-iY+%JMG&%23pDrj-ALxJ)`fTGBCR{3^)$iJz zbLZRlIu9t*T;ER8f7WTJkRmwX9$I~u{$?wv=;h`S1H5WM@SDEAXkRNzXM46$^6?+o z4el3TwJhc=nLyz-r9{@b%xH-f#_M%{B{{>8PcaclWRb}BXEcR(*4LXtv5K>K-W*%J z14un&PF(x5jqN?3Lu%Kb9npP-n=Dm!pT+)^`GRBa=@l-%rf>*;M?d_X@-_ z+m^?8+1QYA(wz_hdGgc&N1xByCV9bhtdLVE;Rv6Ebgw?Mzn@Ob0n}o3SrFjQ4FGdX z1E;f#?2Wlp2M}+wf;u!$OM=7g;zEnVY_w&(9Y_UTqIoV=jLmWN(pq@vRulgG`MgxY zqU9H|q?8of_uyB1F)NflhfL*`4nRzbAVNbzVBjn}!ph|Y1zVAha3-b|4{)qpl5%>Nwlj4}GnG*_+8w;9UA?r$!JjY$Md}=)? zeX5H@rDVq2KY33OF9LB+cKMl%gy|93JlRhG<9#o)S$q_^6B|w3uS!`Y$%Yqgnwuj4+C%n$Rr;dJ_z@bGpSQo z@qwPgk60ip{+PMeM3cb>F*l8mJ>7>W8xf#^awHBQSeoQu1WOXN#ME|ZqxX218iB+3 z?DVGw5Tx#~iYsfm+1YUpRGTsJJP@o0^8!?P&mXA109a(7h2U}B`Rq^AIW$VOU}WKd z^{zZ?Y9SOMILbjjwMcI%l^52R-TF#2w)($3zsEOx zz|O{R*s794Qb8{0Z`n7xZ=pTr3kQ?h7pKqY1{=*8`PyB>1V|hoI>M&Rch6me6$BRt!F6Yg{msCkf+0KbykAMfPp#XTI28lhD2CyK67nPUT>s03TKvcD-}x_pHFIN=y6TNAF0bi0!-&UPrM!q}z3eefM}WrqPG_Lx1_# z4HGX#Ve`gyaV5yf>x7PoE9VIo50~hvWh5 z@>mM;QbjsS2yC04!h&^METrZ)PHB5unm&0b4jeI|5va{AV!TA$=(amJC0`*=SX^l0 zS91NLl)G%LuCCrDZ$bx;cz~AqfxKvu8c4MslvD&Hf;2zi@lg9Tk^(fI7;h9W25RF} zZihWXG|gj6w5X#+hS$|xV@Mlg{`yrt>$(bdilD1i9?AJS7~+J^n{&9nQNnjfHUb%d^^TH;g`n&(*$i|D=MgvxVg)jC(tL zlC0KBI{xlDY%1F~L9Yx-OP^KG<@>g{g35d&!^U!THXwOnIC(q%-jU8#sGwjU-P0U* z@!^N{SEYm9F&ttyiRLp}Og-1CNDt&N?vsuyl$lzaAeb{y(T%eDSo z0}+&UEoxf1IlgKF7(I*xkcO0rVAQcPa_r9BL}g(1kLVlUiZ8+CT+k>WK~5N)Gd;IZ z{0K7}3RgW36XX5bar-w|cU=y^a+W%=(zn;3{p)R&?MM_oINgqRFMLn{jPTO=kItgt ze>#i!>JU6($FwKDprR;&j3xe(ScwkeJ z5niiEf1?cyY*UtU4z*_Z7S8}wxg9aFMNTx==R>eJE(NS)G^e9l66y($P?_(gL8)_T z8$t&2B%r*V+&Sfd9~F!{mH=aIFo1v7p*b@a@MqbzN4 zCK@;%?o(5KMRrj@`1}v;^5DnV(5u`^@9SW|cQbakJpsR>9O~5(gr6lwES2Gebne8{ z)gItl!%xr$VMtL1&!YQZJE#8Y--q7(McJS9n6+| z0e8xj*8*Vrk5#T zM=ewyc*M;oNyoI@5YjEg3fIMxt)d!Qe;r`!B-tp|HgD( z;jiJQMzsWjMA-;X$CGEke>sMIFIko(xn#yVeA39ic+scl;^|NWYM3ju`)^(0u>AjI zS6_tV$`#1r@l$6*gSquj79Rfo&_^KHsiV=-Q^Cz(TiIK;0D66XPg$c!42e;@pSd{9M8 z8HuzJ!S1K^_E)YQsC*a5;-3AAMi2S-*D8Xq)ewm@kjmJH|1Od8Qy41`RXBngT!|el zxbKR-uS7?;(8a3wAQ*aU^eKnZbb;@!m^S<9!KZon+DUHc#FZwl+dWs%I`ONIo1c%b zabN%$G}@l~sX3X(A9F?Upc*Y$fge(UrB|9&5jda&)3@n_BO@G`5DIGsJ-bLz|3)K5 zmx1RG&g^r#mow;2J$f#3(jJb#8328Ih<43X=O-+9^xY#Riyk~d6;LPQ&CgsGqsefE z_)MxmcTjYGoJFHY{r0e0Y;rJDCXCvafy7}|Ma6if%k7GdrZRQWEgFO0sEw^Ro8MJD zS@()M_f-?)MKv*RPP>l8vHVt~GkdFAdvX)bW8ux`Rmx~g*U&HuIDXpS_FOhEQ_OfM zz!i{QtcL*W-vpS7j!`3&WQPuJ3wwPwM?hmnwf9H#S1T^ytDg4#zxGu@F_`yrrKRpP zQP9!R>B8Ql zg-4N~sQO0yLI%Txk0($f%L$w)5^!f@wcWMxb6D8Lq~5Kd*LvHfdKLpMq3(KnDk#D17T@Y77wqzsvUyRQAgFtzi zwx;MiDq6vUKz1Ni9N`s*3_`rku`xfgTDVt0esnF|nr2(83pkKZ*Ich3uEMC%pYj!0 zpoQKXYamV#w9qr^l#jZ=TIk7Sdc}UL`M5TP^74#*)|gA`7|FZz?`mWHWyx zpAQ1ndl3+*xPEqvOG3Hf`8biF0el`m4g$g=ymEn)(vXf=l4`Vp2z>i#_;)N>~!MuumI>eVPlri7@yy=#r_>`i#K13(o(q4-;zOl7b0pOubn%w4f9p_#nCYBs;a{Yn(eO zPM-iy+*B%wD6dwdmoW{xc?*%eg<>)N@Qlvz-p~Yq_qXl`d{&)Ult+Y@J<>xHU1Uz5E;XZP zc)d|`{y{&rP}V{D?F$zSaxha(mIi~|l}CuyRJTE=5A#}q-EqOF^yI}=eVPnZ$O)tC(t--*k9|M6|GdR#5VKsIF$`(? zA{ZY;;eCztbgw5IeX1Oq@uHX>;XAT-S+>u>v~K~TmBALJK_d4k?YvGA3IxHiVmAkP zPCH3x^_&cxHWozSZn+^)vR1`6k_0rwWe@;Jb&M@_`5ZDzsW8x|?Gc=7Z}@7C>B9Uo z;Ww~w8u}sK6y&j~lT=yEuAoy{rPjFM1mv+sf^jJyf6vQ7iQx~sTz~i7nNX*dD`~=` zxB40MJP?9r7JME6wP_-7m5fBYTCwoua(d7y%;AFh0()*_U_LK_LAE0C!Xe`(Hs-cC zUAx&BMYh{g02{l3-LP=UXm*}#{#BOI5R@kddoX63(V~ZiW{2P8@#gLk`tH2lFka4V zFLcKXb7Qz}kap3ax}J1?;=aJa zZ0LZ~1pk<0{$kxzw)hMtE<&9KrFSr^Qe*x0lHx#ch#>@#HxHz#;<*$P^6N&r?TML2VxzK>bJ6thWo<@%d zj+;Q@0+&y?D9SlH@ZIQ|Fkb^2UbE!?Cj%G#6Oeo3RZQvi%VXfBjP0F$fTd=C3yo~E!Gu`=7O((MwlSY}3@!|jA=7%g zLNR8w0L?d-xZ$k4#iT=bT6&8`&TlO4tk>s?L!IqQ;<`AB9yHAE1lgm>$w4&!deNAX z*Eda+B;ly6f2vdcj37|Cgff986J1Cg-xfpbnMIkB#r(35rWDu`WZ+W0eLaL;y|R3> z(J5@bVFPbE`Z?&0&((?*3o|pR*{EgH7xpzQJW|vKoBGeM@)5|k2k^+qsvAZOr@{os zJ?D!Bij0UboOfq293-ksg?LvhUpxTLAj7x;>@6^AD5-Sp18mTl<-MEVdke0pBXno; zrxh~2dT;BAkE_m+05i6L2&z^s<-?1bzU;7sA_yFx9iAMYC~y_?+shOU@a+BVBcHZx z*sv9FK-Og%gkWAm08w|`oo|ok#{}D`b+kUEgA2w7!QG4!ieAa<{d0#QLnScYdIm<` zFslWJtiv0C@u5M>Isf43SM{qFLay)z1fEQ12Ugat{b08Aq#mKlp8q~0#$JqE&Xgs| zU26t?f4+{b!2~|{ZS!t`#E$fLwIDNCM)l{J>7C1I)dbD;`r#LI*ML~No(glF5(&33 zRQWIpyLmFGrFfnFi_u#TVg>}DD#RYq-@X=UkXNiX@C?a2rHVlrsV%rq@Xex@jSY&> z^)hiwOIz0o2>-u2JEQjM>I7D97l*7q?hQn(czRiNG0;X#545S334~yGDi#il|){T;9@s8t+HxikGg94Ptfp_On#< zP9GGB8;3@i$D}NC^RjQih>6ezU8l3tLcAjDywIJV!5n{;PbC-APmG$os4d?{i>?^Q zdEK_D@w_TaEi+#VE2r>99si?fFFNEuCl5ukoa<=%5Pf%OPVqpm6^!k%0%~boCTD{l z88;1TrOti992bVZ*vI6q1@r3yIl!-rT&0WfRI(liZcDaCQ20uStukb29&br+Pr71K z{`4N)uya?euo2e^4QX4}l+$m7{3D@TpAFkAUH)Tjz~M!1pFfO4qw$2S!Iz3kcfW1?V6C zAu1@~1pmjK1{e<^a$*L`$To$8jBO)vf^}5UN46Y{)_}|o3=rKC4v1hY@O$5yizpOj z?U3ob=Es;c(uMI3ZKw<#ph`QaH+I^oo?(fuamY6YkI z+M}VJ?Xxw%LGr@td@L&A{>_v>6`9E>^4>9-3DeYKo23;&%oo)Wd>Lyr?0(!o=;;B{ z%xNI|IsKv?oJ%Pxu$4MYy;6PFNbo)tIQ|;4Ysf-VS@`@9EX=&=ThmQ@KwxAPLdyA4 zh;sL+h+vr^!}X$KLh_|_+mO6aSQ6(h-K>b!*=&IBue?t8^WFRx6nlMFDDf;3lKM3s z#&fH?SSOY2><691wiI&Z$(O@C!=F_qc-kIugG9wA>!$ZPTApBEj~6{pCwg?}r0k3cqnlAsO@W&bAk_;MeA< znTaZ$!IGyf%yaro`6q^Rx$I7|*j<7%nHVl3HCNLb!#(ij7sg2g@2yR>zyyRE$qzJE zNAid5O6WFIjx}8KJE1ZwR|Z4E0TLTEkfwx|Eho<*X(r+8BI~rDp;HDLW4B2A$84h$ zi=XUP07LEE|9`udGbC*=Z^NN)ih=x9ipl3_c_|A6elll5|CbO1SiuK_!?=oEm&fG`5h9W;7pZk|*J5S8H zl6Sd;1$XS|A$D59;w@Yh1@(qw>M_PQTC%hQN-|16seIIS4k80iax+PTW>W4Cg)1s__lSHO3o9O zt^ehYQG^xzs1N@M*Y!e2*!?SOE7eB?Y+& z>W3{5u;{c+%h!vKFyI|r58>F9YXTkjRN7;nII!deaXS{oiPJ~Um$I-!J(c+fwcmJ1 ztXH2PSWc&) z%jjKHE2PvrC^w)FvV+Ufr*5pR9PhW$M@60{c#Uv>QYGf_F(rRTeW5w8SMn4(QP9^r zH@AcKahub?_iKIBpQN(B^Swxp91-R@{Bt$MPy;KzH@ma*lIw&Fq=lU#92aG?_- zFD=tbyhYGV@g3(zcZ=;|-BzWq&oR~IO294n_xRb7G&!0ahr7s*hw!b}UAZ5GKeV4b zSyko{L^clogAU#F9T_NrqVR6lUs-f4cnYqe0ylKtO<3!5bnt+9B(R7;aa{ul`6*y` z?jyUqyNMsbsIhckd*13yiL7_LBi)xj?eOZ$={yM;+UG3qE)vhY;5il zQ%Fe1X{&ryZD^fC#2We?(gL62vXJ?K|O3%mvP7e-GcQ6aI6M-8IPELk{?x3`>x53^}@OkRp#qK`Yx<20j_`YO-`x zNM^LaK=%P=|2=+6t3?eO5B|zIx!T-haN(nLjkRNwV!Y{`NE`*b!D)k1vm&^LRf{Tn zVuSw|Q(qaB_13*D2-0!WNQZO^(k0!UQqtYsNOyO4NGsjl-QC^Y@%}jHJpXyWIEX`I(O4!@7t>g)Us96l z*5ZH8uE20Fi{1c)RM|F9yfAF;<@r&ZAs8C%3n<5v#n4&{b=`Gu&jgu%?2vT6p;=8^ zO}(>I+J@Ps-(UZ?K9>=9I$VqYtRl^TixvEbpA^lac-Il3nc@QOoG2VH0wg0~i(yTC zezRbzs{%-mvUhxIrhme+43y+`sVzvVHI=eZod^sQUw|v{Hz_i6muQxP?+5#$EhC!H z)TI2>Xxq&kv2+YL6{~KN`6gUll#1M$Y^>uA;KmW`l}AYSEaeOk%2p*uV{*fe7~sK@-L= z-ch{qScz+YfRqaX#yeFISs^i4I_f@A%ddQ)@INWHlg~0dSAVR5EC8uMHkmCrlB_3( z1*+ru8YF!D)1-^ZsdJhwoirz_eH|K&YTS_&=Jq6zz`K*`h}BZJcld6H@vN17Mb;u- z#@Cy!ZNR-{XnQWqZKUJkamR=b;E_T*?~hntiC1qQ*V-Dq>FUma1?cIHm%d4@f*1UM z3Nbu4tJ~E5$p+t%bX;B?SVRJLvWlf59S>(07oASOi6W&d9`~1#$otnof8(VB^j#0; zrQO;CmkvO+=!-nTJ%0q&eDOHs>Zrup3InD&MHW6@s;0M4I6f}GW_=C>UQS5`9YDiu zi>({GLnx>3wW?=$&jT&eS_Y{2CURm&U^%CN__d4=LECK&h!ICX|DSIn1&$U$8T5;L z0`vSXe~ao*Pyw(I7>5HZXqk}Y+U>0=zMmn0Z>NQ&wPBcG<^rz~$kxXp`y!Adt-EWW zb#CTv>>LIJ9@eyftVwCltu6@;wh?1xa5^Hm|6-4$9N_^eMWxu4*>_9aUqZ8-raAtU zYF?F!JoR!l>~`+Z_9QvXWwPA2q&#q?ba~UKEi>v98vA$PIS1K;39O7ag>3H5YW|bm zQ{>P@9|n4B%a5)mB~5jjo^PUjH~;cOE`DYm1L^fKSeYW!@9^L8`-bKA_G#P;g@Wz9 z5dmZVs3AE9x_dy(Sur4UpZzbZ!{@c!2X=qfaz3mEr?%f}<$euLhN!Z+4JPdG9{uLl zSX-aROv!rkfS%N%Aknip>1yf|yu5@q4=TE<;7{m?pF zI@{e^I>P|g2-HUnKLAc>k0f_oH6|;48;~6oE1h}tuyfR_u>a|sX`s_%gwNlumDm!? zyn^)s1MQzi^I|T`^toDsM^rUocJr6L3u8Fn0n8JTu6Bj9E$@;0=|5r6{uxz}_i1LjTb2Gp z=AWxEDeOp7CF-3IAWSa=tL7I_T6!A8UCW#;bX2YRnm;hj3gv!sVDKDX@pA5Glmk)0 zgEzXR$0+(0vv(sxC&BFxI@gP>Z8g1}8$dzt=cJ=BV2;B88Rp%#jv*nIvEGt|fI9RO z;%B-wdd)u{l&Df)xdj0+jE5XW7Bx?8&o?GW`yQc$s~GP_nB&lfpm5B{-%FxD-gPgo zKp`u51Q`>;7)S6mHG1yL^YYm_PW^m0KVQ9Q8mK)G5&@ue_7EfKhi5!b6gT2A5aj!2 zuPO+PT|)P4^WqS~_QgJfucy5WlkZD-2Zuh{&fBHU)(4#B3oll%k2t2!B};Ednq{cTWP#V?xRa{M_Oqq=e<#%^zvvwUyG{)2+Q~}YVGET z75OtT)%O%g;SBM7?hP61FEUPJ%Xq2n0-`5G$t5tjc|m3;OI{!3q9?5FoCId5;>WYT zbJy3`QzXWnjci55#f6cGL~a}}TtP#hC+aCw@ry>-48k(@ZFGr%NG>jJZiKFOr3iZg zNH;Gp+>I#9jLd_#$4T)&uf<eg4_gaO#2L+( z0Z~q--RA?4A4k&486NMAkPjRZpycZadQ+Iya5X?tOKm%jm6ywA;32 zN1``Ry`y$v_qc7=|%@n;C119e7!{ym}9c__y9gnmHxF(gTr8SWCp#W znHiF2(syU`$6rs>S&QY6$$ZW8*QE+kq+rf%P8l5>fDWKxyj6Kmt`hUTyA=eqA#NeH z4ju?A_yJ{JxMOycljYLJOSu>+j-@F^nK{hIE0`gL1(LCWR6=Z@HWuHF8iBVK=a zc9Lsl>PEvU53p%@v9@q-cx=vCu^CAzdzEGCvz;p=wAx_l&Ou)P3tPET{H+L41;f3|l`8xfzYqv&>C zl`-9?c!l5A7Q!X1!knx3M(k;}AWt05b24pkxPsB{1R%;2@Q$dDVeouxLm&s$v; zo4Ma(w~KvEmHM{*3DEn#I&vEw=Tk%T+CK93DoF@Z6vG23b{w-a@D2#z2QD*O;=tW5{!tIgFy7Iz-4F2g zoSd3pvmDGr0{D?BP07w~=2ai#<=*j&tj-kqNAet*mjw1#DdJnwW3 zvUJdraBKFeh>I7T^*eDqIHIOf*qf3o4^|~mTpr^e|O=R-^V6*XdPv;B&W`AqjLJd#N zMzn}85-Nm@lrT6f<}q%|Yh_G8&ehISu>yHl&%y!)q1k_nfPTS(9Z%CBFup#>xjXwVAMng^$kRO>&8tDOJ-?;_&4WR!hSB{^XDCyp#Z#Lt zV_nTBAf{xDQ}>=h(#14KM>U&=)nd^UjTqK#sdivBYLPO%+i0ErEs$QW&eCG5`4ds@ zKK)~mGvM6(!2>2bZ-#ZZddxZ@#DOj20@IO+{EAISCowIf z02UcQU+Lk2KO*x}j22tW5tO~oYs_```T{p!gCpaM8UUtL?pY%ZkZraPOn~VD&ZXy; zdlt`?PstGjz!Fei^nUqYO7H_(aqC@I=7jVG^=lY5Kuzimfd=feR6oyW4Iu`f;(E_V zl?bKxSu|K3Gx<6nR|0Z=^E`Rou^vu1t=-ncS>S$QD8YBf;nl2`vu=$ZnQtDJ?gF&0cw%D-dX zn`KVEsUCVSC9AAp4KSrH09z+5Ey9{d8}b|q%K0HRJ#3xLt2>rf1|zDDPU7|-=bx_I zK_aq+juSC1G~^Vp~yxa4>NbRE&FF47D#UUVswR=u`G!~Nme~~wggLU!oPyfpT zsF`H?I^Np#5y)ejyDdA~I81r@@Kaxr`H`DT((+L}rNkt*v+d@5dteIdn_&!BpEsDt zg^xXWTE}XAy>m0$%Qsw3M}CaEm*#U$Hcq3=L!)zT_~Y?bTEmtHSidA`4gO~q-DwE5 zbqYZzes`n#+v9~u%CTlbO#l7~LQynyASKFqcL6h;UjR7Z)BoQA&-N}a@?#&>g84W6 zB3&i?$t|HmX!b-hE@qWx(e$TGT#VLvSBdfaC;OSTEF4I~GXv$e0JDhDm+?{{0PPzB z)uD9+37FJ-AV%lU_lus4Uz9{i{O7^K3tK93vHX!S25?Abq0f^QfnEIRb{3k>_m>4# zyP9iN&_-h|I~r>p0Sge7q~@@zx=@hekg_pEB=bXmt+~u=eam8jp5sKWiL&)G$AW(A zMCh*0QbVroieD}FMV!6-%I0|4zD6#XX?(@cNtF}G3Pc3C+SD5@>k>yV69Skdz(WG~ z{9Z)%lnn#iAD3^`2X>oPfv_dQU%0?nzRlMO3w#NVY#qNkeOYf0s|jQ;LhhGk(7kV0 z@xZw~(B#9!!}B$n48{kpD}Odf{hrB8>m%jQ0o*LYp3W)^3>pUcfq%VTc0}$U@3DU0 zn+Wr{2X1bn%Jz2QSz4AGmd(-vY9Ju_jRkm^=AZo1|0Z=fenPTMGS8Hz7D7#_$2doa z&M5LFV#4mByjBW-AL#wnv~m%4QAoK?&1#iHT04m}ivg5n3*kM~z|GigfQPG%CvpRzM--S&S8 zIByOZ?eOIALl5&jU4N`LpOCcFt}&&3cQUKh-`@4|u5ZWDTE^nQ-5+hqw07t8NKE`T zuyf}+<9<-o*^#v&UR%#5+4)V-`UZY;WY8x1oiaDC3Utpvp6~n*U#;MJCQ+WlF8N!c0X+1SwZlB*DP=fgS^>?>0ks4m%H5o zf_zC$&GDdZHNC)F`V2IB8wt+w6vWg5WD-XqB`4gS`M9qH`2zRoyLp8C-ACAnz==m~ z2(H7r1-LoOb+!Db0B(IA6^tj=RAz$CMLSjbPH3#)mo>$gJkkY~<;*u?%IoUvqQm#sf;y&6R@sx;e5CbluY;*+XA(RrY(zC#%go*I2!JP*7OWX`Wz zdRquKq1Vq0sx_E0eTZW3t@0q_e7B>rw$b+xdcIHMyVEx3_2AIp{`FEJmb_oDpzWE1#cBaj z!q0GvT(V<>q>te${4HB$?6e_=F$g>!NcCy_{Oz~S#n=M*Dm`ebWLsgM=3OALib&*jqBCe;I?;##ZDuvP68rX(j5ZWf?<&kYR z)0WALl$D&J?y*xYUz+3N!saDF^&s?6Nios0gFUzkZ`<<{thASEFS^{nd9jW?k@aaB zf3&yb6JkR8r!cLVPCx(tX65~L5-uxl?q*+AqY1_TNJVdbb0fg}H@d7c%311@4pwZc zH=Tg%f?{{^RXsKi5~hj@#9a9&`ZwDEq6g1a=`p_LeCm39^uXzEQs;Zuj-d*gXDXHc zsQ~8#&hv?^<0+f}CitDEfc$VD6Afol6yluq(=Gq?l$rJWwcw^*yHM4YhFDsBhd3>b zs5O&7C(>w>-IJwDG(^P7yD`eACnKK1bsRiLY%!ZTIpxQ4C`H79D^9{*syzqWgx1J6 zZul>|!5mI<5ej@Y;+IYX%RF69#&dtZ&7TiM{-MMZMii{Oh!nlcw+#;tQct_qL|-G> zXwr^{Jx?^Jd089ix+KMT-CRxc|G=IGtd82?;lCfVWZ(|o+5j;@`ahe5(0hZC_LZ&+ zNpH8>L)sL4j@Q)=gnL(iAOU>nE$UIsZMEJI$ZFF>#p$Oh#DK_1wL6o*&BJUYZWhL>#vk z)>`A2%B!;?Awo9b0xc-FCieG4U(>^cGE9r1xR4o z1}`l$EDp0ZB9#+ly0Jz1eE)@cVSaJho;l$&KHm(Jym$GfCH(LmIB(OeTnW>a4MsHm?q}_hdT_{ z11#^+1@`n{nm}@+&W4XwoIu#!pu*Ja{fi0&WCCj~`gH*Xcq4$S=q=wDZhxt@RD*M> zTVAu}y;(SzZ!n7t#H@@MhcbO54YG9Uyhtv2POmy~|Bvg^g!RtIYL{_lapQyXc_2y1!B5E>vok!xh^RWF);2m8WrqRtWRb z&&`}nV!UX1qLi#Yq4cr7P|sm|!u(qD#+JzyE+MNY3oc7&xh3k1Om1yh$Sq|JXuTo+ z{q2d@%?J!rX*S?Ogho&Z>t)y?kBt5X7aTw-ds+jQ;$=1$pxvMbhyQPj*2sm9QktQ(lp!bNvjdr z)-R#L)Gp%86>HyIh)!|2zA)o8dtifWKfv)&%&i)9Kx|hO1<4Ny`Sc~0_vQXoi5Dno zRym!=y?Jy1sZmnTK-yaYucZVV90|1!I=ZKqz2XnjiyS#xw!9(h|8<({&&@hiV z@_pf9hRL$6QY4CJvm61)5-Q-0XC0XfJQeM^Oo@8;d-CNFzZrFsB^EZR9HwyWG3L7b zjZQx{{+^Zy*9&`t9Mj~Ng zY{UJB&&E#X2|HIudmf#We6%lg2`R4&`r&Y8DaUe6TK8e%3vigaEGLx5B-!dd9!N34 z_GqvgGN z_sD~?yd}5)sgn0#{^LaR$JI>~YTlP)e9LCn&xKD8aB6Fcrg(;y?i-AtvO$i}8-ISYBXVt=}fN<4q8*Zri2;5rT6N z@&%&f@fA=8d56Ko84``-#MLsTpo`OISr^V&XptF#;YI$Lh!t8|A6VodXQ_lHN=U$1 zpWySEM_}f1I9b-JFK&>yje31DI?rng5TIqXTkC-N$?5~UDyOyY@y2#*tsVj=jT1aeRjF~G zzgg14+q@pjZ9KW&q#!^%jsL=PzUn3LctpTBRv<^LgtiKf9KOmBnl)K$)-<>5rLdZ4 zW)zN;hlYLF(REEx1{=}LAv9x9VV+BD+JH^*ECeTMV_y( z$8M+zF_g$v!DJY|F9)*yNi_FK4ANdh@bwi&-{iiPvHi609ioGMQE9Ubh{&Qq$Wn3E3b&ykfflfsxRC!pLuCG$Cm zJLxpcz35tn-F*Hw61chb$=#O0-&ki}nF|r{h6U@E18N15NBCaah6WxbH7Jqvn-O1TBm%9p`^V4|aAJtqKwTES!iM8Q0 z25`h8x#Ei%0lnnlpG5dvPo-|a8^@xvRjnBL>4|Uiakv@m7QY#M8*gOz?^GH&)84%N0)6 z&WR3uCZmzQ(Um6`kfC&@-;Zx4FfOhW1b|`ZAhHG5kPIvx*D-oF3Js`23D}zHC2}=z zjwyRAws;{aF~blUzP;^j@AM^Bjfb=k(SErdje~~}ai!5B|VlyRohXQH`bmL6Q zo&i){s4i=)N|B<(KCf9XZ;@Q??A4avqObnE#3y&$L*fvx=aYZzI9p1C+gf+JHQBqO>oL$Go;Jd-{ zZn6GkkkUXRfe1%N{rq>i%0uR(<1RuL5KqTLvb(1q64a1ju{$cjolV_+C^E7w+; z_(f{Llrs;lpJIKy&Q(#5WvNh4{N>^b?p{4?702xS)qR-@WP&SOkVvZf0(7eiWOVx5 zAPn|QCm9c$w{A%EXoJj|zeMD;qYWJG`DnAwSK3AY4&0Ey!Miuh(rQsJ=M?T|Ao*bWU{ zq`eluIEe!z#%BbPDn@sh&c{a)+W30Tl~axEpm`Qb0tNgxz#YJGcZlA0On#=pgk-xH zhT$*tbz(WtA@G7)P)XHrpHP)cKa9H`Ox-d)bViBJr$oC5jfxXf*ygFZU(dw1pMdxL zEIwD&+A(u}%&c2ij^b`^_1nD5U5xBpE z#I1O?Ax%uRW<^1N(h!yZr#zh?ZyV&O3^#=q@6+z1zWUeEJ~qdQW>Rp$_Mgz>Iz2yY zeQ=4ug(b3_SC5V5SrX;$>07)z@s#UalG7mV_vkfxGrhuhh6J~SPm>rt(QZ$9{feh{ zp$!ZT4cXid2`4K*?w*6TtWTRa8Mv)RnH9_A<%|XBA4&MYIbNy~yMQc&*e<%s&oTUf zEmABy!S%^p-4W6%LuAc96$=HCPT6>l_hBt@6Ls7sGXi%JlA3x5>-1#J3rnG31cMlX zV7ZN3*n=MyDA%WlD{?BOVruv{`wNXYT6L;kMPAQmLCrfuXat0wPDm!XDt`8=5#SDC zbQ|SIqlrQq9d)s}@3#rNH-r9BXG&HrH_KY2jXCC?0i;J`l8C^6FG&b-waF6HkIQN4 zj)+AA!*eQmYuBlFxrz|4{#x7w0)c3#>?M8yJvmPwo^uS+K3^i9kMcIKaH+1vI`pN% zQwc;V2KX*A?SN^{2X;lYr~)s?B|NzOp-#qTqs%F!$vs-Ai(@cH_d>DKRLwr^8(jc$ z-`*l#>64z%c<4}5SRX-w5BBDtH583BGkJ(VA{2s7Jp~1IJ&$;D>dS2VcC87=ILP8|tVxb2UkSK3NGT5Z}}NJG+N z15ML7nD2XFsj=pOoJ8(ar6Azn&)d^D^`9=Vt9ZTjH)N3p?^Bz;!TAx?Xqm>`Zw3tc z@-ZLM-4tTT!oPeOA6mg?S&;0>VQ6!@Uw4V~qC^`Cqr8gczPG!H*JHas|AgP{Mp=KF zKu!O<2}3Bq*+Zn8tIAIkkH?DFar?Xq?kgN@br z)7LzSLYuH{jEw7B{))0tIi^gUS$kOzXbsywY0)=eD5#>aA7~TKjA|$X1{E~$Njt0G z7~>wWPZ2edbcC04G6D-Ym%hM+LP7-0;3Nwawz1GyY`^GgF54+Zu16RH4$H5>VejNt zb`5MX#$9+l0;Dx_y7HY4mhnX*(*^n3MOy6@f2$(G?Tz^{%j40n?Khx6UY4w`cMnk> zBmj0D`yqA9ztP^(mYm{8VidrD@FfndW($Ijz%7KjFOv*LxX1NDZh+e>=24vUiy&WL zZr#nvl)xf_cAKX_s-q?{?lZQ7>0EntF{ ztov7w21DGHmM>%(Jyj%bKXsxt`>zt~tk$xHN)U5Kn3^2Ty>oLncb^mKwc*TSS?24E z;EsS=a!6wTbn zSo5NrVT3}JMZH!4N`XJiolL|z1aF*`EbY#%6;n8GLZUHMqpuRxj3QO6#8K!~3c?5# zBk31|6yeHQB2Z5Z(Gz1TRI{&}qDEgs{fuzpAJX;>R08bRU3V^oO=UHzV@zC~Sdn~v zsF)Ao+zo0%X+1-4dLW%SgbeR-`n8|Bx;{K5M!^<&z(q8UQ*8hX<<*D#u-{d`sv7wy4!d~1Qnu!DpH2NDidw5e3T!2{ zZ>-WMxGT=&{&l9`GFHJPmu13nAi&CS~;u>Hao&b8>i7u!mcD zQUuqRQ0NnSi-kZENsT_#$mLn96Wr()+55LdnTl22@2Q@;ptU|pwZG7{jozn`WfF?r zc7xJOZyCOBeWP%OH5@khJ!=pI<3MM@+U4gYGu=tSFhs=kR^w-oq;s1hrFQ(OBz0|H+($ zqga-4NKG72r;oY)UR7j9(0)P|om zWGs#{K48pbLK#d9goO)kh~I>NT=nd!HAn$#!6pL=oE-aW zeH(H%t!Cr3^JO;`A{ z)5U+2SiOSR#h=!G=

=F)o|Vwc&HfiGiqqWPz>5I#@si*l2E3c`S7jQR{Hb1?qdEtPM$o);Y3BSm7_VU@dh)3 z4L9eFPDn;)S>E~vbkHaXIW_^^tO6OzIHlOQn>>)5@W1Asq}Vx452S|Oc3_fg^Gpxg zk}RAtMQ?0$&KvHkeG3Ub#pUtUjNJ{rB3I&LJuD*sBkFfF2nH14o5m_?S7gvQgJk)F z^a7-SBaH|mx!Z)Y;cm?_0{%;AAs7xuJ6+qRSl==t%&X7ayw|}(H~}_O3GA%POP$R3 z`LC`8gg#r28sLo~Cn;GIm0Hco;_^T>_n0`S`Z1gMvBe{r1}O6NJrhlcinCsTxrq-+I?NW&o@pzmd{=`h!Spf08a3XEs1 zLqOzWY&&^#`mpr^>f3q0GuL6L>yMo(#1gJqxSkY2N4s6R-dnsT|Hsvq#@xL#&FMhV z>XF=@8~y03xaT;z{WunaC@-X4xzu>E2BhF{;KZ%f+u(fsB*g0?mo9T-8gFy@{6**O zo=2V-TodUn2f`_TY(gPRUa^C(zAEv`9*>LmUXP%k7CVyKa> zi52oDY>89>0Ql6!9J;$kn-4f0qVMDMP9KfHPH{PCld5XAqKA3@h?;_#Be_7djh%rb zU+;21w|I2#o4bF|gx$X#(Fnk4iiGv#OtcZ0Se%f_!GQfjFGIhE++%sj|E(Cg+_2)d zXocyKbMjSf$i`z1q?5-%bEuAh@gkL+mlWHP?fNj4Q1?#*@>i## zpYgW+Lp%a>1}jnD0`vb+Et~-*wE%7M0ccSu-?K#0oBIvKki;Y*zM7h@|1-z_exGB1 zS>ZPrF+lKp3b*?TWj^5-JJ*MHun9*XgAo(r0N8T;i1MKa(SxnQ_n{C((M*=dN8Rz_ z)O**Bj8%`R!jG9<{IUie(0Fx?8gBg_Kxke9!p`+dC`xq9SZs52W!ocK?{8_&<7!=Bv!Slg9f$KH)~ zGpdoh^}(Y+V4l71(xm$v<1J0cDRv}E^FGfeVAbqF z+?KV#WI}~dP+fp*XiY;6SBARhXgY2#VD{^+kLWSJIUnD9o$pVe+GxOGs1?YZ;TtdH z1gqXg%>=&jHioNWNd$<54yAm9Tdl&mORbSzhWFSWr&CocUM0oN^bQN%SAK314#Ox+ ziwNC(yg7kUm&(*?kD0b{B^; zW)l(AvHmM;+Js&_RRg|Ik(I^+ZReNrE&U0sR+iS;S|>kddTO~)*B%=vDg?-T5LU<| zP6SwLpqUHD(lB!_AR*k*`W$R++ovhLwmSW(X=2uY02IDHMXVzD;hsh@ZA%tEcw-() zfoJhA@3}%1wrw|+5($KJw{X-Uu8aHU8i)~Kn@-mR!-PK%i_j%c7p2M?Qus~bN|#Ai zhH-fa&f!21hnELVdDE}&4v&w144`N0pp#7r8<_n@nk4UMbO|$D9}#bLR%7s09?ycR z49rGlir`CH9O%t&j^EVG$$@~aX$$s41>^K;j=Wq=e_ZKn7Y1H$Ndb`;oFPJ%^I6cdBk9zPAtMZB9yBESr+@3jEA}9Rhz=jk7*$4<+CWk(A^KI7v}hh z8g?ngqA=jhS%4@K$53v>7fsEaKPN)(r@i+t@Y>w#a!v2S?NS zFOvZf3?IyR!yF%LZ~rpYj_$9=d~+S*2imi#*U)>Jp30?pGO$#8#lizPCAMWxV2meh0ZASl%rpw@$G%B zvA!(Eyj^Z0PLQ#jhDjfs_WR@U9S7>WVxf8E)~Ha}Ji%4AMRTji!C}&3J=0|6n>>}; zbcMG$I&9&zH8UcJ!T6sQ5^Wq($gh3tmHpgHloAB?&T8>{BT|cH3wr>aI4GR2>9=&h zQR0_c)0RXD09Q78$CaJH@U*vphjgsZRt30RH^U_h3Me#xL)h*)ZY%L0uG}Fh7Hhzy zbJU_|N@kblI=z5^3G;P+NXHPEFm*6Z5X6Xp2{TVNmnZE*q@dG75-V|+mnlR{2Qwa3 z1Ey$Izujl@Xf#t4OONM!7^|1H4q`XQ`K2Wy%|`nee7^7>;obYD@3e&yHD+#o>TYV! zH|EH{6d@u>5ADQ5l@u<9hRHw8%y3Gq=|+D6-b1f99m!-C&hKSIiPXM5p}MsQug}R3 z&vN$}<`(Iw>`B&9yung9!CshNW5j3f50{XRj`Rv;YdOB#Q)x30UZ`T(W!Ep5o$i_$HKxt5((;#0SoiCss3U;ZK4qO2 zEf)LtX2+0ZDInhOPB1OAyMIQK)>I7sTvWPurlB!!u|ax!N7qu#Cg;+~l1QO3odoP- z`X~%TNf<3FnySp;GiwMj>@*JK;I1Tu+3n~R z{<$K}uUVOeja&92s+LpIZ%&@LbBg(8-t}bsuP(Qgk{FeQl@a6<&q&O4A_oZgIRN6c zKpbr4AKujJS=?0bX+644kWU(7zmm9cC9ehwiy9>%7nEaQ}aEOgwABhs@%Iy+h5eaA`@zJYl*%S+-}jxH#ZdB zd7ItL%`TnxN31tp>p)Xgkflamd=#_OEi)VEo|veDubJK9v>J_C?bq*~@$}jlxx(;L zvg)RS5St_bo|i97&j#?v*M@W@rn(dHCu4Ls0_O#+JMjb}+zN^LaoRyC@Z5Xg)jcuYZWsnKA)?_Yo46!6Qqn zpa16d-zI15YY?yJi=Tia^)$6Ata9>SQ~U7HnF9Q!00o(|kQ;8Q=`QCxN1qd$9kv4e zHL}?nIxXxQ*myq+Wr^mW9u4&;&sY0zfp(xJ-CKs5RHxt{hTU59#oLr==# z(@Calw0YrFw4Fm=$XNEFCH~SR+1rOwJP)OHplOj{lBA1G`gv`x$Al>j9rhpY5>sZ= zfTGC34jNczVD^dUd237XGrAJbWnE6`%0hq-FdaFoD@2-Mid2wL3ADd+3ZH5|!P12iTwz|8SWwzkozTyrsQXCx-Vd0gXa$}bovZ|HcpQ+iz(0u)_UFbT ztki(3(I{Dc+KB&;!xEhArO5gp!&aJYIJPF+q*84ytARCSt}}5Tx0wgfnLew{U2~D& zJEI&S(>fY{7iQI+CCge8ziVTZ!e5WWLo9IM9=2ikBWN`v;WC>1s+{%z;7gEoky`w4 zz_hm5)4@$@;is6(_ddPfBXl@hMi1D1dN$jQe<$I91ymOW0X z^Qq)Xrt;4oG?7*M9Oz|stS`^BtcS%bbETX(VjF#^>4j35=$P3E7gm{;yjEolqS@JZ ze4U=Z%AUT4Hft;TlIO7nv|D3e>F+X{1RfhSE{oxB4Z=@vps7|^6S%4AHkztwxQCYG z2G(>+srK1UH0~pg!s|+Ae9$-?*v(Osyt*q15il(O;btxdA+G~_9zWVzQ+T_kZ8Y#( zB>4i|%p@ypAFZ3D44}}WxVo=ZMA=p=xcvw+;rHG&qj|k_R~K6D@7^|<9L&2+YunFu zjyh@dgtHITov{)$xky81;!aj{1nywDyO* zo}zMglTnh{I3l%c5AG#In&89EyaJBX_rS>+|4Wq)0y&Qf3Y*cDwn!zlCe`Tfuwpy9 zdB@_+?$zmVXe^}vPOc@y{l86AuMdeUbGZM6vfWi|(IHd&D8EMvOhKA4m2!n|sDxm69%%B^ zz|N6Bo1VDVD8@(L#+{Fj%?tbu_8a~rY>+nx*cv@SRgXHTSfYh4|Co9SX>(jdXj^gb ztL1)`eMoP1#eXD{18`_lHU8oe^LP1uyZ*ucu^|)_V=j02T-1h(IP;IDJn)`nGQ|l8 zYT?DS`!HdgiLwfN^WalH?US{BhiP`HX`=Ew71K|y!dG`tQS9vgn!=!*?wKx^tBw=z z5+6{V-gr+HCB%_BmVq%6`_JgFxNM$toSJsG1SO+$x9#7FoJ{*y=YDlYG?US{mx%i@ z9F%)w5~kdj^Jm0t21+BUA65HoU~1ii`b$d-|62gEO~1RMrB}xQNOTCa=DNu{{IXr*}{E;Nf(?i8n!ip3yP`%y;8M0`AJMpx3 z>a;Zl91#KvfFN&k=7WLvOfBWKOC~5YQZg!H7JX5L!BbJ=Bevq)=+~gX=DNLF_Ey60J zZNxBE$bof@tMK)yjhNho*s*GLC4=4rIHKaJm&OPIxye=R9wP+#Vk`MP+|xfdwqR*r zY0VdKq(bBSQpYl79X3R*t5$p`Bsw5n%ipf$S-M8?bLAE%lq%o4ysR^(6-t-p?9vEF zQQ_nX^;WX+hc7wv+C`Zm{vT;?6;{{QGz$kykPzH0KyY`L;2zxF-66OH_YmCO-Q696 zyIXK~hcj39e!us7{^vhe=PC&oD~mZtcUMpWM^1jz|$ESJ>>ngtaiuB2DOBe$AmsF~{JPgHsk#2vcy!fJ^&eOey3-0`$vc1T*|als+TXru0$GaYKQVL?_m8iWPuSb+V^nj2HJCzT% zN#C7COXNmp>CO+l6kSd%}YV(Tm}s;UlXw&+BmEjb80mP)1x(*-^DH_sHO2J|4{fyYrP`(dV{U=<~(!v z*?4=QDEm2-wrU#}&qf2*QE?k6OZjRH(CrZlp;KKW20Qg?gIWJUSxA zKR{6khyz8J6A8lLoSxAM1Fe9?VSsmv68Rf|xkF4ucz}=j3@-Fp4>;a33IHA+bK5z5bKDiTB=hz4jG;o<#txhIo^rk#%u+M;d~6v3@DXj^`o`$DF-}`eewia> ztKOA;USloyP%uIx)n1?oJ*pzFliZ#)NC5|2QBUKRuSA41K*VrkLL?!uv$b*SRZ$_PFj1K?v80tVMfRK;Va5H zw87msO~mDJ_D1wwjxtEDCU8!m4^7Ir>aCJwD}!rro7EkLRINC3ui1B0xd2>%fDEb0 zz3A0XuKK6i*DU_G*nWG_$6wIfYZq4wyk3zDIWB(KSgKtdN6mo)W5kd1@qpFHFcYd*x(h$d}@>Kh`%d_XO8#Vw$Z@TTaQ=V_GLz_ zbUjZ>=M16A@F$5JBrph&qc@)tY;~?+{^I%S1H=-neE=YB_JrMG)zNNO$^tvXwp{= zHJBu5rw}ax!RROfL=tBoP0NrNKUoV+9ux^MbFq&M9h&@?c>)#W|H^XYDKrHExrn}k zbf-O38^W*==y&v@38g)K@GaYxe|ELuvvk_K_73r?@Guep>0P8U;w%3h$p#8~9gYv6 z$=SglV$sSJcloOipjRjq$-`c_2-V&LV%2sWumsukl`@V&pGiIZ2_i3L2B{>5Dsy{s z`t`*V5=D&%Wnd<@h%J+9tZcQsJLlq@w{RjqdJfnTy8g^F9bX8I&GIlfqB$Ig2pOl@ ziK(GJYZ4o}G3qJHrg$>LSicMXaEX@gN7gqIj38^HtD<Lv~yjDs~XC^g}WH?D=`)9##Bo_}HWs<|8bD2R| zK8gmE<)>=RxH*s({&>REwL=b?iPxe7$M<6*pjgAZID8yrNjb)vEE2&d?GJs$I~<7% zg64IWF3_gs_5K;shk7^Pgh3sEcFZO%ZFcQ@v*7mBDw`KRmtVB{cvQe}F-V$K9O|HF zx&K^{Z>&xQv=5(n8-2w^8=&RRX2`1b<&H(F23?{%y!4O1e#=^#TLD)I6yfs;!?-MT zD@b4M!$I$&)%nB~YZARj{kyvG;~fq6M{A}Jutwwk708eQI;tJ$B?X;y^v-D`k*7Iw z{XO;Xg*0Urf-zqdgWu6>+>TWWnX`|MP^1cpRM_N8G7a!S=YYR*wCI)F&$BPM33 zGJi(e2Rs>6BEN7N&5$g$u7V9N#J+QLYHUz>S4kz=mB}KHiop8>q_MF6Bi)jhWTH-- zq*sfD4-Vv&)VY0>uJ}r&n-kjP>XJ9RFb69ybEAHqgrjWM zV#J4aX_pu)hnIs!q1Pu0h%T`#2iUPrbFO$@0ruRCYdbVgb}qg_)e_`;;LZN0DGLlC zSok3}2nNOCGlP8Yam#F?dF#o+Nbm+JySH5m3p}n_sx%S%Wa!04F3g=w77d%>1Il&S z0YiL2PLIyY56|Q{5=|_)Qz(E7RY|$1_3Fk7k4b@?YPp&>IpVlN-aAbAJ9oP!kHC-i z;2jAtJi3iZ*t>Dnz&l{cp4-hw3;|`p{e8e>EL$NFD?Pu991w<$0!H-n2jqQ3QQK-- zG>d|xV-PBCdLR)vCm}#EUc%%71fx?m6mtj?vP(ZWi=_z|4*B1#<0$Mi*49j9)q3@3 zBo2y(ij&Awo%T&OH#3Iq;%18{uc+qE_Lj>uPMBD@YEgvL#r=*2vqTNG9&c5I5I{a% z32Pb&8~%5A>}r2{oA``-4+-AVnt;~R1?^eR)WLj1kzHf4e~CAbDw4N3z>6#147Xlq zCvaaUFRLX;yn;z@<-6XGKapU`mz~2jkBsCWBW(cqEc4ymEev6Ry z{y-YvCI!;?_8Q+Mz}qqU63OhE%5`;RYQ_T8Vr0>BtJD~Ha|WMxwo?nO%hN5M4y6qK za**YsK0bQW&vLoxdV!QyR|kWmd=`2J1|-Y>t2vzIP!RGjLh6_LZ?KsBZjov)VD?3+ zz~6j)+N0pHY~6->=m>h--uvM)3>YOp311QdMka}lvtux^vy4X=BUY)z_}O8Byfw^^ zw3r?*oj71#6&GPUc%i#N0OmmhLyp?IJza$JK=}9`!+uBq#!i?&%xV>hFsobB2LI{v z@ev!Vs0aW=kc8YKfl-IwSj(706novh@77iB(J_1dbzL_H=aMN(4k7x%b)L3SP*5)m zO`2dEeMC2>jkcl}c^{Z*>+ z4^vv!O??TjTupE6Ta5x&nGsCyf_sw-coeVqZ7)6>-w7bA^qg@lR5=$q+cT*cH4G(@ z5&*;zs+;>2curzOzDs>pvQ<7x$nFYkM48?|-lM$}F`sTyd3zGX$0YTAY5#8bhO%m7 zp4cL&jRfZUL7x};Kf3^sfhh#;JC;0UrQrb4{`vs%WYde40Z$A>`#m)Y>F9mCPkgN* zU|b0U`)q~kC?87}HOUDo4LCmWHHZAhlDg2np2D=sgG#YUL&<4@FPi-5S7PDyIkxtj z#E!Sn%a5n(3reJoLv->GhMT3&QF#&Uqn&tEw)@drS;pdkL>C?^&_2}W&u|v0`teH2 zc zL09?@th}58-9sZ4GkGAx0?^N$Fs=eev6C8 zdG}|;KPCpk*=qgsAC@-7idpEatSo`qQ#_oFeN$C^F=^hBws62)v95Pg9tG*Rv?G~= zLkr?n{!U8x0O3HCiT7W%lk?=fKrSMxbAHg)g_}F5k|4T&kK2{n0-TSCs4M3kDVd#} zw!DAvP*ThzY4|&>6iG}nb76owaE4wm91qsM(X3@+kC1?Lv> z#OExGAK%va!UlEtBF4Vk1NsNpHi#|TUgffK*KRYFQKU&#FiJ+ykoo-ksZJuP9R7{Y zx3E>$f4CMNE}^TCvutyaXzYU7WnSXg+g5r|2bUY}cG19_e&_>wS9$mIroeKfk-4r! z&X|BU4&8cBkLsU>a4|Ah_SXZGyYr{r0Nc?dIFzFXQKP+XhWyidGqACT6^voHCH4)m zb#aEJFS(!3a@PZl*@EbNly*yD4zh1p%|=Ic$FnDr42KJEnoPloGA;fVW5kIxw--p2 z^@DGEWk>M&55Vc2;04ODX$He60G*k9B?3xiOH{9c?USPdZeRgV+16K#9B}(G>6}56 z24t5;ux4-RG?g`BSVU{%XCzDYXSZ+4om&Ala#wOuln_cqdL2G*5;hJdkNfd3G;u8JThjf-nMF5(VUo6_dl%HI# zai3wt*R(o8pYl<&AS&Pm1@m{q)E1gX5k*pL<_<$2%B}icc7uWQnLLl_#=v^G67EXiqQ|3+b z0YiQplRgq)h@g(Q(UaTh$Gt|iG&AI^@>S2@zXpTWL$KWzXw9>FESe=9|HE6+=7wyN z^e%F|OJO>DXA)$PaI{4~Hi)vxarQ-~?B>kcdZY6g^}tOB+MMrB`?w2 z0nDMsaewf-4|S#jM*rgSa+dTFI=NCeyzA9&7gNSwqvswi ztIb+u=EgW~(9ch&%kOb;Eb_$9+yGY~Cy#H!P%Y3F4~a}MB1?nXVi6I%ze!)HbMSvG zbujzk9yvoVsKk}Klftb}_^JBall(%TftR*W`(eDooy4M1ooBhHNVV(#=Os1n4*ys$ zW+!QdsQUu`UI-Lc)}XM$o)C$qdM~KEx-IGQL^G)S{MQ62h6lW&6wX@?h7wDKMKGx2 z(LUM^f$j^h(XY?Y&y?{8R45n3$Sm>UU2Nz>Gz4J_yEk(xwt1ofZkT6lGLB*MEu*;P z3xH8PB{)|V;RwjE`5fa8CtP=h5hVJ=mpdyy79=d9`@9*k;B;qSYCvs0`ynDM zKCDh#ZBn-nlKbIYgx)o`8RdnHss#C_92GYG%^(o7j7|>1w8+j42aXUnEk3Y7FT`gJ zl>e$RCMKu(uWvbWLPC5>VJ7s1=awbIh{4}~&Ga(Uh_$O?hStdiG!Q{R1Bt2eiL4lJ z`wE9Q5Ea>JgSC`fATZrZog81037&Rt#oHJo=;1)UnSue5GfP|iV@n(Wxz>l zJf_{5ketb^_bkS2t;qM)swmnS(4}NrJa%|Fft1zWQ`^1(^6{}UD$4wWf$aa6NiODy z%x5kR6Ff+JB}k<+tk*HC9(aI=zNm!!^Sknp#P9+@c4CByb*|#~n{pn)4QNIITSfVq z?(lFdp8`PBb%f-}N|2wV@-C>A7~Gx|s3II^)?0IP|IQ=G=(V4ncU=XW;^_Bp4>L&d zv}@UxB}>Yco-r#rUiHlD&S-Of0w@CkwE{+#0CFd+sXUBjfSU-4On2yIO;F8k)|5(3 zSgF04a}DQh)HX^4B<|?BFEoD(#*>PfzgHa2X8`KPIVXpA+?IEZwIuWwGx_Bc0?5FW zj9J0%)z(lfNA{S}3Pl3!$6V^$=@9|gIj+ju2xEcah|l1E&!^8L2f+T*6#_3x zrbWg=9M<<|2GafAtD64{eQE(NnGxO$@GZc$zW{F`++iIU_V~;Ojy0W<8Px*!do8bM9+L)Mw7AuNKo+g@4RfS3f%oOS}l~FwH5#X%1A;_Jh z9CbL7boj^v8gtDA*r*i5OE9Cy9p3OaaB)8rg%T&)n@vsr5e4@3DUWi<`MdQ%V_+sH9w33GMf#3d0#^_WSqhqQz>ortAjq8TKu}}= zMn#nWRQ&Go#$z9&>pcs#uS9+lQJfMIjaLyw8>%v$OAJAk_nuB$0L z#qCOHS&q-UYcCK3T<39n8pm5GFtBT?>yxraByxaWI@2i`w`gF%cH20d$GL0Bbv~Bv z_Aib59&e0rDxNlbxbcd0wB(uRHaw{s!^jejStPJ%04Jiz$p!+y2@gu)fpNqzl*9fa zTyi?}mq?Ix%pG)^NFzz=;@Nytj#u2n$J#E}4At?F=ygG}{~M!|z80*DOxX$%+=H=% zj}3KnD)>bA3oLlQ(-{>~-P|yE8mN)qJ5&#bpu7~&`>Jx@td)SePkn z(yu@B%}RCNgtP9$zv?Tt9G3T0mTx0UOD}4LA1_7P&gb--SK0o{rB9x!G!cr-n2{{m z4;fNuz2it$j32Q##S`Lh?BK9cN69scCNQGPyn4Ar(rB%iat0c0AYFo7V(MKIejtUx z*T+rF8D6?p`wKwEko{!_p&SW#Avcz8_6t@NE0nPotCOyb;Mj!nBlhw?XA!pTM*!vO zI#3%OCB{bveOW9_3>@UZ1jBYB1Vt|*SPto5m$4&pmYfX@M@Ba!D|b_n%mAKs^GGzhBa{`w9OB+`L*NWIpSXfVv_ z>y2SAHSxsfao(johqp)J5+^Byp8X#gmRx|5*i{8|qA&Yl5+G}1Z8|$7>sXW0aGZ#t zDf@2yA<4CaJ(d3&l?imWp%G6Tif<$IL|s$kzAPRP{LNo<(`a%K(F774rZj~?p_C+Xg7vA3XKiT-T+l-%7WWd~7lpUV3GY+q{7p zGmEAr0ga$zin~hW_0GG(Hp5c(Z%12k3@xq*le|X`1UN~bPbtG9F_5t$f3SWsJy3>8 zTXd6R>V1}u{r*Sp=+Rn-GE#1ig0KEN0R?aXaz}r`+(Kyd^u}gaj2L}Wc;W=%Ou!la z=(f38Fkj?ZVfF&NAk&a{c*?bq@qr-h@cy3$AW=HpUJD%sng{d`-b1R+ytc z1eSzzgQxEO6t}CFQ${b*Ks(8Q&SMVv4m1gs4qF~^j81+}eZ*5m1vOHrF26z`To3=< zjlf2j0^KVCK%>6UKuRFNPeAzAE2aL-Sp6dr0*wg=Vq%}D0VdXhx<$;(JOzM3b$~1i z=$@Z>f#{8h`pJDH*`nIn7E1$Y!s0Q2J zJq=O71>0ezt)Dp%II0a%F2{KvbJnUa^i|B#R0kRPvb{E)&P8*X#KSZfOBdX0U1XPN zIb3PysQAvl*#*P8!s<%SBXzIDL|XRer11$#Cd|I9p64*8&sDocDiM^~;8>xh>SZi|yWKV*8A_*_~iC z27W6RIa8>Bqb;+F%%v*3IPNlzRgv3G#a8H>Icm{=C6~vzzi=#1 z4lJ=*oobXA0dy#IqCpcD+_#C!(cIwCa(n>}XAQyre3oBandEJNsu;{K1$~=IzON5qVA`2os8l>TD$M)LU9S0a$^o7#5^*M}~ zd4R6NxUnoFJ8v==~e>{~DN4 zMEunMv3~OdQ7`Tzq6MTqF-G53)}+ZQx6?0o->gM}mWVh0AKGC1$o*xPCSNASPotr& zF=TzIUTC}jCc0->qH?)s<<;wA3szYb`cOnLMaJIez%K!nMY=h@m&Ph`4CWh}$t2IEyZ zBbT;CTECyx0K0XcPcI6yv*_45m~8FZ-^PjNNNJk5eTZmL<+5#Er~n3X0F!CC?uYi< zf#*5T0FNeR_z6cLzA8MUV15A@p!oa$%60}$`F<#W4Q!L_Z;F=k{2bR{{%WAXZ}RwD zBn|WfS$SiOgd2ThZ9zcxh*`}w`XBzUrPpmOzZwE|fyzr^+tWM1-!E*>3(8yaSe9W) z^z}IeusQURC!imaZe z_aG7ur`l||KR21Mw5~lC*YYsv!fHA!6vev!GiRVQTM&tU?2@a45T4WywLZSnPG?m+|WX6kKjQc-Buk3 zM7d4AU+mf0%VC)aiFW#A-QKUAfU8U&k7{GtWJaA)8L|Fi&;o}GUhu1iXw^$i)T`+x zgA!_c9gP|qQ;M_T7o3Kq0n}Q@694iYbB1Vbx2kWJNn~d_1_P^-gBC`9Zcq~4oEBRI z{K(iyV6@gxsE=sQYBaJwA#2Dn?STQ=Q$IR-Z^WLo@i;{h$0 zLwYSd&5ZK`RYLXD^nqaHP{A`zodQo)MfFaNr)hF*AaH8xkf$WCQG$ zD$d}|(-j#T!!0IuD4FVivneCMkCFU4MH)gX+m^^uj6NK_??o~B6(~|s1wfHPp0I;0 z21tNn?rS4pJAuxh9R@len^Z;BhV}wgN^2`g4gvI80F7+@pQaK>N84*Am%L_>Yc)71 z%6#kzwPQuK^JY}}>XjgNpGyyt?%VjFE@)O<<{b@gJb&h5KU+4?ffwym7D;tU-+ zJniEyw%rdQ!&7{oAUu@a;%nI`{synXFWfEml9t<={qQ{TGDyb`N8h)48NXGPuK_!f zSK6_>L`3x8j?o(3|CFi@Je{{!5V&lwufHJ=TihJ_sPlNEECXHRmq3ut@R7z`63`iF zp>riu-oM~9cCS#s;)ptJB8+~8+yeX>dza3jV`CSc(>%l9$@d3tjyK#ZQQTaWsSM=I z?fC*Am7bM^*z4l&o+hd(qI~>(zwhvPUGT-DDa>iGAUgO1Fg<8cCT4AE^6gg8FrsvK zDTKc?EoA4X{o7$a*_ceu4j-~NFD;Mzs=Drwb5~@bzicFBJ2x@Z8avDk@8!$mClG4Y zRHyx0X{J!u_tF-_`t}flonHjkQfobS?ZFc{JuV9$kCBnb_eTVJBH&@G56bx(U z$308>JA*u!KY;+sF{I;Lb(o8$kyHrq^@%d2ftlM$QZ4Kh;9t^^_G-ogQJk(UN@i_R zz?=V;|Ns2v$J#IYN!|*?k5XaXq5etqeQ_$M6S(m2?>hT8W42Kz0A#6eFRcU!STKSY z2Rk_2?4B^b70&?-Od7_12GP%jb9L~kp=hXk;-;kcTJLsQ&x)qFzZGTwfF4`n{D7a@ z91J+X6%SWGI0??mgceYDxL$vxYJMw{A19s!KD&?n>8KMs(Re6a$x~!AZ=RU+b;KVj zXpU3^vXBu8t0)w743w6o!$`nI1ph-0V|x!x&PamDSya%-jKbO859M-TA2iN>3~MW|KX26BW}m*&>dHDe)t5kyX9HoN?{9Ifdw6 z1>1-|z4%$swO$-gb6x9BPR547Z8!2qHgNFRCReMvAcQ~Y1mA=v!OlJ$_F!zj_Nhxf9Y}Li3bmuPS!IE#wAL1SRnNWf|S9)W~M(F zNI%(tOLkA2)yn{aFhgN=*XS88KSUfmSKI*n07J^lVbi;mS2~$lprf#m{30#FU(>n1 zwdE@r;P*)6c2dsvU}j+GI#!F(i{`n=+CyPMVu}0@Yrgdv;GftxWaCOf#O^lrnJ!;-B)jYCTu7& zptHFPWy1kjO)&yx&~sNIl3%K}g*E|b-vh1aZ3b9M4tDV9Y30u2pTv5+VkD)SEA7}K zX|xkEX(NTc_GH8akV?NEhFzB7 zn48NO34Q(w2`I}y=;erkROcwwxyTB~sTkI7rZg};?I`rQ3&cvSi38d)Fk(@Z^$|v> zYTZtmn>}o!@{Cavj|LQR{|;GI`9E01tfHow{}IXmXx8^hr<_~pysGyIFWvK66fUah z2V!Y$4wdsYX5Z;_*sE1#&K|DjtvmJaZNq335Xbp|0+HXz5|sAytjd*ejJqXB!WB+W zAz@Ph>+NlG&0U4zq}LfTko*Vc#jE$cP1Mpu7%?{^G9e$4ZX8F+gmwzu_w~oDrh!c^l_`Gy8KH$UXoFbDMzz?jf< z12CTcGbo*0zZ&n{tks(3yhZFEArxYeYhZ+0Hhw?|`8R&8__=wGsxPWf9 zZ!FOK4@d;NT+?YPKLsuz8cb%Psx}$VZy@n{!w09UaCh0=4s$%1%9c9#MXp%rv-X@7 z0&=Re|F=2P>Q0iEbVYQ*eg4#vu^Ky|?^qccWKym>Qn+7$!bZS@Xp}sUVjM{azUrQV zp*nRDCFH)SfBZStTAgk3g*7TQP}HQNf7xb6?wetitSA4>H|MPT`)c^A(Ea4_{h-S- z?9ZVvAsDZ${K4raz4XBZZ>L5gs7zX+~9Rd7N=W@>kG=1?;;|)u*QgW)({!Wsw8! z<+cWzF5z`ieH31mDA>?-m%eVr#H!Q%Pc`l79g*V+(asTD-ru*eEWNC@}&pf*=AGLF6feX_=~G{$@1Vf+oiTtx3Y# z@5c<$064E-5kzbXsQ}j{k4phxXawH!{cIpy?J7Xc+44&0bR|+foniNUJmX34d?Fee zT9$h#x?z8=j`;EJC}f*VW_zJZfn2>7vHANEY7J8yNIv;Ho~q*ha)=eN(@d$zwZen|6XwH*5{-1mQwngk&A0W-IQ zYZ-`6mC{!HPs}|%M`IrpyJ-WFgpJ-BGz|GJZ!J(k{i6!x#w)r4d zm`E^*pJAl)33Z%|&{uu^P)n|jWHwFS>-ulOBIHc7->8;(s49Dcjw5#>zN_fD<-+hM zOI>c8Uz zl;(%JUui>n^5aY5RPk0NeWPyHe%V3kC3hcwoz)EOPA+>0ANP#oq-Eshv861nDdyFc zTBKuXGoei);7CytmzK=08x994G&o?Zp3Y!4d_3?%#so_0z@WA!XwT0|8{s(6FvI-g zd{lF6mI8I;RX|5BALc_#PY-PZh?H$l2zE#H3ATQH3fd`uiCV zVm{5OGV1Q`?*3{E4(y-tAa9lOzC)JuLd7a>^xrC;hdJdhGdCW<*4&=8wjh5qje5(_ z-$|p6hdD3o7T2wHiKD-6&o z@`|0voT>&AT(_Pd)AaAssq%@xiTA~Xx$1dQ8W(AT9BTU66I#GxxRAY9C1H@8aQS+3lm4>5VI#e@ zwPZl%&%3i0<4;r1QEgW~VOyp>_r!S7+2pXn!3*wZZ5GV8z#k;$*GwV`Grhl5_1XHZ z!?7(aL)yLzm+FEYw5fF27!T374}g6DpI;k7aDHsP%7|N8Ic2K&N~pQ$gt<3&rnm&v zkoB|zvysgYE5wfl=EhnO4!Z-eESWHnxM3LmgY`x%U8vQ*(1sHH7Z2skG@j8vKSd6q z5~A&Y25UcCy}$qQX)HWn2q;bU$eErM_2rr(EgG|xf?<@GL6(rmJVB5M8R2mb(J_gs zkO~GUP4O7qEA(#b*iGE&>?~dk#jz569@o3e7?`yd0h&Ctxf(OBi016e0EX)$+`(;n=FmZ|yB<)cLbwEtf|uihPo`$Wog&Gc(TTatn=N&2u- zEwwlsav)7OgF6i`Zqz(}g5rcffI#J~)KA_!@bej)pC{NRl}Wgw?B1h=kBq!ssI*4I z#hsE_ijSAm+EBN^=w5NX{Umed3-k;n;Jou8NjZonu%XDNPGQc~6}} zHorQV2V7N3lUCqxQoPS#!`La4S?}O1WN1sS>_|W|pD)wkykBG6tf?K`K&N~s$rq4> z!HTy4p=FYr21%o$Mi~9;8BCJvlZd`%t7>S5A+WBPZFUrzhspyz3K(|x%ghyBNz8(6<6J&);J~vtg4|zBWu%N1 z1x`yoBIaZ{wZt;|aTY@|2DnH?|y5WD=lQM(^xkE z_<4sk2mxMuHVP4pJpl})9m@^m6{eDSX?*)U#HLF7O>HZ^fvmjEHLxKI>^$P5(c0Yc zM2?67vt1E5F$6>tX%PY6R_+sCX|oHY_s0wfcMA>6b}#JJVwPUlr~y?+^9tDxyG4nG zfnhk9Uras?7B$xGp9Qwj+-5C*D7A@%?M!{ee`x($u^tbt2FHcaTPSjp*XN4A?)}F2 z`knEFOL*;}INe|(#dUGJi;5eXPlr8p`?MjT_IUn0@Pxjp&%|E)%FrlD3nIIl;Wo<2 z_U=wzJug;C&hnTIrcN?JLA|^pslH94t2)1=T_$6k#jtRTHuF`Z14E)@X1sv*ibHKjehVd30S&(iFd-MR4iL4!I`M}kl^S|ZkUr@J5Izn)s%h)WM*UOn;W6&#l; zf5KdV2Rv$ioNF@YsXFofphADvE5qQaf6P``zTp|^?uIkOUAKDUMKaUEcp}PMlHwp@gII?NDVCQ2uK82Ouf=#79uj-EwyJL^i=dKFp2#a@nu z3sT}PR;B&W)V@Lqg&X6fz6{SYMPxykSq*HSoVjiPS&5TfIWyTRF(}#j1IZ3zvMnXn zSO}6i?VXh}vuD5{FHz<)q#Ls{e*_~d6stHW*%gA4U9*q%ioco5z1Yq4-r-ESFHOpv zJu~Wz6i|W9wcpVYq(eHYxBD1+m4nvX&+iu!5+kDE`cAOD1{)TTU$P?zODuFQRY6*g zEW+6lG9h>i*I-nitu&Fj*qY7P$1N~n)VH}E`2Hd}k!^ERf(-KCTCBkU*||fj1rdss z%6?q#IC$IZYHH$IueJJ3RMMAf*2!RgUt3A~jgpQATcz+>qrn^u!cRa}nE&pz4I!P| zHLx>NS5-r;yDyL0e72adHbI)4<%YOiyTun_XsA%Rj8Y=5ItC49J~&uxrQ=ODc)mJ)3xF`AGaUwA2%Pa63*`se4?X~Qd4m!feXSD6B7*!k8b}^{J<)a zh@|ES94x~Z^#eHD`r4V@@D>6h(i~y_CggQ@bC}VGJ=zVIdu&pQ7mz~z08!c|Q zx|Z7blmXFO*Nq@&h(Cu)W{c2%D%3wq3aBrRr)Z9!%!@ST*87+iF|Gbw-UDl0aPEGN zjD(mpDwKHlM7#|6-zwad35u(jv^Kp#E|cXg4?Z2Sx^stzM*s`3JJ_3H+^C3;p1KE4F5^5-mqh~ojK;go%Vn+PyCiMLYq&y0r;gW)fJP~@vViX^N z_GoQnX=b{D>oE>14yj1LfU=?oZgP1#ap>@;h-3t9QS|b5uTVXAFZ5q4IZJsIl8e4C z2jeTo1TXMG1nWPQ2BKDjm~0%SF9=DX*xIypcLF+u^cMF?@h+SOUiDX>LtCL;qG(ev z!d92nRX2}&&t$!KJ~GhNKxb@+*sW)>TM)y4okUW#d!@s5^T2B`E*BD4juJS9iA}$N z3b&jJNNqX`QAhUuLGn*{S)Yw8yI^1`R-&3Q0}16i8HllKw+FLJA^sD{VotTJ?=e$Q z#zEI$ump+>qgRe<{Ch`7QR$xVFU(-G)Mq8`vvmk&3gyu9@bETzw10aY??!q)A$0d# zMU-MkzSJRn`gE(GOmqlrBjUWVosW|f=P#h562BUx0D$sNEaq$i(z)lKka-pSkzZKl zBBcGc)|zOMb<+fEhJ~?V;auO(42EYG1tg20MM*V}mhyNFqqjPQ{D_r$dmbKk<93aksVXeyaIv*GE!taMS!r9U(Shat=BfNU zMi>@@HasKVGfX7naHQJ*sE{FM^Yrzj!`|;sAow7`;!C?nkKTyL*@bp4j868|=|N+! zYCm6>m6X%hT|=KV&D0Q+m2W*_c(by3SmPG8haH;ubwsjr@%Og}YHB>1+QR&IXOk9j@)R*e%neDf0&RXxH56ewUc#Ppd)Sg~}%bjaq5)dvwxQ=YUL zwan5_+HFnnrrF5gQG#pRe^Nw$;f4aHCVt47Z$7tehdO>M>h$Fb91ChGA*0*t_k_0d zSPW&{mXm$7ZdNT=ySa+8slvdKZS9>JcG5rx;K#jTE6ZxbS#!vDfK?z zWckhW+VZp9`Yb%hpd(O^5TeTC_iG*d8|BI3Nou_(eUb3voe#`0{ckTWuirCAX{9Kq ztJX>t4D|XzLAzgU8CI&j5%ipw*9x;XR%vUzm@IUGxU?ADn`JYH5$(J4zD@D zclD2r);m6(1Ox~_hJ0mwm6My?AJazOO&4=f?XV`nW-TP6nrpV;*QI}DcljuHoL6*f zrIBrxb4{mf7y|wEW;KDi~k(N0rx_MDx7fwP-~5bL;9W%Kxa7`glv%M>8(TD;}1nMGjp?G zv%D7B@>)uiMr4`WKgxhrf>|Z~5jfEJTjknq6kgUx%LPH7d*zL&&G6_d?%2=w^lmxG z-cO)RcsOs5)NqNoX zIQUK~?boe-OKBOU3T^Tc35RO7(ui>-jdfTUMn$kkgVhTfi-n?~p&@F@opYY$J$Hc= zKH0~lVf;@rNvt?`r+FbzE^1-u(uhd-Anm8agvBVyeY+u?WH_gAwFBYD#`J@fQJKbmFiJI_pOA>1qG>)Zu;eqD=FERt&2q} zwOa?LaXo*x0&nGN2RngjU!DNgl@VM%)6SC>wC5(Z7mzvEEM$1gJ&jjLl~=DFv$HSf`Z_AHcZN4dsK zW~z`iaT|s3p;Mb|>!5`0rY?N4XxS2Yo;;9buVt6sA7=_Iea4Q{U`8F*Uwpeu0I+TE z16|R%%+1rB-;R{KTCJ@1=Jn7yna%aJtOT6$Kx2^;PCw^f8PiY_2 z3GI(aOmm0$>>}@LR-hiXpi?12ejt)E-!C|CK(- z-D`Vofz|p^TFkpmmzMWzO*nY(dft6Ex)H<=(1G{?+TCA)zabr0{1`BLFX&Bf9j{Mk z@v37+wc9T{?_roAqjgS}SgKsN%{OaiU!D*c>@KOZA{isB!z)J{9KmE8HM4!SMIE3Fsn`p9VOHs^#!Ty9}6tH-2HF2_s-ff0HI*pw@%#f|U zmbULE<-akS=Cw}t$oRDX2eQ=L1D`_bj}+k<^l{P)kG7`tlZ^je@$V6Jc}?(ki>rW@ z%>01SE-2f2nOm2u4H()N=g)!0ru!J_ z5j(##hQh4zqX)PRX`t2GvtQ0NTe>q}GLPnYkp2v;j_+7I0pE&2xpF5z1bI)0eiDNS z3?$k*6d!95fbRtV1u;H`CX}m7!n1A zH=h9HE{h3y|0l_QlhpV4V>2U}(eDP@;^N|YQXr8$YHYhJVSLi;0Nhe;varmL6RRrD zm5$wHM$&LD5q`IXxkj5s+Rf0C=%lZhzIdM>a{8^-1+8Ndup7U#UMK?|(n=}&$tpXk zWyAv&s_()(-zq+Sl|~(V--$LDY%MUP6urK>(C3B$Xp&x9Sk;LH}?(JX*{h7 z!ea9ZjW5lRAm@u!H-~N!5tHnly+mEEw}~{9!80S+99!}~AJ3x{eU9yY0EC~>e@xx9 zjSES7EG8WA{DSSXUGYXhLLOhkc@7w6lBXT3AH8`%~w0`4f1$D11R zy)Sq^5&n|~qUCA7s$EBUn|G(Dr#+r_iGiLO+GP8xqt>LC&l5a>JZaD-nmj@L=l)Ol zo$c7A?O21I_ST@;`nMf6DB?!5(cSvb@Z4dEn&OG)`PZ}+ov=9IW&j-tL;@fnFv)ab zsu0?F_b|6rmdLf$+MR%g8t~49Aj`gU4-DT>Ma}l-L`3y2^d;G_tHGXXZ}UTMweT&p z28*`i_1@>q{@Gk=SmN~~X(JK9?(?aQetGRY47MOmedm01dw1sMonwJA*qSS zoD$Sq!x4hS83n0)n<&YG0DMnTG)DtlO4YeWU0GC1T(}*8z;x}yAzAOb0yR?q3^ptH zZaZwR{R?S|B(Om!0KrrYsC}1S&E#w$p(X9F{;XTsBm{~EiMe`eI<338^*5^xKLx<| z4M&D3HdE^PZmDW%ZkFuw{OuGt3bymO&cDH!rIOTrKZcoWG1C*?{V50WVY+7OoB@m7sqZPTFZ1>;%flF*_yXt zlH+D~r7?pQGnNo;*}V@wlgv#Q%f!DyIQX41MoV1k|($2)6%=mV6s2n6%I6^E|V0${&6z|S#|pNu7{IiRst z{*oq^n%I0M9Ox-4^B`y+L(VocDfpN@OhE-&csx-_3cD6dtWR zsQncq@?i9FXuB`1mNI>XE)RIM<`>P8F42z=)UKUUZl~v&YZPeSNp5}3rz0*+O`L(a zerF@o6u-2Y`gHKwV7G}Q({|VgcB-(;-5!3RibdI9fEiDp!@m?_0Wl-vF-zInzBQL6 z47%8<5ggaGEi(QJ>q7S>&srKnSD?iknS+54=z=6BdTG5@{a#o8*6KvaTymU3>H6?% zHy+TrG};WBt5)bLX)Wx}<>UACQdHR<7}weSmM*HbJXg*TyhLAS-&~z}`Re|L+pZVH zcVj%&<=3-!{pA0)rz#hQ)$D>Ncf9Q`!f|s8*X3jeGXj5HgIC=xRj2W!3xM2%t+A=U zOHPuk!cO{W)sIHWncFpo3a{N1X8S?m!_#>+#3SwxL=i?+n@F0@qayCJQU2)o5)%2F zhWK%!{3eA%E}@wTkYfGBo>>d)-nn3ZDvR6gJGQOUr7C8)MAh>TP6sC3SfjL6$Qoy zNrh^$b83-blKg@XPtwfPf=8}WAUA8fzpxnSDajSvzjJzVxy_MB46FK*0lDhpgUl=d z$0WA~?9x&=0t^ijc<KX@?v#gBG3$T`}xi3v==|7Q+P21MD zS$x3%9oN*=c0~KSzxk=M7oXsFUA*RroaHN$HvdTd`n0a9n7|Z;*keS3WV+Ys>aK>T zhp&QcJ4h!wxJv-hm5gu;Xve=Db@8DhcyZn7)btCy*ziLoKO^Jz!JnV+{Y1zbQlDx1 z=B|!NK^9HeXWDX*jY~jn$quP4FArx|fZ7tnQe_rxoDP4|JqSnWg0`R;3Uc8t-*6id zkq9cEB)rq_)L&g*tRp*#K+Bp>!XU&&cO=jziYWO%K)k9e+B+rzbEA7d_&>JK(dY(}KOH_!5It%9Uasb`zP3s% zZJ3b+3QU}SjhP00eb98}3k%uN;DEA`~YFi9S&Ts6{qw6+*hG9;j<|RQ# zLQ29#)ad6-K-@2o%M2h3dKmqcNTo__upF{=Cli3Ye>h(p>~(F8471w#f`CpU_!@El zBAM@69#)m|EU?|D`uW_m@6ny8y5yut{|5HPw;pGbX%&lJ-C_MLOwv#%EIGaGQ_Po3 z9q{HwR8UPB%0kvl`nP+5Kb`TLi3y%n=}njTJnC+VM?uJIQBO@IN+P+R?`mMdunTq* zuydy?M8POC2Cw51Wh!;Az(*Ta2wo2)>TV4w!}4uhT%57$nA@ArB0P_))@|M!OuOd@ z4hx`G=1pa(`sCn0L@J_3hy;WLJu8c_=8{w_+#DevI-l{m&9dUhBflFBT-+&qIKt}j z={1SRz{m>t`UmGdRbh<{9ag+@Oqbu*9r~oqV+@{xbRssQr2tDBgj!4_*EP5J3cEEy z3bWP)bWCK&LRiQRi<1qKo}Ix*JlG&;Z>GF*%X>6?zP885NF*q1M6uig;uwcNaOK#W z;j~_WiN9%3>nObLlx*4;%PL_#KI664Pz!!FpJ^&0?-6?w$KJ^i7u7mr#W$ zL)|mSUZ7?B%9ZM=z8wtefp+TNMznA943X+^z$AJ@Syz0bi6%x=Cz7o#7tHZezkA_S z*5M-i(Y;6&Ugz~sfzUsMk1zhn@~1td=oJV%H3p+Xq~U(9X`^wTe!lycuiO1~$Zx!T z2R`#?{{D7QM&7CaAzTeVdPq%c5N+>JUEm~>ORGE1+28p0cx}!5ju%^mkU0m60@^rs z=mL34qtzO`u@Sb|qCXp4R?L{)=f_=~FgUcY2GM7nXysuAgCPYf&@-YcFp={M?y6`i z>Hr05m~aI|f~&Du1ku!Z%63(I7=5?Z;fnSiU(5v3DYKgFCBGj2RJ-q9Fe0|ayYHSa zLrggI)BP3~ukm*p70=Yt}~_p~$0o=ga)aSITBh_d3c{e4ewJzrE%rk&)u z6kZ2hpouKL=-~CocVQb$dP6HPV>4!@j#rDHJ~%i7WuoN**{b>J^=+-aFWj3-U0wbB2cq|nLez%CXgou98$Atj>5bce)-BjvrW@pBd}`0=jpS>3 zju+2*@$r0HQFL*N2u2cU8BIOCA50GeqhMXW&2b2g!?`F=2C_|t0KeE{Jq7Z0P=J&; z#FJtFi(d5#<$cv(T~_*_Ld#DXvb8WbnzurtnCToevLHu z_!4@ty0~BZcW;9WEzX`vN@~fR9xw&8f6GHQ=UQ%ny|bv06xd#cO@i@NSb_OH<@-F- zW;UAc4t6#cwy_#Q+{4#UZ`hF&SQYA96qp#O5Cf0<#hx#W-eIo= zi&K)5bGbjH_;4q^eg}}=j}TqT9im%yzF9x{Y~Ef7c--vU~0+E@J6t2}N)F0y$xr&6c(IUGKCa&r5E_G(|F6>S?+gm$}+vc7+y z70QvW$P*AoYeK<68l7*Lw}&a9PBZME9?*wP`H$CZVE8`c0;hJFd9vQb%7>Zy#<^=S2d;5f={t{_MTAOVf2qqVXe#| zk3Ruaujp%<3GvVU6$sd4TD@7}J4o!4pVP3muvB10^b}2@zffRf_UJR97&)Cz zM?nM6qWFdiLV`QZ7pQS|62V(qUu7Ngv*Q0rHlKvS#XpPN3$THomT=;|ZrPG*N(y|H zwy?0yP5YOkD8!>%BeqAw)FK{USt{9T9Jz7sBZS@5+7GG(ANiIS-v){uw>@VfLZL0;Ml-G-KQ0*Q?K?O?n3aE zgyAxKw;QgFkvuSJP-U~h)HhV+A$nocd3&=lbVnBf@}Ur&w%X<<+_kka>gQ*nG8-aQ zY@|$bB?WlPv15oS8jQ$C1HX*a)515{nx#Y^jp3$Oys6S6%-1tN1<9!Ca6FWiaYSs1 z3;*~xu3P_HVl6!VQR^p?%lu9OycdN)7LhMZil+iRIMe=R9GG@Yi2Nt6@81ChA__9{ zV6cqF`JZsU(^Y@i)4<+|sLT?TN-pcUqNs*)og7Wp)emYMK!lGquag7lVwrXWMnM6g zf!7DeeV&T7rihMqL9rveNT>4=xwnE|NQ`M*!Y>_!25}0qvOUR{ouSpSn0{IvVLv8n z0nX9?3vR^l@VR9p_Z9m*BVJ~6qWQM|z7A`)Ins15FbeE_59+O|XG}5*+a6Td49%zi zI_UxcjH$W0iQoUJ3`rL)iVMd15LPQK;8{2<6}fvAhlfe0a#hg#`umN>53{F!I*C#c|@3<@$jdN&0BsA@#d4%k#@Q)5 zQJg5@IZpAIn46+W7AUSH6p9oGYsdIQ{1#r}g`f>FOevd{gAEeDa)#E8NL5U>Wxt%? zZM#MUY+dRB(?fE=Sl-2E)ryM{(blc=YfRJrcesSVCUS~_0ZhlZFbAl!txRs}Nwvz&Y_v2DJuXskFF`LV9 z%wUIs^(NSJ(0${vbWpT)IcmqzbPSs88IyF{;UT)|WliOy|AH$*2%Ca)Hc=CI6Q0d3 zc|iCkj@Y{PI7_)2n4!JHuE`6Dp6M-KntG%Az;v}iP=ulyA~W=w$)9IV>A|E1heKsJ zV5dY-vC{x}@#po`2YaPb{xTx9;No^h#W0yLwvZe!t5x2IXoNoV&HfrkOzf*HO$rlu z;P>Q60P3hwkRQyhT{XsoyWv@Oz?@?DLtfo?1=>_kw4Gdx-?IKV#@4s>mv^YQ;-Mu* zrbKZNu=5pwcb`H7nUW(|*ohunc3)S}U|i{Os4!(W=qMsU9+LyyW@K+)kW$Wm0KnOo zop+eitkt(h({C3wb<9#gpw^eZr%(kJTSo(qG7V(+Q=x&1_E5!2dDQQ3?As9>XO`@r%cz;4ZFvxUskDn<{Py@_J_DRW>q9V(yBO#Q{ zO-#%63eF@tOvg`07I>5L?+XBS;zL~c;7BraDDiLZo<8yCzzLx1uQJ)wH(IPMjLxx~ zcA4y4q5oVd81zS$*T<1NBV$J1^XkHjc}z}wb20X*s*#y;T=~O<5cs*l7oSgji) z^&}$0cM`CO^3>&h&PQ6TcaG2$v>r2UY8C1Q*4VO`I{LF3u*R+4e!Hg4eEB;b2b#yf zJUpbN00&uEH~v=bs-PK5AYoVv1kNNi$Z}{vSIF}0b@7iKXd{G6f2GEr_Pp=k(8Fj~ zEwVY1xg>+W`;=p0BBjdw!`mPKGM?}{6F?IG?L~l%7M(}J?WM^9_}&XH=-zt?e^bgk zYFHQF^*3E@Gwo-Q12Wk(-F)8ii~C}$=b3s+JtL|a){k$5fW@U01wx!ySlHo_3zHj* z@j3`*Jv^sI6#yBe&awR4E|Z#4v+D9CSHII17WVY#RsLL5=GKRuNgDn4b}zte2~D8E zkC|ihNg$>6HPx~3r2?u&*6Lti&>OZBbJgvrl*KmWZ|oq)Z)Aap3d?0L*)(5trcH3} z=j{tL8D}~6I1V>n0#bL~*}`=dPW?!8`3Vt)C*en)8(?DttE?AF!u&12nGu zvvzwhNef$8>b3)OwF-=+Hcp;MR?UR%?|oF zffR9(%?(&YqZ^E;!4}Tk5bm~^KRKLvJfY1}M@zyj)QD#6o%2kppn!ZI&u1s!C>GSg z>`tT=X+C~BIPPO^bC$yoFy)4?5jyJh&+Y*%2k+_M#XoJ{B|L1B2d+MS3FV@oFlqBR$I@vy z?TSoq44!WIXTCeSIb`)KpPccuKgydX2{NcsZoRV@6$!e}H4eT&Kt%0@kftt~JCRmt zu#?ZBQ*XZy5)+>|{W%jP!4+$q?8NA^;17zpx;eR%V;Hsi3W91{ocjG+DrNmJ+aDI} z13ovQ)9<)?1;!Z^7^Yp0jf?vN;nTM5pMQ`~Wh0T4456`(Z#X^jTm8Q3{fsfT^!)qv zCOfCl_&Bh3ecksZeu|oTtUQ3J_1t+R@bHKUs^1sFYt9j6#yUI|5N3y|xbxhqQ8*Pp z?~4YG?TK75#4`n0%X9(Uia5`-*<=iY)OQ~F+r}+mGN*esyEJMbbu_=sQ`GrrZ6BwY>5~cA;|31t8f?>8eRJYrLGKNMC`|X@eddH(xnQCOFsR%h~j9LDke%l{J z^-`GZ&dol>uc8}UKR8n|;2sWfDt3q7)a}P_ zvz<%3k=H7agz-*&g8l~GLXNk4EXXxC+&uF$EFd8u57@k?$FTII0Fd7$yTGy3`Ub;G z?yeP#Hr>^3YaYr;NYg*{%S?MXnMjb$@;FYdqC$Iuk&&}kO)s_DECpNK4rpX{Z_{+3 zh)MT>ZW=Z>#a2<`_i}?3t;Ya63rma|X61hn<~p|6)e*I$v%T)luNO`xQpRKZM#jHa z#F-2_LOvKUj@2B*k#>lL-q`&)WYB9s0v4g;TsC#ZAftM2WLJlxy`fGzzq{;epFHns zKRtIHEf0tS$Nsu)%Yeq*_^aH5bq!7CctQP5_#-JJP`&_{#%VA*_ zy0xoCYJP>-YbmGl;z(71%|9#A%gv#0b4(=$2#IKTpegNSSsQ-XbfbQxzznnn=s3-7 zC6EBO-B7BYz_mDo}2cTk+E z^5TR44n4U}6y>$DS}F}5pX2vq$9>nlG*i;TsVMV(0>X_>+b5jR-Gk+31wg~Reutn) zd!3F%N+-)XA6<`~5Y&Zdyi1R-$bWVlKtWKh+TYedIB*`=X|CNGCl4d_Kg5|3SvX_V zN|&q3w4et18Q4$y_BgS}o~Y9vV&KV_;^dR|S#pdEww0hTr`|&t1`pIQFk)hx#Oh1l z1R)HJsE<+LVdeG-Yxm1+5)^k%6dA?yJL&0FFuR)?ONu70iU!AMb%{;HYQ###tA)*l6F z9AsSb6`hQHGtAou_#COqK+%JPPW0X+;&<;**~my6O|F@Rq$9ra;7{8vx9MHsQI~c} zH~|Bbz*MaPc-1zvM%O<@;i9f<%pe1z3WLtzRD%ip8n@>TM75MbQ!NBEMBFyI(HSkh z2%Ku+{BKs->rI0la_N4($h)rcL?!Cw3@jA`72h^{L(w;~c7ZnFBLlDVAu|rWy6Q)7 zuMW)l-4h+=>I|s@g>)Jp+VS?^=g;o8>oiHxMC^p8r<4DX3|9=sH1LM)ea!4=6kZT$ zPM!0u4qzYxwDtB}W_C20@BIUV_*Z5v911|(s=n_ss4G!wL$StXM)i&uQz%of=F2SK zeS;SrTG@NP&)ELGyf#7>n*wefXP zu#d(RXAiTb+NP|j5N}rz4B$@OB=|1ovNHRSpT~LTBS(Ll=m<<&DB3p+*O!y-U5pu} zpAlW`bjNf(31=wATzKPrIBUg$i7&JJZ29fQz*xt%J-4&Pm_9iC-_0GKY7okNDTN>h6Vf;6hOZ( zfmlZdVx_FLLo5X64Bs%Ta1K@9pU-b+=?)vBVYss*-dd8`^G$Vcna2XTB&Q@di;azDG^Y~c z`EcTL&8v&1cTQ#u9yli(T3dg?mBAazT#3b>0|x*2IMo?gD zw=&^c1RNvgk4~GqCs_GPW2$$^JZWat=9<01E?|M)jTe4`G(ZmM?XMiiC$W=#vyS?8t>S=GZVI8EF0m_@#rAyVX7>5< zRRCo3LeOuV`Eh~S0EhS};S1Cy?|Wnssmgaz0xt|jXH$Eqf-E2>)C_j;;q@YzQ4(Yj zF||n3UDn=f{-anXQ8#^m;9keYib6DKU`K|>kmQnUp~9H)Bb)~@-LLK>D3w2l%H+<_uL}kMiz!k( zwb7oT8C|RX1oUDLP`8Bh=9&4zBieXtbB-`4a+}8Ms2XEW~!-Zts+@ zjHNIC&1M(hfp`7_h0+yJx(SnD?yvS?s%6e7cn|-u54HzNc#jZ>c%lZ_k^X^jT-)W( zEDp5)wAa=x>;7DIIRo;bLdL*udFQAnYO~XIHoyOY#@ng@a$t&Zdj=*I>;^hr9EQ!c zU0d6-v$a9e#~lawhqx30-?y@|vf?uFDQ}JvZ5p~Jg%mM{KO{CtiHj#}Bt~fvah3@k z&QGM{PxXsv0fTmBBAm(pP{J2*ApmD$qUt2S@fQkM1s6=g?l4q&Z>PDuubj5h$*;it z8b80v1rh>%Z1U;`MT%78(8pi;9(wi0v?Gc1>3YdTT7J)ul#eY&5z-Bu)^o2ecPCVf znbgRkmoPV=TUuPLbM@PoMSnejNjJND2LT5Yw?Dwj$v@12Vp-sGHd#)EnmZdrU|0w2 zh(p9-XZ}LeAYWv%2a8N`k&^Jc-h&it@T<$FBUs(eAojOY5yYb~O(7?wmeY&l^PG>^ zuxR_coLe7&*4gp#BmCfg|4B}A{L1wf)tXfB{?3Zk3=n-ku^|;kghIH0FKM_p$>zp` zfgYlr^NO$CuJDiB? z6z@lO)@*P0^u@N)l!;GYy(4uzHxbYTTc{Ss=6jGNknsa89Ph#XObwJywqv52Y5Cy| z4eR&t>)B6YmV=`cvX5vhKYlQHR5b`0@PA{UoJB9)GrP_hF>(2UmeRY60nkcR*V(UR zIOsLh<`XKAU{R3LdkTDEG*#(f#E{v8XX;Ep8;?MG$<50a!_H_rgC9IZ?r!SV_-0rD zs}n*B0Zfb@AMl%YK)Ijzhar1Zt|0qpt{kVWM#P1C5zkZ{c^B#@@#!J7$5;Q-9`Tt4 zSX^#-1m(ywc%3jPrHA~jdXRm5pQdXkbLymz!C87bip9ootmTohz_aTkcsi-S87(#l zOZHab4FN%pWW6+jU=u0!q}f$iN?+SFVE>7skkx_n)vXN`e+_m2H_We6^*_V>=zxOE z`KQ+}$nHh!W~&-3AnbtUFh%OvLy-aUrPQ(m0Quk@u%Xpt5XC}>0@kL{{&!&cZ#O{W zhddu8JEsR7ek{IyZNG<^o$<3Z{%0y6J&mCZRF<$+tmVO;s3xU=>18-l&OL-(gB#p} z!k!WE&UPbjJ7g@T0wShGw5z5Hv%q~c+k&*ECu~>A@xMR_4M!VM3f#AWF}DP^exIv1 zUjK{*p13I<2m>#h(({%p1M#2-gCI6V2nI*7a+PTDM}v$~^Ry2)saTDFk*>ZU6~Kly z-U>v$-P;j!O0i-TlKN4DYh-Wxtq@9oBd@+OH_-Slg({P!Q%vYXw5PEVUhGfw;oGO1 z&fD{KvCs8_rOU5^4jYY4)V}~cdR_lZ6fw6-tRsf~Te#a4{`b|O1U`pH$vO+AWD$bt zs!UA{Jf}rFJ8!|Bn=E4ovK4kR4s0{AfQM^ zh4`bRYNN107AFM;WY*ITxPBhTCz^q$@p%P-AU%uUQbw3^Nk^ z{U^tpR{(Rl-wQ(UNk>6Tol>gn-Xeq7y`^jWZ{77m4K0JXjI~KA2HYf!W?PuX^oR`&)6S>7Cf+kqAqtYj z%JSf&`7@8-WfhOc&{fqlmqm|CI?s~>xw%pum}YTcFt&^isgmbxL*$#=$g;B((Av_5 zJ{B4YRczzVN5He-vG?z@@UO(E>hZE?B742@gR%47d7L z6bd{rbG>>Rl9W)H6=mruf=ZndK6I7!2qXUd;K4Ooz`X z!GjbNU?GfxJrms9tKh8fNY`~Rt0*q)fLK?lhZRY`e0cI`wUs6YDYDf+LC8xPuH-To zpz;}<4EbO1aVO(Dj_nFwqh|$Fk8@s{TsF+(L ze!hKDx>p`waQD!+C32#569EGL#!Q_VP2clup`r3J8W*EY?^r$#%J;|wc>ylEb0Gz1 zOoWSYC2gtIR99`@JZ*~mETz>W;cW|`xd8nFmY?a}yaK)Tj*$uk{&?g$_P~Ry0!EsG z*xAugOx1S?945uP(^i)0%U?q35}kkUG%=WFP+)XeH27kN#rfWJu2= z_tVW}&ZEtf%#LoMn*~80p2g9$X*D@WEK!~DLY(egOv$W>K0vIm-%|X5s1qPRm>h~J zM+Fb~B#2)?;1{y0r6(-Wt&d|$EOk~msrF z1SKcZE1NA29rBz)SUMifJb!0uflL88o%sJzfX{TZrqx-S%IIU>{yO0&$KJXq;X8!5 zprcX&Du-)kc~f1sQ?IXV(Jq^}F&9ctug#1Dx5%!~E1xi$9%QNNkp=lUxYEMMS1@ph zhx+7CB!5oAt}Hgj#s9OUwTz%P+3pc`4)2GXPE35sY5k!k>|l&spyBxycW0w$ zbzZ=!Ynae-<%_nhm)E1QDpTV1Gxd%MoxD&xwa3rxtTRc@(=aQ>*4|}ZA^w!qMCSn4 zOYOg7a>)>KKCAb<84*A_f1(3sIB+0TCF=;f^MBxmJUX>vG)%=e5QMlC)&-vbw1=Hv z*lxqp@Nc^WDKbsp?*px302OA@rfnoiP&fk>(iG z_{nJR8u=b|!d@}iT&nOpelEo1)u7E&+)v_=Jn95384}FWs$oVzc(zbW1Hd1cF{jSW zxDfs4uSO=0&(GKh-y?dsz@v9U7?HrY4Om8;>d-imd1oOEjGVEjgEza65So2lsmEkd zSOMjlX6l=W0`b;%$$f*C>z8jsw>)L7UeKMZ{P5AiI!k_i!YQB)J$k3@6KAru0#P|z zQVzX8ISdz69IsCN^xolpdWbW7c03JWK~vyn(m{L(olL|v^OTd96Jf!={h;~VTuT8T zX`DVe&~=uG#g!pYG{nj#m#1=Q3RZ~&A1~!xPrUy=E$LLKoa?(>A~H1RxO$D0(BI)N zV6fv)qp>CwITxK)`f*|McewdqQ5jJ3{39xxMFd3n#=Coo7b~*=b5<<@rzd>OvMD?; zMw?6i)hcC0s9biMsQCC6Q6XQ_Abi+y7VO$z$jt%^XNLt-#lzB1V~lk?ia*N-H>zWiu=b#NTHK znYuYw-O(UY(d0UR;yMowqN+EMNR{uPbiVzuz zwR;KrL%N~8q94}zudMcR1+d@HPOM}q$d3&ua{Rv1NW={7`}Me^KFvsCQfY=xG$Z0V ztvo9T@_e>eubaA5Xmg7R_>R)(_TtV*mUho|5CCIFrC1RU#WtF>2!wDAhWQegQIZ|S z0%N7}n$+*Vm?7D39zcyHV7E5tS0Azy{8qgnZwepe;o`IT#7+j?B55ejho8{EIXP9M>|p_xG1SXCSiQ{`}sHGOd!yZ#!g-|S| z>*2Ed1KWx}h<5Cg(p1C#l|BF!iO@J#Gltj3cZ61pv=p6D2m)RhdSgP>DmeX1|7f5M zZH$T&W=X-7hR?&9qFS`2c}*NlVfx@$ymQ<6+YYeWygX)Y5+P)=ul zxM&X12;#x{;b{3g%S6n7dzS*3wmR3Rt8V*)j^vjk4i*m67g=OhUz;?Ik77wludM(~ zRbCqF8*=ryOJH*l-}OYMK%X~#J;1hrWR`k>5tq3WA**S7?MVs&2`MB~4{;7CJ~&G>Bw8EF70U=R3wpGyq=9c$ zQ1;brSp=H*M3=kfeik^{(^*1g^nVXh@4pVR&PH!|`54jG+Y2|a8gohGClT;Tmbg%S z$Tl3c%+V$NZ|g?veYtPej#zY^&?R+^zjgc=O1=~7^d_+YS76=SPdU9xb0tn<-Y%Ls z7>q7%@;_%$798>>DO);bPpM7D!VLo1xcBuJJ-^sUEfCS@_GwqYNt_8hhLa(UmO2A_ zg)90q<5bf|<+()_sTShC)l2lIR6OQk;(d!=nHBKz+ae4F)v#f)YkrL|KZ8D3`$rTD z2ZypPd4Y=o?TY-6SKko>6x1WO(=usrM$nDa;%DuRxEN%JX zUt6DFT!MhfIS_d9lUrgc^UY?7tg zQ^QGCFG`cE__YjG279&H!89WMpYlTg%#w{RM+d_|X@0YIv8vbzqRX zYh^_?>1XL{V3$|sYo>2_sp8PQjM@xroC-j!Fex}GLspVQ3LZGvnq{ywX%X;pBjd%( zs-_ByEA!6_-D~XJt3s?yPu@+1A?|7Os0LW!LF1mJg!^d|;v^13W}wGT%yTLhUg3!pF1G6G; zYPWw1;qC5laP)ZcaqQ0FNJ-PlnM@#6%JbV%tOVd?k_A%19ZE{e!bfP#PfoV$-ue`F6hDBxKO_KD*SlGnRCPXYa7M*l z0?(M=P3qWLFXw9QY<*Ti{}1ZYlEic9hRhDwF&F$wJ=x*%WBp|RjV~3xrGE^Y7#)ww zoQLBxiC?EPiN9bQorZ(R;4{HmQD#OcZ!=O{U%5LotK;5h*1elDwW``W%-I&4YHKaz zq)4~8- zlfpp7e<~j&Aj4XXNXHNZ=Sf4s(&%oMLXh8#r>>qg+g3(WG;}}14W;+_0{&}gCnu1R#WXHIB8|*+uuM9C z!=!Ja5q=X`tuWb(b0WM*G?Ufz5}x=$j6YeP`AbhrjkR*`D@d_Yj+B)#qRrcnw387~ z4lO#JG1T4q)Rlb%EYZ>uB`F8T3@YYmOoj;QN1b?O488n= zdRaF=GWv&$Y4_`l$ksw$kL-+M!5r21Fzhy0c%ZeXD+o4W0_%9ifK0Ra*l#-L;u7mx zys7~MquE#iGn!VxQbQYep!>Kk!3y+59xrrn&z(rw$_q>3fWC-r@-pAW)r*6fk@}tQ zS}87ci;Z7a)A6P5XmvcqBWWKCIPHTO>lxj!fKyC@#Tpb{8M6+p(Sz@`UOD7PG6t|N zfM;A^$CLlo^0iJ)u}RPEG=acp1YXyJU_eiAIP&M5MrlQzp)kw~QmVB-*892uA@G0{ z_tXq=_gabj0dZD`ybI<3`!48cq#UbDZe)PjS5Q65%fc=og)$p76PMfmt}?RvfVsB$ zhtzc3z<@B=j1Ca``qXV%iBjq}SPltc_X{v(ldpNUa%m#4APwkAZDrZ>uh~b(iUUqZ zs_kwq)|pdXlgT=zdv6G?c8HpNNGGWm+YAGA_0n866hYT7{4me#nxr~8XSm>83 zUl1{%`{_}RK^5PK2OfWLJf^iNeDs>c2Kl8VetJyY-p#dx(ret~+4W4B@bFLoAIujY z+_}?CTigttQ&qk7E3;fy*)49X0%kV5u>h^vcrhz`=YlAqI7}iFJ}=Feu-Qiq8`K-* zba9~f-Sk0{9UEIM-O99GbU?DoUV~JkBr!PF%m{ccV13plww^{2x_|2`8?UX8j=;~4 zt^C_WnG;E=9|%AlT|5%$Rf2NJ*K`j)rx zjZ>7u)3LPyq|8>21G?Rb2T3lo^AR|gACf4Ny;OF=ZER-JCZhwKUo?2Du_WdsA$CV% zmDn&qc}|@aOBIU@wArI@9M*qr$RJF?|Gn;Bsly&{(47LUApt3m0y|npAEg0bju>>< z5`1^8KIf3&TN8hz7Rh%}?H;ZdS)}@Rl1IyPNIrsT06~7*t5x*@{nlG2GtWdizn*Sre%13b8t-xW!DPxkA_D@YrY}rF?{n;^c z@2fDtEbH2`+Ny*+a6Q`~)W9Vrr2qk_WtTqzfwbIgU!qNnliJlb4c9#@B>9VKY5vV$ zo3{ewEG(E_%&Hv%!2-+5Wbiw;rjd)w&`na@DAXsa?qz;ozf>r~Cg%@;ikTLN^i3-U zC-I1R5wH1+c8348=Fnc&A(On`YZ!s&sNt>^SgsSIuDlv{ln5H3B0A0;ipMp{o(G}n zl~D9$Zv(R?GC|hfsi9Xe7V~#~`b8fwhe#nQfrvRr=HsVupM-)Lx?>rc?>(` zWC@u|_08tG`LU!jsEV9bMHlXdmd}0FR3l0q*hocH4;>di*KW+dOXV#s}G? z;0|A}jnWV7eH;>VQb4>Mnp7fF0P%va9=jU@St&7!%4z+d^dS4c@#2{{>_!`y@<+VP z(?dQ@!U^cS>SBZ`9xg0FsuIYI)bY;J8xB-?-nUfbh2tC@f-fjZ7i6ERYGVR1FD1>3 z=61^teIHXs?myx!6A}^rP$Yv9slwfV!peoxucFt3qRbo-!-dkbwnh?tYR4csjwq^n zrHM-)yd@iEuChY%`t^vNigi_->>4n{ ze{J(T9{Dued&%8Hx$5L2FK?OrsIva-{eEEZ+jSb4AW}Za9Pt2Sz;pbn!k93c2>@ooj5`}1YSd1;vJwI%y9X(e0tATy(az&c0!7;lg%*4OM8A^ZUy}6ga z`}FbB)quV9O%IH(p$+JJajCqi7kW5x(FeAj+KZ~{DSKuVYsrtj{?I_-;RnrcU6Kg9 zwZvB_G|N}0-Rx${ff)lao=ga_A7mCn9Z&`3jp znT_eJMC75`dEZlN%r10G;FI?cjqGj&WCj25%}1d@BQq=7hTJeO2=!cG#nns|$Z;dm zGyI>Wf%yACDR~Xx<`8V)H==1hC=p_alG#wnvBXSq#zy`sRDU&*@&JM@;bB=Gsp85V zU!G!cGK%N8QyCaDW9g3uB_nbouGoNe7SEq7yMIc%>KF}ayh%s{FF#S0a!b;b{;J`- zmw#3&18-blzFmrOyVaXKU+*b4CZV#+hH zt=+$DAdy06r$ws`#EP9qIJ}d&R13YJaEx);l-y)h8ijoDfRDDhzbgSmAH$;48}nU> zKNrS7M9-Bj;&Q{A;bdjUoxtlbJRR43)u(-==sn%}B{A}!K6Tej%ZZ=s@4U8S^|;~9 zJ)RKq-{@-q1>eS0&i_zeofp-O_jk23jBa6);9L@~kqd=%L817`1qBIRM?>!(&o3Hg z*nk;}xG*0A@IQR>w9Msg=WMX}B=9>WGAaOf52T8w9_PN3x2jKZRXN&xs1Q#?Sqr1p zAyiA+3ev|Juc@!^x$@kNnJ9+*o7V(7Zg}RR3 zObsWwfFZcJ8V~>*>8=pX+a2asmBOHmB}{VClI;L!@#fjhM}Jbqk*F;~M2>@Flm()G zc09lWS&KMYknUr>Z{bkVPZ!OGdx_5)-3%b!SYlwYBy2G4nTfuJtcz zW4`~-xZtnr1@ORS3adZp|0Ug6JxIqtu|e;xcXlzpTm^kGy@P0ufxo4TdwEb=LwFI%;s+X0hI-O;Nq}&SIb2wOLc)P^-cz znasoEAdIGAD^V45N}$=3$iE_s@g@~u?S?+z`iya>;##DUzQGMKC~(C)*&+ufX(2}2 zK6lCZK<1SP-6L{8uTkCzn2ghE{!SA0h+#HPc~_pIXVtBupDX(KD?1~!oxX6Ze-+ud zH;+=rWPZ8USQ}3Xr}_Nx#jX?4`DSK!dK}s5rN^MA#IZsd-2|_2X$;OW{G7EcD}RGn zvFv@gN4rm$-8u@Ua|!3cR}vHa-o7#D#>tapY>Wo8HH_t}%&)NXdn4g?a0N5xeeytG z-#?7xn>MxXfT~B5$sKXi&fD3?Ap!@j;bX8_0+I>Vg%lY%j6j)Q%1ECGc3Znf>0N^V z@Ee>&XC2aAo?$d0?oxx{)Ju%HcRCcu>$KW`V;>=Zl9)c4m1~fv)m#Vj@eh*bmY(Lj z<+6wDnAMD5OXG)h$V%rl^ z-U)IMK0EvX#9(g)D=F%|Iu6-7M8~l#=Ze3#gcLf33m3rtob=|@7j8T`P=g(a`^-K2 z>nB7CFeeJBth(hP`xs+jpgA+jr+>tnplO@xb3)=z9gtPGI)eqN6y&@;^b2II-ab2X zds|$Xyas46eSzR95^#=)Xt%MgUI5IS^+bN+9}vSn zf>y@$PnnRJs*rUi_|aS0EtXT==S?j@Pp8B3usoiDOAh{elCt7O%Fr$CGLoAoKk8^; zWQA`ZcdfcflUR4jn}6B=f|27x53LSQm0fK_^2UqqY8_noYQCGKo>FrVqL^e}L9!Ge z1OGmD{U;aIF1__p0P4#Tlu&fCGW%iODdNLtrY3j$?C$MOSg14 z(%s!49ny8)t>5=M=RD87&%OT%><5rN@64JtYt}g2bmr(IXmYmVC4DO2wi4VsdAn?3 zB}TS_&=$uv>5pEgSLrw@3S4B~s+dY;BCfh!)$#~?N_TR{ApfryfEuU-yh9}joC{VF zWG6#k{kDY}HT?-PKDAnZP~fgOlPBWCG#(YQ^Cm>Db(>sCM?Guv<^^2Orwa65>yg*| zjQ6>c*MDvc^X+fzn`p558d&Ld{gM<(O(=vdc>nB>k!3B=DXpeeeV7YWy4vv4o8TTu zj<5DN+CF5UvqJEH`WZ8qf7&ZdZWpshlFNA`LumpPrkb`Htds7*26IgYX-+`U{+>n*T)4*h0lr1(f#t8fknV1gw!B!tYUm-(K z<4}3$2e`4+0=LOMGx_x;m=bxpBw4`OS^(0&gv~cHB@peK3|(oekE|(bIGlmAAXA-gdfuuDs*9m62L@?}LKOS zuwoy0!aB>5n*l0=!?GxG-%0ui0&d29w4tM=#r3Vc3nTqBPQ=Mds)dUQ{?k|j_v~hm zp9iJSw7-dN^?G{$DDWD!U0T`=%T`ACe0rQTM{;-I)XU=_%Y2}F+GFDVXSoK)SAMhm zkc{OKHm}2iK0ZH1=ccUl`W4UB-h0a)h2E61Jl0KCMp`&ny5@pS?6MP&Y`~zK+e)ec zRkADBi#2%xU6hx2@v6;{hY>0Ce7o14SMx^`|CwoV%9^rJ_HAz}0|Vl7kJ4l#%Lk+Z zScr>j?VH~$8(yyl9k^H+80S4huXq#{1_~r2K`@0fB{&|BZIHmG=D%__CD98C|tNy?amCF&P!;#*7^?oNhrW|)u=>&dpq9-fL6is18$0IJ{DK3OPS z`E!}!%_6gMCAgI|<2cRcP%Y9U(Pwz<>pn)@wJO_RP#QR~V9JZU`qpO9Ev~%AWb};T zHn^SPLH0wpV5P%^CuAW1PU*jf?s4uaObJ5lHjDq*K#{|2=lza+}hcgxI+C__5)6+PaK@ z4jf;+zGhBbrtNV%dYOn~5;A?U#5Pxk*2+>P<`B4`=t%8vnq-&hGvh#jZNWH}ow)EJ zd}*6&lPe0TtF@?KKYM;;m$Awq|8vG_he|bXHkbrNQlC(O?!^R|fVWwYa90hDdHA?j zrmMqi?hH*U`x!6XX!8g3p%f#1BEc$q%g=$3jmS|6n`if2J*S?9*8K10`;*u5!n)b| z3-*c*=1{tL@u84%8uea(YiuahwJ!vmk9)a}mQ(tqu`?2WBpu?&v#fitEmHNjxm_H8 zTT1>kuzytlJM!jj!Nq;!fh~8leLRS)UBFQ6O_?NT4$FMux9zCkL~uh=$F1nq!bT7LtJnsRU;<-UMW4x`nam`n(^k7=FQ;Ut6p=1zB&@pgcms9z3?c_!*ToR zyCG>=3jAac4(1}2Ym?H;8Da9mj^38!FN%6R@X-;u8k^1JAaFdZBYU={SrF6wPQD?yA9>gn*6K<{l`C>K z!dSMw6){FUq1kfacBzOAU?)$7hYcBpXTP?WX)wOAtq|VVZd>s{(60R#b&Bb(r#V||Fi)`|@VShh-oPJ;e$6Ca|_Y5$H!w=<{;Pb?(qKT#hZh0%bApcls zeO_M)vZ?i2mCDumELA$o3fWW29-L6!R6!d)mnQ&uAx^34e4GI%I?|S-M4Mf@cufAp zLL*&8rY$Z4*}PB$j1Z^UGJHm=&9&mo6`-RMjq~I{bnA+NQ`i6gT(Bja(}}&2(C`GjG|d&soT-- z2?){cLw)YjhYL`ENJ^7TbrqLlvFsLq~`l zi#lscpR7%y^GXp*Hg2ZEDhBwaFGdg(bs1Qw`u^A60%|32ftf{=%zY zky2dGa@YSeKnRy*pJpanq67~N2a4a7u6>Yz@&VQR!p=Z$p3$74hLpPXc}4 z@=yE;5m58YcZNp_jv%?}MG|kGJu$G^ZA3LSAIN8tQ&Mtt*0nJ>HcZ3~zRkjbQ&@=A zggQAOF{#rKjoJt6uKH~;5Q@Ep>2zWuP_EqE&6h0W!p!MiZ7B7wT=%b)GPQi1#R zP$>0;;-IBDBbG_lOL0M1?%S}=Q1=(C!wmg~cvQep(H#%^tJDUxe6UXxLV7$#vdmw*PTXmg zGW$u}1`pQh(w(H7qtzNNQ!A+r+H|gc-y@#OEG=Sf@%CzT`muArhZ!R+b-SUX;`~fw z|Ie>Nl~0DvjCyM(I-f8#!twGZYioo8C>3Kw0~rDRST~I~-l)v$kna;IbfqqA&BnhX%HahAfMhD z8*7Yo!1a?$YGewpEKhAMhW$Z|-{W*v6(ZyR#@HY*B?fW{^ZRhUP zDbLje{_7#R~5Idra;_k)@P1 z2k=s$J#LeXG;nr2V@XC`3Jn19bnsP0l>bREQ2%FwS+H)??p0oQY21C)uEdXy#Me4HEdMIGQ}Sn{UgkY z>Yn%VY3Iy}K!0LFw+fwkIfvhBLeG)i{REdD3|U3mPjP#`@vhmp^Q}3xoUw8@6GtpA z6$(k_%adf!v6rM3?)CPH%ZC@?r#4F(zL{u$lWgZkjp)O}!&Ii09XZZqYON zKi{IA;=GX$ane^AOy}rw(&tl7BPDVKLL+RTMlD`Vy;eyGc=vyzh5-p>c9ds+UYX~^ zP4~U*__fo0tu;|LD{x=9lvN`?CQ5|wmj58e0_(Si_GeTa+%Dl!GxOciLzrQ-I=LzdOboST6Aq(nm0CnIIx;549%rSPTc}hg%HUX| zrXt_?5T77$)>x#M2b$w28-@3;!YeF0LtDLGm9cY-k4Yrr0Y@GydJmV0=F~V4T2;Gp75;%Q@8Y^Tcw z2nHlv(tp!{1#;=@SSZI-;Am)4GdKiS1I#>}kO4hYf6YGq=Js|tQ6PMtUeC9x>YOv{ zLqiz@5QG*1f%h0{QXje!@I&ES%GWIx`h>HtHghNB!M}?GtP=gH&rK9yzfRy*Z~-;O zefi5E8Yc2Kj*|jy!idb4tKNJbHzl(>2 zi)7D#PEl`R8uM^uFOKnKU*jkz$4`(kFP*Ffaec}fN4H5|2=l(BOZs{tP>&QIJpi+v zjA6Uk`5+b%jk=TokOX@0hJoG!`4n-nu@TDK-u$kJE@KVV`xxna0RbX+$NRpsATJbk zXABlxr}i_-_)lf&AxSP%L<%E3=MqK3M^f8VeUkx?0Nk{X1B0GDR50jC`~1bBIIUAY zn%oulu=Lc-)B}Kv_WVG?;q(#Ja)aDd$s&k-%=?kd4@rJ`_q_8lT@F#pQ?ioLR6eJ9 zE2_zom0>Kp8xU!i#lDSzOEKnXc`Xz><;HrKb&C`d9s{GwWGRJ;CD@toi>ry1IDz3k zfJ8*Vdut9nrYPi@?){+$6adNsJWyhQoWNqIGC&S|fPz${Q%s@WxIj^&utWwFAg;lr z6zQaQj_fw8eRrXXi%j>9FC$2*YN#=2zqNY6q0z%G*0Tzn1_-i2Y${{}3XvkVI+p4v z6rI){p2vBI8dFV~dK1R=(QH=-I^Fiuy=0O4EauyXSDNV{H~=y2;Q4Z0r&6XLzpPTj zoirK6|4*G7F2~Jrn-SLSoAyRZ5|Z6hM%Tegg4v1ZCoM%jP#B{v?2+>(^2u}Yycqf{ zu`TY}<{n1N{BZ7tm6mF-bkp*?SC0{iP?fVHgP>KR&d2&bd9IZqoRiV`UL1v9?JHr! zU%rxf&}A;GuuK$iPeQ4W!&+Ptcv{Ktb37yTU2AmnD2-^dEBr!Xt_U}mKa{6*f5_2d z!DyY87@0cfa`;}!){5rOmB-baW#en~AsWSEXNNy2wLuN}B;H+JvmJw)^VRzS7VAz} zBlFAV1f!Xv=U+|2F947a_*~$ZNwC~E_H0IW4#C5y3Co`dWNLKZ*C@e(YU+Rv9 z1@O4QLnVnSXuz0XYMY`(EkXr^;@t;V0l*M6fyTr{Z| zymQphUgei7bLPgBuH@yZRRto>6^NL;PhcOGC4tV#ejLwKj-3Imi+3n&-~Uy&r0?HD z`lXkvj4sWFcEBs`_Ij%3c`l=X*oA9!72E0@=((4wBzN+-zcLf^(6k}_8h?LguwIUrt(Vtowsu>VxZi6#h6seY5ueMPWo zgzhzE39KTp0a~-K=knUg{bP=w_dfLk5F~)D1Z@IWoBiE*Mb^$Qn>8yE7l(NmJvuY8 z&=%M%Vg7J9ge_^%oHl>V7N>hy^XsqqI}3C6-zZOy1Eivj2Ue)>meZhyR+J>6{f54pkE&_X703^D|`# zL4HQi$YUA^u30P`Ze6XnnJ<`q`|)Rpli>atI?-~qh4K~jOaf+ubjKitR?d6v6;A)p zg)Z<0T=Qn3YakWa-PSP_Cg$#i8`R4sgjAhzm;s%2pfs=}Px%}CIrh&n7>?W>Yoi88 z1cMfd;Ym_3XOO=-@>utSjHJtZ8kQv3?4`%xGIlOS7v9zB6;#X4+B~2AYTeAKmDuex?yxEmy2Q@Jmm-W{#K6eRO4i%JKFK7R1G!nS7fjv;| zxpGh1+zYi5$g(kNj!=i0@8=t0dAvL1tsloEFc>Z)I5QEks(iXar^DAAR{4}(7YDi? z41=J@1xocsp=p^;ft3JfQczgQ|J?R{gonFtw%sySezfVy zSy;YN93eTeI?z`fBCy7DQ^;P5W&c;`Uh8@=aSCWseu@?n7g||3hbT-quDMP@J(BHj zQ>MVbKQ5fPJSLp|A5usO{I1Sq5O(|}g>8LZStw-RnTnJPpa54nV^-wvb^1LiyGkG#=LX89{eCV$bi|Q1zxpF>z%6A0n7bx9O#fa zevJ)To(W@0;JamvcJQ^GEes>gEZb!#wjLA`BHf*%!3z^6HnWi5>TZwVj+P(&K<3=| zZTrU6c^kzBsDM!j%`U%9TRm;nxQ&AD<-PIzrOg(h>kSt;;^2&+9LwC5R1v?*9uRnOpkyrZWCzN-8D~dD$js66&n_CKfup|*3#PT(WOs+724Og;Isro8YO(c; zcGVYf6Am0~VYgY!S@+SiOi_~{k2(p?D3?xrkTaMC{DU$MQx2y?fQTtvEvO3vqarE) zOEuE(h}-@}-%Ub7U84gqblO|Qzqp^iZ-=X*=+|PQRHZ5vG+tVpAICpiYyaghDr>tl z0E2c3s+ZHA|fKlzHoFwqkRbqjrxd@r(=OJ zz~QPX?N56);OkITSC?2E9TL(@JcgcVKIgdmjKmHD^P&4l#l}@}x*$@|H2J3Xp2T`2 z8lP|T+1(`|FtDq?AFHB*?oWoohwqo_vOcf}D~;aR$Lr9Nz-#)5PtO2Y=GM&i-{A{8 z^4@Q@$sJCT^U7NbZkRsadU(!0nPT{^)?64@q09xCFz+?de+L3 zj~UL#8*ZaYQfcF84^9h=5#&Z=_K2Ei2-kyt1Kx#dtP0(T%|C)?@K&jTCx zZ$_sGjzvY6pr?QQ!C48~FPDUH>Jo*azuTd-i zInwiovLTo*_&FBwO$;XBPE)|=SI!4J46KyyW+`Zt8k!15njL5R#VPX3MLKQD=R)ZaT7-E)NIlZ%iNsNHjBYq1p#~riR?|E!u(GO_HG!8ol z;xy{5=?&7U9Pd|Ko=FrtoL9+?m!8=r5^H-Vy{D{C9b8^R*1cZedU-)Gov7&n{!@2N zveAytOyG;joq)wNGGHSwPl$~qN9)^mcDku(SY-~KKM6e214zEj&bt#o;~k>#J$LAJb7!=xLYy-zPYL6%;zD0($}KtYhr5>AX{1JJSk(X)iUUa$Syh|fv z@WMXysqx+#-zUT25d|U$twh`6az+3f1%0J|PX>{pZOKfl00FLrJ^}?c$mieg(ed3* z(-4~8qxETS%CR0Hd7(yn9?fa3G<%|FW@>w&P|p=uBt>~Be%8?VbFv&aZbFhB9vK3dEh<( z?&fCfx>$pyHhhw~asXRAc<@~ZwKLwd^%GD=tcn$>pR%Z*BCB2<6XiC-(8hxS<_E~R zy~G2RVu%QYNR}SLOMyaI4{`CnvEeL4jLhumqaS@p5LQHTKXf4?ER%S*vf0XgJ!a{E zrJ%kIi6=9^ z9g>+{?3xFxr@EMsC#2I^5P*vgdugG<=76OVhs!CE@u=FsJObVfzCZMH_dY()H@{6{ z^7DH|@{iq1>c}UYzlYIT%vZu1By}ouc%X0EzUTXN5;z`{ApNnrvmgZ==*N~*Frq^* zRk_@r-T>Y;_a5elDkJGU`1`=2qWrMkYKwicH5qzvJD2%?%;ydlr$d?qHzdvB61lnK zKF3Yc0I#4B-YB%UF0xb>D6XFgfhqFq{QPQ))BHOxEXVW%(7-AQ>DmM3Sog=>o+7IB zmmaWr1wisdfG6|sq~a&_A;pUa@2)o0Xtg1lWS|_Q-vASP8(CIQ;YoU4qCZ)ssiy^V zcPd3u%y4sMFa}3N>83K5-{sx*i3LG`1c+`(Gux%sgEb-a&C<0~P(t~hNN^$T6h1iL z_XFbmrU8fLCKyL>tN}(f;PLt4GH#`dYz!hfc70R2Br$M7n2N{DQVGL@M|+@_-dN?m zuobSW2J&q$<@o%q(P2i(T(JBLBvX9^oVE=<(7vC*dl%aS4%9`qBBKtYnTYuQA-dkl z8Yn?cM)Ie6_(ROY6>-PG*E8{k?JW=uqW71R!kNcEm0UVPGpM?2`EPhZK<_jn``>9- zOsq3_gU$Igt-w_pl1q9K_L8^(C`)t=p%%9uu#CKS=eAyn=z6AxVLvNCx(W=BF|mDd z#-jY_n3#cQ8j`uQ(l1u&h)puwr+$IMw#RprV34#wj<;Ld?jgSSSPkRET<{uo!&kd` z5{<{#caF5}hJ?>tHDGTsPa~YMWbFZ5g)?EW>B?eYX71_pj_w%{L$=!So;Kdz$}cTC zRX|N+FW+32(8~2n_|Uh5D4h4rDn1S@s>^%2u4p9hsy7b+Dvi z9aG>I;$sh9q~LcKMc>6zq$UECDJJ;P8!_&UaH2nQ!1V{#*K2er+tIE$hJpM;apfh@ zfNIW3f**&Zv3E@#4KxM7IJPFq3Taxq|Zuq2m%GWF_-RJg~S zVn8^JT5be+B{CbX?bD~IePM_8bkoxsorrEWLlQ^@NCa=&00SdxvzWC|{!Aorx|ZR; zJ*Yt+bK@On=3rq2KiEL|1JZSn!p+hXYd-evyT>}IeI1k2jdr2g#A>6jVCY2m(k4+L zUQ^LC*}6=z)*oPOLG}_-G(nIfJx$j$k^5+xlP(_w`&2)2K&*rfkZi|ciWEvh$b|ew z1NuRc?zRaee!h(s`$$(^y`Gr)Rk}KwytQa+XPE@t11be-O@|2b9a=i^`)kag`g;%8 zC=+(s?)7a{q8>>3Tq&ak727YXb8UM1>T#o`8=%H4ya8$qF$8WNzxaQqB*N|<0FJpiMs+Ju2mfbjWwr2W2d+^3+GLC@ zQszFM=xs0XYIyE`HWKA`dF>*Oz~TwTKRi7dUJ(?V(t)|WxE4&R;JdOKOXrHv?+d%U zPpLuMIBtSBUCgCK8_616ep#w|x9oB(4EPY(@kMxfy6eph5PCev7c<-44>{FZ zEW_0p%j{Ym8(k&huB^+nb9*fCJ031%q94N|PzXXfhVW;68%3$u`+uf8m83V+Lg-~Y zJ#r8A%m7gy)Xy)S-3ut58Q8hD5Yv`_3h0CgOrZ3UW2=vb$ODAQcP$AHf&CC437Fav zJ%6rU(hlY#Lw>9P7()Smk1?asUV!g2hKwqy4eG2x#6Mk;^n)#5WUyB%1Y?8329<5} zq|`s}AT(q)B^h|QMHWYYTB^T&rF{PhE(Jg@6qhP2_O<0*hQi zzXFJv$WU(BWEh^#x=M$lvvFxl*=q&s-jmk$s9h=)!UFBpaRs7yXR^l%4^eD3Po+(N7V--@F!|ZYSodKi6*= ztBuvr_h1(|3un(iI(oXxsQOX?n<6#LJ=56a=i^JYX>_P;TM-q~T)EQ|oSGB|2 zizyrJU3n^AYQE^Hgy*sy@ETL%P|Yf-;^Sin8WC#{G4i67o!lv#G*NiX?^F8LY3kY-Qd>n@m(0P2dwWBbyOVi^u1`Cd z0F8C6AqhWW3z_7xwq@N3jc^;gLJaxvB^v?VZ7edJUo;eE2i1398;QeioUgK=&*eme1DrY1tTtGsSKmuBM zh2)|bELb5v2hoGcBlGkx!@+yKL||sG)gE()UV);g&*LUsxYIkgscNIvA{o;;JB$WN zwZ#SQl&59jR*mU5{({=k-dUg#HM+1r{*YlP0xKEhApv;Ik?vzXT#5}77Ag0u*$iwV z5#lohejAJ^rV)OK@&C$gm0tb!IpYnDmdP062<*P9Bj-H{eYU~%KgGjxK*2wGpPmfV zSN^I{X5iENOE#!d|B+4v*gG@dzC2?W){iMJ@DM|+Zd-`jIX>gVJyI}HU0&}M<8pL7 z$_kIZ!#3dib`Ptnz6i%=wzuA)ve92n>rs7l&{wo3#u`KXV|%*A99GGxN~o|I97({) zr8SnG85{NhG&3~}8j4Ib zDXsJQGu9KDK!^Mt8L7A?9z7JFsv=*Xh(K|g4- z*ox-tTz{A2snY&!rw>=6d1V?P*OJ7#I0!%Yh4L4E4-8G~w_r>d1F?O6cP)U}qK zng=o9-p1ktJy>aj#Bsg}vC{LlV>aRt?7_th@PQ?m3<#AhzS+;{NUw7mzi*n?7<3?r zWmr_O_r~(|4D~WM?fpIUp(X)2#!bbmF-IfbR}bmuu)6?L093hh`L3+RQQMyOYiADC z=3vVYinDt&(`a|&ls_s>^{f_>T3~_k@iyT958z`K?VV5HGD?68Jly$$xlH~<5V+W_ zuYYK5OVnS}t~7amLL_}G6Q7p>dT2oRIVby@3{+n6kIiswe&NN>G?>P3gKBBYNA0KK zdspL^=tuiG<=|YG26K+4ry>l>(T*`jmG{t{_fjJW7gZ?)GwA&{z1;<8IQ4vXWqXSt z-njW8C82;jV5UPd39`hc(&ZrMW?^86Hxqm}N+h?E`zENKGKseE|9@#Tf#gz@;cpNi z4f#o&{n_yj<3+PsA_Tc`Am+yp5|)PwR-L+wO64N?9${0qZzDF1F0X|2?|(MXhXQpm z8yNnoR$CIT2MK4lc<$pFkEX-X)7x0CSEFAa&h{TBVDg2K^729eVuZe{{Yu-15l&b4 z$4djx(yR>>BVeixX3hSN3~Qj~IvV}X?=UieY8?S%`qmdRNaU_b;q5}o{&A`wTUmm~ zj0a@SWaxrZAAB|JVCor-n;4X1dgp61XAc2>i&HoLjjFXoS+7}s#A+*ZTv?lEa zj%{vqI4f`k-nLHFDUxIxL_%`wToG~E1?$0o1PcMXdIOv-ydTAlSN_Aa3#1(zf2>UN zGnr>bi>5}N$N>1Q2HCUNl&Rbz1TP$xw??INf|p4on%q@zx8r9?W<7JgbNy32lF)V@ zidf@-0x%CKk`(H>AGFsyeEg}&2mfSLKOzCrDV|TODxT3W*A{Tlmhry9?qDgOcwIz&y?*re zZsQcf}x^OD2yH%&46`yqn3)YLHGUcB!5dhi`u5?%TR(LCxuGETNkJ$|JyMHc>Jw{y)VKXwFvNVQFYVDRg-CbwfLz z{+nr2NCH#;q1asKCSig|WH2}@ z#0r(E@;k~_$Q2XB#m9#fB{L*rq~++6eLDE|ut&y*pW4&#Y_(x7Wb4;73O#)aLi=Q8 zrHrf?Z2A2{QnRweW4xMGSE-X%6m;U?a&X+ZOjvNhOOVzOt>)h)$fF59Z3=;mM+lPA&TmG!qn=81Y8B5NqxzGVO zA8n0%cvO2D`mtm0Dg5XD5%dCEO9w+mZUhm;>R~9~kkF{XbI`~#G?^c$(8|F(aDUic zALO;}itr8|y(g5`;e5kSNa`2XpNwV*R84Gnt6MtEz=mkxD&QtgG@!Y@x6ht;FH3s@ zWtq6ocrO{};2N={b-pk2TW~0J*{dOn&pneaVo;qM}4Q=iaB9v%C(M)kgjWNzEYA+6(=S0o;jKGu;1+`pU;S5F zDXV4p9meVKT8)MWCo=?Y3#I+hNc;Ky_Z!lhf1rWIMb|YHScM~$Qts`?%X{Gtg6!vX zN7j|NL@!I3kqLwz!RPFGqEJXi*RgF1WJOyCj zyK<`q&7ce_UdC%>_~yW-n@a_Vf0>2p29mr%yY<@7xX0zL79RaOf?DfUWaoM|+uOSk z!QiN^1IADe+lySzrykV1pxh+9wuheS>F|bl8nfWM*JIEuPE7fFMR^paCs7M_VX^I5+Z zJGp(R?~~Xb9~4yz+S%E~<#4s8<dWV69k*mL$8WJ7d6-xaX5e*Y2EjNFn zX;v=9t;0jScW5>4;;DS+#Uw>SUeECCUD5uMMAh9pH~pcX)&eO;hmEzp6Q?xb7%Nhtq8EWtg~*hMYXa|R3=Wm08EJta0MXS zs?04vr&L3au0?LAnG6cKgWv}Zu}rFMuVy}`uRj+~l&<=`=49uieym6*SpWw)`p|uo z!r1tKR4&7R4BpxO;4m{SS5rY(O`ur~jTRKUj{*6|MP3(E%RHwY~p=@~2L2 z;YlMjXxi`Y?hvnj{667KrOnRW5w}hi!=DK-_?B^_t}ThV4z~r!OUnfC_yQGTb&6Wrs@nSViF_~Q7yhn(S6#Ipx)8Y*3u#^AJEP1s*+IdTxW;7RY z2qqdK{d9A9Nl7esX8Xi+`^F+G+=)57X#U^?oG2tDxsBvY^Or7_ z;CC6i;>`5C8Jf~B`b(D*(1Xjg=S&}DGq7#zV9sAynF9?P~O`W!kJxzjnTt#UGpo%^a~P)>@~c zPWZFl3<)mfzN&Z7jrfy_)q3WiPQPELR^oL$;FMV^foKJ|@porMvw(PZ(c`W_kGCQW(!NI`=;4H+)R|gzGLM4C;ngY*uv|0u-y8_;8?#&)GV4Rm4(pqY= zwR5Z@dv>fedA?20AVsI|wNib#$#7q&(xYCpm*4L#w%?Vwvzk&>+FYXqk05y=FZVS8 zp5RL$cH;P;`~Vv{(SHN66hy+=ngvYTeUY%rjEp5meh{^cm$1Oc4x z){|kZoXNietpj!TtaASmYi6p<9uuYH$!}4&pf_93VXE3EfkORYa{P zHW-6}3clNVDt~sp-o$(IfqO{(WwDb4dZM7`83g1X-q)165~4Gonz~r$a~BPN<_%;ej{=ZKOmd2 zd-;+8IzJq9%UP$NX3I&J6l`sDxJiR-rWc1zo}QOJ7-j;N8t*)(uN}L)(+cYya#!l5EmJ3}5XQ-(nH0=XGbIQF}%OzC;}$BfZ&8Eq2(+gRv%Kz z5)Bvh5x7Hz!bCq3KC+|n@XoE9eB&)qE^pqK$oeV@L(=J;KeJj3-o|wi((Ro>meZn^ zf_mY(FyS!Wlohh=9{1<;O9|BOTOR5na}KOv7{hSzvavj5^EG`10XHw1MtH6a@OK0L zvLxVKH<^e&!TOs8%EXzrJ7c=#UOaz`qZ<17*D9*PG6A>PWq?%i09`307n|`veVk9P z>mqz0fXCmbO>uU(ZoWLBIgjBJHR=G6Be{cy62P=4U!yF7C*IH}qAFaS=1r7IE-6w& zHd5Ff6*__r^D)VwaGG`~bfhFAer?t%p6|T~n>jV#{znQ<;w`>|(IBj3ib%hZR<*}H z0*5L-pZOtGx^rX!5yV9m-L0Kb^}n%E%!e@SsIU!wUuPXtX_& z2Z#!F&lPY`CDMoASZQ=Gs8(;>EseUn-rZrgwm!=hWph%+I|w~GujdshZ{l2x6)^*u zo=DKy2weIwC1ym>!4nyD7uMUkctFWEFh1TGoZSjNTw|zEg)%}*-TBkii8srAZ9)q8 zbDCm7kY$&u<#Da7Xu8e+ZxwZFz2Z(Z9g^yw4Hkv=DaBwXGg&j*CBbav6!Ri0EfIGd zGTH0IPUzdqe|m>Lg$ zVcAD2jyakjDO_{q?p-Z>^@Hu(0!^R3vzE(4;9|ih2pLTtcbBc`Y{GVTyDdam4Uv#B zgP_Z7ZTH>%+z&5Vs$54|l2ADwKIH+qYIps@DAXtB=l|zHk7kMWH+5}fWMpsEBJJHz zX7;_;#_B$^!MRD-i_?!b>dYrNw?6aw9$o`~$o$4N_E&{`A<4F^1+;07AM>XTYb_@- zDh(#jR8hDS=f)ccRAq=aeKfP!iKOyiq*i^C5nLGUSJ+Ky zNYNI`LKZNgnZ`y4^q};|rsP zxU0U=JI6v7n$FdlSo-6w`wUI2Y)4@gsK;*uLXDsXN_~T9*wX3T_3CC|z`MD*+XHiV zm#WhsERP*;R}r|kDw2EP-M;z{sBZ+D&zeADy>fgXufd=5Z{;JH*vBREd)775fMd(2 zviIJ-`}S>;8?wX2PQ**_2378!1b{W){_dneIbK}As^vvn zu51M09je#|&W~X8^mVh@jTiUKZsCnEbU6&n>cZ-L&sQ`mV1D~oW&uvZ$v)QS**c9K zFCOE7a9j5(F#~WEAQCl~fr=+Z>|ezItmlV^*b2d3oJHS#63o7QsJO(9Xe`uFB!XPx z*PWl0J^vUr{a$5IlqlN)s{d6LVvh{PS9_oBYY!U9|L`VU2+JJy`)N=DO%7-8xo*AU zKtT041baI;$>lT7iW3}nzZF{jmNQ2Alf^mbL0Rs9QTA3rd9A^=Xdpkq-Gf7r;O_43 z1PBg6g4-Y5-GjRa3GVLh7Tg_zyUU%dweH!w&fBTVOR5rhnB8BG9zA;WL@jT4X_z;> zT7HF%ss<$XcX~7k?HVqD69pm_ZFkm|r!~9iS^n;HIXbZ3(NVsW5;m8zV|Pz?hf&L3C}Yq*}!*7hK-9L251i@X_=lnm}& z$Cbl~q(peq6Q}hp)@lU|;xv2aEV&usISA7?FJ&m6-}6`uJ`ZlbKy>ORwba1d6m3nR z<$5JtVb&`dx83@uFb-_;6&Iyt0()+6LKv8R!&vmni}Usxp0}qRqV&zw?%FCA5S>v| zmgzE=e8%n+y!aKEfv%n-oqh^MNq?jla45lXzVlIz$4-GJX?(AmENiLV-dFfM84#L! zrdOsT@6gJo^^VjUrP`jKstK2i6F}#HPho{MH6e6_wOMCn4+bRs(79=nKLgU|ZfpYO z`3IWYPX`QAAVXU0gIlmMrw@;topMtK=W!1Qld zThd%QMND5qixPw8TN?S>_(ntGO*<0Efv{bJBt-#d&-EML_hYw2w%{U*gTlFE`k zZhF&|f%EmZ;k_*KVe<7{V3Tn%N9ScMGPRnm@GU)ozD^4jzssZHUWUjWK3ZUY#9{WK z!gqm>ydEzfwSGK}GFVMlytudf_lR09xx6c1^IRvL!0bE{n0iSqr2YVO^O#c4_(8x; zoW|1{bF_&`)BjAX{_~TR0kE|gXjKffarXEaS_F`V!QLsbtQ*$O-&K7HSqn@?SXWM$9y_@@Q^;J}7Ji=fve%=8d zXfqSito}DaOn+*5o{Rzlj97=bCWMMLL+>UJHb%)8B&bk3)J_bGU6gaKjDO^dP|jj| zbzvV_^hCeG$m^}qi3Xzcm>7SL&=m+5(UHH4SD-h{Y;i7=4UxVp`vQIEb<DmXrKB=~&N}?Z$k(MOEgAej6-f(3RF3{D~S#I{voRPr(FzT0@F7{`N+zsS*s-lN{ zx~FQQgeY_J8YAHvJDTy1o|2#XDqjTqx!qkaVYE!I(I2Q&4U`TZ6lC0n0+^qBAbT?d z$HhkT(@_ataEtq1f6^;wI`h``F%8RilqjNBCSSP7X3aU}ZG20`!j#2zdJAs1x8Md& z*p`On{U@k*Z?h)gDA8$+8$Y~+4`b!^w5k9-*vDS|b2HP=HAnS+btrUiIxA+g@h#}sg zFn}6IjQD$!HYG~UE9vH%>)vY1^80zZ)EUvvqR0Uok1p$z~h?Q z&DzKJ%Wgj)GRYwCPP55Fc{%_Jgw@dsS|s;svO$E)U_R}-9q5{US#<1E`#dHJx}CG- zl$9aHN3H0Bw*zle!alGq!d=_hDdE&t_$dnbg$b*-$%2E)8V93Xo;I<{Jn&D;IhhIY z;zpew7On9cE0mIq`n%kik(c!4Hn%_kGz5lG_f{BvX%U(9a}Q;T_$Iot0s+=rO!m`5>RL++HAg zM`>LU>K>b!rdWheiJu4D2?>5f?o7bZLxUI21NwVpQ9`@y@BdhdO274`Q-xK_jKD%w z`6Ik#+N=uBX%xY&fu%VTU>-MrCLjg#?Mp`0Jw^Bh_WF{s7=VnA!Z36H2s2byKD<_9 z^6VnUp@sm?J@~VERWH-?9LNktYni!FubTNWS}e)-W#8fEH(}L`JJL(b+;7vKae!{#`J^kYC3npu4y0>gfSd zP&jUdX$aOkpQt9KrdCElWb*R1Rv3) zp`D)7?g8?p)sX;f(U@a%O0Qfky$UFD(ZXGMU;tqA~pv{l6Vq@UPy5Tw)uMm5~5i9MIC6%=|V#4x=8(;ok~lO z48AL|ip+UH^6S4Y)H=W1By_RoSq>Xrjfd%*9urR&*dl{7t6F#GB6z?jd^**$4&Y zC}2>A{I+;zBWIB*6N8*0$*ng8V$I7nu%3vhbLCO2$;2W*UBqD6(AQ(@1-Ie;4na?s zbK~8SRl0vu!SdGxE292HFLN%ObS*?Nz+@zF)RH3jscy7A;^}n-na=TvVe9YZN0wPh zUt89q1tbx-u?-8t)~3*S9`f6x>s`|8TC0m{clEZXrI;~DQ?Etk0IC?PIjodW8U+)zI$L9andh)i~LB5uxQ?um)YEr%r%hRklM5xQ4FtK8%s;-ry+U=OU(_;)D^rX`zvtSh&ZL}`KcFJ;^|F};{DMyS zl=>1hH|G2PIy>IOtZf5Jso933`O6JNm9E0j$=0=B9mQPeFNn}*_!?bh^R1s!E-R|) z5-XKRPGML}v=K&&zM2j~0E@u0N^K*Sfc>V?VJyWD$?Lm2*mAx0-mt{-^^+4H`<*n! zQgcjIVEshic$f-dhW@x*=9Fg6+UHS%p~n22!1HOt&GUQscp#nI*~2k3tIgEAbROx9 z&8_=E=;1Fm!nn|GvLAU^2?C=sTPoeJO*j)i2ZR^}{wf|10d|17vL!sE1SK*dJl@ug zJyu-4a=g_KL9hQK3vP;5^b#OjY`W-P_M=&|L$3JsX2E!ZN~Le+@1uRiMPqcioEm3B z3Q7H`;(Aj8{4QY>*l{C=#?k!6=dbPQj-^B2!Gh+Q zW)>-y{wIHX;~C8>Q#ZgVL*d)9$>i|ED=SoOFoKFl#FLg{SvIJ^#m`ahr~SCFnc$3x;qZ z)$r}df#pg!#r$vN*@K6=v2kE}n>`1ESHmqxPo*8sN)|pjw=DXzlJRNGg=$})n=f4L(KWQ^ZFn`ARh?|onB85>mx;XlnjPSdTx{ryC zTn%TfV*=$KVO{|5n!GReS+RH5;8JNy_H8D%*7gkmWh}b?$`m#!oyz{8wNjL<;%)scWZ zjvp*k5lozXiYh1QoxJuMP?Zt0W$r_O^U*!6w65Al*;+pe6srDlPN%oZ7xkWo0;biR z_4pGy!D+`(h_lOHn&O)2#iHZnjlcBJHn)#CQo_DQ{kMc&Okm(k@K%SAA)9)7L}k<2 z@i?rdks>WuE`HnPK4@@yQ8?LhB$Q7zR+Z}!&sr_}>?djPL+UhEAvr(qzSnT%R-sp3 zn_d$?SK6QNA`YF%{l491 zM_uQ7YFwt8ESLR8B(qisp`VcjuEbNUDt>b@#Urh~L57qhLaRxF{ zA-9~H{qeC0X>jrzC+gyKZDh4EmqBtN{WUA#sBCef3qK%r##{4VnUR)?<_s+gcONst zTOnE>STPsq4=c9k8_#Lxb8+)S@8s*1$V?1Y2=8(G!Q5LLb3)5|>OYfZO8V{i_qSrMFaLMX&+>;M98oqPtI-qW9q>RCy zQghC(Ukz-;XSU=Zv9T!4E1dPwoi;(0>cV_I6?m>rL&}9 z+p#2_zc&G5-Klj|^(aEt3)@B&^d{p`y*Z#rt@(`cxzbg%+y|=2!up*Fd~G*dUmFh7 z5o^vxQ#qq9C)JBQQCxV|(=WP%v%t1Hu!Hk2%zIBn*pdDSEhEJS+RQa#Y&Sl2^c!uk zM}ZoVomyaFw#2)K=I3{(SK-q?*5;fkqo2>=4>FW`gb>zT2ycuh$LAEvlsU{VTx{{F zTA8YKb3W2*Y4hYr=VK8m-taKcT4k!Ha9=s^Jv?8ROo91z|C8U0zd|DaIY*?+_IBd? zT`O3k<1vbAOia15Tp0q)T^ktRs*~^WyxOo;{(`0yYO!Rp&u!tJfBc*I^q=YA5exbR z)Ia0p75~9UpuJjw4>~tCQgM)7v6rD>PGg4TzGr$JUj;*p+PQBqgc47IFlj;wERI%! zTg8u1;J>h%hqvB-`T@npbVHb(_(CMilm6#a|$fGI`U{DXFdOXV`SIoiXRXFMm5Mt;@HsOFN)Bw9twtPRw@!kgwit!q=0n<4m1#N zig|ZAM)G-X&!!2;8ylpmAC`tXM78hwS#*uKe<6ve~rm{i~GlyP|Ds$UH0fj+x1q*jmR-{^Cz_1FH=&l9OYi7rchLi;JIWaI61*mcbXzdPKW2qeb1{ z|H!BcR9DkN9t9V4NdI>v`VBCW#Mxyh_@!Ejs5r{UJQy6+ zQ#%-D#~&gEmCdB_D=rmRCzd9kwSiLs}C2IsEJVCZ5)v+-nG z%cSfUr>z&wl0_1?WcN%YfsMy6es`Wne!n*mQ&xZ0YaSV^++2e5ojF!kaFv*%TUM%s zoDghNKIsnxJ2kheZ(Pvfwr4X-V0@GIxQIze2qj@LZb48Bb-nO>R4D6*$c)f`%77KC-lP-05|A!7^oXr36Z$DoSKIXmVoCXmP~|1}nnn5Zv(Bgl_GLML9m$ zZT|Ym_wA)$aL6)xzAu_hpRVd2DHn#ph6$X$ystBsDpQ3Zreh8kOms+%#`TFDJ$P|& zYw^G=s_}lXN}mMJ<3o9U0X0p>eR|@mrCjxIN9nu9t;c8k=!9YEveTE`%30%?u`HUs zY0PLIf*nqNF(C{sMgFYwanoo`vL$ra@33H_6`bu`Jv^alTR4X%E`G0Xq8V(%(>VMd z8`)ZUf38AA&k>hbp&P_L9faBLxeUBwi1uh&1T_u+DM=3{-(FsD=Y zq2D3@e63-LzRVI|;)}n8r)j_samNzX;zoUyokLQ6;{;?QZm-29-d_Uuzu1Q**I*qT zcIkR5w+gCSUDCPhdY>9us#f&oxT`Gmll!?rL2cVJdpMe9g;uDbApgygdm4QkBJ zLTy)`^WQqR&3*(KkBap_5D^F`BtEYIfMF!19RX|CMB{3hHSdPOZUELX|2|?SaL^{F zEdo(`7sfLg^J97YofNENU*G*t^&CmL$MW_^n}OGtJWvzwGT5d|=XEOQc&^>C_1ixW zfFO{{2Pi)?9D3{S0^v~ir%5C|t;F>IMi@!DDIlYnAHGa9T_Hobo%m#W#v3EI?(6-C zizXqdc$KCi^zZqoJQPPma;An#_01qWnxOhse@|V9R<5l2&0Lulwo-0SH+|)cpWYqM zNyb$So&+KxG^97mfZW^uZK~NHZLW}x;uU^LSB$jM&lmBu;l6SfT{YUU+e(*5lR>vc zC^xeC%>9xMc9WkMLesUa5|Cl8}9Zm0K# z+743?309K+xS)7hI_&w1&)b?@j(p4&MivF$I_x&B7gUyp)XUth3nWW7e&(odxHAiX z$U_te{5-{E%njbr9C$x+zY=d#rcw&khpg?hK=ZhDKP=H=b07CUttn&k>rAiVOI~XK zx^4$%+wdt%RBo1+alY7~KWU{PPxtkV;C+#DQyB+f7+(1Tme7TC* zHg&Go_n`SZs?}PDzlhm?&#SfWz*ge;b*4x=hr}dIUldo3(sA!2KA%ZB7~fSZx5*;b za^~md*>01NK`|2xPzCWnC=|gn?xJA|uhYD3=~N9X(!e;yw9|> zG>|Km1Twbw`$z`iaWE9DwwU?*b=UO<&OcsL)~%Oa-f=gYNABC54lx~Ra!Cb`Q`4jK zDwZ1XK&@3nx6OC`9+r|xrUomui5r2Smxb5UWu{CJ((4Is)Z$(r$&Lr?bvRa%V-dYN zIG&H}Kw{Eym`!4>aDn~fp`W^kz+ba0BgA2v+;F38bTA&OhPG=>^}pvnyu!l~3=Xh? zOs;=FNI8VqWL5Ymr`}&B3t|%x_|*}73vx@KQAx1)(*$KcR}@lZe2j{5g%4P|^(9wh zM-My){>08i57IX_{>*WGurzl{U*~ob5T6H?ukZr9Yl3U;wo(4lon!2E_Ni&%PoI5H zQL*H zSzSbrvFP=@;#Id6_;9KxouvXkX34D6dp($y^Az?*AqK%f2n&XKU!~F1^>U~N3sQ|n|)1nc?k7WJM20X=a*cUCvo z-bfbrp}9rs@8jqaOt{u`!0lY|NpNM^Fjro^RD<0s{;3gHg|=$E!yHn_X{U>5e@ov8 z(HxnVCyV9kBhA=7;b!ye#ie{4omxQoFy?tu<$2>W*1UKGK#L&q-L1%Uz?=2Q*Yx_s!1oFE1W+T)mrAT${$HaDs;4GK-*al3m9_jrmei+g3P=j z>eobUrtTStBmo?Hw!UF5q-^FIo;@W9$UirVs+NU=fh!k9d-nS^%a%uv)+QTsoPFZkNeRC)3QQiU&? z|A2Lr9kuQ*X@l&Pvl3MD6In^v=MYPFraB;1?LGWSy)?+<^33(VetZ}S!9KIdMs3Ku z=pmZH3H7c~Moa@s(W61V7VR7nW0t-)Ss@el&2X_ZIC@JX#eJdL0#721hKwWN)Vp6{ zVh!A&Z=+G4Lbfo2V(C$IwCV=)s@v#;WTllQBe9U`)pK9E((wKTInx%-QHP7X>B0G# z0`3yanK&~VbvbbaBDMi5u^PLq<1mY(tyBrh+V3$mwXK1kvi)0rOk6TIftH}My?Op& z)_JHGeynfa@IS@)J{qGOaWfb`S;W_472G-H#VjH6QB~NUr-0QFFAjMnu zz9sQA2{GSZsMR?lCh5d)k)KbC!5w%f$8CovX_I|f}Qo8(!5bu)oZ-p|I=8CN<_>8f=*XC?{G6@K9fKWRqcPrTKC?96j_YtE;~S5j0O@nvh- z%4j8EYe&qaQ2}cSyyCYFULxLPYDc~2$GfjYhb|W_r5?R&N?M=owL?kcdG2{k&YH;0 z!n<>rvkbu39En`JmH9`9c z(63zW-ZDJ3V>2>+_KvCBnW!+qQ(d3lar|9#qJ!Fde612Ln0V8vI7baE(n9&1U{X>x z{(W%~S&70QX^rfP8S_(R6G8`ZyR5&`X$2iVw(L*@J~h7E zIWTz@*e|*`VmCs#Rjfl%HqKLyZK|NMB&%_e*Yysk&-8nE+7 z99y^l9fI=u?kJ;DR0wRdzZgKJRnXMJW9^a|Fz1fE`l3zFPlBUn5A~M0_#;4#o*$v< z2Y02OVRw;EN4HF)?xQslEf!Nc3JJ@`p>!K>N~>B-e5sgGE5pC_znu*bu1=0ed~2S6 zFC@NJprg-iqZcY?8CluckX2ge!yB%(#5k!v>NMF~HOT9Y$AV^lJj|cb(_s=C@xa&> zlnEeT`Ub=Yl9Trs9$&3GKT@mymOG(RZ9x#HUra4^*)iJZaYDhFA0qq_z=F|Tm7?bU zKHxfjaim}z)D&AVroVfnrJHOa?EWi9ulkkLeiBnABfag&`i z)vuR%QNPte07v_Kw~_u&;{H9v%*u3W4R-TuC)AxC-=?Aw7KBHoveLwPkN?qPW5`U( zzhjT2;?y37Frd$4RsW+H@FOzAJA#pRlzNoUNoEz0gx|yX$O8U)4w@VQlwOtf&ZQ_7 zUzc+Hbi+IL;37~e?~5e?vybxDTxXBwQiRjnX;mS(ErS zULST@$67D++i*vz$c!tlx;WAt^J7+)s8ZzT7J}DXo4Zw>h=D@JbK3xJ73Ea681(#& z0Rtm!M`2ajPit+SFPa#PwTk;R9E6|;!^yztmV2Gn(~VhEdSS8*!=~oy7I@x#A|ZoA zL*G&AdZHKjKxmry;o05Y_~_j+?S-gP=x^gt0B}c-L~OqFh|E~>Sy?T<=YA~wJAokv zhvj$rTn%Yg=9(wI3?CwA`$xbJ{!jfSr=#U$Cedw*%J3zBJNoMb!G_w#(1Kd;`pF-I z?$0-sY%H}6z6oOb#!8ZZ^H#fhTou2s*5VJT*3J6KQbFm60xLV*Lt&E zJg)RINRX)sDa-XPxdQWdzUl;6yVT|z(Z|X6P>&a7ubpl?6rCr$tB4Ug zZF|Qx+ZeQ`{0OjV4+LbZa{Mh&_oJi!ZK{*<0LPQ)@K|LX$kLTDG|jMdof^EW6GSEV z<7NHB-O*R_yP%P+>8zq@Y)cp8;c}6)qqd_cEH*-klZ2YE9EC zLf|I0|GKJ*%PT)Y>K>w~Z3kVp1WN&l*_u<1zL$0H>!Q@r52A9$mecJur9534sLbVH z7xc*L#~1&#vWz=CiF(@gtzae~dI4zp9= zANUj$_tgqh%52d0_8)w#BcyX&zZY9VC%$aQF4F$wN8hJ^af3pq7+pW7)~w>ZIlbQY z#IMer3=L@2%vVX&4R*yFYAeku#p_&(l4V!vPLPO$=%jV1pB3L^*Ef1!C%}f?~l$ zB24iPgKineCiG_$)6smiMnjmG1!T?V7M9z#kqpje2TJ|~F{D5ZmEVQfUoKQcVd?Bo zZ>YOO%JNU6IwV#yw_nHc90}*gPi}$h<%W^j{; zX-B=V$Yo+WFU8yL)sCT-rvH6;*ZtQSia7W3dRvCdgl) zbLco0#JmQxcW?Hko@MRFVW(JwO)OvYQtmN~qs?L8BcK!S4n5w&oE_qDf6|u*8$Hm8 z8!Gc6WiEw=aYSaBk?>rZaX{7M4hp_#bV;S zmb1AxTG`)Qo`kW)6&{0**v%kLo-Peb2BuJmnEf-NMa%o>jIwAa>f+>pWuU+kOJvFT zZ5A5a&~f}tMVa6P8YAGWVjWtLaa(71{1l@1CXuJdT6K64GonkFWSWX*<@cpO0I_II%o@$ZpFME;bX~G0FR;irb zwM*Z$|7~N>-z5#LTns)Mm=_H=ITK(;;u6wJN=vQxmt{JAfZ~7Ap=V;kicP#lo8Hg} zg3GfY=4TQ&XqEM_-VMG^o6;rZ@2ma^opjkuqvup|>Yv@p;vYISrEIr)OI)_f6>#>d znibm{Vbsi^#^SaD!Dxrc@kZT5wt+n5@LohkmJd{7Px{r?!+jss-c zJFA5<0YDdLPw1nJ6~I^_9h;UJYy$ip*N5*laQ%F^K|3QppA3Y6?sHm%-RYzjhGTLO z2QC8$y}c^fUiNf12V;1%7<|F?Z)flC#Cb=31~6iPpZDucH%RQ2LXY;LFstlFrTkOtnQ1XSe}5!2D(IziHJWsRHoiw?ZpjA9%lDW^BI zY^s`b93= zpcH;>r#j%I)`Lz7kynE88F>@x)cOkUVeSV>C^4|;vDJE_0fucWXAv?e`)=5#?9LZ< z)T~7jLdCnq;V$5Ej!4=>snP@+Mfmr8yN2>A$zMO>5tBDc!8!@p!r9Jnk~fsV8CAQ< z-y=rRKfvi!EBB#udzLttFNY5|Bf(k+?Op@A0-pg>=Ic)`BIiRp8=MVJb+hC|4tsYl zN9oPN))#9BFpj63V)0_f&}X8Y=kM5UoV_oEJRU;Q8EMP{jEd{mWA=nRB{SD3a!s^i zEHJkUM!`TNU!F`XzC|((Xb797A9*c)tSEJY{&~xL+JxXbS+M`2+4h{7LOx@#Xo31< z7(2(Mx^Lm27&%>8S^1ou`$GWyQU_J}CSHo_PJdbUoXu+2a>={fgsi8cCbJO<5O;*o z_n$t%VDIOWyp#h_ZX)U5|3?RkhzPolVJ>arQHy4=)X<33U-Dr%;@vhvLlpuYi{Kd9 zna*cuR)*+S4vW1fbF&Y^f(|gt&JS4q&lq~N1&#X{AwcN$z)aJtqof}izwRV%R;p5h zs{GyrHxFR|n_vPhbdVbXgAZ&;y#S3!UuibmUy`?$q+2d8&KX21vSnwl?!B68x4B9G z1m@gwxucKtn`qI+j;pA}wif{ZB|74)39pyn9G9qWO22o7xs74ZZ^FVO3P?b7B`%My z${O_()T3Qwj5%E^`wb89g}%rV;!B>kenB; z^{7cFC$v-}=kl0DvQXAT69W2%hDFm4FVAkvp3c!KBW^vPclrD(qnQed)FJ2&xH^}Y zrGE=>0ZDto2A69W#LOjtIw}ZL_#duVsS8R(!NSfn{Js64{nq={BZe86e~+A@7l0+% z`9$A&URl*?MeTb!v_0B9j_>!CK+Dj&noyWS4rQM-6Kd<}#-qXEC=I24!JBaZ><@A0 zn0&9p1tf2aEgg@}J%4=4tO&pg=$mI#?G;gX6rk+SJJ%uAWt2$I{mz}pl7QAF8E<{G zZQ~(Zj9A#Z|`qQtImsaKX4t2lE5AB-dUmj|L z67*|NyOORgTNuRcu?T)1?`2v4nBnDqSpH%vgNp{Khwalj(2HQweRN7n+1&4O+gBk)%T(?oWYzL%$1# zz%=##A<}Qy_TWOm-Qx|PDpp5K%{Qk}FISBU(1d&7T@rcfPAKgU_s#rXgfz*=I@^PB z+AAl*fU&P*C$Dtg)Rjja)7T$Z-LA6(H9tm`!|}TW{2r(^pN7}bLIT!{66`rVEVv+l zV8Z2y-Clfclm40kbol>pI@Zt6m(J-p#pTXk@hz&T`$O(p@njPbSkntQTxHgCb#RAa zk-b! zscpv67PY?Yr~uz>wb9CLqxwg|;zUGxyF`Iq_Z{!;m;*M9zp`@9;=AcAwl`R5QRj>G zHjdBq@vc-Nl>NK$^Ei4FkIM4rvkv zb6{}Ss%~1ATl?w_eE1rDbVp}cAQU!6bMw4VApy+*>75zlf5ZmT|0Xup0s1h81L%TY za@}k`xI-x(GzJL5I#?i-Ez;KK=eof7XiMnN_3HB?MvY&)d>0l5^j%b6CqUN6`$EDZ zOSj7->i=vB12OQ=EtM2e{n%Hi7U|&0Z<3*JEC@9U;B5z|IFP3flXeX!s`1nF_4V7` z5f-GT)l!bdKq^Oh7a;{DrT!|BpK~7j>_lA%i+1y1M)j?iJtEL7>^`#OEH(HH8>qLC z+VtCRO3j_#>jU;X!cPHPP7cRa*pGUx4saH{EMA(e5%F{s2p59MG4c0Fn^DN80_$SV z?}YWBNMgvQaran+?Bv}EC)%JRfewTT`VANI%Y9&f9)-!&M7W&6158(H1c?wWd zW6V(2_rAmcKdsSI>;WEQsFY`iyNvsdQwlN&UYl#&(}jyoV?qYul^b}go$?jK6e6v;9& z5+UO6yr*+RaeqY>XqSReiQ63r8+`za+&`>cZ0LR9?aeIPx^KcaU0vtL31Q;(e$0HX zMoGe~5uOaap;G#df3eFFm%NT@Z{Tcb!3vb_9vwTMd%(`H#SM z1pN=_2hL%~B@B|S+Z}#F`=bnl2>iMM15k<`@@);36td?w;|RtJ4e2@_P5?RwS=%O@ znYnNWBMOy%3^saN91#v%_|fO#W#APC_R2%vBBl>%0-wvLk=og#tH3D_3r%MIb@U(7RZJOx;$bn_O_a-ujA?~L;Lk17lQrA4{bwuJ%&)6N?~+;(Yk zJ)bJrq=pkFt5F=c=uZh-9mqo+K#etVs%Z-~@YqhyQqA3UB?PXo%+aR>(~^wq}48qC?vsfYUm9a@O_Wh$gFfpfS1C>$;^ri z*do}sN7D(F1M(GU&$1%^myl?&!L5cu4aU6#nzqGLR1N(e2n)e(n1(Ok;dtQj5GC?# z{k?C9QBc#v=5~*kJb~ao_d}V3q zL!HvB1ZYg3r`=#@f{~>oBmMf%W`BMmZ*uj{VQTf0Fy3WMP?S|9tt=r)1eti8%Ms2P zas!Bhg!_c;VwcHR6GCQt*pwE@pyGNzX)dj6O;Y#S=4L>yP_-^$)zHAiI{bvpV&BR$ zF6jr^f3+d{6t!h_q}g6fO#PG0Hvbit1S)^SUv&$nuS#c9hye8X#gt6oe2i81%$sOa zG*e0LI*JE8a%)C^25_D2w4x0d2u}MxU&n7u9~HWL0D$23`qul)8<(vYD7c1YtXNj4 zS?3!J%)=pod3dm3zhYKS#9P_Ha}sl!6$NpxEYN)YZ30NT(@oBQnf=FuFGl^#h7Ge9 zyu5n{fhHv?r200DE_im6qKP9xNlXZzsh3B^2mblbZWx@MLBI3brEbo0C8TlD4OpM@ zpm%Pe-Oq~eVw9)aS4quGggXRLl9sz6D8yY5K50p_)B|0C!@{y*>R4-ID;{em1&XA+ zLN{FdRtk(5(;LV}e;Z}Na!&tJhdHuu54duCCO7Wy6EnCucmX;d)kYgxCF|WNJX8Q< z%DH)M3~HC;TFecaEsZ1-T>^B#vYR~=Ll@-PgB9n+?r4AXNr{2p6vPZQE3xph#5Y`$ zlU+Y}XM$(6Su8Pqy&(w9DL2}kMB?igZteMHJ6pFa7oy2Y;+Ln@1+fG{vI zggOIZe9uVcA;eG=QKRXps9M$kw%)F~NfH10se5O_zFg__J#m}fsrh!~R>s=&$I#=8 zsX!wzAhxONCnbsf%uYgRgj6>8jlt4do|yRvRlN4dg!Y65%qp!~Ub5{3Xo|t@BdTRG z(}m&uD&jPA%`cjfwF2XcWy2h0euP`?%4J(dTW8?dv7y>0z-R=ON~OMuiRk0qJEO&0 z=G`?MK8$fzn{Oipj&_G5VzMV(6VAJj1F2~7v6Ge_OpBljM8cg*eo_>OG(gJfMT-ks>S6ipM>SaREA4@IrKmUN_K z78ES_c|`-xL#KKh8}WRjO(ptTkP%_3g4Luu@j_)#;_Kyf>Q+3&Zj=y!zbg&8bLn@x zIGSxMrSe_9`;p74SRSYM>zgr%3ssH8sRPXoO`#Tcts+~u|D$m%3;u} zDzclBLZqTP<6KDo<*6?>9&a8+Fz8SDgaUX1G&DHp9=E%9 zUg*<_Zv+}n*gAV;u}~X;yVIHlKfX9vQB5ibApzXX)+@oy@qDxmmqS(^*XGcpi{QvNsGH?caF!Y5fS) za00%e>~MKnYdM3o)KOaBHv|H~n$<1tRd7fdJz-wtmUn@vFZCq>h zdf&Ers;jHp7!FQ9-?Zy8@|W-@y_@v#_h0GnRy;>X%W~(3X@p01Qn)(4X+<6FjMZWU zzi%%8_b=Cha)0xZf%|o-ZGG0DWT|kRT3?-xh>hs)Mu`Im_<8{AF7v0 zmL#@-Eu3pTxJ^ZTY%SaLFa^iBwFbIX@v>8hH>S(c=CjacxnbZ%=tWv8M)h0Jph(II z-ky!|g}XII*~O6*n~reZgq-+1+84Uy|W~O5b0pfD(rtFKiSRFyzgrij4uCqjr>U z3h12du$)jnZ43!w);7omXYukTd=S^%>XBt*4lAkGmz}6A3hS;KC@5W+k zt1s2JN^J&o;ingElSvzRdn7>$hH*$*aQk)Rn&F7CCV2e>m8Q5=$?3}$E#H6GS?@vk zf8c)>X;pQdwVZ=2JCRb@X2vcYENfeBgE`4icqL&zB%H;X=oJ^+Dv)nQCB%SKD96XC zap!Kazb8KOMDeto`@`v8_T<9oe2+jD^j>Dp=zhQ8wUGVfg?Z8QBC?X7;Yh?AlKati zuMn^~nI)UZ_B2qX*)UZKIzYr&=-_1-rpk)NNWzbP2jv*aNwZiP0?B-q@jq2_Z0WZObIE`&!t$=er3$_2i#1u(N)Gy#slw)l}_ zBQ2JA{Q&l5eoA^D>hi;m2@|jHl3CvErByc^vU(Bb;I>lv0aaY#x~$sUX{bh>Wq&EIAz+sfQ+{RX;Yh@@yx&3xymJT=`HK7N^=s2Bdfg4f|c^lj16@51N?Y$+zOV`wI}xE_4H?j^R7F`4WfgbPjkSB zK2EDgIP^^Z9sVa@kAc;rI@aC;s7EAb_-6R+)_d3!=Uzm(m(2DV;aR4V@u_Tr^+Z9q zRZlhOz{ffQWpu~9gVl)W2m`}qfBCzNbzQJ37>x)Nj&MkBDW5@9SVh6T;OZQLRI02$ zW7?C-hiE`zH}Nju!Oq7B3U?W4H#no_Nhf#*Nen@YElhp5k%M$4)^8hA+nd3o#+dkP zP?z2vbX-4X)KAxTwt-(Q$8ao_<<=`sH5l7;%mszd69%*Ff)j%Ksxz1~$%z2V$>5VQ zo+v!Y>mEJflKF1QwG4RWqo?0q`QeP#rNE9(?_v$FYkw!F9;tw#M3kgv2h=g4<&hJseG>a2lM zfU*^NlHN)0lec(cj$^V8CNPzqTtu z+=o$oaJK*8^*475MX}uNm_Dl+&6VhK?8FYAo4fK89fXeA`up(jYc!fR&5`)w=A|hg zPZyL0oi^LklU{pqwlod~ocg*j=x^w?{nP}KL)YOF=t6Ey!`VX53`uhsO(&chTABZAHcj@O1(Dos1k{Ij4?l{08DSQm zT6!LbE4g=RI`{lTs56m&y41(}f9G=37olky3(a|(>kpwdZ@GL$o7HT0iRGD@c4uSv zSDAdWz-j0ei9w?Qfl?v8?;M@-d@p?P?D8_+Iq66ecoulN<~k>UFRPFCS2z$xQ81Cj z(oz)i2MMF)UHyE+cbbd6@t_@<|Btb^4618ex>fSF=$@}WB_$y0kv7NGa4B z4zH^WLkUL8+4o$k>8e&mz;`Nt?6zT%)*YRVmN_jFMo zup`j}biTPBF&R2e)xw_Tak>uy$ARo~GAfnz6_U zufF5OI!)-{k$+m2y+{vByF|EYTB-U?VGX3E3gpT4?g(zKR zTh5cKkOQta`DR4_^$}mi@?NP)mBNcQ?8Q90YIS(jORuYWEzaF@a=tNpB>u2NHEiG^ z{Zd4PXZoQ(fUC`Tt_d+D;e7h1ll@3E7!5dLPo#S|V}~*kSQ}`k)G{zYq}!V=Jqp_# z?;lXScr@+kIJ>&wj#$uUaW@>2yx`q^ap2Y6FxY0$?&WYa#lB_K>glx{3SBp?wLo42 zx!BlVGV(Nfa!a!NCdi7P2;IlVl^~STW@+3mXD-~&qvt=4>D-8y-Hew6cB5FV2|0fb zs*-_+C<&Hu6=XkMU#~{$w{Am03n*4(SAmj+3 z%{oGjo1-MCh|}iqt(JTC+0vBs0U?ft(_SiiZGK#*QyqC0^G8G8$)De?oShBiZJFwR z$hKf_jDOFSE#5x+^%M5eGMSKzdW71e4#LK!ii0F)@cw=qO{mHJ?0O6#Gp&7acT?|Z zZ?g{L&QXy`zuo-2I4XL}AbnP2Z+(rm1MgIppdHz>J^1vy+>;y44e?shZ#t%&Ummne zBBK7eLJ{gXVO*-%Tu;t9_`GU8DKgYH^-TWD0 zdaBs0ajo_C(79cnU6`#;-VAP^XcexrG0}}~Ynw?Kk$C+19iw5P53zO~oU|B4z<1e6 z5*y+ASK~3LMi=KimGIkYZy*ZP-XseH@L?gYvqt%1V{!PN9#6Qrt6TFd6us*l*jn`uVBAog@SSNQ8NsC0@LqhyG_T*1zNfC9G=`)0oFCU3mz zSa7|&O5kWY>dWAF6pgfRzw%#YdtzP-^8T2DYuI{Om9(h+0ytezp4abZtmBKGWTjBUvHU?#;-BCLR(y7Ug6lAWshC~kzGG!Tf#(#w62~HjWFNqa5ZVrkLZCg zC%!XVBa4G5bR9t9?{@@4ixU{cX7FjIP{Bzo)!TBbz~avRj(w^QvCze9T%f7?$%(t? zP1#Hoh>On0e#(+2%Wf*Ta2a#r92eLmf(ihl2MkFFt=(irfkc;pBOfSw(hrZn7=I(W zJ;ZoZT6_(Jk|6Pb%Aiw+lZ8)|)ghmwfjmq6p=tJUf2KH6)Iqp6+m<-eT)#ARWSJNvp!`Fyp3~Vj7HNT9 zpiX(~8Q_j=wdm8iw+w56n>CdJyYe{0%t zqX)#YRmLoWM&LO)7a52=rNgpz?-^HLp;QW5f7P0~<`lcp{j8BRw4$EgJ5be8Ut3!u zdPy~$8+T+i{fSpOmg85J4)8tbX4V*b1p`R4*l zhuG>F7P#|sj%wGBY%&?XXIW7OC9bYJ0)v?6b)81t7&rP#6fkV= zNzVnt=174y+ZSW4>1r=kaQuLP_{sH_Q*=&wvU~itb8)W+kx_5_YC@;I_yfpm^;v&- zJb>GxdF*86W#K-6(rHn4r^HDiz>oHrR3Jhqk4&Ag^tqB4)7K!r~Mat<8yM9<53j84& zMn+_y%jo<#{^due&Q$Cp(&Yvz@`CA79-5y1mi5VR7Xp48cuw2x&&XX-t+TWr&iEoi zjlE!y3A7q2;*N89FHv6@s$^56?`)52jAL}qDX3Lc!>v|()0#S(jNY87$tTrJG zZZ`G*?OlNWL;GW|&9t;`0_wy{fj48@!q-fwDbaOceYC>dyyKe1^mjzMSOF~5MjL)m z4ZF_hk7y1kpnrjAvZB5{O_J!u0&1$}Vh7i_Lj^-njl2d%l80df2S-5kyv1npGdDX# zxm&v1OZwy^j8k{jjnyAqbKcv@Nwj_TY6i00o^auzAPc6teM;nq@U9$(4sw$Hg!2r{ zv}Z2&GSMH^TYHZBM`4A69!tFQkQEJXDeR6Z5uwi63OFqFHNmo(9qhP(rI_`Al8g*< z?fIo#GLB2w|LH~aYy+QMp`Nd^2Whn#5xh2(oB@`<`XzEySCZrXpJJPjk$0y&__Q zVzqA8TgX37-v)Vo(2S}OLEENNCU6PG`VpFHmH^yCF;1%a+vy8#gUaI`Dfv-;eBRyp zYW|_K^I-;=A^qois3(MASiwz7I;sIMU$pfLnt>DoeGtb-{rl6Ip2djVRh#??h&bbBVRtjdDTp!8;9*d8$`kzRw6z`Hj}-b z9skJ3_QI<|ELOZ-;gEGIS%SdT(`zNafIt0HdrW~S%pv!4Wotnd?L_(IdaVhUm!tEU z_?N8`>E4(Vl!-BquVS{>=E{cu?eZ5*-!4?t!TsWB!*C+zt#xcTiUjt`iDr3?&Yd~l zeu+Pefx401(}V^W8d(^L91qYtoyRq1SwEAq~x7LQ#e?Ziy)EU!)5} zd;emXvCK{!f=wT3bm)kwu%B_Vhlii6b;RF}hVe>dO3x6}f$53UNTQ~op{YqF?k8+<^>Y~-TFB}mejcyl!+;D z+-n}!BioiH)ujfaUY}fk#!*=mPA*YpY2O-Rls5(q#xDA?4V)4AxKK!4^By$uAgUFZ z>oGrnZ5r;am{pZuH}0I3x#}zckR(OaHMn(h-6e7JeB8mKEszX0 zHeCuWHH?eeUs1JOQ>p)8{??=QdhU=)|K-z(D*e~SFSH|>I%$ro4QxMt5aEeBE9%xc zZ>;GFQ`rdjOgR5q$gDCxx24pmH#hlG`k6>Pf(YF5#jz|}p6EB|bmDs$#1@5Y}rq&Ze>^cgfXe&QEy7>3FuuM^N5w?frB~9qI(T@OQ8q286}SD6$eFpZK2+9!ajWx)C2MMQbo!$!8%5-* zjZI1?vz7I&LrHz75Soou-)?gMOKeM&Q0E>#@5-S}d4$R^eB!V_R>fJHRN1e@jH56A zux1*r2e5MdjX$Z|ul#{fh65V3J*Ze2Y)RnbJ@$zI7*eSEcD^g5DBFke5tcT%{XF>q z``urhSEx)o!(Uodke<#Tp?VlRO~FkgUJ?ZiTQrCZCW9cwPzlKUiC%IM4b3W zY`md`Zr-#@MGV?L9G|_jK?g;+T$4{KGeBnuZXfY>srEQ8sOLXjB_>@ai%@#l7iuNj z+wZk4`~|)Q; zLYo#h`4oaln>Q005`yLEo*Q&;(6t+0A_EmyqEgZ0MDF?J50e&;yh)GF!~Z35_1n|C zLQM+m$w_#6aW(TJDRi+xoV+~DSz=}_VWWbQof%M`YA!_IqHS(I`RK=bm&47_okq^F z!v9$k=Q834y1(*Tq4d4xdC$x4=#O%`{U$&&Lrz2xYxBcg67&-TXlESwT1#|5p;SZ| zXk7r8vV)i!`nw%WyT+GB1Py-pjocWLv_P|sF}Zi~@D5X9Rdee5a4qzj-eXt%f$7KE zaS9%#a?ffD1N%lk9bTi>#Ga4TR33GL1de}9=%vT~Nrf`Pnr{y)S%V^iJ0I70R(h@h z&ad3!k(7;1Jva~hfkxs$TdWQLd9nKnai`J&0rOI@WPXIZ)Z>#($G_aj3$NFk#2=@B z64`)DJJBa7fkwcdv&=pODlJ6dzMF4>3ICZFbzR)0H+j zmZeIW07oV#^T=^5Eu$6*{7<_?fD{CvC+#0Pz_fUkhxct@!fUU+DD~9STI+wuq&(1vm6Gx z>mIdkw9K!$s1j^mWKqAX?AYIWuxX;*Gib1&czU+?vt0;<>}$I{1DiE&B|A{g3~%S- z9{=1&>G9AGD^cUtoz=0sz8CcxO*Tc>S~}B|=pux+H#J@AVEb1egx{~_pC8-onu%RT z#X&N;StJ3tMwf?lMygmV0cg6Jhj zgZdz81!zQ@reGa10E$Z%0cH%!=U{U^$&H7D3Il2}4oZ=_)4}SGyR&Ksl*%Yq`1)h? zgTn*_4?a)9$CFi{RW&g1s%mI<;K7`>77m$hcEa&1s9VOrH9@*nd`PP?FP&1g zy$yXwANYu3Mb5(Yd%K=sZ+^oJ3=CpzlNY_*$*Ep=XTE9|N`1UKJ&$G1%m}>$>;Wvr z40$x=b|tryKb47pH`+n;Q1OJf-;NG=<;a}Bmugr>DenY=95?XpIQ05#G=3my{tq;? zy?Q$5@p75=?UI%N``(e|Z&Xs+WZ*_P2?1#U8B9-^PpSZt=QeB{<9@j1IF|g0N(>7? z_P3g3Bz||rnveuE5@{d^kH^xEg@lH-FBnP?{D+Zimf+#_x1n0&CdR2 zyx8n3nI1GK@yYBZN3mY_#XOGw+v2TBoh}_YsQJ%qvF_4Lu<2#kJfQQItyRM5c(N)U z9ClofY#gRaH}N^WfL8yUXV~((%@K#(O>pSqVdH+MYa!${{DIC~4$SW)eRM0f$%95n zTraf2z{uSw(||`oLD^ZYJ@C?7x?0?y*bsGRHm|H|f7ndaq1FfB0F}ecW%kYTgq)== ztNCxmAvv5|NP{bW;T-QV0kW;kYdi`jHi?s0d|YD6XNJ-Fra!H&!v3JL;f__=6!Y}+1wFq##xLo97%9fw6m=&efW_q^5OL$`M+xF~g?K|%}B=`Gp zj0-H?`*t#X4s47HmP{9H^Aro0l6;+`?z2-AF_N&VJ&eT8ly?14vf*i(87ODbH(tZ9 zRQ$x{&S3kv+v8s{aJF)KikJGAK6Z(JN|uH>e~v>5yQT7KgInd4MZsWQotXgQ4ljj1 zJ-PUA+{vcBMem#zu)hhKBt)O!2g2uyf8Z(#>Pjxl*^}wYSY?WgeHNdl+Q&sZfz#Jp zPOS24ohhMQCTD0WyA?Sjqg-=_9^UgaJDHwV2IlFd*c?EkF`984I$#1niL2&{jse`e zi3Z)yLfu#-M`m@V{vivkc)olm`n(&g&_!<W z)Z&QL*wlo3N(e9lZIAAy+utdw;--QtY1{e6GX*`=ob=YVS;|@a67t z`{2&*MiY}s8#5FukEuB;MZtAJDtE>Ldo0rzof4hg@Ya1#IE~K(OH1e2Z~U!?UhNvH zpgdOIr-X0FC0~AqB~Me+T1=;)sQpw6b(H$ln%N)GT_c+r!UI?+P!0bi0t`j58sWuj zA`2mxJ!W7efw1lC+Te`9fw}pAJFk2U`jX}FPGai%O+gBstIB04YuyzLnuAp06}p-E zwoLmds9$hTEn8fSt1brGzj%OUiSe*;Oq;&t;TZGXDt}^DqP(NQ%@+dLNE4pqoJ|T+ z64}0f1cEdhH}|JHI7sIV!*0|=JIiNPZFWBSg49BdY@e@)ugQK0fnr+X^%h&S0&>-! z9{qOpFEUMdKos<0}bQGPenKQ;SQ^_dO9(jioxJ3N%8(@I|}b zZ|5=ZLX2g!G(ryYP>a7#_A33Jjh>&mR%|9ZU%@t>esIBAa&d9_cDOrBt1PdWk)S)G z4dOD{A5_o>E*(?{I5~`tS2iNWu!W7Cc~n%?Ao&LmZ}yf#pdr+agA#&=ep`Q0uW4lO zncs4e{@8=!nyWf~61CRT(t1%ar4GNIhdLIuWFHcnEt9+@wc?n25qC3?NRksUo zV~eb+bHWtaca|9d@hc`Ty?OmlSL__>v4t^eTh;& z?!)cfP*NgxA=AkKiV{ByZ7QE0HxF-{%rN~B7)8E5Uxg@MU*1yDdEzaFqXK)HLM7}2 z;zpL&D1bhd)1hH~Qeuzdp(<%dQ!LulVR~_R$rmN}h&cmqL8iqkO{5zp++2(8= zZ6^V&T)Zm*n~D-$zKazo8kQEU;fKk0gJE$L|h zQU9ui)9cxHjY?LT>=%RDC+x-QA$}w3f-d3q&idn)xIz1sY1D_NU}K;AiydXW0#@Q` zbZGnFFpKk45SPa1@0k=)ac@v6WQP4HDRgB)tQUzQEiuYvic*C?t}t_*d@;fmCneoj_hbH8-0(GB2UUg#OTHqj{L{g6y{ zp<-jhJ4LiISLE5P>7$8TyUL1*Pc{11)hyZXDr?p-;8x+G|7#?)ZQ!LRuPGCM1b&wx zqDnXc=klN_sl^sFcbtT<7+6c4Ix_t{23W+-u6v1s!sPgHls#X`?wU{Ow=d4+$D@!n z5&=-3j<RXGgx{a?A2E!l&8opwFWgT8aTO*RawQ`Ig*L{gI|mc)Xqkmr z& zQ5jT!+)ShJ_||KVm|e8D!RtlK?=8}w&H2oMqy-a6u~8acb0m+Epm9LCSE{yqO^IM? z$Md06Ezdp`_c(Km?6nov!nLuUI-Ndyx*R?0DXKu~Gw}rEGAgoEl_*g2Qk`j5!d>*i z*+wo0g(r^BSi!<#69)R-@g0?)h$u()o_#V@b%4OL(D%veulc38VYyM>kZ23GEN@!m z)|^N}jp5<;Lj@rC<*!UE7B>a0&;gIVen((b9NJOR0Rr$)ZA@Bjq zK%_Y!T;u(B9Yo?E$V_$0p1F}?} zWYRWY#;Y?`k)L9uoK#Uq+cyw*bFxCeJk24Bna4r}!gX6w$}U<{OCv7%Umj0~q88fY z#smS>L9`rHxi6t%KgtKd4k(|!5EY@=?gTqU1NfT-kpGbX@TRl74mD2 z4hCTG2nzN>VdeT-Z7mvxbJoCY)riB{gfgbZsW+ITTKLU)va*IbbE*$e>(3usH>es0 zo~<}9_GokBB&(KGJKDe7dUY=IXWx7rl^IU3O7Rgr#JF|c2{$@y_2biG;GdYDSgd~@ zVfL7WrR3g89n~A>Jb$Co;R?|r6j0E`Yq%hwH>TQZ!0T$4<(IUqug@35M z$Mbc(UdmpxKq3Z8urXW^h-JRFKv-AeZ12crq2V=4 zQU0a60J!!mim6f-7C}1xy$`Y19TsO>TQrju(bm_1(31J`+(R=f{OaMoe~Y+ea(;4H zHS1M}={1)-`=+=smP2pXI{*%@Cb4Tu`26;ke+~47iKMYR%Llj@(=R$`bt_GF*wY2$ z0Y}nQ*X~9BPPD=Gis%#R++Gk?*Us_>mo~ zm?0-%j$zxnVlRQKrB!?9aFO`y&o@pYxP|o2XgZXthfczlWkE;@feNTryT)&w(g}o~ zKULpejW~j(PRGEN@jPoLKK1oWP8~G#ny|nG!wlMHgSJ)x z?eWe=v2eem%J3{RbF0BwR5Q=*SSP!7yfBVzVfJ}HMl^cHV;r~Ak^XYf;Eb;luh)CH~l0$bWt}wOO-#YNJA|u%VL{C zIuvB{$9-OvTNplLW=OM$651Yx_-#pv?nT~tkycBAvkw=KRsAfNj!1Yj?-Y*3 zl3*v;ES5sXML*SUD`u|p`Y#;H?264F@-u3;nzvf<5rfHW zd3`ZF_I4KXENKbnFvbeUfieww9lVo&*cN&PYm-kuuv5tYXZ$s>G)^)3SjdzBEBGt$&84yzXU;W*HJKC%l}Ip4~Pvjo>id6&aFH@E0oQ;*!7*aH`> z4xxj2V}j2BZ_F-T;O+Z0`3*`$70YKwagZTkw_}CuE}cegbYz6(R?)P<^E%$x*GDt4 z7?iJoRakV`Iy=rd^qF7g<^8P9+dm{t_(i|=j1zP=!Rg^%#t&cjGzW54c4B zVMGqp1gM`=&qhv@sB;nrDRd%^X|!X$PrU`#bY}SoQ{d%CaDA*DnFF_;tlvCtyqxE4 zf44YHlI_7`(uS&sbE|)upOR9o(C*1wE2Kr6pRowRW(vu$a$*LyGZkn13f;p}zXks{L6o8Q-PN;nGw>&_GIZ>2BFdsnT)9 zi%NOh-QI0W8CcpgizE11WiZTJuHNg61eRPZqU(hB(E#fLSEF{FX(y$lR=U$Y9WY?B ze*qZI69Vqk9gGNb0Y47eM6msm4NAM@Gx2wikHnITY;#qrfW6aaa^EPMxcDMAMwkqQ4RIyl1{2JA+K1LWe7OqOSMwXqugdE`7hvB>7QERRF? zm{Ru!kgKL7fkHXrBPuGob#u&pXLjN~D1pbqipKPXf4P>~-NTM@IeL4!QNhF6*_pyE z(_c*-Y~|H28;AxT=T_+ywKVwm!copiMtFybIBjfO_V!VFeN9MBg&9^hF{m4~8(Kug z!U}M^1)&jQ_$pF{7QSy~sZCVq13^OejeDT6GIGOX4#E%<6Zafr@^5Wzy<<)bQ%__9 z?t7%}8!pBNED2F-*h&wKKZ{N4q-mF8Q>E@Nb|ve_J6;~JF{ot)U!LwO^%mU+6K@Py zBI^^)x2XNWCA3#(Amz&tjYg~-{jb3wU#HWz>k7`mXyQ5cWfH#{X|DfDzM5<~#tFZ( zH_ywR6J* z0puS2;jj3FeZtfIL?|yGG+$A86$bV142)BP!t9~uK@GUJ)$l++T-bFh*jURTqC`y2 zmrmh}lK})7`RH4VAt}%vGR%4>)d+IJFR7L*wuImMge>(RK|d_jw$&ped?$;~&H9@W z=H$AE8ESxdIG<1QrE*DbBD8+@81Wofql%1AJ{M1~iFRFFC!$0;cR3RO)NT?J@l}@< z06l6*l-yF(e@9HX0;c8mj;gqT8JJS2NV!5^pxux zyFWD0ey{l`B0^n;fDruw^`&jUh%d(&A}Ba;ql!ZErCj$=>ZKAbqRdrde8QrSy5c9aj9C?*%@l7?dpBr8(Fb&x7&20{ta;5TJy{_{Z;6w z(BY|tNO)mls_YyIMFMRPKyUHmC00zlKxD$c4e|j22ts0H^h!n_o4`5J_k45B>DBB2 zrX=@C9GUC?_~IW9w$#?3a@a87jNGm`VmTd9!x?Zw$U9*po)|2yY9-(gK(NYpx_bd* z2OSbLw~l@N<<$*`7ZlxrT`oO*73Oreo;#uAaB$}-3#Y7io$}A909*BtEbY3P1fC-N z<&v#jPi<|wrbV!5nOrn-Gq>;N=XPtQ`|B!l8gp`}$o{nbBHx*bnfW0tuUZxMpn*`+ zho}91<5c5~C*S=<>&r+#tiuCUp~We1+HRgq7G1BKRi8a;HaZxwPGWq6^#zr zI)OIzE9%H?_Q!ZC!nLsVqPQM?!(ux&px*=LrO=9K*u+|bkQ9@J$n=0;pTrsqoIE*-Lmj0P30oE1D0;C*idHCw=E|9z32^8^a zS-4kaR*aO$t0e4-6XG_B4lz&pI|NWL!jBiJ8+4Jy#Jx`|Jc| z>(aCldy`<%{geGO1?;~z&JVJf6Ui5qs(?`I7Ck@E2#`1WLuTZGX$YImr{2wL}|>JJu+#3O~Q z&->wi!!?E+WoXkVW?>E|6j`D_OOC&A$65hX5!2?}34nbBY|K`Yw-nYDDbh#FVFmM> zQEz>OR-4Y{cBrJvk{Y4H)NI+pv07!p$RcfUB z-u#)e<&wdjt=K7x1S2#6(p1CN$^~Y7%N1fsH%w6g$S5V~s}IyC`Sp{PH;7M1b`qpo zJ#VikTJLL$w97(vpK~B1AjG^xI)sNZhRz$DF0%+`%F&3u8ZOzW})hX%#6*z|NaNA=W;gQ8`s%c^J&SAt@>68DBG59-|9C@=5IY||( zED6-VgkSnqq+| zjL0^4)_UmScAee!DN7I8OU(_PX9R50nF5z1O11@7REcAuChxg@a zo>BhfwlwJ0jKIm_oOkDrY4{s2HDgEJ#~(5jcO_6@Ex@Nc)jKheny+k9{pZ~s^9R$7 zgIfHmxBvY8s6O2;w(IG8(rO0L|B+kZ_bH&M#DPdiCm)+zkn#J^E`Sh6^BiwEZaY!w zGO$8@cwt}#4o4vBfb{(r{@syfZ;ewj$WWa1_$UhrP`_A@iU3Z243P3AmU!UQti=>N zHzkBPRi*JQQd%4C?jY3^8~Vg2pUwNWiCi^F*++pb!bGs(RR(q&I{bFY{Z5O4!+;zS zyw}A{3%N;%K1ks+>=Kfrl$?@$XM`aK0FmX?zw(IDSekI8Hn9ZzbiB&HI71a*rJfH+7^UMg$*y_c zW66f8?ZrU4EiC9V12Q=9W%Pe+Nt`{?St!H<1e&1>ejFYg!b}pK5O8s4qk-&npR5H& zjM3p15<0J58MjV)XqJ(?S0y`x;l9vp`l{k%+v$PqR}%gqEh7H$XAjj_X`tO{6A<(? z9@giKc&0~tM;amDxjJ{<4i#qJl_p1adm6c8rLF8uWYPEq_OB~QApU?P2gGNx%XLSN z*HN1r7~dC-a3D5Rgoh%gB>&EPTdv+eH=?^Ur88CnXbqTY%Iu_O)#w`FZP6R7MM|`0 z;#hhSn*@RXx5_91SGEmsgXs4ExBh?wBFh4_d#LH4-Igr`kzT*Im|XgLy&&c%D$W%< zaup9%9VZ|NEL3Q)jio1y^^Nu>M@_2T1rhOuI6x^GL&ELH2*hu;J2wfUX+4M)9?1)| zjm6IuT>>+cUY^E+4{%|ejba1@7@02tK)I6>>(qjRiP~(`6e8H$qXm{ca`qNJN&a$c zaVwCbkb8Rlg{n(38`3HX!lOoghZ%A7!l`tm^N(M-?gfi5jr_7=`Q!6}}Z^z*G4T%q@quHyY0sAHU5{Jpc=x2#KTbl?04F z*2+yX1Dp=?s67i9D^NoEi~c=S%~bzmE)E`;C*tjt#;CWOtw-&%15wZNCQ03n$KsGC&lRVD@hPSyM!3bQmCCjAQ!-B9-xegekrJ38SCE@ymk zCYa?O#0bfM*a))ETIStt1{+jqKn6xO{Obb(E*aRmNsmKuhebl_NvS)m(%oPQ2DQ1i z2j9AOAhEN*Fe^gn?dbq~s|)B89}i&v$P`G){02O??>L0`VAKiZwK(tpPV*K{!Z`}n z7-cSor+!08o3Lw^0jUX-6pA|{7EQi4d%HzLu`U25#=sMM^x_SfETJSJFb(x5VI-W5 z6~SZ)2Jf^Hd>l>k!N+lH44*+dxwBSj84Z;v#uj>&6d0I_LR)JUG2oz$i2cE#BZ``c z!#YM1Wj92n^IWej)u~Srbf$hDiGfP(sfU5Se!L6OV9q#)@5dYM?TZl<8r0Qe*RY6LzTYBf!0@z4`LeVCV$n??BsB#ve5u(#k=Xnu>L?m?cf@}wj z9g$xeCt4BFY1I3%N4XM5bg3uVHzXUE2#966UHd5BG2(3CJXDZ%Z#v z0MLF9HQj~@MxA7MtN-pbq_J)?+CLRb*k1=)JFq-Hi(a z=RuM|;`TxWIlb}*?rDvW97C1wYGuQqrGEMgJ5C%j?1WHol{3CQ^|^ByPHLr zfrsq^ub>st+gc)MKn>-@Xjv|~WK=6)td2&U>TOI~5IcE9Q z65F@(<%5pI#2?KmOLS{75Yqd*-0#;vu$s#MxAkDXyKiLwX14_$rnR-T^842N#vuNj z4~vPw3%S{;xSj-F$OGckOBgUe%9y*o05lL_>s<-dum2dwxXQ*VFBjWnj@r^US5q%# zd3eVZLB3`U{(&VL2@ykG5`bNHYz?{RN4k4OPljD*)wTTk;`{qE^BwmGr#PY|e{f+& z`lm3D#92?spnr8gM;&{+G6pO%k^|OptiLC#b8&GdD@5(QZ^VbP2}av~ii5S)KC9gX zE+tz*@3SdT*wXXkkb~dKAx8L?b{7^LIbIn{X?I5&*`gY-Ttfv&K&5-f%Y#ZP*#oD`nt|a-7T*QP*YbzSq?+RMX4Qmn`1xm zNxwGlC1`8r5(9Y`Fw+fvyq}PH`Wgc+d+h)yQV@Xob$_TMllDn;^Yc_|M?tP;6H5R+ z|FH-FrMP|Ohbn<4%z*4btQmY9EDg;6L5CDsHvgvx_ERqf|I%?f#zbCeIT9h7Rz@Fm z1+CDri41AF)OhMfNPry4Dz|=lm~*4)7EW@~!*Rg)?3G{(^uW8M^{BZf@B9M`8iAu= zl^_oTZ0Gc0Rh8eA=zK?a)ypVBVgXvzS_ub=AemlT1zC_Ax}cm`B!)|(`5d>V8vNF# z=sqp(JH{6qkRC>FBw1K&^j6*nMs1PsP)RC7&87CdLNQW#VoWR`Ev(Z+fg-g<2VL+( zYx=zC;szb0uDDPdC4JJ-M^Az$*1`JmuYV=EiHQ#cJoX~Z$>t$JL7g{* zEtTI7)kOEI-Pnb5`&`x;#C9E|-zCH(q0BokU2R&4O2m3oi+u3WEc92{Lv*SCJKNR7Yv8;1mLy+ zEFlPht>;vOi$BAGH9%(iopMucm~A^(gUC$m^3K77Htiwcvx11W-MY>&T$YTU0lT&7 z_d)I+ZIc6+fl(}IbKA%db+FHn%ruSFB7Snu023I*u*L#4IHimBmXQQn&-V$7)QoKW z6sd5->yjfJ9n%Ur70Kg9yB<@QeASWFKe~x1fFYeN{ z)9K2{g8g%xBVpDKMHU1o{sL2QkEQODF0CvD#3AaP{)*^tY^HH$U~$kwgutV#zd|mB zj$#Ahx4jcJ0FqLG_rIh+E>0BRKAvcG^_x-GnerWvfj}7nMK}ABD*;5c(k0zezEieN1;PJv7-m zP!>pv5}kZd#d~x<^H|wX8j#ss?Hkb%9uXdihJ74Xy@#9eZh7;Y@4(a&u;dcODzIDYR zG zbZueSw5@X*o~fYj(b0E&oOU>ut$*Jx2}B#(|2d&-mk-x_`_K4aJ?@J<3G<97*55!~ zINz`Pz8@v%L{AX_)l-w?8n}0yg&o6e!cwenLvgXv|1b)<=i-EJwxavzfC_^TsLIS@ z1p^#`mo)|*6Jga3>d~?w++dLn@G39Jdu=!~MIt_mgnxwHHsCd*yezV*+SJ{^L1SQ4 z55~g|g(VFOb+cWltn0V;^QD?YICXBg5sjikHsfd0Fk zlfPTUk&rPp*&G~mI_7K>O(x6h7lXa`Ijd@Pk`XplWZi~&L8bQ+u*bcRvypy-av{fg z6DQvU{vW>HI;hIEiyM{=NGY%Z>29PXrP;uyTS8D8Y3c5e?(S}-OFE?+LAo31Zg}r~ zp7Xr#GxN=Sf1ME=XU=`CYhCLXYpwj#XeWz^0k2w-)w#$5INAZ8b-q48s ztml18`HM*c;2Z%@WM}(39fr@JZMiwwaofvVR*54gWr5#lW4cJE8)zEEvZ z;yo!jZCy{z;2j}9paUpJ$~o)94fmIuYnwO9I}%Yh#O!|Q6o|_hUG*!9O4Y)V#DVEL zA%0<1!p}L-68FbHk*2>ZBXjuH*EiT6(%6tOqB?w{-1ENfVfDICHvohZAx=g;2I_9Q z^HIi0FR=)s3hDf=k&Qq*)q*hVXL63Jrr%f@$1u ztagGIW$|@n*Tw6kj7e8Fd61^mzk^cf&?GmNMu92eQFtzcGvDYsDCHDl!2gjZ zH6z%8?yQHhU3ZxBnk_O0cFch&fIu}Q>aZscKzZ@V&I*DId=71Y z_TMOFC)cA3=E+7X{Ck!=hhei$aYYHdcVc4qK!q2JMZcDYVXbbOy%-!G($`?L6RU23 z0>eN&^u8DA2H$~edIXzL0vJDG9mUR1>t7xd+lDr2yX}DXdy#_BE#*?c04z%Kyxe5S zip#7Wfjh<}x)W&`=km74=5*b^PD>~RZF#&>694Kl$_DJ$oYh8#juBPl$3N%N^Y^(@ zf6{5HLIvL1aX&V{eHaI*e+b;Z%EFOk!I{tiOj^yTz~etU!4A#;!?L``9JyR$6@klr zi#6`G#@vTAa3kPdohk~M?ZFb>X0vxF`AHq87M&VZ$4+i(RYHKBl@GSK zr&FI;1d33g{8{&hC_HtCn%c5OZ6p-iejujH>+K1%E1W`!AB`buT*AhXS7@a@j`jJ8 z;;+>d)FGBsdkDqV$Ql_zv|>-yR-h=3^W$fzjRWzEYnk+i^*d4i&8Yhz`e4}IOHKY( z^r8MUAeV|mn^>@3PAW~0hbS}sO8PDbLErhip>11iLSj`wKx zF-^lUWvw=D7z+(JUE)lLh_!Ib=f>{_CgD6N`opm`=++#sfwGAl4*tK#dpPosRf%tp zERMmq@jS_3tnJs$W}b7jHZ+Uh?tq#_r!8<@94*hT0JT`FimBSj-EDn5q2&F$qnYpY znz{5s`_FA=CX~*%e;vc09SLO;m;yzzT9P)sj8TDx-dBP@3xI(%J~aTY7}Ye%^a8L; zw9onf7Q>m?*`k8tCbw2$Klfwk^?I@3Jdz z^eN$5v5^Jr-cZ1J(z*AQ^0|Nph0p{4*-`lxlSKR_1>&}+i$B$JubD4? z2S>f3Y?cBGszPhRT&Q#B0(w^`#3*Wk%jtJ4Nx?3_tzuYN<%ryJXZzY^yE3!mH=lYH zo(VAb69)5~#nb(Gql)zSe%VWsNdp?rL-h`H#he+ZeI1*0BS<{F@O!g#p%`_xA;>yd zg=t8`B^1_6O34QFl9~YBd%@4!D-E{TMPunbZzvw#s#P~&MyRP$jx}m9%C-9c?J!&4 z)Z}qqWB*iV>i5ijEN5UAVV-b$v`|4L?hq7}**(mAPBG+u?Lj5|h$PZ^3b zPZA3W$CQo`Y?!97oQzXe%ZO^%!{IzInF*K>ZU#0dV;+@h*ALW5R)~I)!_^ zv6D$+WOwsfE9;Fk0AQ`Gg}((iW7L_q(H@S{E?3#BK%FRo3&>E3EiA*yPf^Jcd;neU z8F4cxaRJlQ(DLbk=fov~O`Y^@U2uqLa_2(GD1HJ}u32oMQ@EGCjpZS}tn7au$0HF3 zo+qB4njd}kUIB4!4{YCkB7X-gkL=NO_3JDSD9ZR{>jtn@*=QiaEY^TrS0?_R4*;K+ z@g6v@TSS%6K0vlsMh~*Jb(F_Z40(nOVt0JuWS?W95P29lANa3&%@y~Q+5BSCcvu1o zg<_?(wzP~FT`#!Qe4e4czED3|!Vsn+Kk;1$y!5S$Pl!0oA24@VbvknkN)lYX%B4M9 z<{Mi-m<(MBYP5WPoyz?qY({4<8bQ**;nhn|ArMdrC%@a?r@rP;(Zd|S-ITj^b(Y8U9xILw6MGLa?Hq)K;^dXH- z()(%T&?xgC>c9u#1Lc1+wt)yEUc(^aOi#~+dyal954+tU-;p4JmQhR+a+ZP0Hj5m6Id^I&~#csd&4K}J^+TZCUCGYZn= zBJQJrYX&zo{l#3T%su25LQ+Wa2`fsYthK+!I^K7Yj#-*ScIpLEc~eGRtbm3vOE2aK z0FukYBwVCkb@}x~0l7omY2txMI?z@HlBDnOHCg&!vsIM=yz6i$SBgW(2&|AM-$&^m zKg*ht$9dU5A;|)8GW#aJQ~*2qB_8seG}tMb{@XzM17NYggE4N-a2Xf3*TTlDV{`Te z&EE@k1XsF)j@$EE-ldp}zg~H8+jJ2?b_*t+tJxSDyQfNus-H*;OR8AgSt(2lUb`aW z3*@!O%W)d{v3sfh!B^i#ioWf}iOHkIem&?oknp~`H$ViE^hvkTGiyFetF`t{&;9X? z18+Qa7QlK4rOw>755qm z_9#L;s%4}^FetCvB%U%n>`fQ%QvhX6sdM>C@bMjbS5aP@=)z3Xm!HiJbrnY{m{tal zLr{<#4JH{$5aZDG{vW}e6WNC}T0{Uo^$8YX&ZER+P}X7}OEfV|9AJq94Bzyvb&5*_ z=4lm5aAc@hIOe1{w40KWQyuv*SDd<;9^f``g=0oLg-CRoLL86x;mr&45KCfxF8_tb z()GP0no-5G`1`K?nK1f|JPi3&`6MnWOGwdSxULr|czuWy`yYbZw*ya`@$=V0nDodF z8zX?WYdm~Md1waD^Ie8_*}vIN1&p%bcS@ zp~iw0Zy~^KXU)PY!@_4>=8bU3byisVGR4CHP*dvwNf?4p2kdy=_AuJyQDiMxB(ygV zCQLe^HrJ{RCd9kvA)Q#4MBSjoHULu%CVv$pe@ltAFk{tm8J476;i}Ry`6G{g+@AGk zXM?x#yzw}W8*}Co-mQRLp-oZ`Y<4F_(lN!!D$OCkD8_H<)pd&8xh+f(KSOn#0Y7+R zR4w$dnkaX^@z+ebRNPONJf3O@%#X#zGKrz7Q?_)JMVA((hHg}Yq`$rX;O@*`*GAE2*+NA@NWqV0% z-Cq0?4m^CmS~^EJ`K??35n|K+Bg6u$?jxox`NJj+DDz8X&c+UdBq9j2zs~*U@qPkb z9SQnm2XzK6oSdC?1=h)~?(LZ|O-}as^)Oa>&UiT-&Ehg=TEutPk@Y=B0_Zz?CFt4Y zSfC@9uj$=`G?FrohzJf;sS=o5e{g%)+JkFhAkWDrVR#(Ec2!;l{IqXb2}c>T;2Qmj z!}*t+^LMnNX%5%K*2&Rf*PzwW(Z?f#SM}@#U>st<6#GOJ<-J6fqKT@?nMf%sTNM`f5K zPlA1#P&{r{!$63r*-8|Qj*0=jbRZ}M4W<9szQ^^{7wD#`wXwZ)8Du2Ol5|;|IcC4W zM{HC;IE#nue@IX&G5sz;@+}-2&Jl~p>zInPq4wco zf2!DaK=(s3JxhRixZ(S24rMI?_Z>i6*o1}>6m9EbK4XxLR~cyQ<2t5t^&W! zhj(|(V`rccZ)AEmWI7?pTKwjDi(C?-gJPyoUvy4hW146x$Nfj3TSb72(Noy%0LS>T z3X-}~tN-S$Iz8RU{_mc;H0LUdV{k)~V`p;Aw=Y_Zg;~0 z$Wg)F*S}t7i}Gs1?W6~IqqK{`-#bc{{Y@}B*y0ugH7#OI9Y0ZLPaa>+m>f$(ipEMR zGTO*^Y!HAsn%K1M&e!TZya~fUsqU}HdPmZnXMcgs^DOWNu(fKIG<#l;rMLP_7LDZ@ z^w{B-{+ftX3r`4CVe_4LOe^4D&-jct$^20*=RxRWIv!bZw2y)sqv!_xw~jlLk0-o* zS_FmtFM-dKf@#CL?o-b4hr>)n4GL*SVdC8k(YUI0kb(LjZ!*KZ4+8Bjli#nHY#x5? zZ(_j$f~V1YUEt8&(YELES5X^^I?yE!u2ZnU<6IzykO3F>lb_{{;!njs z5FtY`+HwxViG$=~g|`hGAb#35L*;{4BXeQmEh-XsT~EG>3I@5(SC4Xjm?M!Whq+jo zB;c`bM-*g?kTp(ENl+h=8&&{TWh@FM1mP?havO^{QJ@p@HHs35tc-sn3vV{A zrSR#2$Qe7~ZDL>Vr8nBl-sA3kp73(}^_w5KtPk+=gzu#)Ql^t=XleB4!w~^~S1d_k zCEHacBun}L?PiN{W+NktHFN>*SM7jdew$8{9rnFOJg+?mhg=pPZa^t2s$-vGM&AHO zl18l%Hd87G$;+36kG~TT9DdVehY@1}92a`FGF}Eb1jLu2A<=4Q(Al*$>%CgJdhT~y zGhS+z_w~NrX2Q+}tlj*xjP1NWt7b`&JHlK*R>`dqJ8K8?1oZG(lYTbJsX1fOs# zyPw+*v#V{*$d{-)5FLQ|Ya$VZYKTaJv#-go$pk2iz58*b)X6=MO5&qPe~RitWvr?3X= z9~%i7y%GdkTqbYxid9uSF|2Lb84-wRFY=)X4iS*eAaakkTbY?fN^j0!pB!GiS!sVK zfz%APFmsbH`dzuRRo7FdPA?nrChU_`VrhV?YJGO+n+C2LcWTH1B{ujCE*-QA4J}km zwc##zjyI9Pzjvj{bo}qQ>P3i;%Ss6t)HLK(VKXwOk~Qt)K?CG|Nn{7c&qP)Mp(x8* zuB5??itvuz9CqK3F<~ivY>ANh?Sj#Q_$eIfF?H6C5q0(k&WkD^E1Hzi@?|xiw}Dmqr#f3zc=rvX?-2H}v`6xJ%ulNP3yQmc zfH<=9p37r2oS<^6xwzN&DJY1qV10_;5J*$aG;~4FR6zXPsf}}kvV;)z?jyA;tE;=R zeLeNRraumE7BiPC4Rm=!FQRR3mG^+>$mk5V^{P%azUmV6V2!^=~LhZMXwFNJib+HM# zI>S2C#Ce5meZgDdyY z8(Bpcc!~V2Hb#1EFiT(A(JSz->rf^mCrpJ$a?s6dB%;M zvuopy3%cGBiv>n*TcMgw51X0Z%a=@*o{Xjd)4W0U+suiH*7KF9u!fdx$J6z?r1w7$ z7U_`J8oUME(!*+~+?@6inhne_+_15*s*L({1YEZnkPlt5L<3NBKh}=|0tnOCTfi2g zuqSmnNRG05Vcs~P2?hkx5WVq&QEVV}P0Pvw-4O)JVF$23U1=)IQbvCUNzOGc7&<*k zgaAvRTIg0a#$P@z?QcCoI6+_~HeZ?`0dQJ$>AJER4`p^10*+wwq@v8Gqt*Y04AJ1! z$3F-xw{Giql0CUEQwk*_3`KcFi2D%iZX=T4jrzAg(?uH2sP}HKiZ(6MvP5oxH)3P_ zpiWe7qNvTv86oQ*02;2k*f!oF2?906PgJ-kac0r&IW=*PiF#Bh%dA1($72b~voI^2 zt$$6EA&c_D4<7U`XGTxp+yy!4gTk!$F>3hiFHrN0*~{akig#XDth>TT?sc8)5Fu3t zQ=}(_5aeA{U)BKz7x!KC8-AJ|Wa1V(RF$VhXulS}BREy9q9Pg2Jc9}p$YcP-%8_sk zNt7`icrm3a*r_zKbyk?0x0-o{fp@Rn)amrVUiKCCTu-H`6IdXX1aF=#Mq7_KHxFyG z*(kL_b&OPv5O=KhwHlUh3nlsTwYk5~k-W>f(uktU7@CKN(CWaX3G%B~fn}E9cqf*Cv#q7c+O4d< za-HT7C@xI{3(?s4IA&Cqz#IHiUWcQp%sJ$)jXp)&nGHB}VxF#sH(l}48;GCL(RX%puz=rDwGt(JUZF-@lT1!218g!#@I5?{<-SAz8)(rOuCk*FnqcY96E4c zfkaHrgCc!VIB$MsgRK^EQnwC@oJY(_z>*eA1YuHezCiF|Zn$e)L<`Nyc8_ejumf?# zLS64l`&i$|d6GX|Jx5iDdxFgFQg#8Rr`2sHv*~PM!SI*N#pb9^Wm(xjg3*dr z{rVhp{`4f=D|Jl^g^{Y3y#?LAI(ww6<}d;u$R&3~ww~i*FA${E;9<`Z&@-lLquw)h z`#Yh?ed)`a>yeX)jDC-!6=?TaMOzJIpG2W>M+oc+f|Y#eMW8`!{y6 z#<#ZKMq3(TH(X7iC3))7FEGtf0m%m*bQzi?evV~DF!g~AJT3$ZvbtT{ySF(^;~7at zHf8XA8jcm8ehz+1R_%Iu>HXt2JkUz~Q@AE7u_;jqZ*zAVQ@vIrhyHU8h znn+SSllz@Kv*u@AXOz8hwq~DG*RNor*+yi6QFmeAggQq;?znsOo*qNGiND??Y}V)I zHX=G>P0apIl9`K8Tgg67PgOO&5lRleG(7b`Hk|0-etQrcsWtd?TO~6pF9M#r%D%6E z))eQb+`Z3Ja5DWA{-T6UiC+y7`p63X#(K~FdzbhSfifztSfG zftwbU!mZ~W=i;CT4-c~+kJBfr%zCPHJPEctL?D1w z3alto25Ixtkz0r>k79;ZYo+x%cH~9CQ!vf~!scu4>{7jg*EJ^X_ud3*h_)t{>$efsTI9G?Lu5N}Ang7kmuFC6|dZ~83^t_*BLQUnn zr1_mU99|ir=!Z0v?=#2bAoVT-S#s1a(eJT6erT7x1oqC_ZfslTgpWBtFCSLc4zq6d zfcSEJ9&H?%U(?Y^;uy+#;R~ZGX0>*NU>B_&9#WmGA2vB2GI6qg9DPl~U;C!~JT>7R z@*_FORSx2n#W)&O&LRPLNr3?Uy9JI8*u|&n^M%zU)Q#%7m&1?I|R9pG`=a zEshX7huxh-<{B{T|Aje~OFjYF^u2G4rM8}mj}`UQk=oS394y`oVe!u8erW16NJEaz z6)7Gpd&6p=^$NSUhfSY2idHfN`HQ#@+6&Uf2E?N3^4X^u^MeQXjPb4A$^%hLf#Z2O6Rq)10# z-Ys*f#56Irz}b?bqgz}{&!k@m%a#Otp3OGH){BF-HZJ(+RXFuJm8EUS_V@OGYv0oX zjZNFwfa<~```zOT8dn8`+BgW!XGsUUa!NTN9(K~_bdS7@$njEG=n?^Sl-%{$(jdcT z#m$QV=XhB8i#Kjd<~rYIj}eAdjrd?}aobH5^NNfc+0)%QsUo+95Kzw)B2FCjOo0II zpo~T1rG$W*i1jD;6*R>&WicYf;yNqKmML1_1`M%djW4x%Vi@)*;vU$p&0q+J2ZmH_ znz?#;J>frZ;Iw!jGfoYm?Rur(aFpw|(*zH~ri@O}MT$%IWv}?;tUe-L97nL_1u+Wf zE?;|V(*#LJ5Ki}{3mbO~%h|;dNs+FP$O5|ulgc8h140XQr3;{tFk}H& zvcO;ULgo|UWDSw|bKW-vSMGA8#i>3nSwnreJ7y~-fB$5kp80j)dFU%| zP*-%b#unS2GP!9n0b!d@O`a+KI|qsoFTR?TV`vj9I9@)stN-Ct%fw0Nox@)YdIO8F zyB--dF)q_T#Ee&#aRfiBz7ZMZ=2o7qDoj}}LklBK6pogobc3R>2af}9QDc;+M?d@3 zohRj@@^j4E+$p6B{a~_TtCyg_y^H~vB`44Xnb@lLVZqPloT*!D;a0MCYpv9r5ou2e z1L)2ZevJd4!b%%;Er07*JQ+MzhQrCnB(TfP-FMD0*7+&3&;;!5{&;1HdSv`$pwect zBf*;?u&v7I@fPK`r>z|tD^HmPz?RZ`xYM?eh6oPN0*%4Zv-FNNIj8^B(Wqd0m0423 z!6}?OXmyctDbL-foTsT|0QXa7n}Y(FBiNd>2?7G&kY%4lp1JB2vVxjapFKSvPr{eN z4>rzy#rNn#?2fE#9GECPTn84EeiH*4?qqu1cy9_2r$iqkwo6|DKT&xp{#XSj+I>BC z7>DCD3lt9JOD3I*)0%5-XCy$Fj_5YLLP96@t*OEOX{7_NqB2LB5E+SiQn&c^D$FY{wy z!OG(>grT?+v=igVE{hQCBLD|~buwgzD)jJS`Q=s!L>)*DTFdI`MV{8`7sWa%C^k8Z zll?DFitXZqAv&1BVIgmZQ#F%^lJUY8U3x-WKTl*kqM4-;Q1xzfmwTE{=P=_QYOpfz z;8F2kcC-%7OaPqs@PkQ;9Ld9}PVw`SOs zMUrvT-mZNyE{M!AlcUU51)l!pV3&;w)wKDqU!S+IZ_NIDj3J5=m?_t>zta1FP26OM zI$;}&G{Q=9%}@Kl5F)hmcQrgtwqAD0>v;f!x%V3LtmS!24Jo>-`!Gg1#-`Rj`ez>6 zBaPAz&(|VfirNwS?HvK`)}2cNQonSL>(K@OXCR=L7FM9r%XL&`zrJgp!M^LEr8XR( zPzc55c@U&f>O7$2*Sjy0FPTf#WH2+3=!mC$CX ziss8*R%lKfj2RNbjhfBj#H*K25g=urjnmsgbooGa;3wJ4@37g>Ahq4(xiD=yt9170 zD;GfjOV|Vn5z!DS%&p~orB!s~wnh@zjRLpECkUtg^(%2Irv>8_8DAxKPuM~jlMD+L zCFMl5BV7u&0o>AxH?v6Dr$3VyvdjR)E21w^ZN4baLNK4POf27Uw$hfX*HR1kzk$Z5 zR)!pr#{?Q8O&5_fXsI5KApyQjHMySt*U*@R)Xv3zp0GrK+Tl!kA$+Xm*oF3x0b@~q zQ0SRi`IGS_s*UJzhAzWcb6y17%&S(ndy5?GNa2Vlxrr?Y0~)Trko<0H;@K9Gw4^eq zPZm_`7uA3x5#Ni5HZvMIPD;*KBeH6k<&0Iw)9*9*-)?klVHdGgU1R1P^zPKZW8+Ae z&YJVap9~DgI&(kP@~=rdF!9-HAMUzppY9JnzF9f2F5&i(ZLG$B?yIn|bBvi+xeWN8 z1Ae>B`s1&@nE++B14xMOh>Gp4!k$yzMD`e+ZY}ZiWs8$bk=IStj14{kA?lI8q$KKk zll?Vy?y@SG_b%J3yk_*S)L#pjM0in^#Wn{#_K;%I1xw^!$7hy0hE{Ai3U=-9=v=`F zU?rk|6I{@WP&d#QX#PzU9vcq$es-eS8eWXA%EmQzQgl}jnDL9p#VCVh-5SS zo6NU9OqFWNPi^dPjZJ#@-JU0rvu0y2Y?d`fm*dtbH#^C5TB(xtgbt8mk_kAxI^Sl! zHP<-$+eapm=UidMUI1(fX|Op(4g2~4s?c%mTv(7S%rvRS8W;3BdnFbW0lqs$wk4ox ze@4H1{#1qRIBW6|plLS()qvq>S`ykZ2|fzS>ICS}H*O+6XuCf?miPg%3-!s(MWFi; zDGFd)TQ$7wKD(QjWyce3e;kG^tOeCZVp z4~3*5<1l^+)i2YoH5=so$V^S{-3HW}*3|h(eWq*ce{bV;dl0DDLx7bYJMAxJ?1crW zalU~gQD_mfAHmF~@IjQo`{?rPPx;MVJ@@J4?8sU;AJ`iEvE=gbes zX(hDN+W-SKtCzs{iOqr?y|y{dklc>^DS#%gy@cZIIxj*3@^ zRx*+(bz8DP`Lq4h$3eQ0tML*^n`VxGo4v8Y(Dk@;6+%V+QWnV*wq;AL#1%0+I{vW=Y|MnFfqo)k0gyF-iG! zw-l-Cn@MYsN_ZC>wor-PXR&&yLex*VTqcp4CQ#DqKM`l^UL09-?wF1?KU7chj6ul?>zN|fq``8m9PH-Pc9IB zG`>H%4wds9^aBEM{#)UNfts|NuMG#P6BY$23h1)YUZaWaTR$buBaDtJ`1P0T`GS74 zHz~0KH0bxF_McG-AU;c7kyLL50GO~8ZC=#q9w9j30(h2rX7xAr_-WAMRN0DFWvk5- z6Q|`o{gSQM%_-etgDbx_oVIxo&}1Y4u>BYs@l2#-xmS=U7q^bDp0svBT%dQ>iVTD72<%j8ma>2&AaR{4Z&VWlI!XNm@2DWC*iiCP4 zyRus8!M=-FtD=nx34c+HpIW_ejov0ErOFvhti7x|@JYhR$`&cv)~K>30yz2cLOHIS zk!`d-rK-S9zPd?Xr^J)V4)E%F1KM$BXa6jHos7%#>LYquQfc=e6_WzdCfdV!z1=A? zrE+tll%J`|3`RQ0;^7Ra8MNiEM;PouIGzfLV*pX}&ZF~7PNjVww}yam;8%EMtDekD zjYjV{CHBI7z3^i;)lbcj7hVr-w%<9k+-%(+Q8e%>v8wf%LNkiSh=7TWHT{l}^rQZ6 zfp+T~Q(hP4?g*$!jJ}i!yPa%J_0{tmF@Si;2I3p59GkuV8+oOap8}AJ5QHbHcdbs6 z3}M1j5IQ3fJQx*8>zf%ttlYc&A!i^2L&-(*R)BSq3vOwt`I^oA0D6?l2@5S06!A1C z?R?7{@wy)gm1ko;@7UO4fY5e>u{45unvC4;i{{puWrE-{&qONZ zM4Go9b@!#jmv5Y96d`^4k`XCB?$@OK&}OV_m<*8iQyW1<>tA`f=g*!_Uw5y;!wrMW z#SO#a(xBdcV%^@)q0)C;>$p+e&KLcp$@oM=ob3*KZwnu&d9#7EmDG=ZM8s)MbFtF+ zO?=*7TKIS7@CznvJiMr0c^V9a`G)^kG*+Og!cGr3#v?i}kZ4c%8@!8Z1xnD2DhJJ9 z{g@H@|1jq=5v1Q)qBgG^*IRBN0anziGpG{{yfh~~vv`s#0{#CG<-rhi6xCXWkkJB~ z=jp9+1V<{6IYs4TEXFb-6ed;2BkywfHd#%ZYSKK?V*u_CkB=-c?)>vV_*QHBi+mk| zAGYBM3%6X|x8J6G(yQxLamkC$^yZvDg1GvwP=pHe^H&M(kIsHisPHry)~oJ1{XQ4^ zdKjt?4YE3EaKrxQMf{D8!)OdImnv^O-#<;yY=%89vLa zzaY#tMk+vdH_;}_pD8S!e_a;xo7E`R-HK_~2l3!*cON11NPy3VnnK&3$0Q%$B zJ^mMuU^+Rvca-al!NPM;3Q~V|TsPZvsGGCr`^c}fJwJ1bZ&(a%DP-zD+3Jj7){iMq(*KQ6W;lIw-X`SDluB$njGa>!O*lxA}v9H`dny=tKx8Yj;9>8id1j-SHh4m?{O=W)jFhRUCezt&a zy8NAlum7abr`LX4(ds)opw%g2sj1N;KX?RPVFCl#d z?brOQR*?s#i9;IXW?>AuD~XrT+0(LF+91h1f=?Wqcc2lRNUS`vmvF<#&C}}TaLky zQ`$Fr%5qo{NvQX*VB%sonci*t_4V|L`hUAj2O&{S!jIa5S8zzZVMZ z#v=SD279rRAB3Hg35n=Ah5si8H{R<-k@AN$)8xy%88ST0<*hV+FIAM}vKdQq@N(B% z-8x#`zH{l8BS`-XHCRKIaaVK;XgV*l+vMW{By0zB-T?wcSk8pgm;$uO<&*hy##n5e z1vH{+&svM9xp(!Bqg*}V2o7XIH@VLp;I41r!6fIto2r#OyDikN9ZeRcw9^IRy;%UX z?u@}5_@ZLz>*fVsvKgJZ;4rGI2G2V^cZxj-SqO=W{X$@yj~@`0vix%Ghc-_umrBc- zC1i=!W;TgcSXj6^5%Jz?K2XrTJ@l-aD!bWrAHDbaom%D0cf-%&q+D8<*QaCOG022E zXHVk-_((;pj*rT^OaNnsLuQ3e-t&urUlhPP!Z3B_G!CLbdZp|aXQ^sVDIfS@3jBYO z@_Vf9M9#~PTyT8uDqOaNQOF)Nt2*6q+S)(7nX?%wv)2%~wOx?fv+-YN(a1+3@6!5u z$!942F!fq;h-~?d4;Zajvf_CZ0k484ZK@PHGPQ?vZ(RQv@2<3Vun&{(XFL|e;pe-4 z+-j}QSJ_+J8S}Y1=Y@V6o6CRp-*K~nDF+cfE+m`nxB`U!abRqPvOg*UlwZ47R?sq4 zyV$es%FxuFXkhO6Uf0{dNf$ zKk58h!usv&xu9I_FJ{jD>za)2DcoYFU5L$O=jt{6#wWgCSE@OLur&DEM4Kc4!J(% z1#B0-&&+|xPlfs-v${&>&~6H%ySYCMJ>9x9m`@ecet82PFUa>0nK|+VrYvQdqh`#i zIC-bgg15J5825Y}L;x?H&;NBVvP9we4ey}%ij&gCM5o8o{T!eNU|b6J?v^?di@G?6 zHM9;2fk$5SCJM#AZu456@nM+23HH$e-&Cn+Zobb$V*mRmx1>`Oc#ttzVPf`cG*Pj) z2^|~7V-92AKZKYERgGtpYYDiaT4%OH?LJ@;)|&Z#iXcLbS+iUB6?P}r?F)7EFXu|* zggmoRDb*;$C#R-Kk32r!dwl(Lhu3C^v2_2G#2|VLXoIKz8Dil#u9Sg~oFemyy7~F} z$hplPw>OsaO(`-p^bP?)jcCPE9_jk#l;s7SbBn`p$zpTORlgI{{ArY)>1BL?sdAo3 zlLXROhL1&*6`G^_vqsntqqkBEA^%|C>PX$=garqW_uE#FDyIA<-HN*tEqS$M?aA$y zG~C4ZAL-MCYy@7`?Ng{I5-gGH=^2Or&M@B#8QGK-F%m=90S(kF%^PG&bZQ4S5f& zrm$ICe{+;b?z17#4n?={h&Cx>k+#!b)7J3-Y+5~_Jv8g(CGbk69 zAnDo6$533zG<{CqJ69wA8Z6*W=a;4|G%69pjbI1BN%=#~(r+V1FeWB_-R7!C{lU8G^$D$8me}mHyCl#s{{~<~xP*MEY;T1U}{mJDSII9mmAPBoCl3ROmEQ zOeRT2TinYtdI*2A8~57lvb8xSRRm`6b^)XDmD_blm~?4fWAhr$L*h&-tsadDa)>Id z$Fo@^UXg*E>)C&Aha&H~6s@je4nG-ESS`jAN7{PbUwy?s*y3W`%ir@u-lTxL^(^OM z6;h&r(b9BFeTm40@qpp&~EiorejGY$Bl?ovbIP~OB_Y51; zKTUl{k_rzV=Lc=m1}5K>r7hpeqnBjD^bkorm>zO>nGH^m?cktAR+dH?IQO*vM;FZD72 zpdN277+$QctyR|7W9POQjjI+WUvG5rvyd}(Q~r8WUmxV_dzOhi6!7(U`4%~=DkEJ+ zrpJywPKo?iUJv5Sm(?FJhlhuiN|TvUap<#s0*2GhZeJoIfU&0h6=F8qopcEilJLOq$YrzhBM@J5v(kK);-!p6f{7hgIxw+=^aWkqTN(g` zyy^^LdrK1cQiaUd(!0DjRM!Lzd-rPT#gz4*SITSPWMNxAKtel#cel}LucET!>>Q#~ zFf=%(5M2TGa*IFPQU&ba%<`0`)FXWUSn3y0Kocq08sT@);#1ULX#=f7+MY{dqS(AV zMH0`M>{FXz$)fTAfo<;Voa8@=*T~<-`gyfS^(^6G1c3L|OGEbHdpnl~5T82XcpSEH zuyHD4MvZOmGn0G&s!WQg3vXEutZcGrBN=)`<$PD`YPQZ6PL0^3W!|_-icCZKT+$_~ z$&O7|Pq>0c26`B8m;X47Pf0YOG9SZIn+kct64%qs0?5ukVa4!qcz_B5&|f<>??>+h z{=ju_f?x>{nk}~Xqu4;@gU#*Jf>L_JPKDx8Tm>xj!2e+b4U_{+m|!lQe+X#=2Vupm z5c?fg`+9$e$G-#sPAxL#@K|X+#>8dOp(tBvc(PXgp`nvngmwwAei?2J`-8;*H<6G) zEsR40grRtdvOAmaEX3O1eMuz#nB&AEbJ#LNUo#g3Sk=&G)~_7o0o>#T1~@oiJs&X3 z`-k5K=|RZIf1K49``11#YRtapWIF4K!b{}2pZ;+P~BIT-dp_vcaf6UJIv7HGL+X%?G=$?U}6&lm|yM>Uc_+s z_aa8Izqh!65-&7LnjR_*qHO(8?|R&?_h)lmOAPB%&S~0g9{HL)6-J8_pun1_S(5Q! zbA+-kw!0D%jytgv$NDMqm_cQPY6MZze=z=Zcr>L%sYL6I*==xuicRN6Q?xLrHTK(h z7REB!Rvx>b$37^<19}+_jl|(U&;&}}jL_g?H9PKm zz$LX?4ZKICpWA_gZ4OcD5Fj3q7co4d;+CWA#^ahWft$|+%FzCiX8=YrN}=M1Ld+1X zT3&Sp^uYlJ$UqoAOo!~7I~8m9emaeu`i4v|1$puSx0BDTZ`N2Md95WUl?Rd8K z{jEj!rYROGxWRFaeVSP#P_q6==DzN5?#*Q4NRX=+8Z`}VPI*L}QvKf(mMN=wsd)uW zyockBZ6n6h;~$p*KCIWyQx*(QyF?4wVSgd7yvzPVtjC-VlZ-F|!(^{{q7=7_br*Zv z@)51bS~u40Q+4q-Op-`EyS0VZh$6i&ru4NT!6Bj%otFL<{QJ2L)qj0dG3jtZy%w)M zLY2e3W5HWo#acx6k`LkQ+@VPDm??#_%;b8X^EgYj4r=uZImNYUVU$C>4+}RhSXNMB zkKO$&0w||RsK+}xU(1tFD=N6)VMZJ#c{q&A+5t9UIBoKGKQhotndRR&iT_VQt>fM* zp5?V-Tc2+>?jy9jQh^8Th9_s1ZFPCrB*3lew`Ub>7aD0*I3(1#-C3Way(pJ}6*p8K zB>1Ta4t$lto1&2b*kh5LEyf1&3GDU%1{`oTTu3S=91ZqKBy!hi())z33B$0=jqHns z7^A#6$n*3~Au# zINs9y2f>rW`l=YRI)0mRRGl9?`soAuO@msw57K)pv|DsfH@$7)A^&}+EepzyFL;FvVPmt|?I`xcuKU_EBHl4P|3016+^N?dkmKPv4cV%CQ1wurqRCrSG z{G^3KvT22A2nt`uTBHO5zQ(t-Cp5e-Z(lL{E4Np+zs_NOz&tzn7HX2?`Rn%O-9|(O zhA8E)Rn<}i8C=H5J1RcZ$P3H=L)u%$RlP-9!v~}rHqzbQ-Hp;H-6`EIjdThq-5}lF z-AH$LcS*zh-=6cl_kO=$w;S>2nrqH6=NNOWRcQ8(R2r9~g(#`TDkMI zSOv($3tk>HndBe7+#$vrK}l_Wf20`o z_pTL_0DvA3r|Atxsf3<}yDO>J=h zv+_9~d7J@wK^GZ+M*gz`bTOFUnPs2V!CKqLNb{RYR{|dV^dG^#~yy$y0IK|Mu;gEe577S!jKu7ZhYALZi zpqMK4h|gI5#d#K_8mth6lw?_qP;o|}%ZGAoBjF&+ksq@{ z<9RzKE1nNBr{GIW zSh)dV{Pa_$ZdDP428I#9aeSwQfW=2dvely-aXsWj1DKVs|Bk4ECSR8HaL3--LGL# z&WFm`Y-Cvikk@BK(!+_EySNmxKo9`Rim__6cKY=Xn?5uCa68ZtnVmS+E%!{!a`E!O zUw}zsU}^0)^ft2C!~7m6I0Xa3-|zVWXerubzY`INcd#tUY$(rAQ&ho;|KN!4H0y|I z^f)8)YFp1WFr=@2)`!J(dw%qby+uqgyj|%-lTI1=4FXm%liEf?qay=~ns5;?8UB$i z34k-4-1-ue&frW4NWCJ{n3~3ZCp1P&S4J4co*-Z`Q849O@j_CLmMYCqbjTfIQ&org zI^s*AjImVLB^Ko(p)0}q?*x+cLhA=M$;;y4U?(Jt>3qO^W)kj6>@`Vt95%@mApqs6 z9;PVUR`7WKS)|Srza2M9utG)hPTff$cvH1(0TG6*;ajMRta*5_!l|miJhe+hjs}4SJ?*p!Y;EPV3#ecU6ZTl2|PXT)@ zqYJKdAb+-?(}`R;M#CGLKR?2ErS(fJs5ltFDVW3PV5pbFL+FEyXsKDbAc!FZ! z@`3MlIt9u9++GEy4&ZU-$016n0jZ;)iX95{2@^<{(~&I6j~FuMS9pgbEA{$UT`hj* z-VTY+6p(nbSx}z$yIBN)3duMRFBqbxru3KYY;ixqR5;}gy#n5SepoBBSW<>C=#g+z zkQ1QJ#PHT5-Q^3@_2DACtF$+TFM(iN{W=8^PfedI2xd zY12HyjFZl zWI)2nhpdIfnD%$`deVGYh7|bZmjMO&fB9V!>i-c&P|jMlg&eB5kidFES8C-rn<-fP zFCqxl+&Cw}dz>bCAScM4uj~@l`M0f=xC(UBy^eY&gzW7&X>QQ{RAF^ zx`~3LA%TfbUOTvRc|j?Vs(%;|6TUztyb6H$)yqIsQ%$}=bD@fy7@gi<$G#s_ZM%-# zsVKYOb-ajpQ@qYL4X>@CWpo*RTew<_EHdixmQAy()U|?*^3p2fs?VdAM&}?@^p_xm zF9sCfNO(EmSk3;BJdCm@JH`i}8ca5}$>ExU1!KKIdeU;8xXGl*Q3%~D^}KQjYVov+ zA7w-@;_u*mUzGFH*qX>M7LF;K72XsqO+=Q@aOR4bPfBfqs;TYtaz<(^ZWSB!1B+!`{pPA|}MbfYUNY zC_0i7rBwc-L`h26QIVuW9DRX1%U9h=F^*v;0Za-wKsJxFqHDa}INEyWz5YGNpXimN zc0rr(@esEuseHQvUYJ$5xRC$u$PF_2cQK}K8rWp4?y;Tr!qT*gfrnqJA_Lyrw3L+4 zu;cd05LQWegxTEkaAuq=gJ~>Q9YL=1@d7*KRVF)^)rU4$%g_FQm4bANeQM* zF%08q!Q}%G8zcPx^K(ePG7W_k6Fw+~CxM=}al7fFY%<_WD)L$1HGOWJDq!j3)4bJ7 zjvl7mnaRCjiK;l13$GhY-xn@ypL4Iyk-N2~P$Lxmpd%d}xAP+xsucde(vBS7yW*b{&9c-S z7V9v8)O_k;GAPh5)*m8G4l(xOfd z@+Y*-$JwU_bK#~A`%y{fH@OUEo#~hrbef&Le^TkH-#T{3$Zn}1dC9?DNSa@C3&;N0 zWSWOm8*sWLkd`D$oiha6#UC;P;;(iQ_s%FG((w}f0r{2$2_mGh3q36PyVps@OA4Sm zwSngf^U%&K(lSeciH`G9lWhu{6~=_cu*`&jiahX1F_pshf54;pf4M@;w0+|6QGj20 zIEkteQgm8Me*||JCXl<~JXsO4E|l7oP7)+mko*;`1Ivoe>;`jrz&frHvj18X;ii#U zQA(FNW*arh+P)(Wcyr+PbzYqMA1KP+PHHAOYOhHcY9aTI9yTo9v*Do{w&@p#F}nl) zFO5p|E`4;*yv8Wa$cHhR2}9ukmC%m73`bT!$8fZ~5``O~+gLT=c4qjYWGrBHx`Mc~ zw-@uBwsWUvMJ+0#qcdX^wDw$e0e7z3`An!Flh|}&X@NDY8!!d17q;EEyjcc!VeC>clCh7LABOQ0hk+Q)a4}8 zB?6!P7>O_aF9`NP|D(sZc-5Lhnx?+sWBA8YZ&jfqP6lXolo0**C`WQL1SNTt5WNHm zZ~8|_bleHD3fAJ6B}CZaBaf9}pcx}Mog6vn(}4)yciactf*h?l9{&=L9fEg%Pneh3 zUb19SVa7aB(!L{lEik2>o*%XGbe7H`vx0$zUJh;}JSIMnPA%8&B2Jjv3zL2#jA0wd z?P&A5m*6{1k;gN*jTIEjc(XxxzQL6|Jvz|@y(NEKRjV|Awc*QELPsCOhjhrEM+ezcJ@sGXR+>A@ z8``c))T6e*^E{7IL#-*&PyMv{&~$=vfqXMi(~xmtqP!*q?HimLk7(JfE)KoVw#XT4 z+G6L67htxQ!FCGF$S2!<5HCU(zR3@z?`fT%Orzn)=J4hC0M^((PuFr-v7ljpG4d)M&Ajb{!xWMzzg`> zI1)fkTePkYy;tBDEtzje5v}NNPFS=20^~$ChnIhT(2uc z3%BJC`-a-C!D5J4p3aMEc2~XN`IIw*qDvDa;zMo>R+R?%mo^Ghl3}u9qmUkYJWl3T zr-;4^Z5!weGnRZ&QG{}oC!rm~Mi)8;o^7A#O@Tku>dX_7Onw~-8-n|Kj}p6jCviBT%kEFDef-0_a}Mu`CqQ(oP8{vqkA^4UC$BfS^!m;^W!gnL6!uad)P$M0t>E z90N3VfI5(2xed!Jl8BMdXvxn(jQBBD$bU-rsN3(<7uZ#B`D;`Iocn1mHq%qP5;rwo z=HCw01`=fH_0CCr2}toEFL%^1N!B^ zQ{_4Rojas~=ML%Gwrws49?t(5#mC>w`I_<&VS^&xrPgnEMJ>DU-@;I)rw1N5ATNI) z8w-Mh%5h09?pA^&))60?(tl%&2n+9j;#bYu#G+oim<}>tL}u%>^2Y`X*9YnwW#e)|uM4DfjG zV<@cf#28S)C@^!D=@B32Ghq~OEv~nPzofv=1IKeF;2YZB5tERj1)x_xZcFmf=^zG( z_y8>XXQ`_u(fVLV36WdiKTH`=W4wCvSt7>Ic76nasjs&^g zqe*a+?VwQtqB98+RJa?<6F7DL5dv*2;w*b|pr4U~9JutI1q`igbao(q)Ig!7PSt=SqW7ZN-re# z$Eqx2f_VkI#{-t}iAxe$jFpYxk6dBNRl3mKSBAHhz{XQtc$VFzbHHS5bF zNOVQOa@!d{y5$DJ*Bmcx z9sUtJM7o#dsTMS;zo>@W(LcqrCEqsu{*gPnCd^oAW1g;^A3UG1JAqsHndQrG+PTAK zY^U{4-=Zv)_d`J7yds*DIr;azw0|I}Zae%Xr=!_=l!D=C;zg`4D0^XOnfZQcZfePW zm`8X(k~7W6JtanXE5RiA03*Z1-i5yT!D#EwC@5lQcxn|pX2NWbrmO!#;f1B?{O*(I z5X10c?)%~UR`{%*)lnN;b{PGlkZmAz@3Iq;fVSD zHnQzHyZjArregbr*IRHMyg0nJXJY~l^b?unXZeFwPl){-8nqGC^Jl6M&UkQl5)0WJ z8mRGndy)2KDi^T70M2ZRlqFBhcwxT*!xClXrtcaR{jfF%+!%!VeT93TC}Ln3jdTpcK z#7>s=3rb6cHu$S;Q_DvcS=|DQ62QYIbEJR-91HRhVm)-}A_kBVepuM$&Ml7yEDSt2 z>2&kbaw?d^Dhwf2>;+wOYbYiA4E?}D3pCV|VEM-FH1@s41{|p`^^PDC(sWFIdfJcP zKx&wS<-)p&0;$}u8Xg<^IH@?Y4jH`mP}4BJ%n}LwcYCaIzbV9iVp2I@c$`9?tLs(P z*ZF(y%COXYkBX+^6vO5vQ%aIdb>gTAP!@WZ{Q42XCzQATJ+0h7IVV3l#(8iO9Y5D= zR!c*D$Gk>CC+4C}mk@dfqRO#?sp-Bowf6n^5TG<31Lv_t{#hY84PB$&lTeLt0g33c z%==q{xn3>=pc2RA>JM^v38@1;-kMLsI|VDs&%?YSJ?}(OkFl|?I$$NAorgIom(QsC zt0!k52l{|L-@2b{*Ccd&y`&2(K4QaHX^@oifKwr# zyw3a6WWZYkSnM*-9|qHuyH^xe0DeUSe)QpgjXP305;%Gy;ag*ny6Um#*=Tc%kU(M?fbW(6XQo@xM;(c&yRL_a83QO5N1r?n<@{@jDh5apF*#9yX_K5O}E z3&xB5kQj^cRWP>*1kpw|Q70$gh+U8E)&9x`hfVB@d|jeWGN=jU7>;N^r>f_Jhoe<`L6YPga;pXj7C3|NK5^54D_+UiHsXF`6+5$YRl^V)~4{CDS3nF(X@ zQi0pbyJLiW!45U~#+~=dQ?6IoVenyvX4*0|L|nJhkx5)1^Wm`%Ii2X3e-QfmVD}M( zZ{M_wC%vwkC%YCU(?;xP4OEI2E$Xxhx4fan*se)tPWCvON@Me1r}oOSZKeT>OOc-X zaq(zx7cg52=LxjqC6UU>;gu(^-g?Q@Enh#7!~u)nCg=w$v5}06`)EF4uoahZfT z@O;!W$tj~DVTSyaSwQHZAbM20&EKc8JRZk6wGFAcB@%M#C9K0gXeb#K&y8Lt(={q} z$;NDT%9tX=?%07rS)P2RM~BpUaxNMnHn~KrHrrVP$K=^3Nq3!IH-odU+2>_ucay$z z8b#^i*Ie0Rht*hk)3XBChRlUrZ54k3FfY(S$k& zeM5mk_%tw3*Wv>Y^Q(ixIXm_*Jb6Ene&Z4Tl-b6KK_VXx&ITlkS-Qab*_Uk^OyLWZ zzRQ-^D|s5lztdPm|F36r=E}To*_C~;G%N4`%R&x8SRnEdaQpOA0I5rQ?g5r!r<(LB zMULQ4ngoXM!2J!-B@6wJqAGo_f^w9_3Gz5ow`>34;y1oBBN&~KEA`F66Q9V55SY{0NV5 zJ2~4AHtYhH$uE9yXK&=xl|`X>FsXjvc6dEMczIFEE_eF*2wrJ}zy6XlUicf@{J%~m z$j8%GU&O+Vo3>lJ;e4xQZXMxaq&;I$Uj)PEc9ou4N7xC%jY;?Y(Xd*vpTdi0j){et z#rleleYU}AH>EN_m6!6?Gjr!Vm)o&|WPh;8;@>h(K2aK>*mh!5Q7D_TmCvC)EdNp4 z{mzjPjS>2I&x}E)U%bN4e*Cqv(gJ!X-Wx}1=U*SX-RsF(h;0xkFw~J>fjF??&68)D zKSzgF-PvM_D5_*mv>kvZaUS8(5q-ADG;8JG{JwZ(#=@z8ruiS4`qI2nrim4oNH7Mfg5--4Ax^vUDK$PA0`J;7 z{}j27+f^Q4le8b7W`^{vcseRB*}(>aK}#yjNf%bd@%L)HEHIp1@&3O>+Q7PCSC5}t zGIx#^@M~vevZCAQwGtQ#=6EMImgG0`%~-~SA4^viCQicqqCtf^!wBh?{0EJRI~n=t zU`y2%@a)8L$#T-mQGCN&hX)dr<76yG{dn~@09$uJ61rbJQx;?~ve)ygl|L>%?qYe6 z*xvG76w{@005A)KzU-{5*S*;2x49t@!imRzi47J7Oy|yY+fc}<5bW(;CH9BoLfL*= zst(wdBxI{-s;l|F1KMdR08(kWoklj{tN*HsSBEBE?~pE#xt(zPZU4-(-_VLDRdRyG z!S*e_>Al>JgwRkIL@4hqbDZ}K^$n}d3dA1rvgLcll+rKgp%2b*4x6YmT(s}R5tEiV zzFA~1u{qtxr3HL9BSw3iQq0%UXA^K-Sz+|u0^SL1W>U9z?a7(!$dMa5i742{*mAfo zf*o5ij6Jl~`yutUriLl}obOM6maCviKSCJN0C8&K5Zt*5UL_Lt_$V$fGW2iLT*oWd zRbO2HkcvzM$Y#Nsd4mh!W#rqN3z;1NfI~vW%Gu^!O!OJIUyw>b>?&VF)fAP0osATQoBmbrrA^!9*Y`BSK;#cpdkLwvMT z1i){L(CgasU+bv4WN2wP-`uJUn|D4%d%+{3NR3Rz9n6`n3y2xw;};ReSaGv%y`7{( zyJMF=H9pJLw-vgCzd=6&$vJKjlaB$`)Lr+SV#Q_ z(fenRt`)c8qhbdfWD7fNjDhpr`HxYSn#zqJr_%1l9>Nlo^8lMoF)>dCM7zclckGx9 z2{{!Gy4j1pSJiLXm(rqL599-^IkLoZnnJ|-E-y4+1`nH4c-A!ZiO2e(4NXbf6hlo@ zB08KgKekhwpeGE?3mSeZN?`CJrRInb@fuX_4bhDYnuek3Gter8M;gTpMX3D@|8Y`|7eDWQB7O~@=He6 z6~t4z*JGcBt$C~P=ZV*LgRB&S2$jpMDLIO@U`MSuKDZ&3oN&7EFee$~9)M|W=w20XrJqV{`N9Kae{e;+)?Two zA@^pr>}bSHRh~9F@5w{g`-S0M#y!rg4a=jGk?7^pma79+t4B}4#_>{A-{^xHlg{cp zwep~A8*i;7xI(bd+mt>_RzbG!#41F^n>zJx-Ij$^jcCjcil9DUZV81d<@=+P;1l;5 zh_(YPh=gJFO+xqs9B95B@Px@xfIej#=nOdabz%#Sz@5SERo>!% z6Q)-vmAfV*Z7)$kuy!S!xMR2nwKgDa{IJTN?3SYjBvTX7tRQVk6~-MhMEybdQId;$ z8;*Ki_cGkExI_t&0eGY>A|Fkf5Y&zthd@jpF7Q~P|Qs?FdDV%Pj9)7>*zLFc0-Lcq+t%qBTaU zv+3#ndt5$kXwB|^kNWt;MBU3A)ydbzt*POM{(&k33G|q|Z0H z9-*ltDVegg3-NMk(aKAU@0Rl!6GN{wxcj?W^btwf*Kg~j4Nbqqjv;yI@2=#qMV8KZ z`dkSiXep0S}-Z*Dgn@6u1E+080$rwNjiCvL8R}c(O;>wfoIlw865ck zqQAjRzat@a>j>sT;ES*OaRSc*{=D<32B}gFbmo#xwGs*B+uvm z`$);4@8jnu)a+(O-6US!qn3@Qo%;8))ex4s#WN&d+I^NjFK42A7Fd?l9Lf2VOj)Td1^x*T38dFjDktXUC| zVz+g4!n0U0GU9}w_jNYOX? z{A3s=-&5@Nmz|PJ_xw^S>2dcd^M2mZM3JVZFFmaTdH?)5qNlxpl0gW!S9N989f3-! zA1*3fWE6rJ`q&m_4ChteSIAS>$dL`j!AEYrQY6Xf$}Jao%pG>E{m%so(Sz_VRNxn! z8h1MVf$C$%H_g~l1)Lv>L6E_ZG?VR8LS+gg82&flmb4mcg3!kWl{+A>h-Ml!%<`{7 z??E<8qATY>s~GQGLQV`}@6be#xT>$tClKW$zU>&H9YvPON zCYk&Vu<~#qz=of9VmXH|5q0GgjG=hNsB&SDvAd1lA&`O`Kh z_-H1k`{Fe2-;9h^FYD7@ZRO8q76wQOE@LX=A{dUA5;R+iClbTk%W+?u@aD+(v;Lum z%>D*vB0<7PiHAP^I#{TwcKaBtmKIu$p6DSP3$1dfqvbe$So!<^c>&O^t$PF&nw|ep z)w=xpC!hIooPaXSbf^&5Tx(VO)4Z*<@QUx{hr(qZ2U5#~3bF-9+DL7#cgu>zXe$rf zAz|j)6-@^8hz!@-i)Z0Df&{Df_Z9NPRDlwKn>VAfJYEl&Oe?SIg=Rrlw!f;(_VC(m z_ZP)+T6WypfA1|kFB>gr(XmZm{#@~G87J%-e}muYHJ%1NzN|RWz|@|V6QopB$ zfHGghC=_~kpczh5s+ zt88R!&}SL{B<-TON`|CMv&Vzb4<|Y;=rOkI;-n!tg^Po*s>gF<4qSDHgkLwVhS&i- zW>JEj9nc_F`aK~b_=rnEAU7N2E4r>6{#yh)CcXD!tWDT(fUO%jlM5m!9P1(PRF+<& zzj^shPc?L}{(O&pxoAwezXXyiT`<7bC1qnsP*|l*9dQKpWTPc4$Y%ugOl0WFbaJpx zK+EMka!7U`{Td?d9hP|U3=%_B+ps)beY&(F)oMyECj+7PxUR{Cwaz*+w zgsN8?&`Zpb@5FL`1i2sP#B3`1420BDL?Ntp{>J_CN8Z5Ti0qP|mJj0GiUoJ zdZJoQJo1=vG>zJ|a?ejq2dl}x^0&jl9xYo=__8Li02P8+QxfV^Mt9LM_N6gk_y$On z)@?dVS(UCdIIi3{Dkl9Zu-~xp-Vd1;J%v}$ou2r=bDF!}jYXt3ehb>(D)&kbJE8hR z7)JL?P}pK*1R<3zy0V1E`+R@*u@(#c1Gv+mw*suHWH9ztc~bO{RHXkVsP_<_?DR-i zrQ=UO;vON`-5!UAg&l)|a9O2b$@j*^!9UvNaleGda6DR_sd&|z#38fTN4GUu;PYtFaL?V*X@60wVI4& zrUV`VuZVg2TWJ8fS+yhy&)Pc0!6zLDZ zvx@R|`daR@&>bj&2-J8MON^)$nol;RTZ4JGX@QfY zlcbRsq^(YCvfcsXEs(dDA0BuLRd1lJyE}!*-OXsM?d@N?j4I`ze(iL z9I6>A?HTc!*DFmDn#0t_CQrMk@VXN}HC6;1;(#9(;r*+%j{OGzZ`>Dp1!5isxsmGq z(ZxoL@?QdheDaJuc-q;8RY5Z^s1_f*-0?3x8%w2hG(o6s-F*hLzO7Wv3PSsA{)5=p zu_+WW>xYZ*vkT1_iLvFlH%NKH4GyBQ?w)55Pf7{t7N)Fwx*Bjt$QIO>LGX6#|s?gONpMS^}oEOx7;$fr?P&k z{23(3KJSoxCPO#s<-w>`z`;OpdSz;(^#iC4|EADr=*p8d+`xWGGfc$UzamQ$(a!Ec zsGc@VeFppa5*BYjq?>>OuDL+u&{!G=yvonkh^p8k{M;;DD$Rg$mf^dh;|9m=GVUaU zFA%qy`w^|G#9;r17|PMV(mN8!6j2eEO#1phY``G30CzvW^>>TB`m(|L9PA0dj zoY&RdXN&#UkhKx6;odbt;(Ok2x+H1KNHS~*IWjHdrersUy+`6f55E84u^-dueH{De zHN8=beB`UEq#>tyfYhUc!ajXz#7m>3T@8kpnlf(_;CsJ#ztJB#K~|m+$XVC#bqZ@#Tj@6UXwO-P#_GcM%x1ec zpEjv_Y)rvNCJBdSw&xdcCqyTcqC@99F6tGOK15(I)|Jf@tn!i?9=`SZJTVdU6b5x% z8b5ijzJEIwWYFaXTI*noZX`BF{x&Vx6NFwK*bM>tKAM3ue_P-015ik}HH7CTN56dkdW3p+iw_~ga)Z3a-DA)Q&W#K8+8O_mv<|Nm3Q&MMyL?>@`a`S4 zIu5N807vTj0Poj9hscAekcPK=Pfk3qvcXT}&VxqT;PLq zFLKSw^-<>IDDBOUnJ}Fkwj`|64J>UF`jV&5|7=Yfmu5C##+eKYZLK`G=v@z}_ieO{^opDD=5}d=aBU4Sv zfxWX!*Gieyrd~cr{woWf+;{hrAx42cw&RzHcK-Dm$5Xs}hog#xrmyc%p4-wZ@Hwx! zo$+%9cgRx|<|Liok@KW#^vI1XZJBAwVQwj&OJ3>fe{AEz!Fn0!%Bsxe3KU~Ci5Jmw z#39R|mk?h}6HDm1i8^Vtc1AWd(G=a%w=_Z!vuziN^bO6^JL~_>YwWPK^uW;Ku~WfF zvw4uV`&w#@nOIjgQt|Df)F~O+gsiRXb7I#o^R@7U;PF&H@kGVT@~TpIVV`Tl;pQK` z$KOQ=nw>GQ&vnpOgr4`mxMRBQo}Rxw6G!Xw4kR`_*JG}k(jmO`29<+CHXd{Ny=Kb~ zOO&%EaNB>s3O#zQL!5U9csxyAz0jyks0nba4?pHh*;}2a+Z|7LOOTL*w_Hx3o!!LW zRh}bjcSLhRru*2uKc1izR*}0YJ0@22L)AzCRf;-X z;q_)>(-w(*@hn&!gjEQJ2x^&M(~-|Cyl}|kL01f~sfk{!S*FrHZJ_b<&fXcM^KSuF zo~vIJlIiwj?3R2rd@1@CS6_+; zK#Jatx%CgtHMdfuNrClk@5R_Z8goU>{J<DIGu&#Vso zxckTIqp+Z08&8*>KuLtyOvh?|^>T-;9z-}4IH-}~`C@G|oMfEq(bXf4&AzV#8EgIh z(6X$)-5l*cZ-V+fJiMd;n&CXvy>C`q?daP1l{ub}r^79*f7|4VmM)LbJvX7U)gQ7$ zL9x>6*9+pOyj}W|#BmN8Uo5nQh1C}i4LQW>6N++AjVQ?35Ru))Pn~B4`3_X1#KFpj za?T_q<|x;C^36DtlK##jcme8Ad`TmrR)%P|>ik*RTG(3zLplh(ZH=XbD59S)4@(Mw^dxi`O8Uaif*oMuL@FlGNCdwA2jgF`3b3xz0 zKX1na4YM@*(5X~Rn5d)k)tao@m?b4>kGm!0wLC!f1Qf5sdLr1PHYQjr0_7Nx$$uO5 z2Xq|eU%bB?3)(A`f+71UQ&_LJyvhf{Nkkb5wbZAW9IY{ z(8!)%SBy*oPa`Cb3-tl}yg&;l4_W-AQ^nX0I0o~rdik0g&m_Lf+?+XvUBbcZ10Hn> z79kv%GT+dUG28kj;!l{Ux4oHaE(UDi`N4q9^+(Wm(@QydARTq%!H|~$rAq!uPhO~I z$5RRl5|n$H@RYc^oxCot!{-Ad7>sf+v5>HqCMPmC@k=06v@Fj|Q=n--1n921wrFbt z&&G((G<@t~5#BR)&wJ0e652lLN&ZTit$aKn%Fe8|AGt$#N)*WXm%A1)`Wk)XzJcN>1bzJ)b<^$xL6e8wh8k5=zqN0tf|O|c-{5*f zGDM%Brulk$^0K()5IH3w1VJBvS3zXM?F2eI3hA|ZexvGX`Jki2`A2c4LMOh$IFl3m zTr1>ZIWK^B{bz`Q+0Qz`Nq<>t7Nb{+A-u9ZV$EwGBFChfj@_;dKn_o0<>tD=k>MP!}m-TP1U4{x)v4qk# zcJfJ%GSk~swYRoq{&@ZG))D1~xm|F3l+Luxh{CUXNCf28Zp0hh*@v;mUxI3JtiM^>&HU8kmrpivNu#uu&{~@N3 zd>ZOaZFLe?T!*4^6=JC>BGXcN8vHV@3uaInwy#4|0zJ8XUzq-3lu@EE>Q zpLsYW&-Es6sXep7BA4X7iMU>FNGQiNgOLsL0I)-a|` z$ay?3Gzka097SNB*~PncV8zvG5>s_rDd&|4HXF$2#>6bQHwgCnM@OR1 z5b>)zgSzYc9Ve#SQ&Us-mnT0{!$5NHO?wU}>>*<^1O~*Ip3<&9D2lipkG(6^Y6v>N z>e&#Y`CJTzfdQ)e@}ef-ejhj@V)ktvpk<5rhCOPoWgweRlyX^RfHv}TT$Z{n_*FVx z{%uTVpuPbAu>UuITi$lW*YSxdDY&~NVb8wLUo0kUj1U)$}X_$_2Z~)3Q zv@%Ar&hVK_w^sPr6WWOlRsk%EfUgU)*vE9vK#}1Pj+JPiL>s#hmjnM1>hUa~4h?3lu;LjR42v;^)#fr`$!L7^#|HVtqMHU{|Do}G8atl))(-KJVEFn6BCCP?!7Lqd4BAZt-bpMC!B6wM*iB~1(!@dRC12ZvyJw`rwF8Vyj zJD7w+HN{U24qIX~4EmCv5;Lmqo|Pl@I3%Z>z1Gw|QgP1>RyV!0`#`J(L0^0Op7CP7 z({c+rf5AWCG)*#TEuO5VN=z=7dUx+W8~8qPl8HI`z86a6WHm`Y+_bQzevbud>Op~- zgAS4t)@$^xrlz{9Z}$m`b?rZ{%_~*?qoQ?Yy#TY$_!XY*X|eeF!H5v7iHGCS2Pj7o zAo0InUoUN48zJ%{6O2&{nidve}&Nb(p<08(y#&Pc{F}MRD+I>ACl>FfQssd zoh?rY4Gc`a<(!R)0_aBYu9=7z*!_4R6uJCcgPddjrz9xct>G^bToym=qhZRT`cLmU z$yFVqKsb?uY8^|UP^}&WY_!}C_Vx07>~iccmb57-szN3w!8j-%RJfytR#x(U`i5oD z7a1_y*so>*PoX*Qd*hCiF&c^SBLioC$UT|NGy*s~iO(9z8gX&^AYR*mtjU=F&ZsBg zm%F24ENPK#O+QYDJqmz-0^IB%4Xo^9s3_^K#F~oev2%902?GzQQE~m>`Pzx+a_JlY z>3=WgJ^sjeaWSXs{O0qI)L0V3Obw)`#^-kh)z4ldDAplvZA)=~A|v-vi8oKWa(QZP zxS88q2%aH>`#%|~Ng01`vU;;?VzA|^uNTX2jeMj#UT^gZa{Y zd<|BZiOco6szK34<+=#bX+-hd*wAXO^2t4>v+jeW6yff3avM|9JwMlP{QyGs@$R}G zArrU5$=5v9-l(<@dj7c)?9C`=A$%(jam!t{Ypz_haGvDsVOGSAcQ#wAzOkLA>ABnF z5YuyQhB}+Z!Cf(oDpM+uA1Ck7uU%8~n=|Qs@U?yfYi3iW{qymWP*KbrX-)4!T+7I@ zy!7c;{F?78>vCIu2LyvH_CqylkcBW`C~d0h`13yt9+7Rhlo%QSwup!nsd7*^Nhc z%G_I<2f?nlsoR?)1vGk%ICMW52286y6%mj0@Gq5IazxDOZc!(s)DP z7}LiZZfzHFL66TAH`=vMjC)R1RmM8!#FKZ&Ok&zT*hq|Wn^&s4&#vF*s38ykTF!}y zU}xZjP&O#$<0Gm5^(WpD`;X1_I`lrA^h|3mb1(MSc_tSIBX?xTM;)w2*3%JtMQTIh z>lr67*N3b6FV`o^9i!`sx;?WfTd0!FKV@&q1tz#T+l0|rvjp9KDS}ojW@XOe$i_P;Oh%WoUQ(skfHg{ z*uUm-Xlh4;=vP$w7DXB<^)WFx? zxQeK{;g6yOw9cD@RjY^+)_@*9SCNr76W(7P9^E|?Gx1|gWa=6$bgm?AAMyqOUV8uh zJm!H|`J)K)qv9wCFak!vod=IbJh^Q}fr$#MSL3E z-7TDOSZ;WnP^i-qOyL<^=~sBMv-XZ5Mc^HFOeTiq2q1QNYmBr3dS!T*!}pN-9a2`~ zDPq%Kn5-s3%e~PE&}e3=0&+_b_w3e5(3`6sH#*(!i{(_+c4C-;L$kd`E>CX@^%d8L z-xuMHS<#Qc(d?Y;MJRUrL(%ayvQf9>f>cQDjC3c$SIR}Z`**?nPvYOQ?e09#720_| zMtqSWA>|^V+T;2V?HPP9kI!~mG7?2qUuW=T9g2ozbm#po8&sEi#twgq$eG#1{?nfT z;$P{4m1cXEq^Wo#wR3+G+uhL*m~RZBJ37W4yz?|OCGh8^pUv73wVQKVVCAOD${d-u`L-@bwmxMr{zEkH9Wr}Nh22!_8i?5$W? z1_S3BUOB9+l-9b=065)O^+6{6v01~@O-V_Go1u+bMQq=+>R;FDB*~?#0ej+8>2UoB z%;lYrO3*Av)TQhe!f5Cm_5Pt*U(w?~Vfr_2EyX+@`;|Q>#r4Kk4iXpeLuTz+~yH-mY`hwho|#>N=J6paWBQ1iZ!J; ziR?a35F34U_qvS&sCD1naR|B9mMs93!iU{avX(jhyM>-1zzZ!n%8Th4=hXC`C7APR z(X{z;^xx`^lTQH0#KJ+p5prh6uc_@0{twD?e_T?=7lj7)*yaf)t>nDCK2`R9=+>0tYF7fyx73C)(;T?y<0YZ%G|^}mMi-)g=cYhXqlA? zWsvHha|chl%l(B@K^v$y6TqAR8O6zaiM2k|a zG=`7JH}jN029TS(0soMj`?FoE&{HOKg7W7c*ZY(Bb>?6F&So@$;J03G4rart?=Cgq zx;~paL6gtbM@eBlkwd5b7HEbx;5nHU4+p^e0r-(*@A2B89TNe<-tlHcY58yHuaNy$ z=&#&`)Qj<79eytGmYAA7r=%y&se#}H#7(_TxFd)Wj!AyxP_LwnP+0f@goLa*Xe$)i zfJ9|5z&A0K$lFqxIUavn1j0TWwEU!kwp4pI>h)SH^olIe1HBv(XY%<8Rj$5VD|jIv zqnnNVS;Nj2T1%S7JG&-3mp@W-L5OPm^iE+8Z7m4XLSx&FM_~7==r2lr1eK0qjb$*cvTa2L!h6)ihHvkJbsQ zSB7;XzHM?b(+r3W1N|$^{@a>td49!l0I4g}H*O zUs{-YHV(8?hYK1$?tLIoRdFEh`VH7X`0D9yR*}_28y+XY-Iim<1DkbbJeweZ`Y`4xY~YA4lr13i zONyW`eGf?~_K9;^EcC!R(sHiAG^k`69PPV>A6@FIk24A9yTwib5$je{B+wUr1PiTYw ztU%{m!~^XmU#>zVB>Cc!*Ddk~9qv#?+0&Hg6-xbE7yUB@8wt(T3Wat!b{Q?o+TXeI zd4@9R6Laz3X|};p?gK!IW5B2!C&TrWk>Vc^pHLNSv&j9iBf2L@iDBoE`T>N!W1{V= ztU;26QDzwwRxpA<(~N(ErkVo>4#~e9#)%p^c??G6!YE*XQ}9Z+<*F^8njOurV2gWu zNh2QDzVgSfEHA|Kn~h6C!tUD(Mfb-6oey}k6i^kK-FK<1fgvTt_Y_rrWiQO?0ulo_ z@^I=QqDk`hbb-+t0yFuqcVh~|@(Z1OelgEaO#44(AJULLXwWJ3(`Xy$s2Zay4PY>9{KaXRHV8azkV#M^qX&N6a%HZ@TB3Sjet2 z00C#mHU8jSXw9e$_C3i5n-y4c%k*}WP{!TqSK<4nA|cND)9LrUB4QT{$Fr|>FaW?W zCOKZc|8@m)ztRfcLL4aHVkX?^O4;k$O{%p)LEnRiRtQ`JB%T_v-DLWh$iblD*Rgmjh{VrtwtX8{*ZoQ*}a(;Qzb7zBZ8K!UvOgS64b zp#RMX3aPS?k-cvFsfa9?c=N#@VPL3-o&nO};P)``g^!zq$;U1AnDwUsQ=7Wn7t30rScy&7V-VVAg6f2BGM1vXQP3afH*s zA_#nDV*QQ&U1YEi$w;q=BS|xY$jl^0K=U(o3MLiIz~j!Pg_}k)jAxSXy?bRp%>L@Y zfZoH(R5oH1H_$5yLR^Lm8lV2g)@^dX9EKJp)!X^C_pk$34m#x*h04f2-7{GKBe!yZ zf3xHa)GyWi{CB^E8>{dqg>eU|z)tszEWQBPt#cTIDd4H0-QGlVhGFgFm{ z8m9)~Vz)lGw%a+`jmuIPp{!E6qfC{Q$(FJwU?Ff zHOKebg*MaYgzv5S`KppS$MDSK_EnW{`}I}zCfO473V}2?A5s4E78#4g9I_>Lc6=VU z+nn)|ams!MFf~GWh-Em;&vdd9dnU%&fveMGm9Wd+7=GbMt0c7CRF%nvH^3JS3WMn? zI|yQMr1NUUCJ}>Wg9u{vQh-)FD{3tk^MC;aV4npIzSe^uE)}qy>a_WRgogdi#&K?& z1_m2jYGIXVrs+I@-ZZ(bP(as*=$z`y2>RS4>gML3t`>ZMaDJ0MO(#bV+Vb*=A0~$F zZ?7Khwzl?hW%23#+e9R`>t|Nas7guW1FG6Q#ui-U*hbx-cYYb22^6p9WKH%~)TJ}N z6zRIA8(;C($k#R`|>hA+&nGfk%-gE%Qog zQeRK=fnz*+kA~{;gTd-)LiCjSIVlkn#u~zWK)9;TMVqw8{8lo-ryRGQNeNlmu2ku9 zrric%7}&_Zsxx!L%M^0Yjz3x}i*#XSCLK}V0#Lpmn&`7BB!fLN)|HRKABfZ)_uvs{ zLlSL^t*+HPZ;wiU(O`pCeX*9*G7wW(>Q>`6A?IC@hPU$aCh!Y)smQ6Vf!3I_^531o z>7My~(HYyjP3n4UNqKD?xOG(zcQO=oW)juil-@3dCg6M;t)KY_=PVZJBYWBxfKel0 zhW~bAdu{$F^etl9eWU>p`fSGYZ^B_Jp`F^ed*dq2jrIif5coh>ysqhgTe@1JViI_!mAidI26btG39S^TT8<{) z-tmWV+l)hTe&uvT()Zdy_qEmfzy(Fu`}>dW=BqJJa}ps;B=1+^O&OScF3b~XH^MfA zJJ23!;49Z43}$tu*R@))z45t3)XS4pfB4eZ{I)EkW47qu+s(OH9F|iSOkTwa9P7Bv z@^Nl=y4lkOec+Kj^ZVr`J9Z5)==l2*i3leC7lM_DyO1X9i?361U>fsG0j5qNUl+n- z&ehnnNO=XlVdN!tn2H8Qq!8K&ATBLu*)Qo$4%PgTfJ}(c1{UFE5uANj%&mp8TnyqX zXuF_H5;UklVy0?{67ti1L^2Sn#+w2J7MqoJ@e1>Q-Us7TLLhDaPLYp--R)i2O_8st z_zt~RZdGY*%b*0e%3r6@oJUcS)#giN)qHLRNPh-X;~!`ptY~J$I)_!USv;tl5e_MI zh*gJ`f}*5-uBg6*`oMn^d)ZP}brG(|lb?9{P*RN+~VRU}q+11W09% zr6hL~wuYfgb2iX9>d7-z>$hN)714bJ(qsDl{w$u^@A*pgcPr@vUm2cze|uG#qxs4A{U9ZuKau^m3{O7SEL zey6T$OyPf}M+lD+iG0rv(H?u+a3G z@@d%fg%lJzlL0R~d(_iq&pUSZSrC8tiLLniU9Nu0^OIKlYo$6Gnc=)h(YSX1 z7+{zS|FY@L5ip8v44&A`Ij|;_$zu6lKRdX(%CjoNNUfqZMx_BvPrh+F|!eT+Gr0|@k3gwkgM4cso#eq z0aVsB*(~UjWZs1Lm$riaurHoSS7l|Tb}N%{us^|^3^%pYG%+QbtMnY^Po_Tw$~MWT zJobD8M0|nSZtL^0oG#m(_^ZuNzonFqX1WQ|ReGv(ZYZpV!upg<^iQ(k6Uf;!xB~1G zY3vrblQ83|`L-1PuKv^X z#47Cf#yn&+pZdu@@ZD1cO0RJSyt`BKQ)_I}!KYJqxyqhvNUm>E1Hkn* zo1jiqb4-*?%TniHcTLoN?t^ku;gcgPP!PUoKQtx0k%{(gWuBptic$uQ4n015uejYJ z_tQUUZ}wL+)lAH{RLHAVhi{(ImjWt(Xlb!g;pv)f{Pki3>^Sbi#(q$HNq zEQ?d+JZU8r(8@{RIfeQD^d0M7PI%g6ap+2seV?aSmjrwi1-rwHMr=U`0~Y~;{saN7 z$$u3y(^XV%jD0^W7h9g~MA^PCU8wK1Db|gQqct*ODoF42B)Bi5eBYip>5rB@czq}; z)8{Uu-jxG_m3TpGzGp=aGsS5xKy|ZM?e=#eKq#r-9PD54a={>WJf2U>jF~^h-7}-( zq}nxJ$zWb#1_d`UDx&t##jfsKS)kmoi6<8q6D*5(WX}||H-H60wSSz4?#swb?BRFw za($wAf2>_ULK0~96B51Jt$EDIrqDaOWXryf*AczT1r*kg+t+FL&4X2pjuorO`b1}L z>BeamD{Uuglu zNtv~zM!4i@M6;=&X7+|n{D`iG$<2|yTXjbn{~77$7$TU0zKz?3mgTm%zLLpNO4?Fq zz9QN_4mJLES{$-(u__HS4sm$>M#t$uAs&aDt~D+J6c$A~!pkS7i+AjnEkw0*C8z#Y zG#=f(YIbXq65nVw9JRkESN1&c2RB>`-wgEyzN*t82rjRSbm^A-Az{VvR1j8$KgM$?R67k4j6?PKENJ5TA~+D`yu5b(F{5}~@GW0WXTK~E@<_2yesEYBo+Lk}7Vz3x zD^&n%j=BF<*61OYJ_gw*1Of?As@Uo}W8e@ULKGDR^mb(h=)$6eK>l8*5F;|z7fMHy z%SzJIXC;6lC0%>Q#ECS=5Z!T4Vt9R6dyR(U;;x>rSgD2@Kn;2XM2k9oY=&60lA7?e zlDL%6&?4T9vEei{FFHTqbA|Q{jCBI~6bEktBqsqG0Hd*fon&y5_7#D-|VTz zdu?tCuljb0kN~3jv`jwDY!!{Q*=@{A)^7G1#3zp_S&hYwdXsyweG8q$;APS~hC!!0 zP5EKRb>ax@YE>QEZ00N9*>L7AlR~t6f7gXZ=mCJYz}>BJ>z@8qoho%AVEvTc*?D3M z0t(Rah@C;{N-p+^)kIk_d5xmlCH5zuM2^TuppAdToQUs@L&f!Nd^w86L?B$&f?rl(g)S)_lF z<$gYdC3(g12*8q8Z?|7G?s1px(|R-kIY^_mjLxy@a{+PEe~a=n&2_G4`_<6)t&apD zjZI9k!*S%xs>#RG!t%`ENUb1lXGe?0s4JI*n5L-8>B~1<&!O&C%9pH}%c-)9jnKQc zV@!+Ng~XM)pRKCOZvwx{nC0zoN~L9`Hq+s336`(4;{T=35~cCVR|T>yNF$qKM^G&0 zN|i<0>$Tf^eS&1Pg~J7UOK#C9PrikYIc3*59uRj)9 z(U_U2tGSlWBeh1m7N|LN-Xlg|WT;PFaiWq`XH zncOSrWg!62EW%j)*TD^7b^d#W0nG+F6P}rh4$?JA9Mzna<3IVMx z06LT*^GH`O0`v&XAJp*en9h!!T~DeH>7nX7HPA?ZeyAAcdM)^!oL8vgFvThWjdT=h^x1%|L*z(Jr#SaTgcX~>$*%XXL8EdW6%L*{HJZP zJS02)DRsHgZh+tyBN$?TT|(Y_GDRiyZvW#E)m9^?c`TZnwF#tbZel zih`WRR#x*K8!ZKv_) zr8Y5#p;YJl@fpBg$Zkeb9$s7>%ic;{JD_VXXx(9@Qjy;FsYdD+m64yqznyO zR~bwNC3(QG`h~%IOLnlRrpB7gINX0NU`z#rL#d?ytH8oePx91y%oRv(fPeFYm?9#(g_nbs3St z5omLAS|F|)i%yd2XrjWLqih@K3t9-Lksq|*V3xh{LzBCHnWsb+g1#mm*41M^M-&5E z=7XQ-95E=A;iW+%dAKZVU>uPj1ppIENsd&#I3VKvoc;bbwFm0(ukZD93V5E}3_en` z-rU#!nQQcU!94TcS!AoaJg1kW9Ob1ZqTS}x<*;6*b=+TyAC|rQRL&;=$CqMzUSx(w zw&f4Dx>^2a!O4js4y^Nk8kN9J@yo)e$fyY_&t>g7hL(khbA3WZjj~2_DY9pWNvS`A z-m+JIh&98Vv#`J-W?pw=?{BB+?M3{j!+9ve1*j>ch{SoTC zcpBX#DeP%=QqchU!cta6>vuB0@!@l5%!C?k+8?NuMUNjx!mc8`=3Z?9XQukr0ccCm zIR#HX7j_F=K~XE;t$-82hCau-IPqc}k}g>pUq7V*CMI5n*eMb%imda0bQ%||QtU>0C zGI$}UBPUyTkmZ}^nbo-iPAdI_f$?_NYb>4}1Uz>GRkB`Fc=@A=yL~6?@-4OO!4kjB zU_qqb7KEcqqd?+laY3x=mo*10NtCfuX1Zw;lS6kqmXSVaJJ!WbS0@i7`mo%`iEr65y) zQq!zWpyUIl6!ibKvVGbvUdwms@IKm(e?7K7Sn>i`u89!^qtEcI0HY`J8by_RJ9`l$eA>)^JjvOz3)I*S%i5u3jLJ9W=9!m$8Qs&VgEfGQ%P~;s^fL6jj za+yzIf}NonBFA7Sp4h64riB|%y#cCg54~sqg@r8fDDddh`R^BNh!|Q+w`Ww1$q%k1 z&#F7ED7eUj4RZhLcejUu9Z2Nr5x_BE;8#&YAXjbOx}IgI!Lq>bu9c^l=Sw03mokXB z8ivV)k&>Puh4NiSi+M4^^XFwdUY;L=$E06>=IZIp`;ANN$^WAMQf4*Hn13r5n}Ho( zm6NR1-;^8@ji~C;i3u5QPuv_$T)jO{5#pUcxLSDIXV0nM(4}d6Jc2e|ycyty)3MX5 zIXR-)b!Pa-czvz$O7NoPYJc`@UHc$E#Og8wO|9_}^-MIm9)puehlifW^wjIkKye}+ zZIW$=IY9DkJk0wA|8p|IUX0i&V#lFN`uJ&*&Ma5GIW#booPF>2CeAX(PN+(T2VoEp`&-Lt0!Qr2vH^vi=h}uQYndX>MJVjO{;6w5%fYZ5Q^j5M z{*zO3MB&uoqmc57zII-*%78?d8T3D)23zu5&HavbGj6}9(76?l3XV8O8^ZhNB*HFK zzo-0g6mQ>C@o`b%EIl(i$h5RcGN-Za<0Gs6XdPKEz>N|A53Um<_O}W(R^ebcNy`&8hwFYmInAetYlUoZp?rB4>A+DouTb z`uG4iUPe@M#bz)MXK1D>&f6XmerXEcu-0hAz4Fc^Mp&`G;FNMt+B%7ZPcj&;p1D6v zkNP%WNH(M@DF7eOsP-Kmq-qv7q`^Kqkj|4pL=;+%^@(|uY6n9P?P2D)mQDy3E%M74 z9PqtkJ>F5$(rw^WZDVI-`ivr%6k7pjskQ9jL?@HUOU@jCHrgi0Ns%Ef^Lxe1hN#Hi z*0GW}Ck&p;KcH&ZpDwvuyTfH8up#8%UI5=FydlqIJ5En#SKsmV2CJbv=Vn z(C)TQTE4Y=4Od%#o6RX$e~hb3X40Rv>oOs3E!h4#ed#Q=R`+ftO@HKUC`KTmd0drGA1kTvC;pd{e`bOgP_Z zlK&2lVYScPmUWvO2){I;oX>&X#hSDHbIYK77Y?ksg0wqec=jMyO|C4A(F?$kH_f49 zQ0WHbQsM44X$fREP_p#-52(idkS%@5_ymEu#uXR>@yO5f1Yrgol+gj}e+;6u8HYV+ zEOYFm+yDI>N@eEy2|KdL#;|b?yO-jJ`PuKHK@eZW?pH0VvaeR^T0bx)NStH+w?)(h z)zy_+GyW!2S7aQ2S9&*aylm8SJ||3p+B14HN?@T>?(_lHNoKLGd*o&ql8229@(~Iy zH(tKP7*ffa;cEuknEJ~dqnEL(S%xcd*By48ryO31!71dr(UjTKX(BnZ}KO}YV%}(*;DJu`)D;${vvL7QStqbQE!@Fk~Z*o1O@f+ zf@fjJVKHCn2riEQkQL!eSl9FzbP%R7*;FB5>2%-k(A$O>KW&i~3t+{whV6Y*zF7W8 zzzQ^H-8blwh#w#C13u`=!vN57$C~)LKR^3%C4rCd5w}dc9@NR9xsl=fy+VvS8p<#+ zi@z8XRn8SWQf~#tT#RY0td4NHt72Jun=eT^Xu!nfTh zVn~Pf-@}x8fS6@g{GTyd=&UjvM6-T^{QRef<4u634ipRzX#Zgi zf4^zP1uswtB2|v?^L&zoa10fc#DPwzra~~4=9&MLe)MIZYFTMJ+g>i(2N(JK(`&4R z%u^1_FQpvdtBj%rrEQ?UI#K+wyWRg&ybPQq*sFf%19?Y$=NzRH2dhLQM#;EVC?FIk zxSA>g(uw|SK*>RKXZ2(`Up*G)tja;Xg{JX)bYDOPejJIu5R`D?wa$z}w$c%F4~~Y$f1vG?`hNctKN%JN zAC%7_p{~LE=PnXbArH*9=7&~;UUTaTC9n}PbPpeu;#aSTx!GhYXU$fj#0(z&S>}C4 zkP69zP>Gf+Nj~ZK<}`P^|I^V!cq|+{f13e_=&^U>x`Fy5Ho>+*M?Fz(M;`gsh^p-w znr|P~lQsezBXe!E)T%{1C0M~21Vl9aP2k4vvIN5Zg!7xo8h5>LS)wjZTakyd@QBH~ zQa*mcqYt@CicAgcUnLl~bKaf4W@0zS)mOa`=qfFQ7Jjwh0~IF{NJpw==mIhqIU;T* zog+C+NMP9WH9^_eXeO6Z!`jT`cjJIbei34$d3TuvJk&^%b&YvkKAi1SF%bZEe6RRF z*lOJZ9P!&H=&ZG&R|wWP;L9^fKxpR}rgKKh7-ofvGvoBsoGX-B=7*mfkGvCRhUE&YYA`vTIJ1%zMDK2mx>{ z+7z~2Jw|-)$+vsHpt*+(%x!j1a4b_peRNmM?tL}0U#POzPH8wM4>;d_G`>GsBcFc& zvi?MHqz9F(geqJ;@N-lb8+teA-_~szc4PQ+$#PrlUK- zGx@bZYDNWqr@+s+g*D{w5n=ma;0ariO!St*m?u>a&s2dr8=?QDv*GtEE`XqIcEVkL zK>>|xz}{Gj?|X_Yhx+PZn&i~6L=Pv%hNKacF23LGIk6>qQ7bVN4!<(j(j|^t3mU1U zP+>lT5|tkEelgUylZ zJN{Lqi-XR}7CUXxoO`wpb@kyT*Hk?QiH!Rk(KGptYN?7g4D)-YhZ#K&9>vcs=4p(3 z8yg&~TYQuH+v;l`wq3q!I`nq0`RHC8T3CSKrg^fNJg27X?S)iG0KL+qK5n(3XgWJsc~A zIet>D;pa8SwY5(HA_&1u9n3kYze!36NI!H1|HDFf2Fm>TIkS#<+xP-0YZ~y?#GNRN z9L#>EcxX@I7qJdnfLcG$k727rZKLkzKz^-!z^+-ePv3j4^B|C zKi^^D(3D-bh1*4z=GUl}Xz2>bVKK7$t3RFTZEyT$NFQOk(`LqjRX}k&6m!O6VQvu2 zt;SHOP~JP1jV;;|TH_O557(5~z_-n(5)TcF)HlmVPWO_K7U`|&Xry(!e8Ka6+;jl? zSijI;{L!4GteAAo6S4)pAE+YCn)*O7~newVL`)9ydW$zykqHJ#!*)&02=lE8#Ma=uv1H60W$@|-!kaT z&yW$y|Eo1223t$`85IZl!=S10t}>?E*h!D03xhJpRm#a;2pvJDOa$<>OVPvDKu?-x z`p)-WdrjVsCC%K>NCLMEK2`FkQr=c9E@o)Lpc>;Jt;-g9Qm6pJ#G1rltMulopLvZ3 z6tBw2U$n#YUP_W(U-)Gg0(JiWx9a5QRwSyN3(`JV#%_#Gq+m^ecg?u5bO^`{5Y;hF zB?&?(&R`=u#{=x0dKSV*&Ygc5IV#FE2HTVJH%H#Dlos5$>1DcaMn@f?`?u8y^W+;a zonUU`%-MiXagRb)BO#r1AJI&XcnIZxfj8Fl`M#-aak1LBycpW6%8_HE4e^*Hs;@Wt zQe(ev3BCVObK4xkER<;(p97gnVYy?_MIv(dRTRq3dp=(;ALV)Rf@#Cm@kOuVG57TM zD6OSJ9*E?k#CHXJf}s>DRepM;YNbXSXIQLQ@SXC)Z14R=^k10rvkvoIUREzs57oQ? zfrh2_AMHBntc8A+EXFz;2tHw+-)VNAH(*-NVF(nRNaBymDenH5F3PpKjscVt4h6l4 zBn3y-?`Nyhs&9K5esXoyI>l-rV_0ZC+`gHCw`T9dl|vPWv-)KZhIO$sJ$G0#q5#1- zBvdI>q0oaB(SG^t5r$%IIlQoIUCfK(e%evo3Vk> z({?xT^DYh=JYy}BGmkamUV+Y%5v71Cg-{rYuyb^W!6v;Cn6}a{!8HsP?qEM9&EQGR%sw$^S(+^CYZPX{IzZ2%2dSd zHTcz)DiB&t=9uTV3F=`YHCgRvA+9|^Rh9Y9{;HbztCREFsT|b|0s&d!NE8`?W8*0M zo2r>#&@ic2S{`xjKDh4M9N{+R4QdO*2Gq|98ezJ!%JoG&bpU1O3&RN$P<2-DvYOre!v479Sfl_6z zi%3Mz2+!*cr8Dlr@bDH?(RvSsPJqS_F^ySuTDMKD=_XbDS04IoLM}M%dIFA z_eXrapP2J0K)1P!PXv>dRihG%0vU3$s%(uwbmk-lBQGz0av#zL23;xJ<_g{RHqDDN z31X-(FDxaxj;r2hX0X;kXc+D(xC=ydYkbvInk{cVdu}@lsBj-Wdn7FO8g~W;hW6~t z%-O!1z10PYkg$X^NWL*^sYwdK4~~<%Bvcj>9~>2R@FvSyU}M0wO(%c+`kU261jGJs z)GlpRBhq&aC{qT6aM9h?9=kNPFXPXf)ck6zjJ$25^WE2Ghgg+b38EJMZh1{63VK`U z-$Oo~ZJ^~dxTwUuxLoc>jpxif>362|3E|O{azC+VBYp8q;i`lMmbsrD-}S@6>sBD% z3Ln#Myr!2lqgbp8&|Mo>GD*HqaSmKBQ_Rv0?nj#CK3q({P^6xCvT5LAlVh;%Jj`^H zH75PrTY86g78ekX5MVrLjuvOZIQ~5rl&(cP)!s0i{GI&R1gt2XdSVb)lJbTZ?3J1> zPkr0MCh*FE{kGX0yWS>%Oxf1?fS#GE(lcr#?2~2Nom4~^2CvKdUHL3k!e39edw2soYAo36|gW*9!0r>oV**(&@TolPZ5` ze?Duy!Y^9>?RBKjK6KWsYq|CdM&FMvV0uJ6x8@VPPvVaUl{LL?E2Q$S2|pCq!{|Mi zoS!8u23?2*n_t8rZ3dSZXuD>@gSbETiPl(rW6f1fA#m}?la5zJ1M@l;`35G&HEO}4 zuHZ(DU??7X##_1c@Bi2N})`mG)}mT2rlBny5k)Pr%i>G?tn!9X1g78m1) z+qSzA7W`a%R`Ux|quFU<6t~>(kjg2yFd3uZJnw+O z6n)w_4E<$|cjfuL>2=#7vB`T|(1qXq>*@-`pkGCcs^IEXJa}g7Ty$-RD;V%s7sth* z3)`S>BHs6iUzIl8rZ@&XlXot;_7vN%{Gq6-k~7~hvzQI^k8%*fe!b>4{&;gO`eY$P zB#XNQwdQL}ij>_mXNPpgw*4AB4oxO7Mm*tm^^g$>t;hC!2wY3V-8X^%09^7EY*5)2 z#6sQp{=jj!_w+THHShLh#C>GocGyWOq^qgi&wM4%DgkTU1p>{n?M*#z zDk#way}9pm+=n}He;ArE7P|~xolaEXKUBCP)&)M;E3D<3+8XFaG>h7%)!>*bG`)^T zaZ?$44y?g>wIaWiFBXKrRawBe>uz-7wbXrJOJ%4lwQ*r**0hxW z1@6%Zey}73m5-si`U-oChspou^YVi5{F)`{sdTE*TSy>lc+$Uhe>+g)nOYeQ#X>=` zRU&Sh=W^U9%4jJaeVb6?g_?_$3YW;gTGCWf2>auSMXw?@+psX6r~?l3HuHMl!e_w6 zqajyUi&^FQrUM54+o=2RY#VWn+mG#Y$4pA+ha}@wbt=EA9cdq~tfF$)+@1wenC$(9 zZxgJROOl zxgW|f%no&cNZbP~qyIS=B9Z-Hk$629$J*)$_JF8-zxI12nIAb)5KxvxQ!q09WGL*r zcG#Tw8WUENI)IEli*o@^apfd)v%`qlHYR(bO58Xef2`e?Y+AO^qaCq(l_sd$JBlK! z$59L)-TfS9yO!#Ovjnl9h;%u>X)L<2EO5bXO4{9!i(Jd>UsH`{7l)Y;6? zBRIzyct@^n!Q9JH@5ax-+xodQoR9{DcBO%BpX}ih(j>Drnpja{w&n=mF6+MELDlr> z(d58S_GiS7Ug+qk3}OjT?@dkA-fDMRJ5(HrnTeYaVfr-YCPGQ(`rSWe*rjj~zL(k! zQCcw)*>oVdJPFHc4u83oZ#X2G0UK>pKhOF#ovSk&MG*5a)$l=GHgy%vH0SI%uyv^L zIlp-6CW>@sj!Z6SZ6C*V#hm6cHnUzk&iyq>(ff0(#3$~lKO>W_m^YAE4R0<8laU|C zKA%R3&u-%Ek`DafvB8b>d9&irt}Nx)tPr2mKZ?2{u)lpBRy8>A|Lplx0i26P2XP za*o)I2Og+I_(g^1wMO>dj|S~VQid2XoEH+zS6TOa_-z?a&MPsoU=HdJ9sY;@FxLad z)AJAueOk5Il<`v_0D|C4uRnTk#b6`v8u>W&<8Nb{5VJN57{n>vHwPVRr3~{2_={%2 z0~dhqr!7DCr-4Vcr@bTS9mVS(F4O>@ZS|N`7|7iA?#U-{TbTIv`M`(YZrX`7Uphjl zm+mT~*-}6~DwAR;b4cQE%FT%GtO^jM#l>@KH>aimTaf~_g6N=D@MQK!?(ddR!Ju5Y zI!r^3QQ0YHNI&^V4&plRiK_41y}vbd0t#iadvp@$=uanGM^__QjFmYxbs}>W^d%5r zZAUr`-e7q0lTK!zle$eE8 zbtmemf|^^s;uzH`+6aIF#{cd)Y4Z$D>K z``J)kq}fc?frF)}^RT9`SPJ9X;pa7DZgcL3aQqewGUYv&!MCf?jvl;Z-820p@YUGQ zA!)pwTgSxTd4VNPQ1;@sZsO-`LL)AAbcg2|n(#dxMK zmD`TwXHcXG>&a&bBt;!HGtO_~P~wvQ582BR$xkDLn8`Pn<5T}A-)6C$bmg!;aibv-`?&d4l}y_>^JnDyw= zk1N9iNUPFk0o?Sdb5kQ3a?WkHxR&HK1vl+6_GtK?VEjZIp7EE7ciP2f4Re9oZvh_)u?wxT^^`poi%#JGl1{L1|Ds9$ z^?*1BJ`E=FZ6b;Ib;X=9e^ZVA(d_r3gD;69N=mC031Q?$_>cZ6p=SfHh4i^6>b^D4K?pz%^POOP0~+oECu>EmzDI zcs`12(>oyWfal(*2IgJ|<%7+Xd^YAK%-;}%&)le%G#w2jo+~spUV1p;O|bE`&QZ1s zfd?&PYi|1-2NuUqV^%=#HfBZXu`ReQI7gD48DRo^5XBD#R3zm0#1m66jeswC^?eW= z*ThY&oY;6>!_ahyOO(xb?N1HwJx+yUc0>gG0S}$7?*mHoTXf&*)i-{8y?BU!n(eW) z6x8atfQgdW95xTT>(puZNNvS%Kd?5QtS+-NxDYe8*MwD<&EY;S&;hhr%JRn|gi9YX zx-R;-tw7(x4{&5J2fgzl3fq>pIqAI`Zn$u|Tjj|ipYF}(yezI z&BSIZ@W|II^?LgC%~2_5k_#G~QH4Fn=uBM=hmT{kbitrYm8ZRDgQcX{thg_vU6@hd z7A}a~!z6$`P%LouN=&c>?KOS-x{K5gMj``9ZAT~{97QA9)MD$EHs>YzfZXK{_I_;Z z{`a3`o-bav@IVN4<{$v+&YEa_6dw$jWC^~_SY@;BBuQ#Pp{xmR{M0h8h``AoU>ESl{?O%~b=mk~*I4{z+=L&&FTItCNFNj$q+}?$s z26u=OBtXADkq^@g9k9{wy_I2AuW9GFN8L_qw*TcGQuOj6?OCRZ<0M#$0Q#+w=bpJV z7n=*G2JdC2-ThjJ(LZ_gM$GfVIW0eGn6}vv`T2Vw^jJ0j$_G)gLM1Pcz|K@Em<-yC z3~TB#Uv_TvQkNZ)w&M0SVR;_VPfY1&_u|iFk;03wca|$Xy)}w?=D>vw3NpUetv`nE zx2s_sF=$co$R5x_rXPufj^H6hvdE9+38i(oKh3p*JBNuk;JDS7!5JpQKjmU!$#k6< zLS02ML9*S1d^oq5lH5H)OKo)8!3=oZx0@<{oln;E=WFV&OT(BO?TRD1v|Uw2!a>R& zwze<(+_llhd2?ePOgr%9zB3owd6ZelNmHBZCp#aV8H=a5Hn`W?L2DFQ6NP-7!`I2j z*CcyC{WcT<+v@z(rc;WoPR^3AlmBJ#8$X$ziwZta(SFMLsJ$b(l zu8gg?XY3K-!pxa0`|aCL`sJ+q0{-|rkm^oEGBoG>8Hu$f=Mj-SD-h)i7g24#TPBi} zO(X?icU@0T_sG}*9}gqQq=XYxP!<#CoUohb=dQyEyiwK$iy{9DQfY;BZc)MKD8dwJ zwKu*ZL^x9K1llU#0a1iU%E-$9F1%mFrE2a68x{~hV)ltm%=S53l=5-J@9lHqH-8R_ zQviRCYs40wk^$Jq>5gRn-%&2a_Zs#;nM%@!PEz;|g;Pbr*QPqE(MIr7D5(Du)w6dL z_!4@0WK{Emo4{;ZYSP^;K0ZUf7KMc2e^Q1rARFzS_>fNqlk zr*GJbYhtv$g225Gu4sJE(*cIlb>vS2$ww;V7w4?yI#*L@t->UFLk8dt8}9 zA+9UTndQ|8G6J6OHD^nb@~nM)p3^g3UF4`wvpLbn=~A`}kgjfe{8~{hhX=(&qCZHd z8fw8fq%FC#V-2f#M?=;0{mBZ~x*JnwVWO^2&i^v>QB(xiv!WG#$X8Ei^f3AIAJQ?T0VZebq z?@1{F&R-(PaU75JUQfSB)d|%48Ro(}zh>2FS{3sv{~yxcDk`o(TNWj_dw}2;+}&M* zJHaJ*@Zjze+}#NQf)m``-QC^Y<*m*>_ult?_E(R=7rlC}DOELV4!prPsqm*gqr-{G zpTK0BZ(ck96jgE|o!A8#3r5@LEUP8>okC4Lb}sLhNMnG&-A~{s(J2u6wMp~)tLLmr z>PB%9HoridaaWXfyMZ`}p_k{%qCK374L^1NtK=igLAxfu+DABb^ro`3YW6V_aG4kS ziq=r|4*YApf{I2|Tv4p4{i*PJIDDJZMKdBj4M!0^xr?U0b3Uk^q!pWLZ1X0hwhqOj zx`~_)In6IG$c`#lpGnKJH)4{TPchT#&+Ttc%_-gvmkD&OU;k6wcE#_Y~bhuM|V+p6T?47eEdp9OIGg7a&tLt;dxDCT*zp!ZO(@5 zk`-$n#kJrGXB1!i^twhB%=`U05$eayknLsf^BtXi_{v^Co4#MS_X@C-b52BBX{n&D25g1Zm`CKci#nOsWsl@b01Yw=-+|j9e!JZ0FQv$%OC`+W z9dRKs#`iK5=t%7$hstHTqCr%`t!b#JK$nVM&&H}FI`}&E3%4`z;(21j+zYUjg3iEM z+f2I|`_#$5TNAcoIQmKLoOpGk%Na+!q+%WBT3qIBmS z7Bi1epoM3~_w-bZUynCRI2@&RG|6#H=b26m{dptyXa|IuN&c&vL9Ryk%x$IO<5F;w zTv{4^k{Q|^_`3ql7Q!-#bnCV8i~-(P+<0T2_aCqBPGbt_%cT`wx7TwoKOze<0w}9x zE&1+5$vXl7x-P9)^;Z#O%P99p(d?dL`|lY3%`uR#)v3n4QcS)VmJEp%drs6R=snMR zz?HfrS!jRsTc0_MXAfbvQX~&Xju117{}gWfN(7X-%hw*ILvM#1d7GR|JV=0hp{gBI zVoe`9R(u+^SdeurD~M0-u?xITO1f3eIk6NmGhf4~)hXXLAH0^E`t@9Bx5agaKfV>Oc#?NEvI#wm7K8`=KlZQpM#w%zuT zeW%XtO#+Gp&csZS$?;iab@)u&pWzbMKeUk@Mf)VbE&QTtYrAkoqdR60*b014Foew_ z5o=~mR29ZUi(tI33`Kc#LiVB(1#R%6Vlg~JIPhca z;V!J};hAt-&b%&7v1$)ZGX;a`mBgGB`l89S&|1=3yp8VWjsCM}-V9+{3kJZ z6g$Nas;`Pd@hh|8Pk*`%nK5xkYT-{yg-^${H#!ANUy@Tg?%%kFY* z3pol>Z$o1j^+Ipqu%T9MRl%R`^Y431*k0%8h2GE8B^R%;=!GokK!^~7jpY(Y!K^*8>;#ofHnT$SHK{sZ*QeN0Wik;&&Rug*w7H zl@P`sJ7cHni{`%35=fa^y$Z&)i}vGbWg5veTwxE@O}za`eWyk+*HI4Nte^PW!9SM1 zFH$CvjC^G*j}u>`WkMAAy7ECyjIP2~MGeZi{V9Xa(Kb3Rw!7cpBJTL{chV64jOY9L zo#XKx$C@ZZ$oR&vD?d$`#?1ZA>uPy?GiK;9Cvqp+U^}vzr0$tVC2o+p)md8p-~OuQ zboZ5hDq0IQi>1TxiD{?@{(T~NTyqxk>5E~1;-QN8X)D+rSh~8Qbc+PPnIhiV(GKz{ z0GGNzp`=?-g=R~XoW0*r=(8~(02;pOq;Y?ekW98LK2OswBGpc11^b==4iz~Vuz^tK z_TwwRS*!VfPi5ym!@cO(K{qdovM2oeQBOZJv73TXh`&DBssAM~KqEal z@!Q#MZr=!j{dp3g;f(V+`KYAYkorAz+#_V%5Jg#T=h~^UU#YIbZ`^?q9?2m`o0Mxp zGfh_GwGU2`Ao-^pa>qJ2_mphs$;+Disb}~%Q3Ji)oe0!t)5vp(p5Xv^bz@u z_{nFa$wA|woCY55BW->z? zw}1U?ob#>j)?`Y`=2aXl{s6ZsL2PVp3wfJ7W>&N;G|^N2KRJt_p5~YZWm~o2qJZ&O zjdT~p_0s!sUy3sE@MX;lvR7c?-A%c~Sz*UxQi7wCGC6(WqCkN?#fk(PA}*-^W~P6I z4AZ=6MA5|Lkp_+Zes|~%CLLluPk@BHUUip*UhRS5XDCr{=$h!m(^9qS!k_soxAoAV z3CLd;k7*G`MO<`zOno0+ixa&?Po&SFGT)*;nXKQN@9@jsS zsnFgR%|;z`;WWm+e&lSElXMEWKt1V=l6eI}{DKagCldXBR3SLJ?za0p%Y<5U8xC}W zWQ?#%_E}Fs!?1c&85ZYM{TF+J?hxwC{3zr%$G3w5G*U+H;JRf)c?I$5a z$89%9akJ4wQ1lvy(5j+nck=Y~oV(%IelpN>p}^GfL1y;c(J%QL0#iLr!+_(~jH+_v zmTuwX2d+_#wXp z`92trM#MpvF2z!Qoc;3eGN!ap@y%BLIMnm^re1J>rj!5hUjW@F_~6-@i{TkdS7V6VMXSuJn*|k@(*$V)7f7cpz6)XtEX8t zYJjH()68f@U@vDrHU1RBak%(7^CWV*dy-*8KPWo=TfvYqagXHA1W7LC;pqFC+u5EH z#Klf2^TFqUw6KruQgep`b%%NY(WK1CPzFui6K8a4A~1GfnnGIqjtwjlgC z|GUi;6CbNjUV4%9D$`Iy+ePc0fHPRwg_Vk$JO#4Xjr%-M@ZU+ZvP#Y{cv)Z07Z!@+X9B zP4V2wA@=4qLZD$5?aOJ@QzNXc(4P^7BEtW#N|A!EdO^s0 z0&L#!f6;97hIIHmo_{d?zGt1*rnFXea77B)k7N~-|TSA4( zw05gxWDj>pwG^r?SE>2uy~Z<}exYse@P*|efB#&bc7FR$Gj*^CS)PUy@HY9zj|Z;F zhzHumDXh@|P9j+)#bTa{fq&ei*uk~rv4_Te5`lbC)7soisz@@x>sAPlUpc*d?fqEstgXDW<~Z9EN#ww9%CVn- zjQBAX$SYQSB}RBuEuA?eb-)9@X%x3fM6~9FF(oUO6aR0>KNPBOXTuZRnTl+Ye|njy z1X9uqw4b42tG!#7Vw;*~CfvEr*h?g#>OW_q1}4Ab!X6UpuKTV?o+@=9fYST^s{j%r z;0<~|HCi^<%#%_AoMU`pb$o@gb6|C*&Dhqvv{b;QYNJ9*?RVoZ9zn++|${hKwt7 zAJ&QL|D2l(zf9NjHfhiRM?U5@37Yoz4MaWx?IIlH;~)F=7h|dgfDzkn<(P) zu^Qd)1LnUO1Xj*(IR|Xs~=)*ILH6QvR$cjNXqp zn4kPTQnz)oD~XHK+=N?eSSx(JOE>ryM&9@f${%qGD5Lc&qw#6C`{ae&A7$KT<-{o! z>tB&HQ*+M+G1|z=x17qUhlR(Ab*rb^`G>wcdLOWQa?EJiwl$9G1TR^+l}$gM$nvZC zTga?CskYzTm^7U7n1!%PejZLpm^GS6`1+6+t=Ec+u#brPRfeVF?i9jng1o3@JM)HB zjWh2?h+>32Ya8*0v>zshCF-uO+t8@(*=%%(1LayFB}OYR;yjaeD0y z4?6toCr>uP$OZrPGlHP3WjdYfDc(45asKqiWC!qb*N~#(9Yt!J_0-dx4}of(joyD# z>-fO+O$a*&hy2IVeIE3d0MrU>X7qD>xvSGiD!fx_{f(ZjE*vyWr|EMxqzi#d*@iz96iuEd$5YU-C?aW zA2ZgI4QTi83-UX{qm(cA?au>t=BBr&k&IDUz5JGSTbU(hn`xUOH>XkKRIP-6I*m4) z53oYM1xem*?F7#vFUGS3B2xUpwg<4H&;@EUXuZAj@jlGM?^5Ei#;(XGK!Oo=$vn^c5=V!$ZT>H~%;`X;r%0%VedA zq@DGG{D-LC^Yd7O+IBi`vcWeIOuZFn)N$)o6#YotV_W?|rK&DrlJVC{6vj7CSP(Tk z9A4<`o938K<1XI4|HmU25jD&54teAoZW6#cd7!{<lgW@QlR80w4hfhZIHeoV$+FW-^o{JSuyNG<<2MJn32Y%!`{r9QXsOW~ypp$Tp( z>_B#hejnXVWaZzG=#L|sQ8If&_!)dv;p4|%0TZ?}CZ1~pXZxHVTe|ielXG?iyJd3}bhL@$dZcw5G{r2+Qm>M8fHR18UKZ<7`E+udFkIC$88ow2zO2J3KQ zP!Hc;tAh?OoX0K=kivyrIKzeNUG2~Xn!L+Pt*o>)84r@zKAifZdDhMv_b^txWBh(< zs!JbkQ9VA6ruKPhHh^lDS8qG|ps9t)_Fka~C2`%9&HX@+7@2jlUcQ1RKW5K3R@%^=H$(YGAhL_ga#H@vJ^-k+9 zD8$?(V(QM}iE4-WISBYLk?&0Q%%yS^2}I-KMtVU&b9_dUb9pbk!e_R3_9<0@1bkH# z1W0QDfb=Q$Axx~E?h1c`g*xal()od9a(Z(*QrNafW=1`Z*A}|dA+P{BIPjW}}V_{XjhBsxW3&TfTkaHszxBxCap&?44{h)Fxg3}jU zU<7l)JY1xFXz{VbL=PF+xJF_RVoGis-cQ}f_kVs#izH7W-MyhJy2;M2i@MpM2MSte|nv>u?I$1DQW^PD6nBifPqk*W}c$syU` z#|A4?V}?#WkVS}RVHBE{K<&kc7(DD@*jE`}yUpIZ{uGaXzEkC>*d7tEcl|bJ4v=E~ z0Lwb!W|k>>FN{W_;c>hhYA^<~bu(}4vK_hFfARE@)o#1!ZHq>8j~!#L(<99;6yB^O z^?Z)ZcHLQXX^OBw^a;6R0Pk!seF>LFvG&sT^pK*Fqs_=BP{0Dc;;a1_bHd(lX?aN( z>YZ((;9nr3Blf<*n0+UQ!8WKl`25Cxg(iG)0ug^U|65;)K?T*ce1Zdc^^cn+5i;#e47s&rYCwjM`S77k zIZ`kxt>1EK1(C0Q?-ybX#YYfkMCxa9ax-M^9A@G|2`XvW|4m8L0XLDmeIT~xJy{8| z{f7>Hzy^O!aad6s%zsc;QKG3)5`FO8U0fYt#3E!tiuxj=BZwsxRnQdXs6i{ZdktT} z2_8?hf6d_lRXv}*d%czXi?*Lxkaw&zN<7D-zzMR6`S13Gi!09hXP5p@Z0|MNE3bK1 zxnJc%&J8x%TtuCjZ{T8G-$UpURPh+U^Bn&Vh7dHj@l2KKFH`%kQAEz27=R z9__wri_Dra0s6`4`VbFlUI*}gb?=QBe&%>46XZCvk$pMVofGlytY{O9-yHVfFa2vH z$9nx)RpZjHQc2D=Uk@h^yhEi3Pt9$LUOokfStD!y`E+)5e4eEdt#%v)5qzf4fjrK~ zfUl+c)wZW6$Tqj=7h#(K?uvJ}`3?MS=brW9LgUwlx30z8CqeAZr-JT+?_0fxy~qYr zP``zUSR!@Fc=owq`$`1b!3#XJ^%a^LeinTlDK#81oLof9C_??f4Vvv6v(4cP;$GFS zzsb+RuhD&u@0HT&Pt+bUZCeVr{=N7$s%F~5f>&`)gVy@96sQ35MFFKLgI71mAt(N= zzM!A}!zVFFV}%@r1jh1A@<@NSG*>2h^u%pi1&}_1Q@-gTE5X? z(tJ*{cJ{pcaSZDyN-6g3pogkWX3bA$f%BE>%v;IroMc35Z^*(^-!k9>jXr-JK6R(x z&7W}GXdXbp0=Rk%#(j>$FJ7y+aAt~MQ}^L zu-hX{_x@0GP8g;)2D{qVZ}(SbZq59UCI?Q#6D94H<7JPJY8qh*gHt*tLgfC~FGLm1 zy$hi=UiyPmQBhO`^S0prWavQ*qs}vXZ4l{F5A{p2_DxNv2o<*d?ThPb$tZo=jC3aQ zg!?T&SgUF6yS++cQdJhE>Bov~MxQwiM?zE7owAg3RAGei*r1zo;N&S5HD=nDSjCHY zq~!mCtpS;D5S|OwH*-M~To-9T~b_5jSe)2+MKmcy5Ew>q6$$7GIO`{9>;(;)U zKo{vYu&O#S^cGlPl&i`L!{fm!;BjbI@+3g_w4#9(6eR;y+*|4Ws9VB8K(7e>M0yu% znbDL2zgBl>x?ZjrZ8Kuwl6$xl1PeH;?Kb@-((& z$~KKGoz@)@=SfFl$g;QI<0duP#Z1O!*%LQ(qLc*ZyZeEJ>{e~9cG<#v=Z_ie`nB%C zo($&_?!(x2VIrK7dVuj~c+zWziBasXJYF*(GJsmvU$(c}-$$P+bx>8RJpbKBwkNWW zF`!^jKa)dooH&*`GMevwKmBPWB>}OlkDCRZGjh_nTe1Y%;5o}GW3;pb5bH8~eMA2( z_eD%GXKgg?ivw4!i|w8mC-V1oKY92x&4jkF{6%w`a%URKTrWsc%G(fygbT0vHbP+W z2UrRL#EzH9j!ssh*K3#AhBcbM+F5>qgxrLp8@XtIH}8*oeeZn+M5JmbjjYH-fvj@i z37-3gyTZz;$$~u!;zf@C3!waIMo$=~usM(Yy4cHa>sDgOnz3`Ndg4djpTzBe9p;2br`$b#{_fTZ{YivorhPGbNE-vMk!VRPd; zf!qSeAoE0TG&of3kdyur{PGwl2h19NK=uG45sy7H|I#)lzrS)Hi|W%DS3)3=q(SzBaQw32jpV}EhNy}7#X z9RCFM0JK{iRqe#BSly)EcKr>VIG->W&Paz_+-EQ!Mq1}`J;ut3V%u)ofI4oFeIlj z)MU2cTJO0N&ywRNM%powH5n3#q`uFj5d;n<~M2WQiR8uvEn%ccehAwkx3L z|JgRm?MG&^c%?%>1@bM>L~pRXU<>qkzHF*kON_qBbJtuFmIkh7PVhtiMnvvT@H1Rx zb;J7`1}u%tma}}7Kz783l2#@MB#O#9A0H3IkR7iyX{TmdL2Bz(J_|O`kOy>70w3nR z$~Cao6-i)t4l6!eEU-gHsqYx7%vF`AMwo(pc(EW~YTWtQtgtFdiVq-blmdX?nFYpz z(wW=p3!wmZ+lQ{&^R$uOO6`&do?2U?2l4fu{m5A}r3=xZd<7W_!%1^0r|-^wxFddN ziZWH({B%p$4z>sV!zPWj=318p`De;3o#7OnKF0dqu>YePdML!-`O2m{R5_CjeDzQ0 zDV#Lu)KbDMGa0HB;AQ9MQ*FrtAH_DhAZZqaQ5*Zx5IFO+vcUG)u#0a4!o>fgQ_2`} zAmY8lc&Mc|XsADSLz$#J&S~lGSNp6W)J`q-VHrhXB^ho$!#Gx}R@)eQnJiFPD0MQE>5zDP+FB zWdjqQRr|ck#7Gtf^K{mOigY`K$DJ+FI~NA!0@3!E!;4IS>P`GJ37HCT9>L*GKW zQo2g;RY26qn1a<)5bZ-gh%dZ&?0X^mGA`|KAZRf1&HT3OL&B_C zwzH1q+!IQ$!p^KGuTk$O%oo+egXy@R`YGUvdahtc4tqlVSw26cz5RIT+GMy$nyZUG z+@5=Hs`^y<-{-gn>hlMj+i+@X81u7xOVjr<7HS>4RyimN0BM=n~NcpkX&8l`) zZsTbvoCxZFT}+tAl@0Z|gV0;&N6`&`YZY0V@$&i(omBReRYB{1#BjiVvVo!?gG}spLoWWuv&|Np>ZN&WkEtt&Uioc}^ zsdjgOt4W;UkA8I)937JcSaWb^!JaAWcUJx2RnvwYdke5bRK@Sz!1N74|BOMIKKM_V zA;*Z0t)eF;bh;nez%9DzL>OYPq%ws5VG;PA9v*=Z1oa}c<7blUa>XZD;g}$I=`6_d zGhS#f2q?yvQ;Xe&!MFdj6l3t^9E^?-Z#C<;?wkY&xS9Fi%-&X_h^}r`?;gUrb^`WG zHfGW4RqkieCH0F|mCM$lVG%I`U{f)$I*@(@L1tBdFGj>~elY;^uq&xw$`iLS8r-271iMG@JINM&Bg`2jG&O&GV#sHgr;=mr+`h zx-t}RKlX(7>G?96k9NB&mooSd*t9;EyP0#Xx72m{9?gHPb8P+P^4Y_c>TdElqmOGC z|E6srabHyeAJkBcN(Z1Bq3w!V&W3uH5SvL1V?OL;61iIl27C(xCkT#vv^= zJ&-lHdjB`ViY|^GkZ5q19H}`}D6$dmyuc&Kw6G4in50DRe5eNs>^#O z^PwSuFidi|19s^Zc22Z6ca#VUGO4X!s%9YXu*OSJ*5D1`iadma92w;hfX_@MNE4GH zMlHLQ44m6_!|LnLum_j3TsMi#KxvFYsBbxPZ@IZ9@${fc|LSI%&Be!T$>t98Xw>_L z@z5Pi;Q81;Ki-?yDOEO7{r6&_HQS8{5dB2)xnpbvylU6RI{1AzfcH$Mb4XFNGbWO^ z*4T~V7wFEa&b}+$&zbYM{+(3OGEOFo+_)uYrLzshmC7x8nd0FkFN7|-5@^L8TH%5N3xOtj?n7c}`S>h1_BDUIv5NE^In zT9_$7#>-(&nt;0xp_C^5N2%qQEp5?->$6a+`a8-Q8a0$O*Y{kAOv zfM=eXc>2~{NYAtgs4xLSAq7JaC%+rRRa|~&{@ZI-*V)%FHew*Kt{}gOwAwF6xDFmt z15!fjeHsUo9ie`u9CC5c^xLZz8!ZofX4jI+t;zt~H!H*O68}aX)DMRkcEHU(lS`zJ zzySTG6&I{4W1u2W6P2{0SCq+^UDzer~GH_9l>MZfzkUDO>k-Kub+iBPgQaD0M? z;|GXxA3VLB2I*DgFEir& z4N)?-h}N7S{2mHSFC?g-_0?P=c$Q{e$g7B2D$Z%!Hqhp(#te6v$YIZ@R$BD$bM;QW zgl$y@%FXl|x|Ns5Jr1?Cw~kpHe6%oH!8d3@vz=>e_4R5nho@fN+V>|h3LD)=-`XrGs&3W&X*a7R!fl&&xr`at6X0F&W+4qq}9A1%|o7K zYOCH8o^v7zhf0z?p0HJuO{LUk1y}N<{ zA3^jQ=VRO~XPOm&*eO(b_%I00724{ByG=iLhF|l<8Y&lg<{;sBm-EY+EM>FiEt*PN zt5efN!6MJFu#H;NJX1=NdK&vL_vQPA`p$s3g_U|=kz(U@3q3_D%$7g@cUy4Ovle?< zc6jL2S#neJgpQA_F7gVf5CD})!o=M~^ji#p6NXg=xAKRiUg3yn0I*!Kp$WMc71439 zV=(w>_bDFGFk@1{@C?%9QQy!4`#1T~T?MGbFikSKl3u&AKuGPhxc~ZR4*@XVi2tvZ zZ3@qo@#0Gr`nP>uyBse^z6>JR?A%Ya##?*Qfqe>gInPIB+vZl4H9%A) zukhoveGo}#DovgjQTn=H)SM9U&m@PE>%I1caKXD8pH~5P@|MBG>IifP@CI&$n-UGp zuj@YgruH+^PoZTH%u*f%;KjDfBSi_Yc96K%rWrP+2USdfz(QavBU||)auvKwPamS2 zQQLrUt4v9|(aJVgD|h&FI%P$b=tJ9b zaq)aVTaWji+yxY)f<^jJ^Khbukax4LuQH zPf}j^J0(>#7s37~%d(1L%qk&hXgXCwc2xT<(K4Plp?Sg)t)syb1~krxs5k_%f!y|8 zQVBt7(4`B~l$c-4oW5X?63c-L@O(Z?O-HmXyOx4ho&bq3ru+XlZ4y1oNOKm?fTnr< z^5ZMZd@`s(Djf+f`r@|sCF$)CfcleE^1Onv{E_*UhkOXS9Kwl;gO3~D`?LEo6)(yg zYJF4Yv89m|fpXg0-W(H)6?IaI%&qaaE76J5I?s_O8I~{xQ&{paGT}EAx>S58`qTzD zvIPivcRihP`~%!2yPR|vBcDKt#|!If!8bI$#YXy7#zWmf()HfAOXz-_QFXj(+Q^3t z@!b4>h%yGw6fanKzl29!tg&u1$Y=EjbhydV{at7@*e5r*|Db%ZQ7Xwy5v5JvHGVaI z!LpAE=cAM##bTB12lN>xwGA3|k8bCs-EA%CD+11_dRlC=hA{i3Tev30MRgxIJ)h{K zKGvQpK5pd=wy0zpp`r|!_l*YMM|?(>8MAtWck}RBwzz5~awe^4f&UtX=V$n{if#_$ zKBdW1<$bt9!fFU|%{N$7zr)Ts-7^x+qWo+Y+mF?IJQ)YC#Qtf6Ldkj@5al}zcANe6 zIrq;`t)+%>dZZ;c^7IOTBPtUJbW_1Zbh45hkQe9P_R`5qu~95I_Wf4(@PPa> zqOU?Q{0o5QoI_H|$<0Pm@yEb9$OWi079t2RlZ0kWj8Bh}Kf7}QBu4VH$&?Z4g#B?F z^D|CV^8W2bG*~KdAyCK+0|yr?BnYkxWhRUVV{I*CaZzRJ0mz60865`#!YRC@%5mzU zzyuH9^uO0q8_r{VDWU0liV)QmWF7@My&A*P8QgbER6c*x`Llcv2ZHGL@vfqX$#^3H zv9!`pGBiS3d;v|B%1?KF4u#9l61v@a!$@1pSf_lUzrX#>*O#Gi9<#f%i@yLnpFjVd zS6=6oZXpwo8jnBVGWhnLs3j^hz1<`u+$*}thnj6u*waPShFTRcByYQ_h6)R476;f=Z*lNrwFCu@GDJ>p zdiaJ$77Hh8&b&HSo+=TzyNW@W&Phni(V|Z)f#1`$WV#$W?&kDD zyfz|0+i!1?UG9u9<8nCu-hj217J<)9s@u{iYFMGIRW=n6Luj&I<8V1cK2YxJOXTB~+AYGgI zyj@H>M^q$BhfI{{Zw@Y%Vd1Zzeu}Chcr6MPzn65ZMm32&wk%qK7VRA;Am}?iMIof^ zsSatk<0`FX@2oynx!6)c&{DHr&I~F!d%)aQ*}6DPpTAT()?(*T0I99Fi5TAp=8;dZ zqttBmqYnna^ftNg|D@sI$jjY`!&k{%uq zkL0@EA7V{zuakkmM%BvxWhv-8tAD+oL(Xt{Nyk2LcQ4|6kqD|f3n>NKnxVL2a-$1^*@zIPFki8V4*F6{eSrB*sDzNczQLg0`qJzlsa+ z#6o0x&V{i#F#?6!fl&cB5=g-RCif1fY}%w=PE}z0=*dzF*BQm{e%d*&rs}r`MWH4@ z;~hAI-y^5{p_XmvDEqh~y-4Vd9;@1$Qo>9BAb7ex6GRhk4UBIs`62ir;!_k)drErF z-C_5z+d7c}rI$7+AucR-=OCf)E#7$3{3+4qorp|d#v2qBePn3VR>*Oie@i+`ej(&y zh4PCJx!T4-7|IQY>ps$b{KAMXuiw4{XATDZo8*$j+*8=|a#(~(Nf|$Wp`slSgLX-d zX#l)>SvX~;MG~EBTGbEQ@_0Qv3zAHu%q+^mdxAD2)9#;$w$&za z7M~E^ieb2w9mrO=-S~$T+=td?V}IBW0n3xylN`AwMW3D#oD*YS zII#|phNl%I$km>hJ%ou-(%t%LDZ>GxsnGu8($#*^J<}nd8H8GcOcS;#lZ)a zPM}xF57&G#fPIvQ|FhZTuE&x(vQYCVnIVw=Gj8ffU@)YiP`fc*3NM6!z?wDqVw)uq zGNC~5N{h(D<5Q094{!#3COneP)ArE$y^eiqa+s!T-`p){G@$WxHq4VC1UU)t*(nW@ z17QQSl?}xIzs3{c+pi%)Spx+rEbk!){e(ioh&WkF@M_R7gW%R$=JdHTAuG6ToK0_x zzYc1aeHS@BE_l>m-vE+v-nb36`8H!a)n|o3@i548NAvius%cJX^_v+pOp`&U-&ylV zN=3~{o~zzUDJ2{h0p%1Q7w9yfh0TgDH7OItd6G%pIoRUZ8Lz%TUto3Erm#$NDp3 z{jc*aGfPf*-#8Ao`>%R~G((iKe5PupqGLWvvp+>;pk&qy+E%P8N2Zm&JBOcIbB~LQ zKWq~Dqy<=DpvR_a2l=$$v3f5h9!{K(oJlTTYjxeCOOgy5@2eS3(i2^aXJF{AlW%sA z*rzAG02_M^cW2{n%+vyq>0cQ{?G%^Cy@1WrthaIXHtW8%epE~TYbadnsqX zFU&wd?I;jOyr#5yR942aX`i|p>W;(h)4tD=A%qIeV>H-EewZdYgScOdYZxCrs>Q3a9RJYvrA)c= zTkVxwnR?Zx_>YY5YqmAey84M{*6Jg_tF&h~`9o#SzgLGo3epwR#FNv2I zda(?w-JzS;q+P6mG^+K^rWWToGf_akcSDDrd){gznReSnI$X}ZKnmjcfy$WuV1iVd z-a~#Px#jyyBU9uc2C;^yw#R%n)dalE zzKuX{vMy$Kbvk`LJ1(NR3Lo>?y>AGZ?nqmN?Sqr6Hca`IlVQ<5L-zmK-Wn%CCCKZq zPKC=dLe-qw1_=T25kU+#;rk^q*eS7rS!^K)As)#1$@kfQaypOA8+MwDSNBEG!|cQQ z%xv&wVN#QaO!4H_*%^-kSGQqD-vTto-cW|MXM{CVUogt2Gl7*%(t@+Ivs0I|R`OOU z6~Esx6z7X5KW_NXAJ=1cch>e>OnSwsZrXpgK+t`!2`&_%t=qP-Vxg$D_D|e?qSh_b zFn4j8WMivg@PQUN1PdBc5st-aek1nAo5ogI=2SCRYtIu-KVu@`(A?8_=v9H`u@_SJ z1{fA!RL`oiyhw&NJ)GqNdM!5&U*u;6f_RVmwhIEbIF~ZwD+(6Ix7U%?9e+;5S1V3J z3Aph+M5|>~40rb6!hp|2vrN=vC}uBtl}Dl3BlYiXcp*uIiQxsm2qHb*J6pQR+friD zBP*ZHe#vRwf45i$%c6f8nA1&oMb%_}9~v4bbvW1|ll3ubUQvZ`XYX2n#~Vhb;sjv- zeax=bSCs0j>WW~ar$FcGYOeT{jBbQ&5i;dU%TqQ-^HUm|y=%_%K7$D{VZ{;gMBYXt zWZVWS!7qW~Libw{NDZ#^{zQ0Q`$jl;gOUtoOv3ynOf}{oM2{IJIMKcJS*SstjO2dSydNgV?lp#OUAx!jV%{x`ut5ND}h84jzexqdD;JmqzX zv}uL_3J*!cS6N*!_$;Qdu`kIs6G|zL&@tYoEUPRt+D!wzO{I7z1@<+bl{onSUyitrR{%M z$a7RaN}bk-g7ciVoYj0spP2Lj-ZoIzR1@vHCGb@TM9h82yldq&?`5a7ikugB_VdXK zP2P!CbEp|->_zx0L3pgG>S^#r@Mm5O`w1EETZ{$F{MiuW2=%2v#hF_BM9^|9nSdj= zA!k|iPXfo8-T=IJP5TP0=Fol%{&YQ6f@v}MpH1yp*aF(3E;=e5<-}u!2UhDpm}pu| z(L}nA($jTirjR!qan&-;+2FE+fM zsk$z}qW$Ud`ZFX0D)=%${yzHgnq(_5AKvT?-wuj@N%{EWNx&qJv&@(=yb0{RjVLoM0lIO zQ{$D0=jC#%36A%WSwwfhxFZpKO)Aw%PQ4glt0B744x*Mo{2o?Eufw!ma93H4`eu!l zoY2)g9la6gsN;S-OZaeNy-R9P&QIG6#)^H?kt&nB(DWT0`u1}3&m$&&lK}| zsoM*3nfSBHV$hu#$&$jIX>$MQdF}2I+*wGq3L)FhGN$O$dO8J?q$mOt2vxm+secKF((d z>BvLR37``4lsr-$fs|BUluRon^jgbsFg*nX?}T#!0$a(dDVY8tD2&5NW(MYAd%6UEO$Kzht zZHp?$wp&!J@YT|5+*u%4-i63O*;CUkWzjq9Mg{w*np(?Ey8UBcub2+h3T5 zM#(?GlOFwtv(Ta^1Gis4&8Mg<-2;b+$W7ie#1dxKQ!px7nEe0da?3g*?f54Cq98dx z@y2`>#LEp`*>TbsFv_d9RnY4W3wJU3J94%HzTQ3&@am(7oxx>u5*)yVf!|yI&g+E( z&3+eiyUX%?9%9fpXJme69FAa{L_|zCUz`SxeaJvfNrbYNttU6Wzffum7SHTJY%$~S zlE*}ex9_7FF_l*+NJq{>{n0_)X6JPD(*#65PraX*K2h=FVgu2qaDrqTQeq0>I&)eT zqlnWbLeXXRkf5rn(ln~*! z1x0k;Jr;0(xv!AVY!gU~`SLbD{ouCiwl?-A$2!q!v^#F4+e{Fd8$WmDrJFHgZ*$J4 zp5KLJHW2=cqwM!YMCXtB!{T ziX~eIv8)sBG0|9TMbOUeaWlRU^X|f&E5&w95=Kbj>d66=^GEgNF5=d-fW0?p?>$Y7 z$>DSpg!D;}8PdD;t(caRO-t0!Hz_=_$duI#hA&JCniFZ67*8{Wy~E2GvVQ}e#ZR^1 zBnK{+FQ-X60JuK~1pG&n6aQqP3vM;41}F+8Kw<7XG;9Iv+}JmTXlNxd;;(#Q5<&iY zxviZ?GdAU>pG+~GCzkki4&>94BmC3%jZ5J%TBR$|zv3QwFN3!xCCeKksoy@}6bq{p)J*m?77fzwnTsD4bEl2WdGZi$otBF+hF;io!Yvk`Q zXT#McVv-%MvuFPq2Mz`s(5i$UTY%O}9M%!MEw+4q)9YTmcAlofn! zE|$Pt;p`Y(3Y%t6GhWY*Q)HaX=s$IAB;3>p`}dPV%(?;xRA*%=`&qhgE|2DsxYO`- z>719pGss_tFiaQR#O(f@QA_!ej9_#4iEMk~-=5u^wV2J0tIu^5H>1znh>2-YHsLBZ>_k5X9(41 zn`IdMLBV2MK3#7Ra!Bm$Z5xTOrwt{5co;OO@) zTOYBLFbDPbJc2Y;IDXwX;3v@SDs>YxAGh_Qh>3ZmYbohqAA9!o*X+M`RsIs&M@c{? z(acZO7II@bA4q0KJJ08^4k?#Wodj2j;@ub%X;BE}pcM9rb#}|JKU~Epk52MDoMH3n z7ga`|!ofKB9HL~0vY!F} zd&h)%Zv6)o#9-hj%z4Al=RJqAmtzzYBAsk-u>p;%m4= z$Bh*@hUy}%T=dz7$o9+*hF9ruTH;%c@2uBty-iY|Pt||Xkn>EBpz$x^n`dPnjYAh$wbF>IO+^5B-MfkX^4fd+G&WG84 z&$ow>HsdyFpxs)XU{(Cn)JELCmACm?e?{APex2|*9JNilM+XoF!FQIltobNa!AaJ7 zW~&fS!Mj@mHu^0Rsi9pD&;_(#wY?+|o*Dwaa94aGuwX9vDlOiUOdmOH=tZpK}1aW8=q>$VMG^jsF}X@qnQOVp~55e$*-R zbB{n39Y@fA_pd#$e^U8xfg7b^5IWX>((n21|47_vKmxzSqeK5`zW5le&%?|_0~0RG z(J-LB*A_P4v*(?BEug6JE7%w8)Jnk!A0`{kZ)v%)fJLLQ>|9SheG82)rp(zU^iH|b z@#vH@vEcpgv)a3_{FuBQnag;G?!7z-7Zp&G%EOLp*pZ zI$=XMS^BAZ;T+iyi^U4~M-Ms%|AsTG2TI~zBF-?X`i!w8CGEbM5h&t`S+u2wNwt50 z`ICGww2YPd{dL6h;qnGShr7xCO8$T+`Y1_L4SasUXJqbaJCrbGxd20V!qA%Q)xYL; zj!Y{$bbG)`n>*vu{$18=Ip=9uc3;q-`r3vVG+}ybd<2s$6}eK5On?P*5^>F})d&o2 zv!Q#EEGR&vSpw^XH%f;6)%Z=EIb-3xHyv%$j9&OTX>NX?tTGBrnxYet$CBj9#zl~p z{{2$1qKKM`u4k&sXZzHXZ4&}>wMmPk*ev6i%VZ?m%*-}weNV|VOStB}j@sjv0QP(> z;NkEJbdvbF&;rS<~m`UUDq>j6na73^J@qU0;p=d6xW=oHn&%D!Ps z?9KbIqT4nR&g-L&5~FYj{SqC zm!~VbRno_S=X^M%G?s$FT+pLatz?nqZ9-!6@{PZ~Vs0`plcGq>3mG{dr7<}-1Ub4M zK5J@seC`VMwfKObH5hUtCS?19LwZY4O9!OqK2{JHP{#!sAu*ThSSc)XE^Z{F67I zo8M>6?)!J2-f(`c?_jZlj651o9Yje$fMo6Uz!Ll5*l;mMSIMkOCP<0j)arA|Ok|w? zuJuZe=bo-|*q|jnp9n~1V5SCnM-Qo&+|=#-%JHPOq4n#16=lv}V|L6I#b@+{)~EMxp=l>&^6(YueNGb)0cy+j)=12%dqf6qQKVVSKb-2V09uJvWit=|c| z@nl?1;k%k|M3;Aj|B1t;l=a@5=drgI47^B)=-GqG73F~nh|^oPCNh3@C=XF5q@vKR zTTh_7sapr zEe(GBH*SZR?EJ(K0!+D66@6YJRT>U86?EgHw8cJ`KxFNzW=5=ghVx2B6>aLX=MaO< zA*r}Dl~>1RK00qSuph3aiN~F%!M*(}NlgkW@d5Q4M3%;KiyKkPwwtGuNLMl$4<~D> zO*Br+t^0^;4`yBE-tUDt2WvGZpc0EYMZ-J0ScWedK6a0ypZT83kRZ2i)q72s4kL20 z*`JA0XWf}Ow{KIm7p@JGC@E=svhgbQE~nog?$*1A!X)y8)+3C-Scvm&cfiTYWMkDD zlQm@|1em@PiIR~~s#NM^!fvfE%#1Kx1wqez0iZtBV+bew12BE>3#ss8sXe2QfsO7n zV}m(+Gv6Di*NzIl4P=oy353SSqaTHK(l1g)EEX$L{gB2VEBsG2E;SnR(Q9=gDk`FR zKJ|d6q^FMhYPGpz;jy0!KR41bSuTOAcd#U6#f8aXz4ymFzLg;r%u>52!XA`j=#ltz zAr0(T3#k+hae0mJ!56md{7v;rOTXe(g^(yXCh^Hlk4?;QqgO%`%JM(tv$rw-jtRmk zWhN^o#N~)&QJEKThvAGyVXxwR z_DNyi6m=CMsdE!+q4^uLUwhKqYcIaAxFFvlhY$uD93|!3=}$sx8T?t*S+qwT0t++^ zMjH1<;c3^3`yeP}Z2aZY?9?I#b^9PB;}5WtFE863Us0p5u5P3@HwAQ-=2F`9n%x<+}9E_+-#OC zub>>{(i!0imRJPJFnO!>CMh$!Jn{Id9-#izNNkY)IbD1}J2@@ST5?u|^LVJo0WV2w zq+~}|SHR0!%BuCFQFCgUBoa$LUYS4$X@c&G34NALYr+_s1Rp82!S?~nLI|2pH*QzJDps95X3`ls>=D`8`0n_z(K|uI^`!~Gq zVY8{ulj`K@xtei)JU|kD9JkKQDN|36bTWsS3`v4rC@#BP2Z}zGtv?nKX_a27>D)7PoUVE6aX0HX zI64*~?h5mTM8zKJ#ANQVBM^1nLuTNg?rK59!VFzuSZ-{e`UO=@CRuL7 zD*UlmyXs0bTj+*3@5)~yA}rWSF3tO_jFB0A&A_0$@X6lYIBZb$)m}W_xt;O^zSgCFRTQCh5W$VOs(CUCEsy>Re99R^lSVh!uemUXhGLXH520?&EE zr)~fxfga4we>O3DLeyb_lo5*Va;hT{#zAKjR3zeiPhbGqr>pKUycK;K8jnEd(FD zJj8i0I0gy)LZ0t|X6wmhA4pwT*?^!3W$Kjv&TCs#Pf0|@MI#DPcKex?1vxV#$_4I7 zg}>3;mGZw?0H%wsB%ftv++uo(GK5;w2qKl0`bl#;UQkH$w%m!J?hXU**HQ|V@Ubuw zeB%^>gkN4Y4g!WKLN%f3(Y8f)Ge}hz-&mI2f(${OT4LCQx!Jv2Y_vfc6VPwwtzHfw z9xkO?H%%tj&h78cE#k??$qyUM#wH_vN9GA!u`QqUL}O4x&&#pkt*j&~|R`teU2ol^Q=1VGvo zVvh4HgkL@ik{vTiJ-u|o$04Pez;24nKq$P3_`X;#SN8Jft}%}!0(-Qc&0etV@2YrB zJ|Kf8bCgu{!lJ`X(-v>DQ~n~6j)X(|b)@Gco8b=n8H()WIhJ~3_ignI(7Ar84lcif zIt}r9X2;?gg5Mk=TYF01X=}4tkPD-NJbYVnYZxybdP?(q#3#z1i0MmWZa$8LJ)s;d z^+UdD!h~#>X1ng7pcDhQ*nyNja(dvn+nwi#zYA*Uu$-8K{+XjTHy!(X~d?7U0t9aB*{rTmHxx zls=TvwM>(>XLGBc#&sSL_;xqEwJ%nSu8j@ojlEx5e{juNfAhU0d*0l3H5q9>t{> zk8`}ZbP(FV`)zzXYrK+v=i3kvGF4Fyj-%g|`-`%oRiD*ja*RQA`E4w&AKX&w>aKdg z|J&-uv2_fU~Py+G75bH_71X z-LrD`u(kT;*;(5KDW?^H=W2LySH^R3xco|eT*!3$;|Y_|NRX2(ozO}~P>III-uPtQ zPSgxE-Zq41zCpu{t2ejf-tpFtoC0(*0x|&;34BjP3`OMYN-yehJ@aE(`__-WX5Jxnxal#D^^%vZ`;0jm<`Tc z9xPNQN(#jL$`)`mOke|W=UMz;e1Kb{nDtacz38JC<8 z-F{%~U@fXbptnUCdik~QjO4P_0VLB<6|-dGcQld5BR{erAr;n?Gr<<(d6Hn)MF4wG z)=Yf590o+h8J#|JHJNRA1iz`Cp`Q@Dfjt+CHpbovB+!f}Q+&g62~Ci0{0qW*n6pv~ z$v`KgKV0X(se!7yU(|+5lc?$rSP>B9KApBx?;@t5Z=G|YVU{0!i^{n22-HQ&6xGom z5E3h2Ajz_g!S=0;niZS*<2G!@axxvE`#pM{cZZilWATb5PiJchG^s;pe?C4rGu$^l zWY$94$9g3s(K3iKzUclPga)pT`gQr?9EJAT5RN>C0O)8L!3PVUt=2tI(;MNAEf&jB z*eYN0B=NRHwRyl;Z1~`V2lqUk%@wGpg_0xMW~hB`oQMnC8!I&MtTkIV4jPkltBN$O zbn^)I-9rV?SV)T?}#^xKij)01OHrxXhIC#Ez;j*i*deN{0 zndgLmLfEug`;v_?kU`aZPWgSE^q7+f>9EDU zu^q_UN##B+G3O=C!2~qKI;c}&^dn3zxO)hk2#UgiwI6d)FhA1#;K3<%h6Y+%Yyh1p znT28WKd%%7{Hf7_|DL=z>iMZ2|D$effw~#;>e&%&I6gQKe1S-K#)y4xQ47g5=#QeI zGX@SRdK)KgY)KcnJG>kj!onikwVy4Sw4)g{aVWfx8!~F@ z8W*of1g}V9(b;~vx!``TX^hXJRW}4*9YEpgjbi8D}&35L2Z1u%2BCE z#gqcC58{V%@!ipLiT#{BE%y!z2Bo`be!JNeL(Ic05-d2`jZD`D6Ng><*H9tlqNqG- z413urpypMtlYaJ{?fd!eNP`p{qPC~rpQ$Vc9Uk<^oDiI8@|Jlv9_^{T2xeU@`z0b{ zQ--mIvOK+my-)j#eY?_+BEJmZXVqFbsew-}&j)>Dr605QJ8&}jX_Lua0z3;i;RGZ; zU;>!U^A5K;I7%#P=)|P3pnhY$+I|(PHV=oyxE=#jVtQG5F*3w`73sV9Ehv18pN4!& z{UKvCFYHiN{Ak@Wth5!}|_BVQ)65JyBGAL+_6M7e(m| zzOKllzE}8?E2F7WIO!0%ghhm|2O@u2{GW-I>6=-|TY0~=Vc>%ZJ-mzkGFdg+*f+?= z606rG`%u4c5TV70{jp~>fbYmW`BP<#hK*A^F91nk(g9=X%0MV~YFepH$J%di)oK(R=Y-kGK#n5|aSuz~X?mUk;_WRP~ zH>Ee*T@{@d6~)cvmwWHt-D7Vz=Rvc;TFMZL39W?drJ**GIofydJrh#YV%&UOhYWo~5)vekDf_f`Q#T&AKz^QcIx zW|t>^8mo&^M(OC49L>a5$ofRBJt9Y!txlrXqz>#rO7i>W^NBh;LPzTll|@}Nyf1sd z^^8_=o(2gW#%RRH1bQ3v&`oxRXXlN3N^59NG}`8O(E(7VnDqmzdGV~f@vh3sLN-@y zg+9}%0+vRaAD+;@h|AJ-F>1dhM%)+G#`2~x5-}|&^31*fmCMZzN|3SeyD#|nmjE9Lc-`G-@+a#>Ue=tOT2NQPJ3|N%#<1Y5si@Xst>jMA2@rUC>tYQ-Z17 zY&=_rBS~z@=&U5!f>zbLPa=IWg#xO1lgqT?;zE@rR4R;JANFtgE@-th+>873W=f}@ zfHn&l_8nWC!vWjk><*2bWtk-?gf#LEB|FT(3GrsDtZc9e?NJ8KO)8~C(!zF|$YxAz zn=Q|%Lw07Y9Gef%u(*h&7Ie|0g?JeYJLP^PZ3jaXey;C4HG9A&(cSE5kB`)LalZm zyBC!vyaTt5b1Nc@OwZJ&u=eq2G?w1Ow{sF|T|kaB^f#bDQBhT#9kx;W&bGvWE-cQ9 z+s*m=U>%?D_gUEcnXo=^+4@1>a-A@6lK?^?=POrZzPE2>&6o8ZS9?6kh}r#bPeK&* zTYqg;duIBf_mN(e3!0rKbD1BGidaXJLUmS`42~Xh52gyu6WM+unj}tSS#Lf(xa(EQ z*}M?$n68wRKcme%qHOWL+)+kn!^B6OE)Jmm9cnT}*-qm(kgwyBGEw2xF*M+&uhmu_ z8CUX;fYK2H!`f_BomE|Ge4YXu_j1M30)#2&_h;Z4yB)Bt)|u`P~0#YDkOe0;CI(1*ma76pNa)Mj_ipsTAE^i z+)UpIInaPS%p_!Dur7|q5zFh4N zb;bi78+Kk^PJ1!kjP)lk)wba-s}Kz4AS)O*D(-_O{0ZJ+fd>K*gUc92x4`7c59~|- zqjn_dPz~))Kx@Xviey%JljDsQ1t?sZ~|_ zoNF_K075eEM{g$Y8pY!il@$X1 z)Z`*OKiKHZ0hUS*dL;0{NO1on=^~sDZ7=QuH-M`}9(tQmu4Q8kW=5ODIUW@|pq7Xh zJ1gO#gz3~(RkRFT4L}lPvW}>x_|Rt+BC;(UQiLk@|Jf|nI4Q{y$8{;3MT^UN*-vM+U25O}68cY|Ka3us4;MzfHzYM`$E^3Z@}irlL%^l(@|j^qba zl6-5lxJ+zMcGe6Jm*^g*ig=LV^)|&Ej5$%&@3kTi)oy$I1gvQCxz@eKASo;+$lSQF zP$0?&7vLCc6;FLHmwtlA1rXwJI=!80iQIlcM{StsNyMLNapsavuGdSnHfRvsm6V+% zWx3hCCrnnF@yOUwuG@Y%p zfUR=1sve{!WrZZ`tdd^q@28aNA04pDw` z?jvJEt+_91cZ~t=a9Cq1pZ0|aWn%nLM4Wc{(lAd>N6fqQ>iOo5pk4oPclf@|nHwGH zyl~_<865{J%aCtaufDc@OuT$`#a5r=bZ3J*>-jW%qfnqThUuQ*dN25p&CuqLScfhP zW~``>^Ds8h3!1R^=kPbpVnrYFN8s+qz5@-$hx~DIK1)UQ9z1+ZQXRe32>oXb0;@8Ti$n6X4hfFen|C z%(mK*&c`!oGQm-sGFZavB72X@&P*~%LQG`9dY@jTkxSNR9NhH2rd2>?z^hcu!H1cO z;=>yjR&>_(u%93f8h=F{7vdwLA5tKMJf2e-x1U@br$$v*^fqiK5!JQ;4 z7fOo7n(@U1vA&oU1D0$*3gW5m6-?$dmu<0~8by+%GXyvPKQoEIj3qLTR-0QJ?0&>&I}B1FcOrQ9X*cL zCjUAynofE;1FX@j*PW%`+7zRNxUlO!2m_C!MBI(G=MYl16y7JN+azvw?AjC2^?Js( zk(`V&JPoMO5?5|OQT(h56vQ-hc5y)i`Tlts@%BV|0MIHn?cqu18YTn?m^4 zljE9_8|TtxlEL3;rtA4z#w79T+ss91De0bN%cg7V>(m?@r6M-DZ-%Rgmb@0IT1!q_ z6eI1eFc7)PM=pY_HI=sK2**GuLetBNG)pId0m@!~^bhxDgSj0P z?1ds`_%B!QgB*D5XAj%i1Y&k))7IV#n?62%b%rgUq^-(o+aGd>E9C^9ly^SkSC+R) z9;sS4`^$CmO)TTi3_)2YMFoV}yBke^$AobleX*7nr>yc)>+N?`9BK%N%gxFll4)fS z`7Vj5+hpb~=UJaqrRAX<#C_NHJ15L%Tc4kFJqm5ay;*&G`WCw75o`Q3T5kOaiifjW zm`YY?Y>t*x+w=f$z1I>#|wq85X!*BkOKjJB0YX-5yAT+8L=QiEamcO*;8sB27ISeqS`eu_mq1RhR@!X z(gKs!x5|GftDIlazzR|nty=K*APn024E)FkIO%fx zrTT0WqThsX(R}f!4fiS%+Kk;#R(1`0K_0od;I#?;hiFpu0dGi1{KEmQ0b1V9C)SHY za4sy}PI{gbq@S3BV-4wTG9i9p>}7^UN45+;9LkkwGz(3Jpsk|*zGr7Xxy`OpkEY>a zB_M<2Sl}KKf7FK`Jwo!R5))U~(&2d&Nl3-LrN4$-(bl~9zVum8r$@qn`~kj$(z6W$ zj3 zh@;QPS|WS%j!l;XHDeriqu5RkSa%B6p2PF zxEgF7f`X1p#eUZp#LQ@a^QomZ4SmIvvu|!--+un9k!XdGy^XL;Ft2@fei0bcF6-kl z(_YZtgJlUaQ!Mkt&=bwW4U~Xhk(EEgI-aj;k!x^2KhkBGy4jj#YWcDl+>_p)7oA!M znXfphj}I?HXr7-r2i{ByQ9a*BkfjOpvq;rNe6mf|RVPEk4mfK(_jXQsb|rv2v384Uhx!hpxYb0!X|UCo&L5)!iYd&z|63_+B%?-wku=TD3jlTS z!FOTrFQY_N1VZs7xORdWuJbZlv&It@t}VNoglTKcs=h*z9lztkfb2@Yx)zT*stxfc?^=##D5TgU^(uG~GMV-+ zb!#A4hT5a+a8q>Gw`aU_8hldR43(Ww4sx&k2>l>H#a>*5s8~6^e{JLJ7b;|p{Q$@4 z~Iwe-uq|c)Iavf$fe^@-G*KT09s>(fq)TuC)bc zSgzMm5x6LV@>DmQ&lz;!_Cnbh%l7PSsjgc~nh6_y!p^KR|B$b@HnfB*7;rxtDh{iQ z&P=&Iso^!9cZZUzeMzyBd;)qiPKp|ftTw>Nb3D>v4n9`vrf&%k^ox&=*mXu2+3PoR zV|MlR8`poRO57grqcHkiMo)NSIKxV)estYOF|sbVkz0FgyEiN7PdMJ^Gj00}#U?O> zI)S~XLC`1)t-#3*4p-fc9JTmK?cWU6d&|%)6iWo%R!`>G9`?F=IlU5JIcA?RSCBjM z$Pm%{uS~(f#l)4O)i$>83V`1Weit_Dz6-{+hUDd*OqL$Az@)4Ht$$1Or0FSeKsuc~Mj%yT!ii%eB2S4rfOaAVWrH0+X z0Ro)dP?}4Tw=jSHe>RD-o$px5NqQacBA<7Rl%@kpf$#%jP-V2K`Pn`wg5b-{1y@(k zwpaaGFhFPnD9p(=Hub_wyjG51TR$!V4^SqxaH3Axqf?fU0o!xQwsHv{Z=7%Cn-SMnV&R*22v7x0{Px*b)h?qcAj6c;wnB#Z_WfAhRp?KtQ&{#|F^VaJ&LcGi31!GRQ z%-&RL*9nBIF%qx{n0)@PZm5hpL02g-ZoOjTH(fRliVPly;eMi~n%4>bQ=?U6%piQC z3UQOUrMnXL z5m~w#?EON)=E`FzuNcQ@BPOLLTy`NEYUH7yuK%6Ef{!MO;9Hk(9n?rs0sQAe>ga+3c$n>($`-TL6?K!Wvh~jQtn!tjbgVV+2B^=plACG2 z=c}(bywsP6;GVZu=YL%7cD=O(>%Mn}9uHx556dI{3obu4POcxu1XVdDN9B*#k?85| zfsvI>Ff!i8rB^f35RJI@#^O=DbV*d!#QWC-e9?Mlsrr>z8s>ZVk!UHwuR3t+6N?+s z(c|<(3?sA{P$2kOKzmM`2bK>ZwY?~4^-3ImAeuRJ;DgS#zT}m?RFb#uzX8wT3g>^l zQ$J_oKEWK!T$audWsCEx`cz`Lmuh_M3UqR{|K2t}lH<3}rlF6pEd~~b*Qzh>#cSZ8 z)7v%77XXbcvGxJ%d;tM-aoc&0L5iUb^#~nj?&`7VZey&r4ct00TIq7H?|s3n1qehV1@N?oQf8^ z%^o^BDI*mDDvvgcW36F`;f!|{;C7N;utP>mS+Le=np4J&l$;doO62;p`WK>X@V1J$ z^?5xt{o$!!d2Miop6+rRS|IX!fr5hJ51q~oV!4@LwdGlwWGQkUnkEcX2P9`!Z&E5M z&U=}+Ty}h6w+WhygJ@dvt_kJ0ygyri)nG?HU&$M zEFP#l1s@VUL7ia{Bi-ksIW|knjqV2d@wZ(L+r4olw5b#OnHo#KOYFA-VwWF|!g!H~ zX8~1>T0Q1nl<*e&(LR`oa9EZ{0lBKKYED_Bu9K2cLc<;J7MwS!w=_niO7y6iBxoU2 zg?O%n`hV~GI9v}K4bXIT>RuGLJv?X1 zh~?HkHdRJuEJ$uX+jti%gr)DOz%XZ$m#^S(x5>p|U177ElwMNnpaChTh{Cg)ykMsr zfMWmD;Fzt-y|JgO7CQH`6CozuCNAaAw^HaC&1Q-GI_^cxpzfMmDQ^h_Y#cZL*f^X= zYRVYKSC3SRwKI`sWWi^`{zLy;RE}rGF1w|mYRfQK{G&VrTyR`L39Rqll%dw}L5xeI z9*T58pGXt#9vZ+$^Jq5jkN;=~5LEw{cJK;wq6ei4Sqnz{p{~A>X z@`&B{!Eek@svfq)qzpy!_3>>NR|$bR)3{9;CUlz>arwali$={`ZGL*qF5I0UDpYcumlxBsk-X;2t7(Mf}iMwiCc+j-%?6Wjc|?*;InjWf%s=hPEP)rp<)Qy z<6bgMIa)O%#1#e;!D$L9r0sqwW^cve5c3u>?RLr&NkYd?6cMA_6MXDH6%cS>U>^J} zQ*+}tq4f?pNg}AqG;&;0n1bbfpOS&EHgibdpA{tuhDU0f$g-f+>2Fn{{rba4JTIS^ zO|JihFzZ=R#<5@EOL2;lGp2G7K~`q9W4RxeG+&I(J0B@HNmA>)dF8L*M`;tJ`r5>o zpLrY6uBkU=GWc-YP(HD!R>VrMDbRhbAfNCz{HxL)6zNDKkF7}9Qif?_$?CM5+xFma zZ7hBE7rd)|TFk_9Wa3z@^_g5c3jV@wRvKIC#%_=S7tNaknhVZQgcQfvT}YT&)Q%n)CUw}`a7>()4H`ML|V00{;kUkA5VTx^Oz{@r75!9AAr&@U!1 z<)c!ux~%G2S1hX}3^E?4Z;}zr%A8`xgDylrd|S@X;#r}zb-?i~H}8?n3pi@=Rb9Q; z%gp8$6qaZ`cJr2hYgG%W?0wA-X6p+l61_$_+QBWB-v@WP{hb6r{Ljz_M@M?1d`Qhp*p~fUfOGc${O$uy$qldb z$Bxb^-9OUNzJqFKdQDBrxP78H?U$qcJ?VcMTJ_MGx;c*mfJ^KXu`tJJE~t61M&wXA z9L5n^TuwK7+t1&0RZ}p6hso@(PV?dc8%(wNoNv`7A5mDkYP@j8)uQ({ZqLBq_$v74 zYeuK7tzE9-Y9p>vtnp=*ExJ9C{=S7(nDj|eVp@pIzDfV^_Z2`x>8r8^|we5904gLwKiGX*&$JPrFdYk!bXb^nD8jeYNFtBk{YL@p0Nl3ia~Lpvn;Rp+hG+W`?2fZfY2TLg{{AGXW{ltO zI@f`2T=5Q+(yy_rXB6oYwRy@}>Fe{;Sc@K=BG6AEy1p&|(%$Q=p~8r2-@7yNA3DAw8)!Gdq@1ZL!CEK<{HC z=2_)~`yj_bDQSJqid6%HlkNkRbh)*=kc6ggS%(0I+Jn_!kr($JLSEc;7~2>diaL&) zh}CACpP|V=SO)>k_0_F{#G+Z(1rcv{wfmZ)h;4m#eSFls{yK)F{e4C+p$^;g^`w!} zo*ux~0gHkXxf@22fESnH!$y|b-(ILa6Y}9PhJJq}pTQ`uH_xWoF<#N3MwtO2i^Ta^ zX8r_327ZIjC(M$t32`WQniW=aP8Xxj$(M`qXrA{Irz>`DW96_y$#3?A>vVi{Wqfz% zRv)n@G!e{LRbqNq?G?ilR6mvPPqxCMx}rjYTH*k8E+9SXjDw3T=MpmbBWg1p?@#)R zH&Rqoeqen%!-F-bB%wje2M|tJf5bM&`&L4p2Vd6+aA3U_L-LfseZZRhS=}dl9UDf} zD>=)~-*Dd)u5{;iJrqBrnldC)buBzU>iE+BX$7qRmsU{ijl4kg1M5DXCJS1dubqM+ z%-01N8Jd}K)j2Pa;~Tpm!W_}m?lOjw(OxEr>6tVTV_O=S+cj_ZkEge*@>zu5^d+@< z(9~F;d~F$qp+#qEgj+7R{Qn7=XudfRM7PnZY`1OFC%mwr=f1&id?j@v9EE%Ccd<-o zx7>$oi{o))HvUo|jaD2{hZJv@^_u&UQ~3kMY|q4xNgINs@`t!r(Z5$BxqkcRcl~fY%CnZ$l!;MEmjQlOeY&4{lkV!j7_l2S z)XVS^l9O=t%&7dJ_FcpOaBRM3d>DFN+8yN%Q&8#b*EsEq%K=LzcrbOQiEv0#3QrD{ zH2iK*q$C&LwxppY*Nxf(44)+qS}*yz+cAzuj%TZ}ht1|Q!8~JU2!qP_`H-vRB$e;^ zinHh2{rr=@AaMNGXM_(izjF=BmO@JFP1pT~Z#OA%UIRf59L&SEld1ol&!|8deV>x( z(aJLU{gGkLHqpm+((MpJ8k_YKy{rpH#-^|n9G_13aT8%LzNv6S zX<%@BRsA_H%m~?Nmfjvg`dqHtG;K?&7UD{x3$Gi%!h09vsehamPXsz?Wv= ze){dgdE<{CPtxRw2es!1oF`*hm6h}{VljyW5-WqVSQxOq1_X_%CPXr6*^-N2=j$k) z>=(_`y3{m2j;m0AVQi65b<=>>9gbOzHl!$-+7FckNdTbAU~nxU)0zG$BMbM1v5=ZO zT=x-uY=!$Hu*bSK-{ND(U{yG+1>}~et!wp54!{p+Oa;CHp9uhHrx5=EXj2J4&qUvU z0=fZe=-5a%xyyP*D36uM$D;Ejvhj-8rM#ijcBfu7| zW47=MPdAy+1GGRLYiH^9Gh6kI*6{pp5jgQvS9l!fFR=3TmY&8S;vBeU?4aXhYOJY- z)6?+1%#4TJO|f%ORU66QA3H}6Y~}UP@QDLyYxNGdmA=BkKP#0EcwybME5fPt%ox>G zFf=#WhslS%;3Kie)Ct85w}LcQ`+KNwh7ku|T91MOB2Nu!goraWytnU4hh+BDA~t8J8Ru(PU(WTnk{hu-*- z3x1WeWl&X!OR`6BNQ4W!@ihv*7dkzAFpZPVL14w-;GQ%Xt5Qi*|9o|$w%1yEz%nop zOP*DGbv=B*+1%|(jW&r5^D<4=XYX}-#cBVAg%{@fZDoA9(csThXDT;rCw+8n%hvSQ z4InA|Ij$yDZc-S?18}n4iki#n&61r{i252$x0E;AeAq4~Qi3ARcNd`H*7W?Haqra| z)dh2~`SKW@oOpIpg6AR>zDd+imY<)XcoJ9Sz@o*^2O!Bv}GeN)d(SRbQ<8AFOP%D4Dy3dYZ{Xr?~nZG}gG zflmRe$^{6p8eHCg8x30y^OqJdqbXCeCujVOqpiD<2MK$4?fSHRyQuAsqA9F|OWx6l z0n#%vZQ^t~g$(tcN=2iZ6c#Qqw6K_tf~xbzg+MX2TxY|H>%OFd?Q#*wXVTsRCiL{Q zb#A<^XQjktZ=hyG-N-DkcIS1EJTcc(&`77v=-~j>&QcncAztmzoTinVKLjXAfGYzZ zN|HEDb6G9iE&7MP201D0Wg0BbQG^^&l&P=46JY>SM%*rmm@r-|bMRPCWLANNJD$9S{0+o>N zZltACx}=em?(RmqdFc-6?(UE-=?-b>lun74ybu4q&%S4jJMKPT{UYcye`~He=UOYQ zD{}n0!eHT&3Xkh(ViBCR5uxGqwbc9#I-H^R}Yr#+lX`&}f&I}dMNyI#@$ zY`GL`T-?eGPJi365O38UD(c*J4X{A788OjJbq$&+-L}rVQF&dg3?+~Cy&KlJCGAVs z>)xHbsoQd(r4j!8wQTec`9A^|F=!!M4R2;jcn2{mA)*fOB=mnhGr{C9h#F~8C%d#Am{Lp32y}XVge)4LYWu<^ zN`5haD?02&6u;L1&zx(noYR(GJ$d?oM1&H1_6+v;MnWV}or5-CF-cQx7BF|>-KbxS z&jS{>*fR{3s8(C@VNE3+NK)|SLit&Dc+g~#G5%|PN>8l0xR<@6ew4tB($3a!c?Y}8 zP2P+xz>c(PYuJ3_^z7N7(c)+zA0B=tu>AT12S1Flx$m%>_R|(U9#5gUi)ePsTKmnr zRBd?Jhr}eD4~z%xG)5Vc^@OKJaQfqW_& zd^knzjPx3bS6~SMHtmq-oFj!30+Y>x3LoG7zkgq*la-??sb+X1BB9reACV_woI<=g2{C4cg&OjZ0$+= zJB*UzkCR{epS6eRTaJ&`NN$nSuWs=3y7LQ5pLV}h|LW<-+_z%~-<}*ihIJ>7{7HH? zUF*kgs#*mX=Z<}C@yr8K{pQNr&ZK8Q@1i?MK)*y^Y1zx_c{9)j3})6-no~&A;0i)e zmR!lc3-qT})$REPpmI>ko^YtRprCZAW{dOiav6X{OiWUjD3};x(rw_&mA~-d-}*EXrrp>|-C6YC{Q;-iYs& zMe1KWJ&rrjZ;r2N83D}nOK|dYm@LlOPUmV3ANB3YJK|e?ADPqQZWwK5L;V!jCoim$ z(y4~+m8G97h-#`&Pa3b221v)7;h_v#>N%***Tda8^H2@2P3~4tZN*Ks#9(Bhu9lCa zcg&~WR@z4#wY8;qIlhmu@|mrJ?LSUdnrBM9#6h;UKAaq!k~_D3xnn3~+e(hUNNf~p ziwibMI}P=SEHbs6tq;5t3hklCHY*K z^|ZxaFPC^i=IjjP(W%pRbUIn|xP0_6d!s^C+>xZdeDv0yrdl+zgo`+XgD~7aWLW1u zE~)l}g0=7que_hVC}sqxO$@eCL@OraQn^xC3y^^S?a?=HWVIPfS3uwvKfkYQ=kN;Z zuZCu3zpakX%nlS3FkYJOvp1KWn3)nC9m_->D`IXvC0>$*0n)-aIA15yB?@Mah&5uX zyEbxWWc=j-P_Vfq|KM;4zw3$bomN^(|Ad4WWFUFv+Ks)!K zawrHFwCSQ%gv|k`_m=pdBzoZwJM;;lop7>Z{(~Z#|BWI_l`>}Z((ImsM)wnhwimzK zYDmHI9eBU~HC-u4O5tf?xHGlN7UhqOjEZ@}WlzV9Dwgp$TA9E~QN>kaNNFjNpqBQR zyUroqbzLU1Zz-!(4bMf*?0kHDkDX)joon`g=0i+A!=XW1frKS#n4O)_QF5tCUW19L zk%H%QTcM%g z|9p`y3yT2>)KUTY5D~E*l;6!1It@;+- zY*rYUHeLi>yY^@3S=Ve4Ojv83dxyp-Ii~hR$NlVvCGQndK5ArPW@f|F55|9$QajIy z7W6RdKiLv&pgwmB+$WdRg}eJLTCTz+=vp^A)c=$)`(tECw-ZCyaQ)rZ9YfifXZlB) z@s_1Et#OIf=l0K-sWF}kyt2Dl$L=l7N9#^HFm3N26*gD<-U)`RGZGl@=VnjOt344F zfyyR*Zl4zJO&PPI92(cnPqY^oqv?-8mC^BWD6()LbO1>Wa z9#1k=Or(0JVnV*q_v)XVjeZ9Ub@tR;M$R->tiVJuNi5`rJ+^Qr;%>q~nvzt6k7BC{ z2L&aN)NgsZ^sZX3_r2KaJI(NvcyuQfDr4!)V)Nb2P$7B4`Qq)3A8qYg+s*b51?GPq zFr0#G(lk9X&t$>Puj8zJhUJJvCcC>gYVdilM3D zckj)iId=4?R+n=Ty_6a9eWkLK6HQSsb1cxQ-L z65*4ih>Zx##X2g2jv4*d+&C@~f3y$Ka3F$c|0iB`hDa`z7AUCIq~fb)ly93@wc3rX zzN@H<**Q5=&R~ac&ZRR;GrMr0QF4bkbhER;Uw8XS1Mv@-kgA}b7Kzg>Luxcdqvk1L zVq&Nzq{nDdUY>h`fE*!49EreW9|I%1(9BAX!r)2fg-PNIR#&3QW6Y=X4_kT?tc2mc ztF!P;f@d9g?u=3B2S$`~1A0{_(bIlL#(Jb+4icV>JM4z9#UhKpktRuF;@TL7M?br3 zku2n(#2=N40RKqyf&LZI=zb7pH&OBh7?4N61=OrDajIm?wF<$haPqP=xI#Ofpr=2O zb){yLwSP4o({|R43ma|SvM)lQ@HJ023k>F(>w2&yl4s2{g#_32#Vj(G2VgfwP0JIa z9Ae}3+nClMFa>mjd>&)OkeRGkTcSf9X}K}HHav-|bWe+HBk0c0`6n<>Tbf>P{`Qp! zc%x?|hokt}iR*Y4=QBN}maG#(F!Ov{{W1OVuWnt&d4quiuIz1v`#y6pRJVxc&>ST7 zj$lC34`D^=NDt7MAL4PNy0fYk`=c5bAJck&c>=C`x7-o$R{IPfFq#z3IjZc9&&|9) zE%qI6XC9W9d^+PPC-_3~lbEpOjI9@87h@(>e(&Oa5K>fj8$QI;cC8Co zqw$V0ZEl=LN^0C+p+*RN$#b*1Zr2L=gk%2Ak*2)`kP?LWLp#a!8Umq7G! zS1*l*S85m}DP9EdH~FHA1$SUcRmEj&DzyeAOBXyseu z?X9T9T$aN3!4yf)yXL024K-X{LPWgH48=6>$%KJVG3XsxE*u2d1-SKTU+Q43V^@*} z=NzF(Nld253XRdgUi)$>UbttXIu3C|4nU7ibn}`MDtDsmHHnCN&cy~P(vJQ9vVbH< zTt)UW&>;F5Ms#Bu3%{&xI6_B>K@BRBlckM7E}$dBg7w4AyYs7<)3})IA^YE4h=s-5|ViO#0j|qMK1epMK|kz@zgWu zI}M?H)|Jpuy4zlD6X<}A-tHUsy@aDRe^qLa%MmZy><%>ylN%L-qCxy?hC7~$cTh?x zUqJnAu=?b(?q=l7BJv!(ft!R>Y*J#lHM3Ozi1*0zb^LnQG4NutpNvK2>pl+{g0P9? zoharO+e<))3g!D}CVQo-t3ATJd#8D-D5{CmY0+qT7?3QN^@XUNnj>}IhmbeK#kyC;0wu_Q z6b-G$Yv51Dk0nzSotcH?iA}n0+|03;rmZi;O{x2nqKj=;9JB;{*?JW&*TwLdkU_#= z^ou6fpVJS5-b43|Hcw96rBCvuumBKBKS2^%+9;vAackq3yJRN8%L5Z89%BIUdjZi>*kfKCkQ`H^an3Fnc^;kO$G zJQ<0x{(03TW{-dOh|Pt%!xJMb3^teF7kBmM&2MJF#%Ct0*lg}+Ni?i@yTm7>MPx30 z8u*P|#n(G6p>Zy*-x)qPy^UKa#hW(o=C5nLC4AICxYgoJt@TUgL{(B9(b%kOH78P5 z^eEzVz$US(_GANM-?!JWwla(xk9);nvB-fRg}LoeZ`t^}5bz^^B!<|4Np`PFGCq`; z`vNzI0o{MBV>fD)w$S-wS5A1gQVp6-{zQ24reU5yR24ZpEg^CRz3yQ1tC-rRvpwtf z%GXykOT0hpq~ZJWO-gAE_-(iEss(YGMm5H6gF`s1KiI~ar){;>o;byiSl(xwmS+59 zn^$cVVl>K7f2+iN3<3zTPBEw5QEWpzURhW-w0n%xxn zR5awTlw(He)01O7kgiA9TK`eSQSwy733+L&6niBqtL`dbbpG+f;bPEdeNs^&c1rAz zvO;G#aWqVfe}%oI;C`bvUmUpb-ZY0wz5{{4RUe_hk&4Dt;#&jz0LVVH_vbIT$7&eE zy_v_0Yv-P*pMte43n_JsHMz&ra5!s1+wG=BG(TSle_pkfetXn*%c-?-l5|Km6~V$a zrhw{TEf)$wK0(n=2G`R?)}=A>>-(nkMrUM@gw0(btKtXr)+s49T=WIZYP9c#^tzsh zxZ<(q;y>J3LBEkQPM%iq{mWf~M$=h&)XM~G)#d4sfT5Yyhk~gI`ku-fRD-eX_WPZ7 zh|LqMq^<(>oxwFYq(k7?GNR;1w)mq-UC$6hd)wW;Qds@Z>XIM2rI5JI#+tjcdVc*# zp`!C$^~kwnjJKirG}jXWQuV@H?kWbwE5E(0N=tzY zk3d$xB%g;B9VG9RjV)fT16>{|?B@3Zll+xQ){Jevfx0JutAcBuTwYJ~Kz=!z;!$3( zR46YeO6aXx{=@ws#Nmc(oCfOMMT3DdHBCWGmP-W9DbyLUS%|mCO~L$D&YYq78BSOx zD;UqYZXT#j-s|~0R-m(3EhQ|jJ=?QCn%4`P>FD}Ua9DChEf)3ji|H9TVr1mmqT*?} z?Ai8CtqQAEIwaIY6{G~D3gdobhs2dfgtf+A{?-Pc0~cEVeTOZ+#Y9Hh?8_|SrwZ8i ztu>P;UBs}V%M~ijXOk%Dw~}8(ZeW=|#?}WZcVcb|>JGcDLQ@+Mi_M)G6t`VBynme= zi=OF}z(*J244v-H8tUK^w=zv0i@QH+*)2o(-SbWGFYdY;eOSjj!3ehIsHyVl6vV8Y zo2+LxT4YJ8U&E!O`n|@QFP8VXUx|1omq#H%UyJ;5*ekP8i*KrY$G`OT+mFhowzphT zUp~Hs21IS+_9rgrC)uK39$tVISr3nP4681e!#J0`7f9LFGxz#R&kbTIoI+J2#MC9H z@HqQ|Z7kn|TU*==Gw4b*EI07emJgQfBce#T)L~_b1pMQBczc8s9jpC)sHvz**z!|Y zo$0_lFlFiZ6|3@s+m+r5U9rm2rkd*a?#zPR4EpSkAH(@g&C_LYHS zy;D9#N*G*NuWz3X9DT>*&fft0%--MjY`Q-+-Xq~m5QmA|WDd|rn9Dsq^;O$=-@Gu; zaW1QWY;<8X+5t-eJ94H9mYO9kz*C&0ux}P{fs2q% zEH^qa;(N4I%mO?~ZRKRY*fbGen=!VFL{a~Vwh>oZyBTkH9O#!bZ@WP*gIPEB5w{mC5 zwTrv-zG)5I!?NYDXXAwa=uy2NjIx`&PKk4VdS76Su8$3F!VSt|=l~!qy1*g*brO-e zE1zKb>e5gU4+pyXhwF6?04l>+EX~aaXu1I5+fMpn{?b%vWpuxzB^m)f*g&=O9rkI* zOGlH&ZsxUt>wYZn`4Zyai!Q>>TGXD*D+38z+*d@B`8&hT-+N6%j|bT%98Gu}S!ZSk zGS9kFd*N&bAChPg989`n{A^P&b|{V4G6hI(DkrGOU)%on5_`Ld-B0ENn<<&RxwVQr zN8juE;Ke?_Yhw}#Ijh_i%hbOYO$tI!Ne>})BN^=b6aVCXes>%K>Y6~CfRjeQly)ac z@t;n0haT$Rk`8i68}4Rb4@xL{c+oAM2=iYPdJRWcY+M$Kdmpy;;G1Nix$wE^frtL!ilDgM;_F@sVvKi*A1Ge+_>fp+KuU~WUS_v}| z+!T(y@%(d7cX%xRIjgc%U-d@&;tnSnbjI?#@oJxa(#2+lNQ+rhi#dPC@$Z}|k)aU8 z=cytx_l26svV@R)NppRCk(4=MY3x{PT|>JaI(PbUQKf0pkHb@n-|y<%!5O9|j}MF6 z8yjX*3XE)emPy7=TNYgDi}K^$m(YLoIQ`6UiO)Hf^RQpo3{_rN@{;_ zCVz*@@ZvLKq}a{sLJL|8B{di-hyTO`l@&hgaF9kfs13vYPo)srsGO+ZwX#0;hjUJH z7u5;(4N=ZRrQZUzVF0+3lk6FthMvuE`BRdXp&zF2CQyB-Tnt8s{DA=anx(U~XQH+9 zhhbfKi<+LNpWzPt%pOe9lEd;6IG>9zdH{~>>AC>V4iQO-gBR%qP#w|MIM z(B*?X9#lYk^@WTj&k?pI4FNZ^-|q3+t zB%!F@zZC;EvP7Z6Q{$nFuxAEbwYWGq4e=jk1x^e$iXoUo*2DY3n9P)N2>P&HhscQ9 zqPu%IAD)K%uz!ElKD?MbW^uql!83#I^#AH3`Q-BP-N<3kew7v?*rA>Gd&ZAHn#6X>Mc!B_Nd8Z0|GG-=7O#byEv`JxMu&ngK{MqM# zscXdue}p?ooz#z1h^50eq@_aD13(r9LCUXsgR%$Bx$a(0eZ8E6?yfFhylfH~7I3 z|M%}(ZLP}lj;Y7ZEUu^AJ}IgiIw1ybs)>`^G4-0QEco6><3FIs)Q1t0uE$ieiMqcj z-|zPCh7nIDn;UVls?>YI?6pAm4E)JwQ9-_6!Fi*MjSAP_oH^>IScw2w_ zf@7^6NCR^0Sgi#iqu8e-Av%F_v!*8PtgRz|t+IEok=Rq;D!p8|$Sp5YGA21?z006)mLT4FgNh zVwu{wUI(aGPD5|sSuA%)F*hH$2L_TS&WYIX7lY=V@KD1l`-Wa>1*xkifm1!9_aQ5& zDW2>%Qz})`n6fl{L{A|2xKJ0#hGE8P-MLH_``L|N>R6|aVO?N){J$Xx{F6%mdGuzd;4<_~+y%FPt9)bWh}|T*elE|Ln-(I_Kk~ zgLptuTXOpZc_*5n%0|NT2KQ|s#Aspo)^%#Y!O})*$AzGkX2FFmwh}@9(_mc-d~T>F zfxgP`i*I_sJ!`J@ge=Yf%KTo^=w17TqLQ5tKLiQGN@hzYBEnGIC&;p*6m?yj>}k?A za>${iINXC~r4J^5FPsN(7OG47*n((VPyEn=q_ty4+;!P1VF#P-`j7LKezC@x&Lc+1 zZ0~^sd5yoco3Y)h(jIWwAt&V7ONSzLIbeWjP^I_ED>FSVpoPwPdr=P!%>(U+kW`Lk zou~|V7P<&K9uNwLE2picIvblPXRT(=+X;f)aB_MMnDp+gwNNdQ^sC#$l7`N9O1St8 zzvL8m2(qxj6YtyXvCqD*@zA!?j*kGTtEV>M4D*a!qQm)qh?An?&iJia zr8;6Xx*Z+wWdSDJe}C5?B3foBR~&PQ4OPHp((Z)+V_eVFnFsC!0iqY_3Myes%u{OIgmzhfg8MJ~16n8!_be|p-feP<%LEr0KH zXF0vlyja^ptMjI30U}1Yu=>a!v_zuFDurs5Ux@zzD?P$rjhOMNX5yW%=c+oXke&K@ z2DjCbQ?3U(vu`IXxxE@usa^`j)JgbzitU9DH42g3|$+}hl}Zpzv`9Rzdq>i4x#Fz{f<7VKPVQJ@le-Xmdh zB5Fk2Eu;CNp8sU}u^q#Y%N(n*(58*fI&Flj{llU0Gv=-GLj9fZ2Woo(CgXKLJhV$T z<9?x3DX*EjO_!G=L~#=JDXXTV*IGaU;^Kr_AtE>xg|%op`kfkkWF1nn5=dT5c1>!v zES%r*nJKAJHtg17al>g@=4SgADIWWpLG4k|ZHRKA3jW6ITURN&GS+dJp1M^cD6ul4 z75Ic(CZJ4~KbtePKF`Ja4c=(?YU;kJ6?ed_xMvl+tX#x;pN>e>>vJvE(3H+z z!S4t0?__87WYW@+t09?lh20uhZGEIJ?9%(0{>{|D(6RQ9)+(IQ>5nrk5cI=m!Uk zqHrq6knMqXTdeKN=?HIfBrGH{12N0*24qs%(Il5)lrG3;Phx`wHSQK%=j(TT(<=OZ zT5A%-2BuTPj$jWdgv<&DHZ!|(;h~=Q9?Nxb%j(W}U*hZPDv*g*ye{Pof#&NB8@g>_ zEpw(N+JVsXqI#^<>9vl$`OCaz2Eosp9ag2BR`@b0ljR3BqJ+*%JuBh2LaRszSW+Gxx}yIX@{!TO@9z!c zj;NCC zTlCrN4h3(v6ZGHmIAUYv(rCzM27lgM`+?ML3UT>o zxk+yl(eBmFqx*TnhC6fi&GGg*IHz~;%jLP9ni@(-$0a-v4PXvfRc<~=kyb)PxawaOsw7A_0LJKOZYes|cF+@%TbD;+Sv^XeWvKFeI`*IT|h`&Q(8oz3#YS|K8I^vh;e902i}XnX)d3Vv#^X2g|F?lIciQd zQwQDOdmk*l@^l7B6no^L&$?SIIueSMQAd1RIR&6Fg}mp_m)Ci`WVr~?gU)4y8Vlv+WV2s1NbqS65Wh^WU02n#ny#;~O4Ojv_tQbQm{i36(_)V1~Uv%*Fd=mNKD3j>-%7#}E+PKL+quY&H?YPThM^Zd#oM%mrW=VCOuMRwz z?w|fuZSTYhfmi=9S-c^Mxz65(-G-P)KYSAgRBzE*x(_dU@lB9u!hgq##HNVJhsofvb&{HG zvJnB`r%d$kp*)v&V6EHLHg4`1(nB;{a76ff+$5oQg~;FH^u=&WqANtst42Wm!DBR_#u8Lb*yu5sI;=ZNCdfXrx zHwW!Fuf49vw8x7FWeXy&IRLqd^G5rS8n5Pr%b#FcYw5AcpR-Gph4t$8Ue-(LD(CoQ zwy_c{#E*F#Ps4nR7Y^q*WtB%?%;Zt>6O_=B5~Bbj7bYtu0{sXd9WH6}CB1j6r{)@MwzC_wxHO8XWv$^u%i%;k|eD}eoNXot?mQ~5dFmHy36a&Gk#iZlwSD}X57bs z^32tJTT*K!!@OOORYfbrANkn*dZYPbS-&|bc(Wc)s1N=Hqslm*{Kam(wvF)feLYFK zP5M-8mV(vl`6HoiZa~4^Ob;5TW zW(sPL^@`Q=r|7lSFoDgnFP7T7Qn_MpaI~Ei!K#nek+y8NKxsq{s@%jN?gT!se@Syj|I3wS zwNjyhR*CKDWwZJ@QQH;0hh0@$>edX6 zpI(@kw0dIS9jsEeFg^so2P^;zJ{~y3p?vJ$Qi&4sY7R$~t3Wc71)&60QYsy*i+7P- z^ls~|@u_0jJ*`Ravw%T9?lrVwPD?!tq2B75{{Z_t6RKHg!wO;IzuUkc$7R(^Y9j`E<8ght9p9rCY}a{+_~B#d%4)$- z+wn$JOcj_sOq~5j&>ulx>f&?NOkX}-1Z4p`ANIX-Dp&dO4!RyTF8G_y6B3h<35`MH zt~|T%A8J-9i0^KPFgNW?L!vTu@D8y}xkpFFLbGF<=H$Qb@kVY8^kT)#ry9zC)yb@m zsiT#p9tQ$K0`}iY2!my0fMrA-qc^Q!4~A<^x_rF4GjSs}g~~{y8Yh^$kUG%kq#@;X zh+`K&?SUf#}8zzR_cmz1!wMqnW#7T~m@jceJ`Jb)gLLrQ=z9NH=T1N=9F{ z8abJm&zo60-*C#YF_#|cSh$I3%Pd(wu}X}YA?MZH9ZexhOSFa;JQ^?jtt*0QwVjfF zs@J%mG&0DENqrn>R60$X*Jw8M(%_lHUB$-vum?uiHSJVPex$qXGxe8|nF@(a2u@5) zPW&F+NAq0g^Xik?jlmFIAX)N&$5V>`aAPx^UDTzbAOFQp4}!X*8Jp%6aku^T!9_?G ze?wwW)z_D79qf*KOYB2gK+2g5|MKGU(b;7*J4^3IC=R$3kbsU{_(tKcfkj~l$JU>)}wB+B!GC3I}Vq6NVwI9BjE8k zo{K2e-V|P=9jnoUa)L*GxQrbX1P`0sFaN{k?{wwPN4+F0AKdrS?E@1coiUu19bH?; zn(zu}zHD7B(Ne~{7VssL(H;|#Lo?hiEIM;q9acLQQH#`YLG59ZGsA1Xr7iIY99j|& z4ru}*rVE%Thx`4M2?!xHDQ}O5L2eGFR-5+RXzOetJg6RUwEukbc}uB| zMUXE8N{Zx%>rr@6~xA!>i$du)8(P@O$mcZTPL^KL&4IE-NdYyUg zK|kmpSQ>r@_2AswvgNb2PnU71WHWU0`cPsTwPYH3YV8X$gvYH4ksLIdZdv|S{mKN! zVNB=uUZYoIzbo@B);M8o}CXYALreW-3uls777YYJv z2w%XqrM;D|1DU01y~EX{NDM1wnkrZ*WVt+ms@e(U53ZaL6=eF&UdM(Rht=!NzexgL zc6vllElih%4OL-(*I!DMl5+%F&?gr`EG{xdZFIc(5o|sAQO$8nf)F6N%H;arldI+M z&N_eH{Inwf{t<6JO7mKjOu#P~6R0E1c@54iRIwBaWvWuNU$y@KnnM3d1c@I2sX;|X z$WW299eLR>D_FAgx9Ug^si!87x19TFBm0}>r+QI);gwZ%wdeQSE0Lik=)~&$4e5D6 zO!fg~^N~s%aN_5b2L?CoCYvlS@N1@`JfgxH!Ut^n5h!3Ka*vfGh=QUJ zz6dXbl=G$92-T4y9m9JC;(v~3DL)TN8VW?qN@UE&n1A!I;s3`B`bRqfrT?R^O{l!- z0A@m7=~)jHacz#QS2;qe$HI$xUjECEFFVFhrIDyz$15bTB+!Q2$;RFb&7#U7JtM2o zmdiZ+(srcQJEM2wb}$VoSWJYg_i~aBSBFmF5q@i|mhU`0T1O7_s2I4tFrDzFW9W(M z&d<>yK_VC_`7Z+ex^-46_8M#$DC$k?z5$1PkqdOEYeaQkSGjDa{mQ%g%e-qir-u9n z0drNaTWfIb)NwFHU$E6;)_whfR5u-wVVJ&*?9sYBMg2H!W{-?%%JRnNjq%JBqh?v= ziN@c*0}7ODU*<#`FTV-<>BrK=_LL%0jcfK6b#W?QPKcW5r!f1YwFy*xpC_Dg+33i$Zzh%K2|_~+ad6((BUnhp(?3$9 z>97aQnlAnx(i4+&3A`)YA}p%sRp-XI0n?K$xmqTpIL?1iE0~2byHhx8dm+K zeX8BW!l`K)e%u=bAD8^(FVp6q?%l&>vEQ=P`*i=wzVgYKJBN&!nu!=^A7*+Mn~5Le z?(1D!wWC04o2=3u3#}l~%mXofKyEGxkaPiyqsfPk6hEu{WZC@=&~6TBkS_`2^k@?k z>1o!c7*U6w^G6lYVqrrJ$R8vic{!Vz=;yfwa=;g5iTgjZ2qSiQ$jgo*X5@AhoS`@?ZZf2Q<(9ogq~AmY z^#7IhA-LqG9VQ47W@}&b41A@cG&h~AO`CCsgP0J`Ez!noY^WK6&2YGf-KFXF@6skr zb#aeee8097JLkMixYY{dWR2_2aXPp{8GI`Fc~Gv4=_RKrn`&IZ?5eym3^uGyV>NbZ zeR>^oQn%AXbuIxfbCs0Zj!A8Cc5$#2pV7m|Mg!rO`Zo_t4w_BvWzCasl$R}pM!IHH*$jjTNoeoq$8smSk!N^yd-DhZL^m28SAGldFFzbwR?jpbo}ceVjaw9zgSk5S7PO($)M!? z1RdYq8v^>-)}hJN0y`O7-?s;5NhD!Jw~3DNp5Z|fVxjxY9Och;)Z1=2rsN4}r3COE z;9z&0q#zi1oaypD;#YMa)^k=&&s$_LD1bCm{G0dT^5z)fOoG4SQ@y*u8UIJp_!d)T z=1PrwAz+WkN1|`nlg6ptg<(-@Q)~EOF!=ud8UA3kI=FGF$odYybrMdFa53fRDJP_N zU>Sw_M4)aCsl z9(|=|Bg>8{4+!8lrYs+HKKhE}w*6ZS%P*-F*o1+^2&XI{cOPLS%l!)H>~?%y)*qy+z#$FmL47%S?+NifSn? zV3aW!HcQ(dwBe3w02y|iR&&AThn6^iJ50U<^sWLM>7lf0y}!MNB~jqYk^MGH2=Vq zcIsFkr4A%|SPX^MU8-i5et5f^?(go@JU3rHo)LOSDX7bb1lI|2_a5bUHalz{v2%vt z@OtnWFHA46e5zbJPa=O8mEMiAL;ZYT9E1yUfB73h-hglzlhqn9)vd2(w82@`F*6fO zRb#P^CQWO}?eJG9lbil2#wn{S`O_Ovc8@b9ma|96OIyYc;+Y?vuw$|%p7n*YANJ4yS_iN@tM$k|xJX$* zMg3PgAuEDJ-^PrNQ=m2KFVPKHQdV4QLHFEzZoOAiG^y#$5Z-z{DU1%BNP% zJbl%V#|MW!F1L6V_y?C~4HP@^#+D%iu#hUOL|`CwNCio9JNQJRSCz>xmyTBY4(LRg z7Ioi99;Ck#u88mm99Ch`2irbKEXqN;W#IPq-X5;OujB&mCvLGL?)^~9=_Ft_C%TM5 zRJS|H>w<+YyIDZM2ijZbr0_ZME7<*&r?T}y@n|%}G%`YFN~{^CdWl_AW6U8MqAvX4 z@=jh#%K44l9Z%%n%KVJKFkS}k!TBo%2O*LpA|g1Lf=Q(!V=C)E`fj)p z4W0A%qDkm@0?{+0oo`}owzzhi8|*1yPIG$1O0WaQQSB>7nR_QEwB2dj6#{G`0xNcEf$!EhB$47J$A!Ohgi%J73Ea@E7 zZ)TxpHaztE=}Sb7?o+g0ib%o0Q+(RL2QdRmLgkefmh47F8^_Z#m{K}mo;oR%>h3!I-B4NdmtZM<2E^(DA!kc-bTjd~)&yd9FB2_b4H zLeq?wKDZrmz^h$RDEp5CYx?>B4ZqSOrkjYumBN5dp7?)nP<6KF@&2c~@X}CsTuB~oblyzxBS`qAXkWT#L zA({Q-A%Uk-%oN$thP(W*(_j}Wo=w;^shjhxQ8$mSKMF30i?$gm5!wekN|qEC3<6aWZ07y)1pC8kBCUBAO?p(1OF?r)-nsdcOR5Hj9By zh5lLyGp{mpX$7Bvel8`6+U0-%#Dl)59)@PK@mk25ZF$8rU&)_k+5&KK%*S^c47 z+i|3sygJNVedO&uh0x}onOjvde>JmV7)22^P|+7|z#cp;evV!qZS;+DQnH_?^3KN^ z@d@#B1NEH_4lH(tr9qh^_&|ofirz2i=NO`uD=B|uYd4}8ZS_=eAHC^QqH0)-Tu+Qo zNuA3bYoR&TtDw<9FZ1+ZiKFJ4>hH?W8oSJwzS_ZpUkCahm{qH~Xgv<9x@$((Ou;+0zdxPdKlqwUKY-nM-Of(GE+ z7C&`9an*%La#{TxafY_!79;-D1#k; zhn2B9LW;@C@YlB2OM-hIX5s<9#oJCapJZIoBxG!^r&@-<-E7O~V#d85A-X+d9AfTa z;ALCUG--M*^*n89=Ri*h$$!zI0Mroa|Ldv4q~grP^7T+)kW_r zgx;ryqf_>198HHMDFsMRnx9P%DD-8tG`4Yl4frHP>#U`4FYDoV=HeR73}Lck3u}>Xuk<*up9&1W?ri#C_?))jv+P^96p$ z0-Pd5(YAIJb`=>4p$tk~k_HBG8>7yol=LBl2LorfSu_eqmnq8`xl<&J~-et@Ieo;F(}okCLiM zA|UqHD}^rpED3Ez3dFj(N`sU`?lf4#nt$$>LBwfS@jP;&Eu&mf`W(h5qep9g6r7Z(TUN# z*H14!Oy?7pVx($~jomqP`aEyW0G3B;FIkV?bg!e;5t;3$vdH z_9p$$u7_K>>u!D!s=F};(&rye|D$5+U7g1<_Qo%s(h-ec5cUd8%)#EgzX+tG9Gk5C zgKL^)Xzr~4+`_BqIySYD%;X3+YC>*c+v&PU_>=ENVTEsZeL9)Pim0a6p6NYK$M!Wd zI%2Ya7z2`xA$lbtf9I1GEzOCbyL%T?$CS_V#^y%`>t2G>2(wMaC9Fo0n4+^Oa#~Cr z`Iu5kSr1H-BP$yld?Z3oZ4%+jXjYWoGFSiRye!tXfB!ASu(Lu79(r8pMxHV;Gj+nF zr^V{(mE|@qJ_RQktmP|RLhPOxqE!%o2jREz%t2&uOnUw({twQ{$7c5z(k2e7$6GO+ zADlE0iI#c>i=FB1L+OC2QR;u3Ba)OUriPVR*}|CWQP1F;KtU! zFQC;>2J;cc^QwiBpHHvybi+3t0tj0=BEYT2a0<^Dsm~`(o?55Om;4^%zI02sokrFn zep0V=mHyTZXM+ialZ+*K31`Pb&I)%qvE)}={gf>yQaH($%MIe>&eF&@+{zNrC z`%q+BHrZGxeX{?w^x!BW>mXQ_T{&#;l+!y51ga}D4%@vAx_zP84mo-|X6qnmH%*=K z+8pDO3G6VJ-mq5fQtA^2yZ|#>+6vhB4@po^C<}Mz9%)}fDD<%V#s1T3$4TgoIJw&( z)!RdrCYO7FAPitrdrXvRuW}k*RBZk$B`8QtU)6!zfDef1j4~Wcb!8Wrq_>=^a71-s zD+)VG2E*g_1P@EH-aq$xKJdIdR|shRVT=xyN%z{bw3hg&nVc2U*QN7|QEFdnqXo13 zkGT-Jz=X!Caz&Ls_BsL{Lyz-lP4&^N3>&V=zIft&^vDEe8>c?xgti-m=g~WW)p>Nt z2x+LfZveZjHp!GycbsQ3Qb@Zmd#Ua>oUhOTfKC_EN%!9Ja>B!8xfwjUb5IAr_ir+w z_imAah`p>}4G!5OV2HxzuOLKzkw!xQD``|uJdZx;Sw@OoE{oYXuaq8SeR;kxJ0Y`A!k&rIwv#5q*pRBe&fPG?%zf$5BpzQMYHWR|AMkaD2v}}M?$J>T>pr@)WHf^&tcq2w-c|I z=w_e0@6yw{+rn&Eytg9WC8XsPutee>&IJBuA}j7>k}!D13E>K#PB7LT_csROw+EfY z^L)+6nSszJ52h1g*ONOo1}a5=i~CeI3FuAcRx+)<8$MX;G6UmHN<$%%IQ4UGZ;))2 zRpDUH%d4Zc>W1+*^1g`HeetdhAwtxa=3aTZ*0+peNMiZXuTUCJ%CB{w`7_`TuXKXi zYj=sfqw~&Tq!B*<9fx>i`-|tL>W70VXY-Y@Vz<5Fyo!#UD zP*O#xev!10}do;Aj)Nar-)#5F3b`lY0 zSuXjz6K`W}OaxC-Q#iS8+X8tlc}bLDIa{eoE;-x!0naw=%*FyYbR z|0DwG_2#;ofq{BSR1Y#8g>E$a8j zUhUjEPi-c$6fBeO7_G=4`PIXw*9$_>-KAn#rASOlg1<1pw6nh84;2-jQ1q+<5FmSS z>61X*pKFG<4Pw95+d(c^tW2(EuGFF_C-yv&wh0A(&a$(Ll5YAI<&l-S-qiF&qqIl` zk}8kguLTxXn>>$Bh9I`?#67m&L@Hag1x+5}@1I&n-1fg&8!%v$EScm#j!X;>-mmH% z%`IpRT+Q6e!@23>SGt$CVrGhyZ%@Zzv0CW*Yn5*Lfm*En31_4Cgz!VA^^Zl^{dP;bWG_iEgznBAl21D6qM42cSx*u@0w}38B|WH z`dK||M}@CXKJno_|D;V%YFkQR05GxqE>aaE{zz6UJcNk)Y zYlZ1><&H!7wgjK4}P{mGLRpRGJ3-5B)KosiY!r`(!| zBY?~Ohu{Lh?>M-qZizhFUP&SnB-K9XYMbhwra)cx`V0Z~8!0J}}k`D1g) zWQ@a|v6s<|u>IN9ZpN(!+C+maK3&}rAX;x;P;pKM?HerQ#9l;%g?mqz6vq)p-6``Z zd4-E7&2gczRd|bMpaq;E+0=K-Q=dew08nw_S8Jfg3&}O5;nMS>OvVSN-N6yK5Wk#O zP(Tims03VNX5l|?gs84XQVYO^thizI&-(`Vr7Z&$0gzlt8zccfFT~M~ha@!!umQOD zVX|zwqr?nT-undF%cG_AY;s4FHDS<@F@|(XG`18e-h7Vmx06+!uhLXswAFb8@KkXS zmNbm?>Nsq{E`KbW_(pS3useEX<6p6aGO&(6zObWx#@QO_SIG%!VNuGK!Zttf_(#n7 zWEh)`Aysj3rN#H5G`-KbBT=0Rdt;Ep7RFtqSCkdWnCS3-CRvK0jH*A~7XcrwHBqw6 zX9de{Z$-R%s6d-CQ1OBimTyp#O`m`6@CIHdvTB>Y4EPUr^%v4v$2#e=FoRAc8EKoX zMy*!pU3X}-jkD7VuR+rOOmDJLo%eQ!pQ#OaAL~-G?jDoqYTt*%MM@zmLqzo82D4Oq z;Cik(=o9wnc;IOobAn8PSGfr8%Q?j4etzk&hREY3y|6W0j(L3wGHl!Zd9CePw>39}<^NO6lG3@RL zo>@tlpKnYpbxEETio)o>%J6x&PsrN%IUm)o52KNt)xk-X*7jFxoqk`&h`0IQz7{a= zq}aGBpp7;x{T&t3-fYf*eE4`3>xV2hm?XqV@7Y1e)B`MwG$@P&#KmE)J*wa_D+6nc ztw-XH+D>3EeeG%e*Q*-YZb%1sKg70QOJcX&BeO+rAEQ!9sJiPqA)Txp9Wj#` zykE$rfPR0=0I;53ApW3p@<(yz5PE|ocW#R2e&|{s>bj?)q>S#cgZ#+AgSJNCr!El& z2t-SI8`xaPL9{GgMpBsu?IBf2{MS!(3afxHpg$Og=wF>-1J$`CzT1j%y>3edZ|v$> zDZO-d&I@L9H@gtR!K3JHTuD_2|JJc)v^agBDL6#qOqu=zw-j0zuya}#@Y)`2ZQ^_J z(~as(`ad})LIQsOH-+mveWN|K_bJh#c+JNCi`_Y3f%hXx?o=Ck2%u1+#P&6x?&d&N z=Vh;^ai!h^=o_TL$|8O+m7B8jHNbtMN_4iTRi-^f`0Kq-49URt_PQUU4NR;jZY;@h z6eXd#LVy<=qpx7EJ_dJ)YB>3OeEIHvnUE@~KYF5!^bY04I@&HNwU z!9X;IsGO=!J+8kO_C!i4rZ!lEoC4xg8vWLIOpZ?gxo)cI#{B=p33&j5?2G_GcG7%X z>U`D)GEj4T{{);o{Num7d>3F@fCHO}vJ}1;|70au@<+_tju;nzRvmm{?TOV}f4(K1 zM}CXsmb>oX4*R43jqdqIoz(e_B^Qzw4t_7KM5aRD1THRwP_;uB>*P#s!JJO-=jTD)i0A<&X?iyl=uRervr1R(eZUlM34}OVQM@h&TopzWk ze4p?6-`Z@J4>quPfv&GZ!d0DdX2}r;=Ol#yXtI@@ec!(Si~Y0PLZl2E#lq{% zbmXx7Gms?^-XWitnW*t=c_#X?k2*5fL0LA>`2zJlL#C zS{3@eNL`An+Ta_bb+1=Y6B45@Bmn=lGX~@oQGsTJ63Xh@!8PzUm+UAEed(=>a6!%_ z;5)8pUh<4KoVE|Z9mC>wh{4RbK^)J+89Tyo>#(82Luo+(e0hcF{|W)VbI!ajMw0M6 z5r@y{bn$RD_52*4XA(-+l1^4z$`#IHfAW7P<17VuY^|K=>FHMyVJoGlnBv<5H)k(3 zj&PwH$rI5S3Zr28eT%xZn90?u=_S0T@pz5f=<_K4_q2#?H{>OJ2iT}x(h_zkoD8I* z94OXm+x}=by60uGES<>oD{hbVw!t4q%j_aXPrN+Pis|Fyb3MTK8c>)i-}p8odd6B| z6qs%CV0dd2DTk!{YuAMefCGaV5?TtxY)&cq;*olw9Jqy~SPoY;ag*~-ryx9d&!iY{ zqB30#2@P?MnwNS^L!*bI9!F)hc*BOf4(xMA@Pa&$LB13C22B)TEl<}EOvaH*Koy~U zwRv1|K$}-d7>ctN%HDxOV~+i~a?lw~NFN-jfA5f#1fcJDk`$EGTO6tjMI z@&v>=|NiTc&gkp{>A_S;cp+M-H}%bmASmp zSwk53tmcTPRYI-GObm6nAc&v`2r#uxUg*?Z|>c zRFM{}3=eJah5eyrR4a_<7_XOUf#Rzy2RL?<57a{5fiF7%u`A>ufjTKQ`(@c(1N*>a z#8HouYg4U01cnJ4Oo24BLnl|%kZ#FMP&RkAevFE_w#uIhA9L@!r_AhF8&o2 zkpRPF|LiZ#<>ONT%6QQ%O*}ERFd(|neum`gZ?2N9cFJ>Bo>r@7p&dJ1{DO>5ylW~4>#8%C37n+^}cBp>by{0t5zbn_L(cI$aZJ`Z{ zab55HB`3!b*0eRQ$Yz(jnzKH1sApzLn@`~j_$$Be8~7yqobdr-ISGs8fijYD=0gN- zQ6(70dJne3hG^w4!VJed6>of?Sb2Ss2{NX}2O_dK?z>(oMCW4?RtnfR`FVF#;xQ?Pw0uHlS&y(9MJ4r^a~~v`VTR71REza3fEr^yP+Dny zE~X-jQd@2<*<=S?Zm@?tm@i~`LY<{+e$R2q`{JkTWPw=P4`;G|>XFo`$*()V3d#3r z)8+{QLOssGe!$l=`SbSHGEbMbv)lvXv9r~`t{yA`Y>pj`>K1bXV5u1bwwmAU8Y@6T zVba!29A3v+-N5eml4I-gUt*k7r6h$Mq3{>qsfw$j}bFQ=6c_#&p5y5 zopfD;K}+PlgNnBIVdS@t=MqhJF@)>>fvmz|OLOY|G(y6G7P`f&5&QOT@ZsS^!iDs~ z!OhHQ#ZBI3s7M5(HhMNbRAGwG$h|quy6c94XHbU4Q@(g+&9Lm8Vp!Be<7K_xiu$|1 zUuULpr2ehTAVrJ5COTpjq?DK?C|K6`uK;w?E4M`oy}#w7t?#GPHh&F@2QhI^22$S0 zK;X%)emO%r+}4>KU19Lcz5xYll$DJgQ~E^a35cRY1FC>p8~y$|1mtM$P`&<_9BAcx zSn^eCmAeCYsv();Xq^Q+6umH}fUvZq0t$5Q1MQp zd`wswd;#afC9U|R3c#X!KWtK27Ib@yMe9sCWvZfcFHkba zm-;K^{i`fRzziM%d4q2PfgndBQ$zXH0n5`C@sM@7T~0l(6Z;!?efTE!L(=1FFq z(570HqYrc{89O_H3L;0u^j+}cuTus7_SSTYwKS~u1mEcX1B-16D84Xa{2m3-iNN1A zzTf$gF??%clCp4e-a{Zq4dNkb`wQc=_e@4s?j3a7g3K_>(y209W#kBclH!sDu=G9? zUE>HElVYSi#D&FLInRH5)KRcDN1^dG$ru<*_CbbBNwP`4t|3eSHchYE=*<#)fRoxm z0^JcTlpHPPsmk+;wM~?J80g)qayOCbX0C=y8An)Go>X?hlephIBWV)OlZ!<0|R?2@rnQi}+e}cpA zUmc3#2u>eO!!?Y;^`Kw|7fw1an~tn62A-%$9s$|7%Lh5)c(0x$?;aj08o1Wn(o^+- z5Zakt2EHaYIW&UiwJgUOq^wccEG7KmHnt^WRLC#%l(8GZ*6FrRU$#z^0bkuy6qCcJ z>~V+V2I){H|NZ6m)_PHY@Z(e0R4-J^+Y{XW=kOx|dQh`>FT$HWhR$b`;7}yHlZdy+ zUFS2pR_fc&H+)!jSM42OGy_d@JN`YHA;WZy_KV*MM0H77r-6@2aK06?v+G$mZ`>|t zd`6uu{?=TzkD_&twWTwbrV2JHmSqIGH^{qA5U^J8aAhND4p)B9mO26Ljm4;7?vcP04(tytCw3n z9mO|XpXRA0vK(IKlqh z#+p+DWzuDGa5`mse?UPwHqw`3okU~K+)a<^Q~$p99q!}^*4_RX6b2?V%$AxFYgLsy z$+jZbM$kG=RjeguovW&g;aE2>l<$Vme1vjweiU72%p(=tpKLp!UgLSY^pGFa8d3vn zkhdp<`w@9;g*F0ydUO%ASM7ll{vj(@s*uWFcTu)RZj7fDLbRG4{dX#Cu13c`$pm=6 zQZ@VEFj&5QI)P_?+9yM?+_XfFXN zIs;*ZSLQbM)q`(pa(VjP3?ltJJrS#jHU~R0A|guKoey4_s_i>;7>r8xHhDdIqgZza z!FVa^T-Pf%HzWoDo`H5Lz0QU~ti{PX@_vj?pND%Gx%wKASh&SvNZ&D$IGwL$&$!(X z*=Pms)1t)mZ1}B@j?K1L&N)oX%(C5$De(AFg8*ab)%Hvd54#obuJLF8V+^F-!8dP@ z4|?gM-$lueCuz=sIqMv*KVtx~Nxq&L>4T7G}A+Nj+A@IdE@Ff@6JarN!%U6FT3bsKt zPAXk&8(u!|B@A!Wo~lSlt*f>v!#UT+{Qr&j?e$*IU6a@~e;j zBHJ=E|AP&>mff#y_V;UQ+y&gGXionQ=uR60w`8y)0?S|{u&~kX`{MCrJii`(8FWHJ z9l_(l`gh3Pup}fUY|mJ45>Y6`=F6na>L7%4y=su9Btp~>Mkhi??HzxT4OR#Hmhso`lpeOI$%;dcv{~`z?mG5 zIyhgycca?qVt0EP2|9$1FjM^aRygB4&5Wfku^=B~t0mhAQ7W`EgPa)cn;ehVKu`L_ zl>!(z6-Tu7B&q7Ye?NU|wenJ+Qae`1&JeNj& zU*Xido?X}dolW{ZD;F&7xbv!DWZC_)aneE|ewn=fcJ`9{da%H=euC5WOqbTn6$0)K z9rc^iX~1`fshI`ARf65@a?)WBW%c-gv7sz;EI}D`Fy>kqM%xSWwKk1sYg){$q&ST} z=jYqOVJwz5OHpTl?^5rf=bXchIbhM&Qykv1mmi1AgG3dp@v>6wXmM5xYjFwyu}FWU z9|{Qntjr-d!2`U4j^6-x6BU89@N=m0R`2(MIdELXu?vRD0Y9P^(^XH?zGAN3ZhyJ7 zBB5VP`um{7#6FBqGF1X)gSghT#i@eZt6YB(M5_##=5QHk?73jFcLDi-q9AAjg`p~< zo*ubCT=&h&bknmvewu4fr|?*NWU!;P7VJnBavkJDj^%rO>*7lfj{z5&7+iV2uv?3U z+1aQnsa!tvI|rRZqh&n#Q)?C6>8lf{t-mVW_Rg)N(+H@;tDQ1H-6ysEexL(Jwtsp} z&40~p2E#Ewzg3v~jENa;9uY5C^`K(Oxym%)iw3&GLhTB3 zgwNjPl5?$xb-1sOj)@NrpZ8WtHlL9j3`ET_w;Y&EAxr`CbcXb3TS(|pxMXr6FP>pevkDp&$9`mzcMuw_;x zV`iH`GV#rtZ2&(1x1o_Tye2o?QiQDdR6p44w6#JSx5jIOZcTMXOHGXC^(5<^EC7IV zqxWAcCC&1Q%MXn25E{}~>l^TCsM;CK*<8bFk%d$u+b2L~)aPbWPwmPfg z9$8ank2n?leAPY2BsE@EU~T045k`hRG$IWXU88RsxJv#0yi!SV{g|TLJs1kq5~VuO znuWN5ai`foz5qtincm}vj7}(G%y%Ypr0RZi8@S0Ac@{3NXkQvuW&i2@^s!hzG)@z3 zw>%_INE&oEFjpAdJ2_DA$&cz#nu)%s`~iy3Rz`(D5Filo{R7GW>FTcz(DpLv$CxgkuZ&&Hx*1DzSzX1d(IG}4t@=nIduRDaHm=B>kJ$C)I4ftZYyC_bJQrbUMQRN1K?AV zX9C%6Z_R1XC%v4{kN$<%sq`wDO5Ffv7YtR$0n+<^KHV$+5|D+_C;?6<0r=`!sQ&ZS z7sL9_9@6iwM69}C;X|V8JFO%(LW)Jfl*sxzF*p^(0ArODprmdi-MnM&U z`%<*7kaneIZWs6WlTgeD`M6|_a?&N5ZkDno#o&>FP&T=tfDbyMKz}F8)&q!X4>$b^ za-ci?#+HJcZeAZ{T2jl}Jn)*4hm4a)hsH4v8koKh#CNPSmDy`x)#$R@N{&x#*AAYy zxqv>4#+J#fZnywroOvR;lF`%QPnN%gS-a)xJEQ*}%%r+l1WdbB51Qt)NcyJ8G2 zdptMN{gEE+f)#$%W4;wu>#xu$ zZ(3(-v}N@RCa8_(*`43fhv5M3+^0gjL1K7B{59!YdbtezRAD*kgAT%Bp@;czphVeU z0zOe=AmJ^t0eZNSTl!LKpnXA-%sayl=2gkP7sK!36GZHtKny(G72QrJ%vIrrm#|Tx zz3~!(;E<8d{$G_(-osvM#sB*>-cQ4UOj8e)wl}j($|n6(OkcN?=T}_BtQ@% z(r|D~ee%BB%~O>lSM+h*si;TV3cc+?(M^{srV9 zM|)O5)x7C{MDU^i5N6v58vsI$fF1C_slOv{U8GrZBW|trmwK?{TUw$e#a}t{@@lnR zuY}n+RFw~l_^(j1R1CmHud%#jOinAMj ztTi4=(8&|L*lVFSvVm=WG3Zf^A|R3GioF}0WwpY_l!CuW?&y~=+0Fq>;~h0hLi$Tq z8d5+&ZHnUf4VVmI>lk_2&2HGAum72N;)xVR$W{)2rWvmAOFs08fs6q&bTuv4s?YDx zLKP{aNfSY)zdFrfs~{PAJ_JbICv$t+QvfU;VB(qFH$nnj@l`^wuaN?a7bSWmf=zC+ zmsC3#u0Vmt`r!iX=B4$79SVD6`*LbXX)MSyt`Mq5-peAGv*h)`MG~h7hWUl!$+J-h zY6vx0ehN-10l>@k<~roi&~PscsGC%MNTA|_#ci>iGIYtLQMkA`JB3H>rB1q$y`AAg z_C_*i)r^>f9nL}dMpt8bItzA&s<$E9WlrAKv>XahqWh=L-ulYyk?HSP`zgz5^6rT< z;`8d?6?Y$UCKdvQx5cljZ3nEcyvsP^{3%0z&fkD}S0{sXw;4XKG32~BvCp;2t3F(i zHng2F&Na(yPD+R2lgkf?TPoId7n}(;sTjD?iPZx6t86eQ}#n z<3vC9&r~zUT9%XlD_J87_^#;yq>47+$p%;c$$E%}xpNs!BQaL~ZqQzE6@2goZ?C~1 zxEe+I#jQ7NBs>rrvci<#z8S;-pd=S^70Y68xbMYT-?x2ByOX^?IF2a%0^4he{~@C1 zM79<(+@Ibj%RQ0;VGp_{7h%Bz0|6I5*w);UMwqA6w(=em=L~WMEztxPi7Z%;m;l6e zo<r;%XCW&F`%BaC#T-Y@3PiSM(?hi6 zNQ{#uCbi;GxASk;49XlGN3qF1+&f)9>K|6U_tcvWmb;pguUV1_ z3ZQ4mLO|?>X^HDv8Tja6j``$Q?_`}jdO87@wXIzJEFjbgiQO9k<)nElx-6^#J>q+R zW%gS0My-rI_IoURL|Jopy@x*I!3?F(WP5u2Iqb#4!G{07xiau5xz+|`K~p)EYia>s z%9M4*CJn#}&J1Vrf8PE4NZ>NAVC-&Tz}#UEWd_z#Vrc{Y6n{|}rgSyI*%5C~|Iq~) zV9Ybx+rI;RiQP5BlA9X2dS*KFER4Q7U8+u&WSEWLK8b5`7XitQsrJB-QR{15gGc&#ZOf)l-s*y5dQqyem zHl|tO@VwroZ98k-H+phXJ5z%#89ex_kIRi-n_YJUUWrl1qYi^?au4Rl<)U9Ct&u70 zAVt9ThB<$df&@e|r3sdaeFP!L4G7O3-}i4Br+KBxDjO>g2C%;8C2Z}TG##JlhZ1qf}R8~zo( z8B66{^M#+>3g!*Ds{aH%loHs;WN zX0Caub73&vdT7lsoM9+h?G2w(D4Us>cboU@0=2jR*k=26<|%METfwx7hPL9O`Bz{C zC-7=d!$o|I@ZijLGJY9t7aq8FyzAX=B!hj0uF9I_IL~`x#`;bg4?MKb+`1PeBDoNs zn=g2=M*CF~BfGMRAwD%wXySYV7YkX*&jtK=LTct_!%p?-?YhjRH;mg)8Y)P2Dt1p* z)aBgdWbp0`n|;3K&iQL*mnVOQ+go!BDmCI$DQ$BnCOt)=kdPu+*c$`iQ zdwSloq{Uf8A1!#;(xTI^yl{3g1y!uMxnAf4qRm)}SPUL8%)U(X?v>Dij5$4EGg6z6 ztWSM{XLVHDLcHBxNEx4hD7Egj_P*$@^uE9d!p1(?z4P77&L@MmC^GpIA=i`RJ*ofN zu`3}xSt2j(`QmKm|Cq>wDCaCr#fy1uvoD6U^3u{fC*rw@UuSpa8&0r6@X(IB0oTI^$;LI{1C{TMl<|H3yPc?RC)57sp5~o?RP(E9UO7^DZ?;*|p+*`XDd2k0FGB4E&vfk-7`` zgCI7}Xx@WL=A;9#sARAH566_x1){dh>GIfH`Sg=h*{cJt#~>x0)8g16PV zyLR$dW*_av>=YOH)c1J2h+QaoApCX6amnnmCLm|8RN|)WeB(cn4Ay9SFUql2XX0R#YXuiF8;Il=uqB<#<(hnd=`#pxJs zYYQ`+%uiF$Ca=l6OJ6;$m0bsUC@b-PB2F4e0@~fRWFOfo7M29=%%2zu@mmr6&H{0U z{GWOkb7rsK|8_4;0JrP7g%PSNM@P)@#<~exgbW(&qwC%0jQFQFh1-y}G>5gamULXG zB7HP|(7M%C4|XFC-Zor_1|pB5u;a4)DwD!=xk;!AN*AmKi*FafwPetZ#c?e@ z&QXg6nzJEelAE_cY29pb4t@|S&Dtbb+ncW9Y8PqQ7l}!_p2^^zcot;9|K@9@?9aWLD~Ee(wpyIy2C@T5smbu4ZHAO1 z7|Akb?&ez)#D&#_YRgeS^*Tvz?)7<;`S$jOAG>y%PJTNR44^Z>@#07WJ2)V+vioLl zVrFx2tJ&n8rz=g>M)Oh0nUv+D*js#81eJqoZzJ~xLp2`mg%^Bon!y8hpkf-lqV!0L zr+L^w)jQ|;A*B+Bg!x7>gGw*yczxv!DrR&eR~>&M@m1jfU{GfUQu7MP*7wR50(K~W zVaw?+CHCb#n;LOHyOR1s4s#h@SPb3{HFgJ(e=poI4PB2t)~iNm8O^xy`b`l5>AU{v_fBH7rqI5YhE{xEv}{2W2rDGAJc4h!r+4nRqY}IDIHf?ODQ`2byLYl~6hpFp zj@xlNw8KNHJ}3R~0J3k}>Py0^fGp(AS#)Lc0i`k9ZVO{opta4z3gT45!qffJkf_3_ z@|j8@g&5unp%2UMA1+JtpSb0I+B}tE>x_ipqGV52myUct@e4J1I&e2qP`Vmv zUJ!c`NcHAy;jGzsnNSc3(^Zzx3MV!NUfD9Ms@X6tFfcH7Uv(OHE_nyRw6tj2)w&Mk zbm$C&J?(Q)Vwvr`gC!(>bWfl21B9%tLgk5BmhR#HnZD4M?rOFW%p@H@M;%!kXDKGd zyZTfS*STq&Wea4F3M*6W*OMZdjR zZ8uyz4yVd-mozhsN@7(mq8)T6NY+5Gt9$wo-*)jAaEI)l)i{ype=Q+kaG^y6_My?L zHvJoeGzC4JQb%5;5Kw@Xh^wkb<&%$bfM|i}T~~#=>1Mrda}IZ+){W^BC0OSl)H%gr9<8+new`d@`{;Ag1>P>V2;Iw}BZf;pevBX+P&< zG=8H@ba5^hSRFjx@}q8Tc20kX{Xg=bTBLs#Y87hqg5z-*wU8(pehj2+-1P^Ma{!je zX9cN>g}Jxw0o27CHf*%&chsG9j#({|T|86~vF`-I0T$|3QBY=S1HB8{!MKwsMe*<9(Y!dMA1@~favIPz8|KHs3qDXrGWb&-45j5eehM;B00 zj}3c0+=zCBG-}Y&+vmXwD%eo8G|Ueil7toUSaOO-Gm@$|HN(x;;^#7ygMoqm_oJ7m z`+pQ_iy5*aD6+g72y}DG5{4UivnV+ADJiEI*snmJ#2|8j9xc?lkdg0C#=vLXR_gN~ z!>MW;F|j96k$z>urh|nBLRyRUn6!jHJpuDQF3X|+QVm=4On_u@J+Wd7%;uU$wBb?9 zecHc}Jy|4X+KXBkt9!+r7ZS?x|7e(x?Dp zx>ku}`&lp%0d(kOEHix^*vwj%SryU8Aqv14^bZK=>0>^3*O<#M=&ut3AsfCPG8A;! zSBpKHE=Tf}qF0+804}&q1U@4|s`wVXF<3rsp1Qu6#}0aZ{;}IecpwHbG&G)cQykaI zLjHIh1Z3@O!o10H`)&DV3~rxrM2*R1wYl_ZS7g3ds>90(q@@bZxkMi1fZne;jQdh* z#TQXNHLgs)5k^|-dXV3D$z_M2XF0RJV8_VZ&$hko+JVrz&KTIS9-SWPa$ZMP3Vhnp zu5qBjS*-fZ7s3T8EeO06pab?MeAtE6s77LAv@#ZdA+gYfeP6fZ0C42rFD_Lc?T`rTFFX( z!zrU3uYQl3eBwKK3(hbX=WubrNQ{0pVSr(=hGAAp&GI3KO=WS)gtqiNJa7);0YJiJ zAD2zQTtV$d`t88*8u6}XnTq(=*XF<*#ONhRb;%T}Gdgz0&ZGIX3MT+%#`-p2xFz>UC!3+N%w58r|O(0StT}ItdR0 zl+++cIQsqrC||^WYM6lS0_it`7rgxE1VlABfcTI5{gkWqS297=t9J+W{H9qK50?95 z(oAt^bdneRv4Z!gqj(s2|8W{e@6Z@zbBf;3WVnc0${Q_srq-qrurq<(d35amx;3~b zvf<|iZWXR94zArJLpBiuktI(|o^4>b6r3nuKV$vS_hVm(>kJNRAlSJi5LQ&r%}y$J zaVCJ!x92t}6wTpqZMUc;I@P!f$T^qLj$Ctx&KETl(vU&t1I2d_VWD6`b!VTW^8qA6 z0OcLl?T!y@$OsHqkbalRnPa=%=GEOO1mzc3u!Hy~`r3@gO4NwbQJYy7>{mh;+5_BV z67T5O+vIceMF6c?{DXE62j_zc6_PVTST<=Z z2Tk@J#_1@#ST@Ury%dm*5KkhEAsz(CVYA&0$1%Pc?@P#>=<0=1dA5==auHBm@N|tV z$8~`(4%77KlOs4+4zMzhxqJEX3tW4%qN(7wiDyk_ZQ z$9{T==GY%%Cj8z&{M=d^KXO}rHy@63DRDoaWE~wDMaIbTjec_AP)p6uNF%#jYDvvg zjeJK_7mMxcY{hiSty8^*RC#Z{NAh}-c}cmR&4b9L8BI)1O$@p8UZ+&!P&lD;xEjnqjjH2GIh?G*q`Uh-`s8$vQTFbI-Qs**Di0VgG2I!K`+9sI zJKM^jj`eh|9-CL_ivl^V&Nz@;$TQTJN=!IK1m6E8{R?{*F9lyn&tTe1dI)08zvkHl zpUgyrL?_&C=R-D@tjlbmmX?}4FOlpVFpKd!M*C=Pxck(@QNN&<^3Yv?6p7>W{}TW6 z$WZW6J&63Dz=RCWv~Gr0306$i&`&3;^EQr7eHzl*B{LhU;Na8W6Nw@y07!rn+F+eK z^iDbf5r{))Z1pZ^bSfz)U*q=JcNx)|*yE8x@dCHWA>h0!Uy(}*6~mpz<_oUgQzaS@zOc~S9N6}ihO|M-f?)9?*=ZRRVomjj z<;LkR$oO`Yi7Jx|Ei-6$iQ>Id5YJ+!<9jFb-Dc?%DyV9 z&bC=HNN{(D;0^(T2Dbpg-QC??HUzie!65_-?(PJ4cXxM}dHLl0=giE_xnwP1vDp1| zS65e8!#wI*e(ZFedUme|AUc551#A?sZk{kTO1$j@vSW}ao9W%8Sepiw+eFCfqoDlCMThb4_MPYP@y6Ij1wL?XFTz>%R(fM?S@3-31 zj73EY+7+dcFDApm-NGDWbe9nJ}>oWhhL(UkDAJlt~K7| zWe%6*Aa}8#hq-bOuFuQqkYcJfOI_hoYFTre7svT!o1s3-cK04ASk33gfq0Wt2wj?G z!)QjOu?gwnAVVxY0b<{$vwO5cc4v(0YUi=iUN^ISz^y9@i;|SpqK2C>_s_kR-ZLcd z8P(J~kNb!CasQ(U`ct+hdLwYk?~#?ip&GhG2JTE&Ufhe5y=hACC-W5eYfRvc>BbNe z2=}Hr>$HUI~Oq@z5ed}VoTWg;e%#&~p*n(2EpTjAjm za@EVFyh?m954P*YX384_ zTnM(9q_oIo-=IGB!Gurh?aQpTPTPyIL?)!R&%kY@6rsZGocDFEbK#ytRHb(6dkzQ) z6%TgHmHVFpqk$&V3=SNOFVSscwUs9CCl^pR-M+qsxYAqVc1lG7B?^d zfRA}iTYBgXLGi^-$DdHF#Ugf1Y24f}=dovKta|FFwC>s(<;!PtB6;(!Zbki~d5J2! zbXQj0GQ1`Ims{ORiM# zjr(Mkw{}Jh_DO%H?^81O0QWFS*EizN-lxjLeWPTg{^lziLX@Q3xAaMD$R{9pryFUv z5K#;GL3I#ff||myln<#b9rViX=FgF1Fu+SV5YfBQbFEjKO^eBu2`WIB6#&E!ivQKL zT9B4o-Ou(74fIGc4GBHg@+oNZKYC#LA`fS9;eu(Wo=Pdw!Jm7my{ zor7B|=mt4waVZmzi>l-N|G_Q-+Aw`5z`5%?5FDWG2&BCJ0RCHAPpS`7#6;=2MWLpJ z@-#$X5=Cu`pP=Wc`r={({MV5d{a1@QdyEL~2r+p{jFb22=vS4P(hP)72OJ5i`Mm^! z?kg1YjQ&{xymA_8VST(E{;joPyOX@x{r+PYu~lmCw722YYa&x?`-m4BQ@(@_ z3XUus*Ep+MG%csaFxw?HrzH_%Aw$@T7e8|lgyIHDrYA+91I_ZD2cs=)oa^MafrmeUdAv_vn45n=c(+EC5b1|`{Z0f zI5I|Bs~7L2uJcahUN_H{CxY_bmWnYCFEhCO2)Fn^9jV&0W1Cva`iEzPRv&g|By@iM zb|6drd`W{A*0u%|ECz}WW3MIFeGJrCMcXqR%^$%5igVCfFkavN^r}n^8nYt4O)K-C>=bLpiEZse*<^P^jZdPuCCe=2qL$k-Pn(Tp<@O8FN6? zoqpK%EwBN0Rs2cZ$_uUM^CeUsFE4^ElL7Q{wcp0kGU1GjPqeB+)X|SNxis+#=wW;F z8bmF<1MV`eygV-8RTKcClQ&#HEuiq}`ew`$Mp{Mm4Bp4w6gIz zT|q`YdBS;kG^(A?vzS>(`VU)Hidw%lo1hsuMdVwY>L=~}>MNcx)?B&^4L7$}Bo z!HIadXp(e(|50?>RGHP~2aNWl3^k40w}R)`$qnP<{y5&ATR$w%Z04l*W5CL^9eg@dKv--k_BW*eIO=Ww9eG0?a4du4@&2somaf12#7 zemNo`7f#=C0PRqKmn6PvegxkX4c0Yv?-`l{(Wp&v|5VO;2UfCif6gmps_2-!%$l9a z%&h%ILY&{~k@U)4QTSY7)4J_@+8ekA<7DU9nLpXvDJP4(O8hyhYZl_1c2JUI$6kfo z=BYW8qkQX~=v;IC&b#lobw^#>auR+~5b!D*uLq9w>$T*YE=D-F(8=Vsy4^p^!Z6s6O&3eog1tH1Jc+-a1_l~7ewk;aV+satx(S_W z&Yg}{tp+>a^J!z*hhhnhyImR09~wzXm~-{`HX^I~Q-BN%Jw5af{MhX(KJKXV zOO68i4&;jcEeIbZGH=4PCj+>p^0lY!{wqHW{cdT*8U$DayQx{Q++9rrL)yzeQWc$9tHT57y7qtYAw z;~srM4TTkYy6JSS+TxvK-Lbkt?&d@jU9Aec+XcC&DGQX$j=s2f8u3qp3``_k%LYI; z0yYuyDU%vPo?|P>u4sR<#7%b_I>Z6#Rvnzl#S44}Dpt3;E+bORO(@C=I~I6FX5=7w zFr>5FaR>lpyqj^Do{Tsu##+K%np`pRHmr6bpd ziY21@>gxDokd*oAqTivQaEMcE$$z7cVxEs zIX`55Bz|FcDqf1gav>VGkHsbn6qElmH36G(q>iIHA*A}wc$y!Y)jkD@(2ze-f)`32 z+E7HrqSPb85X{MAp-;BIr}X;6Cs(W*q|6nl+L4~VVMehF4*L2s-0;?D)+1Adq>DA3 zuaqvj5pfeS0+1SbV1(AvUrjq4OWCi`^rf0=tBI~j-iBF3;lMEKckd^1rcgkh6;Do8 zJ~Ws)V+wO^O%Ar~C&)~|u3qloczF5+w)Ev4TDBp&$_PJ9m-r&m1uGwaJrmCy$vdW( zO4t|)8Z|Cc7Ve66?ozuB2{OJHP}%F{I_VA4cXE;_)sUAE35hN(EHhPk9b#TcvL@$Z zl>5=a52$XwhdwmRmN`&{PPZ}&+{SQ?Vm&x_J5)~?+w^vff$&+1diRIjyv_H$xGNjX zzN%Il+_8^v>eTrs-39|mXeVhbXG!XSRi4NfE$)Yw2I)Q5hawuYLsD2TwD@8NiY-(z zrX+&$hr`b7A7j0mOY~F3l*XHd$S!0Qbi|_w7hSiP(6H761wW$Qu(`2fhbBJEB9k#u zNoP+!oo;5HkNPG-roL*j;ioTnl5x`GJtAfHlnCsfLh@S{+sdI4|Dd(9!2|^25!KPk@Sr$du!S+PjUBoDg{94N@Zj&SuQ+O>TPI zW-iUZP`KNo@f8dEM7``z-R`63Z2}#h73**dvUF}J%oYZ=f%x2~Zd1A&>_|$7%)Afa zB^m8UF3)RL^sq-;SvJgL$3guAId7}yM{26U!Y}*1F@*ex=|83i!f)aRIZ<#5cibEP<4yX%w(!hNcD5f(gr(r%XZUewPc7!l%_w4Y36nZ+Z9R`06k%pa~1v+$W$&`bHS zsA(95k4$|BQmh^3ub0)wjFPYF74E1pMNRVV)&Ji;5|OovdnL7L(k2{x9|j-mnOnUhJ1?T^?D>Nm-_#?IsTFPZF9T=!q8~& zVN=k}b6MTa#gz%4Y>}RVxE>AEu=)zGO9h{%`Jumua#|4NZ{N;_<0h3MOeF^W;lo89 zcnO63IINq;jHYv?d4DA_(b5AU!d32RTYUA`<}UE_(&fg{MR%VbwdMyQ<1D)Tw1zcd za`L>jz8m7KBE9!zf_bV z;a5i6qMTNFB)OE6>qV#OLjy2uTZ*)iXJanZa*$( zTW4vWzH21v(pp~>b$F*cm6Qtd7wSmbDVQ7aLJL}nHO0GMKW9F3=x#)h36U+yuywqX za6|(WMcrFnfr6Mve&ZxkqTi5`J8-Xgb?IJ4?^;cEADU z%}E$`Fmi#*!$hS*S_^SdiD~K2=uB)AetGY)zP!n#iuEZ`8cmtRowdsGd(TG6eM|;7 zBo8#50I@TZOJP~E-Gx=Sbke$V$bgjVs)g!J>el<@ z<8@2w!W>)&iE6oTZ&qA*O(g4yQD>6wFvL37Qd&e z%Kd@FF2CuaW6i$h?D9-N`g(qwVR&~Cj3_k8Q#RTYe=hvK;ny#WoO~wG`$2;`=V2=U zj3NSFd(=}eh2;J!&!k#6mxC`(R)_E59no8Db$mYfJUVi)TN$o?D!-Uil^U-zHEms4 z@~uAPB5Hhy)tj%}a556{T3uqSnY(vJ-~}x9^8b`ZV~Ig(fPJ4bqSrRG{?}Le#T6rQjxH*78#auR}<|B1&*L@~r%vP>#$S#Vk=4is-+BlJVcI zmJk1xEdLXnz|Poza6pu5k{2cTCv zWI$lW2dm+)*@g0swXBRGCvzp9Y7M79m{pl{WxYOo7n9KCu;}#%kFkE*m8P=wmcUg! zV{ag7+}32=(2|>OvlMQuFF&$>Ue`ArxZP$MYpGiY7rQ-czrbx#mrEC{@zI8t?(RdT zfL=(u^Frfp)Eqq49Pl63x!;C#$wcmIj~bafA2Dlq#we^#ZiE|~+VL%`_co~_m6ndrO^E2Hlai ze492L*7?2%F|%F{W=Zqq1|EmU;N8~pj#ge%(#jK@s_jyjAK%N}`XvRXNy_zP-xL<# zOV@kiu*!h%=xy47YybybgWH7pQYq51^ao}PCg~W?=;}GoB60HRrezq=$Wb2n- zNB!#OfsB29mn8emctB-((DQ({cZ5>1xv+26H*JP7a zM%PwFz_v5G6JS&H2e2vH3V4tqzLTaEklmX?z~q^YvO6mn3Q2l2?|5Nq$; z)iyJeY+aTAAKso$;1$l(j zqEa_96%JF)4BkTE#oYZTT35Lz)K)$XgSL3g3&s<7WCq(jdl!X}m||~Rnfodk(wflQ zh&)YLUBy@oMC<*jT5tamtZXErK48m|OSw@g-;Qt{Sz8eT<5v}eQ`;ueuJT{9bXn43j*gW{7^zU{M}1tWjRaTs$LYrUmuTdheRx0&rkkSQt|K z!S_uDm#JjAP6KENJkbI2O{mTHQ{UveziFw=C`DGLe*X~`qo|8*<+Q&Re$8L;ZVqoC zG5uBVk8J7z0SY!6Q9z;N>NZ2h+$AeL1Nl6Z<&U5JDb3u7fuVuC{JQSy9{}RZ$QO1n z#p)&Tb4=l(;~2Z0ZNJp78dMM#uw3=lpU&=f zh-HB<-^mU;mfD?m%YEMUoy#Z0xeO z5j`h^A+X(OmFVnK-DXl;`C5Qo3(UT87ed>?gJ{<938rUS1Ra zfy>{cXL*IjFpj5n_pRp0Hl)Wg+u=#mvLxpA-m&k;l5w+`$&h(wR?146#%#<@Lt?5H zE*yp;apF(PKD5i?=3) z*HD3Q(l-VQ{;#RDd{PRQFr)>!9F7y>{o~B+Tri#`Ro1L88^QxW#lD(O6ntB$fQ^CB zF~oEMbW+SncY9V??`nC=6hB99RU8u$D~7D|v0rSZ!V#x0A+~=PYI+(HabkaIToF2y zs|AE9-9CbqG6J2%`r{U7{WVdy<|ra}L^DrnY zHTx{gZ~-8Uc2;56j*)rtw87#Kem0q1p4cF#fr%=|0_sS&9?y@gi8cLjY4E0fPSg3{ z29o%i$AvIKWV2$M;8ZG10T(EDIm16AkzMj~BBoZ>L4&)EoPlue>wQcal=G2qt zf%9qrz2c=cMuu_9skNviX*=s&?Z5eCuWo9sK>U%xoF8U6c zHrE3RR79&|9(7#s`uit;kY!(Y9piufVVjEY?49QDEA0e*uXlpv`}(J=oBs1aUm#HR zJ`)a&_b&%&!^ef$NM971o52>@XP!GIBx0$)H zgaQseUiw(<=E?D_aaD#ZHn0DuHX29VZ)>OS6Xo`Ctlor`XH zr&Zhs(lHGfggw0gu;aaKO+{T>K!#>x^S{Ma{Gh?m7|s{w@)rnmNK`pt@SsKywIyTD zQ+J;&(Jie7l47C70Ya>Y-;c8$zT$i!Cl&r1X8Zy8U>4^G(x3iv0bH>raDr1RB zURQn$V%sE0c&PIBhS3b%(Yl1nAxEayT1}k&%p1JDg(G}2?&3q&# zj(siVQ9nESf!d&3g>>Qm34#t^`jZYMhiwHyP(MIfGCJ0C=LU??F zbWy%i-pQYy)D>3LMXPsx9Ks6HaDSZNibv3DMg8WOWOL5n;9f)AXJ~2|Ds$YjzS<86 zs9Fg(K8n}AzVp<)pGRe_bU5ptOLB7>tmY~Ne= z-oCN6$*ppARpYtmb;(KdCayyIb3ZA48bVS?L(Y1;uwUWVfr7PXRWF-0Y zgfcmu%dtMP?2jjrdH;|Zo`?V!q(_~z$SoFzy9`%#ZVe2FoLab5@^lOYVU9rP|7-&O z>Im2XB*v|(hGkPw9)LAAzW!1Mp{>0Sfs&h>`{a>)ZG23zWL=lLw2rEZZ7MAy#EuRU zlU)=3Ks2^p#BQi+ZCKdetp4G zE3;zOsZFY`^&@yF!vlOZy(ezv`XtI7S=YShIbE`DCwA%}#(d1yvP% zvpKy26Wy7gdL#MOuA<^wQwsw&1p|?L-~@JFvCk$2o2%l;Y6KSJ$=+vgBwN+MkV7=f z!;Dag0kL3L4rQFZ?N)~Kohl#nqPeLuyrL?`Ad0WvX!Q~Fi z>^iH9ioFKZyEvvsW`5AX;Hh1-y27$lnsd#m zlCpj{CZbbaW+mxuEW*!^*P&pY3urOiPWM+KYBhs@PfZVds!wn*?oNQ(8P;ECk6{uc zYL3`wPFa;XT`6OTI3BXx7T~xTo?)(I5t0-_s+_ULPR*H6z1-F4@Ub(EL44&p&~=NC zm~=HS)6GQ=il_TZ($@%9Aq zGS-i5-4Dr3UHt=S_+0so!)cC$QuHj#yG%%6mQ1uXJp*m89p{VNX*!3K@6kPJso>Hz zgG}uX&gY}7H=WNJH8|7g-OrVv zPpqGMDzu9_bhdNRq8{;2eZm)Sg||ORO-JG_z-Kn!;vpbj*>8@JS?kEA z>Gts~1oDQi4`vVz*pnu(oVEGKgi>g@;C(Qs9Y7RU8On@hF{Y);vOR*68r@HT2d=-6 zfLlll)Spm5bJzGN)o|D>KeK)r87_W)HwDbiK^|0kSw+#&{!o{jmAvJ)u8B-YhuXM^ zUm&YP1YQNGoNmZ=xs>@7)}i34glmTm`an_gS^w-J|BrA>0eInbI(m2xrM|a#W}N>D zc_6l?G(@H)FaMCb7k|qwf!KVKfs7ck4kP z22pFeUN6_Caqgd=)aTg!I2SBpDqzfxM8n?WTK?tfKZO%7wzj4lZml57c zz;8-T`Xq)bv25oCiiQl+cV@nd&@N*se1Wu(%1W>M6a>{U zQ_J%%2A>zsr)vaFAdoKgxF=5m8q{B zm`I6Ou|CFHA+5y7nLQnruJ?^3#Ip2hY?2cz-;)!`db(P?O?5iyIT082W3Ajl9xVq7V>8_iP{D{^>d^8)`Vdprkv+96it#O|vECA0KySy69o_N1L z=*pbsN>#{hjCG{twZ5);(wCCtgy3F?onY?Yvp>P%vYxhUVwSdS#0*60Ht>PyIAqc7 z{&a3IuB+Fz5S{q&y~ZY%?E`6+KID!I9%F?YDmJL}TeyfgP;fy5un1PW5i+d_ObT?T z5)9W80`;KIo&<&}?i=X5(o!T>%~-}qBJf5J53P(rd!nu*D#F1kAE5lks+OXbGX8E- z4xX3(|5fgg|0>*{7@H`6l-N5rbisC#>zr1$7PtKR^-U8ZX{=EdCiFr?Kp2)F(!&pb zG{dam+K3&sAf>%mP`Dn#)q}cUQs`iHqON`s=@HKZ3n`?@6G6gULK$hQ+SyiZzJZLD z2J%m#GEYA4qLY8&rrd}xBldcettwZkRgPum46}2&h`tJ+OR+ZzP^%km3ry^8E5vkU zP%{`_iX_#I*;$~ucfRy0=xizCcyb%ggHX0G1I2+B+r)B$DU7>?b`H*ZM?r(ev=v#*DKn=QP@IeC=`st45kx$TEM=W690Cgjl^%6KNj9J%-ettVm<%SbSs=CV4 z1@Y1JD~ilgSZ8$tl^d?76#8ea$KP7+*#Rp>&rj#`cQWN4lU!_!2szT~qh)>hN25O) z+G%?6HWV$LA2ccS0$UeMjN8G+tHGkI^6PVJQ?a+wvof6I;bKwK)c3y*7u{6pL}FoaWx`E*dCvf785sAF4H7h^;SgzxlQJrCSX z{qxx3vE**5AG-|CNQ-fAv~L$~e({77tI+lI)6zF5o+u8F50|B|0_`qjF@$Z6om5?; zl^>F;`hHq%6^`u`4+Uqc16Odk&%G3?08dNgMwV}$h1HK>5AW&YckutlGz0bWFWT9R z1ibQ4OJBV{TL{Ss@#>wK8fg|7w4zkba?rZlPRS#d;b+~!9C1%x{34MDQO4_2QjpHz`piwJ1L8kK7LO~mIP zSY!+wvH19Wj^Mf4x=u>O*c{q$ryeQu@cu<>xT!G7In8ZXRa2S(yU3)~8x*(uVH8&8 zvmR=%-b-yjJrNc~X{^Wb_Gvh>7}B?xRxsVnUP5-=`a_t~&rxfGijU4+cPE6o4{RcW zqhl!E{Es?pPUatDYuhGKEPfNP((@4pmx<~fCX2)P(jGVW{v3}yI0z`K)!OMT7yzB@ zMSf|nyrNFw(p-OvP0H%kw$TAT!COkK{F`-^;c<(ZjTHl35Oavfxx=#&kDx#^}^D}xh~E_{6oSkWsZVa#a3 z)*F)msCP|6t9Lu0DITLs4mVmPz=8I*#tsHEWW(_exQP7JhcEM4P$fE1fQ=kg zE~I^p1l#GXR=xlkmV*EcsP~hknkLR$0=?97r2o%|0|iVP7`csLCI;fuZVBXv$|hM+ zf?td4DfStQ7%LG57QIxD1E;RmVeb~|_0nun%BT+)OtykUZGM|#dMtHtXr8!c;7F@AdlV?RW6Mrmv zj)nTvPru@dup7`-p|=5VcBp>Yr!nNUgTrBd4^@3><1Z_YT#9`$yiU?V-5Z{2(ApRTMQRjCCW%#ZAx~sccM* zBG-7%o)I$By4f$y>wdSs$RX?TevEKv)eF|J>2WZ)LN)$Q-bJkj75*&-}k|aIV<6>c%0M?zzM-8JPv~kI~WL}Gi z@jv8#xMR=5Hc@Q%WQ?;`2PjX@M-oB|XTq2v{vB%7I~6LtG1IOxAF4>|EIt5t=tZ(R zV4LUjI0(Mdy8#wjy=(TLmx<=r#w0*Js5lGb?~hYrFVnbrIp08~)c+P#Cbc&{nto49 zRc{NJFcT3Fh4g5w5kTh9)$v>iC6-I04})o^jrbg(H}6afhu(F@tmZ`Kqih0omDabs zP#Rvn$4fofq?kZGlos64_nR#2(g4++x$!N~k}?SoK)OS#0 zwz1YItF2<7Vd&U9odt<{8SV#QL+R;d`9>b|I&r%+!A-S3C110{T*Ya9r(HFI&jr*{fXHE z%(sdV?q|0wh2%8wvlPl>#xd1HqPj32O4k3Y*$||T`8*;KR_$kh;n_|5LkWQF5_F^j z$Am%f9l-?4n87?K6sm#zhEF|&HqTN-2F)!7dUHJx0)PKLkkjc3gD5a)bH9pwZgD=# z*pV2)y_IQbXlr%FdFKgJtIZu+e%yX3DbD2V(mYIG7^;0l<>fR8x+B_teM9*(QnZM< zI*nH|?|6eEbT$01emTHvJJewHW#0?fLW2@pyYcS+!7dd3s*#`0pMptKq+Q z`M0=n+ag)5F!6~A`qSxgeKf^xb9t>!W1J!a>X4MRd;WQeH_eT|2v5N&eg-5Kce2@G z3~3;VxJ&_aXTIVIa&HL3>XQdjrnnm;!hx`jqIeEhZ`2?xYq=kopgl5J<$(eA#;Y}g zJuNG_G|doe{{Cnel0|W?8yn-`QsI_6gDs*Fnlqc}OSD_Xo}$CW9Q{3#hZnkA3GlBi z+T|B|)Rh-u3E3G=C?GrllT7yxb+j^%#l7;XMnaPczLBLeZ|`Ox&{*S^_Sycs5Gg=d zu&DR~Ua)L6byXh_*-|<2p>&4bF$3q-Ijgq9gOpU64106)3}0p-LUwLW)bIebs`%hs zbh8n_60hGgnyPPM6|!9xt=NZk!`ts}GwQSZ2OlQ1=yRBhxGs~|M;q#hD?|*uw%ShX zo>n;1SAkZ~ooXE*p^0`_QhSF*r6%cy zfaRUddqGV}dRr@+>a%B@PW z*{mCeUOTXgz9(*hB@-U!^Kh_$QkY~}pZ)68A3Y^NOU(wqhYW9Ns^h3`4mLr=v~gif zTQ0(@bbzboFyiPq)rC_DY$gFT9*Nd%EQEH8{&WP09ZFZk3TqkVC$4OG@st?&<`Z|v ztcH`+U>kC*UB=^Emj#9j!sd2_9!l+V{Z1nGn}TFXKtHiBQJs)$>?2$}FrP+2@9XdX zGogGK^MhQ&bMN5bCm>_Dt*xwX7e8%#e?u#Cv^#L44Q>B2@u@Y8YmJ!-H!>iKt| zQ+*@nh4HyBqfRS`f#)VPT%n9C7;%fh$>YoPa?2|WK8ItSv3-;`{U>|Z?c?ugzXh|| zYb^p!@UqOWNXI|gtF=C;_Is+{wcgt9hjZkA_0P!IOO%8vVn3x2UA+w(nBDrYvx}{F zAKgaE_(H=p!k4o#nvhz=`oaMiKjY&|1Q}d@cDX=!;d78wxb=F?z!~A{rA<*P)Rfnh z$oQMjWeb1z=uPqU9|rAPJhdz&9uuf@!hpWTKEA0>^ubholR}7fRtY@Qg`kJ{7yU?x z_`>>og~{@xkAz|;pf8BL(R<&%6td6z7X}hOEg`>Ksob!>ftow-*m)IwX>rPmPn$IbQF{HTp!Bw8T>f)L%!cwc_y zW7M{`^>DeBhV2z1wQK9c^_{m@(=nXGMfeYx*31crvfJC;OUZj=?3k7H+)OuMYZt_0 zT1PEvEuFB`KpZq{lHjXb;oT*);%+@TlB4!8Y0}R;D{H-Vb4jOrTKr;6b&5i@-){V* z>1KFw*ReO7Lw0pNI0_zO3>E2}Vs!N3VHCG&KCRdxO?} zdXnRt@9wx(yL3!|uD#D^mYkWwZY*WG>FGK@=PG0+YpDIV{ctcCnAw&sf!TL{)82h0 z*{bK{EfdI{y(U6ERJ&;tqc?{NGl-r@s8 zYP=lamjJ}>S*5XxIFeHYI0cXuyCKRLDf3dNFY3XjNu_M>_Q=&4& zxyCt5G1mqcLFu2BVg^7N{a^itF>*$pFyw&%Nq#*Foefb@7vKN@1E^OMDrih1C-<|i?L(sh9$auWUD zGeFjzfhH9fR0T^ow%-t|AgVI3T@F5 z)MPE69l^4q1X7PVBf|l{NV0yB5 z(vbNf&2#uP;3@2=a*SR#EVSwk^WlR-I~aos5&T$s;LF#}hP}XU}XEB&Xj~49Voie@hbuEMfaf9RrQm zgW$Nv%#StwD8&G(kR*p0nSX^(y{L666s90Wz)@4Rd2bTLL3TNyOYP<$KS2IyUzC+& z>L;G$;vf$J_iMoj9_fT(eWn<~p(^$}@oSEiV_;?OtmYVpgV;$GbO?W(e0IxkxZP48 zX4kr1f;~7c=tfWFP!+SPa`qnh$*22=xy1_Vm3%(v4yStj6W-kx%8CYR27L3z2Q}ZL z&|gt3A_57JD}*QT@aPcADFTgvya3Qt0`CWr0vHR`McEbdppH3!;|}tPsQZ*Ajw-P6 z5}y1-4L5hpw$vY1HR=)F9AFy!C9EgEU)%tr3Qra3A02KOcu&ykj=a+& zwm1LVLOctOaJsrPThtP=l`WyJl$r}|pQ=?AUMgH_;Oy|+Q){Y$`E!_rFsmsY!oe6u zl^Enq-+W1VJx0?=@Wx#UH6*)pyC>PA)XsI!0J@eFE8!LLS@)g|pI5cJL{2P=$#HLI zwY#p4rh*moMyD;cgyXdZQhL4LXq)yRJkV#`57Ku--Z=~`wV~kEVaqGT3lp0#5L;u+iL4qG=OO+{+T(3u1!l%XZLy5 zr{fgbn8fgk2o%9Oxmrf)*!=usayMyZ#fx7ueVN;j3Oay^I6eXGlwwVX$~T3<0;TB( z&3}JSIAAxd2DhzU&FI4gr~!9ZO= z1iof)2HCf9u|H2eMYsRl zs9X<_a#a?DU8Je1^Y4%h5*X`xyVG;m+J;9A(JyWD6&X-^A`_GVrH$5E_0PA35c{EV zy??y`{t{FQ{2$8RGN`U?YZDF@AOv@J3&GvpHH09+J-E9E3+}<)-F@T1-QC^Y?OU94 zZolXDSJl-`?SE``0c*}V#&~RU!~AQ*^j_wvA^ALzA*ILotP-Y_juM-ECdohpZ{f_Z zw=4qy&l>#@g_Q5D+PP+W5Y16=U!s!(+-8d+YT8qF6HqmkzoP}Ccoolhnw>gjn(2fb zH9R`I5?6nB$@Kne%&*E)DK6=WTvyggV_w8&)h9ZF!_FNUAA%?+vVPN6e4H%<7SFEj z9aW59&U7ltBLmVrpIq;i7^G9o!_EnTQ6ge6D?oHwTc{A?{RY6o8ES9TmQmvy;y>*A z+kh5X0m|o!{1jqZqa^b~^MQJPe;+l2DS6Y6oQ8~d`IsJxtDg=$Ks1^16<6)BD~uzH z{a~{A$7}mK&`xe@;1n`PTv;uGocbLm;4A3)`wc=J`@4$)@FM=sjg{( zcBX91r%(`AXVoCu%GOc|n%@df7TZp552fy%$jR=USD~GPnf>w9Z>IohSyT`D@y<~= z^;vqPkg0<>QFM@f+@k!dC)TVbUkO7%b1_8Sa}$zLUXR3RUuOmEX}0_=LIS75XN?q* zRcNKXoULFCL1A5Uqb@UA+7U6=J3Vss40i{vCb5e1XPNt8Nm8I`mLmUaJW5p@FHWzD zVeDv#Cc4m5;XmvnA<6K7{Fwqe2j%ZM4mQN{Jb8W+dZdtKCIM$9V`vpey=zLCRY>}y z^cM?t6bZ0Uwi)_pRKWe93iv)1XA&iMCJ^QpC1=+>XtlF=6oX*^YLn6vaZ?|;}GgNt}M!5SWH2&ky2vwo|OB-}=)v_3nN z9I3qg*u*zWfZ7|e0bOwDCOH#)uyX4Vhk46y`^18P{|qghcG~rPNK^J3M8J20h(O2< zXpSEA&f58+U2XE{{;Cgk=~}=EO9b$tZvUyG66||u+uj{BcuxYA-jL92Sqa((2ONKIsscJ+_okAiTYD}O9(d&vpo6r zpw~(;KWA^0D-UT$SJfHX+h6H!vdb^#iC(@bArbxt zbhqA_nt$8fAlx)R%I;yaNTLT?Eif-P#Lz2@Wy{1^HE##;u5WtK)a2kr6laQ~6lXRR zfJT5nFzEo(GNXbIC=Im;)KLU+&<+!}qN6}zMgm2bqWyVuP?7^Dj3bYO<@ z%~ya~07wEfbj;0S|G}uVw4nH&R__x{5$%ChkOyJgb0fZwh5CBfEQJyS896KdWt-Xu zGc#%T%kDt*1%LGT^5veq(q>&FqhPDHCzuCU*G?lo?L<^{)9>#$HgemB(41~AO+Jv4 z3QtWdJ5150k+!gX^f3tk7%0oF3A{dOyR3eLM^^e%3iWF-j`>eFX`<*4E44m57lN= zvajkKu}dIY?u0-13Q};5{;}LHwuYaI?T@w~r0ILVbB~23t-Lq-9Uu|jFLd+%nrp~- z2?U!$c@>}ZklJUD2g0HMCJsfC@fp1Q>RbpF`m13fDKD^-SQy@RQX$G4Y~6ll;!Khu z3OUiHA8%DrO|TGWpSq;OS|UaUH;7)Dv5=&fp9uMdPZ{Mh)oV<42#N?W`C96ZeC zLQ|I93+Xn+ZhHO3A=an=_?N%#4Nk-C@Btk@5B@Pkl5~HOddEmNCV}UuXTwV-`2+=)F&A2W>TAg z`4o?mSd$#IVhs7^0a1;~0?cN{psm>`b|%t#nBrH@l9l%{4sSSv%+WTi6=n5%ti%9w zD)1_=i~iqVbt0c?<#kXtyWn+UqB0WMdP@`Xu7Y4kCK>d@7$CZ1XL?SVS2< z<4gBNa>*ZNdMc_vZ{v!9HsPRG0)1K8*{ATmZk&~*n-5Rw56Y3c=y9Btl`y)W6%#;Y zj_yUpr3VG-EAEA5o-kWmTN}xzD#QSw;Nj-by@&Z;`h6Ktg?JQXS8rLPw9hxoVcby2 zG2%cU_}%zlFDMBh`Fm;r&vu5abWkXV-L4jc=e-Bq>%D%u@VrvuTO&5OAYu3qsh#pK zP#b6W(bq^8642+A5@DL1q!bl$^aIy!AXhLl_71UmI6pTM=SSMv#mCbAUe4<*kVH}x z8YQJ5RxFa$$~4T!)G^TWxoU`^8s?*v&jHCL1|ZUd8w zbcMsV#l6tCDFn|(@*@qIsI-KTE7rxLNF~{r+4!$y!6DJik%s0!Sp&Ps9Ab&V2T0C# zE?2B;iXOacs?3Ss_RkdJ+x`iodYe={u_mcRGAfZIv^heOiyZNB*}OKH_qdzRBN*7p zVKJ5IrxJSA`ZV>LZ|1O{Je~=xF5BCc6IgQ)Z7<-EdO2_Z^P={;Z4XsVv_B{ofze{M?Isw^%;-1Uf&Nv~`k(QhtH#WCmNKH4L4@m;{CQWK zcIWZ)!}lx0`Vs|_TmRRrZvLO5jktU{{As7F(#j%=WkW$>oCwR!grB2OjT_($8Gh&x zV&P(EmemzyTb}dm*LuRDVPNQ<2iHEGieq$~rPgc3bA&O;I(X1mGNQSx&WfaoR!K`Z z4~XQVJc4dc7k$eY8(b*MmK#FiDMJN!!?XGpgmi6KK;ifc8`F~d{<7|^fC%W@L75KO zThlK9oG{t{;^k+lRtZ>u%b1aTQZ|HEg32m#R5LxvWFTWDGvZRY#aPXHi-$lUWGLi` z`d{k&uYi_{7uju>Dta=en6=d6Ha?>`KVquySU_+Z`OyAaM(3FH!E<+i+N>`e4WFn) zx!(&ML2y`S``B+H3&mV5^RCq~opE?=$095x6r7A!rF`*h9xXNhqpuCBxM!UUkRxES z6MWs<8Pzv09Rx$=`|gqMDpj|&f`w5bfNMe!kSU@3B~vPW8(PTuU=&3mYy1RyCOD~R z6polaI;1w8x7#ovpd8c21D6-9cBf}^XkYF)KHWfkp7;9Md$f737*5z_2 zE<4^%X9t=`4bJ$3`JujTfyFtp*x2#j;XimyNy>}POcUn-IKLfDxfUh63D-S35x_%`eo?xZ$TG;`S6hxeh-IrQOQXJBp6ZpF6b}XBA!xd1Re|PSk?kFj1eZmkaApG#Q zXi!U>2vC1U{HNHOs=EA-P8cyJ60T`zY2!du>irs; zDQZrC_3n&5UA-?I>-zckfQQY418zhPL9yBck02^6=KP(Y$>fHZ`3JVKUuQ&YzP}3WhWB{WSEFQND25A67d%Gtu6m8bg`B!6`wK3R{ zpjyh^A+8J|Hy}R;9dcW#K(QXrt|0hta;PTsUoye^_U+k*rlyH{u#nm25_&)(Xbo*C zB`y79x!CX&{SEPj_0c=2ew|$QiqtG{fj%*1;*TD82Y=>y9-r?|PM0_sxB3!|LBmSj z%qX2{_9J*Lgj+#DiE5fcT_@ab$R|9vrs5kFjbs#h)Tcx2Ico&#({l$K<1*sYL_N0& z1bmS0^bmIL62ao{?fRUaGRe$AB6$`w{fN#dls{hel@yw>pY)g8NK2aQ*Bvl&4LaLL zP{b`M*2EI@0?Fe{S*Ry*z$wIBosA3VKVIj)j!Y-PPKf*xAf+VI*kwZNWGZ#Ty-)Vd zlZP~wB+?&tkDXrY4Ev5y9&7nP%iZoig%(t{Cftndb_~iXF-ffO6B$}{d49&_~8C*>{5XPu90yOC`ObJYao`{Il7Vg5p+bDgPzptR=wEHyzlQUT*o9eC{z zu?r#tV&}h4%n7)9DJ{)JmJbJpip9ufg$UZ65D1+3lEN2;6S|FdGYs9G=ZK6_>T_=l zcYrC5n3^Fhcf=>tOBxJ?!jmEIt8S|cFKiUYH%l$Bvg+^6yjSKmzS!B_HQE?wjq=qI z9^KWIfTWOp&HB!IQif1bUket3X59N+U8nadg5b!eu@Y?8fcnhr+n7kb_@RKsKcIIl zAD;XEmmU6MZ8Qxo`XyR?`Kq{v5Xy%SaO)kM$#t6~EBEz3zVA02Oz9YH!>qRZpu_;# z-K5;QA&+T*@6u^?16=GqEa-KF#hJbI4$8w; z>Qn2JBj?Af>&l}?`n&Ez>z@2ktdt&euI!^%G`k-O||e>he4(s+il3X(?0FjxnS|Hf%GIqj=vw)_Q3XzG$E0Ttm5miR9IFJ<{5 z0k7;Y7#1p@^wU%^Q!Pi|gN%+K0Sg$=OcC_bQ0aY{gcFgpiU=+28Ko^X`ODk3`Y!r@BZJ!1{oSEv#(+94lT%yn9fl!+> zdDmHDtgrNTa?PmNy`1&)ol$lVT}{?#d|tMLz?J7+qdBIPJ=<@POBgGLy1KSkP*NNaPev8bq&bCU zv8(G0^4HJBJMlZ-;0Y1A<=}(wPjoqRtP4m^O>B^~&~lJ1(P6*fUP+sX)?4CjlQpTs zf81q4iJ6Q{iyD3&6fymdahv47HO2C$hjMx#oPX9mh^;h?9c}>iLdDA%_QvOTlC?K(Rvm6K_MK0D4wmEez9r`#UaM1 zk5(~7h5oHzN{cl*MNiM&QMOt|WnEE?u*HgWaO)|0T=~@8E6$uz*ISb*Esf!cps!CV z8UOSI?tYfISFy!@$-iZF6vOfoUl{V&lr-Wy0JOzG&j&z~|6}l}Ih~&j{UsobI(K%) zlVG>L;OQoN0_oMU8{MQ*!HD zR+QxslM9KW!}~m~iZkcbVjAH&xsw|YsPe;Ft68*}RyvKGW<_%?M`_ceB(x`P+xnJU z$6e8EucZ*h6YJC_av)30KfHCXXY;3VA=O$IM+w)R>hchoTg@-;kW$9H8%)vMsVtN6 zx9bTaiGj*eMWLHG)526yAOY+gA;>Dn5<$s?J`;(|@J|?Q$!7>3lj_z=sfI>66Uns; z=CYEC`JJEXlnEciCo*gEaotn#*NzPk>BZd|7S;4$r@8NZ?SAPOs)rceS#Jp>;KZFC zN^-$5rCY4f1Toy+&k^sGmN-%otzP!^s z+0Z)qjY(#ao@>u6v^jA$Tt~y&(}zFtASbZbw33ss*lPo41yU@?uw-S1ZHv25!XrpczKgJi#``?Hx;S+4U? z(WkeMqrPsOlIGw22u^oDV@qj(FDe2kpuZJBDu%@s7Q+wx=V#;kEY}xn_$m$#4juNT z01}@jB62xWHDsc!RTKh&k1HS7v^^Yn@K?zJknn#KKcmd~iGU*yWe$k7h{CRI-v6HH z7+uyQ*uFA_GO2#ML7Dux2We}09F^2iscofdj}>uLkPH)2@`574jj8Q?#~YXunos5Y zP(7u3@nK`Jbx`U8sa4$unxpw0{Tz$a_RpO--OGvO3neAB*^*k`rjIvUh9s{W2sJjV zw1w)nu7(T%-Q!$+(YdKRF@%mQ$0sOc+S-&Tb@KxZ%*xnK=4f67&PeDh5peEty}9RN z-ZZD`_`IfXf)p-rPUu&m@s`2qphDSZ-CJUYV@@RlL??)sZdQIGN=dtszSgD#b~0-O zzHj81xYE?v?CNGu4>tyT-`1CIj?08OE(Ppe#M|m<&&~@3LBWmcH|q#4^Wr`$fEPFv_gRx3F_fMflZ$Eunf=Z0$Uy6N?FM?Nnp!Fwm_yI*9vMnf!r zzWqC-;hZB1^B54IYRl|}%6YzW65F(j|7`d9h7kW%A=J{Yj)adj|L4+1A@8|qoATVn zDJiJ_MZ49*+=;&=VFmZSYZLlb+!x(>i%+3Rkmp5uU1h|abRyWM#nVx#F}~Emig8mzm!0BZ! zpZpvl%G-WzEPufA-T{d7%SdSt6!g_CplMw0s9~KrnHgpBmhP* z;QSYn>azsmac4T^UdarI!#@(O52*w($l~#TXdMRK6$zb4Uz5|!UXE`iFoy>=!%YA} zY;867<`UGER^MLhiz}Db;m#$QPaiO}`=5KKyJ07_(y8dAv0o$&%=||8Z%C5oPw3`!!#T6~k8p>6R);fAKArpxuAri#+DcWQ zHx3j1i5AcAZuLGT6>sYb^58%qUuxNwQY7x5TEzPATC@{2De}vE0`}-*bNJX4WbPrk zzlgwZ0W&v5&>DW9im}!MK2+4imz^PQ`2fkuG6@9Ekh%Qvs%4s3&7}98g_33lc_JAc z_YohCtI+>80ft3q*^3;Nt_aH4wP~u$&(&D#Yb)wcqIBc$@wk_anZ+XVn@@EdQZ?JC zDEki#Dz_|l1U&XCGCI+;w&r5Xt+)(`qDg#fv@q~?MEiCNKlWJU(0 zQH%2OYgvZf`9?%^tng7m)JtYfOVsu^mp!wnVtp2B;GIb5;dLVy2=JzPxt zt2Jl{uE^nR{dXycEh#u$oyKpGaNL=G-1M+RNJ5oEoXvSJa=c09w6$$*!nKIqMK|5v zd!(aAr1$*nxG9giJaoKL?L+BuQYl9>Et7=VO}}PZS(TOKe^Sssbbyvao_=6c+x%+q zYDyC;TV@cK*X*SCI_{0>&Y9r|p*(Ro5C)yVxXax-Jv4=-?ZJef zKdRZAiHb>dNOgOA4wq1GO-t|Q{P>}Pqwp15n&#v&C-0?&ta?_=E5U85+%|@vN(=YdciZ+vukw&<_s&^zLrS$ht)bFy4EK)Id&Ce z5T_x@oN;-Tk_t2zTN$7-V52YkJ0cxynDSqGw)@c}BLPSy$+h+v?uK}c7UAem7G%o{ z@;VtRX7={x1M)1_ee6_{nD|7fqf1S%cvu{FL_0UgIR-huifKHq&Bx){6;}Mq=xg(9qOVUT49hyBKYku{n{~&2G9R|9NlCD14WaZ8sz;pA)*3 zIlf!g^wM#lV%1VB#5e`;|?E}x=_u!iX#o2KO=a_HL4DMKXtc)lGW7My5ak!eQEaDlqPgbUJF6*0x(~}-XuI+0m<7fT z4g@2e$K+TE@#&I9m)0vK5*zrn zfMP)9|L#%q^M9$Pe*sfEUWlvr;b_`a9u064#3tPOG8s`ZfF*|{`L7jFM$S`iZg2=`D}Z>?;y$jg2_G%{(k3YgF)=vqR#wF z1+sf$ z<8w|Ry$O-51MW=cCM#A#FkNKPq682Jg#=~+jDmn8A+?U@8~HFPH9ed-2W3;jkO8>~ z8LNoEBMfM%iiU?)L^nQSMWP*0+8!s94Ht|fTh}son0bIQiq-kG`&hWVP5E?zd7k+V zd;WjPDVU0AZ>uD3Kq4&i42Tj9``NxE*LClL!3QVU!=D9Vv5h+G)8)rX)i2l6f;-LK zRq46m`_+U|{L62*LiYkG+dKpa9rHze(fO!fT%SEEDx&EWr|Vt_bY4{#nvO7}q@;2e zifORyFu__mXuL5)nsFntcv+K;9X4m2nm7OWFkGW@e%Rra^bV?rdwF6<84t1_xA3U8 zG~c|2vlfcq$?`bpVRHgR7(b5QBwam1fW*a0-^*$2DM;WMmFiR>F~yFN$w+b9#yty8+4a^8A(NV4LQ$-5JN`X}Og%Y=ffjowyOdWk7J zGhb`}j?H&hX!Uzd9(>~q`-SZUO`JtRz-X(QFDa$y>es71ykEI+E27GdbVlxHyaa*b zz_|os!w?$)1ROtDD%8)?r2= zXeh8+tLG19dVF88ThFg%`$EHfWEAEQTcJqwVjN1zAmpE+;bq7Pmnp3_joIZHiB-Ts z$D;Rl=fb+dE@Y9fHS|pEnP8XI98dN@npL;?cI~$+Z0Py%FN`INl+USd38BolsJJvA zlInjW{n*zHV$>7~(V|U6krfW`wubO$?f;jn=C6YkKzIcH2^JMV{kJ-6W0E{M$lDdA zApt3Tk`ZxwlA}t>43@(tYIkLgWUMmw@{G#%^e8^5I4z9Z9C}z3Y*z#GX)j4h-O!(H zxko6XS(A@^gMJS!;2Q-+A-fX+f^abrnt>njPQu2cK3ge|&g}OsfqIW^S~T=eI|983 z;xZ|d1YAoU-F}e(Z&1#7wlnFww_g@*AK3z%8|skdr8=g9~#v zWoUj)UU1C!1pZGyINn%sSSQ#womwNF+9W#95M%|I2il4WLDHqGbN1e!|H zml0N;xne#9LX@teK7*ZY-SrdFhWqr*2%axH66|&g@;s|$wICz^gXroiKm$41a7G2{ zc}~z@{*yL3t=h^5Ws%G(9@tM3Sh;bfnuC8|#}`;`TcW-$>Fl{;snru2LUucUx9cq4 zP+qSgCg+K)-R86cV{b-%Jl2)6jB(uX^EqBL)T%UXNW3WKn=$~eBUG~kR5-MF8$s9& zU)GNaN=s4wiH$C-}6n}`_0K*jI#ph=Mgmcx!iHyj5?b6QGe6`OUUE%lgRzdx;B_c`5Iy%>Q*V$G6 zRGs#Cgmf`ENJ>*Q;Lc0xme4Hcod(FUWr$jU$56od_slwVCs^2QV!SD2Lq{jFJWTco z+?9)rwS)ibog3l`9fn7^XlAwuBukvY?oQnvA(1W2^b}|0^7I>j&S3Iy{v7zse=Skq zIg^0RJCs#?UQ!^2=8|=9GGInl&<1CZ&a!6ND0{$>_-%sk^A1}6quIjmbd?={?Jr0k z!lvP3vfN!&m&JYItw9yPk~p2;-?%0clJdG^ONA8kW0{?BVFX~5My2Bf&&33D`_9+c z2Wlo$fJQWnPl@>3R80|BsY5-B;bn&5qp%WvmiR>i@ysUV6Pa9RcFvrwQep?rj5+6A zDWv|w>nR{V!rL=u#n60jP@54+F#rIcF~v93BsuG?>eG7cvCxuayoZ!hjESr^=9NO- z{AL<QKe5wDL$(3D(kIzOJ6&7W>j%6P+LL+R-!7bf9Dw6TXp)h1(Rm)0C)-4MLxSBXJs zptDN=jcM#~2u3%5VaIw^_X?o*8McS7ADGZt=h61Wc9r`0h9H==h}s z+5`~IpMMk_F-XzivLC(=k;^)Tt71k$c6@A@un$3(b+#iQ@E5!2Cf6PnYfHnwe`?~t z(K{w|yL);|rhgfNb#Ej> zR(BQwb$aD#c{d8D?0|Fa5rUaGeN?|;w*;bg=tQ)8oNPz?5U$aPenzoX856DqBhZ5# z{L|N7dn%h+Ew{vS;6;D}pHRkSVNITP@G5Nqy z$?52D8{1#heglzSk8!+Bghrr$PlW&LEd6KI{!czzBt$9&pJr7eOaZ&kW1$U4&+?yC zZIMUwgXf%@t|q~hOAY9epzz!&VeL$^ulA_T&W=0yJ)M8b=>eS)F-4}UI4uMz^PLlc z|3;R(0iPNfLEeB0+^r-7!=fM{x@ox^6@->+@poyoeHO6&8;n}mwD_9Dd{<` zL=tj7T(v`|zOUIB4kv^%-mQ(WR??pKB=&&G&)f?pSbAWplaEP=8Ade;=WN7IE8Hka zmqASuP<#0P#WkV4!4~iVsqfz|k|0(1ogR3kd8mM*d9s!(!_WiK)7hYJrDdol2`l%? zfJqJoHNcWN(!^wI$LM(O>X{-+AF+|LD`G~n-cEVS^9S*9AT?IGjS*~kImM5}VSrzD zw7n5J!iMdRQD`Ggvd6Z9rMFmPtI^X!yP z$5gM-L^HW_9HWnxA?1`#+n1}BZNYJmRu}iVR#%-{t+Zwq-FcH83AeMNk|Nw}NOmcx z;tetQ&dc1-j71?4=Cu<88!)#r#E&CuFWs6_leEe;PrIdec8|I?$knTO5uroo=1Yze ziuG&N*jQ{8$vGPFGK#ib?_2K>_(gQg_=jHi;3W+jHR!6I+8L`OW7JP{jLh_d!uW>+ zn~SNkbTsXYi>wam^fRoe9#*n)7+|rH`HTLb35Q^SE>ptGGNrC!6oKW!;`_H7J?VUC zYGGi`obIRcln2kCq>34LKM;3E2ies4kXi3$w~|7+WD%vlS0~}%!eSr}51W8}s4oF+ zd=i4uR9F?z$D$g#Z8522G0Z|3__L`C<8fn_-~M zv(AhZ%Pir-7@>53~g11RJH9|dp*e|?k9 zsZd9F$07kyh(vC;^i&96(!QcXl&xm*4vEXhRUrPA%`qZ9kQCi`!2y0*cLb!4AU>T9 zBuEX1OUiZcs^1V3)1uNloc^MIKImnXNb5X$a)04gU?wGX8I~$PJa41dF*ocwlwElE zt#}>yCoi*Ce36_>dk1g(s-gNTz=uXorQYp`LOL%>4+I-*DB6ylq_&wZZFirvsb9-Ac)B%k#5&eSn8M4K7r02i(DAk%J}n( z+agkXL86CbrtXbD>^xTp?u<@8KHVMCna|avTfM1u2K?ID9*QIlNP@laj~?AFw0yARK{cPf&W$cnR~T!n~J{hV6Ul2UyXjexEYp^mk!ED)(RhfPdF|c**}^<$*VW18>4% z_gUHydZ`*%i*4wE|7oUou-Qw$mNLsU`lKWne|!ct##}Fc)_qJ>AgCmQ z+naZ0J`X>?e@^AD>?u&v+5YnbO?l!Nv#pTw7B5e868VopwV8oYbOawQ(AkTFQ&e1` zGh|blFlg=ADsZWUgp98Ap7>9anyQ!L4!(N3X91P1pqeDL{gu599S64Y3HeMq3XY^1 z>>YdMpNtzi2F6&vr|eqPyr4H*2JKr{3j3BmREj|e3v@CH@{qO&R)XWlaMvu~r@QtN z)H`f&6MW*!VRYjVL?YNvP9J zq`UWW2z&4XGm&pwzGg1d2kNry3Wv5^-L<{Jh>NWg{yv$nFY_0V9qV`Q>)%DXdE$~} z+qCd2*Cw$U3dMIhD}OHD3Nh}6#OWZoZ`9~+?^ z?O%Z$->-D0bw5$+{j^~vmcf@H#szvtlplt>;a`Rq&Tq(#(RGfatZQrIK9T~78?;Nb z44`b>(2oO{)}4+6X7q1NdvfmoT`_)2Z@GLIS|qi2Chd9(D=9&l8HnL3E)Yo)tS6}H zMsKF6=`j7Q>2TaqYH^GnOCojJ5|0E&AcRO6wseD)RK7n!au~j>$#h9 z>NfIuXKU%!9c`@8#&Mq+wjiW^r^Mi>Z$B+wW=b?*#W7akS0KG5HjCsz-X|N@qKGo{ zNyD{T!mL6P!d`?ji_0MeQH4K9#4(H3N@%%RnP<|%6cz{WdIWx{+4KV=c!C`rMQo$= zO6x#icsufV^n8(gL}pFSi;(OBk9-0_fKRq-c4a2E8vRrKuwAawTq76h#`&TB2@5+5 zNp%f@ww2W6^mzc}N8|(+4x~vxevpJWq=bN+KMWDZ_vCwQ122#H~9gdQbg)6Q&3I;xsjW zCa*p#R%yQ6x`nD7bLAyyG>B>&G^iNPbX@%-qoSZ7Evn0jn@bDHpQzLsSqq)4&D!%(lIW#=d zB5r*k1MowsNc;u#VjqtY&oeU1nncc*Zg|Bbote;UYaJ3eEk093aMLqQhP%;~!|>Cu zdegT~K81^29bP)6&G0D?8?WkCukBB&U)1LoVvrlZ&@MSycv7gm_FKaz6yk{4$3jZ9 zKR|9BYJJ!%;V0xB@qNBGQKdAs&IePg{tlLNe2nF;Lveej;~VU?;lSgM2%CT!%p|9*Mnz}9H(4h&wvqkq_& z;%EkLM3@p^lhDnp82$aLDeuO3Mp3)ws-YPs6sf9vI1GmbUZw7tzhIOnhrK2>(q%-u zPe3I;J~Suh@hT0Q#_tvv?lqDlc9&3Czn{Km=<2{jKOKpwurX`zPB1p5VA{<{uA|rr z<|hgZc+)CBcX;#$mtE5S{6}oe(Dj%{2?vu=FIX1VeO?ts;-ik@wY5#+Mx~fExZPhm zph_O>+UtR9HOVLQVa)S)L-VA*j4TtqGeX87G68TSq{wnRQ9GB!LoMca6Mm2q8DC+i z2(HK!yP_5!!iwi#sUihqX z7aCtX+3`@LuhKrFdX=o^Vh(wGenG09ZiIzCDA=!ZvhIw8RmoDJmsJetN%|OT>^?(I zd{t%V=Qf7N;SzBW{W4Dt8!0eKPNaRSC@^ccJ6{x)8@s(JFDRn&eeop*qV#|Rn$pLT zh=_l?T5N93^|^k_5-UzP(%TSnDdm`vmJfzh-<|f*yVMo(ZHZth{J$*`Nuug3EHfsQ zD3xzTBk%TVH(-WBu*28E)}yt%i__wmhWk_PKj4C$_B&-TJrj-Oq(<^Hxe}uC<7;_( zC?r+m52GK3F7y-LUAti*X%!6cTff_;KE`ZwxrWDpv}aU|_j+PS7KJ+YT4%FVCF;?_ zBfgG$S(mEWLhsX5nreAPpIpN(52|M)MWjP+IiI|dNf{_qh)uWed4T-sp~)bQH0pof zthS2nDgaKFApw5jP_~x=8geKn$q$u_5{RH2ONa@;5fqt?^{D%*UmI}*J$m?3bjWP+ z_&!CeO-e=iK-SQrG?H}$`9`d2(4)zd+jF5(+t%x%U3H1o_!D@`RkxZRVLj-UT&mdA z`gLhvm7&R^hbFgY6}b(?vI*1kOQj+v`JuL`zM!di(^q?S#z{@P>hmG3nnfe($ zIUzK@2B!cz3@2l8!KEA;$HB0h3<8@9qxHyw>_xAm-!^ev5?{YE*PU?rm3yj&b@j^E z+Dwkl!g)2nzL!Z(ATk)RGr!c>M_=hYP050mpKet9T7%8%pKQN9(qLnK0$;ykx4wom zjlEon2xNrglK!fQgMvq`C`0XVU<{C)<I%SCwN zyPHYnLc?Uoyuib*G|sO}puy|@CAtxub{hI);@<3aRiJj8aZXc;h1(a8vM;ZV*yQC2 zD=;|IDpeYn-$*`OEYN3!?Ctte!?AkgJXgSTxGaQ5mFjO${M!8qiJbbh;86r~h`8Hd z>}<6O`QG0RcB2vLSD@a-Uw?x>aLj6qi)rmN&0?|6#Jq#GXZ67#hS01f$}&S@ns68} zJbhQ*obH<%zY}?OarE)%ers56zp0qp#b)1>%xG)vKr)-rZtvZ?G57OFCD~zF=c8gn zj0VfnpS zoN~Co)s+^Nbr-QNo_9OZM5!p0UmW(#lvS>#-gD) zqZ@1W*f2b%_4OpcEwoyD6hD_+R0!3 z2vw0&|CnGZo^3xZ(QOkO-)|+GH4$pYgVex;XVw!;)7p>HNNZUhhsoobxaNr0;N)!C z%Gfxtz}RvkY*F=F$Ws%Bduyv*wf)}vwXg#i89X%aec_){K1sZ|3iY~)_wb>rO>`jG5npj>;8vW&igVH7hpu0ZdPQ(FpDMS)L*-IW8j(I$z%w<~&`=Dw@_a$% zf38Ew`X%Q{tHl8!U6v45@C&K%`;gr2>Z!_li*i-z>VL8TeWS zgS|Z^F@5Eq%)IpLhPP2EVztqBD*J|J0iy($Xt`{Te_gq((P5I^G4 zql}?2)MjSYW_rs>|4e`T)c<~&lIoZ))2u20-?w0v_L9ulMdHv%@ToNk`tifktEVhY z*e6O=ifCw(kR2g~h_#%n^}}?pr`2TK>5}o<8vf55eEtkMXX?omv%9H7^6HJR^f37q z)7lk5E!p%SeS+8{MbBmb-|ux}N>byEV~H|wvysOv?oP-?3{`5Yq1!3P&@ZiU$ZDlm zZBb~G9qXDSPRx;9U(u~EZhr@q@Fm05@9BVQFVH@j4JGHFT*c`-5Q0%ca}N<nUlTvngjMO&O1-3q-`RAiJ z7?Q8nWI&0J80qep`OevWf35h)IJlHmNjlypZ>0&NCfcp)#sMonQ56~MAg99bV2yW@ z#EbrtR(Cm~viGYJ3v`APB&a!J6Kmz7-J6}iWX_QiWTrh{viWK=top|fOB(`Ds=t?; z20_W;y=f#YCc*@h6vw;((m&bn=N@7Psrh^s~Bc! zdO2oUvn>K$Iy-zTUs{vv{jhdA;1+fw5PHf`1>Ig`pIz9;^DB3^R2O5u4<8?D+_M%o zMEO)ji|V}qJHNB^bEm!E%zE3Q9x_4Me@A&D z`|oN56ek7T|2bol)gGk5c|!zTMUiKW$Sx`d(pXEEQHBfFu!h31K8Jm)J0_hn#y4TM zT$?`4tgL$1i&$y}%tZbz*~}Z1pT&eV(LYUSF&a$djdYM>X+=3@=Qbixx8eP`TuS*6 z(I)^I5f&rE{%nmhpLmQp*4W6cH_j`Z%g1z^mu+(W-Y%dnDeSeg{|qlPsFAJs9i6U^ zY8?$6CDUN(4k~mV9oRVo(9Q}YA+H%}igR$mMtT>)ST7eB?Ppb!=~P1|4FrFA?ydhJ z#XC>;-qDBntm)ZAGdYFyG4k%vsi`X3is?gel!|h=Uu%?N9d#v0qc6I}_LY&h9$MT_ z@7xbEG%Vz2OQfNO+cX%j32(2F{Tl(!_?H?bS+a4Q=;}_RleO%jaW^_DJq|EA;T+RKEJ; zv0 zYCT?UF0_N8oh6=z&^kdC%#EDSPQqjWBrqG&NeHyAN`oy!*^FmY!yXOthsa`6x=0xr z`x<%`k(~YL#N${r!zev{@x(Fw248fMK63LJJWI#&yE~Ft&)rQ)JC@{V}(L2@VAOGZdpthQ0s!O_vNrD6+tSn^4&cO=thpRmbT z3S_g78NNpTK+kvb|55hVQB}6x_OOI>r*wBocXtbjfHX)+OP6#@BS>$$ySqy|q`SLI z@^^22&UxSS{q=lfY=#UN4)(sU6?4rs*SeJH`Z8d@eBWdCIxvES>Tbyyb|7ZX({DL4 z;+_)(3>)~nZlGpnl71?yHN`w@*oNnU4wk?9CHZ>p{3P78zP4`tQn<9M zE{9$7Ej{t=SW2cten}I4F)Cp{>f&v7-m_=lDH>V$ukV|fZyn}d0om#B$oks!hzPZt z;XV6pFGGfCoZVXml2;p(u>~6&9TP#g9)3 zdMZCAr`Ua3yj^B3G3rC>wM!>H*`uQ8v^omI=fM*ajZvLuVnU{scS9agtTk1!y9vYX zanMLMk*5Gd$+w9*xX`#n1EY)?iB8L8s##*8|jdf zULUWnRZH4@YrOm~oI3eCt-7CBykj~jj7tV#uZHqY_WzqsC_!A1c{8nl%U!POt3+sb zW?$qan#zZz{d59Sio^Giw@4`v`exi5vmZcvv+cF}i>$7%Jo8?#zwg7^Qy)vD>;}=d zKy{%Dy3*6jSG~)42_=i;a*8B=TAw$APd-4jyWt*cYd=}{^Ra1>5~;u5{q!kEy$-KG zHH;wu$+1j~y2&9QLFINC!68}m7xh7-w&Nyu!iTJaL?|JxxT50C2y3(-Z^ub+dvEI^ z4DhIcDlZ>%t*L%0rb--x)R&q1T_P=9e}cDtr;3iLE_~v|6cxV;sCs`@8No90(ytoP z*+9}?s&ln*tewH_Y}_xY;nNn{{@3ma%5Nd?!5P7@2LuF_oagbBIYYFJGj4|mTLFQ_ zL57`snQ&JZ)4vucBhvh#Oa-VuN#IV)GASa{KJG(kBj|Hh-j8^r+@vQvDQujWh*5jA z(G({S9)hyPsdeCCrAPP+6|aBO@;^Mk_HaZ@eT~~Li(8Wo0p=QN{vK-6&1AM$KDxP; zMPJZ2%A>JOmRo*gdVW=8U+rK8$%>T3tsQlaOKF z%X2LzP*Vv0VuM(2A%N}V9>D&MXHxL&Svbi0{p{`5$T5zBW3jW9gDKil zt9O1LSDE4PJadciTD$JX5;eBCQ9UQJKG5!L5M>@77e{Pd7<-M-_?Oix*PF2Bg|wV+ za>QTI&l)zkmaF566UiM;oprVLxfQ$IpJQL(_kyH@HzxwC->J>|EDAs3gKLWO3I1{U zJK^)s=+CEipQ*pjd!aoj<;yxPw3{Lk`B>6KNJ)U&>wZ!Td68$a-s41=msJX&Qnd@u zQfx9874$-pSX*gWu?IsJlj|g_krvw1dj` zlkD(UH}-uT>j6LiqQ$qtK848G)*k=byM=sfF33wpcq08i6Hm@wnk`nrQ3SLW5CjO) zofq*nLH-K$uGt@O=o+yLCG;QeZqF_#$r*7F$M(9XCVgu~DtC#J*?7ebCPQ^R`#YG- ziSdgjW1c;nQ+9XWH(Z~K@AW{$?%$Z?M<=KnDphlFvE%fUQT{~iZB(ay+3V*T`~G2_ z-$kIMA1QvRXoxAup@QVY(MaD!4O?!boHt*RNOXNQX*#0lCy+MH?eGbZ`K%&d&9>HY zZGHnn6B>l*rw@%+m>lUsdARRcTv%L}FO{#pIL00zj-~cw+6v87tB9{Rl6){QyZ8-_ z<*P?bOIzNfI7MSH7|#kLE;Gi`b>S6U`T50-TA3w1oX($Pz6qJ@!1p`)W`5?&QK0Il z+Wm)jm6w;qZ>XZR-h~FVC%f21;B-W=!)*T2rZMhbSI~L*d8&H7i>mwWceZg2_43XB zq%FPxW?4dCF)eR!d^SOowH3-IFUVGk&A`=mq$yt2nCtIn9+_CWS}pc=;Q<f8O|FnFY>^G-=W*U^zAL=GxMJGJVrH!2{ z)#xCN!kuC(!Oi`dP>G?psFl~;fcgbt z!cSXiM>JXElSR*!E^^*>(V0ebhPX2m*WLW-1cU;Ejp9E+EpK=0nJ;yW(y!f=&)jX-dqZVg zPvMtzOe_jA2#g9oAljD-y>k)W+h_^jUOx4Y5p7h+b*XDAoxILJ=@4w7keR{Dzf-M)>Of%KUSM zAwB}i@(Q}IMk@s`?X$p_Plxpg&Ix5suOU2OX?m1fFGOL06&B^l?Sh|&_H@wuV3tqtFe=_p^A%PLSK>{xL1t@$(-HJOKTXbJbF zt**xdXzaaWLTGDy{@Qe?>LtMtW3Uoj=XhwQxy@(MzDxaqblO|4ySmqQ@KY^>ALEjt zW`Df%eB8yuil1eewQ!%Yft+YvX0?_CfcjIw~;y z%C>1k7K_|#SNA~5`)CVBRd>H$KzVJ%^&_bPBmK(j3N~%bgen3q^FP*q2=fv9>H!6_ zcB}oD+m7k}^u#V(n*z}Z7Su(gFeyW#6g8dDZ;uFcJ7*%whEHn{=cFjPdP2CuDAF&q zgRN7+&l2ixnX0pU<$%@nU@VGC%55LVfGa01QyfZU5mt9z*$h1y=yM0{Gt6W|gc98^X%1+!Mk zAcbhe=OP|e`f-=_;B!NtVw~r|n1FBUwEu_eV1Mmk5zQlW=&OC(v`$`n;JJ=qMxO#L z9J5P(SQDtZ6c?Ok2eo%98rfFT`$X_HaUEwM+Trl9#E)qVg`H-HqjlA=$#FgwkgZ;+ ztW0g(8v#cSEi#~NXa(y6^M|~D36VSM;J4HhjUDRFE_7wfto;euQxQ12 z&yZTME)*8qQC*qDMJStoqh{FH#=lo6CP^C4&-UzE9G^@oaA(ZxoO=~gBHE^QWDI9h zSNwiH3168*YXyG)@mNoyqP}R?$;LU+83A2~I8U49pcb6{qr#_YXxA_d9(knKX z@T`X9q}1fuedpfz!e>6c6;yDja@kL~9gmKi3-amTvs}aH$KHqikeO3e1BS26HhOQ~ z-mAX_q^-t$~2j% z-Q8--#~DQJ7$8n`1Omi_hoMvrn17@3y)QzbWPX7N%pV>rC>@pYy-3D?w10~(??NPE zp&k+4%7X&n()<}azOCD{!xIsMC6Pi@7Bk#1>2wo&g%l9RAY>Ecy98wub&ZNh8b*jh=|USE~keGg+(8kvqwC zkh~dMQJoXQ2%(GK65z=;u9`=k_C)|B3{pCrnTr1E!ii5tqy2m%7hZ<=O3#V z2a(gBTG52WDM0)+%&$X(7yBsdxt&jE7m*!avfSp`j>oz?PW<~6u+>)|@*3?TCWkE) zKcfKU>G^)s`}IKCA%M%^A#lj6kE*6jJ;W_aP5fwWh46+MevS|TEY>zZ@!kU8`VK?! z+aE-knA>pJ>SmjYAS*`9CA)qcFd+2#u_nS9Y*cxwM)D-g;}#+;Uk_S)@L)WVMn=9( z|JnPv`!!DIX|F9wlcUoPru^y=LFZza4J%>RV6X zGn-vk9F!PM#Lno9^(f8(`^IU6_UJqK(GFAmp^ZlcOlwrpe0BXoY+UpZiVhF4wy<@{ zd~eXWM8#EVsp$UY~IBv!ekH>U7?0b zy0+UF&?-m)rw4Yx-#r4*{L&;?gnT|#QwhhHd=GBqo~A9+FYDKZJYNT@kQ|BiMjMWl zBG6cjA1pY^S53#wa@E}xzXh+BOvGvC)y6#x$Zk+Qd(zGa>B*BEnF!Ewm9N^nM z_+;A^76rCDkOSa@i6~F{-jsE(m$!*z1N_!I?G)% z7j62ImSaX~;O7$+&VPcfw2M_9)Mwh#@(s}iv*B(44uTA^nKCtnhZJoz(pjnm2=_!Z zV0wR%|KFB*lm;OkNmZU!gGy31xh6@?NY{gW+vs*KUpoD}&155gVmkvK|qyfZVg&zDvfiPll~+o6+Ebt5xeKGAgv z^BE@llm}Df^}-t3HPl;(3sC`m3SVZ@4kue&5tBq95`|GkH`?+mmFtJ*HM#fR%k(qS zpb-jVoNFwRI=#zqK`b@)`q!Css7;KCz>Auj2X0|D523&^raC0ExTt58uj2SmMls=++Bw|6&~d$awR zm@v?!!x{OGH5tU(0KW%jWc0DdEo9H){!j1&8>EOev_h%JHUT}LOtUuKX93KT74lj! z0m!Lrs-wsPI;Pm(y-6kH!YSKsn9 z^O5qiq9O~w*w_m%FTdRwZ0{Hy6veM&&WBTc7IHOq`{L5vdA=ZPU>;vjnSS}j$;wPV z8PEVki|nESq^ko@6)s@V*JuSy43d)v`tN?E77*v}7ivM@k2E61Z05<;sfV^_-|x{^ zFBJaTOHq_{y^CXNaQ#Ht=JuXKgdJySW>c%-qF3F{#lB~L%$C#C^t*e0#rj#gXFi9s zwK|>B$?5#1DfYkz;^{?UBt!e`^}Qn-6J;KOKg=oBpGa56L^4wl-Eou3KId?P^f?9p z{hpw1oh0OjaGP@EM9#Dg`icJI?|`f42&O87;bV%m)BS*RD5$prKl8niEdVzn{o_VV z|Jsf0$RI;|dFSXqWiyl&wnWoq6o2c;5qe^+joPU>ogA^vUSAsILg$f=^qURP4#btK zCuQKS9&s?nuIx7L?9S(woAefwFHK^}zWJ-$V4nJLBxYRNz(4amBsX^H|b`_7I7Ov?l*OJkLO!jQ5AnfcOnr9;`a#G;04;LZb$>eKfAsqQA z@I4{s`f8@0Qea+RSIOsag;{zS0>k^{z3T9EhXc0pX;@=ZQNe9p--qb zZwTv4sD=JMoOede^MQF#-Zea_ZkJ29ay^&pk$(N=N={+J?lhR7!m1xnAp*5~%saz& zeDvdYXPd8Q`geXDo(>Kakv0#VAIt2Pl&B3(_r66BWWu3+#qA9Tn|u6UM@myQ3;kM~ zA|k5z+BsET)W~q`*|%ZYU{0hGS^^^NE~>({^+ucR^C1(zwb~TaOWkY8&HD#{4TfCb zv9d*6XOnvUr(fk1_b>ZZ05A>~krXeDk2uj34dUIYQGxgEed+^ckbc1|@6vyvhFhjz za6RFA{L+Bh@@796fQBsqG&IJB>Sx4at9Q$y+$O5wNKS+p9bLf|s#FH$HWJgdA92rI zzdj@qTt;&nv>Rl$cfdzEX1DbeCmL%hBJraTRQaLq`%~GQ>r>VMUsS*|oaS4Vi_*d( zoSPHoIY$8!ekCmWNqueS&jvpd&o(}jLJFi=<3SnI0ALUfKoZz&=#KsXl%@yv+=kn` zA0up~@fdwS=QZEO_;G&4P~m{a#?Q^2xz_){SMTup<^x5Gn)?K%Fd0?7!o>+tSs8v> zU3s&@jrN?*Oj}yi9s144v+{%|;Z!NcN~p<}8b>iiU5DcfSy~Jr6W| z4cVDp7h%H!VmR;m{aO?|ZCQb>aW?`68hlTXtASs%6Ek^7gb4WKfXgqUtbbX4`9Lp- zuW72()wF+jm+MAWENE>}EC9J6SkO0V75{k7;*a94*i51%YR^-7iOT`ULY(Y@oaV@x zoRXrFexKE-2v{KE=?~b6B~9OHlm20w*@f|mZtNHbX_;TLi)?lVE~1v0)kA8`5uy^_ z`tds&*;i24sh+mG8zCVyHsj%!3N}<<=j6~!h_M)ObkdGkflfL=>RJ5`nyj zZaDe1+lc{0YHN&vrFtl{`VvuHlSL>gtGJN+tQ#cw?goC67(&}3MzQms`M+=jUK3}G zGWYiMFO+F72VNVhm$t!K&xF8vKFsMLO6}iM>tWgkJM_p{fQF|$RN@_q4q><9bj1MC zj`{!}F6ztpSKUcr{y%wf^sgqMta`snSP~7~EE)yE9@D2BOSH)+K(9rG(O@=*bjN22 zt+HyRB>nO0cZ}s6Kd*?C1+ zoLaW{>=tULYZyr71I-if^+T%LwVwS_vxCD)K~pVOE?+!gZceLoM7T{qK;I*yN|;zM zA*|k)MU2Un!M!Xxbrn7(mzdUS{jNYn={Rhs$}Vh_9JE;suocg4$rWc!avG)1OA(Fz zFI@l-{$xN+4QO;J&mt$4{<=H}%_sDbUQ&u3px@!SCx=xi*`AC2x}5PF_lm=`UB&XZ z#@B7tQeGZ+7tjI~c7O_$@Y{msrSBmqe4X{^%V1ztmqM!Il98edPhB9ir+*eYAt%;o zSvt;5hbg#R8h`qS$QAaEoQr_|5~#-Jf-t`q8=%Gxv}Y&bmIPc8#FksB>c1|=1#a$d z%Q?h6YsUDv(&zqg8ts-$Lj1^(wLbpgPcAw{`Pau{K<9h(Q`N%z_`Q8(u5LvdHhjd>rgDCU7+KqQM)(J6 z@k#szal!AZDnG)3L7cBAS+|B(+ee+e3@(wih38GQO(I&!rV|s>^@yV@)*x}#Vtb=}b9fUjT#;j|cI3`<_WSp#iDO6OZx76%8`S3_rh>8R(kqiSem zbv&6D!J#APQe>i~RA`7aDMHuJX4E$)6`rRqB4TJ#x>(G}F*i%QrNOF>^VW7qemKf; zo>n&Iz-$6kT{>;Y%w~ewmYQP+g7fG^r_#b~3T?>l(Q(hLtt*(40LmahD>3YrsR10% z4Anbb)qra4S+d=6;zPc!i4p3zfXHrbg8zLL%i}eC&2&Q2azfAy&G^s+GK5AOGwsBMBjCa8VC=J7d80J_za`$9P4VQWVv3zF|c;ATRwvGUh%t zzh5x2!=w`a%~8JA_^|?WS09C&AhQ(ACm{$HZdgNqrdQdg!`XdO8nP&kf(IFS#RACtG=)=3UGf|C%_6E@Qr(y;0>urC5+E*sdjqA ziFHDz0m>xD-uK?BbF;AtY%Rvj!Zn9>%y%&{9CIGJoiT#>ZQRvDYq5954PZMhZKa+2 zU&qd^?qmn^DNfyCbXWi)STmk=>wU`Xfs|CekT7X`~D(MVGOY<*=8 z8E6(8-R6K9rlx$m$McIgwY3_P`Tk)@^$k;m6YZl`+@Qj-z3#wEUmgyjJVQ%#(u#vV zDsHc7_GRmq1<&18%%fnVE!F2@I=|@@fk144A3>ufoZh-_zfHy7AzlU=Eu;|De;bYL z1O&()7{1+Ip-DzkO-nyx)3I=jRq%Z0C&XFl->P2R+kK?_a6F=-1?^bR4%g7kWAI5| zpAybnAizV95+w2GRGwA;{iy)L_^LPjW4UVzq1zkzqgTORcr<5o1@dd3c71|2kmAeS z20@vNYw~MCSE@NgnxT_&m--(N5lFs`|3If5S`N>vT1CFGE|~0fK?2lrnPpcTY_lKJ zsYXV7(ODBC6M}fE`4OAzwU|MNn45w78a=XJx!#S$OlIszjb(F96~X1c{)s7D`ikzv zsT6)-`lG}t(hp#ZqyxIMmh$@CSX++5Wtx%bWpNO09XhGb6}}m9BtBC zO40tIM~;a22hk774sJf2Y?~I1Dr?3e(ZPe=k-r0;2Qqs=8| z1o`_#msK>i5J+vJQG%2WitO0BbH+6b*?99Ig>AWC0+gT9HB~7f5O$||Eb9)dfnt*h zm{s|A;vN|g0~{g!Ku6gUR{V4Ut+s}S&pY!BA?A|?fKZEd;Vk5T*Vun1@2rP;>Z6t+ zDznsx6fvS`DvgQ54Fl0Nq}H2c>2r`~TJLb3fi&xrRKO%BH4{W$y;#dt)?hl#mWI#Bx-Z-lm1& zSd7Lj8XCrn;o~cB1wu49GwJ3synt44DiOg&2kOr7jw)^7P>7{LZAGdW6S=1=0SVN^ zN|`zEk;yzz_SHM`%)e5X1Ai{-(+##VU-n`^EN^cbpPxUmHxK7WIv!#0TTnq9YTl;E>Kv{Tc2f<5P=x&L}=BTXXG!R$F!h5=9B@9t+lYVF=*A zvx?_+%fHE{Jl3w6PGd8j$y;Hv!_j%9&g46V{!$nJCt{_=k%F2PC_wVdiGgV;Ot|B2 z_YDT?$NssQQ?o?kLy=xPO_^}~iE~15ZC~rsS(;p3EKS#09oyt z6)3OTV)7&>Ye%aX+=1e$MYps*st4x`8?{_b=>a6?+Vkt~^ScdJyD#r{GD%RLW6oOd z;4Mz@2|n90eh{@9qDTzyZan?K{jzZ`qx$at2F`VLH;sU3T)+jSJU z+1cMpo)^ygCVcVtA}Df1O-D65ohTUQi(E?EskdC#05;cNwR)DkPixXg8@H}{Y~J0n ziYg|4!+ia{jr}!~Wql2?()o75uFb^nx%axkOADr+mCq$*k=#TyYlrJ0@BoiNzEHoJ zRtXDEiWTJG{yAKRIFLqwiyT)%Da53j6lsSxI`3xE2V_y7p~{5t4V61lZxJk2P2u9l zWc4gK`ve~ai#`*a9UD8aT1o^wR(?6@MKaT9M}*7RI9)`wefq%LHeWzMK4CwxW!N!KW#Qo{p5Nh!sTo=+-gUGiKDSBOsK?sGa&FIG!OewL6iPc zB?A_xdtyxOOBpp2ZkbA_t3xl{df=dx3110YdEeD#cMk*v+U@;cV6^}SRyTM#FJNFr zO&Yd0>0%?Lo4XC`r^ye)8FhNJA3+x-KodBwqaTr#8&$xY%6$1$96@uom#=NVox|g4 zH};L0AU~VvVb~KZ(l@!=TQ#yoTGFC_=7#9H|HC3bUn3c$F3cwpU|I>m? zb2H01rhG^L2x?Uxka5wRyDGNbpcdyppIAbIMAw68Fzj$0tWupDaF?GO-}vPK_l{@Q zVJ9{w1opXR&(K^KhXhFJ!6C0PD%>Eo=6N-54&^vFISnUF5Yh1PY%UexfK2tjFCb-o zEO*#8`7^BYGfmtbAfF7pAhD5a=VIdgpxg>)T>63pT|KV^c;NCIxUteD_nS13V(s9< z0#Cn5zl*NHoByo^WBpAXCBt3tGkv&9+*2JZrvG)i;cWMWAPUtWtcqjK3@C#4d+QO9 zBEI88=q_XuTIqX_rkYAwGq;+&ZF$s*oS3-Na}X&({!DP5m~zrH zxHYB9jgD@3_dB@Uz>J1j*bRXHjsYEwO9Cwy2ii@{FsQ@^5TMe8;BkBGLZRwfYOwrB^vltcB0_S>@ zyXmG-O^g@sBhys9&ugCoar*?K6F>STmw#pk3svy@mW35JoUHSOmhIlu@Rz@uxdrr@Dh?cX?Wl>o>vO8zdEy2Q=JTFmf^k(txr zS7s4X=RO??<#Z}7bsAfdU!D5Q<6T@N-dFu90+-iHy@-3M6w=+6T}+ddzuqU1{_Z%f z<2C#cvH;N0zU%&gy7N=u1TQ7{QE5i~9SFPL@udJ5;l?61LdF3RBSUKZ0}!Hm&P^DA?6OE%AuLQ3j4&C)a#VhPKn&>*)n%tO3};ah=Czu6^KHEZ zj@a1N$Kehxb?%x0UpslkdGuE|?i1!tX4V}eKEku5GylXm|Gm&0|7&vFTcP)#IBJTm zEjQcYb^F=I6pVP2q9hnVlHWGWo&-#!slxUwLZ(=2i8pj(Svdvh$z5Z zpe_RsV=SP}#+p@MHy6c;#5Kz-sk;~3@l=A8g6CP}-vIfgf$+Dld7Fws?u}r)#rfv)u(s#E6#@z4VO15HBs)vyU5%tnL|}H zFtuMtzPNgLT>rRx6T$`$)Xe`B|G?Wnpc!{hV_+HjBV>BfVTb(71D|*SX%|TBfxobq z`5TZUx!AwF?R!3zEQoa~&#D}+2>EF?3P|uUc)mKyH`9jZ$4jFo1ywytaD0E9E~^vr zA_+?K=dR*97PS`bN1=~sRUHta2}xy(O7BkKB=S&kdQ6qMia-_7GDMbJ;eUB3bAD}R zvN`U7+etSreUY_u#M>YhytcfmoLy36EGEei{EMmEqlwqxeMtsos)KXQVFD{J+#eqV zKw%ogJt+{*Elai58-PzF=qsWoE;#9IBi2_oVqQ{u3{OVK7G$B^0w;~Du`X;dLVLHa zCwV`ot`xe_7|{N8s_f(+@k?#7q6@(Ti#xLO=*eV-blq2)M=PUe2;t@9;^h8n7rWR1 z2T?$DJGvq|k~!`I#$S7Ae*%0HO6DhHZR&Tk(;?ZCNjx8aMCg!3yk+@kXiH`!z+dES zl10|s2IthZ(DzlK!{;AV_j6j{0B@90I%Guj+L8Ppy6X!IS2p(2jKtJP><6-dNk+{NV&Wlkke2#ew@CVIo7lx@oh&+4Y5-eE>!6p zLq*shI6!hntGHvD#?IN;Due>M$i+x|QzV9!*(zUba6kTh;V?C=Sm9PeJD%sIIKI_2 zFFBag(_Cff%S>z~s)|hO-Vx@f1`)80n=_qp3Fsmy6Bl%^NznU8&paz=l;|ssX?!R=!|k=wkpI1LEqdK426TSfD|V z_$8*&gW(Ix$;<q|Y<$*Uefy%=T+^FH3XlWPl_aQF?geT` zr{nMLo1E9gJi&ePC%H7oBC^j~xlKh%?E!)aFKe36fyh49DfN8DpxHk$AoTBU3O;nk z<|? zq@r{0FM*Bq&2tl)t$)k{>%Ytb3Gx>wCt9yA9-bCoFp%f_y>3^0$^2mt4z{>AhFS@@ zt$U?ke(RJkmvXO?nq*;G%gf2zuXUg^J~%b%eQ35U`xs!@9n>{61Z6BmBeQI?QbiOI zk(^<96oA>uk}M=y1ilb5COdSp^=|geP#g_yEeg1+{%F|)Eiw}24L>zRs|W19)xqJR z{m~u#x-tgjqgP<%20HPK^li(vqP2C}+N$VQ>X2lbov``%D zdU`0gc5$<+iZDcdA@-*7QG<|)$Xf_Yf4eDK+1*(2sj5z$JtCHan(jTN4rrclD&l>a z+1Lo}D_PyW5)%^O?Mb9<^n^Zt{)~=?9#k*@7gATM-*Q4PHJGnN!G8HDZ-Utuh2zRE z`!$WvNh-O0B3tU9au%^mL{w-@Nhwm5y6Ykgfspr$ju93Swr>nYQ0LTCx5(k8`f*bA zjORu$Qhb|ua1>#8rnodZHg+hGZ_`h8oaL)u`oGc_$=1*S$9LtobZq zMS1wF7btZbi;D1@olmE}Z?C#on*di1+>r19cP2qLH1HS?M2k+kbar-Lg=-#%zKB8c zoqI4|Bmc=|2^1&jT{Ymq$^kh(S;AQN{Oqt4mXKWdnv;{k@!5D!)O=V5IuKRN zzE2Kh+75Ev$_!tJt6O$9@=IFtrVXL%u;Iw}5AanG@CG|)H&#~4_f^y?i3dgWMGqwcy2D-SOsgq=u0T** zCEkP5Zt}Nz6`oIhW8JS+T3go*yq}k0;vz~O$C^ zlu)KST%R4g1|Ru?UELiH2)r7PEV*fCdOsdJrf1+`w#Fo&k-HwkH-5=$D!3fE@)Qz0 zOF{|;i+prLkHj`vZy?RHG?iOVXRp+KGbm1B)~zTL$EZhA&g<{THX>Z1%R|{*7cKHW znjc2e9gwDQrv@T(=}{WULw|f3m~CRL0{M(4w4r}f--p(Fygj_Tu2<*dF4yzqC3Zj4 zql-)Zfo;>>$25RZH3|so4SGT{L&6WkF==9{JTx?LTOL;WV+-UKJGu3rV4og(WslQc zFLDv-HYUsMQS^>bKJytz7r;y zxDnbe7+}5Vvc4{zG3`N(L;QFs*l@DYYke?VvJA)iwXs6clEY$yr{%2NY;EVDs5Dkc z(s#wuwxzgV!3K>iWLd&K^+$|yi=Nk$_2bp0?H9~ekH)q$*9v3f%XBwVB%jl{I`+zPMd$gcj&Evo15U-f9!%we-3>*sf4 z(m~vcCmw4mNAn)fj!!JYFEVJFH;D_mIjOyzv&-bmmM{0lzgS{h1a zc0i4PG~nF$tk06AZjiFjYxF-I1?2z9ieeB%?W})dIWP3*HOG{*|JenAfB2eAmk$MA zYoGq$Ghevz*i`M9og;f8mb^+V~RB&$rnvtQvn{Q~yBKb{0E63oLi} zP1Z5gxY)nz1AhM?=s){iqQLuIFib;)fHZ!^0r~xR;{Z+-P|%At*fJ&gjwQ!03`CE+2lJj~g^X0Lfk?j_IbW3N`(q<%p#OLkgwcY(@Cm=@E19 z^YIK)>WE+ldN;K%Eu*=aG(Qpou7pF(N(jRAa9o#84nO5M)1QLZ=Rb)LAQb||ZVKgh z^a~v%hIgpLGJ6h7U4%Mrg&(s#@>@nK|mUkC{Z+&Ppa!2gfpw&Trz>^hCruLP{` zfEa>%&owP8*3|vlqM&FOF)%@8x+VEujR}uv zHzQzUZDtmjAy8w9`hGOEsvDF*K5{xRd?G>?MCPJ{usi;0FeQ1~!7c*6Q`$RS)Q}hT zgpimCZg=Am?PxPAdOnK)Y{~{ie@xjIY|2hM0oefcJO|@jlm#g(lSmP=kN^2c=yI$U ziN}NZ*#RaQC)4xO%lLa6*QmwVw)sAHX!k}}inR-Gd6XIs?)3q#sfXj4%lGpXi-@p$ zcd&?fyAtcEhk>ZFADlU^BEdf&x0@)x+x939*D5TNvkB= zM=7Tx9J)k#Etn*6;yS^KO?Y;&z28qte?dgyW^Ef#ORru!-uSO$AYi`N&OB;vP6|W3}v@o%;gpjadQw zBm2g6k?8htA)Hl*&5Zi->G5oL;o3cmMTODzQgK$cuJpCh0t(;Hf?6M?#qu9XEG#Vg ziJgkt-kZp?8*Lt^<2cAb*THN;=89bpjfN$Tc5aeozzLNX;dWt#u+ z9GvUAS$g@Bf{84Vmt}rD#!29KvoRv>-HIz;)~Z@m&GFS3vI!`dU#)t*RNDyH6SqBX z7(>It?jN{{gR$2i%S#nGbSi6M1n*fH}xN+aTz6v3VAhpJAzO5BirFr~1gF4e81>z#AxLc7y1`JE>3 zB}$hH>2>z-Oh_oFo=;lA-hhIR(ocwe82;9~esnL=3tZ*-9KZu~h|yax9a5B`2LsLq zkdU0Yy#qp|pK>q*9Iw@}>CZIrm~W~M1Myy5b@_5?atk2>g#|%K{dd}TI z1&ThgS3R;+g#H7933<34tBc5RMO<^cRwEOn6bYA14 zcywi~yjCi>0AMj^l1=Izng1CWgKf`ft@kjxCo(rkxPMq3_jx$+mQa4YTAVy3H8s$F z>gN-97{hh)8ch;}8hg34C@dM-Q&&-eS5`(94Vfm0621YA-UJbxb^yF<)5SgK(E2ej zo)B_PP-k%5bWO|5ENQ5MPV99DA*)HnWj^8}^1|c!wC$bKh6LZk=dWT3h$02i9*|KF zDIym6!jox59#2xna?JXkKMRf--PG5wdcH0zV=gEy?S?`X%Ikj$IxO#my0w4~PZ&)i z6Ou2}{l-wPN!v?4T3FUXw?1tC= zqL&Y8!M$=Ltk`B8Q#|Zu!{MBsnYr_*F+9iPoJHkF<3&A*A&u3QCVo2^#BvY(=EA43 zhlB8_w|1bN*CJ_9zy=yH2Lim_%7L!=H1ra{dJHoxG7_*YisYlw78c_KIPUYrX9V5n z^(pO7ec)@f82_~1Aw?p?g2n6wE!M>CpZPHC`o_*qbfc09CL^VYP-vU)y#{tR*8`E7 zsdYMU19UgTg$>6H+(Qn-)S`f`t>koWb|4yIj0YRZp@wN)ePeoSeFh@V5}#&~ynZ7I z6Kv#xpoVL_G)?o!sFmp2C zWoK63IKV4&fX;sb1B>`fr|tl618nVfoyS^WBWY_lIqMGB2(g!%q)?cKprwu4LZOe( zY>)ODA?wEr4*u;|2vxD~*J_<~9UYx#;daIDyCyK%lTmy&vwLxj_eTnsM1In)gyr(WCM%2 zDbl-klpqwy3uLT`&HuCnDuf^!LHkMhB>jHB9nKaGPuKc0ILXOW-clmeN{~glVgu7) z6B`7Me&nS-Wwi!-*{Ca65-#1jTxoQmII~xn{E3LKdM|=c+e200lkLaS75mj^S13Qo zYe-1ENqD}hb!^|d*S=;e2=x<|mJWW=g0!5q?Ry|GhyHA|Eu7(nVbsSXj<;9#(GxFE zIVJ3?7&SYKva&8osVy@l$kLi6K~hD_MvpjwML)u}?LoziJZ!$s>QR@z9w)>JCwm5x z&kaV{ehs+ubh!D7K23RJB(l_UZEGt>gN9|G-PY*oMesH!+Qc?t^b0w3(DozE3x#{t zJ*rGEC9S-qgpl2gW%^e*9;zhF#bHGKN`FErzoYuc^Ss>idYtjlmlS5^iB%ns>+M}u z>jTQ=AOA7&hPVF#RLg-{lfVERFf!mTqN0n9vX#48L7HP}ZkA9p`bIy(OMuhVcgtD) z*&^P?wc8x-Ib2U%Toxua7WGXn>lH|Yg&!%U3i^94Z^78ZT=d{ey$i8VjQaKSiwSir zP4nQ*Xw?wvxDdE7a>;|Ps*0hT<)ge? zp}3dd%PH)<4(xG?T-K%+ynKzf@g6^SQRXj)cvmmwlM~b$B;;^frQH{~2NQ%N^v7$j zS|})+Nj03?jG!G|B5YeZ+ex)ozVvqLt#S+3NWl<$3GDNz3L5YKIt_KItgn-83J>4D z_n7IOWP39G<%hxh$t|!XwSVv->A4J#1e&zM3|fa@!_sbZuGOP2KA-dz1l+e^5nJiz zbE#XFOE`~N8W%CIQAs9iyjPy_^|LsBIrr3489>Fxogqy>f?QdGKAS|ub$ zT4DfEK)M-W7?5U2VF>B-4A%R-@43#ozJFZ6%(M5(d);g8{V3@1?$-ZkU9_%S4cp?S z%is3WE_Ci*y54=-j+i`+=wcNwIitJAbRozRXA+m38#rk}gDsXP9oVvSZFy}aK0!^C zV=OHDWZp+J#=LBxd-sC%<)Rj)7iu&mfohw&CHZfJh|KEtF1s#L7x?Ux-O4$d=O~M< zh3(2fK_@eN@^b<8OV3JMgWrBDu=pa26bQw4>B4Bv^m@}0p+ldZUJd3lYM zxV7CS&|Q^4%T-`JS8{<>vwXZ27wuT#>0W0iGjK68e|LYs+thQKBj$AOj$x&>6jxX zTz(dn_4N48cBb=z1;HX|$ORmXB}g-g2IXX~wj*&VaKN3^@fU$#ne*e1xL0>JM=6L= z49VkNVt*SJ`OeKrv#!zejI6O73_H}f4LFQZ>dml~1-Fury~t=K2-s0<9LCo1mfOoA0^3OfH-Y`B;_tY79>~-eWXJZs+(IbZ z@~>%nq60;mWf$qe&-I(u3#S$L4+A0(4GHt_1!b%xY57kC_|UJfq7qXWnz?tyCEFx> zc)1d~>Nq8~Ozw(%h8q`%;!9t^ekI#d4Iv${>VsIZ+NzivLlPP%s+7m7*WwTR#snD% zOc^tuG+mGbyX)wc~C@Zr6(!yd{xi8(fVb1@vS)XCQV{Cn9GvN6Zzvg6OX+h3crsx%Ka zYMa?R7(KyU42=YY%M52rW~_8qJHq9eNktDoc*RZ05>K%a?MAsw;aCtyKDC%O)R3km zr;65ikwURkRltCEba=S1C%&<@E%p7>v%74p2i~6q7HWh*37ie9dE}2m0LSHl7h; zi#73+1YW?&4{1@W^w`_UiFNYviJd5Aczo4P0#5h!-Rs>jvxogJ1K8G{zVoW-5!*B> zgdC8LgBrLWy|N5rTR;P^hAmLCU%xyw4Ysd%OfZaoNF4vhoAROOu-N#XxoIoEg_4PD z-%Px=0}dEUgN4kTLrWK|XPq^jdjIEmo_Z6q%U)e>I z*tT0L#TN?Qqi&7%hb{N44VkcHaHd?0@+vFgvtcgEy^66XYW0?CH~05WbPXbNW>OcQ zU%(j(l+K0f*GR5Ia#!D#Dg`sBt5U|mW-GM>8z$^aHj>rDcih!fKUMJy;k0^dxo_<^ z)_|S1kEa6!gx2%#bK=TVJP@pH4PDxc*SITAT%Z@0Y{gzz&a=qJj%%n!l7Wj8CGt=J~8J{qnBEa!Co-rs(coZvX1&2rGK2ceH~5 zND??C8oY+ijo%#0)BH~>8NUSKt??FQoL)k$?VQCP2XC5jC^Yv;z3#o%E5Rsc!|K|A z(4fWQf)6%XejtFywKaqt%6sqCjecU#jzfG3s6!l=UH0|{%*pTUF#8KM;3&jE^6=Qu zCToQtU9ZgKMoPfI!%D{?>$${5X--RJjEVQwdOlj@8C1+NN*5n@*XU zno3=gJlV`IEBhFF8@hK0bA>Jp4Gd5nInTH&(DO(&o*ILuE*G1{?>C(h0@*3Uf1=ZM zTj@0Hto(CJ@1qcUt_3SA$Z;lpRG`zxXWrWgvok39^{3lD7o;>XW<(Mwt%ZGG93Ith z`L^90%|&>n%X;I0p53~spPr+6rdeTu@ft`uloRlupe?d@s}2b%G@f53@@Z`Orcn6z zg5bR323L!X*5uO|eiZG9uwPGF;E|B)Qu`6;;Jb3w7UjT5c29EMcdN)E*S6y=|G-|# z9m#Yvmqc>CY);c^-tIkxwDui`H?0w70jcxJ^UBD2G4F5DTZ}5+d*XX>JAfWJ2vPg6&}g}`%HDfzPRWdj>y`20d^F6C6F>r<|Jxeik>fST9Kq#Url~#e6O5i z^t(zp*-fd{%Eb#*XU;Uxdw$vA8j)PD7>-)Vi?+(#A^aulUPO0^zz>Kvd#$`3CNJ^< zv(+BZhUW3I{d&B1PEym=YHylN0Z6x?CAEdozAPCaIwht78)5wt$BA33X`Y=vZliZ^ zpz-ORTo;^va$Q(x%?_1J%kVYUJ2)es6opFYULx<__HL_yPtMw|;P%Qe3E<-t_?edraqto3V+MvU99-%nBELn@a3x^0GxHP91adZf+C%bFuqq$BiL9kz946vIXj%U~pG* zDI)j7hc8Eo$%$TBLlYAdd9b&#^W0Wx9@d4M# zrf_k=#K$P%!jh8Eq~>p}wH& zw70e0ZSs^qJmI{(m%4%a5sWQ%(iE_dFiRme-O6^E?Wi^JYBJd^jOo~Yf&VkTT)^%m zz*#pD+2DD{l%w1iONTKa5BuSG)8`z z*f*Gb&HYV@_X-0_U5kAjl2JL&^s07;$#%lG;R;wPrNp3h=b0gg;>We&ytj*Nh2B+c zk6x9t^4vSp=;Y>(t>1kh?RoSA7hGWSA%)8T#9p1AmWOUfv=1dEayHC2pUPHLd;&H5 z*wL_R8S+fmp_39#yK7$$ zW-BYuZ8o`1>k))jd&ivo zlsp`~Ji;NdG`&f^AXW-p<-A58B|C5^2orO@@L`uBBLaCofp|W3s$iGGklPQ@YTlz> z`3Osi5mNq;macGb*R3v=Ml2!sovyRVhI?+8M2J{kX=ib8Mw+X=aPuK#!vcJo3X@XC zsQ$u!vZuJJDKPZ4gJlJtl7-UhPC?;=a*`5! zRDlaVL%*e+Z#TQTyEPlZ6U!-;@7G02A?kN1U=|vNUoB9%<> zZ63E}Q1yD{`=_gM*~iNb z<@ea@37Tx^JKU##RBTmv26il-`5iXT{_y*@z5nHC3ath$lJv77yODDQpHruKgwp-= z65Q3<(Jj*KUz)-|t~k+J7OFKowVOrU?ov6;-K!0a-SpYVvzS^HT<=5pbE22}6C~*a z0B%S=?6!n1RuSzr?+h@y?stJ;9{LAi)!(q5ybowwkpjCx%-AZ5bPzUKC7V`1p`B-} zJr)xy8g*Q$khNM3Z*VKEk~luebxg_naf5(T?@I*lF}Lk2OX?LrHQ0bq$yu1Cd^@`l zSBaSHHfK!Am@2R0dcs_QLPVdK&UP1J?rF78-C0dRV66P z%Io$0=7SeNe?Xqcy92WS!EGf^1(r1a^z33l9Ir2mQ<$cqX?<3tn**?Mki^ZBGzTnG z)m}9g%R`L}4W%}d2uf~}-IB#i`aOFw0rz;af6Ut;9SY0J;widQy3o9h21Vj;P0>f701IoJML)#UKr9;hy5-(O68PJ~-EC9rQ#bZ~do z3}ytJ>dKWfEU)?oiMC?>FnFivhr?hiE@%S)M`0ubg|#1nn%>5MR|+y3(3L(7&H`*U z-0n^E%uMqn*;11F8D#iuV=`y@21P>srWv~QtLo-H__z}XY_wz}6;Qp!E?PyP)s_`- z{E0WOs!FaBfSEr_gGgznCrkA%p7(J9R)VDS878my;=H+dF&Kohvosz4iUS&++;tI> zYR=V~f^E8h=rirlnCbhc(yE%e(9P^8+z%XntPBHnZMT8Tca)Y6zj7KpV3-`Gs>k)n zXK+%4>LVg#)13UAW_(yw>tZm^y&Onddc&xSI&3-9W85%&EZ`GtA}+`9EW zyWbV%NYAvr2!83VbFyj6bH$U%x)a98P8_@+BNkm z3i5*wFkN0ZL@n{OiN~QWM<=|=wc1!GE!}v&^a0)2*AcpurZfNI`S!D;u$1fMda5;n zYP85k?_!hFk1<56`X(Hz^DnbOydiYHIVmO0{Y_{jW7np06Sn~uPua6~&VJ}-t7*Tz z=sc;j)`;z)b}byOhUm%woHxz*Z&!qlj4{vqKY;v>n7UCq@Tj7ljYZZ4{Jy zI8EI=6^h)QWscl_WLUZGT?>$XwA$>Hn5C-DTH3r4&!~*Z59qc}?`XPSy{WmB?t_r_78*fmhF@kgX!DN0SxVFVS?ch_M1c6jbbubc*FY>5H-r#mL1^UraI zMh7_>%8o|g9mN&lrhrbeK9rUI z&2}U^yZX?N`%l*4)SYY@nVbuw?T8H0K8lq7&M$ZP0Zs?lzREfGlDD1y#+iibVo+4O z-`3*TB~4AFF#1L=UQm1^_Ccy>wYF@4rF4`3YBy?d>(+)<@&Vj#oNms_DT}o4mA!7E zGoPx9$djws0?C05fp18jxu^oblpLQV)gRl`6zMv93mUWfh4JiZ0+(rpL6+}|ZQW7U z(flbML-<0mel>=qyA~xk_gUsPRl|I#a~yiwD;j_!9bJfY_f?TEwaw^@-iNPVYft%Z znt0M~n%odw-F2o(y1Q1S?q@RP`r4^w`_oeM)6#eN123hf0~&M^Qy_y)P5z>L&jlQk z-!Y-a(&t2k94D&`{XIVM&Ne8Wx6Lp?)FM28j8u8LmDPRo(XIkGy*}rQZgWC*{cTVWy%%hCflTwFdVC%&>0|>%lzBrhw zU%#s=K3t4`yS7f7%*c$_zjrn^=ryg+I@HKLlVIrG#(&fcS3;(RSV53`&#fLjlvsYQ zoZIkLsowM0JohmH`r&oZZBcnnD|mBuat)CrL3bpZ%M1!n$=|A6(18!T-dH4NVeq+? zK7$DxRNSrn;OJ|hL){)FL3gh9>}tK%_8hT2^H7aBKD0)q@ z* z%X<@=I489M^?m@E$eXEAx9a&y_2nt{LV>@D>te|^zi`u!&?-UJQ$+iB4sEHtca}Az zecW3TeGBuC_VZ6^--ZC_KmXd(br25t)nPI+p?q9Tl5ub*Q?v4AF0X{uK`jk?mYSi3h zm}KAfy~QcTMcKTd8lRBB4THgeqv^L79;D{G(CYZ^PrQtZ zPf6k6Oy=Ev{#2NEym~mpT3_Fo7Z>+{-(D~8`KK96`2s=H4lQG24pSsjOHXgb`=qOn zfyTa~5A5Ob(9smOjE=a@6FWQm#!`N6D9Oe`I{_$F6|Jn~Gl26AQE5#h$`OW*1{GfA z^GoXe_b=SXLPDJmU#(Tz<<)xIDX2yzl2bxTW-ryGD+1V8k_f;hM|<@A0aGTMM^))| zjcWj^ep?8+-Cb2v^J-Hg^Ld2~Lw|TUA$odfqb>9m|7oG6s_{=V3<_fvhMvbxdue;%wDmIa+ti9sGGjh z!7av=sIw+nBe98&$+xm<^*R$#ccGqeA`AZ-@D_xv!MuFUYexxHf?`CYKjK}_vc>^d zhUd9h1RtZ4RX?uX>7d*+<>AO`ZiP5?!~NL?vzqR};~ooWNy!@jv-%)%326(iD~oFZ@9DsU4UGyut7FRDX6+k9eq8IC9zF!*4BPCtCg4(& zHLtB<4t~2^sP%!n#{K*d+>$3{4r8q@W9@V2g5x9o*))Q3XmOFE8}vXzKco35YC|B2V(w*&&NYl3 zBLCW9NJ~oDLD4a)32#m;mjTfywP|8l^(2T(aQ3}u`( zlu&t+x{Kq+jVMVW``q2Q`KcMgJyBD_eNox5<0A%?NXSVfo8{8=FIXKWHyw9ZbD=YE z3-1w5f+fAq#UsXqrm;Ix_tt`56foR8s8r5%Ngy3KaT$JpT+ZHOYQkL5?C!i- z&MgHqek0^=QOcaxwFEU_a+~%}hI3F{e7Ws9?`*#^KS){NX~Nl4Ki!4PR?+2^!FlV8 z(k*N7B}~bq!i0%4ARx|&lQm&Q0*$*=B^9`I5xO=4eC6PU)q}gWBWU3iGlR5f*_?ii zxcHNQV#u%Xo))IqRB1o`1_y`Y6e4c-sn#4HNfs5}pyFr={fgc~GMXj`ym)9(@^o0F zz*Fw6v!p|#3s>3gMBK{DRx>5ohJwW!+pfOX-$Gx+1IxE0!>GCRA8MBN^o;R6J7nzS zu0;whs-2w797)8uTKLD}X{BAju21xr1YiBFLRqox#2_@g)xt+tbXX#S-zRPHsrlMdpSVah~4mkrfpJ* z#15D3)NY9!fUj)JecL$L$a#|C8(t=t*joUeS^H{iYmt`i#N^HWsm42owF;RakS>$6 z7u+9o(A#{}aHX-rf22R(?qi;QGsjqU&}pcH)7oC+K-;x~W$PfrBkjQqpNwLj-t;$m zwixwYz_~{Hbls%a6X@iIg~naN;H(pZD^wkqn_@Q%3j-GNs%QpgHtS_>ryORrrk}cI z?!X-ti%*Bg%SrJm`jZWpOjjkzqjtJ4pZz%bdOLM-XvGR(UH~dbuHt*ey+VhX^LwbC)zN|LBuhzKiFi%FVk7hmEqCZMyn`RL+! z6U=%fv*8p1bgrWB*^MmRN@c(y8OZB^yh-`#cUbr;#DDvf!)X5}6c{_!A@S;^lPJt4 z;;tSV7!{^ajc$lySt^Sapgd}Yj&+=>`v^-VRrQ6tHQhYPRIS(>wTVwwO4f7|4&+8| z;@D1{zQ0l>6<=a7v=g3`EfAm+{l&iaUP@Ju0smq)(A*i#8*0qc+&K6I5O6Q#MYk7; z8Ry*}p<(@BTC~ZA`^zJ3-*odF&$GpwYJJm1!1DB5DRnz*H@xJ1j@lRfo~j?}8phk> zxV2U6KhrXF7`ynhCXJ=R^d=$mKyOlej(+em2FE5S<+vYRFEl=@5Ong=O%o|-qFNv6 z50GsYtz)(hutzeMrK$*yWHRGen|>D}ph$$kG_f)XQCgzpDZO#C;oe$CqUwao)_Jb_ zDBAOCf$E%xi-zLhFp;plFRs)b6N0DVwgO%FF%sn^YgYo_Z!OxE9{0=PUp5(#%+S#) zb*Er$lcVD_qBgcR*VW!;8U;rQ!gHP1{% zg5{Y6Jr#YMu|6%KMwhlnuHQ;&XSR*QbX_uEys+~)e5JRqGt5T0trn{*%J$YL(zxmADL%Ztqzn)>w}e{j8e1z8 zR~R$T+n+&kK#|3ZT_0x{cR7e!IY)eGDGViCD-4`OyFNZTC}Cl!ve&|k*uQJ2qlFT3 z+t(JKKZrv0*4J~XC+ksm#*5xgdm6J_)X_DXfZ`xLRpg6gPw7i+WN!THAQDZr3;5b9+GVAJV{2S~5<}7_;jdQpe5p>h@D|n+x=Wk#+u_c?wBV zo1gvio;baza26L*~x#RZwV%f*(bM}6pqyL?RX zNo+ANE#3gXCXd$oOskb0$=;+?`!Mo(*TBW+AM=>c{Z1O_wO0FJ5+OlL;WZ$pNT-o3 zJJ}{5-oKFJj9Tyf7o8yTJ(oJnq%tq_;RbI)py$b`~8Y?Yz@>LvYyWenqk)Je3A z6I9BGgmmAzJZDtKWAv>=ibbPGWB9+~BExxHTm#%@c#eKZ`CLD$InW0C0ZwFbmQ8)x zVtc0(|D%(m49_?&v10>X=*c)D*M2>ipgS(r5XW_KonwI`V1!o3*|VX$)tU^QYsd*W1FJ6D-Nd0ATihU#HT8;9$ky>i5N-@q(Shxo_09%k;GZfwZ)=9^9&bMhokj$4768-&*r zpXIqNhB)lcrf#s8*`xsu0#%lm;GCUpY>+hM^J0}xDM>c5%5a1NQk z*zF1Kur0*`5Q-);q<+s-C}Aqs@!K-7uhzrG1IR7f&C_Rc6T{uqLG*a=a?&qdoXO+P zO?{9j=1jNy&rWJBip}ZrE{EUF_0ka3Hxh-9Sci|ik0nWk~F;f5}-V~Oa>FfCx1 z$BFSjAn~8B0jMFD(Y;06uZ81HF*6Xs3*xR}U-|nZ) z_3RcE;c70NCK2faXYy#{;PN$y7xr zK5ES8S^Z*ZI(uoIhDS}to>?$+ks@?t+IJzhTE4ANA!l}y_n`+$0&2l42@^sP$cQC+X_kGoo8TMnV;NRr}Eo$5=Bq!(3SY+k8_kI@d?-0)+r2{D^2~+ z_PIMRtII_1-qg2x?mF7uU{bxsqpumcic*qRO(Ib=#&q$nGXG|O|0MQbx8;h2$kX`PxdwI!#jfWFD2h`cgie@P# zenNF$cu=3%=VB9hl4|m~hxCt{StyiKQ+`cT)~Ank*5IvPOQyD;owNW(C1$v65s$9s z9rxN>_(?oEU{Nz>J)+a&juKiQIvh?XOIE7=OgHD}6tpF?^pXQE)Rmo0&trMzMTKP^ zY0tXQG-YoRWx3k2>l_0nSFn=+iJm?NsF8c0i}X-owxvQJv}Y?*8|%>o=-PVVy@KV8QO_y$4}euc#=7 z+;jb6tCeMZGcNjpZR0AMWlZ#Fb~Vp&6y>ZWr|)hOUJP!6C8K2VOH&zW1KeQjPV=o_#$ zN9Qz$G|^S zBzYp4;b8oth1ptnKatWSP!0Jjb=yZZiK+6?_*S}GLhy=KlR|zO(d$k8v#YI4Onls! z5!rQVpe-o&aYWm$vO;E7jnCcfwG%;SSJ!q{#Dllx#f3_X{prOqz{JYGopAWUFDI0D zG_m;RBkXjOJbV>e?YV1M9mEnBD%Xqk=qt=6HT2vJ2XQ8jd?fB5_x7yErv_OO2ptVd zdVz%242gr!uWfw#cO4)gBgT`?P_(>9guPDu1FudeTIS4Q5Ed|9Y!k|~E-L}a?OdhRs-s&9;Y)0Z-1Bh|)IsIeea zUrG~=+Dv~>CfR{R;ZT(Dk?q&6`z59fPY!ZQHG2A$ByvV_b`c*j*Bv_yYTr=4>?-j( z19TZZ8{pD$``bC4gF}L^cJR!_5gQAM6PQnU9x?s_22-#9o&&>Q&R^L534tQn2CT-Q zBeF=3T`iHD?^Z=-SCKEQtW8nt!K)AHd8artixVy*TJzlUwkLTzUlur}jP*q$btSo) zt6YP)q`s2_)iWjalK`;6>BhBf&gl5o6}LRcZoBbaFT_T8%pYfMHXo$hh zG)J!!!)Ofa)$`~Arucd7heuz{%rGUUuq@cnbLWMW?zB^^ZzO5lD_H07Im^Y&7Ninj zwAitVDWY0M0`Hs?Z4B5j`t_`k`s;JA%WTm;b9qkaPMrG{OJNI+|26S8y2m3~3BfB?6Ok0bg%N;yEpYtl~jdq#9;eUetod){8n-GK+0Y8@dxj+=4q8~ zJXXs_&KJE3lH4dE2etGXThQdYXrW$C0Rv%)RAHUIn+chX36y2qsh&G>mdd6f=z0)cdYfB*4J(_PG-~{ORrg0g*q0@lf1(DeSf)`R3!%x)S(3`UC-JlR~Thvj^+Ttq!EpAix#y!15i>JLMImm&rykU7vNkt39|H_@albC1}*b<7#io{@+H_T+`u6Q2Z z07$M$^M|T9|Hr?Dk)pzHUub9AQ)}+!53w32BUtx(JNV9qceOH&F-(rtPL3FuRIQf( zfLS}>N9}Ss)5nNef|UsxD|>~vq$5J%;cHVB+lq#|GiOIbPxmR=CO|1wQ?0T*u^FOA zU(!Y`_8AJ2`po=Ob$BP#Y2bbetP}B7nU>TqbPJUI7YK%`_6%*k9zB+`)m12otypl& zMFO2xi)Ru8x_!42-FOgi+V;ilX^x8syLh5oY(t|BCL1{#JONvDon|JP*G}G$om)q2 z{dvKJ0$fCUA2uj}k^U>SoPtvMv>Jz4c9wUmPPXx~)2IH+^(Ija;l1nGAR2XsLu1F1q<{F zOrYy?;R36-lH7frUXe5HOJk8p#8fCzq<}y{k;(RTUFE6Sx-0{pf(mek(DvQ)GNVTj zGg4uJp-~0a5iMTlQ_=T=HhR^S`fHXNFIq5{R`U-?-PyBTiSf1G=5&LsKZU${j2LOg#E^I!sQA#8P_cZ;yV_-@x1{) zYL~Jm1wPJrwdeJ}><(uwD3Wn4>SlvC=%w1%J$J3_Fc#{^Ks=yVkLdx0w*uY!zVEzv zpD?3fv9mZM8&NdIwbNc^F;%Z(K>1mY4gXxI4!_ag*|%6{U^LJSzwGx?92bEPJ5-$LN+Sol%L;UvSS zMex(?FJQ{hl}TWl4(Gxz;Gsy3O*)qZYj!Un9i`@VS4EuIqoWg1X6zoUCS}Z`bGl`Z zgFJhAG67<|Qo!Y1B*D4A3?-iTij;>_6l*bl_%puiocEP`0o(A{C`tm(5}*mf#6OOx zQeR{@L+{i*5u|BYaRXxY;ALQD^dE=^^CO?*IsK&%5g{j3x|^|1KpYvgI{qPT@sj=K zN~PUJ1!mIzOYIx(w_J$NAE&J*eRhv_J)z|3MyRR+i{BkhQ)l&p9S={%>^dF{-YEtu z78-x?S#&3Vce3e?*K1nd>&XQP6x42qCBZ;tIqEwXRMzX2199)^=YV|MiP%rBQ+{ZP zSfN2R?>1SsJx0yM%MheoSE@O9{*bVz`fElBaQ&z0aE0<^HcoLm&i-F>KIURT)ljzg z3Gh0#rS#X1KaJ%!HmO^xN>#V-&IFRV{6oHbb?VM_>gCmpqK#a6aYNA;*KTtqXaxCp z!PGwtn4ncnpzNx1Ka0me=^{)t_Y9~s-6RT`JBu#1hY729jKLABM0dKWhU*#AeoGwV z;2&|GX*ZdhggD`XZ?NPHlkk&0%#>r!K|lR|@!vw$O8rI9hfjRKU)K5|KP2>XwdB~y zOrrP{Gp<4Z%Gd9qx|e!{hM;ggH^4g-Qx1N>pRoE@J~{|j_X%K`dU~WxHdbqh#~l~$ zcb$qD?AU%0ILExK<~!$V*jOZEHzow!vrkOzl0n)^eaA!**M&{qzYzcf!6t)JSFZorcVs4}i=~eDzajjj%^Pui z8dlh9&G+6FQBy4oFpIm{1>_=q#n=j-ByD|}U{SSSiQ0 z)!P8~?N0}dgf3n8VOXxGnON8`gQl!y#9A)B#Dgw^=B7H-yE{ie)G;<5ZhaKoG;H?0 zuNnQkQnnopl5^djRi|SZ{dVhT_##n!gh_TtFp%tS9nUV)oXaeiH3$G-q!U8a>K=~m zdqNDh%qQ(7qxMiyhx`D((teZOxdLx*8WGT}Zs5|w?kcQPr2lC5iGQ=mVu?mgC~19R zC^u)x{$g6Gi(6_$e#jau--bAuwg=sH*#BInodxC%S|wOWq3U;`xYot3qErSZ{3%L4 z!=KW%)XWE+iyPyyu{SUnm|pAugMl}mh2II?0+{xu%+r66)=fYqA~S+|HcsI z9mpjP(DE1p$y;||{r1MM$PjxU1C~M-0I(#mEH6O*=c&I;pX$Lm+eP$A_9w%39)JRs zG5qe%&-jzTB~W?A>V@F#*H6EGR(+O5=rHR8?U%<>Cmbt&30!#OrSE_Kp`YgX>&N_v za}TlG1kOcW8`JhD9Z-dHzA^pz^cFts6UmeK%#Z;`Dk|Wx>vxHD=Ber$zCX zZU6b+pvW8N%r*aFH9yIpE%1qA1m}3;f5Wr=gtot)30Q_8;5fX~#DBi?msq}7{v7B} zm=?4M{g^}em>t)>?b>na!%hm&%>Bs z2f3V&eiQ+!^2IVuelBx^o9XpagNlkCo#DyVvHKJQL{wO&P**A?f-0%rpp; zzJ9Hp{lp-ZvP&kzkrQW#|Ul^INZ5NxE!h1M_0qRE$3EWH?YRIBYgd;T(7lEf|dFV zeCckO8F2RVmlA%<2gnS+4xzk**|UNdTc|AdXd2)|hmjMow8H(dy|%yU>>n!`zK^NM z{4h-}dgtfD{}QLPc@bc7&IXjec>5xVUC<_zZh^px#AivBYG^IIyO+PcY9omK9~-yi z3;LGGO9g-3ae28h^Z6-`mSmqHR;Cj>-K5+*{gd}`e8J6kuMqu-ndct`+G@XyfS~Yh zU!)SHsswbk??*{yF-nsqS5|tdW#(^`{q?Z?q(J*6I|WQcuWF*9`76brdka#+ba7^4 zMOoc7m~7w>;1~}@|G30D4R*bf|9zdm3egI~1nm>TcA;K?7aMv1qs0;DbLc;U zzW{z#NQ=Ka{zULiOlt3QO&l--!GHW1I3s{ry~(<1we4uTE<~SFXA+kTR=a@LbAvy> zCFg`T>GTxeV-wtDFo8kw|3hyvfz`&`R{`nU7e0OQuRjKL3)F|wEhxJmfF%p*7c;PIPOz~!`NZq{!f0k_1`60&HS3Ly}ocjt2W z&HwGc02%|%0JfLHX#1|x4o*JB%H+v;NAJ)L=3oG_m^*a{P+l*E`tizR{0cc z*;B7J89=QmUvEiMsxs$9JhYO3HNUVhUR3w1zW#@}@-u*NS?vNKw8G%54)DD|W9gwmuPDL9XfsgCfES^Qv;cMxg(L ze3H7uhJ6Vgq;_!Pm>(h#?&j4TJP5h6qF+~Sf>pQ;re+l+m zJ=C4*aYq>>bG;*fcX!XH*04QwFGjao^q-pGkCuLOD?44!Y?>)xI+`HtRV(+(cyiyt(vv8* z*NlzZ%`~X54NzbH`n92nzC;*GxcnZ%&HW#-@|ohihZICeoKrl%^?zPA0^U-#|5E0W zGYr1r{6JbH(>bK(j}=K1UQ?{ed1Jc1wvs$HrdN4`50S1@q@flpUO2Mkhm|?5_(YiG zfxF0Sg0!-9g6{5zdGFu1D9_>j(c14vnHLeTRzOCF>#IFWql#-Bzl1JFy05wqs(a#s zn@Wp!Q61sH!V3l|;1e#g)*xRXSiGc%Jd?7OtQad1dWX(zy z)OY<~t!EUcBx<$B*w~n|(sLA@VJe{sfhX?|zr+CxtD{FZMmas8%1Mwv&-`WYsaLVb zqTLZd)nfbfZ+!dZ4X+-wAg3MR5TuY9Jv0hYZf_D?b~HgkHXtNaeI+p^Wdi(96;dlQ z4L%Fc7ZRy`sP9?(d{^$})33C3nJV=O3YiK;FV%u6`iQP9Kah!1=&^2nM}B=?Szf-* zEHwL%r~d{JLAL-J12Q@V=rer0!EVk7q7NO*-yM$ZwO32lbY7*YZ53S&lC<8Z>0hN- zu+qMJJMG`71`GcOppb)qCYkdT(4xXjGKtxeyQIF9@Q+oP>|@dNrH!Cyf@P19HJX9m zJ}axxWiIKz`(hf#$Dz~#`}X#7TMIm@_3V=Q8oD&8lb0ljdQbzi=9+?1v^ z47PZk)eha4m&ertwOh*&)BQK9bm3naFJb29zMZwYH&L@!W_nYTR$rZCWZPr#GXu@r zH)82F#4&@#)sX5|W|lV=l2%MukkQqQI}k}@ctkPM{@NSO z%B=VpWUkb&G2u!S?@DG@PCAx5wypY;0c4P&Sf|cl25BdX z;L73P(ryv6C~fWj9;-jElZL#?tM}ebRaJ@JR)+!ZR9OEr1O!zvnXe;5Nt+6zib12J zQ`L<0&!>u2i|_N=ksa-iZO}i|7B^ToA@YfO(9`jC=+uYM1B&;O@jptm!ff@5(0`RK zNb=qTdhU)EN9n5BlhtOX`}9Uf)%Go)hQT-Q5Q7`+R`D9;%`2%Uoz*l(@=b zrjO4j9IOt%2F|t;MAA8*cmoSm-Vnm^{P3QA!X~ zP!0^?jN@eY_GMJBozrm}Sv8~=i+8MM_l3K^svW{8D5KgDDaf7Y_(bE#qa}1{WMemb zYaP^UAu0cVL8@;E%=gsr;HTh9-4Oc9X@zuE{*PiCDW^*dCI+XDjQ?cVN3firOU6&ei0mi zq+&rh$D(P&OOFWDrk0)EHHljzQ&<$8xYE6_Fs7?D3XbUkHW9p?U+T| zSYOJz?o;i9lTiKg6o=W)HPg*o35A#0#>z&EP4AYYKvoma^vI2;2XuBD@39u4wN#o+ z1qO@lFB4Y=mqRG1|HWBJTa&bG&^Mh%Ak(R*9Uox*PlzK;koz8K4aBb0F3m^-V9^zk>x_B1E_>sKja~ET*8tRuIt&dc$*-n483&TGDE?pAa9_Gh5N@ zRg%Zfne!%{t77Ex@2n?BMkU;k@&3}WQr4K%$V*Qf{%2&;nM^NxY>$leBzsW~57p=N zdEICnyu~#~!t(o2f@RrXs~Jf_1S;y;fzwK4;4Kz6JhdkQ*g5a ziQ>my{$s=EX*;NjozF5tZHLd7cC_}9Bl2yv=V%L2ac$i|ER2?af2^kZGUvq0i7#VU zYxaPoPG7uNOk_9R6*w_`Y81xpELmPW*zFUZ*M^z?{p%i>L5!A-(b`aCI>EG6`@g^; z6KRl64P@@TxS?+w@PRgu*~2~8M+sNfLLKYdfompTwl88qT#I{94BW!C$oiBkc}8Vjs%;xvfNw>TG?W36f`T_nYh= zr!T5q`Shq4-R*-a0&W0(8T>{pbIG>;p8Zll4Y%t4(zDaoghmh4k^4)&4@{QmYrgd# zuGt%z4 z&2b?nh)K3+%2;4kWvDBLu|@c9vp$IM*9y|0RYC*s?g0-nOl= znc{j7{cPO^T}O5MX1h$g&50a$Ya$=pn7jibNdLHCb%LL<$4y|YVY;l^qvHRRb@lN~ zu5a8~^Hxda({b`rI*F4FmAr(Sa7c`!LpTmOO{C?m*}O~%c`JT7>8#aEqC=XDnD?2T zp)#4whOu$2A z*DPaDq=bpK*F60%r&Q8t`Sy67SWoCo;b zV{MrjBABy1Us`LnUaXZ)hal~*IrE(fB2yDWc7^e8m`XkCFGM5ugjj3x+`?uPQ#3RaDbE6hq&+_>sQkNT8NX%c12x}`>-M2t|@h&Y^FqJv^2Tx4T%j$t_ z)Bh@TD1kv>qrU_klb{w3uZ7#@YscX+1h!8?c8(^Gn2z0;&$v)@pJfPeq$4Dz$vJam z-$7|QAGzhi*L?JwEF}ziU3%cx!1JjMNGn3Yn;#iZB0JWKsb&s=W@hl+=}QDOwV|Qm z3A6XyxhT#bL0+?E*QoOQK19%_+sn^R$d#5 zXUlE|-+?u43{@?;2Suehp8qTSz~Nnm!4qC5fAWgE6J}g#d#_Gc3H`muZ~s93Sgz;j z1lz|Uyc}gqpPR}O4D^#&Fd~e*r=YBSo^VcOswkM+1G(6`{KfgXy3YCcz$(uN+J%|Z z?qgOOfU?q>_;(pw9>Gn0s0%wpqYo>~G01huV4F%S6wdkk-~GLpTI0uy5u27&H*XrI zp0o+y*)c;gTuTbCxe!p9RgE2XwL!H>fXb{dR(Uf%2VBOR(EtcV4}U&{Q0CVn5SI<^j&Y<4|HWU z3&(@fJIA(Vg zGC0pkJ<8Xq;-4-RAH`4quYKIU4>IW~Ok*YLu8%C)`@ndgf6cGZVV}vtaN~^TVHRW> z{ylmn+_*@-ow{gty)*mo>0KL~ngkXC+)<+8BI;QDOu4LkLETW+y({TU*{eYh-vl<| z3D8t#1iy+(x*3EWtV&ssS4Hn8NzO?G{sD-79rr=3+loaMpJZhv-fN-I?Rol%6@M^6 zu7^@fe7@$An(InQ{@VHc(K-fjbq^e$WOL(@qKg}=db^XX*pyoLYS|J2kabEuMR#f! zhEe;mJf2vy=s zzPmefi=9(U+{jC&T{;|birFz3&J_CItu?l4EPsPdoP5&PEPyEALc3pBrN9PgwVt`Rdt}`MZ_WC(K1|TzApi%^V_<+or+>|%Zv*Wh z6kTL3@E|(AL10%$8|J(1mOD_fz?dY^o_#|Bihmp@Cm0-XlO3U#o35VBzE zajs3ThbCIST|4gdcZGVqMp^~SJc>DNZ|7BqawSW?`MK#W4UQsTN-T&R2@l?`*pdC| z6ixLp44Jw_Z`GKg!a_ZW`YtFEhvJVpt$#3lqFr7E&Y z4J3p@YdGykZmz_?(}9wQ+w{feArF2u?P3%LeOp8G%d8S;)hr&IRF!$8&ENDd@_Y9a zRbKJ;;6lbt`q1p@`>X1Y#e(FDm}`6~3;a<7Z2JoIzPZdko4NccVIxE6{K5y48S*jsfzJG>TZ2QN_D+s-i)ahw~ax zH)jP(=TTbgg{{z99lh9PDvOy#-H4AG%% zOEz2?VZEXz360)|iy4aAE`39PRvc(!v$u}*pxD#6XvT;U5*pq+Vn-qt7Tlb2$1*4lv1z~i)PxP!ap}T zWxnRx6Ugu(tTn$(1G5Vg%RGD9!(ossh~R>g>4iacoF73_ElW|2$(##2YwLuz)`Tqc zc-~ZR#CdzpEc6qI$74WF1DE~TO@CVC$@+mW^6`zIuks_j+IwLV^kdb~sS>&Eu*4e% z0Mu_mPW2-HqT?qqc(~X&p)>2%?SWz{iDsNkh;O8l{t!w{S)TLVoeDmd3qhQJN$33j zpeCH3FAOl(Xc_G6I1G$8b-z}%>^N2*rCgfqkP?op9`ruqvVScAh8;{z7>RBDA#=F? zQktKn+P>f_ADLsfq0cI3wISZW5V40+>OeJCvUpkUqKs~K9oA^31*Ds5w<-=;jzJLJ fwv5N1=J%T7zWXps*UPa=z~lC#r*oBKNZS7a=YsE2s|;dN)1Y!kVq&qNy%Id9Zic1 zN>^A_7&Q1Z{CUfPD^)PkDtHN z@Ob$}z<{y5*^upsNJh4Y2fKsL64L|&Q_5{lQ6*MdGYoMqWD*LQrM7EAJ^i>QOJPIU zApJpK)C&iUohF%f6k2GL@Fy$0`+SV#CR#6pVTTmL=OVIRKR%LVw+aN2Kb z=^K)T5H{Zkq^{bTzD5c|9oZ}ya3c)uE#O+|EJfQY9;9Vx50 zg>2-wPqT$$tq)2y%Wy(OZ3c1U#vFBr8rb+oMNLcRna4&Dqh6S2#>qi8+}#}_W` z3@p6-DKpd1ZtizI(_iGVFzn)pXM){og)oy!>gGu^<8m$nXUwGM=@MV))OhyP)(`#o zI8zHZe96%5K0T#K#4^3dFof$(3d~DT4`C;EN!q5AD7Titf}O7w<@o6Sh15qT1PyW{ z8 z7LdlF(oN`z3{&g#uLfiOj41L3ZNOj{QdtP;U86InQxEU96xSN~`vGY1wSp;xQ7Hm^ zlpZTmYH(j6a~Iv+?4F@D;je zC+KmlL)6`?k&2I^0gVu)3XSJ&GgbJGOlP#k; zajbUi+UI-7Rv*oLmAwUy@;jS*F^ynqS?BDJ@Mj{}!6;o2tUzohiSFj+%#Wk3Bf5eL zy*U`jm*;zj=TR5-VMyCj2dFLZz8?e5A+f$gFQ1uYQF?ef z9$1)dC}0pX>Ho`iyl3(?yIR=EoHSIrWVkyZv32s%T{>~FDp8y#z9-^@qv@xb?>XUd#pUs)J<27AaZ(pS{{S0;wI_p# zC?fK^!M-{s<@X)^LUnG{$Y}$)Gj6@_JT*2)5c0kITxhOeXt_`o`rPk6c_DS6SNFQE zU*AbT(Y(An?dp7I4oUU}qAU6vNd%cOS`o^Jx7z^(0iprQc8t!bD=492(33%Xh_{Bg z%)wmoEeS2LEzxr#)>HzNH*r$r5OEOiKch=-#KB2X6kHeZ7Z?@L7RZ0hP6MWurlo7P zXadvJ0UesH3pS1UmTEt~XvV?WzSLAI-^+;Xg9^WsZ<9z_52#pg> zl`PHqsU)v-qO?+0UY=h5SQf2@t0>jP8H37n&GrQ+fZ8$FvDb0oLR;gwh2Sj7zWQOn{+To8f%OmW z+{=`xN%}o&p6HIx9hp91E2T0&8z;B-cJ`9?Po@DsjwgRiUQWnNrdO#Ix{6i%`!QGG z;7br1ac_ccLT_%q-9)KC`GO)N@iVf8WuyH?>RI30&!_Z7;Q8=@2r&iP0J;^L77-WW z1aBkgCdde}7{`W%&t#7Oqieyd)XKnAER4hovqLu#6`@r$&b9Q+_d&awVTihA%TlH%5x|fS0f(dgl7Z z_ZhE-J%=m?Ck3U2qK0gME(Grr!4>r!X$sL-vOApNsKlOy9uJHSR8mB4^oy+H{;W|O z*zY1_A~K?j-A>(cJv2Rp0qMbJ!LvcPVr~*65$2)fViJ;75nl(Hch0!jGqR{pOXiiR z@=GT}Cle>54UdcpnB|Nnn3arFqg%18FleIyArST%Ez|b5n}ChtzE_?kE)E~->A7Oq zD%g6|G4d%iDykECuVnPN2EKipIzSy?E4w(WiO2`Jp~s&SKUGQzHYFm{`AbU9Px`VV;xN|(LHatEcNH>GB8>S%7oXX<;p{-Z=Bk6w10jKlvPeO|Zr(lFw zxde91z3%LXa0jh>!mDos;G( z-0KO)Oh;FEU{d3`i=C^!F9kaChLeT4j^>XHXWlM)CEu6tyfzX$3;z(=4EzpH^!n~x z6c8#A+OV}l`YN7|wHYoRzL?a)sL{D4^S<-SD^*6reZIKxYvHc1({t@czn_W5@IsO& z{c6LP7Ll(TeM32kZK@X4G@93L*D2H2Rw-5=W}g~eE*2cO3AfW{m1YKKoj>({VykM_ z?lgQZ{$Q|uT^3X3jTgZ|H-F|s=DV3F*Oh+2foIFG_+%e$K3rLeqIFnaSw7s1(u`r_ z3FJ3Cu)|rY4C5Cp;RJXxV$j^XVe=Xs~!JP{BfBI6GCK-2LR{Yb)*7!;A29MjpKn zx;L)LPr1+iL26CaKKHD5e4&`;CMxK_R*oP)CqaV|yof6H z(T;!d|3W=p?f>?Ps)COZDGUqDxkmY^uU-pm4msVKc`K-W154mNcFxI3j~qoEohv5= z7DiUUTW<&m+sHS>>~GFAc$g+S?e*6#U9gV;V46iV<2i67-K;%Hicr9I4@2fV`Gnmc zwhm7nFkx@`zTG}|f}u~uW)Py=d4SxHFcWoYQ#m;>8W8*z4Dt;w7!(M41G)v?;Qa$j zyrBkz_^TWo3@q3J4D#yIRAIT)B2m`DZSh>3~$9E?qQK8i{F-5vCcpVZvR$&QDS(bd(J!IhQ4*1?RC znVXxNk%@(og@qo}g5J^H#>v2q-o}yaUxWO695E9|BL@pRCktB};$Pz$7}`2J@spDN zn&_X;zuwct&Eoe=HjaNU3$#GSUp0)(3`~swj1B6__p6jg(ZbEdT0_hN0Kyq)4gqFX zHV(eOI{dGy-&6k4RsDBYR(96^==w+1|Lm&bXyPDh3jj^(B=DPHf6x18<=-9o7=Nw( z4_y2U(SMbKFf9Pb$M_G`1mNOep?pAu#J3Pr_yl@_*zDH_JQwsu{jVnohMAethjIhC z%R*q%V#1%?-W+AZ=%b5c_3NPuSsa-4k3Y<}g;3LA_A;m*LBZcZ&(&a6l$59o?cadU zy~8M!R)Iu6LKLIBLYnIKzRVs?9~oPwNR|PIy^jvc%uHR*d|qBT_BC5gPp-F{j0;Ff zkeUnJ+TAr`PijDt8I>_itO(->ZH!c%7~6uoNzHo`F7+AmpX-AtF_q-VE9Jaz+)YCG zMuxUlmeHcbag3xx+Su0R#f5e1%yyn!n2V-ulMBoE$!L?@KpD7w$>WW4p-s87x@8t{ zYGYTBTnPN{OYs~Q-MrU{AaF-{Ik`%%X`A^u#fAz$Tvjq@n_RK=?c6G=6Ss#CBJZi- z>4GX$r`-A}vJa<&WB#t;aMol_@l33XSIaS(a^Spf`*oa6N1p9qn^=`F){>1)HmMKRdvdOsejkR1RCm97mKGOk8Q zNCDXU(#w=n5hXpUH$;o_wZ&d zIbML-l6r92k&T>67E_&G*>M2@P$2ABQN4MVlXrC~Jy3r3DP9!NX?^8AX_kIjzOiC% z(ik~){mMQ24`WE>NP*ul*RSEQ>-0!H=FE6fe@|=91Q-o{DmB+>0C=@Ic?6BO>yL>2 zUctXvAPJJi{baPaLnGUBw5R4+m*&y*xLE-05Xdmyp)p%KqETa4DJQyN(6LBjFh$R8CVXm6>50p{A_X=WZAIdoR>ctU2YL2tgH9CF{eE zVjuK7{ zdhBj`IbS+WyY(z$RDW7U@?N=azP?=GSdhEI&pId;&i2d)OfsZ=W*XkrJr2Ji)9iO_ zc-AX#B?lqU4^HyiGm_Q#*Ht6>A*WDJVK+gkM#7}RMPHgx?AOfib|zgdCcsQ|HF+Hk ze3F^?e-T6|k^I~4$`z5PcJz5GC;$7Ie+czAAoQJLP4M=hP1~Da5%XsBp#ux@D)V#4 z>GZW-X+xe5d8cj7<3|{t*L8IFuaINIqlpLXWisq&f#i&gvmR&r@_)VCzv)}T2bptx zaj7;q^yH;c>lL__?i?bC5yOSHrJ{e3dJp)-Sk}T;&-5*dG06@e5Dd3}Qv86eDhtmLBw?>K_SxN9S>zU=zVa0|kKX&X<&WIYTbOmT@?petsaC=+y z(a!1=2Ysrx>0>D0rr1|s&XV~(9I;=RT#oitAx=XHJWUKjgetXo`0f7&`S+u-vTeR&q?iu*uH5Rj-Sw_2v%R#ZeQB}e=x4FZb=MT_@gAx*7O{XjJY@+2^$GRE?y&o z47qP9ur4SR`eQk!b0Ji(?{D38Z{}if(eT(x=9ty*tJ?1X1 zx0NVlwq*#BSKDL5S}3D#$$)~#!t+cR5Go9^&(d<$8C$8aYx%XY{&o4439YRb4nwkX z5DT-F*SX^*i_ZpBpi<6jy1Ic8c))3HZO^|6=I(lfq@{^lZ;z;AIBuW$_%9~mU5 z&&}cvWZDd0V96%;ArUmI)22dXG*p;uU;!HCs&asCia&5Egh8zM(OX(a1BwAIi}a6* ze@oKe^b<-XsX@OPg_3vbkaOg#cAo(ox1r;cq@%Z0DT8bFTuk{jBJ<=S8LCKaa z&r%kEM8#9^Nn(sTK!Mc;6bb1}yNl$GfxSYG&U3299xO5P25afR-)(kOC&Tqyl(^8(@tqMRoP6AGV_6IKsO;ac)bOhL3 zH5MMo91N9twx5ki|Lj+Cby1<_+VwlYg@FH1G&HjM z=W)I!rISgmP(V~_FP+kdk1(t%dU*r~syN=QRg+1LR?}iA|3MuLs&@y&8~yZ-pj~vw z-t*&6vHrJQ`ePTVd%h(GCm@{!(Kur-Mn5=juvt(z)xMVYtn3G-sq^qkt+m)VdZ^Calcibe_ME)~NPYP^hXy^4zIT?GI8l&|9{-4Z{NU?SZ zlJF9$3-hMl)Uf$v#}#@-6Y?WMI{TXjS^wv5`V2`!;g?urt7}N&-Lrw`uk7HvcsK8xYzi|13lVk12u1E$Kpi<{y5fRC7Y5gPcFH zostY~ACBQmyYrjDKSP$`zrp4qo2Pc-2(XWWbGRRHEGu|47$(f%*sE)ea?|?H;GmpA3={hW5E5pemw|UM|4sGTXTbzK`Bd+Lq>OnN4Ikz@L-c< ze{)F;qTjsZ4hEd8)hhnzR8Bp2`DKPgwm%Bo5XV9clGFT|?qYK)%Qo`;#c=J#uAZ;- z@j~Nv=j(GdzRMm7rJfZ)&^e3fZ!Y@e4qgw3zXvALXq?i|(@;P;YShY1u!jzxO!($N z1{u0ON=RvQ%cwspnRCTUrfK!X*WrZQZ1CZ*`n1U?=r3C4IH06(J2v4pJ27^^Q@(bm z3W*w4ph^?$DK-sK;?1-CX^;F~#GfXTqC0Fa{vOl1t}r^!Dy8_i{3@9~|4{nP&bIIs zrm$9GmqXu3>QwV7FN^iuTR-8RBkp>W)rV`7Rqw;$EYA~$U^W|B|9O@*zO{IT?FUuP zfjseWBTvtZP|58PR{7{e`$8{Rub1!G?k|B=wf^|-Vrbm2PmV?=>qA%jKMIclu6<#y z%O++Pp2KprEWX?I20evl)yYq!^In&u+p)nX(TRmxUE$qI`2xuTww+{xFL&{>S$rBC z%TCJk)xr>^dcL+6EqW01&a*mGfR2TsWJW!PWIgvt-WAO2gF#W`Cdb3?CWKxk?N1kn z)m0k(R7A!05&2yRzi3cE1!lozb)$_o#iei&QNva?2`3pMdD$t=J$6SP7YjQ$u4nRc zF>Fk^i>2ow9)$2b;=;s9rAFv}=i{0EVcKZP(;j)oss9*Y(of(rF%8$4!RuPp(0YzJ zTikxTpuEt~u~J!GnTn*~lt7hrl;Y$;7K|JVXkMl)&48ky0t4Lce-mc0-)P=B#lyMW zPOcMgr#H^_zDa7oT~S67JenZYVAO7qg7$g}^?F>sy|@m5z34#}9FpffCVxC?Pxf}< zy-CS8X}_KccSe977W;$B-78M0hy zPkdT`+yko96xG2nSGw%=_T9PO;NEy=Oz5f??PgzOGw*!!i$LA1uBUW9#7*+^%_3)q zk!>V!&|j&mPCPQ6$mh=Bqwgw&b~Iz_ok(lvGQUkbi%E%=+G?@*GVnqDQi@y=6?`J3 zjPY8$1tfQ4z4$|&BhrP`Y&1b`M|H0RIljNBXcIh=D=kQneOY4rP)RBXEv#dJz|L>ki z%mf1uDDkf685ci=(+@Ya&T20>MN&*4ql|egn>QLBz~Y$GQw4NBeSf=h``LAF>qwsW zgu30sB@xgx&(m5Lm-u8u+Ub2a*qRT^W)^?-RtA33(Hfz zuuXf*$ot|hY z(}f0$sT_k`2|oSTpbM8(PFh9e;SSn6>oc4{i_J*RI9NSz985=kcyM@3x|kV&jeIHM z^K$!KeLBAT7K%^os8QV;^I_?DN~&p#H*D(FggQp!Sh+XtM|Cn=D{cAGB;BVVjX90F zxNJ!orS7`ytgKSqRM*eTN1-5a-N36m%a92r?^h^idwoJyZ#wGI=2v@@CNOIakXA`+lYt+*FVEN7dPq(gw)fiA z_KUZNWSXP!xiu+eGxikmU5}XSmR%Ns*X*&mHaciO-DOcr?jUoJa~X5Vav5Xuk~d;6 zGqU_FKU9c92-zkDLg;YqOtvpxehCeZLE^cyOTFkP;?Vmk=;k`te2Z7tPZ)UGIn_As zlns2=Q>L0f8f!bjN%vA2ZY204+V`iB{|8pofE~#)0uMl+&{%rm*}^%F^ae6-nf z<`&lEK*&{QaS^Ki)FkfgOO9kSgTq-DjOo5I@US zW9cRFo?kzmf( zWTPJPLt>RU=`cG;ty#Zv8J$+^i(0QHURW9|&LZ@**qIH!S61MbCiJ{ADAlMpRd3Xs z*%xZoWV$5&rNG{ifo-A|%=h^*^uHakoMys2AjO%a84j*DGlA3p_B5PYG_NCq>(fu)`sw7BK8DsSxcjRgBb25*?f0cq z=cPzU5YF+UN+hhQ5%GFXgC;kZ!ByTn`&8R|`B4=yyC1cSK};ubb(VjjUA()z&g=)h z!d@{bwhW})znmjiWQHx#4d@7nsz@@Ud||QeyWVbQXe3Cw`(Zyk%0d4O8E&#J1Osd# zYQOI*XYkPB*>K8{`IWTzhj;!Ppppo7l3ARUGRW#SW4a)^m*<_i@(Fyq-(OrZcJ>}Hi@N4Zz^F4W#pX*;a9=Jv-V!+6 zn*<`|)kY4x2O>FbBc!zba+tSuW za^gDKQ_3Ek(E@C{`azE|<6_uSuwCHrnSVa|`XdUXIzO>N^0vuS2!3f#XSJh zlCLlQ5`~xf+4qxP=g<6k`?bt~5HnUTu9Mow6BdJRvHQKvma4CJd6*a9o^Ka60~ea9 zVR*RA0d1okU*4j2K6AV;>{-nXW=m4j+fQVJkUiQOvM>CK5W6n~N_9{AF{HxENa+Kp zn2h@99v`EGhxo9$(+9Ej_pM==^CzXP<{~`NUKFb&#yCDoabxq)I)Y@Il6%tp!EiK; z7b!hsqyi6Aq=Q&|&#^P7-P&3T19)t8pSKOcQ)xQQ%XREN7k3^w060i#WnEWON35X> zOhj@T%tmsyVnIua`Ibic*^>qJiXv}ZSZ^l{_FGI|@+ybb>txeJ;($@>ylFZ*#{i2O zDhy9V{?9TMnIr}sn$D+-as)g9QkS0|*Br^UMiSqLx)T*2we7mxDeJrsTtRW&^2jOOiYoJ2sNlZ?WpS1x{ef4Mu} z3=PkF+~WVUx-*(z7*ISs9)y@22#>iitqnoCw0qjA5Nq4{ET2By@i>!A-&A5Y`wT!q z$+6$`ACaBCFM4if*%_|=*leRS4`|jgIc>jjTHMSq&}KeQw>7G-=Kw5-jq$a&0$h)3 z`%?z!Cx`Kx4bl)Iq&qo+%3hyXb64p1p547-KnP>Qz2vSm;giY$0u;zovcL z{$+61dCfbtT`m+6$wjQ&lmX6D0l@vDi|x5u7SoaB8Rp9Xw5WQ(Ir0s=&63*1aCPU< zNNT-tI-scz`r9I)8Bp8TGH2QyU`q$DjfFT;+ca-_m@tbQg;6vSGFKg}jF$mA>m(d5 zV|*5qYhWLXvNy)vEIuW};S1vr?L*gg^fg}3_)-VxlKi;9k4@WoU&P_?>^#fGVW-}9 z+X1tcsHW$79Of|O82L5AXT|sBI=S_xd@yQwexDLgGC>S-6*2t(q`C(_(fxa=Uy^)sL*lV=G}yx9w;xV0BP$vCH+knYU|( z_ZqX)d^#`AHrbmPr;AQX);8ArW|?nY6>Z&V#A-TH(+S1orKj)nqlsyCxKfVj)~crZ zv7$jwI}YU63u&M!YLtMZ(V%=mt>+15WnFV+FnCc-m3Ws7iar$Z5$qw&b>?1i$nP`7 zOn&+l@J??vQ4BBWHk80+PS<7L#4Hu$B24T4ko{TR2Sa3hs;2J`i5YVBaF1nF0Bn6- z@2HEO{N$6y0Z0qw^NgYGzW=&>D<{l-V#KtwWOmwa()oNt@8S@eT5mdtl^u<;WQ+3N zMK3=ZWC_hC0MQ=%nAu3ezJcQ0P+mSS_h#HrHKLUrGY@%5sg~bh(K=&GePt8zY;Ev< zJZEMdnrGfLFL;!vR3SxcObH}kwRQ=v{IXF)Q1UCX=Dcs05r!Y?yzW_W_}ogYc5XS3 z7D=5Bt+>$;gWk2j@&&0ru<9Hr7CjaEn6!_sZU?6u) zPO(6^P~}{H=%ivtf7<*iTsyAcThsN+9KtoK$NAVPOg4*|D$uT%3^CdZmv(mKvN1U6 zh&aS_-aWh7Kerm7_=veJGz&6@9FCYJ4{eU?mwS$hl9Tm(rV~kioDcSIU;R)BPc$f` zYeeZNU-f~@UJ zo@lP!?9<8z&YLD>=(x-e`fzg2x7^`eJfH3a;k`)SEE%~z;;H0IAilo4nKw$he?Fty z`o_A}?z(ERcV=nyuLf|ss^9W{PHzh?G-ny((ACPkjLSTRuS%?QS``R-jGZ4B=( zwq3NFmGYmD)y*bUnl-0(;Xq<&Sb_#4UkiZji)M5Os@Z&(7WF@>8)nD|8CEj>SES^>2D3ngLa-oDZy{6t(R3~+CG_?uhxnplsE1%;D1=U# z@awseWU*84!fy0QXjy)p;q34sdd)X!{ z5O4oNgo=Cp&gdA}Nw1qFcrgLta8X)JMbLR~Q9K}uyuxV5A!Fin;G!FIf4zGemN|*Z zcvjs}r1C+M<_KD%hAC(|fEtadS2nq6-opxq-N77asf9$gzIf6?Yif6BYiAIC2^HJl zJ@A?0nD*v=h_+gKago$twqkYlgs^pM13tE~w1nDdy=k0(Q7OwexBMG1hBV@MZ1CiR ziJEriMaG%?^}#&7>AMI(jGeriuCvaF5M>$4Be$zpndr!x+F`eex!BR{BlLGoB>x3} zT%xM-S_%XhftRyqbsW`hE2Ld#gK&65qzulLi4SYCI7O6__-N_Uyeio>i1?DxJP&v3 zT31lsG&H%k&8zkb9}7^Iq3aD-ymtXEO>*=-sQqm>4>MEMdcK`=JdQ5xtCOZw7`RHs z4mqB=GMpB!ucEbp+6$3gvqG)ttc&gBP3`4by-4OL0=!`b!B<1lDs-OX4UgVvlVASa z;wsg%F`{2xyFlH2RG0cD;pR7N+<2>EyO(Hzi=1x*;i12xWJCU+adY)o>m!u#Ozk)v zP|+B;-r&r0?W#kVHTbV*)LJmTXK`atfZ@T1k|%5lwxAjE8=G}Cf1Uj)4NTQ3`VqA5 zohNsAX!3kLBQvGf!rAe7qXllXX-buqhW;G`h%&}vsh$S%YHo=$L{p~3KYus7S`$4k zyu8%umOJt&!BcYEo}T@FQh(b1qyIpAxl4|-2{Xe;sk8w19f}Kz1*eXsfm2rx@^W?+ zP|SO5r}Yg?mJL41c-xvGFLU53ikL{x?uI06P?UQ?PAAFu8=~uY{)qZGN^JB@?-MAX zQ_PIJJ<_@#9+u%FuZ&>WXxCja&bdu;$I3d_8}KjAsbJ@96#f9NBP0 zx0s6k6H_usreY@p5M!$%@b_y7X3m>6xOpc0*se{cCz6xXnR{M{e2zM_*ZEN~Qus<; zPn&h{WG4dbt(J;ufi@1ANGuct*>Kr`^0q!@Y%FMWOHP-SU0LFUzDFqByGN|?L+8)l zcd`A3n~6STd&|37`za0^AsY>HCAlmFAW1pwON4UpSl#DKLeF5m-h|K<@q<+w z>GQmR+MbUxy;`x&@#-sC>(h|cN9UfTF2A}}Pj4OXCSYUBA^7Y<{xOlmDcOfSt;tsF z?Aj8oWyxVsu)z)dj$pFjp-xc^H#2nTi*G|^HRG_1T2ikclJ{Jv(&n5PZ;JK7R=oUA zWf{$+WC$JU)7JH^ETS9Vak;3#+j_ZZnv5fKs@&7f7$Ppa8f~}p!hr?IXD|XkNSLcd zn>N~QUd^9I8`U>E?dnSMLFWDc`*hNuUYw%y+Y)b9Yb8(^pFR?eUP}LUv_?b6ku*BYcZ)B@^(#synN#Aci(mP*uc}B0h z1gCFQDis&{Zt>B5gl4f|e^NRq-v@6?f$tpB3O#3g{t9C;NZzi{KBvcQ6ECqW_85IL z!e#3HXgtDf<0;VVm;2kGtT3Z8c$M*lrEjxIjE0NyIBnWRR zbFq)Vr^}+mqaRbT4+=~tgUmkaetfk%2gC@8DC~_61@rI{I~bxVG0u7!Y=3Kzzf;Si z)76SVc#&H5;Zj+_KB%E;VwhNj9DkWoF6}6h(rg`!!+3(Kc8@F9udx%OWA|6QNjw*V z0D)}HD~-Xg&6c>5@kk^;^$ghkvL@8*ussyfk-dH$d+dsUgp$eApBbv0xhUC}YhP`M zkE;ymXZe*3p^o~Do1C*eqTy&wuE;CuuaXd35^?he(G0SXSv!={J}CE+2G7stha5*( zTEfO^-U;H|@tQEi(os)&k6)ER4>WVI_3O_yb#|Ad7IG>&fMc>fVdq8I@R8-7P%&VN zp4ZhwQ=X?*qv9bqm`KhlqzrK#;a3FPnSBrk@mBdYOD6+Dr^sV)w%p`cD7k8UUVxKM z_p4Z1w!KT7QiX`97{jYZ4jsWB%RXzyw%)-seGx&U?aM`gY4Kc1qb4+>d$c<=@7m|* zc>MK-NCxJ|TZXoi!g3ebU7%`ZRpX?;5ypE}k>m1lDRW$(VA0BgHqlRU{I^l0zUK1* z)g2A7CpEfB3vZ#%?VPR~a|zLg6UOJf%lTA}l~sQ-|Y zZb+ow^?_qkc|Ap=B({6=>xF}Yg~Ode?S?EHBxU8^bbYyFQa4ha`^kV)1|MH_9{%1$ zvq29$*@s6enD*zc$J3VD(J4N)yT|Lxa;@f@)9h9VohBg0Zt|eBpV=waD7jn6nGWi5 z+A%ApbGh#}vjR9q_GdvGP^wt(^C1fl{B&|k%$o<62U_tyW!|hTGCWP4F5Q!XlC%BQFL*hZ&}&Vgb+6kTy!4Ep3DiQ%s6(RT4sG|Uq7_d$#Qmc;zT3~sqE1dP!$mXM9{ z9os>O%^{=crXl`muPN1A1WlCEaRoaTF=H;flf_#CoU_4VW-^(xpxV=4#=8x`v%b@U z&R2Sv_NYlSq$A4|zu@KJka7QdW0*OAio_r0?HJ7a^bW(ev+vRt_ia{7(7&ktX) z=p_jpMMeg2`Uqf%oMIyI*=hRTE_(6We|?k{!JOmFm?{FfR&gYjugEKj-ZxQrI97T! z2$3NMcSm^j0+Z`XpaAoaW6F@C+F5}|?wLD;Cn*b%@R8>}j!@^tMrQ;0{kVj7c1KUo zsYLcdSDRO?iv=l0U^n3jV}1-}kuTo`?3Uig`=X4< zN1di-v$P6yAJW91V&~EPGF4x4w;m3wlIRbn#rzj-JE1Secu)HTd{;|2oBWzlEtx92ok3xG$>A;-B6GyFS$4Fff)DFQ z>kH7J|F=YvT;&FHBn1`O+Bv*c2KfshbtE84B{W@YQX0ATdGaoX%y2x8i{nnH`hf?3 zTdD&>hhvq0uQ^v#Q04(?4Jes#N-2j_A7p&FGg^-V@CufDnpsOd1LZo6(lEF4CA@a> z8UxbMo+SdV^?dH>G39W#hps^>p!rkEh(PvrS0S@D+xZK_!yM3Gsf>IJC-)YJ7=D>d z4B!)?v3`zKKN7h_opZt)Ou7+NcQoZfSFOntsx=dBsm!TC)H)b0D`xEX;#QUCr{~th zJ@KEA3#o%P14eQzOz8Tr3u0(+26|6lE7BUX2qd0pyxr{40<;$*;IfIio+k0E1bz90 z1V|~Uls{hhl{92-53lXP;t@Q&i63>8EZW>!cfZ%nWWMqXnPo_&u&z;!6=DBN=;Q?aC{g*nG88&HBm<*nsSbO}#Idqo+>;vHASqfl9)x z)0OiAMoP_nHI9LhG*Et0oDw=J-WF6ZEdB{@=aGT{qdH1GCQ}O*o^v(#y`ea+iLP^x zVx60ibDzUVwc|UniU}=Pg1t3sHPE5DYH@>`r^_+tcvK8_hO|-sTM*g9<#zTJx;>7a zE4MRUR~e5&2Jbh;*4yMV*U&bDU6;MH7m+qK=owoFsyc5T(rcMf#BzCGzdCAbnf^Wj z@!vejGKM#ewqwKPJ1Zz91aKu=xOfR7R6t`Gp0A43&OB#1J*ZmNt(lLH`@7lo3%dla zE1Nfd&&yLcHv#VU*0+uNU0-_F<)Wgd@pds?@h_)HRCj6MSfT}P#429=Ux->M*PC|r z?CcE>ehQ+QN_6*5j0b&h673XtHH=tvS^L&i`v3~3?Hz;-VUr!qxy+q1c0L_&xNnZG z)IJnR66_wtSa>dG);=iZ3r0^DYcWS@)gJpiUvti)^Vw&xj`48X&u^zn(>57i?T*;OPJ1r*QZpR~9Jk_hsVugAw%Vf3Q>)g%WYX-NY_H!VX z9&S02fLB2!{5Wj?clM(9PujL$ODk0iwQxtw;~`cwcw34zGU zM}RY#b~Kmo>-Y$&MLCg2i+9D6*x|(J5ewgnikco#IpcAdy}X>Z-8u#A6(0Vtct^90 z*NRW}q?%mi;u3y&kC{mZJm7k%)$zD-&-PFcuif)D60n%F?g#5tBxO1?B-UbkWCl9E z(6oXb)Y~LZ&~e%4w(zpD2BaCijvaNaaLsNu@&@iKs5VvK!92gwL)#u_7#+E~Z zpgm?Do%Jf;D1we4$W?ePwVYSM=XN+^K&3h@Fim@Jfa06Yw^&O=-K*|Pr`IcH5#ol= zUHlTKv#(E=3LgospiZ=;C`H7;Z&_bgW{XdGq1xrTNo& zM%g;&7kbU5=m|LFFh;S7w%QM+;sqY6-=bLRnLEj?yWZtT!Gq&DE-4?!d7d3i~Ysf++7BH;4Ev4_w_ZTR^)NFSz45WV0k*F#eN*0T1%!|DtoDx z=<@v_6-0X$MO@z+NT|(8yXmBasxEb$Bb@qToy!)yNBi5-`?wPaNrU`mDf~*|db?uY z5x$Qh|9sedBZw-wD6MMCVef>>&s_*x`@&g*mtNcww=a( zEPtu`|0c@*7Ia{c`qkDMdvHf`n3Ow=>Iv#C=F*0f8@|V@8x+H+pi`1r>OkwjXRRhL zlkQjA__t1fHWe;qVHz;WfD-Q9M zjFueyY}C?_Ku%px4J7U@eOGO<(~JC2{>!U)O3TH;CZCv8_vY{7^g4^Q44t1&Iu2c$ zvluQ1iy^)vJhWMgy>l;Bb8U{IHhEn%Py6uUbGyL`@g?PUi9fkYm@gdPK{{zfMZ}IgshInOLu;5{IYW2C#gzaKv5IgjUizyEpv zYt3TKVur=c9oN0D>)LzY3{BT-Hu;(?qpvWKF7_r+PAxd>OYFi#e=bKgrd7NnFm!s(ySy``{YMyi2C7G7kFu74`( z8vJb}TQt5{u`+-?>!qwK$cmfd3VSe4#O!D&)P!f(c*cy@ckrz4?OKs`x$^C;N%t8K zFJqe}nHgRn>kb#UQPoz6@PcoRA#=h07+J>0wcK=^ZJS#7#>*q7(qx-*7iMG0DU2(u zA^s2V*6A#(AIMrI^IjL7vYvV_AN-0^sG&`F{Yzcbh6YDpUf)blwUd$1sc~S~melG_ z4)Sv9YFh&#@S%^|I7&tp)s?p8U5LFQcRb$?hy9kYUVY3176nGE{ z6CfCv9A6+$cC;uz$<6?;rO9WH=!Ye}0Mu7DD0xlX2w+XEmk1!C6ug^Qv^%Gs4m4~k zwgE}Q4==$cr#Z zuphk(>9g(1Rf|sc74=H8ty=wTf4-RHI;(4+uwB|fyP1qc5_}~VwUTQRm|4xR4MfBr z5fPv;3nAfUD^3g-V_L%z4T1f+iq(-bOj)Z8ra6qp{uF32rpQg6@MQjhK#f*xi8EAH zQGdUDyg0Ku_^iW)y^DlfT;lHNxU`<}oge7g?vg7L@6R)$$ola`^H2Z@!i^`+Xpe&l zYdT70xiwLflXZu`8qJNW8~@}IgGK44m;r4C$qK0_-L35SuYq<*VCb+%G!j{5qHxlQs3?{lSour`ggNiNV+hK=G#|@iN(gE(Ukm zhYiRT=J2QrHjC{Xs<#Ov>w)g19@#s6cPsg8Kfm>K_sVm4t)Aa3!vCA)`$yvZ3`^zO zyhj_&p7do0ju88{{D%B=NQ3`Gi%pL%Zd2pqIXS1Vc;ePnPU%xhEO z(SHvIm(~vygp$2K>8CV(&Ow-u=Btb&nW>C$6Zvu0M0{Rn3$%yJc=I*eT;#@SnNtN< zwbm2xCqkq<*xkiC`Rm4EHN*MXk4qmwbJNu1t}ejQBTUvKbNQ^W3L+qeEqMu)O{2Q= zT^1g#(l7gLH3xW~?=DQ#K1Vkqb=~tM*m|+c6Ks>uj2rdB>%>P^+W#(uH3CAnuXJLRuyiv*i8d!D4stv= zdTj+Xa+^%p{a_x=(i}3T&0_rL=5(ZV7O6Itsl_#Cg}+6Ift)X}h_muqg1<|u9TK7{ znD`j)iLfgH87@a)wbJq%Ha28I!mOkXq|t)Y=#3b~3%lT;q;UKqDYfSqu1!uf7|*Oz zS=n6UaAU+KPG9_x*}SE5g|v(8Upq9%2rys}T_q>w<=Gn+xV3xN*{DcLYX=WnIy4>@ zkop`1O4(|^!CSzTFVK>p$`}r)K6rJg=k$Qrg2JVlEi$|Vg^U= zd*w)4#fK%+oWktgZmXR82KZ{-Odpza92H#+oNf@N0S`=}r#wCzAOg|8T8ytfq$4Yi zf${nm^E*d3F3#^qB9gx@p?#8f8C={ql;!rK^|c@Y&X-;((5YE}%e3GSk(Pi-YmwmV zq2AzUt^D6ozrqdmtZss2e2K`JMu#%<%*-ahi=M4XBr_ye7A8*)_`r3aHaJ($i zMRn8cSq6YYoQ>CB(Tl){S0J~XGsV-Kt)4cgK1)*EG7djrDb7?QrR^b0`+$qOr5ZQElIcc~j zLXcLLdvh2z=dyoW((KT57r|{$s>pr@bl7{|Dn6l;bc=q%NmwDYSi8KE<}w)3D1`P~ zsQX_~8^jtLh&VzcU&a(0S^uJ}f=Cdv;d_TQG>vNj( z?+~aG?J~pL zY1Wu-as6(42qrs_!ZUw2X7+OVgX`|iQHKAGruC!}FTZr^@CQN+*AK+F&yg`qZ?8^0 z8pwEz^K6?g&7}l~0X{Odz{vsCJa4jT3t`bGta0p$L+kg4CpEa;v&n2#{f2kPL)?L% z#F|nCx}1zF6!|!O=jI%6`r3bO^cI#VZga2mX(HDH$x$K#reMFuCCrQ^P0YV(r&`8W zKU!dT_kq_y&jhe~6M&}~HjxVa2xWro&&;^9g;2!!SlFyL4asS4W8OAj__jNB$KEsU zzCD<3Rc()jf~z^0eiz*k5noC?!%I3dP=QPujiiAIh_Z^_FQVSP4tkcoAEhr>2T1c> zUk(s`$s#_@5{9B=Hp%CrM>Z%2Us3BK*QdMBsfMDlx=x8_NVH?~yg`o*ukNIA(?i|2 zLJ-}e^WMSsFjlT99km1jkm#sq0)R%xL(MmFr!ENQy643Vr+T=9rC(=|ZT?lE^Z9Qff+6FN6J%WOJd>!q(iW^78N+72r6{Q}3om zBg_NL69v;wUlU^IlRSE7$`}pJnT>C$4vCYncTXECQ6CSn`<&rsNqhJ;MKX?ET63*4z~VPgaG#96%5GV zc7z0dfdbA5kAb#r>Xn*U;1aliiZQ#1d20usRga$Bj~n#dtG1ErLi$>v>W$Q};^tuK zSD<`ffko^5ly0%DHj!Lbnhw65khiOxr|QQFrIm-F&&}oh`Be|kB)%Zb%5_I&HV+?A z*=wi#hB(fUrx_w$F=T9X8N|`u+2mUwEg*>OFe%um)!?s#z{U3HrB4-TJ&pl2=WFFU zgTF(F+zK;w;1hY!X{Ni%shQ6l4p$$o(C}MbvgRTb3|B%-$zbIhd`dxmCk9g8RDcUP zZJCW8Im^6TYYAW!|NGlmZsA`>9=7~aY=AP*z;_p2_i^{TsMQTZG}@39fOK=ziX5W4 z-|kWCsNTHPYhz5@PX?htF#ns5UbOV5Any-s^0y`lj~WpET8H5@lK*sqgC5*HV$hMi zv(_>18|Xur%1vMlVOw5A<61k$eh?T_@75^8-ko6ehw?dhU}@Jm=h$91rO!!Fuf#)J_N(oiG<>a5xJJa>RX_P|Nw)j=|cLmLA+s&U7IBD!)wgm_c| z^y87(RJm_2mX$|O^4cs>Y1|+}`!|uspDccTTx*sLY^Ozg%ROGAKkFktpA|cTr1>uh$ToEJm9(dl+F67^<@zZ-k7PqW{i@UhXJ!*e-KJ)^N9@#f zKabO58InF3uHFKYrj?oncNv!Iz9AXR_~Poh(Zmq0XV;TmQeZvW3_ro2RlfDhxMxW^ z0Yg6E`LhX)24;YHqOC_xa~WeLbEq9n$}=+SGzF2X)*nnzP+WB4Nw-S;9 z7e13TO~9raJ2uJl1x~DW08X*YC-Luw{l9Gc(-bA^e`Y?k3I|slrK%Yiy~cN@T~;7n zVV!$ccY_hmkUn)1d^5dplaQIN$%H&ii}J~9Wx_xVyY`L3OeM`?5@Nfy;kAT#9W8voyh9bk zHFH^wuu+MQ2jx1-0-|fr5S5qLeFjc4H4P)HK9AIUF1UHQ-cWzaHE7A2o9wH9G!~%mq5@0K}CBl3sccq{1FHL+B&%hMA$xC9DJmHeWMXhq+#c*BZ`dWHg zNoAH94Nz`hJWy{v7(P6?y)cOduuIzqV(Uu%l>O&tx@idW0_)WufsUM5n8g>r@>kJe z;e5no-O_7x9~R+gQwHggw0vc8~1PE-D94b5AmC1M!Fs^ebQBaYq^90bsQ zi;e{7bTuluqNoHK*tda*jZQt9QjejJT8xTdp)mKoo^&IREnC^hZUQ`(s|*GN4lzp5 zo5&vOz1qfN;Ok|GI>;CD@@*E71$Dl$H5*YZSr-3B{W~nV^Ozm6?MWd_G$hO7-@M}7 zLIe+%Va!^-rw!sAbA>f}^yILxv7WlfI6c(dH(l_rRMR9Z^P-`FC6z;Xy)A|%vhzAX z^R~L4XC-$s(tjbz2-9TrRh_3Np!*?9WmBs8y!Mb#QLc$mt5~7rl|V5Ho1jke%%5Dz z_K`lhCcj!CiB2}5jbw&7^*NFjWqWFtHW=v75=4#c+IM-L@D1XdA1K!jjS3DYx)<$# zY)|P0kfq(w;#BB)>XjdnsvgIkXGpRmF6w>-o${BRE~nG7a|MN zQw|2pBsIkVyz0gOB`S?m08!}^nOwqQAhviH6>g{A`pU2+Z8?vh_@%vak-zhpR)sLQQ(}QKZ-shgPJVgACjzxonShe+8oY~U; z&u8~8aFt?s_#O+Fd7VuEc;;?5v*2z~^!%EMwHPRezm1Z{0czu4F4j^VaN}te-BTeu zOY*F-yJP%JGgqT0C!_OKlWF>0U9NWkeU!9|^$dTUNPHHhg7c>e+^ti01{A|ss4u>yON{*$Qe$J<;3B-xfV8QyyhV%3;>$6exm<2H|B-H!M2 zpP5ItzUFYWg;zPak6Lww87JBh9PzOY>ZK<)3RJVqT=n$dkQJVnrei1z;}y2=M`s+& zVt+yQ%l&weeC1ZV*PgKZz+~wEL7@;pb7hVegVW{M;od_SOMRfbc201)-*hdy!}&W% zLDUfsW_RxuQ$?vbe7lM|0B!?rMHFo^mq*iWs*r;?ynnqYAi|q9zluthHtDC=Aa`BX zMTkBg=|-sRWtG@ny_dc^uRgd-&F5v_6UE-bHGG{Fw0NtyFE)(pXZVTyYWn+B9Z~zj z8bb~UJ4I;dl=~Zw3efCzQ20?wz#8x1RyF!w<6ZS|K=L;L1Ch2%rbd&^PL@lZ zzK9pKxSlgY^EUQ{PbK%e>2X7b1*v$8d)T~RJMdg^S{KnV0}r40-KKlYZ*Se&n3VdS z$^R1F&jmaqXcZ7~3&#(cAL)N$^%Z$*yu&{nyI4U`-MGDXZM^$E2AU&({>Jm&bIYLR z)NoegT?MF<9i7>yItD?JgtZS7a6hZR9rXqjJyf?kv$JX6B zcpggPP?oC>K&OnzwaKscJh-==gRi@bs~j>1`_yYfCy~Cu;j^)lT69;X+{_V*Amiog zj_}=|mr)PBS-e!K*`gbuK~-0PFJN-h=C>E4JjH;wQG5spEo-7C*;usn$w3y?( z5lJ<>(ws@y6>aAr*p;!`uRE{uW_NEs;DK``>Jqu(6vI?pr8@vP^9dd2uzREK_DYQ9 zlvt5FQ(G~9a+(p^L=pCZU2Omj8nnzpS_T&)-ijpV3Q z5bOXOMkPE53Hq?jo{m&=zjdz%d%48}byW5KK5K#IPAU6uf|Z*Oh3)SnaMhlK;bf>HJnMDx^O7ehw*_! z&%zb+{^-?px8Ch4xC-dnH%S0c%<;4K4yo$T7@;%EWcEc8ju`X3cRw#a(Y2wlo!2zT zV0E@DCnXLOMqNq0|4A73-1&n-8oz2uV@Y)CEmrhn^qV*C)1Gvw7T=K~n;K!?D^#-e z32)I<$Gc*PLJATXqT1l>e}z38-1xw$moa5{x;4Iw7JWaP$$mvv;@$5U9h{7hy*Qu@ zQzEq}*>3w8rQqSw*Ky9MHwkDNYIEF@9uv2kvU>tR|dV7A|P5C@a z@#*XP1Br8+rofQS?~L2CwWL-J|AZXK9o#mU~h7Uq6d zJH%+QEuIz?J1RTp$7E?Uz}>Galrf(JXYW)<K#eEroRE41t8)eKprU7BIi%2z!gT;M&R71;v^#ce!#$(R2 zlu$-rD=bPHA|d+2;ASW%Z~u8Ux9Yx-S zDang|zM-z6o@KHxqtQRCubfilV{-y z4>TZ_`)kANsQ0I~Lv`H5WZh;!V+Alp%QL8~AGPe!%Vxo@Bb0}3_8aos6p;j37BZzb z=_NY&Kjq^yiO5lef_$jOP@+rmdQMCf=PZa zG|zz9H!s`!zrNfB@0$Ti5ti{OF84Qc{GRU&?k>!nhU6Egs-+?AP7(v^aqCZP$-e;| z%uIm{pDnA&oUzml>n|F6ABnf2-$&wriv85vclv3LH)UrcC|iIA8c(Q1%snmKe&C^6 zk9U&%3UY*{qMt9qi`)N35%7GPa*{7((n`FpHRH$7#NT%+pSP$#U&tZbe!7o*mHZ%$ z9WA!8Xdqr7uNr7k7OmXB{~iM+x#EtD3`_13^TF(CPVfd5A`tRpP z?}J|Pn1sbyEJ#podc#*qs0vv?t)9z+`GTNkOQ0}2>Qc}wd^kPI7#9dTmZMRYj{ zJ{=zn+Vwf)@i4$cnvx;pIo}%Lsbc~P5^VcUW_hfedZ6AXQzgF=BAtO)H;>z4=sj~F_t!s_Er7mRMGoBfDQRm##=;lR>W_p zR%n@d@UM}+R%;=w-`pflY>kbrJ>RPbS;)P@ItvUnb-r=v#du zc{!j?iU127l>CK->r_*#sMoj;Le8x=U(@dPa1Az}v2WNdYEPN{X=(($?c7+LfK0KS zA3K&<-&-O#=lv8uyS&VMt5#vIs9nct$jUv_E-B9JOwx=KIVJ35{p{Of<9ztKeMDd0UBg)BIM@XcNO#+~7Xd0v6?j(wES(+Z z`;a+-R_P#K*g(bAez32viY_N~P|z{_Wu>Asge#`wvTG{&D(-5O9CJX^Fy`*&slaWN zi`+@)=(Rln-8PjNQxEeGwCU%Ysz~FV8v%J4-`N|S!Se-|Ts?QIMM-#?5#GBbo-4KA z@xg2rq?NM%#Eg)2GQnPv&pv7hB}2o?)kd}?QfbJI8&~OB3;{u|ZiR1G7Eu2ZE{O+q z(n9KS8YLGd!R9>ePJM`E8&5>nfciH9n*k*)vEC@s*xe`O)th6=;>4|a;;v@D3;Xx! zk`jCv=@8YJ!;d=Vb6b%dhSppS9UWRp+~D5|j{icwf;JH;xppxPHqxmGJ*#qg%rGD$ z&p(pPd0d_eP}m&<>Ri@mJ{Tqw8n>aM41(UK08)DA(VhX5(44m<{2z_FO#5d_QQ4eQ zNu3m!XObpb-#i;sCaj!XArS%tWvB}sy{S=Rp6w>L%jI)iy=O=)Pr)B9LVr3)AgxR-`xiI^RIxC#>jlfXTC}+v#f88 zOQH@iSw?OZ@!U3d2gXjT_bPK&~i-cQGk zR}9zM>IWief9<%(LM4g!eM_?AL#+zU&Twa1F-G_Z zWs-3xw-AL>hFd^S(8H@sunkE=wvcZDs=4s4!b45q$wB#3Yz6L13|D%I%JjY{1k-|G z7%~iXsF`>8d4(0Zi(bXl<(A(;dZ|{a!OqlHi%P;slznO6gHp1|3Y_%g(L~r46E|@iRq-1!C;_ zUE9T_xnF5Bh&CBOa4=pxZ%>V@8+sjd{%Czu!a{fEpBBZK{XfK#Mm;Q9lDgf%4b3 z+(03M{>j~FlYQ^SO4Qqhh^f5laP-!7to)qJ|= z60gArU#`-Qb$$YlGj-+aL<;b;(+YVFBhn<_3e1WAvE%xGG~q#b50;iFXvY02X}(+w zB){|no7f)V4{VPnBmlM!81J<`0df+RNy34STo^4Oxt^c4JfDkbH7c%wm*~Wz?B-;t zf61HMBKTx9$EpBoCDWo<@CY|dVd7v-+IGgLj7`v5#naj~O`CZUsI zsyi<6esDgTTWCx6(3gtnC+|9d>y}?FLXeo>E~(Q=A*LE-H=EVkL4KTcVaq)VM_Txh zbk&`u6q>?riR-|}?EQonJz;0Vj=k?)K7RwkL!KcZd3JqQp8ezQDwQJ}L(<%8?!u_< z_)OQ18)+WQ>ZCMZf0{s0@9yF|CP;|VT6+peY1}?xRI%!XcHv|q%mYH;m6UCr=>cLM z!4|1~P%F^hF`d2N-El|dCHKE*^0~jobcS-!)jFFtrSmJ@9cSEk^xh<<+BfmIlYMbH zOFjbXuosG^y$NCu%I=z&$V@7l!Mc#k7=0h7NJ_HDw`6VKmjT}o?0%hmR9GWz7wUc{ z@=VVcZvtZfFbr4A`-SVwf;*@(DK#JvSUY*cHfBwvREF@}VOL?>kh#bBMA zu@ab8wp2C}-DJ=U#|E;yRu@dy%nYOcn|EQk#_>#+B9*g1w)AC1<=big=OoD`fN4%6 z#UY`qz!)G}$sVKSwhfh?A%!h^z_#gzl0VG;!lvC|+gJps4x(q%W)rMjgg{{2CAZ2DgJ3Sz9t)pw_&R0>Dwu>|XKaGc+{t06h& zh2%_?H~m>rnB~^R?r^XLk;2*0nr`DfPmWt{^+7*kP#ODT!}Pr6;=19+)*z}~%Vhw< zS!1f1R-43q5TGe0P4)lm4)(h(f z(`;o2%0F9uhrN;IBxR|@KfFqUT<=vl5{S{5*@PHEU#xhgHiU}71q|GDOmnb_F+c3J zvPh>SU){?G3EO-J3sX5DB}99W63VSw0<1P{|&$w zg3lyGnNAVw(Qb&-6+S`QI-iH<4X^3(oGO5#REOSmig-tn2^lDfp1MwUA51^O15|{y z>5r3na&$SKdxDdH^<{j;$T&ZT`R)3(SBw|)OGyfJ5jtfO-v_agouwDXQ{`S%*%2M;?%;fGeV(NHtW+aC)zz_IzP_!Nn;jcyQpI zKaYDqy$5zkd}tPBS{jJtK{w5=P1MC>K9Ew}>0UP$Bh(Anu-H>gY*k1W!D;;$$OXJq zKn?KSCs5B$L;|ZMI3%5aJTm_75UL+h<;x1u_=dglTFxyX@=E((%GqT=ocxw*Z6LZ!B^KA z{?uiRZ_R%$C`{;k%tv`df?I)dXeF1+Bzx3BTPvU6;5!)_OBAIFi=jBHF^iv%yN12` zSnjtCLJ6u;M^D@UKfj5d@*n0;IxN`ju3VGt3@UA{qV$cp(`1i^^6SI7YdY~yd(-`C zZyASp--(A#hj2u?H*qM;_DdEp4Di(WTsm_xon}<`eK^q?CD6HO8e-=fTNZ?pmn#gB zPXhFVJ1ajE-cK`C@#!{P^UC$^(*_UaAEOQ)AY0KkPQ$I?V&3Ei@5R3rc(9JZQd!2; zH_jNd=r5NZu>O?>4ofD=nkF&|fsePW>{b~31c(RI`ns@kmH6&--?YEvl;y8 zu>9FP;BeUdrJ*sNZHpCGxq6_0C5ZU&V4G_CMZB7!>&0YYb6G8#x4e~a>qEKATi;x&1p5d^#L2z~tQca(Ib4!UN-O!Y~ zlUoL9u|1#f-TMlEBjKyfOa9&;Q+NIf$0XsQQQm0r*_E^!;B>2JD12Lfolm;qcU*xN8NwLP(wPx*h7vNb;(CW1iHwD zi1UWU`YSG-)|~@EfPV178MQay{%LEI_O8ke>RUJCbxWM4jURnH@cOILeGC5>d$!Cdx9~BKRA>a|W4OATKki?N zdTdTalqHG%Ql+w2l2cy_SrB4WfQYyUWGSxuBTN&oC0V3TiUDuA?%r)^J`12sGv=Nm z#4Gum2r+`_64Ks*8$h7`jB!wK|0DLVs$k;ie zC*Ytp#Ro)me)%a#UU7sz9~*hU@X&wMyfi+67#~Uw`^4LU0nO(Fy>5g3f>%5QTD>)Oh}U5j!Q zXnoA+57*iP{=kG#`Y|dAi}Y}DvW;PU)b}`-NeKE)PLM)i8W{ZqG4s0z@Ctb^W zM8rK&Ss3vC#MppRrmFJ-HVtLxIkg_g-?zs6GZp`?n*RO7MhwnZ`6H0-S!4hor|O>a z7tw>`(O(ZxH6j#s5Vr87e@>4NS0e63gcaJc#XPTA2A9C~%^&x81QsZOcqj?;N{Tca z>$T+@%uiZDhe;^dDXV6JFqAccAdkA_uO&$>ES3u`BzEp#LdJ z`;Wz=5gK4EDYAIcLL)aG$clW-QTuiFZMY<|U|8ty&emV{g1txrB~&EncY0T ze2i`=V%;CN5d1#}G!Y!oME772X@T4=pl`iUk_txtQWs&@{vWQ?1&`o(Xi=3lkZ93V zDW2^{p&=Qo&CURAe*x$imQ?l*gu_W&8_A*5d34nNGE2R$MC!@TrEh{b7xv z0S?$|{}{0K@F7kAVgHlqJi9>eKuPCsF}y zqG%pA_1{|%XgFtp*Z^T(3&{h%J48|;wAPGW80+s%A41v*+(|;elB}Y~(sa?=R1flyx z7&vJB>yL{PRB}-BzCd#@B_7tGFXR7egbvVq_EDi2NWAn{$nZ_YfYt8XeBdmTd;f=V zK5#Vz^pOB z9-d05N1^6b5=&k}9R}V-6C?f*FthBWeJI1yoAl$1fZ+R|o>qpWf|(u88W& zTcZxSS8>aqMe+XQOZ`941H>9@_#DwXEDN}>g+EswxSvmdyq5Oe=YJNd3NsuJXe6h( zwbF_UxQ<8J2LKImGlK%d$?r8j;FmMPBq6hUe_bB*cM!=lMpW0@!pSYIS3_pSL#_Ol z!JXyQ_UxsHG&VqK^OgQ%N`WglAYN+VJJ0)!#^XmHv-yv2`6^@^M&)$OGCw>*eTITV zfsKTMCH`_sG-^y>jz}!*n5%l|>~gwENX#e3qswodOLW#FtUbK~&_&TAQ7Hx&`WvXz&z|{@Y`O zg5q9@;#TDid$%9$C?<_Oi0 zh6V8TlJMK|J;>gFzZVYc0}fo>mjrLOJ!fAlHb{k^y?~u_qc!b*_tw<-GP{u9A-(E7 z%1DZ*RblL&vWkU&M0HWY+1!B3z?VXEAwv4W#|F%#JA?xT?u~@m`mh_J))zT`dcpxs z_BrPQW^Td3Oo1}bePgVx3pN3%yJKYR;>kDKq}^;2}MExDy+ym3sVQ;3Z# z@4oI3j6~rrQIsP>uj%~>=E}x?Odk1a+7E~WG8`R$ly{Y|-x)fTktM^xeJDRQN4-FnBgx%cI5LM#6Mp_eG^amSmns#-WTNxXF?d_<@|POt2$C!F z=lESyL_w4dYL*>w;D7w}pwK~FsaM$>pYA)&Ne_sbJ&3)Vf_T6RJdR|GOyJDj7U7H`?e*HdC3v^6fGQqPiCUY45{(6xTS4vws2#77P4V zikish?cRbdVgwZMVG0g>y`?^R5(`Seqklc#(LhRQ#!aRTO4x2iYtVE-7CgKH(z%@4 zxzIDEK|6bs#G$BhuObo4J#H!#^{0kCicIC{m5g&{gS09EGpvmlb=q31hxhIRQ8KI1A7L z`w8{W{X~hVPKR;&Mk#|#wV+_BOG57OrY$Id)#}401tcD^4EdjMY>BNhnXpx+r=@v~ zHyjM1p8HYZ zZ5*pgx!MoL>P^}NWAo`=@qav1egrRQVJ=SkF`dPWsk3T7`gMZMs>F(#?H8|;5eCYu zjhq(%#|l>>WEH9(v7YO}E}MR9?%GVlwd8uGcWnvs5rK{?*HhuY1#9|itLK8=RO-mf))eLI+d?bOIb*sIf)6TK!p6R*^5QD)peYge*B0wb+k;{ ztG`yRG`_?U+=b%0>{&E?Q2)a2aM`qz4(I$U z=*HnrdnNWXiC0y!RoB=zL&fe_?GKb6%vn)qALz4fILWi=3>8(j51(zG2OXv0Nk9E- zJ{91ZAtv|cn_-kl&RD~E$3+l_e}d zL(xPz9K`>R-3J8RxW0EH`6X=0>Xe@dT?E&TR9`^kUxEmVBT*`l{=ER;#6kM<1>HC? zdWKiN_Q{a}z`Z`g&l>>0o5EWqY;BV_h~_p0$|G@B9Q6*$@2_OkxIN^e2KC?Q(TR_T zk67>6ds4M6mR0F0C>5=HrczVN>y=1-RN^@c?PEGKPk|o?>g`YFa6}$v zJL0~Ha#$4W?z2d39*Q|Q*EUa8r)wJe>~)XkwJ9;fy3*uNFT3lz)@Zf>r}X4Z|VIQwb+0Bq~{>Lt?% z#OjOSH4aqBw28D`k$Q1reX7MtMHBJI-0K=Um;^E=Ss&B=@7t;5P( zp1o(p!;1O$>1T^Ng}U*T{K@{f;#!}uBqW~t`yc!B1C~m<5Y$A#7ZyXmbHIET6rhCD z@keydk^OZT;n$_tU z%H`UhV!}SN-SrCBpix39wqT6PF#}d?Aui=g-G`NqO5bXV%H0h-M9huTF`qK1H!y+>J5zhv7%=2A{4Ee0|da+RY zS~@#dUUHFp$c^46Y;}C8VXn_Y%%gcNV>%XTS1j137jN2+>25-wV z!KD{bO@h;u9%Bt_pV}nSUAxTc3b5#)4$keYG|XA2+52K((B&6TMwxTXN*n#6O>klI zAVKa8!VL&u?$!Cz4wuYy zQ9}5?gUt6Az)nXeG!6Ru{09d34Xz5ADAYt-D39t1<*@AgsefJsRifnC$eq3^VR`|H zoHz}be*f>k1F67o=>Xv3Y~_lR9KeTnMMo=de(br0bp{^{+i!BVzZswG*yw%TEmZ1V zMJ_Gk8)eTsEq?T!6WP6`d8Q4{uxgn$&V@ri+-8*0AlF%_4%Ns`O+qb_yX4Oy6gbr`8#|L;h zFl#)m8kZs{Vcmk5RSK{L9dNR-xfgBO!pguH&xK#6^6A@ZkkYfkGFW_XpB(Bz#)75) z4Y5Q~L7;V9!h%0W42qf;L%vnE!nyY0<Yy3x&1_1b9KLkR>v!9^axurtc%7_+ z*}aGjEK$DCvmr*bZ?~|8iR2@^bzO29vO?m^=xp;6UO*NqE@z08KCIIh*)kj}5}Y$* zEq&p6-YMeut>ox3Ek<9&7v zTSQ0a`UNtRHqS;*c`Zjy-=ppB!NjCp))aDi3YDLZ&Xp^QHfKODn?J639ec0DNKjRUi>s@j_%gIo+j=4vFhCk1HD*wAuL6+Ifxe}J6Y{g$WCX$Wqv_aUJ z3&Nx6nvSeVv<7`=FP@uFO=H#*|}pof~bq6+_-lS7+8WbE5JF>v)}B278;j zHM^N>?J`!!Rf|%(Pum1H+;W?rWy+z<@|B|8`TBgVN`LO{Bc$)zs?F_vR!Q-?%of+x z?{imz!iV)|g#3tq2ON5SI0i_(AANzN(p7d|(C9G*lZi*IG~k}F_)!MU5;{+|K7lq4L|4^@2zJB2mjfKu zPyEuu85P*d)o3IT=D9*NtgX`^spSf~r&ih{Cf_P+syuyy0zXk#oqh|!yd^%+38_nS3uZlu)jrTS?wOEZotCalt*lA(86giLEsk(-~E@S&C4+j2_2%P~A z#pi%2TNHl%F?SZh$k2> zNTlj^=JTJaa`<7%tL2p!~wo%W`=o*+wp1g6PG=J=!*2u01l&o zK)G<@IRDHKs3keTb?%qWR+%jx6nize&gJW$`3;biO8yJ>B;yYs&Tx_0y=;Pu!gliY zdx5Zj8AfIXoE*cQLHYlj904zX=vj0H=>mS)vu^g=J19$&h&W*rf8gb8LYr%<@+ z5-?-jH7+3q4UQE@6E{X~5B>xUyllFQGhTi!oWwdWjNItuc%m;SY~pj(;^d@=_kTG1 z%CM-~u5Ce35S1=z5J9Ayp}=(l152s7`mlqXz7M;gL><8eE;6R zA}D)b*IH+-HPLTfPbk&0m`Ac2V_{J^C~UppViDo&fQ=_tEAM<}ngT9ny)zPP0Hms> z(;WUnE-fKK&!r-9lef{BRAO#P+$ygx1QIg!RmZ~)x=Wnd5xO>lpT`ipCNu>Fi8lzk za1A75ghF3zPn%5<$w`DMSO2{1&^JMN0A(4 z{kV$wG(Nwe7_+S-Q`K6OQEpYReIWMvb3L>!c;l&4E-;?fM5np(?1Z>;q71WlYBi$P zhp+{KG~+;u7QFECoDcZ1?8}h~H8Ou&8DpTh2 zUd??Bu5nt@Jl*jOm{G3(Agg;w%G7Y4>v?&u(}F|_Xuc&v49}!d{$4vmB-o||8{I@K z+7Q=05%j-k!N&)niQ;yFX=^-n&3!5Y#)iq;7juo1QmFMn%({NH{$_~ z@6SkxG$+x2+7VS(J41l=T~g+QUlS{^ua$CQz!9t8*p3i8^^opdNAINU3 z@8rBHa!ayBa1`9Rj`S~=bDMReQfS@hKeb|FUHXFBa9f0KUrRujD3TUFFZV01}&j)qn?13J?1`xE0 z-kK{59gA*|7V3;voa2`HCn?UP*m^LONk3L;p^%sF7-LlicjQAz{(ZW++%FLnDB!xj z5(Lrg1EO+$%X(=X+g+R$l^hM(9ia#<8}~48fFrA zv@(he?v_mjT{DrZSfvsL=1o|&dgWvH_LSNTz zHyIs%!pv=l%?3;@Mc4%ibuHCh0ovv>R?$y(;gjwZ8D0^#q59rx+kDS>qAP0gvsEV% z9*9RfY<+R%Pn-e-Ssdd9U^X6F(@gDEYMw1Kp^bHn#xnzHQRC$pr3t^_TZ>Qq{PW~u z2xj89b2&%huu;)*tIrg_pN-Lh_9#f07hTN>AKCLsr5qg44Y=-9`ux*gx?kLb1GA%k z`ulkAApj>`7T+x?xq?EHhklk!-?q)xuMJnK3!!ANt1&)&pb?jz4uH(}U9f!rl8*q4 zp@|qXO%P|LkE~T=+{zK9^_CoUT&w|LXpH;&$c}vbmzWC!H)j9y5i1nY(`ssz(>Gab zn)Q*#r2!j#b)6$S=ESBg8G?hALDb;;x-^4aDlE;KfN7Wqn$tPN#zF z%VXS&(2RQe*QY^4f}>od=7B8?Y{N2<_&aFmTH-SO?~8){(IVA?Te4NZb=q^y8tO=4 z`nxO@LMjj$svVzTmEv$zVa%g>(w~0EM~{kr7^pPL8+nb!I^JPYf~H8H4xU8{-EUw$ z?Hj5XLTL0Ld0jqPkrQgN8WQt}S0uY-jW~;$t+kb_4ccZo{ z5#9f`6Zvz5!=q10fj%XNgCt`A{hWL7IY7@B-%mKadj;R&L9g5`AcJdfh3S?JUZx!w zER@i5*VevGnVDkeuGMultFdpGRt@R>M))q)bHIQpH8p5}S}n__fW48h*L8Bt@l~z) zdyg0ZHNOaDjF?n#?dO4zqreuWE%sZZ_~BK9a?xNqISLnuTHr@(C!!o4)6F^)XQ+S>Mvio^?dwy@9dHA~C{Xg*fp05e|?M--gE9|5EE9|e_KJf}7 z-hNlXbS>Fb<*xqw)~W_koo^Fo?VD3=WQr+fxOb`}g&%TP^0t*~G0neJndYX=qN&=5 z!uAN6YD5}+n=0Hh`6YQ%^{sej-12@y{Bi2EYr*m;UymWcgU+@Lc2))6c#DVBKj`Ex zd+4a@eT_8y`dCdu7SAu7B2V^UlJl{kDDnGv4v5a6K|u)2#q+4Wm;4hJyBho|soN3x zv27|f4OWWJ#6|agz*~7Cou7j;z+bs&pv>KO(@(zZF{dZ)fxN>7?J*SmeiJe-$3m9s~y};N)8P zfqQP`~TFvAR0JN-hx~Jt8S?Hy8ibve0;p&H$c%^o2COO=d;YXaH(UQhkM^a z47GWk^P>z0UrIJ#5VkaplihSgv*|K*aNY?ARW|QDI`G&Gi{Ml?Q^^Zb5=XjjL=Tk zPTJmhpVW6PF_jH77N`zrj!(ag?W?BsayA~xpK3bwq3}n4JAxhYjI*(Z?4IqJhkyGp zTA!!PEGW0NSxqleLg}kOS)Fij6dVt+aH-nMH&4^v1Yh^ z$U?}D|JL)z@bwe`I*|lm4QWQ3=s)Lpm?EQ;YK#@ZVYq>q(cmv)LXx~as=%AMJ*p3| zhcrI?s9VEAPM0ghgd2ZmrdV~gNIiz6yPv33DB{&;2dutVc(b*_uUcc6*gTP>sL07n zvcoQnG^YB&*=_!1*5eN$ukRCA+ZuqwF*B#|@YLkg7aKp}SyTpzQS}xfCY#6SWez@aVJ&z{-ZSci{68;FMIv%>0dZ0;^VWEkeP=sC@+qM1S7YB z(+l}q&NF`37SI!%=)Zq@4<3lnIX+h#fu!Ib))}I~rK;R8M~FI{zv%7UcN|NmUIgJx z8OU4`6K?b!`zsR>)e;?>(>3sIu5|_v)3!S-Zy>QSTiZOBu*CmLpq0)+DT`@VWHNaO z$vs|1MhDaPL(pcBjr%>xqjgU*@C1wq@MVHvPFb?K-rRdBpBXOVO}DlI-OYIL0VS!t zG(1Cfj=#@jBkG2M0?~L~-*$6;ZM^9#V;7Az!}MOxPcE6wfhK3Pa zY6;V&)%NG*SSzOMAB3od#;6L-)Tp`V>x#fSa8dxtswe0xn0iBj1ke=Q{ zLBwgxIe2T5KLv|{hDmf!78*6hHlAa$9(D){XlXGH$%g^#GeYz$1Cqmk?NZ(exK^(k zlmg-Y79xQ?Bv?41TaviZX3)2%#91jsXkWn0iG(vKC#ZftB`#2G-hcjb`5k-MevuJl z5Vt95)ob1_LQXcGg#4L-lJs9~1^)I$%BjiO>kL8Tybv8!J$rfP?UhOEzI!B&W7}!d zUk^@qR)42CipP_DzOEjzzQt*;7&eY9KA?@@pbB5b`5sH2Lq|zIQepQ)otOvLEiyv$ zI2IIf04#&7!L8i~W8vV#J4v4U zm3xR}x@$D1d=hu%3Z6^3@<5%O65#uLC9pyOU=cw6!Rv2T%Ya9M4FDiDFJU!^d}Ob% z@KEdB)Rge2sXd<=32|UbUw{hj%|A^U=?%+)3j7>Z`bQ067F0P8HDL#Hj z{!AztW+2wCu(~;1QJhpT{lkL_J${;Ax62C==j@p{+19z9t{HrN*NGD@yu$PI zpY}xli0#{HxT^eRn0&q&6TRRT@36IjL|Jpybe!u99?e7hIm(XsxAyV)LJcJ#F|~A@ zW|#2yUW>6t=mA!8Fa?+s2_^c`4E|FF#BW$I?vp^pzip!XgFu{*Y(n&P{|IW167t`Mt=p*nFb12@+Evbum6de)RVSUzTVDYzpMUuduyD7>D3&fMG zl|A}{b??E)zP`n%m%rbH3h*Wha>opad+qys(kEHGt)QTNhFv#LFk@c)rs+-_O~k=F ztHK0nUe)angS9vvhREw!OeynT+901GS;v)?aw`p$RJtW4syDWuBfe%yzO4j$`c^?# zyVS?la0+tr@bzqKt{ylUb)F(7F(|`;)8k4DlbAZCL$0lnJQ+yi+lSb1R}2_SozaOl zd*82)RIbOm7X(8So+CK?(3aCF^|f(Zu69t5dy|KU;HSgz5Vd*);yn*+<7*5w>PyfJ z%e<&R4k4pirgl)umHy;tE{B>rXiq2sK4Vke7Ko^rP{+-FBK5A6L3!riOjsFkM{(H| zCjU9ik6vVOgJGs=Zg(w$=Jeaw(Z4sNHSmr@qYX_72($n53R*dDffLFv&V?@`kaukD z+^B*+Z2J~|{>#qCU^dp;g0!R;V~U=1p-o{~6<6;?eebtrk4|w*)1}@Yo#SAB@g}q@ z_WMgr6;X5GbFa~C3m~)~&t+{U6DzA{l%301poZTPm1;NNw#k91xMNixz=3m875eg0 zkhiSm6ecq4|(z$n9fOa5YoCzJ_he zX*T)(I)SvJc#A8TE)6FS_}RK@)tJxPwXWWYed&jEkoO4*#B(n=t_-Y<<)yMW3dG6?ff7tJ=ay<+ZA85$j zJ8);JYG{aMS-e_p2xC0c} zf-xz|n2*w7iuw)-(GvFkYC*O_0%}M-u={^SBN~67jjgXrw~ZM%`0$|I_fP(Q5wNFq znPKc{Si`n8?6lSa~SpojIN%u+LdTOgeKVn0EY*sawj5_y`WM4(v?vc4TEL zBHmHMlJCN}f>>Ix9)C`Z-`NXK&F=hqM4pvLGh2kg=Yb4y=Ij0`WSKn>+oDtR`Sa7U zW?X~l)cE>UV3#|cEJjvGFWa#GOR;or8wVfFdP!+GO(R^tbFSsg15YxN8Ft&<-bQP3 zk~O_b0fb9!hGKDUm|TQqc9Pja(vtgGPb?KA8k0r$HR3Z4=j9Wx9pe%`ndQ?xFW`e< zs7&YTicGFAHS`jzt163PO{kj)8GE?hF-N&A0`qz&np*7`yMLP*zK^Knm9*qk*s8I4 zd)vDiKRiaovIqx)B9GZX{~4_JeD|qHiMUpzf#><~maWMucKojt@%ts%6TQj(=Ow(l zeF-)H)E?9LxHH-`1LHS|eD)HUGS;7$GgU9gy*z?yNYH+uw7&>2l_dvhh$9+^WF6oI zglmxOFfY8-R>ICUkITzO*O*ehi0abW{C=)533Qx*$}p}t4Bt6%QIWx@MG7FFqo`F{ zV3W*EDQ1of5;sypy#K-R<@B8Xyp%CpC+xCgd8WwHFM>TKt^G1<>UtdjC z(=HnG@PIF(=!!B4oEj@%#9!00#%z}!DK131%HY=DNUldvvIu8OfW~8*TWoxOm|_|@ z{0Ls&MfHOAF{Dsa>Xj_)Wj9L*G>O}kB)6J%9k}0NUB_g4_77O=-Mc4A3w42P#cI0d zna1feGJsV1L>PzZE+1g|7-_K5d9l?xBnl)=c<($XWi|~V$ zOIazYQh-khX~Hn_-+H9{0B*gH%s4xbiyv^g0ppM6U*nJHcSFEU-Mq*0m)`hlBj<0v zuF1*cVu0C8aljFs7>=bUQAMn#A%YvXO(gJTzbXXr7)z_4iHl_|)4r57;7zejLGS$T zQ5~)?^ks?Q$tdlNK?AjeQ%&*Xg5`3W2u)(Zvf^G&ux3KuvXmO$%Up#2^y#$3Y=<>K zXpCHQHW%ASnWU&rBG09|uZX&}u-Ggwva8<4=6D4!wU*jhFJgl0BL+&T!BfS-o$34n z%wdc|DHhFdm<-OLY}%1iSsyUr#6bB-P8#wY2GP}v;{yW&6e4YFbiF0d_Iv$XGsw$U z$PSJcUz9bTH0POYjEaFyQm{o+a~9mc%r%vv#kg2)hK`PpixQObl%majII_*45S7YJ zH2-M)^u>A#qJF0De+7k<3Lg07^X}6qKL;|T4*ReF!q0n1lNgati7Wil)-E%`snLcc z3ja~Q1%NaiAZI06dNly&@g#$wllc%ESb?(vbo{u+w^P#p1Kys;V1A<%KV<~c^a5JXTyPu*(G2J z@G(mbh-8ygAb17C;+8eM%k}0yvs1JTqt{*YxZ(9`Oy8;7l>nV=VOQDwAQZniqdj!L zscAr6vkxn@#37PRW=|Z@snqW8{13zk;9~@J73J4>DdLCooRFcS9x5`MmXO%ja?Zme zI4mcUKKxtQ1%Mvxa2(m;mUQs$R@tB`(ErCN8YcTgy6c`YD*c0|Vtwkv-)aHh}M_ms0Wed^a50yaBQa?8DTd)BNwJ&rJq1cfuHD+hZ^{>ZE^i zg&2xB6q?BL8mR(a+j6VUr?0Xz@2m5rCNzV19cE;q-){Tzst(YX>(T|oTC|Z)9Tz8{ z9Z#8o0`Wrf5ORO0)3+!NzW8eoC?;HymNGs|~B@cGLQ1j+jUDnzUnhkcOFk zt4kyLqW#>gA&7q>#2v~;ypzhX%l(==Z9yuzv?*a@!>rK}$BwS$u z@Oez5r<_02VP>Y@`P`g$7LZlQ#>7oW3zV4rPmH1__oWs~kNJXv9suN$BnbY=CEbHl zgCCg^Rvm?;kleLw3G9Eq8uav!DmCEfllYITQF6=MW_}UyoMa!_T`8Gf0~H<)r@noz zAFaHW=N5&9;kgi-7I}4^<_0#36ob8#pBXsGht(YZW`X$w4$TuC=7mA@hE+y-V7KKU z;bQWofJuBUPnob1p0W8TmD*G$gSrEyi4g(Bw*bt5qe54rMuGQAJ#CWhk(9^z#GoQw z`$p5$D_tYFVL&7DdcbzMIy=CGH5=tNqBuYPiR}7^6D@{)Wo0d$XxIA{ju)(5Korn`TCn6qG4XyU9Q>+)Koix^bFW@W>jm@(-sV&>aZHEr=WL>h zxeM;^h*v*)LnmQBxyAWjP-Y+Zr?GvY=e&7L7I$(?6dzIE`r=Qi7uZ4A*dXZAp^s~* z-mi$nV8|qR#+f!D2%vqnM#iWApnXvRkVm)1y6FJwMi4w)>Zg!@gc6bWzfr9y6x1sH zkA$dpi)t-_Zvy1N5m^8$MY`|2<49CJA@mfKAt;CXyM)&!RzmSFsIS|Qb{6J&)|At6 za>^saz13gG;}CY6IP|?Ext!X}Th-u>E_DtpNjXTYQdlDoKnf~M66^6B|N=_=ktXwAf+Z%=p&XjX*G z&As-zr&=4Ah8|4;d7_U)lrV?%(>s?E?Na)%h7=@(4?JD=($Aw0letN@lc&@9ve18_+ArGxvwhTmYtNBVU@GUr;ckUpoMurvpdccE>bCUk*yf&AY@Zv zs&}gM6j7X#o!f-!xhRWpZ8HV9$~D~1)_O;4}m7yCpmK5a-{!##BhupuN(nAZ+ueHv$?|enk5U+COqc`sB1a8 z5s`|B^R=t7Joc;evj2RPk3_!u*YnDc%2sx*&YqzlIGmBAH2lSb^1cYl#%O72x6Saj zgEH~{Ltuei|1ScITWk*ZPk`808|fCW03hcUuYd*erd1=xyto!FnYs*Ckm2UkHJBwT z<rJtwl>?**VO%Ac#EWPy%Pte27}^XLgB$>?Bs_iitVlB^#w;l?Kb-^=pdB^{i^o#Yd>xZ2&nZKKQt)9frx?@#->*X=a;if6kb4xUkvnIx za~lVX9{ZGq=_!;j6@_lJFM=x<3Q0T|fe+UQ`R2AKnVT$fPNjB*@V!hRM8fj9XRe6q z7#4oCLJ5MZ8?L_Dtl@Q7dCd*BKSGqWx<-8^$V2tAI_R}S1VI!m={Dl%A0+Gd^$)b} z2@+uPcBVm;MjML#rqPP`m!RH5cnrTanQ7&g)O)A<=S6q?*JbY^iM;!B(U+gK(*ASN zAKzZ|?OzvN5qoIesdyyC_}XT0eGkty5oRy(qusI!+mS58Jr&zFkeZ&}-=Q(5!(_eD zAt~RRTC|$Ywh%|*-Qnv;{i(r^HL|`8&4X(zI?FH*(=+tHWNiC|S59sN8s9NKb^o<9 zF_|V?7vW4310}4-@GD|*ZjK3Y)41s9IBtI()O_5^k0Z}(8v#c#jCw{En1)cv%PDnl zV6U*E+}Xy%g&=<+DDM$M`x9$lvxlx+M+`Q<(C>D8>u!*`rrt7Zro9?KlCuk#Im!uPgsiz%#R89gx0QmZ=$96q($kHEG>R zjgP9<4VuA$(qTDlUzmwMq_+0Q9f z=5sG%THT%8(&SNQVo7P9QPeX3$F4Yx5C1kSQh7A^^AS0@1Jb*5tQM&hB>VT6XMFne z)Fo1B9zXc|)FqPuoVVh;ao4gGAHf`w&5|MvK^L67I2v)%ITVBV>(T_kKo+9I)Kg?r zy*WKV0r0?w)nkttJbmI}Rg7S*>Z(1l87Fn2J?%!M`*QT1PYKq5kZIVD4g+$@m9iuC z2Z1r8qTuAYjQ;o0kL+FbT~h_uf$C7Ks;uuM2{9Z)V_O=c|Ll{J%J*j zr&v?kEaue9cE+iSGo9pxV}6@5FMYzA6{L93j&`Dh(prO~i5e0ag_7bQA&QR&LiA;( zVkB?I4ew^FPw4$LjRz(cYM&B%1giNBXw1V?sYY_ z&y)&Q1qIa1jN3hVXh}6#20uG@4Jh=C{g^4D7IkDbCfmY6m%z|shbyJ6)LP}wN#ov; z(P7B}&6A28cH5$eu6!9g*rw=mO}rSQ7EhH?@GNdhB{iUnXFqpTl7>r-KTx69W|Bpt zMub0yYI!mEGt~$o!)DuuWbN^BPEN*&m3+WG3QoGS2Q*D(?)=4C4IyiT$*ZizwuXdt z_Un(8Xm3u7kn7(t>G&}|#bW+__()L!w*uf?sPWj+f2+VfBm^?jRQ|VGy!~f)PGF4k zzq3v-wBN2ZO#5NN%Rk`l9@5I46-f8X3YJkaun$G(VA+wIc{Am@e${M??J}8i|Fy z0kFd()9dr{3awyQcM+@>zGP~zj+D}v*I5{%60~mI8wywo!3U@pnvl|T{U8|eLb7gG zZ&~73Vx*7Ea5#v)@mfDQ%{!JZlU9FtmEuYY#P{-Qx6}r_Bz=5vSzGNm41CyuI8}O; z&j61>ficyMYnl2sZ<@BYt6F85Du4prWFEsf@`# z6{4ns&mbH#m|P^HId{rcO1pfS;F6#2>YS$er0Xx7xD&T^&(}@U?0<>4dm&#_{uU1) z;&~f{0-|P>!vDMsA0G)o5w|P(Rk8D=Kd-K7BxCg!Br?k#(;+&fuwO5Gu89){<+DmG z8_$2EEKKYsy18DzZ%T#eq=q(tv=vF}oy0Br_911HtLSv1FWGkxM#4rr>A_oGwryy_ zMYmxuux85>H;WGNTQUf}NDA9dN0DDnk3}zPMVI%dVq{mNRHpiW7AreqTre({9C2O6 zO6>5$37}ILl+tsr*|mJbDPh@^tL`zdf>*5dv6)ZOw(*!{Pj^Z5GEwS~{Dy*N5U0Ky z0lt2pCjyTRiP2YqEX{nKIlDyW^M_&V-r0%AUh9Ga(D($;s|ymBY3fFgHq8r3ddf@B z1$E;Pm{)`O$6UD(K@sS;Cmp{ZX5=ei;KmMfsA)XbOJaCm`rbUz`~DG`RIkvOK`5`9JGUU;(NCI}0VN+4L>QY+l#bVd!x!Re?Jx3q8(YaO3q? z1jj>4SZ>j!`2EN$)o*FQU~jYmTuS7CLf8p;|58fZTyQy0xQ%UWkT#{L>3N!lKV4Rg z=gK#(#{_kU>4P=E=tYc`m*wUX6?kO{OG4DTD7@-!hAVf`>@HeCTB7>391)Hx7iSD5 znl1YEFuE;joR$GNjGeYW-9=XCT_x~|BgH|=>XONX1QEgFHHNWBEiqG)d$ZrmV|#Q~ zy9{Wmf`C-F#VXHTlnwT6@Cs}<%6Ataa%hJvoUebBikHBOz)Y_kEw_KbHVeVxmb z{sbnr$O6ly0A%A-QgR$)5eIiI%qj_y`z;1g>V6CVAbK=q)<2qS#BB(HDx>mZZq{n< z0bFVq3i=puwtGSasPW3w1c1ZZ0zic2FuS&#}rU+`za4*CM^#A) zb8JGcj7Es~w(?EhnT5~bL0T5n0N2WY1Fu)wps5)ih71Y`D9+6dGzx*1Pu|{E()3&2 zfASmPs|a*CInKE0fckkcw#}vFPu{rk7#uOfgDB{-hQJLwpBz@McG#1z<$JU8&(W+V9E2^VPKKn5HcR;im$w?OM#K$KCPAN5Q{VP`%AB5+(# zAlqFi3~#}0J`vu2HA)RgZGmQ`AH&HqUgcE&u%^8QR$`SiF!b6DbN#A4<%3v%5WhR;_14(KihR2+v9v{=(+^CAxy)aUpHkJeq z-tG~4-;^ZATMaDSyrYmncctf*3xdJxiBkM#vOlGPaoKcuQ1Ve~eYlEl(0#a6s1!Oj zKn^5R1;oXvc#kJz9B$sBLVz8M%jREb3meupUajxmNxDQqa^&HddQbGN~U1@t6K9Ru&HaqHox6JD6v z!7JVC7Ke38+`4h$yUe9L@-Lw^Rr1koFNl>T)!i(yp8#uOz^pEgi>r)|5-FK*9>W9s z1(11ywgQ-XF2X8@+rW3GEAygT~nVSIYAm$ z-nu(+WM9lX2!wgTlB6otjN>suVUr>k0OOShM9OR@kux2lhGt(f71p?-7b|_Nc#|EX z^Qz%M{?YS8bFv_TVjxBT;fPRg)J-XM>Puh@^)e#aCE=)l`Uajcd#9=2X><1pI}Nbm zT4;r?)>WyfU21#Fh}vA#y)@1Eh2wJlI^uoi$%!XX2479Gvn8KrpsW^kSjJ^XuA09J z@{tYtYBx2j1BwjY)}DF#dCQs+ElFGO7;iJ_{afR^9*Z94swBUz#-Lgn#AQB-LjNmkdeg)?U07&2(*11lXC z-}!7Hee1vVivGp{yQzG^4Nefcn?n`1)z}Fh$Cx4?D~O{tdlsqt2JI(F@4Z~Q!|!sl zDV1!^EjK?RPKMQ5j%7A>)ovv9t%2I(&Q1*nhgL@QTP!}Fl?R60<+%{{n|5fh;pT9y z&IrM-9fq;?ON^Lk_k5!%050ch^GiKWnT-th=wx?Mvg|deTcGl{=Otg#wxiV!r%A!= zqD{iQq3qDXW42gT5;*Cmh!~z|*|Tm(mw0CZtPjkLn7bs?Y`OkM+Rs}J%<~X>(x-*< zP=&*6Y8NReMuHF5V%P0k;Sp8Ba!HCzcV_9f4SnjLFj#)x@Hg!0aVp;jNHorw%{dX2 zusG51;X0R6VSb=+kA_A4!KwcS9@sGnzkDDIxq=lwhc*oo_>A*qfD#o_ltyeo_tqD* z$zSF$i|nhlFQJRa&YxhPOxLQ<4mXiC8_GhQNOJr{36w-B1=|Dc1{5ZHHw6Z&BNbr4 z-2Q0!L*F+Dhl8atLtN^pQ^h@k0$mjJtnn6-#|3#ejiE`XB-yXnKj(CIKDY>>r*tyM z^1R9ur*&cq)&EZ}yK7tY87w+)IZXISB7;)L%>k!G^42N&Na@=};vLd_7+VVMU^>fQ zLiO8XCBpSCdo@1J&nRHsya#TEK7<3858$06`t|_)MQ}y>fB6fk1w8G&_%>x0T>7XSdE;NIp>-~MKhMD(|BSdvOU$PpKi zBE7KnynyNfOe}}5@cakNNBNGcsRC^1jSgQCBfmYzeW<_ec1a;>FR}N)JKOSwHN=&Q z;ON`+dx{?Wl{&_nicKNB?S#i@z08P;kpRoupFg)5-7DIK;xf1nnJFDNX%GE?@*u4% zNvh*I^Euln_F(Dr_;TFB;zpb={MYm?ww8KX07X>GX9@G7iE3RmQJl?|i8|=(!~>Uc z*1A^_1anUY9)b>@sggY+0A4#P8Fj{bMaHb9(0v8 zZ&yrdfCguh|1Jz4kpcYJhyvRhr;|0uL4x%F6GM6cZ3?5ZnQ?BGyK%hmj$lAyg8HG1 z4^K4Pp{S_gLVa&qyfzm;z}&p@fFQiCem-FDEXMk5V12Xv-y(pNd{6w~YAOD@;{*lS zg|H3@R^I@O3xCl1mKI*r1VpxiMf|+3Ll=gMm--I{*^yv=^1=kbf&3MHZ99Sku6zN) zqq-d+QKnc*-UrO12v7kRy-xaB&F9;G2FU%A6)-X zv6Cqj7T1@b6>C2dUT+$eQtcCNIn{)vgk4(DHQU*X^XWtET-lcT6ulT=opxjpTctb6 zidi*ra*@?li@GKW$RDqE%IUmvf(M09PR|+^&TaTVJJ?vQ3uUQ!Q-+!o+Q`@-B>wEEZnlazUYN7f5VE}{I z2dCY6%qnv~A9_X*D}wK9%-_uVweGV79wcR2U!l?lAjLl^g^US=dWLQ#V*20CQLIlm z#Q^>{F7`gHPO0>Od+X14`wdvP1C%dU}G_EY$BflEw}9=tQ> z<|J$SGQ+?YKNO}Za>zv%#e(3lL{e{MSge=cn{$tjSdQDir;5-=Q+(}v)8|(w%nQAM zD$m`ZH(jxrEq?|iCPExeuNp_iM!B*2=u>jv*(zymW1)`(%Je5_D%*B>H1(xui((cQ zr~Y*Pc2=L8MXpF29~!78`o8^$l;fJl+deIOXs_Np|AzC2W+YIH;k*&{9lf2NA)>&Z z5m1fPR~MxeBGRL5dNI8#M^gf6VES*v4#w_FWrc`1++ zI9TN@Mm%ZZV#ZV%n40wto_zA`IC)&iqq9BOO3P1Ex5A6IBGKcB-qSx)MSuf;m4832 zKp&+R^5Zqh#)?#XLaMM^@MDHiy|UJfaY3H0)YXIf5R6TEIqkHtb?7;rdEOqbTbdh1 zv~2vBr~83;fv-}0t`q4*5bD)*c%^{}+o%DZrW728Gy>2M#@&YN+C-lJxf17N-B>XP_JK;6Fn z*>wRUx!w!asYk93CxM$gCgNU4xdnGuN5Yw5aPal=jNg!uM8f~r7dv*X{(>3$$XNDs zh;ZNz9n}OpBp)BKTm2^L7pl+kv3ehb_YsYugpItrT+opKvnPiIa+TM)kqc}lfauqU zxzJluVJG?QobKu9lW9wZ;^lX356bbr9X&koWOCjitUuu3-8I+liGcGY1HWe=$Y?;a5BV+Y87?tgIM z9wxZ_tov&As}L*l%Eh&X_)$Tgv*PCP)B62=M`c}IW3_(gYjd!OrDt=p2K&&iF`>#q zee77A<3Xb9p*ofAVV#n!#%trxpbnU13v|_v*ip-lzHag(``>}tGO9>9xH+)%O;lW( z9Wx!+t>Wrlh_>Ct_|tliM0}(>_~IM&5eJ7ZW)dmko-7d-c~(>5O#yPVpffNwfy zv*rLz`Xk>o;IMo_A0m=FWUc*WNfUT}1Yj8_`j_Q_23V->Ic^?JbFUrx&=stUKL_A_ zEf+g16A!H2H=j5hi1Wcrj2s+BgJ74vx^wI5gVw+}n^$n=ZLaxuM*wM407Yh1HUn!M zZ0+8q3u*Rz7!tmZQtJ_3(zsNS6>wFm({4x=N)I72%8duQe#$DaFGufXD=5Dww+nzd#8T3Gc?MqCgTaMMaZunzu zgJ`qBM$&zN3b>BBJjzSW({SI)DqI|{U#ue0t%Mx8RevPlOLOZSyhl{U=K*KF6k)@5 zc&fY}ax#HhQh9cS&wQl;cplz2q;u{!O032M4w}w8g+uioI*rC}pC538OT=QnW3h!U zfLBzhu)eA>I6LjfIkrt7>?WS@|72BB=~%Cj8f5F6_FQ=K7+ChA*7)Q_Wq%@JwqxjQ zm$@+m+1g-B!}sFm7h(i*jcnOHxQNln45|F@{Y`MX9+nl-SflR7% zp0rrGp;}HmV2_QDYu5bGeNN&5Q#jw4XckOOU1DP)t^q!^Ln?{Mp#FW**P_|W;g()5 zGa%^p^(>nbCXt30ygH-p2Pnd@KUZNHPMoizq2NtlLzWfX(fZDu&%zP!)Bhfe*wcg{DhlEpfVYdOxHNdo#a8 zpv5mw;Y8Dq1KJsVg9ql(@i|HXnzF#eBxf-3mtE)e?`x;K)+F8%A}K}BFnfUDSC~(@ zsL@18K0EnH002fB1Q9F*rzd|PL*l?BX9GZ?S@3U~skO6;dn$a88$umUh(o!kN((*n zX`@>=Ds>8>PQIe#ZO?jKqRV+y`%3oeAh#1pxJ|*YGd?gn;zDktw>YKBm{(KBY7rH& zd^97d{0L?4iHkQ+Q%WZ*ONeF+=|3j~BQoO}e!Z@rC1M+VXO#=PC}spN05n zzxPWBKx=Y0G0i8R8a`=o0Ti&5_@+Q03i(`)`vD?6=^N3-^qbY2;X&^`f}*U?JUD|_ z(32LKgEiL+#QN$Z>bcYL6M65J3&=*x)#*(x#{yb&WqC>~pe?;lznZ0E#&-d1ls670 zz?{mWkbv{kVaP1co&8JyQ{h&Yc-4D~!I;CKTErp4h9u?x(Xb{VO4p!&d5((6hX z9FFL~Y)8mF)61+9WaOMul6u83p|WWlubFo_UR$HT7HBzGrJX>51bfsrCB;yRq^J7+ zBE7yTp{J0AGwG87Z|?HtFBkqB=)Lii{60)8Ssg>Zrq(tR?D=atNvz~w`E#!lmXvp` zc`ru;-Bz-Y$;n&e#+0aEAROsgDDrgG*bKChJ|a+{9O8eDFyOfcBGrXA=59U-rgo5# ziFtya3MS$|V+c9nKSI4Q)zfvh5&0Yyo@`-sm*V{~+qUJ-CiRrqEaz60P%Y+3jH3gK zaEoB!lv~)(MK3uIugNN%s?m9T=Lp7)IC9vjmjZuXCC|7hI`Il}+MeE?>@x7K zk2f=yrsC=9A;WQVT;X$^dU=>Q=pn>;fZlWf-nA!!LvSbwl7|B@*RR2Upw!+I#sTV+ z273OAdxps=8VC zbGqpt!_7@tU*TKIYmtQ*w z@fior>XW;T=VG%d$J%~I1;&K#?^EalaXY&ToJ3Xj9G31R*YyX^TZC*+CFu(9BRJqt zRds7HRHGj~4PZgym6Tv2FY;%J87U{{pUGj#8o@*MwkO_ry#RF)A!OVGp-0h@%rqZk zIieaVPoBZc#IvCNRv0zZBc>K8-9Do;g}Yizy!99V9p_-9{Y=z(kzF_FjJ9Pa{H@$_N}0i(1~aYsH4M>W zeE$g0*_Gj~;OjSQEwWH=`Y-a!%ZE+k07<*EXhC3$(Xy6}m362Mb>31fWx|6Ye6}&y z2u@E$CAM5F(1*S>51~_#bmUKrZ6yA|3siV)!Hnn$a7*1XJwVZJI*xcOXTSJbon0D( zH-G&n{>RalgiEb@d13*X?DV%YYO#U`;d_Q#1^_9dn}=4p#WPOb=&tin@(eA{as0#7 zndTpL3=JWQ0#w;U5^!K4PM?}*Q854eO*UES>I8XDq>7$=)k+z|){j|Y@hpwQ$ELfE zvTPiU?H^-jW|(NQQgVEt2bYR9Xv<#+d0lc9I7|#*&q%%2)mfsNMWz(7QiK`)xZ_*g z@w@|G46x_8ylgcEkz541rWN55RP%5rUz)(p)~2^>^r<7}laNhMPIOFu5oFY1_kE`D z{OLotdGpO@)T*&M_rH`&hCPOK|MXF?>_SJ6`aTM)V-w}NWgliUGpJ^W<)0zZ5b4O?UwYT09B8tJO?H`*w69Y*~;3Ovf zI@;>0vjyMa)%$LHj4b+$gZhEJda>Kpft^5VEaMY0A>akFgHMbmn7ppiTVCVpxTKl$ z7Cq9v-Y7oY)V&$MJ#zDnb%)8iSA*)H&-bshU)LB8!7bU`Glt~j;FSe74h?ydz=+GTzJpt z8sk3SUg_><2s<66;*;!?vAT>#2A0S^*#Zvhw->+lcs)oUz~_C1F!M)&LiLl;a^5a` z8HM8cX8O&clV+n!l=QF6x9hDgUx)cirUgBMF_)fkPz>&w-;8zJFRAlTq1`+)VD6-x z_NU8mztC-t*YR@YmxD~ih5A?ly>R`O*q2^^rYV94;ly+-*$U&uV+}*M5FEsKh1HDd zKE+(YmRJ)9-K&AAw@r1Tivsg8ok6ATf&tR4l=FQBB{;SMV3{=oU07QMpI8Gh>FxAZ zlFHjXw23rmS2bIx0K^)dHE{h2{V24w5YcC`PLp>Xsqw zLHuB3f$nSvA2-APnM1{P#C;xC6e#i9+fu1b4x8hu}jB7DObvaGwNTT1-m(yIu^ ze%#xzJyRPv5`#5#n^Q2`TXJSdPOpA~;Gh$f1&mh<3?o<7IuCX6@8M6_UT$)@E5`UK8l+pKhi(x8fkC>vyFms7gB0m*31Mhy80x(T{r%55 zpWf>lzi>Is@I3dkW39EnQ=qYB256$ePFl{l4>R1a znUs^%_;Dn}&>>V*>5#Ff4wMsxDNa-QBqND!hn`PMjk~mX|Lc71JJ`3Af2` zu~A`f)5#%dsL_o7j#zXH<71l#MGsNqVLOPi%H6z5pE1#;!7*)vXPMVs*Xl3U2x9?7 z^w0pA73Kc*hsdFr_@N;S#M2IE*<|J{9yC{33c50a^T+gqQ=)6effRS=oTrX==Hzxg z)|3;N^KK2)44M_B20;6&Tv{R|y4F29bq!^6cs8m|RW6EBGqifmDU#Q;CLBa{7kV?! z6I8B5g2z}M%r)7LeyS*u_Bv3=E;y(X}!Iiok(pP=biae{G_(SCfFj(KxqCm*RUdC*@C9DNUX zxS&ElI)ZJKt{%(9Iuv?NGXKF%ged_CZxv2oBeyf=jqSd7F?}5$LmEm4go0XKQqLD~ zM3cY}J8)JnL`-jy6in7r-Ar+jz4UW41B2&p+A2UL4Q1R1M}}VR*G!}Df@YH2YI5O- zd)q;u+LX`kdE>}Q>-BBz)a%RK-4WKpG-<=mFic2=zza|k(bC>@h_zFH%PtXCqydTX z12uHW#Zusa55gg`K9-7Fxa&#%RiuL-gYShIjaID))$WXY!2B_^&8_Ubp>bY<-+v_t z>bkF4BmA&1mB^gyHStT4UFic58eodAm=+ypJ zXjy=jekk9%H@Fw5S}x2^(sC)$AnszvF%R0SPdTVOp&jPzNwIkFq;TMAPX*8a(`Vg9 z_Jg@MuB=Sz^D9*=&3?v~(dyT0agEFJ5%^0lqhC;6RS7?nqJNU4E%%B=ZVJz2E%d=~ zPx%XJ(wPS@8HGWB2IBTF$zQ_d!Vq$4o6?^TPmN<>(u~qg>AVaor5^~fhSoFKy1guHOAe@@H15|KYJmsoC%hFM_YR}O?6`ruF;zHHKWj)zK@57x+RJ-Qh zs#Hk>yhkgVx=RG&T3+p(bUXm&dfvvyp_~g<2_>cFRNoHBf;kD{kNOvig^i5PP*A`%HGkdAZ&PsA3_)LM@}p|h1~rj`uY;Z z>wIQjgtP4d*>JS?cvL3pbsl;bjX zXHF@~z0486MK@me_qxmBOF0L##CeW)PlIyTooWMivVE~OsO62+4ACH5bY$lDxR0i@NcDV{T`#Q8+!(aAnb$?X*19r9l%DoOthJx8H_h5y0?Nu zPEDP!I9}P~bmzFw<+Ezhn@=QMw(jRc0*NhE=eIt8S|ft}0$V9|($=Bzmp)NM&N$E@ z+5c%3B!~m6&>&q=C&TCB9<_V39!QPQD``m7F45wm=o_#06+JxeGjd$KSh}o(TO^vG zF=Wg9Qf+1j*}}`n`RD ziz+1d>LDP!y8mHOCpWUt-h-YX&j&@0sMiOvMxo+4ujEa%NFfbIa{fe)m|I3%G(AA;mRP;Gr-G4BZQ^%#j+RPj*f{o6x`zb?!AQ!(r zt6T?SCPOLT&!uFT@K<=qT3iC>ztSC}${GxysNtir+08u_5RlfN|HXlz6d!m6ko)Ip z7)V77EjdzZHK6mC_)I{BMMyxm_br*SmfLQVE&qaD(CiYS00WN4)4_OwJC`({k{j%2 zqNyXI`~mFoA7$`oDAiSyc+lzBCyy33h7SZ-(O=iU8`yB8-yJWJ?hdz2oFJ7INWbc7 zusM=sVyRBmOx84Xg zIWb_F+5yWHdLd9F7oWIusKsFacEZcis~3YSt##g7e+DbB zx1ML_6cqG8j#GY{r1sY&Zhn^h{k?7E&0dw?0C|Ao(#JnkYt|{=nLZyAGHO1W@+1tJ z?43(qSNYbx7JmUB-8)d*XGMi1vwZ+*<}XG-h-!ibpEMWz0B^yDkJjH4H#tJoU|_=I z!taNGr+A3*v51J$E`emjT=U5%)YBo{HpSkAj3vDR#bBfBRrkZ+l|FOz8*P3EwsmgX zQ)VEap=r-gsipB-KQNhK!2OmJG@nv(}m%T%JJfi2f)7w43JtkJzCI z@8OZ_1OUct5o`Wu+7lyh;Vyrn0-$aN=OA_B#_Q&HZ~7EH^Y@0}0M0opy^HoPSb#k{ zxj}&){Z~|>#Z!-=Vv&}#hROv52V#A|@Ar)C|BVH>XL)> z3MSlRVOB7OxVK}OkcF;D=S4c+Ky@hRjNYr!A#_JCq2}OvQcih_xr)TPjVgV0s$6Yo za`p;y=%HqzXLxJg^xiPn1lERe&a@Q@Rjpo)xmfyR_xA!(PW7Z+;M$X+J`>A*@vd+_ z(c`Mad8zA+?Xq;BxBl&c4q^?DfgKmsP|V>hsi$(+BUDBBNP4eUfM&Jp&5o_=i<7Kl z#SWd~^JkLpU~ycRzoz}h|G162hhdILtyZGT)(>SrE2&8RSpR+vwRu;8>*R|G-etXJ z*p<-VMK9YYxXslJfMWc6NN6chO|an}(!ZH=4(PLbEz+@33}USd3e1*xvWbt6tMIp+rGtIcyE^{Mo%bQVYvQSz7^pCIN_p^B!X$}ltoAJp zRhQ>CrLj_l0Duj<#RGk?;giKl>EY=OMwk0t?NH~1vwnZf#o1gHO^#k9BM)1A&p+71 z!conR%Tqf_)$~2>(HoGy2s8e%X+&2(S#sb6F5y4??Mfo2(2AJmZxS0Ye;X>MJ-dnd zIY>eSsh6|N`U?$dO0aA@GYYyA2z^q@oJWe7pt;*spC6+^yiay=-CGWrUF9>NATC^< zhAiafE20$1wHHP)q=71Zp<^9&coyU=SPo5UM(H8hU!T-x>t@^@UDo zeuk@G`{#op0Jz4kVsjhV*&!%_`5Wd85-raP_1(1qhw|@> zIj{;H@n7V?{)p_V}p&Y zt^LvU-CYC|&Z z@&BES2K_n^=K1dLUS&}GovK1dPG_yepEvp}mO@=y2>q5E#3lJJI*trW?o_D%fX)W8 z1iuHrib?99eTKp+uL&*kchjr=*sQod>*0b^EL=1^3VUoMxjIdTM6v^r7RPeV4gV3Z zD)sBYifL#qf=?1JL5V4n+ex@zF$|J~DwMHck?4>!KQAVB*aGsMatd!Wb;~v9z@>oZ z#qq8i+1onXgbC7|rU{tYC{G+mmf2T57j07|2^R7}OT4gt6^X9PVtW1~9hz{1WP?_F z{l+yWyWe@e(5h`;8x-c5BpyN8O=1h-Z_`r^HCEaaZ2mXH>5^X)r^q)=>r9FpTbrI+ zS>aNFfzN~lv(d3RTb*Pc@016_`5ln^M+8q2s&5Bc<98qNkQ2Rb68aL{!Ai3hzSdx@ z=O#T<)k$F?tTmzJf;)tF#rCA_Wo`tf3r1iXmX2?~Gv9{kFZd9S*I~6?-QuuIadGib zzMDWt)BO3RGF>B6g;WWIVh!^{?n7vR6Ca#|HEdz#cN*EC$#5YgK1&u9=;kIYSeQyIaF1iH2@d=vc*ES3k-xm5steF?abx6H( z4M0^Z&u?I?QVbbg1ec5N7CR=S&yt)1LEEzUJ+hK5=~kA|1R#?y4nj*52|ezZnVKaz}j zVXoar-|UhTx&?!I>&h2?Sl81NjyKU}H&QU`8r9)Oah0HD!J0gx?t3l(d!E06R=CNQ zZ_qq2fmw-%Q;pe@T@dg=V3;Mw7wuxJ27bQ+YipB86vTcwmif~B#kX*WJqNYhfHf`L zP~Bn%Gt9|sj#gjsgt53Wy$4O``Gl5_0u{(OxI z#}{Qms`@^nqfwuqi?44s`pyt5ww-U!5Z2dIr5_z14-sj%a#eV!ipl#SVt1pwoC|=z zKsuEbsxOE)jEcr_x$<#Vtc=J5Vo+m+z72wB3?1@-d<*A_YMxi@w5;VjSfi10zr0Xk zW34ulUel7Z=b?Ux>?WvDEjJax2;iE?H>BN`H|8f-q;b(jvfpWLW>-36&OnFEJ7m*` zga24x`}KF`^XA_T4c#pL3jSf(a34SDPQG*o!Qv|&Fb|)Y=~`xKs-W-r_Ro1`6Eyg( z9Q#QukO7!}NAo(27T2R@Fzg5cYW|Ss3wECawk7_k3B}k=0a%*InfA)7XD`x1r&h*B z``Lr~_X$ew7Uw-=mxYsIs~ti?Jn%ilvka(>(RCfh9t$x}u?_PXzMYv{zb z17#)MGG{&;ekqtd!~bw-UxPb$F!R+~K0&T@*@LdNL_@7~`+m_i^X)oaK06Pc$e0%z zgl=dJv!q1NzA&NTIP;cC&2e&f{`%zZQcJN**ICYvEred(bMqp%JlQbs92Y*N z!!~$=HgpFx2(f5~Cy%SY{~&)#D{8d z#}`ygbW-eE#3+di)nzXe-q#)2)boa=CHbGoZqyL94Gzl;%Lg3ro+pxD-uQyhB&&jT z2Uz8F)1vTKG$RlQc#P(51F`SU*M*_Dp08bcRv#JO19?=pDmYvUk)d{|u&f6vo7xQs zOo(at)o-i4G}FxQs6y4tO>2f(sp9^nTY3s@&Aayb^XHYH=U@63o3912 zck30`m}*M1bkXM>)D)>`Xw$QgwABgNyv{hxVHOmlMHM!{$4g&HWvbn`wiw#~iAb!8 zEVGRh>{Li`sTprfcG-tXZT-O;Pio&7-t(a;MZtB}VB(0cPTKosMo*>9h&@+3@cCJ- zCExI#B6O&vbFKl5=50E>VZ9T;wGYwio1Y<)W{8DzipgU8hd#E7VTs&cR%Uk3MnfJJ@?w%Bg%ANjXmw9Z_})#C zYnI0TI8L@Q(oV_zY^uvP$2dA}zX*{GVtJw4>dm)4{;Q)bquJbVgU1r1xVGU+Nfbu6 zgQYRFg_wEtSp;3nnx&itW~+VG@jac&`ta}9XM3M~{SFyu3UK}5DM_IB3J<%34xV%y z+FyA{pClWBKvHBkERBq4E{c!JU%6UXr$KgocAFbVbgeQhH>>O+D-Eu1;eaxx%|-h; zp7>zU;&9a15u}lO4;+_an^))8^5R$P22M6*t%s(FABhfO`nW{M&fp6x@@&{C6{11P z!qw58e@H|x35IE`;hsu?^-ThW(`?c3QEP~sOxDP%=f7N|C0ys~ed$V*1(Hoxx$lPn z6=|~)2?e4bHmE{9+E)b6(zh^-EK!BHIbYzVAKE5F{O&ZXZFt#G&LlAxv}y)VkInbb zb=jZC$w`>^V6do|B^7)v86TpOULmw^Ki3e&_hwe5H-R(DMxA1boHbg`(9@1VQ#)Q= z&I(sK{YjvTUc+O1VU1fT{P>eTaYg=dVT+}OEsyP5SATL;WYGYh%#EMT?F_Z)2n zI9a?l!OJ+TwcB*VXW5W`>FFsbdYE`_^D_w{osvB6n#<5w{PhOWVf&XrHZ;EJfIo!- z^ON1&*vyRFBQBXkK?)TP7zlFmw^3?c^Z9&W=n(n@v-($H9(e#{?=9lN9-lV1nMU}o zzrSQEjAJJL5m(-I>(SkY!~9*wi~yAlug~a0dueF->J0ccl6=b71ys2AFpBb7D09lQ zr=<#&qAndAp1dE|I?iSCZSoV>Gcd~_!od0LQgc{|CAUTBOuFs7G)an=8>%{{;P%?{ zEdB_xVlABRzVlo|_XV*FJiR#uUf#Hn{T|BIXTA6)h2LH8r`tnE zev~F?sX{1usiyGt=UzE8HW6NbNkndVe(LB9C3lR&iM$ggd^hl=W-~^o&8qw!CzO2B zUTXA9cJwW(b!_pg)`p)_k1R<(rsM5Uq6DZQD+LL;tmcJ*XpQeQ=Cz$(Hbc@@Vr|z) zE4>#v92_O~;ZQ%6)Arr1`}^*Rl2Ce<{$GZ>@DTfZxX0?M2XrOY zNqBorFTZC#vN~A9#zz9@$d|+pa?=yA#M<``wxUO;D+M-^%#W(Y3b~8 zx{?hhTmvytRj}ZO-j~XVl|nHRZmqH)0#zMJnx;i52xaB9sh}a1h)1aXx&MNRTy~?G zD-YXsZ04uHiqESXFV1=_KlMcmPkClhfuJail~m3}m*ui17^De8Pd}dH3~Y0L;VNUL zvD?GuXhRYH$OtBA_!KFI3x6^B^nDic5-ctaJoxDZ(Q9=F_{tJ2ZLuDA zHHOkg3BIP`$8#3Ng|lRB(qOCEI!q3^JEtcmsBrsRTb3Z{FCT$?N*7wj~wN2KwKAt;0hu>~qMt^=vd8AM|FQ26!w{LITb;i1@ z|8mwojK1tHkul37%rY|+-8x%c%1#;Myf6brY*CHgX$1~v6D_6wx6xX=D8#TIQ*62K z8rkV}1jSw62Hf5%bkAdPo$Wl&G9(P$q<3wFBWV~>v^!_Dh$5AHue5ivf7iZjma7z2 z(l8{<5;W7Oo)m99Evj0(<+`=-tam^pursn$abU$GPH8rZ>4UIQTfq|04Vxu9}bsPh;?<#?36eRW&;u;S4IO=BOCc3A<}th4&8*Mq_T6^D+) zNYhCSRZ190{G>9-V&cN=dMLNA&f(f`y4H$jd-`*T+s>rS%-Pt)1WC=Ze=9-;wi0t! zvddC<33BpFDr)d#=d@b4UQO3*SsE&Na$cm$dQVfqxXTVYihDE#Hk$T64Ur@LV~-#b&buEh?$Q)UHNwYZU7m;@~c^2DT|G+@Ffr(VSPiS!IZ zZ=*adNuw;~n&b9wo7itc7bFW*Nj-2G_$;w-{Z$n{Xo6GzQ95PvaiEyX2#d|xK2MCb zU3nPj;jQn|M-Z5#v_zl^aTv{&^yk-bv3`0n-QzSsE1Y*6JZ8lcFHdIjEMt_LxtzShJ`M^2kwnh4uAE^baknrD4H2je*p?EA0V1l7SSmR;Y}~6a3bnBZ5yO zfE@4^Di+>@YHfAz)AvlKm70_W0#kKoV2O9tG@@NL$IAWGV{V6GVMp6$zg>t4)v2tt z(NTIv%--Ad4@=RS8=|OIT%weO*=hhfe#;dn0(wepd!cb~e&;ef#HYI`_VwqwHy>cf z{F~=T{CqEfJ!-oDJgeoH+W+j}KX#zGHTLc%OG|yVm{@nQt?}S1PQ6-c=zoDrF(Mu( zD=wKcw3Y{)0leP+cO?9?n8&53gJ!nNO|P-|F)tkJzQU*36nkfLPL|6 zkzuI#T|-L?$;dySFgkgrc%)uz{#-(iz2xA1hwC2w;I9QcN$8+tjsscj7EaXiDyG*&TP2TpcbkEK`UK1bD$f~z1V-tLT&THcn zDEXuOc~U9IE~vogKwqCLofEEym0Uq@tSQ0fK88mlmrH@8Mse3j@RU?D&Z8)U zVV2z{Vpn6QLiAPdw~Di#U%41zjMS&1Ce^8=kfF*h;Pu_p-lM zf$QQa|K*2hA2xBWv0c(cU`R9Sio=Z5)%a(~ydcX9J3C05pqaFO*asF{YmN@*qVXTO zb|X$S)W06L^cgH-ct?~U4wCWUpQm|$$Q97miXZ9eC6-OSvyUt;Z(cPKUyg~Pvcg+* zMjm00U*9?7%sO9wRF0?gbKI+^3~XQy{}PU*8eY*2f^ub>iVAOJeX)?4W|id)wFo2$ zXK(YjwxJou>TNvNB`Tj-hM{!toev&klE1G#E{qPvjm|CM0^=(5mtdD~I6X4j3_p`_ zK^sEeX1^MwZiivA# zfusB`eDW+-#yQ5^=jb;MO1dfG^;Cl$Mvv4(itgLJ&4x)gJZ?u8`wFRu+zx zryU;ZBdIui2W`6*g`O^jLpi~<%9}ZlYtiOcx?L!(dFX$`)HqFRU_s^!*Dy|JFKvH^ zk6|f-9r*;(Y-@cF6G*jxXO9#{5i7R%hAL4pj|dw54PTaMTQF^k-SSH*zt`)ev;i z6l)uqByL{A@>#{&29Vl;-#2ee`el zSxsJBUvt0wQS(uSzC-k4aJRUnMT8R_N}3;n^)N_yDSWFAg)VDE-WY72 z`iO-p+eNTkJsDSqY_F09a!Co$_7f!6dcEu-S zsL2K^H}bqWUM32IW`lXS*D{+~IHC#d@R zpl|pL_`I%@hjDhC{QpT6$d$iAK*N2 z{0=KEElt%rxJ?0&n5F(dKw)uPIprPP#p&4%^R0&opNM{vwWqTmb2;|}G*wiJ_v;DO zC9EC{Jf~>O>~Kxv0U(p8G(OGHFG9-=J_L6GANuBk^og%cMdq zUCR7wIgHGx;Ue;Zt#0HzuEZST1y8bVj825j_6SgmCw8o#1)Fm^AJ;b910b!{=z5f^_p*{8h0OmKJH}J^V}l?S=Y4C6As3q|AvY$&rpZP zxx?;(5&TE-#9nZEKe%pL+?zwebzD@Kjs|jf<40|@6&kiSFu{+s39+@ASG_neDJlK! z&lDd0zosddH_dk>GBc~R680p`!~{qr?tWB52UQFA-zae}?Iub<)A=A^z~Vu$1m9gS z8TiEr-cNJI{-cb(*6`vaRzoB1RGoyuo6b3ip>c?r5*(!!9F%3Rm;PYVe<#iACxDN> zkfZRIHSe^p8N$vp7CN7vet4ucLSo;21?3Z8b5D{sgmgnnW*m9GD5W zzhk@O{yszwzHVi>yzu!0oRWBmt|=%$AcSatX6Mtd10rb=?Qi`mB&hEn@pB*rfW}V4Pg81rOIkIjzY-eMEf0WOUHesIbdg? zvSD~5c=gJ@*bx+#-yQJpfpheW8rApm60(h9|EsW(GSqg|K>V7H%Ku`i=;+R!JL?-K zzM&~8I5Hd)PkMWM*R|cR-(lbFbJ*AOwL1^NxKhFu-%oNQbv>UiT~JOma$7H|K_G-m zO1{OC$^|~V1D+2H)Dj-~Pp~~5g_xUtZa;~ghL)6Zryem>v*p_Hz6>@e%5H;D*-PO%)=!~SI+WaCHS6qUC zg-@p>Tmk%2+K)J>2-my_E0Kg2bN|K&rYy7jY4()Ll!e%3<~}?q>6oF6OTgV)Iwe5m zooPvEe<}9*Jyf9=-JXJ~F>H09QC&29YE+zM`QELbN;!i0;%Q)d=(Zm0k~blDfauQo z#Kvah`OKKSp5DAg_y?m{SSNaN7_VRxpGb zZ*AKZzMaP**A_$sk`3>E8}QLw5VaGKkMFA@1PlZSxo-5qkzWkjF797$Oq_J2A1Ah+>cZai zl@uKr`ulSDE~#fm>LslIoT{}Nrtv!|RZ0!q1NBZ#(%%fEt~d@_b{Ko>V`CvqbGpDc z#Dm-OpA+X@jxd&ACc0*pUB6ULc3V*y^Q%MVE&hLDCB1oostj-!Rhbe669!uT6aeNs z9}x8d>Mr?oWL5f^>~G~^h6R^?N2D^24)JSKb&3O2MSda4VDXEUmJezw^n*5%f?=nY zpsmiR!*t7bp-(4^c@a@S74EVbhmZ`jva-&m#;LA7z%v+)OnHKvE}FV2NA`U(kP6D9 z)yWM_<>)FFAl{wy445};jECxrB(DC(8xXF51u#j{;?o|AjJ*+;>EP6_bFYHv3B zbZMB?Xr$F=`GRl3)XA}ZBA>LdV_`-nBsHby`&$9LPESwa!aDUZ=83Vf-UXD$5ABKKUVgBcul$`u!NbkJyy#zJ=S zT9~9%su5koayJc!uHfyW+W;0JLEg*Hm&abP#oSD2_|k5asQhv#G)$k%Fjz_0xvLiU zH+b)q^1q@oac+%x9Apkg724R%ieo4a>`zWF2brCAo|$40n5Y1dq7EYUdXpkR zcM!Tp-xUgYVF48l=O6xhyh8JAIZe0ZGRziKG2ts^(z02K(h@9oq8W~(VJ}dH>fc^O z%6oCA_!+Tv;181J4%jTwa?l&L-+~480TFG8E7|iM@@=IWiU~dn(qnZVIh4`iQ#Ram zzPXfu)xLUt>)lqVx{Vl~;!mICH&OK;bYr6y3;9@dFmjM4mwfv2?LmX)P-ZQCtMc}1 zoDg0GnTr$VyUHFz0RZm$xQzC5$Gv$bY#K3(o8{lF$|1VwsxMU^qLNJ9WIyAW#L#*+ z+JxrAK=={US%I*L5Bji+;J3ANUVs z9f(yo1l)O#Iy%3mEe%n%KZ-8%j7lZE5;IF1`SRs~=y8<)$S}d$$e|5EWXJ#6vg3${ za_KH3{1aGqGz4&tf49S5#6dBjuTvud(S-rcM~vp^sN*_5E3Yo@L-@<{kZ3Alw;}I^ z>rAILPXPIkq>GhX>)^Ku{p8!SKRohdWMWw>LY*!aI_sn)1+0)Ia2`C?Hv;=@ZnKc8BZ2x*3FZj{ z@$)lL$gYDw&BXkph5GmQO=q2-j*zo+pvP7I^2VTeDh9xN%mwNlF7$PGvEio+ZS6bA zqCn|qZ#mdRZS6uY3nDi4JeS(Ov_L@%<00Cv?c1lyY6T>N&oe^d^f3@?c|Cm&eg8L& z0sWk7WS=8b=9(Igsvp*i!!_7l9$9p)hdo_Y>3CV$*qBM}zr>{X*q@ln`zNGF5;d@l z&UiwU-j?}|X;E@fd!FuexLbYoY4!ra2iPgXPyDHCk!h$#-Uq)iLpOLW!#mLa>Z06I zGp=StRXo_wv5P-<9JCm0#OC0QE0}+Q_ulAmw2@nZ>~z20fjQgv%8_XLW2mhp(+hd1{@t&bqFeAb1szHBPKM+l((S? zQdI4X_N0F2wZj_Rg+xDG>|{djO8Wl&<=9kOy_@nm=mu@Ca>If%BGU4@xy|IV!oef& zp|atO2G)KMLb*W`nV~N2N^cv^l@;4BE0bOOOoGMgT*6!6n;J@L&Fg2`rp=f$reQN% zj;m^S7R9SO2Y(#cJ=*5yL2~izXIi7i9VS(@U%9!#pV8;q(*19124L^Uoq3(k(kFJ%Pyp`jW~2@WB^hlm zChq~sPJC%agzeF2aqRk6ae#J%TVynQWQ#a*SUTB5R#N@^jViv1+xX85pdxspJW)rd@rTgM@z|cct1A?*6Yq-rT)9-`)J*3ePY^@t z3*6;q^^et|vs&9y$bqjdX5)s|cLAKu0~}=_1IwpL6pR}nJ-vXCmnPKqkAKU#Gh)_i zSsc!8FNf3$A=|+lkp`&afk?yH98>1B;KM@RKsUECP{hZ@=E-J(8Mwgg^H>{{^rRfD zQNrwue!i(~nqzgvDDgPq>S-w!WzEVkYg8D=MXd6IS`o}nI3=>dHR(6i5s>D5=JGJS z1G6!|))VsU5lMOK;+!yWZ*@l5m>_(VSPAn4G0JBo-Ja?A-13+<1>1$j(rIfkOF+x{ zQMf2%zU7yd<0n0p-9@kN^^x$N--0Nh?4y`J4_thP4XKaL>~NxwiG@3*sHwC&tFYh< z%6(@r**!3Y%Dz&6&B?}IQj)ziEyPx_sBI_eU>k2Y^)8IgWnr=2v+}m>!Qd^dt?s7} z;CA^EYtOJx-@{jyEeBURCvl6tE+dskhlZ2^v8jNXo5l7&jtqubCM?a1f7LTMZbAnx zOaJ&?>~!Qq!V*ZdR+iV=+WM*UdOgtFrZd9EX;Y?jaB50sw|N!zslR*p_-^B@wDzlN zAw7OzU!%d^jg+?Ip+>9F$+F)* z`CuNuo7u?_jdIu01kCMjTh*gjY&Q?9)Xl^CvFFM@`9nZIjq%qsqocfl02N_^Xnh_O zsz)<~PN@^iMDeLLl_ce!j7Eu!sOfnhCx1$!36(buS4zWp@-AU;mzQ;x+2p<|$MsHi z<;e#w*B{y1ZHrjJV6a)D@o=Ynm2SV*No`hru>n!x55~(7zL)t{0h|IfIGuvt!?8(| zi0@kwG%ZRhZx|74#5DKO(hs=w3H`WOhU)Eeo=O2$&Eu_k|>`eBpK25Bfz z!Tk8=M%DN9MOQ`5Fc!wu`RQ+8XJ6v}vb4Fnn&*@uB!MqlJEur+k}5;*ET6CFk~0P? zbUuVEZz^awy}BR1{92c?a3-P3QKglpUD3fwBgy#Io`)tC$F7ibz%&k3))!+gPX#ss zh#LwzqS^Z5lTZr3gOD<*k@)M2!VJGiw$dN#D;9U<;_3dkOpUe{ZN)_NHjZqZxSdL5 ze7=e$oqzyBf(s3Tvm`TtES)5OnbEX`&A&Q#d*wm_T&L#TFOxciI8))7r<&6rc$WqIYu)T920vHO3?Ew;bm{6#b!0XQ-t zSmvg4N6VRiZj<|wT%+6%6-)e1LS1kN`Dq|$D|2gtoc+#h4jOZ4c1PzS%ky4>YD$`_ zT4po|HfgN*9vWo0E`Um@!&Vxv3B56fMp2?Lp<2q0uy9&Ok~e=B4IMHqkQ(J>D%3|B zY=~ZV)(m+@$HW#BYSB3PvGO@r9oAueY^BZTC1Vkb51g|)t>3=3^uT}ewMPYu4-@(E zUaaVGairt3e(OVPXgmu$YOT^ue*9I_Y-3@=Jx?U0S_QU8Slal_l%$>fVW z;*$$@divL27)L&EV_RwAzC^i}*H=?3x**@;c&O&*e(a^WitbaUy5C%;#e7C>_$wHo zezvAJ()c%wjuTw|Qf-JM-vqBXOo;f|9u;qYPG|)H{QVr)2H@3g*CQ{lU#=IkTq|g5 zYQETXn7+XAJ@M|5Aq<<&rgPyrabW5LD?E!{D?;_9ky$BsKl;YEObd%N(XZ2NokbU^ z?<&hcA4RrnK>_NhFzNB~h09~RI-fJLgo0YX@61SVF-umxeISU>r@4kVCm`xyvJ!w4 zv?WOeQqU~zKfJLw(j`I{*$A+F+;P?ZD+bDEx=nMwnQ3!z>XfjN^Ou)+i|hcGDgJhV z@tBYc)g`^m={Bfs*M>(fC>Kg%g;M?iL+E#-aC5M100)~sL0#G&2MgZ*glRavUz#SQ zRG=uF_@&lL_T5z(A+<8mBJ6WWpJX$@kX~=!e`HoL?z#T1$7C&0n$n9d>#oWDZPGJh zO0U!sg-|VaBl41<^b5wS`s5>2sc08|0xs!srQM-coSfD9L+JYIP{i)0EU^%$OW+`P z`cM3`H}ZuBqyX8Y^+c@}3*w_;+Mt2XS7uIRmt7Vted~T`8yIM~Z%Z%8lx}wS&fIFlF4^o+*8#5h;ge++N=3(m#Uu0+^Loi+cCejd zXK3MQ7t~&ucgc*-f3go&@KefaKx?hRMVr8GrXj@Z{EjuEE{xY<2NJUjRTVp8OZS_` zPnrCv^8lsv&HsfJ38Jp+82wC9lfD16qlYZ%ce&4ZDPECL2ODB<53Jb~X<7?RIQyau z6S!?k1lA6_S$DZwMd)}|io3N9T$z;Z(+KMg{I73`o(?jw|7^}gAj%e=Iefa3g3S3F zQq&JX%>6DK9J+|keV3LeMldRT9fW>q26zNgNQWG|7l7M3U@_y`D|qk_c5 z^t3EVrBCAT8+jM(3WhuU4r@8LfsC9yr+N2`)AvyFhm!7woA&jaia(NjT zpV2mAkxs-S%z&Nx`K*~6_>^3%JnuQzHC%sLe~({Wx%atOF1ng4vj%*R)!)Cm*)S5& zj0Cbxlm7zQFVP?=m@3=)SF%uUHq`V1Irel=+Q?WSv~4F{v!mK3pXX>1+6Ke13Nc2KgERoB5R^)E>+kM@g|c0W?X1r=JQ^x6`RuZv;FH}adDT%6YKm>;wMl!5UebDX`oprNqV%%_N9C0nvMwK&Iv0fNQ61d`yfArdQ9=TT5oFV?>ir4k#KO?>5ZCq8kH zfd1n@&>K)t&%UhJ2lMrm45R9a#4{YNnvieoE{0&e^VhC_OFMJ`wCO}8Nc7lqdB#3$N|wN1gH&im|ryhk#yjdh}FXsF`veHg`^JHRw+f`6Yj zOA(bk1%#MM*)MPpQ;~$g8&I;pVdNbYd<*sm;JmR&T?2(u-uaIIm$yWVZ1j1lf-ZNI zQ-y-ln?>rpPYkD9eOW&5t?DP_^xKFkrwb)t9e(*tX*n;3@ev~IZ0qtBDTfrt{CD*B z|E>M`hBn-^^V;4%J3g^hSmaaB{KEAy2|2%g+4K8^$l6L`6$^RrBL5ydXZ=$C9Puy- zt1TnY^gO|v1uf6$G7CQlVS38a6XIKi2^o%upYA{doc1-2P7>;sVV*L0gB>mx%CaIX z43ZLs%ha<^YdFO(?r3Ty4A~S?^TVDv@4x-xMcjx(aZwgA@w}w})GbJ9bf|Y{Z*Dwu zWH_|SeKDRNmOcI0%!Z- z_Ze*BZ`GtKMBQVxIx3M5*Ww>Kca)(<#75vI$pdC{DwNTw0G|!&W^XpvmOFOeHE#xQ zZ&r9lN50WDs^(byIEjoh+MfKnc^8fm1Wz#m;KX0{gZ4g}sc*mVQ;3*swjyW?GrV)w z?w|^Zif#b_=~Ie?yF0D{Y*iFXCcM^LG854b^cuDmHO({c5TK={yRon~<_R2v(&hSB zD*7?BUy5V}twlB6ulalu;fZCQnDyK`q2Z z%DPe>^kaPtc2_1V_FlPzFC%sj7uWtEdRNg>vw4RL;>v>NIa8Jl_mGDM4rLzna%Me^ zsJE!KRj;>`FA9?q&L}iYAZSvmvKd`I>|R&tNO2vy~#XZn%+Odli{X)FQOECPK)-=q78 z(Lx86(XzM=|C5=*1UlFonQJh0ThcBmqI;7i-jYJ$EY6 zX{A!F>n`itIV-e?SA-9do??znND-=~qYxSrwRnRC6h++WlUWJHzf(ZN^k<}5i+vOT zSldzq_ACD0kJQqfWp1(bH&GK;hp9o`37J1wLp_XG)nyTugT-@4 z<>Zk5jPx`Q`qbq0%CI*X7;i8FUokx}##oSWr)U%E9?&TLXorU3Q=HM+*H~f&mB3}lLKxdY9SX( zl&7wER69`7BqzJXEvv@ZlNUS`xskS7;(S;+{r%KlfH4OacY?g`{Tj6;{|C!<43(%G za0_|=VcJeiI!BRjKkW|tkP8@om&HNe(lWZL<8s%-p{TheEpP3LmXG$A`y3nMpQNS; z3to;;u1x5Mp+;`DjyNyx3}S%XpT1f@IaKMnI`&<0m{KM&aAX6)eY4a=TouzAs%{}8 zeb5zx4sm7I(-G@Umt@By;N5u3Y%jJ{ct)TjU#4gqiTBvmqN$fXN>(%};GwBpHrt3BUY zUc1ZwEo|a;R(ioH=R<)?>FClD&D?IHeGIddm?__jn<<&e_eu4UbFU#`4b-FtF<#Jl z*)yRmU#pK9?)B(JpT%E3w9yjJc&aLXAQYdNILykz^+B5mNf`Wn@ew#Wi$;eQYv!Z# zwiYD4{()T_C$+HQ2UW_W&>p-0CkW2Ck>+3?N+Uwz7pn3^mf0%uz{9g24fA_z>wOkHsMp)`|-t+8p&ffd% zztlIdUe@LtLIi1F-%}!=-1ZER8=zapKK1#yv3U0ipcbYA^C|Ap!Huo6eh1l=G+KF; zEf&x=@|8`ApQ0IisyOk-I)^IH+<>|4Xu#hDa5J?^rNu&g6X!1;jp8h`!NZxBfhAED zK{<5pj2VSm^d^lGwr%Yd-e-pmo^XPJ*o_2DC917N?_{d_o2$jpu#G*XiYeiZM;sD@ zG)=2TwH6;+0` zgGaBfLs9#z--wCi?Fk`nTl+(qfj{_4EC;xweJ>)swyXW_LMfjOr?5qJ*?%$HzFNoU zpYW^81cnKWybXUU&iKcAVcy~07y@uY>aaUlW8s2c7yE^a-N%AD&A$2Sr;O9_=eyi? z52R_lPHlzPgBr4-lx}rRxj-rhUts^4P26qavp>!zBEft!`m6UNnP+1ULIks{;@J@q zh>w&fJ;}!gN9t~YKg3J6YA$z9a`-lP@&^s!)898kWjRSN+ef_Eg}n`X6YCodiLhnY@(y1%#>sv{6BKLse8h z4~|t)c|wgECw}L5w7^#3CL&-`<Lqr!E<18hpOr_IE*6xnZsj%z@0dg5fP z0-s@9xj5tWqJaQF*%W8oQi}^^N8P0u8~pg=^D5~)=hDG%G^scxB~ zi?=z@JQ83cCJY%n&d6AAY&N#;V5>L-RYHlIB=)#9R=Vz_wi{=;C;IWTByn*WbHx8$ zqJ(Lm(Zh##8y(yo$0uaKj2d&u8JDH~``FLUY90wKiEvytzM+R#_t6&XpT0KD83N#) z^kL3#0ynw3sJB;C_qw4T8*zKTAiN7W4=e!7Jx-*;v(Tm<8`mLVJ|NQ;^T^*F)cTEK z9NuaVDJSghTJ8+FRpwf)_;DsCB^3mIP+4^5anyYU_xOZ5#{Ie0GXyqMaDd=Jf+?QW z4@D;~;!HNQF&1e-9N+3?tO491V~Bq@K2bBU$Kc@|1Y&^G2TGB5f`=EmX54YJ`R_Ny zF=+$YF-VK$z;58Yk)4S&iLyCa?6TDNTLqcn{*c*9oAxw)pv7%M9FpPk4#E7*XgS9N z(B4UlHL34&9!3nCOrXh%_r&rU*>13#5n3F=a>4qN^lR{FM?ptThO4clM~q=BH0102 zt7x_T;c2IIWb6j`04=!N&P<%`L#6!BbmJRpxxf=_Tf?HkK5%Lxk#mZNtE#NPggZN> z>QLEKxxUUvUs{>ZjZwG2{6*DV0WU+UVbr+(CL{6UZPp-}vL{)V z!TUZr=ZQLa4i{Omysygtb6OCAZN2YFgLBZT$^uSsg%yB1U0F>Sz!eOPOo1zyw&nqh z-FdafaCXK%I=N_9t!OUvNb^Tw;Yl75IOWi3uon{kKG7-M<$DAr9nXF^soA-;y&Gb3 z-YJVv*vkPp)qj+wkB2*$0crpmWYS4Jn@653oSes$LGlv=LY~Av+d)U{rLpegpFbm3 z`dASQo=?@E^>t@Kq~+ZXTN&J=+(4P$6B7+pni#}FqE^i9^oMW!JZ7WK2OT2T{@GqM z_UF+rrVa4{{^H(b-_F|hK7^7K9(iAmw7dlQFf&s;a+mDMe?z(|LOACD|7>{IlN@5- zV74PNSp7F}eAE*}Hz;16@W7PHQ3$ZWvuxl7En3j&G&CcAcoDJOU?O}fJVz4AH$aTz z$eldQf|@AT*^EwKEVCzcJp=4{kzIH`PFRq&=loErn=((r5lZ|J>-KroC73vhb}UcA zse};?BX4MbnC)5;I;5e2lcRlJ_Ve3A({;)Fr;Ql`)140&b_3dzd581k$?4Z)D__zS z#{2Mfw3%(OU7id}JWIhwG>3!j0^xlwja|R(D6|C<`dN#Ahx_U}M)ghu*NfF8brnTr zv|kLngPO{6_a}UOTUQS6rK@W4dZ#+9{T^<#;Cz&51DTo5#v}%y_lzquSUHCuwv9jB zlM6SV1%K@N(}|M21fdjEtk0uLsn7^z-ydJ0a5${-JPvTAegyxPBmK_*Y5?KUJ(U-c zU=Z_jAA!ui^)3b9Qf3O^Jw^QqrSXwB5)Af|LO57x4CPzkFNrd&thAY0S%D-bCJqV9 zLSLvVo|ILW=ObZ%8gH;rC4LyFU=%@Me;kbVB>4Zn2vYN;0NWujI@WU%lHAJ0CRHmr zhQ@{_dMgc&x~j1KK9KxO>H4Rr{Nwdc!0I*eva+%v5#$sA27s5U^67RtK? z3XCwBQ|!C*6n$?$^okhz>$LTvx0=ukI$t|alWUfD|0)T6Mj13YIF=vp0IteCXKSky z4yV{!);9;06wWH(eZa%C&jP>BNxo%#HyP|W zMH$E&PBl<{4<~4x$(@W}(BWE9v8f5PxFx1tHYzJ<71f!#-F3CZ7d*w;2i{}y;Ab=; zyt|uPA~vv!E=R6zu_NgXb_{uzjVY>hd8`Mdq0`r9nOI-00m~wla;&f4CjIBqVbWK z=?>omnqmS*}nT?ZJOmAZ&s%X0Ji33xSq8l}D-%x*RIP>mc`8cmL&PZ8cGv~IpO5o}? zAH-sJZefHwt@=g3_H`@?T@63$&s9sXqd=YnO6|DQpK@_=*?ImWM;J<~#fGtcGJXN_yf_ zkI6%*N*@?*ol%|o)&3hte$Xp!EJRc^`amA)I6aKez-{B)3~LE8T3zlUWI!vq#sj6H zja`4U3Lqq{mzsKMas5Nr^^`;e4Fx?P_Y|FuRhc`EDwhT-hbLRI(tF0G6*AmLB*S6Xt*NTI!Bsp zR;6^coVf+oRD<0nipt8C8qgm3dBA=7h=(XKZ4_d)Fn;MT4qcBzL{AngZ$D)L#ByeB z$47_je@iPs5c6A-fATZ1H{tJhpJe@kLLJ=#PyYRhzz<~va-ybXCKyn8+t1FBz+?`~ z;C`#UXQBuvgE({@sCUvAxQjL>L)ds$Eu&WWa1P1l5uGQJBlq4ow)xT8C`zqLhPr^{ ztMrtlgM!2wd;x}P`z0nY7geMs@?%t2EBHZ_4gK{R_3?(+-B0KpO!V$fC9?OAd#XZ=ZmB@e6g|U(V$8JP7E&TeO@g>*qPKQvMilOv`=I?HYJ~-O? z`3u|-=FH2_-vfmBY7R|L64dMMt70XR*Ar!^uwE#pp95^G&WmeFzJ(=-95h|3-b`WU zz33uf3O32F>!zydMyim$0A3%MW*FZScXwMuI<**j<8rI?bpLO1qLLuX+zT&29S)Q{ zp7C>qe1LKSYmHp9KxepDC0K%jaPJBbkTGO99YdWaOc2qdQ+w(saBv`VPp&^=)8wpDV%JNz(4NP_#XV z%zpBvh^+bEvvY65%C@eb!h1x-W1j%1(Vu2Io=~JMA#SZlW-~tj#uH#|k9c;vzMj7D zF*XfZo4fgaNVT;1y#2j>mSZTmhdWO^7R9+aUObM{!{H2gNHX@F)J$g!>tt2>9b7t0 zmGv44lt;dRHU(6YKD=onVPm(#$Uh{YB5)xmCGh;I5ZXVfsfQIq0J*3lN4mJMyNSGSo zZ!c{v3?iV3%r$|giU4jcFHKKa5iOj4Dxnaw+wn2!v3|Li$pd`1erKW2l(4Bkx2e8*YXKW zGU)M%DOzC2LE)E|eemt}WORMm^f~E4^(4r{*Og1-OVBy*>i;@{l|Hb1;|m@VcEwb@ z)Cm0Z>pUsSYv*Gj17*-kgX*?r?*#K6%*~H4<(&ZS28~67dM59^B^>Z?jVq2uuk#u3 z1xj2({kC03dOGHbG(Z8wtMD3S_4NAPGQULqWrbHIB-?ZzPl46v4Xes4IM}D18%Jx1 zjuerTaE?R@5C9FVX38gzG#%sBuvT#~#+8>*RwHh@1IY||=|;P%yIG-vDJQ-d4!>M} zf3Q-B&yQsEE7kmWGV6)X1Bv6lvGE`IW(967NjCunWay9n#jfT2oSd1J zoX@d~iWL`Qb#z9>GcHmcjBg`HKD?9#rV@O`)}If4d?q7q+a{|Y@USon@+9uKnpgx@ z_==iUYo(#721GqdjUBEdT`(G4a^UzTBWMd!4SuG9xp@s;)e5RgUo})(p#Bulj&f2Rq_UESs{H6AIu$BkU6iD7Ui3a6(3@< zbv$o5Lh?()TZXqzC+QfU#G6}cP}m%9PEJo)nNqn;y&ymui>=y5pCUxZMhl4$eTLzf zp5MlG4)klS-ojWo&E}1DE^ibI+W2m=8w*}0mTr45@J`c=^{jGkWE90+90-e6cXq`h zqo9}{_wsT$6)~R~L_*WkpmB&hZEYX%!w|PEwWKw_2DS}GVVlddI_gI<$NX72@;abL z=$_FQeZ`VNt5|?%zj(QF*AB8^mK0*E)Ncy6bk#X$8pfDza(ick{&3$!c6F1!31QS& zTEY7E^6Pg56)kJ7G6H~*7en@!Uh|k8@%|u>2npg}|2xT;b^r|m9wM8E9s|Sw%dkDR zkL_BU3P46l)s|t5&p$MT2ik662emfpf@h~dJBjU{M!B!P9bP<%C{;s1QDlYHFQDE9 z!8wnYyfMo1Ml=_2%+0c zP7vA8^5LE<^V4#fnSxW(g zHh7k96q-b;?K_F-I#}_K;i1n`-S5#xALaRV{{#eNr*H(^RU>F`d!J!`eh$Me&LLM^ zum1_m&sw7o4MIq@OQtGHJ)whmzuAGxs|^_kryQ0SuV2}e z^*wNoDDO9nE7JF02=aT%{K#q!Rdlm5bRAZ#m>N~q7_!1E#b^j~Tb*c*_ocGTCXAmK zBT%VzTfFdT@cro8<_*Y~@e66F{BE;ZCJJQMw_Ez1RN0VhM0)UG6%f)bW~-h$Z@l#L zg^w4Pt*9)|Yg@1c_6}}ThV81fA2xOY`e1&f=fdrg+3Fg>KV27sx>RUu!t*^bg8gV@ zJH^g0YcH^gAYCkxM}u#U#r|!q{)5y51gQSB**x4ujE4RmmWSdWkAxLNk|+NjAn;+* z?^+o$L6?I9mp@A9nkt@i`b%5G+A!+>~hwK~BWJ(Kv$Ln7# z5Rxt2G?8?6r0`-&MykC*fj;W#{H8#PWIS6!0N8&v5C*R=oM)suY+Z}4Ul;Th7*_bs z1@5V6n@ST&VevxX91|OfWT2OYjL{QHek^F`uF9Kp;Ynth`#vn`D@V0Ip4*{Qo`54? zbL`Y68qhNUlbN!v5sh7*no!B1ftX@rB4wlSlW))nsDl2LQ$uSeAg0jaiy%E=73vQa z5IC7NOEmv-8l7qMYe8HBvnIW#Y8gSBr#YLChc6Ftd?K#t)XKORF|j@oXRU5{ zR!Nkup{By4HBecZBNGasKj48`H`A;bZHXjAe#!^}bJ)qHU{xiIT!tJArq+RJx>Rsq zOQ@*MpI(+SQ!^iV7_j@``LRg)HFu!dkI7?h{?~gH=oe%-5<3`~4S}w;^@Y9U^aR)Z zwY{Y;EcI09o4!ReYuz8NV-NDqbLlG*juT+s==~DTk+g1LZ5n58b)!Ghe8EiC^jX8Q z)MPMg6Q?7zDop4o9!t#D$RGQi;W5 zr)0j&-W?yo*3!*zOvHu&w0IZVPRIHRbBN!j&C_mmnD* zccpH36hz>=RvMd+%2eBDxBzEtEw7kvrrj>+P!(J6-EPQXWKx=~#{8=+{k3xIRJ*qQ z{liODgzg3ovyNmudHWwCi2Uw?^A;a34H35+>L2Ax|Mpz`!Fqpi6h6N2Z)?&&9{>{e zKZ6ygVnXb{Gk_;B1HWOE$RtgU30r2EbRSKB)wh|^JQU7oiRUVzhH=T4pzS!I8S`^Z zIvLSVfTOF;|2>L?Ko0Wjv$Wijz~@z%oQ9rb+~@`ZuOx?Y3cED8bqsY<^%tEZjgl*E zx6N|={Lw4@Vv#?M(kLoWPA7Vq|Ek!?%*@P+&sYuYHSS_oSGE|IixvEpa06Y^760~S zfCMjxp2Y%Z6H9{#=2!G6cLg58fKnBmM|ALlgdOAh@oVHjr6~oH)h~fs68rQ%;uZuS znktyMyJvy|Cl-%-=0}c;`@J5Jp^xH9h9udK$aW#sB^KcifT$>FEllaBbC=d*+jZUp1 z3=YHCfP18Su3Gu~FtB+6(r%clO=_sduPh<{F{9#y0D@qWrk0?3_9F{KLBj;#>UB{ePxEy z*?B;cKBFnJL@R2a95Pmp*K%5VOtDSRXbgBJn5ek_v4o92}U4KfMg$9DF5k2G&|$i}UUp1rSLk zIhi1oQ77)u~|OI)fLUO8M;B(-1W+y*TA~i6zQa-Zkn{0BPgNCg8Ylul>po!2%$t zbI#67o5il=w_h{lBk;e5&$^V{W-E3`3z10W^>fzQe}+y?Ps=@AcWZ86Q4iDzM!7nN z3xUaK0+MFXC3u?s9zdJztsMw&Ps-~8Ll%$#6HNmtF)_*p<6q%OP2w(q!nB9~YhP?L zpkL{YjA<|7u$GeGLgy1pk*fsYJou&;-{{CWCSp zZgPO~%R*x6UL7X6jTC3-I3Thd@zomAwznlmo3m8TBH*+lMd=>+2C!Pmw>Cw0+8QY; z8glo22Zswi*XJFO)`jOR=O@1MmRkM_P}~(aKZjtDnkHf?__WFTYsm z=yI_kS_LbY8zg<>GaCj}YrK`qhs!tH+v9kJ`r6ubUsKuR>8}I<&5iE^Ykf@HzBGw< zxSWTu)ZSvt4)H>#7fWNaTioi_7T2bluC7>dR$IcSDB^t9sl(=>7DiTVk%}|QI~TXh zv6)K#IgrLD#A0CBOHWT<0GP(5u^JJnYiN{&yy}XZI(UbcUfRy!P^e*~42mM zA?tNXlp_|3&fvuI@}<(JbRnPjp51sF*7dzI-#392I1d2;mTZ9%o9S@MqbS3*V~?wzt-V^Q()clCda~(I{c8Rq43G6lsKx-@URa6XIx~ z@k~hsG8ame`Gn9vR z9GhWC4tIQM_(jwZf$)5)-9kr1)6tw%a-~76H9pY%Z32Z|c%*M{1=@Vd$xlG6*bI&M zsYoh~j%|N^XOwIY`3N}u{vO}{+n#?C&;r-shd50S7`zDoX83cI%>k^Ze{Oy7J?1|? zLYt#5{;B`@pbYM8PkQHzJEO;=NGQx75-v^)i-!$lxmRO(zzUH+md>OPXE79SL3qb1 z>gv?`=UEIp*Ly;k)s{n>l>loIN+d?ZTKR5aQ?$qY*4b6%W!HIxbxDNv=uIj>&*z}N|= z&B_gc;Y3c$@B(G~?4>tPOcV};h#S0jd!B3o+s5Lv<9dCGQe78g6Go$8nRDcQQ_f*_ z$k-nte<-%gSpqH*+z>ra)CuTh=Vg13A-q;&|vr z^2=T#9T zzXg{gK)?QD(zXTRrupl7_yiXE+w27MA0@j0Oy*f7;#Nat1f27z;3cfj!$>y$cyix} z_+(!=+F2^0u*jF>>{xTvFXxrW+v4Byr5)W-VDzaB5Vt8j`uK-zVU{z`etwLOPFp*v zhZHW_Jz(MDJ8|T_hT~JNd5qpV|HFs-BacFT2?^fiyDvxe{CZ#MWB6e@Po-CiGR*yxnbQP(~nBS}#-epkawBKEjvex?rFI07%!M2^xjM8Ug zQ-q<+4+jd>e&@av0t?^FcjjJGVBQ`_cfr8uhlRCaf6bjzqFx)LGiwVIvB!)D=WQ{( zmC{zie7;TXhaa)QPMRN5x?NFvl+M$a9 zFpMD9l`n5SF6PjmN<{Pd{zu zXy;%H!LUQTIHMtqMvMi=Tq|puO`FqZr<#-rbEDeZSXF@GvwG z9)h&h;P9_g*x$YlX7V4e4&p!N?s~U>WWIlzJ-q+Af+hcdh1{d#Q`kR_PrC5VST2W$ zUcL;fioA~&{lpQHfDuP6H&J+e8O^nFuww>o9^NMPdosuh?DUTM7Ys$EO4@<7;R4$r z{@vW97kqI-XM^q)i4LO+wi`2JLUl^}VdEoOY$5B;k+FduRaR+XL7qiX$(N!=4oHSl zWi5MztC7q(4BsyMH0|zC^&JO2M2u40Z{S4_fN-pvnf#@v88Y?Ci3!`XQqdL)ABB}eHq>f~yn3LhMMA;Lf{(QzFQ^Y50NdhJj~$8k1np8{e(0bu zSB%9PhtN`g=JC%oL_BuOn z&>8kHw1XleBY)nrc6-Zac?yV%$)=_i&uao~e5~Wjj9J}U6*)NsK&c}es{NcwhGL92 z(e={Gt*A; z{k$NcEnIy3@hm|ET(7cn`h?1j@Gyu$A|B<`FK?lR5529#fG3vU1DUXWutaqTyz{X{ zF+V5#S^87BJfGPYKM*>I4pF;l%YNN_=XLrDKhNt=!BT{I;Jww~XOp!7ID**CNMw=f z?&Pw+rFtN7xb6Uh%}(L{5C3LrFj+FvZxfSOmwyEGn+ym}|C`zcY{NzF$=tC4&HPmI zzkC!R&AH9_2HPYFD_JEM8bO z`$XK|U(#CdDe^tqAmVL%ugnM))>{KMc$LZ$&JJ*nXb@K;28Nya;>}iow#eORe)wN60KdCEZBL+7QdLyEVmnAo#64R+y5(ll_ath@;A=ho z^fCu09eU;i5IlA8qX*stkL$DQe7 zQ_^ur4v#=-!X#R-bpK1XXV%fpsv9*Y7gz9!tel+1OvQ^SRtJFd6+s+O`JP!lSmX-Z@TDn`1{b~S!|D#^FRgH9Oq+CwAgDAbSvh(FTewc#>d7FWfl|~WS5#A%TcLMZ zRVC5|ENDu5ipJrLm)n6A2frBovA!p;Rr2?xjoANWH#sgb`BgPm5V4@4_ANK@G@qZu z?4uVS9`{|}`DqCq+SsQcBL~snt}R6)hK7o(D=l`B-kOgx(dh7zu{o}J6YadPlB&kW zcmppJ?1(Md?K8mD?}Z&T8X8)8ATQom;_tKHzOf2(6!_=6Pcwk_8l-gxp`_Kz>2@~X zw|fyRereNA@Ico>61w5q+IZ43DB`ed^)R}{d1mE=3^3&4&i!1}dDUxQD;QAdm6s*i zc)UdJm^{n!x>vA#8(UiNNoL)gFJcp*gA_ucwhN8z;jZ;15MR|)pl|rL{-yJN%J%Hp zw{J?)JhY;7rK&Va3NE-d-%6rsnRI&wz8|4OMv?B!@B?g^V0KAReT%14SJ=N5Uv&Kp zy{@P=(BT*_FArF@rmhJhl^?S>c@2B#SyVJEH#y*L5eA|*VXilT zcd}?Q9k{V&<8pu>)tV>(h=7$I<-C7O2$&H6wI_KdMgmEBzn{6ufd2pRf;N!;v3kX=DQh7HyLJXTe#c+ApZH0 z34yP%XhnQpkw_(2^yY*Of4;b;nCIRb)#9FiygDjub}VVpWq>sq(y$3veYtg?-sX-PuI#~9-X!tUxnNnQrBbJCkw!w_p4)nyRWr%IQk!GL03lWj*g0oX_)#~b{)b;uDrR7%{>@kN7 zANX!xgT`fm zwV-RGd3*%IRR;62YMXCX+#a$!_nt)NU9GSPk_+ZGk9i%br>TgG)Nr2_Q@o^jnG?8X zSQs`}lNV@w^d2pSqVtl(Q$ZTB;PT$j?!wj1&Pi}Kt|Q>f;V{JG)TTAH^YW`%l^~~i z5z+0m$5Ll@kgVe%A2n}Xp=}HPnYp?2Tgu2Vo>@j60)d#J@-&{}!ysM(Ir|LE>@wQb zam=4HjyyKyi;bqjywt=^M?7%%zP?KMgTi#rlLx`#qGjp~1j5ts9wSMfU((&~-YtuY z*nR#+@-1Rlm#7R6mY3I~#%R(Yw?|U2cq^W40I5zdtd8{E8(z22D~4HnV0_AkW|cog zgg(I;fLJP?$M5q4OI#{M?8x993YMwa7P-S=9NFl&SMH~%J<<9iv{(V!bDM#Yk6@d# zgGpt~Q;un;1Q6@5Wt)Rbb}=nB5G&`WvAAAXdxs!UTR)n7;y6W&ru0!!N6!Gdguab_ z7Kz)Gk0W|>s7$WWHn7wH0U+la~Mhg-!B-V;63-esQA(gzC6}|kst_1dM_d? zY~&Nlp2rve2+T1k?X&~USnD>GJ^R0JKYpqP3pcecy$j`nSX^{9S4hLPDWo^`MsAs@ zx@F?6c$=W3J|7!3I=4b{7Dvv*;LV%FbL$i8-ywy!Q?t$?n?OahS21u|k0> zpYP&6`zi62T6UF>3&Fe@b4vNB9lpnD)Cg5 zEJz-^R1W24qtVA_A25U&HQTh>T@~E74rX&aPCpGf#Z+O)!L`BLbzpSgHHnte(i91K zUwwyl{#lhvSp^C}!-&{hM%iNyn8okF@Vl**rJF2KeyVjczla$?@1*im)NzR`g>7BE zACF>;N%x`)LXE-DckNi`^!jA7{@dqRt->mqc#?nzLGNnuCG0+4OFd+(S=&HumXYLq zFkG9d^biUfT0aLJY3bmgTLmwyzGPQ|FzTQ^&cw+R-`g3UfGQlD&a6_}G3EO*`TM#V z?HGF%1S#IB(!C9zJ<4W<(Ovg72!m8NIwk09YR#E5Y zS<>U=On^d?n2dAC>Qd*LH=~(GWi(f3o6dqx%5Fqg8}b(yt3@fAefH_WB%*r3vWZ=M zE>bT138TxaqjYpH0xQIwR8&&qk(>&)H><$A`VTg9lxpps7v@{c>@E7-7Imo$Q(76eoprH z=PK#Nulkt2o7#{@Q>~@ZL$a8GKwqf;@au1o|Bm$pQeM-SL_1-C(dgh+L*U*3BAM62Ail!`Ow#k?fhy#aGCGbCMq&+3Vl3aDgxWMj|&3wK)Rf^`v z{P4kuX-+JM(h-%ne~`43Eeiw`RPPf`O&G>br-# zy;x2AHnGYBcn}o@j*0rpu33Gq@vmN^2@2bmJ^A3VG$2Q`-5 z3|I~G!EUEt#lAflWHBSQ&BFs8!E=Un+?>rgzE?k_w3^Q3O1rN#HF8W~GhxH$YG;(k zYH(snWWN!Vi4EmShT)&t49oJoA{kj(@LG|dS5FIlANit$tQd3MURaD`NW`|N)c8=Y z*z76R8WlA!)eVKn2*0>g0?Nlq#b1MhhkHcL`>1dYWt8_NB#!kEmp(Nwah2A0!EI-8 zWIxf$P3hAIopp(#6%C|>$_!9v-eex~yp|KTZe%&Od}Y1tin(yU4_~<}Q^28874ZQc zhi~>2b<3H8adUI?DP5O`Y>Pb`4A2NgKUn0%hEr6mjX1DphOJY18+~|?WAt<}TV|wj zRRiXb$&jIxQ{1a+ZtvS^H*3b4tB9^f+1&Zk^O? zj{JZ%pz4n9R_k9ntwTYDRr^}Y1O~*l@kX+eW zQ?->{)J9853k;_YEQ*@LZhfH5g>iT7TE)?s4=<4P&UPk`whb?ENC>zSudNPItf7OGf69KIglecS>rkq!W3TBTu8gt4>c2 z>+=UIuyui3;xtgv^5`ErX6M#4I*qNnHTBrKOkwrayPaAe{(Jk+`TNftixU=??f(u- zG}^%W|C3T>{-)Hp_~GUM01n9>_{X@M%J>tP0v^i|JVeiO)ig{d3i0sepd5MnnXp&~ z3=T`c$mmma0u4xo^=klJ+XwCySZ(e3XRdqgqLsYp_+y4Bph~BaOzY~? zm$6zC-4tFYX8PKF4f&nrat1~%R>DA548fkaojjy7m5Yo}1bFz~t!yBb0*q4h$>Q!j z0q*dgrmOXku`V$}#)u7Gs((GsP>SY)xMK-6`!ksI2Qo4}B=P*!9PZ*(?M@VYMjmVj);}5z%>VKA`YNHw3Ot zz0K2lwFJp|1GVW_a28mqkv9$Jb$iGmoia%%mtx24Qc&KFj^I1vMh`w%3kwkvtPPbM zI2p&7RQd}UWoVdVOo&C+b5RN^TwakFF<8X7jSgi62+ImWW$6TLu`{d`?O&HQU^l=a%k$S!hUEOYyhPFHRMSdcXUn8 ziuFFhtB~T_j*B9;fDwa@7NS3h_7AXC$Aqa|59fl!%2DpkXU^MW1g?imp?!_5z2i~WklDUr{H%9uCbrKguDUq90%Ty9 z%hdN?UwpAsVgrSxG&>LSk5zbJgMSbSDFP2I9oDu|00dL7^H>Q<-g6gzuKB1&59b{Q zVX&nmI~(&dema*;&;A*j0N>|n44KrB zLoAjuGwPrNc>zVSYW&BW^rw{H=;8L2GkK$LCliP!@hr20mW{p1t7~w=D-Fh~@OovJp7X66=u#8CQh|JEbr1GgsH4%(Na zG8BQ$NmR+1K~K@u$h%Ks#byt;J zJH=cHat@j+FNYIRy+gAt%+|SZ0K|m$+Ck%=0_^uo86T|90JcrW&)Qi~2$Hk<-R{~w z`(K0#Ru>2JXQ>UOf;Dlg5f9n_8^{;rIV4glXbU`r^EWFKAUHmXG-)cFt(Rk+r-z{c zrtDVc*2g<+y>WHFNG%>(&gz8Yv((ZknVS1}p`cQ-pZJpcC=rB@pwTNV;z(Zm}{iyUk#2dwX|$ z|B-GN9QtV)jg9TR(5yu%`=eP=iGEx2j!ttLIFxJbpp<${nHUBpt}U3tzWB_)O%FCC zBt-VTM!=!CC^}Wy6gp*K$LrVZUpAf<_R7{d2_TVaV#F(Ss;m~PjcJ7Pr4y7>q{>CS zk0DB?mv)3Vju3Bc;P|Xa+p9-FFS9Gdq9Ywvu%3j8Lm#^ygM*MO4yBCKqoN=D?yFRz zE59cB0!9^a?s{p#Pl7tnvOq<5k6k51M1@f(-f7>PhEVMdl}cn8ho;)9mq^J8e?=n3 z{*n)ztX5^nJ^M)+fX&GWZ(*WbV8)o8-{tPigzy%3P zBp5YXZ;MHcYil1#nMex5v?H@@BIRdTzUO)_^wr1hyBjxX+dNAiuJ!e%s>1tFxbR90 ztREZTQ4ETTEPm2Zr%e@erS2rMiRqF66n%SE@VA#`-dlTWUFGY}Kc=RQ)sT{Y=tSi^ zfGB#R(~AtAz2oCm$-1GzOHACciDQ^bOa*Ukpahhg{TH0RBF}LV82?mS{k!i_^-7;^ z3ID%OM1|NtA#Xs~!NBBIAwU_%Yn}#V2rCDPX_Cgdu>rx&*GubQ{TeTC5|-(4=!cg|IDfHj4Y| z8X=4+(~R>)r1a}o0Z?mxuM1cK{sYq%NBGVr=kND7c8_rR3Cij%rbgARVu2-+Gr#M8 zKU8! zs)|~ZUlN5e3AwbZlJH(1&=k%_Emiy}VIR=$+MhEVo;5INR(-h04Eh?iU}~~niobZ>s4Spz5goiXjT81BHHgo}5}dg(jtL5YdyB4)9x#W!6%bZju%MOC z=gZ>63VwZ_M(p1GOk`Ck6LsPs`kS}(b+o#)6XmJP4jwvalJq*CS&^F4<+HL!8x?&q zym&#KEN9!Mbe~bYUx92vT!Kv1(i<3ooW@x_gHge^hwYOj@H&bI7QQ0n`wK2`aaDz) zm$o*!MnMbim2+=xjEq1T{IsAQ=~`$OWfbA;K${X@a!{bZx59L9^}@B$6F;KZ6=II+ z?`RG7F$`fw@7Zh@YE3f;lc7gON{ufJ2U-PyhT3L~Q_z2Lvzi`U1C(}w=X}^e3WsJ) zeQ7U{>Aw#~j{#i6x{ON(lJiC0(B^+T7$u&+akCdt3hw*ZX@d}*FNLq3X9)Quwe8da zB7gR)i#_U1+h`=`&384ZNF}$N8n*;>r?O-`V_fGvmA$e#)%d7(m2Nn02=p_U+Y33c z#I++~R~OTo!XH9OeR5L>Kp^y^u2TZ<%jIgI&|sp_m&@S?>MH>uBff&7BD&42lq*bu zlg~bD+OoT;;(7UC8_d`!MCXC%%wXCqZ*)he(*(y+;Y*w)hpm@GbQ2B8&MtdXfdesP zn%%y{TJ>)!Z?Ds{N@m(MHB-3l@Pf%|(FmOh0&J%$#f&cYEqa9p)zw}ZUXbcF?IT>d zA1A9&+?xW;1&LJRdES~~7!;%eJk^S+d52gcdXva;?H z^)V5VUxi*HTAPc_(yU2-2M*-JMcH z=TOq!DIp*&-Hmi9ozfr((jeX4-7VdHHcy=Y^PcN`;Nxbvn0>E%{c5dRAzTEfK2`^D zq1w6MD2*i0*~HGwsN;5(p;1KI!sj1Q7C$9~XxW`AlaC546llN|>eNcsmtr|mr?HGR zNo#w;>?nSavJ{udy~Q1B%nOpun@ec&g&#tYK$O=^aNq2UuoV?^cFk@`Os-AN8XPk^ z)tA#w?=phnhLZoc>t5plSq;;Wt*@N4@v1QMLwbcs{*@ z{TQ3|gQdE=Q$L$Yl~Z@Cruv*((;yNJ2Yq{@l>oDOH=5%nRx+Tm{iO=ge#Tvy zVC-Ye;`;z5jK$Dh^$Y+@y>T^Mbj?-!vs~Y1(ZCeeYRdxx_AN2Zi449?Z|Suh&_Q>$ zFt{G$O-BHsaf$Yz5H;p`?q3y^vx{sXe=iqnHuz3RZHN@ym(qZYwr`TOKebcsHS*1Q z!8X!7fmUQks9nPG*C0WGns%6Ee&Q2-KF-gebf-~V5Rr>!%<6XqAJ{0uFf~R3E^Bm3 znu7M_W;lry@hlyfp;T_18*Ch$w(32Wj$bw&3GB@=g8=K~*onBesYWZL0-F=a;2oM! zyDK0N#>LJK!Z}?I?0#?Tbm{8H23o2zI~G$_h0$$HV#Gd|PvfCDQ%T37`Jxi)F-!X$ z=~`~DWum6h<&gU8<+^9rbTG<6M->Y$f&?$UivMtGyHcXe8f=#OVXi2!40<2ym&i~k zlEi*8CrrbGsF+$tua!P)RuNgHFxwBzV_m64^@!Sn2&)iP`cKkBeHmQ*m2&ppEu z?rCyy48jhChj<@$rAy1Jm&pB?DMgjzuwd$GrKOowAqnSbPWeTPxD=~gFxCCvY7}{Y z)*@^T=F-BXvV=u`t)BTd@;l;&wr{Z3IzW2k#Fz7`Y~=@>e?Y)uarrOfDfL2)T56~L z*>>H}i!OgQi)8IKcP;C@1`XL<974zt!uo`*{PM6he@f=@$*poNh5inU$5YC`W8d7~ z5bsFM^a2L$XtS;XazU1h=$bT3%_}VmTnT=$u>P*b{Mz{f13Y z!>`V!l03~>J@Q|7?wh3e_SKz5Va&uZjum=aSw!ve-zl1y*NZ?V75(4g8m&o)Y;N8#tH0I->jUq1%!W z7KqAgsJ55+dEJ~(1tO}Us=#EP@2b0j=s1Xv6D6x-C680~(1z{W_hem}>eqvSUw=ah z`a+m%^9GcTLBqOc@tq-WS!0IcI9}|V2&-~to4sDAa&vdTW-8EFmDRLioyWR|SFnNd zVNC@3w1!`3w$8O0shRd-wdb~vj?1{inUiWhK0;1OHZYZy1rj4uFyL6<;S`~VI>KeQ z9W0D|A)pI7>Gq!+El~LE9%zIPWD2V7PmKuy(u6sU*HJ%jEOWWJ5ut{Ughcn7!RJ)# z`D&sMgRW|B)bXHnxvX4vpuq^>bzG6qp*rsB?X}Z9xwGCK&u=bA7T|E6+PmA40;Ma; zprfF>#5opo!hrod;>)qx$MxFu3u^nn7#K+gE5^nrZkz!dHGsQ=seizErigvc_Cuu* z=4L2*NGBqBU(gy2rA%kDy+M8U`|00s_~ByOIV~E z0sh2M+arno=^%4x^oNK|G!=n%Rc7=;G*tTi{@B`Rv6%_waNwMQ5)PdkCmrlBYXK-d zU`q}4d#5v{UsrmAT6tZ*7D{L-Cabatv~)$72JjawYIJZ{{%Io_BMB<|3@1X{}nG$w2E zZI2tc6~!>Qv!-2l2gJ>tH}s@f_9?2vd%POqoxJXNk~+LOF*qhozl?~?da zl@TrLQ?5&x1qXoJgKc&3f7lwFH_&S*+55g+@*#iIjfk4d|3h_$lm5%skmEsrj{h%Q zfFpeY$j*NQp7=Oh`bBK#|~rgx7US-BU+xI+fU=l-`AvQ3;PPuw=~1r%>RP9 z(Cv&!{&F4+FtM(;Td+U8JGgSE2{3m@d9m2Qk>YjI@%re9E)LoFsxEK2kL2-r3P}Qk zfot}2?^TWW5%JooP-#_8i; z*dW0$Y>gOsdIw8mozMl(FIY-ZQfC>so&jQQLgbha?G&V>cSSvFC2!fD8q!`IVW9W>_~!0u z8vfM3C32uRxb*Jx+sPu8jXrrOlaR$Twd6~bdg8lhN zzDvqa_;td#?WQJESTKubtu05><&|;TFC2y`P76h}49_zkKx~8yiuq31=?>!-_3LY$ z*FEuUgEQWr1t0t{S83y62yig4rc0HG=4(E|0^5~+iI*Bz`RTEr^lFF&?{1Lt!H4pO z!cbqDwj^CG7MI4Ikahy!v0y{nDAdKlbC?ff*R3Th`wAB86P(iJ^=028Ro8O z4X-)?0} z#(lr8Lb|y0Un?5`$MPXjr@}j#1|B`}*sa3Lr9L5=en?78AH&*Bk@|2zNF{W8!Ep0% zevHx}daaVm#gt_h@qKk?hd~vq*D@X(Z8F=VR-X0qksPUUniJf*!NaFGVLWM=24(x! z46rlq_YqfEOw70hdK&&GQvR#iSM6#O5f7YdwKWCkyJrzHWOQOaHsWv|BG1(2ja=A2 z_ziost3u~hHP9iGhjR@E3Goy~z4;h)sD1VgHqb@AX6EzS=@aK3+3jJZJ!E9VEaal- z8=7Hv-lpk2YoR zeJW-_k;ePN_bx+UejSE)26mb{%>t{UlzjyrZ$3TR7OFFi7Fh}Xnx)!s5_@KrswOj2 zq66BQ+!Qrj@2b;y1YX{HsZi^%edS>?&ECVaX-;^`^~Xx{6}FQOw%@BFOH1;bPVXxQ zRuGr4K0Yr5ZO%~pLw(eVtfqwnzPt4_#jN-iEI=2AJ9t`9{@&nmO!R6*kVA{LsshQQnY zxCAk`cJi1oF~7d*yqey7+!bP|1)%*@dNG0QhQGV>N8#k*GHdQC%tW4eUBo>%eMCRo z9SPOU!BMQ;KU#}fbpK!id18b=vx`|xGq$?@eO`GEmk&I0@oPM zRb7)QL$Y$|dp{^wd!P~VoB0fchO)YPJ;{!ugt@g#jp5d_C;0=Cmq5ekVAxM1A$g`y2`x@npgyuV8gXGQG;|=p?g@$qfe_pWcDx%(FVG zYub_;%F0yIk74MuOc!owDTdv3Wnz_4&V&sUFkqJ>k}-`&mQ6-~y;reVDvpg?nc{PE zgZ0NAt#SNlu~=7LlFB`|9Gh#tx_Ik~?{xqb@22aVRab}afKl)~ee74*s|b&VHWs^G zMap8}<0o$DuB5~U^ZKsiH}sOO8FB3fCCqSIWB{Ouibn2Z@MPE`wMp%68VZ2m(9->X z?yUQ&?gDpiDT~xOsVaIwkhdug*mSZjKf?axCeSh_E>8V>IrV#EJENQ+bdhrk3AMBq z*+OP0ZTzkJ9fN@C>M!hOH3&vV*(Xo;=h=FV>UO)UY^qK7_{Js*mOsOIYWVEidGG_R zHn4YZSroc0$DE`sWXpFiy?2DtV$zM0d{FTJB81kb@C&N;Z`|CIy2xlz% znBLj=x#(kR4I#aL=X~1KS?z|(=fHo(PZ%u#M-hDKx4KFiGF4K(`@0Pb9WN86HmXS^ zU3cq>W!=V`Xy$Dk&MsK0XHsj*0+{ zlvEOV|39xk68b1O!(zkK|E~+du?=C9`oCn-3G2T!6R}IxEaCs%B!)2j_|TU;af6fH zbVJM6NjQGOpZ`JF``-uJYYkZZaGClmc-mkZ&NA6WQs{j+bpsG!Lf<(H$R6LQ&@3Xk zb2&w-qyv5@Cnw6L$LW&M?>4e)*3zgE?PHikTzv~?do%h7Y8#~M~$Bu!DZYDXPB?# zHSo5869m_Ev3{_dmCh30^{x~x)9dP2lyE@@cDl?@rLid0H!gn`Y0hqMTstBQ(^wDZ zXo8B;AF==4v236=Q-cm%y(LJZ9g9yXhGc_5U zTw5Z${TCK^$jRH+wlM;-%?3UwYN}H9xVEWLXVqf|B}~4%xh>fG0hq*nd#fGly#7eJ-mH0KyBrcorFHzGyd!){ z+?K#&*7ffp$^0I3MZi@G*Vk7R6Nyx=h|jnE0TA}X*)wx)DKU1jalrLt6guR1nLP>t zuWOXLs+s92zzTaq_;(wnlh6nB2Q#xz?zoIkI<)@R# zT4CHcMO_S0QGcVy1|P!l1YQskZ*pHAZe?`2o|OY?er(4#!I<1PWz)>C^J+a3#rt)F znGIjO4Ft=V<2?R_^Lby0y4mNx0dW5CU6C>lgJe%81AR}XumKDHvi9-K#^5j@b^v-F zG{7~5G&OlTflHCDmpO3vr%TGnN3%Jlq;fy{3l1b#1RnBT(VB8palR%ZJ#KwQEz~NZ zb|rHw&4VFo5ch6Mwuo?3R+%sw$$0hS4T2pWv%X}09CEgdG7~NQfEr$BJ%IAXHY8ER z`PRQhIAf4S9%&i9ns&Uq;Jw*iF!*}57{SwPf6EHJwf2QJKM8Jq{));6O;<7n?%p9e$?BG}_@`+u9mM7*cF6m4GB1 zmqrq|`OuLQLkpBPSC%^Rv?kOTs#9&fF~Zt5cvUHwQa5$2`$Y;UMqW%l0!kh0_yw*R zb8-zLQMK=K4^M}qEwI%V%figt(}%-)kWLU(0NkZr3DJJHrEc}ZNaSdh1ak2OrxFRK zNgdE`*16-5bmCh;`~Da;gqI+HYtt-!H3DsPoslc$-4_UqP!Lu$gaVd_2V_>T1RC*e zgNk<2`JFNDt`A;}M&Abdd-&1)fG@P2ng2TS?Nm^?p0-C;5Kd1X77feqF%xqmctIU< zrRFh*tXr6t%#$;WbHvIlxTu5BIxeqnh95Qy#7eMC{ti8dwZAnCo*6UX5_q;xsNi=xCLA9hUyFqltozeyh-;;A41GPNOlnmd3=k)OqNAntoy9Vbk<%sW8>+zp z6B4z0(h(ng&52p_JmozZgCND=&+1o0#1zQK`uwiEZ|r&L<9*0!5RCObJwfP7(V}9y z*jp0{%YhcUib1O97N}D6PKbW;gB1zu{qoGiMl+>LbW%+-@e|@C1YMJUlCI5?kRXQJ z{zenaw1eSWFSmR3j5D}cT@M5tQ^=Bom|HQMjtdT^Ldi^M;E`SlvzrF7&o}Z>3||N0 zpN8uG0sHn;0y>hl$?!juj+8W<(-EA?MN<}x{?bw}LuE_yr zBaZ4HW+MlEH;M5P6Zi>l*uP+XsthrFFhS$XBZ6S=hKA;%ZX!#{e|RnOc7`b7yiX^9 zy*N~yMVZE8UxP^bSi4vweP-IreA=djDUq{v{xsx{wu1QR&l4gj-N0A$DCbH>6*X+x zRUm>E%oMjlE^xo=9wTi%F5(dW4%vZM`7JFob0<6aEUiwcGm>JFwx}g-QMY%f4{JEn zZ`b!dx zfos*Vu3b=Dc>{+9rN}t^-7rk?hueU+$oJ#LdK_^{O)=`qBDY44OddB3X=Zc7KQ;jZ z{X*6YR{@HenlP{6oUp{X$VsWm?W3e9u*uuSIz>s}e47Jlya5iYl~l19J5g~bMs^hZ zrwfb?D&BaU1)=9<81bC_(Uy9gdX%5mvvqJiUQ~7)F&V*dJk;oQ-U9E_bd;ZS9CbA{ zzhsJ58kA|HW752x_iQ1AWy1I><#+U_-ZfNoT%+;VP^>D>Ug3U;u7LP!#2$|tG9{JUElK2dFV)j%0g3(-vxo7ejR8!-w3Xk_gf>en{EtjW%V6}FQ zy&qOA`D3#K6$bIs%0yjV*u^5L&}Jy~3oQ!dK;89)a=WwV&e-^Y3+qr1p$vIJ+P+X|B8a zH!Aj9kz>=?JNy8{ZwL#T4=d-ASNqF>24;|lGB<*8g74h`hpYD_rd#CG%4Wm(^hwJ! zP*=giO$=P4%SzBM+Pl*|TyhKjzPn6a?d+Rq_tu6!Sg1$_@qV_mLjyS-b{W)z%!kvk zcCy`mes^7xT(BOzJm|CAzj$+sS)=unTCu`bFG47oikdpi1q6CLg%i+i)4)+yRz^`@ zQ77{6caJW-@4f%xTktQTdYROZy9(YeS)m@$w1L^!b|A5h2PRI>@_qYY@>K zEpPl@=~S$F^{)Z9&9bXHLYe~h0K*)?0Dk;R)e5dwCVQYJMGz(ORlv=D%9!v@Neudmdx|vD zKFjfio|&9xRY`>#3OJSGG{Jdcm%WKE0t<<`#o(azS44_<>g@Y22@jpDzg>FA679Hf zoNhns8-mj5LN}cpQT@7)@^jLxDZBH@0ov4FDhf--^D|%%%K0N#uN^&yDXki_5$LX) zmq$x8xoJmItFQi`zfnH?m5=+VDr~_FrWg~XjcFf~iHH1g%XMqqkuErMMt+gG#!@*bgY-( z=KL9DsBBx@;G6FH9cQa;^&yT*%GtRRdUghH*EcHKqVz(tRYGt_OTT6N)5Y#GlTM4X zQs+C6KgY4_h3@kfl_|UxO4UWQbo<_VZ81-foI}GgcHyYXHz24!??P{tHi<2*X5aZk za2F11v)UF=csqjMdt_^jTq(9@nA{@BbIkkUeB9CAuf)+yuL7lVWxjfUQdm6sNYi0K zMz65XhqcSU?_gwt4}E}fb5?S^y3r*o;dk7kg$U@wHJV@3!h{}nIbx6Rj|F?69k3$I zO8bPPuySo1b?ke+FB7#`jc?vhV{h?)@$EndcvMz7S7VuPceu@sP#T~$HT!<34umhh z>F^dlX_MVW+8#toUxm$gq}PnqFrhCs?G^*B+g0L;YeU6!A8_zJ?jOllIuW9OQ#^Z& z8h;B<@XLTqm^TFq#aVN+Hoi|)KiR^IKpE#*CxF>a@wiV%^X;}gTYv2^5F3kOHxU_d zGM{dkv?#@(+xpx_^TVj)gPAjDeUw$5_NN)e3C{6jf!_t$^sn`cPhza`6A9-;_dM>=?WNd9Pfu)zZqjRc8*MNC{4`Ip{l1ODWu zj*&Tvkc7`z7jpG*vQcqzf7ZG>o?plQdZNyYefVR8%c1Tze)K`Va67_FJ%xFpEl~gF zv1I`cxVH~JJ-oMmH%jENk3S^vpKuyq9tS<(U@cgAH z*k^>5Zu&#N$w? z7YfX?jwrVBgOL|7h74h4*f~WcQxW&UV-#^udq{8T0&gwb5XSJvqRdk1e5{S3O}7sY z7`m$&EZu3ww6pa`8)G;6(C=^=x-;h4) z-rJ@$e+ngKsmm@hX%U+oF>+jDW~LX<5ogXb-$>R`5=DR#pX?s)B-{{8>n6oKadNm&; zrR#{4icJ*{ej%isk?w3jUZmOL;O(V%&JH)$<5YdF_utv4Uj$dRrVV{R3|G^!$CyYN zEiyq$?N{3#bYgzd6lWB@%Do!56>H_4MN-bi#)0g^Q`2`cqr=I)2)n&AHTZJe(5EK0 z-OPiQgEJso!9(mJKRaG-!(lO+_2+mm@wSOK=Tly z&NMk&_*%#978IYy8g1$9dX?uVfi(bNid-M1cU~4WJ?F6Cy2%9HT5vNnx8;F|fK@69 zQiu%?nLbZMo@aYA4dOs^F9a3M??8fC=xEs9`KHeB%+0=3y^P>5f9;ZcjXjtuc3Uba zYFoCyNmT=BuJ*&Byed1I@7tK!kMxuUc}V0$7O z&Y&ow`L-+(?o~vAZ#%e!%oK`y=!(?K4H=dj3D$pkAn2F2+KC*8KSs#=Nh$l-l-~ecAg8No**A)h!15r54 zo3(>^3T(pQtv*^3KU`~=Fyv9U>OvOCnKh!K z0pTq8ZlS9mVh2oUe)6R!<#)rQ;MBg5$rXmp-Vcnll*A@*YL;z)3@)q_rMyt|5RrzNPy=i0b+ZHwJshQm6_`3i)&Fn5PTk3nR-rKR) zWsYg{Y*F)x8c97%^jP8N=Sl+1uu~gSyr@Ejw4dqZ$%ov?jG{uxcwyZ;y;#YLQ#j50 z+|ciW$V33<6Gj?!YV#qM6_2#nA$AoDeYGiAPxt4QdtxdL&3fmBaUt{%khFfiR(=I`zQZIGbRe)L;h0@bk8CJyyaL<_&|`qHqU___&)*EIm(-qZ z#k%S(cE{@z$2P90WjeviC1O(z$Q$9#dCR6~#P#*J{uUx;6y%~oVHj&+zerRwf^Mbe^%`vpNL!ruCJ_PVl1Tt72$UWzA0)5*3y3Q7yks^=pS2Oo zv^lZzep*fWlcG#*QOkXOy)$fp*^`q?(N*~sAk1{19RKVhxIP8(+FkB*@=99=_=8|$ zZ3n-`TIfJdQv#L)q&XmjjuE%q;_Ai8E3NiTUHv3~HJFA;T zNUV3$&|FwO={Bhx2i#mcaXUH=joHxpta(9bgpKqV0$UgT4f#Rj<@?>gG9)u727%;* zRt5i&Mm|LN5PRJgMC9kS)-Iu0>41V-eb6T5q^@33uC%8hiE~8C+loxcuS_Z|^mQDq z;0V5}t829JI5Nl5AkZaAf>~Z;w@8 zu8F0gJrJT&F#P-T$}@5ZDhZC8RHW_grxj?7wau8MB-Gl-W(Bg<%fkhvqvjpdP|I1U zCVQ&Zx`ES^9Rmi#tzu3G49#Gf02`%xanxTt+O4&_DE0U)C(M`;0cipr#6HOU#f;dZ zZ@Qz1U|IODzr-bf1|*%VhkvV4e>BSs5X;B;s~XAi8UIy{w61PC>FiEcjf_k;y4g;4 zDK@g450cO^36Z5|%G&@KX*id>LYMv(yd^D?6OZMpOGDA718~o*AupBb_8;%q5HOxp zkQZ&tYPpI6<1iQSUHDJ!MX6`ydMmp+4}&x-MO$U+6SP}eFYZ^KhrF{r6Y=SQXDG5} zzjnfa-$MVSXq*P9@=>JM+_fu3OQ=|Np>RL|AW8*mw|8)1UPHcTxcv(5YrjQQc>}(MTh|Ni*AYIL1Z7Dm-l40T`>0&fJK00sms78wA=t9M9N~rFW1qxMecrU)`j97z zKtJ+5L1yH4TmsVS;aezyRP}%?VV^Zk67*FT^N=Nv=(SI#VWZhzj{L+>jaP(0sUg>0 zE9am@{)`_#y?V%`B(_+{;artTyQ(%f-{Esjaw0W<*xAh1CW_mS(S(G5Hj)BYa>lgJ z1I9$;a8Ai_nVI1-l<{I2aq6h)LSi!bu(mc4F6T#Z#N6NJEans%7rQ#@y-LXiFLj~a>a7$rG*sH8Ry>*^S&v3KVw z=Hy%JU~v{&pFE@Ehd4Y5sxP zx5#ulH_@WUk$my>DAD=gvl!seAFG9Uy>G~Kt9_T_C6vY0K8t@WN-yjX1=iSFEGQ7x zmBDZ&cZ)(d2kC7!9o1>5K|$B3gwmkz7DH_=N>ISN0&K7iT$$o~c`hKbE%}=lel$;m zsM;R<;ji9eviD4o!jKp!28zRO1HEe}XMc9KEWX*il!7K#I&@}i_2))H^3xDI)FYAA zFq%w1uY0uc?iII>f`CBT_=T(*s-2;t8MQ>?nI_6oO}It#3I*uy@YVt9?l`D`T0s9h zs?5#dwa{8*P(){CTcL2%>ZL}aCvf18m+M973YN+ETA#MzG#~nQWY`&O85B=YDOS<{ zm1|M`zA_lS6fk~4W{(siHbIxpx})EI9jt3%bnU-iIw%N93(C`OZ!tL2ZQ&OS&zuVhy3({Y)AwDK2UwwK`@;POb7l;&fmGO|%6k28qX3Xl$~GU`+Ap&R2B zbBnUh%R=7`%zaay92NDUs*3PX7S%$zLGyk3_=%XvFb(-l2+po4rR#wOjA;)^y}t4U z!Bn|JT;8VO+4MUQqyn^ww-;Stit`GiYg17P!6{!NsE`yAScgs7BfTK18b1I5C|PeQ zt@a6j1G_@fp4%V_5magWvuP4(hn8a41^yvh^M#+sh`+L0DHFG=QPYM#-ic=HYpb)L zp#qq(4jKB;YcKQ|-6U#}ipQYdbDbx_l+s_J*<}?E6Q#DghChkd?u0T;0FOpW2#=Zi zcb4B0DVToI?B?soU2t6Ua9Sg>y*+JhNVe9*>lbL@D52~AXM9V1ws{91xv_{FQ}H4q zv|$pSkAOmV&pq1?R+?clTB&x?5b_?Uv3L2gCkRm;KsQ+&^pS})lzOr_;$USz3JD?d zaZYQ)6itVVSuGy>GygtnOYq{0F=DDJwvT`QRbGx{zka}Lml@*qI#`&{ta}nne}Zg+ z9azednvV;}mCe`t## zdrX}6e%exSJt*tyzb|=ubZ>9xHh?zJmD5CYA{lRtR@O~BqP=5$KwhXlhCMSF4R$%y zZgb?w@SnCp&h)cSj>OspJKHL-469DLw!x7w`&G0)Nk})|myfZ!o#mpVlhSeYbZ6jN zxgsF&ylDp|i13GTWIEx(obU_o!uT~bH3K6It})I2JUXtfBB-v( zLX-PC{2+#Ik8EiSdnl*w)iDV0;+=V{m5n*Pzc{imfW;|IsI*UB3>sX-la7&NX3v}PHwmr86EA_4CG!V1GC$3X0p zMYk#N)h|k2UP^2YV_@eEg5(k^ufJ|*6+&2;@v0^g4w!%}$*(Rvx+o?s&Hu3%`)a1h z#M4-!L{u@8PSIydx!b|bL56IL05L&`>x$CUd`DQU2^Yw!=JJ$;BHx6RN6IE|kaE-D z5#Ozd$9mq+jsdKhNoPxgVEvaG9nN5H@0L1ah>iVww+R-d6w>QR%Dl)q419c;nvXM+ z3G1{kEDGG;Aq(e)ze3GtX>XWyrqC6mVW+$d02&6LNAY?5z1JWvD4l7gXP=9(CNstr zr+gLvod5+E-~z)fHd$LUk}OH?@m+a7VR$&*5h5SqHt=~34K7%m=SgDa&QR7MAj$OI z_yIEGm)ZEKQZVwHSCt&F8gn`AtGY;(oEb}Ojbyfxc1J(e6`M5vvayp8wq*1q>KWA1 z(n9~zPsnMdsv+lmar1R@*}@ufIMwN5A(%xR&48j)nd@SEG+oBw`LM=EEer6|ZG{U* zxIK_1Fi7A1l$Yul2vM{rl`Tkk9&Arh?~q*xyt|6Jw;zu4WwE3%ye!_5A+plhZOOV9 zBcc`(c;#}q%n&DsvAg+je?{a=LoL9N^KM%2^qR$0|I72N1Q*r1r*HXN7Q&9{ay41Q ze)=W$6adB|WBfDh=#6m~+e;G^39#OmvpiOwrNpv{=DG#y?e~8suE$~#eA2iv^bJn9 z7@x%mCRm;iJv?djAe*WS>;3lW2pqiMUMLmp7eY$zA0JIO5aPF>?`00j4eBotIi`+2-E4Vc!EPk3sUbRdY@48bF`o}FI*JT^vJqS#K$ zCmPK?JPkJVg-QVpn#bdc{RuZ2xvemG20P4gvq#cpx=iI|+C@laV#qnY+Z2{TCj^(Umo3yjdkM8mbkre^+O+gA}yPP*s%D^u*(y*fw8 z3?tn*Mm94&JF@n>Xb}VX$47BQ-w?D+%<%9$d^4F-W&r`Lu(DJCFA(ttuAa9O!Qv(|X*{p!pk9~~DL1Z4H8tF5P0V@3d} zPQhCQ+Ip@D%iEv@balwbnBh^}G1}twQS*o4uVFY%cLTFD;aYT{?$U%OF&fo8`N+w+%%LHvmvNmQ0)@4k7Q!?$2+xD_(k@ZJJMH6yeYVzt`_%jh zjcPaz=q-yF4%l8#^+mm#tx9it`+6p~YHhUwUfFf92ojhwxgS#yitm|)Y*qdIARplO z>aJsStu`zVn7Hq&lxv%W7LeaSx1r@E-wX_w7XPO4^od#q3r($mfDgFR{I7)`V6N7o z)ZRW_pFEzNh@oW>HhZz3S62a4{d|i3zW)ieR_zj6ie#{j*Sbsa1`-= zR^$ZRUyOW#WD>v}odW?*|2**Zd>XenGy&hk-T92a)AzDA0#LfZO3%DYKNdH){##xL ze7THw&^dM(ubp>+s2f=O!}H~B#qXH5SN(Y(u|gBL>`tU&<*Y2o$l65bzKqi$zvY72 zZn}$`EfCu33eU(i@V*rAyu7?N>lS>6>y2vTdXn7}tNR&461f#Y-^(m%{8w&wPf?L& z9q`1-NVrd8!xj<2hydRuT`C?$7A)!=8a{Jz<)+2^Zx(9^cUIXXP?LGhr_l<*Vj

5e7f zy(K8_mDugISHd)6CYR}a6pdsl-LdpKf$>1yNa+u9XO8ldhLy;-;}r8@Y|R?S!;Y#&;Z`1z`Eet)18-&#Mm z;=VZk649}d{1s=-^$#pSg5#1?h@O7dxPF*+2KXK$wAzJ#u#-P=z=sIZ}@2fB%q^GUsM*^ZCyx2ycdSg)8~ zeA^X}kS@Zbr2Y=SCF!0l`qUF4r1iS>;Vd~W+J&})OX@i3qR2ny>UX-bKYoGqacUln zJ4Do&vc67p+~wx9N9d&9Q^o-Q8t}-2OnMf{S*~He!#f?uSVQ{ly1J-V1CDhq#@4=Z z?9c@Y)hm|`X?u8F>>@`jr&A!fukz=KQ;#NM#+GBtXEZ=TqB7`eF=>iMYygv`E#bJz zB1M%~6K5n;kwtfp0oJ~wc%iddZ|`6*F#S#x5U;bt_C4kkx$3HzE*qh38ZQ>qJyX1i zw?irrBy&JN>e=VPJV%5toiCwoy}IP@y?;92`mrO~d-uPpa zPm1X2%VtsR7%RujwwNS0gtiG{bhcXFB)5(cMa7NG9H^$6&9 z^J+0G=qMZBKP`;lbfI0c$=-izJ%@g{_-Q#<_;6vV&;fi1oywHYvrXVPmKJSlJzzFa zVH4LEv4VXp8iiD<(IV*&+MsmZ7V~J^n6Q0n@oo+r@268)i%D8Z!sVKeEOHs_9jepp zsN2*W#i;0(6N}CeErZN!A6hd3MY_v#mVwwmw=I}6N9d!ROO(%u(qs@G^ ze-}yf#~-_X5^zRCHzInO?wPor_?{cUhT&e5x7@Z$B+MKwbS&zbKBt_XcXR9kT$8a+ zk9WVjWRw4r6k))SFVWJsw(IdKLs8GY8Tqn;fxvLM;`cx6gto8l6N1PlO{5}V)!r;? z*1>ze{@Z5m*{=({w3#pFipvOpUMo+zP(bgjby<4tdYV7eiI68T z@^rj~*FUH>n5p-hWLY-*MORI&3~IDi!u>8Y7eofx&^o5x7IENwFPW>V$S}B(gBz zPfMV9xhxJZ_G)>X?~Z2}!1_3mDnd8n*LNO%wcT?{2QXW-Q}{Z6HkytkUdr7N$*O5i zhA`e=2KO4dz#p}6U3H;aBJPOA-LVdYv49n#&mLA(jd^L=DqVY+1sTD?9~%O=qI<}U zn4vbj3n_O10buf1iRjk;!I-8`4Ge*@bhT=?rodm<=oaMn>?7?Afd@($2I@BN+m9@K ze0V?rl2q06E*DeJkkmU?3toJDuFjH#e#Tkyxq%j`p2*{?YNnKZ6g=ZpE`=gSsh^)! zazl-&YQTH|We$ik_+ob&7Y}iYr3oVhEQcz)s>qXvARHWM-O|IS`5f z3lDY_Z_ZE;ksBqeGUTQl(Q-6Ms6_)py*xCnv{Ii`@rpWXKFth%w;IWaz}kayjSufB4?zvzs2oT}-`0F$@j;6!YyH?8`Vu zBr1cddJVlsm%!_lRJbP|LF$I|3tL%8PRBU|zEd?6262-U9r5;%58l+qq`Iwb*BCu<{{8nZLAolOMJMty<#RL`emI@KVoaivHHCQL!;>?-FH zNm~(PU}jgL{_ZPa=$wn}eYy4IVw24MQSV3(lH{*bzW{_fi$-r7YK@cun>}b&N(hC5sxdS-cH!WY<3mCed{zAnE?!yyhK1{;6p7?oKXdtjd52u0B zf#`63`-0>OxjJ^4QZ5*5Z4fNsdStqV*8b;F0!c!hfM>!Ax4ypKZlJJHeBSGN86jGb zUH%Uo%OG*)5p&Q-ckIdoxPg0S=&o&4_=B^n$H zqUy8_i@%=t!ps26c7DextZ0-QvZ=m14beSp|T_|MMRAZ%i#(2gj75fQ@+ik6DcU?zkQ2@0YJ7*R0uo56r`O`FzKcFW-sWyIhe^&! zBX+C8=_T)9?-LuSyVu$ZYmnElIRoPa( z;QjZ$Alfj~{j;;Tn$=4l(KuIUbRXblco(C_=W9{nN6QO)9J$K{Z+NHMGdLU3%tEQ6 zP;9-XUp~`IdhmWclL?(beoCvHmW%adW*7J?Vt?D1JIS>k&8g$MfsI5lFVL@2`9MYc^d)#H&d-@;N{OpKUj>(2Kx+ zKKHKOpbtVy2EAU#X4{=wg&1eiMr9dQjoW2|$G*U!q1>=pE_$Mwq}?_;_bm};e2~X{ z)iloM*jQ-#K=rm=5o3;J4us-Lp_&sFZz1K74!0a4>%& zxw{^NJA;TR*0d=*jMw<5c;bKAK+sBE7V|CYXJWrgW0Glk+rehpt)Exwg1*p>e~@I`jtpP_3q_c8v^P_dZ+3Vfb|=X4P?r$| zHQ{&Z81uL1e@$<)3^`%aPE5B0kqYNG43D-|by7)jW0MALLsWQN^%kkaM~5*b`M~Wh z8^}NqvELMH@|&QJxtkoHo+@8g6k*umP@T~*rRl30Ec|c!4Fp-HPo?mpIo9LwUD`mpE-BLg}(`zHG1^l<{{imO{ z)dk;vf>P^xpwxP4ghm7YcMpY<2{~gTWV+9bwx7{6kcdBmhsb4+@8z==%Dq)Hb}46& zokK^T|NS-9g#V+MD?@l6y*6v^EbN`nn8Eq)+^*Vj=0|VX_Jwv?m$GE4G$R?e@-=r< zACsh%MF*;k#f)Hi3QZvel7fbbdJ7Ig;pQ8`F z0Qq}>nVCwh%sE^c&q!ojw*Q}~j;^fl<4+|{aR5uw-QsAOV@Ck7?zgMoHv9|m{)JCs$zDCl zco8d;wr6)oC(xni{3h~*z(fe232^FZhr!ksKlZ$oE|7aub9fi0evzDlr=Lf=7EJo8 zz+LV5apFeI<3O??X&;Xk?ygc#y%67-n zs;rn@wwcda0(kgMK`{KJ@PkLi=#1G?11oasSfRWo?`7c#>U*+n@z-C1X2^7C5uIP+ z<1^}Mg;`oWNrusPLvUqzXrCZLh&bpJN(LcH8imt<16$V|%@}@Os?|JWO#m#9=$g7B ziz)P`K`12fQ;!LoiQre6v3yt(d3SxcW7?|-1{;KXFu!<+hS8fVj@g> z(

G32z7d`$E0RKeT^rva0WueXAKF2e{KWr-5jTs3P3yPJGQT}=}_%E?;@D76lj zmhk-aw3`@kXf(TSIl1n#UDc&RJ)qHK9oSmY z_PXv*_zZw8(QN`@!=BntzfGjGuwJhej*e8h^!PvO4U9TTXyl6`hOE#_D+Y%iO=

0+H%+fPrRy$MxQ(upl8|5(ar6A}x0Af83ZKzdFeK@< z^!5fjUu{7Ac=3puHGXyeD;H!9_COCcRKyHPgx;!8LHX-IC_@&H-4*<}g%@e0|EHcZ zrDdOtxp^>wvQB#<#oKC_@KU|F*Bu)|y_zJQep0#+5#HTM0Pfqgx2r3Kw`ji_%~b`Q zxHu((s*|)p#-hz~fcc*ZdEMgNI;kc#`qGWc-yK@9?qPRo>H+Q5(WM{gdntS2r#$k$ zRhW^cpu~fsYs=4nBS6CGYx)4(P+!JkB*_Jha{k9251Twe%@ydXwEjDgqim<_yCabR z(j8#8Gy(fLl6sW!x19Ah<%#lFNE{N*)lLQAnX3Y+=cH{>5Dk4Tj3Jf=MikN;Hj2$N z{MQjiTTpI?B_(25k2(9xGBUgSG%|j(S!s98%S#`G4M`v@Awm3ze8zb~05P=V_oXT% z0Bei2Tif}VjouA;c0|b{@)mMGi$WGLIws6j=R4<}NQkMyPJT=>Xkg2S9--s@kXsY1 zG$wum*_k5g=AYS`BEtUxCO=sarP%u4KyiZn0WGmEh<9nwlSIAL4KlpxsHUm3Qi-QI zc3+ok7X}>)3Jd=!z}OAyTDz+aXSPQhh|mhy9Bc7ZX`Ce^DhH&~_vbV4st@jpS{=1I z+7%yK9SGVVU2b`ul(Kw;^GAuJ%3NceZwN!Wk|N>x(2j_Fw*Xu|Z*ZN#1z*18PdVcq zIP*jm=Yk-#-96O)r^rFGMgWy85YY{{lvZ--2(Kw7SWhSf%Svam%Wee}yf$T;B8Su_;Pilkf@_VgJCR06{O23QjN?51;)%!xWpb*!6 z*ygKL7fXke_Bj7q;err^=!AoRc6XjN&&T+62=oMRB`G`$Rbq zCPf^lyT4~H2pZL_RXuE?JhAt8T;8tI%ofOtgF-!y^i>E;n4i3ymuB&k*|18D6!fRb zv||SjA&03SMI@ioTHP0LwZLiF?DE7V$1KO!k-BS+hD2GD+W)Cf<1@M@6P2bO-T8|A znSe@+Qfn(IV1F$Po+TH{xKZhOh2>Ec9zOow^D%rd!j)iIjY~oNKE#K${}C6o4F4kO zLjxJ7uJD!kA(=g%tHcy*G3;|mG+k4)+n42P)lDdZikl%zt%IO2PD&^ccq zx)B1zRT}xJnxql!wgX(G*HnoiX5n}vkf$S{foVeC4nka!0t7@86|4+9F`QxI_je3oE?Kp_DmLt~-O&P+lostVkO z@AML74h6hRpeafetTgN?r5?pO`5s!ZFh^+UB|;8Tt-Ij)IrF7Ii6??WJn3p(?i0?M z>wLIF$%VEYmsIs;8^TDeC+i#b4qY(b&dZ*vMEv_4M%uv+!DmbH5PGz{KOi+*8H`3< zJ+Hh%aM9P^-UNpyM0pAAQ%4Tjda?Q805EMw1rw-PJn*f!V?m5;$~U-Vi-MKF_rvebGb~ zz0(~GG1YES{$w~P#A7pLrpO2kWH3T1jr)JN>rakmx}0WW@uQK35yU$fCpY^UIZS@O zmKD3Zr=_ldK1M?5=Z*ua3p$UEs*mkeoiU%Jo_vOosybej8;*MoXd_!-+;`({&Og>_ zPtB_*}Js-$nj}VZ`k2wrz1=0dIRp$HQQ`wfCukKCYwo?xR}#>^JIX?USUGhe0arH({Gz+yQ%fW z7qxCgYq_)V7JSpJZ-s&T(>c)q)5+k&av^1O#|I$z#g4-)&1>3R*i zq`A9)LG?W(A_p5Vw8UsR>>y!r)fhdRD3l+ShwX7+6@;zHWbP zxfG%946hfbrRhLu6QH>z7?G?O1pp1SD3xJ~Jjx98QzO%<Ep2wJEemusk}9O|VUmr&l(OR8F~NN)J(ix?Lz{DnKMq3~oK+ zS615vrh9hA)&!5^0K`$p`ElBgL~!5vTi)i* zv4=VH)>k8BcI^b^Y8#BKETZk`7iq{JDw66`c)vOLLC!jvt$ppYm?zV;<4)$H5O)+q zJXF<+7Y?aUbq#S)kFCui8anE@S^wqbF#V*vxbP-VhsRRR_0jxr+)oD^HnEncJ%kr= z71zSYLpy25d!$9wb@I19)RJ1^T%OFiS7|5_&D*5*2YEXncTqu{nz^Am8|{v5#;CAc zWxlubcUd1ax;YH56c()RkvMjJ9uiG8bO%Ph&+!7~>C=gBfNy5D)= zY>1)X`5jbsl*3B08wD_CkqY9^|CQ4W_h_3(;B)1^hG>GYb|^qXN;+3W>!G$&!t)wP zni2sW{lQ27uDCDTVp=iL0jwYWG0g5xlLT$rcI*%Q1>O70N?Op2f_=D54scM+w`i$1 zE1vpm7Pbmce2Sfyg5o?c^z~HW~x6Tz4VJ?98cgeVZRR zQJ1%gZ?5|sQrcC>(nD!CQ%$E_Syz}Xm-*cfl8RSkxk4MQ)}--0uQ{yrP=1_aeLeK+ z@OaEgW%`_i$-Z%frJgS=xHd=nWBYnBcQW|Ba^?|i>X*8@n^Nx{lo1MEW$EL_Bj8nv ze1xps^v)>5rQAqU?XEB$1WcDoXT2)Q;@Nfk`k%ab#FOcc*8Z!dA-Jj-solABS$mJV?Ju~@#&lnQQ5UU;^wu#5eYDygMwzR zvfGpFwx27FUVH+yXpi>mb5oApH!HPP_?bSJ6xvAX=rHNJ44sg*O&*8OYM}YX%%#4v zZ<<;j9<0h)CP;Ds&Z+H^3JSm}9+-&?Vf42>D!)lFU#8X3iHUsiBN=q{rY+Wl%$ll& z2t4Ftk{gTRSiieTjnCpGHqppa=PZ(Gug7;HcaRx!ce$;3M$z4Z2?k(98qkEc{~V0Q z7OCneqYP`FMR3Z>c+apU`Q>?EmhE`MsMqUI`=xAA@<8aKIXRLtMs0Ku%LOf zM((()W!3R`%v>_N&H;O%w!a+8_7u4Cxh|#noJ!7CIGW77YX$wp6^GR%yakN%p{x|4 zv1N6vohgxGvK~ zK&}|F*W3M({YDQ|e}9*BoA&4Ch(IJ3V`4De4>6N$mO(;wg+*nJAbtmtZtiU6B6PpX zmMnDhE_84fQT~aTFm4_`XJ<5S#;Sn#KGEpe)2*f1yliibi0TpEt5zUJ>ql$3kwQfZ zm;O8;ZV=o|jbZ}pvh#?rW*hu=u}VXa#vaRsxyoUgAN^kihyMY#$Bh!eQXF@5=^+Vv z5g!Xta1-`UDkNd_LgR)+0yw#=!rlLHCdbs#X@(X}(6W8OCBpotZm%_D17mX5+>mKefjJI5UR_0e|ljijM;jF_F9zl9#GOLv3-`teK;* zd88bEp&4pg!EJ6Q||89J98Lce|$?1rxLX5)U2pp8f8l(J}yt$_$ClBcaoobycxx=VrgpjD`rLsJK zRP9%B>?B`bwST@Wu_ca6z!6lAY)?c-sHLzGOzY6Ft|j5Ib2*w4<4W&1z}OQCs;FRi z0Vfa>PYbRpH+D~I$H)|OKGM0wY#H*R@DZ}oS#9#Q+8$1s2mx390>d7U20F^P1bf+$&tv;sHT`;Otg#u3{M{ZO9Y2pgid%pZ}f`Im4oYBYL= zB!op6-*f}1pIFDYF54(vaxr_U$N+auUl3|LE+$&G1EEyh#rSQLtpKk<^h>aUHbi#% z`%|rNwWSY45>WLg+4#fnqNFm}AYZ{8Mk2Wpwj5OT#b+3HaK-bIowP@I05}qK4$)$z zmIVlXkYsx)+CeO;Xx2BVl{eCo@awu`)*+Ay$R0~aL6Jw=RZ*xX(oZuE23j+fx2LMn7FEg<%1c>_?JotXfS2VV&}_EB z8NAAnT4^+P%+$%X=7O8kUx4a(lUO%!GvtesD%_e1O)IyQWpB`nRP`GA3GfcN}w3yFgJIxSAhZyK6i)d_?%^Qw^hyh;c|^0J3(yyb;v&j zSUrIF^s~NT9Rq3uz{Ce#;!yR@P6Al>nYU+rn0u}j0a@=$kBbG4id$?t43W{v$-)K; z*08HL-;ZL{IwLMwOM$GfZc@Z!>LYfQtAi|hpMLpLd1t+bT{4xd4&_cKCz$wU{ya1qDj6OS#M`Q~Rx+ohE)M+^%x6DpTB|uPSX_sQ!OIcq z;)CTY4*S#d>aJW_KTzY?^L_40y1(LC=^I+_g?=$HrPE$q3giz-f4z=F4GfE*74h1z0DRVmn~O%xxL8f=;B>8 z>c{mbbyFRJ5g4B|rxhA)no`Vhrl27~;@|{&&g`tT_fSRL$+m5UokVWWWhC$Bl;Wj( zK%DIVtNYg-EZ-b(j4nCzC_pr1b#zrIcF}Hj%(o@~7!a|Yjuk$Vs$K5s

l12KFyp z>-nvPNXMFWN1SR@t4u$S6JH}XKRn9d^Xlivt8B4^;jab#x}VlwNXOiM%F>6v@fAm) z{XGwOZKj74E(_aGX39QKm((A2`9@J|9OkyShMYW)Z<-r3*dVibEGk*|pU z^F7LRu~?S=Wk0{k3Drp;Cjlt$F$IT>oqG53-R3O9@c3(u@FbTF5zo!CPy-oJ+C^Et zU``FOZk8<0TsZ&Ia!e&omtf8Z5~xK+f%VtZW571&;``%Vw&t#{9b)kr6X9KSq?1za z(q#Xv?^P4>lC^XaAcy?#pDItNn<1*deaL*f?qze5!cXpw;x+Q2NjRNbNf3LDaWgh} zADnCa{WOi=M2M~~HtO6j%AM8eLV1__-zh|jX|z#PBCgFwCGTey>n2fu#N_GjSl7M8 z0Y}SyUiKdvRD|T&KkG7Sju`YbFU?}RY4Xa@#ZOeZ{6k9Y&Qg^*ZI|AWm|m;@+A1;o zI+Llq5zNedtzsGyPBa|ltB(kp$0Vb2d}oH9zFhQ znjka5q`BwFC5$QlK!m$=NIWno%o(MbF^8}0C~LMp-$BHAbT+j}4<{`?6)0SD?%a-l`4FA5=4+Th3I z1>b1IwvznRC0^7DRV9*b_?IkI{=7X%?waKxgBU*9(o*t!lk)P))<6-7%Ehc9R{>O- z>cFdD*UxS%{=7byy(qR#6YxtM??xf)nOMTF$BP;!)iyW3ez!SyxPIeE^$zEs7r8!^ zAj~BMQHDKE=ZeWQr@Wyuch_JA{~)ftU%rywO>$-1OW)WMt*Y_04`+8pxK8%((z-?m zZb1kxRc0P9xXIS>eJu|PgHWTQ**hpEq(7@Wt9rA%e?HQ=c^CBHjR*_Fc;!eLg4b|s zc~*+eo+_w!wP=E8CkwN363H7IqedgyxKms~2y-U@6GT>|a`TtM?DbL8#VNCIR^8!U zFIB|77YoGV$l@FA?&IK_4>U5X}>d=zvuyt zcYy~n4cf8iL)+2XW$mcy)Y8?wVldb`=i3idPdMtby|cWZjZ!H} zWc)7wtX-0p+zAi@CW(JG3+8B4Z}TyKUOb8<1bx27tIpJQB0Cj&c~MR)7rzyw9q-Gl zY6NwsihM!59n_V{|DPVgL{z>D19k+ZbVLxjIM}k4G)I?DUDdu$=ZD~QkWs|?Xs~QY zj)fkOs|I(VFA9>SyS9~6Zt|vpFyEh_A(-{z52ts+!86;`c$khzorBe>9(q#2we;kX zqrUs(mK-7YP0qZrQ=UL+x!uF*x%58O9fOaxs~fUEcY}ZP^NU7L$Ygd>102NH4e1b! zmiNu&BGbj1Pn6Wz56Gh7_R~9ZxUSBuit%P}9)P>whJ}dm9U_+STQ66qHri~7pM9+I zi^lxM3jjG5Wb+T(!Ug_<{De7#|5sg$Cs9C!vRfH2|F#SS8mQKY^2kn{@jg3((Z^ng z9l!j2uBs&-(?#Y}1ai)_yvTvH3eXK5bR+p@B||*5@%Sg6zj$S!c&780f5N*S_3rX6 zej^4XWt3*|!OkifFrCZqaxJM1Zqh*ej|d6N&-5k%KbdK`WpSza_38#ExY|EESavl~ zwVkB7MrpkALq%Do>nUh^vDme!sm`@d3!SK_2oa~VjeRodZhkWYcygNhwsKp80CWn@ z5#KAWP#Sj9j#LIzX9(74=H)MSF*nick#FR?W8?#3=v4j$#%pUJ-aR1GRtmH-};xlj9o`)mDHL;rh@E?8} zqXib}O4f+$!ri9w%zTxeBvRZ?et$@~<%`#txqZfiQ8pO*BsX}2lOr>yVk68Wp${)U z4|;}Hex%pA6fxDzTlIeh4{BnfFF34$%0SNfDDx~)=O;KE4!55X*(0fuBcqOTil_68(V$%z%2mX@ zH`+Z^e#9Y<2A?BLLfhp_cq*9-9N@pewMeP040^P@^hhr|Ajk)M3kaDG_r#}k9@(i?hE?4=x z9MY$QbQDM*aM_b33)2%Le8og)e%FMz#7;uQy5u12QN{IR z|K->HojuvD5$KTm8t%fBD|H+oO(8D`M@+;mR$m1S*v>`Zmd@*Q^F7-fxs%Fu4>K7Q z`0Am6n=qUK5xXlW2!8*l)kX8JNCCnv&d9EtfHqFjO!@^{;~j73?s--|&H8$8sPi;l zUQJ96UX;MWhGvS%nCPES-l&cqAyiKfJ2LvqLEcXd;*@!iG4lfT@P$(NU80GmSwj2% zLOH_kGL#5V0L-JiYY)ngYlgCs;iF)PCTYZL(M~JW8r3Sc$=DcKi-fxDIb{YMB0m{@DEsYjqlo?(0#+_v@oiD;d6DLaG&345ueQQK0IThr zXtUcP+(&w4a%m{2Xl<(l0)Zht1sqXCE_m{2ev@A+!l?jd0^R74dPvok2OhZcgKj{b7~5{yX_9gfh{^awZ|Ir!|7ThYLRCfNgpKo zE5n0TD$8bxoN`)~!4_K32Bqo14iH)vq4i+VLpUy#-=toC?wL^qIiYNJuCh7uhv&An z$3|PG%XT;6YMn{8DWCnkZFrR32RKrMuJ3tBwf6>0&49!tJ3SIgitV@A)Vk{r$n05= zoI+TJmDI>{VjA^|7d^yEHbB^Z^D@S4zHf_Mb!jkn_; zSejBr#GL4si52<3qD}K((Kh>E(QY7{zF{KGh(_~65Z$>WfO6D7aEjtCjtgTJ)R2a9 z^hYveu(|nO_r4)+jB`p@h8(U*Ob0qrK(`xbI38A5PlcVjl5vGU*Ba>gvIRlBPFEuk z%rH7d;9ZkH8llyGbpT^X(plFKQ&haOFJlbZuaY?7 zlE2fUhlINm%Fd%+BpJufrf=}?TlyKQ(jbtA64D|84(`r5?M8#{CtJE+% zow_lboimuD|Bxb8$9_u|Ul|!XsY0iwWTQ4`ksx9u;r^jEnbF@QTIoGW8_Z3BEl(>oDLLxLre@N zS2>J5F6u6SB5JsOdr(>i->VRme*tr4BRm3_$CjN7B&B#`&CVv;@KWgNx4MKPo}{l1 z_~cJ#$%^9<`D(Ie4(LfLp!e$}0l1q;QsRWqMSd#0HB?Zc)Z*~c<;Ae|_Y-NMwWSYE z{bRwBRZA16bWP`DQ7DsMHBV12vM>GY?L*jWZQuDkNrFI&ZD~Wl5x_6gW$aWczg~bg ze~X5o#K6u9mT zoH*=+AOuJR2Yh=dQKjII6_?@^z?9`!d*GW1IlrcEPfXq6+RCoBT`_<{ z7Lm{wHS^gc4pCvgWW)1j#S~G{PWIL_T~E&D`Ahrr+TL@c6@I?WMK(M#vRY$E`*7{bQw%g2 zP)Ol#b*G0=4PT3^;(R=v%cJG9v5+^q3X&(1ZhxTPlvllc-|)#U$}zF-0-05J(|xkx zmh~NHlNxtaF?FcVHe)K`%!wzqbXZ?svRo&X1Q>+8wNQ@74Va?))Yn}vIeL*UqK;nU$rS1osm+U; zp(1ZY0Z1bRKYT7=1ifb`t^?)TDv)eZ!C3en-rkl`ft+vMyn3@}?;HD7U7oVY$O_2& zcL7$OOE0sqvUB}md%}e;8B3YGR7v^&d^?PPzFp+X|M_;L)45X;&dj}P=P1WC&l6gH z);m<%Y9TyL+Z5lN=uQ~OW`99&vj4H;@4S&U4EOxIp0=o;#v@7B)PPyQ<6(5jeYuf# z(4E!bk5Pvm&@%n?q_y$NkC0Uzm4#^LrZgc=RU}tn6AgJ^2pOcKt%Fbg(Z1XI{1B@e z_mUhkduyI~vv#2`Pd5y0uQ3RoYj=~inA~f2zQ!MRF^$*?06mspobv(`NLAcJ>YmHj ztf2nfcVhy}=HRzW8K=N)j>!oigPlQ*yPSxC`f zu9Fc|xMjJ$K`zXPtAMu9Giap~NUFwwnoX@|F?dOGT+(6^LD?JSOBDnjeFQvMtw`xf zg~OVlw`|^6m8upuDya{WunUPv@`!_Q>A|=qM}hK^Wa|QWem#8?g6sr`H&;&t!$HA8 zweeCV4e-@SI&SowNm)G-+~jw)Vp&TV*EaLEy28F79yO=geG9fynk4p7sLEf;jL)~A za7~i(5djgpw71?~VXpg`C!~@|@mf}oK#TBH0!2lS$x2C<8Yhan@LP!|9D{?y`GS_R za?o9LMeU;VI};RsSUU<@iBQd~7mED@dQrFOiVjLx*ZhZKp1 z4TmG6VTzlZ)yz>b`>s6T9%T`o5C+otmaK|XFyff)g>}fFo;-$YjelLv$&*p|u78RD z`XbEF8UA=RUrIBoD+mA|H83Cw%0p`ujV5Edxdgz11w!BAg#wQ$7(EyQ^L3mDzR7n4kb4op%e?e`)buyN$3Z?!MV-y z!lYr95IWTSQhmLY&7aHG95FyY;!t}WJ-UQ!tA+&%+ZfZ4z^3J8)6S5V%LwalrVCf; zSbbDDE)Pf!aju6$c??k;{3{Q`afaF@hZF-Y=0YI2xTR8?1AD~Qjp-RIJ8n}de~3wk zT-KyxQ)rHNQ+~$pKzI3SpN+{qT!dwfvb^H)RmexnUKUHfL6YmRzqX=8mYEWeb&eS@m0P}@ja8lC z+nCFAG1;_cS+_iY(`&7-h%A!IB-@XSWBkMinm*aCjUafVwdk+jwa1ntgK9f!zp_>k{{>PkUxoxVNJ-sr5|#&WhLx>?T5r*AWk@}>m+d~; z6Oigr&FFqc%Qh{|rd@U9w(IS=Kg{@IH-mDz-h!IxF$t*gui6w~LC&vTk7CmlC3wRA zn!#_~<$z(e(W+&*rdU=^53XfZ;}5)wV!A@2>RrYzF<*DNy5Q8dweDH}O(*EbX$-pH zXh_GWE_OuMrkDBs;x(KLB;S4Z=}Q|@h`YSwyhKk3MbqFH`{@v)s~=^4UemK z86J0%jKweI5?xQX7Oi>P_0)9ed;B8n8k1euKfSWv=Fdejla@s-@pYJ#P~ix zvFUi_PKEI7m`0hDVCuLhRhI<8;d?z{R1vIbkWrG7Ced{&X^?ykpV9Gr==A0`Dg;f! zhh_Q5r&DwNRulf84=MEje8^0Ab02i@OX6vyqaoMimv_X78(3Cqea+)UcH>Q8FazI1 ze>=kK{T&niY<#v4dYkLB5hjpG-{m@HqL_X#NRl`-azmZ6%FsPivbgIZXd+1GSzE~Vk!8{t-D<{}VjhqGjGz?bW0TCW!uA8d)d1h9*DG!uzCN?o3Zg74F+|I#pDqe@=}1E-fK z1dY!0r?8NeIdtLM`9^Xec3iC1Z=*z)p0f>h zOV$GW;b(S1PW_)>N)G>|IV*szv|s#RxNTmk3xiCX;kTDnj5>P@iBZZA$zsDzBG5YZ z>kh_X%v4M1xE~~Q0;PvjU5$!jwggdFn^UEyTEBmjbxDRhLw}oxAgs=*PEq!Ampgi5 z&BIH~jK-7A-+N2WOrVEyV5H4+?L;2w{Z>p56LfR2?iBm8jyZk;iJ8Qtbs`xi|i$riOzZxDwF@+C)#o#J-Qv%S-#+eFP};#Ru;`i*x0 zHPkh`8y4COdfpe=%EI%in?s}VqR>+X9HQlMe?;nZ%slz_cRA{Mq%)1mxi!E4+}SQ3 zhWSkh2C_7B`tK}?L(Lny!0&mb`CdVIS>Ui5tH2mb+Huyj7#wUFjQqXIj6*oR*ayXz6t|tA2Rt}vG1bxGnR6_}_rN|L)&X-0C4)Uw~)xMEy z1K3NnoemD>3njTBAimx9sk8E(TjdW#_{`k2oY$7#T?ag79TJ>{eko?#59I=I)_;Pg zp`WfC^k8KE+Ir(LdQ$lDeo$=)6s}Jq z-*u<04wq|022H74+a?E}pSe_?Oy|gC*jik!yj#5o{}M&*u|4Mj)$Co+ARr)T zKtw&$8(F?HJ`(Pi>-WGt6F85D^ZXOG^&*p=7Ps{k1MG5|-;JK=pA31K-)sGgp&hGX z(Rtk9w!dsv>DXv%m9X5O%t<DVyG1SZxd#YmzBifMAHi=xr&47Sl}#nNZ)qe$;d20Iw`+sk5rD3 zfYs%Y?Ngfji1J%)^cIq>>tX58aWCu?x}7TT?d|PxaQfx+kwpSoG%>}izD%RnE8Xu_ zN9-^vj`9Y*CGIYH6RfJCDReBhue0$+grb|CbP{s!hW3k z037RouNHP~S)O-r+IJ_8V4?Td`&?|>OI^r##gpPEY<({J`Rf{rzM*q+{36N(`suj^ zk?PPsSxM0P8(F-fra1NoFE}i-!Y;K*ppPvoe#2+=ioU$J~L!@_auqv}Z z=0j?benG0Z^hu5ig^BCG#VdtPj`!E6vHv!xq!khnASA`(?R7X2V%_?lxR#zk{5hEF z0y7}mZ}*Yq^TClg{g;}Qj5N%xBMzy>d;n#qKd_bRUmWELe&AsU)!;Ys@jP}Os55O2 z=NC%HH&`c_3J{L*eauxu>t2{fIvm0(CqHx=grLwxy>kBazDSxcHGmW-kd)#CWwC4; z+(NuIwyN^lu4Xq=^Q65d&!)3sK#3y$J>hQlnEoFrbHfgg9Y&z;ekJ={5oxbpO3M!+ zT8yGd7A({&4p*LPapl3RpTP#@hq8{YNaP^&>U|RtIcMm4j+A&=g$p~slWSu75w#F-CbN;9#?yU>hQq= zIUeu#M?p6J-Wv%42Y>PDmm`#4?7aQ2ozMOvR_A-+1l4x&4cj$oKeC-JR+6Hd7|V%h zvnuZ!D~`tHCmOpA!6_1S^gIe=?b)*NxbHWAY@#{+78aFnd$8J>DGk9@F=Zcb40I_Y zZQ_{{A|~#mUDCfuizKV2JvXo@E$=AZmi@RIYexS$VfWlho2V@(=!UM0Hbl;C zv9oY{@q>5}4Yu(4^>zBe>J=0PKsXn}E{%~D!665~ZL|E*u|oNiXgFffr9u0v+?KpX z-QU$BoY%(rT zPD55K5Qgx0CQu<0z#Bo8hEM zPyujAz`wIz7$;St;c&U<5I}!6p3`fOFAY^vsRyk4kug)mRtOY)&8oT zK7Y>pey&4gMm9}|I@uw63)BAqj%&R$|GK<46{^qVhma~4lw!Ac!Ad_TVl)>*>;$XW zFc&YE5-^)lw=MRLu+J1bodH3yyR*CkOF!k6+4=qe=^+9b=nO-hB%?SdoQLqUeh%L{ z0mY&lPw){YtGXWIrL~=)^V72OTdSeh4s)O!jfItd6Uw48bfOEd|;teaB@o~aEk=1$~+yUV$ zMz-tz&TD_!C<1jVjD&wH{!V0 zfx34b>v9Th2C`^m8o@39aK`Ix9qWP177*#ZL0e;Gt*Bcj&uC1|JvuC%fO8f0^#MOe z!=_DE=dMQ^Z=dIL-7Yt;zR}kr|1Yv`YVJ z=H%^cL_c-+hGlR!-;QA3iOBO-K;0(ovgJmt<+7p7>SQ69Q)gyMF2B(}DTA6+_)oJz z`7dkzf0|7cfODd8rSn&Rtk8sr^j-dwakb*Kv0sPA5>L5-6>tBus zgY}4p?&UC+C2J}CfQ{Kzlf{Pj)tKrNjbZAt0?UttT**kb`>46e8L#3pimv&HH?Q_U za4j)k#OFVlp)MI8-ko;~J|B|!K2JfG5_45u@kc^)$ICUSj)IrhN}rn)+5T#shX zf9}wiP;|&jc9vC@l%_#AVTfn=d;Xm79Qq9Ox28DIpotox_Jds6_nj$U6q|3G|R*Z7sA@8XA3~iWo*B;?_@C{HzUnKt* zJgOn5UML^c*h(q`R{|BxZ3Y#^(+{T_85!H~dT znc(4JsMCH!egk%Q0F2{`yNXoA@f?(6snoorG*9UgSX`Aw)8ziqSut|Dfc~My&(4|d zX*TA_H=;ZWf}d%g&r|p}B^YQ(J$7`jOUa)`?dHyr+w-SmL!N67UXkj^@YsO^CM@Pz zybOq<55Sf`s(D()o><4Tw-OSQi<4tten?8CV8UC`$M}YD+3X(TA`hDjn%WumDNc*u zgPT=3HDg8{n@a8{7_n?D-Y;8l{!rE-oJK>YIPyTPoIZpQKImNBcPCz(e|%`eS5d%J ziMd!SE+1-}9HZX{?ZJ(3lkMt+p8sp%F(az4P%9T7AgJ~E0o|@Qi7Wy%1rd#_ zXgsd)59epnx7(GF%I8<?>>reVUU9w!?s-fFo?k-QJnZ+DIJ6^CaHanJz5FU{CTgofn()*H0YzdyXnzrUZ zx_SxMxjv~0#f+B2JvzXDZQacVsx89jEm+^c;EuO|c zZ%hRU7X8;-Z4eM-@)tNc;5`2?wkND?g$}+z{Dq~Q?c*l8iN%* ze=wM>dqogH{l5I#Gh>F$H7=NlQRxHqQ1J796jNnBEFHTjd)%<6YEugSXQO2y0nR8# zUJdP`%U8&U;&hWqBx>>RW05x(T+TNfH#J&$_-JP@_ZP&6-Vc*(>-oVk83f~*E}Oyv zplp5Tr{9q2M4Hne4NtV2D{eWJOY{{<;#Dvlw&^3bxJ@@QlCm9we%A!pg~^5sW{;aT z=(H)=jR6MqoJ~;yaB5U2Nq~e9+em()419Wx&hRV`@5&UDj=SDDX1iVXA+GJ5eW}Tq zgII2ss;`7duqFQ@`ewhk^e-2RUFciy;zyW`$HjPbew}(~lfQxzqI!IXkrK9BSS`vF;%R^^D6#7s=g{9j&SHXFw^tU)Ad!=sz|*r zOJqWFA?FgHYIYHsGUAIzb#XOJ3n)TyBf(zJ%b|MFYTKB_6Hm8)Dzd5}Djo$KH-3Ng z76@d>m{QVF`5gJ_iu`!4P8gBklx_8~HBc!g;0+{MdOwsI)*T2J7w6#q!<+0nTebhX>PO!*HOv+iY*(G~i zyz-Fu=p|tFYpGwoQ_4NJ8Jtm zhM0GO;w*ZM3S7PG%G$hM=SY(+K;vRzjC$5!rixDBYrI;ZU2#`jG4hihX5oj}Y<%Jx%b+k}ftJqB1Ets8K(q z8A4Yly+?a|&}XI_$&(AbDTQhfdFBB2-boRg5g7lR%g#nuDGo=y#^6F3MfFXxpQy7M z#C@AE;iuP+O$ zm}8=E{prtK?~LZ}A~JsgD^yNL-f(Ql6&kqCrw59;Bq9E?ChWA2MLixY905w%f}|C| zID)&w?~Dc;+|5smw5#)#NO!#z37udiBZ6qQ0!v%lrH+oKJUg}l3xfM6zbcVQ)S){t z{y$VJOhNF5iF~7y$m7AA3<9ybOvgclgoI(r{QBNyMg3N!5rZnG``uv#!Q!DIW7J|1 z*;v0jH8pjvkj_t};{M>oxvI8qhO`_-#mO#n_jdZ_l}2T{1cTk_V_wwnhzfHYIt#GS zFzA@<6$qKdBzy!YOH|zz@rIc>=6MNJgi8aoEQG>sN6z{(Ib{E^MGOKZKPbRW;l6b`?M=#uhJl$f zeb)b0A*U{547*6`*aK&>3sVr=ZY_*>qOZK%DnMdAq`n($t_BDBxj#Y(0G{{g{8f!c zM*2yJp4VSd*k)XVclA39H$6fAoC*qx`%10>-<^X^I`a9j1l_Cv@+;Xyl3`GTqnsS- z3mn#{-HIHrDZY-FQeP%gltiQ6y8lyG%{cf0cS>Md7f_Ty{d=A@!q`SlF=GO<$jZjr zAG@%eTJB$=p+EY0c`XbZ;SKzqHFC=4|NMD5umsQ=bY#FyU7_7%P;!6aU^%!ch*xQf z@sQb8!^27y2QZ5Ryq?2gMG)MexKR~TauC3B89Y&>eYD>VYm2O$%}x`Ny7Vc>`q{oa z_zRd^@?;ZtXa2N`a@d-wo8ssut1{-SFe%jyZ_r=VXxgc4towS2R`{L+?##?rxd+m{ zg@!Zg<&hmiTR9&4c)2Bza9uP#!fi8rH_0;b^XQO^@{~CEkm+|+S*jyRyrI$ASIVChgt@Dp&+$S9F}LDMc7M>& z(djW)w{E8ZcAuX>VP4=xOpF4aTicrhJGntt7;z}>-zh$2f0#{8x^7QY< zW3;OtcL4jirY^c_)le5{Yb>hd;EhDT{K&YrKt9DU*4c3L|4qPiGX{3zE22AX_!0Jf zxjt$yf=JfrQv@crE4}m*tk8PS7v_4*BGD1~!H-m1e*&I6K6=2S1&MN>cnkBJJN+|An9(kl!f${5; znt@9qkR39!U;77jyg#Fcd!b-^7Fn$Nx`|ig|pWKKu8l0X{9zA5M|IQmh*Pk%SGVpzn<(ip6ch@o0aB zAlSf3j2402hG$V3A)2n|s|}fvV67OB6V@;$EM2ydqAJ0e-W54 zUbrz@+yi^>R(YSsgt6C5(>AI}t>ONBzI(;wAxqs^W2U&D1$$b9x)sC$f}8g*e=uxeb$5&fh5w<*j71AcY4NlCMOS)mf1 zXX_C6kDHzfoaK-_LE!Q76jx+0=l7_Yay3akDHw#?>kWTbg93))u70_$cS|R$oDO4O>i6U z3*OvM7e67(@FJG4&CN|R9!V2*yCsa0HoLzvv!4Zj3_dIsGlubwc!Bapp8ihYbwSZ* z&#zA>X@A;!`@#Jp7_S#Dbl69r*E4{tPj*F>^8aA}lHA@bB@m+WWsTqFPktrVoZ-zI52aJTHZ_r{?G-NbAFRxz! z%Hig?p0UyP#6>)w`W-`p7~-jgL6cYfju0Te)$RkjLQ&}F+;OS&Py^6shqnlh#G32n zH8oO8`8>V#+t6PP;6v;JlXEjt657c~tTvEw)GjhcRR!yv48L-D$oaUMR@8+lgh>!A|mdyEtng8bV)h_3yyQK`}T z?OV<@j!8h!@3}66y*SrG73_E_X_yg9B4l^mT^ zZ49uZpOV0Y7{+}INUUZ8zaBROq@EW*_Z~_b`JDR6? zzOWcHw6rlh!|v%oBVlELazN>{ z>i}oK{L^bX1rC9KBbDzpQe9d9iZ=(JKCE!uBpp)vRH8_BM7aPH8CPK=NtrFr)Q?H;48Y1?Z@eW34R@{sd{E zOuw(7uJ@veF z{k<7`?S{pRTx&kZ?pbHH@(&_wO)@P0sGSJHFY6DsdCt8-Zl(yIEKu+k#0wf+(PdRL zf{)KI*BUgv>) zNo+vW{LP?m`LJFCZO5xkoXArUz*P!ci-iLax27|i&JQ}?+CTn**SJ5lZL$1QL2|Y8 zX-6Zi@5&PE)$IZkLK@~jd6d#FX*%L>$o?lj3+!HTR(s=rsLI9=VB^)LKrye_CtP^@ z0w(1>@?e=_Dy;nyTKm38gm<|SHu9KwAB3_5-#*H`d5`;TO*{LC&N&xflUGEpp}et9 zv`h%3V0Q_BATQH9Z<#K^kV-FNNiy5wtcePE`?J#(fhfP3iesTz zT^PyR#0y5DFN!vwwE!UMz3bz8enClzR3Irw9&~Zpx?4H;qa2^4>?kU&UDd?2s5$15bnT*GQFMDI&B90p)7}8`No$B(85#aK{ zd3YX4>VB8Yxkg8zZ_q*I$={s{0(j5X`F|pghzW}#RU_mVHAdZYAhcWMB8o|W!%_B% z_R48kqgj2jkF)&{0MzZ_xa@I&H1v&VeT4&J;!Jun>*!l=nM17Eaaf`s0Uj?;vhJJ! zF(&V$j;9RjC>sPg4>4bL?J%tVBi-m*r{~GD+w9*n-|`+#Gmdvy8kYs;0DSe=M~RNw z+HVXAqX(QcC7%;}4(z$Opp`m$b$%x%(fVfY9dC+bS(ay)#6bwXlBL-fDF?WsMXBkvHDm?m}v9{+sGbord-ytHtm4OICemP3DH{OZ4v|Bd?y>N=`X-~nUsZTsCJ9N z8F#k3j!H}%HCBr016P>Wd3gqveJQ&x*pO&6|taz^yiV|uqXWyh^m!nvi`V{ zT-T*l$Yjp18X7XY>8wIwqBFfd@PWu+UC=U%j$c+1(EAt2$LtL_pWHu17Mq@BrbGGY zyThQy3drG(iVVD$35vVsqMS|?Y71(6h7>pJ9f7pJ`-u@gFSDsoi%c7Tyx7Y{0nfvp zi+~3O(ciycP>%(QKJx;rkmFS<7S2eLJS?p=FeugB1VC zoK%SMVVpG_+LxLi((=eQk|C_L0}VO+u$n3m1WV!VPUCeNT86+(>!2F;%a2Sftz$C5^#H{7DW9!L|@xA48V-|rOr zPv3m#;st-dsYTed^2@+>Fzk*Fr3@o4@AyH>)Q2$}_gaB4l?%*W82DHD`7sK$9~mA< zaz~dG7W}Dl)z;Fopf$;_iko7S|H#JX*JvM(Eiy9{c7%(uhmPK;fEs%mhDgFh^i`TA zLV5EshyD7OLWY3r(cQM1PYukbu= zn@W}Ooykyqx-oS+kBjrfs}r}3{SR{U4}WrI{U->&GCPRMDUG!XKOWD-Gu^rBH{?F9 zzO;OKd3L()l{oD~-(PAVYq>q)4GGha$9rd1Hjyb}Qg%v>^z%a$^*OAGz=u!i>a-ib z68(C*^)m7gLbv9&{x3DVPNhB)S{DQD}ePg~g|DJ_T99pKWs3`aj{DTo`U5&XE*wGRA? zd^4aGl%HBM1nw(b)_Pj!#KeHs&mv*I8}~l3lafyTycwZ&@e^glSLbutFcEOxBN3uKDADIR`=Q*4;`U+S8Fx_0_C{&yv&o*gaff&UU{j z^p*0B7zKV=XKz>)-_E(p$mh!%hqMiM0%OGE1$7|8QUNG4YZ)#g z-Tcwx5Me0OjWwnNm0Gdiz;A5G(hjiDiN>5neZ{!uT27E&o$=U;_+AP3Pjfs)ssc(c zY?Fx*FW=^_G_f{jMYhWVEUc_nA%!jLC@<7y7>X-m0J>tKksp&o$W6}7`jF4&sj#^# z^0M1)XIz}KTAK2@2XS9zPQ%xDqeIbkDZ`L8-ksHX7=ENp9*11&sA|r&2W!ePz<(tE z@$s>sA~On^xuL8|sEJ=xR7~zeajf7m;@hsOna9AWr=J}i8HbZ>K7u);N$)#)>B@)l;5U1Nu5MSEvH;Gh;_n$f zExWHSA+A?P0fV{H-~9#Ztri&@FGs}ZB%73Ky4BKC_(B2M>a6XtVa`O^9}UeiGyUd; zk9<4;b*$z3EqKm^HOL(OS6TDb#wMFyhuS!i#0c@2yfSn#{DxZJNHL3H{+zN&%R~q7 z0C&2Czj{7YJF-Y4F~7`+kRqua=c25Mk=PGd*3+{l0+qZZ9={rf5`o_OKd$iU{2px( zIDKb)25afmE&?J9x{IPX1%i>C5i*+MN&?d{Q9&qX%?sRyH&V zJW$vCAnRh$L(HuKFd)WLq^TVR1zGvfJ-Dn26<}B#jIkfrZHHP=|0>vFY;orO7Fk6) zOybUKwb&KH;xng`TA{x!Ha7z0GL&o1-t>^7C5E^XA9&l(Ms?O5KS1B$;>$@&HMl)tzBfQBSL&d)Jt54FRE!ZzWSJ4C0z9*7EW2IvwIw0Ar*?);Z_ty8f4dCoa63)FA)uhx znCDaaFS@vAgAQu|eh$FQW)Lwc@gW@pv+ODN{!b+05h;ExvhS)zu6JDEbd=&)mll$1`$ zE8WK35*Pr^*&L+mTH{c;Nc)(df1~$7;$ug980`Q}U7D$NjZ-ar*+-*o<$H$FQS2>E z{`}*ix8I-jMN9#W5lI=#nuA!N^SC;=_VR0lCi>nCL1E_95^W5*5CNSkY{9|nP==9& zco(_KR?Q1rTFNxZu+jHuEn|e%f@-qbF9f#-5vv|YMG>&E*l_v60+@*TR3)Qgw?`bV zmxQo6>&gm3L_JW|-`$By{n4FX!Z3^LN4^BLvG9BCiW5HrPH0-jP0dg7@k=3UcZjns z@5k3)(d_ZM%*>$aFq$8#|M3D?RVcJtOwhMv#Iu(}E0TA+p@i?|M7_X=zDgZ1e=Gz<(_x2gp(!lg>ql~lm)k{phJ2c*74SQG*ba|_6ODz-AP18Ct# z>o?q0-<0A27LrBzHJ$V_Lvcqc z<;ebNyZ=2U#@5i7KP3TJ+uMJzwss;9c7gvx$6k*CLh*m43nQD~>3sj^a7p>ABzBzm zC(9qB?bYy~nH>!RwLJ(t)Fbl+Fo2LUjW$}~WGD3}AM3BoNw@6e$vusw4@4?-r9#Bz z4|6cAYvBd3U~b!;nv8NTuRc&JL)w*p4*$305?|tpG}vn{22%$p7MYp)n)QL~5KCXb zcmWfJ$)mQqFtewiIF?BbOPYy$4x>eBTWO0{jMSOW8d4j2BezP8WyfyjX~WaVaFQf% z`KL%0GCF+c)fa>^Q!gL!YW4ytAQDWP9^l0f+A;!9!!>d*j?T%F-f?79B%$fb)g6S=yuwW41;uF!dBe7 zSQDNzh8mu>8z<0PXG3^8R|)uTIU^fYpc6t|0E!(v?cvR+b<9M*+a+F&YGdCa{rGwo zwugRLYBof7_49`{-_iX}l$XL;;atu75&Qn`-N_^tHGh63)OXd%OHS11LBxxqB7T!Y zsn3iHye}Ou<4&t)y>K5o1Cer7zkFn$9iM`AD@5hp~^$Dp`@1DTduG!fnTl@v$TM z7fY5m`o|%Iaw`pPA(%=WneXxlR!iw3D%H<^YrQ^VUU1k0lB9c-Ew@MA)VAc4o|mAlFHMgn(9;g=WQIpANO`=%^;LyAL> zBVWFZoF7xSD&hgB@wkmj5TqG$kprAu5oBShRceBkV@yoaUR-oC*;K6g!5b9iN+RqR z8A#ZxOh)ixO5k=S+s(J(1*?+#$>?d%M%N+6^ySxSR?k!*V72C&vOFZEqM+H}9c%`M z<~puHKq3}Sr;265AH1Z}q0aV(N%JiBSQUYMaLQ-YUSJ=SFVbUIfeK0P3Wb&u5;|hi z)mthDq3|#IT+*>4FBpELSmoP$LpoG-Wzz*XVEv7s;}LJ)?U)*F4{e66UQ%Am z?9Hvr3K`G`2otE;Oewa5ceyw1RNMwx6Y_g8qNOYYl{!;Dj7UUY{N{Wy{X zOT#(?Ix=X#c8a+Cj% zUjB?pixx0Rk3AVIEps$) zrP_IaW63!HET@%+j`!?A^Md@LmWk3`kBGWh7tJ5%ae=w)_#j+@5Jleu3!(j{IQ8yg zb$=CPg?+}yL|dip&KK2h*V>BP|FfbX>9e!)J%W?eh= z`-TfNjn{RscR1j&#U+mi`^NJC3z;UEP=uwMwr64c2ZBgB>oR4o-NJmrOq$qHEGsCQ z#t?Y>ZKE5jJ-&G{^MhPiP~A1Ig++08iBiG%b{+vXt$pLj4*s~ zC3)!6w{z|arT+X9fi#O!4Kc<12&;mY)RDxA*1!Nw6XUJQkKB$B7?SD2y+C1Uaz@vQ z@D>kh;7%hwhT-IZ^i$Vr=*a#GbKIVc(bm|2GG3ucr1Qb@p*^T>I6@7bhDHkXV29^$ zgwyNS5X*6Uo=_<-m0}@!ya37~GH=d{N=Tr=G}Ndm_>j!SMFF09ZUB$yZ8yTH{4NfC z6SGpaeVB}cA(2knjMGcg&qUlRVAY3T2dt+(82R*#%^&JA8v%)0;+jj6o_7GhA31vF zt+i}fu7{OOhOmak)HloJuRPRrbcu|dp7u|UC9W11a3#+M?|y=Z$f=FGFRo=CD?jHa zD>XW;qAfHW5+i+B3f%?QU0yDD)#y!H+bp+um17Vy7LV1Sd0ni11;7R+L!8*XdpWfv z1OK|bFsPGA;{8{r-(JT{=JLx}c{MvbF$e+;yo_3NYw6lEa=__oSCTEB;eQgSH2&La zJAbb5Wv5v*QMA33Km9q5vi}o_1pmR#j^5-|{U2=hI!LC5IwA#p>#}{g!g-xmHC4m` z>`a#ISO0TmyiLSjh%G6KANRXxnPLOw>{t#_H}ycx!5?!VnEAjZ+`%i39VzUI2sjPU zS8E4FDbi>c;peW!vn5}a2Q`iG-0+8WSu)O6#u$hUcb z3tkRT&gOr`OFul36+F5+>h>e(G_$P877a}nP#rmd26^#f<6w625`7&Q8Oe;mNeUjK%Z5lOA2jf9&}aJE_?&=O;P&FNh5cUeEt-6d z;r;*sq;07kSrK_Y@&lHop(66vP~5F~Eayx-bb*8}S6mBKMuFD0kAGO~7p*3fqi&&o z=B7dKt#~|OnU9k$C@6_GIiCDf{puFzcrg>t3^;>aVPfogXguQaJq>9+;Xp${ z0fN}Cx!#Zu-wCI-N@jIkT4R zpR;loRKMa~JR{c@*6yytNU#X)&`4(HnQ4gWVsO2@K2(edMIafxB4~N44&6X9UGt9# zNICZ?3z(h4b?0=7$Lzzs7*$Nj%E@^VPdFSdr1$5P@emL47>brxGBDQcV5?e-&_tTf#~#{ttqZFFbW+X|HN31<%3jFxWp znFC3^sGI;}C3NIy!wEK?EiHae<3gW!m}ZUd@b*&~`ff8-yxy{V9-Z#bQ>oC2j}g9i zF2!5~sR4E60AYD7A_zC~e=;genAf?uAmZd}Rr_jb0ehwN8i@ZFmt)PS|5~4nYU2d>j7xYMZ_J}p>Gq)p zmpgx#8rN%XT54*{-Iq%~$RxO4DDKW%*i~DGGp8V|mF6V!#IH(14M)!EJ(PoYO@yfU zA^>5RxS$rFH>yi!_byw~R07T+&{f#5&dvf z(Q37-H$cmnlTG^#m(vzXI^B`xjnVo@= z`?FF8r+*l44`)MloY!p}QT^<=PV2oYLKGBbC(3`90%H1^3dsAnDlIf0Ik0SMPKT1D zn=a5BuO{B@7tS+Ho(32|ExtH!x*#C$U_C;6k9^LCyi<*M0xXlqe4tn5Y;1z%b`B?- zV26#d8UaSF+3{R*d73h?rtZ1MTMguxhZdj4FV!^tWe)y{+z^@}ixSxd`h!`V18ML; z2m&=dM}$82Z8nHfEpJEd*dNw;+|MsybB*zK5=(>cYWknCM)ARFAu6v(ujbx~T7dwuQN z9H5TeVYR;<-=z?X0B-J)V&S?VY>Xu>q}SOI!0#XEXF!$iP)CDBs7or|x_E>XVgA4z z=%s)G_hwvPFD_~ zUP%(f)?w}`>!`9B(sV{{$Cs0;4$l7**9!%|6R$ux`UFr0sl#R~gAlK>(@Seiz8Yv^ zedCA2H|dr}wW2zA`Z$s8mpnMzex;}mw;J2{%u#-A)qEG!)= zcj_FZciuvj=Fhbrfxl2@{DsUr7c>{g$tl6W`21!9FkN;ITZ(wlh`v#-Js$GMT!A-w zfAIzX%O2*jG*<2j5_%+SgECYjYjEp<=6~m90WyF!YN#h;;I#B=bkHc~2r5|rpW6ED z&42Vogm2W6|M!%TdPTr12mhgstFuCY_q0!mHlsYL1*5v)CDS$$Q@I!BYI#ffd3M#6 z_T*Gy^i-+l`?MY&tQkt(rBGL-j0GMm`|D9Rqo}wnH5zKuOUk2V!|qbZf_1Db{TYqY z&y?75jfia3T>0$0OLWbOXIZy+LN4G~-iUWQURvm{mU)|l4i`Mwmy7kWQK?Nv7bZYV z2Q!pGLXRzdiL$4VO?8Srg;L-?teefit;10$?yp1_H`kk`<-|iSm+#FI$k)=F)sBDq zg&>5g-NBEjT81751_VSg@lfsVY%8j(C;v+LQ_bqCrdF{1W181(ye?{SL&N71W@Mj4 zs%Dcez=)|?1=xY&MwiSBB*cF5TsIevy}Mk-mRZkr!&E5eLz?WUZcv z0}vtsN03JS1pbPi-Shyv4_lChDk|MB(uawR4zf9K3_rFW$+Xdg)44q9#d&Wo>8*8K zH0;^WVV`*DG?Qi-{cVplA}cFd*zD&7F6yG}E5B{H4se_gL+jZb*1edVa=+Q6F1t}Y zT^6mPzg-EZn}ad%4Y#Tgmi8J$mk{z25Q4vk6++iQC$52lV}O#_(`D}YwZ7tZT1P&3 z(2}0}(lVdg)X>sW=ahfn!+(5ralCSJwDhpE2+8Ak6mW6z*;`aW9|AX;QgF4kMel6w zZPW~fa@>5g84vDBB3u>Tw9I~IAj*3)dz5ct__b~gV(1Cvjf(RP-_P363IuBfY$f|8 znQ{A_g6AUWcY_7;V`538>SuI!tAe?=i5lx<5*IKw&+i*`zvCp4Sj6v;+FVSb1xd^J zmidYa%LKRRn3t0kjiHUuundneDL0jSR=%4iO?{WOc1FmF7fh1O7)0{!w+?iRn@Oh7 z@EaG}X6~Zh_|^$4>Go3i-%439qnvy$CYCCknC6ezcz zXW+4Ff(uLydZGnAJv`vk2Kd8i?J0!zS>Yuq;NfjHguA#UQOQUry?uM5O%)Kd<$s!; zt?_e~OI#MIr=0${zq5`0h!dhOa-vyj`!42`b-kogxcMOVQ?f+zxBgqau4=Q1E;Jcs zhC7dzq($gZ`n{=4!LF5OV*WFux zFWjgQ8$dtId(TXf%r2q_0fwM=0~T@p-#7Ni;r4c8&6D8m!CRzjdLRg3gJByS^Xmom z4b+qixpF>=V%ogJ7s1R)T8AQ4_Vnud!kASyAK0JslZBosuF+v+pnw@azE9DgrhZY9 zf9V5OV0^LfGYAz&*-`QJcwk2ev16y*_gA1Paj$76UDl9N&cJXfHN-1~qM8&#YV)W+<)fM}Koy%cpP-tKuuvWCBQ&s^%gn}~Iz)&9~LP-wsvsh+nvg=8n z3>qB`=^L>|B1_J3I&qUR0s0Cei}G=k3f;un8PW1nO_+W8bSst8+vU`nA0wVD?I{xK zH7SM2Zg?rGWTWs3tTWO^1(8`JxB$c_Trg~9w`#qZ(3q&2|cRo(Lk}nayDbu zXJ5#N4E!Bk8mX1Il3Azbah9>kKDo9|#bF6Nw`-&NhWJMDL*SNJ1#Cp^M4G04W*ONX z|BXW`JjQPKd!J}fG%aIpY3BC+#$CTm&^=-fMqH(x(z3$tVdxsN=u6Y;HzDOho_s~z*L`~-Tk#O|i2;5$?Z3{w zUbZl~iM}LSVNM1lvr=wU8l8mX<_ViCSDS#3{pJggeq^z+=`Aq}Ud)&f+iGH2?=e#f ze^Ga9M*CdcetH-r@maLS#LKe!oy6w1%@A%hTE`q{|UQ z_7jBU8RcSPWDGQ-<7n@KC(Be-agsfAjz6KZ(fC?OKK7H!AO7dXe6=$s& z5KpDv-1YtcMAF}Y65tUP_?DT4GFdT%o6YQ92G+q`vikpls0;NdAn++esZ%QR5>kzE z;J@#r5*7f9PmEpbg|IeR7Xm)02MLb|wbG!r#E1=}6kc>1;YY;@k+fP+vMi7J``|4q zUnVlDOGN^)kp%0wJ<5@vf(6rZQ`F!MpdnJl&yPS^WdXB3BncZ25#n~-S8#>?J&M6-J0nI(B2?(Ib(v<(Z0 z$Bf9iaZN(f?3pq>b1egi6fDWusY&D1i;AG4%Lw5ee00UTxXBmbeF)Hwi~xCX=<6g-7^OQ zh{V@asohU)*hzhGpXjEaxNd*)j|>9;-Z88Fyd3TKj5h{55+&v-k zTK4dV4I{IYNucYV(aoO@DKbWeJV#Rw#i`m?*VQ(|;cI(yon1NK#{)%J}u_o3<9 zFT0@=rkxnJ`Ck}N@z8u6CLa7xSFv3f!o~HAlOKNWiFiF@X2TxpXBFF0)B$e(R;=l4sM}1!?d^ok4fCMEv)6VwYT8zsi1P8unI^mt%T5%K;sNqmqgWd6DDqKaSBXN2q_Hp{kbnVj4>ls0+?2`vP?y#ynHcT+eX*SWjsrZs295&02(Dzvdi4d0cLI>!V2~SILhgL9IV9df3&co!K->%Tr7ipBT48#yvhssEBoXH3avCa_} z_t+4V_q8a(&flW7YhCGzu++V#{Fb>_d zIEWCG%hc6_s?MnKV{0iXF5%{c2d1~;_cb-EsEF_LQ}tR`F#eHnt6VM#dt*TXT+V@Z z54fKRhEy}wc4bfAS9i^eKGDTDTEKwY{!gyl@q^y93UNGmjJcP~NL6VEkJXqNb4pCm zyYaVAt?;v!aML-Lib)27GrqnX;p6z`cO+I+Z$;%ua{ZZR6}d>Z zBQ4laHqvZoyOs=k=zEC9yRVYm$bRPezw-~*vSJ0umxzWl zRto!+o;PMx1}3WmPrk%UoE=++*tVuYF7WP#maBBU`LToXmK$|sZ)L-xMI`e}kj)RB z$*17e!ylrcvpZnnqq9_l*ng)bZh8n;-*@gwFxE4u{_yq$H&yH2EdNy|uA%=MOCuDP zY5$gv|6Vd*^Oiykzm$#fECU}fqrKTH-!WVi>w4#wA~sG;$DoiBBa=&)pb7f)!AH#k z8y3_PYgSd_YA>O9pm_Ob3%d(LQou$VG-TXWh{oO*rR-t(v&07T{TA^BwGAeDKKfFw zAic3YNWaEWI<9hCkxVpXlPI5`i;~AbNJ-fJYI^>D(?XEx0=C+kDP@)Qp)}Af%B8yv5ogp4e0Kw5mOI3%l&k@PKgdXx8Aww-p7=a=K^lv#+Lvq?V ziY!+GkCFoiGf*w(Q{1pM8)oA1;Arjif5{+uejwoI#343`K{hF(-q9QAw81rLS z$_v$u8abS8AIt?EVs5)UoZcoR%1j}NZzv(3je*SNzw&0XuR=2;aG+3Z$ zn+ZbfHatPdfR(nKKzzG4OG1msy-^^FIWGqxl}=Sb!`qLGd^l?ZpJt}Jw_9K|eP3vs zl?JWwx2R~5L7sq=$>03wceg%TE)OlM;}EL*O=chpAuoK>4SvA>ZiMeP-A7*@Wx5=b z-~~a~^jXamlHXd3y58x#HnsUAjjcG8GC0U+XpXg$odw34#+k;&GrI$;DYM1J{4N;3 zxtczh4}=hN%=7qDsXB0M@VHqQx?_ayouR_zrJUAjwbep<*(7U3wyrEv@1QbB*E#r$ zGjD_|?Oy%r%?w#OB593Yg&3a=PjwVlSEtZ&Zr>76+EpdM<2VTj38DR^yF>o_V7-GO z(u@2GT`;9@@qo2-+ikK=Gfw11{SWxdl|ed*cmo|uM*NNDudtgtiBnsJ`H9^QE#d+= zW^cxVGu!R|-|)1-+0#SeBQkwAy=M-eDIr0?*yEn5?a0ylPc!w}nc_iRT}rY8hBMz# zw|M{iUSm>k%SUJjK)NG3K6#&fGbt-C#j$DRft9|#mWv#4 zK=LsZ?`l-AzwpqOpo0AHIWy7aiV)CnCPRlCSCP86RdDHZmY+Pc86SV@&9wMjw+9?*l|N zOntLWm2kck%uLBLva)h5^P$iv%*Zq9UV)q2`Nm@Q)URerM9JyUpZ1%X zkG<%=NYY@Btc@g>pT9qeUKyStiOq;+Ew`)zvF*|cpZMCv7ZV)gC)aWF@%Ly$VOpZ1 z?6i0IUcBV8x2K80B8}}EExE0&Z}+s1ul7lQe4}rZjdsS)K@u{>kEIItv({D&E3%CK zMJ8^iyLj_dkeSE`=Xbdy!)`enA5*AjY+UPx z33H+9;gBr0M>T?E<1(~*;{8I3^|_M;N$D4auum4I7LLA)H*dXtIuz!Di|jwx{f<}TzYqUM!PgU<@1D6kS-bu!Kp?+X(vzKP@gr#(XY^hW zy-DqTwrvcrID5bAkw>vDcqWWN+xB$oafTilR(3ybo`B^`h8WDtJ?FfxL=YH`_;M_| z&vwI9*#S7_)6$nHC#UZXb@=k7x2DAhh6dzU17fzej3B@mg-|2(%^s&v9>pJn2Qwe>Ofsux; zsCJMX6$`DbNEx-#J{%bhuKo3Ne3a++d}lESA~sx7gU#>|t`BtiQ~_;UE2Rb{mUDt1 zqYcvC zP&PI-k!lgfL2)BaTaf~?2`v>Br^HhP(wyK=^IUfo9-WLyZsV9i;SS_oyXlO6wTF&v z4U;1m5{`?WUO~=*BrGJz@#l@5EAHY}Et1lbeqmvZoDqy;L8s=1ai6{mB*?u~8ky^j z2FJQom|YT%7x94nlTC!@`yn?7O6g~0#)xfq#&F1mX4W1|eyGBQ23@#zS#9H9H+Ig1 z8CTfN1{4v0xkJwp*6nF)8;LaKX8~y+`Y(8rj=4ubaqn}}dozkhL`@yPmBF0vl?su) z41j+B&CTM({ilTMy~n&5r^yBN-gr*&!;qj%X>oC2d8-bzNtUhgCvv1}iwC%)WhW`# z*qGQ2J+_!;Nq1oW2Ne=Js5c)XU69QU5xld!Y;r@Y+>+rM4X&m0 zz5gFqUl|qG7Bz{}5Zv7w4;I|rgKL7jYjAfBF2Nmw1`F;M+%>pMa19P~dGCF*zM0?L zwdmEi&)K!BYS*3@7PdFYLsiZBw=d=xr~QBX<|B&S9K|w2>dE@k=FR#4O2l_2|& zyxsfQ$bT~=a@z?o9$DA=TX^#{q$v4RD#~$T_*Cj=)Q%5m&$K&cm$f`(N@LWHDU^OG z5W&_cB%CV!LXmMl`E_p$@mon7**sj_yhgaOyMT|3 z7KWcy5V`5t2b4tKCcwvpdU&*<#1P+Wzz{Kc?$=e)RfpalKn>$pvwlxYD+zv86G;ar zw+Oceg^aP3d<01w$u4z$aCjMH4>Jq@q^YO3o19OJO&RnE$T6V$wu1v&viu5ij( z@O!{PL&O+7#`g-^WNG&O6-FSX$x@4+n)+S9js@xX)1U|A!yWks)13WT^h@EX8xd{pret34@X+@iUj)`^lz% zXouVnpa~5XO2fBIe64@TuFm5{e=LSQuQK-4u3IM|ltH#;-71x-&9IS9n6uff2$6_&}h;qfCasVy|?%P1UUo?!9KMCL_VWh+yVXN8X0PB3SHuonk4 z3az`lej>f=&8~QbSUxea@~_Gc74Ry@{2W}}kbwpc4mR?pbS>}zXAg10sSUkr_pyJ9 zi0+S2hi*+mxy7J4>;Bif!skMXZ~~f zlAph{snjM=!eOveZJP~L73w#f!n37r)UnYpu$cwX2;dAiH(A)hDrg$OEIX=L*!4xJ zqPRGP==2uVQLfjmS}MO|q3S)UhHc2_}9}DHi)h=tZB;6r9Mb&6xmPGpc3z?ZiqUkEJ zHDP*gE``IoW{YG5SwcnzYIE_s^Eoc0mTOYD8oF^r^AkgoJrq9s=`RlUF>Q!m3M~bxfFc528c2z2BkGtj>mKO5Z-vkn{)0MsKJl zkN;h`moT9`dx5U4-{_yN?c|T_Mh7d@33NbUpy)*q{0Tv7X6CFQ@2ZH`XDux_6L$q6 zdY6;ocfQ2e>{r!zkgEUlv;I!DD+;_RG%^@^disr`6#by+j0Rx^lwqjc3;{1{{)@Zb zp4XGDGsDG8QiJ~c{d}!%Sc*#Ub4_lKxS?SUo{EtQR9}CebKz!vYt6ZL%W4+usl$7+ z+;MQJhfnI(Xr(p*#z6@(G&Zl5)MkgW()BOtkjk1VyA`UL()EUp0wJ7Ti)q#E+>b`= zlzkFnChnde;QmnQg1~CFdXTrGX;7B$v3sQwF|a$u-^1zq!|ci- z$8x}+8{7BTu;5_soZ@)mTTgA70?$HJuqYb$K;YyGlGW&pkAR>`lT@A9k-zDbU%CtESJ*o;= z_Vs!9f|m`QqJN=^kDTLkDQIG5_Pd9;+v%xKrs;5iD?E??X``LR?`0*1rNWgDE?cp2 zS#^NeUgS-#<0$`EuG56!tu^7Y8W`-#x|B&Ex{;tCi@219%o7dk}8mgKYxZ?qC$mAcuw8Q7)un( zNCC?JW&sARp4O?m;(+IKa||e%j?|9{g42oPPo(E6iPDv_zPC4>AAC})nHh9JkI+aU z#yFxl2!g2(hk4D0T*C|TQi)PNvZ!Mh{`;4sN16}Vl_`~4Zk3VSw4^Y4ltqAO%+}5} zdi$w)2&u5}r_TT+w<9a6XFkTjC$$_fSWaI@UY?jiyG90${d*4An#Q#nzA*F`ZU&1L zJ4?iXbU5vVbF}$;(`W;cd>(-ZFj}NXugiq^07W$yY3AXS=_c75hNpm8n)VJn4bf-T zLdH~@DsemOs){I`AT3a}35IRgo+4^)Y9eZ|U5BshwxUQFNr)R2rDS8RxMdI1`{~M; zl%lz5KcbqMF5rHERklKmh3ImPWN9h26A(FUMaHUc`I#pvSp!i>K)d?8=M-^8;!rnP1oS$oW82!OJrN}3KKQ1$d;#|a~tc8@L&YDt3+(GiW+xK-RmlwmmSC&-(GP**6Y&xrY(n|l@5A8KBCZPSRUQlO?f z7G5ev7sh_DC|v5ynVVh`mw3ZLOUSKc#=qUe!!IhF4dCFh-7s}`DBe&RBsz-|GXgcz zyUx#4AaH>cGNLr!a@X(oHfX~5J^J3rB7VV?jyyP zblafRpOBEE>a8$FBRL=xKTd)uM!Xu(ks(w7Upd*P61Q}KywrPg_F*Ax;dU)8Pa}}r z>4_GsOjVR;%WUP7L@yGj$B;hl%`=y_K3QjCu|k%kO8U`M0payvb>g0hkdsmp&jfFg ze90T~Ck_0)!+sEW^|SgM1TyI~$*{ebcA}QaE%3#NV8UA<8v`qv?t?9vP-QBT@4Q6t zu1AllrJeq)&MdKtD`_r3{G!?oB-7E;Baaa;Njy?DyqhMA=ohaznx<-&$ADaBAN&oJ z24>w3nTltZqjbd8mLgHNr^zen7G7`alP+Wdg)O)2${Zkk9HFOCZohyy;OPlNBolmN zui{K3Skc*4TT&uN8;FaWvgKu%9DW=2o225F$%EMpBkMV{fr=FKU}<`BqvQYSDEiSS z39}D+XMO%TD%RUHIjsYrIx(0)nOyBgU+{{@!Wk@mRogWep3vG;jAVD<-(<~oe;`aV zw#4@a*ys{QWNaL1P+v7a0@q1TaBL17L+t;mj)Fww^Vj_P*3VCcb%_6xd z!tos!#RUssh{L}RI;n->0^cg@ajRf#ryJ zdWQ0DV$z{B&_*9qcE=35;ykf){6;=mekkdQZXzmcXWOTRmL zs)&7&1IdvZblx7-dLh{@HlW53kNiTG%Uqx0$7wLb<1z9lQ*_T*R~J;t9I0|nF8jqr z!Py+yqUh`n(qW%{zN5OI@)^r~)9$m7Ar&L@egq5vI1l!IYsJzWw(TAo79#m(P1Cw{ zeO|+VcUB`@judn?@rR0@OcWZuDuRI`0xa$ue->2-X=x-{A+0DE-iut<-EtjYa2^iCc=LXf7BjW;Pl_=K-KujxcDW}2XBbNV)(E^0)|VXXn7w= zmWc70MZ0@vfC}Q@TcH5T`2RgQCpeJJ;k59%sH$!MNWL;^_k+M+14IEdCztzfw!ZHM zcvkov?Z2uK7{<3S3OsO%-gIH!2t`+TbFxhM^4Pt6%H}qyMm-669*RYLy|rfu?7RkG z6|xHHckZ7@-%df!`HakJ2X!wNJ3Pw$vW4JI$_dl&zq$uI_7EV|G`$>KW3WXP;>~>M zWSkSw%xGHT5wo)D^4x8E>xu}emcF1H4%IMG4He;jtowXP;Wpq{q zQsbKj(V84s2+13guZ(9=Kf2VD{YI}*p#6=2%@^$~<@n7CwSuldR-2_VzY-rKzwXgo z0$R`7G2%`p5Y16;KBh*-;rj=YbYqM>9tNnM_(#_Z2Xmw1wZXQXS;LaSi4eW*@%rcz zlw`k4<$IdM|sBASbHRu3CFtd(+ymb%pFvX9y7N*ZcB;AHsn>#upB^7>exhnULz!pGay zy+aC%(M9Auy3Y=a_ovAh!?4OQGT;(D)lZ+GLL`b+WOITm{(duut>jPH z5}HmAk|%{CzgV>~6&Mq-!C&0Q2xw!I5H8#-RqYqn*359?0Wo7*JX@W07+2fBeh80< z!8p|Oc`$MR+;U}>xBx1xMXBp3SJRjm7R2~-dG&P@$(MkD!Tq_g2T+B{AtRQLSHM6_ zfLY!+m&dg9Ex!EsVXxAmExWHA##Wr;9}D08%5Yg{+HAUrirO@`e&e6!1)*02!ILQH zxiTtiY2MtPJ9xnxSpw}|ZU?J;Bju}b09D{0#XN4{vD8fk79bw^8>r+d+T_5)Q|x%D zgbMgLn_4An4Vjk6zc)4EnU?e_%L>ep$1>!6`xc2A3-d%?i;qIW%kZ#XAjKPn&o)dh z1S|V-M2VVc=7lg63 zou^rqosX=`nbJK|d?lWdoU9J@b97X$xTBe26ydEVF`@la_SixHmOb1Q2)6`u3n$Rz z%F*wdZ2->0L=o{2xy8=8np}Mo-XD32-ZNzvT5j;c<-ecRhb4*S_a==Z`XG0ws;X*x za@3vR1k8T9h+$)SgdRfWI2+GRJdM@#Mxl(_0c6P-CPN(_ZCn0hh25XE$HPOCMOXdQI_Fq=o zW%y$t{3;xJZu4|}!N9px2NXMu4E7bYrnR%=(I@t*-1?@nGAo^T$4t_en@yqn(W?8F zYn4=GH`BZu2s&T+vr=e$GYjkM1eLI}MDfX|>R5D^pf@Yb<$vOjcy4b$((=p$`J?D}%=CheDYxv*1Da6d{2qg)aJeT& znUR^P*R43ixl^K&Qn3;AkQK=Z?t%50<3291jkq3A^8J%0YV>sBg2*rrkc2mBRY7VC z1;d&}f3u1a0UxBH=(nFLDW${BO66peHZ^253T3~O^R0B7)yKwVYsGqqcP-z=3_43z zHguD$6Jevadr`l`ZVeY#sS)esrtV%F76(PtbhfJD0AU4FK7qoxIF*ZvYP0MjbiRXs zWSmXdE$oNbB1TK9u%yIcDHuxNN-Hnn*wzTQGPBtUzZNcjwv+xj@Ug2%)_`T8$At|j z7LTH2O5$0*UDORDt*R^JD!Q*O9FTg>Kf}51vr?YXN0GIFCvEWa{PHg@|Jqa~8TAi4)&E z1SaAay13cnS2IwRjIkB%tm?=j>`>KGutY6zb;J~=D*b*wBZ8!fOA;giLq3ykf??0y zCb5NDWtb@Cwt!cxu!0?=v(!!9X72;o5RYrmz&spS*G~9B5XLN1sGB8=;^W8nWQ)-) zg(HDk?3-cg+T{HFNaH+S&Ryt}_Q1Rv+;#Amr42J`jA6GtBkIHhsOW~~hg4y66fUM; zAZJ;a!Hu0&zfM&9&MQH+?Mmx1aQ@tCXDjr0HotOo!~Ib1_E_Uu&}-YPP;qTq8ot9( zm0jp(-0|w&6cVd2q@1DWt#26{dpY{di9|7|g4f*MozAd@g_ONp5;=?0vzNDPPBeW3 z1Kl$d{Pst^$BS&65d)+RyUcWSA-MVvGz?D<+S-}da_QV8B)$iFDZ#7++uHW8@N16~ zezrFwwa{?aL63f~e0U*ns~x<}+c!~H6Cr$duh{(O8wJ&`UF6yv;uViKKZL@{E8CD5 zn$TWHe=>Kuef-9A9l+wdv$@{;**Ka8bGhLpctOwa9pI$3E7$b2SaEyV(^&a6c7wwA zcuN}G*?EonyUinmfjVZkkq1{7Ag6;6;z+NH(NLoyvR9>5ZNLt%dXQwc{ z0M2NLRlhZl1$R5oMboRz)Acn-+;Kg!J#ltYkEa^=tbSv&m%oQXYiLe_#lscow=2(t znJK!5amRKsJU$QXcdNRMVxBENxZGhqc;_yaRQs_Ho+hb-&Oz|VNg|HUb8u8^&fE14 z+sHy8si_uWtX3Og>eicQ%pHg{idOwwthU!B=;u2*q(QhWwijDPMylc1BOTv{08#19 z|1dQ9DNCOy2Ol59ck)Mjwar$;g>K#+)`tx5`8jAGHuu0x|G1Rqpu>voY z62pJ`V?D7KQkU%L%mcC+PVIkVacw*neyoGs)^5DeeP7%Cy2rCxH^&;+F=52D zsjnxAzCLVN{e)T~I;xszKd4)iyc4*(#x#Pi_BxxH=MZ{0Yc+C$tM^s(U4l5e$JGmE z?$p{zy6J{L#mR`#z1b!dU+Q&d+MmcdN{Zc|ag}x#v>gcai4wLZf8(oB|GNmKa|`}f z1an(Sxrk%UJQx+DDy0eric9%EaUmw}d*(vvnty375pKjxKA=>NMpF2*eZVf6Hzk?L zDVhn)kbg|rFF9-Q!t(T;kK6WZ2>AhQ!|Ar=j+xWz(}qN;Q?h?A$fIYY7U5 zjb;!f4_NF%lAVMmNbpZSSkxxcg;jwh!e0u}g}lT7z9zyTB0TtV+DMv!1%qP7Gq*(s zV`qLq#HnPJB|ECFh!+LlHBs9yAALNDD}y!H{@o6beYg|5f_~@OG(`4r?LS6=E@G&T zHT{)2?2EjKHv$POpzNs7f2#*perVw!lsQS~iqMXNY#VNj#GA zu+tppu?!V4qJJF7LrpOmP4oc*4tZAE9)qi(fCzr+tvo81^rNHT%j}Qi1Rml zjpC2QXNcBYqV8xY#je1Q<4$+Fc?HH|CVvFD{|=WCf#T{npG(Eq zp3$@!;>$Slfv9&(IF3MvfNHS*jR5Un_R=J?&FB|>*n>J0@k!ECx&At=*X^m>U;*4< z*Isj{AcFA#Z~45y?bFD4cNl5;V%C$%r|U#g{Zp(nrmY7;UviL>xXB1JEn2HS;jZ7| z(1786Bx$f=tupT~pNmC!6h0%>6|Qw}_}J%7nadVuc01O(`SM3)$R*{+7DC@YK!&EK zc&p3n?xN5l*7fxtA~P7gfWJZhYv=eW9HJMx1kYu_9PR-gav2G`II#53S1c>%IrJs>9h-G20;jJh*# z;}>(z*?eBjaCMLI@M9bd(K6@pNf1Vwav)Q=a#jn2f{4talk7P~KGmQt<5VcF*e-(} z1)7|gHgjv&;u0Cu*f%(}A7Z<_A{B`+eEb^uky*fE@~A6Uzs&dtqN%+@tQ($|XxE6D z#FTmsnWD;WyDJ)s2o}9CpQ!MN5Ejar_yX^-DTGP9M3DR)J_n0L$!`fQ^f4^Cdl2(&rx0Q(?yP7GZX@Ldz{1kL|(){4VM)C zB!oG6j?LJGByEWW9ENMFNmG{diIOz#`R>d6uVsmja0nLF*O)j(`FvY2<)G?Jm+)jAO!HEXr*XU?RW(7I}OFTP> z0kyTVpK6_&%`2@7Po*{+vJo*zmG1UNpLj<8fwwN$>I*t}Y}( zbn9{E)XHFW{zA2q1VP8iD zz?t+fXO3%I{Kv326av3`lG_3@%{7a9j_;2*hedopckL6fC;PqHYMH}Ai@owMF-5t; zE3rt&RpnnMN8e7)FKG0CC+%7kTd=yvpWa0zlDQ>(=T@o7U^T^v!V|=D8~aVuFDFaB z!<5QH{1QbeHJAMDTerMW=UhYLt&7kz!e}}Nw2G>V!E>nm`EJU37s`rh2GI%qi(l-M z9^?4iD4RtX=m1&q+K?dOA7ZDz_g!G?D5wqtYQ#}BczylVFW*IFqiOH({jVohK|vC? z&ZT#XPk%lyKP9l@(@myjbLX5x2`B(;6E$rRz<7cqH|v9FEUtL!YGpa}+>FvhyvJRh9-wegr=qjk($0 zBx)g+X2b+7MsB zfR~u4bck-=ecC#9hT(=*j@0unI~SKo=e0QAEZeWVvT+RVR9z^ktKo}#0_u5&%pp4y z=W+qBAMlXT;i_OAh&`R0uTd=)KY{JBnz}BKs10g-kZ0~RKPD45)o4OO!cJhJaO#RD zL9Rva;zn8Ozs8NIRzF+S-{NYjr;7y3GR)wKDk4`>UsCZl9$c*^=fhCOBLw{-Ne2 z0q7-vcN(W^L_;33X}gnvz7{{ZGDjF*hy9*w+dc!`!klYKV-<&z4qrfc){Al#0XNsE zl+S!mQ0``N$+7}|r1T_?h%mJOcDr3guB@~)$i71t8rT}#SKlUb+Oi)G~{(>Ossp!R*6D18Vo6lvBj9(bpeVT3T7_kqcFw zcuSScN8wOK6;dX%-9ZnzP)4ML8ZVxgmyrfDdjdT%Zau-97T}Cy`{b++{?)6VI0Sy% zGBd*IMF{dQXDu##uymi>&)hhPqWZmdEKqEgJ4k`f64JI9GrHCxGZtj?yNbklANTdtG8vpw!Y3EuUjj~6cgi0QibYXzOr54_%h!Qpz-zYWD{&~XP_T`=; zeCkA2B$WB}Za;$s8`;d)Yrz%>_@OsgYCMBjahRzJ&Oy=;eB2T0u@L{|@c1|D{Hy+| z<;YL>sp6id6bdN$T(6hrVi+C;+nlGeZg_k+A&1vh6iVUYtKZv-OVZ9(0%0h`0oIOE z7GF%%u7*b@c<`uH`Ae7LH_>@mrC%PeCP1BBeuW=Ub~z}}JMJ!pHrHQYl++}4I$~dM z?J41w+`7pNGDvk@>wnjHcKQ4EuxK}Y+!17r{Qgo3C&rrPT9EB^ft}BQ|Hzb1=sb&;TYaNL6UoeD*m$z^n2lB|2%1PL!2%Ktl-xFri&>rAw`Pq%`n!y|+*k z@O}DJ|E@=o5TF05q9GotbXvgS^~^?6pOuXcFA3oyBU8vMTM zE?y2pDjjw0BE!qZBUN}G0u>(UA0htdX1l{MgwcWr^fIU>_ZRhi$AbEj$Vge8vwQp( zP%4sUeq=@qNnxciy2t4lm!6|ab&&_`nA6~t*1V?v(*mc|r5j^BCts?-J}aTf8EKUu zs(Exh;ki-`gk9=f!H}_3$(HdB6Wdv zqB@mGUCx7_aqH{b@C)Ju+bKbP>;3*-)Cmx@`%CWXIz&J zJ!gm-1T>6{V7?Se5qVukwQV@kDFJv)*vXS)%#7BuncZ)>Tar;_XSdo z7t_KbZDVG@Iq5$)3U{4L+XL~`l5zz4UYikgg`8tt!{s5+eNm!JU^n8kO6 zWd(+-mkd|R<7?L@c(EF=oitg@FK+Q2+BU}|odJHT6$?ipxeQjE7PkePKECO@C;Smj z{VI$J!iUP5E7AZU@MG)D9ou0OHu0$n$@<(Z1|u%C8bd$ZgXSY7;$)p|ruy$MQg)c1 z(zAeH)gj?R0eKe?9fk46s=S9$+g?=^^hKrWVIv-%iuJjU7qS}?SII8WEg1UaR`|{1 z;O_E$RWILJ2Xp?*<#Eo2j@l2hVghMG{Nr%BJ1K&fLm54*dl}4u-miXs8aR&JvO&0! zPp8Wh|O(KDDtGSW4D)-LI;i$Ntm?kGr~4nKK5U90FVe z{n=0BR_DU#*8Ul^p)C7{UvdL6=(dQCKGROvc6PwpHN6n@9@{@1>AIiXG>WHZ3*(00 zXK=yrTDr@J4(WUU4VVF#1D>VojmYv!OhS}6&v#>KL$F4byAi^g%F2*z%(Ht=r?Y{I zIpaaFDSC_#E(=+mIFWu>z&5~Oj}#rcEz87k+-$Feo7gX1%;t+F}m%~LP-t%aKfUF62~@6lrG5%ou$UAmp^`r?V{AI2Qj zX!adnFb=};q+od3!N%!yGfY@hS9@cjQlwK4qPJZiah~wP`=pOD>y$M_McX=>l!gmD zQdd}daG{88&xHvE;%3T$T`*Ij=5-hNJOcmptSbCD^9~!GKy&}k3`fqtqP+|Z?-xmz zNSIYpim7IbNpx*t@VHFAE@q}s3yru0w~(gGoa>+gu@)24dVKT|Lb@U7dAuZkjR;wS z(l83-+)X)wK4_aIOjC0Zhbs`OBtDI3*TLGfMyTKQCngNKzapI%Gr2qr(?@ot z#`!!iP+XBFW~UQY&tu83lkT3(NJMc!Q+~?ZY<{NvyYUrIhuaCm4(+UsdcX3x<%SP7 zt$M1ZG*Vd)_~!DMFd|&grK`bTFzF_!sQSq*nTSt5L~!G7E7jFisG$9cA)dfKla;}5 zC!@0V7t8*OQBuz?BGUYqNzUgKgA_{jvEgau_b5k^QH7p97HK##YsbR_{J}B}Ca{pJ ziW3`6=!dC|I0i8t5eoh^t|ZdYzM8#HJFJzXQ%lQ|XGxJFG4WAf*!08g83N#E$sBfR z2!D8hyZf?<8hF5sRdZZn2V|R&(bGfOwoM#Xpy9=M0n17pE@$zZ+)vdUW4T8A;`PA7 zl+RC3Mo(GF+ZgV;lVscTI$8@H(jZYa%nr(Z+9Tm>CZ7w3b*$Yd9|c&$PsEk7K<<2# z>M*nsOkfbiiKkpEY2wjxBiD+kzXyt}xg?|h)l5$BX0KELk||)Fq1D@ox+LcL zB6qAKZ&@}KDeHfgA}rNEXJYchtt_wCG-WL8@oXl_>*ii3q{t9$^Ku<^%{3Vr$EOvB z#OHW|;`!@@P~R$COY3MkwR@T0>r0Tsb95(`#C1PIZT7ytJM7x)1{i&%+AeM6itK78 zwo&32mBYcLVNC%?me?0|K>`|{09*~PO{-Nq+2wSx1^L)9`a5PT1 zMdSHL+p7rS(RzOLgZYZjsGaSPkW*Ra*$>ciIfC-*9NMXB7K3paN!KLa8+PbbWdm`6 zS4BcCzrX39r3vh-1T8qYDdeu^By?b=OY>>?c! zcqL;1(wf{)4yn*c?4AnZco&q_ZJu>Msv)?ab>1@LvE=615_wKs<6pr*j#t%psuEdqB#%K2%|X6n%Gu`N17;%Q*10a}pZ#FsGe<9ALgJtj!!2-`xySZlY zBnKB}vjTWZ=2c?*apR2B3OQ>)vH$(LogkBMBLzkl4HPjsrd94zu9RHD=#FyEDHFqx z_vs~GQJUpQ35lX3<6KO!uS1I)XqGcK-XUaFx=C9UlsQwp8y(z!#JGPb4QgU-nj!R_ zAYFk0jz3iLky3l*nkOZ8YyOi;xTP>QUwM(Cj67T1MNUyA96|gBPI4Sfw7Ulv`w}C% zObC_W@LisUmL4>63B!Ig_)_PSNfM?AGZcd7kR8Yq{UQP_K9w>Yn1~#57Z*x60hSOv z8%|Ayj1^@R{35kQftWVJ7-LR&f@weS#P4{KI-YE=>|ledf_5XXP?n1Nd!+5 z5{N-Giz?Yqm?4Josy&ZZIZ>*?238oCvB8B5zb`Ym`7So;vLT&EZyWcEMfR2dlAT)r zY{oNRLvD_)WKe(}U2he=xVaMt7 zC&S64gEraPKBXc@3y2-|5X5-*bh5VQ?Vk>JRevyquFNfz#x~l?^U`ClAp#i3@i@NZ z-p6>*HhWDd|MuI!OWCt9*8zAmnnl%ipB4Hc@{h|Ei`# zPs8gn9I~Q_i|zg%k9~!Zwe~E1mLl@u)DHz4^?q%+I4H3^d%}O87WYgry0y%)Oo$7Z?F~YSXs;4_b~`d z6R!-W<<)EFR+um72>2oEiWs6Z=yzbaC9lE4$FsX#nlyAEqH9FY3cVVUKiv;?M&7xt zJ-{Oo^Zu?zk^)kdga<^0?aA^{XDr74Nq;fcea}xIN%jfEe>b^({ydGH|G-iHt!brs z$f%}^N0mbzwf(}8>>mRDkSLM&=!E|w40}CNo*wGM!lihw>hgI*Y#HK6agHy7qQF%q zH!k}^@qO9*+oNSa_zW)lD~pnoGX8qzr~v(?zw-K_daOUJ;JnlSal#%d_BMKNG>{dXZP%eTq6-7?*&+ zjA}X$E;Aqy4ShgV>_;IIYLwWpb*M#XQ80RO8m7Vb_J)<1v<^pna~N+96t~I%V?4-p zbZ#YoE61Du-BF!H{>&cMh1 zqD?cKm-tEV?gf2*pY~9Jo0AL)YcjT<=?WG zakMl~&V4NLd~EFL#q<=bTu*cpee(sMsePV zbUovN8i?8NqPiNtu}*qfJM*z^Yx|Bcd=6gCwaa6vXua~PmE+<)<&M4*_QIC@%ss9M zjGXS%`0He%AIO0wQ3ea|$fK36jdR{+m#(|ojacO^uea9=f0~Eeh#yjXN#UbWr<>JH z(GC=DbXp*3y8pH;v9NN2XgllX5+(Vkax43;x0jZYZ$`aVtc{)jiz)XGYCz1x>jR;E zFX5}_LY}-PWU}z>X{Qj{p>xvh*9k%Ys3>R6U)P|ot78Iod(kvD$Z zA*74Avl-XTehG<=Zm8OQ%Dl2R!rk(BImQ7Lhu@XSdHMKo$^M%-Ya3kRSl&^}XuoO~#_q6OiGr(`W$P3S7_&F{3 zRQonr-4M zw>^S0uvlWPZSnj7e9Jdm3Kv5nfFjf^3FZV2a6Jk~CrziXK+^sU1Yj?Ao^#*@ZxBKq z@+Zh1{^Pz+06FiNWL?ry-1sHks8USw?9C_Ys^) zR~8bN&I6zu7^k6u+0O z_!>C^BNIL-x+9%6vgy;OF+C+lZzRCh+6yF15n( zAwOC;#b2MVBWg%>tyikn@G%BD?pr!&dz=6+BBF%i_i)U-2994NN?DmTxgZl9tgxr> zx*$I1~K*Yo+xpmF(%o;>9`aErEzdr+Mcau}v^OoD<0H>=z351A6Yg9Jumq z+Bgbie{B=qFQv&&|8rntN^^_Ig^G|%W3UQqq~G^C>Z|9Qi#Qu?%lYlNisly9VF63x z5&7IsLvIK7D%DLk>2tn05Qs(h$Z31X)Aar?9x$-i zNY)1|xZiNbb%i)K{Z(#N%h9KM&V60xZ=heZ@q;Qz~Dei1);W1g)c?^qmz}= z*5&|rjt=?xV1ZxX{g6uhKdgDghnJd`%1V^)S#I%z#TW;)6aYJ{2-i6fljTpU?^9sm z2Mlrc5OMWSP$b@<+ERs$G9740xG#s%ukEKURZoc+jbtOIG? zXtnvMJ(?d9xqL44giM{6yaBLdfOF_V3zkFbto+p-dd>4uh+k3Y>{ z3Q6SXdv?^Ih(ko6z#L7~9K37$mUOB$m6k@+?A6~)DErS)Yn~}zhaZQTeb9L|TB=t! zFd#I!XLiJO8rajr`j%u-Gc?~X-@3U|$_99U^raOP{Fl-_57zaUrIXgqqV{(GYhB(l zBi|+_T2JpX=P@WDa`>=wp`x2!GBY$0$LawpXaE)CFwR{uMmk2frBIk4K{7%O7ZVdZ zSEJtQ>6f}<{@0!(t8tdIef2|wa2QD|Guy1VWPK$lZKWSIl^u}OQKTqoa8@ygO@Sxt z%|~b$HVQqnbjJRtiN&=Sd!aEPT^~<#(MG!tI+>OuW^~I^MwN4GfL^Z7dp@68(2YmQ z`P*Ce!{T-o0(UfXc5|SNbicn$6Ke4Y@!}kw6r7kgidZ^vL|0g%*}7=@afao zj~;zpRp^RRi#U|J$05mP-jy_JiKvr^_< zi}Yh^0H5{w#p?@W0kmtQ#M&gGg_LF=nm zx#2V}A}aVM0|1jxObTgvOfFUS|IJaHqUCxZj42L2KdvsEON9r7E~*#U{3|U1m&fid zwnI0AZH&iUa!Ov=FmdR!GdBJ|FohVuYaJLh%73RQaL0d?(XjH?(PsQxVr^+ce^_|=eh6selZ5kXlV9YQ>tp#EUC91 zZ&z~$j4Y-HS=rb^9@s|b!#~V~|FZrw_iTs%ufI~um@VG9#4-{%%fQ3g8=v?5x|6t_ z%jGug`Q2W9cp{}xgMa|lGC%GAw$BMvhq+ZR6zWSjJPnGd+%8C{MlBnc=g9Q zYIC@R<+dBqgk)H8nwE3q@4Tn$Y5Gloenb`g)1_>VyHJi7f;sWgR?TGE?{y=|i$W-lD%#n8(Q_ z3Y(EWNpNOtVtzd)TElYrUx#h-Z9oX{z3WG43Mwxz4Xjs>5KtB5(`eb?i8kAb7Nab- z{P=UKe@QJ{O*t~eUZkP4v1CDYKWH;RY9)XlW(>`H>>K~Nv)G|MC^Qf70yNR*P7l!( z(Sd!J(em>EKs|Ku!FZizv5itICp%*T5i^B|R~d^+&Ah-~YIO!T_?j4v^2Xy!-tY5a zAbtU>y&|o3Z;Vbqq{_aSVI$?I=rySA2S@e^f@E?S(b-?GEVQr#RDJ#=;&Oue`lKHS z=Ee)E>b~!M6fDW*knGA8;&#A?l;2Nbccc;#fAEksN5F9!iCD}kVZ+(6=ABXO9-M(A zWlew+f%ok(|pZ4GM)4pMC%?%fI3Nm)R zJr+LLv>W_Y(@FD-m|D3az}53D2xiS=nSKLMz#8GcOmr0ZD+k;5i3Ry@CYgSoHhIvp}2|I2}#wPU1~6xAP#>a2Dm zfji)F_Qo0hMQN#O{t70PValF$5msE+dx;lk-^0fhjnUsgwg`-@EBI=^JS*O6Vt<^* zy{VO3cQg@@y~;m5Sj{#naR15(vZaj|XtWzrZVJMoZzYe&&o^K=${~Q|ADuSou-p!M z*9deun0#)OuY`X5_v)IGlAlI0Y>QzKaM&Q%oK8exkQ~=U)!mhW(ncgQ61WJ2|6{UA zr2y(m?IYMDK0dz(il;u`!4KNVIENiWwWB$=NPZ!+_lZC7LS5X}+a0^n6X~rFd1gJw z+mV)Mj@RChP*xxBP#>N(rSn*6)P{*2Z{#Yx*4OM)&yU`UY^Br&@@`~ihw6otkD}w0 zBNRIg3vV}P6W`u%^@l5#HazTT*gW4?pZ}8ftnFI|h<4rH{!!v*ppnZ4^STN^Zna6j zHR5lyV%Y_NmUIgKrxAk9Hrv95r38E~asK9A@@39B)O{zua-zN~6X(A3Xk=rYzm7`L z|2Qfsf~R*_20Fyme`C$a`9y=h&*I5kGQkQ5zS=gFl8rIDinTg_6bS>aX-pZte=KEt zTZM-X4W2BN^=(VBvpvsM+m_@sZ9^ktBfH3?=vSZdOE(0=mES&&rsF~FWmSZltx=G^>!wK~1<1C2+oK!(!5ZN1(CyCi^f^j*ol)^5KcbPl!V# zT73`iDP<0mHox9_CSv<7RxGcSvOeZ0NNR`5MAuk{P*di9?|slnGv>X@kZ7^=LCQkqI4PfVO31qBIf1%tocy++jb zCJpBOp`W%=$wjSLU&7L@Qu%!5>$lWVMgNJUR%oGE=4@$^`dFW-koZ(0?AbA?5Nd1N z31bcZTK*@AV#}ijcT57`?QC6%s?e^_Z)TgRR)GDayXBJ!+L#$!f3k_IeM<{I6;%mT zbi_<>NR)#3Ps$%QPL`0#6`^89%(?G&#_RR{vPu~-cNDiev|GSpzSu-6tO6*SAc+CF zylKvvhn?Lp>Q$#^8^B4+q5k|P_i{s)K4?Wow)5K+0|ym>vHGjA9x`nYK%L!7`8BIz zWYC`aKVGM$fh*+o(nm=uD=Na1<)cfKjf$Y0yj$qldZ(bE&^>~M`gv}FF|=H@6>oky z#Fnl_#Bs*ic@5CPRQTA}|e%V?!sFGIpfz^_=|i^to*XH1E@D{HrAiIic{+2%j~ zM<9~89H7%Wu?QxEFwqjPq8DwPG5+Y(U)8Cl7`YVao~uR`g*=xhE+{n>x~qJ>C4 zF;1XLPtYz5v|4MMKbtYVWy8A;rk$%cV2x68A|bZRfQ&?aeSt=V^~HjV5*#kA z_7;}lOK^V!^@wz9d zqVpn=cwY)umNje<;HQ#`cqOU+fgkJM9zqe_&?N0#ozV-Gpy%*%23;ZgV@tS_l^fbdGkP&`#TO$2E5XEsq`h$(17sOA-j{_S|Ot(T73ai@-qL z+p^?Gnk;OI_1h!$4ZyRcdgozO^A7e0o+!|>A>21lCWzrPQN8YzJ1*@W$z<7j1wsIS zqSyaCh1`M}z{`ERV&z`Y`JUXejh{_O7cwiCL7^UmZI4T-gcN%$*T6Kcak~Up^PGsT zTA}OHs4_5}s7W45GW*#gYMMIfp*2Beed1l>NawGHk2k;J$9wW5w?x%1Blt)$ z?^bNgSeT|6e-RtdW(OxRxNSBU>JCN;);v{Nt%FrZW0i+W{ehp;2c}kz^)xC^a?~qd zu4^kdiVIKj`2I5JD9)rImu^dl@1HQemBjw|AS(aEp&vvD7@0{EjW7Nl)U*F=d{6%* z;vtxk%kf-C?tQv+WcjfZtNpH`!GrK=IYyj#BHBC7P{)8`QnHt-o*r#)gP|;PIuP%& z6{Zew2~D~}K!@KR%YsrwS3Sro^M z?V`_NB_=bGK?Ol6=;{EhO#8S^Y(s}}NHt8z!vvRtGDXBf1kqK}wo5D6llaZBxEM^n zj0C;aMZUbYWFeR&fL0M5aaM7bBze_l{Y&8W+y@raVq8i404fKYJoCg4M4Jw&DRalv zjiWGj?;%H4*ww)ku{CnJtv4V`GSYo06?j4g$+%L!p>7I1`EmNy*D*vZ83zY0#8n8M z75p3n#PVE(SA%0tPhr+~WwG|nTx#cFQLfLBEFW=^RlnB;bg#hPrwLIES+l&!iuf19 z(kB2k!VIO7QV#aYHz_+5XlQu+EI85eG=)|$ASgG*dKy#hwk z9@zU!96y68nOs3#B2;YZBlT4n*moJzAyhkm1&ps4?Y{LUpf%MmnSovilLsoy?y!K#%cC$UsikFTg2(O-wd$-(*}=Qc+u;J@^>RfR!6{ z7$m|0jP0)EHKmTAoRc8OJDzb8pH}A?0w%l>rYd{y+tP0}bU9<-f_22qw5}0l2$lq- z%G@Un<-a3@?XEg>CMc^@*wP3aq-Fzh0F7l;-d0#*O|h1XC-ExlTt1L$MBMJa#5!+F z=k?$|72m-@#O+!4p}0}8vd8%D2%k7*2C5A!E16`}JcP3+B58*FjqF@871}Ugpt(P#902I zwB~$7z+ktpqpE<*e}As$bo!8JVUwuIMi7926=p$z@yjqKO%x08J~f`Y@{D|e{YbAx zwM4Xq$@JlLl^Y%yOZ~7;uMR7nSOGF&36SG^M3S94MyitIdjZez*maJU1*VM`qq=>& zzE=a~V=FL-@dPQGG4k;Mz>|Fj@ZAOO50J2MG+mlkVIE>5*L(4V%H-r^5(C5^SIZ2b zO1zsYAzS{8->u!xx8_h0BaU@g2Xyg6!+MGwy1s-v>NEc?qL@GyJSAT_QH!v6eQxd% z;H71SYOq`d)27pa1g3G`Ja5+^WMa0sP~B!{*W~W%QZw++5c;3I?{GP!T2SqY4Zxza z@_3_KscTV`rN2_!h?c`hlD9M;wjNfvdg_ZRDmgf7 zYtnlij|6>qGWxtbJa{)y`Rg}snguBgxQ~D#iPuv;r^*%wMmb3cXn$nzS2ZCa45aWz zm$$GfGSs&B^cia8S@yCjUQ=D2pKJz?u;&AMFWt1g3gG=7+2ip^I3MT~ zkL0_oqQEaLH&7z?MtC~vy#4gcz&`0|ad&u2u^ROF1ijCm`DhWzd-roIlG3%Jq9UL| zqq!h1=42W1)ONYgjAm% z1_m4(td!Rz0*JG@q^^R5%`izAtv$6*wQ_Id7AsX+?o~WLt~n|pA4-fm_LwtY5gx;} z-{J~=UGSwT_ML0uW!{->ine6Qlnyx$UbVkn$<-N8f~RYq=%q`ujK^ocMIJjxS+2Lo zDwopAUnNyO50v6RZ6kS{+4?n$nMsg&Bf3AV-FXUlzRXrSxA=>Wex%jtVq5;KrTLsA zRasvCH8hmyd;O$B0HLRr+d*oEGk+8&!QvH&8^@do1hNV5cu7Bdh-*OEx0XLPsV;Q) zAVoojoO%aVix+&VvLzAfur?)?b*0RY>od~5!dIYx90-979=FCjCgS!y7(uq1Bgwng z@?tr=*8O5dQLkyM$G_+}R4$O%`%21I(>i-1XzDvn^>zk3Eunwd#@<_Zl@a5O#N^Er zxF*ir(3P9OJS6Z=`&*9UqmPZhL$iWvul*vSkr zRxK?*|HA(5OV1RyOaa8?Sookzi% zA|fKF6=|ZxJ#HUg{ffr3M|H;SY%>jiUF<`?S-x*So3A%uTWapYw{vRxD3u;DWJfsX z?N$x!T;CnN(p;eZLME^J@?5>)rYYWF^ll0-X*piR&>uz9 z4Ij!gJC;>jZFvXZE4$m368GwFi=;|dWNIHD%0-sOjFJ+R+?iuLSti|z&`v$9JkF8T z_yn}-vvKn^)1rjnW|ZFmN+nLO*|{h+uj>3m>svZ8sJFm59i8)}O+{k5e|c+J2iMH@ zyuD-DuF^`s=I$f=;_~wf-EUSox;j_%jbV5TyK#BfIo{D6C)02WdyAS?0N6uq2^VaBjmH6CKJri4iq;>z~ zndkXjXmwPy{!*eyy}#J`$|OB}Nm{@yFnenIwkTZ$grP^wwhFj*ShGFZ4^5Iw> zPY1O}a;1&IpU-FwTCEHWo;=Gf>s_E#9rUaz(FBx`738k5I5OVB2AfUYhP9)}a94&J!O&G4}o zlRK0VT95%9^3L5Ux4^jDDUvlNgU$s_(a|G(G5JKcTsK3PkRl=3Ayhjt*~BLH+a$*8 zOs!55{|B9Uz9;ta;%~1ob{s^vb>3+U)9(>4l|d4$;D+2N?$!O#A5Yp0R3N#0$pQ@( z7#b^K?N+Gupe#MKjkxeWU*Jb14v|jiPD%i?dw|3#ULepF+ecAQiHv+dl6XSUI|5HZ zFsm28bYIVT7f_s0&L4niyJcYPumu+>z`c#ryHO`GikVwM96b>mPOmDxP1B+$5V0BC zA;dVV?W9c*3}|G03$9@e)x^JyZDIwT?}o zp*LfQ+~CLV0}KA41!+mRyY zEtcnQW@^uU&5s!93n!O8S4S9xWrpJw807*x4NX(NiO!bkJKPVdE>(FzQCm1;^oVN* z28yF47x=@n5?T^@>1(AEeitv(Q@|UE;#X47kFkhv6dA6Ug{F*Rw@aE}S>v`^%2!Ek~2-{&+~THkIC?Z;3Fb zKM3<#$BMIQWjtgWtzUZ(xSS7jP*(1nDGHv%3e`Q0?)o_x_X&0WS=IuJ?>eSgtm4r_>0 zSdDU(F@2>HBEixP1LIBC{Z9JEr%OiY-PnLi`h7V2dNNztXe#@}UgiUyM-**}10t;T zFE6-d_P2-DXuiN|ZJmjLa{vl1wn1kQyhJzPA}r+bjRZyx#!>G(*$pK{NE4> zzRcZkBE3e^i3tn$+KszM7IENy-@rtrxxTrX=6~L5Y^r?QjYWv);C3+2f4h8GH|Q<; zwU-vLp+||^+<9~2c~SOSHlF=l$oCKmSwj#p3Pxow=Xq;OBj_Hop>e%3-+A~IQjqV& z39>M+^J%#*V#v&zX!5`Y}O3 zxu}l@Za9Esw}LIMRu@4jlm+2}0tqHahytmD)5BMf(wX6MIls^Dxuv|H=d74t0ij>)0Sq|QE0}M+6VB}O_G5b zSN>ZAgZ%5=BmRESpj1{bJFA;|Z%>dM-$SWsB@_91q@uSh@cv+_McP^-z+6NqU!Sn1A62`L-0_KL#S1|$G$Yw zqF*?}0uNds_qn|M6_F+!irCJL1e%8tI92IMtj6a2zezw3?W|G}kbx**ueg=KC z_RtMuazZ65!!I+UK~oryWzi+!N9x=(s(Q)6hIrwDk}bD)kilLbx0+g(?2KS~*^hvC zqB$)si)FI*(MmMh5~a!ycc~vbG4kS00+OT5lYECu)kCG^`eB)qrs6p5w3KUd{u}ActrA9Saz?`0avWMKps@Kl8`B=tG>y()OX0vBIG(iOMuMIGFPx*c=+mt9la>= z3)@T{CnYzrmlIrkGw1VJK};msPXe%&%nFV6ov%M2RUOva-ixNNHWr-3zBb@UP4aYd z@Ky%Sj(wu8nrt8Tp&tHxVb#>^7}KMw&=nSpOYt6zXoBp$a{T>jI2YXZlXLeQ_s#W zjLdntsIxP(#7Ma|o0TF&~BTdmBF6<4i7DweZ|l+2|h4&Cb2o;COedWM;;F zQym^0Nn>wLGG?gGtN~pKRCw3r`T6m1PKq)M>)uO#u^Kp$P;8zylE}-|_IxEwyNplV zmS#YLdugF$r;q$dnw2?`mM{U0Q_sh9O# zx`=f=-@-lRd+!?w+>}SP#hA%K2PvuQ#>P%b{7P&hEXt+JsIF=x-H7Vn8b_X{FOYHvh%bX_pqm2nV0&+~>K%O8Gi~C!9jT z>k}b#5&O#HpRJsy<`g^=o9$T189e>+IlQf)+PCS zbQI^ECT`9gb6`=_>xGz3nT%7!MH?p3I$eK#t4r0$S zylR>U^-x2qFCy4prmnYO&>>Asub-LC8sWgU-(XzX)E=_0MS#kIGx^OUoi9jQZVKJ| zC~$2PieZ7TTvdkCz@Ei<3p83xrvzs}$k9D6g`6HB?(9(z&`|T;s0I3pnfR+aD?ci+ z%}4e`-{#l*l#N%1ef~kYWBGkpRISqt3feT^U1o7(ANb`|wxVN%d>(d}T`v?wufvbv z61KLxRh^{VZy4z4MJ!RH*)er{o2yj#Lzy^b*ba}^WTF|^hTl=p671d)<;8W*C!Fun zWR?y>K5DexE@f-a54cgf*wxeT4m_wHgl*NzH||&=txp)1Z}ekbp0GVGlniFF&Rf+@ ziU-P0m!OBLyjTP!(5r*uFd?Ao)L-aI(rUZ38+)X1u=WiU*VI{7R4x8c>msLbx zCPyLW=S08CrkHbn<|I?RzJO-CZ;R-7>;9@}cvo>#Qa(1Owd8qD+Kd^AfTL7JVCb|x zl-b^qxp$^Y*%KL~sp1Pmf_mymaLQXTlN*IcW%ngFlx1UmwEn2PEoxc5#p&SvsNw8@ zh5Gc~E383hulU#(xw9;7vR@Jd)DK&MU6k}}PQ#xIjt&jgQz2f%M|KeI49(tsYOarm zouJhMx3gFD4`eY?w69A@bh?MxP<1}MHX!dwm~JcJiaeVOEHhpkeoIK8Ngnvw%$3h$ zRL+Xk5L`cMyrq=C+M|KPTgSxVO}EsLr|}&G0@wU*9j^ujCMW>(dq5#107{C6F&;qT zIjzRrPz<%5zeK?w=8)@#F;}Q z&%G;1bRECDb$3PDI1puJ9uQ=J>ILD?H4B^nQ+{0~AfxV2@WpO{HlB?jwZZWmqlR{5 zMRTO%!0`rc<=$@h_Iv!L@qgo@sbmWj`T{MKUEI^!-P^2i9zcD=^1j_vKE_S&Y*hm` zGUOwRC&zgQsrFVKLx%_#97{&hALB_ht923YRehMo2+=8WNwst8AA~>U5csp>9=T3 z=x}nr_Rt}40rhUU3>8`wk2ywPaDua;K2gEs;d*D&X$?**cC#z$O%4{X;jqlwE8Ywf zvZKq}*dULOZeJ10&!YuPp_a<8IZHz$UcE#tdP%}AA(l`#e&gd#2*fEHM>~nbw{+eP zor7JUod3+`L4T0KP;6qaO=L9wIsaWl9NycD<}#g9p6gzFZ=E|eHR@P-cwVVp8hR65 z4LHV{H}+wv>R^@<^6vR^kCjv)GoA>E4H{?P_{PW5(}Sqq#QkcJexK8wV57y_6X@}N zGp+Ymh3nkM%O_$SR^$NS@J`K|(H^D<+MDjcy-|4&`nJ{Lq!yW<*1)J=7b!2;u8Ls?84xD%K5xk0xK7ynEoF9E z`^sjtND#OhW2`5_2^&N{^6YBpaO3I3tYgL|pSIZAir5Q=p8@?Jae=N)_7(+Q)#J)X z(U#z%97u!r)#%&JIX&P@Z6@gSAsWe933*E@$e5UzO26zzM=fLy?atkqBZutDqz3Nf zqmI;6S?gK@F{(G-f!8UeKrpHbxgo!EM%-RH#rGK4e1bS#{w$M|%HHT*DVkXm?Qt61 z3c-ebQp>I556iQ8RrcHA#{+VG5jlIs_yMGYc8MXRp8y3v#D6ahq<0l^6<3DJRuQF| zI2zG}zdIIb?%&J@+=)L4koo<;x5~0#!w^g2BM~8F%K|+cn$PRC^qaKewdb2QLE-vK zy4;nxwjQe)X;1bB_xcN;`^nMz7w5Uvh5)VS{`F$L2NK}Dd<57?bQ(y!ffQe7yhoc$ zG|~M{e@c9;A5h$aLUc<5^)E5#CmNvwLL9;$B^Rx;(}Gq7suU;#vD%>w5~5m7#H7 zb|R8k4;*FJ;79STQh_~D^2gjy(6L8Z-}lz2(YaBFBKmPBl{1cGnxFZG;T)v;Dw1F& z%Jhx&ScP#2e9euhbz|^i#Q=KXAj0b=+2buI*d*^G$WH6w0NQRjCEuKXT)LEqES94X zny(uvpy5?AM8sV-v2QKJnRGl+CH>reDZu4E9tqvsa`doom+ld_^I=Yqie{uxlN$kw zF*8<>ShM4T0JQ1WmYF;Ho?VB)6E!d0As%cd z8ded$+2hZB7<&yqVbrayXKTYAPAeFH8B&c}Ls;6RGcEKkwFx|ERYNy7pIIX6B0~Pi z^&yIbaCW5g6;nRN>ZKX~Q1+snHov(ttsYWrVcy34{Mg%5{_YTon>zce!=jlk`(s}$Rnd8EIt7!KThE&03EH-9!%bO)g%MqDjGj~`f3TKv z%(jYSx#(L~X9cujcW(VJ zv-7u?IsAQYnjfJRVLz05bLex~Kf5>1@2WR0p=Bf9f%`qS zm?|NZe|_5(42p}wgk*89D0KA7^gWt!zuO&UYw5;0&i$@rZh!8<&QEfbOk;^Kf8Sol z?W<+8QrW@R8}#;Vvd|^?Cl*jh_hEf0mi=E|0@9Ora+ufb#ZT;kgWZtk3_5$B%7ikB0Y z>QJtH9FX-Ru}cXVwwgqLFbZ#ML%5$-Y<|Gq!RF_n|v_(3%5Y8fAOzwR+D z6ps#hgEGLQxZ{%#UM1i76Ynwvw{D5g*XM`di5)VPZI{^8m@|`(9WU}Thc<-2-7mk% zQK77oxZ>x$z51_5=CF5%w$;4V5O*b`?+XO^g8L$W@aN1IG9sQxmbBg7+9+pSjCh0i zO1}h>RG)0nrAs`%9kCd;IR@I)*stoO5$n~B_?_5v_N__!`nejr%@ulYt1t5u#TH$n zlaxI_E0yJA2|=9T)+3O*V~PSG|7VS<%IYq=zdW z^FX$Oe}#dC5FLuqfyCAOHp6@T;>hZ#glLgbdZK8xMc54tx=r#rTHTNroKvFzY<5DN zFA>A2=qXnE65c?sgj1orjeB#4GzD>Y2BShIVNKY}I$EBqf%#eYebIu3QGNAc$q&)2 zmbZ=*FzJ3NjoJum{05UY33tpoTer9r`V10`Qr@LwXDI~ht!H9WOG~34x{1Urx^Kp!2?n1Uh+=kG|Per8vClTQlTR}~j~V^lTw-$mFURU>UR*_Zl`&rbCtP~TMb zED=2Kv)I=zO{Y6rexH)k5zEUgSeQ0@#1v}nA9Z&s>-{lmrCsQ=~Sm~g?<@bL+N#?* zeTr;8DOjP#UxfX`8%E*RC3zNK5^ig7ym8z`++~uOsdo+FiNE!h=@hal)o$@t=imj| ze`z35YRJ8a9`P0`UJz_Y46!fM7{F0gJYKmK-2EWsl41hmC%pZGiz5DVT8Mn7OuLaL zUwCHxB+h|2B3#_;o2c|@O+%xJ5)!}~!~{pHqY*&}_ujn!lohYIRTa3DoQ?tJ4LH%S zTM)yl(BxHmQf4tlHdh$;>*L80n@?@=gk!-A@+uHiG7g=S#;yzeNEwB*UARN~Ky570 zLiOD~cdo&bJhlAG*>A$Ao9pXoQ0%c?lLc+5FkQMh2K{Q@w?g_)vrZuM(>A@_aaQgg zs*Xo@t;Fy>t;ku{pHg<^Mhdg{Ckx3=u=Tun=f>&`ozV$&7E_YCCxYZ|XTG^q^d9PD zef|m~>d01PeSLLyLmK4HVg+27MY_+H*_Y6`f=VO9ga9Y^AXw1D z!Nn~=CTFxic2tUcQ{5%_5!cyMCT{tz?AaEV( zkYDn)xKIJwuem50PWo?~5rhI(x)sbCVYP?o?ILh<-m=lSG7%eh52nq}39GbB$Vb-ai9U~d*(P1p^ zp!+{8wx;GPOQi`N@9o0CRG}W$0&3y3x?w(I%QXPXxEr7A~{`{`iW=&K{ z*p@0K6*il|Z0$5<@b`EBj__KH5ZU>Y22vaCzUD!4CAxN?lGFH{4$s61CJFOIL$-|b zynMjpbV&o?V`b+j*4aRnx3>E!_Jh8}SJmh}ft*ky7+||knk*}4#AkPO^XG`HX*>Qh zn{>;y0jUgO&CNPJOXj&P{YDHk&-`aQ$U56HzE~I|15HP!TWiy4NUplO+*nxvT7qyg zAu)%vWMnT(eAynL=%tIP$I>jj%!P3fmZ`G6zNk($hOWUQ07@r|kvv{0b5e%p2$jAF zfXGQTHi9@nGmq)%Ja1mB%HCuqf#ck=eh4fq_U;f@5|qWp^~KdofeyXOQJ_d zMV(SHgV7zuqxx0bEc5QYcA8Z#bV49`37!EHn#5Z)64hA-HqOQ~PwoU7lf(&6L34Qwpg@;& zn=$zSYA|G8?-}6W>vs-KBH6*r%-OU#)>Kf_$^GmRhgxpYkHSAK$ijr|fuL08yEsfZ z>fUt6Vb9EnDCJpSh6|lf0;&fAY-Wv^8@qvs3D5j<#?qMU|>jPha8F zd!O@?;ZoF7{$NsD0sE@v`4@FVA?_gC$coT29xL`p=cIv%3vOJJQ;RqO9rbooM(Q$J z1|;@^EmR8nslh?a&oVOSyZS#!tlW6m*aRI{t0kikZV5O9_0kY`I6;K=?`+C*YZF~u zq3=_Lc*i}JseYI;#~!HB=(ljn6r`d;Gp(vy5#(j839dqkGSGbbl=FQpfi_uu=h;fl z2MGCoVqJkeje4sr-_7^2+c;62$8Q=?-bjv^%};Q-={J67bcK1^%Io1G15G<_cU;MT z3!kI|7-J(OURj`NUqU7eRE8G=fv5WjzWz-k|7H_HnEQY3j!@PWL=x$L6Akc^C{XGU z104ekuT`}=6zP>Nz4>|0iiV0!sJxtPv!vQO0R%8g=sG|O?+b_MU(i8vy0WH;Uk9i@X;F@ss zAuQ#fL509!yH2-n!h~~JQVxW(ScmpO%-niOJ1^w@Q|>TpuRDy*LZ$P~@y8#~xr>$* zS-a1ELa(IE5P*emH6S&#~iCc#$M`%%MV*Dzw`~Co@t+BQlv$l*<7ss1wVWU zNL6Z`v`A#+JY6%$hV|$2%()}HWM!&U4P-v~R#!sjz_fFNW6`#;VB&Hd&5gz=Js-&% zWKTFLXn<&HTOFWtKOlccDScy)hzTE_n~@@qbE1}%W(G}+Bavztqf4U)2$$|eKpzF8 ze2J%TEgHW??DrdjKkK%ZKfYl>vRMV(xcMHq>{Y8xomVNKGQ z!fpKK9V-P@SytwUQAGV)l)JZ+-ETQ!8x?X2&$~8VhHh_p!nAR&yETy_Iq$PBzxZ#- z4DJDUuu1M|A;RyTIT?7#0dg&O$}n~Z9{zcr|5u+7!sH=?D;0vwa5ZQDaB0%H@D!TJ z|G-FpD{{im$p027Q`b3?jsHEd62gB-o))8UlF#GnD-9R%QZR2u4*;C z#JEKhZHzx~)nJo0{<(!h8(ddSEdjziF@Qr&S6>O|-$MqbaEvl(O?x;pp)hp6f^sRU~V-!UF!W233#O)*Xxr@O67$IWiSFQJUP+9~rLr3Ur{c}vvyBJzG(wGMYgsb~J;lr_8P*lqotF?K-xNmX z8RtdDQj*eg8eV5Wdv*k=soW+6vHPd`22I#XuG0D(wzpL2oUWq9EJDr|aq*mhG(wiP zTvI_or3=odwy2;$>Sn93@+6-&RcZ410l}kn=9fVPF1L7Y?pB$Ca^Wl9<0vNa#S2nI zjnEq8s_Xb1h;yfokiiz2V@~R4BMCYcoTgng?3i9`K#YkyXRPKPwCAhSknKyI*}!9& zLI#ABcSi3dAA1-zv1hEm7id4mzpm~taPe>D+x0;}fZKaN8_xC)D;3G>z|xvxF#-ZO!DBXI~{J{A8|^~VdvO*Y#OK1l(Lzp zUQqY5#O?+o?xQE&xRQvFKWEi0+jfV*OJqU3eUAP`OgPae?2O1z;4_jC!p6K!5&L!3 zZ_AwDii@UnG&uA!pyDqPD?o}Ea_~g$g|ID8c47O_Pj%5;S`}$JwGb$ zO<36e*tdokW`3!sB5(82j1@rF)?r%L0WlG@IF$|@d_sJkZX2SuJGlJ(xFFnG)Rcry z+xx+YD@csIXSi%YUfHtnd1XUi*wfw39HCRrKyd#6E30wsA?UOtcBo|bb*RLu{RNp` ziMfx;Z27m3MBZD&)XU@ZHvd{7XIVy*P4BO!4b&nO&};=mv(xLdi)fPXZ(t&vVADZ) zBF8^GO&@JAcB&!=Wgg9>SqE zy1Xc{nZAcsI9ec*T{RA+ey5vRv^Ys5T?0;lKRn*xG z*|;W~?jvI4X%eAMOn#bgUt`TiHkJFv`nS0f zA%1eNF_CRosX+(X%jDHERs#YN^FDNaYE}t{hPG!Jtnlk;pRRxPLNkB$LO;J4n^>Oe zh!)1yneDll7G=u5o})=^bblo;{OnyH`@VY!&*bFlyW-ypZ+WQ933c4^eJfiF9uGBK zl6FJ?%g}~6Mf!}wPNp?m--{L7%{m{WjNUxr}Yj-$vBiF@N!g{w0iT{J7ZjA9*8DK}W_YY4C9oKk8h7-ne zm*@J$FL+U0drP8Jeo5Kg(ZW~kZ(HF8OL5y=5~D7s99)Q>T{{=bD!8_26^$bxa>co1 z$@X^S<_50m88j(UV-!CGLtWu~;^$W$MZo2C$Y^PK>Uq3#d=bNOx7)94Hf8Nt(csn{ z9v;n)i4n4|yd5G%79^Ag!PpVt=;0Lh>Tf9|F74m?PoJq8UarV0Wt3KyhQKuoyabih zpnZfB$>Q!|!`k&F%VP%z(%sn+NjvI)juBxw=-dW!GedQ2zsvyus5I3yxemhq*UkSq z#U{c30#u0!i85Sd|2^Jn!~kYHDfmy|QUgyfncprlw(NELKo4t+ij=?Y@8VjvOjBY zeZGs<)W$1e>vOLyulR9Co&E?J{=JwogDws^GH$D2rex$Ci5_27w7lwQ5v&&)tr%}P zw*PuAWk>K*4~tfQ5)mf%bv~+F3O?`F5ZHZl^I?Y@TE*S6koX$1g~=GY65jxdPEE~% zBawXbx zZuz1KU7Li~)0OQzH;&-Bby*IBr~yVc(bZlp^!@@>&N>sz$0%Iar}qb=jfhioqopQm zZI9N0=->D%A6KNXv9R(Pm4ZtvD)In0i!bBL&&KS{XcLRL1Tgr$E`BBv%uE(_(JPgqAaA>f)yFMj$}|E=UG|CD1W zfB^Ksc~}L;t_T_ol4CVs4adlO%2js9fEk^Q`ts9_J|*RqXRK_YRA?ZOd%;(y@KCaW^mEF+8^VgKS{H^NVL9Bxi*Dm%5{F?B%t7Rant zK3W?|;yk9&*@zL$Kcy$>COrl42{79V@nH@52!c8VB%pG=Cz%1V<^DZvJSEcBPvq0l z!m%g!3wVXm*1n;!|{&bIMgz@$N0mok}2EP8Z{v2U7HLRWX9)H8eCP&k*MG zP)2$flsfRcp-&!G=BGD+ks;IBVf1XxJ6|kr5T|T2%QpkjPvu(eKgC~wWk0EQ z&p)A-+Tr0OCyRwL&b9|6K0KSdmG|6O*_2}W$ONx1^-@p!PC)r=5|%z#EY}1a#%85G zY_4sw@Em7BpRNn?yFFM?(F`h+N@&dY^njP7D2f3kS)Kc`8WlZt_C+u(Hi4tO#VC!a zAG5aSkqw|}ZhzZEE-5YlZPwB4qW0TIK#9aU;mja{@UBKziT}jL3APiy#Mbx)SG$M) z)Zon1+HaQdNwu4i>oTp=NWVZE(~}Ll-!4{Ln2TxehGd#vc;*GDr)DN31^;{0YLI}Y zEQl3R0;+GWRNY#Pk2K?|AluZ{)*IA2q$); zR>ug?78CqPXnks!?V;L~#|F)nvF8dv`!W-Q+5ZiWs=j|px2*C%XHYsSc7xa?y-|eg z*Qc0N*KyX#omX&!$Q(r5u4nR|x&{WMU#W;3A}cEQ-b1#qgcAo1#EYFzr_k5oi5-%{ zKsWj@{(=Z($+~kLJn4g`iSgq2mnpDb{N5yMQ>*;=*cC

Yr22j zTxtifH1=&Ct3Rlyemg$G2=i3r$A2){lhcSSfW<;7v4ZC3l01>&TW->YqE%bKBof** z8nE|~-zx~GcGkUFyxvk?D;!N#`qYCnQ`X}8SX5Y;IeU(6e38?H?j#U>isE zOM3ry6({U07Dk5m#r3r zwJY+n_-xA{)tx!@I~@FJCJsY34Tf-{TS=7no<0N4Zr8(L$p&!t=m+SkFWXFQXe!`S zwlrt3hdbRd^ixHq^ix8NyK-IU5H|us_(UoHvhRyay9al7mtaAH zyL&@|Tae&x!Gb%%-QC^YT^qOD%6#XZnK{4s!&3#_yY{>GUQ*O@YU|@5)QDWt-_9e4 z*^v+x0bVZOBSH~kb6QMYETR&{xmKnX32{Egc#T=9`=pgI{#@i)Tjz+lSu{EID7<~X zA^kB$m4fTExrHQ=Jbk_!82C^s$)$}}RK9NUsUq;$UVCh(^wDwxAbzHo&ppM%l51)` z7d@))7C)`$wE;pVu*U2ryWx6cr$~;S zle0X2H&j!%ysR~Bc3(37QOACrq!l1p^VpM;l7`PO`?gLvGjb;Tliw;0T_2@AwH#`G zaWZhwjM<030>@twl(+slKABNr_ldAiQk?&gCe5xL?3%SIC4$Q8200!{3O-}O(!<3jWo8{khgN7nZ2c$x{Of+1h_Z&v6KI->o>q5 zn%mAjb=^XFBFQ%sk?q1HN_l7=Ui!BbHnap_9o&>LL~>w&tS}Q zt_9HlLHQlR64;V1G57yqRQ#^@VTa}twjm88C^TKAbo$7}{an5B2mF?4+C8J>9HiP& z=x_?AnoQ4-i&__*Ys>CMB@&&hQe)hP2+0E5^Sbvnc9~9PNIi7M^B}+Uya(x8>PWE{ z^C7-DWpIP#r=P>y8to6&&H?BUkh;}=W9mos^IsKl_LmR*cBkPWdAn}}v&(57>N>s6 zo4gl2(B9+X=F}%Y2fg@1Be6GIVG{~?XMA_&Ir8!`0fpDuYKd{#*DA|d1*u%skv&A69a;p;VK_{JM&sN}aD^&KrO{7w7i3~HZ0 zV~QZf0)oy(*l))8nwbgEuJ~mc#sy=r8HSrH+g*op`FatSVbB+l2=!n{1Xwn=l@#~Z z(id#VbS$**f2p4STTf8pe|$FbfBIeyo8Yx^AW1DNsRw6}gSTuQ7yjpth;+L@s;ed->c6wPn+!r1{8F5^;31&XL5s~NgFDSH- z{pIP$U8M}(i;S+#76$AbuGZW+zqYW;&~>pL~Lk%$KLT#O=p9Zx)yNggx#uncJu@h3V*rEf%L9t~r16t=7390em-k z;TWO$*2<{%shYmVC>UzB#<`#OHN&J3(dfBSM~uxo1td_RXZ;gUOsR~X$Sw`_bZ2Kn zf|a@iUmeaJ)qgnC)be2ZGcC|y9LmbJK-H6~=Qv+_BJAmHh?#w0HyP=aH#Bq|>D_2~ z(oENQSTUW^i3nrVZ4>!aJ!CmQc4K(=krf`24bBhW#wt~8p85Ckq_goJhIi!XUBM$f z-!6+EAdVQ|(c*JXx(}gvTZ(rtOq#yCVnEVV zw7pbbv%j>6>&ojlc43Yro)s`vsd_S;@*5n3_RrS2AtJmS!`q2Be@nT?uy}5T2mCq{ z%Zc2GE^GIw!_t*hmKeFt_eYe36v(A?#Vj!|8Y6CxqP9yG8}-uU*MqUVd^{te=aK1g zAn>_g%kNBMJ6{y$rV)6hsrgcaAz|yqb9LpHDYdtl2ap&C(&=obcYuS~gbl@yQL%^1 zd3CQ2!z-=W6+?irXgy4r8HV1Tkp~?Z?MdG3-zY@reGqKmm5_MgQB&W@?yMXjgj5PM{UNfn2HX22E#xvlJo*i`;qa8BzoeR;vl_cf!RDBwUN7XlXpJzWo=U)t7NBP zL}85PlyC>26DCmaZ5nGmB?T{A)pV4;&-R;7YVoX_!zHPl+y_}+^4ZSZl7oZi%g*@L zKsO}!u%j;Hg_)XbT255fvSeumuNnILYkk5hadhHdmtkiYY%Q};Ep6}hq$={X`Q(ls zEkebAKWRBMKAgu8Zt3z#LcF`LWq7$1eqmln9IQENH`yhbs;i5uOc-M#2)ajf`EoZM zfN~O&o4kVsWd;RV8GX>7&S*uv@nrnTE*aE(7_Gn>Q=2#5oGtU0Y?9?=Epg0s=vrAK z(a2jbCwGyPdrfwSJwJfFM9qmB$uAiWG=lsE3v-9Mta~c@pOxeUWj*@KmS6K{tf} z4nI_EXfTd&7F)eN>Qz3*0XpC)c_k2Z3eR{w*^hr*0qg&!W6-Ya(dX(`YKC(A=(4VO-l}M75B>`n{{zs2`yq&*K-}z?doY;wTmLqINy6#qZ9z zYg7zw*_80O6Nkh>!AR~{udPL&=y)gQn9OVg7n`VETq8<&%)O<9p9y}p4VtiTJIWg8 zpUP8)f6EiG#Bi!YnSbWQ4-w{IWzClc36x3)-<9@;?V;~MW%0s@uG(5B0Wwz7RjWOp zb{NH}exjwkt@kD$<{95h&#mXASfG{aQ~^>1M7Hl|m^WbW*&&G`-MZ`=`-XU)N z)+JGm@-;G@;0O8K<*G$Fhw%NcjQW=OIsIcSeh;p<92m%A{FMn!Q^bDat0i58ZWMPl zDbiHq8J-!Rk`C1tOgo_Z>W=8*9JpvvXArM4N@ zyv0h~ua*TW-D4C~L%6rOj0LCis0Tf5@%qXCtgOWV-#VC^kiRMmAS!^$f=nMxk91DG zFk47e1vRe!&eqrL>0Cly;-a50taUT44Bi1u;K5AZhr`!H^cBitVgg?K+Dvq;gj3{5 zCkVos&j|&EwY3qqfT{m=2f+u`5{ncZ40udq@Vx6Eb>GYn;W;2b7$G%9XdZvh_oQ2n z%x_nra)%;wWDje@qNRm35rlN$9Wl4-T5>o3z{KW57kD%W?LuT+ ztx%x()`ED(IIa4isOHe<=M34TT^GRWL--7>WzO$ttoY?5Mf7JERnRD zmmIq`*UIR9(COY|GW zBWn*!8&7{ApwZIENVI5-L5I0NuH=sfvg$Ko{M=lHwqmtef~kNX@&c8{D-bcLIwY(tc@#w2Mg9{v_ zWrQ#<{~fuPdipup(II~R;CDwly3B;R`=IGYgYA#O#~5Sps{}p*MKd6xcYmpR3(<~DdZLysrlG-Qc*DS*y|ZJ$!EzqjIS_E=00k`NHu)i8(7S1S?Z$sD zr7kwnE&dx0nm|DMoyY-Oxk_BuyiN9F-Lg5^EMvL2Q`rhtR#=dczF8-VbP&zo(}=$> zK$7cPMp!?gyHeOl6($&FpkD&(I*YZX#1!FR=VTa;lTXG(n3l=J=_Up21VUBhoPpfe zo%;9x*$AssG*vuTFg<+A79-kt6PwN<>~_}v`ig_;W_LK%d%bGkZZe9V)BvR9IXeru zwi}+~gNOT`eD8ESWV5DwssS^3Q$_uI49SL3eST}jAdPtQ92kv|bc?=O&y{7q0jT1Dnjdg# zH{P&nn!cAgVg(kHT~z8JAFc{VQjP(~nPJs}8y&qnA42`W^S(2^Wy91#v}T$|2B5*r$yRKNi;bLI zk~e|jh*N)E@=O&Ci@CER`g^>oDW!bsbvvp`@~kYU2uT?lcmGj!H?3M`#I+U&FR$YM zn0}62lD&$ECC{iLSZ8|P^Due@5>aO!^5XKI^OWnbx(GZjBU2eFLn-uIS(mzFix12zN4EURbEWC z(J(@(MXh8SE&MBo<-hl5`>RAFwf7kuk#BSBIC97)I?q7M`NDH689tDNR|d)~VzrF8 zP`rixUVGK!H0ZioTC`qUI6i*$nRm)L%RutSO*ePLZ`*McsNJ@^7vhWCif_iz`+8r` zv@)GCMjW{>q_Vn2@ifzrNZKAl``Z%^Z$EVlmcka7Bj zzAEsAdY<$dvm`A-qR1(6ZJy(H?eKV3$+AGF_QLtZ

Y78nS)5eOdcDs~p9Orc;)e zjSy7HH6L-(sdm;?2!vxiU+mTcVom58tKF``euQj7X^=)mt&+?qq*=yRhNC7(tdSk- zu%~4Ssy3i5RY$!(=*_v!Dq7p3T+cM6obe!;@{zAr*1YOrOp27{MqwNB*Nik&|EeLoBx)~(l(TuGXWO^h%Jcuq>nOYk3 zte=f_FhSOZ(|&F0zMC*VQ%N-?aI;fU+yG#$ExC2I9Ujzu)c=3TW<_G$^al$EyP4*R z+K#Z~D2(8eAMlvbOdJ}!biGgm{9Sv~$PLva_v|UPyQfOK4-^%Z?#$fzr=RppHIo8z z61qJ?pJP)MV1;Fh*w-b7&6Wq`5&hs-@o}gu)xSUU4d$;0gmZAfb_8)?oP@x+DAkaw z*StMcELu?KwH3A20h zCDaLUBt^O{ps-K5cBsMTnD<@`2DVG7C*H&B>jJozg!f7;Vx-f%sp zBcMzU!x_!P@KH5_5?LKQ_%v|#d?kOkvlDMgrTFz#6* zFz}fKQJ4l#pQ0IGi zxPLle5oDUc#M0*3@LOYl)cM~L`4ZNmz(_!8Ap!9DN9n?utDLTcx7HDI_>J|J%!|yv zcT`9V=w_Ybzon!n*f!4jv(5Z_$OcyIzO&^sjy~W-VTfCD&Tn7Q4wP_~kR-DLMy(dg zN|R4O#m`YEn*P~vNWoDAIXL>yRDX1)vT||m}NbM`u%Go8gnKojXrEVUKt!eG%1h8HWScQ!jP5 zawa5(SrnsJ?~n@XVr#!*lT)Jc11qMqun_p(`U-O!qOsXTYzMa*GakYmmSjO0-{Gj^ z4w9w69KMT)_&Cv2JFMB*X8F1LKiUI}Ra;N*!D}$l6#@OY-y1D`{j#I`g9*!{Q^H(; zj1w#yQ-U)e7dbt`^LoB)7Bx)(`*(y3lc3#|D0M(JXRbCZD(-7Jmirhar|!+sZs|xg zR-~G+!UzgS(hx>*Bej`$U6|6N7S+YqNU-i?_NID+VR z{b;rtiSd}qrV>t6Nu$Ow#{aIV9kPvDq=x`kp#kTd;yOi&KLW;o<+!IQIYbSK;Cv!0GNA0>I4MoH`~)MD0nt;Lw!KuSLT~ z_BOw0$u+X3JN%=AvyNw-v(mOwe(%J2o~U`ryz^7MD+5Lm4G?kme`0UGY<5xl%j$}W zwKB$DywE=}(c`b%jeq(R^^J(56$Y8^;fLgt9ttRK))}5>lfrA%>NCSxWbysb9IozS z)Z@UP90AXz=B7&>T|zlSBP|VE6c?sZh0zc8K6%V(C<|hoAg8xV2At4%|MrTB z6Uc6yS=`F9{bcgvlT8jE4orPQY+ytR{~P<{{`srsaK0>*dsmj`WDBASd_tMbU(5#1 z74tmAknT~Xw{vC7(XBXsfV1PUqf_;I;w_(B<@?uqykOKp4upChu>CvJjE(h?g#{?x z*16IU=k7>lV2vVzfWtoJsqT6Vs9%OluU*0FFuVKvw0T^G+*p_wU2K-<%=K4z7&~}- zGZXGqgIe8iR9yZRcMIfSXcC0MZXe2DH`k13I(HgZsjdjFbQ-7Rr6SXfRdxu`qVBE| zv_aPkZd4PiWqV#Dwg5b1Rz;KU5unFZpYvFXT!P5shT#}&TB4&GW5`Wi^y|e?ncP=0 zhIbVt_(3tf~Ut4Y{Jr<0Z~Gy>%fP*(|;u_UTgqpP0dBFW$;|M;C7fmAd!XRfQfh&MO4acpm| z6-Yv&SM3wly(#>||DabBPRKtKwJ9>+XqR12{)wzQw6c_4f^i)YkKID*FKVQxDUt~Y zxWX|~B+k6h?zWw8MYI|9A26R({K$O%p6UVBg&(X%vkFRCL4n4ow$+o$xVHZgiRZc@p6}*AN&z>gPElcxlHvC6Cu`3C;^MZS-VJf7 z?@c7;cNBX}*0974AtFUhlmHq|TkSa|RaIS`pu`X#bHVnMNm8pJThlF_up_3&){yVc z930j8H|^~{Au<+RDHikD*cpC!tLW-^-Pt=uut_N^u6rj~smq#TVc27Ntxu6ploN(T zJL^7Ij10*_!E+U0%K4N*XQd2l2m0~D%j?VJ^{?PJr%RQQICm*!abCBrUI73^7@kU)bI9u+4}Sn8reh7`!7x9rKb~4?dzli8qgW<;mOZZg<}H5L7-+>F&!mOaOnK zgxFp`Z2@#Sj^)4iHK>XvELW}@-i|JRb4CIYR(%wJbR?O$p@ZfH25e0ZreKX@dM2jr zV0NY)l0WHXf7gLQA4yiaU{Ek2J2UgZ*nnnPii{J#24X*SYb+bOjf3ku%Sip?4Mbn0 z-OAw8!tKZR9ze{4^%4bvR)Z(cN18BQ9%FAnobt~m>xnwyx=VqvZXnmC49xCp(YXD; z2+@88oLUlCKTZ93=P{jJ04kX<++^B)6X7OT$%M4CQ}NF=5E}}_am#LQ*r}Y}wcK)& z`nB4Wr&5IPQVKGa#lCJnn7<%V z(pvrm;$|NvSFyZFC+5eN8l_=Dk1t)HrK+}y?1Z$o<6T9`nFrTDewL>LK{s-`e>HV5 zO_->aMHVsGBOy@?VcY*aBn{;!jn?7c3|IjPVO^CffZQ*F7Gk5S)t#@ovwiXF#C~=_ z7711cp&Ca?8qOi?GvYV{o$^i-Kh?}`)o(F9tvs^1U6w^;I@iX$54E^t1cv1iPaNdp zV=2z=GdvRMZ}nKU6pA8T8Lp$MwHnzcVZ;9tc-8A8VR0^TjxSeeX6kS99#gxg9V!XI zn&_^29SNZ3veaVXJc3TCe_smzaT2*6-#L*t`1p~^8$ul4k z%)-DS`Rd9k!Ac+S9~uVu>%+`Hy#`BZp@DvU^zo#N2_a#Ai`KBPo9)N4t=;7ERWaj> z1;;2K=KkV=A66e5{o44LbcX(A+xX{x!l-+B{Ez(1DYP!Y9DjUvxO<1io!yYG`t@9m z7(*w17@i_9FwiO>ymS+aO*Jdd@xS9WfEJxtT zIwCE4GpmQU6RXPK6`uSPU>jwr$LYJUYr6e#Zz;|VHH=8#*@~s^V>;?#?9?DxD!#R` zcnblnp_CVrByqdjdU#Umq2T|dY5f=A0!?t_c6VR^)~DdsUjN8VPCy7w8y%u9x8lVj zdh5C+4+wo&PJ!J-J%~m@Hj-rC6IJHIFHSpCb3G#GOKcc7-#-HswMEAU<{VZn7=?Fl zIqGeq32ve0)%oKa$`=~>Rzu%6!f2j_c78lj&3mo1dD{6faT^uXp1W?DJ*c5 zq-?0AEW*m2L;H;YJ5AmZ@g_m4ocDCDBnvUTXR01X2?bx@`9L+jwvpcGDIH3|(Z<%< z+8~Iv0=aI+Jcq%?L!3asYasjbaApAjnJOA__}?&vlp5$8phVl`eOLS%jCREvWL#SXjiI zZKi#$1DL-&wL=H~FLn$JS~GtfY?4!XAz;1sNl9WtUIlOpf4wQ#iX#bvqiNclk-nW# zEqR#2sIY6(dtqv75UQU4bET2rM{SLYHK(|JK%TMI-b4WJd9led+ecV$ueR&xC6d>~!h)@&8GW@7&5N#F|PbQZm5@&Lk(-UrQH`L5l^{kidZE?*5bjNk}B@-Yxa+ zbiltxhPrxxb^FVumCp%NnIJsi$c5jX?Zj-uDIC?M=u7`de;-Tw&(`iYB5JV2zg6?C zu)f zjzqp@`j-3__80jL%dJ_nN;*!n$|l9X@IweZgy~L-oT40aCgRh3GvL&hwA08&TS!=_ zc?l8NdL-E5Ed;NB52XzVnpjRjDibZ*^Nk17UxxSG5O6aF5lyrjK{jUd(P8_0dqe61w zA@!ho;3mTY2>`d3@D6Ol!degzLsq3)>;kw2OXd$-ZLP>oLd&3>+?*&HEQH*{exbIaD9Y3#-Sw1Lum3Vw-072Ql6+yBW}0Oy>p z>qW$>ZfGdT1jOXPY6n%NMFa&)&2Z-4B7gK;U?~pzI#2imU6g`vR*`*gmrW9}Ag4Zz zS37l3eX`@XS&7<%l6bgMguxnwc++r_J$j$MzD615Vb(jGa|f^)AL0E$yvoD!UU2;0 z#;u6a$!-}i;tTr|;DdeadkID&ZLN!bk}|s?zX*Ap(b>-*>}NFmuyc6&vp9)~VNuW3 z7Nt)dzr)RLVq!Kt?~A}b+Vi-&Z*Z(UYjb9!pT2BW@h6E6ge9=2{5-!wcwb^pefX2a z>h4ml@#fC+`nKneCSzP-J+(Uwn(SVR^qoprkZFLYj76$IO?~9^kgKBbay3>!K}eTFz>1jelchk zGEHHjT#cTcoXHBcc`7{TPxjY;X?s*bNWC9S&#arf>^36Z>NAvGwe*J4M!Q^q)W7kU-vO$$ z(38q?R&ssKWzZY#Ps>Rm`v#ZLuZl=~D)zu8Zt9v0Q5ksIopvLSK^q2ybCzT}fw>1L z)>hq90|%N{J!|^`P?NuPIK9U+5d2K9@E&M$5v4*ZX(_E0+HV(h(iu8h^8=>b@$+!0?tmO2Gz z>0mFU&0yzYt2#$U#0s=4rFZaXzHTep{@#8GC~WFE{^Hj}h7@2d>GgA{@x(1uT8dJ> zbUPxHKE(zmHr)dymQXDd<9*t;F$jDBqt?Lbh9+$8e9%vI{r72R@%i=Jany02bCT{fQ&Cl|b@6HSi zgfo+iB`U{OB@Gp|pvx&FJE5erHtVo4#y@dUu)ZC;c5QA~&NcQ>iSnNQ4;e7pG|{0} zAMR$qUaQ?z7Y#Kq{j9*>Lv8g8#W6I{?9$yh5XbLT2;?N%j^!04N5z38^rn2~yY!Ur zD0xGW-Wo}}mXI+?c}fxi=8dw~s12y$NzfK1Cs^SlC-eDxApHY9Ajvk|YL#I!l85Z? z5$^Lhp#-<^@gr+FtR#9;BE*q7gd zNI8*+kGK1~#Pav0A}F^SaHwFxF~`xBIc2DB5lhm)I(j9^MkU@hpl7b5pu1U0ki^i# z;=NvWNWHm+#0a;FMBQ~!;>_kFv{b#Y`h|O&RY(4*NjqW8^TRFWMD#zTGXBC>s27@! zL6`f}zYMqBoW72A-m-DZiz#N-e^UqsC)e+Yxs>ivD+kE#OSC7C1T{(lYA)4eA90?A zaQCRDaJRvG+6hBORX&(vXiEt{JIUvPe<~tlD8@`|Q3Bu}W@}hD4O58rb99d5al@u!j!S`Hg+FToYBhMh)-WAefo+8bV~X<80G)KmFC zN+p}JgJ}oSim1KV%e5|VRhoyJMo=QL61HQ`xHb!BRs(XY~VU3<$ zspl}Y2YPJgQI@{*FQwud170$&?~SWW`hCAZB=pJhwO91i6E8Iq8;gxbRUjz{hQc75 zq4Nc?vm9o#w4JSXtH$>yEpyI@M(%|vb3m)C+DIgqs68#tCJ?OvsgWH+R$Sdwn@MId@IDYwISu)KfK@ZF)_$+*Ua;q@P+)Nm|x_oW<1&`H4-%@ zc{%G=DdRV&9hP$*Gr|0S{truIiF_oIQpGmQv8I z!KdbWqqr&8p`C>q%is5&m(;~ue<8ULIeVuEf!(KF^Uo?467b;uMPf(mKp|pGS$~wY z(%6b)IuToNUQ!fK|3&X2oX&YO>DJVGWDHaMAimBcu@K7}WvGD{#%JMyz8?-|wJ*9% z{MW-&Bu;|;q>_YWqF>A-?Hc(eW|ZH)2#^tS*@)SS^@RzWFQgSNi)R`0VXZGvFXDb! z#yZej^wBCB+9VWi$1p&Nr6{K@|3Q6GIkqk1Ox&<8>$%tHI8@M5tAxINI2A>Ktd$yy z3Q_IM9-9B7OZr=P%!$A73M#63PlE_8)}J!>M@@D@WF0JDubxx_T7|psPvhEyCd*hqeWDyX5@KG~mIt>rewwL-}4Gq&)l*V#JCOPZm zv0RR|9t5_VEiW}62B1VuzTDXw=h09dL&GI4__h1Ym>k0l{unFBzbC9}oS%mfLVF=} zQB>Z4<5~4U7+ik@SitoTULyUkhXu-g;YHQ6g(2dQiS>51iCjp&x!-o#x#;mp^FUL^ ztJeDy=?%)Bw`6TntT|V55tp!g-|Y%a4G+s|T9$WN3|!qERDwYdLktqhpWAFQc5Mz0 z9uT+=c8bDkT!yVu=hcXtIuJ)Em*&bsK=*f=Dmv0~Nn-_+Vf&KopI_`7+sZ=+o$+Uy z-NdnaNZHhOW#vNSjR@oSgj20;kAZ<;Z+(J5JvD$;4{rYw=RaQ1g68uTf(x$winLsy zo8bB>-Q8*S5sjwx1v26wv8FI#k*2=BJ2EG8M4HLZ?GF+L7UQpeq#58lZ)xE#ARXe8 zC`g+(mTz?m!00{@?@R5ZaJYYwRR0fi(mBM~f)(ZrZh=>S?8$Epwin^Mj=E=DS_~VYsD?8PkNr0q0m) zY1JPKNqD0Felk>`jB1%&_5+rZH1$&Or*0{Rpa4}4C9-ou(h~w`wvR}XGFVu@YPJjM zjGvB}xLXSiBA3V59`#_NufLArRz9jYPU{+m`K2EM$UyFn!3b+islf7O)z@cJJ0g4o zmnH?1S;fl&{RBFcf)8R;kPPu%^h0RhF`*3?Ur-oigr&fOaFmp%TbcT!KLP@^_?K2y@T_c| z-O@mlz2QzfcG^C2Nj+&0zonv5$4cxs-3$gi0*4cuY@p?(yc!$JogE$lS(C&s?buHIu{TPKbp&_HhkE3EUh(VYWj+OgU^2jdBY(%ePEYLt=R2&82x z{V={F5S=Y`3Sght6f@21HJp9y`vIf&`@GRZPV<2>j)XZ54R-&PX!w2GKx#$`K>K z3THLjPealTfZMOy%Z>BT`l+Z6Bf953F%QBUO}EoYumRd#CODe$MH=QqF3L}|kiN|i zpt4vo)BzhP^wWcs#RKVc0LzhJpiYe6TlFRdY#;`PViP!0!4Rpwr1@i!w7PmctDD{1-;%L>8h&j=0~0~i&-?ENG}IaL-75^wk^6&x5?jppc^>DgCNFlL8cSb-N85#Ix!qo zK%gmn&2*LgpA)`IN?0M)?e{(AHzq$P`Hq>?-pURK%?rw&-S^OHxN0WiNRa8SuoE7u z(UJ7p%G6gxP`qlspq&&mjVcyyp6|{y6s~!2ygZoy*q)P6!hThdb=jGQ>1OPyg56w9 zaMk`SHom`dPWS6)Ntm%M%X3?bGcpp7g^i7WaY+gV4ux=M`MREBoCM&y?^GYt z&Z}hF{pzh8J>^7~0E<|&o_%J$FL301AjeJdUCB$(bLWE#o7=J9)0b~UcvsJWLjbg~ zLHoJd9j;7MP{`ypB@F`J2J5$whdIRiewVV})l;EbRi?vrCb20gq>ku(-!X!h?v`Gc z^DW_N^SlD%*R7ZGM^^G_om1Z}`?BmUB$^D5R56%+mT4}T{hh|=VQwZhoU41dBA(Ic zxzC00#q6AmICLVB;ZslKT4Zfro*4JIX?8O{&p0JDwHrNAOv_xI;zA`DiQhiX01|%R z$+=qetl(-#g8NGw{9JaH)5(H=^z!z*WZ@PxZe`c?ml~cBTw$1`VJHkX!1*b{`0R@!~O~0W;u_s(WuG=g4`ij?LZ(gJ-KA^=D zL+FfuZzMH}&G$!m28v+U;6b5I^_BJWNj4KgH5A{@}@j%nRM@-9)sG|@`% zFjt$HFmCaBl;JYY*CD|0Ix;QMM#n+&_PTwJ?LB_$0|mOzR;fU$DHf~3q2GQV8?dh! z08qTgzSv>6d_z6YP@3#(PubO3eA}V&B*?I7mf}+6)&z+0!2^Fj$q-fuzVe@iw$ti8 z<_mlVE`~Uod`q2cix72VuD@JBzO~f~Jx@>WMi4?vNaPq0yi!t0&Kok>!1N%oKnTH!gFhGd zANl4pp6c~2*kF{V9lQu|Vs2GC2-XzhWtu9@AMOus7_mr@e1PQL4T%q=ek3OBL4i%C z^`?jxqTsHlgMNhYd&OtRnM03%R1=fI*HO2P`11b?@2?^O!q}i`YAl44NL_U?X!JjT zI5FdeuEIPqXAT3VAc4%=W5W4congb_v4YpBEwt3%gTl2n$+1Vm{X8rcAnfc1;+u*O z%*yDyI@4O;SS6YR_Cw3d=pSU4HmapCy7?+F!5=44M#pvb6Fz6K zqNbiIr>1EPZ4N%%RB!{2y(As=(f9rO z@YAZ0Z4aZ)aE91-BguJiRJCP2WN}B+lOJPmEcBVua_VT#)PCM4Gq#8GqdyFbq`$t&!2PDez>OQH$qS|jqQX6Y?N z;rYZjXC6zchN77#NSC9^_6ihems3$CsV-g#gJ7~|M)ajk;?OfuBp~b9jhRR90fQg@ z!1GgnqY(VDv>MD*V zFew)kLSmpYI~E*iqWgs7uW9qzP6Vd5^2nKRqso;Pc~2iRIP-cP&&=3vZSw-?UgzC= zEmNQz4-dtj)<`e6Z}43l=F^X7D}#*-ii(h|tnh!9m&5U1B-2KRl%qliK|k<#BlvW) zVA}=2iH8ZZLtAm`9Ba*&kA7rTm3J5horB{nB0sXC?7t*hG(HVhf;m0^>W8jc7hG=| z-)Jp|62D73G-^l=6oT29zP-@*;x(hYx!i|V*0pOT%$-8vr1^2Ho(%p+RWcjF(hS32 zIKZ4Ym}ZsIWlAR5Tv^M`X}crDCGmc)fhcm22Ts)YYcb7c>%sPU?EDD0e?!D88QRgBGXzWjpOZ$&9T^~PJkk} zMzo>7i)t6QP{%RGp{5k0YaJuzV$6^9>0Y2Hk*zZ|U>O)fyH(ZIo93NZ*(@N^Z90}Y zd5|PrY4XYMc+rpcM!4@;S*OGQtj z*{LHps?QVS?0ypyzT@Z3Q%L`e=sZEoK=89<7?P>oT?zJzO7R1{RGj0yq_s8m$->RM z5Bj_?=%e2!=H{SJPYLhmp;xg-V^}#jfWn6RWj0DSFw${1iW>YFguT#QK>*k(5Ce0- zWUP4TPjlJPKgPW{x#Eo z6eKfQmY!%K-%w}cE4Tdsh^W0SoaSe#wBt`P)9YOmDlC_J5BVH=nrIs>tRj`H z>gSir9*nl`79V{+IC&q^DhRd5+s4I(ysGDymN3yz_h2I&pK~=GtI}2^;HmYcRvRatKn>!g!4BqBQjT)*tdp#da}zjHr7fB6+j;Qr5h0)gz1C)iS_tG_kpg?Mz96S)Z2UJ^INN?G_$h$2v$2!kK=?)}fP`__U z3sd(xwn2fuiDal=zCohw42&H4A`@<80u=hzPbUpD3e@j`gJ=YdT%%BAqP{p3l2G(q zLr}>;m=+>>vuXB%ZIyZDa_=6*L0#&b8#%HC<-$4lQ%Fqt6eNoUL?1f9fiJz=G)nTX@$jB$iPDP6qDrJch zb?IuenNhHG`f_msZZ^EkPGL5^`f9KHl>P-E849_*k?YnfkyTU!grdB^ybpjbDZ$^^ z*pywUa=Rfh)X~qxT2hjh%5Ewzw@cf=MY!a?BC*b!B z?x4`E@>fbm#{P-i%6&mE<=1Kbd|IvKd^rG3Gz>d)Vr@yzYlSd4y8HvaA~N`0FlH&u z8C%#M`798}2g5MpupI2$tBuhV=13qvvi8W=oyIa^mr#TRlDU_wN$N))g|cU89I;#q z{vQDT3x|l3WQ{_IS%{bMTAUS9gglG5CDZLER6(R3EAxB-%hKhH!AS7TSB5oZBaVrr ze<9r^v+#P7CH}0Np)bqZ@{h+zm>bptT>7hqDs_4({tmmy_9Ix1@?()0SaefGYRoLi zAPr}zF=x#$(t9MI`^C*UE60gdDRYJsx^i~c5`a-$E{ixXZH$kH=fPW(TEDVD;Wl=f z_EGw!!N(Elp-%*Ba{0$^c>6*6T6!2Xj;9>L)Ou~m-;C2UqOY=*R84p|NJII=7QbMk z#5IRP`sw|6i^s>oVrQ5Lr~VPI<$xDnY?Cp$BN}z1H$==ooe%iKN#vnKbr%$nl`BrU z5lb}2f*rRd!;}+N9Xht)0xImg*mt6T97<`|nrE)Ufn~!CJiXs(@+s>Cm%Hp3N%>&b z$AzVj(mjS2KIsfdZQGDQr(c60`DS~^QWAZ&ef;xKRs)+8+z53yiZN)iJj{rA7w-4uNXaH~d*N31mz$GhbiXIyPqab+=aRm)R^N4IQ582r^yU zZ((T7GS>#n?WwFIlweuF3lxBnfV1)HVXt11x4qfW)Z{)PaPdZ-o*@VtTp(pKkovV; zyXEY_OT=Fc{iG5>S3KG|N11{-eqQ<2TPV%$&E^0e4Yqs5nnfoy0{7d-fmH!6_w}Od zj<-&u2s09zkxBKHVk9<@ybs1eGhN|&mm;Oz7*)*6#6&_DTz25C##}e(_>Ved_CtjY z>3yfBU;jpAo%_`CIeNPD99j3sLwHI}MMd{Th$RXV?r7j) zFBLbrjO>H#gtG~qyp!e;Mu1P-U5j#l}`4#~q zlyz*C@ErHpCc2PwEgIu&U6^x{@4j@?_~hjzPuyK8#syU^fBV)#`o4DBmu)ZGeID%H zLTE9ad?|N6wHL|9hK84)~8Z^|0tolh3Z5jwA3JS(v_&eltb zE^8k0-f<8J+*h)!Az$88pJVQF)vB^A|toe z0RNQm_(5or#;*3d$3GB%Vl6jpUnX`el1W5Jhjt^nQ`Jb;TXJ|_F5e(a3( z!-yPDS2-8uV_dH40Q11u@&Xk$4@~Bh3C!8?v?u;aD9nEQQ7)4xiKQrRRX_yCHh%F0s27!+De(Gd&4x%gqs{J}Amw&7C~ zN_lW$-^2%JYof&%E%Wnk!gBP}i`FRwB-wwY!qEPNho+pOo5UuHT>(1qSir-5E`8vE zlMLNuVspiHT~l5y#Ug2aCDWmgPYK>!L+-lUUc~+W26+C(-N)+h2*m#a8iM@&QpSde z{YjUmr9L(fktG#0QH^fS@c%e1%=1!(vn`48sgT_*NKs_?->~OHz-7x4+i$YLIB6^%WhV6#-Ad zt2K#)9v@u#boyfvigT=r@uD6ze`f(VY>S|tO6eh`Jm3=wW@q+F_~YT_o0;ZMV5V*m zs5;2z2?9>(Ot*Mgz+F1*q4FIAadBhJSrsQnXu=S^d4~#E#n0w`3>pCWHLh{d_=FXsbKC5eMglunj7g z8a~(#&+*;D`i$Emp&F_Gi7x#sxIR(klo6e`JBaC~Y_vxiydih0=13c9VqzowF;TqZ zr84)O>f_-QEb{2Ca;BsJ+EB9&>TAz^4lC$a{<`(miD`Fhm3zXH-B8@+tzOn zykmsW#If>6BRcolG?L0Tkx<7Ey|LznkS~1;SzprklfS{+|KqD*>%wO3IX@WgddoFj z%2@loSY{P-)9xkr*VKs(^9|&4%D}9?5g4BomdCBV2j}FAAMO<`F#{6Ue`k7p=oo%h zFNmN_13Xe^?oD z0nr7UAZCIV*>Ngjd3d341{qv95iRIt+Di8;7>5~M1qgSj0&4?939yn0lB+RW{3j=egj-ex_wW_MiKG3FT%CMEE z#(ThIaA+vVOkuxwl%h3etEpXtX~lEoLq|VzpEFcuf#^J9+<4}euOY4gsJ4G%p#!D-R^KEqO(Zd8X zPd|J~v(z5r`50s9XP6mQRo+4-@W}nPpXW}18=a1EEDc##Y<_k%5ZcEfFRElNl|%e^ zSM-GKXH}>2YE>z$tw_24KK#>gEFiDB79&35aqG1UpD*|yrl%-IL(VE)=PT9RK=$W* z-YJ{0B}RZwVvc^)Mn$U+4xCHz7}l&BgCH$n6r)-i^fi$RiZnUuu~W{;(#wmFF`0d> z*jA(co>f>}gZWS6WS>HzzZA*K8O4vj)_CgB9b0Iz8t0s6<2{wjCc-F{1KyYZIFi391m zdL;A8v~=B#YP#$Kyucc+X>xuBj=jtS%S^x7IV>PZcw)iaKdn%?O6L*5sm(oRVT6x^ z!au)tkGx16Roy_=Y_|#TpxFlC!77cgFZxjPa3yyl+tMKiL~0-=gV#|cB-;;{C3@>$ zYx!;pC~Gd^4+JKg!zvn6;~<0M8+dt6PC)1HP>r?9GqAP?qHnaoa+l0Wh7?&;@nrm< z)Y0}nP5k;DAA%+mtc@O3q2>kMiN%Uipdy5il$YZD^v0(mz9kyI%o9Z`h!bIfSf!)v zwzNatM@b1El$8cYy$NBX7DKEe6(d-KKuj)k#Q+cILd4ai_N|dh5qC}};pMP1nf-b7;=ZLri?ObnRW3*|7N z^O*0M!37HDU6!IN+``eZ)2U)**kKlqDWaE*%}I3&meD^gw$_%yEkv?nQ=GkUkkkE? z*RF~%zo$Q7dVMm0rQYmah~jMl04@el_ouhLFd{Dh;mrOkvi{4-{v&Gt`xSCmWNx1K z17pS+R20?3&x?-N1*0LQH0(d9i;zP@eo*%n`1dOPakFMr=rBtdRF0_q;TJ=C`XQ19 zQSNsLY`H2BV#yrw7R#;50GYMhFV@A+Lx58Jox15Lszq45rKG`XZIcMITM@7?Tjr4~4+yOqBR6mHR z(DA9t@%o**z^z(pZ$D|=Oior*E@w-IhjYS(4;f2v0FlLk&DLg64eB(g2tm-YnWx;Y zht1Xo>&i$FHk|+SMpinU8?Vh7BtWBxRb0sy5CzomgRLxyOHRf=t}-~3-#i$`zclW4 zU#DbF9`2!^3OzkzYrPVP=rr&75iZT)VX9qfoeO7##yPWfL_tM`4;2?uC$!qxYw~tN z6N@Ux9^6fl{d$Ktsnn2_mP*(p<}4H_as*pEB%Lbu1(#luPQa0glP7fFRrC4ITSIc4 zcPuU<##P^(rn?{s2K=q(>#rrS0s&E7K}-Ih7zz{!L>Kg@$$ZM6m0*u55OEAejRL#I zucCH@^7JZl`RNWbp9}_q=xY7J>9@YDY%sf9_dlWXe;d%hnVf$HbEut#Raej9{d*RG zGi)_|4i_a24#>U|pHQ8TTv!-mN?oI`$FRUs0TohA`dp|4OOHDdj~Gb+$4JR5Ek|ev zbv5!QOswFDL8Ta3`FVnnIAdj;b%xL1J|{34_VTF($?7NjU5Hz;B1ps{Po{|1$yjZP zrYbu=QBh>j$2Rq*!@F?G-SQV?)KsOAAeW#NU?zco5k|raxJ3Q&b02{ZiSuhHD#6;U zYP6xrJrtFSN`5E$xJjo7m^jUuj>#NhouQQ+w@Qn3=s4tMq#d;LAV8 z>0$0|+D3xN2#~2d(@Exz$B0mbBRJPmho1mgK?UN|{Nk~I071M}n5Ko?jj)nxH{Daw}szcZ~8F|6{32PS_Z%o2@R+`8&shcS%WU zu+9^XtSeg;BicW6%bu9OEVjPmtAB4{Nm?xH&U<6%({?|tY17*lxZnN?yW>zpu z?(}kuWfHQWQB+JECPM5Potl$2bgVDZ{6V+Jt(p}N{!G+?WRWGHj@#@@yNx3XE%q|} z*5+4j+(hS}t>76-n)FV^VO}h8AGV<{3{m-wLVGJSFe!S*0TxX7`-^!bfHHb{%}X=T zS`71FK#_s>>O0zBis(mCK@4+*SKUAGw|}vR|DEfBT8_VoA~`8M7`LOKNSkj8N``Ld zHKDVok5VcikE@!}_Nml;%ve*Ds4Cn+V#~=_R_&$@rRe=4F;NI;X6Pu79GH&qV#ouy z1fykXa9cQJPQT9$I}!@pje0H(L@|;5lSeB@Z-Gu}guKTciZRtrvwsX0=8V4y5i;op~5Fy%;Lx+_5 zFBa5^<}c@iWb|LD6qZi$j@h8esHZnHi%v7F_4Hpq!Aw4TgM@Mr6q&hYy1(@))MLWp zB7G>1kUL*hu5lsvYbN%>LFO@D{Ax50*w4NVF{Y3yj?WHrrNyaiy{FwV9|k($ILI!T zAVo`$*d&eIy(vYQ( z-Shsy##uTogNSDyg>th@n=L+9U!m}}sxEImD3WU-Yt951RoF@j8*XR(N3>bFCp0#YFxB&h+(J9u2lAe*Gf_G+}xXmlck@S zxL0afgKl(=%@tc zPl@qiGQJgM5_52u5f(p^%udHDxP_T4Mw>315Rvn8=ApbLOh3qO7s=~7?;0TS-=xe4 zai5lQ)RvDwONCwNE}~r*&m-Uv1o-dOjB8d z8U4HN`Z%7{dS;od>Kdg;z^RhhVfzyuyqo(oAyzI~rRXEB`h@^dEJF)6C!L~yYQi6K z20`L)wayd_Oh~vFOUrN5(w8^7`)nNYn{oPcifwO>OH|{|I(ky7g?+cCg6(!AJlIXV zaz#IefKo3BD`3J$PCIV*!VJkmVaFmq$vQz-YwtdJOb1y1EH4NAI`e{qt~|m3&=DZa zhEz{|FMaQD|0g;}WID>$F$1L+*I%ataeBNYEWI^*(`qGaSOaA5q9Y_5#23Vz0}XAs z4SPc#F<)H%Bi8=^J?(!#`p$DoY%l8rW3ANQuF&c zH7<#jaLpD9%*awM7(&=Jg7_x99b~{;N+`+1g*oZa_^(7+Ocnl1G3`&A`9vdK2HFK~ z;U_yiZa&TAp97{-R>v2wVsWqG>Wi8JxCqpsMR{gj9^p&F> zvgWzme4q~d=}JI7FD+(y!+eCbtdKkyBRLHrpX<8~|MLc}hI(g4ctA5V-b`-QsS}8} z?q-1kXS#4a6QRJ_BFsj@J5%oDY*ia`byZmG)SQY#6H4bpyZap;liqW9--WL8p(xSU zv|irSi^n?8pXQ6%g+OV4)MgCtzQRJDh35y36u}}q^RblT@hxv!?0NW4AM2EFcMY?QuJr>Q#aXu*Wy;YleBLbKk zF&`~cO-xo;VUpOkq!n*g%{zWybKqcP$eWRi&(aoi42@YDC#ET4`HDrgT|Hz@QecFC zS}N;JS>w=Q~@VT!DuE4{oxNMMg!{!WJ+=|S_-6Ry7TCWYo)JCP4C`?Zdy=3p6BM`1LU4L-` zzy3mlQGjZ+J8j7Xyd-`AGN|1-MLeHeBLA~R~hGW&{SErr_8V>|{U!eTImfesbgf8#Aq zO-I*vm;2}Ze|qEpl?{@=g}q?RsonY{YLktzitQwyKr=^h7_950mTiig=oiDN;Ga&s z44>~86QO{Uss6p!E=>W*qC7L-WsuA_n@di}F{O3N#Q(?0j3PV=p##{;r;gLcaKO67 z8Kmgwbgco`hhgWmBT`gp0nW}(C=gYtVVU*Eyc9<8Zpj*k|3-Rx1ACA@!s%~}BK6hL zw`zOGlPXk~oE)&|_t%uJtGihcRj$^V0j z3I_814KS2KkPeWRX;+VEEFRL>s}sa=Q7oYsj5l0dW5J7Mk1)Yt-T)V zhOs?(H$AtC5CdNn*A+9|Uq{k#>O8{^(ob-Rfd|XWn-31k1!8*TC^@NrTkkIHP1I!1 zuVPK@b)hdyfNi11TNvW@#oB_7?sm9Y`Iy4qj$Nq4ItcBrfFT%{-tdYF zqLn0=sL%If6(oMf{J-@3Rn*v(umS=^z)TSPPja$bMF~rp0D6XqJZYc0r+_PaYE6xd zb<2xvAW5U%rF!TMyw@$|`$HJG_hQ6P<8OoBDw|q+L_n07O58FuA{g`d>QyWrG4Ym4 ztaKdStR7y8XBVkp&A0E+E_3CwDgHs;LY061+mEhf6+x!>%vw(S3<6qF||5ntl?zUSp zWjSOUTAqsMJ2%c+`*&DsDLZV_+OQEZ=m7%>s3q-M%+hmX< zH3Zj)2~26%RYXETw&<%R#Lk(>PeSN$45{n_BSOV>eN#*sxCam6LC#ip0y$z^!y-`o z5f@MCwOMGN>{G^>W3Y1_TI7$5D{EX;d)-lX-ITxw=T_NMqa6H&Aj-=#9hS?PP$U(D z^9NLgv_GOnPI%Z^Bab;h1bW&&Qna3Z_J3bW(78~J@KEM=Gt?B~YxU ztTmCr;oq9l&fwD@dNODpNm%*HXfj#?%osWa-5X^XW0?V$H8Q4A{o2z1r)x0+5(hDwyT zW{!(7EzO!Th?B7R=&3_Q{h@jhkXl`+ zR@4}0SDO4J&bWLtTTW-$4|jCt6j2au-_Eb5Cg9B}TWISFGezFC5tjQqc2MclrIBD? zwGtD{ji#cK=tryx8|{3x)!g8R_W~4Vdf!ko?QuU(jnZMWZ<(-m_r(OcK>n&-8foG) z>vP{BdN%iFe@W<#XSjP4GBabkd9!AF0MpV&w#`7FrSP$`zC=j4&R;603BsNdbe)HT zt1*qYFOV4t`kahk!Rsp4Kn2sUl!bh`uY|V1!13-gmNwZ`)8E=5h@9ErBxEUuF-t#e ztBC<1VXIueKCu9ckG~(hz1iAS03qR38$~nSziu;|m{?$h2ZL6HOH2j_}^>BC=%EUX6S~v zlg1P_r3~ga`UnEBz=VH{l)m~88CZd-%t;<{Bmrw6lPB&(6Y^>?iA$a)j=mXG7=Q*g zBhnR%QA1ay-AXbz@Iv^k-#&cA@4;BwJURqx7v!8sv&@-_H_uO`{U>pla#T0_=GrU~ zcg$&r5W-xfGJp2vr+U0>jXlDu*CHtegE!E{0jJVL5` zm6sD^#NKaKv~*h@L4zheIPFR;w0%Uq4Iz&|@F_x8BuSBEZr|lDc3cCgR1GE9Rk~(( z_5N1M{yG%K;4B64{ifyo9ibwNs@G0O$iYFdK2P}s-N25Iw`8P49+L!N@%vK32a@fk z%a5uae<;gzL51GbufEAFPPfKn|B zpu3XA8w#+d{#+V^^K@&q*!N zhsq)2BYY(pMa?xBM$4*4kJi~xGvP*Q)c4vee?3f-X>=-hcX;Ti2L47QCnZ|})=fQF z`{_suaG<~*LE{7=4&(gwnSNNX{ywn}maH4cdr6plE{C|NKAzI6P~I4|F*>(cHSjVV zE>yWQ=pwkvsZS_YlAcKvF1d0>>|o}TP9wRyTbmrpJc;|N=IT$~lC+C&W=ABizhx?Z z!PZ?_&U=zl^g4uKfOhrN#OAsD2EH8mN0p3-qaw-YxSZ$#O}9wmGvJWUVYq+AU{<;0 z*??qQ7WDMea_b8T^o|a@W|lDy80017l2eL7j~IQMZZ5hx4fCi72>hg#z|oR}xS(!< z+Oa-m)Dt;V3z^VI9ZayOU$3>Zxk_*<7j6GOvz4fSMMQ zpnPB=&V$}j4(d*TK9inJm!zRm?t}jqfD;Vuh6H&Q0vJpl4(XHsc4o#0~0bTm{xm|ruNy=+BwTklyxDL|3soJ45* zN#%jPv0a4M>ruu(l`$`$HLlc9$^vhkL0XQyC`z`DhAOZ5o5``{Ok}`gMvKq)_&*(r z!T=E;Gng?yT0u zO;k`L$rB?_gB8HNiWAhbvnymgwCX$C?(gRr92)a`@&XTih{#6Rf$9soh-H<#_Vl$S zw6sD-77q_j0--^)#NHACcPj1;(~JZ9Dg-@QHkSuQX1__Z7UkD()F+Y^$Q#R3#3~z& znz#XiXhg`hea)?Z+e?PK(prN@{J7m@9D?0Sap=*VES71G7$t4tsolU%XETJYPr}qe9V5}H4d>5;O(pT zVrTvq4Z1*r+89= zenH|*<Y=CIcjuJO34lYx8>N^Cg1qSN_a}hNJ@oO9OD3QGQWr(7 z>z27pEYxkD_3s1(SmKh?p}#Z}qEsQ~a)7ScZ;}1hYk9Mg?)#G~LlV-yGtVkqLGe*I!~1S)+F(_}9)%d5ida}gjEY#SWQ*kokJxaAvW8p}=Bn~rNP zaRGzTC}^Vdb8&2mI416C{q^|*@s9WQOg}BxQn0Z#UVgyBS!}<=&}lKJI1iNU_6TV# z*P#|uE*VW)AWnTcji*Z2vW$s5Q{*>X>qmkinCKhu*iwV4{n^n`NQCteeV>=tO%7)m z&gUAQ2zPdN(0lTCBtQL^Que>Kv=BJ|P3jzl-aZfNCCaWuykdEn%pP$xY9)xG1rkz( z5UX2ZbB2iS8qFm31x-%=Rvs`DJ7x>7pt%NXTdTb2c%s7&4h35I{K{9kv{rRoR_)D%I-+4htwcWtD7F_JdjMxt-u%h z5HAq3id(y~ep%#O7&@LgU~<4maNNmCNsXtKat8DhM$FeV;6Rn~JLoETj1ME?Fo_Mu zXQzmz8ahQ0$3GyL2(B;93)h<&b@{dWQ3-qXk~oUywUiZ9{va)$=DA%z-Nt!noz>mP z%5hgcbW6-%9Zjr_yxmQ&b=_au-i{#ctfU%?8AOd;sLCgR)gJ?-k+RzKS=V^HYX8}+ zh357}m#Q}HE_-eM;E*Ezft{?F=FN)E!b*u3zcPTq~(od;02dJFRK-i>!P^5Y0i z6a&IgU{=q3US${Rzs9a3y`H)WBOlF`U$i{QvD_^biH7pbV{DyksH<<#i9W!jjOHqB z$TBL3oGwtF&(gKS5V9I-B3%cbc?+KQT3|#+S6N=5UcV*voEO|2iG8hnw-5ZAeEhez z`tMhus4&zk#?!}0siRQONx%S4rq})8fa?y#$}m8N%_vG9fn*tqbRBku=SZPy$5TN~ z3n7~EHgaX0N2}|oul+Ak_b>h4;Uhm0&}jA)6H=R{DAt@4 zDwrr;uf5-03iSn+Y?rVoTfkP!b*@s@3GUNJPAG4G`$ig=HLC9+(EjU&^>0=Ml=^v5 zYb}Nhk$Y>=fb~mVUS6J{yK!a)j{;dvNeN#ccf`tyAugrZOQi1e^4FWBaGv=}{j$OV zN^Q~v8S*&-Lu;yS;lJmHmiBoRIcPrM3$@yYhr2%2jj+H?EJYH2s7UsO$^L>C z(?T==${@>t_+{K4>U)wmy)-Vl*(oEw9ZBX?3XY1dm@2RhN`^Y6}< z)*JUUQ8)Q0Nl*a8&jV0)RH4-#wBO6Q8rrtN&`1o?mWrn~RaE9di??9+md=mi&ons3 z6VC+KDiFlDen{g7dBg>`R8I(F;wH_`@knU9u~Fw5+po2%6UxfDT?fdQHftf(yF^3W z=cDG~p9kNgAUGqqi^z)O*io^lC&CIml%c#Q5ikhP*2m};c3fLgms4@`E>?cnM5($HF*wghI9sO!%A#v(CK4eR`?T)7#GjPtewZ5<7 zd_G%2Y0i&HqwF4ksNatXUMOv3J+8sa#*k=W<>ftLycK5jay_-~p*VheCR35r(5PL4 zMcIK2ydfGM9^S05y&a)vHee?+^t{l8e)@lu9){7t_DG0@iUH0KZm3hf`93$g$Mk|s z@Fyn2ovHG;P?zYHS=~4-@0TLv-w{5meLW2@EH0XLV>w`0t)JOQp)*Mp0U<9VYU88w zZ+-C9Q`K~SctD{~n;a-P&f$w7<508dAIYk&NX`p0eEYhQ8ha9YSt5&(mPxD&rS0ly*F>|8wo?XU=^#1!DDNu^)h| zu$_iZHX5RBw3VTRe*k*7ZN1^+M5ExSgva$vBggm5ZF@ld((KXXfXR)SS6zZ34IT*E zu!V9{{a-q^sry^>K2oj3=<5lZXo_Pp8}aZ`Zqa& zFJgj@J)56NZ&e8u43+rwUv=PWx7tg7mIs3Um)tU+h#aGvEm5xSfB zx=}yxDrRnu_yh@E4_vlu>!Zp3XNSuFj&}T;UJ1j8b%c`M2#NIFA7)S>VJzX((0Uee z!^vVeM`I(Id^FlG=G`}!;LFTfGd&W@>F?BdbDND*2>=sCLxCL&T1go_TUV6_tU%KplAK4y$tN+&zD zv4Li$f8IB|S7m}E@sEIKtG#uaotu>H=@apyP?i#vYY`k?k&@;NwRqv}TN z(~x?jMHUg1T1SV*#lWwpYkZB)7N||J&}r@;!eHe|-dbCBhBCA|?ogxB;Tqrn;ioTj z200U1Ki0J4`HW`sVic+{#SgI?*B%-iPc&83Dmm6k5(>6V&no*0S87E~X8wp`X3x*5 zXm2C@5-!i~b|8T_Zx)ERNK;r4%>9SUqB3lLXiji0BGfu)Mknrj4@*wI$yHvD>+TSm z&{-Ot4CYYzaAJ{||g$=O6|48LWUFo?ITo z0~HPsVTmsHovnPQj4vjVaQ!;`j-sqbvLN&^sF8Vw^5GQuRDp<~V(XNeGe2&;F(smO z1nK*O8XW_B8+~SnrV4i)bX;#btnE&FSbmr?8KIRrc)v{2Dl4Gcu6S2yb{|ZO zT?xO^Gz7APu{^o(kvcu}sKm)KaB2|Laz*@5M9|ZXkjvJOIbPg|?*{L_Ss=)m(GQK& zt$?tdTQdImc=nQC6}rf7g~~)^XN^KJzWWtajjXH)-x3n?SaYVaK12*&S*_hfW0A=z zaCYsb<_b$~NbMqkbxVVx+Sl8;`tepS2)Phiumk6D(+n1IVF(Y;q85J4*=j_TK#GTvN$q-d#zro|CCl!0@osl9zjF-DrwO&NA|xfX+VNTE)ws*vG+ z(+J8@7MME#9e>MYb-lYH_Qp?s);1JI=7)$7+F1xDE4NCe=`Wc;nO&R~^BknF8BqDG zz@*F9y(oG5AL)l?+!=k)iBe)Y>){uUnnE9FH$?qY@Ft!ghO&E-MjP&hA~IWC0}F_~ zBQi~TLR{j$?>?A@L~PS-^j{O#ApcH#4=7a5%kS&s<j=2~ zET;2?I*ddkEiFtH(Mz_?W18iMPO3A&zEl=hs`9d!5!^%be1%b{_ao*;Zw=Po?^KLP zLKfK4dKGr)`dozwkRcXl=HaoZ19rvsQEgir5ETvWBA`*T^(9L56ucGmbv&!BhS7=1 z-{W$xd(nB{WbVNxdU)Mfv+ryV($4AyXTL-(L@>_FH~bk_?;fkGJ17n1rX29-eqw`UZ^m!;GeO5 zetl?s@p5r>?P3AA&9Nz<{m}*E67Uo7+amEe@}JGc|9t>EmojcdhCuEH@1ueYraWSN(lvT*BK$CY zr+ORVq`|ppkYZ7WyaaFK?L_7WJi$AxXLETI1D|)lGvb(f%_vP$o+LxPZe)mO>gYQ- z0AGn_)@3e)2ECW2e62ehE6I;M8TXmiHH4vsLQk+*n*5<;G z4rnDWg1W;<2UK~L$5gc|G<)tYf+ZPqrk(i=(fp<*yPMQf--DkYVnWP^Zq16ZQ6t3 zr!p>q4zFqapFfe$J~Qg;hgSF@#q=!AqB(-B{f%6n7@^L8KOQA@H?n73`XPnj zL%gN2#G1{fQLlX@*iY_$N@knwk7?&taRcWuRETS~uiq<=S-`d%(zk2U?PYjg#p*EP z6DvW;5S%Vj3Z(PB<|3>HnvJHs$7*g)Yzd`yy?+20`P<%#=4rJ zJ-K0yxLLbw$Lic2(MH^zc6=rn$3TI;cdSM-W`nl@hYBL)luD`xCT%Z8@ zC{GHKU*OKXUy)|LwlVn$+s{`-XLpPZ;WV4t+ez1MZrqw$f6;qCH`kv}w5*|EiCmFJ zM4aC=bYK|K86~Mzd%pw|ZYE?uL@hfjob6!b%_1qdwgzBDaEb4D-L|?r1gv9s^Mh&@fbW04@p+jh z>-za|$!3LbE!O*rN>!Z`M&w2`n^P-v-1~-u+&`b=X)9T!d)vsTI|aStZZURqsK_T! zV&b#4q4Yhm2tvk{$kXxu3*pPRF&o?#rthOl^j~k2R3q^mQ{vYYi$x+bJ zV1U3VjUUpmtPgF`Qno)v)q8EJO^*h=Kb&DHiOG5&X#L<*jg$2b^V4@B16Z1n6NJbI zr?S`6D==^=zP4#Dqi7R1pFUYs+e{F)s13Ai{^K?Ra8sJl;e{4%I2^= z-~80jtGx1v&TS9g>zu%;u8W^$d>B;X>gu1GAdDZm@v`0hG#iX&z7d#2cL#L~0gV6o*hqlRTt;UWaYE_^I5xulPRFGbgdqrCsg!Uc+B-CjSu_c02F zm?tT0z!e;inUf{vH*Dqk=GPrhZhFbf2iaaru=bh09SbA&e3M-%!I-_&Nb zD(iH(a#T3pw)?D()3y;%H3&N8+kCN>l#HXKU>%hxlEG9YUqe2>)^E+^AhmBq>8ZtX`Vi$Mb{C^d5D+bnOPoQ+UcOftNO zir2N{liJ;U?RcpYK;sirPbAw5@!IWRsHrC3O#H@(KDlf~%URR<=hvFkSf4xL z#97(BSE9Z}BI{WbkXpD((JSVe78CwV>y>S&g1 z1P$O_PnU9>uPISUBkAaQeWO1yd7gX(wd|>XhX=p9KM+y;P9Un#_LLL6V4)=kLGxHgR!IEQ_e^R2b(F1#ikJ zbo+#M?vEwHm>>9y+m6AsK+y7y)fL`KZb_<_h_D+XDhgboY5DJ`@@M;;*8&in$NO?{h2{*BNW z5scc%4lOPnB|7gsbQ3=Z;L~(@8~&bq zgMo(zy`d;3K$JsGf8fax==jMps@EB8CnrRxJjq)9#m-J!$J}yd1#5_!N20n?%WS{+wP+yih{vKP_wkM3id$b zrsKw)&G=cS+OaeAUg6B0CRowd*0wvi^cTSyJwF^u(&>^X-LZ#vW#nMU6xQ)F91&3j z(|5xR%A=_{dPuy-z({OZvylW{d9B5GbEA3u$ZCz*@Lk8lcQzE_MTE$tCgecU##cj~ z>QDTdnk1p3&-axzx;c(OK_@w3t@n}*pYbNt2xj%`EGd3&s5FJO(yO56{IYk$zaR<@ zCwuMvd_Ldt9QZSg{Aj4rQ6a{q!LEI}K=j=}+HC3M%bj0jaSUIUkXi^}n!4){3LO66 zk@dJ;`x@);?(0p{K4@&Zi0qNt>rOJZ6Pl-QGJwsNn`{~se0R{b4TNA`Bcz*D4dJMl zs4ogd;?Q)(eMFAeE}KPkk4NT#(lMkgfNmvk3f$!Qb8BdU!kWj2JJj}+y?=2)uowt$ z_3-egUfX3C7QCUsaCL^VWuSHwayJ=!DD*t;+m%oD+^7c<<$15xAW2zIGosbpO50%9 z21l1syLsLAXs~h`c474L^i^${K4<#d&79)G%VCE!2QE*Au3JKTM6o2MTQV!i zmH(_Jjtyot*5`?9^N@Z7pf7;Qq-XZJTj}e}-)@n8ANtVF%)}Jh@@ti?G@K>cWq3#a ze5%99RlehTPN|#!eErn}!S!ry`;SjSz?GqLm;8$oudUy5!xvJp@--&ZDJmCdL&G}6 zrQ831B)M2aM(2eAvN%!BBQd0C!~lcAJ7S?YZGOs5jyRqCeU6;t)2?D?Li@~8Tl~_h zMSSZ8G<2OmQ-gn;5aaky0EL#{)X}Go!2uf<4yC~G5<{0P$MI&@=f$i@P?U28z#g#~ zap^61`1UAhB)abzd9{dCzyO8!C$aI#VKBSv@!(6e;7ni4m9SfWUqwJ+>~CA=@AF-Y zGJdJ~v&`<#PNHSmTOcv)L-)Eh_t?J&!WM*=6VjM2EcrgIDpc!Hcsnk+4H+s3gWuTE zt22J#eyhzrtYa$G>vqOZJJ(bJs&$YescZ=p^4>!=XmrQ;wOZc=a#bvdPhU}ZT}1Mr zZ_KMgk@n5%hRSoqSdH^holJ(dbmP7kl-1s7iX>j8rOEJlL2;$^si3eJcoYAS&t`Y3 zA*JuF-#a^@;*Ek3=SObDPw(X8cujt$6|IK{H&yuveIjEkD~Qaj&sRb|I_@6D%sd%{ z4s$utBTmn)97p8mPZf{EjD8k47ni(w@u3(#f?}ahPhaE|(T{5<7ijwcP_b7$h_-ot zGwlE>Dh)4R>l@RJCv~m!9-uIYO-Co@Wpl1ODSVZ@~VcFwp(X+2- zJ?DLFURu!!`ESG5Ovz1V7N_ZYvEUMK%I$qske!{Johg_E(MVsX2-ONIT5M>T1R7*u zfGEB%_pu!tru4GNp`<=%RG$=U(!fkqYB=FlKY9qGB~bwfNI!I)35q>5Z&y-3P&j-$ zdD|c}An*<;GqSZ+h$GzduIarqB3pF}PXRJuY%?tCV%Qn@UG z`7~}M_1ok|A<8$eYc~XU5A*GmV~!RUbSrHqFm>teIa;ry8XZAU2-z%dAp&*6=4>+7 z3pt5dmpaRbAsf@gOC^pyIz@xM8BOH*Rum3pS_nZP>+JP>U}9l{eyj(&4>DNAXX|rb zU>@Lc>muZ1+&nq%`y&cuR~@$#x`9 zM922lKJ#6?^wNpKQOC?88NoK&`|dwFa!VUPstQ56EE?lRG_Ay;w z!1%dY`Yvvpq@iFevm?arZFytAaiRmm(4d@)K5G`hJCn^fR_UyQTZC85i*%&<`s5kn zB)cB=;hZ)Necs*F=s)HI^}_m#Je}H1c;D_?qYHvhN@yV>AH1F~HB@|LQSFlu?G1A}B+AVzd9SIY$(@52p6~ zBE8=`lrR8=RRc#=ErE35lNF%K&=QUQp1k1U2hH-`!Q=S!C1QH$?8-s=`ziiL#F^LI zk04=zq?1a&`^!RcS1m-azUQWO0)DV_Lhi*MD~^px4f7UYqnc{EHBVQPZeUYWxsX&i zwVjZz#A<;A9>utwe;d4mrDx=!}L zr7YS#oQt~daGvhZ@c$pizA`ATt=l#bNRZ$boZwD?;1DFZOM+W)3EsFTxLa^{cWXRY z6Wm>bcH{2$cFw!^R=pqZey3^|f9UFh+G|Z2W6UwB&C&V%Q327|MELaz?|XkNNs1#x z(3sFOyw{%}(WOO)#^jGkUK^X_cp#GDk5Dh*{2$q(%4h9b zsVOLavGbVn=Cw?FO-+qL4KylSj@N$#)+)JcaP$^epQ3`Nc|*(dQ31OC9`UA!{3(AY z*3WXi8?hU#$fnzRo!Pn$5x(ot9$gttB70_hIMe7&7s0m|f^q)x*>k9&Qy0II{1gq;kKzq$O81BapMKIAK0p27 zARK@@hYCN&h7gZwxG#Jqm|#S{&GbByXgD&C_J&_88*~Vy%;vn>Ki&^`g*|AV;6d^K znsxqvr3-+>h9R4iPvTp>CW3@belAWf&lo&^s6?lQd?DIm3)Xmvw;>raOm*V7(a5(I zlz!33H){cpMf*8(lDU$OIcfop9&jXwQ@&3~umOdbzXmT)SoVLQO3r1pL2|uKN;3Y0 z8Psiau5@kZ`cw~KYDvJy?~TWVjPYYjU$c78%yvM!&sCexo3r!U97Fe zAo`BoGU!IEl@Tt2t;44NiH;5u*>gvJ{pg2IZXo>81v<;Dp8g;2f{O}wxY=Dvd2AC> z73SUuDj@~vzIyA%` zj4vZWuEu9eMO34Wo-k>7uMwxe~SF#eB&Ie^YIBV#4Tf1~~a zH22yxS#9c<{1G7eYBdQH&^s7T@o&W^!ZB4mq6!A(P+-Qxw=k&DeiHS+XG`3jD*VOM zc^WVnraLM9p7IB-KdGP_lJqd`kJZD&(TZ!4zEd2IA!uTHhqQ^*FM7q27DrKe6cZ|8 zk)}#JpZ!)26ycjE*FXOE$9N7v56@_VYfyr=j*gru?RHi8`Y0Gc(qVPWN5qIA4?2!g z5%}DcI)diucF_8V{KCR+|Cg`z!~>$e_cl*rF?^MqTVi2J$5Ai_ealcgm_1RTSgWj zCa1ZoauYA5a;-X)r>8mLUlVzz)ra~D$v6H|tFN=}4~%P5=U75nvfOvHcztrQSq(Zi zYRc*0R{GKQ*Oh!9D&&On<}bRQR^Hd-BOHNodX(<}+Y8`W!G3Fiz2PA1`9fg6+9!jE z2L+Cyha67N+M20lyQjOh7!4BfYuj z&#BGvl2q|V{}=q`3mkhXLrrAZ$qPIP=j2eVo18-;l>;$fkIHwt*Ze}nDrEc3XrrLK zm!vaTltRmKezqGh5It$qVPoierdv(n%Tgki4nz<__ei%OLu35X`e=A`G;%<^A6iD= z-uPGfpmJQCEi*U#SIS^btq;pHD=$4A*zHy0w3;(;akmC~{0;@sHz9$@18BLgGh_xV z^U0nqs7SgkmUkF-S zDfW$Ah&$0L=}<@I_n$WS9|eaC{OQG`azc&=e-dTS;erRGp+!hFb!2Ahdku&eX`U-m@~4fUAJPXL9Ml%) zQO?z;r^`PKeb-$!qoot6?FkZV<$l*#=iKlEP4D0v%*edR#^E^ZtS-|DM(Q@wX?QoGWBKh5)`^ev{4tai~ zums7#NC=f)7p#9h&XnoPuf>hN@IQgjr(H^0$_ef5Q{$L}o~zk;NZ)x81q;iFY55T) zFj?}e=h(ZquVzG#PZssFh&f4ok&9`I7uo}kgbBI(g|7)mv(q1{Yd&nTK?+0=5c2)f zY*(4%e`QdFFJC5B>6RrD0yIKY5;-AtHq|>CzFT*ctwCu;5XU(98L#Dq542S{M&{%= zDf0*7IoD}PYR=L-NN4oZ7~Nm=bh5x>^^!W zb-aqMR-~x1S#J!oIH$>8YVgEpdyd6$#~s-vPWpSF4^y)27L zUp!@Z!i#%NE$VnT#a9a*!+CwK(~#WX?lD=1U<@r^URxc0kDLctCRU0*C(4y**fQ_) z7CR~df7si}883P0UuobUgotpzcx;9D+>pAEQ7dx4J9LHNpZ}O|We&amNcn6X)4Kfh z5(0GOjLSQ;iX?RD^sM?VM-wZBWCY)*Hojo5+K9YPmk#F8jj6a#MFO`1&b;~Ae&{2@ zz1NxpXs^cogpIKEy$D|@v;K939mYO^o{z#9=cbogJEBp}oW`5G>P{%lF!)hk?(gmS zCm9I6C{rILpv%2XTP?Q5JxZBIj`aTJB~dQB7I=@5?l)a;QoVF{ zdcJb6eG!5lM~smQTw27)D5ics|F7?|mpZ(Gl1vYytZ2h??UD8Y1`$@vs2!NGdhXEM zizklg&LDq0@pSvNdY%tDm}dt@X&fhf=rMEoP9v6-4(*QZh(+iTIu_c3EiYD2PT5 z|5temr$2%$2LfX@>J^v$*%re*03y`ttfOcGK;qqEZbX&W<^D-s*0U-L72kqAHm_ya zzS`^2^zI_ipDo#-Bm;LmAobsye&$7wQyzthKow&O)w?t1^q1iN(vw`fuAT1K9gi!= zo74yS(s|bi$g{vuoWSSIJN-@{mf>V}JrcV1N>ij@zo>qN$H9{xaxa3vbSO zC&2SKX5-L2VgkCP&r0Ot%PHK_BEdFlF&li0t+u0YamC+6zK{?;%9%gzkx=(^=*y){ zo)QO1I#6YB5=Pjf^*1v^{(3z;&}ADS39|BFVHaf2DB#@HCU}pvb>YvqSaRg&ThHz1 zl$O5QBi0rd04AFHE~(=M8{P9-;Lu4c|Ju}b^~TkZ4F$$w!Nd-f@50RV44_ZIfVGm_ ztfbU=bu%0A{mFi^U2{+pWOA5i{>zorMAi&6cd(X~-s-8MU%KHn&|vHER3Hs<4SMdM z#(FlC;?Kcn1=+aTAZcdfhEkQ6Q;B|jp&u1?vIq9*GH2*2+#PIS2xUAQr!o$k`n(AjkQaw3z2ZdK>yIQy+YCqf zy4v8Mo(O?jmk~_-RLuBO=B9am*xWxmyNe4rO_Kr^MqTJr z(%;O17=JKkv>RxPn;VOx&4}`xOX}fyZ+}>eSnD(q>u_O#yRgl>axehQBhQzxy6jLl z_2iBD1CsqfBzr(fyq*bbG<-u7XBaDn)-n!su{mkiB$w@i|*mc?!@9lnJe=(7aQb=MmP{Fv|d_Jdt7=w^~*<5>E#n4S} zju88Br!4F*mM4$vXliOMijI=5s+xdtt=!8X;L?l&TRlGk$i?S-cV}H8At8(4r6_|l zeAwR6E9_g`4FZ-(=zNXix|d`w4`BzuQvCXH?A029zDR@!iuT$1bW);Zb!4d|{P;%j zu12Z&QXLQpj6Iy&S+(VE@GiU0wOgeJsBKl!_DntBpqBP)3=~5SuRESU-CVhLRPFda zIb{V&tv>5>*@B#@XnXs4pK$P`CeE}{Vl}?x+}IsTHlP7`!e7xuv-gl$gI9GGoJWO1 z=H4A{80nHhPzpV5o(Rh>=hVSn=H-6GyPMyD?dVD6d6`Rb$q(uvY3 zUc^iI@p=LB=Vf#on<3oFv-z>$i=}~4>&LolM(&!B&&PVxrE@lmwgMwUeGVJEir?s1 z9iroTUD5^bX-+FQsTK88Nt^WSj>}e28Dw+CWpHV(R=ZYLpAGE&M9KYLAYnp}#5kRx zv&ZOWuX+F>T13Qn3z`n|8uES3{cx5~*vDH))_AD{_+c5^DgAu8CR}^)T=o3Gv)E}@ zwU|gw;CV$x{m8zH0hjSO-*(O86Zv$tv{qlge&~um^;-C1DbYsDfiAnw^%92;49&Vv z*`^(Rx|u=%sUEeio$rHo4*0abi0Zzj>BN7!;LIu_f4revq-{StJOB2&L(*mm71k@G zEbgXlPZxG^$s1d1?ie+>7({~v{N?}qGmnGh3zwnQhL4Arw>-+srn%jDd`ccQy>`20 z=dBixLs_Rbgp9uecFM+)jFUpWbH=0FX5h=@>!ViMQFFG(cgTvr{IQQ(a2N9C`%%Rp z?WL%r@RxQ_J zEO&tbE}U4xT!W2;nQ6LV_I58c9?$A*zX#*cKC=rlzgWqzN0!=32YO_u3`q~AV~3l9 z{CK?}@&dsu!>`CmmrCG7*KFcPGg;_;V)MzLkJC5RE0s3ca(F!R-ZlnZx_J>zW-h9$ z#{P2)P8z$XQr9QCfIU^JVUv92(x@)X)>W})NIk)HEyWXOdRbumVv+oS`(8C`*a`32 z2!5)GK$Z~~QGu{wGMjt~(=1Q4Z30`Vf7_qH|n zrVU#*&aX_Q>-rO>V|N1Y?IDBwn*cXiIfa50l9yNA^bSt<-C5r14Tt8PZi)I{r=}I! z4b!Nwj!PcjA;{cR;-j_Jw@dQpC$@y7Bq`{qUN(jojE5zcM&nR> z`}rx0e5o&$Cz{MB9-q@#X?@OT^AWVs%OF?Fqwg82UZGvm=zDc;z8fukOPAev7JDA+?QI4}S@H;$96zCD_L1Fj>@41;;i<#v)oW6O_^~dA zzLlcOouXy39s>6xJi_@eP-bVnIZzZYQlhhQrp-^S`1rP@sjMt|^`lpmAb5t5K~4?_ zxtpD8lMI=po*jaXAYyog`QFh7XD-Kj#x>!5ba~hP#6#5`ED63A^03f2VMMD*{Xn4m zH3pYbQDH-jXHeLe3v0!Cj?N<4AW=Ep)FcpO*l2XHB|2(-jCh`&?vYq*)Tp_8|ZAg27Tci4t^Dc@Hy zYITU;F`CO;KIjjArHi+o4@fWJA!C)*5Ae-$Jm zjRF&NzO3pzCAi4J=vbpoY4!-Uj`!9CJ0iB%?>IdKb9jCNnJ@MB*!p)TuFuftINt9IuN@?CTt85WGRF#^O+-%++qG@8 zgF_}1GkMD=4~0)KXO`P6e^YG~G+57$>)3T3zL&g$Z!r+Om%HmF_a2PX(3#MEHgkM4 zkNU2mR*&Tpz6H=EZ|}`54|jeP43HvsPtJT=6{Z(WWP@+ngeXl`bzZ+jZy0cRViYJK zL^im;Gnf>9KF45@k>CY;-*e*|>N{c9$WZzs0W<3NyRnc=N9~S+cP>mv2%wA%y}?MO zEQvb`NJO2nDqHrsS=+@Xvojd`y_IdqQU7$B$0a0mS|HvjVN2=-9Oi#|%n`cvMCjO5 ze}*bfOl>ez!Si2U*~IU6Lafq1oMtpuB)Y)!JLIONe`x)qaHiAV=dajEKCfvK&oaq9 z49}0neKud+rSe@nnxjg`4Tb>HCXxw$0Z;Kq82&D_>zvb=UR}I`_4~&PYUC#58DKS; z#t};Je4s6D{5(@?=uH9{R*s!ToX2fmpsD*rJ>%MyuHFdis~`64l5U@U>xF@ zbKAP2E}%`VI;PBST^5vSAl=#bZC*Jh{8}8kOT_<*!FR!fO6zl~|GLZ`QT-~xPgAL> zAj+kC%AUXxv2J^;2{d%{DJ=Z4zP`T6j`lQn)&}dMgOVC{nsQ>U6hvp^$M(TKMc{JG z|NU9G6)3}rbY@hTlY`ZXyt~yWSLpwhHQp3-5JnFTy1C(<>7Gyc@S332&7r}VptX7W zO_+kqVXubMc_w37h#r1qP#v_2VN?zuFP?|h_Y%!!dUjQUaJOWSC?zRL;?euZ-nL4i zzvv7(73;d>QYh$&>IGcJvu1Ao3DtXZ1d!v`Mcs}OQIo5mY`*?J$9d!qZ&QB#67>Kq zNWX1jZpVaBb)0G#6k+%dFp8yy@=ExKd&7D<^OnaB_FH@^;@J2t2ip&>KVAi2wURdW z#qJ9o`wYI*C;!TpE#PJ^+HC;;Jk^6CWU(--ejxEt`+CL8b0~b1-E&&~^^xCW zw-5T6y@Tv!oR;p6Ze%=fr1z`Rd;FY_0a^5QU@f*Ch<*Mt=%yhcCe@eW4xg- zx(5N*&#vFXl^p=ZzLz8&5Fq&->8->7jBy}Y#<%_tkb4qn6rC_gJ%%|tv~Oz@YO;iV zKYsb5S0mnvGcJ=Wd^h)MEn$PU;I=x zlfGl(xA>{_CN}G4u*>%sNW9oc(EVg%J28QsNFF6%Jr=*sLK|Z}F;UlSLp^BnG#>9_ z{N++Rb`e6gOet*W;3a#ZQ_hqDL_(wpJSMXN26Ra`R<>S?jj^W9S)V>&tvtRy&Kr*S zOr?jeNn{Rh>h49k0rr`CacF#Mqpdv{u}{vEV)3~bo1eK#4o!oNfGRwDhbXtDu6lFnw$6-<~=WN8yHd1fsvYw0^9V_$f9!J)+2PY6f zl8g7N*WLsDh-b?wIG;5w+GR?M+vJ5G);r6N{X^}((+r$G`#v4%T$uY_neuyW6&I{B zC9$1EAMDO$YZ_HBQT}-tb$#~lxW2e%iS70fCVyVL8LFCEyqs-Xng{N4PlZm?j9aL^ zDtT{>O8fJqPzJ|lB#mkxg5Ub;eviqpJ;PjNeL41 z>6Q53c2^_@IpQ3-4Gh^6OTZ?Vz+iS2%t8cfIkf{LyQH7T2nPoT*@)TcWl>KTn|#16)vr;M z$;%P+nQtaV!ev9(+@&VIz^ive(X)`seJdqaOPZ%V>^ zVY&VGrjYZ5?5IA_S+R+iR~&V_pa7PC?ZNRe`R60Ik`kG{lsW0o%ng;xWh5dJ)LN>l zT}CZldxxZdz-wsrCcoha%^|$LL8+;ppPeu9g&zL6Y=3v%IlwEmvna?An4Nm~PU5Q` zSnEac=g@sLm@x(sq5HdtG!o1#ZThWFQ)7LjDliD==#PV?q^fFY6IU==xMS9ltf(R? z`jLi~mf!F#A)(6Qo*569rJBBe<|iTp%634tXaliX9xxj)8JVx;D7UDoY~ z$5V25m)}n6nZ3L21Ox;EAv*`>zehymB#VpBl5G)r=Dv?oliS!nqio5i(@`#!ihF^>ijqN6RWG0Q5vpBTy}#W;?!*sh>3{k zd3fgf*GHuF??2>u{m?O3%g)`_oP5GG&l;U+y4UwU%y;x(02}{UFPsL+t2|3@ zW%zCl&W@W3z3oNV4CNABT4h~^QE;S;@E%+l;`|K&W=UNX0+ud&=^w&5@=Drzy^eQF zOnEdh$GhPDe!LzOqUrMyfd6q&dT~}p2kWS?)@okQx~+2g63}NRC51t1##8a*b)%}f znYMHTxHhGaw|pu#OUp&r^oszUTa;70A}AG?Kmwxzi99D+WxfMR?ts*Tz(iuI(8w5y zmv@L_(gIYuTJ~JBudl{N!3qeDlR>qrDMOj!c?Z3;PF_+{keRy;iN4Q+_hJkYHL=5Q z1!f~_!&l~kWQ&G9pM0O!||{C5~?e-UtrKFmC`)ltvX5HRmZPss5Z;_ff#nmtQ@g@JD*bTa)~V~ z9g-%4LwW{mmC1mnxYn_U&a}biPvxd37Cw2p*yXw}5Td(dVv)elc)6iRy((gzhKJ8l zd;#C0OrE1ko5)W? zLQyk%tu3cfo`7SWj0L9z&r1~_D)f^*@71gKPAe;B{J>z2O{X0T9v)%Zv|WJIi!{M9 z31U*HwAqKUmjQ#KFAzwO=23mIjq+gQvd4&M!O^<;@9=3!JO&t%?2F%EDI(X`#B9K7 z!a?@JsE}GQIo_T6UvOaudwY3J7+HCb_l*Jhe!Wu-OMuYU?*y?zQ;9^Ei(2<~xx_jb zm7r{QJ=jIrO4d-p{9pm_?qgCZK`M2r8(P*yGB(}>)!lK==vU?ZhQrw|qEpfLfbWY! zV|p!67q6G)R8T7V;*6xEu1=#Jfts5;v8DB16PKU}AsE;T&7cZ&aG3rpq47UuLD#*T zp7j=;tP;$0W8Yj3>pQZ=n+Kc?lS$9Fv}2Or9?$WsB(uYJWUfX0jQUK0sgFRBjaqez zqHQgF=jkiL*8WiX$@_1e4s#VgTS7mL#XbF5<+CFCIXRv)dU9&2r12^WEetSl;rCTv z)x>Wj_kDhPev0q7DX3bk|HMt^aRPU@-uV>&Ns#h?ueSf|w_P~?V2bQ`8NrQjw4zRe z@y@Zvp>c5SIP&`q-`;ww2?wp4#cH`mFKLlVf}dq6?C_&!*Os_v1uVVvJ0nq{sYyD*&pH% zA`yy#zvqnO#JcXA`s{4v;ymkVekWQ6J(QB7+k_|^!~3RbcX+|c)>Eg& z5KidvVr?qua(}t-{Cf1dngtgx+GInr$use8CxcSJk;2rVb~zd2@c@Opj_WoQm+H(++Q$+ zDTU;1yHiB#2QifD89BV_3~LEV;@Rj9^(j?OpCb!BF=%6sDt?bop*g(t>I zV?M~uYHPfN;r-ROoMHLrwseSbL0ybUC3%xAkFt&qK|_OU2?1kYjkT`6KE7|QmU2=> z`qn`j_b;cLz6wPIXUaykQD^4r_-#WCx`sI(RY}QG$4neiU0vOB>}gB3h{+^#;M{mu zwE?*djHbiQw})`yE>y8r43^TUT1j-JDCwX%b#}6_2$-$VlO0NAt^SP;mw^_QZ8yA? zj(^dgD~5>#4~GQ%{(^706c}~N8S`Bq0^Pe*SlxY(!(ME%!|?v|cwCTAeQl@trm5p@ zQ6G!&>7q!ui2Pv)gH#tPZsGQ~p#pG#bn#~V1ArIwO=M(byd6QLN=V9*)8V!=o9kLL z`r_+To%a3i-yEMEB>xkF@yPRhvXR}0giYW&Pl;>#;EbPAGpG;M$SZD9=l42VrEQvs zRZ56J;z8t#Mgk?$rbrXMth(jd(T~5167H9E?Arb$sduc z;7IMPH}k9JwbFfrXMv;9M)$|cu|8JD^@_61&1Kb%x;KL-U>snBiVGUT(S_=JDg>gi zUajI_RFOyq#z|_)xW_C8&awN=eiz}zw0CBiT4Wu~b3JYt-;j_<^ptl%#m@N=&^-Uv zMPkteOsiYkEP8oaQE#EbuGi@hyi?;jdUrX*Ab`rsPo$J2Zi>YF_@m%Y&nt2J*YVcSLevc9ldVB$CT^!!_m7@B?@7_E9$PeGTnwYRu34JlvD_moUweBSe3m6LoNmD zDk!+_(R+ZB9pg9YS)w{2KWI})NLAPzw4XxR=pB}Lg?+Kj1+l`1E)Vp*QH4(D$y~pH zm**xYO9Gr$4$8sRxs5IG_$N|iGlJsun9R+4t^ERSE%^N0G6|3q8fVBW zsfouS+kTObCL;uYq1i4R@$&o6lL>#n3{&EfplJ zUz|3Xt}kuuQkx`^;x8)91V=TOlbUwPtPd+_C?iml4ZHO*IGTF>DtKFu;2TGb2s``i z`DDYM0O)*22*6d^rw7094-WAZM^};V&sGnO)}FY(3#yVgk2@Y|8m;D3Wwc>25Q;bI z{&-A5uESQhKXqlZUtIj2$K-x<_s(XEjKV|!`l-i?zp&Uhz&C4@Vm>Rr{@#k=%tK(J ztJrw`${pTWcx9|x5lc<4tg_&YrK|)b>ThiPK;m?8LqkMHmh<{(Z3i0HQ`Q_Ct73&G zsz)p^SQDP!@?=i{q^;^?Te8+EQx!$U!cRr1X#%j`5?K$J{~`W0KVRqca*I@x<{O4F z>8(31zV4_}_VPj}EY&!ipV>S@E6p+y(^OGTlp+N0ZW-}M37w|{{6_mk5P0vbm?lo# z{Fp>fDKLZnrn(-{Pw{`l{J(i9k`ZA$nTMQ z*YvjL!-pMkW$Y<~)qWkyNo`!7#qq{C{=^qOumq3Q(c}-ol(`vkRgL&`A)FK)266t? zanp=Yh88H@?0kzUZ<=3~Fl!h`pZBzveo`P3_c@2rA4#4jbi9jK2xftPj}1fmTTDkz zb{*bPiEJ#UQed%9HUL>k{bPAky~$=$rwUPDfTTD8|ujgDQaxxO$Fh#N66yq2etI&PiW`iFR?dn z77(8MoeALkwDfVQbHR5(W;B1|xChw59y64(3JNZB)SU-7*A02hxl3KFnR569_XWdX zJeyhD4VvQu2_uZCHX?1*on{JpuAeH-B$|Aw#CI) zfQ@Le(zkCH7cK6DWgG4pdg{iv@%$_lJcGvo96Qz3^}fRF^mdYlMzXF1ggNdWIAj-^ z@ko2FvrdnM(4G7O0rXYS&4T|wNE!Y|=z#E}OBZuI6iJR2TLy>_mT%e}vH?4NoNGRo zfnGX?dgFEyUz5RQ+`tyU%FZ=$a$w0NJqy>*O!qqhZH@1g+41fH9!(-8y1Fo3WYv>Ee)Evym zFyVZ0TDbL33PnCmWaYlVZb)TL!)o8KRdv;6Qj(>w&fJ9N)$H%z z=ld`LF#BMUH7Np!)9=`Lc7fOKcK)-;OaE*fKR;I3fXcgn`$_{a;8L1rW>$n)o=~z} z_I3D26>$K7B*1BLQXc_I0GAQ6U04LR+%9u0LIhD(rX?Gi7h*bRPxU%+aWz>?^64Jj0m^v#;KCE#|MgLUZsP^52;?YUWm9Rufg1|2TM<|SwymkJ?xM@aZw0Qh? zNX)M>g$xx3mWqt&`T0WH(p0y&;(&v4(Dq$SlC_I(m$*2mQOfY)VBnD~(?rNj_GtRA zo=zOEDlE=JY3Mr!m%oY3PYvFY467y-AKN$&w*E7!`*8Imj&q%LG%sr?PGPL4j0QY^ zi8WBWF|w^?2lcx!nqvJx+TGYNqjj9P!#o;_8r28jU%|t**1(+_O}e-rZ6e!XX!Q7w z0+SZZX!zE?(M`|FC`m%0VLKOV-6a~DOB|H<()*c?ZDrTGLoW2TAc0;My!-wG|1Y-u zYV@G?yu!rMf!e&hV1VoHii$zC5S4*5t#w-XhKLo={y55~-J@v6l$bQ4&e>h4e+f^k zXPuX447&-HqmC*C%#uM+#g}Mj4btMVrp)=M0m=7A00`i^PDJWq5v&wdhB?0b>OE3f zN830x(uf!y1t!Pe;GL2q^66hiZXmi-d_V>{Unff#mG|An;m141Z^ zQBC18^aYzhyGD0UQ)>nF^`BAK43S{d;yV`S`Jy&rbpR?B!kOVcJ~^n zaCCq;x)JZ1;gd0#|5?_wdl$*?odAqc4sq2-hq!NhRoM)+mjtY?!u`$9-0qjee~W#@ z)`f2WS^Zo5 z)Bt#d_D47x7QBW*=ci*2$4>rZurz)>?3}qDd;OFO;~1&srT#cSVRo3dHvjI;Zl^{+$mvlr8LaV8wRGX0+wi&Ky!K!+Gq?;k(N;;ac@0H?R_eg@7u3f* z0ij>#(o-Y)^T_~38y{ae4ENt&+M8&<-ycLi_4GV3y&s@iK!MG#N36}WbTf^-Q%ue4 zwE;YH!=M9Ue{2AK)1JHxt4`@y*)~*+d4rEdu|TaGTw;l(XTd-2jy)#h3(t~W*X(yP zKX3!qIu_cV4b z%o}wVqGPH9)x&qOt_ARbRv+aH*wJ2IfgFAe?`&wX%)Pw)z*RttK~lluSm*2d$6Z3p z`oxvE<-k?_c(|Tti^MKC*{z@@;h%zN3VR)lk8tuU;#^>okr#>?< zKrSgEK=4)bI3IfK(-W<~0&TnVk~8xJ5f!xhcOhdc5piK{gpEOgr%$69l{dXm;lX1;;yI@dG-@4~PQm0(L@)R_lDea}Z~fl#wM>R}-AZFDfOrX%^&D9?!X?)*do z>P}lE5fSJsbQk}BQ(ph`nUk&X8uq>YLt_U`w^x9zfd?kerlbhueuUMb5)t$lD4U{8 zm{N)3l@qKAMI7kd*C3UM?et7t|p)tPYqFgu}i1qiGUA>d_ZaeR9N&}4oCds;$1Ph z;S`uI2wP7rH4uI^!H=|IWLn#9WE^O3CboyTK6DKM6)OI?PuSE{!=5%!e&nGYNb=a} zON#8HZg)#b&IcZCZ`NC2wT@Rre zdKY$NuyeCghx>Mi$%8CyL0q|0D85qbs4Dp0(yBQLpPBJoGd=xUGR4=kQ|mL`=s4lS zQ5LD`=xuoXnbR1#x)>K$d7y0ZmebjY&LtLG^`)ucXnLy{&?BN7Gs+VaEx{%}wR$nk zT9Scn0Ww>L(Hzn`iHN8;)g0E=x2f~X=DXV{-n(bW{r>XSb7GD-CK4$;=6K+!W;V^= z?&04&n6(JJ6G(XxS%Z&IJ##8#xA z;^J4f=ezr^EVXR+&zq=eLksHh}t|JFr%iw~4lUzhq9;mIo4w3`iWf8Y#h# z3kGEBkY9s%re7UMbic(V^)}m;P8?_5t9Bb7o4Pm?rOl$=$%#NC3`{vEnzaa^TyGu9 zh)J_@(c@<-SUFQHM7?-21i#3Uh!lB9X)*E?^VoY(B};e<5flQMkS~{UzX$@0~5-29s)1Qj$UP) zgzg303JJL(2;<+iCod2lL=BCMzQ20)T1FS4n*~U2xp{dDhs=uy=sYWg+xU=5d$ogr zor;$k4saRnlxe) z^d|yv=J8(b8TruiH=R5mL=g2iLbn8!-u_=&mqHxrO@zGaoZlDAS_*+wZals)x8U3B zA%S2vWo@fCk9X3*=#=;4OTb@JakIQ0i{MzmmFQzCzBE=kQ=0py`=$Ltx>q?XrYwEpO*N)BME` zRA(9^moIBG)(xM%AJK*EPd*L;_5wfOoGKz&7=a~F!!4#H>t594)g_gdS`B=7e{ivo zL7R`mo*}r26T7mbaMWi*z^bnH8g-o9!@f0Moj2Ob!Xj_VyzHjU&L-_VA>@+4eQTSOB6qE~DRWq1efKj|qGg z{HN^y5`+~1f-rvJR6&Kx*~uZ*N>VhzuS%#KzSp5#HH&7_Z0)<|(yr79MCL@9`P1Uh zis%^rwmHZ^kPxMQ|NDA6az*`8mN`q6Oy}^yV{&Fi3J;GfAv0EfMb8_~DZ5qOJGk=8 z9KUjmt4K(E(sEsxa!xs@<5Mb_432<5mq4Gtu;1q}mF6qwvVBe+X(<(+LcOI7ZMZ{x zNo88G)3{6L1Pk#5VXIMLqd{(_e*B>R=VZB4n*9iTQ~DJV4dTe?C}l~}(431^+S*+V z^D9Yly0K(^pG$;osOi+~8P}>hY0YkxZo9&q-Sh-N=N+szEi(lF{w;$a8GXVj_%xvE z9W-<0XBpDsdAFd#>YuUg!Z%VS(Q$PrGx+=W8GZfKi~vvZpR|Dge8B&NmckY#?_i5UE+xU3 ziW2o#Wu%h;!{7lw-H6k+2mt^T@Q$DQV%RZc;A!VjWX4A^!I26K_4W3PiSRH^lSPa zDT9U47c(He|)9IIojoLS;WE1m#Na}EHpAQXJUfA<+H;NU^eGxh%5re8Fr{N z@)awHc8Y?Ax|iu=Z1*1;mvtuA(V|Q1q@XWJLMzV!=R;U+gh&oaUXPJejB=75DBIAn zyqa&vkV(K_0&GB5SRhBB3`A1L!SY?X(?ZL-OqX<))HKiX?>h-M^d5%b)AO{Q{6@QD zv%!=kzWqn!%U8P1pGS@g73v-P#9Zoix73_4$idkpS{P*WvZtrt%3zch5bxW>na?fR zT@s8C3oM1T_Br`zq1q(}I->{0?AjEI<-1Jcr0u1ws&z3aHlE9{1MqrAPT?f4|8<)% ziTr`9saj-6UxZH4Nu7fd{z6>@N-L zDk#a^jg^LuP6?V8!$m!;cavKN@$-&bidQ4}cj4I6_?&+LFLsz-;n>8x=N|shm#=SN zV|%-_dd2?M24#-lMdo9I|6mNaQJ3=)|%}cw`1ylLTa2iv8K327iGFMa;mZFXxp1T*g?TXJ?>(oO@+23 z{10Hcx(u*m3P5>ktM`rqX>BVn=_;oh1#klS6yEN{Zv2^9oRt998dB$uCrG5V?M=LA z(p|hShgPOf(=Rr>59(cK;^9f-w$aTQM1^=Nx_Rbovre(3YC9~ znJ3CW@*?JJEoZ@giU^K(*~qX$O=-GZoD_H7G#~_Hk0H}}!jUp zUK$D<-gS>ZxM-9>Gq8*qBe3`CqpyX(9qI1ha9XI14#-`9S~n#8Opyd?dCepzqL8ata#62o(2lh^mK{ zG}PoHhadVb30NP)yYMd6GCXvUkKSPqG^aJ~m9(@ZN<#W??`i_7s0xD0%IqxiIR6i0 zZy8kA!fcBM0zneo-8DGDo#1Z4-Q5=M?h-t>OK^90cXxLuxV@QuzI)C+x9U~xUywgk zYOOiDM-S;XDKVWJ7JjkwJ~clFSt!#MpnV=J zEp&62qrA0)9@3Dza5q80=;f6m)}*6C4tF~QeA5E{_vO>w)q=}k^wL;sz0{(jqGtLe z=ScnRUhQ_uFTrG<(K7)JX=Y;_4+l4Py=|epd!H*lBV#yc|I6_Of$n`1t5fF6S;BJ~ zs>h#2;RMk%wC5-3*$uWVZR$G56Ksi_E|!Vxsu05510#WaKB%GkUp^BPwVsbYy(B*T zd58e>rXYg-`mehnG#Oyi4Q)wQizl+-YrxP7CA7Bpqo}(IVC{fCEa-EpIpW6%+veav z)q*`VR3`F1-B7T(;HNO+=chnL!2d1su}*b558vrfzR>oXrdkl{ij%`<4JKQwvbEfVyIk#E3*bO8?8m)I(jP zr6}i`^ENfewC8EB*3hmh+XF-v6Oq7<7K*ds1Q0K1`{N1a9DjDsoW~VlKZ~A!)!C_} zpCz$&l9A8Epck)n=A<4C$tnA6*-?_cZX$bTVSS#30$A!VGRERZ#{JrZxE!S&w)9y- zpEb8$aD(;FZxQPd>}!+m7vLcwsRW-r8CX_DQEt&t<5HwA+$QBq(en03kIaPvJWrf> zcpe|LzrUhFO`d0Xak}V!C8OYI&Qk{1d*GlYa)z_xeF>8%5Sohs_H`Ox;c2*l#AGG) zrE&^D#8`%5Qu5oJlo&Y6cthvvL|xu6hR zkv(=dFDp9~`08Ds2sCqa*V)g1zh7l=<~C&rb$&KZPLYWYm-zb19#yp?4~rh2($JgR z{IC-x=Z564@EcPS!2XE5&9j@r)sp{SIH6gvpD3eV)fzEhs?F`pS$HzEMRGvJ$mmO^F&8z(-23?=Q|E!}8zgQ&%zmQqy>}x~?_E3r&JK_A$GHU= z1?eebVmA^Cf!_>G3Iv)Qqx(T)3Bfbdp~JcWLIy5~Q(=duqp5hzlUE2elelN&LecuV`FrHLWXqjO$bTpX zL{0F!bCByPZ$rAr~uazX*eFrb)p{hs(JYF#0jl>L?#O z$`fam04CVwM!Q#7YU-30Ys)*^6b;UJl=KkR-Zq<~ScTz{k!sm}r~_XVMn*Q78|yM|6mliSQE$Id3c5dd)~z(T9!`DUL5BG3Blc$LP021pzm`UX1% z6yJ_;4_yGS%@Ya22_fS0-*2*S>6GT^dtAEopNw)LbKgy{UMu>WD#%5pVrZvO#whgJX_d^AIIN|le9U?S3Nx(^N?dU z^22aur;LG+%Ol_gnrz_YCTG}s1H-^s5CO8j$6D7J2@`Sd{zpza{LgnFKO`p-%hVm~ z051{aBKEOcrKrq6qd@DMRfC4+np0&JULqP0KhBn@dm_AcJI~^T9HXh)1P=@1VkptygfY9wrfoF7y(0!`gV_zQGvDH z9X%oCa9H-?(LvT$_lGkGFmFJ@8s89-$N#r%xDUS=(q*BK%=-En^&#G2{G>H!*}AXH zwX9SGlqUcE8-iDW^?K`AoD9ayedZfoett5AaFhA7Wv>Nz^RHj38N1YR=~j>q^0*Y> zT(ph$S#huXFX|FBKqoNv_aV>uIvA4OhneY&5EU4Q2%Z}&UL zt?jPD90_sTS8a2$e5;k0uqQ6lYzi5cIG7i&#?B3 zW8Z?wA0AimoO00E)L}kLTrb6xFP0f(N?;PdKe(OO*|fj4K!K(6;8}_i13oKayV)s| zf5$R_A%+lwmjjt*%NYoDiCyDPU+V&J&g5?#978hBn$CoHheG@mL`r?2X;x`|3_QFZ z6m^-E^b8Ye<6mfk!yEQ?$0>k=u(*d|e;&#FQZ zcKfeT(2jY%@5>{Z%L@Q{jarp(e#U|rNi+n}k`4l?9T=`dc6+s~&zAGip-7+KmSB&n zml7)CuWxD+E)S3ER=)A_X7`e8cjmp8&kQppe>xHw(`r^+5P~`7uZ?&dBkxfxq@Nia zq&!=(a8ENogS*YAzyI!^`?AKO*3lxIJf)8hqpGnV4~1X$kASx z)$2f$HzFpx6AgW;un6`w^yvv|@$BT=XD*CMPTn^YWI9%)OpvjHpzX~v0m^^P=4U)c zwi>AGb$Gn?z5vcJeXe(u;UeD9U^I^0k@Yx5)oNSI&S)bo1WvoRjl^TK4ISi-(VVB} znRq`&AzOy0S`hlPZ>AefJp(QMD zF)@to=-;Rr(?jZoH5)(!Zov-O$nr~qy-92xkgql;$WCFRAAH3C-dHP-0PK+O-&PTT zCg}p;IJ-=DeEP?9_Sw)6^qAnywwMZlID@;}t4EiD7g;-0vCU7>RXz5s1<5|yMC|W^ z2rUcVL$heU08{^8AgPAAX+8;NXG?soYR=%4bz#~fy)8KtUmAw{qY51;H9TZ|JvD3I z%PD`S>8e~PYGEZb$c66F5L5cxiPRSp5Z#tYvoarO&no#gLgeVEs05_@7aA0CGq7=1 zj$*!Z-A;jN@j1Uy-&Sv)z4_limSuzuWA7D^gZsjrs8oI!U~8c6U@`p!xz@Ij(+eVI zLf)DL+#f*_GoO!oo5X|yg#(*N1tb3BLK?9*p6K{IapktiB1+jD}hjsH42Eg$1V|4rb7yNteZZyq@Jc~KJws%jeS6$v5 zIhA#)KNH?zd6ymfa5Wn6WSl?h(nAYz`pW&%bZ-bQG9bJb(NCMR9^*0IT74PC3^TH; z;T?6bq^r_^g>ZDs`5V%*71oVKYXLZAqKeUHFUz_z_plJRJxDZTQ3DHcU>Am>i6{ck zL#LC4q0d5b`Ko@lat$)+Lrrl|KkHx8GVmixtz8dngCC>!{7FT1P>@KxZFzfk0_?#7 zh|(M3=+sq9g;4&^3Jc+;W5<2?BgipBaOl%4l?K0{fAz-5Tz~osA*hK} zT7Po#+wx9kmvP4Zljqu2E1h3+yLL^b%c53QA8}Y75wzu`)1J z=Xhx}`sqjWD_mkhQiaCZL>IWc1KS%^9cj7Udl|3;{@w`R?6$ZapO^rf2~FzSE1R)I_>b9^x2n5J|H#_6x&ozo2nuYK)MliAmMRT z<~%;_c^c*%*Ed1zag)??a#ZtUb^@HoWZaVu=UWdR+&0sIdMD!v7nreXj`LDq;CSkW z%X&i8?0*M41TFsU^bHt~NjK>MnP9~1+JAl2lG186KClPhNz)LjV+D z4go?`@+G&ES|*Cli7XW2ZXEp7oN}-m7Dh(auVhUGSKAf@x4+#zb_%@mDQROs75AqxteJv zo$=qgqmFC z<_R8qviR$!&JV^8&N2wPb)f3Q6!`XybF8eO5tAa@TXYGrF+#hT#3T)e6!Nv^NV6RV zdG8q0-d-6?NmVIL5yPoAC zi-k{~4^Dk9P6s6EaTo4BxZBaCuM(})2k-oWsoWx-B>M+yzQrH+0Q--N><4hpi)13G zf7_mY_%V^73w&fyCSWpjVSuF-(tmC{9>}#CRRzdrd}d;nYVCMD-;*ym*Vr^-L;#VT zw}yYb>7l!s042`Yf<~Sm8Y1k2<{`K+tIM8DwXR11q$3`8jEW#l=5P(LDoHfCOj3(o z`VAhRXBGlHMw%a@Nt#EwBoP9A7hm0s*Eu3umXcAyzyJqu1D~PJUZEr@y_Bcpq@N=Q z8Ghx8z}s;nXnf~&Vv~duLMtB4$ng4GlsQ}6%=W?pYu)B@eCGBfyNIt_MrAyR!w|PL zvvAj~E8{fh5;RU9oI6dnL_v}iT+?&%?xF~Lqa$)r4uOG9?G7te84~C`tkv#W^!j`a zkQ3YE!^$fbO*I7}S%qr%JTg(yIZ#RN;|HasP3RPY#7Lk2a%7n;=uz~v{s#; zFQMxh7w8CR)ij8*IUk=Jrs;Lq1yk9|@_<>;W2{AH+w|$ue+6&#&Vl_)nat%17vPS? zjEsy_bW-LFzpVyX-W6i8jv47%h7tAI#~|@#h0`b3cos7GAK^>ciUh%qz-u;13?MYq zNGSDxn96@uuQyG=vnjJsD4Ip<>HdIZ0n2pK#JYSG5!2Gwl(l^!(n8vNijMHP{ zatfL*U%J+Q{4z)|8|Z*;QjL(7RxHK^v$aq?(gmXoTTbJ-;YK=WcYs>h|K=MyrH6fN zS>XHT$@&@2UjbvPL0feiyxgGBwIRgO}f~vQY zYLl7I)53aX=&^SC{9%?%ILt*#$nfuuDWDxo$jZXVN%x1How3-ZT2rgAA&rH)$n+D+ zW&dvSm&qtL?Am5Urx`E30A^|lv4x>1Cs&#R)%wzS*y{rzCCH@ge8DJN;qV&9<7H*;@^g}n*>0GQo*`3SP+J0#rOPD!0NO4S~*`_=XFR;^3 zhN~hShoYF_aQWBQImbZX^aXyaAFQ`T0z-(DlArkbXhbM(C$AKbC2RpZI#FotC?j9d zI2uYt2k3VEs()EFQOH}n=7YR5tZ4bEBPLq|^Tw5&%LmNZ3^!^|}#z;EImpoarN9LG;7RoON#^6eY? z(~EExE2p)i``4i;xF!)CtO?unFZlMAfL0By2u_@Zb8eRV_C}Nf?CF!L^06kS8X(R( zF^)-rt`iXvq2lGuxG1BTZMID1GvJ=`ir2FIWF{c)D;eC(zlnv7o&A@{A-_+G--XJ7 z4QA>SDDz8q{nT_0cak&%%rEd}en{C(U4Olb>geNW7zdE8%U<|93+wDgc9hqmfxzYV zqy4cK(t%{?L!m~Zb0KCpm5Mol_i=OEX53ioH(vhaeZc0{#%h0d@4O<|*4ovj2Uu)S zYRz^e)N3mz3-_`2E)=%}1`T%`C(pa$c0!e_8F#ldP-qNOa!z+CmuuJ?^(zPo?TUzh z8gR2R3BjRJP#M2Tgh{YuR`?$Y7G9J>9|Z-8n!1?A%Vd`2EdIj8KCozk;DD;osu3y+ zH%M=+IA3hf0FYx5yZ7r10KgmEcc|!w>M%9DM}xL6XuPZVIS3gR0Nl*BAd30=@!zWc z(0^w#Q~VDp9|4G*&B1Gm1|0wk_9`T7He)G$`eheFSw}S-r+aV_)e%lAb}%Y#C)ZTl z9My`ty4g{=DtE;cnzI=TYo?@3sAs4BrvN@sL~JP-7T08YK9V03U=pQZ=Kl_549mdH zUHr{R_7gPU(b%XeAr+!xZ35F8VX{!u8vub^m;&U8$EzWLy@ZKZHzpeewn>;S}(D525;L{`(tU^{N}#0q$3<$ugcn_nF25y>HyX|%-a8~9ULa)8cZ z=V}hEF3zRBkebarOAHzsv7PQwl5%poHTT5W;tYO2x#6`y&QB@Ip3W3QKko&SpZkF= z9z8|a|4y(0Wgy) z#m|f8_{fmMAw)=3?eynicRu{0RR4(wRFYDC4igfM4ar$!`+5_noqy7*3vOdlk|8<% zBWamCA35w?oT###0PaTxLfuAb(pCpSy07v>1fTp%s6k;<^(qAVV5rzQb-bi*wkG&R zc&ME>ufq=&!tG4&t0LrBKuTsu>}#P_6yn$(C(&fB#?d1B+yRbN{$m4JhgKJ#m{J-5 zx_Lc?Hq1M-kL32)ZMCNdR!n{-qaec`GG>>yvLczQBuNj&i3-nBlb>pb`1NBF{rj3kEQpL#!Th0DO=5D#nh0{?7;D#e0_#WSPFuw-0mKuVa8@$vY zX`2w$X8>MFELwK(g-*QV%+uFIJGFSm1a_8Qv7r7LAcSxT`bmTY9Y6{YWrFsqla&9K zDEk2B{SSk>yelEZ#=>G&GXeMjTq!6h%=Gm&X$h8^<#LEw4WT%B(ZgzH5*=ngsa1s*06&Ig5?$8q zDfGbwA^0b|bRcJ9w~VsD@ygTGadM-i&G$J*NGK^LM#6nDln!xgzswDI>%MUd8s*<4 zkZ8H7hiw&;dhhLFyG^vfGkxt@66DnTCnR!39(3Zo?1B(k=&uf zaglMuHye=68fZG3N5jU!&&y%aFiEfilB;+|SHLOs4(FRkt}Y+za+qdQ=gvwQ?{S1|zu}frXG#q(yP!}KQn=0=nOH5Q=J0WxBQ253NnUwFE z6J2@}eDFM2zw>tVr&T9YR+7S1UrBHNH8$$~|92&ut)T8agv0e}2qdUgZlWm93~^Eo zYB0e^CIbYZ5D&aXVBzWj!WKMyVeGNO=)5!21X@wC)&eMLO+&AiB~x**<6 zNr+wJ?6!V`xWMAHDyoM4l&5-lDuG<{X~*h41|J9puz=}Ic$Z6ldBL~q4+U5uyp;v0 zb|y9!C7lYzD3c|%qtn5fwCb9fwLI4LlH*}oWVSjf^pY~8Eln@&`m0eesio;@@c~)o zzo}3FM}_&!lHNc8qL$(-0Un;BjQ>bdf`WuZ?7-7s#OmDX%vYCr0K@*SwNv#IQEKz7 zjsv%2=BiFYnc$qj-Sd38j&kG_o&0j>3-KDqOQQBgmXPOM?Ru?-z?+L*E zUx<6u@2aKwkVs3LpO*)bb24C8@W^OWm43drmY1mtNL)89eWm{!5iY$jAzQK4Nq`+Pg^lCqTLukqPMgLM-*n{p zD~%X^S0EX_pcddvQ>!T0Y8rCZ>Kj)3-+$!){)I@gv&=_EeawbD_CSW%GOkco@ugLQ z{BAC}R0jO%K;g;Jvyd#)E3-8GV>+;Nve_R8LryS_5hdh2s=6-L-F(m}r_y?Fls;ul0^CnX70}p-aL)f3x)D}feP3iDFt;{}3 z5g4=`;zB~sE%h;fsYkYEz}M9SIe77FEi!b?8sZa)kVtbB(#t^cOtN8eqZJtcn3pk|{0 zJDqE)adf)A0cpSuu$@KORguTX*y8Q}T+WsZN>-lq@~J~|(;Vrh@jBE~#qPg_lIGtFd*W5pm&1$Ma>K~akm#) ztkrP~S9e@Ang;CBUhEv`0&Rg9W)D{i#m~N~$?;RmLX;J0uGPMp5-okrZ?aC?9m+)i z9k={nzwkpNLj!>=<87&HW=7gY*uz~c%!>n74oxCEW6g^WNU?h5t^#3MwA~gA>X3($NW9bHV(VDwj=vf9uPX6@ z3Q3mBOr7Q4z}^MH+p;|N4P%`wwxD3qCHc}Q>-Ay^J4ImB5i6tDRys_UQB- zV`S?qj>c_!xFKgtK%rw5ehja88OOv--cHgJmgkRNI|Lu}y92MAq#{JH0 zPf*Ua!@$W|Oy1YejHA;nb@QxXQhCk(+&+>2#>s`RS#?WZR>Fjc@Q>#N=tGEV5XO@H z6!F3|g^4dK(f|^0|Dky##NSXvn4XwqSn?WkHxc28Mw^kj0*T2&a>Pdjd zJ%GX27G-j7-Aw7+K$f>X>HQO;`hCc@&n;8<=zO`h;7B5ECD!d$jQsKGVSd!O_3`Ox zez`TTn*HF&m_j*7E!m9q=(|;J6Tq&d73V=+Y={8TcFi<5($(DTEL8)aS*P!-1{K%W z+NLqoS*bMF?^kcu1>ChS0RJ*OIav%SX6j?(5{3Hc2xu64R6wjbJ!WqYeLLv~jyT8t z%xIqh`Rw`9>(GNjpQ9tMW`}jMeX69G?OVeJIj?u-?#+E{AK5V>I?;95o>5Rm_BC5i zxMmV`-v}Vk_rraS|E2aUqN#hpaq9#}+dZ-e!S`-9&GRm6AMh#-pocsc8kK>HLi86nUP_ZC!_1fc??gEDx%Mb%5tf)M&#=r5VH z<5*Qq3c(f#Z9oR)M|xPz^h{XyI-vA?LEx3>c+9^4RGjjY()q$y)XdiQr`KJ_yFh;a ze(*5S6vMY}THkA{=ealU*8}f7M+=n}X|5z^UWY@i7tsg&zoF3Vu~gPe95st0Pl5-$ zxjklzjXQNz&Y73&@#VK?-i4==vHR}S+U#%TfXL9lP)PEEzDxUOF&BZ$D#e4M7mS^G z=2qj%X01G5MaMI4{eE2sFc;Aj?hyjZssC&FKxZO9CG;WSop6f@0yFx;ZxnJ(@4J^$8(rGcO?@^#q7H7JK+K036SI1R4C+ptPF_<1?gC~8W~2}7UlHtp zkN=GX(Hgv&9DO{E+cO#8%a$v@ASh$y&qSuD2FxMgrBkI@=+SS&Ki1vSw8<2QQx_EE z1{m8c*Bd6+?InOC-7U^L>I??Cutx+Rknu~R()O-o~hSOOiy{jv$q`zbcU2zEy4 zpPd077OicRWHD=L_}U!q_fGA%-6@i|I4o1EK=wSpkW5iNM(rCg-%^^W9Pre!)(Q=;JF%h;I9ck4sk@a;a89G-9Ck8YbR;d;*#fbWS`W3~qTfu$wX@I7 zw(1)*&X?*!udlh^UrW+EoPo?v9P}??_6AeE?C)Cbw)h59n&C3vl7{J-nsn}oQFMkK zOfmnqIO9N|#nt%XB>;^5|1=~1L*!rE3+Ey1G68nzF=@;AJ21T02QUz_fLrTEXs}g> z{5x6IPr4Y2uw-FJ;%esbliE;)ehEQpL|f9!r3vrkbqB^S7m}oCQYI>dQj<=GEsaL4`Pc2VBD<;qgq+f36`5vIuJFKM#?@8p~W+5CVJTACu zjhKN;l#0QZ`Qlm1^|3_jje20|emm3a(&i66-wVQ1osMT1 z?+t~w{P)aAK&m=K`RF}o~9&RJAfiuy$TWPCD<#{`jSvXgs zTx9ji*YOUONo+@eieydNqI#UHi}#;LmK*7pG+27$*bs;Xa0*y~ULe8`=jn&DbJCj5 zBy{%M5 z@IZio+~KJtA4t)23}Hle#ZVn*I4OqjDQ^3fnyRaqx?4NUMf2B<{P4_1w_$Ed(ShgC zcAxI|9oKRvNe6h{MJVtZVZv3w#khVq9&=OceSwai-Q*=cZ+Z372fC0`&~HV?5ySZ_ z=>1FwHr6!gt6_}^9WrZp#<~f6=rO@fcYV|_slh5fpP#4WblOJddHB$>l|L4Rqs>4x zy1UFV*ipjy=$wEa_Rsdh#n-4r6V}A*RIi_qT*T`~=SPL}^YB1;RFT-bAx!w&fHjC% z=vMR>jE?s#frQcG>W*DcH(*d7-r-anM|mNSW?SbjTSdP=UEiG}nqBTcnAk}=^!2~T zYQ_gvqKg8aIO>Mkd`U?&uP*M?Cu;|(7_$Hh3RkRE#v*+cF}o^}zs*?oZ!K!sCW+pfus|fodTRpFpDGzH^{@|q5!TRg44d11dUUILc_)bVY*P- zsuf{Ak-Edq&+H@ydT?+^bWe+P;`cE~EM>6 zPWpg?H4>!-MDy(I7u6bT3Wt+rY;&cGZHJY>kWYWwV`ujS1^qh*Rz8O)EtFfKn96k& z%-k+a!y~DYP*Q$?nHi&{-DcoYAbz%45eSDNgg+63`JuV$PIQ}6c2dFoGbiK&5aFW| zvloh2d}Eq*RA`wF;&d#A*-m406}2$1Xl;C0UM^=&l07tA+%PtFD&Hn^@Z0-|1V>z^5J02`-iO^;WtQPZt6cOvDH2zklFH^Q&8<=NTFa zQq$!ZYdX=%2JcYrCi5Rq8iH}#rDz3e9(>|0Qa;ca`Z#w|3c|P5ylC974*0-9J)POo z;vTbB-(NpCjH|0FRaBK9`tqW|KGR_ZPqYuM-~UPoB@bJGiv16hNT4RP{MQ;t_`uA|M@);haz9V{qiZh`s5@M|}IX=_1Ec2<4R8Z)m z^u676slQ?E;9)@J52O4On14j69Z-9jgXyHpa{~u^q>O$)&hh4&?qH)tF@Z<$bA0zf zT_#5Pv%#@?`Nz&AJZIyU1NM_fI^|KMng}{|MIP0z1!vzJv_oK2pPV*_OL{q96t>w? zu?lVxk#=QUTBWT3M626tk`BJ9};OW@OO zDc1$6dX+!Z5mtUF%Hbi`WabE)z=?8X79%o+1lMYWWB{!OLZ^>cIw3oIR&C49<(*X< z!n9KVstbHU7K(kD#e6OBW%OQJlxCc z>GRr=Amowv-R;lkd1+rrN4Ioj$Vo};qIgL`lpMhQ zLKS;eMaevg1C=4XAqVTt17S&r_=Xs0rD~podEC%W1im-e0ogRvFw@tkJ7j63Bi+4X z$IBhrj_!O(6(RLDH^(fCB$>9;D%)~3(HK`bF{4w9D92QS<19M$s8E8k63pX zd>?u)aKRhkjw|M6W7?kKI|;nYeR_hU1&x(iy~M2Gv^bpu+~1s&#H$CIZ&P)9`p1By zvvx)5bzzll?z`!>@85T9>w6qj?@o}56blmta0-;YG@o!z*K06fu-{SWBRU?;qdIpM zGSLNJpB#l_N*0Lqy1EIr4y$$$k?i1fY}taN@Ky|x<%`v^f4|VGzmS|Rx%0;p_2rpw z=`rjj9CWoPkhwgsA;c){e^%UZfoxA>!I&@G__EgG7=*BqNq&0de=6HS<6mdN1`Ww2 zk;iG>VMQ3>`oMd6eU0pN9sKlXtu?R`V!nQ}tv!B& z{e44dIB9U-85HcplsexY0|SjS6?yx80ONdpnn^nsCug9B3A`vxzD?`jz(fx8^99oO^UK(_CG2ye}t@UNuE?nwO@4sIwUqPfwHs2`hxIFec zy)~{za0t%oJ`+M%!`RFUc6S&iyn=%%PUG3n2tLM+f0zx!!S_xNW)o6vsW{b&2Ai6Q z?PLmhMSC3b9Z93)Dueh{D(4R{*i(M3UuC9hE%|>_+ff+O)03y-N zTO#LUU)%ejFtVXi&ULBO>+PMb?@H>jla1ksi)?y(#6|}l^qiQE4)FjL1P4K;#Adj+ zP!=~rln$7cJI}L+&~V$UX%k0o4hrD0&QOc1E`n@bZ@JiK*RVC7W?OioF#+;sG3k* zG*NPByi*PIhX5f=i$g^h1walpFsv=;*LSv%IyMNTvsDu5TE4X36U50fhh(Ef^?N_& z9O!s(U?jf1q;kS4WD?sWKoaBAYB3Q||4fa@ymy3 zb}sP#@?Ng#-&@2hw!K(9e|s~1akV4kxmfRs(Rw+3V&2Ru*xObCoH-3~5rfENE09?* z4u6Oh-Uw@t#=XrVY(j!DdX8Enj$VGbd~JZVi>RL}Uwej)FN9de|GYn@9BQaiq3s{s zFQwFw*NgMVHN|62Ct@eqtWbZ>(kSU zeO+g42(8IP23xpnO+lolZg?80Lw;M^c!C1^4sJr;Ypy3@s>=~y*UX-bE_K0S8_SUdG zaV%1Kv2q-n643$PfPtPJCY%Tu2cbl_%`H1(?}>3~KQYm-iMld|#Gt+Rm3kDwM+H}> zwd2)xJzeA1N)5MrSM}$=Y7s+2?Y;{ei?%2M{k*;z94oRjCtY_>G3@m(Mwz@xr+3fX zFHuCqzvQ!awwEvp_zex?RoT|Zg`i(I+ZvSg3tE*C#UB>0;&LLc5N?I%ZPHAJ+ywQB zSDoK;w>5d(=cN{dp10{cUe$c~*{r)~*mL*oR2jVM327DA97fyz45w~;2p^P1L`XHB zoIgWOB>*7ue~@V>Cxk>SzbFrh5eF>w5PbThQ5rc`79os-U?BX>&1IYRSuxloY{H=? zS)7z=;wyo@Jy*~$2&rmlGsyf>$Q}e-a;5c^kr^i%0(~9G`hI9{2$#hS4@!0t>?P=&-$x&&Wi5~(D^P>_B9JRKQ zQIUh4xK8~~$5XHgU;o0*>Ae%dwx3F0%HV?GGe0R*w17-)T2?WBHAmOh%kC|;*WSf# z>#Hj_l%U(V&11?#=v`gL)CeYA)%$7@5q2(^FCMy(8V#&`a-^-b6cIt61j$)i;y&RU z?(Fu^cFoLurv+{4lTKDG6*wB0&Q>OhH5lPc@`%C9j0#Lp8F834kVJluC8F=&$s@rs zacZL!^u{0r0);Llg7|DUo0)R#QEq+bc}Lt^o9$M&p0dINF8KA;@p!d6Hp%!G4$ zD;3;`Dx_Bs&H-gdnm;jHFcy^vc;NGh9SLBC>YLB%!8SvW)lJ4T{7o`Eg%NRhA2DG> zJ>6g-2_>z5^NK%I#+!a02E}E1g@%Fuj*fiW5X;`Ivw0Ut*!&)*Q_=C1Q#pkkOX+z^ zg5Z;xNl>cQApbKX0O?ItGAq|!hz^T)%)#*g>;iayz%0^eV5JVI^N$$)LTbWI39Tf= z;C`Mgj);v7p7(OwKkE#sRw5EJ2e&(C;#Av04|`Iwx%$FPPqn;gOkRj}53Nw|Z#$su zc~J@DOt0&9!T}=_lb%%@bZB7#;y3-v z27im3v&E*}^yVFGb$0bk)`+S+yv!iaegyf zMa;?3-#p>ifN}gv-J<_UFNh{LZ(vOY;}9>qazD19BhXh~Pzi!11VM;?NHjEo^S-n^TDSx zwi6K#Y5F`q#eR}T8dgx8>AjNe<;VW`n^?IV_Y0d%zg|as;GD(0qRQsPhPT`g(!IN? zU7*&z5MxvC4lM7i&AQ;ZwyK8b*DZ>z?%4^fysccILo1yA?DF62!^jW`l(b=-DXF6E zk{I?C8YP=Pz{vCr$lG)i;~e2P8lJmc!qEA=yW#oli0Lsvh?KMds~&UknKN;m5bVyZ zm35MrB(x*PCxOqQw4K|in6R72<=xcfe2HRfX2Lj`bn^A-S%=|frlR-C@q#Cpkb(j# zF-M;|CNK04o2f1zsRDf<$Hr*z+&dl0f$`Utp8bDV64cMWH3#E8_Z#mYc-cR)t?Ah5 zLb%;ArTq~guJ&Bv#ByxTXGS`Nu#4h;W<*RrM~^+DjBI^1TZ7ur`t}T!_44DG5if!a|5kyUj-KE%F?`M;-SFTrVI`?VX5KQIBJs=H`CM7KAp$~{#KDy z>Mc=!3UeWY8NM2%X>@wSeFzHhm#w^oJ=qt-kHY*IV|{ndMJL8CFV^AVrV3y!2-hSHHe`5R$QI{oDx- zkx~gFA3B|_hxdk2u5Y z(0$^vfsVyp(hhGeM?MUx{IfKQpfvY^c=Hbqd&H;@YJ7-kK3rbd{W6YCcph*~1Fc&w z@YpvPAA_`g%NZVhm%=PFIT=!jE;qVmRzyxNtC(Mum5=TbKGf(bnK(Bm=SM!I} z5=g#7U*2O}H8#358XQt0CDm)xTVv$mO1zjnR`_*Ne7Ouxv$_y%4Ve{#7#ongDl5t& zn>3rNC|cFZ#YfEJC&qZKcE~2Aljo%Je7#r~r7T9C2s!*7zz%z|K!dUJy>xS8?<sjPE%1XegywsqXzNFsY~7bYQ@`zi;vi=ka3M%WwIg!qAtcWUTTg;x5c* zFdMEEB+lbs6hJ#fach_MO{-gyp4;nCM1)vM=B>1ddYj~YQOI?JG|wixrXDP@y?#TU+(WcYXxLpHZ;dOFyMRY*Vd~BDy=<(3SLTdaWS&ju-W=wQJ!VP71hYaQVdP0i^;W z&Gntq3>@$G`cDwTYiL%eqJmfZbw>2{O{h@tdo3yF^w`y%L+~+?mmJw3)QjiWEusI9 zt8;L#E9|y?W2dogG`4NKanjgM8aK9Wn@wY*v27=f*_d~w-#Pc(bN_(sy`Pn5&3Dc* zesjExw(>Qyl+X}d?y>R7FdQhe+a5YJ#>NLE;F65?BE6wxliRJd)iMp78XDoWirA=! z=Ieqnk~lPfEb&|CK~I>oQh*|=_!CKTaw4Qzm5lO4_!gKXb=n?&vuWlOqyVWEKy{@@ zZCWuN5(#7F7C=$zUSCI8I+`Yvwfr_RjwR`gfPB(G(^heW_fZz>{61yDj;4cVae@9| zA<-j%c3ySE>pdvb1|$K`k{_u~ohpxkz@lc+d7ZYmWW5Xv_3 zyl6EV%KCdl3E0)l^O2}^&Q^Uv>wY=qI+Y~%Z^#257F=0rjWyNvD{LWLo*M;1II789 zrjaV_wJ)10W&hckyGGoSg6gWPe4#$C5Q(ML{s+Zai0S{aC%H#eLK#k4zd^ zP%c5yJco?`^DUNFVv+XqXSY%wpYdZE(FljIx#URT*MniA1(F9AParbLi zPhIIM^4{Mf`r7uyV55f74~WFj_W}>iweu)XW5|cbMTMeLqAn|hD~%RK@tIOt(UJ?k zuRm4sn(Aw6v^o$;Y9xflapnz&VplIojqx=R7_dRayTg!jpR3)j-egK2j-lJ-=lCMp zdcnCP^2!;5MRN+M_>$MB@LWIaqhT+HSYI&p5aM*6!$yrRYBjlN)XH0OAw~g(cNRzm{ z1c~bKR-}6~iTVs%iRO+*;&HN`z7UU4H7L4Yg}9UoB`8?b*`(RE)6cpO1F{M_Du|I9 zx7}yV=8m#Ao&Czv*ggwKM;du>)0L~tOvznTWrMxY&Tr7CH;0wl@z4FhpWF%NenB~u zyrrN=?AnGuHvJ5ZrzHW5e^ojS_?8Qm;TIveJZQ8sv{g2K z(6JEi%-&u|9jm$qxw4^&d7fB0w!3I?}w^FNl&KToS0 z9Mt`gXg64%7>z^)m579#z${^=Yl}%KFkuAgqmGH-R)ki!wzZT7wtga;-){4`ymja$a#FjgoQ(W({A6s%Y20HgPZv=xvY=E4j?j z8tI0HHOg-^J=!yHY6_xLCIw!RfF1|O+PqJ4tzj^T*EB*o*YmwEt@h<2$^L?mbh`*M zhq^YaMlT|;?Y)GGSsL`$T9+LDq$pZiq_oV+YrbHSDM~2k(@+6wP#y7Y&=Z-65;(U- zi7v|3^|>cO@S?uAQmKZ88dZa9;qT>&lD|BA=Feje;<+S5-Qca^wMn#pu+jueHqV_W z3m|RqQ2$=x6G6<2i{utK(_u$TI-v!k;185VzQqi=K6!|Gw|Xf_-jlA*7ITrDmwVPw zpI`*C;ZH}+m}ha?!cxmi{OAK0%AG~tCQFMxB|nm@O&%N#| zxKvse0qxVq_^uiF2*=0JBw@+vEKkT^xy55)wyI^4B`8s@|6aLfnlKYr&GYq4l;QyoCksl z<-!|RE_caVS>=s9#qzEcIC%3@FMhmz!_`0e0kVm~W5)pracidA#$*;2*tL*JoF@xq z6cdwAbYH(mCKB)NCgj4FkH(GYV7nLsa_DjAL``~!wUYoIz?oZ03)PNzcYByMe z%i%0ysNqLJ4ozQ(i>c`s|BZ@C6STuTTvYTO!)uqnz#F|mYWW-aLk*hIZ-SnE*6x+}bab6T~EA zGN^oVg0DujFoeaS>?kZ!{3I@Qn0m^Rx}vu6zs^Sa%~K}%SYSZGz_zZg6vFoYO+LM_ z6P)WM?}|(q!26azch2|RpeAG>_~}ckfOer2==$%gnBL|=LZ!2K6=j3&-0g2!(4={J zN%OqBLpET~eZOI1!i`nHndtm%2OC|sj`DKU&QtW?e<%pNC@r0}s*P)^&Y+d-O_xu^x4uZ{Ygh%c&^?rnz5I-oQnL=KUlr$SKeDf#V0)&#S z!3z0Hf_Stl{9kJuv&Hg$h9XIw*iCu596_J=M?LCAiKUkEyp#`Qe~;_diEc#Rs(&wnw$P#fIMAFu@CM3YS+Uj;{l*(k;oNue5?lEV5a z{265eo@m)5AN#pfz?q2jkHY$|T|RtyWa1`Oxel z45DUIzZeZW$f0X`Oi)>C|Lz~u_6BMT!|fpQ;HZZFnBu**Rc$>Q?s3y^T~D2_(jPZH za2THW@))cc#graUma9Nkk*wu(y?<)3oL5CZ%=UF<)?0m}lqo=+( zsVG$nM}Oh+I4vaFMj=jD6%R|atvsi)*}rb!*a!y3iBDz0#U*B;e?gH=!X6eov@!Eg zqz>4QPmXIr=%_InXP4z1-1)n54Y>a2-|WY&>?BDl!H7rH&~E!ZLK-~$ z(JUVzlR@MUrnEoR>S8>zxQj~hCj+7f@z$#=jU(KC^z7^)Z>v5?Pxohm7usNz_?;rB z9-yxtB^PDL=)X@%=&Q|f6E`7f5z#NGT zSa@JnJuT`|{V6M@MnPS4*P(bNT{>6xn_Hk61sNhGPI9(c$;L}yQ_^+TcJ$W)$tB+| zS2KPRT|O@bAb157HY$dEwwnFpz0;s9&`y8_MY4!IT&*$b>Ypg_xNpLP9W(!Z{X0oo zI%k}$#JDIkr4b0TW2DR#H>sizvH_^><9Z`6^Z)M5C%A2 zP<}TKImu6HpZj+p8GvSW#5#9+XwAWXvQy}f+wt&%{7qpdR9izC_~7ZUPk!J*ZDn_Z zNXP}bOGy*XUkputXIs;JTUMAuIoJoF2WX|yndl69t>B(hkM6_qIf2p`aoCc#!<=X) zKoyR_^a2~t;9#PnPnsk1i{sZQX~@gRtbaO`9GF!H6wYpLAw79zWd|-R7!oC9Dp{@2)iW z=1*V`+&Qi%@2=zd$uCIBcoHx)8kC*MC;||#ug1~#7ERuGZwFTbWqZ>l| z^Tr^F`=GBCU={rmg?1izWzIycqefA&Ar84@B$|)PbHO@ddwOGj)e>+a>)9ZnK$e% z1+T7wa!{wYXU`mmo)9Hw7ia@Y-r4+OiI9I>FAeh7ux8);Asz_g5ZL(RbM4YrD;jug zFWh#%Gd3Z|oV!M0z0GDHh{iJ6dJ&T$_p0}99Q0z+JI_78H3Tvs%0tDrGAEPZPc5iJUgJklRDG42t{eJ)MC zDjAX30^X}ZaBlwyun&C>+OHnq9~Cqvnw%*rRF=_K78ECp5H0JbETyUrxAJC%fiGw) zet0R*NtM=Sq@W;ZJmUlpfOPJWYJQ=K{9A$n_EFjd`-O6UfccU;Z`tkP{Wf#b-aekk zTKaXt36H&o>eUV>Z)#MnV^Nsm0-8le8;v);xV0{2VL-iFD3$T{W=89?Ye_$sV(j6r zWxH078CqMcmc>Gl!>1Y*Dw^WEi?=2n4RY_HYbc5<5}(~T-rnx@Lh((sybq>9d6rr2 zm#a;NaKKY^+Cx|)PZ=@0wc@W&LKkxgKW?lWaPg=qKxtZ(HDXxe%FljoVxkhXp-+zV zhwUWXcG~vv(@&N7xh!r1K--q6D;J}=fkxZysE(MD5{KbnHL2jF((MU4?*xb4@@Gv= z&8ZrFGoiX74;s+0>eAi)DVG<5ymnJoD7q3B(0$ks$FgF4IN*O6m=AK2$_D(}-t@T8 znrwdS^pRsm1@0_5*|=f%$=wTUzhqh%gjOVN#is3DSQz`5%dLS5oSPk5T~1z4Civ#d z>!|R^r38v@ZH{oM6HBU#E}gn5X(1Mn&&k*7=EuPQJajZ@D4R<<{}ZsW^3s=ML20zK zW+oTpXtzuB-)fhVGh@lOcN1cYMf6p1;)%JrG0xj%ls+ebw*o%;;ksQdBa`}%0#O>4 z$23f_H$3O#YULtW=c5h%%J+-&?GNZnOy|vd<%Lkz-6s8O1C-zSPlp7*Asj7|IO~WZ z-NI5dbbK%cg=}c=XDTB$F(leZ!4h)hx8^+_^O+_4UY33^TJ;`JLNAiJ9Co`03C^jE-Vny5e>LvtzsZkS@&ZNT-QUA3g2t^vV9!d8(3@Uu zpE~s)0z%)L+}UXUVEKH>w994^V;*042^G45|I(&j$mqp4fb0{4+7Eq_WB92Lyanq6u3j zSG4`;+1L>1^~0vvYX-vhnrvSwehSREMCqy{=(CwKsBj3lQ+<_ec2TZVHVL)SV@g5g;u~zGL4LE+x??+>*63J z+zN__nOPdG&FyCWatBTUS5?T;!HB?Hn0(FUXbt&dUU++Io7A%9ASVOTCHe(?!L8p#~A5PY;s)}Pkl;$^H>CfIkT`h0;DA+O*9OK7x5b*3Ui0N zzf@&9jW(+|!ooBW&%Vm*^DE{s${!|um;!G}{6Xl=#lZn>#UFCgEmi2mU_htKCGV9I zBqNU2gQ6*9ukS@a%OTs@-+dOhs7aR47GchsiD%azIBQ8X<|vZSPdoe;e;6!dLj;;t z5mCXaJY)~q$nBq5jkRnQAl*JofzxDIFJBz|I*0M+!?Ium{e#R%VfIka+WU!i4t;FV z+I!*=ZgJ}}j%5l@O+CF}B)lv(HWhTQc>_@L0j<1QnA0b{*KZb>7IVK58H`+IgfcVz zbg${$gFJ|C;K~nBS4!HStY>8IV8soO2 zqRp#KG$DbgEJDCVaL=7GcIpj`sk4VteNN(putTxJ@H|;Xs2uu~aUC;Q#6Xq%UwpKku!_*sGX5D{e=amPA zY&F#{SgJcrs#uE2<4~V|=W_asQD}q}-@6QcOe+#DBmzPjq-&pXvT+;$f|> ze(zR8#JTlt8{~qkuVnZkY+$j*>$|Vs12%L zbf`1)mv>Kcq^r>0i!Sbq8@fWqEF_>0A>oIU!6abG# z6k50bdzqrk91RoBs-+qtq0b>d*^|5?eu+XJ^9-pGCG4D(dpsHy_0a3;1~|7;OB$gR z^c)KNcxw1bk4#NF%*x-N>SeJrVX`8>4+aNmMUBp`Ose(d&A_Em{qhqJWN&Q@&M>By z<)xjqP_Wjaym;j{yHUw)L$iB&YYf>m8ysC!OcODb5FP5{i}U6NGY$=l;G~KOb4u z;2>o;976{pr9w7_Mb~?yXa|9n12He~Z^>&WEOKNvw*l-m-f~(QbRgD4L6+uznEU%M zbRs)wG|AL-^I?k^!V2g9w1DjFillHRYex_n7xqwewtis8gy4b@yCoktkEVQ^s!e^E zYiI^(F-$)few^IORQy|*pu-DlAZHeSQQP5=OCs3__8zs#9Cu=RV0adPd4)d3VRGGP z@!|H752*Bq81xi&mg*6TbGb9C0uGmD6A%Vb&?pv#{>}OH!JX6T4tC=rZ`WJ*^|k0r ze0DZW#lq_u^so4s#3oiH$_a*Ah_rWVdUc{bAIYj3aI+xPRm!xjDH#iIJ02x(W-TfxUpTgSGj zeiL~H<}_WA;Q5Cc)JRTm;DH<#aOZl#s0Nm@Tw1c=b0_}Q*)!_75t5*iW1oho%>sub zPraJc%6-k$=%yfA=jbJKS=84fq{krkHo^q$Y>(S?Fecf-6d&n0zg{>Mta`cXlI@6+ z;>MCK0t7NJj}jSPz@q2?YNDSz!c=kfimSt<8c=PqfND!Ux$D|1*Q4u*@?n3F;rh4r zd_3=ug{uEpvaU!(NiCwPX)?kyI?f&_69k10u|L0I$=Or9mh+E9_7i*OogbB&_lv7g9hA3fWILc1`V6Bfm=VU^V? zJZ>#(@$mge{YlgR$)3o+&f8D;g?dTy*YG7Lu5WL}%=Sqi{BL5Ha2l7Cg-DXevw0Ne zghs@PlLC~&_ENv52xx(>%aL_P;kr2h z=3(C(BQ?+URW(YY&${u|uFap7ay#E|`n=|`H_`YTEEgC7evrG+62Cu6t(YpxU$wk| zlWT&*ToE%rA1UFijY=x^cPOy2bY;l^90USkry_ot7i}&_WQ>#~)Z4}ck={BMVS z!jA(ep!i8Y(VUEgv9o-sC57?&!>GQ3O`4_9>m%=JNV5zqr|+($|AlK%`&xVVkLM*| zm~#WPP7GWlWxR$GwH1IZi`xxtwj5D!Ti0T>1EsrMqU;?46p1pLyqiYoNxJJyvU^%H zvZ?9FX3=7swNenThqu-I_iG8ymr+(Nc`Oc$ff(EZxgE}rZtZuj^7B1q;_h^MG%%TW zi^#Q!q$+Gra3;@{k^6ab|MhOCaOR*AFMRR5Af%n~nWEaaUF`%g z?N~|Y`wb3pq*LG?ZX5{1#<3WO;PZGx2gd%Z#z=2Ga~WOm{6VSSH1 z+a{YQhcdb4meW%ocI2iR{5Z~gI(!R1kJ=-HsH-W=cbn{p37u~$>7bBwt_y4Qb|%R#n^!+-7T&|u^Q_6tZd;jw@MqsUtV5v47coE!;hX2lnQ8=Z%B4MJqott#!|FCH}d zROfi6lESj^Ez-&6cS{GPSsAz4nwwGYLTK`Nt?es4nUyCDgpHA>XAL30BgTY&b2yFj z`W1eQo8NH^9$&;}ZH;iuxs75Jz3N_0B!nPGt|NA2QwUk+wR?q*tt~+!#D}2+8oLzu z{~0=xqvOI!E%1_}`P#fF2dBv84-Z1K2Ct*nHgN~1N_30c;2(bo!|o5(I+d^f>ANS* z1oGkzGZ8n_>>qWnjy3Q+`tHFF+0t3Qh!G_ox3eIJ7(P%`N?yyq%`$aFWg$q0!WH4J z4?|3;*T>qBg)GaI%70TieZHV9C)!v?(NTkqr9P6s4Ko+=-oN}xP_!ufC5s|cmvgOYke>HsQ z_{YBQ6;CB>s~7DBKkUuI~U06T$XKtFe6WCZj!mM`uu zolVUY<8^PAVY_KF1ulqMnK$7#yJqabC1}ubQzM<_Lmta zP9t3vwskcAxkdih5ZI8v7YE)5RoV@TXVi74FIklVrlAV)#wv}CRKYjm+A!Aj`f)*tjJ3k z?vRbT0#+)R9%^>*9hR&=%PJdVlffH(&NhLiHpvlE$~{{?w1)i;Gu-2*JFV(tDF*r- zqt9NomW*6RWm`tIRrhJu4&tL&T1eRlFzEh>_PPCmmizn}k0SjMW3I1swq11T)7u<-93lQ))_XU_260k+S|B%mS+{B;P>n>6JVOnZ5?5 zGEY`l^sJ0+tZ77&C7a^9QsjWU!fUlNu*YtrdG-p`PwpU}VJn+0BAw+?!*DXwm^UY~ z;xzL2M?JC({)xPHmk@t7TC$n-=*ho6=BxjwtgM>;6F#H$%Nu7(ZohO`Gh5I?(<3M5 zy1$AILcTsJ6X70k_{4*e$UgJ~#6HLU$|EgO2eJiKj? z|6|iA+9CmYE`Fh4?|u<&l+6#|yYQ|(!sAt*-hF?G5gxjGR5&eGTr&5H=;g~7yQvu; zc5CF8QiA2B&f`BNiQTr89%e{p^90?$e!`E-HJ4>hF`_*qr=E)IRZ19ek#3`Pwewv( zFNjS`i%M8`sV_a>iDgx08|j|ILOuNA-@b;szr~YyDEcaj>61;*SQ~bowK*LiKL!6Ypy2@F7J1bqX_ceoA9qpRNWyYDZtIo%y7g-%H`L^vsM52iTgMaxP| zwgVZ_zPTjys@|z>)Zdn0KtkD9rZ2|!M*Cvm*gmDsgO&&6&|o>Yr@hKzj@-y>y~a#F@`m{mU3>%69P;)1FTJ+1vQ%uEQO@rC?7CX)A*f;&P2Z&&595*VL(Fm}cRH%FlA3r2HeRB8{RS^ci z2RDzdY%UFMAu{clh-CT^4zs_pMu|`7W>9t0rhiaJpy8h1oM;BU3?d#>*3f7! z*+n%oG{Q{jYI1fKEG$Yc@LRq$Eisc4(w{?}ZzEj#D{0zV;VmuKh2pLtS0p6isz{EQioZWeJW*;JYuAvyU^C)EDtdW`9$&d+}&qn8fSL&1+Wzh}-8<Qrt=T%|7_<@CNZ{?91oG&>- z24?yRN^q72a@;U0?~>^Lp`M^y;gu?!EtX;+Cpk!iGp%b!iZhP6T&$XN zvi=L-CxiMSt8xfdx@QXr%m*sK`&C$BO*4yI@BEAi8_irg=a^f8rW3SpMI zSZl_wT&<$Ji}r@50YKvUf$mI!+15HpppD+Uz(X7IMgH6Y1qQYAam>Wth^ z{tt42`~VO$HpViH0A01D*>_ePA_)dYLmP)ivyYARZenOO*K^kStsgwau$!bv>~g|!kJiahZxpeSm#k%H}Mm61HZ^qluZ?Z zAvHL=&1+t#MMSP|wn^!~KE4woY+s{&zVvpXi;!x%!@1yYH=P3S?uezbrLo?q``qqL zBeXbC1z$G`*CM+P**a}ONle9H#JXhP-V6OT6nGiFfQOI&quBm$gv$seD2(P&Y-}22 z*h6=Aa+dB+fHfW-q#^%^b?#h<5eJD(`{%XXS7durP~E-x(OQdf0sB`ia8Yp`|IkrP zzZqCK{!SmoHe0aox9e$B`Eos)ws5rCde_Hlw?Rn0`(WD29*CI{z0346L=WFvVO&}T z_1%OjY5gb=(uc;z0wo6cK~faeYyctJOF9j%9k%@M%`2e!zFQkm%8t< zEj^@8CON0saXDEKoDr16wWRZjt7pyR#R_v2O_q_CM!r&&O(5>xgj#8^(fVd7Sf{I< zVm2w(4eZ?+Jk;`U9Ua+Pu_01RVA(A-L$wlF%uY^10Vz+H47j}&LAf|t%z1SpIP^i% zHDUw3=X`@(cS7skg!jZ&0S$!+W)xFbdteK;-p?zu&r_07BfluK143Bc*1-FrYAT$F zm)(f=>)G8ACS$k}o0wG$e#hEwo$J*doQs4gh^VUK!DCymOq#6TiR|DfP?NMY9MG7p zMLOaRbu#(Mlk|*+M}Ks!PXyfn3Hv|qLoO(ZptO?%b{SGik`_%N7u_E5M(0$!qYImb z_8u48L|k3O4;IwJNTm*JT!aLI7F_x)0fem9+up8?Eleb6${2iqd~J3?VLTt|#UR4> z4R|@N`nU>o%jG&(BGqeqbff6zIK-dBn&kXG$^~#YS3ijK6)vfXO=(MB>5j-@MgNDB}DM96^dGWxd}+i&K7TC4%9=a3HxZB1oc%-vWu(ghMLL2TY)?zvVH{2y{3|!bm(7-5G#X&Q0z8he(uAUE{XU>4=7=Q z$c?iI92#b!aOx(xGgAgJ;WI)Mv(Jpd3Yr11-%hqZ!mY&Q-pjVFVIfs&_mRJ-FAV2Iyp%T zBigiwjwp~&|NRin97Q*oL#&WRXk)#BJ}cAfmKz1z6LaVnYY)!1a2Aw9Lt4p!q@;WpD%^fJvrPoN%`Gu5g)%b;SvikM3E_sr;`kj4sNJ9Jw>(Om!syq0<#xp5c}Mf5AH% zPEbvEE_)VIgq=9nl+>~uwQ+2N>G-NUQT;$`=geKjM&v2m*;h=IOb^Ci{MnE)f5!bk zo6!aO1xR4su(6PW{qbSP_tAPl7)$K{e}c!0Bn+0m3rZFWk#;CD3NUE6EzpQ3;?a1I zml~()k^I4de8fwH^xnRfgsBs4{x-k3861_-*sGF2*_|44;UBq5en0uk8zP|77gk}^IXP}cacuZ?=L%+y-?5u-$_reDl1(Z30eAetN-zZUwkF+g zD&z3umSM1tpA7z&Q|p%0;Wl*e8&2w)__EjWkuzm=z88(Jh`;9xz!~)q7!? zuC_E9gpQj7@A+uD)FPZo<1>WKXL-*(~8%z9V zM2KkbG2|DLp_<}Jh#Bs91KBSiy)(3m_u}K?g7#Vh^8bpGT?(OORc)KLv7%XE2dM3CiBMd~G_2l*+iy#@ac6x$RB-EOR&r3B|zu znR*5te>_x@^399)2GQJgiRy!j864n);5vkVx!CLyo-bEBRixGU|BO8)Jo6-1YgP7=2*1W12Wyaw4-$QXAgfPn&8=)473LVSA-nYyBcF7CX7b-vgTi`~x8 z&xde`3Ux%=NauzKM(7Z!NU-2*VmQ_PRtmop%(DJm!H%}v>cZ0wx3EaDQA@86i6Z_SnSZ)P_W+8PNXwWsAkU9)sS zddeWxLO=hSo{Oxrqh8z8t&=g0Zr*9;7j;3a`XyB zgMsk!=IU3G2Yuha4onVuDT24e#_QcL!Tu3eTHFu_gbXH{wfLLGCO`3BNG1{3Qdo%g zv(TvvUNn+4f30EYYpG@dEU=V^)$TI+G*jIEg+aF!5ehNOzo*F!N?+fu1P22dYq4q* z0bfa~u^L^vPM!^#mizC0c-2&`AsyfccM6q}N=%0DR!W;A{iY-XizA?(dKKF@@bxOe z2=#4-2Y6|_{j9_ya72krOn7en-{D2CU-EG#T#-P@8+-!I6b{L4&b89L_SEJMzLmr|1qCG^oo9QB4S!O@(GjeK>@SRQU2w^&33tm zrjD+Vcr6a&%WY$?w4i=;_&4Kp#U7HuDxVGsnWc} zwT=ndw34LccrYB(lP2D{zd9^-Hs^Xa*$l+PceFOB&2eq;zn%KrRIr5tD&1mj>mPgQW%5_N<30imoZ)qn{B^5 zMwD~K9fej>h{O=+8Un*iw_L%RoM@`jJrMI^Ix~^zq2uAvYOcLfsr#BjbTWJkga%;o zIw$G`0e4pV#kdKDFdc7#edeoPd3<>IG*1T>w~FB<0F{;GZ>;%gAa(ZdvK5ryT&7xp!GXv;>kj$mFQxcu(2~Mw6W5c zjQ^t0L!%z=?^i?Giae`7@xU!INs}n##7^<15nL;PCymdlXVb%3G|8O&kBkmXU>bLJ zAQw|OvFM5lXL=3)GSuo-c5zgdi9p4Go$)+9-Bk((qW*j^Cm5d#!9JM};1w5|GaUM-)xA<^yN?J`Oocjvt0m*kPQun)S%ffG47c?+vf1u7GRQx7FPFF{p{Rm|1^fq>9fNNPq?5R+n-tG zdw2SIouhKI78fAPh%8v(X*9%xxUzbQ*K-1i+^bPhV5kd=OoWBMF?aIJzLFPjktvM) z){@JZ3reQLf##7p=TK((OH8c$9=S#|hpweY>*0?+{Ub^M`C;TD*r^p_i8KFNdrWB& z!RYswWsRs&)f<-;_Q$IfVu5qm=EVz0w+6N<$s_1YpmforH8vbO4l3vb&YIDO!JOl; zRU$k-pqyXtpV%Kv=~1*P5;V2&>RGDMd(B`Z{IDk>Rh0i|xVV;MdEx(8!^I6+#+4>W z<8-B27Mol(W~`>p2vfd?P$g_xzP^s(E+6GoXicK14(%LxK9x;Jj4{98`SPZ5xM8LU z(hWqV8c4<@$0E6bHR5%GcKQU`W^p&%nOX zWtaG!QzQ+dUo^MZt|^|^>ur;urTvPaXe-ot7Zib)0jrM}!^3vkklpNN1_)pWA@^G@ zR>O??JPTgv}oU*R+A)h73ms|0yz#3X8Y{s0W>yIihQHkV7FIfCws>FHN{bd{dOADA?ssoPRE zE3;DJbqR&S#pHD37e+cbUMSP6#cCj0(O97XBe7PrFS>3WmK60*BZT1bqDRBpVJY+x zG?nJ0PfNs;n*OOwu0R^p@`=oAKnU10?`LOT3@|3!n)V(8Sb>kQ!Na+qL5y_A*#YP7 zB&fIdk~c>_sndM%E$mftU5THNYH}h*R(7oQVWFpxT@b>wn5U?}eV6I;G*8pWG*NoC za5$!~F>$(DifWBRY)NqourlX^hOPknKWu$teBNubb)!a&ZCg##n2nQ$jqS#^ZQHhO z^NwxXw)5WI``ORg=lz|0O1}JWNtXZ=LELHiUGpGMx_GrZFo!^gTNS}*_2C_1f z$7#(HR7WS?n;dbe&VT?YWDtpRX3z{l-CMm(pB-#{PA=QQ^cWbN&vcPkj>{K3dqV@# z#?uKq9m_aCkhg>*TM_xcGy_?Eh=ZdeKk}R9gGMBL^UA`IO&5^hjG>iW_2_>nR=n>; zkSyVb7+{&<;IR=a}yVd9br1v!3^otDv%W+aga{}iaysfAgQ+X zr$X8vOX=G7-#|4OfBN6q^v?)u6!KcbAX8Ml;q%hM$QYi>oRKc;9(yT=p*JH{i;xH) z=U4>WFF<|(;Zk8vWdoKb18A4Sy0cA~XJc@AUm>4VtZ{8Yyv0DzqdBY4uF5tJrFlgz zSPdJc9xMjV;mCZZT;urgJNAA&$_S`L3hze_6gna_;c~D6dfS=fJvl!o-^M?q6^dG> z5mIn1Li$`auP>~CQ9N3cY{(bF?~Wv=r$QQIu}4KEfK5RkMR~6a|MHevaaPg|I0TJ8 z=_6q8!G_exu&%jkAw9$@y!qR8(f|&mT#w{V16c$fp9609a0w}1!(;)**K|R5OI81i zdSnY#fO5Tfm5gt(R%gHx(I2%4o>V129qC&1bsDFp+9-qrGE3kW;Fv}jpBSO`xw>*% z18}AzQjo&&aH`$hy2M&^2{;J{?o5x6370}*U7<45g5DS#+5rJ<4*R2z;V3JNZ+{N^ z((lfS+^HTNR3Mcid*}JwfAhZ)V1|JY=5TLFeV#!KX_?)TDSZZ+JE8}vwVQ&QYcW-jK@VU5< z_npk{ZObx8-}`HFuc*w9=KmDk=e2`5T+g>HL>C>r@$p@NB}gC{hh84fh-`%rOWtqv zoln>q5A@1?K)`0)z*%WnGhW#h$@F<0MYXD2QE_jm&TlY{uC8*OU^H6HQp}!Uly_8D z&ta3!-)asCIs}$tK98<1=4*m8#l=THh;B^u(8A%T4C`W855-(mvin>1k1YW~r)OKB zjjRe4g?r(YMs0Y`=}2GysI~`!F8{ZqsFxf`R44<)j(r|G@whRbWLnFPkX?mjyei^m zG24WOcn9>tue4M1wjAJVc*+CM7KN1&w3XG2k7jN^`GwV@n)6QaKK zG01x6R5_4=EJ5YVA&yK`B?b7C6O=s%DNo~qN4zv1Tk6p18`_5W`) zDDwqecRF^ZF2*(z3U^?t_DbLCDJk+E&W! zcd1&RB_PSY<%JqLn0$*(-Ll%036gJ1)=kusQZn*<{xyy{ zaOZIV;91Pk;gk#1j{9(>9G+*_oI*h7sJg}xgRMM!yD$+Q*jaB zf}G3wFHqz|yR%=s`YB<_YPwWb*^HCCW^%XKFTiUmysv}SdM)2woM**2Q!=igm~n4O zny7DWT1OO<(Bn6Df;+{Y4FsnF)e58BsLoI-%LUjnZ>xi`!YPYrwFLw9iHnO1VQ>Xm z6!Cd9W!nQ|t(e?jXfSi>FEBW>fv_}9L>|8AlVY1N)GZd38+-dp$3qh+z^KkJGmX@| zX|Fb?MD{*c6b9YZ;DoW5OX(f7m@_L0ssPC&R3iI6NKNb}e=FJKbDYe2$zH@QMffY% z1+Ct_c+`F2l1Frqsa#cAv%!^xM{XNOENkTJ*pAQwQ<~hTwpH~m*u-l$7w^G76+3P@ z9iY%q=KK#>Y+lLZBK$X41a?HORE$N_e)=|*$us&|JL4FZhsAF~dxDmRW3N-^RvFm5+LQstn&qHh5TtkQe z`TD*2i*+`PZqo8Ou(L=Oo-N>@)Z{-(WC#OVwIpvVA{plNw|v%bbPLpLEKN5}@=yj;HxClk#I% zM707G?(Vi;un9ktYGAKGHgg7Ek!@T2K^6{56;j@|OIcU1g7(ja4YXlCh3d=Tg~yMV ziLd+ZKBbUy8JA& zpq!kX4hM}YqGDoTJm2b(fj@Mk^I)c1NpHaTLglpd>wUcEuRwdbqUa)&#P(JW?VCrqkjn7>&O{&FGE ziQ!Wsz2+a20)CrcA&U$G{L})u0e4xlxz92mAE)UMUU+j$zy`A8!s&p3+YUZIzZWy^ddwdd#8o*T)W3-{}5t*P;@j-6ns$?Ueb z$uze684qm&frONllTqm}{a?OQaG~E=vzIDac15JS&Yh^tNss*$4*^Isa46{kV5`6K z4ws@EFcK)Gur^^ls2#Q60|^A}o<}51cH(9c6Wt%93FWS`V(`99gTeGfMA$DdUeEjY z{kCuHzt6>PZCMi{>*<_~Gu1-bmBD9?7_42zNZ0+LZwp{G;LAS}wDx+eo~w`Q!^=%Z zr(^2zEHc(bIn0R*$fj_bV7+;nl%ky~s;jXI8PW!Nf z0!bv3nUjx1_FYjopXu@lK|4J29g-~w3^TQbZ#}h-4FId4%$liGqj{^6SN)ZTKU;f) zE3Jw>s`JZ)k_(PT2A_tI$nvi1h4#8o;YE@B+#O7m5d|k@xakhh#vf{RnNPc13(zZOWz&M*18R5yP zE=nc>!uGV!pn=UldqhB#k1O1-@4lyyX2EMlBJJz6W{hU!Mm?vmpb|wqVYt6-G1XO} zIt6ET`KxaE@j}p+h8pJGNaZ|@EC}p=PVP};2NM^!WbA=++b=!~ohOKX(xTFUz(7dg zvX*!@x-j*l*Hb z1^8h?I6bUAU@BI;&Xl*(_^AE%Oy~5X_0hZD4jI-XASY!$ z0RZ6a41^C%csk&t)1?$18xY}oXEjV+T;3`vDEQO7J26GzkJSxkBwBK46Sx($bRQHxgf;>w(*AO8AbI zso1IJTB8rE3RP+L*qFSRKO>vWC3RpR_pUO|jn+TOFK4KHj+@O8hxTQyJf~byjP_0F zA-R-F4!N1;596D*4R19G#u(?Y zMW>@Zv#edjo9*y^$C~EH8zu9$`PD=&PEY(}O+}CE@+#xEUYaBuG8MRboEOxg`fZO` zt^a@HgXpUa^!G{Mi|rQbxY>m$GN(1Zvw|@Xm7oe3CfNmjWu39#Cc$>ULD3hkDY?aL zw`Jrs{2kYwpm7vEMS7Zb!65=SYep*j7olUfgnGsg7v(;>2ZCESbY>18P$jTTRFA9y zS2mZvx!$-wZ(L%c2l?s`i}_MM|AgoNiWfC-WjQhum4jN@) z5Ikwry^k*_xO4MW6S1=FM&q^x(1MCWa7DeoOK8Fr9JxW`s(b(s@mH$=pWGfckr_D3 zq-m_bo{r|de2wh%0+~}hhUYJWkW*iRc%BU%B!%bQTujdBr_kUKsItc=E7@uk{MVgv zi{*W)fio#@$*$Ek=8Nw4<<`5ivl7|-YCf}1&BLU$-*KMLA*HyiY#^qeiSy?&%>i&q zC;|*JQs=fv-X{HLy}JB1s;PP{i$?rcPtBBGvTBrdM_#k;QLLS4(Q~bI2z2+kd1fC7 zSFX6L+goA^4r#8B9@EF$naX8@$gnSf4J{A;=3?fUUUhqWI1|(3t)B~$&C)a6AKVW- zpbkE^q@x+!aFM(onbu*KtG1P!>5e=$q^07uR$FGP9xL`x6oG8`=3I}HGrMUI{%fza zUae;hygRFVKjCsXkH3fSy+3qL6irm-77Q>7jomG1L}A4OXE`#N{Dcv z$ZdjCfLmsQ5xEiNKmoDW5Pe*+F#}um(YuNj$_=L|-#D0$Fe2IwN;u7srcZ~oKCgLN zv&m#q{9P|6I9^(M)M|T`b41$E(4G}<|56rW6)fO!uRJpu@JUN`bojDttYvF-ZDr;b zyRyXehqFd1)M43=A)s7<5VQrv8Y>^=uMF|`5wvm#jSsh{EGy^N(b)6CC|Yb)Mae}* zIz20t$}FP&p{P*Yo`-y~3$8B2r=+SLbmH*=i@Vx5;&b>W-4Rw2V#DR}Vcv8QePDeq z%}~$As|>Hp?;ees-A;j%s#g61&TUOV+U=|UKfxJul^S-;tt!nUuaX64k1@vS_bC zi;&Zle3vKxFvO3O`wS@M?V4D@V-gWMa$&s51GC9&36~5Eky#k5fc@-^dv?jph_EYG zC}MSmA#hQ|oIShigUuCr_UMGlQ{n;3j6 z4aLUn9nywkMNwE=BW&5^{P;=p_TYSJZ-VJW3V&iWzn>R=^EAJ*zw_1>2;fL=SHC>+8CV+Bydh*&J!N^2d-QB^}nOD(& zUeNM{@Bl6ZEPiZz<#&79YaI5cr=bB5n=kKPu|2fq53|#EZEUcWyzHM4TrTcR0PT*4 ziMc}|c6Rg>)OBLXw@Hf zaEZRBp*G$AMXGt)gE}iAqdQ*SRNcO?c|4_OVQi`{J)Z2q--`(e5x7%R0}jaN{s&zB zIWa`u#5Sokd7aZ7Ghnknf_~VuGqZsP|JX9=ENDhLf}r?J1Cw~sSPFG`-u^`Gc6H^N z^i2=m!|`s6t;!HG!*koC?RorQaD2GWy-_o_qCb_uEwmb?u<6zQ$OKZj?{gGRYU8k? z{E`=nP((T5;+#tww>u>x6vFK}u~ z;`%IpUE$|;eY3uMe68U)9VwAP5nl2iA0ssTevt@uIBGoD@#iyTnSx{E;K<7Gqto($ zQ0HbQ;s7tHRc{LhNo0#Cu^tUy`eI<_JVXP1&U0{7pJd(7L)o`)lg}_w8i* z<@K$+xh_&14)kRlXoQ~?>$)8S(EicPY<|Mi1K;B%^=BC189sD>a$gvAhJ5k&mC#Bm}wE{jpn| z>vgc!1=)rerh6m9$($yRN5fR0OLmHt3FmjdM&uM^^`n*b5?wu z&O-*6a=i)OFS!`2ezXt6Lk2?<5HJd2kA87CCnl+k(LI#mV$0j2t;hRT=3}<+-!U0F zZ`lIie`a%)r#Out@&Wd&ez>D3zhYrwiCf(2xzzWdP+V8pzjy#=?~o@b$>eD%X#*{d z*m43RMT#s_ZIWvba%M}zV|&sw_+YsWhv-;U5TB!R=a=+wJ0Tkux;63;3YZhg>|(v9 z6e_YmkEyI6Mtub}oDfyaSAm^9b-(a@yrQhKX;VUOgJRc|cNo5c&s5u@dMozng0jJCPs{naKf6zbYLF_4S! z#5*wwmFQok$3G$AE}B&dVK?j^@gjnP{lv>{RAFm3dUXqkZT=k@JTHw$4@)@SZD*|C`$Nb0fXVVjhA^8Gv5FrvNI$%s+FG9%TZfMM^U3 zbQft)P=IyfbG8glK-7;fu*Gqq7_cEmT3Sgt+1b#i0mmYAzhi>le zVuGv%N`7YdSp^qtL9468v|20^nlW+_2k#0Bb2%j`?@nq8;V3Fk%KQ~NM5LnM5F{nX z9(QZ!Fj*bgf{_D~GHaSALN%LeO|e@isIJoX@oy7f@BtWFZk5+guC6Yp8IV=s^WxQX-lGcJy~pfnu}_Wr8Zoj9Y|{I) zZaASw?|wFfv2ePZYoxqb8K7ifkY05-sb{-rtF61f6TVpt_*K1v-@5tq^pu=_z)@E{ zp``WZ<$CTeapw=K(PBr`d@9-1i;&vq#u}x!o}Z|hH+^Z^BI%f&Tl3V!&@*%j3RER4 zwHpQ$3_Q5R`wJN;w^{@q+v*Dj+0d3<26o zvn=au=M<+nI7OMP{AqfQU&qY4nPb3Iomn?#pR(VoF;I}eva6H?RDCvcB4O7G z+bwS%(!84h-r!@>|Lguow1NQTrpwylIfcU-~jc$2DKGyeQLAL4mN)j^C@()Miwjt?iJa$Uu*qa|q%~U2qPU z4l7X{UaY=#lN3V-DKG|r5#NCQ1UWra8oJSFq0c4UL)T*XCs>gV5PmKw3l0vMW8e4NR98Q8C(NOi7%lN~c!Jfh<^!+{g zeB;RM5Ae{rfG@$ldC(-BqI0!{4(H>1EWw#lKyL&<n#b#<3lJG!{+eeQxB_BKt3$%L-GxOGv#zmHCqvkNq|IedTFkPaV8pd|uX z^L4}qn7l48dJ=*uY1I2vkg(VOy3Fwp*YbF>mPq=V5b>QcRRctW6#DRs7M{KRUDN)t zTD9Q?hywgaZ-k>XuRSjpcY9sU?Bhg~|FNQX^LxRynmveyS}1aiiTmX6$*GpdnqfLEpKSC#Jf`@9 zyDmi~;G2u|+vN@m8B02|Ex)0{?cftGathD`ZKbEYnj~8?Ql8rX3nu8DKAMueaY`&Y z+F<~DaUn~kPSzUE1E7B%!p@wz-)Lwp(Ak!pq?K%SE3#^P^ou+OMwi|p?cA$&3xV?Y znwN!mh_hr0o9I-fu%np)B6g|)a`fhVY;?^wuXJ#CXFjSQP)%$gNR!Qv5OMo|q3gd{ zsV+1q)CC3Kwf&G2ljpopzAZ9Ck41uhE-%Hn6s6+PDk{_dt1+`G zf3n8;W3=z%lS-}iRpm!e>bZwyo zzgzWuzEaat6hetarh~U?KtN3Qpp)k9xXPi^$H!V#l(j88eeif%VCUra-jdrnmxj&( z0|5W{sN?hwc36y&Im3Bvxp;m-g(M@Nmem`7Uo^6~LIuB0M#~LY<9W zlN7F2^ufO5+;{jJ6&1adlu97x@-Wwtgq{6IFbu23YQgpr<3&FPe!p>HIH~3-A3#s+ zJ@@^xS|_X+dF81vCkMOrL0?A0fLe&(EsolEg9#(8aZ-w&a=g@IReWI`4;Dj$EL;1b zpW1<@+FG}FKtsH#B`FPs9hb^jK&Tyy7sr`Y94ZOL>ejWFOIqXwY;V0Om*@VzIVC_b zZr-S8V1JYj>I=N!tQA10*&Z#wh3HWb(0DpGAq4RXaofsAR{TrTIOoBjs zyo`$K>NY(|KVwu^tD+qm67~>=y8hyqN?Ko^(7k%(A3EwHMJ)7Rbkrs?c*>EE#t-v& zrP(V@=&Xg zay%@IAZ<@gDn!bnBEXQYxloTBtwYyugxfnl%+_fLm)=-IEzy5h7ym7PHub?>1o!|N zbs1$w)@CfxQ|f$$p$EWS@2fL8TRU^Cv54uXFG^{4NLNcy@j_>MM&i-qj=ff$p(?$D19gy^OZuDq8?gTi8_H9JW zO-P4*7&th^akJFMQ(2T#iZFs~!=vkjwYrkhlPdjca;Re)khQ_d$;qGz9<9Z9%Q@%Rd3m+CK302opB+-Jb!K*LRk47j3Ig;Z3(m^r%7$jx z#>aW$fS!Bch@s(+nEq(WDzRo*o~vEh$IIS{JJQ`cR!9UcD;hU9w>a(d%jg}attZc@ z8O;{PvA$rvtJ7M9o{fzSOu*fS(+>B*m4<`_>bl#GiXb%z9))Rd3Bml<{0jcpf~&hb zVEyt=^Xr!!BI@SP?Qf1`;ByTw~xQtPo zY5S>JTfrcitSL!q1whuG;acOmZf_yvW?g$6j<|6~;G?xXTV>gI!Z9m?RnxXQ{4hw3 zj7$Wq?P+3qI5mT^41-0D*NA}p)Va*b8rS~#VmTRLN--gP*BJJ&w$1cmbF2#pcWC$py| zP+*zm$=*c!37C^k^J4@4os-z17TfJ{&O2UJGBf=ysxGT%4-9{)+2H_J|G@|NzTpY<^aPS%FsG|C6MZcT8=Iqh zyxj(#k0|%2s{u-xuDAwdLQa>KmBmgA&7g(r(^PfOoNpG{{K6K@)F&xY?UO%bd|2PU zqDm3B1QA-Q_BZYX#`%53 z2xU8Lf{<-Y8z$@^aLswvz}G8+U|=#6QgW~!>RA9=Ag|eI+--w668AsAQ4(|?1^)@@ z@oC3g`jcZo@G%SLrgok)FMFux9+EuzF5!0%sGgXBMj9dMOvL?caI7N1J`8_Z!qdziGKo?DTLi*od=U9y;Fx zJGpN{7zrL8;E2DZ2Wh+%oVxGlmzCqwhIRs`XVqC7%>QJo?p(@ zyluyMd>yMjJwI2pnLr#L*9mC?BJlFn50!%kcO)D#^|sO)$Z{0*q!ohZcxemt51Q+S zQe5Q>L0dFhnXDcM#YWQ@@q?kK6!Y)aw=&vAiq>h<8r{5+QO?IHD7aEw#%RojR>3=q1pDCe=E{%nTphV>Mdva}p+ z8FlTdAlta_EDcxeum`;>CO7#2RDyhlsj)zVa3BU`|6qV{yg11(L!gl z$_-jUoMmckJaEFm6|9uuK5HSu&~n?@bk{*q7x?5L2UmuYfq$M9hpc-#+mO2)$uj`8 zWF6#1p9g!jkoJl@Od9+*TKm%<{VxXOgStibUPqp^wzc0%>rl|BV)T~9n7q=LrZdMG zPr_XI$?XuX+qsbsETf32S|^uKC#{uccjd~ZTa2VOT7;$Za*Q2alI+h!Sf*u~PbNnL_LPJIh_G!hZ1 z)X%e7$pTJyj_CNv@|F9oGA2Xd^w_TIzLCnQMI%r}kXCQk&>MRXoaN%ci(~@sfspE{ z-XR6Q?J?F1&{>=W57kfJ?W(17=Pi(8hochUAc#ENW_S2yD|c?2f_U2gz%zg%-JwtW zGRlOpS&6V(alZB>XLm5({y05MEt1z?flbUS5u)%oH6JAV2;yR(zP7fxCk!->Tuo3 z7sA^Tv$lHjB77l}NH&1=`X)43fqcVXkM=r;YGywtWd&I41?t@v5hXy}T~8TiRuW}v)yW%iO4$l$C28HO?6^Ab$F3@S^ZmJ@9q~o+;6fKdTZd$g84K^e6W}H~b&g$qO79 zv5NAg&0`8IvkyNJOiM~H7sniR=Y}ig-x4=m!06kLZJeBzH5qHQu$TJ90YU>LqZE95 z!^QNy)gjyT34}v0sa`6Ks!kNG_jP7b_qxVLFwVDzg2aLVr>H-(e@Zha zYpg7`oBmZ%m7Rn>R*)aybU3E-GL-j{*H5x#$EOX|@tVJOWhx{9>@s*CC^b}6;+H=| zKoprnyRYwI#N~8!fRF@GL_1kfwhiWwDK0h{H`-*Wwdnum1aP0+(x%xu-Vg$5JU#$u zRYC&#s@+WcVwH6&&M3|!oxEJ9Ca56w>NMC6+}2sqh|CvF8}k~L0L%+!Ph9#*S-EiMwe~BcO&u0`D9eofH>{5A7&)% ze&*x6>$!VBb=sx7=D_XRrTgklFwqG72zk!{d2KZ=yK%$FHr&<_?p$j~Klod|x`gZ> zm@`9HP*6vG`#1WiE-g_v0^*L?#9$os-DAt$=5;?wG3$rR{{jCYT6^6>I@YynH?iG$$I{-WQ3yxW>#Y zSk~goEo#C|6`dW(R4YVw69eZqoEJp4U&8og{WQmHKU)zlDjw4R-6p4&VDQHnVVa!o z*A9fje)@0lctnA9YO)Fn=A$VoDPdKUi18UDC&$N8$U#9V<#XdM`A&^&_0$r6K+rqWwSVmTI-*)5|yYV+SBHym$KC>cX|C& zI;x5`=+>F5L%-S}6g%{~<2Z@Y{snKXKU}NVx*CZE!ftM^URkK}PTNFUDJ^ArVZJ?S zdRiQJcyQK9F;$Zl`74;k@fq1qBgt)36bY zxTZ05fJ&OpX5&z_SBUQbDt~+?ZLtx@{4V}dG(9-aYUN=wJyBPDYUz%Sp^{(B7(!f} zI!b{501DPcN`(FdbWKWB$+TEP&4w=5WzHqTlv-g0M~x@ELtA*o$6`+xPmbgxB6s z^Q)Wu8x}c#DFza+%vV_AEGA!~)<22g+XAsF!>q+E3};cN7}!AK@=kkzT_N5)l57B# zLd71WDwy0v?Hz+bAQUOgPC#LU9dtLIN#MS`x$6$Y+L4*W)ZRj!nVj|Mp_b$W7%U=h zTDRdp+xFNQ0GX3F!S5AXut2uO7PO^TTvDKPN-SoAA}~5uUw5L@5*~N7@BK~0dJCe^ z@rZTy4KgAYY=u$XY8@0=X$b=s6+K>OY}rnNj1gz!Gn0PtPNe;4>#y(>`6Rt!}v<%D87Gc@(G^KoAV-RY6fX5p3 zRD!V@M$N%_f?`E(;Od$_o`n7Lsr8V{d|`|7bhiPJH_+H44v<5w?^pk2WQ%gHtH<9A1- zLo#}-LWN-`mr322x)8J%s3Z-5GQ$IzN8z{9LLNynq~!DkKk=oPk17%pPO=)3bu(oD z0l<-km+IPzt+8q62(>Iz>ljO2c3OutJGfITQHFZSz`*i*m=P%mO)HDZ!cPO^hY5@6 z@6+Xe;21gTA%;%0@y&RCl{KHvT~FlZ``T?Px|4^M8cIr>88 z!z&BUY`Ca<*a8{|9_P~$toDtF2@0dBg}pB?U5L3yL~8E@qwR=V^di_cz`{ zB{8eGp!}WA{9NMoY^{-YTYXDg*o?Z(c+UX7HAFh6CVL$%h0gptqLl-PhMXRlhx7Uo zo5!wp-~uhXJ)6hfi>cLCf9LtvH9n4`lf4M*A)*0#b57OYtBL6u6o?X1o?E-(7+CsG zV9FB%PTk_>%T=u4`Ub+vo+``X} zIAzWEVWJaQg44kFwRc5lKsDQ^KS9F2xx9$kWZlSkrujqI;l{Q4H+w~p%;m|gU+&7y zDB=zB{*CV^$v~fX#kpg-k&xTcLnYXdi`TW}v*(d4X+Zk)jWo4JdBgXzk z07S1u53d^Wr}j#Xdd&nk~zsWj_nJDW6E zes^~gMUQH9J!zZ(##}j$;ga!cFb(aj&g0njKDUdr3fx?kS&>XNyHWSf`w2&FKm_-F z%~JTm%c}@}2W%+%n4Ga0^kGHkJIw3#bZDHY1Vd3rhqwBW2_iOj9`s2a(GO0LwHUIS zt4UwS5;Ls8NGhdfAJAvS!Ymuo>W`70udtPE*A3NS z6{qS>TkK6c_b2k4OZE|fL}q4Y?ZRG4|>SbCl)mv#LtCt3v%A_F;u)C1!ED-=J2>oc91R-bexjQa1kvs{9pfH@t zJbr49&9IgA*yIIL?^*6GVla=2giK?m6<&BW{hr;@v&BZ`PBg=jl5W;})0Lf~gl2k6imdUVn zow{q$$?jOfJ{A;PtJgWek{3Xyr1AN~i|_Tk1ZV4PC-ikSc91y{9Gh+yxWk zV?WY&f0xH_zI>k0hofr; zOzn<-d8^&8`il!wH5{tchAeuCc)MZ1u@>c+Z5(0-YbySr!z28Vt^O9=&U zBwYl+g$mbbccXrj-ql&Te^YMJM|TH2;YcS*zkazk?tSNyW0&=|NQyO4iD1-Ybtp@& zk13%qT$Rs^EW{bd*DJX&qT<|9miocm$+MRJX(hbiCpyt)4fvt~^~90gDMQt0wibwNLeLswk6I&zt~~+- zhpdj@baQ&o$mhClJDqyt-|^@-`-x_ZRjjOrAPXGeuv4OUq*5O%bA+tTx%9e4N{ zp6~X{GyK1FxiXxtd60whqu9FgTpGx-TzBpa5z)-gUG@Wjn?KMj+wVFwaoh1-!z|8c7nM+q@cF|nSTLww=l-?VeQ923}JSw z%_>G}Mn?EQ(yAP>O%X8hxC8}4k{z~?Q1Q9PZ;XuSLt>0jkl!PcwbY?h@VGy#f&Lfb>D zU$WkD!?Y3yScjrp4BStPwYh^blRZ&#)ga(s6?W4R!d#I~Zu?WYeETl1MCmwKgMM}s zIRalOM6;htr>diodFS4G=d8reLO@~fc-pn0vy{Kw6*)3UWjf%z!$k*fH=65z-t6+c z+zexAe9-l$H{xwemrwDpNH}B!g{Y4wO`|D<{4`FMHp96%JL|=)21hRVfts~Gnhx`Hit{pv5QZbUzf}mxGDTF)*1bjaA&~n`N%xP zUy<8^rlhwQc(L8z$TLv4bhCoAC#H^OKt@_JBCKy$_H3GHO*<>3)`30*&#pO%cl?Rmu5%f19o)dS{R zH<%k1+oJ|@-pY-t(6ngm6?X1q*h98T5(DcNIp`Leaa73}AIU!E&YH2`tq;3k;pE|K z#qu=H{#{vQlS?lt{Who9ii(=Xi;7g$ayGwc3#4&Q5F5`p;R!RguMTpe;Is{Li!4$;`j}lH0~JL7>nLq<1LWal^H1 ztRDAs;;mRO09S+EmzI4xed~oc!Ozefrb>BudVlFpT<-#om6(ox`+W=5cG*KBF7eyl zbDZ9ghWF!hB=@}!BX?-m`}=ilP;fXgWIfBO)y~>5h?KPUIUfMtREQLwGdaDoi8VHq z^-UVK&xJ;I1Bjdh5O`nJCtz~DA^`fc^CiR7s}3(()%GV+dMUNzs(!5(En@NA*Kqjl z?jLU^s~#`D!jLURMNnKXqXL*b#PQ=c)O2P`ZFqmwnAoHH)1=dB@u40z@Z)TH9X4fp zjQT=CWGQMXL**8{_ZOUgr4`S3z)6{E^A&jH$+hy1(k4N4HJ-~Z^IL2Q0Y0yW!P0E% zxrEzW?xvk_$Rp-by60gx_P6Ap=rJT(%rLM&i&D)=qi(vRb5+ER2K9b9=t_!*2uMkR zwC|Tz8Ewh$u@ohiTRKY&_sDp_Rm;s(tYI~6w)wMY0bDXV*73O$!tpo}bXFI2FuAGo z7fKGQUFg|`$;kza7n;jM$}T9(@}t=fNV&)K32%_mRint4oQJe=6!mPQa!#YAH1nG|00dP68;gyL~LD= zO4lpMF&-t6f3?B2T=Fky1QJLO?g(5y6TBa)!MmC+TgG9y>}k2--u-rsWlgYibIeVz z2%QC;8<-P!dlB_sQjRfJwhQD3HfnZAcmNg16X=%tgFWTHWAhZH$lOdJ<`b`_BN^pS zD0|3OHnc@V=evhpF;hn>HIz&ooYc#sVdn4M9&D0T1iDk!C-*BUgeKA11n^Q(*$UQ@ zyz;aPFy0`7UF)u?=~PSEF}?`Ul|B5vh~m2B4y=0C@UQ{6(Cp1ZK-!fRogqc)$rpD> zS3*u%SvXV~m(N^-dzw5_wuf^^tap51%++c+Nj?l~EQb!zQ$Xhm9Q6@_H<}5@>iE!M z0y@<)8r}=)r9DY`{D7V>-w4K<0T59!4!p{@x}%RdyEw;Y1!1&UQHZpws@sm4FLr)J zF`kiOXn6snR6N`vkGeDti4f zGJIFl+}z&AsIfWSLq|tr2W*@SkK=;bK74GewBKpT;Po5Zo}WM4w7WtRxZnBf z1F0k=0>kq>Lt61OTppWW&fdI*d86P~S4FO{+YUG(Hwit6hc;dCR)|q3 z4TwQ~xinP*yz|@KnwntHA<^@9tv?8ejA2}tX8> z191}43!o{=0YC@CaNGQOt(D+iY{M8=$MW!fVy^L_eJ{6gL9S)yh?r%2V7q19z9PO( z{$DM?c41&cG6eU4T4qXS!PNftcQ;PQ3&_LA|0C-w*y7-tC1G%PcOBeya0?KEBzVx^ z?iO4E2@W9ycXxMpcXx*Yg1hhJlfCcV{Q>YW%;|Hgy1J?l>1U@+qMOXq1Mrle@v^qC z+O$nGeu;?i;fa!`7nh6BEiqKMj~&kdD^p9c%?T!7?hGonsya$LeUw|jIkVjd$4wn~ z?B9ER-K;e^2_S3eChCiRkuC7ELcgV<(yPSimXTW!BM`U3`@i?Ve=8A{65zv>nG+ht z##SsP!gK^=6O8lM%|)sov7Vq zU_TPr^8LG0^d?dzWTx4ynRr{^x7q1r6>C*$nLy39spfwkNGiyV3vywpp8)0d>l+s- z5kWqON;i+E-77RiML7w>UpwP+#hK*yvKfTM1g2|zQDW&y3U(z3l`cap*fCGX@^kav zKUsvjeOe2aJk~X|`{Q0}Y2vP*kXqG_FJX`52z7PKSk1c9LQ%53hO?yvB(@=9c1{-{ z3yS*-DoTV##Zpw0Gd&ew{?!BAAC;RaV2KT~D_OumHHDh*Rn$?)nRZ%J@P z^iky)|We|(@YLiMBLDl&+Ep%GT_m2^7 zGm3W%v4jbGN(U4^yKF4F027#n@o;VxitOl(Czu<#qq3-KeptKw3cVaI=r2WnVI=~R+W8g#eP8x*zk3t~ zhlp;ybw61rHr8=A@f5hL>n;@fz%-~>o}HciEl}TrT7T^N^F`k4Y<6|JB9)2Zg8fm}IcgJo|jtI*xnLG1NAbDipOf{|8qnTGctlR^J&4EZx-gPoztB(_5%AZ`Ns z*y$+ji3`pNY}1c=))+`&2wGL73vAhXv|iRrhLj`(g(2UGofl$HRQ)Kg2&(gs0(KP- z@xynKQZP55SS9|g!N&H}pxJ->3*=x&fl5vtE{@vz`kabP8^Md5mggww&V?iUIPpC& zt5};e>+-X)fyDBYnkq|1ABc|*LV|mE?+}e?PtJQELqh2H3QgEzws;a0z>@^%Plzz9uVprEMO zAI>fu_G8dNU$9pIe%m>@q;{X><;eQ2`?%swRxtOX$pt9%)iot+_x$bLDWllB`$VVJ zgPh#+TuB{2y2}DH>lOJD#Zjnf@?^~`rbJU|ZR9s={#oR^If^=PD9HFh88Ww8-uTS5 zCp};!Veb@1Gn7p1=ks`|+3Q4hdoq$)|2b^o`jfDTh$AQzMYFUK-|LR77e~3(pES9r zJD}o53S%umreH$-WNd<+-ci5K35be#jqvsrV#(-yMP2=R5H!fn@aX{n1LH6%xDSp;$Q#$!VU-cMb= zpJ`y$y3iNf$V$n;o{}c>E4HWaAO6tmONPVu#(5|iVCFGD*yhbu#O737mFG987xW?p zy#6(azGkwy{-Z&fnSlhE+NQ}MJs3W+erlpC(0DmwZ|`2yd|uj;d~GqsGul?f2w3^7 zGyC2WonUeR$rvV(lbYw<+_EG_5dUtn2KDhyzMQKb?WPT&84f4zqmHowYQJQ25%)oC zCmWn2($J5*J9!)LZ0yCaPZojIY}5`zyT;f-hX~#$vUh)ef_4)YT1>>?opPj}<>d(e zM5;J-#VQ>~A^ z?q3Z5Y8EBK+RMIQCUx_zoWl10p%=1aOgXlp+HN4~#?MN)yAdt9fff@oym z(mmQ5Ru2kHTo$i^9PmolIiB3K$2!^PEb2((cv?!^61m*$BldnU^t3du<|Lm}tcyD3 z?`+um<-_|AroN|YckX9`5v8TxfBi*U*^6_haT6NG+uveo6S;4=(|T0|oB9M6idpav z@o;||JqSk4Wg&sRXMI5YVQ|LU!0M^R#oT29Zx1F2c}u6?-G-A!r3SS(Xx?3Vi=FL9 z?F`gZTF&s%VeUk*G^X&o(;Mw%U#z*84AF6rD5{xJA|;rOCIZ+RTC>C2z23`j5-OTj zB{s&thqF3Lo|;^YfbtVFAr%c2@w&~)YX7Jg{iWv~f%b5R5&1gYejrQX77`f*R`P#cPnnE2b_OhHVcP2%qfj&apJCmky*^`v8d8;Oq} z867Rvx*I1a4QYD^jJA6n33;sqBD(_RQe8=P>T^}oiS<>3ze_ZJ`xeOZW2W!>@_m&e zr!(+^8fetD&%g2fBMx{t5&^T9B5KP;uS{MB*F_ zc1W?(r)-k%@BJ3%Ws>W(BsAyv1$ynk!|N+G3rnHi-JVw?8FoU1!*2U@x<`~y>4CeN z?(WYR&#EbqSUL6V23b|tsRiX1rWCK+cN_$hXtmb!A2u|U@}yc`whq(1PT9M)g= zTT2e(0zi-%xAIZl(Gb9Tia!Ok%i-)*@?vFcPND$-yEb ziF8kkN!1-FENx z-4cF!sHo>d$^NO3HncvOW}q{+A(fuX4-5}xiGLvM|G@z?u#b?uf;gd@&N#}t&|Kj| zRp-oOM(DIt%7O(`W$A+OT}ZY>&;Z3#NxH7>4cBj0oiMMn_OWeUdx}Nu$qVUE>7~Os zc95U8J5l^mOHgqTU-oYv?ULsIU?Mku;%fx+GtQ_BT~StHMP*?(Bm^JSWndj*C@LSH z(<;1*DI10OOz7_N>o=GiyF551X!SWOIr9`M>2Q`0z&fUQe$FFuHU|tQ4h!jMAQ>mk z+nd_4v1MkqR*{xWg!B!J4u5LXYE`<#RK*YAZJTVjGwae>=5S*T4i8HytowRMNBir@ zwdy5M**UwpQSsR>1@(pJGgqmZzZ4c1_bqJL(L&E?-83y~KbEJ8No)(^H?j(Ov5ncD zI|>{(Y}iW5AtJREDta0M%hFoVx3WUt)0nh0}^aO$;jWZ<2t&aI{cp&TvNAj0f0lr?TwS%L* z!Ff&qNKAy6ecCY*f4;D^;RdOo;OJF@A_Z0Y3xSY}m)9*izig;Z^a4D!xvaJvXaOQq zf)-lLrj7nFY~Ye4&WLhg#ia5{mRTEZIwmbC^u(Hf`+0<|OY`js5kt?9`Pq`LV&cv& zk7D-&hIA_0MC~H(y{82R!(IG-whN|#lz9suS>3=Atjq24uo(O=e1dEac7&#;rNIfo z(9}3!Oo|Tx7)93g)0AK{IpwS>!AHCg;pwZ9NvkEVpgE=}IzwmMERkEbu`CE{`UcyO zQRDxs9}a)S>mvWC^rp%uQiQd<@_1bskMvwo!Jm4t0^4e2U^{I`0*wl74E&BV{Wf$+ zM`l-RYCSY+V$JDzZP@4Z$zIIb-IRb;KkEKo;Q6>rb0zI~3{g+KK#_h<+DRCCE{#6H zX%bj|`Ril4xD_+l(k3lV;NSlvFgf%UQon5-oyE{nINa4VCZ6f%ALTVa%VZ4Z$6X|L zKe)pS&YXxjr0RZEG6L5=3 zD?16MZxEjxI;({G~Nc&7QGSeSPVX*_+`^53OgZ z4Oc9WnyO=97TQ1^X#ZhAT_EQ}aLUm$>unT*gTLTauX(K88OCPJG| zGcapLobc77u|({cFEOFutmGnXUFnqOt}EMqH($Df5%LF2*g||E+Xq=5&LYbkv2f1M ziq?p=6DR7DqU+O~DBV04SuerT0u4s*4s~=E1IB4lr^DS`M!K(_pRrSY=1FC11QeT% zobn*qOk^l*Bf}+XE!{nVL-9(^`8zLB0E6(T{$KNV++>i{g47JCjw_o`FbHSDabgtC zkQ)E!v5xOxAmbG>$C$7uGVl8PC8@{r1Hqr;5E&X_%7rSiim=%=bx4%dF%zf!zhamE z)1M@uR+(2(=x%bt#rQO(ZfqzB~{s2`S!GcZ)fiO=a6VvvJy0rw&5S~JQl zA~U-l>HAeN0w>zSu_qzQp=2x8pMzCq>Sl6n%c_6$O8?y>G2FxiLsU&C8cLgah!zkj zk-{((N9y%nyg+EA?Rt9#5gD~NUemx{Rr>D8+J1X(;WZSCCS+^FzGMEh`)IGSk&S_& za_wO~tdcI%xnQVPnCf?sXzWMD4|~Q^tsu*LS!H8#;M2d~Er%o6(hm&R9!t)8xUqd+H=cm%;NdY=^Cu9ihuT3F6+6s6HO7msdxK8>sf?v1-S}rv zON)$vUi;dv|BUn^aWQj@A0-)Q4zP!xVfJvD5e*wKE}5CWsvX9pn8Aw$(GC-=oEW+7 z51Ma;K7Q1WY;K0f8@o$jl-lN?vyJ%5RX0Js7H?20WA#4JY0oBM6PHHx9*jWuN+!b8 zxAoJdLGWr~YPHqKX0Z{)eCB{ssMhiRdBj!j!;k)6BpNcd6z#^Dz>d}vaJ!BHgLG4& zB@<_3O*qe5hfd4blwR9Kd-}+%w54zeH8fdhl9knQ7hB-R*e{3}7+lCBYLL9`t*xTr z-PS*#&l24|TRqsUkGT!sY3k}z+FKeG$7tJ)`6VEkbgU?>oRq1V+{T^nLVv*m+ zgZC(LJ)|rlK@*N#1(*S^uRngE1}7v)bjrWX3_~1+we?P2Ea}GZwV8;~UZ`xVpGAtV z-QK`2CI@0ZEX!;kfmnI8?H`oIGWCHqW=de%I_He?q9Pj2=10PToDI~NwY zNILgst>t8)v@@}o(2x-L59vI^W&_t}`YAxVX;Y;0mI+FSP8#! zWd&dOmc>O@2lTy3AYkjmNyqcG zR4pJK$OiE{Acp@SR!eZQ`Gok~T1TN&9cKMeE9*s^uaFYee>?=iD#}HII+p}WQ?(gF zQ~n!x74S;sz_7ysvGOb4&+HZa zGB7Q{wU%78%A#3}SytHZCy>CtH+~5;G&_i*4`8z1zP@4~J?RF+E?wQ{@bH)nP5*+| zTVX}avVOD$gCGUASIZWKY!vXd(=r`6578Pr4SQlrS}S?aDiLgz-20BR-{WfEg(quP zIPKpFJm19c5KU|if;tBYVd)~(0-M7?V^j>2D`WYY<5TjLkF?A6&0Mu6XZ=Ls`75qo zM^+GZn45h<-HS*Bt-zylr+BG&PJs@r`_ z?U%}I@6vl{J*~PSy=j$Ck|--?CQM%{K0-E%wA#OMk_vd}3cAAGKOM;)KgMU zVsIBkyEl$vJ8gch^GxY8Cr26i+qmqzULv+~n1(pqKN+FYM^J1zEWN}!KqloLQ>`^N zP}1fMRJ4jk&j>~{!hW1brS)G|d+6To9GzHwj0;A|XZkMiqN{9IQes_Yd8N-2lW4ae zfrQ>r0bH5X*8b1z94x|v@#QWj?PpSfZX37j5zTQIy5X#-;3Q!;6HYzU(8K$e^sm&> z->P%4YzMw9OnD`b3ygd{pvepelj2Pr9^Rx^uG@JB0^eKT5H7jB^M@>wG^LN_N^wdT zn#UP^L`VW8x)|74#0?!Vy?tIHEmM64bR+7h&JaCJm5|02JD-yw#A9DAa;@GGt-SdU zWI-cV&cJpR!E0zQmDJqDTtZrO8OZ`Qh>yIY?FnuhJ1(vGq-`m&sHZ!k?`)`8Tq=$a zx|5Jmh)u>n*ky`J6!Dt3bRYbwETR7&-3*A?hdzKtHtNexKkIb_B_@G>WviaLPQBeg zMtPfdpHK~EpbqZ}dZJrhV!TLRx#>iiE$xu5HO zo|GV}G@QBb#&xZ~Qs`c3d3cz!xcIK z=v*PjAr37ho>{f75wV!mZy&PF%(8?aOJ0w<0V~S+wF8O-^|f>HasGA$i#POC?FaaG zPnRV(KeCZ7R0~qgDv;O+Dp1__ClsYzTnKORpl-(47SJp!F~Qt``M4Vq%hx-nLu^Mr{A=7s_3Qf`3K?1foKt)3v)c{Z<)50}t! zE6_OaT%hF z`G@YnMUgtD@1W}lF+6!TZNRzwsY+>TArMea=-Lr-Aa$ zEUWu$&o_BmZbQnPPOAdOXXt-cgT>h1h|1rNMSjRf^gP;YPziD45Exttjq0}!CXO$; z<@cfnbQCmL%?C`kN*uF*Z5Hx!ZUt)mPy3nKx|S*0>9#XSS&wf9N#~vQWfJ371NKfVA8K#&zEN zf6yKQU_g9^U+@!!2QI{Lbq@}DtF_)0$A)}w<6SahFY!k^!^#^4NcAH8L``G@p@c4w z^Y8vZ;j8G^@zKZcrjGvt(!C{}1%Prg%TWN$_4OL5yy_{N%WDKvs>))~?i){;X*HxR zV{31nG>hr&s)94D25!F<4+P8k+1V)$3_Otj!}hJ+Q>M$j4Qz!Zw)yYakid=9)?KML zjt#^#N&kMqGFMnRnKGWV^BxuO{@MFzOo} zE;3u>BZ&oJcLvZJz>yz7^_^4*lAVG64+l6Ih!@U1hdqi$1}|;AHWmPSWn$aW5w_nq zH<9lMYXAC|&nF%CdYx{k1tFOa6D<>vR97I_+4@U@SOcWNErS%O<3vJF|M3U{|}kL7=|#Ei>)OKO3oN0CmM1#7i!bm^GcB zL0s6eX!{NedkdK{^q#usehEffmo?z6O8O8^^PjGN2z`0qSgsg$UUkHL1AcA&7ULsQ zzP%bRtR$3vLMYMr8}=dNf}NV;UxN%TW*V-t7*@$er-;03*WIwo#!@Y-DCudvSXPZu z{EmD$kaSzZ0pfotZ(yTarii7j-B!_<`H}Nb&GKo15#)~E-u_4K;A{t4e=dUJR{nn` zCm^STFckvE_ysCjuA2{#en145TdnawoaF9IkRY_2N*Fz5M6gDM{&yX_Hl3!4Dil5U zKsJ9K0vWf0)YIK6+{pk9Klg=n?Wtak^i?aih#Z>qi{fI==mW&#ozq&G%YQpXJBzS5 zGEk3y{D=ZlACN5v*C%s%(B@IGuwbHuBuTRt%oAq@e#2quP5j9R|2I4Kvu?-1+v(HT z(bH*!Onq<&*O$5t_E?_IA&3_9&QbL%wugcOb31T=AAjj{M?ae}G`wog_g9 zwjvb~lfTvoPa1Ey1DV^vf|&IxET0ybp`!C#R=L7&iMYLPmRW99#`cqsc+nS7+b~ne1sU zqhLtFCj(x^BS$B|{x-Fpl}#lCD{!tg4Ety;uw~x3JAM8M3^PeqTA;i&v}z}h4LCi& zvg-gN3i0m$O3{UBvn(GIEJ)IS+8>L#3lKzGayR>X6!%MLZ2x%_$pE}#Xy-0h{?QVP zpFSA`z0lQ?j!>ebp}AgjOjM8s?B~C;xwpgnOGFnhcR)K2_f+zYF}-fu16&tGX+lp2 zVqGW7B1XbzAB3=cp#@l1uY1;)Q+vi|g)PI;0OL%VB_(BD&q(rwVwOz$ZyWr4pUY+R z9!8w2e6Bo8S5iNb7QIkVd3LN5mjzfsn0#EmgBG4-FWc~!YSp?lwN74Qi1 z<1*W|E2+oEU`9{n$QJupBY^N5O-x9;PDP%634O9U!u%ZTON}JVLSSmRHM;CdGBvyS zBZ<3UCYKdsxQ3v`?d0RQ{Xs^RovI9-Tn;BSP#;vzJNHBi#gkrOhODX89S%WNkuCs$c)earGx zVy&|PggkrX(D;*z@+seV9(Q7t*v$X9)I*qpm-eHGXafF5w&kyP0l(R1x9=)EWoKX& z*6nRAp%r$tR{P_mxk^^VoOj0w;hZ&|TmmmsdR?K-2xC{wqanKG%w*lMCV1pABew_>|$A=ZVHUf7UstxcQoF_Cmf@A5%ANUU^}{l zVDO{$HfE)Fx63OT7cFE1bvotUuJE*8=ZpSmNOBPSiNg>{f3cXk+je7|e*NeNl>stD3!J17% zyeA({C8WcQ;Oq7Iuw`g1z}#wnLBT!8xa%TUATrL|4gGmxMEo!d5ez>Z|I7D(yz)VT z;wXxRgJo>8cD8~>&w;Vnq?Ui~x~jc#=QN0-5uTLX%;?)a?qIy{_d8T{%2-u*C3@nT+`Z-dL*+F z6iM_Sn@^QY;an)5?`(B%kHxa<>*uK{Q08ABJJ)`MhVu0%; zta3;1q<0AasIGQ$O_zDMU#@cYb|;lnIi>}5LQC7bb-QAhEw83Jnlty>CH4JcH*Ug+ zAQY-h%E@W_t;QXH^P{dFp{Tr^o7fOQ_9@sq`cBqQteZ>Bu0Sp34t zTlQ1pRVs_g#uhKYo1lAQ-5>gvA-ih%(>)|1A?KTvrKGi_r*w?@vKMk)z2H}AnSsv9 zFFANMRd=xH}z;B=WD|W>qu^=+EXh zx@boWC3Fa83Dw$V_|c*Ay-07qlZ9FQukv-D<`6R)i{BHqr!!MBh);a)o`RTw-qYgt ziUwJ+xf*H#_cn%%cg_Xb@g3aigRThdxWCsZkp)vyFVA0%w-sPwW5Y=qoM~hi$HmQT z;s%Hhd<%OZz!bI%9xI4We z7BVkk?%n}Xoo{YAXTEIjA7$EAIgQDVhwM5ODx((>AyQ(?$x@n`&ra6`S`?i|eNY@R z9CxPo7(1J8!c(g#2l>Yv&_eZ3Z-p{b7WgxH{NTDc(|7u0dHqg9Gr47|cMb7pjb$j% zM^)U>08IvHaIt9rGMuRCU19HY@Un%>z|;v1l99RhDu>eaXYRz?M0S8{1b7yUdutF& zo6t&GMPbILH80Ih!PqE{X-BI%UxXOzHm2XU+ceAAIUhu)nb)wsc$%M228D6FO&co3zSh<)2svYsu+)_alX+R3$hd` zw-l%tToYxkyq%p@IzcwRayTq9K$gT|)}AcJ%lz_sy{CF^zCdUMdja0<&`vcebTIMM z57&3EPvf@geY>)NUPrn^!KQE2sCT@)fNES)N5Jsv;`P6EMFgcSY7+;g1s@^M>hk}u zPpAuh!hAlF$KgR-qz{z|PYAU&rj-8qus7&?^yXmf-zT73x4LjTmL{aSnS`$tqr$k8 z?0q#98MG}H*2l>>x*ZI&C~v6XjOi7{Ofhk>@Ua->L0NSugw2Q@9pOT6F(hdzDLA0!Lo-q6 zF57Z8bkt&|L*J#A4T1neb|f1w@Su!~pmTtk;&C<82udam!}0hU5LJt>?@AjP;OwG* zRl0==2ggn*AbWN^S2pA?<~pFfxrQVx>$z~-xxq92#BlVReZqUeUi91Kq=n%3&dWd1 zi?>Zz4U{xAB%U`m2>JQ_+egSR$)RjN39zIKHg?jczK%~zHjT6j$oZn-#cx(rBNsl7 zKk~fN{rOa(?N?cO8h2yzN@Y9Uu8F^&cdq_zocntf@eF8?Q{u|~%lpNuuVuq) zbJey8S{=^pqP-j+lM1SB3Qug%(KP_6$ua3D5}bj?rlv#`6yMbX-tm@pto5LgUOSOg9Db)P_@m!6dIx}=fif9gK?tuZEpDvvJ+V0Oc@^!i|b5m&3Z5zF{bk2hyG6Nbwz3tfRx;kqG?M;jngbu5pv|9iuP?VvxSb za$s6o-McvlC~=x5kA0?maW?o8MPw8x*$jHjBqp-fqF88D3$=Sv>5ap?KUcx~V@DEe zpk<_M8e2R{5Ir<>24oun4#W$6bU=bZ0*m+&YltA zOobRWC$3d)di98Cnq-)niQ8(9)$^v0> zG>so`x5Gm!O#5{k8TS*V&>LKD-usRkkT$V+!7}MJ6RjGOMlZZb0E?6Y2Tu)Lp&4>i zp{@D!@BF@t37Q}0`QOW8F&&Cwi4*F7a7|7PHJ{(*P1pB~IKvIUhen@_kDqQO`(Fo? zm`TMShn0FdjuKn%;F9C$ck%4tIvVNdw-n)|hb9LxQBo&INlkS{Kl^25rPK1sCIj}? zhtC2|YWn)*IXaOg~s` zLcyB2E(>oJ<3a{=iv!(e&K^w#TJP)y{PqQC>3XZ?_VIsnnCuFjzeY3}TAwkPmCaTt zS}*xC2FrHi{y5jAmUIzT7ljih8|&=L2a#wgt)qAl{zk^7Q~1z-FFs4uAhePgh@~{W z6Z+4)1WHr<3AvZnyk|cyfLQax#scvA96+E0xt;s*7;qrqc zZc-`|V47w={)7Y5D!JuRpQ$|nEiG;nmIpY4-G&7dLPqI!b7!jZKCLj)s4PFjF^=DqaLe|&)x`06VlmWk*E(EJzbA0?S8_;PJXQJg)(s|Ck~29D^|nD)U$*J z9SL`|-lz zVOZ~3PX&Q2$!f^%lUI_IioK$?R3#+sKh(JwxaOoxi@yFX|g+$C(#S;NGcInG*YF2c^*R~Pt!IPq5g zT){8^n$ELv<5uPAZ%u!OY>HLFsTtN9V=;JaHuDI4fSVWapj}>>%8K@Me;+!mkX5vy zuWXEhXw5EGLx$7aM_UVH+qlKcD|i)nW5UG}pETy?b8BdNh) z`1T>sOt`UsLly~~fOr9k-q$i+=rm?=tj}QR)T*kgRTwJI7;+pE1V_gUm6CkmyRpiU z)mCAA;-22#+}W4x!9+_-OTwEesM4}hTB(5k|7HPb`OKR6`ih4CvNq{u4=a`)AL|=h zyoZ{Ay-TW(E8dYFD{CwCNYd3#u=?)WWGyVBydq1z zuKEZjF(IPt>pI$#+bdjB1$}f3yqBE;l&pCIGSzpMU#_h5m`)e(M3f(k{QtB!6UF56 zr>$1I@d|r7AhfUD3;DXoiTW$aE5S+$f7eax}EfVBysocMbXMSywy$9C*jL7M~H(Q{c2L;w2c3Ijbb&_+G9q?_j+5M zA^a~RaRuIp?q?$Y?4ky!FpqbPwP_lyBDX#sufmms!bV-Gsiga;yw3C9@RN}w{KTTE zoa(Ei(4bIkZwUhATI&rd%esY%M<%@r4CWEMOsUBzLm@q($xsjutt{nQlQV&1w^c;r z=hK_$G@Znn)YbQN_AY2sMX=!WBw`Uw=J9~2X2@@&6N;+X{uivrlY=(Jks8T)+QO=G zxLNj@=h4$CR_8XlGK^R%q4H8b{_r8((wAB2HK(-DK`RP~ZVbi60l zP0+1&#Wj<0!!~DJVKd;bj|V%0cG}%JGHLx4g78Osf!l29nt#$d%R{24&1%1j(gSOD zfED1;y0bq`DWhXinFnF%r(z!H%IP7LEGNN}wU<7s^TxCSv6Ovw9%xQZKSh<gayLZI2?x|5H;3&?2Xx+#; za|ThsKzkyCcwI^4wb0MT^bRLDrZ5PSD`D^oyNhGa%oJbI#Gr4m)kYXg<}=eV#!7v% z7^n6K!B}7{`&@@6_hc!+X&;6EO9TtH8r{Gt=0C8V_ zcjd+N7i2_a59EW>km6PTr`IJUiHVHPKQbd-l|K<=9csDY*v+>BI7M(<#6+}t~kq9k?j!uuX{bH^%4~j6iCG=|H_Yw0H$@i2q#G$J(?M0_4eA!M#= zZ47Up_5N2^!_CoLK;*HX+M|s`m7|`di>y6tO{dbkdsHchSQ?Ad_?*;aD6$((tXfr4 z7{7`CkgvxQ@sDv*Bh3p{Rq`HVqn(t~?2GOWkL1c6Bu&al73_;9&$lPZl99yYpyPD# z>r9g|ii4{wgSyaea=fu2fbE6{#`z~rAfbh^k%kAkWD%$r#To8eH(+}lvMCwsd>3pO z)DcP?Sm%0pKqBmek9>D379;@!$}vto|4>591p#uDwQhL2$NVtdI>5pAdEyo9U8Bt& z9&$DnjThk$VP1I`fAJ|*Pz%1GK~bZpnr+1gD6+_@w~v^waFE5U>8Kzz-qUJbzy3Q= z%j?b2QWW%_>5`k}N^@9w^%j_I1q)ii-Tfxe$Ow)pB&H(;8PQr{1m`gAL=1nPr< znUtFwThKfbhi{^aYanI#=O1BApq;Q|ds!}fvWv2D15*i*ve%q*tm`_~I+SMSFJuS* z@?U_(jBemuNi)*wN4ep>|@{MDuy82tAx7XXV;e}4!r+Bn-h)CQ60 zKp>+{w3rt@lzntcFLDBW=9B4_edWzU8sVG=;b?}C&NPwfK#&QI0fRf7+DXH-o6QZs zSht@SdZkqq=_5ueX&(PLH#avV)+n;leS=D#8>c@qfH4keBrW_vfx}bu<)}8=@FaO| zGRsFu-nU()9(i|1I`q7j)+J3L5P%Gw|AmXY9A1&k%D*TU(~^#hh6wPJb5#ycQ6A~y zeBqJR0dq@b%65Ep8UPJhiH*8TfNgb|2C-Ycs%=m;*J!J_J_ zJXy)ux-8=U`NCE|XKN@%2=e8rJzSO7&70Bm0f5(!Hn0L32b^~5oE-v__18DI4&ivM zJOff>6&+mfpsZaopG@+Ll>|4Lh?35C)x&iVFMvYhQCCN?JDcv&g^NVub?8Ci|`a-%t zEcB!v9@<-FZzjbs^#TLGfRER(=qGI{Cek|K4vDlUNxI-vRUgcskB%^j@Guf8R)eF+ zl4<15v}~#nBi53>8|ZCc@XJ-c`8ZtKA^ui6?fd=rE{j(TNPSMgOkr~U>{!X;&sLWw zL11iz(=~C11=Hhs=UFz}Gci0I&?C$Kd${aGzxMoLY-F6JZYQ@H=T03h)%S^1*c%$= zMQCSLW^Ht=&<2Xk@_{hzH@UDky68GNXhv~PRJC4|kr7RaM*84r8!FFLR!yU$e11)w z;2mIUrOp<>E21}R71HBuHPp-P2XL?4soOHdVrA-7S}@+Hw++_g$Q`>Mi0Y6F8Zoe>zQyK}$^?7ZPxH9hEmoc) z40--7zh0AkE(bO;vh4S9t+u3HJ=02`;F=~O8;TXyHS>aZdtnKuOJPWyX6nlf834I@ z2)6-8b8rPkfCzkftVrh1)#dtR$wD6Qn|-LZlT4bJ*iCk%{5$wxkvn`l>a~dSeYptM zlQ`=Zz4OL0m7&%;g!rW>o5zFUMT1B**$R1i0LQlv>l)1VGUKzQztIxaaL66RWGk7p z6)TIWqnnCv)&}787+8Zt;cERX#jKNArh>=#}jWhwDr}y$xzLAWFXXjhO~QA~Zey*~G-6MFyBr5I}uBl6r)v z1H8uptH<FTVlK3tC zRu_Z=z`n81(L|e9AZPrH0{@t_<%TJl8AA}Ks1n(%7RW6x*hB*!PNtg`7WHt|*xZ_~ zM#d{V9xIckLDh+d76@_@__MC~Vl3e`{N6hIYk`YyzPZVcYa!#}vK$q@CELsA%a$ub z0DvZww^?ewyi62od<*AgIl7f!T{WO|l>jp%N`hB^^DJ=ngM({*$ZZ|+8@)%wLi?~l z9gv0*e>+_SHfQ++TAzra5N0A&Hr$UzTqFHH3W6^i0Wyq`s>+_-T4@B}eFzY|!tV(V z*EF0T#V}mex}jOJ;`(3;l?K{##zOw+()LL`iXPhno9C7un#+jf|L;J6~uYezr^$HTc{6m*IuR{W0<(Xh5FOtTZe?&I?0)EkCle zM2RdEpiCk9&DFpgj-1!JyZfyDS80VDO10tqO(JE)dWJ!4bHz z@Rb;%bAl?{#a0Jz32G$;Cd3K)zTt*k&{CsKS1b6AyNLToksgj>75;w>80WvJG$aPQ zS#+WM%yp;5%W}Q&C-xrPR9=d5y$&Q40&iHFb;9CY_h3y^Q&Xu1a+pPU^}TnI zNr(~>R1oscLSc|21&5ePlUa=S`mq_3P`%pSajfa%x@dJ+92Jr6l?RV1oaa>pn>o!a z(qSk@X29CfY0i5s9TccKU6Z}(QX`2r!ws!2KOYcvx<`Z$>ptKMv!3G0(&4%vum3w|CJ z`0@=8sJW?taWt}B(m%Fc>+8e^P+GVv-jYVh@M~?M3s&C{TW7x`K2yMPdgLGklAt3x z{0QxVgRH2mD`w0D|2+I+jc6-^wiR)PR$0jtv@p5%ehoJwIx_NtGwwSkJHj)yzG0=Z ze?MCYCMh-?zx{*M#`;P4bHsPr9EIHd3+lO(Y+3`h=JUS6#`C3QBJn%WkqFI|h*!{9 z*3ooRUaqJuI~X~W=119Q-kbiSaY&#k7ZoQX9@peY9>`{OC#;{N17d-6ePW+wN48f% zRr(~t3wK>RS*_DA2oqGo)aXa|9+HxhT(y>KDkaMn&bkmeVl&GR3I;QUzXZYcSPn*& zU;(|O9j^d$V;nC=a}#cTBTNoE&|oo{2$04_#)_5{?pV%4AL32LyHWI%lF8+3Cj|g( znM!gH&K(ZVPG8?m>b0JPCUB(xy+nC&H=)vqsV`V`p>3J|%0&vl+04~_1)P~?D}Zns z^)_qJ?q_QQ-<37a=Za08#@Ha61Ycu@p{ho!+1p_O+4(-_qLVP!Cql2^N*3(6GV{&G zi0^y)NY=kTv06+wQdvin4~}IBq3CUs?jEV%g!uk?d06Q1pgE;~ZS(*rrto}&^g4Dh zvVL=1h;)@5ttR!9-tRFle0dA#x$o&gpl=h?|3oLkkjFX2Oc(eynQD;3`BCls+#zl^ z2X1=r%iT>nhsf3CGa*W*ksPf01!eXTr4Tx{LrZ}fe^e;xc__CUg4 zjDZ7e4Z2+^Q%FrfhTQ3Rugf>=B<^Nr^v?G*1s#Vo^Z{|$FXD{hcO!yyr?em)(m9B93`jSE zFm!kQZlCA7_x|sF{9p2Bj^Tj&y3cE^&swKp^I@OFvJBQh{bkVeIrVbO?m(JhqdkgK zd>}!5i0(mv%kxjbve+5vmd=18q;cxQNj`SqspVV%gW{rMoP!9{^?~T8#KegokErqU zSZkh#1{N0uMsS@+fb~uX>>ocsJU5;3lv)wsA7?d{xi(zCg$o zSRG|~Rvg8RT+|zFJEOM->3WPb|1q)F5Rmy<(CTBnH)?z{(Md#{6n-7f!y646>T8R) zzI3u*nTx7~R5PF^<+cu}jg=IPgm=vH($c!5%i^iu%hoVx;o-Tfv$=N)X{cHr)-jbB$YlNdn z-NOm3h_wPG6pe`${K~PIg|wFG9DMcJw5qHw(KcGy9eWFOdEPa8%kvY<|79Z>!T&+e z2_iw=dEgPVN7HJSSA#azX`?9-anfOg8+H1(;o7@A_P@-y-4N5&AOy)?4?g~@Mg;Q| zDb#nkcXxfbezL!vb0DAZ^!Yg(wD3S~fA7IOzwx-z+5Y_gy3z7nmUj7kq5jQit|JU8 zCB!<1n3R-UVEVklu_S296?x<>`Sz9g!2K_$_<+1Bw&4)R0jKPIbD1YY4PDVLBN5>3 zp`E4^;F$8~<-W%q5_FR9BQc3)Hq-00NW|Q-08QML2jslo*7Nkf%29_nqaBu9(SHW$ z=m}b;T5G%{6~?!?@FFrYMS4;+XpUQO#%RS`a{n3Pbipe_^?!s1QE?Dm-UWg%$)~EI z#~|aYeG~)%TF`7pX6EmQe2Q6}qK~W4GV?>a?9RY*+P-jY5>l;l^B|6I_NF6q-WwN7gru5y=G4bcOBiMvJ#e z);n-h_2+Z&vQEAvXXBh+Psj);aMhmoNV*}~Y%^iux(K2(_gBPi7PN(E*|QF{W{!*Q za4w@5|L6y72pEO;(Srk~hEup3VQ$Zll}xFTJ*C&UdUU-bNTZYNA)^Zmt(8JjJ}+)o zk)C01o+jRI1PFjIF(U`dykXOI!Y!>zJ8<8Yh#j`*KP@c|BXHoo5cfMG8W(Luwwyz8 z_+H{jc?voc4RxvbgMOEZdVYy#*U&;Jl{n?CdZQ z^zpbm;AG58asy{=w$|~`t8(-fBi;PyfidX}$sg}VE^1h-dw&+skp?Q$ODaSwg>+~m z+DOa9)=o)%)ZW@w`^MaSgWI!LN0I91!$=xuI3z4Q3O#G9WLWU=jNShJ(5udN$lDgV z5y<2=g9u(F*-Hj&Q~Xk@mp0!BdOm-ZUi3daBSrh}vDxpC@w8#2$ojLcL)3*s zMd39sAP1n}ygXnN+9}EulClV2K81E<;x4c-Fko6u=nn?V+JWni0Dgjg^g0u1`|qVt zp1OUo-|IP~yI8#*;A#pfYkcM*xIyPE_paPo4fv#h*Vy?G#mXhmI9gyW~>Rze6gh3-20t#0z%p{N(+ z4lBEW5h1Mtx1U1jZALyl1~h8mP2`n>`C*n5!^|&PG6V^)$JSV>CZshye{ZwnYUzaX zVq8;b8v;+}H{35@kTQLGRe7rfg9(QbbQOg&PiQ2hiN|#2MXckz$&Y9|#IEGLOA*mg*V%r3uFn_2wE!J*3j;Q2Y%8v4|ehE^zygWBxy9>g9`1isK(CyCAUQ z>V<3GUv?k43nGc#5Or%x3f;tg?lAjf^Lly5vhQi-&yI!)t+j(WmD-SCEYQV1FUeqr z4!u>RV?M5@_nhtO3Q`RSh+)7!LOpnRmlV&D<%!aJ-|t^SYXUC+5OaVjSM<8Qj%lF{ z@TY-obYKM^-%HZoCLGurs?|FU$*fvSYxZS5Gpy5RfVX)aQjY?Yy@ms*7|250^5HOb ze$h$|dSTIy=dZ6pqj9+CdpA4BhKvdrsk<{f9{IsZYk~Agl}Yx~&Qbs(WCV|e0q?HE z*our^Go{#PA2AxV9HJ(V*){l&xXYG-V5`qXL;BpOGcbgk)lx38^Z9o8?6PmD!py=V z#LXfr&9dRIuZg1Rez+Xnsm1zS_JlmuWi-0=385b?eBW6&j{5);$cUQ+kC zy{T`E$%wdx3*0;=Jsn3ynx4pR#UOKeBbluwJOdC$GxY=~0-8BzhKt35$7Vq3)G z!U9dOb=XnCEJ=7*Z9{8@-poD#~}qBBWB+W+%q$WGw%4aUmSQpfbjlLswdJPJqhA5 zT$RyqVg278O*Er8nB|#0lHRg7Db#b&p>FVZ6`nCzskDE-0bhS{RSTaH( zIa~5wJV?1qOhrH98CQFh!%IeVdG#8a2RhKGC%%mDi8!CIRKC5$LhN`|eGgAoAVVgH z(i-$k>wmHbSzeB}F8q+i&HA+O6d1k&sMSLVYeDVN!b^X)w|o0lyLkn^nE6F8Sws{xD8sJoWVEV^3OB-Au}b4+v^Yx1u{%0x zlj&8i?4XFC=VlxfY#5^3jz7q1X6!8z*}|q2(y~>+_u$Kjoafnx69KipvRKKi259CX z%R{XdWrg4E&gavQa@0*62<{gj`&;dI>D-Mg!Xzc~end79*SbW*QLteQ=)*{B7PT z&~PyB1+8^;&htnmJ6RRzB7F{QCkqjc=`)xPv>>!OS^J9`u3VQk)IB}U)tE&OC`%$a zu>#H%zxl_UKV{TmsFxPiFg_r-v$+;rqwUYT`ZT9wQPA}L|Ffji1!#&eq z?(APnAR?%-XRL^+rEMF3_G?$3VJ6&=8h*GgxGYM~w z3?fzu+IIbakm;J48^pe$N=?DSi_#ad9mEFcvts)E|9kF-{3dL9;>U|y`SHSm<(Zwd^#g#A?%X64x1S??Sf&^`cBk^IeM<2BCX@v~F zL|yOq$0wsaE(EP}SKeuXOca)eAaOKeJWekNcg5#gu(_%&simy?II>vcJ=czY*yw^lNTD=g>Nux_@fZrOElxt|NJAjrYgXD zFs-NU*d#+$Vc(Cjaz)vqEMnr-X|9) z-go-GoqorxNJ#QM2@qr4Hr%7s5l6j7mG1Pb15rd(ypD<*6z>7%{c^3OnwnAc+VeLm z=v$Gi2&H#bJyWyQyg2ExsyWMC*eNt^JFx2XOlu9$*Rj{1Aog6elRcWF<0hXGkGFU$ zPMP2+7axwqAaGlknFRS{a?zt_Fc)sI3!LD%!|V{zUe^}~EOfk7Qf+U;Gw{B$i+JhPma4o`R3-gj4Ih5}PI5+L3})otynRz}A1|!D!3^>cG6*pYDMpSxxfT{bc>YY`SbZkfS% z@Ta}kP*R9agSBc{of8H$j@Qf%Tcq5m#T!{dUkG)Tsq) zOQN8*p|87qJKS(;z)6h+E3ElXTQTZ0o^qD=I<{#X2u%!chc>e?+4s}CO#v$h!D z#uwVMh4q2#$Zy*6BS3MUF^1xNyQ*>COhoY!2O!7O}%PbqjNiSqS50$FjO7?koC5`PK77bHCN~{~yj`FnBnJ34#+I-K|1c-n(YgEh6f^H%&Mm||E);eAT_-@6UE`a9D z6>YTUbbj|PlHHvh!1Jv3EQ{I~?*p;jezALgiSg+b7QlA$* zlS<4zMJjN!AH6!H{3?6?qe#ug0)?nKZ}vPrRajJ%q7uAF`SJM5z4sS=2EkMLaMqzm z;38fHvN(ze10fq2VoWy9?4nK-wIbY-$O&Nr{R>mcQZYi6J}Tw(Oh8Qt7~uBTsHh^)30G&>*@LeIx2y&;K=5ztIl~;*5a&8su+eDBE#F zE)ub|){3zYdvW0KbJz(wv_WR5dM*C!=dq?e2S+JzvmPReqIr*ewA{+P^pfboZg|V9 zKySj)b$@qkNV^NOFd6v}lw)|cK!>!2{bQklczq@6cwJm&L*n~e_!XH)(xpPblXoJX z?{U<&lb)FH=g#%2!IpZ#i0*R7=5KIw>$OJoDy`tLS%tPTCh1cxHT@`2Vbf{R)?5Fc zt|ssv%p+-$xTKj2&KL8HHq%h@XS@AkjLdlycsFx%&4i>Zh*?zD7tZzFDDID;`;(+= z`=bt}d?G(tnGlY!sk-1KBn0w(w0Db*e)^ZM=1I8a3Nzw;FI8(h7sEpz{Z4!#oBPU# zsv7LWo{*XZHyM8%Y(1g|Bhu^aXfHayvaODqtmrAu;{UpTem7?Lgju;a*@@NGv0yVL z(AwbwdYQarxY8z&`b7}!>u1>vPH8k1g>m=zJR})F&A!y}T;H-8sdkul)YZjy%kiVa?Z4CN{z8oMqlVRm zNpDtAb5NAv?h-&CSKkkp6x2g48zf_q%(^kC1~0Gx zu2lVGW^*rLf_8A%h1VfZaMjZ75|hm*Y@v~^8~iv5aWw7I4IwFgDk?{?8G)SF-lQLQ znAwy304}vVUXc!2a9j_WD>O-U%U|A6AK1PAahH1BGJE`=B@%ppUmt?h+n^)-Lb!CK{H5FbwUhHZ)8J(oK$2u; zB`I4^M%h2n!IQK*Uy_0`-nsod(a~`sovu3TJp&}E}(v(_$yp4$mQy2 zhEldx`v9jC-@YkeAP-+WEL3K_YLY-d4drsb_x?EUFLt=0`udwUQN+Y(5>* zX&*uKO#k{4*e-5RiDx#v6=hJRo}HSwZ|E)muC+%s&gOgtx@ydulRxbZQddsusM*6% zrxpt~@CZ0jC?REFX6iZ1JYV0wRfc{TqCSk+aq>_nuA067}vqFnfZFku>1^(us z{@Y3~+d@wuSXqdyO9;c6OJxLv2xw>El;fr+bjyf8I2I}tFTg3f++ zn2UU#4uN5BoFgH?U_L*dI)g@pf2F?1i~u4$V$GyV}E)VlqxrJ_P-)Uq|ebl*?jN|c`Kw1ck0hHSEa9VkPI{Gm!kdiQKu?feLISJLVw z?)TlYn_j7KWk`F@IWC2^qNwEzKZ6rJcbD$u%Xr0_pTiP=sDVHU{QTz%h2%qiH5ZeT zde>c8uou9z4h{}}ygJMd{oG(zCM?QKypvt>+Z6qt-Z}1wRI|{ha2vFR2b6CQPY{FK ztdXWR9w3V*psATRYl(3=#=B&S2_SenVPR>g4G>w)m%s-rSP(&kRhM->?~6KIf9~_i zE)SZm&_)Kv$#wKWmi+Nn6XSX1$(eB!<3nGTmPO59*A{TDe@eMVE?##N+kVk9@@9F_ zhg=&+Mw$&4r^a!1t+!D7r3%H$+Rp!V%T4@TKk1P&o_z5oP*TISas|%#Ky04(IUa!c zp(;RL!S*Zh#26to3t=A=XUo{nl&GyDfO{0GJI*9_8XQPVv_gK4Jlc zbQZSC8)zv%a9Su0VatcdUr`E;7S2b*<=ImiFqOp`t@J&7SHsIM@_2#eby_-NtC_?S z?KE*@jQ4dPNi`cZ&h@)LA%Pnu25(tG%`{q(XpfHMa7B@CE2ptcGQig>($QE{W&rz; zVLiUh$94*mU|yu(Fo1oGf|^s7pV8$_sHz=a`B#sI1QfDoz6)Hqp7?^yf(!$JMcucA za)ey6TBj#@@-vhWpjCH!qC_6v)7d}FSAj0FH^0Z`K;9NxZ=0U-x&sk`PA}Ye49m@e zvJpOs9OmY=pB5TTXHSp5kZ3N6R7BW#uJGt^)U9kw{OYejZIybwlz55<>eY)*ROPg4 zGlJLH)HixO?R{8kR~geU@(Ijemv@v&MCD=J;VY>{KR-F;83lpf9;{YjAfm9=WGG=k zDMbU((>M)(^3x>D4l4or4h5LGspdv$fcNm1`13s_403)!>c(v_iP&oY(vUymQt~;U zw=luT3TqV?tl${GsN&hw=-6!8 zQlM7|qC3(sT0&0CH5>4t1*Am)M_8Y=GI3o1B_SbJ&~rn!@PuZUlU_}*BZ+MNcSYmi zxJ5iTVW2&BmJ=10@~wC7FNJOt5?vH5Lf|yw#?Qa-4BWtNCOagirMv_^rXoHEj;0Rw zE@SRIzkkitF(oj9Zr;X$xhI7!frN?6uMp?9#i?VY)Yp{*=}J(}p|c^5rCI$s;>GRk zC|+hb(9lwj?m)cJ0bs03Il<_bzKx-G!E1rIBDSbrg>X{%Z-oEJqU4vefqy;xASek( zggDA%+Z>aU33uOq=|nSWT+UbhaC`fyJ}WYE;CBwU_I9n}k@!0R6GB2j_(3XG3cF(6 z*1S|QGXz=~-WO&{i@VpbPsnQgoT<3x(a@=1ZlncpJ^W;?`9>Br^H%=wLzcuJ6s=ba z4U!++MH)l$*Fh+am-|a0#zoVl@t~>1WQwt{7vQ!md<`RgN}R{A^+}7IqTo5mSJk~> z(a_By)?H8zbCIGHi3t~9ozpBpow{u|l~%@0RcaIeW>qEc;LyuwW6K}+^6`)i+MAXm zt1!%yIE?=nOAH?2`c(+&?Ss2(!UMPL3sOt_8}VXNKou?1-Q3RC)x0@LGST6Mb*#3? z|Gqj?0p?b%gx?=g58RCY(CjB!`Q(X(V47=oRcVW9MOSt(SGB*9%xK#4?U%LrOms;? zN)EzWK)3FANUSeYukseBJQTYGAf5Q;8q|r#Lj*r|kI!m`CtT(FHduyQiiv;dXLRbtarmz?g9xu118iRo5ProMwS=sem z-b{Y;Ws(eG3v@%br(Vkp(V(dJ?2u58Ny0LzN8j~l7!P3B>)AXEm5n@wDfG-;Q;1yz z(XlFHAU!=i{Awo2m2LS}rnZ{Du0bLw1&fCbGU>5)-M$|JHp7i?q!U2kRhCiz^|$WW ztUSZ<{W5&g*cZSFxS8zHIRH#cEA;~ixXT?h$mweW`_FyWRR|9Pv?pV4Djo9T6zx0%5LH< zOQoP>byz)P{}8`SKM+e<@>cHK>W8He$Lm$Z(I}^_PX)EkPYNY_*-hw?#f)GZyTYb& z_BY~bOkbgW5X2a)*tgE+|YI^Gjkl4fJ<^XBFX7?obK9 z1l-?^b9?uZylpaY-Y0->D@uPno%gcDafrOO#~QD8to2Dh5m&cHNOk*J)#1QH#~_gl zxnST0u&-hqhvC)_9k*I6X69O0{==`(FzA;(`OVRN85<;!A~#?R6v(0uS4^3UPGa!k0Azll8h^D8z{f;N>(ZXn>R5 zkDvHJn9;!nHD1X`ztdi-bGp(NXhOT46mk^u7Xs{DnMB;KP{zG%^ou`FCYRD;eupi8 zV{B;yg-EjhX0Xy-;y5i1dT!n-ctLn=4^M)~GnF{AeG=>)*4vLW}m#I6L*g?r`+Y z?5+idb$jGA-j;h?QKP~!6n*j?JmJDQ#(;hp`0&IITUPW%R10qgMj=AR@u+0$j3wef z!mcn$XK4lEgjz{<$Lf>u7DY^xy^xdMNWQPU zgX$d03AB)p_1NyeU!4j7l=RVR035I(*=(J*%Jk{>9SO8MK11%TobC8SO`|1eaEi^KV@m=e z<)L0E6>C7_o?BDU&)4r#63i1JRn z#WXiT6k={0T<*Kv`r{w;bmljoyyn^Dg4MzmY&ZX4Fn{(C67{>H8#Vo&GE>6wd?b## z0XR}U)Jxkm(z$>Qn@4(gFvzq}_ZgUI71&0&40UICAqgQ;QqEY{x8u1%b(^w8(l1|v z6>5KPGVeinkXEk_e`&wb3t7HOIuTkuUE=bl9}I?sBN0B;x$&(AmyHaIUj$(itYxD( zEPYRb3u9yF*um=Z_Q!otwEgvwy1;{-cG1PhogLYDM_P-3hEaiv<7Ir;V3YnpKiV>f z!$LVijK4pZ1jUq_+xrHc)<3{?^~Mom?QEB~E^)O%tZcT`Zs9`r@yZdJ7EwmI63{aU z{?z0z%8A4aZR=!X!V70Wg&aTM5t23Aebf24RV;gBb%fsnEN@9^qFTeaB*TcaSHehf zE$M=H=g+|lSTrvd{BYxNt>{T_fCPII4J5R?1qt?8cZ%Xy8wnxK@6v?9uUw%{n&;}^&O z6?ObycU@>GAd}NmBmYq(1S?G7_c^>MuF0pNz97seP>`28b=+M0RXVZ2C+=IVAjLS8 zsb=^eAoO0daD+nqM}8l?hy&}`{>DH09S~HK3)y)Mfswd-wYw{fuavS_{*0xebt~i<$ca97kqTn6$G7OoN@AQI>w=%C^zqo+SqEJv2PlU?Nr>~0`y5AR{6F-(% zzef=E)S??08&1Kd5JQ!piNOs&H>;%(9!uQJ5!sbMaNJ@N^fn{r=Yl@mGKIJ!d0W$U zq=%3-=ox*zOd0$W-y_V-EZTZhyeT2P>6a_K;c--)-D>(k#>gxj1h@*B2zxolpYO%C zH?Jql-fwhBQ3^1pH{C_-T)tsI-RcNU$IYdqOiuj{4HUd2~y z+UuI|a9Nn74N`?8kU3h1t<%7dT>TS6Ji*O=S3_6Kgy6o#bp4c)X}{#O^eVV9HI+ef zr7!#BNC$;XHRlAogKt~4@q9evmE!L`L8l`Ql89>ldR8_Ol#iI?W4d?;v+a61f=4RY2HIX}|iN=>5ul z;94DNE*kQnGQ|Wj3H&8=V^b-9XtD7Fq`ST8v;M+6+p=VrF>}x{Os)1M8rIoFJUgyPdBV8f|cv{AqzlI$va@4#b&uo z!v5KV!1C8V!@eDhoyjaEw%lARuDDCCHiciK9VlAJJ5*l)p5@cHN`$o{PxM0h=zT&k z+}npEe$bDJRJ~4-TKgY3>%a2h$t6`y6s3cO**GY2jEs90I=NM<)TISH&fp9Q+-6JG z0R>LEA`4doC?o*9UYzj)dX|#7PCx17S1VqjYFW(fq z0C>mI8s+G!_j+$M2jK)qedbR=&pszTvi(>rWN8LJ7dZkYk5()_6gRhv;Yhxe%P;i$ ze^s0Od)z?NfMO_3aD#45Xcpdkx!Re_impXF>HSMtc{z(*lnA47kd=ib^W;iQn(2!d za2qb}-3edBkxR3OE+fvMdF2e!uD`F+VY~|8=n&k0lepgw!;2V~kL+*%d*IZ736B^6|3GPkRHRiLe0`U$p3@P1 zxhlPw@F`b+Mqt*_@F0XXVo)M83kPhY5VYt`G#z;5!EAH~2DHBwElygb_sq<|8#Li= z$LOSWx&cKtIg;DGIhXvD1n^D@8tK0&68NhGnVE@0+U!v-SlN~5lw55NBj$1od+;nR zXY>a`2t0It`?Me|YJ%-N@$djk{=Jl;r!b3(qW05+iC?@xP)_Fnw|whf^oi_{fGemnT?Z6!t97~%!$vzFt;R|&BwI>h zUwnFRVMy0XP+b`ZU5uyaHUqmKY` zTMKkYA;Cgrq&LPi3Fhw>8oom2o7a-IXm@1y2ul9yA4e-9VK85Xfgjb9&59EADLb&b zo{xN z+Q=fjSk(bz1vP^#Sj+P(z?SH@`0rtIWZl4%R};u9QHfuQzy1^(RtDt;LEN0yitC+$|gDURA->5SotZBQc-&>*^FfO6-6B3H1P* zc5sprr8Z740fPVE+OHT=4u8`H4;aGyqG(TWTx={qh4~=p2u#8Rqvsl_pcoYH|x!%T${30Pbfx!%&UD z(8TXdee`&t#SH(ez$XY@hrt`@%%Qe%l@#7`--A+6P&&*IUHE{7Bt`-e5bwQu;W}n! zI7`_!$CjSJxRkBhFVd+b(L!o#ZE|*?2E1HFExfk7nXq~<;*Jk~;74Bp49j=`r5n*Z zrj5~}-n*G*`JStO@R9+|6aswve1xCE$2Ky>;o&b%#JvbYTJA`u*V0~!7Lpt9sJ+B^ zqpopLKu_%aMN_8iuw)IAis8|fLAXV?*iwKqU1M62kuxl~*7gX38A*C;r1Rc7c~#4+S>?k9V<=P)bC{7nh=&whzj$NAQjUcB|()tbp6;U;8&Ti259F zuMVLePFLAok=908Wy?e!4x=RET=E@UW=pIIVF;^%p!MoIntWJtgxh-T27(R{SL0ps z+EdLopLh;LRd+9C<6OCF$Ivbf=&Mh}Fd2wD#8Vpy1vo6l=;2C50U7k#mdno@L@}$|9PDJYCO6LMS1*r{XvmlKTC#f(}z4P#nFp`od{# zzp(ZSpY?W6s23oQc^lj4=dipXj$P(Td+43F7KHa-?B zIwvJPPXPhjfPV+~J2EQ0o6JJl`w%!0UszUF^Z>dDzLu!F z{nharD#yv&R<|8a4O7;!j8~*gYPjnfZ|-9)IerEK&k*pE2?dZvh-r{L;^Or?x_Q?v z!%aqmsC`9s5o;kKz}vaF6TpQm@PLl+S;`J_zI`5#{K{CkZxqT|KC77fGDjRT{MMT$ zIUyDMDe5c_HJ88KI`wGbNwo6TJz~nl$JZ}}r?-_(*4oh)K9YJFjvlG=Qeg77tig{` z@tRXsESW>^XGFRX&+b*~zB3GH0a%SS#2uiE#!%w-tHN@Zv2g^BR@kt?9cuC(tRfyr z$%(!cK<2!oiaZKHwb**)_EyLZAxGF#!|^q9jig-5xTd4ArSGr)0X5#70laSsUtUUn zQ>{k9fY7m zp>Fjf^%iVEnakN!=Rs(w|CI=!4K4hB= z9=@@}pr(dJxoJniw z%{I^xbJH+PP(xTY4N8Y-RnwjeNSgDF93GdmZ^z1Da`Q$E!F-a{nQ zEhl1KONk^M=-u?`UWHFnPB}O38wS?z-os(v5I!_!l_N?;1$+fl0tr25PH%FT)M33h zzTY@{1pi)$BmUyOw2C+A0O!D(kerN|+kR<{rIvd}rQ++9Q+!ImJkgU>(#!BH{`?64 zML>*U$)>}`gu*-7PoH1m zftv0rxNyC*>2|6w*Nz@*@0J8yt8MCFu!fsoe=sGIzoorQ+Mn-5rfv|ik$e4`xrCKBgiByc(Ke1&Yj*)+JMkM}~!3_7Jw{2NPoL!S1L zMMsb;H9jgzZqSAikbZ%!R8e;_7EbX5Czb@QMOB8~a^s2#O$4>Cf>sr77K1IB;f@dM zjvFiiqfih?vW1&AJ@n6heim?=MM?|m$_R0kta*;8`g#pC8c9{0@q1rC?vBRBz8bx? zVTvIYm)<=EFI^vrBAEt0ioYCY424VQ_=37^WtDW9$8np}D15z{Nwa^TKMg7r%> zhrM}?5jmAZR$d+g6-4qrIEzSDqR&ihSV~gwHiH(~6K=J<-o&Sb`{{s`!}(}mViYLC z#1t1qetoL$3P+jh6WX&~xqz{CmK?V7;M2gU7F~ZIO6C5mPQ`=uYoZfo2#&RyrNgJC z!9)9v!ilXt;^xl3d6A!+dhUcejca`mi~*|Z6TwuSs13gXD^nM(eX?~sR&bzhGkuwq zQ2T{6(}y{S&=EbPo8&9V0Zys84z=~qO5evX<7gFKcX5|4OIBinuL#Ct7mwWS9Erm7 z_l@emv;#xa(vK;W4u|6V3l}Z^KFhDHRu$97+DXY~`+EZGAJ?nN5&n!HRj+IPpacd4 zypA@M5$n+ihHxeFW=DACpeO9*53|#L;vy|RGL3q8>BoH$(gu!ktJkfSBCo66k-5$o zdzPcb?`bh0I|UX4DT>5^KBGJBLy@>7lb#3+V;2z9qdYDX_-0F=xM2lO zdY{RqV}!idZdg!}?_9*s#7N%z`*Q6Kl*|}+<*>p{ur1ne{`AXVIpV+Bhkso@LX8kt zMA*qKVk>m=JyqyFi%YPYFWff-7z+ps;#SX1feI^bJN>u(QDc%YAy?&dsXxi$_mlT; z1IUZkatCm6N#GyvzN50UW5l*8B)`+v`gKa$LEo~GSMeDU#fCGGx2j&AllFvGns&IU zqTz3j;8T?9dwpAzu&P*OAYWeJJvzz}u4v!0vQno({YZ@*@?6wIx59HY0JpVW@eAWi zBw$IFv7v8ST1)FlGX+3UF{7jsdGZxH?aV$M|8hP`E{PB($p#&>CZGfy6Ps$|Zr9gx zYl~c~WCkk4ne^To=r}RCtpPcI%iYOMGfxR}o{rM`F+xvD;Sws*K+?s33o?|%;@DyQ zSy@@YZ{x}0Lb*pYjSRkKprXlD&(riGKJf>-)!1n6JM+lMzHa#iX==Q6`4i^6s7`0{ zZkUg?tS5#*(NQEeko)a)Z3%6aSh8`2hSDT)nk;ngqn( zYT%><)$@?S?(Ue=Rr_I*fT)S6hJ50WXspmn2-XhT}xO@FLRK$Vg1g|Ar)KQt@a1BAM}#Q32JJc8nV9l7i}) zmLJj!&FpC|zzq8(oS5o>QV zRu@zBgpHArnNPJt14r9kzEBqDjYaJ!MvM?RSX=Y4@Bv8*1qnsQ+Z$=y3z?cCzOgY- zcDx|F4MJN0dW}+q5l8CnGsA)Od5Wa3?+i6EKii078c3fuddke7Qn{(5c;pkD|KfRl zpR~MpaCkUh$1Kl5c+S$5WHNym3XPUPH^y|B+^FSrcIQ}LXpC={<;!kn#ba8=q zI!Nc8d!>4vU4Nz278h5foL)`0wWwyhreshfk!INCDnJ2f)lRUbUPpIm@}rn-QMdV) zNMuks9maxkA=VF$%%o7umhk z0;pvzP`zqvIK}cSY^pz5RvmsXaFSw>zGrWGz~tFTOvp?u(9Te!h8JlgV(cH_-E}zJ zg;cIf8_wPriY=Yjri%oXSZ{iW721XL{rT2ez38dHEa~gk`5V6TWYUJ}hwZqwhQrIt zVnUw3(S?K;e>YrPk-f>w$UrDC=MnOvr7FOt1?3clVY$gqmC=npT{?ZI z$PZu4w_XO~lR|<&Ui@u=tN9{eL^_`y?MyAjhLkhNlr``!?sjafqTvAvclPvDR*#Oh ztkK?N;ZGrx)X4TfeW>6W4Vt@2he4&6K4#ikVG0@)k7~FZZF^st*0t^w+>8p7vAPj6wfJgLwMFY+{`apAH|_HU*FNuXY4NrxG#Kna}OrWo|A6yB;4OF zD@~>J))(b9Z#Z+?uu}OH7-iJo85JKJ0;>gmiu&|E!RQ620?ii1&{Hq^LkooYa~+@MSfOPf1v0X`7E7aA)RWm(B^r4Y1VxbGUzQVh zDH=`B-@f|C_x%50BmdC@Rp0}VVZM!hG|~N2ijrBe8Q`E}ZyedSxXD$e?Cxt8Fk7iW*ZH9bd9ZgrrLVP(1zNu+dYMTd0;F?t7at%|KD) z6FjE>dG#T@YWB2da~XpvZ>S?MNrqk32t<%kjVE2oy~Ncx-LeG%s$bzRZ4XSMoJfrv z(h8X-BX|_oxR@A=d?hA3ni$hNyHIRRW07VyqGk5ailg<9+kg9dg9F(U($g^}PleV{ zq)hIt?N1OEXZdAIkJ6ntXJu-e8{}V)U?IjO_+2Y|hm5cEvLheI_rTpClfCYTR$+e_^%RU+FOu~p{JC8sp=J?;CJl3Yng2%pz# z{OmRnhj0+`k>4rn&FyW`*EaN2M$0k|%Sm?qEw$%$n##7{T9N(q#CC@)LoPO^4u2?! z$HgBa4HG?X$|gCdm||p!t0fg^g1u$XmGy-&;6tPzh`IM!!3Ao!~WoAwrHH8hR z1Ns-jPwQi(1VP&)^t*D`u>+(7Us=*wlT~H6F0G2?=)?x~$|WkBX0WQ}^Nfd>CTnf*%R%m(_6U`(t|^{K zA|~plEfQ2w(n@Cmtnp3%e(*X8(hc8olE`I)kJr^?m(swNzMr4p#k?&ocQTNos#Xo` zGT}JO;=Lmy&N+oSh$)3fMvCgz7?eeOGdPug=q_)gQqZ4nS!|QXgT!L&c=IzV|7u=4 zelIOVU0iSDd?)MvuF%z%5!h$0Icg$yT6Z$NS`A(-ll_e3-y4h;#5)2BjC@r<_l6ch z)@+b~`-M*m#=<)bdT!goqrtQRbwCGor{#Rx`Ieda>DFK<+&wi_fNqbh<^?6;$J=wJ z{mKcxB|^%Z?Ip^LS00#23VnN3J2A))Pi{*!s2L?;^-lIad!KW^_YcfG-CbR^YSpT) zj~I@LI(HcKDQ3m6@k?r71d`>cS<}dGBoe{9T*VJ@LTLv<8@9YyLuvQOGyN*F*sWB9 z9(lNDB@aOlbLT9QC-|Z%o=x}Viu<>^Tt+h{{bweda4FR20`k6=YSU!;ecd%@iothJ z;ci{f-sSjGc$~lL0&DIeF`xMi`2#$!vY~G^^4NU9)TNrM(cf zAW3s@TlSJfMgN>Q76z2K00*s1?V|tldEVRRSmP`4Qu)*18l&qpRIMeeW5bq|0m9)@ zCih{+ZI^$W2O~W#hLxv$<9OAOTVQ1U(p=E>#VK9q`ow&>a-{8JkE2lAiZWJzH(BClw^K+M~+AAsw~s=!LmdF|v`=n*wB+!yC_cWok~ zV@KBZaDx6~Qlc(DS7bwqNp~qCoM#{i>g*_T!@&M7`p-T1pG%Pw-=zzl;Krg!OVMD_ zZwa2+Q+jVNkB>R|L-?brM`ZZkik&84)Uc zh!9d68ew3fo?MS?j`5WZ8ylw*wu#{fLqQ^#iYlzB zF+;n9-E)~O=z7QBS1sx`P&0^_SM8MBuf%I?^oNb&pPdiAA;RY z7aG{kSpre!z*qf`PYWiK(^LqX;9rCC_U2zcA6(-u%id0TfnBy=>s_d}N77(2W7c-t zpo034_BvVGRE%M=Frt>XfR&etffq>0zw^GLBFoBVO4;0`u-aItpe;!xwN>|$C-S0? zxmuYNRXtEll$e$o?>k@vCOk~o#)Wb~HXTw2BXeASrs@1^fE$%{Re1VQ%$nRuQN_|| z<(>8mE}zTInagD+N0s3mT;@v#pDRi_heh8o4Z~-wVEm^IW)&un{EgZgkb5;LZzOEf@NO1dFGe@Dt2RV+X@g_!9=XjUJ;Z>=+Uf zw0LoW#T6B>{MIYMQ{N=mBbBI|IpiSlwaiK5>c}9+KX*;Cbx*>`RQU{Bs?XpymoxIK zHnBiw7PeXfCx5=2(DOySyORMA!jj=vr71m3F|AM!*~P)p5az;UzS{F~oqUb7RFjM>Xh1c$=w5}B4U~9RI z*5&D*h?HkEhm-#4-u8J&xMhCDp8NT|MQcgYk1m53zZe`msx+FG)~ZULH3dbP-}DA| z+8&S5cQ!BW&P1NM8_KRrOX~7!>OpYiT@{q{{rQV5F)8{lgtYh)0?syPGG*;O9Y*<}&VC9}n+S?!lugDsvB2lvp{v>uP+NZGYWDtXhdj!uoJ$YjsZ_Tw=^NI&dD@ zTtANGP4zQv6f%h9&5VS={nz;ZS@|w9mJ|ejH2a`xauWQ0AJfR0ad?KbB&?Wb(?NJw zDvOm^xrV|@0Ez3Ijlm`tf#-N&@$NQwob>3`PAK?HzD@G|fh}FGFhxLN2j`qZYD`|~ zL?F&mzQnili(9)8UmFN5N9pzuxbDiSa7<~AeN}GMV$Y`)8C%ai^yUx}c6JooYQUzO zQv&QB+;~FhGwhZakhHI%ljRZyqcAmQymuw?0Xa|{V?)1crdwebg8v}_yb7#eP)lit z@@gvGKpW@Y!1l@Ck&I_n=P;?y{m^!KqU5^M!Y|?L7#PYq<>mM%Cve0lyMt|f)+Q25 zPa5R4gPt4KHC&r~mI4D(raZ_HnR)PH zQdoRo%+ebrAg0Pdjk9=@!w`7iqAOpL?qF);9w%*WQGYdy-2Cp-iS$18@E^cK%)ASb ze(=Na_`SFYjfCVZEEZfXKDPl>uSc6w|GsYsP%xKQQzOaM4i5TID?$&c7BE2s_&&a# zBTdP=Q!9rf7Q%p<@7~nqAAG{XH#}(@MW!w}egE{hq3Gd)1~QI90bnWp z0TfElvt0keN8K-w?zg9dna=z~EiUK2{2OuMDn}<#VyB?qK6@dyKS)B+Zz155_YD#S z51dwBu2$<(6_3?7tDXjH@2&x)SO4R@L1_Oc9j_02IP6^wbW!bkjW$o?g zb32KY4D@=yX69--ZpDB&mcSwYME_sLJJkGf40rAKXev66fexni<KjpzG%_%?eVy{QIS-u=})NrmXcNW-olKmFZ1cZ z6aCEZ;bwWV=Wi}-jO6!Glw;?&ErU1t2Ct7|1sm*Kkiz-;`s}4B3(+Q+rZjb+K<$tq zL}5623jf}tFA^OLJ5x!2`|D#_f%yOl0^2CrOMW|24JnKr$dJB1(C_^-^g5MVY7I6c~dC!!$nT8jjEf3MtBQ(SdD;{iii;z zq*bPKE*5~jfP`?vE1=8SY>fw0rlZA zbthcO^$MvK867={Dt_h%ZQ<(W(Znr2wz&TM4ED?*f+?-5E7=fdM&M#CIZXAFPekg% zf&$pPnn*!O&4u{9M~Ugvj5EiSV&tX1DL&L@rJ0@ZA;oQ2GJ66Imm^cuUMjCZSDOPm z3&7^8frqVZG}@QRawA~k%;4Uf6VB^*EO!KORG%d9XFr2?7>zzTZ&Z1jyPtL=mUZ7=(?mSg19MwB>i z=t7@xU!-_fZsMN)=BM7$5FECmJU=kB9p5(I`ri5)l0o}}D4~_xYE!9?EK0z_1I3-J zMinwwf0GgDSQj8;`u{ZVxAG2Hi@@E8fPrfBLR6mb=%=b1Ma@5d|Cv62Ky+EOGB z0v?ZZ`7aicyjmPdX5s&TY8TSQNUkdjfgjFR7$)A^Z^v_;vB3N)$T{!4JhMUv<)A5! zNq8C^S{&QE`N?QkCAXVXk61qP;T*?Hb`d}~}zp=MxAci!j zl{w7kpEoGO@;N*GoW#>1u4OWUm$-nYT+mYpb$Zd|`QtYp<0gyRlHjk`Tw%0&ENzA< zFr4TRC!tqM@wa36qp$A=yYs9r_f3;Xp~H!Wp*3a-qCQ`SeElNDshMuw@!R*Ew+^j3 zr=>uLEql86GD$A^SQ?j?K*Q)ai%_4aKKotdf)?Q}CfHBgk2Wm@$zzd6Zx%xsBy&3y zozWY2^ixutn8@qq;Z_Jsta~hS$!{Mbk0@CS`A>E)U;WjtTi;pl*z=#bIY>brOZY%J z+~!Mr0{-OBe|ZIe!S#W9=gsqtykm$3L!P(gEkUV4e5wuky)?5)Ua9O=3a9{GVcn*~ zjEo{W5$WHPk(+rqMHYp{)exN)kBGSZ&seS$vc-~3U1q}>sYTSKUE_q_A26rN-yU#< z`}>OzIj6@{Cb0sZDEmK?jol2H>oOe$%Wv-4?kr%J04VY!1UxQb`bhhF2PZI}8qZLs zpoDsQ&&TI+zk2zVRFpg6NeJ9^mCx%QMX#l?&U$jO4gZuNpL5ER3>D!`+tEYunXp^hQQ!=$y`o! zUHYW0hb2f*)}XLmZiMo|fjs>O5|QsmyMtwxb`C@Xq{Z2bVIPE!Cw{Wb4KY}w$!{-z zg@U7c#3L-A;aB;#y$}@&39{_YxV=CY67T&B&2vISJP1piR`GQU%g6wt@WwCXuX7|V=iKFU>t&NAjY zgHqVZ)u4i?R^=)GG>n^E@=)T66ddaopA*XPeqGv@OeUS*AUC;{vTI`c1!>_Y_FqB6 zp+4oXF+StJ0)GAlb^c;#826#f%*?7icKVyHH`!d)Ut6b^f08e=Y-pY^qJ|%U0P(<0 zz<#mjShdVln86%bO9?`8+v+L--UMfaHQ(!}HP6SufrX^%yP+kqQy~|_1nRei?oZ1t zyKwokSw7C}mdK^VrEvI$6vGV2-?}BUxfc!7+l^ciH&b7hIbH8zfckj=41#g;l_FKf zM4p9?2QePE-jlCQn|M66r*u@mjWxsolgdfS`a2#whc<7kb?AB1gLw@Fa63OlC~2sS zD}f0~Xt{M&@2pNwT`X6;Ee8x45u!tp0mK7_Lzi5(0xqmu@RsTH+C(`k*jE$CVZ0Les|Ig4ad}jbiuUXmI=ODe3L(ji&a% zFq7aRn1a~n2)C0oXvGIo`zpwZ$@nko7ugVa4Z_pn=X7;vbMQWXv zrm<*^iBME*sVg6d^A)PmSbqETlsv#eP!4k-z)?zR@Tx3xoU!^{w5h{wT&ff5iJJST zDC3D)iT0>njt3#A5T6^^uZk{Rm8cqx_+4#W@yMtKi#;T2g>W{Th6MC2>$FEmPRO*9 z@=6abnv41wNd=d7Fgb&>_aen0)iEa4Q=3e22-HRulGVt z#{);o50{yRR-Kp{9gjHKrw@ztQzP4+=`9SH7AMraW90jks;%txFLITGf$@#nHqcRo zJP{0tR${_Rb<)AK{DdFvjx3gviMMVX**HxGC~0}mAbH*z?>;HxPaDlB3Mp-It1rCk zXGGH~e#dzsCt&oap6 zY&MPByAXzKA+}xmh7A6-PX>_FP!h1d9sBkQ&9@DCdGVnKIDsh@1qIqLM=h<3j&VQ! zLi%d0KYgOy-Q21Vj&x$vP$&Z4zh@SWREDzPO;wu%oFGF0*Q=mf7WT~5+CeQb*@f`q z*p|)6j}BH$h=g2$YLPg<^@Kb;}+$s>1EoJi*YG6FuWeYQO zhJWuSVLp(4_h5B&mSOkC$!33MStgz49pzlYQ0_K%WnT64E?~|LK|_v+i4-Ce`n)Jq z8f-7)sgSGykP zR|SQoSbu5SLnrCjL9BY;oGm<#-QDl*^EJ7wW6c<836L-kxukUJdG zxu9SZQd15XLW1+l|Ip(9q_0@yy4Da{3=90^Av5T{QRaJYZV9zoF0M$JQ`O#f0DQ%n z?!g)SYQ5JGm|GE_Yz`jYWjsD+e4T|-|FP|FX5Yk=J!vG()24oPn}AwO!}b=cX~H=v zM8fSIcbLe*-%4r^iH;VwwIv&f#tprml2E}P^^HI+Dk|z9M!zaIOOBv|MXRbOPmRjrT{A)T za)jXsK?Sc&C|^eXVyklDx_L7MtP)fuG8XoH1t&g5jFKJ&~(ju72Gn- zD3zLFCGRd~e!ZirvB+i{AhBsD1Vq(>1et60N^clR2{<=Jh}f!jMoKYBID+@e1_)`1 z&s$`r@vfwD;pi(r-L%xjWLP+NSo}jt#R6z2lGoEo%h_v**3(~ z#ZI)2-vb=hN)A1a#O4NI z6h|!-YB@7T&j{rLHcHW86YE*m9Xxk*Tejppot+&whC1H6+#@xHnEIc+Rsp_k4J^)z z{fTa>Nn7!EYXiYYt9_BqJU&OiRuN~fMK2^GLfrqsQ$!?;`;eg1 zFWEU!@cS;aToRgtdE=qX^m#|9v#?BBYt?9u!RayZXZK99?L2PyYj(YEao?G>q(6mD z<})XEgxI#VCkzJKDA?I=$?rCuOJm#0pp1r^OwsBPct(lkZ7GX*rV2z6hGW9+la_&r zFtELIvO;J`G14(qc8{+FS6?5iQPR>1Imr-{OH1_@#lor>$jhsR<8veFt!7Asgu*ta zX)))g3w$Gy6Fpiz3=(P<)`bC7^|Nh^RC;x%T%+CM=&={at3h*m0Wtpr(QAKmtNWK6 zx;?kN5Mj_|1cjXI`k!K>YVM;<+WOxjhhd>i;?o+*?01f_aT-&T{zdY9b!%t5T{K33 zOnNkq>~LIUbR1o_1|P;nwC!Te*Onk71p*z`_5_iJNCc-mkpgL;XyP@12qKe@IpHt* z{jaP12^JE)JaPye?e8&7B_ClU5JLs?t#gWU_Ko%P4uO;@`=*@vcRHT&BH!Ino%ydY zH62#wN{H`j&~v=+FTMYiCIa@&PN!?ndp@2O4dYu<^b8^$d>;;O5Ns2#CYz4}KIA@FZ8_Y}{INls{Ws2gf zj30fO+t%kK2$Y#Ms(mja3{uw8&JI7B^$g{E8Wzdx;8*azWE`b4lY|~LdB^R`Xb4a&&YVVLs~~(S$s5+?Zn@mv`Mc^t1ld4LByE~d z_T?PKPq(ub{X&%2wF;x=ZLp!pe%w zViGa05e!!*B%mR%x4RTxLGZ0v_2~Mu3fRG5c|bNG<6Au4yaO{GjLEQBV-j42;Wnf! zxOp>ijC#-F_GuuC6;z6=SjUogm|9hRMbQILm^Wk(MKt67Pep;FNsnIUjL;4P9_%2~ z5&E&*1Q#0ZN z!rZUZ0pgRn`8oZQk}vXZ1u*cc8UD746eRpltca(}{v|bb8&?6?iWkS7tAaMBDMC@7 z?Ih`!mK2jlyi65jCS!+#FP+YQ>0ETNaUA07i@RWrH-j}{o`YjfT+x^IwnWb7K#*7G zxAz_Q_nv4N+uth+BpC>`&oAbGGntJ}KFPbdnT41wr<&kQPO*8s>J)uA?c?syw!*?b zL6UX;v7ac0yd4WgbwG}cdK}rrNVpQ1@E_3oKhY3t7wQ<8vlY=iUCzLCfXl7akc_=!`t37D|z3Mz`$Wz~W6%i#`rkq1na_)P43;x2I z_qi=gF2UtB^xGzWCjyp@!dIEeKXiU-8~Mg=VpS&dE#(<$0Mm@By{{M-jH@+s8{8qpe?T$t1RhaGNNofb;~P z{Qyqk{y`v!4-xh!NuME}M)iEd5hWz3S?9#kvWU_k_CYdyp%m&*`Id@W0DwBbvuC_@ zq!UfV_?3=5zR~g5i>?k*M8pN=sk77FrugUfKNRg_Cdy8*ocGS2x`8=G%}81>9lYX4 zg5$kVDDvE^OU75mMWuA5=>HQ(8PQ-k<9uWY0;A4GNTx0f=xb1cEgjG`Zchzqxm-JC zcFlBNS;FqT6r*yfZK1>vX>Aeai?f4=q14pAn%Qzugz$h20MPf_2So6$|O*%S?qpAhlH^z^ulWe9`8lTvcn$x+rJTi|Y+yd}$OATTF)RBm+VIHfoA`84w4`W(mw zf0zk(b;F3qUywEOr23rl(7^16h0%0X!tc?i`-6F|pKYtf*;Ce0`gu0LcOH1n zP#ahopZbcOrH-L!T%5EEc+@Eok)W_4zXCYnZT3IQ^!@(1Yx)V+-NPz{=CEcL`={a2 zn{x@bvKIa*N zGw9ZLIWiWKVCIay|H}ZFKKUy?BSW~O7RlEUMThP!EmBJ)jFPMmkTXezN(IQSNh<8n zMGh5LGERh`&Rbc28~E9q%9-ej#{_#Jp3RzNiK;|$sDD|M4>Vwd)r{LxUFeCIF+WQQONRa*TN8jv z0LxJY2Hlh3H}dU?VK)=hx#$B7>YGeuZa0CTEVl)H69v!M?$>j-G<}eEZW+Vv`NkeU05Kf?Ob|3>JH;`$#Q6n>&RaOJya)0>R7E6bXe<-(rYgH z9`=Jq`&q|IY>Xhynoq|=XF-*FT@@o{=D*gqWI;QzZ}%i!Y@)!o)RB=#?RXIrA^}Kn z2hf*ol7H+DsEgvexeMCnsIq=cpe2t%!wT#3VN`xHU?VFsr|6b2DTLgUO`!wMUJMz_ zw!MI+DP-hq?GiGP33VcnB2iDTt0b6PC1tt8%$@EG29fwTYQ4+F*inTW*c)|)m&B#A z`7tryE^zwD$QG9g#n30U8ayhnp4MJ(sB*VvA?4HGW9K6dP}HE`@gyL*+l^?*%}+Cl zXUR1tA%oQ(A0;8Hz_4#y735{OSjqQ-Ji%wju}jMdAKiJ4(F4q-#cr8f>Z=uZnCf0t zsTB+QCs_qMB{2IF?jzWZ0mr2nQYTLm_zpbFg2Xz+XA4l3=o1y40KcRp(J?V%xXD=@ zMH&)ca?2c>kw9vjQMIW0xu*N5=uzM3MZ`gprUVoxPh-gj?O>J%+|Y9O9GdGhR0N>vw%+&d?&OX;m69GMp5n*BNk>Ub7VIc9GJwDj`l@ihe6I}p`OyW` z2!mOsU54W)IOSW}x#BBTs|zpMGqzz_1|ij}_rTdnX?URyqVC$=h%~c_E0OEiB-5$wg zKRM=kkv%%CKF$wc)D*l}pLeo5hEHh?#^BljZj(Gk&7_=8aAUR?th?80P|hTBndd#< zsFoYXul9TDsAF!Q(KSROAUO`<^CcT3q#vG@q20zW>mAqqeU)GqXHFB#bvY3USZ(+1 zZ^x^b;o3*mo;R@MQrQKK%Q(=NS2jeA<2d9WE%I7h;cLZcRCQj+NC+W(qwZeu&xz_k zfeWPkef*ko(G^y1lDUCHdPpSxZLwGt+8cMmwj}E4QE#p)>K-4WS3OCh2>9OV@O!tN z@4Bbd+8pHAAtGH1LZVJf#6EwR!#>RTUpLuh2G!(Zbpx%MQ&B-sszN`gL*PDX*69~j35FRa<&1nq*7P7eup-f%aY3Hj757JcijnoI)#tq4E>!_`@ zOni0-ohF@1cf#gR>a$(O^eX$pLoqWFYUMs?)`rwFfJd|*KeIxK7uCe82WqnMQKPTf^BVUa+bBSDjg?uhszW500w)l)YEHVpiO%L&UENhimorS!O05 zsOT&DewOjDvNnW>I~b&-@OG`K_TCC0)s(tV<;%edtD6mPU>ZM#IKRJ1T>_^ax*Cu{ ze8~|v9x2lH$13LK5y~8`9z-3fzZa|Fe4sJexau9Rb6V7R@Am~TM`aGZ5gbHgQ=J?H zWjQc2I2zs-WR$?k3^~b>YISKLrqRt|vxIH8)n?05CD4eI4FYA7>*j!D?_bOHEf{wq z&N5f3L;XYp2)RNMl#Ed@?3Fg2OZ;9^zbN?&|F@Ke22F)_6P~is4o+0Z^O-Y~`GsI? zqxr~$%YKVS)iJnwaUGe=cF5J!oiHSP@9qMt8Z^_q_5Sqqu;*q(C67o0+x4slx3X6j zw-du}FgP?t;?ui#0`DY*KPzdw6a0}(6~1}sR4qCfatQX&>I5obF`W+rpdHYS$iCL= z`XS#uyX8;%+zI7T(srT#jP=rI467i(ytHZZ7&Eqe9RM|j!|#586e+May{}zB5I~7%5p8X`_Zod*>(7g z;{``9NC+@w$iL@Qvey7gu-^Uz4wf&lDQ=ORajB6RGa|G-nowXYJ2|~X-#4o%o{UUL z)@K8*TljQ#B4N)H&-5;x8nBRwxJ3i2n1pR(MbsB*9I}#<_LcL=JAJ{(lrI_8&3>L8Ue`} zoH5I=@*bKEP5Z!80X{8G)0>+eedcwS_@)#*$q8QIh&1%*&YhGS1 z5+sU`FA#`<5h;`P+?D`oG0!K*yQ!AzD*uG0)m~(wwDvXNu~}CyZ1<@=M4GGAY9l=V zr+cBN3E3aCz-zzF@h@8N3Hv2VoOPtnA0k&n?+XjCg}GI#z?oZ^3L;VN|8>&!xg3AF z{-bxxv-~mChyH3^`}yMXDu&Mrg>R{D&e*^it(QvP3+Cny z?No`KQts=@A!S7@p(spW;3E;aFg9$W7{d0{9w-H7dU3kDo%>=^%Uf7WI`Q87ZW;Fs zs3&}wgV38<&Ys$p`xprQDJ#Z$@`Eh+ZIQoCjtG20At+#x^w`i4r(ZZd58>8eG=6Sg zz8)7f1bt5HMUeU85olwx#hJgW#d$s+T%}_q%2C9)8>`d3+1}(>m2xekO-_~&1i5C- zBGm%NeJl9eI!YoDJ00rfcYX$#edsrf8VHe>3<+82@KO z3pE3>n3?;f;7-T)n%8=&;J-sonTU^0?2?f@(gKNuaCOngS`;=4!o$PLA3q|c?(i(CT^Mkkt2P9pA4m_Tnu9*7zKt@-Ev{k;M zu4))8lmO18LU0Hmf_%o2*DOWM>#YQo4$@%GY&)c-sW0Txsuk(S3JgYn5qaDP@Zj$3 zuu;;|i^kY7MgM{@&WkjfyEFB5vbjRyDxKAPvxRsD_S|HAY`oy2U0Q#|2|< zc@k75&y-dnK~wusc~2l?8%)Y&vtfw13i{->!vyXbKiRJ_Yh+Yb<)2N7Ab6Xjah}lNMzg z9GVYa!5{kIr1=@c#P%k~`iyVL0=UHg6`kw@W7dWUURkTH^AaosiKZFe<@x6+H`wD+ z%P(0hMN5~6$~0YVC8wW{X5MW*x}PF5@CA7Oc3$sTdjX6vv?C*R-sWP>9Yym6GVtGX zyk3l%V6nKy2}QC_&fvxaXOXC!!P2kt3o3d^t&$}^)jaUS#ny8g%>^XpJBTq`0(a_k%W`t2uposi(J5&=wPZ`sdB zzd6tRMt<~uUbM3XVp1vmU;gz|0GJ?roM9nX+7jdd*Bx$Qmu6kf(s_pQWEE2D81TPn z$V<$!beu;x;TD&7lv4p&sg^Pfh0J;zr}-G-Z+C9UATpH(0&S=H)-Jt4iaJ7IF)Ju& z*kP`a=Rf`)0YVYDbe<(^gc)Ya#S@1R&6%8*i&m$0m`KXQG22mHEh0QkMO7|nDo!*I zDcv8X70mcef61rsUC?7b^AT!{?6Z+I;kIgVKi4X)f`nN<%@Rn9QX%tZDqaMr3xM#P zho;ZsvpFYiYv*A!k_6@E^*k=_ZI%m?=h7Hu|1K_u4GBHf5i?VgSEI>|qgP|a*VFr~ za2vBoz!w+k$MPd2JRA*DC@@z@co!@m7sW=!lgZ-5ArTuek5GMe{Rt2HT9*l@R+p(u zh)GNEE$v-?aj~+d5PbM>H*}=I04YhYe z4h4)I0Z+Ew_rjmjK}H5!&|F;iFL8+}t=F_|=iS^Ts|4*A>=tjY6wfasZ$!jw*o|c! zct1?S{wQ!5orVpSdBqlE!y9jvw}rY1$dQ7tUrVk1I$v)e#8P6HBELSJzp(cL`9FTN!xuXKy)+%+w`}3!>Pq5xJsAyF*RcsZ zda+y{brWXE*?B<1ZghmeDTs=1(Ku%sPVKp692c)Jq<0SZH|m7-Q8#yR&dpTPsGWU|MN;wvSQF>w6q>SAdhh10tECaO#z z#G>)Vl$8;Hz@D%9VE`;{_7&aqf&$}TvIKTA*&m`qz;D)rb%e%U6BDW?-1Z(LJi{Kv zhNy$01-ilt`uy&iwD#8vu-m)4c^w^D4|q}42Gg-|%(*&RS;ULDW1M}1{WZ2KTaz17 z?AWD{p|BSzJgz`L|KQa=mP|&<8A@;@N@sUuE~vqj#l{Y{jcLCU5`j4`tHxxNjs6$j={+ z=j~W`jf;^f8EkwMhKNH@)*|sLI{bEmg<2socN03hEx$MGm^eB&ILzCOklbPFsE|d> zpAU-TJt?oYJ9z|4$o@*$8;Eo8Gl|K?S#Y$-P&vUVVZCFdI01mB&t6-KM{h!D0C;=6 z79XO*-{tBU~83G#zhFK$zdWuVrfyf$gP99 zIC7c*e0C~iIY&$DDvpvcok?_={az!tcsAaDI-j@;kufXOcyu+QOm(*kEccD?${}7m zj=2=E+yhCd6&~L_XR(cztcfTs`6W;pGR7dsZnv*ElkV zXU2!kx2*Qm{r!F6?UZk(^`B>ZeeXpr9Z|srKP&qGsa9|j`KpVABTv*jDxeX&XJips z6N2CR4Qvg+BtMf&XuTi`iJRH7z(x~pX_F(M7#Z~un#&|=;>l? zuEFiKbcy@?;sJ(^VbX1c5p{Qsc||1^g9$(Ly6=)RS#W(Jy!rv~^Ipz*Cs+R$q;6MKn~t`nT^skkJ_i1= zo9;N<=igBscfEfJv{^gn&Bb&O^ruvlQ?NYex+eQP4c%KI!_~GmsPHR&u(BPFO*LK} zQu)8^LiTN>fO`q?CP0y?|6zH2P*EtqRTykGn^9aZH*3kjhYBWG=U@q&$Z|wgQ91}| zbuFx}hVkn(VqkOM>Gwnwr+}=%a}5_Fw>~13%IwZQ)Ls;t5Q-_7l~7N_Iw|;*ARl4U zYL=?wMO`eFCuXFQh;zj(r(Tcblru@04qPS;oqruqU9|r5Odj{EC2H+l0x1y z@@8cQjJoz()Mgqx1>w}W4L{d3rXGZ(yq&!UMU7;7rqz03ZPeDVGJMtJbm{rRmG$ja zXGa5$YPojAuw4T!{TFAxd(sNyp0)0b<>bFwaDVK#WcMa~{udb|LxAU$JsZM@^QfA} z84-liUk=wwmzYbE@rB;i(0E1n^ytfbPWN2^55Xe*kFnX_qT4IBzsH((amJukUmu6p zsy1pPb9tDV{mM6a5$fw5sR7#J;*1^l$7|;%;iuvUg>)JhLwT~HLfU-RrxtaMjRx?j za~FMA?9a};etroPTC^9^C~e>1_tiBts&A88l{cH4ny?}W`7yYijv*MfzAbW@Y!p)v z8tH$&LCTNgJ=M_C;uWnKaze$A@TEb6glzpv3GPQxHQR!|Fl6^2<61TjQ{#27ycpIG!n6ng8fqY(RDk`K50BC zdSabcMNM60tYe0-dzR{eHcl2P%FuW#7e47)Lr%zm$bpd-##EM-0K>oFGYSMZ>SWeC z!kMJN!!)-tO{OXlcbC4?KZ#f0;z1q)eDg7nVX0%XE9*zix`HpHstO8$yq!jy$7C!E zwG=xn6s3+9eaM|ryBYL7+Y)(dhVw4%^#?2}3^>$8kir5;5GUqAx9x#h#yE?&kH@i3 zIOzKyWSwuW?gkpHSnG>F+7<^4E(2c&tP|#JA^d4UE+B4x|Z7xNPif9`K{<$9f-S z7o`H`hWfrH;H3-XL{li_dMNLmIJm+eYJl*5f5Tth$sX@98rjpInnu4r;(nWwe}8|G z&Tuib!a+nz3wdBbv3}!iiFFN&&0|J_IbBT7czB(`{6CZ(qYdN$aN^*Q*x`W|YP?#8 zv;~!-#%6`k3b4|4-J=LZNuS+I#_b${XXv0tD6BH8ad)?Eq==s9XNq?K|v8h+~ z)hlWiYI(K1ag9d!8>UX(2P8h5#*$-M+Q;7&TJC``CwVt-Xf)YZJxNI_nlDedataDT zYqfiy8rPiSO$|b=6| zMJn=rO9TXM?Fr2+bUg`S#T90-Ig zn1u`aPrP)tmPH13k5t4i}~+ zgw|jB$hir+`Vncp;>swr4Z7KRbg$Ky?2VhMk69KgC=O0HxdlHydZ;H?7Q#cSkv3t& z9zG6?D{~lpE$L?jEg-}jHYTOZIvG5qylUP&@WniXi<^1H#Udt#UoBe;V4&)MFKnfB znv^|gR|QYJKk$cgc>i6@^1pVPj$(RhA!a3nj)Q)}ei9skOCE!V7Ukl-lh33bFZLbx za4*092lj}VEV`~sT{D}iPN?fh61b+|3cMbI)_kIYpIqhg@Y*P*r0X_0`juBwh9~>H zX5RF&SsIg)=63+Ur+?u(vM~_wy+OwA^^e|qB~#`JGn)l9@S*VH*JES~mo?x&8Z{!m z2jk!n&>%FArrh1+Oyy=SP36qDUNx4&!V>;k#ND}S*l**YxQ(s5Aya;+C)Y5Dd8Q3b zdeliS12b#$-oyTQc~!;0w`XhI=>eHzjtG|K#is4$#mzT;7eh2Zq28xC?1+eW*3P5> zPd)P^d`N(g1`)Fq|0bP`O;Dg=bNR=pT6&d8I4CxBgO4HTOXr2JwZt3YWY|En%-Ah)nB7!fnF&^=cY+{0q8ijGM4Y+HCCTw{P=8R3%=K{n%x}vyyNm%`;8~X{ z3KWvn#6M214nNKQm)Ym_4O@;kwJh>~3Q5haO(DV@l~m%lw=gs7kJh*aw_8iX>|310 zo)TQbOWHDSk?xMC1}vo5fV=rqwBp^XbUQBZKChHhI&-2hvimx7GJj`6g)j#b>+sQN zdxm+19Z>XqpU=Z^LX{Q$>DU=O8wyDWL-%traP7{6z?FWBjeH^T6i(Dy(GM`zKlZIP zQ^uhW!9!v3IitYcF{5cr1hB_$46@g$)Pt?~<-Rj^EL55I-Rcc^|yUpN~h3x6&*(<>bSEgD2NP|nw&M(*Bea7pb}k{((#E{ScHpk@R?W`@`ckXiU=ew zHeVNT*^t~~czAkVcfC7T&x@jWk4ipUwA?KPN zoMue*oL-4jVmZ17s@TmVDpzFs$Sj>~s*J|5&mGCCf&qwg{~S#!;?~Y(PHghg`Gt?h z8;VQyVFcBHnaseRKz-nVF|`J#yByK3*snugLqo&tf(9VdTqNPU=HTEdLYk)N0U3>3 zC>+{f!3la^l4gL)--i%bxp{C}QwwhK%CISrB(x;ki&iZu$Mu}vP>_;}vZ4#X8VeaJ z_(eky>rpe`ke?5``B{Z6Z;DJ$MFZ-w;|1W|tYHj7qZcfdXw;rvET@LV%uvS5rLz?r z*&7q)jR3y$5di_Z$hE$`kV7PCR%{?y1O;s$Yz1dVs`&lbvIMIuwj~hmWNhMTY40sA z&$aClR_30whA4bV>ineE-#+o}5+jDka}@-WOipzajn(k6DIt&eOgmTdyx<#Y*}?#Z zVyPqZP#~bj93t~+`G<>%@CW^QK_)jT6Ol*OF!qhD%EBG=|Er# zGtiLvam(Xh1!Xu&`y;pHrTf%+yS=l+_uFA*SFCks_K0&|`W`MYq*Q4DaK~-f-;uIfeVd3Cak2CS48&Cu*kL{gVZ(* z=5PuSl3KrSa{g)TF563AKgv?q=_ZpKl^ot*%;~CzrAFfA9hYO@c2_4mm;4j8y>N*| z3$}K>KP9z=UVEdzpifDsGeW(6!pcIx)%ZPGq zsNls%;@{@o3De{#9$=^RO zq>UlhixiOR-sCY8(-gThAq|zD3u|e7Uh?$DLqw!Ps{P_e*T}0cEJa2=-@rN;Lln9S z1W=2X+7BUj^of^l(?hTt0#CZpvAw_Z8&bPzoJ@_N`GiX0{wmqH@><;J#`&Dk3X;>7 zAI)i%`L1M0j-%Yhm=s=Q4fv*G#8cflvC7OP=mv1tj@>y*v!L?5$4p|h(X-#^V-s(g zx++@*lVt&-^%3m3OKfjCbZTj)b5Da2uDh-5*rMW!!5aI6Bn7RX>B#Z?8if-?t;RQG zV{gy3si#vNmxMs+TAM0!nE$PKbc4S{u_h|&M4k}RjxqLi{T?OtA0%9o#3VFn`dULN zAz^b|_HBpR)6oT8pqCiuA$P3469O?Wm5&_VALO=*6vb+aNPFUFRM>93uviAO(5_sS13j1HWmWGkarL; zal@>g@lM%B$_#>j^J;TI$+X(6Z)*4PEr%5fOR8p75#T=;*7jX%oU-X3v0L<3%`nJjC7QT({*12OJy6-vz5J7I;C7Oi)^X9g)$HD=sI06f6aNXBwnYr{yKEwl zt02-pRwd|D>n^?ZXO8JU)femVRTt~`0BUwSixLqR4MQ3&0NYbt`O5U;oMcu3_gtSs zr{w2pd4rnt%%JIE>02~q6-;qto$~y)(OIU*iFsjZg$U1v%0iG6=D*mxk0q2?EPb<2 zMPoT4ag2U+8ctBv6v4Eurzdj5TMaw~we?Ay!z!mipPREYJhFxog--tb7PQn=0P{eU zWdG2d3vqd|OA|82NNiZpYjgfJJT1^MCsEtcg^m2j!YuXC~B764GHTZFWAD)1w>Srw zRGyPrMvEFl-`ECpCVmSu!xX--L8bP*#K0cP?o~f)OyGQ2jot_5+!)jq%8Bh%C8^$L zez;wd`}`CD<}|o8qx|0$btaHiUJ9~&k7}Y+x0=s)(&qvEkD4`48#X4hGBiQt7M8;` z45G6AAD-PRo;yO~=9_2`-uT**Qd2W|ybuJ{WLEubO-Lvlj~LCNi(y^7!OtQ)SCnr5 zIYR)ilZb#EA^8=a==4f{>_-hkRL3);pI^NEixO;E9n%sZZH9AIc7nP)z4>9A<9Z|xSdlHy=9^1m5$+4%I; z3^nG&IP6a29qa?^nbc^miLDiep{5+_$6eG3jmh!z50dwlvYb1(1Mq0gOLZ*!r-*t4O=?(g4o(z&B9 z?Xx$g4ajVQg%5Xj8WvQH=JvU)S}_+j?E{<~8GIL$tlNImcCY@-^bSb;d;w1_OY@fn zXr?kPGp47feV?HxQH?%bUSXw@b2QVn5_y^dT(v*$K!E<+-SebT! zQW=(g9O&>dkHG1i_qlw$)Ag~Q2-5+@V4f@;Y~+7N|MmzbXC}xy&8!d6VKD~C82=b% zdT$#ty#k%tDE}VlgByI<;M_QWJO0V-@lGQqhUxoh@j1;YVrgikFNEXA9WM_eyQrE| zmftPH!;!EYzV42QiXL%wM2==FjkzpwvAx^47ErF^9Tl&t=?C%olGZk4_8Li$MK#3J zFJyn1RiCfUQUSoX#Uy0WeeLupb=C%R0^$D--b@SZ= zpvY1wYlewxzhZN6cI;g({5+ic($e6rh)sjgf0w=&idsh%R?O-@=4*#Te$(Hr&e3 z0C1l(j}LM3U^K5A3a{p;Y`bGVuvW)4qn2NzfmG4pt?Np|J=fF86R+D1NvlqqS9wwG z{h{^tVWEdp)@Vl2++)x`_JxyR4zmR^14<7&6vVsqa5ak^?HagfGNzcHFm{Ns56x2} z^Yh9=j9bV@{dZpy1|Oe!@H@HoV_5(~cloKc&yESD-zg$I%V!W;M4S;Vo+!c@W$8E- z6)!3KH^k$fo|dpsQ{m(F)2j(AbIJuwvb@To3)vMdDZ~nR$v{1;d8jDY;-W(b+7s}*TkhQQN(NDIaWoPfA z^^zkKOze`28l!iZ#EBS_hnh<~$gLoUr{(pv3B!rF7*Vu2HxXGWA`znh&Wg@u|69}2 zlDNT=kNjfu>G0+4S#fLsc)O^#CPZh|iz@(-C!|vO;Grx$mwA4+$WJeY{nbxPebGf0 zO`b;1KQAh`4v>{ADsLfZ1@vVwioh=yf_1iOCEzKjE6swpYFr~fH0hD2nz0fGY!ehf zYqG^f9*h2x5Jj0`?j5^(l=g|XS~Tt^c>r9?nHkD5H7nfgCZ0=%yidX2^R-x?iqF?1 zyZ?0-Tu4P$<|1%mh70{Ugz^CH2cdQc;LR)jkxbHAjnyyROVy)@j_hWo_Q*S-T^kcp zw}bPN_YK^ih(hjJ&=3T<#8?HDtFH6GuA;38BXOKp(&2G)T>~Mthyt%R5FhYz?d}#; zP!HBdtwp43yoT|_iWclPFD~jCzObhY9+W=4JHPW?t<*;OK%e8eZ%Y#Xl&0L2!E?D=C{UOb_f9CbS5KoCd?}~|AV!H@2Nkocwt&fA{8h~u= z7JFPNsjY{OfFHW*H}58nHysviZcjjD_OY;S5E3jd&TrN1+i#zq27P+GQ}MbSI-;rP zfjxfigAH;+8N2jPsw()?3A}NSn+PlaZ-3JCaJ_da3^ zPxE`U-bU6py_Adw;Ns02Z13#rf9`}WY;{9iBskOLtd_U$TM=%}Mkm_0 zYe9lKVlKWzF1Zicc7Qr^8TGn<9SiZm72x!|XKAnU*w;@ElwQpnsFvAI!P~~ME~@37 zOayiKfqPn7x$O_sx^jP%^fx`1N%FhL6mX?BcABNReXjseH|px02^a`RT5wOR6H--s zNa-d6C+0vR&VEKlR`@PwF9_+fBNvSg3q_@( zbN*7CR!k4dXdxmAPYzZ$AbQcGpe+^x;MSy(`289EE{|0BCz!2KDA~+x*t-Wb-AUxC z0F91_v^^bl@{_f>$^#1Uk{dO^nG^wNka%hs&6L(!4mu0CP1D9HrQpknN&nSz7OTJ~+ZPHEs)Ye~@cPz_I;_v>GI=|3Y4 z9KSD7f&IDq@^-Yqxq>+e$Jpd)Dh|%uVvdAiIC&k{b`{ewYpb~saQdrksoVG%!L_8gLV%|Mc`sXe;!UR5~3@wH%vQi=al-j>e|CMyM+!nw(t7*65Rajk96NdNoPOz!9H8&>*>9A7%>k8UfW*EdpC$zl$@2#DN zaKWJKJw-Zzl0+Nw0Z@v>qNz%)kiT6Y_TWq(}Dr=Af-kvTlruAOAn z-&NfVu0c;Guz^Abmk`h7DNX}*K!RG~qyjP*$=ZdHdQaB;$>W4?`a4+0uks$beS$Zy zg>~%#xj`J>SS|B?Jq~1b1~o8rEzLrr$BmcM&L@>WTZv>e5lr3OX-~ zHwAv{Wn&!PgF5SlTIwjHM5)>QvkPco42AD4Wi_H@LEEKDm_apiKJAWYN%JGK{np32 z#BK9ww*7GfdL(cpgGi9yFc&h%&;5NpbPL?pdX3$dfRdcN7e9-ANsc^jMxo_#Lt2#c z<8X~R*K)>~%yP4rY|U}Ny@PFB`hsWDHJlKb-Vwjp6EO9VlJtRAw@dn!!fe}H4<@*e z?3OkTvb3KsOG2B4%=BGTJfd$*02fFr^GmKV8J7%PFKua3<(0OAiu79m3Tv@G?|~MT z_d*VJX2I*7SBb1I35eqf>)nY~~})HVMZRMF+M?`oHxfz)1_s_w0nxP$?d( zoX1Se8#K+rf?GDqVfF(s zn`QC>1A2L*Hed|F=S?>EI#NJ~uwnh>;p2r^2Jao4FdH$6!x<4A1~c2vCa%G4Cg(bRh^Z_sfP<#=-Z@9D={2 zXrifGC?#A;{$+eJ=9A#VG+UeWtThge+)y=R+PK!|gw`a*DlwHft^o=wx>heJJa4HT zM(Xi8_euPvs~z(h>F@l5U^b!0yYQO>Me=ruZO)so!Oc_e)T1-ixEH*S(-79gl#~KP zxzZLTpw^mVw=<*GTaBBK!z+j96a#NZ#GgU?Y}E0%hg2mevBpF|>2aVm?vy~a0I)f@ zCG;pREqDQKcnjlO&|S-D&be1^iG*^1oG5zyT1@)G$e zXy@Tqc4V%>+rLz-X!Gy{wP$R&U0y$FFjR!m*7?q*#+04Skw>WQdsXL*B#_<7vzv~n z`1R(#I;%S&0t$qcbCxi^^$J7D1_m9W0%#HH)u36Z^yX1yV4 zV1M`kv8-jE<>-O#+Fof=mR0MS^-k(|>ea_7o$li1Pecry0#Uz$%8|u!xa^I{0(gI- z|AZ?)s2hoI4nCYfTwK1&StN+ycB_8D57+texZl4+;Q3x)KHuE)w0=)b>6U5N$BZL! z7Os084{Uh8f~hvHX+HER5K5;o<2i3SVuQmSRaU9)NZt1~oG;ysFF5tEWE@i-ygZQD zXWZVHU6vG@T4+IS0Cpu^4HxQst#Atk{!W_*sIun$UIAp@Wf9f;>o$_CQ?c*{cPsz` zc*IT?4`&OGFb#DWFmE26*GE`kz*XXJLHT(4oqNzgPT70#$t3k}DuNO8(Q$3D^Q4z5 zO*e0kOACR9qEM?b31l>wod7d|N2DhJ!YZ@mZ&Grs{3hq{%q^s>T=f+fN=-b2Oacsn z#-b;BV1P8ZU!OU2Ii?(1vV&%o4(%aq*%lvP76uDrgGxPp()|0)wcr)ZY1DD9Ks8@6 zCQ)X|ZBm1@U(k)lvn8PwcdqbhbYryBiZ^TUOP@jB4gi9Jx}cgs{823(3_bv1VH zl5YJ;L&0*%r?%)A$@Uqir)(^+YkX(@aKoL>?2q(*@0J$E1(t?8lSNLXDGE>MX&FFL z|JyipA%Hebo!AK@h6>LI7G<0;69Gv+z;X?cp~x)6U?+gp$M-a|=tGKFo9zn9>V8IQ zU0pr&>@720A6Bd*%+Kw-<8JEpHB}36Yw&%*WVYRbXDr`=8`G$p++oDCVCl#5LWJ{j$bmUmea{8 zMU%y)b6cXZwmn0cnU`FTa8eX;*^?HV#NTZ7&rwZ9e{s$!)s0-HfgLH#YN)IA zeXaZLW}l&mrtRp+@)bI4x{DMv6cQfHIrx;ezOF8(sVS*lLf6_Fo{tZ|smbBoY&bcK;rXCpH;bp2)~1JMX3R9%Av2*O8x>I3#k2! zTMJSZ1($JmfIYY4bYP8LjKKM)Dx1!$LY?s6pZ$d-YvlZUre%@hVu&KToFYvR%mKe> z2xL+UznMCfedW>1V`i~I-b08_Gh$IGrJ%4E8uCDOCIih`=K-l&9cyn+KGYjtSc##L z5fnBy_R@-4@4^Ds!otEVc~nKJ5W^=mV+^uV$~Rkd^1+A+fuaW&?>bj+rw zLU%TYgUlk(%fS>xs4u`!V&i+(Z%>gQjJSx-+c|TsP*;cSZwvFTsys@%uNrAkLm z&qDya7kIAAOmsV2yf1QoGJ)UO%|*vY+|+j+$kXOwvmVh%#7+$irCVMAUW2 ztRqPaOg{Gng1jcYPTv7|+LzYGF&YwAvJ^X7yRT5}1hcq8rVnqf9`e!^&(_qI@S??* zw`NAs-_x0|4KB7K4d{1pNNMuzTCu?=)P=)Zadji97j3Ucn(oh8*MX9am7gc*|An8j z_<$q8j1ayV=kOBad!&0UHUn_3NI#_V;K0E4 z*s?uqUU)CxDiK`Z|BBx5Wnx2W;%+lEM=lBaNocb ziMTu+KMa+ssydO-*QP_1$c;&MM|l5%0)^ein#6dQX&d8+0Ws#8->B{d6TDw~iMVz!A{kb#cMihtVd7l~smi#$_RE~D zDphV}GwxKW81urWt{y4vC~XCYV4Pm)>woyH|HaZl{z$92F4g+AO9NK;Uf;|;9-b3; z$+C9SRaN^IEP25Y)4#+ot{+G&YAs(xN}kR>*5tBR7`)Hyo(tK}NCDggUC>O`O`Vh_ z9dC;%WncdeiugN0Q6LI#QX)8lJCmh-KTj(JF&Mb9-d_Wb8V!`N5vO9ho`Lx-KB5Hb z&TvtQfdh%NqE5wo`kD3kU(ZU(y88R4ZMsv64*K*7ST10GEZx3?*$?bw&KbvrjZFqb z?#eqycZSF*)B=*yogMJHmf{dit#dn2$;pqUzKxcs+2adO;{1X2!zbs+Z(-q7Sxoh- zj>xq&qm?Ei!G(rMjucTDRU|-Kvh0#5|M4#I#gob^%SNM+;$EB*at?66GF8HK%c|wd zS@SR)j2&5qQO&_xcC!Ale18t_V!nQ>c0csq^j;n0U%|qgDvr_4f4l(Nr&RKTIWi6&CngDVyO?!}L4Ij&t&!GH78Qxgm`>W{ zYXQ8j*_*6Y$rw*J-!Saa*9p$}+;7Mu-|WAbCdMM5AVmTYIf6hA)`xgQbITAp(ntsA znsX|x0&O7N!9hjgdj>Xs65T3o}-RN4B+nbm5vO3}W8R(DFiFgl3x z9ZANnmK+-%O{--8-$IKY8rU&{hP?QU;{y>PBe&Nsi5dBS^W6rY2u|NX4@xbPt{;8 zX_dX`qjJ#>Xh8DQNz6n-2Lg-nijlPErWz0Wh;n2L4b1WXu$fF``Lz&HtO-kj$q}!I zYg(+MTHW>;ujR5@QOl^4^KtXFMfuksWp4JV`*g&*XZmMhCkP^4HL6?<#wf2l!8}`6 zF*Fa3@d??~Xo- zzIFiUsj_Q!WHKL~7|vy`7`G~#Q3HYC9<|5FXB#iEWl2Ge=&a{YaC-9cHJ%09Q2GLc zL#){b5luip!vIEdG1Dv7Mj&AYfkU_pIO*v&fCaKuR|)%9*SBnHI0a}^j*AQzjH(Js zkQV}rw$X_AhAa)8iE{n^6tmYyOmqx~<(b#>gVxZm4QK2=-NYh}X8Mnj_;Q*_K^m9t zWwQ)|mvSh^MyO$OO7pr$q{UvaP@ry0#8Zkpyku5Z!bJ9&<`#^#t(+1saVcrR`}Smd zJ9Eh{&+T+_WF`HLnU*~ZmAr^{I<+>K3vE}NX@)5;?X}ZLvC)gH(!b``T|PvO8o_W8;D_L>{jez^;Go{e1T7CnUDb32=T|u zms$n{Y#IcL98U9)j~ESZ{*5!nfdT{_NrA!sMGY{4E0QLBkRqC4y3sYTgq4+5eXuik zZ|<2`5IJ`X|82X;cU@Fj(gpk=H9In*K$^o;0A0rUo;NArNG^{DxaMGlv#N_x?{`#` z7@Zltq;2aPeJaDi0-qcifRuuC?I?kG$MTcc0n)s>t^hx@ZqugU5x&>94MMJ3i;r!b zN}{R8GW_eCb%}~Kwih0Z6&j4aTRb`D#a;-pJ~Dhb#c2O+YqCIm(^Bm6R1+MQBvade z`$XkJgS!m{h!w{R50&b5Vz}#-lot;;UwVgL@~y2EJNxPpsJt_l2-3Pn6Tdbby_gUiL>AoPI#kGG2-;;ar{8K$3YCJ zI~x-6YoHE4eOsHSo@xF^xQC9{6DhA(VQtt>^fvJ|D)N*mW3;$x!bu!H?zc>FR>IPl zaqXWUJ=Bgb^Qkv5P__ZT%J+DN(hr+Jv}DEp9TUNFwy8R-WCprC>0|WRY2_7JFRZIXFYlKT2daj4Av>;AjV>L(1sGl@g z83iye6`pj+HTH091mgAE$DEkx#()<_*8G#~qy+fo-?~8P`*c5QZ4;wY5`Jw90=&*r z`s_(Lrsqr&K@~=S$bSbZX*Cpr2=QSAerXE4>b`XUWT$42jl|B~X!6-5+x;D@=%0i* zT~vvl+tvo0Z=`HuW`@?|;ArcYnMo!B6QzRIF#VW5UiAGW8TktGYj3#i`_VG1RxE`;c$yXNjte^xt}98;VTa-^N(9c-JSF=BjQa7 zP&kd=*RV+XyM_#XQaEAz&g+5Kvjt`(jIqjDhW&BCE$X}AS#5Pqib|S$$Y{&(-Pwpz zYUq9+AP@#?d&lWF*SH=9_wbu*KGwYMI!+!JIoMZIEB9B1`rP&sGENH^DAdny+iXn} zdCEzOE-28%2qT)q9_u6(hK^^ndipXfPtA;vce9O|P%^of?Jqbo`Eib48|#`7P8Zjr z3_jn#;kaK7->bR4zWe?9UO47y5!Bhr(-i&xL2NR#&u zjf#NE8cNjd?l^Z#S}3ca18kq@xhYnRP7(%QX_G<>t6>h)cttsPyFYDD=^Je{mlqKp zSU^4olNo(a5Acdnc~KFXzk`tx>d+Wv*G|AJ=wPE$vQ(YzmI)&zbdBx!S%{6D9X%I% z3-tqJXVZd^O_BPaB;k_+nv#6f;>$4~zaUn@4sl>d~N-XS^FX zP7O6z`zUA|uUS2?36CqBP;A=Fj-BWaSoMf$)Q0e0G4);!AQ`P=D!~5t{o}_5;>F+% zXpTZ%P(h6473rFvz!T&K(OV}a7%ig}R#E<0{oT6jW})S<`g9e)>SX)XW*xV5>wwm| zW9NNzc&KZ`lIv=8ar3*9Vpyguj-QTP^l&Th5*32>gNy)9`|}$)$omI0-S**RBLN8` z&gN&U&X66&2e6aXawyMg!)T}tdiNjZQf&ft-1)52pRj7@@)pu|BDJ$$qM`!9G^LOL zb3`tX8Z4;XdskgpOgW)6%+nT_^C7gcu~ACs-+M(_uNX1M`u#)9c|+Pu0R_0Kv0BI> zi^^g-LO6plREWITN^VFmqcjNqe300gHWBP`v|AApDk{cOQuRlY+FMX1??7uMH}nVF z{RKK7=6+yOou|FFTk{g(*dSuUNt7q^;f0*Ve-G^6YW@xw_<$s9mwg^-TAZ;&dQ(lG zvtHPq+m6NGKE@*D-3MSezhVtN^0!yy0CF@wUt}Eufr#pzm_SpN!7R2!Rf>ef2>1f) z!1C4DEH4ppsu1!u>Jv90HI<1p9KRw?!P65Y5;saz-4zw!k{$>sqw=4hCf3&Uaky;p z?2V;;YHMA&1+6Vm3?4gjZSL;6(`d0RHwpgJmf<5j_V{e%x!EN@5-!`0Ag?)h6A_RSgNL zbPlSWcP^yJ$%*vY-!gMK(_jT7MlHXqxI+7_(J)Y|HM_)mX^0)0HUgg5X$>G}CHM~j z;L9&)kBmHtno|~8Fn;7yFlq7N{20&~YuG?*E6FqwZhD0|(zCN`<{2ed@!SNWvWsJ`06>+L{QBZgj@6g$+gtxLJJqE8&%qsuBsf{y7Ji8p3$Lf$DUeNQ{T*sh-;tRb%>F<9WN zy>4*Vc-rCyCO=8rJd?4h+~s4CZS3n1g&Z0dMyyYU?Psw5dtQLo{GZtBx&nm(nCkP$ zX`n1FXw~1A9*Y!)=TziyM)cX?g2>%={4RJ*WFFsSpk4ti#`<$T>>_Q+z`3H{sK1^s z`5Lz-l zZf3VgX?&=xtP5t3 zr$oq!wR%eFNZ#giEOl9RDm(r|n+79&4kS6J{xavdBw32ss73(8^?&b4CBz~`Hprdk z6YyK-IQe;ql}aukF4kWIHkSxX8q1LJ`}0Z!^)+gbq2pzNDx`4KbX30z8{x6APO5fC zFR#Yk@u95jXXGliyl^YDY;gm_!}WHEZV_S0Lt7&E@~g1p+8-C2#FWD7`Xr@D5`&0e z;kUOYHUnmR!R-2a7K=~w?imDZV-yhG}u}EN$NirdGRl0Af;H-2) zaKWboq0dl|dc94zS_$#XK?48k^*7>|qkjVt+#2q)OHffM0+>16$^RCpR^9mg%2YYM zUMu`DC+lYTgYqJ+fM9+-=!rsVXoa;hht$o^2Xi*4^O^#*Vrnp<$0$I~kbHR@`A0 z8l0M(3i^`gH8lZP!c@{Fuvr)&unmy6B8y?AlvEXnF)Iyw1HZa)GF;oaEaq_99Wp;8 zD^&6bU#CTtemh(CpH?|b8>o`}_fm`ET6baq2&eJDNQD2Ere+A_)(C|8InnA; zvvHVoB zLMGQZc~|IQ;1-bdmI7up;}##a2Zxr3MX!foOY1qo`0!qlfe2g170fCC8};_4KAjB4 z-y3z$U)ZW0_ASpbP*L}`SB3>w&lT6UfQhVi_|n372+ukWw;cg{gE`-TeFYxJwudW@UCFuceb@a_qB2h|%oLn%uW3$!mv3oZ|KIK|Dfr z^R-nXi6L4KPy{Oa7aV{#Snz0RKRs5A=x)%5T7^ z5X5JuExZs5gFDBtP?VldtMjxJwpmGtZIG1w+ttv+`jWC1G3#^(OiV8T*Mbj0d>kVw z3;x3RacFcW1FhL>PJ64qh)dn6kFP0U5|1{B_bB^XD%lY1xt?K%%EiV9 zKQGE4f*X0m^F6wdk!cV=s{@K+wO?0A&s>wl~bh4 zL=|`H3RkhKWvY5_rK|FutnAsGzWQxYt$)Anw~OPwRQLW$cl82o?jPK2bN9T+=bspr ziFx1ECb-RH6Tpa=o+!DPDSxmI9r{0D`fnNGn<3Su2Fy7j#%Ut2sJ)V)=)R&a4RS); z8JNRi>bMfRRYyZ+nV9f5`|JJyp7G6?AxDF)O{h3&8ygyfaL&PIu|pv00dcH|0$3ir z5Je9kcu{9>qrCKp-`~jt2ex^cgx&qAyDBTmL>L!24GP-ckZ^dM;Cz8Ls%jeiSlpM@ zG-|(ji#I6VmdL4U1&GMQuC1rZA7c0z7k;6}vT6yTHMQwv*!(t!21t?z5yex(7J3D@dcM;Rp33+as8x_vhGA*QDaiR8ya}m^O7TZG@(lQsql@2onYr_vU9?6w z+&>sTwDidUb7~#Q|I;e`xo$n9`7ITRamp>15?zMhP^D>T#K=d_>uC)z&K3cBEcv*}R(eO|1jbhPTc3J~HQKJy_rR(R?9bh?%#L@jZgE-y63EQ9 zw}Pqh`KS+k6+Q<(>T(#a)|6sUhe=*H^pE#jc>h3ALUv}H?`Nn87)0!S&k&&5b$JNb z3%rmQ%#Zz1?hGDtPfmq=+nUrWbnQPHtjGK*fJ^V<470<}d}87|cNw?$&T{sGx1C_& zoC0#w_cRNboNE;h>_mpSAz^eUd}zlAqYHCJzzyS*8k?>adN|e`cRhm5%sGKH|G)xw z$%(o~MiFs&pxn=0CQW(&8=7{&xLW?2OFq+> z(=YDY_GeG70E2Vgg|X|Z#=?*`DX$)iFTP#P9*{El{=WeK;T+0=%|!DxrJnBj();I9 zt)Qe-3P!HyH>?B;E30nbUxV96CQ(#{;b%1tKQNJ{_Tsy87|{WZrj*5C#?KaT{f8yp zY>&hMSevUqLseG(ex<)xcoc%%8_oWOE)>LrMriAbttf|bNZ4VLE9TO^1jg~Gu;mHo zLUBoL2|dKZg)iezo(#IBUZmXBwELHw=+cHVNa4iYWS_{0ZgZyes`{F)weEE9)03XU z)=R;ZCX5o!PER8MR`fEG{J%l;6fw{R<$>|x7Y)|vw8Fpx((gj5t71K1Jo*>Y%CNUk zey!y~)G8YUJpnPAwa2o?W|VkZUR0sCt6aObi`BlwfrR?}-rM~Fj)d}vlwjY{^(VJF z0!A6^r#-kIyEPelKpI}Ifj->b7M(a{^@D^op;0io&#sCQIg&1eoc62 zbXZ8(6|>>uqjJ^hK3&ftE~sq89uswoEu1_#gWso>$FB{?pa1DhA%sJ@=+Jq8jCsDc z^Ao_10aUGQe9w5Xg<26iJ-`;PFUTIB`=SDKOv~=?{f&I6eRhtHL~XY-v%#1=cmPa5 zx1gPIvkJ$ud@2))+VV;3$Nwb&{M&^QBhfebL^?~OBc}6?U?W;5N*_~t&DMJ)c29r* z_nxNoy#RkdMv{`Y#C^bLj~ogn=nD^C$fu-~1icgCPyAlv2JJ^l1k97h&!Y%|qB@+( z;>M++YbSL0{dnN)pm-JvARy}=!`uyDI9qNa$t&3ZYH9bA!%-2?xX#SjNB{0dX{Qbd z0_*DSMV0^EeWH?`=yB&-gdVO0^{1%pG6YS*I{A(344Uu(xC(d3`Uo9S`9?LbmaejR zlg&nxeP}uG2pN!*y(WMnq|3?6Vz|IsIMj51@C`pEuscy0ySbDrI(HVD-oV{Y0oG;k z$i)4r9REI>330TtR_Is>;}cgiQO`W~LP89kGtq%mqFhSYO983AFzD9do}Y=cH)hCQ zr~t}>%5Z~p^URW36j(1AzY?)+|1H$jB}su|cohC--8(jDKmgT+h`A(_cGIUk&Wk7h zAM!|rHZwfh*`;q7t^Oxh;AZD1;&tJ~(1^pgx>zH|o)Pj+`U4`0WJf07W{`yBWUeek zgrO7@<4jeZ&PT$Aw%hC~>!+saq{bb$v1Y4k>Zk^)0;H*Wdey0#7$THCqg(<$_-79F zAtT_%wlbK8F{Bn`CN~^BwOe37U#a9&`DYx4*9Q9&U}<}^=JmPTblc712eO#*YBiAk z?w(X+MY{32Ll*Cd@!}H{OOx}K?hml~5sbY}jt{hoIZ=)6$|68#UzQYla5ZuqqN-G_ z%`>ezUwT2+_Pk)=emsFl@?MWP_uKND(Wp$NIdk7>R;@luXkEcAgdK-ms#0%wfoK{^ zBW9tJZvKCx27hj$7JxOnPo!vBX|Rlr&y#6$8j#)c}}6izgZCy7#9M$rMBB& zwH}squD;!l6yfQ1iXt43MGXPMK{Zotjk*cKmJA%wVjzIN-0%C|Er-JYW)ufCeHo!0CS|+z6zh zaw5aEX7QO^bS+m;a`42Az|DSz$QnWL5mxFx6ZsJ1tVAX;{Swm`ZMYcq$|rZ?3U&>; zU&41lH?fJ@g9}l7=p`$$E?*lO8ipoEzRQ3kW9J(YeB5EawO;y^6{q4iK{)e17g=bu zDCp4j{90TO&uenAf#5R7PIc1f1{9CfZLVMy>J1p%@2`?!$qpP{z4#rGv;r{A0A6Y- zHG?U4frZDvWT|uk7nfaowVIa#nOBx&y{|x8%EBC8Z^pF*7TApXairUn<5b2I9;w=% zc&iN_lsNb-R!FQJx0n~LMo=?~F;!;=TmZ+eN(vhD@N__Vc;!@$oI+V)#&689ZpjAz zc(DShH(~EJ2H0N+e!!WSq!B>MhV^H-v{2^wRifvU1y6y zdjB_6b`KIbR#ufHHfM>!-a2Ve2h!*+@QQ`mF6DF%1u!9gi7vTCIMeqO+Gb=NXMc?$ zz-k!Qm=Ix>a>3X)B6*&N4_i>cmQ#L$){f(tr@Xe-M?5sI!q9%{Eh{I)vG#bbCaf1W zjOM9hyMrR?Kgp1v2Y3xqW=wO+qWqqCX{TJGvX=%7ecDVfAfGA7hj(_K3qNq^8xMY) zl~)2fBSWr!iyG)$2K9Zj6%MQ%HDlG8kuw1juRys__JcDbf^1;1tB)z#27KRD<`bRTmAmrKy(2 zyU|F}LV7RC`3x?jxK@OR18iD%W$As>`kJM$x0;d3uJ=k>jUt`imWGCRt9AEb0gkZX z$cM|h+1ZiJY5xyd?-*N5`LJa9j_lSZ$q7 zx%i7Z06%ApO&`c;=y_UR9oekX6qpZ?h~YwNYGkd}$}p(16Io3B%J=7(>7RXmzAR>+ z_(s!^HccWEqW=|h9r<&M3(z0Y@Z`nIwp~czsYI9_`hoHLJy8`m)F*Y+5FFk6taPA7Qn$Mr(%>S`LA)cgx z{)sXn&WW?R7o}^0ct}2sZ65b6o?^K$sY8-)>a;9REwU-z@@oyG$X@K3P8%+evI)6b z2ryP_Ksh^JFcwF>04K<;X5mrcv%QeBpoCiBtTRrWYxwlxSY(4w3~G%4qu20_3)_BL zQ(&)CI92U8IrZR;P+QVL3aCLJP9M0lYN9bO(QsCX^^7%RPWm9Vt|j9xZ3F;)5wae|VE@dwSVkxcE)cWUTkxnYP|& z(;r;_PSKY0_^ht>1fba$zgjCd2E9a)7kzR85V;Z-^z}7sV~-RwZ$J5Wbw=;PbzjkvqArInW+O=YiVBiwz51nP-$zGDBVifX}9 z;l76S8qqr253B?Y2=K}7+7V|QeVn~8;Gw22vAd{DXgV5}yD*-o_aepbEH8(z$ozr= zpomSWsR%Jcd06W@fc^2YJrj=WdU%jK##Gh_q(?(#4E{H~zaKg``~v}hQg5Fak(5x8 zr2Nb3-l-)tq((1HhGSTLWfJ;du;bh6(Be2KQ~q+q0UPR*)%0T)KWNLi6u{5^_ub|4 z5f&BV9ww2&cqCSed_mTV^$)H1i(Ge70a?H!-Sz7?h9GxLpY1=r3q&QCBEOvWbR1?jD**yBqQMK+l>xqWb8fq}PH9A)P z$M(i!(&>1mpPR$z9eK75)ut`9$AVnZhJGC7QjoFzzQ$ zYu)$VEdKs!T+l=}zb~pzE2wTNnhyRl-x9v7@6s6|*oC~YkM%7Yq_Qn5m2z-k3=h-y{ZhdE?7i|C4DxYH%o4k7#gnlk zr#ALh%$+IRLLI*6QAiyxeSt~c1M@W$g!3+{;U5a23n=m4n|XicSlPm7LJLXQRhl2z zH!`_t(k$ykxN8NS<)`Iz8%Mq}o#ltD5*|0CxfT-v4gYu7!9ml*v!0rt3A@C-9rC{^ z2JKu41Yw)iGoXa(pGR~x+zT_IR%98_JJv@PA}f6j>tDE>YkY7TxgQ!CJ#*w}s|NTCWi zr&JJ+S4=S*^Hv%c!_PW-HEnQ@&1yqq!+Z!HMn*q|!JPAuUoUR&UTy6Xe6(qP=a0J! zdU2y-sn_C=4TFat&E`pFL-A6$vP-U%!O$GXX-%s|=1aaRDm#G6on*S!WhF?&VWnKp zVLFtO=R|MAd|?+DTfc9X@^l{`@jo|M50h{(?_^eq*A8X=p9Bin$Nou(4lW0Lor}J-d6ZFkMDlI2M`+}$C9B*@BioE0{`6b zcWHt-PIov`7$)o;(@3I>-zG6hzy38F8-h+%hpN7A>|`Y5zzu*19tk)yjsozX`DTE} zsmub`8+>;RIJ*=fQOIa_)z3=>2L!ylnHELX<0y1L{Ju@pZi9)Qvc3L3zHyYcy}3u7W~xjO_3|o9o1T%uXz--^BjuwJv3PmDzwgW< z-B7WqANY*a!AMX=WOHX>;VvN)69LPe3=}@2Ho7`)t>&LW(1d;; zTxKFK6`)2emBsl?Sc?2X|E;BTwZZJut~JxK#~twUqn+;qauPfn^4peRekh~4jEXFK zh5CZi+6L)RW|ooZr+|_#v{({%V_-^`r+U`QU#=`Q>U5X&UvoA`1L8cXZ$$nXt)h)4 zbWF_X>poSVd|qBkX)6J~AFA!DFZ(>hz@Exl4=`fhXuKZWI6EZUDXzrK`~Cy&t-HJC zOR%k;2d)8>a%b46I;S zc$mb_=nex@oR6lX7W!L;Je=^=-l)?u><)M?AIG@fP0d zvGY{*nRTI_Jk>JodBYap7PH4%=}J8&kIS2` zbWGcs(|g!xhvF1^{jv9Q5oLFeO{NJ}i!~HW*JIR#FcCL6Zn~gHww^&H9=0DpOF-26 ztz=hQ4x~a;KEAA+whr-!{NLyK_v9@he`W>As>Afs5~FC(A>8HvXZCZz3C7Vf3Erfp ztNBw;^MFHscYYnO^DXGFS#-`$n%W>&_%b}aejkOVh=>S}XWJ@cBJ_S67g>T5_1^aJ z;U~9H?u5{w>!KQHX0up*QJ!|Ej6R3<+fn(>(J($#2en_7y7}G9@c~ib#)x0XodlN( zx9s2jwl8iR`w!#-&|Pp0xjS=(Y+19IJic$ZmQ;$wGnj09dVay6Yk~o2A^#KvbcF~PKPmr7+kR^jd>WUTiGzHIKERAdj5V(~A*+nA{019T4^a9#T_)aA zbbN(Gml`q%znL-7*$lX?^o3n69M9^<9ri}*0m$LaBgw-8C8el(GqpI?Cd%t;+?ZS1F))RDA*W@csHob?f{@;H`#a9Ib*3n7ZzRJA{r zPOUb@U*YDGOH2s~WZFkULk>S661)-Mk2^n9WKqH)Ye&JtBg3rA7BBsf!yXcU2qgr` z);lM6#jYa1>Kpm}Ojv#(oP~l3{>6cimRj93zLjEWVM%{ES@v>VQWo}kK)M5lq3tb> zklxDLx+h!5yD!e?j$~J!*wgd%^LtCiXOnJulnFE2X@PdU&0})RiKLo);TDMV2qYWw z?+zr$Sr9{1H2+mde1Eeg%#l8;fMk8W=^+0>vYB}^I`damIoSxEIxPLOx*EFk^i33L z^3p;ca7Dekjvy+r;8RuoaAIktyL^Wdk%2U!x&IK)IWByUczX3iOXk-=^Yt&)7T4el z&8m@6$0`-1&=JUVGVBEHDS{&~U2KEm_Y8QjE3gkN76(ss!zp_XqpQQIR z*4A7FT7+e_(>)0XcdcsiL`$f7X`PPzqU*Uty>xeB<#vAII$Ef=d8%U+xYmSQnVtrf zl$5kZULAM+^#cH@CyhQAHGkb>8_e1VMoh@R0v+Oz%k-1KEPM`^zXldf^$EQr|5vW; zNdoD)unYBFTYr(|S1ZdD0Dj__D+d2l(eN>l$7(2aXYMVL>@q+ zel?gCoFijx;=!qKLgsCgIWddT8pxtZ#ZuD@+cB~r7!=9q)vBp6LDo=wrZmPf{&LS= zJffMP8tH*S3&=kOilEkC4{;(h**a$4Y*@SkCvpG zLIcODt!gw9ipYSVf;ZzLrXb&nvLB&g{wyTCtgs#4AW%>UK|Z=rpr8SpI7nca zDy%Cm*8+Du_kA?yK63`LOfGd>V3z%FSp2vDxe@MK0e77CzH=tRgWmsP zlK#(}vI{yCTm73ljS7B{YZb_Icgq-gCBovZt$_0x+F)h3v}KPteYS8E(@v~2O+{lBQUo&ki@)lzScRIOhdFW-vnPZ!m}{&Y)Y<=O zpOL1mVz?%t9td6OxV!SP6JR_GkhcaOnUZez~jb!dE< z27$K6-P<8Lrl<^~7!czPK1c}m-bL*#9+hu$F`4q$>;x;)XV>@ZUHb%WMEM(=y8#6E z_z*f*eL-V3maZtRE-!?Z>#oP`P4AZ`dKM;J{I!#|437+xz4(6FS0JQG#MOk^7G@dX z5;NA$jx{rNT>k>t|8w*xQ4Xj;Im|}erNu;h*bmbR{+j&xLOGJ=QU-4f&f?{+SK~`J zT9^w})ztWBWkqe&^^TnL+QLOgBcyUs1w$XCcV`_nU1ye-CM?YjQv4tefTrHl;S@go zl32ZuvSBU#htu^L!4IQQeuOSXcE@aNAb$c!p94fo+^k?j+uX#2MpN>{ayi**`56&c z6aZEAMTAJml3<5x@uVR!3eZm01A*N9ZsIvxpWGx9{gudnCSD@x>aujYqsh|Cef!rSZS78 zoH5aB`N+k#spVk_$=-VcOA%{h3=!G1z(d#yJl;#?ZPZ1UXWh4pOmpCsLygG^%o+AM_g zNqfN#3txGRAZsUMA)BVFJu!W`w&S=XCYQ$Q7D8Mr5jeB=0R%{BXoKk67Ocf>M;H;-MWL_~O& zrIxrJIw+!l`WHUHgPx68R0`9Iv0S|Eq#!-xQIVekb%B&@s=_3@CIWVLUbADO{WTZ; z6D1RnH~d-XEt!OBj9F!Z-66XBmCttUi`za3e>WHWD(aNZ4q^jI0e1zLD4eFQ7TAV; zjjD*xdxQ9U#j^-$|Bpw*gs%Zy|#=ZS4vg z4AyIb#SXgyH9LV|C(C!Rcdsw7Ld^9K4~+zjhCAq4!^O3Nai;+L(Fw5I*w0GI{v$o= zR#|=z$zwFIy~+9LdT@tx(LKM+XxyWCvigYno7au^cjqJH9(@acQG=A0t7GDe4S90) zoOHUu(b~<)T}WV4Pq*^bw{Xr0J4g-(sTHkgV7JoiMdAKZS3s$+8F@CosR&o!#|e3GZ*ddu0hHcgLp?; zLIPFu$kh+PgQ}k~<1d+0;>qTdk$WMbtnJz&D-O|6BU6}&*2_vMhDx?_tlaivU?*Nq zxIMp->9=WUOb%;foS+{J3ptI^nVOmD(L0=`5D|g+V@)PY@0D49pOAMFm*e?6qileo z`LMcksP`nbFYFG{Cg_(DWfwY(GE1_NBZLFy+z6II9ljT*z;Kc)zO6;cYQuI~Y|adB}$1(KM$ zTY+|k2%^V#3_3FX!x`sD!@Tz=38^mSo;}#*G|YV6McLXh0X}c=IywX=Pq&aP7A=nm zbxeHsx9YnKmotgKU9KL83ZBRGOl(jmi}lS-_3)r~72}Ft|E}3`VL|%4gWB)`I~RNV z2-_E-HbPe@=)0K`jlXp!U^)bdk)N1^_D=GZj1-4XpkgyG3kWbqRT%KluRg{EO#e?(4;W{Lt-VlS7r;jJ^E9S1$Pk~|^ zWZU}MLESw8lU`%%9je+EG&QC849`6w|JJzj&U<9TBBP-mcVMp(d0eI91(|`iXW| z{P(R64Gg_rjhv12ppigpfL)}}R&R%Qm(v6W=p3wCji>EjU$QpNNSmW~lIDmiSGe#d zq+otQMJ=mo5OWNHd;U@oiGw1WgBLMXyC#=s(CRDbbA^le6cu|xndkpM9J>4jCYFxc zPYQrHLD6|fPjW4z>x0-B&QU(uN|q(k-ZmHx&94CVGq#k0%zg8;k6A=0F3sBl{||TR zKpf0_tpoMe={EJN85c20FK3W9u-IX{Cn&=8!q3BYM&jBTj@R=6YkG!hs?vuP(90}W zFaU|ZXJ*0@>29^k5*pv*#?N^$sy;40KGptIk5F%e}L! zhlkU!Am=OzAaEtA#PXBN*AE1(uC`-yxWfgMi1@t2|990K$#cyK4fivH*RLl!s{wW3 zK;+?R=e_y#7Z*$pH);?TDK19i(QmFEX?t$Da`_$|UYJZ!-Q-+1Y8I-AX$x9s4JxUGz{~ zEO=R)$1w>leJedyaho=KjH@rTm#4hXNEl?uP6zTuEJn?oJ6P+sd6e&VZfy58EOV(& zX>Db+v^i`Fp_h*_YXgzs*S0T{ys8e@Sv?(pNzh`=^YRPV~j%C-nLu@)i-6WH@ z-v)C8h1IB(M>G62&b`p?x$hz;qyG4(SpkJo19u2Avu;&`7L!?Xs;!G^BeWAe<9)OF zo`C4D2QXq!yv=^iLD!NB)NOg~sLOzZ!v4KI^0vDd)IY<2wQ)w&!i@mBP8fv9TPG*i z=Yk@`K|zuyX#bW1*0u0@oVEC*JoGs*O}sMX;Xa2u7S9_*(to`GP>2een$ZtO-6~4P zt9(*`x#7MjF~=Om|Eds-MRi#+_=+-DRTdt$YEzx+4gE3u2|eO{tzRQ5^(V65^?t>J ztG4bT_gm*yS0n4#JmSyIF*iLH?)vv?w8Duj0lNecEnP2}!N9>c=J7N*>)p>@z)zOy zL*RAs!z}hRR}a}vzvTeS6IR^@sqfV3(4J1ND=!!KHGpftBQPxfk2DErA_*t$V)Ll9 z4q#v;>>f;UMWS#6Lod1z;z~NzwCMDSTVOYcA?dxLU~Ynnib|i*zsb}R+h&gmQ?rb| z*cs2s!URL5lK8o^9JDuCO>)Legg`fwAIc3Gh4SREeTrFHa+k_s5jj5E9;YB7Bf|-R z6s}PbYIT38-<{}`(I5Q@h(;13HkOR!tK-ImT>s1}{&ujCOD@d^Y?|I_ekS@{G%u;? zx;vg@OkSRo?4Xf)NKV51DN(w1z?w8P1Dena>QOE;+UtWZxOEk)49mjlL9hje=*&&y z`iBi*FRQ>}=8&uor|&y7lffLl9#0h3|3Ne+P=?B>OtzX)5^mO)yFbaD@l@3(jy_E; zOb5aiG>`JANxvH=2uVjBW%!mSp$B_FGBFnPi4UXs%d8c-WP5{jTAT5vQUf#tP(i^( z8Z7T_zY7xv`igA^Sr(dR;S7iD2B~-k%`T4#YoV87CR@X;_AEP5-HE<}LWzWcr*8k( zZK?*!kHn}@pWs*TlcdTholr74Tv*-~pLz3s=~-5-gmhXniCqt1Od1tx4bVlH@F{8p z08`OF-X-02G(AC9^tsoU@Lf+7=a`xM-p`x}cL)d&hmAxu^@cVxad9YvLTlqd!7j)m z>QqX&v1b|}#!I1kiP|&0`+}_)9?9UVjGS$G-^#!naNhX>^)V!}OG#y-Kggk4wfadr zGV7~Sa!BRN3`_0UJmDX+^Jo+gjjkHVZ{5-fm$9@61CD5S=(k6+H(($!Th z>h1+X8$Y5>Ez*QVI{y!T*7X8)gAS6_9D6RqXF_jx7tAKcH;*$;d<(cQ{e`mmJ|cfZ zn^LP0}f{*ou4n@f;!(+!D#M$a)P z9TX)>7&a!YDJh5@37M%*3XFcJ9^2{kCqb~ zE}8NLjEKc0UqOn~`xUk~_(sst@#of=_5AiY83}766wo2A&@&LM+Q|~ z*;5``TxNWjhdXNr<)EJ)vN&c4J6LLGHvMbptos!dptFur$#|dIxm0y2z23N-#yR(W z^JnQ_uWO?_?E4&SF1tjaUh>Dl7=PCm;Iq?fUu41jq8kKmC zIm|APcAgZ$a5~l0%oB7Im^j#7qG9iyne0o{d|RE=o#hkyuDSr7*QND6clvNMjT_R!|Ild8^;--h~HdqhpYm`zhD5s{t%JD zs&}-)J}sR<8}ba+JElxrC{au);7xb^`P}GG{snx+Z7kloeQT?qwc{DLS0u)~QAY;{ zIFpx6&7s!!47|E8JBL`z-e1;K-$}in?rNR2+@A_ustUZt=ZGtypHkyI)r}x-(rTET26+LBk`$k>?mtHubU~Nsab*h##kofGy|56{0bs4q1=MuKEe6;=+xD8TfXD*Krm*ITHGAO**YAbluQkgpRzlB!N|mX$LG=I z^AWm_(Pzpk#s9i8I~&MkGC@Q^A-i$7xfxBPFH)5@C%Du<^lX>i?@WD1>;1UPdf{n- z?;|#Z+V{jBdz(UGv@gMyd!fV9%78}TgB)~{+1lJfNKA}Nvd~;>nIR@bR9eQv%c}#2 z$AQIsqCM^AOt5vetGL;A>Gi^OH_!)|j4ZTQ$DQ=gq%ql9>bl~xPu>nBNP7VbH~xZ* zb%j7nAaJl5!Sad$n$XFjORCpBt}igDYyUdY$>e~Hhe^A$hYtN6%!Sp2yzts++>z&m zv#wTqDNh2hMTBU>4yKut0GlP!rJslBSCy2cL3W{s-lDgp%E-`I;HID%&1UAW{;7P7 zi8^D)$O!-XU0~sr>=!qJ_S9MXI}z>I4|qXNtIXdeNWEDQhooa+4_vv!UmnZjz}?Xr zGnP$C^>qLt*>d6cvuJX>e`v*CK$QA&&GEQ1UJE%qSa?v1C#da%R!PRCUF;i8zB4($ zIMa>~0ORAa=KlfX22eYSDMalhv$R|A_RgYgs8ecJ#UIs5kXZ@+!T`$fPOWIFa4uRP zKeXm14yXyvuZ??sIp+9bSh%I^!lZdcmAq8=9|ygUGzoLx+!7yEI&^HhS_Mj z7%|w1s*i*|@!eb1M-QK+DVfMd!&~X5!|vA2)8qN-(5XiBpvb=lLL;p1a08}Q4TadE zh`2pro$moQzPtcG&c7K30=vvi0qTImSp?wPu;z4xbRwPr6gj3ndiCh$h?MG#8|uqx^h8p;r8Z`mE)~z=W4;G9>TpJE7Y^I8S73S^AqcO+bxinFBSy)Yt!gi zwzZPi?e^q5@}x_D;$7PY2p!<@OdI_9HJvd8As&!-Vdl+#K zMB%KSsfxyFv<6siC&+g8rRaD?h$jqeXEkagBTQ&i!3j(G7SO)FY_om=N!4G~1iJ$a zJ+s2g+_v;I8y)qEUOfk8dEfn6*WEj3s&jKclxaL;4Mdyq+C|p27v;F)USiU3HLl+^ z(2RU4^YO+jlu4T4d%L2s(F3d~Pp`yTv)$a`F-AKfZg1h6uBd;J^6PkCA_pUUA{`^9 zoyg{nsh8!RFxIX#ZG3-UY(?mz45xn~`@uTxA#kn~?)U@hd+yH#K4JGbZJ{dPP%$|$ zFhwCbIl1a*lJC=KKknC1Ro=-19bLs_MgDjnZTE z^?2ZAKBL*zg21j*yDzk(aKX0dJ*JW-&9J~BJHgQF*unyqNL`m)B_sTnh0s6-M}sI1 zMhY6pXD4&O3@>AA3l^Q#L%04g2}>R6Nglol==0%yB!j=XR8qN&qHnUQfF_WS}S@ zz$0&13lOFbIe^p$ausczNgf%%iv>wZhozY{p`nIbhV#+QtonUGrNWtanUYEtPpmeR zn01rR%Vye-#vANj^@vSQ55Bv19(dj9Qi>s-!c6+YG@~bBNSe>ZEWFC0WBq`np zblrPtV^~v?+;gZ#J!*4FZFrbML-O#so}mDQ|96YK`%ArxwClfc~)`YQjka79?pEcw1Z}I ze)&;YYSXb6PA-jYcBeGGIQmK9Vx>0doH2rUlCe4*{lNR-Qe_H}Ca#{epIHWVp!0*M zC}f<bel{ zJzK(+CY-O){#HFtdk}qbd`&2{&Ha?47-S8@>T$*Lb?4(k9CcRu>{}BL4g8hc$y_aG zYUJSc_7|B_<&Lm7p{ImmW8_${mh^s|XnNr0{rL_kel^73;(PVfo_|`l8w@fKGctY( zI6K!~tdOwEkp?lgNubuEES?Su7LIt5iM|Do8y^_~|NT3DREIirPLrRbMVYCq#v_c6 z5z26Ph2PcxE~_f48Trgc`X1b-EAAJbat`~*tR`MOK$(76r z8>w(AztQmV0|Y}R^!eT^Y#pmc=1=TNH+*D#z&MoKMvU$}>BNLreKPYOW)`P|$}uwW z%>02vWXnqUZT8$&X+neG{+4V^kYHPd**JJ1hjjAOmRgcS{NGOo62=Dt<{!$1sX8*` zP!iU1q@szD5=SlOh4%p1sqy9d9 z@W*#g-=|@)+COT(PW^fVUA43#NFti+mcf!v4t;6Y#4oqD{at@!rim!M!5TcFE%Y#5 z!hQ7S#xmU9%{HTJhi%yaS~d>H)&bE2sCvlfnuDoNu|7m+R9*&oZ#jt<7um z?C_%tB14m#dxU`#vK4VM#lA_dG)W4Dc^G9veLd_)qjQzSTO5dCDVUb+HepnEV&3*hm;^3naaoa<=z zg*MzCj1p;g4`;$k=+4Gx7n#Llt0GXQ)giumaoQbbZu{&UzToq6DS9#8mX_{3HN~h} zWy?rET^k}2g}qT~m1COO>^PXgWkx#??WT=dCX`agvKM4>xit%&e#utrxG0ggGPq5r z`I%z9dJF9UxY(bs7B2;aqoD)OJ8CtNE}9qqr9ArL%eB>t|CHs|zNr&HWe^*i4uXpG=!(V^ZfC-jSc z)@XeDD0f@%SbOncfM{{i=KKmlE}KSoa=K8>&EnG}^E1WHsGfKH{%{p_WX)44_S`iG z9V*91FP`mPO5gBHz7%tWFX`kQ?VG*he`zlf-A~h978j+6Oe%Gf?zxI($)ls@P9e>` z^YjH1-g9+CSnTJhtNHTiC~XU3G_g~QSfFTMs6M8Nhr9r}5eM;%n%c0gKDF}G(o_E$ zzh`<}M{vUSpBv2qmAK>j z3!FXruRBPRTgjZu<2@tU;?s-;VrU9Jf4--noe#L5wO|M7ApBp1IT9uOOa;LoRz1i2 zjZDN;bN!Pxi^Qze894{tCl!6F$QUUXa8PSyXVbHd!nEVt2PmN*q~>?GNqW1@pGdM% zdzlM|cE+vg*}OMm7jilbk+Z*x9qdXU9u`+seH-#yxmyZ~P^~qEuE=hWtt<^5%h)QI z8=0(--1pplS~5F60f%(xmw5+sr%KUeA^YI9sDe2-Md5e0kmr@kvlsTIyYBLuV6xmr zFJ$Zsb49mA_7D19acYH36!}_P653{n@@CEu>r*R88i)Qc)~_t^d3J~O7*OP!G2V_J zDzrI5D!89E+G9F{z}YvC$d!K@6twUn=mgi6ww@8CF@XA!pZ&J2`W?S-zP;{CI)!ex zWf%v%y+4JI7?}AdP`kL|h1wk4~9p9%bt#a+0HR77!y3HN~e*JkeW_DUR z!93l%1j_GBM?Ny+eY*5}MvnIj_L_EfixzSCkT(OJD|{N-s0j%2d}{7M7_?hR46dL7 z4A*RxpG^k~>+1_+xR_gJgU>A$7ALb(A|LBf^JSCU3;}ppxOr#m`$|B+WO9TS`5q&G zOoF>NTc^joEVdE<+WyTo1824VE_NKRw`1qRaAmq6AIgC_f(LuefA4BIf=^r~WcReR z?Kc1Wwz%{I8WoC5U~7hgTZW377rEHyIQqcZL*o3zF8=^=eZm{?j>a ze7yW*iIRc)-gmC`NoKS2un&FU&)oz4AL*ks@;NGhmAR%Q7jU|d?KtfZB_3{`*7bRL z#nPD@|F&2BJFa>lO}^q8m*USo;#E-7REnd+@N_>mlqK+CAZEse$uB}n|fM01{Q|q#1;KhGp1>00LaDZ-t}u*WR#hm z=A#L5zzxs&#M<(QH&>R6?%$n00c3G>YpEPK&n{;o6VH&kyZZ!6!-aIEYrQFGL|W2i zTrTT^h+XeT@VINWvS>cH=hhD_zd5{$ok~594UT<-oyYZ47b4L#!x75Qh~PVXyig7> z#&AQpTfMslV|b!WC~LSALWp|=kTI|$V>kE$As`7Uy9oFjt+!fv5%TS7lbsOW_p({4 zYQLg8Ly8s=5$D~-Hy+_O8GT*|N!(u%^NUu1C?3~>78i1kW+~D8)H3Ojbeu9_ur;J7 zCM_-!GQL`+`-}RkO*z{Z{?a?@(;e;#8uE zL+n6MQ%N;ObEIqyJYS92RO`*`31Hd!pc73NgVjRfV}%+?>TFw6C#g=Ib@mQ^HEgK2 zP|j7UJWJ=H5y+L4mK5xKLk#0-@RD(`S=5}#u@+H6)x5mJ!D8Fsu@lQ8NO(vcRry>E zLufE=#=vb;Q(sS~S}=aLzTEB;*Kqung`t)Q0ZZmr0nwczDEX&=`;*0UGog0&;$gJf zl;a1=vXSx4%fZ}eOjLF&ybo)5E7qaVhPgyU=FWB1Fg_~CPhSk?giPgoc(}T?Bo>5~ zDF{Pl=FJ!0>{I?J&~r_|9J40e4vuVpRE{QAXd(9WOR{!@wX`H#ufYZ9_4BkJHld$&pw#Le#}zxS%XtFhN-rG zrt%ZX?$5t}F9K0)avH28)AkpQ(cAoldfvJ-XOV-o+@pE#q6NH~^z-A9n&>33mM`yS ziWSE2Bseh=Fl7+r>h4q2Ew{cwGt}@5#t*WM5fN} z{yjUc#f>hW``mHpIU~@a^+%L>Z=VTQcRe`B2wH3+dZSQG;qtkWH@74IBe0r{Y?!6e6;sFN2}|qguE%4UxAfq1lBo-%S6kh< z9;BeP;&+C{MC3^dKWp1Yj3F`E-s}WcJqe%2{(_YiP2|^#hPD&B@$v7&tzV}~615Rz zgv<-?3f$ywjnw9dbR}e<>Do?o^-5lNAcYHvzf=dW>!YQvCBd3p^xlL8m@WL^v$0pf^n(x*bC@FfAxv&a zNXenpC{aGbdR@iuMH6JJaU7Wd@uy4v>rHOZi*B6TRFHgOD;A(^dRl-%Z-HT^|2|cJ z%zAO&8Df`|c)&*RDUJ7ok~GpmILUrB%<>64Y(K4{zPz(Di~F52+D%zm*~UgLyhH)# zYAjMv6`S?Rb?O(lOtv2=2jMv9Ap}1CM=rmil^Xp6tHO~Ej7L482cvWP>M$v`f~N8v z$7q;y($gh|3EnqH)2?^AJW)YF_&2_+Dx!n6Tw~Jf_4FNnU;b0QmH7JCbKvJd@(|?b z5QH7hkca6f@y*wYvX*JI%9occ)|B9(eqw)p-LL$qqw{>CpimrboXR(Un2m6-(wv{# zU94aN_|UQc^eL*hQ;+9U!I=oJ6aOa%lY;h>d`lPfxTK?TF4Wv_8p3q?>lsMa$te4EI?mHX?b z&!U4pv}7f_K~_`2Ku1?DYXh*WlEO=*L`KM2OH3tH3w3TmJ>7(z*UG$!+~=zcuv6~H ztY&10uPPNeEe%J#7^|0tJiMUsd?^Ho%@qH(gCGHXxrJzLC7^A}(Py>|vm*Kk;?V&< zph39tzc!FfWxymFxj>EFWiZBt!ATPER}N{ics$W+bFk@xk7rvsHMzN}o}Y92-xivg zx^lt`4@pEeU#b&aEk+=2ye>fU90$!^2wrU<)z|acK8@iqV^I8}I^o+ucRy2g-Bg^a z9$Bgg5j9BN;lAL)!4rz#t&bp7`0X~E?EXYL$<5ow%Z^mIG1wV1pM0oNjJJoD^fN1F z3vL*hNA`J8$?UzRHXhk@$6Wfz0EUr?j5}j?pL*{?^NJFk_i2VT$DschhF|T}=&CFT zOY+CA`>j-LW@4xf&offz$pcEGo2 zph8E_%QS^*)#YXf2BV4758u_*X~+TO^1p7APDFR`sdi}i=K{z2Xd8ZZW8&uj~t21?CASF1#`QNV=pb51EO^vSx48OEs;v!DY` zml`mBaPg=D*N69gDPkV86a4JCt79EDsu-iKT_4{2(TU=WU;)vFL5Dc}+!=JW51Ij> z88L!J(B*hW1Aj!&jz|rhH1XJ-bmfUPwn86>es7uO5ejUk078@H9mdZxu zk)0jv#>#3R*$b>>&{Zv;jZs{}|MXi$M=;qfGceFlNO%xcEgH(9&d48^!ldZQ*4ZvF zqL$kWSJ$%aB~(kRMzij{=CphjwyNzM#f$?Kah`O2P^Up1)LY8!w6 zexsOV;cQ{Hk8se-Ql9jM0^0G)=HCLJ6ci$ukA(^j5Bj=vrq=xQ0E9vkXAIXrULPqH zt8_8tQ?F3h(kPsjSkQP|_IGRtPAZH>6oVU%#YW@tK^@-LWSdcEEl#~%%nUt?A|%%< zJlb9v`nV6z%%)_CryXzi3{%9kY*@1QSfP6P***SqHeof)5y>0#44vJGgNR*oGqrHs zDppA>s4k{7)*_z$|Hx^1@o_RD+@ubcA5G;w@xd+YLhQ^qx{FHa2$r8`qw({2Hxw zZ*gD)%kLde{frd%_V^JH+^C{L3q^i7n#)C|2dc|jgRJ_vM2ga8x%hCrJ5f1V8p`%v z)VSKr7O079`~!~y2d)wMC!F7SB9x=75{Tbff^6gFHeC)hp~vk}Gysw1x?L9nYl=vO zZBS2g`8dui+&Wc3SK;K7eBPQ(V6sA$O6NBRbG+wp{G!nZTJLcwPh1@iOAjXVw1_es zVO8a%m3U~Ps#NB{TEJm3x4ZlTuz0P%lFMS3S}0e$DW@H?>i%RK|IuJ)kRv!4eM$w> z5@U>C<~>kM4duvc{jj;XPZ9d|w)6^HtbzFoXF8pz#^!O?_U+n0iB~3`5BT(3i2UCF zC0O8Tte_N^^5VtJ%W4dyCW6!S1|~w?bUt^Q3X(lq%F2kN27Y9a#jF--65L^U3v~=Z zL%&+GC-_d_#H+*LHkUS(Jg+>1c-svFKQLe!az&-<-%!+6eSXoD=c= z4cqZrVonIDN*sgNaOh-BJ0~{B0`3sz*&aoFAJ7=_jxtX3+Tv0_2K+QDXi#o&yLGUy zv7>0@(|NS`eZ+k@s$MD^^L3mL`R9#IC%$d7?Ik&AK+orsJRWzf@*5)m01_l@4B^0L zwjV__=MH#yCmW-N&0N!&VdB3?Z!SWyR+^B($fs`)oe)=6aQnNYdN}QGxVX47r|Oxg zrj+bTiq{t{iH|}Kk#5VSqCPhnO<~O?Mk&G7pUC``#uTYQjoP(yU_aI*kxA!W!p85l zhkacyz!tln&p(e%La^SS1inEt)MP6FfKJ%B^G2R4$+)0eRx%$j)-J4 zKROp~=#F(-X88O2KUitaW~I<+GTu)&b(EqJa?&BA=J1xd@b_M5Y5}+8^#Px~U8A=( zz9IAAxq9@w+P5^KmRZz^W;kFTCuB5KRm*=sfBz%=WJ>T)PSY4|8UuXmb2w3@_WD!n zgW87n_J{-Txb5|sJ6?CG*Eo>tql8|ac!jNh{~j7y`7XBk4)^{YTEN_%03$tqli6ci zNonxfzRIsKmsfS4<*M1}Chr7aR_UOBkA-M@nBeb5AIyEu^RNDE(hV7?;A}vnuOW%| zzZtjM$@{_V^nv#s<}47|1wyxlqfDa_eAE4v4;N@XESUVy&gxlkyg zyIjrN6@ThFt3-l|Dk&U35|&C|&IaU#Xv(A7f{oFm3Iubdu|FY_3CToJR~Nx{C_5q8 z^I#9oeW%YvJT;r-z~b{oj^1L1S*vwvi5be}$VNsHu!o(Unctmp2;ViD^!~KZ*A@kl z10*!xIjGZ+w&bck*U3U!JS&TA8xfCKolb%z@3!qzvl4F`Um*Os_b!R z9-ft3E@x{rNk!c<9lDGUOD#RC=umQ)!3sB&h0jJa{{33FDtK_{USaSM>VeB%5(JMn z>x@AkeX^*B#c(I56K)`;!z$i>&Y&LFmjj%Eu18OC)~&#t7XCUme(~KrxCQ4?==p)? zSD7a>m&>zxPiL`5RHvhlo+3>S=wc~*)wx8~%!V{wUBu(npddIHU9ET7a~bpOmK=?Z zCDVM_h8BJ9e6r;fCav{?kazK%*_bc&$|nnBr~a3PHMLy?EiEZ|_+}a$b~6_(VcaU1 zH)ggGMw41X%Em}o7&E0r<5OYnR-fQD@3wY!2#er~$#isbK1ya}@wkYniGJ;`k-Hro z>Hf0mD|=hnvpcLSrG+<8+`lT%9)Nz$($yzEjW{YDJp8b?f-knS+BUZE>j)3+Y>Zm; zq2(hd|04&Sz=8JL6}2LOXOMX2c){WuD*^Ol_Le+}0@)@)F;qKBh3sq7g)Nfa1pYH!Q+o*8_M^=uE-1A z)_!)a@Z*~M6%uR-vX^I_IIGec5ItP3g@8}C!_RzhW%bnA6odtYi)1Nh;msj)(zn6Qdameg`G~Rp>-= zKlz!QjJWKRVpzqYUzmdA)}$ujEeVVR#{(Y6f>f8O5aAr5&K3BEYHNElDRtgRX`YX0 zrok*WBgn^#lTKiogHYeeMad|5G+*SbD*jXtomy&W zhX({G$cR#P9A?HW7pT1G&DDqnnMXRU@5~#5C8Yk_XhE63HJrONOh} zcm2e3V{TqZb~b?W?4gL^IFxLRYS z#B7m5Llc6_#OiQN4i-6ltlUhk|BX6Pdr{fwa0C)XYHUot_+K|G3T%%3PY$4s+)@^H z;~&q+P)R&@h@pOq*hfa23ysdSJ6hR+ERno7pR%xX7UcTs2$qB~aAKdP+F%@Dq2*3- z^VXk7!#PpB+O9!uu|i-QQr~rrSa>zjdip297Rb`WLqqKO$zb|h;ZD43Wgr00*(}p7 zPSBV=biA_KJ(GtAN#ha4#-4Qs?joTmLJztx8 zv^%q3s?6&c;O7T!y8}qi$uUw95fJ=W(3M;P5g@h0jWZ8Bz!&Y!-~hc^xS7x4@Ioe- z(rESkHW`^g5HXp_^v(AIn|q?~UfZm64G~2MFnPh^G2lLZ(T(d%Z8{fgyirD)qo-T# zbosTd(J_}FYYTYuHWqrKx! zW&EXWVuA~1vz92Gg}6tzuX6T$n|S?vxQR!p2~IG&E15yBx`s|CBSBb`Z={d=ivzKk zbofbk73S#~BiQm`fjV0XcZxL0(CBb$R;m+k{(>%LqOhGAMWe+Y>E5=6E}DimBB&7Ph-VB5nmcP;_&77)n4)Fop?Zo*4m~9c5giEz%iZD4VVXqSh2(P+b;w>=wIdU|sv zWnkNI43i*_+^p)PCZDV-dNJ*Um2Jh7&|5Opf9$Uu%bLKmW}t+UDIRuM_=tgO%rbT< z$KcS>D+xdIAY_D^HVI(ajHzl$jc~AjSb!sbR=;JbJT>{8;HuIOL5R*cyt%Hxwz-Pz zyxtFpyjp_HrPkTTusx8Kx2>tAm5Ka#V1TE%r+-$Az_MZLC!9Yt9)couI`w5^I`ogyZWYFxXMl z7j=Lkex2a^O=EP%a^3n&-iR2TqQXgh*j7ngNd=BR{!u$6yOj~cK% zqi9~47{;f>(sFoL#<5D*E`63=*8=;`gu(#9SDNW+B?W8$`V?ta^z}6OA+uaO$&?Nra^2*9q zZTV%c4nDSen{_-=nbs@@`E(Nin6EPqf#p;d0B)z34bJcl0yD5&SWt9+OlJy$Tl7AY zLAtgFw-*;qS78weq0j?plCBt7_{Mrp#rTQw*4FFhe#D(Y^{<0D69o|`G9I(8 zYZGAAq$4X57E7gFKjT*+-1`y^$C^$ikeiT&6pF;}H;0MvO`g?Ecb=<8um(N0ZJN{? zf+rPhM6|g_cQ8sO?Y3ELlCz0Lvgq#UC=UPYZUdqrFJ2_x7-+TV!G$%9@$+>ZgB%ZL zI~pQjK&USUJ-GF`bjQpCoBCp`s&$HCM3Ogrnn<~QiS5-JKB`2$7d$xSvE@-`JnZj_ zC{zjT^Y;Gd9pS#5X@DfD21;is z##&-yo$YCS0I9TzO4}X z`3P&N-X3H$DAhYUtJT%9{@J@pY-t>1o4Q!uh27~Hsr8UqA@_8;s_bSa_r$8!JI4PE zJ)A{s^#MODOj<}A)^SdG>3s2k!mCr+cCPR7cM}u_F2VW_gJ2qSfc2|vac>PflZrJZrzWQgq66)44yZ=4(=_U^o9`#89nryh*!-8o@lBYP* z>x=7dAf{G`yNMqY(X>aM3ppPCEgNs`&DtC(;*bkP=QmZ8cM+iUi{#?xHUOvd#uA0{ zzeT15o@Dq(#y5opIvW2H&Oxl?%kp=)P0v@cZ`%88MO#N(f|=D&H0rF#ohac;d%p-whgP#iEDDtz1r^Kb9B|I%ng%%Uh-0^F z@L_&!uz|22kkQG-MJ)jRGoJp~B0VoRNO{`eaEh{2wQa$Z<)$-cFM%yiwAQ2}5DeU6 zvukuH*REFMj1>TlUdEiipaarUi?kb`Zffv{fV=bMMq#lGBsLx%cRUb8n^JdCD#L~x z;T)OPLlvH;_szK6^CFUYz#>zkV`PjDvdad;kwuR^N=rWr9@6#;5`Jg_O`(6tiG)2n z8$s2cndAaCn$Yam>wT5+Qa!8GfXy@F{cwJp{)nezue`rMViO+OIxY2-6?ug0SHTgn z>&L|(1?*4Wt>9lB1@!O|e^eicAF;*?iorqN{G!Q^1R3^zT|sm!WAjXw^OioI0dxxhzk=ef+aaSJ;(bPKhaQBQTTnPn0r)mDn7x2X|&*%rMM!xYUz54 z0-L!3_qep{gl}$~XbFl7!eSELQCQ_uwU^vwOIIoiP&!c_ODceqOur~Q@E-V$FOOn| zm}p_4>-Qx0^ztoLuFl@tuaa_-|4UOHfW9i`uz8Unsq{xZNQ|Fmdst19$z_m3#Q6a` z(nAD<*E6`gx9OOcpp(`Yp@^ygqU4;Mob7{ylD0L94%2LW@e$gb#0<&_h02IAU@pZV z?Rs{_em&6j6R5hLr~HEa;O3;HIB2%-e)C6ocz7U;;^uU8v){+afYFez+?RNg=1l!QSl~_&Fz@}r7LDR zJ?*`s_v^Ez0Yal!C5rKXYrqM-HUQjl{2YmVk!0}tUC&+~>Vv}>snH7YRg{<^>vhvKoU8@^r^y{f-{d8uE~tltT3+s3~1oph?3?srpH@HO^P&sj;&W$qPiP7{@P;RnU_=yzs7Ve z`RX6V|K0b?yK@QxdYFjvK^>MTv2G$^^y;|8N%YRoEuBH&%A8=sFmK)-ya2@w81htb z0W(#leLdr2gkj)Wa;t2DAOlgmb*pK>g^&?)>uo2`FLM^s{F>+Z{$P5=Do${TF(6_o zarw#BIFPi@;^&HuERCZD_eMnZBKfZ@=x#i22`FDrgN?$&V~Nnym5bgEexc8;PHGYByaBB? zrAJM)s9%?TN@`9VamtUqL;#e$XA&R#A1K+o^{e+$oqiSB;(DBVxy97b1c>24h@2$K zx-e}pC5s#x!jGLz@7j21RTgLC0!KPd1RYZFl=qg5W{39{>D1TF2TWlJ$zdi;P}@8= zlY82`pY+@+1p92N?Q9zB=)8m_nnBIsPj@TD>(a>2#&zU4=cx82)P zx<|QEx#t`j$Co8rHBEDrcbeS`Gr+&tE&7|Rcptr9b ze2Y5lyF-_rXB(Re&0wM2+>tt-oH=|f*ZU4CKLaJ#OAZ7i?{h0R;h)%<>}wa&tQ={t zBZYZ*OAzXnI~R_u>IyCvsv0SmMbx|&hNAz%$JS2xa6)9W-Ff_|@NrNRcDB~_KB<+^ z?!qn+x3quWjC$0sL{kneh2L16E=a=I9Zo1DGg&|ZKv0X_0Q`*y#;Bxpc}ui`)L%EH zC>5-#R!cl2!FhUY9vIVu0>nFFGt~Wl9#;AD17&z>Zx7d3F<4og&>^`z8x{&w};_%()%X>u44Mu56^^Ce;1AN(dxK1}P z-AlAX1MUv01Oo#DG%A&*fHd4Qn(Pz@QPA>|axb8&;nDG2ShOf)6SY$AC`-9=O$UTE z`fwk(oVQO1H~RX;=XIY!P^Pp3!yx4>q~?2+!Sg@hbG<>R_vs+O#l5etM&F9 zp}xL;2u+ix&2Z4czT{T~4|n$4lMNnjamMIzW6wK)_Hl-&aQay5ch{h{X-DLMWTK-( zg|HH56(gKUW+`t6gxKKfGbW!W`=vu8BM6Qvu_-K(i*+J=I<*1(!f3_^61PJmV}1Ez zi$&?S+toGoe5H!xeNSKgde5V-+#8NA&=3t5kVt9_Mh$tJBP_oHdq-^R+~`RaH9>Kd|R@pmZVKxLpqk?1>vv=wyhTF*4NPa@-Kl~8@ z=ZvYPwI-rHsz@^H7HLsi&X(~&4d=H3FgBF%!IbfqtOm5~z^be*z5TK(!uf_qJLd9H zQQZ}zbnBhBuy0q#s7=;8b%sCBTO50$h_U$!HP_)Vu>b|-zkEOA&5{~zNdvf;WaXr= zlNJ4%?XV7bM5@8W!=?wTzB2`MfZ3CyPWDEwa`8>RUJU*Q#S)xFDL?K%usD0)RXSU~ z7mIG1@VK`K!(huF(yK3)Rw5-Mqxt476T)XN#mqy^1R)Y;91Xf~4UGrlT?*U1o9hU0==uGX^#LZB>xBDr+ zZ`F6bSyWVEas}KD-eew6=DKQ*S()rp5xy)kcR;~0DzY9>+o=s##Sfji1Xd+ zONvVhV@jwXs_CW459>%}vho>E-9#2$I>Q(-S*+-+)*m*FKCDFfm9iE4%S^}8vS4Wd z0y<7P8Hd9+4SSfzext4bClDrEk>}gBsx8rdw$V%Tknkiyp~A20$kmDDRw!5fQbO%cuF+zU{Y%$!j^$N;X|?*wMmismRvcu?J9QxVZVSt*PzEokPnL}Wv03OBt{P7s>z zQ>COscC5=kXUQy{--)2t#ry%a)B$Q9h-kB_*}-(LiD>x#NFzPIKv$Dof&D*sPZ+p( z&}QimRKnaaw_t~& zjL(z>+S=6!Y{ln^%hC|xqLJp2l^+dJ&g&-r%B3#`d#RYmf90zi6SD3r%pzO zh521b3Im}OV z$)O?|4lL#WpBX z2yvzz`+3A0iC+_Ue0E{ zGsHvT<-jN_7X#>V@yeA5oQO|1tZ%R?=d;$)l`^k!XVpmmZ5LN`faUnp==T@dFTs){ zMH9H>^N-k_7hO9pa$P4OURdqlA;rY<3iG#zI^ArZdra&vIk-tCgA+gEe-2;$y!Dk- zbgHYK>R@j{PWDO4Ydzdd`oYn)w~6NY`~Mp*{O@W(0}NOjbeoVD$^HrU1iudoJ~HB*%ifWNtT0WL!)gDt8tmgd~<)f_@n2%}=g{(f;>$Rpc?kmN5SPofPf^Ei6~;TP=ho|(aDU{u_D+AP+t zw>{U2?C{MCEAgTl1n!J-F8@qpX@7OAa_Cn$v?tz2wFA9ARE$+yn~-=E3=*8Q%F~nfPV_!{wC7 z;F=)Cw$t0YTe;p9UowqZP1Y$zPm2ATT2qrcHc<=d3nBFG;3Q!D`y*wS&;XEG`z&gv z^PS>WIDj_ux6m05GoDa*14&J0zLHI(w@Vj=1_p5a27x^M%`X+*4a^D@9RE@l#GU9i z806y_sJ9Sm2ZxHDSotgV2!$#m5*PMvQq32>X%2KUb8Z4f}DTmyEiCp6B&6tGWB5MA_#Zn`{=k zynZ8FgGZRthI-JX=aXEKJ?66$tYL&3L@i23@F9^nRgHuN>Df#lkKRc0Z)e}cz(w(f z0NQZ%@-6*Qs%P)MItq1Ii3(gXQS1lDEG{hcB>{Q&%iZ%MI&Ii8&q2nI@UZDK`B$DGJgO(j5#KN>ffj zH}M%zs6zicd;RBw#snUd5CQ)U6ucaRkPfmx2`DySME!+AKv%B{&~n#fv%MniSxnKu z6v8aHsX=<+d0U1cW~c0Uz|ZsnfkM%I2Ne8*f~69};CJ9-DJ(L(Ut9v)#fKqd6oBOk zy{++bC6bt#v|7OtGy3)MDit`qCqRdXO@e|W{2LQPttF8ir-TU+j+QKKE95Z+0fIfu z9k_)wRw!4iQ`0ZB-tfaTARc$2?GZPc7HAHSLWLc+Hvk%CX;0q>kC;u&u8h*4gpahC za$IYL41S6UNC5swbxw*;T^)}lt}xf3G+@Lkz5|+Ehh5Q>&3cRA*)u7}tCMnGcXL=S z5graLz*1wirx0zw2|=8~o`fAQKzQEBMrts@cxI_|%BFs6DL6EUxW6@ngH=8R!#U*% z8G?uBy!oVIKA&?C<$M1(8BztK(zAbUoH<9}C#Lz~73HYz6L`|HS|<)af*-RGfj%Da zJY)R>XkPE{u!9C01<`(7stRyTf`B4xUrFr8i4DeE14C=FC$0}qJEbMp? zR-NrILJ?_m7)o?)-?y`{ijkV|$;DKZt{fig7Y}x_K`&9~L-41986s9>HWmQd9A7X> zceU<%OedGW#CgxooZs%?es;Mwky`HnZ@guCWF%xjac*^OeZ9(Z*R*Mx(buQpsvQ#X z$oZpye;m9v?y{M;&M`F78f^{U@%YOdLd z5UOO^*DDo9HZ$<F5qL!Ln+u~4O-BPLU$ z>?zZor7w4v0M~HZBuH3T$?3A?*XKE4-lX~T;1@B)|G=hy+a8J_fRnhD6c~7zVB`~o0W69PSNRX4qdsCoI#T5Y(0H>SZ7Pmu@}gF5?|Lz z)b-~Zhs$0HpzT}F#uI7uhrVq89`ZP(g%975vtz^Gb=~2_Cuc*S)pY-1G^sIz#-%Up zMWNOZ^w5t9=6L>sE|yTXfMNBoYo8EzK8AEC*h0LW7jqLLmt{891qu!>5)>AM;s>S! z%JSQmES4VjB4T>`UOi`B@1cp}SZSnKnmoi;7SBEbWNa*&`P~WgSO&9`M zqL7ztrN;ccB$nHW#%IpIX4EjS?BCtzgcYca5hbPY=y=x{2ocYhMOyoSXyP6&K_3`W zRj!|3K}q-U*4KLh&9fljmESJB0loO%EHjqb5_#^UccHwI!5qhlRR)|A~dhi}UTu&YWLYKLNqF>#2J&+b&U;vOCx+@+qIyP3|u$!seXc!y7KLh}hSYf2NZh_&UZWr3jan|>$ zoG~y_$Xp>0+C}+U_u1==m(`b&qN0WvXso5Z+8Ug{9v7pVAl=K-*#gs0yExT*BxpbIwO*chX(`kJXa(8eCO)0 zO;dbUctJ50`pFCP3(geg$D!5O&rf=HbcX%{Do>x*LMPm%4NnUg&yNR4^Yv=h9)H>T7X{Ow-ZZc{xu6HMMqE`&6&mmf3IV^2D40Gfc4rm}T`;O}u)ua6g?M zV-DwTPsB$;p+&r9{x_%j*JJOx0#sA5_Hqr{2K@E%rUZT?e^Eah1NNRs8?rCUf#aTj zU95D$J{-EP(bnBjZ?sImKC8u_s)sB-gSh$8nM~hvy<145H-P6)AVhdZ(qgg;VSlm4 z14pgwAsNLEuxy6xe2OZWX*%k(Nk5(sgAAKEJzDg}Q}Q8jBScFBxEo;r!Y#fas7jdL zY6B+|Iv?T4IibfemmO$bJRB%};L27X@bNnN?=%;fzI%+)xTz=rj%h_;K-J!h(QsH4 zDL?1w{GHW?qWM6Z<}q)-DR%%KsDtfey;1vqM{2v^PoaE!`vz9TJ1@ znd_oul8Yh7-h+8&p+m*#D1AFXu`D}*goG5aOH7pw^8V3awpy1~9$MkKZ~BE&htv-=i+=Nph|w|8}d;>A5kK{cb#d(;)v))buq+nTDZxPepp1t zNPQ#!?uc_$%dnRLJ)dIiKbD>=4|ihJnSoZMd|UYRLTtsL;5}TrDX^U!{@G?b`ltw@ zB-0-sLQm6Ku*ij6Nl}x7G_T33^A+T>^E0?fv(#cB65F3tZlI`D*KOzN$5?77e{RQs z|KsMSQjte%Yimdnk$Qnv~(6&?t8v+aF=@$TuVzYIS1;DCgh$hq2e{s~tW6$({;J+4ZhsKqgVLjx@xf~b9T z9ye1u(vdt+dV4$O&MtDzPp6~({RjuMP2S!B&Ycc^C|>c#958z;8t({MM$&GB+4iyX ztkon|7si;_7y*{jm-5`L*YeedoDTlzC*2(k;tlt^?!qU>*T)gg^-Xrh9eCgvpQqwj zBmQK_=%3B7QdUy>2c##}5SX!mRB5PBlusOB<^>rkO#G{xgn^-8yw!rIo6`AlCqzZw zu7vnA$n!I@F)c;)u_M`QU?+ct1O+GsTa(1<;7(1?gEkaE$n;E2*zgO3eJowmd4BAe z^$83HAsPwX>{gbk`FHSrKYizCRa4E4$ETw8jyn@iivXKzg?8}Z_JBKj^6v_rgdHr_ z`vlx=^!-}^dl;6-_Z*qn12C92f8SRpy~D`OuI^!wR#+_*Do)hN)Ufr=_ul|jk7&W> zSYA)v_)wi22zl@40hsg&5{tGXDLvJ%zUBUgDsUb-*z_|dXwTk)VDRK;W1Xj7F8=kz zOk(w6q?UjJRb~L%%hIf~=Z<&?u!-MOlX6oFd8b_dJz?ax@F1K6etsGTe|Q^8KQMcM z)Ny83?i!UL6CLUV{Xgizzvu64d}%c>`{g}nxB@_L)y?)y5mH*0$@p6fFFy^AM zyEmlYDuJ%FogtY=&wqIoia%9N)-?*52!0QO9C)$LruY7`e^;jF0xKI2+;UfEFFV>Q zDGK$l7k8Y0jR{zWkl$;pCS}Jo72Tr#{IpZBKtD)>g>eV(;@B8}C*MpA&<{AXCv!4i3X>x{0Tv8r;2(Np7FbVPR+b<>^~+E5!>BN?w{~tRltF z%#xy!6nhN}5+ispox;ihMb#<1R!Yd zub;DZCYv1$j25aOkdO~r+h(VjZLbqV?u~rc&^sZN6Ow;uglyx%J*Vm76)L5yj`&jA z$X*cs6-hC2{w%lm`)238ZBTkM=KO*Qrq$u^n=%b;j%>Dj1P2ppygcp5;4=V9xp&DX z_iBO--R2|?!LPr2`s<~YJLpEohOlUEJC|n>puva4Z}*EiGTxliCtcRq{lRE(uMbLfR{Ly z{7n01`4U>KuAxD#_aF}p@?CHAV3K}!GMVdJFE(ZfMGMu)P#Yf)zikvAn0@mQ!A(X| zRzZV~K0v}#PvoZg|5w6O1L5X<>}d(!7hW=YkrB9NrZWax29!{iNNW6U^!G(qFF&I% z2>54q!Jj^6SR3xD!GRl}&1l@6a=;IVQsWg)&MqrLzoxdv`mU?_t4{?I}ocv8-l&ye2EOLdpm9n-eV9cCs}s;879%1trvU z2QPa27b>AaTj;0BLNnTtr64^#*Kp(#Jf~ZN2^thKAK~FQDHf zUk?FOXtC4!0?+Z|fh_`q)h8@0%>BEvii+;X8|v`3Z4e2U#{m#2JjE2VY>nPd>m>!x zW(UU*t{maibSpiKvsfRqhL9Z5#=Fy#U%{vMw^!}`kwueCOa@5uDF&+z;7rdOtg-QN zWFx7Q*jVRJDVVZEO3i+ND+d5^gkP6dRB!e9v6+m{v0!66+H*znr18VKTLF#*pA_Y<zi;^O1HmDVB%@asL|2WDa+xQuTYw4tcqnS&JuaeL(>A$iADU59sxJRcZItSh06_f+Zl zUiUX#R=M0VN<6FMrH8wR09EX1EDf(iJR}T&frF0X07h^D6>Uek68z>_M zoZx!iSVHMTyxL#xx@z`A`^Uvy6)B%yMhI9pZall)P@%ybnDPIA><1uSNg_v3Vr>NN z&&lUX8_qv5p;H;?+ zFvYcYY))s)hGEW z+FlZ?CqwqOxBm6PyiH9A=pje+0s(ET1GIgd_X1gR)veACz!3m;P%@KQJTKRJiH$i+ zWwZf}#gMiQonCP19EW|TGFQ69?Q<6MXez&TrEb9j(_(CTN#fZlLlE*ttXq}zRn^EG zlWC~8J4U_{sRu3=sd7US36{&$Rn?A&)0gk{v!@l?BmDKkOFF6cb243-+JfHo5nFs; ztNU`rfZl4oqd=nke)p9bo^(u83?fu?j9XiNoiJ00X)AoaY};5*alLow<1ab&ZzB?5 znehI}o5cw5(PVm8t6jet%)_nOD*sgubId^E33fFM{w`QH5pM{`m>5CaM!=3_1X|pC zF*RMyvBX!e6I?b&Q#9e<2+%j1<=kXL+|-Kj*VBOK974~6~t4E}A9QB_9rk2_QH_3Jvf z)>?bX!LS)DPuA`hPF>K7*oa-Iu(u>(*mX+aw~)KzS&g{$;qhs>zCPEWV2ioIU#j@x zY4nK|4#PiBjV3ev4l_Jt&p^NXN7=4X;1v)XM^L%Dd>5Qb2_BrOs6`qr9$fxoR;F2S5$Y`Wyqrd*q0AD0?(*D#A{?k@U1azHT+=PTlmgg`^+w0|c zK5!aqn4|XD;e0qMH8RtOb6RKf;FsH6Z)n*KNZN(Nrq4#j*9E)AM^MHw*BD}(P*5X= z;R6UCTdF&u82Rv$^YsE?I*CL*poCj54xn(pWyo}j>LP9zxLEf5YBPgI6&@)nxovmRlk>B zUjG8Amq$cg0Ga)rmG!VqBLHOi@dLzpU`BwxQMNz$Kl9zDjlq`}EG|zZ zQjRv9EA2vgNz>0VN*cp6@xFn9P+Lcc^(FwXVtHg@_Nu9@2&bYzuz zKv-ppgDL?Cq{vrGnx6~>X4IA4O>C-R$m&K8mm5D$7bp=4n&aZ+#XYVK)SGQJ?uKrS z*wh+K6B?+JS@>QaWlnXzrFlgalFVg zK|w`?1|@cF@ylyuJ6o^{9yT{p}^ox z`A?fKY2I+=L)!1;W{`k;6QRyaN&sPu1|W>L&sX8FG&`&x?{XrU)Ymx#+FJq~)iz(M zwioCB6T2dntwJq^6ug+R3ND`TI=zKhN^-`T?-z{)ztwvJ$`juP03q zt}4sOT@&U2!aKsp$Y!T-OI&_;aGOQt$574}Kf$|=>ApUsZf_oElZnwFd?P-|9v8b= zGTV(aoHRVH_d7H9r|H8TG_U2=MPl9MRpaTLVryl2m@6=Ll-PUQ>xYp0r~AeA5!{!D zhnucJ>`HH(!C+bZG!8rOA(zmoj0{{+z?AXT$IJfFO1++D=Nd7wfQ8QOfyI-bxr`j2 zt?Ik^sjIS@S}=GCa7$mFyuQINz-*LbO^Uo3h*}t z-rSJdf1>^uo~#xynfQ9o!%NWZ<74s8Vwfu2nY3Tg2jUW;M2{NHKY#!J4M%T26k@j_ zu)t<>gJ2oRzuk??p`&A|sB$|p&q+k|_4Sh__~X5$Yq;98dF4d$A+p`KiGKg3M6F`d z-Qlf$F2Lm&k&h(-uoqfC;$^*}kMxypvyx>%cu%M!>g&BeU{^b?5B{vW0lk(MwiMNl zV1qc8By5nee!AX0{Egf`Pk)mMpp^s~ z5~UJYk>sVWKzo6qAQ;k6E*YVy$0eAM^koCORUCXau%(h!zo^9(u zbh=l6j9X#kC#PeI!E)~FV#AD>4>0Prt;p#zky<-2({rX0%gk8g`{|ne&XVip&4dg9 zx`9#8x24GC)fDJ7I^p~uD}~Lq3VmOtQ>R6sv;+>_!MHM}p;TKjkN_2`wNzKY_H||s zGg~+`#_*`oovOxJBHVU2VYP_Lj3g$P*AX9OL|!>O(#xyQ@X(FedHg^M=uxhV5HH$) z22)Cc>KbrmI?()`W}!fo$WO*hSb zBz4UGk8x=QRSya3?`UKlYb)8eO8AXOKfUJSkyfrJOu(L=e@q^iR5Pnoq|q>fQu@Otww}Jj6aSP?r?yKQX(AP4)i1? z{iI1}Me>G-^>f6k#!*^qJC3FXEHt5UJ$eumM z=sk3hwYF$uYit1-n}Euah^|uTEpzn$wkII(qCht3-Q$Mj%s+pO!vk}RubO`VMtDiS z1rf{J{rDtGqR|XMJsj^F927}AVCWS=M%mN$U#`&^XdGi+M0@9Sb9`?nEz>D3fMn|Q zxF-{fN(%$_A4}P4MM96OqkVSv_G;($y~Gf1ACi5kk*QUJN=gY@Jqz0B3`WClYo%H` z@k%N`Va1|;vIcTXfpoc^Y~%z;@uL-S$d(bS_xOGymCsC}Ys((S;AsJq%HbBX2m6bt zNE}$$=%iu(E-q@A+-xn7PO+3W$$F>)E*HYQSp&b5*qhD_9=!M=s=1Bn7=>m?v(R@Dt_ zG{RjIA9+KX%&2Ii(+htjhpHp;>b0j0%}B!A1>}m)RDiejs41AUFN+qjC$Ha^x5*`Lt zSqdu5tgJ%`LkmL%WL4;?Nl7vX?Yy90cVU()lsmY(3xee};#0B^&x1fWd!4?uA5GyH zo+PCAk8rzQ7~G}NBcY-a|G8Pu6TA$B3apg-!D?k+xOB*5c=Vn1FGvxHft|R z)>iz?==wl>wtkC{8o^>_$A5RWl#C9dAVOWEO!KGUdEz<_J$`ra&uL`plyI^|a=c80 zvm6JWmQjP%slcAu?A!_)`%Lf^h(~A#y@#o(c0RXX8@}Mp5NnIH-U7ULN{N0*7 z<@1I251Tb?E(8L@{eFC_>uqyysmD9llgIIIq0psB@Sh?Wy{c!@eQPT!)kj!JVZAF9 z&iW>I82->MLy8+4TCjxvi*t0}_zNOk@mjf4;UvEI56t#BlLv(cMf|=s7@RUOP6+fXSo!q!3=T;5*44d_M8f%_{bdcgMpMkfn`-9V z#gt8Y`fM8$xg|;~7v&&9PS`e~DoeTp0Z5DCkzJ$GN3#*KlHCM5*CV&P|IoJ2Mvy2o zSs1osimgZ}UDx88S7EtpsF<76Cmmld7lHJ#jL;IcbDjA*{&ik1bq>!90w2yDJbKj! zJkSYIT_1;4m<$&L+D- zfsTMiDyln$HZu>cOK0o@1)8EuOfUxM1oTJan z_iOrH(mHU^Ga&g-&Gwa$T=EW+{bR5wh<|>Oln2!LIxBJy3Vl`9n4m5()-U21TelaX z*~S=}b~8!}@>KM1h5po%EbCG4szz{g`@WfC#&P^y#p{-ypj0jx-z z{OVgx1{PK!SNUu@CIxl0yLjlXpvsHL={H&Di`ismQ^o>Qf~)P*w<$}-VwY+e@2Duq zkv{$pF;6Wx5+)klOLlMJ#r3zD+^e!AcIpK86|VfG;A+4KKO3^^_jz))bS_F5Rj`{t zfl`-;EExv}bMSO+2zQ+9B zg7X)*9Y|^S`xTj~b?H2_qK#b`RmiDf5Qmbe&;@GL%iavF-R^nHwRO3Ho7r+H+@zK9 zBXNVkn37vLsX<o(?ekJ9wy%CJ})k>ut}dB9%Lt5 zGgpCPf#6iIzY-_dDU3}LP|QyUQlB`%<1YbxUVy-B6cZDLl!eB_9TmAXDVGeRZ0;`q za1{Q+FY*-wASHLPXn>W97J0-7G*>@P%9F!jU|C5zE4deRv_RSd{QpFEjK?{i&vo?> z0dBCbKoVttKk8J*@97pI;Ci(E!E$QAN;eb@?XM5qN#+Bn0u)x3058YKV!Xp6(;;%? zyphU(&1oU~3q=d4b+e~`F_pMZmnqtRGbV12#^i*8VzHes0>&T%B~7a2s>@WU>nU~g z&DFuk<+DdHm2?*-o7{4SA|o1Yx3$u)AFc;R2x0{#B+`ay%6$-oK7B5!ToxppPMFDq ze~#SZ6%)MZ5@%jF+KnxMwbS?DM%L(Zg>j}@WHFruG9fAZETomO8;^IIqD#%$+;+Z+ zvy9+yIepPaQ}yzGXJkP6#`O@d3`yI}WYABeg?pH?a@@kcZ57DYNI2fla>* zRo-Z+0!R~h#JomzC4q7}iR7FGOAQeC8Q>puG!1?bp0onUqYFI7>C*jz(4M+OoI2ybSgerAd{p zzZ7dlpDmO>bx8*but-Kl@La% z3^O>dw4jfVTZbTZGFas~pZqLcE??wkkJZQrUdLemb)-q*1jOZ@?|O5g$p8?c>bzu= zQ0XphgtF*D_1%hWZlHMqGd7Wr&bU@AIR?8PCZ&!4Ql#--CT;NyXNYse2{O3>sGgxk#?r z@nKL=2J5z7LHZ~0M*mW#V!egzTyV3L?y5ub?Eam2ypXabZ__8xS(`@&92Y{=K9M@E0h# z^z&FD=D(_CZ9p&ZEgVBB-Cqo6rf2N~NyZ)Ia2Q0)rvjomp}#`o8arTz^6K^Y;8d#F z_76p>hf|b7DSLHmLO^g6?>P(hbYChURv>+|RKl?-8B~Y}**Gp=z^MB1>O{TvM}O5=B-1|N*b>Ba@#463`m+u^Gbz8WdR*4mq$cQ z|HztHD}r28QBYBa?r-TNo^|(x*t=V`EYmCm9Zz)}OU-wGRme51*{zO|mDC(zk@nWR zQugU?P~ps_HV%eNP)((KWtJqWY%=Ek*QJ=}3;FY&J8{e$Jfu?q^8G=H&wp=@506c7 zGMJ^%=d`*xjngQg^{AAcQGd^9+>l7djyj;pvS*+r(|3*~|5;M9O1}qeC=$55FJC1? zTLzQ=D{#@W%4ws`5-JS3jB1#TRkBs-Om2|#ACdYQ?F&Xez8G}su`+>DWI$_IMk^k> zWNy^+)6>3@QY{RWEctc$l72$DP8(16hX+!*4|T;M-^};f;#C6~4OK6)p>{KgU^22{ zx4@(uxdktU!o^bAJmtD?Hrw|;z(iOCq|=h5e+=W!AWWMVr!o8oub0eO&v<5hJ<<_< zhUjhgnnb~A9T@R6C6FiD=*Lb8YtnnIN^`2GTP{%Qc`V}b_uEuU1X@oS-ip2_je&o{ z?%M$RHF39n$ts{VO{2B7qwjU=Yv=12A#6Gaxc0JlWHd~w(eIaJv!(JvhR2<0yh%(p zbdW7RjrwzlWEyt+UWKfuV?=Oy%xIrnxCyCc57m(vHBkz25-#Ph9)yD7^hY(p&%{iE zR5&L~;a=mK-DkC`RZ$fTm;%t|u6HU#=f|u#Kdfy-r!Vi(3t?fPhW)oc`=>8`1Ga^2 zoe!edn}u?B2@1smJC)ZJxuqw}Q2M69wo1{&+?J%$^+NpEY>qqiWHs-Mo1a^IX1;eW zmt*Z28ZlVx(RgvVfjzu8eZ7_Vojt+feDRE5GW&-m#7S6KUx^nX7a)&MYp z>9i_O2EvFXk;wC25MGq#>$|YPM-ZVrf?zcF=Tf24$7okfL<7>qhY@rH;S%H3sAO`; z^PN9G(@xa>Y*vpZn-{Bl3xS0$@_bNJdhRsPA8TCi7|+sCEr&Uj(ad}> zEl9niW|0-P@cVZL9}WF1{`cHJTKh-V46Z|D8mlV>wk^NQG>W-Oru8Xfe7ks|R^#!om@fdv5SH5r@yryetn80N-Bo5P>>MY6)U1zmf!5I|=Yrfn5(~cKKY5Z4H zQxFJT%6m*iOkkxYrF~B}lvAn%Yrv_4ooR~=9^+l&N583BaRBazzZ5V16Cz7k0;iEWJ-`rp|cF0SV_XS12&z7|&|SW_0VSy+jA3#MW7@(x_Bw zh1a~caqx~uo^H20W1x^vfmAk_D~-fhGkCfT4>kCHxI?7S>(`bG9oR5m1>jn1v3m~J zl!-JaQ=;}zKetvP14OhfO49@5gU`7?i2HMpUHczaT|GUur%f{Y`-um6LJ@8Zze}e~ z5|XZl6kJ3?IYl7=F_9Csm;)M{uO){Y6ZCVF)x6C;i407?)lv zHy2;>k>ttoBPEJQ3pJFJhwFIJz~36c3gXU0gk?To*eH0q<#r4|gXW zVmoQ|6JqE^Q$~M&8cH+nmN0uqWG_HVPjR3cBWRQ+K{e}Nl6W_LzXIC zuqcIcVFGDX8dTRoi5UF;B20Ukem~G(cUA z8m(`h-afj8wU6J&dP=kgk93>l?;>Mv8U0r5hnS%t!_B71W4q;B@J$*fqzc1g-OZ)u zTF>Du30)hJhy&VE)OG{sSe0)ufgbxs@n5fJ@I}3o(V$sH#;3csN@qrvH3ZmYYP0yG zb6p99H6#$ZSSm;u+&X5&&DQ?FRp~S8d&xH-Z?@-tAdfV>4*Rkno?MD=2v5}@t^S*O z{ZGsAS2;mp2fRmWdgc9{{##r;M|`2@Qk#z%wQXcAI6g#$phVpl5*FUwKZo)C{Gvpq zkVBnu{p;Z7fyh3eKOhy0ngR&fH)r{ z`B3vykch^dqo*f?rxHp9@u&rlS$+m#bJ3O<$uHu5>=EmdRbo|$<}v@$_;|*!$k-8Y zXrH_LYhhwujJ+Y`bE|5_;iYdi#yVj6v0u4YlMjl1f`tYt|FFm-97UryK~QE^R$_4j zX6STgmf61`#m6r`q9`RW2#g^Qg;|+?fAawP)!iN*TPV#duHUgcLPM#Wn2Y==J{<9) zLGjjo1z-Y(MMfN)TtRJIPe_FK36R*E$HEcpT!;~E*pF9 z%x8`Q0GJ|eR+xS=6Z=9qeK<)&0Hs`iE8J0_~<_U;P_aA4TNKouOLR z<@e)heQ^58{B+@ZYSl^=k!_!@xgvY-2vM~?7){Ody&=n|ljCy^pSP$#jO!U}=Z;Pn zDdNI^vjG0wg(#&AkF<-zWWf?JA}K1KFoxUM&=o-g=hL)UirQigQ*r98$qsb8JW$|p zmIA*IsouEynt-(f`$IC)D;xRu--^~R`YMw>qk2+Q!#;d)pYN#`rX4P{3cjwVY zCrF%^(ayAi!(m4Q%t&)$j?E|3Ceb47z4$n-U!BQQXmtzEWYmA)7PHa)HM<>%s;a8vlWu})z5*vH(*nX;Rf=Zc8tO=Z`4$>er5NG= zd>il3L25?{pN2$CCVYW1<&|g;5ry6wR-!tMpHcl@|8xz3Z{K|QLb(+Yc8g{3(0=J2 zAm{53;_0O1$k{wmM@8F{qLaNnz&`yj6?^AGCnOZ~;CHRf8mVk-CyWlMQ3VSkWu^4n6^n?uvRgODX=no` zw7Q{6#k#>bZ*AEu77X~CJuuu54KTUi zKqD~jqO<{8R}mh}I5w$Oa;ZfG*>K0RN(R zs%9X3P*t`FIgb}TOg71cG8Xce!`(CbDH-=VO6?JXhl3;Emm3aT4vHq_pd-soNjB7B zmnI3EOEz-g%8_v0+VU5Hg$*GspXB6PP1M4ppDsVN1UHh>j^?jo>N8UQW2r7Pq0Ha! z3m*1Dt2F4RgKk#RaM%z7VU?V-V?4X0^(s(PINe zTVN;-llNrQ+Z$h`Q8O6GZo7pjojR%VCxTI#&3d}&=gIO)^SS&|jEk6X-hRVK(9FGM zOWpqC=1SMAp9?FC?OYmU)MbH3)3~7=hs_2{7LUDJ^+Js|j!ZV2AQp^pjU)>q{=~f{ zJA=*S&tz21B(f=HQ+d)3**KY?HZUOhE^0RIXML@C&84~ai}eE?9U!A zeFh`Se}R?T-1_qyTpo~&&)|I`C_}^w;8xr0s5F3;_;#VPVlU44hqf;*uFk8)0iJdt zOF7yNe0e8h=^pNWtdeX7D4BLrnj1trG()>5Ww%QnGn4S$E^#^ypUB|u_Kf9rZwXj9 z66AdyGvG#}Cn5{Okk9D@c6I<~toYqsyIK{b&DS1;SgDA4IkFOmrqRh!%=?Ho=*+4O zxA{-Knl<{WVIVH1#dMiX=GBXWr3kruZ1a~jZ~k=SZt7;4Zcn&hllMRbiKVSSP|Tc# zNwaKU4S*8NvUwHzuCzSA*2qdDlVthLmzewoS(1@oNyiFy%SuVqsp)tSPS9>I z8*1QX@9Lvx=ws1ce>Yl=S0vl5y+)JE6WQhcp>XB$bBw}^$pg6>vN(=fbXVE7JN9D# z&R2Z)_8mkXkFv7^+zD?W!Ysx7fD`|Omv|<42*B?iGlC4bjGUgTbVTon)fK%?nBKYF z=#te{d{~~N7ILofopE_GI2Kg=T`R6#|L!va0u)~`EK{cYfa0w}l?dgV_ge->$^yGO zxg&Hd<5)S?>VMm-f3!3T!oO-JKflz?{~9fRz$9~4bsI>OqlzUIwM89SHc~z4QIBLlUBLP#0cpx`KY+UvV|YC^;#=sn=|hvVwcM zwRRLeQ^E7zl0n)R;KfQ3&GK#*mc+AZ#*Xygrwfpe24zTTY2!0e|1K^eL1`XTSiCMm z5JAEVRcI$i8f6A^NF+(tCBF>>7D@HcC&2ay2@8!{!pT@?-pHWgw8I6+j=bFceg0~; z-p+S+rYAGI5PB(kJ_G*gBYDqx{)_e&_;h+tL%z(IA}8b$vZ$qF)Hzr}WfqiaXE4=f znB^Gu9&mPVEz@KP8s`%kXtbK4eY`&oQfpS}c3_jq;(jB`v{yQUHsm6?v2xw&L<8>J zc1k(ZO3O4_y;&_21|@oX&rJv2jD)=hT%(uBU({#iCX83 zgr^=+MCTs+r_$*TgvBQY8FCWrHGG39DX?Bg2X>C(oP?_?45VnbN=yW-9#n5{pe(#) z+SZ_(J>nk&1)`NeceMb2d3t4aHIAR4P>0hs3X@MzwQQejzZ)}pT9<2{N1b_DRqIA4 z?RYdC3hF7#u)#*Br#!=}(h))?jRU;=j!~)z$^rPyz{E)tiL-Col&JsMivcZrAgFQq zZ_B<1DNHJ2WC>BfJ)V{h!qJ)`)b+9t7_a^z*U%vouun@p*92J6I}em}FxtkUcv${; zrj9?xt+%?7aXNkEBSUyoNn$r!f;Ii%jfowO75Y?+SPQifm|-@qI^VSbRwBe?oPu$H z1c?MqvUia@;9&nsrWWM!_Y>Pwsk+!LIFewAEE?4sq5*J-C!@J1di$5FIhheAuQicQ z?w<-JBMu!5U$JNaAY+cw{U;L)(|+mdPZJeA^Vjbkz9UI&5|*sAk5pm_3=r>)ddp|HbkI>TqlU+998v(Kj#=BHJnqHN7Jhyx6L zHdmfZXXs?GIT6pd{=_^}_n--aFe=6~6lZFls!xtQp7tR7IG?@~@qIe*O@`f#o%C*V z2e)IQTvhxo`$`syy$}GBUW|5IVt8E3|6{v+oq<(Z<$;I688FaSD9`fdO;v&eBZtsz;CIHV-9N?l3~Mk`#QsN= z`P&2Y5(LIHZoZkUhW{tID*@&N4iaG$6mFm>>K=1(4t38-wQq_H4JBuvYzT#f|EPfo z;F$3*S&HNzo+~`=JK$VqY6KMLh0h7HWr$%(lh2tWq{mwFe#%FFQ!oTA)4`ob{Ii0( zFtb8LNJ4_lZnGskg^l*ZRJsV9Em>3QS6^t5?p$bI3nfU-&)b#jND95l_(kju5rXve zxu<@%R%&A&;zV<2*{d=WntsP&;U5W-i7fo-Jf+Cs%;hE2qAvodb7)mX1jznxVt!v+ zgpK9{o3pJW3%aG*M!#^{@$^7Cof$$8(J_X{pq*5xT`P1?IPP?mn5#I^JP>e*f;`Zb ziT1G4OXm>DBW6E!5)`I3O~3B19dKUImi`I4aV5N*Nk985f;j38hOC@JNI}JWw6xU; zspUoyX?a}5-oAFsAtsn7tdM*|?4WbnJiuZ}j15Q9dO1JOs%^9zx1FU*Z7mlry z=ya7V_2Ssrr81?jbb_D^x4nCkj|@r?F)`nG5(_q_roK5I$%qX_91iM`af7vA?~DKF z4@&2#5nZ!fs(?bLds3Q=M(xjRcnW9oEwV)DC#0i;9}t%rygzMGC3w9%31&13fd<_i z5#}qcr}%IM%tHS%l|{X0fyu3d8`491yBc8g>N?V9#88b^ERjxqNaM5aq5cBk{IATkpzTtCj z4ktBb0PG@3_Cve+KK`!!&ycYfn}Ly;)YG{f!L0zyMz>#q7UJ8?HoxKR>I;%z=aCa@ zYC>P;$D#J*x=S={?!iFBnWa@4=mk-T50CJuxf}WmyGy7|XAFe4W0!iyfO3!c;To&L za3M`iZcotEgj%=}&f{B5#8TzqGlL~ZN=S6LkW?EAQkdV0)9MY+rH(u|P@c)28Sn%M zMmQd!rvRSyeBZk7JsHM+{+@Ss`?byuTF?B6*LU^7JKJ{bnbvIsW48wjqI5&I_&R<1CO=OHN_s^Lvz*sGbdZRF>9Lk_3I2v-VB8_s`;HFS zK1J4cKcmTNbrX5Kc^=oMF@7wVdgOLF@p8GG(vEMRtbjS=unl1_W55J+MdQg90z14P zH(7@a3=-rx7BR-ImXcC2hfyG;|QoEA{ z2uk9eX<){FZ9A{`5jJp-+m%Tu83WV!+An5ZvSf2#vZr!gxy56rY?`NvW37LI9iiz# zao4d^pTLl=$KQq~%OJC?BlEPvH^@_d?XjQ$(yoe$=Aj8W z_(F0dL`0Dw24vE_{S>v7y5{DhZ{igNY?L#sRvO}i0d|=`mAdp=?MRW9h2k?_ZeU*7 ztTXb_prWdXZnOlxByOVm{*}tmYO*5sQcW629uiQwKWDiCGT1tTv~o=H_bA4Q`9JRSfv zF0n}H+ASB0xE>~!CMHrG%P8ZH>b0B11jvJC z_r2RC$74pIcI(ArgSrKnV-+TtD|%vTbhLHb_VnW$2;E7PjKCH*G~@|!{rr-nUK{zc zuuLPoUNinp!!H&Ayz!KHluJA2%)c^J96a--bKhnk%v4(28PXuUz7_vwPnB_ToT<k^n5*%` zkkRg98L01Eu_tXX$0E*lfR2b9KEE<89=I*g_ij#41>+hve%=^+a=+z5E4WFnFr26v zxVrTTJLmTf$dk^g}k6piRBlJ!c7I0vE;y>YN_h^$(SBpPO zVRBemg<&QVUyj6s3Hv^HzCwSNZK z|ErwbV1h{IO&IwV|C^Wi*ZBodg4RRDB8fpeWgJ-Oqc&wn?(G$?7nLD~(Pe9!!5^-w z6+)|2nusQSU+Tyz;ddnn4)ruwqH~xjFJCU`qC*kUi$o!WphOx41sy}}#Y0TTN3^w8 z0<)$%2f>3mv<$cP9#Sz`F0`#6IE zEiiD_iLWe>ke&_|516E!9+Ai|E{;D$1;wLozmBAhLw3O?qGj$F8>19~jzkCJ5*8M2 zu#^gNFp7XulGqU<&BBwAj{PN&h4LP^EDD#z$RkIp-^%+u7#<#w;Z4?2pV4fW@`g&% zUl7C{of%s$xf5rSh|L_XkV!&eHSagny0BK?o@;Uz6&Vs%YQ5n1T5!h^?N*Af%sl># z)DiSGw~{=F-~KR8Xj#?}*NGu`962G~EuBi`Ag#mHM#c@JnBtu6rcb-p8XiZ5b-{8+(A`=zJfJenrf`Uz#H zPEzDi4bA51l&6t)GVu_dC3&<~{0sBRB@|XFD!V8=eV5Ppa9yxI(Q)asDF&xw)ivMM~|TpX$G74jLJF=BOp^jJN;!KF{ic%G*?MOt|tlLrhQ z<`Pa>81`c_D~2z)=hTv@6q^_OQCtszAc`dMgG|C=gMsr8gkUuOyI^p6B zQ3e*|Qj9&7tf&}vje_h74`X+Vr-f^9f1`#o45us_6(1B(qyD+#h6D;+N=Gz{HTyIr z3k#&@gd2C#6E0r(Ve^&vw9%q)1QsU7k52ON%6e_?80OY=|7B8o5Erli=b7i_LZTM+ zul`BDt+U>DwX0NsxBPrljoZf@%3Zb@Y;TL)-Ma{J?(hw4Yx@T3<*m@)#^R&(3&hrU zQNGL{K)$DW3tW#0h03g+G|?*hLkE>-;Onp78o%c$!N!q@8h&CEF{P`0X~TSj3>N`i zDjlRs80hGU?L!eO+%_Fxa^~geCFuIoBtn_MvHh~$Cv$q>Vz8ie7!<_5-i7!UXOr+} zM|XY$-wFQgkk$Xfy@oNIf`tSOE~C*8%RBc}*w8^8PCa;3#?dyb2crhT<}^6gI1*)d zT!~0Wbcl3dfxo2p?RObj3avU+74(Ste+pwPuXgWurfy6|L|`_7!Tz_>-OG<3A^Y@e zSZk#)0fC^`>syJ2@qSa5sRmQ?oOO;>8kRH}L*JsKm6Q#V9Gbw2^t5t6pR?<{{!>)E^@iKV@7{ z25ISx_RyGX2YshY$@^T5UQ!5si{kL9J!SEx zxLf=NU~dR6EG^1)&1M!bS$$u2xV5f!(FF??W0a04E39RQu~SX9^hC zJE!Zs@_!PgvyQ-qT-lCw5#oAm?3pj&(|SGTn-TfI#ysfu#dffg@i-)b+?yjL3Ir_L zA))(4b4(rcOGYP&OKd*7L%n}LT{Y3 zr{=I+$c_pS{%zqMnft!j@bE)9MViV65m83KV{&OB2H(MTD7lzW7}u6@h|b0hXl(CWi8S}&K6JMjzB$7g# z!<(o1^A4^xHeLERG;^e>kH0lA+3Yy;$lyJfQ7U_S;Dbf(i2937(Hka4YH(nu{}$Es z2xFk$bA6YDd6pEzX8;h$)f~VcL;7p)+ z3vzZgkKsLK;|ts;`m{ge`*(@fVWOAm(k=$;Zta))H5u|Jia&<8sp-PclngXfe>yHM z_*eKWk#r_fg?t^Xm9_4*OA#d{riTk|f8?T~wLG5(^uooa%dw3QSe+~7Fi_1G!cnPz z-Nb|hh@0OqH%%wEr%6v_~7tN|;j_t6REDP50G8Tk>Hw zmU_1Yf&QyI%1VF&LT!m}c%M$FYM90B9uEAZ_8Y7m^yo!(kHK6kB{1mTThi4tP%a{Q zuVFB);!N|+Gtp^?>=MAh69!E?DNL7SH z?B=P!51Y<|E*3J(z@VZgXS63#N_DSTXuvzURhIy%9P`Y?hC$8Us!8n~{Fkqs=G%Q& zS(|-;;U80K1UJqNnf8#~{>^j5&;vp7PJ`}X;Nh$NgASFD)Bn=PKbxLDFg_&n_+ z`n()jdNuvXSoyRW0pXF89Xif^K=X#jXT;Bq$|*9h`K4{@$(+=v3|VqkM3*y>74W#( ze)!}uW+jvTh?b?Rb8WtTQ6Z^DRHadjZKKl`=K2DsIMKwsslAL8G}`x_+zjJbduzHM z6Q6Xxmf*J9Xf^(yAA%EBZEdNz&(Y#; zX{3{hJ~F`RNJT>YpTm)-4B1H`z)C>@D;}#a@{6o!P52=2m{f05pMr^}wjXBvlh;8G z>`#-K-to7l1|JGWMkwER@2D_jRmI_Ak>5DoA*{Aw{^$Zea1eB%G)TbfQtz%STU*#@ zPt%aNYmf~JgMKTZ(o#~TR*kNueY7EaJqKYIsE<4+f~k|uC%Xnm%f5i_(la@oG>~6- zxEC6|lGQb`cq%R(<1aK_N}b=%2!3u>9LfYMEJFs&@FLy(RaahV5ytIu$B1oIdrWul z>%q((5atRBd^GcZ4W|f`_lSy18!XVKBTj zwdJmmh#MxK#Wo(0;)uz6EPaPNtL}V0p8gAS?pN%J{^K&6O1Z8y?*rG*M%8Aw&c9$8 z*)lJ|0<`298d%gpfqAWF8}JCTl^`3BcY~$6+oC!$T)T%Y3!#d@v{lsplYgMuV#PPu zXw-Q{AJ`c6c{4SsHmpg@WZcKDOoGin)&$R@c`yiYVy_`+-{ed$f=nuY7oQUTc5YEt z|JAmO7tE0ml}c#}$q}!WPF9g9d^lj5JxYU#*Vj zKh?>9RG$1{_n7z874QR+dn}ekHrvPF_ivBscl(DXfVekZ4(|E?(&_s!&MZEsFDiz;r5-gc$m!gpOf`=LqX%CTCi2s}H`$zvQ(@cGhj6Cr0G zZ-xe}jQr$NEAm8&r=#J44u#JZO&-6vqssiw?|k^0;4AGtu#oGCGjD#W!)khftc#@` zBNu1&7y1{#3ySSbGbJz?9g*i}eMA|;FEV1G|0*e?i{s}%jHYje*dAs``}b!JjE1%SXz#O zg%nalYZ=~fh|^La8QBcjtY^f<&92)`?b&sH1!t?$DoeND(>UhA$o zORZxSH4k;V(fO&v6n|_;(JQ3RGs(-(W2+;WTT?w-r%6rB_dy3spT-Bz?en5`9;6E0 zv(|`KgO9ezq&v}y(c;%-+!z1k1cz`E`#(24y*SWA(~F6(%3lX6h!^{P?r=`2tzje-*E-??8ju2%3zw@EFEq7~F6|gzKpM`t;;3t<`=^BuiStC(2E$ zm!9&F(P|R7W|D;KyGMQ3(?Jxwp0p-)2w3Rpm=VtnJdk2SfX!A$hweu$G&3H7N*e*x z#YIF%b{QG(s;X&$?jf-rrAP&})QGH1w1Jt~7i!|)j99cxOz8FX>D#sRs^g4-ryHSU zjBPRu6D;4>)>)R5;kuM{)hM9hqlt-g(~(gny6gC>;!FiTFp*!cu!OWTvRPiRb9hV~ zgs`up8TNeN_|Ii0zFsg_qup0u-%GAdSq)3>kjllWF`rl2Wv=s~zw@DMyM*bxr`9Mz zhUzRZUS1`qkb=5L`!x$8JTCEKpn2GAdH4Z8JF|5@tZ8YO3z0tTW)s^d-?H%+5HgSP zY(02UdpJw(w2iEdLAEk7GQv{RSFrbA;OMWlm+FNRaXYH1Ntk0OuOcPLXVd3x-ABe( z`RUaGErgt#Ix+SM|1LBI)DU+nb&QAe7k`%-ny($PG3pqp+vwASIUTlWV<-XzT3sIM zdGh~s6%;IxgC!)pT4e~EVawU8EHt$E($_pN)2Bm+ueLW-Q+94j#Rc9oE zxK{uX3O~lNzpaYpb{;(o`SG`}j7$sys-a4COiZelo8gcm0#-@w^vvzC0?y*5D;X3b zqgR6*IxyEu-lh6|1KSi7=1WoT1)`5WmqwEtC+;6DTFDGe@&hW!()wNvH<1FaZre68 zm|F-_>rTB5a6O$Xlz2Sjf3&I^hA3&spdLXNR56@qb-U~&wV@)_7mV*Y;bCWk8~>e# zDI*dkiUJ@ekI5au*R~$DiI$W$$tH#hx-}{z2 zqtWYYhEMnNy>FRfOFYN${ZsL2h2xnOqY@&`xfvNKyBj|lAC~KhZQzWlflO7xMtgJS zlg?k$zn!0lD?}VVZarK&WKh1JulyAm4IToaOv8~c>}%6Kj5RdOh|>Ka-#TNnG?ONHmDxhUYL6ye!FgF(y5kW}C1|pMW zBoy4%R!&%9URB2>M>VmfXvoU(mAEQBJ)M}C2YXngpP@L_B_cc=BZy5}sn#d~XB+A_ zSt}!@EO)Qk0^0zd(SvFtMQ&Ug%|j~(E34|$z#t18c{SwyKoOTCGYTdamPLf%o?}v} z?<7x=+`>K>YC=H?%#_+)#s}FIvW0`Z5*F7SL?U1%?IDfj+&xpS-BV`V6*^ol?xb;~ zXp<1*hCM)Fa7>4RME0)-^({oe2NBS|02Wa9bBwn3E|k#O{!@^oQzlP!aQvGirZkc}chwFmBqXX$G)Y0C9yGjPemKp)90p%dL_ndjw2O*$Cs(2S@drqJv}5Y1 z*G9~~L+(4cZWaRrcHzfjjZBaZBno6czr^OV!1F=!8njA55JP4yq`Onvl+*-bWq*so zA!1!jrcwb1elSnJxAFcwU4x)8sA1djoE2DGjwq{_rkYbS`hLTW*sUCvy-5wzk|=bx zve8tW`$Ey*;Q1UzVcP42zjE*8iO9FUg33p`@tY-ypU1qqy;DUTkO17Pv-9y|L;|A3 zB8q_pga+?G^%bFJSt)6WPW5`FVkfp{ntTBYO=g-CYXy2>T22`*(5E-`*i+5aPdZ~J ze;62zVtA#oqxd_lNpmRXkHby_@t{b^&1G9}=FJEcZ&$!m*4ean`&hD@fO13BZQhM6 z1RmvXT6LBvMauv0s?ic51lrMK`VJux;D!x5nlZtn^1x_3 z`_?cS>fdmGM6c9p^8&`EbK3Wgj}d8XXjm%^G!|uTRg{$-_x8=6pP!S?#7KcVC`#Sx zavfb=rj=tn3MOdC$WhJ5^uV<(2BUWUULg3#>w6;iV|W!A7Z-+t0us2DBa%j)#=Mlo z6NU=RH(ah&fpt3>IUNj>;Z&$+sX#ct2z)=m$A)xpY2bu(v}v&3X}7Dq zyu4DQAL04YnwX9iGh>+AmCCV&83Uvmw*?ymBOVgb58|inVkVfTp00F}rxS&f-GH^N zM%^X`DQAW8V`Q8RT3c<+6wq8Kj8xfoQC>D3U}KDtBvbrh3>=C_;`hG}k_@}`f$&AF z%2T;sCJ9=*i~S^Uu|7XJ32ZXc8+m|Qy}Nl7Q*?|}>{_(95S?w#`g3$*iRk0QqlP7= zy8*S3t-LXL9`uc(dXT9z;iprN*$6L*vPx4!gW%~x+3ty{0;b?*_?hK6aPMlT7FhR2 z-`^63WA17OhyA-cI}266qp*G|9XVvX$7YQp#({3(WqU-ql$veC&L|CqyP@TtuE+QR z+JYs=Li>3o+eIw*xL-J_5fjtM$v|IXz64Z6jFtu{q&86ne>G$F?>Ap10eZdz^OH13 z?r+f*o?jvgYjmiVs87lB*y3rPxFs*rYNYnqSY4QXu z{xL3S4%l`x)1{vK$2Xw|1B%gVW@KA2@z`^qrnu|e8m8;8IQz^7q!jl+2KjfC>GCDT zJvA|!Mj2>3Xcp;Q?|lgg&HpYILLaD;6z;{*u*t~WW(0fm38O884N)X-Ute5)+j%7< z7iz`dbG|Ua?$k;0;uHAPugen?YvAaSq89d<_|JYMQ;0=3%0yBIGp6Wo%8raG_-n(Y z6uZWW?R_0}uP?_6I*kW0R%iSc*e%xKUORO`jg3?gHzRv@Pmp_OzhIv~=Im2z6^TT) zHn-==!}0EVQ#OuZl>{SN!%r=<=kZ! zSeV56=+>8+QGthp52v)NzaNMq}YPC-8A0)0WtDNmuM*1 z9}?Gn4{$%MPhSh>iZ64jw(tb}VjvdB_9_HE#looBmYnrw*0dSDW@6QW;w4Y32OaK+ zC(x1+^^EtKsrLWVw$1~3KQehOyv)^@Q{gWcA&wP3Gm2t2maA5gu3c@3C#LCWZvb^e zK!1R7MTJ%O=)cPRnUep1BvH?|ASi`^P~EQ2O=+<>I75S4INQnNtKLc$i&>N5ai?Ix zHrE?n#wa2S>X0J1qbSh=~-rOQMcL4FD>-kMzWwY@MD67>bqsaSD74!Xqkk9BQIsse35tu_3 z-0Rf%qpoRIu@a(b)D^Yu#A<3T+$|nFff}XLkoC8PAMjt z{jab9y*|EzibYMCS*wDZ*YI1|La~s~B}MCk(&4_noJe(u#YkI1>B^?ptM|fS(B?z1 zXsf1!UA^SnfF_OFS`pFqAx^d%w|_oD`u{PaDUL!b&-;2GfGHC3s1c>d&mScE0TWnT zTdP=Pvac;@h;%fg^_4u_s$w+mT=@mf`>1Y{A~rH|v{b6u@p7F`NPDsF%{4#DN-l?e zU=ZToHgR;oYJMYsSB7=zdV%*p{PZnq zP>-t8^sLi(-#sFT-U}athd$V^Rkyaw(=sOnm%sAiExtOtr29 z|8ENEu8vCoh%j)#WP${YaXelv;aF&1mD_?w76Jm?z%*=z(t0m#lKTV|$H4MR7>S9* zgwLT}%n+&EW$4Pr(1W5tD5{kd`If}M%v5eFxXd8qB~cPTvJTq`!u3u5GtLEHhrl)# z^B0{}{}{ZS_CidEnz&*@4*BEw&xporAY|J}G9t6c&d?So-8EEM=?r%39LZ6P!opuO z8N>fDZ?2DgQd~mJv8B&wkNZ&X^x;2Ez!>&z?WRzxrN*j9aUhbLg9&Q8E^W#NHRNIE7rIR(Y(@jywrV1ohe znA_bC2OpiivlF~){Bqm%MO9d+u zsMyJ|!J=5bKCkFv3;K|*@86%phMphK$uzrt^DBo$JJCyVHM@g^b9wwd1y*SD=$4M9 z)7<@v@btJ&&P)*~Y{I6hX!xZB{%cx^3uU05KRsk9XU#?^)Qf3;u|6$Lu^up9<*2Q3 zJ~ul7zIJ$A^HWjrqR~73u850+w@=L0T`Z3?lr!xlk@!TlcGKN^f7%|+oIf4zo||L5 zKiksao4M5bes#8dUL{99|NcBw4p-%@fO@j_2ua{iD(OSevjeo@f(H;MW!9`b#?@I9 z6vW|1Bfj-ibHP3CP0RNVe>9QZ&DCg`Bnbq35cA{ltJjWEe>C{27l z{ydgci4wsa=7<&sA}7MQLimE3KK-vejYESDld+Hve%ldgWn@A+b14U!u$B7&j%W0T zOQ9DdbJKH+Ak{5%x(&Z#v)0h4Zz&*wca1d^zcurZmyiv*FBxdpR&~U0i z^FT(B(0-h6E*8l57 z3+tgo$wmO$l?bqrBa&O-hmm8vDLEc6s)WQM;=vz~YAdFB#8J-#Lo(4GBxKX<47 zDnznAlZyuecQ(V)E$`{Cl)?3c&AA4@pm&}=(a7;*{r`A9d zzkjqcC@O5t{C$p(Sgd@Eiz%z#&S%+yD3uU#yB~&x1hurhbhmk%07iK$LE@=6wwp&d zBzUewo`uzZ0|vH#C$Zu~t&u^h%0In00aA(RcRa%E;>Z26C(s4wnP?Al=neW77tnOK z%cZHkQ3#xbB4gr|il|lEatW!Jpv5v!X;>STQ7h(7NH-Ca&+@sr4D3gy_AJYg+>QS+ zCIeV^ay8~Hx9!yE#{%ii>SX~u7Oar)1k^Vv(Y81!M3F|6vLyh+ByW!gq(i%gD#!C3 zugQ&ei~Y{2+4K@Xz*aL#EympN?PJl=ZMJfzNPQtF7VCR;DxE!u3(V_os&MFnPY_dN zv;r_Vqv<-h{t3)?t~2b}|Mm4P&vLHi&?T<1>S&FKU|?qza+2eZDEL$p*4eF7NXvNx z9Hgu3SRkkuP^KRm_TBlivcz7x{eP7OxZT$y>qXB}foqc%W*4@pRJ=$Y!8C6NcvUOK z-y`gLw|T-Zsw}@TdaU_=GS^qTCRZ%DiN$gR4Z%sC_U?1yAjdXk(16DCxkmS>QLjxL zX__4pfj}@aEVVdt)t=KQ-fFGJ8WH-s1w`iy<-#}arxDj0oSGFK*E#_ft@Nvl>XX$P z_3SG(`sMgL-PZ)NIs6(I1YA9k=4f+onOA=I#cz;(eIJIw8|CoTYUsTDZO+Twz_eh8 z;^`;=q^KbJHE-NJuo5Y?)l^qjcy08VU}Dhe6S-T=08^WJ`ii(nBO`{yed!}Tfd1-3 zn5d~fQPvPyNl<8nK!X>Jz}?BZ|Hs{kfNRFasR1JES?A-xYP@M;AB+5zM%xge+XmA zg&!TWidiN7d=4cQD$HT=po&jn-dOxOGz7n6t6hY0^89NXxH02+wRs4qmZkaV%FMO|5#$-^Zs6`qyJ;H%yq>Bl zw2*NJ&8s(PAe<$eyOy_8&U5kb@GrajORW8Q4>|3VThy@5&@uyhHXW{bt(GyFg?G~a z#fxDmKsz7s)H&yqN+xW;ufq9-Ob46q=6bF)Rxg0k^SV6b|KZRlY@k%GU{65UvKSTh z!5cS=E5LP@pVejuLF_aLtOE5DcW}^2<@a8s!te2Oes{YUh@*52&71S5O4Vj@bMpJH zn$R$|iFMBJ(&kcV<9>Woh)kuyBq{bJhT_#S>dhYE-;0tQmw3405Q~M~HmvBb%@J@y zLIOVG;6FEtl6Cp&4aRm6_`r?qugaI#UfyRl#e#g{b=n8^>2g}MkNw+9!{8@=VW5T& zp#mJ~hB=;isK7Dqf(6?Ho~|>Qy&2bgf5k0zto#^X1IHdz2D%Xbo{w}A#mFW@D=44R z3%a^~T(lyk;bG|%ed+c^LW@YWeDTZPLNym7#Y;d*-wzVl_ze>)<|(V}K5bULRnY$) z3S`@gy=%RnP49tHjqpOh^fo49>9%1S-t$-<0;>laKLL=7KZ?X^8>Mb*Z@uR|no4n6tS9 ziHO`G(1`*UywAeKCbF)nD85EkY3KfEp+X3QR0a#tpq>ZQW5ELkk5vDsh3JYBG!~`p zd9r}}HXU6dX7vN)cxBnp*d{6MjG?AP4ne2U7bKfi9m954yr~SVS~8PunL{#)7nAYPjZVgAkvxJtsvxOH{&7-`w&=z92py#6q)}a?KvgcuGKf zXsBor)bZ8TSB_O?Yc7i`@2w$7KYkQ5fzRhS#c}|iU2LCzE84^PDzaP44y&}6hyYfo z5ZIeF0m{o(!1YMYFIcgUrKpf9=TR1PvmjBzg1>fezF&3S|DV!dSG15asX;a_dahTM z80eNa7<*NVjdK~lk@cS!0EUpODw=o#Zo-=twUzt`u2PdJG$Tl?3YG?@Z>u$vtyU2C zA#^W3>;re7!&rSmz$ z0et2m$5>jz_1%ceOy#j?>Bg{7(UX&htKRsJ3mP}KwGDU7Mikj?q%$%xVE~s0bFfgb zAjzR`*ivZ1I^>tf=f zMkf`3U9n6jYWd^JR2OL7p2}PjpvgWkgbLjK@g7bH37ue(TrMj966q?74C_x87Il*> z@o#UUL=94KJ;g$k+YLPihu4`F%qkak^$EU04X&Z5t2ZEfn{y%!tItfuLm`zhZrYbkX`=aWN z1$B4FW@jXT1pz=M89a(UU!5pJsvQ}~IEFTtuY5{{R9w4Pojr7W>w^vBjGYFTq(Sk9%)k{>&{ujmF-uq9G%^w!i1Q6~@hT)o&`D z>hRvd+HN!{RZgl^smG{8%Z=*DRTJ^De%rC%h&gk^-Yv?Y*uI*B>gE3y8P%MA#%le* zo7yksetR|~c{8V7fwy9GJdxHASR2;(n~|4Y3aR0CaVzxM)74THIbD5at?jAwl@A>Q zC6p^gVsEX;ZxD~X|Gl8MIk0~Jr1%+nc#BAwu*1ixUAV~7X?0&Yy1TnnFlgVGQ!ECZ zO0lq`+Xe;7iDS2$C5HkUnlurq`wnn;IWsdg^XKWt)MAEjXmnP#C1ou>uA0duc;B#s z4}Y}>f@#Q(>=sRNlV|t^6=lh*&l?2tcnvnJbwhgEuBduKg5JzrJR7=t2}z(FJfxeW z-uUu1ti$^z*Ea#>80jk0=94$ql*ml_{#vKi%EmrW*B$Gc=cavs?AQoYHV~RIC{|+N z=}{(fEQ9o%n2QkKAg5)-Xe|DZSP;H3j|UF7$M2@c%JQ*)Qx9wp{#&=p@NE34(2ZuIl;iM7?{DV&zWkybBw8+pouhe z4;VY~3VHnEu$Jh>)+&EZP0p%S)tN@0V{%Sz?n;F31z=zyiWT__PoWc)uy^8JWQujd z)1Ghsdz&|&cZE01_S;{WldK`W%CGx@_s%Y=70xOr}rA zgS*^GR+hi?`QM*NIkzo>ZvtJfi8Fe&8d_RPJN=l(2oGEaj;47^O>#G*UKV?Gbg0%* zuiUA*a+I+>-`8Q0k(0)=7PYv@AsmWR<8w6xoc7_w<8!6y1EVYJv|FRcQz$4_YUXuI zvRFn7&8Ml88y(+JLAiYuqfS&UmhK}l{j4>AW1x;tfh$XgCa!~a0VwEyjB$J!i9Qeu z0_Ey|Mu}k;)mg4i3(B)w0L`;5SPDu1;q}$(xb&*cF~tuDjby33ZY}4uP?`Rj#zZm%Tk>Y?jeeP@(^c|0q-uRRo?UnWhd_TKoL48&R{euP75O^hHz^9u4Ec<^? zPY@UM>W9B4$}S!S2jBvxaWgwirosKgn5%L<4yRZ@X7nJiOpCHH3*$F!9y{dFvAjqL zI~~i+ZYyy4)jTfui2W>gw-Rde#*Jbx;%F@HmC&J-3bgD(&#QDVOnS39idi7`N)$lgwuqAE)Q{ay)6Z{G}^HVGmkJK^+R5c zpKgl+ytG>D(~@zep@H`6nLpNg-S|E_Z_&(;FgTq|1;QUrq4xOO-H(-`6gcgdsV}3= z?YK?ummsV#zB|g&?3Q-OMp@Pi3yz&mLTTollC<}ZMgf8(kU)ou`)e8*YTS-T(OvEJ zA;BbMg~#&2OlgD#*(xP)sPdbd8b!c+6+*+oO$L5PorqprL`e-M)tG=)k>yWP%Ev;wJB)-Hyh*;wX}brOwZgZh zltguWpjWR92B+zu&=t!9G8mP%CXGx&ZPUY}s3*gKAClqU>S5{%dNt-iba9yhkRA zDn%yD!|9wh3ra$o!%7T{&xf}xnEJ)&a|G&~pdQ=--MBgH*G1y+!TasyoYOf=J-Cql zxd>l8_5-4{K!kK!Dzb}sAPZ^EZppcDad~m1Fo=)IVO#l^kc$h8vv^Jjua_PhD0dYq z(zn>3DM$NDr!GypKa<6%B*hrHYWPy#qLAkvu6N+`cv|HdCCiY`qR_Cg;!YPa3_pWN zoDKe1$%1w{0V`NAe^RK;_TeN4qvPB+Y67Y|IC%I5;}K9a+DwJ37=at;lXQk0NE1{O zlsPPAp6Hl|!l053UO;U+utr zpp;!jm$G&C^Un04Y___bQ8lr-n zG2Rf?D`#t&XN6VgtFXw*DuNz&D6izah<-TjL?@Qe{EtOg>to&^7BrL0gYo7$q9H@W_743;|h!p>FVVnn1mX~_{ zUQjhQmMQ3rI(|_QLR%9*W@>$XQzJw6R}8yRUd1^N{^s{KFO7mtdI^$GU~Vl1f677 zdR6)Q%jnK~MlQc-A8n9!s~Jy!M9$^%i`JTxPTEYJ&e`{Pb4$2GlLH*Z*aO9yaT;*-hifQ8L!MTV9C{zUoJ-6jnGJ!0?pN67;1YA!It zRbob#xEDTl;I7^3BHkyP?8#~DHYFshvvJ=rU7OZHmp|gFHbAgfe45FAl=xz&6@q09 zF)hz-xv>Im+RMkQSnINBT%!Ss{gUV5Mi6B@i^Yqyt@abF_w+%xPT4IMcMV>@egw|z zLiMaW`q|{}V=c?dlc650^D8z@T~KijLyyQFI#N=&Pi{xu%bRzJediyf;-7K>d7-s_ z?pjKbJ`wk}A;9?T61`P^V9vPqKK2x08BC(4@`e>-2wY6WkADwLmhdNd{sni!lTx;r zoRk$IES>4}R*kN5)vyjb8Mv#%wr9~!V3Fs|{<6d|ttKIXevhj{3s|1zZh!MJljpeP zua(n)&(ZHHpGHfWQj{uPr0E}hUoz@-MGE>v2#0OD-E9ZY*gl7v4y%(8)IVBGItATJ2txhc zft5|5Z@QyVuN#R@JJ%G<_@F0y%KYz=%BDz6Te1)L<|Zwiq=s-EjG7VDfaG`RWvcvi zgxN0KWWl%^2av~yHaC-m!(m5B96-?}hlsd$&}D(~`0$7(N6!T2;)kBd^0M2n#UJ+9 zCmy;|Ngl#E3+IULckJ#WWpVgw3IMGwGevcUTOUB?Ne8-po{+=g3%(c_1UNTM2D8`Z zD9%N@oDrh@tsWnps9hco4712j390$eY=OiwDaO71k9g{sF$zF6$prj80i!mZBnw&N zMwJ?D5|0PHTkkWtYqdIkDc5M`7em(xi&_0*gB>HNXsrH9URO&8Y!jBBg3-T7VVy#$ zBLmL*qIqjYUmSXSZd|U7JRhVx#rHj?TE3Sgl0=Za*I@-gBBt6LoMh(V-W?6*=iW)O zQHZ$=hRKr^cJJMQm~swB{e5sqF@n-uFQw^$GmDEj7Bl)1d%~Tkd)PKL23>bgd!L3D z7GfZdFn(63p1bcLLdf^w1>wnUf%2}^R*l23C;4w++Y@8H*x1M(VZe@dN^sX^yPFw| z03Xm!;uzseF<9KU^|G*@1w5*iI;f|Je~)Sb4+L4{GW@C9m2CJ0WxN-=b)eUVgUKoj z$C}+*aQ=L-(PmnlHj7z?U8B#OEmz>9-gSKac1P)y{g&)lioxwxbN$Esu=1APP9)Oi z!_BbILuk+|l0zvG=*VTRQIP|w&jB7rYpknz2zYl>GVxr!$D7^(hO2MDp$Gq2w!1E;s4 zM-6q#5&Z}vlRaT0Lg|mZ&0n&Hc2&r;y|>UqHlOz-Cm(1FB0g;S3s1oz5x( zrB)NCbJsy&SXk#2CMac6GI3$|=PnVq`x)8!<+BUeFfl-ZOa>PA)cocnH$FFG&R4I;yVz{hN2jm= zgt`?WAtGfjzd)QrTwLBn@I9QIgs%&D0PQ>KyAL_-%nVGRUEFR}Mbd}P4SG)d?t zAE~rT;0UB&Rm)Bnk4;wVLaOwZ>J4B^BoM=c`uN|E=7b14cj)w6P`cf1CJx9}dw~4O z(1J2s!8?dV!k-wW61E?VqC2ZKAMnDq6o)~>M+JZiM)wOiHkCcor?+G+O6}NCOr{w} z;idAm0jtnRVW|qJ(-Xz1IK{?*-CZVNSgypDe#qBWM)P|ll*`kUw?|{!ow`nORPsO3 z;_&AaO$$L+Lp;0>eu({v9;Ept_|fvt#(&$*VWLD7hHgH?&9mk9);3-$yM)Qk{L>+`8m)9p4(q ze}2%{29)Y1>!EgR;CPY~yl(E;$XxGi3bZTsj{7L-|Ar1~WKZmqI1Ql#je;L4316pw z?;hDfIpvnb#CW%C>pL{quIu7%H%c5$Z?(W2R#AZ_(0t~l6mzS%u&CCkfO)~r$34KM z-fFFrbVr4Gi=N6QmR)(0uR9i=r)AXTP;cEl1S)90LeT-UoZ)QWP2e%E*F*PrM*2Fj z#apq=gml-(K}7m5brb7fSbmh=LizgvNJ}cD0Q}w(|;1rqR<|jxD;JF=@ZP z^VvVhV#o$uWO;%_D8$haV8mXpVMALSw5M^tM)1gXPs?`{<4H6LwtF`r-I>hJU+i}} zg0HF7M=GiAmd8Yc?kYZoKIsLD{M!4z)vyT_WG+5ku7P9D<`0Hy$;?%X>1dfLKB+%n zAIxhm`@rJ{*}sREpRV>*_d?rF-7mjC7TO#MtxJk@V`G%$yzw9c=x4?X->6-sUX9Y5@LG2?!W&)~|l#rP}fT}uC?D};rG zm3YX8KcEty6W+p@&ao_zw{N%KfKVvlS7-^8SHT=D+hH^84;?49Jrt za@387Iu1k*HS%O~b_IQeM14cY#4_;nhi#`yiN6eGKU5$k_4y)YE zdOMC&v;I&lA|Zit@5O3n;}h!5u_x>(o5 z<~ra($R5<8L(z_`o)}X*hl>|thw)7Rj=A9!f&{Y%>=|L3$4%n{zN3SF@(i#|a}^IQ zR4$J9zXhzn4v8ZO4T3 z%YZ~ozZczRwJ5JOJTvnZ7E?Y1NOb!dJby7UA&Dgr04A&DCXMB=+X?P$1SHejY;X7d zEgIa*F93cXPSc@ODiWpQ(4!{>T@bxrO=MJ#5)fQ%ySs+3`0ijp+Ye<9veBDKh6C)? z@+@uzTT;?OmUhOHlKqW2NFZv79)nSjGGgZJ*pNZYV`G!OnzR#l;-efZlH0*vNJCU* zK3_y5jJ3bX-9jhkdXH!GCltu}O1i|2#^VK($E5`leSY|)gC}I$sKyLOvq;uZuEWDn z?BPO_2$O6R(cbbAkH0W9(_g99fq$BT$`TTRQW1$u!h>vu#kBvP*n)Ml&WPyDk`f-0 zbN;yGQMma%@4{L}m?0(Cz8$z7kfMFQks2V;zs&cCEyyfx{QKiuFhR@$;C$Nb>Dig< zAJ`$W34FM#aup=|iOxj?Z)qZ<_~$zA@ARgqAxqp5wH7F zPWg{)B0Ga#P}$;9;+w8tY^Fd6IbRyECQELQ%7aQ@P;!5lZwMeJ~CaPoHO*Zm-ZEwTMnb7-_Sr@*+P?-vH%&I&&7 zXXqcgt@r|N*P$0PGfkgYvjuy*ZClSa0QFP$3iw{H41{l@s6o!j(r<#yb^#fDm~hQ! zKUeJEI)*rSS+lffzD<{=2FlMN$8_}Q`wY-`hiFsY+gv|F!9$BrUk8Z3kJ1^L*C9WZ zvlU~EdXFC${vkk1$!|CKTG~oq9`nJeg){g=T5EuUJpQ^Hk|;U9Uv0h5s0_^op(G5H zj_0xT37bnLzH%Ju

Mz{`t*2g`}1)U%)>w|I$BoaJGMTE2Onnd^|VvBcHR0VCdBq zIKc+5dH;r^FW?E|$IBVjar+?1QEW|Te!+JLQk|NzvVh}p35z=kcg#b*a>1g4CNj$* zpq4>Cy#Cxky`DQuV<^M`ao7%kiJ##D&}AUAjQA9IA|4F?H(WHM{O)~6*}ozC*(He( zIksAUfHC*-@&yg|IK65_4QuMcC!T@ohE%qfi8Q_PZZE0<|zP%q{#Jc6b}aWWFKYE z@4wbTcGm{Vlq`ZxL>tXP_Qyf&L$fqdUSAyoufCVzT;Ses|8u$=%pH#{jM*TW8C+$k z>+{PHe?R{pHVS6j>QDp2H@NgObLa@JOnI+6;Q~^E6&*jLYHk4G3%D^^fNPmSh_PbpQz zp_K_=(KG}pZu!&v|1{!KF_op&5c{rY0g?J|Gfv+f%TKV<6tyuax* z^+9zo0U!DTTo8lbjx-C{ZoH`^Xx5EO5`-((ZP`@FKg|MTkb@9mwmraYHf286 zLidT~6do7;Tl*hq6BSg}^G$sOpVh87D0l>+68Bn0-!^f^)%|X3WmOK7OJ(PL8p;vZ z3Pb{t_9C!(Gs#c5u$n^jsFPSWV(tW_0N%%doTAapq^~9>rm?~5@o3OWS=c@&pI_@m z`e;G@t(`i5UsKs?wP9yiGUZYqP847Yvue}|>ABW!d{cLC)ATuDST=g0EjFjfD69)q zV_(C`nRGXRc-glqRH$(=d(1mPnuEXIKwfeGwR>^^I)=-YwDkk|7oOETWmJM_=>2_m zieD!%1|ho$i_Z1W$2S(uIi!IKNdAs}Bm<;*+$uIWRZNTiiD8Y62@1Iqz;XK`$fyP-x>RRJ>c~Op9?lW6_#v5qb`W|1@>p;7|{PA>}}E_ zv(Xa%jP-dfsEkC8-F!M*tqYxAs~z@`T0dWVjj)YJZ||fv{{WC`+|dn6xp>yvoj|8 z&M)8*0hB`u4-GorpFjg0dv)~qzk_xG1@4A(yU0!c00NvsgB^Y4LQG`jAe&Wt z+f2hozjN=CvvR!%S2pnNaWwF?AbJ&Db9~bOgIF0sy|vs*E#)_LfRH?xAKuCQduy)` zg5gK*&Qb}T!3_@_{sJOG{4cY7#Lge@M{Q^n2?fd-Se&H{+AWr{I|?JXG0qA0L*bX2 zU79k29R8GjBoXb%Bo(_ed5}%^@2{;)PJ@bG26y%S2qw3wUd#d#2oe(nUwwQwNMTQg zc@z3R#(uPk<^YAL@5CT^ot;?Pt=6&$^ ztJU4(g~OjK^k=2okm9}_&Aj1_#gFufPoH9orD)Rgo`tv;!V+O}6BWjgt|B}nF7X|} z13y`2o**RWntS+VaI9&wJP5M9K70E2rPFFpz+sHIfND@tk-0wunI`1d@ZIsoJI9|% zar^<%q;FKg!NNCBNzIj-MVz^~Y%ZP9c_-8(i3$wfhYZNYo1`Y*3+68WeD$R;K}axg zdpN}}Q_e-RH46qWS!vW@dnx9Wpb35g0|K-zwMIrDdg0#CcZUDM;=4L1p18XZ3A?vYU>D@`o7EN!j>i*hRQWXeeY6<1T3~#9hoefCmQZKM3}g&rdlIWB;mJ&)UmPqW z>^q!aaou&fsq#|#4j-gXUC`T{NHtidh3hnc`-cO*MQ5lNR`h&amHkm#ZQS$24tz)?Y2Z1vw67Z z!FJmoFkZ0Ks8T=;dI&Mu#Nd)F^5ZCV<^<0SyZE^M_o(}GJhUJS{ZkFjv+LuKQ%AlrzV-MXq!$Gh1dq4DxPO@3(^Q18T~U@`uP z&0$0j`1F&_E8F6@yex$|5e)&xKo^G%HSgQ$q-81gtB$>7K?4U;+QPS$;TPY(-0a_R zpfCAL?H)KPx>yV;uf?YtMbvlS+nq@?Un*SSWKhATL4_JmlRYIi?kA5`^I`qKZ%JAU*5morweo7ivSsQQ_J`?gbN`rx% zqQSwSCqziMR;^r*VE%_01+x88bXxoYh;x!J04U^BDn-_b8=LbJsIW`PrR9sU#|Oe% ze(8GW-mj)RZhHHEBIx^c0b0jsI{H1yx3cRD_&>F*_1^vj_lb=8x9M7=Q~m`J&TJIk z&CrzGzB>4(2SzsKtp0!_KC6>dkcvDM39ea^E+YDo$>Ih6c)3Q~Jy-UG^oQ4zRP47J z@o}`&?SZ50{lnwn6FN*)1efo=ZOg@+NN<5U2X1Zbu4S#($u16V6orHEg0+XhM*VoC z1WHjIb1QE&YH{o25=N(J+6$s3r}FrrKoiEbGG<1sJwz`L>U2S_G|Ve7J6vDYj_2oLB#xGnNF)GX z?+H73Q`n&O&>NCQpIQH3=BxCV^A+t!Jhtul?~dmycyPFLICzwt@|!JAi|ifmZK~!3 zBoSUL&1+=m|9WSfPMx&s!6MMgJMsmSUeV7IvtPXUoo3U zg}ij+7^g0=rbU?okO=sr(P=h&S6AQj;()=pyT|%lr8EXLU_C?N%2{7vPn2Ikf1myb zoRFq{+4{&CQR2-nWDUCZ&pietXNsHZI~p5@b0SIra4HLYEuZlTAZ;`Q>Pm9Y|avr$Qv? z=p7VdXb!9PFcqabT`Ckj-vP)yL5gKaVZn+im2s{w&V?$kvR?Ps^CcE1TW=ar78j+Y z%WM-V42Z-fVX%16CzOeXl$~y&^KD2n{{n-Ss7Ti^^}Z#`TEdGP9Ve^M^H-UVgO7Z-$HjX4N{*?)_vGxLIl2-&p_#E({RJnru~461n_vCiT_>z#J0Mp zI7pJ$JCMo2kr1v@MI&ba9UW58_|tsH>1F&JrTbKtfH$an{Z6b^b$X#~>x89x74yVu zB{c+h-?qbioiyL6V*Bm2-nc<2RJvSFoLq~g#oG&D{HT;u!>k2U&56fC^TbA1EFZil z%%_3;%u^i4!5d#eU&eu`&Pp5>`eW_QXi|C%D5_tVY+)Q08oQ%}$m4d44~g|dQif&19# zawgZFMwV8orU>y0R;5Fg2;I;8WeWXCTTJ7QY0efDF>X!J^7fwRjsHCa|yeCq!i2{w>D(PN)Ch;0g_1?CuibxlksDfVNohbR@# zp}Pm19xnid504JYnwduKH|6KtC@XzV9^QbDWa8|I!Jj{sqTf(d7?{kq7eQCr9d;Im zaxen0h;`U`P~Ni0%BeG?j=_P(s#w=h^tn9v4*uHXrXYIS9Wa}az_#I^iY7%U2)jEC z-z*HC&Qcyxl#k#lg$0~8=xMb|r(#Hp*tA-XXZ7Z5b$B}ITn%y9?Z>WTJ`_1v?9M2G za%?al5O}iT0G`k9N0hK!r^9lT`;!US8H8p>L0;!F75Y)Pr0^#fx2&a{exJ$kynUuhqFW zi{%21hCeb4N*?iaRKAEOo^SeuLV@6Q&OsyRIcD$wGXqA-5O$702@85$f3Q#$)9cd` z+#b6``Am2|F(i6kjZAVJXlGyoEoSZ`6B87jVdEkdw=2}p!=5!G(_jx~qm0Gws+v>| zUT)L6?>mnYuFutCmp^Jb?)j_d@khDS^*usOzI*)k;RO2Ps=vIX>Prm1n*))E5){cQ zA9L};0f2N4ICD&7JcO&&-NRV#{{aZBvb#l}I6Vk^5TE-fVG$Ag1L=5{YmXFv6$ySh zEkdZ#b9}C&q+SpT7XqO-0*In@f4my^cM-a{lF%VPH{%F4+LR59h+3MP+RAaxqfs+o z1-ZB8%5rqY>~M|B$%=grt|4X<16{d`V>j&lvRSFE0dOhbKr($A2=c)_D_%gl1p?wP zX;$_s@bh+aX)y%n;pcpl4$+YnX1bL)b z%+4w2$!@Xd3pSsQJ-5&@;p!|3sOhAFQ+day>%Io=Q0|8aSNo}#5a+)I%_++W?k{28}~AhUAy zSLGB83YN%YAoSvUI}YO6)gMR_e1F^oh%WyX zOWw;74ho2J&xd(I2-?P&8d`yp_`pIPb2Ux_Y3!gD8K68sI)gfh*-UyuUcb*5UZYMQ z5~x7D0zy*%g8N@kB^|(rYaMA&^&$gRM-PN83UeT?i;KtM?Rn`9daCf_i;9BajtXZY zoA<8kvnuGcYoInUrbD5*K%nVXM!~^di4})qv+UP;b)5WB5te}AucLcI6sG5KH~|Sx zCTWBwRK$fPTo!4;_OJIZjkqVOpxi`cJ`z8KD&%t#fNS6r{!s$x6B$HGTa0V#+9NP$ zPWR*e-`KeELGrk^n$^njknl00qEgKF)*4mL9(DEf7;TO?BP~Y!XP zHCE#^YHZt18rx`W+l_78Hs9&Jx8Hbgyuati8GD?w_QG6q%|#5#PNyyOZge_P{uS{C zk6F{hT_{tK<859LE{Ow+*3DjiUx(WXPjQg+ux#H9Gc_ekegE!&rICJ>RO{0nxDe5FP)lA^B1YuNO4#cA zG8|$kQH5mu(TvbGLfIgEHI`_?jIv?jU`>8Da%c>cd>%ki)Vx*5u`U?=J*A!tw6d^g z+CIH;yPyqJ@JY$JSDW6Rt1)=cu$^)g zF&igb*_or&2`05G%o0hyN^1L_{<32F=pi~ow7D~wBr%eFxJ2$yT7K7G$vEwCx8>x+zQ%Dw z9{>YCTWyNcfrt`OD?-VlH=8ScaOl-Vqt$?FcEukLOXqh(4)gjZOB7)8MZA%W-a0i> zAwM(*GaSqwyWYTt2f;q)BD*6hc6wQwRoTPC!`3w{P7to}r=r#>*K8ifaww6CQU@-Fwf|U?-0!f*Z*`I`_GeRpnm=LsVYV;<<%@lK?alt%Ws|v5 zLVHuotGmTs2?|61ORZea>%tt9%bcrr*G8m?Nn!>X zjnG4Vhj6EV0=)=9Qvg)Ak1W(du@YSfDmi_w`C<29{4k;5Tqf!`sTyMd!ovgD#=~zZ z61w@q&V!U&`nn(P;=WvVJQr`?Sx}dUo&V5qI>8kD1UQ;#I^bRD1ID)4L)wxNsCE_R z6!OKq9@3IiJHrys8r^Rp&Q@GLz``=C?NUI^3*}Q}g~v<$`P^K!SGi?^@EPwcir!aYei};5JqLs!h51I69x5V zj7?e=1QwT-u_nsgIjpK3q8PAOLE1f)eH*wKv21dQ65PW{# zaq1QnityYJ#hkp_6Z~ug0J0|*%d$Xa7A6=ZxoJiqo|=T z4|L#TKi^Vj_G}NU)>RP&NHrE6PEgY9_97eFaIsYl_WX6KzOT~7m1y#=G5tzcXN!t& zhE>gY*lwe$E#gXKMh!8p@%@rtA|`nUDM6e`U)Ds(BdIv;_df?fbdw>CM?G?~ev6^l`mUGGGak3lX{ zS^(KCnd#iBQm)eiU7}j9irC-R_ql^M8BlYVq6}8VN5WQGUmwTsK=>RmK*FS$ zFPpxcWz}&O>K%!5fc{=Eq8GM3ErF?8p$)G-)3eR$dh-Hqwf;2dF^g|Z4oRcKhv9fP z^m<8;Ji#fC4SqFn&ZX3B&sb|Z%_9$>_~e8+%dLhO=rn5Oj=`vr!Zk*b;*>wAshF^U zHKarhZTvQeQx3BXd9d=s3H&*R!(@YBaQf0@?3GxAgoGJW(vARu{sKB`HekiCe7!mJ z&d4E+RxB9CX8ZlgA}mTmqwdchCU~owMbY$X{2?=CP=(m;h|58_ZuZ->Gu%m9V7=fokW)me5yH zV7}G{K8?#GzIR%_NUKD%HMi0Fl1;nSJ;Fb2f2%C6JGsG%S zv9u3|D?WN;x^JL`XLoSZ zG{0B1y@7Fae-A5>bu@ zjU;0L7JUE0bD5A6VhsvpvHNTWIDkr^FBR*tUh^^)=I7MjZk*4^k!z>eQi8+ysdw2* zO_EiSg#ozVm_2r?Ri9{an$DVQsErlMr3A_ClCY>yd96UZFQ>jW`9#OD{mebNmD*=0 z)iFL~Fg7#@0>u5Z%=>;+A8up`%+SP#X$~JnyDir5aA-CE=vk3Kq;u?N2uBtU`QkyC z0ZWRk*?J=e-t+g zOW2yq;`ECvlO2VO0O!CT6_@;P)%V{YT7!ZD(Mp~omH$IXX|jb+Jhb^kNa0399G{m?*d_ceOsT9@6^pZyzXV`&fYFIdDo`96O6k6VZ~G<5bJ^ec>-oo z^@Ezl-x~O0PwJE=$q2Niu!;JO%MEA6;tKCU&6u376egpTIfsZIaV4?ZD!AWCC)1aG z*Q?A1v>iP8P|9hw*bocI$VjM`BSkNv4!$$bELIX3b-vehDi#tsVCKMwr=Sp`f!C9bPXO)wgHW`t_(ebZB<27+=trDuY*B%?@Xkvy!(;@Bf_vFq}MO z&NQjHJJ&!JYYT*fi|gaommkl7|5m9xlII)->oo9~s@k)}b_c)e z3`@?)9F>oYBNJyrj7Rw9eDcl~Li>GW3rLc$@2>?*p5pU>^`@R#Y*y2s`y}IY=e z{R#3gpQn96Rb3;nFr19+qfM4^FO?j8bee<{Do^FI%;A@%3-%YOTaIpv{BSljG*3sE4G9MPb?R?SHm zjL&O{c{Eo-dj1`$c?mV5U42h!8deVSg(-bp}TKnh$I(<5YPvEBq{>rXnr%0U0YZ2*qE$8{;atC zK8%iTbgv!M z0^Qz21hk5kY-CvH=6yak6`cUoOgW$f{0)yqyx~jB8i25UMvv;jdpO!@3A4VCC zvH5-q2xRDkhI+7C=}Dr%m{Lse7_MLp@?q9}a&FjNzY&FQev?a5M%qm8dqa$t+xE+) z*KQw`YA#IiTtyh@&IP8-K>hT4&Gs`ww(K-MqvvJo_l_*1r$7qRMB#esHTsHHmyDBr zi70ro25(sgXZv$DvWSByw}y&=Fp)-|*LF+tD|8x^^UIkrnmv6GKTP9tNW3nV-=E`` zv?SU0>3{YJ(T-dZY-U43BPnu)K*znmUShMAt5XG}Zn>Acz~;PH+7zj@`0%`z(;inw zuON%E5GwyzYDN{4Nv6j@F1liRs%f`G-}!9`gZh#5=x4C)eh;DCRdDxob`V4=8dpRN-3Qd83~*xzGS5KsqF`=kcoB5m^kuUFd`?vcY0mGeZh$N`jAE)LwoEufgs=FL%$yZze;`30{jl{S0hrLtWTe4S6V#~BM}zmibdq( zD73-oIMcQ)&PTDWG&@{iRey~cJiV$m>Uze}XsgXtp>z<|O;vw7-rRf?+hZ}k;eG9| zC767p)NFS}eY|SU(b$E#YRFW3cS-Z@)@*f$AJ6FUrM|6F1`4I^6vfq)2VB>)7sHjT zbxVgI%EB2dDF#PE8rV6Rw9B{AoNi9#e)$3V;W<>*cH)O9l=|I^80hLEiD1+4*uZw~3+5|fdEF2Gdisr8pVVO(fwpL& z)(VGcwceMPZwXx=tBuH!tkE4WVs8tm+atfxNdj=Kn2khXt*s2KI(O&Xppqjw2NjNL zn|48bxkokrbHiJRy0G{#lV2fFK#rZx#_AI(HcrEv&myyr>2yD#LPk?tt$nS(Cxxu* z)5loj$^Rmm(K==H2LwpejcACp{>W{!^MUTo2}PAIP4v462TrqO+`y6PUwA|v6izX5O zR1P{OFG3J6S1un`kIB6%!-X3N2C4TxHtH-e>D_x=Iff|19Pb=CXHL+O%P9>XpPI5Y z1a+C_#Ra=afljm1;_@j9e@#5&1zf(;k)aBPZ#2&e58Pp!$k@>@_yRsfbA z#g7ZTP_X=T{|U>D;4cgeEHh(!ry@v529$w13~x6k24~ke z-tJQj2~U{oJ)V7-Y*UBKzH+Zkw0@PhH&RmaXF*lfCd4#W>e<*W&V2IjSDD%NVk`BU zqn|~zMo~lUg+XeXNl7G{XVtwoG7039$&SxkFGL}HgKUR9If#N?dQ9Upy%Nl-5(6S` zTX>b2rHw%{@x3|@Kex&EIkkSwPe^3?`*Iy!2KWcY+UcN`mW|}Yrd#KP6`1J?b>Iv(QL?z$Ubhha$+RKq)z zNKIC4ecJz#$MpuKpQO9Knkm-h4Xt99CY3pSq->Y({Xd-sD`5go{)%>)sOfigJRWyn zyf&}L69M#=Q2`q!SmfW!1BkDXQE_zUm&!Qou24q`0_dmqrvRUkWT5`xCo(we<7-25 zm59|T_kG{6Dqgj7AwpTD$G#2}aZJ0TZ7MrB`PcM;vDN3=n%%oAQaiaKUA`t-FgHKX z&(sZlO^y~iAGg1jE^|8Uf%b=IMuvVG(w}3=&$xqjcXyvGRc24F(|xr(6|So1)oJTI znfxg4J%@RV$0v^mivS~FV$E<;%{{d4S4A}usrF3aML&Q8j7ezpcuvXT>)g8_%DS6 zAXb~mCz)(q_aWNhr;CX1cs#!9#|gRmrzw{SJgs(!1qe8SRUM;(ZF@3XwAZZ3q=P&M`p)7#@7S4EOduj67iO5aJK{B!c%Us^pAW$O|UbF zIICeIoUTR!>aCK5TImon46hBdmun{vFM~|7Auk984D53+>+Vlv{y7^3^fs-3=&>xV znf7stTFHN~jP4Usw9O%ihH@>D`ONmjpahGBFs4t%MWKY9>lnaP&QJO5D-5c@lgP0n zgVq>(P{0#OFbr??92 znJ-Z7{wAaA{A$f*>S`2%9Ca{*z}lnB8!3O~c*rk1WPRU{QbLv{kYPHKNWhFGjg>i% zJ}QKh-Q|4waIlRk;md~78KXZDj4owF+Ld|W$HqRXxTr0Sx``YEg#Z&zC%U&+{6Qy_ zVSJg}Tl1VqS7yw;V5gNlmT4pDO~Q9dhG0)ux+IRi*LG<;;W_j<4e5gS?v()C4M5qG z#CBp${OEqQwzm_?L%~c#QPd4zvi)i26Oe52x(l;_>R}wyP@Lwu(96JN1AGvGVP!OHvcbun4(%T*_Gd}vpYPnYxgk!LtXHZH zY|kM-chILm8;e7#%YGBUDA6Z!l8i-t=x$Q{ZW?cpR$TmpruemSyycxM_z^ZS*W%dd zV7kO^rN_2I-1QS%M7%5&ca`aR8ntzkJWkmO%k1nwL#$5 zmGVT9gK<*t)xA-PXrhZb6KFdh@00xDf}& zLyA+=xJ)n+&KLZUuM2YZjx)cvQ*awUaD<8=<O55FN zn7>-bi0X1k3mO;=^WOFvh62s|_iQD)NiT}$VN>jMpOh`U@p*M`opO|%&>jZ&qWOvL1Ojg1p&j{}`fE$Xr){txe z#^wIThwv}Iqcel3rg3kSKENSzjP7dDr z@8njFsIFRy5?e_(WnhuT*Q5hA_F$Isf5`Gew_NaYz-+y_Mh%>iJ+ax^Rm7Etc$#>y z>j2^@yaB4B`HCAT!VTWd)uO@9kRkzRbC*Rg(nMhZx68q+g2=$$U!wcp@GNkJ3b@oO z=3Vr^OrbmyknGtZqjGw`kwb+}&Z#bsIDauIr~{&0euA_(6(I@WmI~P$ix6>nXr-$G zV7fO4S^BX*T?7`vDNe}lT8~N{S@aQXz=D+RC331PLOpN=ZD+rvsl_YhFwM5Rt3c0h zLH*W`|KcnTbx;J()qzwKVrQEERT)rLN#8Zm2?pc_eJ>*SSo_rAej7?~>_I2;iL#J` z`J5wv`V=5%%ZfzAy?KT%2+E0STUt|>-}J!+W|!w{X1i~u7n1Fsy+1tkK@s61{_HR1 z@f@#|_Wm77Hk*DK7vDPT5x1|P%`Mva2TLUG5lW|F+2XPJx?oy)0=Ai`bbkM8P(UL~ z(8&wAgEsq*C97O36LEd~$Qwtgg&BFHULZOC@*z`h7LWhmzHny)34v#e^OM;eG4}Cc zmbRcae)P|I0WdM>+^o%|!>Qe4On#S0t`e=(y@S=7*p+pl<&aRWR>;R@xCNzDp@H1q z?ujXYU`I92!Oe|*vQRCV@a(WdqS@%IYzYh5$e%DGCYy-UXt&SjiinwQSz?px3RIFh zP57z;>?eus6k-U@CG!?tA+g3Y4z|1Y{gv6TJ8!*|c9(Z$Q7h>CkIxmOw%>xEpWv}b zpH*^Q4W;q$zl{`H(ij=+rpTyu=wUy-t$UuJQ6jUR zpGRHO>-x147H;<>ff5Scz)5)Xna6<#tHDYX6}~xX#fl>Gbd~-(#p%%dpCPstCC&?@ z^yO^J>wahFV>)0q4S_zBM~V@$%<2nQQ~&_mvHF5_1j|v*xs#Lgw;O(a(6oWZ{Mn<* z_>COXNZFr{-q-z-NA7VFxxrjxF_ZlV=-rDIGr)xZGB+>jk8;`$9z*NcL1uAz(nVbQ z;)ZdBL7C&hp?LxqzAW9JM?{GvEIBxH zAAl|D%Tc1H|s|C%<&0M31<* zYl_7okC&*>qUyRZPbCT;I7&6t+-$Kt0@`-l;z_D)rPp{;Lyx{>IwmF<`I}%QMBB7K z!?hfoD57Fw-NF8j0kF-**cfN_i4`jWEd$@;sML|@IIH_`6ye3RlxmQtRbvRBsoA#> zG!_%ROnFp!M67_CJEcE=Cv3Xcy%#+`13UcsDNwUTI)S;^_ytl0C0BsdS63LElKg>a_@+V_S;J^ zh(}Aw{eW~@h+^T`?^l2yztDK*)Ko^BMXgdxkkB|9_ZXGQBR&sg__yM4r%{3YGcnI* z?+u?y=BaWxV{C3F9Bs8!=bA#jNkKq-kYt@QrNR=+`|J7d^)EWLP1bgToWq>5`FOJ1 z;nI2Vh0ri`xaz&g?<}HM-2e#@bb&7l<(t&nJsXUJiW#c@^(jj#NptRt4+QSD1vV_G%D)LdgeP^F@SO26hL%6gP z_XK7eE0v`fE~U#NgQDf}>`SB~mhU-$a?thrV-Q36ynxdCrkgYwvVSniFUi6voSrm2 zgU$U@zn8vH-NiKvv{B*5$vmo9&G9NQ1MP97gurCd`6T{XSsJ{kS3YGH`GIaqlrija zRi^5&!T~Agc2~izcw=j?OE{op6*dVbdfq}D_pJbw_s@&;nAy87suFJ=zlw6f6=>OQJ^%gvc5q0kNfE( zEwiB*rh?Do?t{&apCfYlGMLCNUa*NK>N7i*(E?J@;8`Tsj+vHzqG*1SxT;ucY6(cl z_(;ocD4w5(h{no;*+WMpuKS@9^*sJb%YA_QkK%;)#BtP>Uzv}eoZqLi z66)qNhbByq$gz-lyad`S z!eYd=3`Ayj=l!}?3etx@m`M&Fg2A`P>ZmDQ0A zBZs+=l?Jc)R|}Pgme%%TpG#KCN-(N^bg?w_`Qm#Bh%c8}iE^+ep zX7^7C(#Zjf@85i2SWCR@dD;xoDu*E44D1{l+JyY9*U#$!H=+J5JGyjC=x$*LwC-l)-Q-dfge=}bKZ!cgvjHIgqhGPD2gM*B`gttOsQ~3Vy`IH1Rd?EPw{I{p|c7IR3pY?(iU+ zr6*^FkEK(jr<%D$t!x`+Nn{1()+VVOhIEmcJh^n`w6dtlL`4#(PyD~4oQ|i^wYYwy zO>1}D36-K&zX2;4Q!85POMo8+7|OKD;P%CQ ztfrdy!jQKr_cC>tk#l47rSn2(V_Mh7t;Zp~UEK3@df*ZB{e0N{V_N0K<(}wgcEoOV z@y|6X<^kqi>o6Bu+ z%J0$qExCKKTn~SF=QUg%|KM?CF0EAsHH+nrZN6=Qarf-AsYTDgFl1o={riXb~>4OH?DnaqQ21w^Vxb|1*VW~ zbEID2x6~rYDr2WtAn1%FYmqA^1W^3izhr&i8+@AsZLXDO?a2K+5)p^ZTjAb)vBZD+ zrXxv>15C}LF!L^^H~1hszp=3_wm3dL=!Jh?`KXBT;!|9A)U!SgnV>S{-&oOrkupn1 zoeux4_B>EW>}!51X5bNDaI>&$yl78uL6yUKo+|RRPVvQkyd%$)5}i{bnIiUN4{GfxzT~?F ze?RWO-c z2yk5FlNyo!GfHrfTVrKuY?-hs?=xy^vf`uuQSM6j-S-(oNce*gbQ$d8du8l4$nef| z?)zQKLxsLd>oc@j!lyQ8jnE6F&&MjXLiOhLMe7pCAt5grt6W(IZV^yc?aQ_&Yi@EX zj7)4ftQ@J|39e`CvsxUt*&q-;6XQNOTIoo2JsDI;H@TjYLBQieD%!zHtGCLsu0&<% zbhw77=R%TDWWmD1_aCg`es5c(ZV>$XzI|H^OpQQM8~=?)5A|T$5RY5xS>p}7l$kOp z9L@Xm(r4^wAIT!chViuca!~N_LgzmH=ow#zq((dydCL*yr;62PhFRw5?3W|Xu|vG; ziT!YX!<7a%eZJ*5Rym=%;s^}0ebGEl-W#}kSmWjKdcXu4CxfcB4AtD+zeJ1QJli?y z-S8dD7rmQDv2ur_-+pu9d90RFWYRX6GjD0J(6xG|l%5tg^aJ;&NuN}UHXHj|`1!0v zz+c3KET1*sSxS_kB_BD>0<9_~INEug7b-i3vWJF*1B$G`sL}13ii@=*LZ@F^{CKP_ zFKp9~n|-3jf|xR=X8bI8tPO(5%7>`Y?HCJv3=>c~R6OCZC7f=I=KM#c;!zrDo+{rz zqIh1=mS6lQ)XUDK--Yud&SJW4*4%x>L4O7$^_}-k6x1T za?j+SRB9Aa&A>Rhf;cv)^z!0oeRl$%@)eBg=XF|s{v!KlI@p7DXd^yo)WI3BUbk1b zsMH4}JUCop=2pZz!SXafhl;2}^XsM8-Pp(WU&Zj-U!774+#2jFhu7R-iLiSEilCSb z{c?OMd}%&cBdaqhp@D%cGTjIp3NOaV!>qdHQ){hrvVV6F5T7DDbbFXgb303Zce9IK zam%>oL5yUCJvi$FHLc!{$hboWArb%!77#@mjNT=bO(`@VnqC95a376ZMw_JbxyGp2 zh)t#<)QmbyzuYZ76lJTn>_L2R7zf#H_h|9*4yz$<^jpQ*)4fkj@mtmLIz!!4gU9Cu z@9O&M&jbQeS7o_NWaOwDc@qxT%C1kOZ?J1O#qDSk5pZn;{a8zz)ndj{r#uiBIOD~vXQh3ZKcoTAn7RJqQM`K2|z`>p_F()OdZiJ z`vVBczuxxMZn?=je1qfh0*Te}LL@ep?s`@vLj%3+X)x=2X9qS$nccsEp(-+Wi5{;- zqzY+wEV07MJkcqI;E}V~Uk2vJt1b2vN{>AH_ohkW#Uo$FE#xM&rB)wuLmbE^XC{Vq z!Y0}{&*P;nILUD)MDn&6Y|fp>EiZ-I-<01>IS}C;odZ;f!?-S=n?;{p!t-X6msDou7CZ*Y`}+?U;l07w~)hW%S~sR)m-=Q zKKQS`_#3I5_}f!WHCQq>RkKU@p2E3%Wvo*X4n1MeNv%oIUyxDqn83ubBfni%eRR7x z?Ov1!H~!k20d9rw<=*5BpHgQT1>FMyJ-kfGLUgk36P+ohsnL*HR&;3jaoIRB?$Znnt1#H#?~C-ulEM={Kp%wPO-yzEeH<6+-RvF7 zKZ`ZEf+v(A0?+4Z^?NCCF)a&R5&{E)fB^(w( zXJ!7p{6hv0jF|R{L6XZ{P)P45_)=n<*M5(MU{PP}^hDLoeeIQyn>W8gXEYoLH*W0K zmE5w)Y!Z-~Nn8aiB;e0ONDI6=LE}R-O&sp&28xR4?<^b+N~n%@6wCJ@qF`f3K&(5L z@i*K52>Rx9ruULJ9`~%Nl|K1P_?v%#_#fKI(2XkOO@A$=L4XBa<90W<=mt?U#O=|> z(CqO^gHaOEXC04AM(v{|`GvUx@3W@}?j#l&x{+-m57m%7G`= zF!|A8#X*OSC2TR)_C{XQ}d-c;(iw76hDeyf0pGG2%_W?yK?UElGJNZekK1k3ZC z@Gmv!FqZbM))%iWYRp~*a$nyG&$sjWDqt>sy(9!wqoFKN|GC5;kc)IdS00ZUQE4w{ zK`E4IK+YK0i%cQ2Cr=9zyHTU>C`va_ z7158-2Ro43TF!C33Ds_xh8#J$LmUpXs|D57*GOnFFzT{>P|sH2+TDey;!ygOba5%~ zr((5d6QZ5gr&C^yF1IK|L_+epDq1&q7ZB#ByWN9B8%i-2t{iHN;sUdIAi~^H;~9K` zhX#SZEl};O=5Sc-W&s`@<^z)-TfoDyy%N0kv3T<;tWP{j=DU-AXTnf_e{D7(F4t)y zFpn}aMWYJxZd(9lO$r`6Nscw%z46r`{o_FXG4OxPx?j*6%)Z|S#}w`F;~`-JUTVZk z)8gl|SsaJ&;kt@a3if3()A8ZDP%_N3|-zW%_4xL*?)6}M_EUe@n!L$H$1`X1M~l%b`pM$6c$Hy) z6mBG;6@tRqe1W&+`CE@#ol$J{SsAu!^*Ptu&}j~lskGd~VQGcU_8zVtJH~6@06E3# z6PV^Ic(0{?vL_^`MhyJ62_DWe9Jdee zkh@iV;|(&kYD28*h4{GchFym}hw5*854uZd7uH}Qa7>q8xf8p{QNQn$?cU(owsCqM zwC#pSz{Ui#`gGr)R<{nQO|*CW+E_QFx#yVXxv z@d#>-bmVP@;TNf|Pzz%YiiAFoZ(1)?*qavX9hifDbG%aK+-6d+VJDQtp2hl(3j_lE z`etpEd^-gbO^BRWX80>-6_LV6hl2JfToLpFAv?Xx&%u&Yv=!#+==wRtn}?^=Pz4H# zKdW|1K65x;uxBHlN2U8#DH=2Bx%TmLR6xy8rG5XAl@=^bXKby^l3n_AH-rep$H#P}zT_%G4|7e$u@OhUkz1oCH~;D3*^ zaKJ)S^IUHhI;`!Sgu;w&hvZxI(BR?2`T_a2jk7(H;Qf(N*36P)S2U8130A%0OyI(S z`$*TznVN@6vYZkz3Jx3rnISz`!#NL%=ANb|4)_442in-B4aHM2X6#mcOVHinYLJthC`?Eyu|q(RS?X=1U+BAt}r)U z?*MCmxPs^5=A>G18Qkn`xzJ*zKNFnY?P;pP^#m6^-~#FtWTwV1u;6qwqCS$|p&5M5 zPabvZlOF(%f*N~4_zjbrhzKj4tFF(tLJ7fjXhc+miP=!C#*?Hu@B9D%XrwcZi0p{Ox84oF))3658bd+=y9M(Sn_@F7$5C^?8 zqg4Z%!q&ahl$om+w)fyThjX${=#=}d+75NeF}7uUXKzP$EiVdebK*tDY@+F&S~6v2 z)$;22oRFR!aoBSS4$=stw4y7;BfD&W2O68~M9Cjgy7p84Kn|@af5a_o=kJf@bM@U9 zQ?}n5(XW-Pw5Xy^*24OxcjxALA#TMxvaPbzmsJ>CjFQVZ#OwyX_Wbe-%6`LBIH4Y= z#`xfHQB0~7lb#rM9n-b@Ybr z9oRjm7GE!iqb_2*76*37Wz|Nc-76$wm;Yxw|5T8myR+_8ZD+qSxS$%vvKj)Y4kY~Po?HA28i#l8Hi{`^+Fux&@ zezGsG{F;*DOJ5Mx#cwRDdk~Ds_*m1__;9XcGT#(b`M%k<+-QGB(=uu3S3tYmT_I)> z!DX6j3)Q&%tvfZ0GZXrWx)5WA3P^JPh9TevGPr{Rs*EoN62yNW%V~p(LLdB8oVwWm zeQh#bOz7^uGQ8}so#=&w;zO-^-n~4mj5MxnZ#+w`t75-Ag9p4&IaWY^-b0p%kMQ$+ z#k#m{sFHPBiQ;l1EtSU0&e>4b{e?UxXa!`|+hdNlfWyU?Gj(+)5t05aAQ8LJ?LLph zO=+t%LrlIlX5#c}k4828=PXJPK3jZ+RJrssMw4JyS62(hR%kf5xO&9(bX zxTvu7U!C9+n?V-|*IU^Et>SL178G}nw^HD@gpHn!?so&L5SsJi=XFp5LjmR`20oBJfIwwsOg;opDtKf6T$ESVaT zhf4Cl5Yj0Dg~lqVOel9SUx+F~wB3erzoAC~C@~@O>mb(tSj_5dNRFGk8LJ^QoQWa+@(yFg7EHD)wK1 zrS+MSNb0=rHDSHOPqs?G@c+r5y1_!9JQO%E@{xQ($*svD1_#R@9I10eQ6`kZ41f6j zn;G5!+;6+&mQ2jDlgzew*5WTXnvGuxIF$%+l4hA!s;0n{;yS&^41Rb0!nI_rKO@HhT_xd`EsPLKQ}0<#b_a& zf=6iLc$;I9d>+DCcG*O!A_Zt6*`1dbVBu|z>q@G=!Y!rSuC|IkIBX*xJT3{0XxAx~ z5MVbtcm0<1gol@n6m6{i5n3Q20O`yfvT;bE<3cV-C2Y;2)e-7eGi!~}^Mwe*iM-Hw zTQKhoZ2I%(!-HA24=N{iM$2oc7sY!)E1K;>(JPS|_m@w**CyR71K-t?)f!IBUS4{f zF!^8Y!ZF|FZG;(8?7x}WJv1!|^!iKjd^g-@+;39)K6vw$XW%(8ImXB4{AS=3TXnL` zSO-kIDcBW0Rd+UFwfpjTq7&8wmogK^b-o7Mb;=zjR};vd!aA#&S5L%+i3Ta*&|s-63g@!~*kh+R zG@8Td{QjoDc(1P)n~kc{S)>L-UO~a;L*_oR+&n%!_6$wqH-pq(J1h>9e+(ka3Cwm8 z#~X?@yCIlXWvwLR4Z7tP0mngNAFR9zTyEjeG|mUiUd% zV$$#m0*lo;`gxrhW-VZwa_{yPDk|F$C(uxzN*^Td9!*-u^d@k zb~ihOe8NLxixOpXRuu6u-Uv_^^#LLz9iF@)GUDbiyq|#urVhH6#;iQ%x2ju(Io<}e_h{I$V)-6nditg5W=4QX9fn#jV|NxeXUun=D<;n>RF84ff_kN z;x8Mr-m|L~x}(}I(ToF}XFQ4hI0rYJy?r8^b&21Id1YX#BEZ()?U6v>Q(?5;oL2yO zs2zDi?KYJUDi&|x8ME&3J?ht^I429W5FP1_A3Ct=;t$b&@qpgx+c|Tn`Gs-L3ftR~ z{hX?nPi<1BD#ti_rj-4^b66mu?F@sC_CD(ir-1w$WDUsW;)1sTVUMo$anuOx&-=Vn zfb;c^yqWS4AsL8xzHXryV06x6-s7(bQgWm4%!W~hkSsIq2)Xo?`ueDs z9W|<(hnv0#r>SU*Wnqa{#8gyx9Ged>E({n&JIwP+RdRI!slJRB4==lm1QkH^YRs@s65S1h{UdNNRIR?&3L$OcN9sp z1oga0$LjDv?~E6l-id!()}C_YQ?O7U%0+`+U{qP`gbCl34ei}8!A1p1MMdkq2}YcS zD%g9gH5DN@uOnx71`ibJq~kcYj~&{MHwpZ@BfrOcnu5ibO4oFch(K^Bsta|1B}13Qndv((gEA^NjOm@1Ik zF5Ru5@Dtb1l$eNv@1Ie}f2UXS;)+~2CbYPzXn*}>`2Pki-K0N-Ptrhy>p$QX;5!6T z!C+)%Pj}J-nZ2~oMPM{bb%EXcMA+AE9WNbZk#&b3CFr9xaWSM5w+$3jabkarWP%@b zYJ`WRpkz-;*@;aQwW9mlAy_f5^9gIz7&JZ4AB=;m1kZ$| ze?U*EqANHey!+s5;bz+xd=+U(hndiZjf358|1?`lV=Bqp}=zjbZZ<8Ve*o9 zbs(a{_6s8Ld<$robQcyVvBqqSBk{Y*Q3JEZGX>RZT}vh$yZG(+-jKxa-b3*{xg!H* zzI|G;uwT|JRhl1;OOnqfoR1Md) zlynZ=-3;9+f^@*Q*Nn2S1EB-5;Ghr_VH<1yd3vv2U8LSL4ndflzEE6foEm+-03x#mJ z4R^r?Wlj?Vn*Anz@>h!Ky81I0MJL%j|K*qeqNxW&3ZZ*uZI1fyAAE~MGctV0+t~<# zUGeT>sHPvD`$Z2;Je0%-1AA^^-;S@OOGezwZs^g`gzKI+T-PBfCyiln3 z`>7)PaF~xsUaL8m~?w@@%v>+oRe@Z*9@A z?G}Bm1@%N-U9t0!@q7tzz}bBn&$osn${nR(n&gnt1b$sDX?pxR3wVMMn|Xd^cq;G2 zi$oG9k@o@Bgm}knG>u4HU<53QjHFViqADw2@}*$ZDH-m;%S(>SA__Oc4R4!;R?gQg zH(Y#|Uhryajc%odCtL7lt}R>Z;u;z~#DgV|_Z$6v~~YUP18ZK*z`E&le+;PeNQonhQ40Epi{ySP5S}@2sV~Z+ivSb-hzCY5qhT$k(s!{iW)bjqI=m;}{K)yJ#du zZXS&kJpXoa?QrnjEVBg}Y>n?4La6L<7P~s6kFm4cLCI;MeT9|%h75H|<4nGD1(J*} z)?mO(M{8a&!o%fk=H6~yzlp2$&K=un`5qZUj=zOm83S_Nrix)e z=>D4lt@(QQhUm(%=vl>))i&e6>X@OfUX&W5rND*D#IJEd+Qyu!x+3ahi`ZP`cUPPN zA-fw1!I6H{5X=(j%_&=cKdpB-dX{(Ds#H;}Ih^7@9d;~hyF0&tJ&?Vi%oIqBP&Ljc z8a(YXvp`?2*DngQ18$p+E*y@gHPJMO9x#aU{W72Ux_U;SJR{S~$79W9ga^;#3%1F8 z{Uf9W@=tcHOy9i*XwSgZjcmw1IEL32>&{qW5D*kOjQSjTrT zTU?en(O#F8wQ)A~*>~?u*@}m!A16*uQqll2oV2@Y)~E5=d@dtTUczD+1a?7)qz3{< zBp;eX2v$Spo?cN>R=Ov#4cxUnf;<$BjvQg9S~1O4&`rjQp=sB7pjhxI4;wh3M+6)a78+ zdBP|w*uIBBxyv+^97o4!h)K@Z!6NX{pkZV9^}Rt|J6Mlwj37V&J9*Yx_a*TnuI+7v zGtpdE4ZJu)pt_Ykcx)hLD%j{BgnKW3!qhqPXyrnyYSq>0ZxP>3WtME)dOBl#Bx8oJ&wiH~K9r*l9FhpE1$$>#@f$s;ggu>rt_L^7W9P%# zm&l()jWLa=K`I$RO%XvCvs3k#81V7*R^g8i!+T`jr)w)V!8VlUgbO=&;S5+`|$81BOCb1VHku=1J-)SD{ynO z&N%S;mz1c4`C-GxmbLYK&2;`9m_E-S#h21f&*E}&yC)hcK}KfZ3?7mD4VUzxMcLd~ z8VKFo%>1CgX)uEg?hkxaW345mR^go=Q-q4q2Ynd0; z`V$CPAH{O^u;Xw5UVEc#nDjv+f;0;C8ZrUB^`H+QWX*dxtVK$z&q^SM%uX5z91J8! z2U#*!;@gT=DH)mF-`&**uiG-aJ#QE$W}K=}2Y_EVy>_-x z?Kcm^8TDGQB9iLVxIEAIAiSRDDc^{x19Kd9`FtpT4U|2@DTdnT3#>9-zWm{#Kuvun z%_!UQ%lCPBMmdei2@P%oQ4l2h?q09SzYj7SGBOv3hdWanSA#h+eP{W1H&GpoU&<3M z2h{y=zcsxULTL0?phoGN>O=hvb}?!+Xzq!sxYMp2OugaR0gx?F5IS)Zn5x zy*>)$Ov>FyGYCZX_a;mhnhn9GyLx`rmu*A>iQjW?*lA=;0x`+{7nahpYwaCf8Wr~Q zP8X=SO!c;NpA0?N6pd7^Sp# zuK}##wY(1^5L#A#*i1(CcQjVvg5dq7dCar^s5B|*PrVOhnCjO>W z=~}fHQMF(@pfU2;-e@TCz4BZLRe{oj!4&?z5F)v{0~O2 z0cbUvs3V-Bd;0~(W?|c+Ne4!@qrx>Fx2HiEgO^=IHN$c3t^juxG2Arh)h~sGyh*jz z6!i(Qb;9>LD`P$QW!K~;I24Hw`aDh$B}eU16ER9}$35Gv0t0Ld2c+B!#gUyo_OZO0 z9O8cz`^rA@m`rPTUJuH(Wk?Ox9`Ov0m3r1eo=w!dp@Xm>Ru5__Jci0ouS?4qWxj?| ztkG6}$kIfol>JZw=e6v=we?)z0M%? z&PTZQ#G!Wh%q%QI`l8Z5jM=qOu(C=ORLdR4X*3wJKG>GtB@*CcN6zYfR_}M(TeGci z7&zgDhd)Av-@~Nbo6&%`hgjZII;nc;3M8{#Xhu%vvI7(~mBjY=IRAzc2nw1R5OtcIjuSQ;KJCq!CIxXkiE~zkyl7ol03p??aL^N^O2>FSTlgDX67J`NdQL*r@W=_;3( zgMM~HHw;0h9!ri`u~t?w^b&Z@`HM6M3llg(aQYYRgsDEAXZan=mIFCb21k>43)_u1o4$?xv}AeI-(< z*k-{XB%cebguSy?qE4(d^t=fB9s4eOyxFK(A>KS(XtbpZCG7QM@Eto1qD!s$6vRc` zXH=k%GvKG8A<+H_?%Ju53H(Le0&Dp55v!ucZQPRNvVo1n%&MNhpxa4l_>LjGVQl|x za9Bv^__OYuTZ{(dlPyhS>yr9B(=j&B#+5pY?SX7~3eQ_fbwaCS`g+4nh5mtojwJ=^ z51Y(i3~X)5w$|mFZ%&rP-tUO!qy3~~$PFHaPe@AeNp}LvstjihMt@5i>2}hTG%epo zj^v6f*w5S#)?MK%6!Ed+AD&!5K(9b0+k=V-KA6JBit zHNRaEj#d~o%|#&xJ54PA$JS&2yw0p`d1w zjTx+tq}ftJGnK;&guStSYYo_lIO}>`s?|DOb++AFpTqhohJ_tsmo9|&GA+>G5Lo5l zgV;V6gzR2Uke!W26uW=6M_ord;&aBXfy9S%0GAyuw+eY&;sx9>a2Z~0@ZR2iIf0gF zEN@$eBM4!N`z#1*vwk671k}N=<+N}Q4LA}U9BAahDOE~NUp8mEaH$uzHh68G!3Cpb z45Juw+}8dO;zWO?IKK39q}&V$Kc+qV2i(I`hG~5R8~UMke$E(J5WHe%kW)&o{SZOS z9@4W#Fuz=VL>h#hA*LJBnaBB-w<>m%39*iKv4hwwjdHUFStiRms zLQq+GX7A$iF5=+1VC;aNeyM)oyr(-0Oz<5C1oIk3uswH3Jy1NqH}cL0Ta^|8KQ}h< z70!5#`3mO9{Ac1aJ>+hz>z9o?c9XLAvoI9ocQw6Y?#u}ls^D8uipN+5Hk?m|!eP7H zJASJp{bOTqiM3f6#I!!qVCzOj9Q>J@|I}pZcOu@Rmd9OH1vu@k`m@D)KRRE3W1yqM zqEXNn>${d)??~B}#sKsMvSK&^6&1L*_Z}H|PT5rzw5bH3kX>ofq;udo84A$T!XWoH zBqcF*Eb4~CDc-ld zy9b=mFww)tN&>Ttal1SAK7n)N?d8WqPOn<8uRmCY*4H2R+gRN?opWTS#+!|_85bL1 zc4XnO2(Ut;f+EHGpT3AbcXX}(Zei(%Rsf3jh2P^_$S>-SX;~MYSUh^x$^IDvl(?b+ zwah|zIH{2GZerEcJgd2;c5QMT#O;cULwu*qA!8H~%q?iGkGBjkL3JBlUo`@kc#4aB zM$_QCEj^_JK%{Tu!WJ{>E?pHV6vG01Fs40g)YCbC zYrFfY+IqG@KsV#ZHt7cw1B6elyjW<}R24T~vX0a_i4EHYEqhspGVIgEruplR>dx}g z|B2Z$grV6$V`PFm8kIzBtXLfjxddX73%Yw``g&r*K;ZTIIM#9ahYz6c^~ ziguw9$)xvW9kp@htmig=gG~` zrHW+LcBuDs$J`qPaDq_WR*VnFTJ|*dD((=9lYsssC<*^h3ytPGNZuYOrlY7b(J{a9 zS`Pyj*#LC%R_9$2Y0eP&*N9ORDPZjO*LKDbbF{jC4yLxzVpv?LbtI|*l_E(r1I#!RUch1@-;LDX<1lK$nzf8RDl5Md0ylH2D1R6Gx67- z9xM=vm)pX|c9^&qD7J0wU`TMV9=bWG^};6=&IpC!Se4LkZF?XI7n%^|w5rje9kAon zcq(=!-dy%y$R=}=ycNbB%NFe)8tS^edA)I5ddTCj-l|MnIHypK^|pOz0)Nys&U%Ku z7HOd>nrsLZ;Iwq67~c^FFV>P^9|ieeYw?zp6nPaU@lr3O(UK0{r~Ba-#x|2wp7#Ta z;n_DV(Vs1CPa2XwYAQreubV?~cMg8mSkW+Q3Mkk|J$%|!%aP9I`Scj0m?LphW^Z4C zv$RDmk4uqLh`3j;2nO0_`@e4&Gbl5_as4uIzEaA#dPH-o4Xe21+_pmP-}Arjt=3s1mgeT0fg1V>7V zlqLzuN~%{|)$tV+>4gHF(Felcsrxn_A~;B29X^DHB8VI1)fP`Sgn?IyU3CFKV)reJl4b;uRVE={QZ08*fTa}_KS=1FxK*L0!%=Z|J-x~wk>Se#NROkuq!!n|Y zW^ZksHha9?xr0T4BOWK*=NcEULq=lys$i9SwDqT6>vJ1w-1ftDysftY6gD`aS(jRGpl>|^@Ec(%@V#Jn#f^uo zGW9LJLnF!~<}TRz=Ws;i|K1I6>QnOFhOB$A>tRpI-U3!l@wCO^PrJ@*B4Nbs(HFO* zr`Iu`6}?>KkCDOCyLDx#_Elnx=^O>Irm8@`!;PFW}vCF1|PZX1l=c=vK;$ z*UVROYf2$+qoxBYw&(Mr=PQ}GGR)fDPn?J?o-HLyZo5FIpMHxzIW-l?)?7kffVlTA zf-vYS2@=Ib3M5Jk2E;o+MeU6LC-eRpVh_GET}*+#5`2PUcCmq>p}F&m?iJZf|6C3~ zmdxj7saLkX)Pm!;=ti6=Z==s)tI{;rSTsmEWC$^i0#pd3IG=knNRog|xV_^_&eVO@ z=8iPiX@}pnqumMKcz1__UXv=Ls)p^&4POvDtPkS$t(giniC^Sy<5^GmW=>H9?jPR5 zjHe{clU${9v}ns(2C`9_r=vjX_d@_0o(J*y%4sEhn()9*t@_RObwird_aZ4yn#%P})AF1NU?g#37h zwT9eoxfjKn-?yWJs)`x7m^DMxS8$&Tj-vlNhKe>M{-S6pd3KihdN({gWg z?WYRNor;Hr4&telai=DuPCGh8Lw+3Wu&Cs@YkeZCo!{4Bajz}iI_T`@_N4aaeqk-u zd!TE#J*Y`0U*AC@5uK5-O-`N8=b+!7oP6&@tB*bgBxIt^0DgRH`io0LtFZg>o=e{7 z2vxW*CE+5kVPVVjQ<*qB&Zt;xfELW_PouN;vyUxGz9aA7|4Dkl-%U^Q_n5~{M(V?5Wl6G^&&C`7hRbxGm1avUkS?Bz&$DIo<1Tbz5ZSo{)adZ(r zw!m4O4+ogB{uNmmfos2hk(C=QOv8s7BYC?~5(^>q)>o3O`Je|QZ9a;2Ca*pc{&BDkwwa#*8to#G`! zi<6tf;?Z!o9w$PREX!&>OX%@wE6lVgp6o1z5BX1$mxR7`I_js473t`mgl3+dd6Bxg z**yQ6l)LIgfV3}=(TV{9eDBMMSLtIInb&v5f0S>RHy8T`UP9m48E%{g#>KzfJEExN zuDSx_b$nIi{XgN977ZFeqIrhgQyH$ytCkr8H`_}&dLKAAArzE1I48~DHbF=JQQn#v z?%ht{a$5!cIR8D#PBWAvEXsUd3g^=0XSjKKT&A|xsK5l^J%fh<;SYvIZNl#`Q)`XB z?;P@Y!1FVKOUI%%_9?Wm0v7F_h5)q%*3_ZuCItE^66ErWD-9(YM| zY_KP_0@LW7UQwlkIxPXiotdPuA$2E+O4cSefIh~U^rEQ*| zdL#X(BA_~S%hDce9RvpnAao{VLIrF#cpTbRA1*=h^3LC0oSyua=nEK^xo}#+uEj#w zW!$uL$AI!R>Kgo-ER{8xLG)%d6N)4e4g~m?55OVHgQn1kllyJ%5{-s39Z0?vY`dxt z8ns@Wt|xayx=pT~-+C?rmhtcs_a;m0&{o?{%-la>rR5}j`xZ(p2#YzGjW!-Zd?oZQ z3LkuwFDxda4y{$kbT9bv>=93wQ}ftEN<`f@Kn3Ez*2|wJgDk@+yE3flwUre^wbkO> zT3;`0bRv~eSWt?%gJ0bbr1QtXWVonc6M1i@^}PbegC-D^v2lFvJNiHSV+CISq$_Cz zKb={{DHNs#Pv#Ik6l1CD+Frr@`m+dvOXVxTwNI)eCt@~$9e(^?pOfZ|{_E1HHW-8- zRUeM-56Jkvd4mp~>WM}^$?O#5luG~`m} zFec}(r8R4&33~zQp@B}Lope*uq=<3%uZH>&?8xfio_NgSNh7ogJi#FI>ko(QMlnMCq_snaBCMX^! zibTS1VvaiQXkj$$u%muF-izzgyEwmy9^!ILbkai!+hxHiw{9i35b`u}(9}aQKH>~( zG2Py3e`6dGB)`&$W~BV%ltmOlrWQXsHjoZx8akI|qZ_72u~8!` z?tyC;ognq#b6g7pcTQlGUORz#nX*9cv z8*XPSe#~u26+3mV#^!6kgB8!Q)a|ZuUNM_%F`{@Um*UI%Ug+)b?LlW7`rtD6u9K+5 z@X9IE4nJP-d34gZaN+Cc@Vfckl#sM0W&|SeHVMBK;%#GSqL12hG{f7tFA_?He(lvU zs;U~-X*LH4eTSloC8tEcijWypiWTJd&evhgap0@!%l zo30d$W7Z~}_THq{KC-wJBRl@3t09oTC*tm&gQi<$Nw-jKLD!81**NgMcYWDyMcFu4 z9k9=Y)Df9&)&y0XPpA~U491G+w73G>KU46wMSuY8clHK~#5g3xvlu1g8%~C3!Ee6$ zdMu({Srg?7G)&cscdBB2lxs)Av*Rt=49Jz*A3fqyQ~jsRz?I_SC3AN1JA*}%-I-!< z(19l*MT@+7bCvOK#{+0Kj}M;6vQYlihe0`?u}uU872cerDhuW({Jk-=Y2+QV&b;(} zmo=w=jU4)~&G{|x3%3X9a7yW<87oeFBQ^N=_V>( zD*5%nj4EBF+?;}q2`}osVWP%c&#c$t%f0vX-%U0)R$oL78Qx6Q+JqAA{3@P}{+bpU zN3_lGNr8k9GXCX;`5xsXQ94+=fDwn#nWU@f22{Iir{zD|qOWw!9s}pbS7LGUI?T+E z{CP99>GM~S_ihr=VTOl%ja|cH;JNy-l$Wf5yD0d2@s0go0g++VXs*j${=>=hJ~FB;@308b1=YK z$jZj2#Ug(KWtL?6MiG@TZF3V6i%EC%P^tY zWIw&Tj%%~Jl(m)eRK8Wwbl!3{N*R?nXaiu9a0Lnow5yd|NU8){5D}x$ zaXAb0L06EEfkj0N&_m~^**}1UzenSnB?P*3aeS(QtGz966$qFd>ym2u1Ipkc`(|N3 z;f`0F!#JzYn|;NeHJ`mZV-w449?is@@)2r;$DUFxrTXq8Z$(>3{_kbPfm|B+ef-K+$c$|C_jU9)v&rEI0Ut{yazSMbFFZ%q4A@OYoHOy*jMu2>-Mtj*l4 z($%II_O%>xv*eu|o}OQHjJ8Fxs1r9>DFa8c-?g688&YJmIQC*T3!C^UZmlmj@!TH@ z2{htBrytBrWbVqCFP4U7@wIqe0ZZnMsbR|Fv0XYoLOp&dUJ~m ztqBJ8Z4dT13}`w!=;)ZzgV?Ake0fH@x+l_>Y;oU{qd49u_KCU3+Q-ltmAS|gDt`miz0%`OoIHi1?(sSLv58-r zR2tYSkx?y%57U~)EFRW-dp^JP2HfcP(C9OD5S&C}EG$&t6IdI+xE%{4TUoINAs>?k z?**hDjY(AD81$c3hRS6FE16}HHG(#=8@!){oPd=AYP6Y~3j1r0$LAr}VeM9k7T8wJ zf+jP0!d{xqRnX+3^HHd(wrkgL$+_J(?1O@@)b`wO?aZur7BnowS%g%3yPXm{uau1> zsO;Ia7aE~SX9F5ZRZ z(VsU0SaGjc7DZEDCSrZSd(TkK+}7daqbsYQ0vhfv+HQE~7OPI49M1&c_hP<$A;%H{ zW?rmUiAkh?Uos%Ns--guq+${iHF=!3NUF{CP-mW6su%Q3R9x={i6|*^GIob-Y9_r* z^N>ELHNKL7)pkB2btC4g9;niSc=MZ#|KJRLKKFLKEa3siY1Xd&WQ zEF0pF!NZ_PM!_nRNx?fSaU_Sc@E*;SAqPMpWmv5j-iRR3(@HWnv zm;pQa*m%;|f4Ec&g?&_mP!E2>>2L@y$442$^$%1(*YNtFNuu6wMkmUFg$QMZKt9Xx z&Az`?B$>LNF7uIw*cZitp1^qu0iJ3UfA$wA~@jA%knb5ZOQkwGV!E-4HXsbTd!$2Mr;! zn`Fh}>4%Ei^;A;xtQi?60E|e@6uUEnB)^-Ck+bsP6|HH`$g(#KE8(g)HyOs`f~kcq zHQaW$EG3Nrq}u3cW5BVa4rM-o+<&JgqofMr?a#%T^5~&fkMlVe&#pFfd$jV9UfU!O z;s?$1E^5J(Q}ooVf81tI2$mo0*4L5k+kE`Y1)?s51!HU)vJ%%T9@)AV-5=BA;jo_> z+E9O3&jJ$@_vKIssXolEe7UjR{PihS5r9oU3E1P)4M^=Rx3&gREJr2J8croqonDoP zj4pc`+r!; zS3=#x8*7S=6=CMio{_iNOCfI`DlE_9k8ZDm^3^$;xlP$*rHjI63PQM~Wqg_%c-akp z{nH+p;s1ZK$l87lR z@yPVL7OZ?}uR{ZY5bf*~tN};39X5mFG;zFLP~pz7t`ATE;4O59cixX^H~cODfbi3K z@AAj^=$Nq0o6;oC7@JmFQOHId^sJ`^%61rMrX+50r|a}Dz~xzoz^69%=Wwp%2}@mc z>j{nu{@kUAz?VGb=5s6m)5FxSpZgo#I zzIE}$>1dI@l=bTB`#SdQz};w1jZs)c#>Rmu@o9PJ`2>`*j!CHHdh9dWqSuSMTK2|J zr#X75UQVXu(S%@Fh7{@c>VZiE04;7!A8yQNTL|LDQYhfI|KpWqs1FkP4e&<^`Cd!l zn8~J&QI}O+ixLZUD_C)_Z#@g2_7>c*?iY_?=}r!*>+{px&hs%m#HCSy#GLmjhgH}n zOmncEVlS&Jaf*gbZNI4-rmDP&(C^=kO|5v}Sbz9B?9TyaT*&CvuH z&by|jp#>x(MaAgdxEK;Cv>aRx*mU(_oO>eXyOaVvTCY!?)*;c0F&ePWl9Bd@bHTc3 zQ`@Wtx+nq(v}5au?C<|h=Al+U26JZZ>wLe9ft6+C0gP0#P`-DR=6dAzR97rOu&1`= zvmtQm`S#O{q4o1NTvByRIg2Nt?3(NB-quMlDankC7qiz>36Bcf#h5Y<9YOGp&C6RW zUHJv5YJ33(dOh~JT(IsbCP!?Jm&fop9|Ro91G_)m8ZBS90BRd>jEqTE|5v*!-|toI zT#uK1PKQ~k3ltxiYd`oIF+^O1&JvFh?izlpijFO9OBY8#;1sk*XxO2WpV1{P^BCUO?fVeuCQ9Z)YYxpkypEzuy;*DU$lb6x*z1&>urWtURo_HvpN%2@6 zZoSdP%gzGP@&8ykhqKt9O=2^7dA18U5A4au9k1nMF4`4uD z7K#91`=JQA|Mv#P%K0!O;l`GD=$ToW_#L}!foPfaTf%PZ#Q^^bZxgqwrC%qDpYg8_ zXGBDFUmRz97$jwe+9x(&GNm^83Ur5H)jMmHnN z)V|J|#2dLq4R9+cdFI;}8+R^^StkAIGP!pt>LfHc<8<9lDaC*<(R5#Fv6CdpAr(Zb z5HZ#P=9%^F4|=Px-xqQx4x3EpwrcXDM$u&1ypO^N)nVvdHkcay02(Bh%`9rM~k%}2D8sh zaNArYi?Hgb3Xf+OiaC@VZPJadBOse>!( z%cFQRb02fzfDNl91H&msE);|Xst*RHq3^&#!wzyncVO8h+Tag0i=hV7JBBu0VjZ=^ zx>NYrdCYndf&7%cCOPCWtWAJ@gyPPcnR&-Jz;vEnIe{oLl2X^ycKe|}s9BcDh;K6| zxC)bF(c!5+ENqb0ipcE*<*~qR{#~i-9~?HeHLE;5z3wQe^VqzPMXa|Mme-I zyjDqxMQS&)BmJfuym;T}r4lsbzDkRk0$YI$GD?5(o!^Cp2HLSIEBf4-;rv3{&2FeW zCS<`|7yx4PWb8Eg2XHbIp3fK`A5K1Ih6W)YZax{jRcib6N?UdSQXwtKaJAK+$MG_t zVs&ByqUrNIil^tu*o;oChWt%DEUBO%kG*Mab@$!gPcy zq`g%FP;V5(i3D~NGcK+>=zHEU+O-2ti{Q~iRzt%hH#htqG~?wLI7}HI!o5)OxBUMB zw77!4yK-qrA2C9P)Q>Y1PEgRa!;s>{rKR!ZQv{+=ekHX}O^I7=0`d`&e&hLy@+oO6 z7iIC^nE=9@G&(N!O8`f#WXJ3P=12>JM28=WjPy8B24Iw0}(kDixqheO17=#s@nCp-! z<;S6o7BS#hw8ELk1#+GjcG?P47%}uKyEK%HWxA6(g@Rsg2-zuJtQzAPk?KZ(SpI=5 zoGBBv;+Ku*#+7_NFVM_yX*iERy{UX4|G7CC5R0NGD>uT=H{!3X(nM`+I-Imm%wq`? zJtCGJr{T*H@mIj=dvT~qZW=bshpAB{d#ic1Iig=b){EbQJKaKUC=+A5^@9#Gji{rKVtQyaAqeS61uH%R4Yd4)-}k`!T>q)Pt@IulCqx>P8vnV z7V#U_>7nsjx{*PEZIf@V3{wQIW}O~34z-bs)fgdgim%xAOHuEf)uJESH&0gftx~PvB;w+4`al~zU0Vq4Sj7n*F=Aem1~|6ufo#W4NJhrtk`8i z`)aw0Oc@6#>Fcalk?EZ?Ow3C%>?@E|ajnrY#_^6avm^g%1AX{>FA4F=`hv)5#_Fl} zoo2(5u5JBrdt~Ka_4W-d?_sc2^ONbP7PfYGiHe@?SFpk%qo6ll{!Bmz2#wdkGJg2o z_w8bv3!>llK@Y^t@EX5F)-aqlL7H8eyut9i1`53Ee5giqYT>E+0(xP zXWZ%Z)v#VmNddVc+-=;^Qb6r;BW9w+DuxwreaBR<-h6353CB`Il(Dd1fWF|Mb7)Mu z2uPh|PIHh%Ui|k~WR?S5H^MguQ?Sz#>(qoal1$Zxddq-;=uG`Ehk$fw$H*;9H+w#> z5mGNbz|WUh_w1Of4#9IKR*d$jP30DTSShitbxc&+}eX`SZt5pXEVxP`MVh2%t7_@_N8!dGbTM(X0`3mEtP9~#a_ujW)N0}TQYv5AVp|4He;+Zbqw z=Vf6X8;l&@Ce@$izB}xtT@o+8b@2pATuMwoEzRxyNWN_Dv?xy7%wt28ov)m+?zWjq$m68ijmaKmE%)3j7@|l^ykMhc$JGA^*B$xt?pJRKM}k8&Txp7g= z21z^n3whD|vd;?bi(~0>!DC%PfkWfoimT*AhX|_5Qt%M+#P&6{s?NubIY zemZ4S$Q2BU>56znEq5yJjn3$lSf!o&%iN6qB^|V3-r#Qg3QXbIkZ}HC7^+HDx@_Vq zRm;gs6F9zK5~}FqSOI&-9|Eyu71jH~c=JO!Ncf6(w;8ahSR}Z>@74|ZjGXg}52<`h zYXVu00IhsLuf>V?=k@fd1fEBi%wr*7L-*@b8-fEkM!Vh-q*Z&!Xnpc@2m9D)1R@r0 z{$g6Xu)fKRohkp++bLvpx4BCnRGey=yBHjRB*qfY;tdBZYTiCfvmPzgBTOiv2OGS6 z+?%&!0bGE(bsXd>{&65`Hg{ORnwm>cm&<;511w2URW~HL%nbB5#+?+ruI>aK0W&1u zHuYQ2p#P)w$lFu**fvH!3JM*O~ihqAU&y^#xL z$WBWeYK3|y-c#X-F*hGuR^lNj-g9TXIya|rEsR3`74G=BEcaMn=}H+NotF8}wv%R0 z&xKj2?CcjYjPd<0r3@ip^8HhD3fv(rG_5n+IA%nfTO;$#_2it`4qis}Om1v_<%z=d zqiZ%i_3p7}bfJ$*&K>xbYueM3OW_wDijV!{s$H*u^C>~+f943JKp#dLk_oyZt6cvY z_{N{~&suoj;JOK3w046WZwu1@gm*Ss2GjaaEFr-_FU*+To{J?@#OKig!&P|0=~fVr zjO=)!$Jr`;Oa$(SoV7V*dtkI>12&BVqY(b3b|Ey$kx{V^vIRoU;=A5!#|Ge^7#ayh ztqCUV>NMc2FfKy~GT0%ajaKan=q7HPskNnx8sA&5ZSEuAphvPk09vZ>+93?4;?lUD z!md}p=&b)_M-EuQoyg&TnMjwPrPW{ReOjzzJ&095+u2)B;4zDPS35lHJWTL{{>htN@7R1G<5t{c)+vw_;gmZ9j@tq)bmXi`_0^ z#KqNAo`&Eowg;8CS|YKZojinz=JJMQZZix;#GeF1C1pBi67uW2basji3yL85u8eGY zbRzNZ7PB+U1?yP?`T4PMFw2~Q6#y+43x+a5-F#2p(6wz!oF*rSwWnYeV>VbJn?Qx$ zwlC~7D4TVgyX)#zk!xV?lPam(-C_955OfmxKHQymX0~9Q(_E?d1{4#=Te>z8xdK=A z`7GR?z*)JbQHL8|Z@490TL`CD0)R5l-eA*b_6s>H84B#pBc=06mqpcSM?loqOIOwH$%*>>&TJ?GqfBfchB5ZkBbOM%k+h6<`Zi|4_BcKO**kJAf=I z@cy5%M(^9ds_mwJc~pp~iw~yT5Qvq+j5dex4x4yP5dmbo@VR zjJ?%Jj^eMR5&%5+p!GQLIJvn|+emo)gODv*mu%zDI3eW+QJ#h5BKlqaj|e$XH8-e~QEPlnKY@>|JThN2Y8-bQkCd~_6JcKB=bGjT~;)vMUU>GuAQ?Bb7|@b4=f ze+u~XJiS&LuJDvi#zzKr66C`5xlp%@)X?dcNrbwiU6;k0-}B)xF4qx_?&~;stwJDK z&q(FaDQ3}5nhgg3h^5cKhHzD*doQje{rC>Yaey+V+n5R0tMO1mp`X4x5pw?*VYIN# zJMT|NmwmgIqNoEF!E*7_t{Z$^@=jcINb8U`Pfvg?|IM~j%4Pk-eEqP+qMbnbD?TG} zpA@_!MMg8NEy^2;2Ya*H{z9Kw=%hQ4WZ$v#r#E)(%t091v?-j(%3qo^ypbfT!Au7f z?W-gV`)^y3PF7kdXsQAe&L2q8Rjb7;!qaMB0ZX6JQs1UI!elIsWeFh8+4e5`AEr<* z>JP_|3v^1s*2)BpQ0&8VO-~B67cMZvTD5p|%6obR%T3-;sh`T2Gx|cD)F*3ezE6LW zvW^%yvi5hju#Wzw$1{X>dC$Z<8rV)lYSBt3yZa%6a6c9?b!pYI2vZS(7A6K*O3C$6 z7NI*`M_>_|ZPk^zx1wUxt~bX6n)R|*ji~Wz+Zq4&lOlu+r2L|T)+Q2?4M%4{k|Ayj zrjH$rrf|W>OQp@TaFven-$`@odx?J&0E+G-5FKX)PTocL71zT@k$??~{-6eZMu8p$om|7-cYAf~6XjlL3F@BE2;P>?T7;VUQ zzRGYgiK;(EkpFnOIZ!Po5~?r0RD+lstlJTR7~k_l7Drd}tVaGYy4S@X^|GfWe&tLx zl~U98&8}=G?>B<@aUymiWlcmgQFX`0>PW~WPZ?lc!yn3iXcj~xaJ)9sR6*IWYPd)X zGcI19k}8J~GjQl9ka!g6kK2`$*J*W6e<;(neA|K`$1&=xIe^9Vww^(Yg;#yq88stn zNXaXgYi7@U15)qaV6{xR(qV>tZeiYN!lTQR%+BL*fePth9tCjxL+2gQY{fEZE5wy6 z3$atBhTLTXiO~4FwOa|C-d~zwmOIh4UOjBTK&tik zOhenZIA6lzZPzC@{~uZJ7+BfbYzxQf*tTuk=-BDlwrwXJbvjAMwryj@w$-uid~2Wc zo_+5<-_P}9&ZTFLsxhi+ltrn|TL7z8ezyJtglPVYFP2`!MhDZ@0MieFC-PHpVRd~P z;N1-&x0G`tOS?@191m&1|LZyU=dl0D3v9D@g$-vFo46+T4LGvb)u7zE8{3w~8S!IG zR%iV^R=IvWlhtzncI@{H^w{33N2=H6!AB9)^)QEvwg~t%{c{&`VMzN|!4OR)VX(^8 zlCob6JQ-#ljCNqbV9;EJ zqAE{tz~QS(fWX9q`CiX_Nr;x|=hs9OxLKo`Hhp4}^m?`wp%tbsC8|bmbD@ zTyWd%jS+Vj%0DN0&BL!#Klvfz{q4^ zAa_>vMr>ZgSy>1H(K~Fk0NVI%cyY!3+V_`pp2;$gdrneNd_+ff&A}d3*6Yh_?jq85 z-Y65nOk>lOpN57Za1qu@of(0K?Ph$iL{Gx(>&aZ3DznEacH#7Kc=9@8LX4gF2QSB+ z6UK-nhvk1Rp2>!jaA8KT+I9>b&G!etqu#1iM97Q93|Q*uF7JU=(rTXsmCwt51f zFDsqzm1UH5%}dbB(adZ^HGz-we}I^n5F>$r#0*1@2l{+H0QM2F`MKP7Vf*Lb$0)0E z-g(O6uA7#rBm`9ZxRjJ_Z1kVI;;YK zBjE4D2@QqF6Nz#NHQ6-KROn-=QZ4jF6BQprr}=j6ES7%l?v(YbJjuxSBx{-moOPub zWeB>*FXS#8$x0mUG8`>{B(@1*Zk4-tafz_(7as48W7XEo%g}PdxZq{$`@8bHI(uSr zB}n_q1+&f>I&~T#&5#$`xtOgpbrgTQ(=Q(DTt+GYbQU3tmg_lm9v`BR`Og4JU|?p3 zBKUsgy}29h&SPvvsZtT|`)JhVUYjcERnEG*L~6HK;;&4y*pQM4K33Cckm1;6s%Eog z_9epzAs9iHbJumUOZK=}!WuDALpu|2hZ>94fFsPY-}A9@onDhFKfkJ&+V63Km-JpG z$JRb({n$%YWCpRA9w-j0SEAKi1vGZ|X?9K%U{8+Qjir`xaJE#Sf4FCvcrtch0qPZU zthECT4NRcB71f(*rTzAvCNvCX`zL8XfK75Dol%E~)qTHdj_os=B=5Ki6PWI}R*^PlxQa z+%<}X?Rk;##KvV%*?Bwvau$Y7PbJ}|SL;<0?7P{YBRxaWobTYWC-n$=H#Y-ZI^~hn zB=#|&ZFT!apg|+Q}4`oycfxd*t)(0>s}g$9Tjt5oVkm)R zsgXXaQoX4?v-YsvcJTC)G+k!0OvRFLoX7wS^?bwGn`siM3c3g{jWyZbrD9^Puea>p ze_Y5mo-H8}_#mJb>|DLNfQNsrX_*@2Iy(K#s{5wpau64@hiXd5=*rK`Z;>qeWIOQo z*$k+F02Qd)C%PhXht}=-K)%JGg<>GK7=vUEBp#tHa?Z1in)BS39LowVDCzMxwM z?t^qMc*|RyF8$HLt5OmNkDOL9nPNuA;&*JxUF6a?=eNF_Ikjl0>JGqLX=hV77YbDf z36N-DB!FL{8ia&)W*IyBjnb@vLNMv@;?;kb93Wb0pI@PR*;wt^AWL^j@c2nE2Qs0s+?)=sK3;HQB90M_p1 zq|NoMZ#1DDuE}WlCbf2brQkXh(v^`?d~>VQLw+P4%L&rLXLppppGw+ySw~||u-t?0 zfQMIxOHYWI2D$#1xgO_T`iV?td}EeDQiH(3p;QgJRM*S7%#RA%Id zaYqT`9$tm1TlT(LJ9o3HnP5e4^251`X6s@}mRZ9vOIuyTUNq zX2=!opH&#k?F7wyk2AP{3z{Xz)M$({){r}2em^Lg(Lhcp@4Uhxc|y}YwH-H(T^!5U zyFN-MlkSoEV~glLeRSQ>M}aFFxeA!Hv|Usz?Jx9^iBg6ip0YcH@%N=XC5s+$N-cw$}2`6BRze~Rwc1VR|3)7IJTt4 zaxbDwA!E>;Upd~~YCHiG>xYmA23u; zr{oxiv0$sd>r`J?KCQTgS`4_OM87ME9lC{Nlkm+7muK zopEra9&ibQAPh+Nv#EB!vRc_v25&b8q`38~#}WM9nk^mfTH_dQQ~l~+nj*aDc#?|S zc4TUp1KAxb(LG*B z{9i%mnuqo}4@3|9W9x3Fb%h$ZrHwyYE#p6^Ma)8Ds89mP>WJ%OQ04Vi&KEYePM2^~ z2g#CfE*tz$w)6koFz_|IE21PIw4g1?j#X`fV6~N)MY_lz4fm1)at7x#FXcDbEN!jR zJf~bHKe#~(L)a=Cl~l&k!Wd{s_&!JwzTRk9=^~T7JVn$p_i8un-=5)xQIq{9#;CIE zHzY#i(Ya*ckiA5_J%PN20P{5la9v@-)DX_-ue9RUkl#lkjhK(JXqjC3dY!H$R=vYG<6bRxG1nm=CTp{~MeyV$%!rTln!FTPB|uyiMvy(3vJ< z{y7)MY}dAJlMzmqu=8V z-gD(lf7e{p_&1o5t3ftC*>#&NGg&{&_g$G0KVArh)pXNG)2Gc-EtvZ%brC+RYzMZ! zxZa37DB=BsktsCD@240l>qB-#SmV~YDu5QSyc&Z6T8a#I@~OC2?GMHrKFBAjrzU0N zEebs-bQ&!Ug0sZm-`7ySzq}U5Jrw$#moHK10ZDAnRxOv2w3(ef`35+ofZ3 zSg$Y^rf=xN7Tw2rd3lzL#ccN5ZCEFsySjuzPJlmkNlusVkcnkgRSZz~XJOhLJuzw{ z`4n_40ez_FFFtU<25ZtPO%xPZU8)3tP7psz@E;aHZya2k(yDe5tMsJ3t0LHOl@}=z z6%ygFId4Sax-NL|?=yCr!iaU?y5YG_@-~Bl=*V09$10kzL zQeUl;fL7N-`eH=FC@0xNQq`qOqN?-O3GMq-^-UU2!I(&j+y?D zF53W0GNQE~A$lNQ_w=4P^p*wA1^#Zr9Hol?)pd3zmBC))5xDMyKfYC0bR^$D=h#C# zJxR5D!b+(+Fvc-c#y-DC8@Z1SzWK&LHv-oi*c4V74bz7{acqI=Z*UIrHDXYy!g`sw4V;TU1!MdzAkXL^1pQX% zhm&J8b)XE4zwM=>hm|}#pUQ zamU5u2Tkhn*-vfo!spD!bzX>)b0Gt3#s*v`UnNhTyEMQBq0b~X$nqO~4QJWTv0hf< zDE;-BaJjww{a?B7zflmi8O#ZE#tE(|>n0gauYc>P-2H##z!zF%QSb%*z`3gUia5gg!qJ$wd)8nwE7z*=+KMq58*3|hG%UcJb|!;hxQ227X4JDr?=PaIB!dZpLNlW9CbyOj~-1kUV-0PX=HY35VeXj;cinxCRDh$3anpec%TwMg^_CPZiOMEcx!Ou%0%xF-kcoM4Vr>~Mlw`4O)@n`-KF*q_PQ@$1oz z-^&rnm(ilo$0g;w?RZTWxoi}Km?mt{HI9m6)5LmQb{p#teDGd8#B4L%w@X3Dg0!$^l614ldo*?tL~5l!7e&? z`|Vr@A--6>E^mU9xuOD;Qkk>;$t)h9OR#JKpYZpWI}(R%UE_w*F;=eWR=E-o-tomu zP7}tZ%1vrcb|^;R{MYw}rR!U7g(=PEku);8YW)tHxi~yFF!i3QQl^>pb!d*W_ejR9 zwLG_q!&grZG_4@4gG_he&d>u4T1rXC%Bsra;j3s@h&d~<-VEdoGA`Z#XPNJnyRTs} zKe(NEX_u>_Xz!`?^tKY_ms+<%>KxV$pyba4jhS(qY|N0cu;8}zvn_S1Kz&a#mr__d zRgv&F>U6m0?>r4Vp&!Y&zL?#B| z-SyVMPY*@5xp8kX z@!;4#-mNA-auA=H-ivN(of?#Cl;?c)P0jfXD1Ep?JB;fxcJ!RH?~o8zLH+tWv;ubnSL+ zbD{-p$4W2)v#7fCyD?Q8SYLjk{VlqioaH=mhkyO)QDxo!{{}Zk>11$}(~%yKDd>?!?|EC`kIH-IICRp^m;;yljY0k=h)J zj=i_qY|g@%BP4NcWg0m~qv!q3=_c}9eTh($qx%bH@q~$!g#H|%xmy3{{+ruOniCIO(Li`Q|s5E{#mt`=n5Icv$ zqjE~qGO7zKHj4`l{yeYIUP3lRfB<^N&+G=>OpmWD-f#>T%CkLlRs5g=7z*;=CRq=W zC!fPdDowAkiS%9vpR6zviu>M{PhB^>QeZ~w4}_$Kycg}ImpNVva~pN z&$6h~A=v)tFH?G>3=yQ(Nc{gsTv4pyU4-8-&BJH9*Hk+ye3qf{6O3X!U{8`myWAXw#* zHi%5`<8bc1Rlal~awTU*|7(4QJX$m+FoX5<;n#a)ssf{vQq_N-S0L_E&RHs3Q1iUU z&J*PP!_Abd{_hyY;r{9N)q#Gy$6Ze8$9z0CGtXWh&-o-L|3v^*Xqv56X5wa_gh8^QH>lg@6ODc%cnNHsW^Qc^UZ$OE zHIsi$h~w(|X8y$UDwAsKerA^XfloV9-!N7u;eH{&F6LG}N=O$Ja>lPUoG4xFrN5dw zaR9|?RBx0UB1sItW7cbaJHnTGN_5HvXEZ2ozy^2d@o*j_H2j2j3MUl@Yuo`QT<;OU zK9M1)V5-@q0S-?nz%i^$vY&shmFalHl3w~qEqx@rGmj%|9tp8Uf<{vpw`o}*=0;rmEAJatE>tCBL=lqv*83L1I zYyBlKS1hK@e&Fg7<#JPzgNfbY3Za;57Cw1@Ot5lEN?6FoK#@MxXW6wuWMye0AbX*p|dfYh(IC1OSrM(hEOqH%T6JB6eG_54^yV`Wd*kL-pM6}!tF3TRgWo8Oe=;TElw%bP zfyq4gk`~#?2H*}K8*x%Emzi+0qpBy)$@j#8w!jOJ&7ZLYZjk!&N)NtmvQd9HSY?AX z^r1YAl*x>T!)lfo6M6YrridQTHoM5glC^(BZB!X;-m+1|=9bU{;XXMTnHH^=p{d$q zEVS@mhm)zNJ5;O;>e|WLzMX!ULN`D8rwciwdNxXbo8`nTw{OZTBpVihWgw>nL?yl1&mu}qdwn+i4-mgYx_eUwt!}a5t zXnKr?qVvT%QW|>{_NOoSzF%!vE+(`nY^Nj{X9>Xw1!(~dt4!SVa=#myDTAZ?mDeN0cc1s)j!OF< z8YS)s?4<^LDvwl(Swldp5MY}uMtvWmXwbWt#HK8;a`UB5Z2{u>xfVbzIs)Z)Uz!J; zBBv(sfj;hRBi{Iw@mGe|<86^D{)q!Ww)4^KzG{xP+U&0V&IcLW*#NlX&lg%p%bRSY~8r z`L<~ZhJ-MiTOPAOxVBlX*%3Ha2w({a`atq1OPqKJl!0$&@Kelkt`4Cc5ihdkzV}Tw zS=-b13e@}K6VKoBp~2QWQ*PDTXEHO)aj><^trtnc0*f7zQ>n}R^F z<2@-4)gnydh}PS%Ih12eFUMd*T$*eW-tdzxE$Ou%iSrmoc4(KbPb*Z|+5RX@5%P-^ z)q6nOj3^O-^}ZOv(js6f6Vk?m*kuXdDcP^{Z~!?T)4TKN1(pd64XRR)GM?>r4(@m{ zfB*$okC>~sC_ruqW)i?jX#24F7}OhV*b6JAQ1@+GJ06lP}N{g9`@3ULw9~ zb$-2X^jpFM%r}bVHsnsymhTw!s={qETE(d{|E7rl-9M7hiV-Or7zcfGeLepHHM(aD ziA$so`L8-c4T%~Fw)V!ZIm)Tdsy3b@x)7&#wBlDSz01GQLg52eb_1vx1~=%XI^It$ zkWqpiYyr~_v|p$+Ge?k2n*nK$FU!Ns-FIF~>OcyiFYYJ7Wxt)~kiD-!B@@Py2}cEA z<3h2c*18O^Tx-UwR5^Xsy58B-(PZeK4RDWs*o2Bl5svQev!;}R^!}O)#P_Ey(DE4< zCSc$PtUC+VK^{L|t^6dwbKN#tt*Voc7m?1PX((kIKt88#v|WPm!wZ*7k8#C8>IQ-#_T;i%w|1B>%P_(aXM8NKyJ1As`mX4Kep ziiTZqtN|6EkB~^(oPpuxdD$O!v+zLsxe^Zy=Gd}1Kr9ZZd(EEX+oK-4&8)%%7G>?_ zX;X%={#$%sNf|Bx?}B&#WoHN3dHPh*P-l=DevKVo1_8#S4+h37_7gl}cW^Wkn$b=h zDk6nG6I=?wPO2UJ1OMvcLsVFD?Vf+T!UBukVNF^bP;4jC*N4q(+vs@DI+c;C(_|Yr zMX)|MLfoFTweiTAtIUUeJP%b?VT&c^)?lG9{KqM&?qWI%>~rnr$QxYg=Wcg;Q$R1A zfspIT0wU1M84H(?{HUNBB8mkYOI-^R_5jc?G2WZ79u&}w$KB2%r}4MLTXY_1(Vh!b zaGTUQc!W$2`75;>whr1ec^XWH=3c-KeqHQ4*X@v{lS1L4A`N*0$l3x?O_GW z@jO3w3dgP?40Q`M21Ib1W7Bqi?T~O*>Y3NpnCSErc5bQ@d31hb@w27;>mD%CT-4Ge zCE3yFD3`pJi#<&o!2j)~2adXYpU<|6QR?q2lW+ap3F<*?~2-Lxf9D+&<|4 zbL4Rl&=}|<*;?$5EW!5sIcK?mx*{<++k$nCckbo%n+}=d<;9!F0pUsPM|@4+I{Y`L zG0}x+Ze?LmS0_@FO!HrCAq2D--;ubE7Vgi@{1AI@oWDwX-L#yvt>rc+C;qHWm zLA!J@x3^Y!WGRO6Jc+0i^BEZUV8OIoN#2pf|5*o0iF%OlcVJ5d3Mu4CNd6cTRd|EC zSp8jIm)`>x5*AA;@JqH;$e;MMZ+!b}0X3B=voCJaX0}|_!S%!KkE4x&VviLryOjvp z$?A}7R+4d^y+YaUd4dd5jWgaV=v)YhhG6_Z;2zgZ(}$e(KV1|5))9iHMS@x(j(;#+ zSPqyWx>8Un~8WMnjYZJ`zr1EVNGxI6d``s-`M8c=N2R;`oy(Cd5V+ z$Yi<17yMM?lnH{U7S;uG1!}LYeh;LVo9%ILE!8Aiw+ADc3{*TeesJzTSP?~Pz?^Pp zgd77r|F_HlSjNA5@)5BYNd;k6naPE&*32X);Y4zqM%_*oC@_&*f6S_S%Zi*k-5??QE5!q>s{s0rF*+r0|$@BFXloH{BB7arc<@n&`mHd{Q zUgK2upxDpLblSZ=d?PeV3>TeNVR>t>Xjgg}a^EoO(YeQb>=(jUg$CA<0zT$4RY1E% z+bl=7ajZ8KqqFY?!NzwBZ>2Lp&W&Ez$g)IrOUn_P=~xPa8=h(oJltiD!EXksr(9R= zk1LV(c!T~HH{8>!l9WbSYvZY|-ptpb2c9XAzg-#kKb_xjFE?7F4ZRV+r?Q~Q_-O?_ z+R)r=kggLyDSK-hREePBZ{4MWV2c?< zWHrb$9?@*IByZJPTFl&!I;->UgZC7=Lw-`I_VjPpUoC8=NF8@LSyNZp2>8qP&44PW zO$c?`NRdcLyu$utS1!bK{2}?|NAi;=gYfdr@-DadW!jVdCP-q1C|e0W#ZIPRFxuXB z=DY<1`ou`8X{&0-VG9)R<;xNAr+^bC+g#bo82J@4AUhV6;yYO-uS2R2`jc6IH0q{gVt^xI(Ec{KwNIU{C(`>-Z;SEyr{xDZ4u>%_PqR8QF%e&Tl~#xHV2xJWH!m1O?QUlV^Jy*OJxY0O z1gNp+J)cJ)TfbUW9Bjx~o#|`$f-$~u&K zP~L)oMl~G>ar{{jqZ~2Sp2(iUlxDGm?Rj#m-e|WS8#DZ9cNSWK3*5dC7)QdPYUai7 z6Fz)@JsxBv8_sAplk#$u!eP3e_Pv^w$4t0htc1{bb9yp8cW7Gv7}~`dpW8DOAE6}r z`LpK{Jua}`4}UZl_+5JP)ykNz=dOwz$4w#`fU@}>_CC9|bV6SH)}oj%*)ULDVIa{ zB{ueIta&tsDQ8UNIcXX}E92tLZ1UbA440KCrqG011*Jf!)3jHI_ z2dn|qoGC5v)M&C%R_9kqeSac+P{Qxl;t_mFc*r-%r-6B~@e!NB5=41y(|r>Jy#c?3 zfO?(>G)LOhce6y<4r6EgoD)Dyr`{CM$O6b3^-5AptM7kRdRlGXy~w{lFXU%b2p{uVcD{O?{Ca$U$h+}!y`hAQhCo3DAETALoE z3cZe49U@)6yJ$259cTA%e!MCwUx5PaOD0b#O^I`kgN+#L;=XEeo`egtK6}XXaR%^e zwPy*KjjZaC5XacH362{Hqjw36ev%;v8#tfwFar{qayIZYFWx>Tr;**>%Vc&?OPpo1 zJ_qCi%r|pSkdpVdWWUt%r%ul8E%0wKX=RwV9dY^9mL0xx4^~k|w07~uCPn`>C-BLi z;A#(gm#54f;e$Y&#Nkt`G#?P!C@mC5L$J6U>=}|8tH?rjt`c)SRZ7kK$BBex{+{p1-b|S4Bx`X!S zKT}+Y^6O8;mUYp(7*@O%8%i4_oOZZdAQN(>tCZeQ|V8I(h zsHSGcT(w&zvpwP<)Dd&qXFx)C+t2g+^qzk0Lbt>WoFy1ygS*1#Ol7c(R&sr&GHB|% z;;?HY&03K((>C=0XTNk}xuSmea0a!3WbtdRa5(O?u9Cvpt!e`VWFI)6cq^+s|5`@fq&^M0+4Y31=Zz@tsN`7KXn@WX z{Cz)w&9geetyGSAt8d`zv?cLKM5R;X6wj*fC)hDP@_1%p0YDBN1S^DN{9Ea-UF5d7 z2Qts-fy9uG1m31tP~jHqA+Uq#624LH*a!gI!do}ZH0(&Y5gvo-QdH*RT63IdZh*Y| z{9n3LkS>^mQq`i{ufb;J54dmN$gvvQjhmeG-;t-ye7pppL)1BJd?Uux&mtR#FHP{< z9KMWz;-P4z1y(aW&fJ*@Tb%AS0N(dTf~79|D~m4xG^_m{bG*aDK0GF-VaU!zxI#m3 zQzAa7TLxqN?CvNH2Cc+sKIOu@MM!pS{TKiRW_`AqYMTW^Y7(dn1@q^7U>sD)D6gtnljW)iv^I+Luy7i@YVlNmJA#f<=MR+N z7FROU5x3%E_-Ph#fLk_?->qyr=U*p3mQ6(~k+a+%Hzhi8=LYKzYN#a1a-u zw3aDjy8$(RKEfT_-cRSz=JI5cxH}n+XU$oVmgSJg#gl*NKxV*R?tsSQ5kUobS0!r? zu1NZDhm+)BeEEKB-r`&VcT0Bf@3PQ|rsKoOBk3G)B8gJ+yfaRuUK5sg2hJt(IEsdP z)}UIfuG|in>~^Re4x&MHf|u9omoAjQqdKS~)Hp}7hanY~nxWFVJwITPMmA3|Vt0~O z`th6}PCry_fc@)Bxu<#oc#)I@YuJN+V`0p=7-!3vc21uw-_;6y-V;vHj?JV7Ee)@Z z^)vY;25(C$b>z(cQY|;$?^au7rtB^O`%(tuC;l|6pOMie0Q;bs@c|_FcGy!w0g+tn z?P(Z&m*<>-GuwVpzBZ15Dz5J?kW=3!P?yv|U14kj{*=d}@noqprJ?Z5uLqH++ZiS( zaL=KjV?920xhMZw?$>7u+1hEAGAv}L?e~RrPRKB5cjOY<8vBr7=J(x){&t9xVm=qq z3mmRL#p})8i2NQ9i4|D`27a9&Idza~GQ6|5iY7JFCIQZFvx(DnB9;W}R3g0OdcbSp zP!*xUW8v=ad-#OgU4y#aV6{Pm*1|)B)!w?O`uE?E^&ffA5#t#fL{I6M?-}A0>Tx82 z60-8R$^Of-%63RHf(5kR|#kfu$i;=a_ig_=)rW6lxG-z@EQ&U-7`F; z2T*F3Lopps7a_{|ZNWIhJ#_z~3|Z7`kteJR>Z-jH#g}(Pw#;JSpmvVuRAG5pc;6csBHSeRNxIufySs>wL6aMZjD+{4JwH4jhMPVkx zP~aieDWr(qCp#Qp|8$dmEhksN05}x}2s%sP=O5Hfg%d~$pB7RNx4}CgS4Mc@)47)m zT~HmSgR+K)@6QUMC8JYcaQ}`((QAGNH(sfnqNY99Kz?fj7wSM<`!&A~l$A}-MGrzLN^1-69yG^A- zz&j%SZq&W_pFC;V6O|@PwPgFI1o0b%rP5%Nl}p8Om|Oc_n1x4iKY6`n$e)PnoY=qU zgQ9^~bHB}YtrzeT#LR*^7MJ(!V1t|Dzs9GL=)%hv?Y9!(X&8USO&UKKzFwZClO%!4 z_0di65b|Udd5^iIwfyY`IO48xQ6XL|8c30|kDfI-B7_j>jJ$`60sMPluqf(;zp$}! z*8XBSeQK253AAYwqP$pv@?N|Q)Z+48^UU9Po}9x7@T-(K!R<~Ay;#Td=pXK9XOV;J zzrq?OO}in&pVs?iIRVck@Eym`FqawH&uX1E3v}YHOg?Wxz zD%>^}f{TU$BnDqNGY4lIX$8;{{^t;DXDv|&;noZ(42xUOxFgFY{0A$efaK7)=k}4@ zY2hPKcSv+@`jnDYa2l|EzAA7g>LSD~A zVC6@V#m;;${s}*~q;3WNZcW;d>ccVMUXi(zj_b5yXY;oLCm)`o&tSIEyyO2^&P}RW zkEzODNd!1(hXph{plV&aAayv`^X-XT8D_;8n+>n3PhSP<82GCN29a+?x%Rj~u69P?R!OW`w@WgSwKcz5=F0>K;r|f{s46)LS z8Wmzwz)MJDljxr9uGgaUCZUes^}ESGcQKowt#gC>GeEZvjDYJxgV42a;BS2=#Q)^U!Nj&Fq<}<6dfenn#_k)#gT=J9(>i&=$drD><5lDVx%=LM)%`JtFuKqAwS9eS zXN7~9+=W?0Q)w>eDkIE{6KD)(P49b{ETk;}gv3A&N3`-*PhdBg)BK)U?X5bxG=>6X zGdy-3!gSP*|9aXTG}x)T>GYktw}}Keq7dTU1Zg^a!GRbCi-BD2Vc@5#Udak6#HuuG zABc$fc<)^M+rOvoZYx_)2ch2g@`7yaaD>5CY#b=`|Cr_?{zM$PIPA5L$@J~|9(3{OAR8? z2-n)DMW@k4Zn9CA+T`W1G)3JEan=1h`9l5F)~d#K*jZoX6ix@K(kyAOiS+Jw&AlTr zfkR%44qtJx)rpWgDlt!MCbRJMm#RL15x=G>Q_vN?IRVWU6wKPfPG90E)?S=gt1Kh6 z#&G$SfgNn|yLYdGELm!@WRim2v4o6v8o7Q+m@aGI(6GJ%bWJV@sOt&Y!p~LMLSm)r zRvV3#upEbT;ip5rKY>R-``TI{rZ#Wy`nMudllL=MVFO-6fz!zM>40W&K0LYw>SPpP zhZu5Wxlc;6R~O=ZkSqLr7Yy_XHuGrGsD9`Dj_W_^REg+0`iP`L;0Xa)HXcrJqdo31e+MV;=v0o2 zV!ga7f-0=IiZI+vT?JxCB{nqBv(A;^zC%#E9}@M4&(mcUh%Vtqd(_0jZcZON&J-b) zX1y1$ChN)dz{y+loS)(xm|^GS3z`%Je?sz3y^4XB zI8D^Sj`uRbpz?k>|BfHYzXkzlFTm*Bj}gCNRLIG{^A*~+xqI>{4nhR);56g@xGege zb-IQ9&uzjKgSdr{dyuulr5Ec2fshU$roKple62Y97#f);5KiYzADcju+d}Fo8VPI-~wX-#&8ae?#)m`+Y>;A15cXvR` ziW*#f`j{+S`1e2LoB$JBpa#vlEZd*RKMi2ciNS9?O2(`{d02;Dg1|58M>GPA&IrLz+JQ6BNL4m^KEXb4vu?907d&hi9JM5ANx!L>b;E%XINAr2 z$%cUY<3ryNK`$dVOTXc0G=9(3j!~;R|5K3UZm*2zNl}4n+9Uf2Im2Dcn`y^6zrsK_ zdmq?^+vBP)JR5t0Z$X?j5Ob7`y{Y-6+eduzReth1WAmgOW__UWW<{bjYOy&6<+ z-|7@67-T*?=YxWzCeSDgmk1u>e{sy6R0)cN*!!f`O?lh?=ocRCy4IfV!>^Yw0-rKx z2!-D`jon$*F1N!&)h@AHy&9xkQ*P_M1a9+mbQrUxb@6Y7pq+ z817fA5x^QUvK$spc+xtvFu*V~G=<#Ke9Y`8Xa#Jtb)-Bni8ySu8ya)_!y)C7XV^Qz zU3&vIg?gC{SGNxXE_SH>&fm~WWczPXfa)hSZOz~m;K zG|qE5^v@iZ7$~(Wi7=bKJV)`ZHCE6`8bhB_e7U!FJ zcth4(R*q_mP8%USdrdZ~&B$bH<(b3+`v15s|(y>S&OZd@{gHmz_rb^!LaS zCX2AB?m^k@|8ESCoE=gSLs*mE1@;*V4{<4JrcvoZ`G53PVHLGr-9Y>0%Ya0hBsv-N z=~Q$xX3P25BakkAbrG8DRq9;G<9us&zAN}F{8_9{ojAslFXPP$a-2jM&91qBV+e^$m9?;l^u zb9b6YYv<*x4>yCs@PIM=ct)?$bUdfYU33$?v}yC+@AmBS@JkvbYeJFFPjP#}*TB<+ z3SlB38^4bGXL{4mjhQ)ISN&<#+DOpek&_iri!ld3PfR`NFUCOrsykG^-+r=jZYOLf zQ14hU49|f7kE?fz4y$d~M#IK-W7}zL+iKV*O{2!PZCj0P+qP}nPWF61to5&bl#`h; za`5EFr5k?$2YIF5C1T@T+;ZZ=aGd83wF+;r-4ox}=iCdmG$NyuQyK0d;@J@6&-od` z7D^yC@Z(kM+EEMIc4h|wYy=Kq*Ed@lcjk*W>*~ExT=d{rBQo1{@H99W^}E`nNS(js z#ieROe-3u(Q_ZhW4?~*j&cHYo3sAsgnGb$cbH|pV@$6I^s;LUbvs>-D*k%8Xf}FI` zRiABKsr@8CpHFQtNVB9 zX2#zUb+01vV7N}AOV|VG&xu72%9PYF00tg=s-jx6GQeZcW{9>91efu)-p0Bx3$lx> zF(l$aYfI|Xci0GT^^t?UQnRZTo5j?UY;e@Au_7*a`D;5`u_X3~0$BG7r`<)?^3ZS@ z2Un`8U;cUMc)Ry#ScNCyE8d|eJrcC*r(d=fqL!k3Yg7vYfgiw+;e|;`ekRHi(&AYx zd(^x}SF>=>%+0vPu)lX*+r!75rm;&lihNle7}qD=;YwwpQiZe6cc$D+V>?aKaC= zSg}r4`}cFZvAgAvtXN-ClB#5WA>-D=)j<@TWn+g3Km!j!D-}W)r7e^40jXyq&2RCS zXSk#o+GSgGMsvdWRlhWQ5Mqvd<3-uy-=~(pNL!RLhw@xcZejMC| zd;wWciEDupJQp7TVkzvH!++uZmQM=?6p@A}cgsxsY`@bz*I&kySuEHAQzVcQZJ!9} z-g#@p^Q}&y6|WkB6II{|5Y;sCpI=odarI;k!H$4Trm^MQYTJ2kC4?`pf8lNq z7gskj6_g6ddT9QwV$~1N=9FYWz@9b~VF6}}lOVI3!g@HJ@21}lp5Y}3(m{SGfCxXC zFN5_hT(R5?!~SeaEAQK3R>QlyWot{z5y$P7bHSou%L&5QDUGI~V>F!cKPzvP6tbz2 z zmlX*U4-2oQC;bkCQH*`c_Ah)TEPjTI_Pk0a8qGYxe>^wx$hx7wh7lTeZ%;En?ao}S zaXu>j;1`Mm{7V4|BW!IgzS03DBoYG^S)0pwLB!za4+l`=k3ns2w4(@RGl56kOSp@afT`uB-js};!_i>+z;vPwGrLsz)D5g===uD{ z%N2{xQ5tu;mVU`b+Oci3>Q{x7H^Z466+;a8==^Qr^;7q{B%+lL;qtZaDp$K>ZdNz` zQoRtIC!5IzW*cLZ{?3z+F2aq`53R; z3zU}vjub3L!{YK%i_CU)+ums}qT;NmU!pVK<$RQF<0$i{<2PSI#T=KnUusndc^+)0 zTFy+PC}F1FYdz3DC^%z8WT&tTmme1?&en=#CP$SZ12G2}HF4+7;;xy6#0b$ccVXY_ ze{vz7Ezz8?+a92{x26`45NzCHHN+SaL%|649XN+aWZvjhTkoNEJzd?St-DB6REKgeK9wtJePv+K;#lNhc)=rC};{XsvS+sRFpud>UQU2VX z+Z4mlcD#&2HL~|Wl$-zV7BRg+yJth?BeQEk4$)VUeujvNd%o}a?aN#<-FY=>Wy*lV zmXYH?o5wi`LyX;yQA_1e*Q0GAhU{!=g zjy)yvdsrcTM5&BJZj>EVagp0`IVKpr9q9g7D~UHsyO(!i(Jzln^Y1m%rRVxr6Vc78 zdxSWD+26Z!Azs^dI&1qD^Mz`u#+EqpqZY0Bd^Y>`Qbsfm6HV}uB@(1%io;5=KJenX z(k>{`1h{KSo#y!>lV<6Bbp_K=tcnw{@&MtqpLp2z(5&7GI!@Map5NecFacN*b@J(e zOahf$Yd9H40Yk}ys~E58c5{ih8DS1?NMlM+?k|=D5jZHt5XX-FAh4|?>m43g<2{6V zV?JXfMnxf<)>qJ9fRGo1kBw@Wiap<41gDFQ-dbZlFj?29E#?;lJWTRGg$_Sn4JX** z8Pve0eKY}+tJG8Qsr%cJfMm*ywD!B?ZDJjVapV~$xczFwWgp;c4$#A0EEk+VxrbCV zf#?4YJ9WP7CdhfneAHz4Dn3`dC<&s5HW)>MRR3?cgSx!Dg)j@#SU|G5m3tv~0W%)hA8&Tstz$A!wdq z*2GD(9)5+<>xdMPh+UfFqPC1%q~@DhUh1V;yGU8ZzIi~n=)4Pbvi_m`=SISOHo@*N zAXg{gWD_Ue=5YX_uA;=x+eNHXsx#MeHu!XD;y#Tj=kf=W=A%VBH!z88_PC+jjl&MA zq7e1%dSgLoy!7cOpehZ^LkP2Q4tmqH@~i~;mB3H%L0@%e1|?k!XXuBRM4gnBfV7A< zj*_S?rGR9n=C4Kf&L={dp>HE_P3PCmc>H=qfbZ9x)QD+NL1Cut@92FLS(Pk{A7LWWDT;Y<&a3q$iXM6SFDn5C>a3?e%l_fvk zCl8tyPkq!>C8Wh8Vm+FcPSF0QM@psIT{1AjP>@uATM#9(i+Mh6^#rjyU#%xEl5Nf3 zIF$Q$fLo+K=l>cey_Jc4sIQnoxIL2&FL1A01M~^!sQ)~z-;_{x3Aot$fBLU^ozkZR zd33)L_qH5}NB;2m;8T}y{|9M{)&w%^#DDmE^?5A!GvLtdg<@C9G@Q;I(>mYNK&#Ot zB`8VRz6?cusaDBijos@|iwM;M1)k0NL_ZTF=O7QSnWfxgdCp#D6NkyagH zvi~N8S#Z$7Xb}hTA1E#Akd-clS)NWNdkm1zpyGu?#z}e@`h!4k74g!uP z(K>2xc{s-*i)F}SD_UJbiDTcsQ|vMx2WQ6S9Sd~DEZND~9ivX6T13A4_p`dwu?zvP z8!GjQ43b!l;&<>9_Ghs(fnu1-Ek`j7fWe?zv;SrMc?1k&A{UR0pO5sOW{bK=Oke%z zS0>H@oC48NYm27D)uv5$@^-quJMe`zGPxr;E(QOuU+7YPjP9&#Gx-P@cJh+6;;NO3 z!vQ?Y##-?LpzZBM`ErMm!Qb@$Y zgD|!fgXgDhw7loaJpgR=i(6GhkuUzVc+X9Z0vM#@T&QHWx}>5Fr+eI7_1@pWLIM0G z4G=vT#6*#PyofkY2d{}X(M0w31Yr>m)4Jf}kVkd*JC2{sHcd?z#=|ji9uji%m5Gbf zRvqObgxZdCgSX*-N~x`fW*ki~qtc!17nNKXx9kBw0K?>U7=$BzEoBL+y2q_Dn>=G46{WZLH92Dq+|Z5}@O(yY zd#F4PcP>O?REAG=bo+%OsosF3KCMt$qbSL{(ERRLSq0KjzgC-O8}fwZy=1G_}z zYKH?o-SK|*AK0%X!Q-=DS#QRF>GY5T&)II|0ooOu>rP#I*=5=_Tjel&0^0QUy|}x!1;*k z1?f$WZU8geFuImHf~NQ9dusj{5X>l++0sdnbWWE60N9fc*N>;7d1znaeA@)fuK}f5 zgRBamb?POWdac|mE)1715ow|(Xn!rxKVC0mIXAHH(oip&hALdt_r4m@RLSh8*5h7N zen%>lJB4<6!zN_CSu>lj;c9WTG^Qzqz#SyaS+rUrSs6~)JJsf^2`<;KWQWC~`Qg~! z?)zplo76#28cl>QnY2QXG8Ds5K4240dmzT(g9Mhj>!8^;7!0AbEvg=pbKbf$RN*!C z*Nt+m-4kx`5nnLZk$yU0O?Nq9;(Z&O?Y-cu=kYS+d3eR)^|ERy`mo{>7we1(5w|0y zJKh#<*1YtTQDKd=&)EaRkmO+;yR~tegb!oYt?huK*%-!A1Q*L zGRthRXF2!1@O=wHcPDA;99>Wsh!slLII#O(RZNY+j)DZr($3K&Ea8LAx=V`3=)BfYfENHw1+;se| zxA)ubb_BAW6hFxjHhb3h>wZVM&&}on>V-x62d{^d_Hz)TBNOCQ0?}2u5r=N4g8bw* zuo3+ONFCH)Fp~Iw*mUw)O%{SJ@w6H90QnT?rKwIw0YH|-@UNHxjZYpwtUU-r<4f;Y z{ZGaj*GO!EB3$0}EFy(&5{NJF3^P#|vqE|2Jgzh~$kym8!4pGcVR!#NyJF_ zYC?>z0*D2yccC1x(yGz0cnD1KkDUYB_*Jc@AmFoYr+oe3VKC|6zv1;l1+G`c>yRT| zh^ZplM`$?+H`9C*<-f^-Aa(gJoMDTvu=_PTEMjBjCD{&tp&;rXsK}w?0pW65+WS{q z=hFM+T=OLIO`_P|h|+xo=}l=@ik zaj%51;|X2C1v*R3cJ~VYESy>_gWH9SA0W1UbI(+nQjKP-`%H9r(x{3dUP zeD^K8r6ER(oKVY68!@-_38Ywj7t(~yPu zl3rWre#@r)h>n9e;;i`>TBP>4^?tF=BTKnhTz_gWS^{yoGvgCUoc)0BwzZQ_OQlx^ z{aZc@n8nfX7;ol1Fp$D$oG+eEQi(uS6)q(7lcqzjl#>TV@tlKLUhE8jp zpNfK>@UJ$(h<&k^+UfGXnu!e&5?H2dbr@^wd?unrpWBa0y>|@u@DdIeE81n|3w0>2 zXeK|T+-iRh%PKDXi^VsoaXb8-CvVX^Ki_ydT9eP@cJK>@@)OV_paP=p*s!DNax|^C zHPOy7R#eW@m1aJz`acv4Vrq$N)=xv#Pifw;II=$0wi(6Ly;@(h6gC@|?>9-qXT6Mfju!OY#ro^fw41j#lZzXS z`i*-^CCx2_PLeO=ZJ5im)rW7sX5FuV56zw3YOzs7Fz-D>s~P|4o@qKdI(V7H@&Um2 z)>ohf)zayBHc+(baG1IP8Xe_hG`a}g6vHti>_HNT^yGB58F#eq6zxsHVWo*l7>Uz6UaxD7X9Vc|=)ctq(K3g{VCQFPP4Y#8w*Vi1rCBrj4J z(IwtQ?W8lJd6Jjyg^wH02N{N!53w?m!VG({PM$!{S4zgsW_x>UyURg!pYS!8!F-#T z$3`8?-ASbj4nKwLQ?6N?% zgI`|)E8gK|%FZrN=s9e0BF6i)=_|pH8$-Ga@E@SM)2(2cm0O_{YJC3LqE1n{O0mup z`oTxS{>hOd4-jkk<@wGN(!mwfqLg`Cu7YJxnThWv%z z1-AYC`ACf?giiF=w3-}6HkAchm?5AbJ33FCxf8<0F(8GVFIP-f=KobL17B?X2_k5 zXti!Jwd^{kpjG9q=A&gvpMd!Hmqb<&7eR$)NO_bqx@M;WetBc392a5F%D}zu(@|l? z9~Jcasw7T*+=V}{#f;c^5hYqm4+sb2rfD?3y;7~MrO^_htb zv6Sn$9w@Ce_3P5ckL{Krt!)jF?*(D{z$pB!`px+5c2Pcs_qmYV+HpSXjermabDvs_f>dp?6)e4rcTsk^`y=#5i*{+jepppYN z?{AipxiZq-5kk~vr7MiE(3!kHrQpZf#XU!*-cDFgf#3f90k z%&GlEC%ubaoWUO^olH8XtsL)>y0~nMl5*QLi~5}MDQTyoTyvKQv;pQPS*v@_4<`NxhF&E;_6Jf}rqNQ$Q@Yo9u9YR$DiiCd2!Y z$rxA)q6rBJ?V3{(*>fXar#$vdQ5!mUi*Z%*WoUoNHF}*`DUo`5?yTfbdNi${{b5;2 zS)xdvty007Pkhg}87(PL`nKP*eK}^x(dh&gCD=|uA5VjViAR>PL6wuAtUtGJG5)OB z$>G7~k??T4lADM9#w4ynK?{oCPDuA*fdPowefsRsKb{Q{Bk}o(B3#w!v*08oBvRzP z)Ga@e!hXxeyxM0KzVbotf3uPl)QG=Ku)S)2>IG}j=^BxnE-EsqbIA{Thz@74iqFBE zn&xj-m@oOR%RL@r_%&cs99{&_h&;?SW26kj);!w*UY$GK>}N2ciSPG7Vv^TqhOo2$ z@0wN;e!u{k#TAA0#ndu%FImF3OLd#ges4(WduE@LnN4Cfr2QPFn6tQz!J^=ufY6d3 zA?H&R`iY`|23)DJG39t)sK7aoS(D0oWu3Vnl0RHD3j^@)Bql2Mo>OIb%I)l8 z+Hq&53=elyVHqYNnK|OwmdYv$=6HuMoO?#QV)m6AOvpNk-`_zDBLM8r_=< zJCOEOw>w(w9hv?i9=RYpM~b2yCywx|ooprk6yL-7uX)0YpwHU9j;^lF^9{x^tdwaMB4J>oo7n{8xqyY@ z1fMRg0_v39yCVf6jAa@}g-?08C2GTqtNLS*zu)bFJ0t&H>Vt@O3!>Colj}Hl^iYEE z?Qgm1dKt>8``=U$FptgVD5*7pH(ck-sMd82F(gDz+EDG0qGbKM^7haM{eIAhT$ItN zvEl0b<~fdjEy=VONYYESKUoXhd0{(*-_m2#eUY~>nw%fSuYZ&lC_~tny#TtOTyIi9 zMP9UXfZ!&x?zeIpBLp2D#;}!%K5?M)=S*>78JvNpkpIN=mn|=%K$}l3u@ju}V6#Ru zMHlcuNLf?BQ|E7l{X#FQ8mGOmaqzQzy@N&j$WA=tIZ}i$1SNFO%N18f^-h^EDLG@D zBh`->;kUQnd2H(yHkFNP&n6JB6<Qv95#T=@4 zTA;&a!MMC?ov<2ey18Zd4Lm(;0G@k^wihg%@1GW5w0n?#JxkP;}XXJbD-WR&KdJNRAi2x%_# z5s7~Kvbd~7D~c0jzvKpk&iUpJT`|cL@C#~(QdpOY*#K>aESfY24^k{$j3jN=;P3N@ zOUvdAJj~G%HmdVfo);V(Tsn^py18eH$nXrx>Fwo#w7iVx3*uow7-2vZg*&b8^^CHL z_1%_UnSQlm!K3>pDVy1b)&RnLGgrQ-T+pu-g+X zL3{T?H5LTYDPwhDtH7%BrSCKzNqjbI)PT?|E z`N-jBNQj=+77LH}!2JAFfj%+Y(9V|cAOL7aEcFt^9AMn_OTm%k*G8Y)yHqrO#Gn~B zFFA|1OUJi+@8n`*`>Vw8YKUhmBvC4GadV4!MzLK5O1JFUcD5#u>Uij%)NM;8;2TG; zIpL+BdyU=q7Y*tG6q)T$u;5GCt zt2>er^&+rOC?}ikIU61B+~Tl_$0wZI{@1k92L65SJbz$Gm4;G8sxG=3r%k##ofI(H zoTV6h`yOg)H=21eenDU&DJbC!Kys#iqV~L8rRo)W+QI33)~7FG+rM5K9c6JcH0)kK zr0!LQMw{k(`qJC56nU2K8G$xsslQ9ci_3AO`>dy0{{W|aWoBVWI=MfyJX^Q3QwCvg zpAn5*D?Fdt!*|2bQ1-pRfzjRSNV09}i2Q44w;-O~t)A%O%NS#z`Q@OhfJbCVSVXrE zep-ExLOn85<06{FU4`b*7LcMc#2;r}*6iHrWN-h)Mrrf*mL@y*QOQ8PK-h@4$pa17 zQ@0GmWcF~pq&_RjqBP+3uDR@ct46@W0SbG?3nWT6Xia#KbJj|eSx2}&B4~rfN^rS( z;;6?9?~g-WHFt))_}gU541q|wPT3?E#`Yy-Lii(k*=p&XsCTUVRjWVt@o(W=mM=Qh z-oD~Gg>452Fh{cIdel&sc>;9Vtf-nLj%QC&Juzq5=&0w*&7kZ%0Y!+R-W4*38u?Af zo4J&8%TLxn1b`#B+UDzWe_Qk}%{t1`Ia~BA>CW3eyCsy_*lc>R+ZLoYg*jBV2VwST zBp5XI-18AHk&gU6JT~WBT9gQ2V#TALg=wo)M&hzfTdcp(?jM$tZAaawF1-7uO+sBX=_AQRj`Fot^0#2Z`_UTvm0pPe~Y0F4M{> z6>r2EBDSP?r(O?hSw<}9P9~ecK~#tMaCHX#U^6vZ+MuCxz>1w;x>kz6VsMkxg7j>E z?j>N(4ut%Yj>be+xYSaZEdNbu@}!hfS})P}nqI(Q^p6)9*Ym!|Wg~n@fai|X(;&-a zWgYDd3Y7TZi&XI6-H3y*-y2)J&G@kW!!{7UeRph^{CR6Ytx2x*BTb!Ns8XzcieZBg9y&v}Er2J-l6h=WM&8)`*y7@?N5OgGX{V`uZ6E2^5pGWb0qdZ8ZtoraY)8$6ND z`g=`X6*)X+OxQ35*4h<2VIKZ$1~1Q2c30YSz128U^0u|vak?@j#&`!Ik0)4H2l$oC z`%70Qf^6?$lj$7Jz=jmD76XK*8=z7X6qv?(}fMzk}f*~7!9efr#qOMYmMg>-~_1$h_Nde;&cF ze!7usYUK)Zp>+6ZTI{B0D!r@vm_VU7Kv}B7IRO#M2wLyWzyoXcm=KN@VOsOZkqaf| zgi_*1k*Y#8joxo6BZM-g{iLUDSIi#nwQD)vX@I@|zK1gvF>$m>{LWS_bS$5ffk3n&Le z=i%wvEMH0t_ZBzdK;wTSmbkL;CaBdGdZ1QCyu3j14GKt4V#kL(;mppz%4s)ZUD#d1 z31$7RkkQgAL8kL8#IP7m(vL>W4gjd?+BYQ`M5 zBPijr$9>nE7ZZ&7S3)F5-j6~Uk5!9@@kVN&{FYika!^3z-YDTWof1ljH@Xm2h{muI zeXI5U8#P@TpU7(}n`&a8_`82vs+M9Nrpn%(YhH`pC~N5=%X|VZsBQ^zq&)Ubreiuz zB@QqiqpE&1Y)P0&e{pU9)n-`(9QdV?Nr<-ob<|W`rOx%k%q$3bdu_1JhHzL{1PmiT zJ!er`uktZ`(aQ3&S30X^_3Nn?<>HWy-)4-QMv)dcVZCL;O=nWRXGec;e(dM4Oo+=-lu@4Pw0e~ro>`soxQb)!h}+R5 z7jYT?=e^*lv}n*6vJ50b+7D!>_Htu@>Rvjz?d<*}^wl{XvKUo|KBv*BprXgJ)0|hq za3k|ffq{n|SZ{sYJ~;55$$!f`npDiErY>%ByCkq&Zy_xwqE)AYvUOFl)Cr7acKmvO zJhAT9CPVfw~ z;ht-rxf&K8-h)8AQ`688>nq{pG%n5UQgLW<4$C%{Z2NC9&&Ym)&r4G|ASPnQhk>G=D^b&hJ(g6(!^R3Yjp;tw!DH-$pbHQz zij{$(&dbF}ibqb1^X5^6+h8{5CKcM;WZfUqZypOrZ1= z<;KHtp{bHdo;Mq==@BHWZCM-k@C+Yc@%(wEi6q@XO7ii!%<9@K>dkJ6ZEf~UrM=G# z6QlqBM}AFMC*DQWlz-D15}j`|IlhkK2q5OdRCmp7#m5gVZ=8gVsXFLx(WAIb<^{!^ zN_nFmn+91+FT2tL7l^;ETcpj3k7Zat5;k;30dX^ji+^ z0a*}9$j~|?!V7`N>=~L&^)tZF&B3%S#IuAP4Y?+qER!=Pdszzf>&{HE2`#&yRF( z;KKbR3Uuv|-UDNo87R*aSU&0c!yu4jB&i z{H^*hf~OC_7qDh#_e7dJcX zaR8VMwXo=DBrMr1{AcyWL5aA?EOc9S8pQUgrhZ)miIF+lmyi3G0L@nRIg|IIBJr8X zV1X0hMh0!RRzsg!_a~_s%+_Ote&Tq)wy~ z@NT$^ji5^CU!iinE#U2a_u#H6GzrdMeP9~N=;)Z6Fng$fIDxETcE_Kx9g>=?^pe9q_!(&$ZUE5Yfx;HCrQJDToRo^bRQsU+ZxR>p#o@kGo7WCH4avb1$Rc(eXdKMPB z-ncK&Yn9eVXfOQj#D}uEfBV~Pvo>Kd@g*}07j%6Dvex=!i1_(?rBP6YCiAD;xiLYD z_~|zbVx3U8;Eqy?ZfJFmN}aw-nFBM($~%{wadWHC$@oJu@OtO(LNbx9=1Jp=HA)-c zrYL5gLu~0>ZE%f~_}%B`sgquJEtMZSy3gMu`ICx7954A)C*m&>PHgs_(jo1i<=C+9 zjnJp|cN7`4!l8AVoN?a2z{ik&oKDhPJI;6z)0|)*^$vRb^zJc9M1751sW&qTk}Z7? z$KxaLBK*L5_t)Nu76Pwx!DFTe^SW4%q8H}0S8cM6e7hrUo6qHu4_XuX!=k{;QO*kU z#K{@b2?&L#rZ)s6pgF$C)8BbB$+I4) z@RNGMk%=LE`iVJLmteQkd3gWe-38*Nq!ZyCR%|IRfw$XlP-{VG3To6%9L9;OD1<8)$W!nA=L^23zpqV|Muwf}&} z%jk14TST!WNPQg4zcv23@u;##{rXmVdF@*1c`_TMy;%7p$=Ml;-V?8U@rb+*lh*eJ z4BIu>wrzLU49Gr|C z(Q{hsuz@t}%nZ0NxXyTky?Y^VltcU<*5Y6FIGYM($O=@~_JkBd?6l*xbvZ3ZOlPCU2@AK_!`Om}c~M_ufYuJSmq$jd;XC2!_r>o6K)GO39FoFU#B5Eul}tK8(%9PGJI zHdUWaf+^yJ0bd?4ETIP;68e?R4X6E!XKW!&;@cBKg?_WQ6;{~{j~+^b($12poe~LF zSlWy^H8+iNux@OhRj>TceIBd#l)2~`@A-YvT#`O-!b^B{K34-uPIrwN>hLd&ITH5% z`)ECp3+} zA3krgz152*d{=q=R?4Y+xlJr&n*&V1()*lZ@dcO@Gf%TKDt70>C38}%YaLkB`xgDi z1ofOcx`(p^$L;)F)JmLKEx(?d$to?T_?YFOZ`Xl)s3R4b{!g0Ap7Q(xH1|`+G_2P+ z0T7dcU>+a2{LxQ*xj!}(pU-AwxAjtVKeO1QAng@ouBao8LDyBfXukx-GL7~0fWcwW zclXO^OrM@}Fz=v6L|0(L>+|$&c<^^6lrAcjn;Eq&zFN$cK7#cK_f~oCVwP=Ii6y@3 zmc=XO2y>k?<1x#DK_R{S9R|dy`}UJMX0eW|6rDR5aabLT8&mU-Q4>?stF=rA1S19F z)lgn-ZhKXkpNpp>SHegbQ?j|`Be)_GfKXm{KZ#U-?f+Esx{}0e8+oO5Jw-kB$*x#LcXSA1mTNI1FBO87G2eCRj_4!fc zj4*E@V)4#)@9~t|lHFk&cgn6y z4Om~*AG{-wBa216k*6VHgXpy|ikcv1|p(%MHUMV8p#Rbc(ab)P3AT$`#Q7&vr zt;Na`iy>@}zOtKXtf#r zcOB*hyWUwg)GWJr&aDi?`I=ZQDEbTjW5o$?T+bDBgZ$2GlvU5lR^yi1E7d=>)v$@} zAJ()B9U2>zE=9PrIVun)8suVNKCDQy9P@1?o&B!e>Z_pXWYr8d`M2yUAN1L_%e%yodiG_3Ev$Fu|k z=CXj+!8INgk{@Mm`OG*~-V@38S&AHRN0}f+$;O=H0zhf znMjkKnq32OVUHvc3kr!$7*MzEg}HJm>UhQ+FFgQE@n2OZ=`oDUlInzQnWpK8wDzRS z%q4uWfX+;5%f}XHPHMWhzW>bwl{Uw($2J<-o+pWBnU_>dQIVi97VG?ALa|;@| zF4mEHuFyj4=zvXW4i~UA;;A#fWZB2apvwz1 zBkbudmM^|m*-gDy$Xm)8LbZe2E}Gu1;2u34v^JNs5AFjGEj$#`J|#sll)1v8#A*4= zl+$fTKfYKIhm>MGn=BU+a|#EcTuN;Wj6057mtyg|;W}*uj4!ZU=e_#3AmMR_vl>sr zNt7Ss!eYlxBHxMd`R?^ zn#SkLzJo`6U69z9#;DupG zsC`5%a=h>?rUjG5gzcNtomDvY5}E@LmAkX)G{SqIHGb;ZA74$F>z;4+s^lVFHc#PkD>fZM;7L=+dqc`lc!I%YzXHu(IQ}v2PccBSQz^|% znv~z%C*#n=9kH-7{~iJEy(8n}_}jThP4S$f#a4zXiVAt60e3|712kFQ(xdRE8y zD$zV-d3Sd9v+Ou=u~cIA1s9@6=Ud@7J1Y$=i*k{~K1co5UVoZhqPCG!lpIn|%y&t_J0?2N9A>f0_R7D= zlg(U5cgQRCT;k9BJEW%_On57Nx^p#+?4_dr#+?XMs_x{eND{K2rPN!dJ)JkD^ z+}ux? zC(#+j8g9u8@c9s3zeJ)|+TrrJ#bZna;Ux>&Py!tHjwj^RQ_8;ztv^Wfw+z@84N2GD zb*3*qGZPnAHFo}f`4M{ej|M%~9NapL5l$>cs1NlX)Y2^s(sn-a9imS>c|@@(OPr_+jGI)@Lnpr& z=BQ|ueBENYIft+<{eJV+H#hc*i5JxLSgbdu)VC3Q4c}p>*^T%bI?|J!LJOh*d31|g230KwPEMp>BVplYZEw0_sMj19+~{IYfyJOx9*Jfhq*YV!a{+PmUHO@ zZ^Sl8hcwP@8;f{7gQ>nzhZkOES#2r*ia_;TmnEp80W+gXt{7&J^#>#Id;7@6B_j zaEHXowRNm#Wm)ToL%jAWNI(B?1N;I5(5>>O{+RQw*g1CTjp(;y-1BqIc3B7@%5s;? zMJ&7<|E)hvIAA#a=juCr&AYpgdjgLH7?X49)7g3v!aSKgJCp-ePr|Ew7uf%=M(sc7 z8xv?8@EW+|1Oj+L{&~TI(?r%h+~`OKn)b?U6TcU7iMEw6IINtPxKFrlqP=e#taHO8 z_w*rZ{z_Qdg0DISeXhS^Go7H-oj-i-5fNtg8nI6ouz~F`lG!~x_v-3b+r49dJiWYn zos>~*5$2*>>Ohp2=f2ibx4`CUFX4P7Kg*~e_b2b)me%x6*0JISL&d`7q0Y3cnQ0!( z%PZU_{KVb){C2*?sq78|%xunw8|aYsun~!qE;%+B3Yw{>>X8vLvI!(DNB*k$$x@c1 zu!qd`f>%D)OK{<`bkWuR0T4g0(^IhdAI!^37omjloL>4miLffTSUY;|X|b4p-@vzB zPk<~JvXVqW*!POdi)IP+!sTU&RikLxSG6U9>jYRUJE?)AR1ZU=9tyBaaoE&RMG7<; zu5=pnh$9`B^OcFEAtpC(aZp{@ue&~UH&F`^(bHo zL=$iOz5xM+5Q}ylebAE+j=}O`ss0(sUBHMgF!Bw|rn=f>sSffhn?;2MtpEwRuEqA@ z&m=-M8~p!n-T#(>Y^9(AlVIeRgoIUu{pwddrLF%8M7o|JfY}e_YpF`P8&67(6xVo< zBA_f3DNn^vs+a!0>qHhs&l~;)%<#sUiE!ZmPWbrFx-E{jMXrCu-C)I z(XEow`ymYjzjZZF9&M}x8{VoUP2fTtlhE?xF z-&d6?Y6cA423PK%E@rE%ob0<8TRD0v|1`_)XQ>H0JjPz317sbvTyXdPm7r0hqSZT| zE+FBQCC6~4T021FBMCFZm&tD)7!UFSy;l*sBk1Q*|H z@Z4$Vyn!ijc8@5!RJki-6dK9Zn~FI5TVs`fTq%|gZ<`oj{hlVPdYp%>jj5$BbV>m!K%J?;ZSC8iy&ucJw%P=o*RZ__UKIARTy^rbj>rtbg9 zjB*Gd4);hC3#PwD8}IQJ-Q_Y_N|8MddpBNPec&&*|1Q^yG2og+*WfJO(sF?%z5()umS51ZWIne4AhklDA>9}hDQT2MR= zdY*md0UqKA+rovIpobFeI#B<&s!*AL4WLgM?F&2couT|io0o|~zbk6y`)_yb|NrRv z3aF^Ju5TGY3F#8)ZV-?fQo1{(yStH=PLYnGOB(4$QbIbUySp2{zt`*Y-sisWx7IAy z0JCOToPGA*zc~8@3#j^ECMCJ;Kc4BnwN`x5O2LcBhKjw2vpe1i`48o#XxWtbl z;)&=U_leUOS7Q`hOVs>+9T;2iCRa)h7cio46kZv`Mg*@VCi7>zbb6TmY}Uwc_7^W) zS)tQ{BdC^v?G{^mFZ{`+twO|#oJ>KC?%XN&CXBs|s*D zopG%AaPRGHFAQ&G?IJR;z;E|3+~5S)F@DR641eigzI2P!eEBF$Q>27b@4iBv;8kkB zT68MN+Wau{RB=~#Wbd?PJ8K}+su}!w!_w@E#$jdK#!8a~)?Q)7W2btJzRR}!@&=y` zuVx^wfc%r);rX{n&T4b!4$vWOpNHlP9M`utPsl0G?z(V0^fm5W#<{$ipTuUT&)zK{ z*m%g6taQ|br_G567|~``7w|T#7zm(4jlDu(5f&2_KS6_!<$HZWv54WHGckdAzB>V` zv(+W{Yg59YZHWR5(CJe&UVkWYomMSWZ=k(AoR0u5JzA|R4bEMT?Pn`K zC^!fLI6(eIjI8ZDJGF@;!LPU+u%Ke0PIZ$A=y@-HpryYd%Ql?vIO zS0)8N)r-$Z(0dBLM_D;mS)9ReNdQ+0C_8}I7r>D(M)hF>fsZ5s!BS)vPv-J6-Z#-{ zvRu4(7E45-+-vAuXg)4S9cf{TrqeA(vkH83etOd4aZw2CMAH}g^J4EM{!)u*c|;b3 z-PXr{Q~SB3f_Tq;sZ{Hb0)dm(0S@=_Mb>z=jgyFsfS4gYMcP~=`{_6aDFyt=s27Pq zc!X3wX(0F-;ROr2A`J;AE&P?>TKocNVX?s-%d4?29+abjs0Kf(^m~$1YUupV1?v`qN1LZQ@rV0dkHKm(sl4 zpEz(Q(-R+*Wz%l(z)56W5_YW|QPD@C&!pQo4Y}+6?*RO(j^<1I!aC)9Ue+J|iXcBy z0bgN7Ku!p27k7h`lgdmBFL27Ks;U@My?~3(#Up6IbQnPumyqZFB)c5c@!x9w>I|R@4aTGl2 z9!DRZ5;@mrp=&mSl+I_&$~8h`{n>Kv><4$})=8ULC|MgFxOzv}X;~scr=+2GU+sfk zM=Ouit=+?T>g@^nqo+9y$M|Ya3<|uD&l$v;;N0C1dtJ%}g-4(pw$3GT zP6R(vs@Hoo4K}&#;4kjXE0*IQjIi;$56bT^RKk<>$h<3m6f#OSy(!3!{)nl_H^65% z_m6x6#M-hs+$$vkQ?rgo+>>#!*Qw6@KWNqr|3YQJ3)hnbEN;nQg!9b@<}{PDwAm0F zd{*1SL&CyDQl}!TZ(y-V-lY{l%TK9{uWp`wq29BJ+IkqQ(XOZRMnD;TsLqkug8T2{ z{8xBmqJVay3BS!t^L{LGi@4K>_zdeb><_N%`yIybL5Up?X!$AI&{4PM?j z$O)!ee)KxGoYUC!Vg5il>#|pp_(bnQ&oHPkuz(_4#5^Af-`TQ#Y&uF{or*j)MNOr( zHE#{vW)dwV>GArKzdj7Zk0YKOKsg^_9OyEYXm1>UL~~Z#$IN^E%_;PKp4&bq9(+~O z#zM@%}+%4d@O8xx6WIrafIdupnv&{i!=9vbvp~R*j8@yG5TN@ zTf!Q0oDK4V%Fl)GT*bagUZlui3SP%AA$PPC7sOM(F)~VmaKAi+Tjgm<8iQz!MjKA4{XWlsyp$ z5jYy%fQ+3a2#=!~hrY^n);nxTY7lGBTBzqeNpwDBIX1ahe1wxJlt`FdanEA<9Dt1s zlGoR(bqp_-cgq@{6V0~-o|!&=3@+dRC{}2y#NH}QmdSQ_T=+P;EPF_mylg!+D&&*D z07-hdtoRT0X7wYguHG!K*j+^)4zESY=J~Rm^~#+qte^I9BPn;PFJ-x*VoWUu{! z8h;;ll8zU62Z;BUj)}7gdM|L5S`_P-eh0Z;7|bgAI2vKOQdy!>=mc=i5$eMW&9^q{ zO#;C#G_O#jm1{`ABuEPIjUs(Tx9VX_P}MW||H8n3B~JrMffj+(=y2E)`mZ?SG0Ti1 z(sWg|Z^t$3Tas1>CMz@q66v(Gl73hA(^vs%2U4Ii4-eBel#vRy507FkA~V`mR8QfJ zJ|x-Aha!(l(aCbhpsl=`*pVUc>NecT&|E&;$m6)5#(OI!ECmg0dtb=&_{Nll=`APR)Ba3w)3i;;Tsiq}of{ffvC2518Y&t$os_cUSzu0l zWNpLTXqFo)M%Dt;_mDc&i#VKBE;`2_VQ~{K;({+#b-5{F(gLT^iimOTHD@rWsi7dL zt~8!+9jnrlWOimQjhB|UhnCiD8d8wn=&iC)AmYM0>EzKG9M@SQO;xS$J=S}@TU%6V zbRcMcnv^729%*5Zlk7XO=~+&!$!RzO=}Ss7DKiTByr=^Ks-rn zxr9Ory)S#wg{?jvMX(sG@3r*lfZ@TA!-987p!{GxSNPm)2@~aLDdteeQOznKKK^kF zt_9kSN(!Vi#Gd(d$=*24&Fl8z6{FS`DMl4f8K)`!(-v{iIz7@4 z-gzUuuio)ZMtpl^0oFSj`f+`G7M)ukb=k*UDR$(y&414Nb7n?KF$-?;A?+NdEihYY z9{x{-{vC9mgh1|SBfRKK!61x->e!{d8g2cVR{XkoJzC8~W!FtQYvmK%Og@;G_~!v6!1f8*l636xxT zF=wCnoJNS9vX2O7(SYe-pNRn@-Le@&zi?=v;VR)b(U8q~g29o@YWIB8N$Imb7}`ei zK9Q0>GvC(aR894E>G~%cL`}^QFK78Jg~sITQGp9b-$v@*KV`s3ZrMcn&AnmHSEjCp z?i2wP4kF+*=QBiB$eO5@#aGnPKw>RUH_TpCEL=ap)Eif=bL)M!kcv19< z#~V|}Y!-DZDx+(c~Pye8hS}wdApnlWj_ak2WJhdJZ z%YuF4&@`eXg9F(V*(RZ{b;DBc*mbX3>dpTZ*QUQn^#<;_715t$%BLfqx&>~^*_5(Dr&}R+|1}Oaw|IBA_a?OmsfV)GK za@qKZTtsGQDh0k@(hPy`m=sC&;Y$BHE_8cQZHqAe3kw-}J)&v6B;#TQS}~Y< z<-HNH|EfWpc8;~S)qbwqP@kl0WH(~g=1>!k9mRgu=A96-zbwE&ahf8LP zV%vF10aiFvvt%@)yCA#?Zu`Q?dc9!l7&9@6 zR>Wx({)=+1z{e^GMZX(YdqM&$I*E=nLNg&Mw8M8+6QH>lole{%Wv6`I7CPxC6<h~sAXKLS3`)6m>JGitSe6~MID-HAA0YY zZm!k$W#<^D%rUSVb~LF3qpRa3`FlqP7v`UXd5#5dJeTJ};1EX#GMYTeUbp@P-MLtI zC+U0TZd*TO^j`FjAahN~q`pNMH(?UVvtX-S4z@iW(1HwXR>WY8nvNVx_hR+HAXcIZ z{TLgn@TMWy0V!CUs|2gK6c+wmm=a_>^GT#oggsGWV^tt+zOx%7kkw^tXAkl(rczd8%~w{Ya- z1!QkkIdB?t0WU%PsH-6BTgAsk^AO2Pb08wqQMP`gHs2Vy`Dl2Y)q*!Qesi1I z^Ip`JD~-0sa`kRfDxkhy=CB}_T;Hrtr`}$nXa z&G*x_x*;1pznB_LI%}-SV2a6MZ_rxZz!Rwq96HwQdflfmCPHdZ;^+y?HJ{)6>MCpP#?Hy>xeSl+|W; z+l8jp=AaPvIl=ZP9YLew=k5@B+8^vu{AYF zX+&*pSeQ&oR=pDH6xVPkY2hvLI#+!+pR~3<2ZWRr26x_F>D?b+jn;?(YHB$Khz>}W zXwV<}7p{UM1#cu(-kGnviR+K<9#HEx(9TYjlV8;VY8z487)#mxjs7lY$@|7>|-V;i)I#n#5LSnp0`I;10XRmRjguT|%pR9k^Ywgn==&S5ox)?)j= z;1Djz-9F0@O8ZcbA934ZI3oHt3E)>iEDcgt#`ul|g`=q%=VBL}TKaKO zKMTIH9s?r`rZxY(elYzl)*d!fZyHkDN<$D*Ks_;m*L&9vh$Y8JmYD0lRuj}OJ!CHL zOaZtr%6-34H^J~SQHj}g++w0k_ZXw0g&^&nfdnG!4;1wsK~#IL4x*I~T*@{f*imHo z?KlDdh8({-yX8k?iqJY~;%OKJNdb<(`0bq~#Q332Wr0Kmtpa?xxd)%Y&Q@o~Nr{HA zXw6fm{jR-aLE#YoTKbd#JkzH>djk5*@l21rGL+ZK4%2I*9r+)!ZhYh>0QZ`@MpD-2 z=vcdsacLG}j<0x7l_7HMi{%f@3Nf#ar;33KP{a0-;lmjbwwMr@TIP{iaqelm9b#6p z+zK3}U|!tjNK~nAPgOBpT4_eNaC77gzaTRFxh-+}>M@qrk45Lw4y%K!CiWHA%UdyW zQWi$8yN}`WhmcgYlTA9A^^iw^?sg)$O<<%euX($Yve3|dcKZI#VOGn@zoN2KK6*Q2<6^+7-OG-9|0>@ zd2nmxuLf^$P`YV5D)6V;3unT-)KGZ-+>ieeY>0u0GOIcE45ZY(8x6!5-^DZ2s{W#e zMqH&DDCV~bdqhp>b*!!=-ngFit0))gXtNNTHXb^s`lW4QAE-xL;xOtv9r=a8A$3-7 z@aIVEB~~t{;*QnW>@qoy?#I^-2M~nLiqGc<0LRkZXn39}NWe>uDOodg?|zQgZh05w zDj6aj)!Tztu);LI#rejsfJ9yy#_4Ha-A{XQt<I0Js* zT^jfrF}RbMWJFquW5_wrrnsWJ_vPM4K>h6i93?!>J};Dfv?5#}jbs2Tq+|JruVXWf zHojFFw;(Gg*USInaygNUwFWedh4=LNiU-|AaeLDCO;B_yDN%*BX4~u7-k0$^AD)^> z(tIvNDp@*Vp5mDFQBbJxF!s4zlm8}{|AGdYoEYDkpcYh^arqLcI&rq7LVN$7{t*}< z;1c^1g%Au+M<)enAO-Co9*7a(!WfQC8s7a$ZvQBWZ{C64>h|(0a&QdvjJ+f%+6!-( z=v+NYvv|!FUFFNTRZ>s>JH*#9{Lb`IP?MAR1(Q5?(bWw7VXPP!6u!+M64Ih!B9Vc) zpz3mj&>(SU{y8i*z`fi&fh5`oEr3kx_CNb-<(t2`HeAX!ANhYm*&^;|u9cY)cQyi+3&?)#7R(YLl4`Jpzat z=<;(y*twTiHbvLvHC6U{51^Unh}-81vCBK9CdSKO(2Kj^3o4pO?1_6T?vYhI30Cga zdBolq;XyHn0JO)E$@wlBRT;K(f9CriVD;J+Io>Nq2bjG(QSSLBFKD1Ri}l*r_8DTV zt{tbMdIkrJKnk}?eVbbrY403zG^uv$FrshQ2c}!A>^%f8d)DLx&zrMoXdrz-b zIj|*XIGdPLZBUPG4c7Z^s+%deVNvgW1M+B@!Y_C6Le%xV!nm|q3ZOXi`P3nU?)F*! z@Q3S*c0o@@3jO&;T^z&P+))Q#3Qy0#rnIWs{pb#_!@wZew*Hz*vnIH!j(!T~aI{y& z1Z9c;j3Iynr1HB*A2}&%y>VBqXZ#Z!a&iJ_Bk?YE!eQ#DW%jr~phsl3lw!Q^bd}5G z(Sh50JZ^(dj@*0Y(#-(yXt-^yP6syEH$E^>f5c#X&C;Cr5tiw zd0@UE_*dk=G8GAm?P`G>w`DKqb(8ZkgRW3h2D8K67`)cCYk{=O8RN%9@J0N|LUC*F z$`2`{`ET6>hTeSCFtT7Ow&auR;q1_()kT#bdoi$17A%c!&T#vC=oEwUx6CM+{h{Go4EJVhBSE8$eEA`F@NWXq&I#}9z!>7 zf!^pNU!Y}pq+1;EO)eQLs1>kgWO$T`Od~kGf-;@=EaILWBAPbpx#Y7xHz|w#@2LDG ze~tZi8l;vHe5|X&O^KWQaWQHV5|Rb0IdOx}AuT|b$%+%+r0KgJyjhJEKA)6ox%pPH z5nOmiy&!#WMm&|X^{3w_Hian@g(2nSqcja{z{L0t>sNHhcU)ob+r5Uu>_iP;b_mDO zSP@XKHKAM`j(l`OC`-T>MiXw5;~uP5{n0BfJxJvY$FTQkuhQ*`5+H~Sm5;9Mt)57D zrVIJ{l}miBi>EpkN1+gFONAOFVXGt!VR7WHxf;#ya8o~%L$=YC9Jf9zbu7ZGEO=I5 z$ghjHBki~OXaJt4r1o)iYT&S!^2z(udmC+rDDV&6PCTKu@xx*=^9~Y+OH&9Mww)R! z$H6rrxS2z=hlA-J{psN%I3n@OE$F%TMe(h?H4n=K(GrSv@q#H71Y0CuJlKP;P)&h~ zF&{*pjTq|ffu<}%^rD_?JMFnGY&Qwd)HPrS5VEj9NKrm}-r!<=zsIjWw@pc<$QMX> zkZQ5eJau@Bvq*s`I#O!B@b+m|JtZfu0J7+w7ZVVA_L^F23;pxi(zj!c7)eR#uF}0k zg_cW14Hv)pmrS~x;l9CF@MCR}kx`Jadv&@;_!e>nZ0?q}^o&dG7rk1ng?7Bf zI~uYwWCZSpY&&{XUA@=~*BJvHUJNgeTP7YxZf>RoTY2D$m<4Mw_f3BKcXNdW0*1jP zC#U*RuB<75%|_8~akUsSxpClDEDULLHoX4`ZPbJ?tKI7zZlg#M5u#CQqs3CH;R-6tJG$fGg|HxY7N{yA3uuX3#~SEb-7g+ zpEr|Nt)2Re>2GxODZLuYqmopk4mS3&4pezQ&2Ok*vi=?f9NVm(6r-S84ztUak{y__ zidU4ip+4IG!pkQk?R#^!Xl&2lm?yIa2Q&)5*qsASju&@NNlZ;EDn+DxDGd^Lc@gM2 zogd#A+R<5aP|aI|%n8!$BZxXrQb>u?G6d}-_K zs@LN6sxhWPx4T16@VO%az-P@)O-gmIW@p>JGfTSPs#|wq@tVi;$-j$&rmIjIj;G)SQGS&0Z5`_CcUqVg? zJEkB{FyTXxXTr|NyQ5~xZaJW9FPz>M8Pu$lC7tjLJuij`x`oc2cG;(IBE<;smAy1iWh@C8a#+dVc17o_9WtGZ7>9oEIgiF=EJ}YbP*4TcOoN z=qG|&FF?MfEw-UO3O*|c5Iy*irPOxP&-jP8yCTq6+6NEloKFo`)cW`K9 z*A10#kbR(P2gE+NuoERWbh3?~t6v$^I-trq7$^eh8n3|U%`wLeby;bNygU##8%?ME zhY=VU5sJ;)6siQOnDMZ{r_PQHKzg0!<}^4CIoY1M653%DV|2t!c&x;$Nw>{pz}bF! zX6tMg_O7#cWxcY^-tI_NI-QFM=mw=UgUDV3(*zTa?W+Q-An}Cg;DUEC5}Bc7BFvvS zql6v)7KhJ+>W_Vv^hfu1#bx~Y2a4N?m}HJr7AN9ukL|1L+RUX;WG`I)f|+T9urEf>i!%gC;je+d@8 zG^p}0PSq(T*U6eCw8b|onrI`*n(E?E3uGkeWKaaK=o0|H>`z4|j(`8>jJ7})S*A2S z{Xv;Vq0CO^=cse#+{ODB!;@tZwDAMfGs9K`88qp*9yWiAZ~st8^w43(0!!yR#UTv= zf4SzfQi<|k`nT!Qk~`EZlvbb?1;T2is!+n~;J=9AR0i}TiM z@gWQof`jW8sK5BWZ^0I_*>=3aO!7;Z|MnKSfDYmOg(P6no@ zR$5}Aj4RW6@zAD4dx!-l!H%E#dQF#heRdVmeR0`GQ*O9qum12r<*~!m#{8;u5ub8A zy-WP4-QcUCp>Y(HHQhE>uSjpfvZ_43Vs~d;TEJNP<*~~sgw>&vjHBru`R$4wK+sjX z_EOTQ@6P6M_=5-y&Kh-%m0E6*I;ac_^nQGWy!D0+M zAo>vXO_ejx#X?oHafIR8+S1!~GIx)TuIp17@>B&n%5WTNMjYh=d`?%5LR@F*o?7nr zu^*j?bI6dun#fZ8!v}7T(UwTjhz5_jr9$P>d}%pp@n;RM$DAiiO^G5>Pod4AplI&^ zH==Y#6Nss8Od_G>!ydTDdtNted*Y?UGw?=mpxIPW3%EhO+nWA|LQZv6I+;l&sQu%g z6J~$4i~xh90lyuvk#?V`0A%E-f`Ys?)rifzKnbJ-?t#B^c4iW)e1L-n!Zu8B^$XMG z1FO(Poe5q1YGO2PBv^x3gs&nt;s2|tZHJML_dV5C+i9B(j0$kPxNi?{rLl8pC=~{Q zr4VT%2BJXv`LyU^m^d;BR8$Z|ZPn1}qb&fUw*DxOj?qdCx9Yt|J26!i5`VPEi!!>CpVsSX0y5NY`CzrtVz}6ezF0y4c2(ND0l#K9ivCV zMb+NY$=-yY;R5aO7}18by!r0FD6)rGBL?j>dZg*q)J4)817cAxE+k$LlsF;slle=e z;*%;np$Is{m_tWRDD8z zy=L)8=Y8YHgPOUOjzac!_!}@KCNFpiiu5oGApSS*J`kpO6bZ@RAu4#ExC!4Wr(Ns) z6Y~AtH2@AWX&Etbr$+4Hf*f2OT3bI>D1(?++F#i-$hfHF``ARlBco?N4yie%z^ER7 zE?~T98b#u7KGV+%E)A(AdOP>tm9;NlV#omW9;9ke;~NH8f4+`4Br2FVIgr{Qa)4Xe z*$SfwI0F=pTBD(I_}*p61@(6oeurzGtjAh4T&n=aFe-o1z<`H8slYho@AF>*BiLkD2@H*J@6bZ`=~apaKKZ)tbhkzR zBr8jS-~OdFMOlzkz87BR%|-b39KL_PMQUJD)`@|qNnKj_4Jd$2dl^EfC~rV@yQSKJ z5^uqQRs2<*x6)AG&vnJ;4qfo!==9%B3y0E(g0~W}quENi zkDqq2%QzTu4u0RxZOg&*F^ms9E#r_$hNi7rX4raId+ak#snfnjsBG@K+UK@x^O3(;u>ozObBD ze9C;*d}|;BxN*qxhc&;H75(h)cEpQ2!!C2Yobo`{b6SKZMMq6dY63&E!E!Z4 zA|xC-bm?9)vGca2xBDZbR4K9Js;lG3*Ms7p6&|<=gBgL>_39dBOUr0xOE)s)ls%n* zx=hn2vHf$Oi>8DOjX?WjaV^1T<8XxXd&1yYR2$Wc@iw(BSG>Q@qy2+p{Eh+wLqQr! zqP#H+hY=VnMeP=EvPm(42pqoJZfzyjUKRsGos2=@@AD+r)eV^QH3{& z7M6E$`;))hQT^mep4a0u8Xe&$wX;&nkB!3eT{3zM8BOE`S3a2@NiRErtL>E+eSyTxcp2%rs78{ipu-$ z1l>M!#!ych6)$hml1{k`JXtUe89$Yc3G@@pXi@;{TZSW&S_*t&rY=L-aIRg$ZZ+T^OF5rXaKGfO$+IfgH zAU2UK*0FhuB3?pT8Kx%+zr@@1>+s3JRU&brqa0aw8s?;SgOg6fWZ5+86X9bRx;|xB zFA2HZC)Dq-2CLjeg{Nd~j}cjNE($wiP{zzYeec&?HE?gpUiiJo;#t`;kGf9l41JDH z4D~;c`T-alF@eNn8WeJUn8v32gvt+p|MEMIUv&f?TzC~Bg+;6;0w*?gf( z>+GN$McCG8#ql4|4D!y zq{u@h;?yjjS%_MApoVPB+q|MK$!)G4MW-SB0nC&=Dnd?$9k0I_Z$Iec_ZN6i8`qV3u#XCy^_`o&gO3P~baXP-91CKf7(PK*1)~NOpeP zm;Rbzof>Fg$}-ClP33ZIdsSbt?hu?~jLKZVIqlUR ziRneAp-|)VRp1O?9tGKW-5Rb&!1ma!KiTrRxze(iYKE#>&#t7(>?v#L2y*8bz{}Qi zac4{7x}rG`;omT`@Tmwxq~1w-n82sEI9mYd+wH3qo)$_=n9DoJXwwtxrx?er;j|Jf zMe;g>GaKQc;HChjlaTK<14f>nHBak2O*Eq8S z10t!~(1F=YgpJsw2&e4K6VbGjlr4BOMRD zPkwcFRZa@#MGpV7$i(3Sf|8Wku_b%CYy+IcC#%flxDo{{&k-jUV_Cn3gfQTEoVRPH! zAtTtH=hOk28;M;0Ck%BaomGd`lPX-br82VhULtdYXb80$bcMUZ)NUYoVx+79bNetwK-| z@HSY$KiAcQ4W};|`c=#IF`9W+7~WdnWUd&>h0?A*#45DTr*6KCKhWOmq zc&}@$f)tc=#UMdQSV0H6HeC}qg3Bu#q0x1vVjJzdu1IoTPhrQ7XTC}acEhB?o>Eaq z@6-+Uwec{xYi&W8BQsZbx^X5xx=8#^<~n^LZxfR~L%FI^kr5@PMU79RcR_!I<**2+ zfF>GB58Knv5^Q#Y-JnzbmRiN9Opr@XRcxlO#t7*xwjB~)@)MFKD1X=|Yi2cn+0(}M zqUG_X`ir!QK{gqQ$f9w-%6A15l;^r=)@98Zbe{7+P^^P`a*3sz#~5I*MX@n5S(iMq zEEAY|n!;7H56B?WIg1YqsuA8c#3^+a9|P&wg&r3#c1NUd&iAh{gQD=syfels^e64$J zBu!-+WA->+mai<;x8H9k&{Zqky-h}pLY*NDIX*2US>#z7u3Nj@B-yYn78XQRr}%^v|E(97?N8o! zD$Z;yMx^Q9HgSs#$OljG!$|vOr_j&&qu+Jv$WuMq>ePXVS~-v=55EL%;JI{kjt>-e z!pN6Kypa6B75?3Cs?hP2w;4SiL=#XwZQ0X>TB3Pk4|vXQDl7}8F3<>Y83XL+?2fz` zDov+dB7E$rKcizvf2UO|jk-!K5t-a&lW{Sz$?%QfqskdM`L7+~mo3?@D)3@nzF@FF z(&6D;{ef{>m;oCtMmCL+Zum1VR=4vZ@v@^m97f`NTh0wV$tI2*fLM`0Ye!U_57K}oLGam3tLZMT??|XZ@ zOZ3Wapwz2}%hYYI!nV+H$l&%WSIcl$gfjj00e7zHdnb$|ayvCRc>!0oimLHc)MFP{ zLA$N@cJ^Px$_+3?&Ku;bLbfSo=2aECF63WsFUrCv?y_0=Z{WEm?-BvUlnL33B{)PP zY>Q8;6$%(4#&R>~m|qf22Wp0_Y?wrWT`5>_vnpv|U-MRQIy@SEqo-(&8+~c4+_^t} z&LO%M9xpY*SjcL^pp_MtLt19|i^y}or@n{o&z3k-HG7I?w6ix}Z`i*-O)XdIqZ7;R zy07i_AQu4r&qIC$#zsYe>Mq_gD-Wm)+jYJNF~19@fFJrupo4J>!SZHFsoy}}ahEb; zS+C`b?+sk>f(5rJuO92j3hZ_qUNyQ}Yi6!}FJ(s9cE}OL`?JyhlwF|y&TE4jePs#7 zj<(m0UIu}{(6AW4|AHHeV^b^6GRm&?I`CdhyEX~29A@E$k}CX;)eF>&bbm+E*V4dqqkEz6>|E^G zZe}cd-r?&jx0G<-H)|1(-(tlk1zC>L?5?0JsE!?GsWIvwMueJ8R8u^Ei9F=&Q6P7Z zOl3-y8%{k9bTVpux`&*f$o%IAIdr>IHo{eIc1u4f1^ zlKr#f0L4ZRd!%pNux8uwcBj&#i)#iFVa33t;lk2!yC98w^YKqNlPQi0RK8oi!{XI| z@8p^8#y=dk9Vi(^O|#X=4*cpZr%8{;TglvVy`--1a2CD0XQ+v1z3bvG>OQ*uPXqm* z{)XBC=5^fo)ZK=+Z>gE=5>-XZT>eGq8xTa+|L>P$_~F(2LF;eD(8`)`h=96d1Yk){ z3zv6Z*qWYo-m9T!+w(D^Ckv+O+fK(LZjH9dh`G7BuP&%ajb!e4x#B~0JG$a?aW~6= zy0w9G*BE}#OQqc_MC`=i{jba)(WtFZ-#mZJv`u3B%fc04a3kH|%QaSjAmh!BUgu|&yjV**i0xXy4-Gy;$7 z6=AxLdgaasW%v?()9N#h1%y`8-Lw#%t;1|c2)$-s#eDllp^&F#1t%Z`96>shelnlm{aNefcwJcXO_+0fw zEdDEFOs#=+(d8-D4vM56E@t_sz(@!MgXYAZHkB@kxQG>rtizT`&+etG&&)(a{(n{- zNN|}(Xcbr^Gd7-k=3@46(Tr)a!DrtS>2rL`j2;N>*njUnieLd3CqTk`f!GpT_U}HNy zs*9{Q^)oc->$MlmREfJ-fgGUgb^jPTmB<7PAwv*OUo6%jJcGJsRB<$|=q%ez)iw5p zM&V%H?$0zIWkAjI_?j>mLRTc^;jvmJf+RbM$>!h6oQan2n6Nihk@%oCPP!1QP}R#d z$~O8!?UQ(U#D56gw!U@U(?xi6ur3UEEp}C8iEfIOA7XRTjH^zrGt(_YfqAf$k`P=> zMtc)p=tww}??Sq&q%zSk;lyz2_oV{H=ok3#&+x`)q1C^%?5J+orXj`9X|=@T*n>tT6IbL&d2G+?TM{5b8PMw~X;p~(m z(53OGEOIv~GR6eQ58L^Q5ElKo*4nkVr^#Q%Tdcy*GT1LjUk~|6l}P*}_5ZUB{CN(T zJ$s=BxL(%H$Cc)2wM|bQ6J)-hVCfeb4kvc#5c_Z`KZ_4ZlLm2WlT!hAj!JEAP{2Ai z$_x)QRhzpe*YdHJ&8Z~+Bwj{u?&u==9c8sJvfTls^vsJ>U2owrH9>g`Jo4SeZ|}8u zr5)?jF@w)e&{kpIh4&3ff5Z6Bm@YLW-q{pfi{&Y16$A4~>90J9Z9>G*FW;?7VRcU=Q*jz;2RNO=* z+S&x)`iSLlZLNDj=skZN^Yw~=3tEP7H=(n45sB%t5SodD3R*}%bbI|{z?vA6UxetD zUK24IvsIp3dFjJz=!!GpNfyFmz);GOy6vm@#+8NzmpRm&B4Maz0O!PLI`~sulJ8SQ zx^MbJx}c}kOA|RSq&x5V(0-NTwQzzqVhS!??b)}=_|K6D{92)(koccio+kqH=2s`t z1gleJ0yyk@Ku&w(OUH(*Luk}%2VuJ#gBhtuT1We#|Jc&LFsGECv<0X*`ZiSSyc1Km zSjyY*yPmsmA{_`|n8yY`Zga13bh+w;EB8tGOyK49M$V zVR0M>5O#u}7*Q#2Hvg!R4gK*u*eQ${b5y#X2Myx~1P?yHHakGBx_ zy9Wxm-Fb{B?sG(oDeGq_a!d<9oDw^@X)vK8qMtp(qLmPSr`*VW($-0>mh~0YiZ87F zb&U+);5-+|LE>v4ueY6Ic&uxg?xpa5?Mxq$WmOobuShcVi8So9-89v!j-?TN1&AB# z`pjRoZ0a@XJsRV}M5zvLry3a3t7?*asl0w*V}Th55^|`U=+6GRp#R5n`3U&$TT&Bw z=%TW$8wRnkjmt9QeddB33;BpkMvJ2g3FaU!^XZf-(X3c&nkFmiy|F+C5AK-*7F|jD zTgL|-s?Og4$d?qAGTQ+XhD?TpP8|a?4}sW6yK2CMY>U;ZIa!bn^@%I597aU@B(!!2qXeC&v!a!HJ zwWMc6Y!cj3f3T25&wng7M$YigG0FB07yFck8g5NzvbLShK$(#bX!Nefn*Eo1u9g+{ zqp70qle01-dkuYXg~|lIJ~!Bwo6QDseO-71C>=B1KPtR#R^0F(y+8KPA)LK@K`9L* z>Qo9#vpQDZfj%0j(-J`<=hX52Q|R_YRmLJjdkK2LBePoXXx&UZKtjB)eX`J~i^3EW zkA27d%j#05W%?Sg*Q)FOe62>vinrKa@W+uaV!Cb~?sQLAi?5^OrTDs<<)#W*=0uH@ z8%*z9g$_KBDglyfEr3dsC_kLt?}IQ*<1@6-D4hT5oG~dt4M3EujFa6VTn}F9d~V*f+geBT7_++)Vy3^2BVSodoRaxE)AnowD3pv z;ztja#oy3tKN+a(#Xy0tHib!RB0w!%1rXGH%gT6>V8;~g9rl1rcofflKG3|YcwwV03M|mpOo$lUs!{kK1 zD7L8W@l1}{<<#mN_s!3B0QB;Xl{^P9u>;o6r@T0+%5o%o~Cl^gxNgd9rEdXNmW)w$_l z!~PPEz2{3~;kjv1MPMYUsfYFL$pL56g_I`d+vwC7_hBBrr!IKTI?FZ%cB2Uv<;s=C z{z^@zcjC^r?B@+fj9JgTvINfxiE{`CNT!tMS&O$2M;X^o|pO{~}oztKji`qC5m$<~Mq%W@sze$lD zPc@+O2yj zBi>1+g~K{9=s#ro*A-qK0RNlslQBWTl_0H5nF;*>Jq7B(BvJdsqwyw}c@1AyF8o@) zHr$aBS(jjpNRe@Q+`iR=9U#HF_(QOIW##?=0TjY661()@iaH#m8is)#JA1}Qi60ek z30J3L#&Z0wEh%IN{XVE*m9q!Fn~TV`icX-BYfi&^OMZNEwm6YCckCB;({%qQK}gZm zKk;E4b5D5}{a}X5E0Qm>K*#-vuuL#MJ_DWQdk%M}S5z~wYs-R=am2PZ31#PWQN^~l zV@+4R72hb`U?WVKt zYWuDY2R405YbdQ-a!x`Q$qZ6yKN*rTfz-5{S~x#6oHi+I!O5|lOK)Zg6inDqA8i?| zr`t69(UI7KEbros>Mgf;}9-)M~;fy&20pC zq~d5%Fm5ew6oj>Iu7amiZY7zF=8}kFNSR3pUz$3iOIq9yzz?rzkD7^7g7^T86(Kq* z4HO3rYs(KBX@jXW_s}JYX98Thj&<9){1(x%ui#%cIcC46z)p7Vz?@CC6bh+WM)=pF zEGkR5O@M^K(kyB2h&ec6KRI#8$QR8y>e9|&0klNfLzx9%h1u(X_^7XN^=np0h-rOZ_Gz+l)Mh0&|Ic* zU;qub;86XOEpF)_N!KUC`vQJ=HcDh?!%tn(MK~NU+c{Jrpyl66iRB^6NmB0~OB#8w zc@E{)B){twlZ{<(#<*io-u;3N?w#FEJBCIeu(dI=eQ3bYy)7%M>F+Y^@QfHW?JzqB zPZvUdzM3aBPJg!2B>yRfyVbDH-A#>A6m!^FV?H{UHr76R;d&Vs*Bri?ZwQ8bTs>|q zLYa{XR75(OoX1&Bw9wAy?&ixJr;NHP1$P_QaDlu!s1+kKH=jSUV<(eR=eB$fSG8qS z6IaGs=hBtKDOJeN=RDH@AWX14lS2A^pII9AtX{{I&bkc`r@k5AFF!rKRD_b0lk0ZT zwG~N6Ay_-wh|s+`5`3|Sg#SnW4tVeps`TNDIwobyCTFX%Mj9ZO>!|?^PDVMr@-h`_aB3Uh zt{mEw(`PW|*co5(%74@OSBokf$Ofs4G?bB6)k;TsNN!89&nvscbPKH6<#$8(8h9m~ zQm#cO5dAHgGwG8z$d|3&vroz^HFOBO0M^#O`!3`r`Rnq(Mg55(S}0dH_M-)ed~Tal z$QXjCdN;H@p%p)|9Hxy9Q|c~Jy-{gTK~5%jgS@s}RhW=4<|817viE{cw3;3D_5Q5j@a(Y4K_5f~yQ%v)_@ z1QOr4U^|UW2OB$R6zZi0{?5N#uq=afJ?Lt3M@|RZakST0Jm2CI08eLbajL-$iAelU z@N)bQ{vY-}wFTH6?vjA10qzU#=T6pp0!XF2+^CleyY-cCHP7yFKIRw}Z| zCt;Ds7Q18C>yta3yN~KE$T1DY-=RJD@z-vUFn<|*Gygi>hvikBf|TA({%TLCbD(X& zQn*qQ-kKzJGMi6*H3Q1~nt4EHhH|rc`bmv+WzoalO_@nxtn9$?CjEjjTR*o(v&qn2 zdO2k`x~ znl(8j?NXg$t38)Y(fT*SJWTpga7&#L6H&Kt=eSO;CzYLs=AU?T>6e~YtKSeBBeNsQ z3Mz%K4vvD45?~|YM!G~{vXkdE&DP6JL8lG_`)@Cm%QTr#`mU{q&TJx6njyAIr^O7k zunJKvEom!N8)<@No_`s|r&^LKF2WiYU0fH?D6($U>{c#!^nTg4}QHq3wO(WiG0c~;$@KfTxoxef$^n92?px-If zNXHK;7){m>cc@LxEgKKEjl|@xXoD)nfy4axegS!GER|TxSMVUBKW#G}qL1Ps(c0*^ zgu%F^prwi=ZdroM-cEE;#91kZY5@U2~r3Ln%J%c7%r zcOE1nJKIOo!caIld+fMakUUdN(mLs-48_i`tSQ-4gp2Dp@)jljPrT`!KwpOdMKywZ zmznLJ$@S3eT%3P?<}*fH-8TMhL`uo_1#XWNjWM_46!LL#ahy6k+^@@l4096oD^V^7 z0{C{Tfk1XX{4Rz8>FHfYvi(|5C;nx6!%5I`r!9>KxK^axD00Nh4gW-4Pd$r}VNZqc zaCmp2b8J(iR=xy1DywZ?Loj!N?Y-2DGCM*jZs9=c2|1YO{`Af@f5i@38BV$VpeeaN~Z^a)}J4L9CJ3kP=URv4DL5RZ&OK0jXPw^?avl*e`z#99{F>p``Utm zg_15F%;z+q&U+%ffa1`DV#T)La2u*4MY|h`+7EWvS=jA!9*g8ZClAha>frlBlcJ!! zBCd(KxL@xlI9|YwPm3{wxPaX5II{ipGv1<5d#cZ5E zcb_77)`2yTobH<8RP9-ZIlqCz3dr5|V1V^6A_S&Dp;A&m<4%X1*-T}VpluQbC>Z&b z(Z+Xqfm$*uVCuN;A3AR|njFtL-R#txMhX2dI}IlW^%qDGzt0P<uHo>WXA7RCt1035FZFUv4+XP$_*SU&9b!SEgnp9l7&p=~9A2y^^X((0bR^%!KY#L9R8q@;-`Dm4Ugi z#^%8rdZxJi{Nd)XC)D)5B-An8`&K4wrJ+nW>I+Gy+3zOYByaO*%G9)P{>MjY#M~_S zL<}pw@5+f(kBm%A)@Qx=bHNT56>=WjE1RGBYNyjUrAz=3xJ(cGjB$R<-UxxV!R6Dz zcZt=m!@hYGugeAvbiS{wSZX}uT@Xhj9N=DS>s?d3eZ|72c7;;^uEV*sCVi!sTsuko zWJ(9~!T5H9CVNgsv-HJn3;%H2%hJr(tXBy1HNpJX+9t+VrOw&o%Hd{))p~~AdiKyU zA&gQotlmenI-~46>C_iN;Bdh;oKb3&*$8`iOUb=tWRa!_0m5z>Q_5dmVh>6?%5Cln zil6hJAV+}EHj)C~u_fR}!PaL_X(ABDgpvv?Xg480eTMOSP&wUmPAmRUwcn;2L*!P@IKbRvRiu=1di3u@h$ zs$N2@<>>5g0q8K)nW7i(o&=K!vLO-v9h9t)EE8JwU|xCQFyL;bSSwCd_`TS1z`R!u zi9yr~+_3rif^QW-9=W%ODt9ndlu6pR^ z^g4gPoOXfE?R*e*dC3a!DvrY#pntT&OyfU|-J3P(-Zzd_IJ!svfS}8NWIG_$o!OJA zy`a#dBaA**!R&qS9a8clQFKf?zr^eMz!aVeZ@@g5fJr)OVayvo9?GTs>Nxv-lN5jl zTZFkn$|g;1DYGYW`>6qnOhpX#$utq6t=28643p8Lp30%oU>ZIIlM_RmQ z|LE_(3b=o@3R}pCXBOG4(^Ys)hXkNg;|Dp7za3oMySI5aUO54#GUaB5Hq$z+v_=ow z=Po8HoDAQsJQ2Nl^YSu>K_&RF395%cSUt>XsGl9|dFB&sW^*2c81i-`{mRfVJ$_I( zLU#V4;g~Ql#l^(or2b8IzQluQB1Uj5$^uwM$?tXv&C?6lUY3JeD9tqx>I%Me6z#Qn zojfrV475Eg zd}lVzO$#yJN%A3N^kpgVh2>j4D;fD}1T;g%BxLfec?Htb4|}@piun_zN$R>S!?g#@ z)4sG`oxY``63sCea5~w$q!`R{-8vjg zw_ZPf1+>&rE#L3bHS)DlT)*6)W`6L(aXy*P!D>7j!wm>t^7orviuCn;V=I%gBMi;W z5q6m~?oj+1eLhPP)9g`0I{A&k?Ar@HQgyWSpWvNS2edY>f-dQYHiy>isJHeNl>MpY z_XqE5qAhs}YIp;v9W(a5D~pvJkKuR*PN`l=X|F5>|91Jgl4bLfkRLZEV?#m#Z;pGT z+#4;7%o%dfmSug^sN@OCJM&0?lB79hGTqX&w~z-A!V!e|Cb6 z2E$^4Oeb`wYxr%WIngNXkGMKs33MRiTbjrgmsefumd^hoWk88vfMXDmvLDlzS(CKWk3tF=~xxUmp+l`(j~fn!Mk znX-!P2yWthS41&j1v29v7XuEFB}d1MHP`=_&FB10V?$kM+H*w2rSm5WbaR%C)?My- z!1DlSc;)j_aRDv~gf8W3DcCZFHrqOYx}HT}Dz$1maZHNjwrU(G_A`;%arkz%S<`;? zWVk}T3-_3(XWDu_>1KnfQvWD-&c-c(C?hmF8QEcojy}$FRaY9%v0QO6TZL-zY7w8J z-K$&C^XzAyMs0MmZb0WvM_ECK>jkrw?n_=0A>THT1;$T9R16DJO;;Z82v5w6)tPFG zcyd3>r>O3WyU4yMEE#D}D6!Ysa2&5@oE>oJ!tI@suG`xzPflbPe%7})k=}~wcYbXx z%ypwdk{X~f#6r$e|mX*6@o8T#UI5}%0H@#hVS*r#1d1LL9LAR?BL<#2!;5^4H2WZ@V8qrTjZgT$hxhg~gd7CW zv2RWhe>Xo(hM^%#%S>%)N0}r;D=^ugi;aHTcF?CFY&GHhTc})y9cW=-lItPXNu=w} zXW;Fx|LDK{SM>pxI3lW5EYQFgtcYdVnix`)k4-CiJMsplT59)aDuIzs{>2ucD z79~-U6>Yq|8OVoa%~|=(=oRihJWuCUuFV3=@6G$=;082anX@FSX0bbjjmnxl)dfjS<*nM2`!a3Gg0 z8*c8t?nynS`pyK8v@W`-24kXxkVY%Ln}Y%(UMULfG=F5c0DuJE zM~UrXqWHC^RR-?n17pavnVu)3m$jDsg{r>W%&BlGHF zx$;s%nrx*nr++E%YzYDmHk8h$_@z0uJ9S^O*Wun@a1LqzNkcBf-RAm^sK$oi*gAo}G>_1<3p!r5 zI7M2jhBfIB1-_*pRXbPuhN`!}YtWhY3khRHDMm)qPfsdEaVJI>XQQ;SkJkQ5{OKKm z{S9JP@c>JVhl^E@IOAf)l=);iqmApWQ~C2q6y51u!nnqKt>^M)-0%A4uT>sHO}J*u zYl`K3WLspXW4@83Ws3vzu9UJE)gKw)%Bz8WwMeI}YRLa`}hv=zkiRvum zrNZY`D{mn*Im$z@K;V206^zsYm4vpl6HU^__@mRyqv}2;fJswmQ7prBxYzh-pT

z{s9^J14nlU&r8p#UoxFjvdt}Q;i_K2W6Rw|Y+PozrEL>(j{cg>Q--X;*N%v>LN9UY z6xJg^TD1)u)fm%AWXf2!1)n4e`1!zpaR`YYS@2EZp<}~lP>DcOs9qPoX5%ufu`h8M z`|L#wnRH!Taf~jBDnkW&BStK=>s&r2Kb!x@qxhcyz#k;w%ZOeDkFM?QC(}GziLjUO zl-b*@ci!G%8G8U#vH`5^S3g#lvlfN`O8Sfc0mQ{Q&<%wAzWC|o!6TWIlz!nGYpE5y&VK3G$2R|_ggDyZqIFps@%#R1S8Y=tH)05GUoJ5ORw-}sc9h{!bu-O>P zwYFgBE7UKZr*N`CwEdQO3A5A`a8Z;`N;2$T&TB5R*)?Qa?+U=miQ($s<0B3^L6eiD zEYz@Poop02Qaofozdpb+<(wTt!zGB|Sb4z$zeU~^+SyjMF-o6uH+Qo;R*-JVM&Uh_ zP58Th1GV+j1D%%Z7dZ;sOJH}E%@snV*E1UufwyTGd(j|u|7f4j%dyB;SLppI+fC`OA&ngmtGu5vP$ zTLR+dK4~*;Mm%Sv7}Q6T9Whexz!0VXmhL-9^oEDT^>egSV`%f^;jh|#&d|dRfq+b< z0FA=JX)+i9Ej;00@a`=JH2_Orcw+ejr=x5tG;R71c-E*;VR}c-e9QC?4o5KIc-k77 zD#PcghEG-0tZ-2?KOdHs`A^jb1?h+3;BOHjbg{;~E{e-W^OeZhcA!DYm%qTB)VT&h0tIzXC$2I`q6=NX~qC5U#1T<}_ z-SqGaT{?qDj|`k{Uc3n3EUT@XDUvSxSbih*j)JulIqV1QQeI_@#C42x)VT- zUAhPC)dzNka}aA(*Ai+}=jXhvsePt(BItRJNMAv<$GaJRlV0_I18?x+76Dw-wX@NF zg(aTHBW_44+vmn#CiuQ`?aQP7)t=riTty@;Tq+rv`wQv2}=6aZqqZA2xD+s=Q zu2;)r$H|5YE^!fSbA89%sE8dsL$=<&d{A#KmHG!px`v?`#n*G5nvRyon@oPwH(iI1 zNZyI-()YR%fXtjC!VllioRIzj?})0_fte)v@120m>6B}GNT)ynHo?aV=GPk+`=gmyUPu6E7eJ6q%GC!SVyBsGPLt#qEgQbQ zNeZIP{PY2dDgDmvT1$&3GyYZT{&x<4wHOH$$V40eE(<8JldVAPU!5A@;_yd7O6W6) z11ffIz`_6s1ycTWH~i8hh^656SP**-Hpg=+z_$Y4XMBQJhV&EDA1^kB4_VuUA~?sI zfN;>=w#TnGQR~8`s~9@X)~k#7Uh34uv+=(D@rL8CQ;GLy7u)zsY*YPfYbxS6Ab@2r zJD`(lqwCWCVd;zcR-M}Grsp^sxER?}jpNj2{k@`F@0lS<=TUvKal`(nOqDu7`>o4a zUvqr5+ZKmL=7;9&6XadTNkcf6)aj3eqy9gTlc&WeZ_&y_d}55q=tj*wDvj?2$UlCK zx$W2M&$HxAQqOK0nIoXe$^g)pnVj*i$(GLU=`p=+jyim|#@8s-H1>49Ljs+?B$}t` ztr_7Fq8rt}`}MKOhRQ@H%m1dZ9if&2no-&fRhx0o4{Q!J7?j$mGJpCY>Pr>mT7*~g z=@Z%qokN!I(ci5@MqItNO>d88v)DL5E+#%fsyj|S*ueDFy)Y$a3AhKNuZ`|p?RQq} z*H4Xj$ba~|IS);$tGW%vqv z;v{r&P5Uv(m*s{8Vf(=H;cV=1z3xK(Zv}s~`?6UA&e1B(JC)pH10F9WdL#85;ByRv zW!rwNLAil7=7yo4_9uWWIQIOR>qiqg45 z6+aJ*TTsxn4W*#_=XtSN!K&rr$fG8-`qqx89SaUwlu&5eZ@!EOyR;6^nO?>P1fmnq z9rlm?-lD%TSF*9!@mTq-A=0tN3Wz@E16D3Taa#^CLjw|>bl26v!cYYJXC7Vo-5(ua=3>Ql;javSh1R{-pBgHn0CsA~2llX5a|PDl zKUu5v6%)EVH^and;RO(^Qwt~CBpVz$R^|xCZ%f{%5$@12IMR8q1e}IaQ^-A$0JlI5 zp-SI~eA@7bH5z*n4aL{{PTCbq&HD5kmjgnwJlg{WTzlcyx#1ThpiU5l7#8++k84k?fyBf26BE#hP71xn6 zW!)%fneyf_%#;|BI>oL!H!XOiQ6gU*+#jg$u9#!ZvbA3YU`etasd+{RpCAijWw}RT z!aVAbUaL0$aosNZ!-OsnkQ)!l4U|RLgiJubculbab$1lQ0yk|j=H4WY3Jy?zlKf^ zb%?KbK7rq5L1bueMP+DeYMIa1>J!!V3dhOB|32-6J@nabh`4uLHrj1H{ZqC56Qk?K z)|uqe%{IMIid|`o{f~l_`!yW1xx&x)&eq=(zVv~-p+XGi6OyqYbkd!746ixp>KvIA zpWyptKp4N=dqh(7m~cy8e7S^P>9-IaWUDmUh-fYSgF$xHIw)>2D%fLRIx{@ETymX$ zl67@IM#ED5(^vX`_mVA0KvgxGDLLK}(!g5aBT_M=({s3q>@cIK2)NWrM*NMB^`U2| zo?u&k`>_ogy{kkE{2&9z44o)RGFuV87nm+CNN6Q0S}0t)r3L)lvR z>*CCZx}VFijIcM8mjtmB*uz4Ft)-eAD9=LSw@;QMm-fD>*qLPdLyyoyAncCN`(!>X zqM6My;X^SN=K&vGRUuID8!h(svBtyFiLZhVv;uqI;Hn9$>X2Y4UBuEY?vyz8|B~n~ z9p#Jub*XHWUqteWj9`-gS}eX)n+~e zhKlI-QY*yuy^14R`2$z}MPyabEXP z8H+e)tCc;WUnw^P&Q=SNEjCRUwe64S&MgEtia;#~>>IMPIq+ zlMmF{js=~Ze^iYrG)VR}*E7xYc8pqNLIo2^SEg$CbBy zbB{=>AmntQ06j@|DFFsUPw8=oZAk586(ikMMpTWg1oVfHK8u|dI{>3Mca^ZzCn3mZ zX6t0hZ7_Nh$it(z z+8V558=gjy)q!aGzA@+Dz(}Uj%1$DTvYbyeDSYL8!EDr_l*@`B^r}!iPx^QZ8BfWZ zlc8xMVcLAgD5uh6H^D5&z2o)#RM|f=*t5jJz3}VqnySuX0o`%g2hmo}8^uHlPW8op z>$*4`(v0a&3u9ZrzsYd99_&?20HfJgnDu zXr68(!5GNU`aa!9lP<66Jni7@@nuC;w(}qxpPlCr zcg|M_)lj*3miyOhQx37;ASpQi#`F9d6t!~-QFl{@0qiSOM1_O|Svb*JS{)|;w*#Af z4#(L8WvxEPHTdMcGw+))%ry(A+?nC-%yzUVBo51+h!*oFW6KA?S@C$I%{83200Q4f zg)#@hlW3!L1%wktUx}y^XB@G}A?)SzXzS?bfG;tDA(|u!nmK~lQY^KI>ti&?%LWw|_eh&-E|%3VN;qoV5& z$4kqym`C;Btk=HKo>2l~CJl~;pY2ch1-M7U@KZTv+4mC7y9 z{Mf=;MqL|B0w9<>Wlcd6s5vo~MeHG1lUrQ6Lei$#s2HFA9NaX4fHCSG%`SZ`RKH?D zgx}Zj9H6{rbqm!3e7qphyb8_^q;+&m&uS0MXDNOSnjM28a(Qidc>y);N~As&73dGs z2%S;M(~}tz@t@A^!SJPoJ1`x&7+YWHtKHd(FjsJ1Dh%hhq!3c`I5p$|td1q03t}tm zT;@G)m*J~M5^`3g(HJkZs5I8TbRuuR(0;RDnP+bcpH4(YA1OucGS}MI)aYcbv*>jK z3h5W9d&Ne8A2$>LOHG@m2(8@4n z9pAN)Ca}RJH^0eyI7#6q6>pab-FA>qpcC-+{eF3Uo z#}X(YzBE8tq#!Dc;2)DB{*#`ljO=$A`4I<}8ypW6$i)U+vkJv-6$}8Zv1SZ|zZy{% zZ~UfO@eie?N@7#f0#g`f$a?_mYqM~9>K-lFGdo~K(q-kO(3_#x;gF*j!q8{YYi8faXdu5*c*`?vp$LVf*(HJ|qz{^JLwKlPL?=nV{jZA;QI z(-?hssrns*)w^<)J4P;?y=Il0yK=!YTtxxXDV&xOb;R(%*wOGZ-WK+Xl2D1prjw2* zd>kF{Gv#=!d|Naxi>(kYIzANcm(2*6D`^Gr{WY~L=pR%MU1Nc%ewo0GC$GmVhdP^; zF9!=Gix?Hh%Y=R3V)XvPF+4#1dW1y$f#HFlTLd4dP3P*UkW+EZcc+`bJI{>EwG;Pv zb*yi3@cYiKKdXzXrtxi2cwQbK#9HH)z(V9CW8$%LiaK(yvEY17Gh?WH!@kC1ieuxr z1z+fHKNga7EU%Nv_ci1n2~#%YM;zGz92U=jBrJFHxUgRKNb_XbSNvo_hG40)j9U_R z9eWVfkSD?}Im|yt{=8}g{SRC|wT85T9wb?XSs-X!c1_hg2dV|dv{PrG!j?HlFckh1?a0@P$+&1o@reuV+LDiaC*9_* z7m21!n}rK!n}|xXZp%Rz{GC!8V*0zMJj~n81B1gjnu2`aP>6csdIG4iNN*7tkNt?_ z;ZItxdHK9;Y4@irL(LuA6{64I4fmb2eQ%nqx0)n$#Hrxk;-Uj}{ZG>`6s#Sd_$*Zb zUas@uQ$Af-H!6MR_9nGyed256O?5rGtNz+<1d;S~Ef>aOqDTWyAMsdb)f65ba}VfFFbz24RTCHd7O$0Q<~ilD8&lrlY(+ z8h61*tl_rJ=#N|mp5>J0I?ZKj3%$A1tN@kPiNCpsMZ(td<{?_WP37|eZyUp#tK8vG zBxVHhjrC)e@*oN6;ecsXJNc|F-L+U|C)!)hK1p$^{R5bEMD%nB4J>n0J!mGb?5*&hMXzIzNgS;@R^5|l!3esflb(c2&!@N(!{e z_!+c=c}{4TS+{01gEtbx7-?00e!fE5{sr98Xq&nfCOhfdRUlh}cEHj0#aA9CU@Jf5ws3nU)^lA8GZZ7Y`72EtB1SG(JUWEX<39cG+KY_b=EHF8uC(+i!ECgH ze`?hN#u)N90Wy-@l=!=lf%38ypEA%^cmRVVHRlf@SYzK;gq6{? zaF>#n4D}ab&TzGu@!HpujdAk6JxhYy&B)qLINO4^KlEM`OaA8K&Ok~T06}25FYI#; zwaJewem32KSGttJMT}7_37+GmLSdabgafCwP>wP`g{T&6fz#EX9a0;syUTfyqZwGM zEo8(*`tdjmR;kunh}Tq9KkgE)n2==aYt1%Rqr-(xV6b??`>)Qe@L_N!%O$7j&=h35XX_2$mZPVDRl!q)7Y~iIsVmZ zk0l^>K9A0d-|QOL4^l^nQ+X#9`n+#uE>;pPU{!^pux<=~on0Vaa871uVeUv>waAR2 z=)7GH*N}`@_n-2jd@9)dqg?~uFpty;^AYeg8l0cT1nPw|iR)Y{5;!hNklcGo*W-s= z6os6Q+aDWSTTa@$>FF^!mhC=ku-dAUzGxXKCqZei@U@NCnPdJ&u)e*Tb-H~x(WWSD zJYA?9YreRX`hzLiXIiVwJad z4_6}%*jr}3wB)NRe+c-=!O$EK*DvHPt8mjC4PdC|-TF%Yw`ilHNynvKyqpz2T^O|2@=Fg)W z{*vj@kzYUl2*;>Jatayqe9!J&8d-;x#Qa3=0d_Es_If%stBBIBkKRq7xi5_zd-sK) z33Fgpo`gaifv~%_Z;$Z9cjYVjeop0TcuTp_64b>Lc$LFGT033)Hl* zh9!_r=-8P2XrazzB1QJYX#no-Y-5b`NPfPN)^cqlUV0yq$NL!G!^MPx8fd`74bhM5 zBXAdw8Qr~2XKk{~TxqHTm>o5&*>eRlGTq5m8G6Tg(mGSDQkvAbud$rkFobi1m|wb< z(;Y&xakNk`+TwhqSDjMd-XNc+ zh{ro=ev7cHWzHn~r_Opy3ou~3xEsmU1N9RIK4$C*1*VJyqIuDv28NHD;%r+QfRIQE z9pzzltSf0?RqvqpgTzQl$RP#&+>eZ$#nJ!p(apt=^rM<04c7196wNYF6({n26cQfRzj5>7`+!B4Tkl4?A*Lw_09vZKL^4%Nl?P-U>%o3q=*R=#~dIH@mD`qpl)qLf$W|Ho(s zWdy+E0pIq5dnUJVv;;ew3f}mMD1iO5K(tY?=Gu?OcvhIm5v_-UGdPu$BODNayP+Ef7?rN{-0 zi(6Rls0~0L)3NtpRIyaHlxFz^zXg=RLrc2{pmm9ovH$i;UaRxhI>Zs;wylWI`AG~2 zEw5ag16UCy9j#RS1(?8MH7L#VitDBZPRmQ*y3Q6YM`bQCB`D+ZoGWwC1LMl@V`$ZT zy)o>Sg#O`1x~^t0y`HgE5oMWBWU?NVYO?R~GFvPwSTNTGo^rNlav)mI17nJ)WdF>~ zt-9XXay=Ue!Afqf9_u9kxo+oDT3$r(R&!YXHnid9N+i}651H4RgzHj$(H=GGMq1g)ue+5+s1QcvCErt>- zv8YL@w+3a#Ud9PQs_yc^`CKcP+0uM7ysU9!JZTeGEx#S+cpI-hMq$T+QPD`>!dVE# zN)8b1X@FRJ-(73GuT*}t{%BfFHwbrf#d-K|{pGa+|9V|Q@3%o?KDHNlkWtf_Iq4*e zJsFm;EkZR7*njH@4hE=yIZ1xRz&`?=p=sQj`8c}ml$de@vl)K9FKd-d7pPdG>;b6$ zspJe9dxr)g>TfZMzd&0cQh{8hI6u0(xM0xa@+1I{gL4hFyaF?@iU`qXC|1H*^3V>Wt8CV>uXHS@+R)^v=$6_b`YCKkxq7~==JxK> zQ6KcCm>RrEk=Y1!#x|tPan{z<_pB$nH)NMhtt~TIruik%0Ozx(f&z?OnwgZCWQT$kx0WBjyp0x#AoTjKr6|37>-G%X!K|h-f+^aFD zVqmN<1^>rhMoaJM!MDh*A0~@rR3=;&-58S?G%FGZ+)&%EKaf*W8eI1|E{!x=Y$>wZ z&PbOI!Tn_s{!hXo_=i$fgH#lt(%u4ax7Ca{mm&i39kcCn5z)3v5P|N>JO67y1Shx- z!a1;NK(8Zl-MbeIlNy*J%Q=ZF1Ba6fn($XapWGr*3f;>u9#K{1b4i%EH{|={wz_-c zym87&4o3pC>}UAZ$48Ps^lKDzi@6vR<2x1(clc=z+GxSHaf_;H2DAn1pDKL0wX-QF zn5|HbwrFSmd3TctA3fS+b3@)Db5?c2yut>+L`pBVRT!i}GpP~Uohy@hwCKZEi@muq zPshFS^&I`9#uM!N!Ibb|wb5lqas4_U$3r^yepUU(@3=<&t(b_@t_0j&ezTM$U3Bz2 z^`(nK8PUrjz7iscHmqUzqUKXQsK_q!3fA$AyehcsGW_3@L1rVWU!N#*qp07Il;fGv zh`m0+64|8iO%;|+U@wVnp`SsrdUJB-qNwUyuuDsL@gOd(UY`{k+tsN%vwl^RPSFlKkx&oQ&3%7P*Kz4Vb$v>esh5ZTf8S zILxhynqG7weJsk7t|OI`e2;(P1+P6`@X+SgN8$PO$4P>v+^D`nC$|)oZhI@ z(#nqB-4LS5^U5|8;$^o784CKKaF<0V)QQPYXy6;SAg6u3^&v)T<0Bqtd%PD${z?Hb zR!FQd9#Ydgx2z`wVzkppm zxI)ru#P6_hC4Q{H_dusBEMQOs7IxYw$qWn$O524dH8Sk+mvPtqrEinJkr(K5fq+kt zSuJ6J-~HWB)04#JLbW9jzOE%Kln);VZWZG})myb}Kw|{i9lNUfC8-gR{%J}?bUY(* zEP3-2;=Zs%6UlTX;xzto!d2@{Ct(ObI!&|iI@}-^uN2d4GcINGW~k?4e3JNq2oZ4W zRBSy?Cf&sRA%9XUwo{58E+=D&CQS-6m#byT61bm&yT}B=?I`br|Do?ym!5pJ8(OQ^ z(cwcTBzN_>m&2JRLtvKtyB>n|haxK~-DyFA+0xO(Kh$$x<<@(=ad#}IE$JE{AAf9M z*vDIu;DNBaoOaJ0jMOe>*>c(<>blxFu5rH}(Xuu)x?^rWDq#%2%lrRP_7*^OX3f@c zAQ0RkKyY^p?j9hxyORLHIR|$S5+DTkAi+JjdvJGmclZBcX5M!)b?=?OzN%E})XCw5 zXYbzKt5>h?J+zh(yLNj&Ry*so4Mb0uROuht%qJ~Ae$Fe|!5a0BjcOaa1to1^J2rHH zWtBVh*?bQDGO_E){X|EvQ==grL2$=4Tgi`tHE}qluO?zMZ1KRPQ3_ik=PD~*Fm)@x zA~dzs?sGWE`!3z9Ss*0Tum-io1%d3a2CpyfDGRF-%b3V+j$wO#$DQrdxWfKm;aD%u zzY1{mNtS8TzZu8k?e)lBLcZMKmsej&X4Rjx!x~W(q6+?_)6P2$V>-zNKbRZWlef>n z4`Sp8sy`mUiIGc1UyH{>5;5gCO?24|!L%nc#_EljhCeek2`MaEo5LV`mI*fX zYHeEvXf063jIO1`DCc5{v#|9mkg}G6IOmyH^>6~}Pn!7anG2W1du`)v?tvy3v~3qp zV+|1KcxIK|Y_|N%o=W7`Sl>l#HuY0IuP0@l*@`r6ZVd9}_bt>-vE#_9;-FVhIH5%0 z;G!*RYJYxKV4T?u*GlH$OyIUH)CBG8sk*@kyMJV8T*{EZHv5YpL-e-QD2q`=8KLRG zZ}~^dO^^22q;F{n#ie}ni!GY1m3?Yy@`_2Zn~>Qd=5+pb@dM!05%Jy&0!?)ErcoGkCpnj)uB=8EuKCWSNQIq5|`1iP^NM{vIGKeK`SE`qPX#D+d1+&KsW zGSiPwjmQ$92X&3TCH0t!0vSkfdVx&c{+vGScm%8Q^#`PMUUP>uS}1!Zd~6zjknrfo zJrinb@Ny*3AoZ&Ivhi^^4_@l|+!SNM5!lmmyor=^AZkxWy4hM^<{ zI+hby#%p_#dmWzYAx6)Y8VCsXRmR4-Bl^$b$pK z+#(`;o=Y`y434~>4+D^4Zys`Eo#u)-jh{o#j-5QeA2%p8Z?(JJhH4DP^WZm|` z1MQWaD7CMUb*h3TT^?5v^r~!IJg@&Swn4#Wveyjvvz7T%&f=A4v$YaG3NXIAN6cTf zh)$P(D3B;xHIe)bebmfJu)tKW(svJ(beuokS7^;@o3wb-opeR_FeeQxh9vxJ1JFc> zw-bb}x8sqHLlOvnI~ngd&&8e;pic|>dRm|Ht57EfHKs@clGI^n6_!`*?o6g)33dia z=&B4hNeB296Qhp(x{^#Zi9cAgErC&&YfKYiXhC#w;v2cd#vYW>07)($dayyGB3g_! zUmZ#xisjXXx!pav0u8{{6<`+bkE6hy??rnL%94IH1qlh%n+{_kY^{TV@;la4EohB< z3o11wCK%|l5dwOr<{gjBbokdP{R0EmYN-f?LIE+$YEzIQ99(C(Act{BF4I42wduLtIhJb!5LE{x_`^q>ChKPFH~?gyEg3O5npdWkzur&Otn7rM!KaC zK}aMX;x!5JL{bZm!E_~-#Q@Ym!Qrd`u2(gETf;P_>{F4<1Dtyl_o5=cVDoXWe8eva$Jk zHv9A4*bmvCr1cBom3xzGQ~FbeXPXR>g8`|4BL8vmBq-_S%1V2%M(wVtCFVu7=gdO z90YT7gzPl<8vPhTg~cR-o$DGGj~~ejoB33|@`XX#7osO2wkg1ZhojkCzC+zEOHX`59$)o-?Tl%^JM3Es(Kv}p7t5frWqw| z$P-0b?@i9n+T*Cc0E1#OjzY~~-BsbAyhQH!Q%kO#ZKR}~vN%U+G<|%y2oJtOxxzIX z8t0|3IouwlXb^;?N)A!s4Up4s?G5CI)GF>TaWILHM5CQ@5SmlisNVfn(^JTUYJlJF zXncH8rm6Qrjw@oR;aOg(e6y9L=_qs)7iL|yJb&6uXPHD1kUPo&(m z((_&2OKa8rMT!9qCCj6mQ4$RWCwHZ8FVLXZqJ$O&FV{sWk}|-&*l;&VnHl`6^1T`` zRZX)7JYzp^mjk;0bSJxd=Xfv+_o=)M3Y>cAF)DRf53NswBK7N=OWk%J@L3KZP+OC- z0l(#30WcOYwZk;cE06M|J?dz<_`t<<{xGq1%J3QCdnq|nr92_N@|*N>ltaEen2TU0 z8UF?;eG_Hv2P7}QdVAl=Su+-{PUNdf$IDPk`YerR_t}-$E`gBx;yfcZ2a?Db7*y?` z`q3V==wClWwY(~?Cy0jQRj~~o8r)S0mqpG`x_@*%{jb#y;LT+nbS_6eaoAOGFRQi) zYfi_8GtiFJll_vW7!;leSqE~taJGKNF1e79yrbd73{2JVgX_FGkw$em%CMxq{eVa* zFfSS=Ewsb89&;qmx6V@A=SU`sjKb&JGfA9bs1X(wB|uf-RNVPBne7yCGStsfmTYfB z4mf8LR3h`Xl*Ts}oH#(CdO9U~E&JofM}pZWqAKfIV#hirF+fnCp(nb9eDDnOpW*%j z<3TXCo)-#_-I>XdAg`UmxS+eOAbh83eL-;}1VESt{f8hi0n@*JI)w=nrhG0%>JdJb zItvv!%Q<~SBNK9MMW*%ZvG?A(2sqOvfThp96^lELz2IZCn{FVcn?NMawG zt$W8|eM>NfO!(tNZQYfWa3Vd(AqS|hH1h1QH$2FdO_$oOy}RCSzfvsG(=EI<$2zRN zf+*7O@#xl{!xWxNs7ku-HIYdY5ZyZqpR@796nl@B0)7=O=OS40C{E{fSH#JDJuB>d zJwnCo^*E*V=!Y^Nl+*P^aa2iX>c%&8e(|N3^_?!-g08zcO3@emr(M-PG$Nvs^&Xc# zm)w=q`lAki)9wPPe>LCqS#&N}dT7@&j`T5JPX0JK@Y`sHbUMc$z?l14J*_|c9cTkv z5<3>K#=b6H+C$oXEX&Lpp@(v4g`LD}98_Vv{WyDy$)X#GI`IK(-L0rw20d2}s{d7{ zZCXJlH{)YUs=tlnlU_>Tud+y?N-{toSy@kxufR^loNHnAvxw+>Sb6C-lp|43;KZi8 zLRooGYOFotkbozV=iP;AwerCAIxl$F74EM-`hB%chG!W%z!pA#&+g-eqHQ(9DxpZH0fvrVPGSjt3~LE%e-g6u z!(giF{jx={t7jUTcjP3}y=QDP@!v)oDKvp*i#6QitaQp!_Fc-L78;B!@pX76MaaDf zM3v6#dQM$jcdJECL6L?&ud068er|3# zrZ2nGJ~(WtT~3Zqv6vjQYdssArg^&!9*fB~l9mUqW|?L1YAWR#kQyhbYeibSkH!pX zOUlZM)*~M--PJqn!S@*5oTj~J14etN3_8?q#I86ytcJe#GMzmfUTMc6UW6$=^s-O> z@`k-l-^Jco&8aSiio7E;z&7E|>Z) zUG7q`W^Da=S+23{`e67E8v#q60fQ++>a!;>zpcstVChs$fx3dXoOLm9S)2XT)hYb8 z*oP0_oPj8MHnB1NoVhI1!)0M>l<`xX(7WYn4j2!Rz_LP-&0`{l3gnLW@OA>+FeaC{ zL$;a;1YEKxq%7HLqye1zyGVVN&r{X(s)RV)L87a9Qt7i8>3~t{lOmVCL3cJ$K+y32 zB^kJ;3C(3YueFmYBgf~j4Ra*|puuxIE=>MgoiFQI?aw_UILzzsfYu*bTtDzvH=Er8 zN$%J%o{Kl>&-c5G)DfWXPIlkdvXmg!t=ItvTR$C8MW>}NxuGc>1-k{_U@O=g@rH?`hIH9@1u$V?I{F= z{7LfuDi|0>-Uv?TodWJvIs_n*(Q-P8^(sxm(VML6olMQ6b~F0L^&w>;s+3g@tJ(co znNY8r8$L-N6&GJHpPTJ^yGEVm4NZX;&yg{>d0(m8H3xmTr?-0E6-KT2R?}jtqI)Br z*EBY&m>TH6+%N0yUOi*lwAixyB3Uh{ZkGsTI+MJ%LOO94y-kejIwLQS;1x4FjV9{^ z#vGp>sl9c`q{}25c_)X1pW<TFdXM!jl>BOPz=IvL3S9ZQq?JQ4|8u(h=Ess>;>-%NQM8| z$iCbUyFb7e-jN)}YSFLu8LkS}l!xR8#vqs^P-&hLDu*81v@YzPFN)0PlQ8l72Cq4> ziOH_=(_zL!`3$n`SN>?f1;%LMbkQ|f#BH5>PE&b%#<%uXAAWM(Wz4WHw)}i*{49~` z3dgx{;yr2Ts75K$p1f+uP!auWBufmj<|l)zt_zZ$i^c1Zko}scP2uguz4wUq7uGob z-{?dKNKh>RkxeKBCD6Q3arK2w4wG9UnobOaJ5#!K3~H`+3L>FJ6h2X042l0|dX*#I z;sB@pB~D$)w0bTEq>2rZf**z{-^j6nM6Y$;hzE>RbL<;vKiMYBG~mDv{b@o0v_%7H zAj{(p+_ht?lNM2&5tKFGks1=y6Yje3@sv%`~xI@u1mO+7em{k3+}B z6w-vwn$8`4gtzt9VDm`*k!tY(TTX>^y}nPQ+f{8$Oe}Suk6hJPqZZCZcf7G5L&J5E zGH$S~iyd)#LUWgLB#HFrn84j@{BDoR#eJ)t(k4m>MOu|&fH>sjS9>O#giw)!*x=6; z%&G^Q-lSu`wEeqhviI@sP#B<1b>*Rh+I_@Bo4e&$c zw-Q`KG-%m`&|vsikAHmhiTwDk?BN$3{rOOj>PaD~>_;)Egn;zHtk1jec|GI|1>OeG z=?2<9N%!Soh?^(J>)${PhUWQ6o}|XC)Ue|n**s|mp8?(uXutw4a!NvxmP%)Xbh@`z~*fnzn6RJ*_o|XrSd~1pk-0Bd?z#U7d37p+XIsL1q}Phw;~uh=$y?*yA~hg5kT zNueKQlcG^sV<%^3s=gihO;2ldbR%#cDFN|kD>mG|r>CbBe#L-{MP7a+*+Q3{u`?5%z@;*+;S3D@!pj~Pt*(pv~;yda9Tv;-pyvKKmxe~Zk z@7?_2fM$07_@cCVFyZX?8F9JJkh>4y3+ka~2|iEAE`7Rkw??Y5Ib_}G&kqFuu#5kB zoQ^pm7ootTALJHPWEU)T2a}M&kB%4IM9)7)?I&a;_v-Q^Ayek7P+DIhjYug#w?(3x z)uZ$&uGTRLbxadWSl3mUF{Goo8j)N97s~gX=jWHaAcGX)9Zz*v^rpoJw-3o79#P)< z=;_{rOiXlCs^Uh|NV3`c@W#K6d8R{MTeYVLp9t2G?2oR0j#L%W=d?(EuPzrFR0)bYc^lzEbZVm>*C|Yomz0m-oF%~ zzqypYzdAzh=%83$?Q_ettB8%^X1nx2hWo5-l#7v%9X`T?Bl`;K6*uSWWBjPhbkxga zzG*-KQQWer*?*3UJ{$zquF^b-TlJCk9|mTN&ZP^K59wX{#BFDQuxnV^NIEpXW^w3geJRdoPHol)dpG{WgdWT*yd?NrW%i!9FE&Cjoal6H=4SDyZ#JuLB(%~zrXias(e`7v zX3AGELLVk+os4!W>exm`iyTWzZ(#Q+ni*D%clQ^#sB`rk?- zfGx?%0$-A1$;uW8{wD0XEy+6#9ngDsFZN>!rli=&_oX915HyPK5QBnoeT`Z@EC!T4G%mR9dA@c#c{4qrgl;pi~wCtk%X_hZecQ zYoB6ejVsc+%j%xwEo_Oc z%GCcNR1qeV0v2NRtg>3cghA*l>HyY{4{K1msf{H0<9x#v={jMzmMi?X@<)s z<(kr@q#(iwT@v9_*Mms8W+V=9270HIOn(35|He?cfAb~SyO&IxXun#UOATnfIM)U=g0Z!5GX#l z`K4yK4AB&?xKm5<>6rL0q(P-Hx&EaNV?6F`4-Vv11i+*R2D=URc3Y{4rjRosisW$J z)R&NyhV1H8VmY5T5tZ1eY#d$S#3$V`H`ZGz#XzWx7>HZp-U9uQ$_vvV&KIc(zZpi$ z7F@Kt&=!v(z}S%1CcJ_M7k|e2Q)>MCk^SfEG>Ye#N}H=p1yt_;UKYHFLvbHndPLT1 zObB(B6iu6R9>+VlAk9zlAmo^5&C3t@T!RVtDqQ&*vkUfs|Gna*}$+m~=3sP|;3pAdz7JG~7ukpoA? zK&y==*m598lEjJ}>8XP#l!@3$!Lx!`?^;b=s5j@TZc3?Ne&1>)z|6L=V$+!V^bPF{)5)IhVhARu)I%+-6#6CLXQbq_7On@ zsr5t1PKRehNF<}^=bg7e+!dr5ob_ROQp#smQ(|b2Uhy zYCsD?TVGfPmC+tnQ!S5CRuOR)DE7$_;*y|ZQiCwL#tCwzOQ<7gJHSkiYe3VtL5)Xo zUFa)qVjmD|Ug;AXOOwpEJVYRCYjIklyxo0BhSA34QE!8pF3#BY{5xX6CnL!b9lw(o&TB#s&p=1#d{q z^cT?7LOvy;LV;WB8D4A+`KCkqA@bj1RJU-_S-~qjz`sKL{lR~}BxZrdf!Q|cOQ?7;t9W7Z5Dcu7BBtL6i!>aFIN=Q`aNSb8Fs)WbU3-h>pqRm6jiE) z#i>hjZvKx4{p4rLQ<$lOCeEJ1Z2dn5aDAEW~d_=Yc6{otTvcWy_3m)u>E1>kB z<@x7R|M~7}^NW|@lPB(V#ODR-Nc48HC1z}J#k5$nOTVUBHX>^SulDuyzAk^Ss}gD> z83{k;63m>UPHdwV-n(OAHME-unMa^Az5(t3%D8tXMSm~*w2m6J1PUiTR9zmMiGvW% zU7v|+ztBN-Th9e%rIoJf^0S1zei$Qrj9-8=60HcRd^Gt>OpkH9p9t!ujTvKq1ktVm zI*kw8><1Yn1h*upw|H`Xf9)^u0L#*_+kT*1iFVMNSKDI2Jn`DhLZ;j84*%EQK0l?9 z$ZG>{MiRmLWV~l1!GY&HxoBIcCS>6YS->dw&aC_bKf)cttc#B479T3V%wBmN{9*<&!alwwpz~wss;u10S=7|E4eM z>Ol_eV8VV!7ZjC2%3GSkZ`@QhE_Nb+TJ#@VW=EC&RBir{xso8jAcP%0o~Mk9{O?cv z0($j(%h?u_A&G#_P@9sIS5$2+cYjCYNx3Yey>|02-pzr>g_6o(PNI$?3!OiX1~Cb& z&YAnGh!;!#%vggY$WSKRw0T9D`7&FdEKsB?oS4uN<*5o18j;|=3uUOBg*HaCatt%@rE-^L7F$DArYxMG2YqajFTSqLr>Ol^kiSeq*3 zyQ~yYAE{+@qN1yrO>Eav!Dg)E)8)b z;6nk}{b}u*xH4cOpB;R@F&&apv(Zm>Z+OGWx2XB=M9uNEjEt(yUt6NkfyOxbVFClp z40)K)ejq$tb@};Ip?iHaVbHtAlKU#`HmKpj_{itfFnUeW@_87K$PmH@)`Lt0B;0ypYTq!*g~p7X zcKso3fnTm`GyOL!fKwJCN*)t@Gk9tY!84;y*!?2q`;kLld zx!ws0xUblM!Ob7$AGbsRv zK+J3qd!?0xg%{3^${FI$@{qau?E~*S-!wh|qW*W^QOO|MtBa7PF8mr0hJ*FhI(X+d zSC^_bjuHby`NAQ1MA3?$H}iK7`42Nd4+KUBn<67f)3K9y2n~uf=o4etTGeb{?akq& zk4YbYefAZ6*vGKPt?WZvC+@Es?w_<;lp1U$4UeEC=(M@C=UNY!uyMMku+WPU##~X9YE8SH5|w$>pitYK`II#)iojGQt9!Pnp13@>LwV*|n9{ zy1kQP4gx$}cZ|d$qOTXty;*9v(!5*Zpr%@4g@1Nt(N1Ou5->L!loos0hQApdysf1Cv$XWDeHw3aA{ zI_F!&)ADBv>WFGts4h9~xRRy+(q%|ZtaMFUNYM_Kdn;pVoD)zLW+l?zeoRR%fG57B=SGK?ft#MwNS8m@ zFOAF|=r~=D5d?xj!ftOB6SV<@fP2qE5B#7bDccsRxEZ64|K|NmG{z>CY;I5QHf;C6 z)k~FBo5khvfC_5G8XTSEWTOWYwVq_dZ*R>DBl;kIvwZZ_KbJvJ`2lauJK_3h4Qsot ztxc>1a6&oQ>tz4p3lxYS;kTEln30Ef=myFlb?-f_T{fPV*ofS=b&aIKPr&ocPE3re zzn?UY>dQ#*G`AxBuU=DYN4X5z6r^Oa4?Gfdc;Aq}uWs#GmBNle@3w(`ND!S8{BJwD zd}&7WgfjW=eY?pl>)jqPBvuUp15*LOfH+0FBYa1y&{;WdBt=Z|n;3lq>SF$r;Ko*N zrJvB24E@WDv;*8B3dSnmYd@FT`Ukfp-@|*X1;IL;ng5h;4L=b}pDXpzxY=@T;PSw_ zbaX89oY-{aC>@ICd3IpGnF!#^nAuEgiqrBQzu3LnJ|}h0`oAp$0-l@@;^7Wz1bI04 zZfT%@X@j!ABMAj9I4G1g8~CwE+h;6Xl)fPqjQc(|wgx{VOaV7V?E1V`L&1&I$J~%KI+nwE?_ZyMN3K&mY(i~y zTUs8%jp}}<+%nROm`A{{VqgI+?KVdA8I_T?FW?R)Z&>GZ94zN)+Lw&HI|oO%ofRL4 zInK39KR0T7FgJbDTe?BYm3Us`0^B-&#vSDTvya5=<_2CW+CjSH0i--2h~D_ z;0$C20qPL~uI^&aIFE4xal2RDJsy$?ltqsH-(XOfz3wqFnbcpgCvl9$I3nP zI2X~Msuoj-fMHZ})Sh0QI#8=-#ebUf+K2t*WEqhC%{0UCLhI{o=VqX8*Ldk?(x13V zTPqsBt=ozAU$z?a|6r?#!xX7o$$yyVacT>OKGVDhaKBZ(ogZQkJCiEzWjONn-EFO8 z{gw4XxZ=X?ccYZVYr8=e|A4@ZkBdgXw11*f7HNE@GaV}Eb;z3^BX(PC_!=IAhXI4s zT{W?He3mgotz3EPb~h8r1r-HA--;Lld@IXkS`i0DhC1eyv|O1jruit9Z|r$`gj|9AFj}O(Jwg(A`iBa&mPjY&WKIsobkHq-vWOthAWiX$L5iB*rOingjl{xi z^u0fR=fBh72Px|yb#BESm4(jP%1aZ}P0C!qpMSWyC59sU0@xY=xY&93lF*!pnJGeMU>RQ0|R6I8UfuW-2c0@o`mq0pJc`ZSTA?>UH+a_kf*e?kC-A3^7&M%l` z`Wy@Hm)B^Yei8nmpl7b`#AE=SVzCKLgYyNvW*?UNL51g=h$^HcqpR-^X2X?@pLox^ z)zafm0Ungvc<#*>3_?PpU*;&Fd^_F95`}ciW zMSI>C5=ii^ZSqOx_dw6IrY{gYjZj2?1bXAYfbM=Ks|Jt5>(@^_FN<6qg||qSBz6VU zC!DxypO`62^!!&p^cgHw5nPv95KRC^1vVQl#-bMs@D+T`*gggmK`aVJs459csD<_w zf03`Wd7ppe6Evlwoz+_VbsJj8azC=8>v4%Wg}=YU>&NRQQ~))f2j#$yv&iIN*q2uc z3s*Z~xlS(f1oP@K$()pZ0U$UukVP3md=*t7PK3O9Ta$jsXH zk`pZvgb}l8NdUk_THuHnl*0G-EbHWQiiYU#MaU{BFehH_`cI{%a{ctQ_{n&7UCWv~ zpRbtJWDJ8So_3jXyx)mnQlcPopv`Jb_(`?US9+>sWiF6iWo~gI3H3GMkMJ~BM^ddR z8+`NR=|$%1pZ*?>y5bwtgh{`j7IJ)u_Tl7}I?upc&aO<1^l#lkK|!ISWRa8(v=6BN z9$poQQ=icW0FP1yd>SmDk!>0sD(35uZ$n4o7V#tpb*tNgZY;OeJJk9Gb&fIs@W|hy zh4j)FwB&Ka=~2pRX_Fc&b-%?o=}*Nv6H^!*9Mrq;I$4K%O~c_p|sW`)%9 zDwy5W-%Ke0tcIj&_BX@2Y9ENedh`j`*Xo>EcDAaZ*ci$!-PyR@&7mHpWoZOvp{wjp zm!=NJ;mnU}N`DwAG8L%Jwhv~5 zK|g+kHFZ_VdU8)Iv4>m8BCh(D9{QI|fEOLl=; zC*9RWHHFb-)WmEo9WK^JC#Ng!!RC-R81C$&!EA<04QLrtiCjLsT0mgh?Htut)K~Gl z32qIA^yT-lZs#-)jw@=vR2IT8nEz5m0MwEEYah#jeZ);43;lQ49O(@8M-Y#5P6Z7{ zKW7T$5D_nkfSj2yk0Jj{9kg^?-x_=D(Gvo0#m9*{{u&TW(UUrXR1{VF=2^GOUCSha zozapoVj2q^0FNeadt=HEXC^Ke-P8@tKLj*S*|gO(`HlSSbJ}Jxg4Jtu4)5`Mw>q8r zkgp%)<1t+BMm68$O5l-HB|bK|^xfqOxdyNT$cLAa6za%Xa&dAO8`VJ7(}1B3%mGjq z6m4MAFmoE(H;G#JB7P^7!zg;fkNF}gc>-`{18VnAsv0V3V?l^dbzX2=dW-U(l{b>9 zk0$`Md^N#`)etF0dMq2Bm8&D94hJOHkm}-CbuFlxB;KLlg+2i+6=PGOxY=NT+xcEL z^Aj+G0gAL=-Tj7Q5rv2u9BQ-2;Of*l$Pp}|RA(zuCgP^^3=K0MGu#Ss;Bvnu&#$(6lV?-k zHNfm}t)cM_Z9Ht8`wd>zp>-+P@$)-*$7hP}uM}9a@Xs*T81(-DAAUfBm0H`jn`l{C zS>uzM>CTNP7u`Qg^64bgJaa|d zfs7G5pl+<%rzxqLrR`-esFWp@`Q>Qs;Wax5TX_zKP|q&`mT%wn6lE_otZn=J$GOQzpWv5)B)Xen#}}81h5`>Q9}3jFhIcRwZHDlG(K^8g zih-Q~A<@<|`+88Vs7Ae%vRXvvlhX;U+ zzZ0M(??6vCs;bf_+l?lD>^!iN~GERuV z0dK-Q_Sm}ulfhD{JU1)6G2@xEzo9ho3Ifg(Z^=m&=5RC1;0xWhCzoZ!-$LVmcK&bZ z-357j1qU#`u`3+U+b2f)XAY8vB{HhbQ)VeRb=QD14+9bf|I4vohyf>PbigK0lZ^*TZ#@3@^0ws z1)e;3hkRl8B#wJ3OPx9;t4%sJ9QH)^wooehGV4clteP?P(y^LW4?(sE^WtSo z*tj4QKg3yX?)vTeV-_Fy>Cd#-){cX==)yb_7I@QI8VSkf1{$C9C9f!dp``je!paM! zArK2*q?`33&d#F7<=YoiJdg)?sFHzaJn zdOyC8VD#IKTbzNH+6Ut0$mF>lB;`00>`KO{PA=>~K!F{zX*6-5K+?j#c#*W zQK>ykEG9~LwI(e5YX#+Rmpk5o%_A0qu8hS>j#zRne3ur9Aw$d*}(?b_Rpa+V%hdHT7ov`e18Y_YbuB_bLB#uSoy~!yAIpqfHFZTvYj^tZ$oS|HH{Py?j7wPe&zGV@H_;I0HEJ(V*4S_IeF|BgU+!7^ z>ETvo*}i@FFySz;_*1PC07=VLDRz(BQblQ=AAUvaD`ZNEK2Q>2)Og1Pa4Y>{P66@* z0}AW9N_Tbs5!+p1!|%>y1*3V)DMW1@Lr(5`QFGkH>Pos7-OI-cGCYlB0`fsqaz4&v z0FBt-lJEQ-PR79CA-S|{R8_P7tPSv`t#Fositha}O%55^ z+4&rjzB5QuMw<_?cyX;zQzQ6yu$sq>e#y2E(hwH(6Uwcoe5=Fjbw({Ey7)Za=> zNNAU_Ow!i)>`?paM3^4!ldeEuP*8!@4fQ3l?5;{aO7m~o$!{V1KQB?epn>{A^AJHv z@^dzAir@?bv)Wc5F+#X?S!sbY{{umf->sN{tf2qq?l$j$UBZ#XDlklg-HmYb;goLn z@*o`f+3*{x`RaINrVsf9 zc(31toZ^BC4jj6#NMq{jtBz)G5Vn;HSl~Ui@mVK}Fk73L!*&-@?y4TXfD>3VrnU`j zrBl%FIxox3LF0DD*!`Fj+xe?Na#L5TU;B3Z>Wtb-rkGp?LfY!=uJ2f!3NUrK?-EMfv^?sE)?e$nV_PxQQTUU2{f}21mFvlyQ%q z_aI>s%6CR%UL>WK?ML}qb3yqXDb239fb_n5uUbzsjuz>SYRMNB8YQ#1yZa4k73&3@ zDP&5pQdVv({$xo&p1wEGA9KaCO9KQd~6{*K|L7PD&df{~aRb?o(! zUm-0OHm?8K$yxhS-_&=NuSS7E`4@Oj)|qB0z1Mk92IqUj&*4J&AiQY230YPHLzJnLd?g^4$#A>ULo z^nc;N-$CKOo@7}Ws7u{pvJ(PHxdO2d?0@P&iC+-QQ}}FQBMukUSAI5hBCOqQF0HH_ z)KA-8u=V#d92-w9(l&5>d_=r2c~>d9R$ZWj=Tx%LGSARVCch%Wbv(6%Gg4cv_EqlH ztX9kfLB&m*BDqwo4uRLxB*RY{eGK!rS?#lAZlqsaEQbUXt%^g{P7d3Gzim$_IKA9D z^_ct0qRmnCq`${u;QmAuSz#d1zf=WL(m9ZGfe;sn2>IyokUVL#Hi`vgXPxaIDGN%+&66_Ziu9$qdeRZyY`$IWq2RyOkE85=V3WcY5k!c$eR*IRH zMIR@wj~=phn~Wy*8ImFlV8C31E%K{!!YG^9^n=;-A!& zJdp33paae}Sqa}+#aU=!n=Aw$tr2(y7r20-~fm_od}q3`R*$wi=N4jx4Iga6|YuX|7!t2O+>DRi`le+fvW$7 zuCLoHH_6||^mnD^$hAQa{$+^VWjUbq&k)V-VBRn1*+;cZT>M?+2j8c=<+Y?;7Up513;0;2m&M=(Gn40#d7tDfz`>qD;UtfR(a)Y!h{UgyHzT6>n~xwenh> zg07>Ty=B&#n3T0W-=`@|szjaWQ&)MoSaJ=`UzC2-@S8EF%UlZbQ_GJ`GBni`E^+Ug&)+Gr z$XVH55BtQ8kXJfiJh!EaYTcJ#8PDgOwfl|S<*lWFmrPMmXfJ$GpSrrSyaoqKfOMRK zkC0}g^}yGK>65#6iX(?uO4%TZjoZp)TI;}v`OfYw2EzFUKN;@w*4B|7P|(`R2&OHD zA&V$pl)7ffritnO_c21@RPD)jK7Z_sily{#12GwAAu7r_R=lEoaF3Ib6ev z!4JD!8{aJ6rLnw00oK)sR3Te|7IP?8h2V5j5UM)$rfdDUB%{Qy5_cXT_K6`un^lTH znNUiu`&^qQ5P_8UhJZX-1k zFkrNa6G{{UEb}x^Q9-@MeQrf^eTem;1nqvR>gyK(#(Y>#-E{=F>;H;ljeA5rH~}Ep zFYQYDK=2+CZaHfu6iiS&m}P?Vht*~VWTwZDaTflthu_Q!-RDmTg$|U}VLef~eyfK6 zFK!DHIHuwd?H`|gTd?r*bj2JjQpEMDa!ky&r6m}vNo`2i8zdobaBefEBF^K&^61%= z8=F~LS4?9Omu|MBw7rzUFGs`&`B1eY&PlKKx+ImqyS#BOlE%$(oIwL!kFccdVV8!B zyB^0ept}#-Ora+1)12E;d2XWV7snWjwZlrhY5SA--KA46)syp9vR?+t%_T(VF+0cy z^Ir@JT!~Fv-Q%k-Q0D9Gu?Py-KeIKhbk$IR6zlBQLr??nGAlftrv!0sb)Cj7Ct>}l zBF2!v23D8o1X+}m=l7;1Bv321QOH3>&2SS3!)DHCYPC*ufwP5OK<9X98E5E#7D>Fb z+WU!FX3NaVPsDmBCZI5$bE99*-`^`G=5%!(ZY>@2Is$O*cM)kXQUw$dG&B>90hrCq zImV*nwvW`DULvToN&bGImRGZNa1efz<0z+Qg2@+C#hPNTIqZzM#_^ zZR}#P+Nf+5{fFv4&f-iHzuicz<;%jET$}K7>Vi(q(EPrtDvqzSZsGX8AMiZYtq{88 z#VcknNDt!h-lkW7?0bg@3?l*1zNd{>GUsRF3}d+kiv=!0Z2A9$JHW#M(w(rEpsqRl zw*WdQ$ce_5{-5Ucwz@T7TS*l_s|m$*EmO`DeWv}bn^+cKtIbHl z5?Qe(Kv;@~Rf0nV!b+T+2T@B+Cn5(8OSuOgS0!z2qe=zTSKYxt{fnb$QoWcyNdPaD zQdT0B6q?29jHlAZU@x4j?1P{dvQnNN@*Qr#e`Wz#vF*$wZ@%8tU#PDmiBeaN+d`Z&~bla zF_+r4dhhdWOulFOl~;A2fE!PI=$0>lFaNeFMCd;(s@x_T5UJgunJW+_l0+b26KQ35 zMK_0LOQrN4tNgoQM}e3S9#}?{G&a4r&$P}oY9vIObV+JQmx3M7J6qdy*Ua1MvTrB* zBN$=&xBnk!Zygn7yZsLfh;)fCGy)1rigcHR(lK-jNOw1gfHa5*(jhf;H$zHy3=G}f z-M^djJm>rPp0n2ZQwG6#S@VRY5kiMG=K|=~$y1JB}v|W3i zjYH}0&*yBoy^3GsbV+~3WfAGwfo^z~UAa|5obk5(s-su2?t}PEgK3qkgN_>VfS$^a z+#iimTgQX5p(Rxlv+adCUxQ;yh7|Z~96%H-y3fUa^l2X0NYxi{Uk&Q^!7E5ELkYl= zXO@$QAo(O!2RY!(|7MPV`PrkvZ|t!}5@#(0P*HZ6tQM&0=@TRsqgSkKebGnUg3+Ct zT14#JW$h0{Uyrm5e>i75U!Og$Svq_*FxZXn$>Ud_!$SQ+3e?l5+3=h(169Yfmf`AZ z@EHY3_8kQ){>!|k_S9HF2fh`;Z)p9(r0~{6Nu{s2zI0emCAFR&GUUZ1{gl+<7XhHR zkXh;zieJ$2KPO73egk3_11x)FaYSf4f)$i(aZIA&N3lbdS$mbg=F|yKMgoo>mH_BK{=_#$87S$^3^vMp`-Oae@`BJDwirUsih@q z>y_~46dIJF-12Dq!&X+c=@f^VaII17@{sISsU5|8j>K)$wPi)|c_w`vCK8R`mH3$B=Ph#Ts z+eb%D#BCk6sg_*$HiBI^E6bw)dU+noEac6T&bS@Zr|6ts$9dRx%7txnJsu|+R|CV1 zB1eNFb4wDn_gU!qz85Q#w}^sD?;W1R+z zR8N5$c{iJ4UmF@RJbS%-*FO#43vn{fxb70!P%rdDzp;Wkqsz%LqoN*2j$0ywp;l^g zty3LfzCeciWZ#%@jv32j0~0eW6AM1|yKB*&ix5vy#KqT;k?tNxK|9>+7=oiC+EK6$ zCOSsP3L9S-i{JF2w!X||HtG?MLOD^18SCVuOg&cZ>NK zaM;1?fbKUap})+|L^k3ClYxWqTa{Z73*cfB8Bv?n`XNb z1?VEIMjAOic2@(!vM}CPXj}pz8?a@m;(41Gk;E;gfYct^4Eta`M=~Id}^Nm z98|wa!Z+T%a96FANQAmc)pgfDuQ&JTK+nt z0u?`xYKu*%;qSUwNNNF*nxLU|Wz#JLwHjDs&c)~6MTz-sb-0gyYl-4x7D9L2lNnE$MYuin?ivyN#rYvnYuzzj|WBVfq1F( z(2V~nDOYa+YK^^r*E|d->9$Hui_@8t>d5u}bSH4f{ED$qF*wnn8qb0cg(G(={z z(#x*0^^uNtx4ky{JH0fkfH0}J8C~*&B`aJCH_s^r%?}>ZzZ^@x#AX({CTC+D5$k!y z>!qRg2QMUfo{S=AhF{zAts&y1^0z?xw-w726u&cQ^sGDrxOc_aRqJ_Z(23bdNRMs5 zN*33Y+iL1I4fqG2`x-m*Y)uG)(EZnhRR+V|f=ly0-)7-ouf9na3JKT|%Pl!I6r=v+ z~%7)n_P>nrA1o#GgI_EKLM0$BfmW$D2PTaO9@h_7gY4X z)7=`l(n3^xrgO6)Uvi4M&o8FfzMCoWDLL`G38S&PxD^z9gEcrKJsU`rC#6d-P=DzZ zC=2<8X3U#}@=r4$%!o#WvKCgoY6j3MFDjHdQnAPJ9whqu`hHdif+0_ncy< zdIBa*sKc@oH6~Wt0XH3?dAmU_`x)RVbIlsr?H8&M`+UA4g?wgy_2JTL`tSo*h|QiT zaIn?Rvi#-QO}4HlIR1CNDbK-S%QkYG_aeB;%8b#}BlO zJmDn#LCez0!j7t&QI`e)=SHlnihGvAci_a&)|&G(F|eCBORGeH^<8-YfeNLDSmch+plS& zGgTCqKh5wvKk2=WP~8>Z28%ROx;Me-m`Q-20RtTI-Y*_)#nwe)*=BZJL?nH&=5CUd z$^eg*^hIFf=-1|?M8Jw9=0F?w74=I9x&xpfC876UcFMWVt<+BDK3?fB`}FBk&G`X> zw+=T*gU#r3W+u(mE&Gi?y8m`nnnH>vx6kR32XJm@>qA?YI3)fh7Yv#0PJTPh&qufQ zP_=n?h!~)9J%Hpf>~!&*X-pOR0n5>R_{nW&So0}gwe3Zu)vGA2a}kQdE9cI&S-uj_ z9?P*}O)+xlMI^@tn|ZG0gK-1$ojGVW12X$u5j@>Fi1T*?TVZiPNbnJK*M#`?ndxg? z6IJ?SA@+PQ&Y5%F{OgJcG|P_G7Hnr?CE5}VJKjHDkf{uR5zEVL!soR;{3-valK*{R z|5J}ZOY*b>iKH8(a!82sT+Ec>Z;aMdCJfx{Zi7o?tt~Yw31d(qRd&UDf3$udmmaIT zsj`{IzL~7VIa%bi3R2hjTc}8IzQh)gz-+lWgnnEta0}EK+NkF=6-on{uT3ByO;FsT zn2kslg^iV{Yc#l@kpaY^aOhqgy1a5wcx$$Cz9Q5Lq_SG#3&n7MeVdEk%TcBvJRX|HZpNAFW>-Y+W6%8@qS3(75NGVW z&^_o@q`rN?T4z9v9Ua_#OTjB*%_ba2Etd*IRm3v!&S{A<;8d1&L~>*$rvrqv(Zti{ z?I3yCWKN|-F(uH+{2NNnr9shK>d4gbGA`Y@(c4;X)9I(&^)E;FBSs~kY%G0`^H+Wj zM?~6Q{}LWsyXAAACB*OfIm64+kuTe!?48mz&X))O2(v=Knqy?C57uzwMEjUcS39s| z%$sRqK-;%${(Ji@3XVdW1P?b4cP?&1!4PNJ`8l=Gr^u$vpv9ZYUQ>li+8?q%k(Fat zTifSf7hRUqw|WE(e0`q0*TxMv@UVcC*<*yf`E%3_2jh+32`T3(g{reG3 z$`_&T@rjW={lj_9V8A8Bi^!DUe^>4Cc^^dbG)zmaXz_A6=fOh6splmn$JsY~#CP;; z0{kOt8iQ7*CFCbm9KE{RxppJJXEVR8yGj`EOP$Lt;hr`$csj0lG4aS4_bFM}VzN7x zM-#t#jbY3Vp&9W^6`sQ7aVZR^g%skl`u)IY{{JjOSPq7h-WqC^m`?#cF#QcpivS_9mo{qn8d!!T4f$h*qrM%d1wa0x96SO1}09(af7rmx; zGRxZy-6jCen`Zp7GT<=Ag35+!@6{cA%dvU0*K`m%=SR62J3RHY2z#QWqMCJzjhazg z%|H&EfKRZFNSwfiMi3PKZ*%3Lzhs(Z;yx~O>jLv-SuWcepmbkP+@MLKcvO1r?3k&T z&8i1%Q;^rEAzEhB_kyj*)m7a1!mUD87kyqffjfH~x*VMTVtzUzygY_}nMi(T(IC+x zEE@W>L5b@t%E7R(8M?kPQpN<3i&GHFM7 z9=eAM_|X9tT6=9=bbjpcsu#k3wTN;&pm1ESu*llJs`&E@FIpc`b`!()A4YTaHxlP!z68*ROo@ z((N<1NjSU>pqkCsM!=-x06{y zkKeS`KJz#x1mHyA`Z7o=MUX>jy$cgXO~;mscO8eoZ$#~!a=9ZJ1r>jsl{}`dRlvrX zyM{ZFpMMC3a}?i*0b5!LB!|fF9nEJ9q%oV%>XNPR?;_o78*Oi(N?YWg|3-g0{!#P} ziz^;YDCk9Y@s#bHvz%N>i956`v%r1raD!NPrY=$qC$+ifH~Q;xBVnL#Tu7kbN=xJ) zxG$`(<7ChxReUe&qI{o^5_!0?Wz|)?R;)>QHXui&-1PeM4U)<{LLw-ELalEKwjIu? zhQYuv$-`qlJ*;zx4`a{LrQ7w)jtG_W-BbQuTXT&&ftC6zxlAT8Fc+R#Smou|Pk6&& zm0qP&u1ELXQdP^UciqAMHsaveGaoX7HB(1a6@jfeU!!Z_%Ul$|BZ!KdsaT8fv$nj;^NYNq3yje0Iu>5v|SZShEanJNB65l{Qbn~9OHS(&h*CCX!N9`atGToUZ)Fed z2^V&2a=uKf`x1++?xDGM_-Br=Y3h+P1cD`814n}fn!r_KJ3CEDp6`JpX8vJ?fF|` z#avZ!cCukfQieK)M7q9~yl@|j*=?NtTV0O2jmH~;#!1I~X9l;qdGJ~WCyQ|VT@s7w z-vqmmGxNx|gjFc-$n{W{f}a?t?#dexX*q{ zgA|K2bh^^uwNS_6VDI<~wogo2U!xnLoz2VwH01NYBqetyp(qU5eIkvJaquZGKzNiL z_XxoUgrFFX;Jo09-rA7F%D zyeG2_{G;#wuSdV!hcNMnz}<&Wo|ZIw+2HUW9e!wLyV=h^yIPfIOyb6(%6L0*KpZ3F zN@WsBAvsTL6~*izQ7~DJwDyE+;7-s6?^EPY-){uH2CZe6=1BrtRR)gdce!)F5WM5x z>XK>&Ub=HwW?A(L>-JJ4NA=9=ScGnV0CG7K16pCVLeTt2FWWp%r>ov!uvW#?2TI&4am#z2c`7Kp&0 zyi6yZ`XqTR5(ds^+d4QHaVj7=DTh4!RKYNkO_sS^p(vHW89Q-T`bY=BY^6Sj`>u`} zCehVOX6)B)QO*t8(FFbyKSlzIPWUusDI$`LL$OZhatBjFCg+T<*56SlG`0$7o=w4!+R{Kg4dH9^9(>oL2O*@n=m!fW$& zd#SC@MWH_8-^N}qFhD*t@1D}6%r_P9+R%6lmc=n*wwb#CV=>b21Kl!?^v6U#S^27K z1GfnwE6+1zLFF|2mhTs|9&b59O1N{N;RoW;?*PH~ zkYEq=<-mubOoGRhdK!=ZPPcHZ4B=?4E8z8#79DXjnT%>Qc zzgitRwYaDpO^Fs^5d*w_pR5bUosp8&$`gT>r*9!gix9{wBU4jz!|?pge4 zwn`7j@uDeG^WJLaML|mWBd^W~VSndBn!ELeXVDe+m&a|9~;hY-CO(mv@JsS zdNTBK45!AXARe3a1kr-hv^y7uF?AEIS<(xz*iZulvtZd?)jS7PD|JvfUsdSd!460a zFrTp1Oz}|#hu@+A5pq1di`B7uh%qa_Y(*XElMPIqsMsYXnzJhLP3?cN4!^77g!PR z=VuSBfb1|YNkP~1Ntg0YNNwcnd6j&7F8yQCn(Pnh?h;=Qnp2^Dzkf2-SJGg>ioRTl zb)+IthY`n!2O_RlQKr@Q7=m&8fAdNp)D05TseFm@$%AVq=HFczgT<6%QBKo;ld};n zcR_@}=d^|>)IO_kuf(8}G)RtmVF`2@&63D{;;;6CBx=*{WA3w2hulJ+CwrHcvV#b; znZyHhEaDSUJ-WRYMW|5m{c7L%;Kj$puC;G-F|&eDQ8Aw(RNYNBcu4;8XZS%MT5CuP zf!K?Pv`7IAHGF?%!50Z?BT^;vbNp;ghi?d?cP=%)8z@H-#0DB%26{7i{MB=;kR%31mek}A=iYT`zewf$Tnr=a+kb=l_5~eCLtrO} zoT1{@-uN`?u!jD#vwifnmMjT2u^gK=^FGh#N-;W9*?G?5P!cab(`kF-ziGvBRjDs) zBoRZ%a>i|=q%LoAWQ8i_y|=GBwV8bBs&R_%@O|X<7}Y9Yf+xZ@YRv=qJ*{yE{_Unk>xQ^q=Eo_Iuco9l6u`p)up^yqU-nc8&nyfK;$(+KAfr6KoKh?mBeSeFCy$|;v4{~V{FqBYip(cAUcP!TZ zB@`0av}1KT9mT!-w$fd4c~dI&nN9LG49E@QgLmEYilz93%Kj}{0tD#O*fqkCM?Lii z1Ks{XZ_>n3z8C9|XRgb2w$-}~Lo7ME7Ut(+gW@D^9euUxZw%;1jHH5$J*r!NOSoi~ zMV@Q%*PcK6v6KyynJUZs;2e#;A`$jD`&OYimlmqbaqZLZ2rO6S5a{-NdYABJIt zlQJ0HPI}DV+2Y*N%pRbkjydG~@w%H&u1OOY`#pz3Rff|mZkpu=@q^p|iK@)2Xk|lR z@UDYv8Td!ncYesIbS44|n$FC0pk~_ml~*ozzYgMyb3oagJCJ_0K+~7gaS3>^=%Y!n2`O;H6co*vwLJquhLT?Ke5y&@zDMsORT$K5`tsnAJPrqq zWW5gsq$Qf*(9kU^F^jhi6MrT2n3S}FMa4@EH#ODoNHKkucf;R?TP)u#2VFQ#nmSq! zKWXd;VrRTG#QHn)BW_$I}I@= z;=Xcl&;eMtY`2mg;w>OKH4)87a14!#H2t_7iI2RK;2e}ZuC+87q{ zGHDKe_u>Pd?{_UWAuThlh!2Woh9dztH;+MEo*W+|W@BEgV%Vp;U!N90qkk*!p>1;m3R)r;GEzc&hI};NG+*=gH z?U>>)>jOnHTaQz^KO@P6*sl zf71Eu{n(k_DB_sNL{Uw> zHiEWCI`>$|2ZJ}@nwsO;R5Zv3z0~~-%&$Zd#^zpa@te`~Q{7vik;TCjwe2s2L0ZdQ z$AV4H7$}6rZEd|UFp*N=QPC2=&Z$0v35pGEvxLVL=T#A(+mJQR|C@}O4<9BAk!?-98`cnP5`Zwvt69|mqZ z5A-?UX!iZ^t8?L^ePaB$pVX035Ow-|^GEPqR{|_?;5k^x^PTNTJRuoO;Iv z3B$!&^o+mm%`D4pkbY-fxMo(}P?SEV=`5ZJ4yD@o7X4UWFskCN;WhlUj`ixi-R0K9 zVqKlni_^2wYp6jB<;DAiXEq&J(^b^$h87mZr^Chk9w(@>(yHtl$nx`a>4Mo#j^dv{ zv$AvYp7Z*f<6?G#VBn|~BIqb)*kQ%2pSbM?pmD&>ub)`zqQX>OkDZMO3N4-4>2$O% zg_{En2u=_`9c(iV{4Rg0827&_Lug;QBT`UkNX7g={m|Fi%cja{abP?2? zMY9+kz%#$VUm3aXI= zKi-Ti@!PXv58b*h;HXc*bG?4gV~`R*_L$F(=)O7 z+_!Ylcjn9qCNh(=qT&Hf4_>dqXe8H*6*MJU7qL^o3s#}36Q7uv-_7;3xYwCtCe#K4 zBo@gz-y-g5+p^@8Uuw7R%ns2dm8KmO21ej2JsWQP;px8gHtAjLN3Ydt0Ej);%I=GP zp4#Z@w?ptDmvg_@#ct_F1IQktb{vCRQ#eRzPIc-}tji zd>TBiR^gTlJf`hW44|w#7q6FyMsob!>A>d=%uvel%{sn@Qnp9tuY>;>jMrZE7mE1* zW110Ph>oP&^N_?A>*#4FTM@!{Jv>3HD!3r0JELq}_BfBGmNkC}3isD}2LX0~&W$=m z#2ZBpEfJ@_1e*FNPBDo}W`>2?MsIwVBJEDVh7kQ)QdN6xpPY zwY^<>=~y(ZusaPn6K9mNTmMdt5ZG%u+0uQ>8bZ!X5%Lamjy2D3p8rfv3eMtl(=S&d zcyM4lQjAdgFluKbU(k=|hjV(>QyESan0sFC9_$Ga!J9~%Uh5IYs4|YhGt2D{$IM(C zkA#2B@I=$<)X5ip1|>Umh^Km5@7Y#XDT~=afz-I(Tx96zJCe~i!Z633=PUWzyd&PX zf%956H%hBIZw7!Qx%BA-ccOXVmkBY|ICh z=IPJS>`iaogfL>?XFo>`Ri$;lDnA)@FG@%sC^cUgtZ_d0qG`iw@X9`JbarKb`}E0j ze&ukHn5w_@R*L2{XXVlL!TXvDEs*{9^hS4~6O~z@RsyMnlnsfVY{=}|yve{phe1ru zVJOo^uBrois%E1sI`3SWby9Y&`c1)Up@nu8F%pKWXTc8Y@N3EOa{bdIQ+7xy`Udk3 zrwRt61cyw{<#M!$N_l910N|(^TTy@Zl~IASnDoflR^%zlb{8LJRjZgN-g8k0zw;DG zaTG|`_O;&Q_jhW-r{B_ReNhInA{HP)IUxASegt6sh6WuPrXmmx)uJ?X%;%U%uP9%i z`mxtiAvu)Cv4{>ZPATMnB&dWM-EP%*9`l|R%za%#Mi2gA+dn=TbUzu0SnEVtmBt%l zW8>wypi2#fdwOr7i+0RQURf1mR2!I?rSFIQjl!j9bhYLtJ!C8*&9k;k5TxRGnXW4K z5hYOq3o`6O26rc3e{1HgmG(?QEKdFhHa{o)%ddN+0!Y!++(8-t*uDRSq5sqp(c9So z1NhPu{_oz0c+5d9B3DDoau#%O9lLEAKi9Xw9@gM!OrV=sX-9AbVj(ok?mQc!R^8h{Ov9b|GoPT29C(+TnI9|TK!JW$j zKiQ)&>-#$qb8yR&saWmgaB=0DDN&T6nYwd%^xR=!hr7lw4jrD=9fb{8dC|2w6 zYEQ-`2-UTPUWT3T=cKq%Hu)3^jvI42-6Ty$1RnB3y=x5`U#e|A+4$Xf_KX*6N6W@# z4bd@nbv535fa6qmG(LGfteylkucbA$rvgm*`!w5Q1C#N=ZInz33Q$hz*yA8oiNj&K z$3*~g#MYBofgfBVi?mT~6gk$rMbwA`Ijm0C51wAHe5-PxT$78pm&x4W4*+ zFTYe}n+q;2i!?|;SZR=0Z*z;1n0_H9+mkdB!CP*#^0r)3yV z0^$8=?Zhm0aCmEbfK78-Xa3&ar$RPi7^9%B46x%Z@H9lYn$r*UfK^Yix~@VyV67sL z_!WLjZOG2D#BNP6x}z0E?kyYC)C4kYCpni3T#G^z#b7-GAiFY>o(Umb-vwV^&xtJw zOwI&gys@9`a9wIb8GcIKdHaYsk!UsBRBoVN$ZDVOsd&`l9<7YIn#l48~i{;+MxJ$-}K z_tUx;gD8zJIGpc)A`dyhg_%4$V=nhFSHxFNU;2#d*^jvBw)c;*U($v4nA;82Bo>c- z{BYQvxW8}i3WK%6y3pwvBWAs}%Wmln|I8cPc=X|Z-3noq&d^RL6D*Dj1~sE;J)4W$ z@5i#UP)Zja=R$Mo`Q|i?z>jO6Yp-OVfe0Y_DVRvVX)8L07??%$6_!N>0wpwUUv~A9 z3WzSN;2^JRHq;t}G0s${E9`u&>rjVI^90mQ`q`thiiOpbb^Pg`=o)adrOUg#I2#2c zzumFa&zdEk9g@?|)FZ)9(>mVdQa=o2{!YsP)ww&Eh0yD01QWg$K3({BuHv94ml|;I zeIr{qf6~K#5%_pHfzeA*i?2xiv$lfoUIY(OAe48IF? zj%ey!2>FV z*F-U?KIqlDLQjeXF3Fm1?zCo(4(`XCvRkUdweH(4GmBLSb~rujm69FuFZ?hAMkFzd@O_H zkUg#R1%Y?ngPGg#KXJ&Pw~ntaF!iDFvED+c^coY74`eXFZ`&qo}>a<|u+eZyuXq@+$|-6z#bbnQz}j(8 z&*wkC(~^M2TN{}ehaAi}nI}0#%DNs1cCpm17@I8rc3^%>l1X+y-AhPST3&P%d>U(lm^UTIiW$^ghT7iWvJbDE>*!`_F#}EGNI_-|MVYOz!fXcA$ z`K!uU!D?uu7oe$B6*U8Mg0w9rn><<=+nqP{Ck4&2vY)VMzs2rw>l{zdPj!D}qHW)# zDKz_N7CgEqIUfzm<=hIqUx^^q^TgB{97U!XL(94N6p6s=hND}%#c52>urI62i6e+` z_o}bEEi^8It503^)WdWNCBr;BA6~tfNTAMHes&(*Vp!Dv_1cCtX?_N9X(cdpZ6_-> z_qJiRxr=8wgb8`_I}uoKJLEDlvVK|nAf8nVS?)MZR^4wp*klmEF={l(08v(4^%i33rMU5z4_2=z2p+6S)Wl8N0Yb=KArCk6oHV-;_XcYSnqf-&) zc)#n0-G!@1era#X%nzMuuraSjx*T)ypbzD!?oYowm-)y}I>EHFLsH}|0^AlkC^M$g zghksw3ScuD^1o{48&ETJo^QB~|5wd4qX9kI#j6KB#FpCc2=d`3=I7Eowl$Sdbd0Dv z7ooHL$?(Q$myhdf_fZWNk)MOjrl05xZiEjA)MYg0K87{U69+=#^!@lrW)p^p0B-{iv!>x&o{6XX(W3WAt3%wgXo}6Z$>j)ez1fRvP(dFcmeb zWm^)ZvmIr_>Dzf{ZMS37B&R#vhLZz!Pr9pQ{$n$3yHQgyKKs?Vd~4qV)bojv!Qo6j zy_NN~g%Dl;F&-%S46+*6F=bsG9RVSknt`Ahb^c1gm!Ld)ha+HR&Dz4uB1j}+H{Gt< z@YcqsXLe&48o32*b9=tTuc%SH_txPk^TJ>l260a=_-ImS3=CoApPd1_>|5WH^Sne> z-Go0ysOyk#`dr9xr?9+hzxR{q_-Of4r>?S2IDw5%*bzQK+Y?=(r;AojvF9t|;b=oG zFB)ju?0kHhWKP}ubH^rhR4ikp@1hwS+*fza1u}F<@zO9jRl@4;LwUZM=3waN;~cfQ5}unsv!k|-V(>RFv$ZUv+tR&r zXq~@+&%)G&^BkQyY|z5HEw`RlUm^AGVk`Ob03?Je4BbF-c$-8kX3pS!j|`h}$iFKY z&MyE~n11iH-FD(4*@fAdN=u9DTO$=U7$(6h4Ode$ScKYfwhF5pxb}er0^i-!bxcZ^ zWH{Y)Sa?Xw9@6z#71?t2F=6YdvKlK79gBRxDZIU%sMTZZop+|N0HR_9Ns#l%dlM82;;+ zca8n^`K&IU?sUMcR<+@_5NYW_WGZfIysKtm1gU#4`c^l+Rp`X+=jJqhF+PpW&6+bA zovcDVr7AHR$ghpKr3_I5Ig9x${MO8j@x4P(gbEe(-1~y$y@1DtJh-Kb>QHCw?3)kl zxr~bV)Cp|fb>Zr8!|jt$-{losTkUCKm%@S(-b#!E7B)slL+X!(qG%W?{jk>^>_dB% zEH3Buo4p%pF#hQL&+v2_mJXayapAod$?+y}3pJWLS<=e8)dpl&hbv5Nr{i$fh09Iz zRE{P$b9N%!DLE(bYeA{|rQiF7!-ZRIKuvI9KwCn%)=7W!Z}z(25>i@B76JP|<)O>H zIl3G>30I??2N)CJxfniDf;9YfCXYiaOZB6ebn@FC8X?ceK6u|pSy;l8d_QLb&EP3L zL%cvkgLA``f2!aKzw_;3B>cNyrQ{EmH`fSz`zDQ%m7zaK2a?N9kZMv<(bcJi=}0*X z3ntEwFzm*c>mVVJWo6Hp*y*in{ph>0WepzJ^NFC7#H~u$*JInmMy~u*-xA!fzx*MO zOoE-mc;8OFdi|cN`yp$-p9YKhy=U-0^4yc?b-P8b};ceL6C9Jg<-CiP$!+!AyIr zlBumcNCTor>Hal)bJHdF`shtR>mPxV*dCwD`(PeJZ^(}IypdqqZM!k@|0%5(Mj}*v-P?d{y;Kha?L0Ak^sm-1Io&_ zIvM|emzCy2St%d>D^+>M5~b*gi4tKvegBRdDHNj%V!>RLqgQKiK4CRk<&6)ou*rdR z{lvB%!CF4pPu+f=KRSEc-ga_3-sE!7m6s1M6)H%E2`b!M06d0!DehK zy0KgR0Gflj?nE+!v;0ZG%yD4rT&S)1xJlvKXuRfHFp*|2Gjy28-tau(RGoX3C-XM_ zkkxgew^ri1$!n9m;9e6%J4DI7UDsf6NF!-#6aK=V3ses&(Bg zLz9q=FK6ZLHfnpid&6#maCc)AZ0M*B-5EC#?t;vOYZJiEX6_P@tC*HIbBG5 zYOoHUW2=VAiIqxarCD*4FHFc2XHbxvAjY~;nKSE$zgduC!FYzDDD{lE{>51yPHxmp zmjS3v=kY$wYU&rFmE)^omw(R!xH?|7P`ZwwU--n_psJzq5;7UyS!{9NUeBg09*0eC zx91c`L;Dt8`kg|tR?dKwfG28kzYh*2eIrQ-@)3N0Y`mxQa3hz6z*oI$a{mYILCg!cUKh3z2U|hZm)nOeFZRk@#h63FL#8} zJQ~)V?uF-B#H^yNkt@ErSU|X$(RkL^_7Cah)fpn~@zhKEA?- za~bKYmptX-1l3$)uZ!h8o+M9KO8VB&(ld%ykUy!$hf>P9e@Z~F+?*yEI>tQNn?n+a zsSD|G&`}{8&{-~Ob-q^mc6hl5tWcpfZyaQLm`!f0Z;<_H)ajdHOf z0+0dE2toPBMjZ8#y2<`>!Mo#}P{n3V#62p6gRrMy+uA?8RosofX8Hq;T8ON|>nD+D z2>*Sm|3Uh}fS~BGlsK3Ntmzn_D`Dco>ikeSz-2cuN&DESqt*t*+$yi<v58uhvIziz5Bta{uS1aGPr7gn_RsBG^|2hMU+9j>g&@t z;CX6lT9OCuYD>+!TK)sXA<#*6FnHH=W8?C)7i)V$y;Q{)n}g%xF#PgjyF4qL{_ls^xtH=1`mWQblP$KD}IKG3eY1%x9as?zZ^4_dS;~L0p$O ztsIqxv{cMbuJn#O-{I9q@eZD9cY43A9F-r@NQJ2Vu_4XcdAXb@iUOmWq4{xqOF0vF z6nYhGl^u1uH75)=H=Q=F8w0@`b3ADCg}TAR=kvkXR?`OeEziCLAKZSQ-WL%UM^52B zOj&O&A8d=W8D#siu(Ht8(^JZ|`Y2)zXrLAxY+nhGi&@to^0?KWM%-4BTDSHEr8e`W zGB@LAXzGY+^Bd)=t7hfb&%8Or_PpO7oIKwaLdC)AI7qa?MSzAwAhR58lGJoUIQxv+ zz63ru8K3R1edZrg+Sq*mO7CKCoqu;j9>g{>tlMYOrQ!ePtj9upRe!Kf$2J*J70>qg z^s~$KtNfD=xj&AhrB*Zh8w2&IWW1eM7{1 zqnDWtWyTC1lat?h$oTLt)-vS}_b`eVBJyxPj$OcUYI@E1?T^XT>#w)~jwg}ZrM=_T z>({>zr_-L|I00m0z(s@wPK z{#h7;Z7sJbL-#Y~c8j^uQd?6<%5*aUKHj%TgZ+vA4ncZGV?`XCh>Z=yZ0tbCuA&$M z+1aO#ll|a7&CF1hi!0C>&ID#lWmqTB8!r@CYq`l9YCY>CW)>%)~cr}vHV%^)_XR| z8OyPDfSFnV$XAkGzHtc$I8PZDu}ygLuR5uXQS$0Wwl+%_4(jja)`#a3=h{B@({nm@ zr^+$7Pe=Ljy*!-sh|}`(Tbv|88x)kj2+5*&1UunR-a2HAOe>0+7BPaqtZCYr9Up|- z9uGH~3{mvG1KXK}hOO;&QYwj*bET#PAHuXFzl)&^JG8q&isQRpSza!xxq58=E;U|v zPIB0la@y&PB&1UOGWTh~3n{VMrVXHR#=SLmnQl|9Z0+ns?hcnPoX6$4ZQl?~QLD#! zFjAId_Xf%g-5?#33W{`hNGX!S&?O;AmvjtWfN%+4Ze=MJ3WyiAj zZpv%0u39}hXlzhlt9dV&$IK?{Y(XBm{!qeuNX49+{3tk(Mj{~T{#*vdptaUR^xbcq zDq8xq_w6BQ#7%eNg1%8kSd=|uj3FeXv%Hibs_*XmeBV5gRO-2Tcu1?O>**=aM~)P| z!p5nx#G*^;$-+g^IBbG?^!*eKmuyeo5**6=-tNT0QsxYgC!$`hJP2uhFgd_n-iwgj zc4zce1jbKAtosc(v>{kOEw}=%+bv|XJ(W&Gern5D4qctT@`^`kx%`aM&t6i4cy?boN&C#bjgD<;bMAdxRed5cl zIC-3t>$ppKkMzCHo=w=#^Pew%{@l~bwsz5aP*;ObL>^f$;*syoLzmVX2rXxxiM!>k zP*Xj&izmQ)?ey=V#iK0AS1jU@rj<5F7?S*Jn&D7h+E+fc4YiSy%no<#iFztNSeDO}-pTuNc3HxhyodI80#_Jfpbw0`O+jky))hvCIoQKDl z|7}q3Cv5i3m`iJrt;XCr8!_EOq^WA>^%wnydUpCL2CRN_1gY*w9#Oc4qqTu(KM(o1 z_l_&3XCh^()zbONA_rn)=YG^M3>1cYY7sT`_8^^!?doklF=}+PHNXAi%MFr2*yQ#|H`n%(-{H>O zcSifZ5p)^7r&J`nwpd>9+mddk+Mx$WWxYX{i(cHB!esYBfVj={*my&s33G`HL&kLAM_4j zB0BXt77D0hC^vQ@bB4W~ZR8mLfHb#I5j0?n>`P7T6Y&;TG|#=>Xx&`id-hpr=I37F zjAm!kjIeG$ST{Z)vENRM4Bh<9lh#kx{!iiz!U~stGMHuqWo4i2j2X;ieT}y+6hO`J zMC|9d^O)zgmM10k`cbC9mmO^kE4=z71p#Dr%u4} zDK`69A2tSmHQY??&V-~zK8N6mr-0aB)bc&~o$S~JmhDHyy#C)OkPdl~(1= z*3dMwNksdc$|K>=-Dmgy^TFQFW`yLu3CpW{JM0{M{gJEq)#8^IFp@-(ouK#Pm|J8E z>jGOkbK`#}B39g=$vt|+zLUo>Qe%y}#C%LBg8EYyB+lu?UET^BsAsNCRp9cT@AFYr zde@E}9vg_!ms^j!k6Ui`veJG<+dEMGa+Xkz>SMNUZ4*@sCWjOiiBBTvX)B@=pS`h| zr5d3`W@en3gJP`_h1ys{XSOzM%4dI+U_?_skbUNWqGrx|SUKvrF)Q9!RfosR{7Rwgm0!yPW|H{s~dw$PPC#`#`|mhg{90fA3W^yYXwwEB?1F_v$ElrKLObYs+6Ce;T_{)}rINJ>is_ zo7-M`C=vjB6ldHO-Z!($!Iz^7>SIzoE)|l5=8VpM4)Vowtl~fS+^IIeBO);yOOh@} z?QnwU%L|1p24YXAS7)`;ZIs{x^>F}8pS_CuW@YdS;d;hC29r?r_}HvR~%E1VEMKe^{RGgPzP-n*n!{&2G#-Eq~p0pXF2M>f9rZX9anU_R~V` zN_FT3`cz%_6B9!7-aIa4&Gs;C+iI9e@UW4d%yU@Q<+`EcY|Y2Ly0w=5`(A;{$kZN**suw#MRbW z-u(K1nzw)L-STQ6C@82JzPiX|W&x^Gf}37c+tW$J?}fpwKqJP7dI9n62MkxQ(s7Si znBN^L7iQs)-1H>Gj|85l^P&5pQ7O~<* zsY1PL_#m%#vF*f1{W*`2w(8CK>YbSMDm9g71rNqQcyBDu<><(UHG=-5!IBTcY75%+ zj~%sTP^xwLNjY!DUG(wd7r8XOGs~Lwmrl*gb3&F594U6e&1j*w+Yjkx-}MV8ODT;* z4VnLR7ox$YbaYE*{Chk<=`|Q!!~9L_Lcm*Hcs+S}ZL>boUu{-La_|2MjQ=1dzY-fz z^uD?!c@UpuB+*Qb@hj<)W7L@WdDl?DHz`v~v&=+*bAYpd?Zd^2mZcV)|_M(6F1_xUsqb6_7f`T zv$`$mc~hcn=-B)7{cUMPJpP;-cTJO!B5s!PIo!yzqNj6J=U>yUg*=ZBP|+~Z8d1Z= zTHa+-cWh*K7!7?gW1eE9cn9agsI0b}8Bo#49VJ`t6Znfz7%RW6@-8z-dw;qfstQLC zGq+9_Qux0$?H|=k$_C~xI9OrI^Hr5 z-EzGY12VJV{@^yOwuwpIp2#BMWquI$OHvP5>H@_I0Od=U z1zR9}0p?OKsnfHVSmdPA`pLUbE_sbdA~O3cJe1DL&EN7=n@|(lc|ueszZO2y=}2WX zyH>^DpZ13Vf(iEi0m9dw%!otJ(#oFOF#InJkXczvFQQBqhrbvhTM=?fY)3?mK}9(r zp^%Z6Mb5?NX**3Yw{mx;5ge+(_Ls8s+}kq8M#_&#=cHT}=Pg9JHDY6IbGS7an7$0E zsgL$EYx~?mAF$=X$}k_6Xv7e+%1A3hD>mC#K3}pPMRidT2nQh8?+Kai-LbRhGH@$B z7AZo$Cd)b`zcaNvT;gVHF0bb^|CXN?MPHrY-Oix#bjKFaSV1|nM-O=?aFQtwiodG} z>d2MMI*6KAk%Q%{cdH#lI@~HZK={Xez*K8j6eT z2(FJ>e@ycW59hv*U`j7m@kt>I0!s+D1`}t^5)a$(Wnu_P;9Nq%G`u4e1=xX0oDM*M z5#NJQZZ5cig`V(fVf~J(tzUjzL3KVa4*~4Sn$?J0$LmGctWH7C_T$PK6)vIWM;z=uOzmSuYxFRh>I5OTo8qx33Pw?n(O6E=G8&8{Q@24&(_@~DQ)8mV<%Efm zeTXc{wgm-pL}6T}Qq{92=-_gNRdIOAy-Kfq3_i306e?FVIB%ne}e#rl)uO zSSU3_ak3ZrjbA3-=6vDP9oZB84-cn}m$~M)@6J?S3F~HE*-+2PCtR6noTd=8ZNEo| z=>l3D3W-Stc|9@V2sh)hFp&&6@q7`hb1?5=hN&dPPX3f}1s8}I516(bi5aNm5%u(bX(U=utgu+h-WTMqk}huJo7YFXwa1CjzDAB zmk7i8yM#p`iS-%JH2`H~VTAwA-&I4_{sax~03GVBGi1ANUD#+4os`Zm+}3ad=&#r5 zAs|!UpNZ(UbqR3;a)wv&I_m0af04MH1kN`MvdU+gp|W=k6QKneXZvW~$d#z{>(kZxyDgaQ+hw zc4h>hZpK!H_;}7_cdu{mEW*KYm=TP4Fk@=9A@}lH_r^hSXz^B7BT}B&TdV$mOLaELR?r5q9vH<&F zOFO94nrly`r@e@T>7T>$yGnMIUqAA&94)2B(0nXDzl>OTg!YKHv;3N0ye|J653&K+ zB~Pm1Tsx(itIJk|tOfP2Su~&n->-_JaX{;ZI~C666@D06{zK-5g4%WfkVfD=z=*tG z`LaRK(fB~(!-LVWkbGARAa2?K2FhYN~+4<~uUaw4J-3x5t7j^oR+-XpjJ zKn5C>gwSbO~B-NQM z`coB{-u$oXcf$^70V^vh=+VC)TRz{*EA>xzGVZiWim+Z?igdI>Ir ztpR-S%C9|mpUy3SXqrow!^B$lQ+Y(63;9OYw2^r_;16j*K11ZbY_;_21=hdIe z;=Vd0T~l8cn%{n^9;f&)bld99HFaSC(p1_x-Yju_Hdmt!_;g@W5M^ck0Dr0RN~!U4 zatfNO={tKl^?IYAIJbW*b+sIM%-ry9IE9a0&apiwp`8>cqNLm@80x(%*owLAge`kN zfK8ZtNz#$%IFOE;F~7$&P0bS)7dy<`%#%nE;$uarE5dD|JN8{(Erxx;+>tL7F+-dl z$y2b*H^2QOzS-`t>assektO_XSOkEshPb3SUNe(9N}y`yM6L3wCg3j>;@1POX{hJEGywWHj9GaE!4PcZZNb3?52FYrsk*jH` zQ!zPUT3Ny=v4Lvcfuy#QR=T@!|Ikg5`YR(du79!+#$dO=eY7&yUV0x;4vhxP!)sO( zNMiOC)b>U|ss}v0U9TEVA^GSFaWRG-iq(TB#l^5LXJ1Kov131>owKj^YwOvMUtwQ0?d?!` zpWYS{LSI$_6a0XtE!n;vg*aOhz%M|mieL^|gJdtgs)W9Z39#!ozTdvfr)9NUB?=o- zLm~biGz-la7Dc~pH?`;!YM02&ckp7khCDyFM18wZmGrga;QoCa=uM!%L>MRO&c7&S z=MDrY=>nhT-vwN)g&9n$OOA{Ja3HE~^#UvpzKHxSeD}4daK|ooDY$bcO&Zz6)!0rR zRg&7)MlaCs@y92L_kOYE@7VqCmn}Gao`+fEL}xyR){P;j`*avep}1%I_9W#!$eQ#a zecvgo>>MH%-}se^`f!B3bqe%DX-n7OaFRajpTR(0mu;lyM50QE9B>&%UbVvfdAG)l zKjxbZnD5(W#{WJ5Sqo@lt!E|e9kORDb139`^8G~Azl$AXUV14CjEky}LT8Yr>$ zF`}G(hFR%eO@HyVIB2abqr?#QF!%Qsc%iulAUD&~jfkRjt6Y;LP2JxXPsjw`JGX9i z-J;7}LDW}@mM8y#D8*k8#Sb9rCuFGzK-4n+hzm33TfjTGo`4W04jo{;!S80wc@j(V z846N;`B ziK?qN_)bpRu%skyq?qCJsB$AZ61T(!ARW*B-a3R`+sb|P-=PH_to}j94zFuZBCj@? zehSumEouXYe*C4*DUj+R50p_ZAa1@g=${cLzrMMzHvFCYhvyYoj0F9Gra{BVI7<$* zZl-ZkQd!W8&JBK2&tF(w#MS1d-Om@eQm+bS{m*09l{C_;ILQ*ajRvPsiYbo_6N5V% zzsQmlF<*HktUd^Vh|@NTUnG#ZFGRO32xikt=RaMe9E!Jp+lXNNs~FhjhV4V#OfKgbEU9{H=QC8(xXCCxAOE#hb6hrH#-pn4)UDHGP?5k}e8-m5R( z8p2;8qY4(swH-XJ?lJiw`YH1{O0zzod<<9TbgN)MaI|9pThc>1P1Olup}OjQ^(V^P zrvoY_N+9|v7m!h@+?XW(+0-AuzpzwL7p9A`(IoGf?H~pSk3Y1499y?;Viup3i9fvI zpxWJSWaf^*t-r_O8~exN*OR4Lb_z9?12zBWsntWkDRrtTD6d6}fp22~KAjW+Aaapv z+6x$*ouMx|M}^qHVJ=y9$aYe2B86~UTunX-ISHS+?qc=5iPro?{!J#)XDeCd&z}fs z;8#bT@-TUtAwp^s$km3_Bw-ZjiU6f-kEZ0Vb_ySV3j zN{QzW-!7sw#U{x#a&e%1oex@D($VwJm_$u}x(VzxGwl_353fP10WIL1BUzYrtIgI0 zbV%9vZ8%pLE>rGE+U`;w-}bk|YSfw|F8ZtaGe7^B{#Ic6#TbzOTF3u%oBpdu>Q{)+ z(Swi-qv8Yc954arCz1(rd711RrL8&QN;&n$y&Kdy+<9WtnP zi;-jlxWDzmTyVR#bmRpOB@Nt&oHGV*_O4J2yC1N?ag%-pbw7f1zT%I5_H^3}Ew(2c z>bQ-e)X|UWFM470OfPG~@KPyBK-lDu7X<7p!7ujx2p=$_t*V(9{|Xbl^vae0;F7X; zRR#8shKhFsux31LZ^kRLk$nfJVHv26(iI+28{NaM9{Cwi)757 zf=M*=BIsLAl?|maODB^(ef2u=w`QqIUK z-9^d*Q@u$HADN9~OyS&?Y*2q9?U^$j>2Tv#o%-9X&v`>34J4g-Nk^;nImBXVQuSd( zYN@Ut@z;1@bCvEyYmB|G(*??ak#g8sC1t$t)O`K^FZjT325}n=(Mj=8)2{hnQ``6q z5FN)coxad(el=j2z~4O4*Ys1)j2#O@0`MlWGo&DpW!WgT4HNTB4aF+R}3vuc}vE9CtEeyw5 z@n1V|=l`puYYo^uGcU)3|5$Zdup~tn7qT?Rh3q6p5QSaW|HmmjbsOnInrI8wG~E}% z)ri2D0I5#D*C0bA{rMuIpEZZ4E3qAjlW6-QvWR)@K88fsKPQ&{a74+qujRbkr; zsJbjapQ!6py*yx#w4)Zgg)Ez&P7I5l+y5dq-clqWgP|;b#Rx7qR=)D$oeKrgFpbnS zeUR09O7$t@B<=wI>kbj!JBGJ?D^YFX42`n;>ItzCU4BOQ_IqsB^~Enl#MOPGAp8*@ z&a(0^7={;ho{^9_MZu<9rwM+b%q-Xjagq+t*oF-?3fx7=2H&_>pZmim3pV||ymCcq zpHB-}5nS%Z@lEw$Hi{HcgYBhiN(aHeN(%y#N}yTAIMJq?4ESiShsj*moorxSt55VQ zuSKH(I`E5J5kVW^WKZq2z@% zsEaDBrb)^1bTO*arCk2zI$+m0JW^X}ey-yA zeHLfKC+84VcgbfKkyT3&dhrc$^^TC|r%l=d)kX{GR~J3>z8t(kgWq2Jhao;83scAr zMRYh;O6elqW<2H#F5Th2R-{&p5RB%Y;j5t3XlKl)kG^{BHTS_3FR zD_lKjm!o z?B=HtSNy*ydZpMhfYRIq<653l;cfn^v&DpVbUi9!5t<|pYUa=sZ`AXI533?=EyT&F zH93+DGI5uTC8G^@il>O0WCIh^pL}Fkn0WMU#15hGG19u)dm+iA0^V2I&8~R~fymqI zA3|Fj*;`ML^HmtB``VX1hDJxR_;oS(3*jnoR;BRc{KrW+^F6(^E0e6Gvk+`lQaRk4 z(w*MG(-3!aFCP%FZ!TxVv!9pVUM0*%QD<#-T%?ogXj4QoDf-fKb1qvo1jBCby!Zn& zo2e$$!YlTwMK$mLFYz6so3u9|OErQ0~e2GM)Nhwmrn_~Du z1F7R(EfsG!>&9dx=GRQQ=4ZwK*-2okKQR9GS?EFX-~G^Eo2By101<(JAu4#8DJ@iw@^TWX|AAG`6ULcL19$=qXQgf$AOoGTh&D;c0GX&@^h?Wpl9dCrXB z#JziUC&1%0|FvzeKmhfd%hDDtyU&DniV!pGe(X*1AboTRw4FWk?RHC5uJk`G57G=R z53!AQ(guJzhW@PMFSRm67^ezL^G{Q-grbaQh18BY|ru6Sm)~Uuqs3O zvV-z$3xW`mK44^HHsm^f;2k*;;-r8R`0`02^H=G^=y{)~^Ap7i+1FmES5@Rf^{wgB zcMffSmC~a~DY$<}M?eM3rMWGtbfl6P!NPcT8TErh5spP+sZk7#E?cL5BG6(XySqAnTIsLS{0 zQHQ#MDK<=S4QsTim_(#)6VfdwMA!4o8#A|=kh>PUK`fl_Wz4OO)79mb;i{W+B1e;P>9c(qjIVkFqbg&zOBzD z2bv_9Rd@ov)?$}Ip5&^8x^qfQ(t!u!B*6@yhdCHpwEnV44DN@&13eVR@Pdc$gx_8h z!N{vX&wOG>`gNw$i1I7YLkMC{+p`O=u6B6^nKS&Q@pN(Ki9-G3#sXxMG9jf1p^3Kq z58lfR_oe~w0VU*lE?4Fmo?QrE&WK!-bS=kg1hQokC`8tnFHp6cj5W275gwd>BwnpM zHFa`t_fh!z$&~#zp&bK67PH?iq`#+VijJFv0*zWpMXRglv8vW>sN=K#u*TOQ1d%V; zK3&nHY+r$m>Dn4dzf}IZ8b3@N_O-yDS6F*Ky(*+JF+ArY3$rN{o;VT&udfUbXCuwxxb( zd*xEs0hii7kok9lq`W#`C4NBC02ny_BR&~rMvA8Q4ps+(?jtcH#esTR6Exxbh)GZD zuLXM3#6SLyWT$k3L5C#6f0Q|!UO8iME@pU2TGxu(hRo%BmHP?F@VeNmu;Hl_g!9vb z)-T2dJmjUT#Tgk!J??v6pR5VO6Ky#~hgX^jC_D~s&wp`Q%J&KP-Wiph-PnLlKLahQ zm(O^3t*3%G_;dpgHpa+rmL9Z+!5U^$v32a`_chWbjn*RD#vJ*E4c;H6+eJ|&;P{9c z)Nc2vIc95li6J_vGnxhe2UpCmaJV84A{gx5BOm~_a|-zz#@?&PuPnC)W{&QHJpBnm zN^m|P2Lu3PN81$C8wsfO zaH$O!(u@fy4iEOuHYxH4h8cV^W~h^|`r6Bz*93kf@=vzmKdIf3Y&cf9f|mn>pC5F4 zA_|ws;zq;S1>exeOOoNpYOI^%jHG(>E#~2Ip23iF_j$j)K3>701d2y-g^hUzm#qQC z!|7XOA}@lB+}B5TpzESD@Kg+$%-M{ z?;hj&?N>1cJ{x^( ziQ^aQXsXYE8#k!EPHyvBjfLsh)orwx4*>(vj*NC}DP>LiFVYPWfDWDVKrl z&{xXZqX}a$Mwpj8bhS7OWyQo;wxnd1o~aKR<%nX;=5wbO)Crr6G|kFxaqYd>%&^!{ zGch#sxf|)P-lxCx8=z-e)fGQP0>Q@3sMfWsv-*_wCncg&gn9+An%XpfW^$EslJ0zK zr)Hi+9tSR@wsPYTqSFq(DCxv)%AF^obVc`|;!k6N-xj_85&O$vv_^tJRE>@*O+F2^ z*_RX}(&m%SQoK#T<56A>XojXbbLsNfWZRqWvE^bn!oq<`@YFCsP=xsmpw29~0ly=^ zp%|*Ww}qesnjT&jiMvW62{o(nqyBw;Uj~d{IS5lnz{v1pvj5mnc|hx&cKgO((95Q? zut-}u-Kv$oBj2DFLai8^>O=V`_8h(;bZGQ_vE^%>&Kr!#siE_ap| zmRbe|B#~DX7jG5vVfS~6nl>u+DwP{oN5{m>yGqcW1v*Z8(DmK>YN4X0=9eb!^Tctt z?3*Bqh-$nBJuC0Yt+gPg{!S03!ni}_sqX4W_Mz%k0f9j|^Sh|St8wk5D}6kNdF{!s z(fM|)zAv*D=AX)Up1w+QKr7i|O%@{MxwrL1?#B~XH#a&~2DvW}r?_m3H@3FSoC+pf z-P^79g&R1H6RMZq5okX{1zrVGpUrhWo=Lls8XIOrC!7-jV zGLwKX;-l^CN>ub~@{IpUMKQh=$bJavz$JVJ!#DaQAfNuWFdmXVf|UFXy5m{5!b2%CI?kL^~s~s~RV| z-`&R;#Se6>fT{i`oY`29v=E%N#+o(03;M602Uh-xpO{yJlKV+hde&C6@OpeP)DH)j zw)%D#hPnd1%1v?q%mQ$zv~ZoiAgsMO2xff#t1Swh>)szqkB zCntJGtIN|xE(V+hb?&z^=v%N)7sIUP{a@BM_S5>a{|Lj+7FOpI=R0fO+sYGtA9lut{xgK}VVRQPtlANBc3W3Ccz12=W!E1MPc%H%X+3x`06O zq(7qyA=#7o;$qq0=;UOkIGBMvZ_S!$gXPpF5aVohJlc_3Y)RY6JT=Xkr(N9VQPMe_Z z5UYsn>{p12JEz;2u7u(HTT zoFRl9JszA=LnzQjlFwHoRn&kK93axgQse7@8{iUv!*o^UZ?4KZd%Y+fhwit-J^He z(0k|2v23XR#*ML=rc;~X`ZuEmBBwh;HPpG5LN4-BA95(mjfeG#Cf;m_aqRmrA*tVj zDyd4(JY+RHSYv56)5w2*&gUh*USGo~UasnryA>}gp3V1qwrEpNkoNpRY@QKAVIhV3 z0L2ePr)-Be!)u66C!!{3U#I&}bzIg}Agp9ikGa>UwD(RsP3IfNiwtLtuqf?N+9%lM zHU@n1K}3K6QoZ-x=D2=!<4`n+`+IO-Bne@zwcGs))|>W+8}r|*-2Ksw3nizy+;hCb z8}uW^F0>1q9aR~p{by+Oh?=7PgLi(cZRI+e^s^P~2|vbtKRc7|RA!q%>KKj2&f6}o zXSk~n>CroZ{DbTbuU?d3-tuG7m%GR712sZ`)Yi>1opZf+iI$MpGF3vMyeAFcZqwSz zISk*-aMypi`S6w48;4R?Z&R2M8GAIX{4piy<{KhO@+ntQF4+|LSk{Z6XW3b5@YfW9 zN`fpPHr1zH2+78x(@CISWrhaovCC!u>0Q6X)0St-jRHu`UT3ceDL*pksHp@E^A$Qp zhC0R)+Tr;QVfF7@kc4>O1l`CBw=bGTgw3_o>uI?)oQn>!qZ1nZWUXLnpypbL6Nfx# zScD&@LqY@BKgQAB+vi(F(@iJq4?Q6gT75}oo{ zw|&eA8z!r(COhbk0n9{|XdWe0?ipW#n%qEevPt}Es4OGxElrXxCKi?!g1*`erf;1y zQCO^<($t(a<|9=`x+HmCyNOsqiwjG+7p6IitR)E}zR{AEdqW&_ltT}JTzIId1xGz; z9M(_4iAYTJu5kZ&C3lQU56mfo9}?Jd>Bc3wqm@p%8t9#lNFL@g*}F@6!4+>3PLn%) z>r+UvBwzQi?iF5F5;Z4u7znN=r%2P;?AJWtP=c&5y<6x3(M+%(C%&7^{+Y-%^7)Yx7I^^@RBCBkv;|>^uo+GaB1ra=V6kDCr!6w?riYVX30O03| zI3n^NuT=iZE5$a2_cl>kDT3xzJ7(X>W7$`Fj~6tf=B)0_%s}x)FIFf&oOUG6FKYLU zmUK0l^{lEi79)MQnYK1ei{v$iN-L}k?(#`v?*1$t3QA_HFWI|rsI6z@sWRY>n5_!c zI0-ajfyxOf{$2B)Y#S3wNM^RS&;$en*S5g%@gjliJ$9JC%YRKtKz9{Fg2JzW2V50% zrN!XJY=lM%Z@}`xK|NwFQ~VNJURoXS=BggCU?aDH;jC-Z6^u4ijvwm<_N%>?sd|zt zlwoBxhrNk|^-3gO{$-bE;iaetE&Ic|HaYTUPEV4tkM$)C>J%G<*e*#^JP!t=?!$L0 ztBjum!=7KVI(|0SZF=OmA)_nwgA+^ORGw%vf$6?`HbEL!oypNmh1}*RKwHWx_$LD4=FXS?-q}C#vUn= zoxA6Fcv)V}MAqJ2|4+&x5~S9XH|sgYm*e~R%s?R*f5`8SFD;%H2^+?2`};J9D=N_z zkMPEMn`jmObaj4VsrW$ZczN1JyWIIurBMa>1AZDsG+~(jh9BOKtx+1|)mf|PkVf6r z3#aI8Gd|aXI_inIWZ#7(dCIOnnTVr8FU?O!VfS^F`MC=UA`((QEHM;LKVM+S=$6A< zSqy)d!+$Ga#al@fMjtar?O9>=E{_+7y4$xQj!!Ve{&OMP<(LmQ?{M#`zJZD!^10a0 zni}#;?ulxz&I8rGk|Lo!cASN$&5!0IdtckHkP`ckr1e*4r+i9Lb<)j&ZrYF|xt-?C ze>=AGj*Q=vSg;K5=V79Hh+n*YV1863oNG@pj?cAY;Tn*9^srslLFH|qMK7;&I6oz* z7E0SW^wmfVLFt>7xQ5Xke@ZK~K%OW5Fs1Z&o@WhxrA0f7RzLts7FO-krJCn3ynb2g zLcFb@XHDvpQ=|NzB{~+`Hc7VG@&qf$wh?ZPManrbNya-dIf;qIqW;cYM@}b=@WIw_$!PMC|7&t0;LsweIIZ zVR9+(^A>nVkD=9DU1Mprr2@X1O-HcXnVmKZnB0i)pcvi7u(>vUk4AUfW^1Gy$Y&WXG=Ov3Jo|xR-1168t`Z zBVMEu0-s{@5z8%VAB7%A$Yk`6&t3k+PEIo;5r(lS7j}=`9+H~Fn-ZUElt$;#IG%+imuhtO*NS+7%-`KL@F_*~XB!!!i_ zojmqtB1=V#KGr0ZkV1?|ICaehBi&4=HJsItpsA+7$C`Apl6k>QRDq(@1IiKkin^J(F3}Kgtc8t7t0;waska>8Ky9B->ukT(epi#oC|jdP-g~ zyoMn|rJb6qSJkB1hmh!wB^lFfgQ1tomD*n zkLhX8oX)pr2;^}&Y3wrIxV%{^JG=aI8@cQvMdMHps$*~tuUoKp1kN&Wbq zi3EK`ZSmF}od19#T^bqE198R_dZ4iL-dW6GzxtJ-`dd)Ej|Pici@&@TQr2 za0m%{+C*>(r5p=iy}`X%@-2X`gyMn=1v0zEPq*}9D9?$AJ)2L&`sPtRZaanqH^Ww? z^OMia{5oMcsaB6mWozL)-Z)+mIizIA5G(&s~ixAqSgP^`b&G;sUL=yGoyNky?jG_sS9 zt(#$U@yBl$(#+QV1-c5+<@fwvji9-nh_w{U^1b(Fc(r$AoaKk6 z4e8iB5V4vn*SHba>C)Az$dWK5YblX)+h?-YD>eLMS1hZq@45SKLG*XEfPmUyNm}XU zN*;>x`6>Sn^RXP(u`(Ohh8On*Xts%#ShWK&7Uj}?rc)gz8G(?YYlZ$CvYiSP(#QR} zA6%ZJlRqYl?4)HsR%FU&Gwp?-5l2UQA?p)3a=(R+{n-f=`S6phQi^fgk1tx)T?&bH zNVdp|yU^;u%MZTO;RwBNIAR*8MBRf9wpP(eA$mKYP$Y; z`u4>IL?XW7$RHYTVlfDf)v=2tylJQ%19^l`&b!hCDmXe;aVbjBCdGk9B1@c&js&NN7da65h5rb>xv-O7r$dH>g)0dP2WYyJz zn(UT-XOEdw{|BsA{QRhuf$^DzdvqK*{z#=c*$|s%9^TFmV~<&Vi8JDAcf~ojPePXy zm_G7Uh+8#>?3H>NqTan(J}UY4l9W^B1bebdtuLN;@96DiVOTzU{66HF1b?E|PPD#M zUB?0AF!x=Nu0S+%VPC+h$bLLae@&BcZ`BZm-fP3^_+56EeH@?=;;mvnf!{yJTXif2 zM+O%fWPBmtNi@`|*9h*FrghwzR@AzfwdXKrLR+|RER9;6jy*QpcVcZiIpVn|%y4s> zVQ{&8Bb=IPFy_aH?XyWsr*Up2?Uu=2bVih?l~WtFUg*Y=Hgk@e)9Dukm2f5R*EJH} zE0s1u-#=v@-ucd~{bpFqrM{$6L0_CC3a@W+)r78j7l(CZ!kE7YJK~+D=4{VE4QY|% z+wVi=R@j?TjF!q%{$-^{%V@RnG)m5sI6ozp_e)J+P6f)Sdt+was=DN98OVt?3WmBR zXfIhG+Buo{tk6NF#J$kWSJ#?y;{8vM264lOD#hy{?g(3+*_D5%awK*%K z@(JY#op>r(WFptJQcJxHez8IGa@;4gQK_Kp9+*S))I2e+S~D9@w5q9zK^%vBS({Gx_3X>!pNXW*BvD*FWUB@;?m1nv! zW4{Pdbr%mZdVe}+%*M&7!i#BEG%I*yvM~B!gc9_FHa6rE_6n4R_s-S47KDt9#OArk z)-Dnqp8fqJe)RRjc!4hMRJm3n*A7_J{Va}baIrbud6yFOi@nq6wG+Z<))Q*+sKMsh zfo;VNU+o~`lPHr;GeI(AO7B>k-{wPYc)1C3d_+&;h6RAN^2x@Btjle)$9!oZmUb{c z-~2}4e`THlOfraU*kMx_HYemHIX|udF!wAXQ0XubXv( zgSiv}SwXO0(q-QZ=LE+)$J1I=>mwxkfC!WmWgZ95q*U-}gTq&zz)uF3`Av17v3hQx z;Dh+KIdMa#z}NRLPbt$6o4oN0P~NW=q}j}Ovk!gEs@YsOW@>kcxcZLROtG<{VsRq- zUEf|MTMKXcvwDinqW1;l!K_m1ZQOZoL@ml_tMKC-j%|x;VCn)~m9D(N6GLngtIJO| zSe}%Af0)}rEX;|}geb(4g^st;Qyq8FtprB(Fbl88?e+Qg3cK{7D z=gt>KuVVj(cS~r0gvs$F{%4T9p?PZ0%4K=aiA>|Q;5H1XWXh$Tm}~aNV^iE^4hr4y~NYBMo}MuV(5R4f@}=#cYd*@#2DYgw|^V)XYrIiaKFb8 z3D)~yWH9jXM4goBN&B9nS^Tm=&taIy4vx8l6CD*O?_$-}6GFd~ z42w~-Hto3G>6JT?>C4y2F5RmTZB!FW4f?PS2YtjW0Sq*}_3WzH&a~0Wva5CqU(A5g zac+(`CWp)qU+sX?H#;2nRQJaDc%w?`XLJdFQ5q_MY{u}o@M@Gu|tf(E@2VFCz z3AEL4`GK#6c4sTTrw+v#D`h?B1QHf0#O|p%JX;h@j8|)fm}IZkGWOrL+E$QZ_iFPjpjmh+?f!)z@F*)wydvs63;T)_dEdR{dOt!E$ zeVW7A$TYtH<0Ya9?)EN^|95MabJKNkS{ZLBn6@>Mq#Dnceur_VW=n4p4S%u^91hP3 zHJU%T9isH(7@_zoXn>zyMO10aqlvrWLM7J9yD6J(0ibRG5y{MXj$Pkv9w!~hmnx=Din%a`C10+gu4fPbA> zZ0z?UHr49Q3~D5O2?JjGcDRe}tie5p6%7ByLF8jW_*uwGc&k+PvAoHG_+_=L3bA&G zhnS?%mrdzzNF`-?sjTB@M`C?qu;t$R<+ROl`xdnC8tzdcLyAn{TP`QpgfjEd?n`VN zmCCnfpk%lHK*fcdR;#kqe7`cBR>3@1TEP>q7xFfYE)N$Ldimt5?_f zG|2au1-QdKS0Zks)9t(b1HFp`N;D~g_cF#+j^B0~nv298F#~<%$OIs=E1HCNlj{Sc zv*FKO>uSxCQW8SucJKjD1@!3#CB!4QU2*zG(&+c;*& z#l_Ty03Jv{!sW_x7(s0K3#*7GLop@s^fqd$9vEiEDsn=xXExue*vYBitH?v7 zbgz^uXo?OCBLo$Ks;KCghSJv;Y#rJ4eJs0*$sP#n^>2i*QCA|~$GMlBXRqST$_P`1 zzH%;O-2vd^rNV)o}hGm?sqAjAGC2AI=Vn=F{yz5N<(*^E$ogiqnx#~PNPf6s6fP_ zvFi`i*L&QDo8mk(AcspRFnq^QYGig=!9o~w3mOi|_Z_xCTugn}qj^=lV#bQ@5Ovu2 zER3x2*20?d9}}GhXx0xtzCF_dc)Pd;=`c`<0z_@%U)% zlk+B0!}z8__8Ky0kFPa29eJ7!s�y(w(Y`+$p`2)qZwsNNSGPb3YXzo3Y5pmhR$K zm%C~8=6Yw0_c+2kQ0#PN#e2)4Tx@MEb)brd^?JrYnrC5_)2-+>+jpcwjyS9@4Nin- z`bIk$2Z#~wJ zrtzSIn{tEeY7iCi$Aj;fvYY?J3=>0)qOR^tvXJAN34(K2okIt?-VoU9H|L|BDF@$~ zuIlviNMpgkCA+^5o+x=Ov^-3-(^|RI1C&G_`UXhuPutA*%WJe-zrd3nsD7E(Jh$97 z;m7VrHT^#%JSZiB*J*`>@Z#a&nPn6lB3Ev6J8;&lS}l5$h7|a@PYY2;<-%<;LIR+_ zF%do@N?uG=mlABvh|se6>2n_qSzPpXP{Jx-hUC`P5E!?~H2WG=7J2Q8?e>FU+l5n91?~6lY^qk^@kV z)bI7avVgVA_(+Rd`y&l$yY&Yc%l1O9n30xSKDe_NH`{b?TW~29E->j%2YFto3HE&+ zrvu1{qRA6A2jKkZFzCp5H3?IPZ&&Dg6E!Fy|BBAzoRIr32ToI+vM&+?lycDi03F~1 zKKhXR^?ZU97=6;xMic^DjA|Yty5SG@{W?BR+BA7dk=e`PVdR?E`!6w9*-uoJaGgD) zBVxkZ+K>%7%4*=dQjhR`JV@6jl6G`zyf}8@f-3Fx=NXa4N|cRP!x4tg0DQ>y>XoRN z{E5&?d7s(rCA*R>$gD#P4&B22yFCsFBOf0~_m!l2-~DvH?}deh78qN;wgyTM z3gAnAUZ{pH++B0m$5ZF8reyx+ryFKwZt<4zhDJK$YWJV!Rq;#Gb8I`dgV*ys2<9y0iS4kHG<3iExcRPAhJo=@%Nef|k&;xj z3HUq`p<7%+eEgG>{<7Qs3A3$!Gs1#)rIhh(z8-Hs{~}|`#^L*Ny}A&>nQZhD0Zqn+N)gv)$#~ZJuvD2(6k1eLsSzUjx^^L{Z@JDgsR?OzCs3RnDFB6+t>R-Jqur| zyd+vlv;UY%siNo`(JShLrLRwPEC%i5ywk2bhi<3dTT`?maf7>xtGz>_kp0|JZJZ)kZcp;@W`$)C)Rf)MsM5DtL*A_Rdk z9w{RW$zR`*O#d9LIn%%SSLKvRdQD6udeHg|Wt240+wLR!o}}3uHia3BTuLvQ$Fe)O zfrCy9xfOARc@6VKXDY?ZS?T4jaoBw&pl7t4i>w_dHA%qO zb^-T_{NAO_Plz!R57WaGt}j2U+oxCzJuXhEo2RV?Gq>Lx_V+r-xb63~CT@7@Dv68V zxQ4kMgbJiqZOm=)<^G(J& z1tL@)>Xaui3(DpD8helqi!9nGG)3nQc1YFH@JjV5*&U)VYW2Vd+F^%Z;)eB7=~Vxe zmQY>+b-TH{fe2#bOJAp~Bz=pY;-kE;$Rw&qB^`9%8+;QL!9ebs1P4&kbA)6;hO9_a2rT(VqkD>ptZnicUk)vw78GraMdBqQ;UgZj zYFiu%aIp@sJ)mokkT9vdywIl2v}nG|Hb}AxB1Uym2PpdO_iye-L*fyFn>4V9qSdj`US_TgCx()BW zb1Fx0G_xGgT(T}=4mO%}qo zRz_8_)CQQB>&6{r@bn%qYD0G#k}m6&IljbV)g^GRGT5>C+E*V$sTcXm%){Re_2pal zbrz?Nn0w5&CoHM=w)^F4{u@1q57#!ASao|7iVndGeM<{53NbZT+fr$18FKPD0zO#k zFsL$-PG;4YJrIlNCV2COxbDHGU4ovUR!h^*KzPq!C5U6`g%$Em*RXMcqth6~z~auN zn!4ldH{)R<{tQ%8$bRmnmOO>&*K8b(3Aqf(xr;6F5G(G|S1T|M?acDpQhEwZdh*Fw zr$jO8-l%K4KhJ#b+ZR%eOf6VPG-t)-o$KhUe*#5{wo|cvR#Q*g zWq?nfoJ8NbBlsl4LdnIzZRm6}DR259yIQ= zMP-Hhre!KY>eJo!4d_MG8+rfqWuStB&0(1DQAaAM9>ZAaKq5_ zNqaVNR!BkBQXOBHpr&mY0m56TUs+JfGl{x?V2d@c*(MIjuPH(v75`sB68AYs?npuM zUo^j`e+wAvDSjYh&@~OS&_kw$uh$c~0_iI?H2H^!MCYOt4{jENxQnw?GFph4CqmHE z*$#O6*c;1@IqH`UbSlsjS!m`=yBfsUW0d=(x0nd_$`bNA5^So$gJWe9%%DgB~(i)^<-uEOGijq_`oCYpAh*q zzl?;_A0<{nxdg3pkw-jMGOVy_&_XgO<^_=DF-oDhF!)Mi5&fmowWIyR+sZ>WvqI&j zQ2%42$Ix&+eZ7>L*Fjq9Yrfl%T}M6u18f*As;2hJ00!#hfQV?{*!JCZeZ%MvU!WQ; z=Cxw~4@UTdBodCEeWDc_SUh@SKzjkKYNUU=FfybnF7iD?OG?7LVQoZ4dex3^|J27E z#JI$H$aJ}vRxTnrDrvcP)U5(aLmXyia!&4_F)OR~x)cwsd9~956gdhcyn0SdNu=-8 z2T01|_Jd-5$#1q5%+gzk2|L#IjSsU@((vL(qP0ziM9Rhs{YmeIt(Yjf#3vejm|2Jf zZZ=sAcYXzjgI8(`HV66$(lJ-wA4u_JsgJc8S*CT;ZC=>8R4xaM2|ZrpV61PfU2Wo< z6qul4Vuu1R{g~s&5#MO2Nc@l$qcpwi*g3z*Y@_nk*!No4GpJp0o&j#P5`NUP02;#R zL2HEF?n1=J?j{`PFc~x++tfr&O@%=5tw=8dbTDak0}R|S1Kge%2>gvPM6$0d=M z+u`I~bUS>(sM7c*N#Ov(&kw9x6-w3mZfAD5f`WAR)0OhI=_xPK&-P4#-I~67+N%P| zpS9^Ts*Pc4(1`Gm{Fo${(>(3Ra6X^y=~Y@K$yPAH8m$D2%+5O@>DSyu=sWMpAFYhq zw=Vc1pPc2cVaCC5?UE}QimTSiTvvBh26;>Kzb3V0U=_sE#igp%J+cX%T`=GC%y4|m zPLu~#D-nFrm~*_NAc2myn9lRy<782VaEy#h^R-8vbH}!{!u}Sry_8o_SjeefUfJeG z0JKGXxb>l}gvM<09ra;ed--y3og3&wvD0vUWRpX?a!(q)u2+(`^55!un0>Ttl)nG) za;C9t%u>UhrSsX0JD^+~g92D2@o}etoUdXG30+rjtXEr&AS3(fkHGMcHs?bRIT*yZ z#lMgWBrx%Ce$BC910mV zv50z=Ru?}NfLzv*+$|Xmia48}gkKzP4V~z;Rjzz9>0BB;C` zU&{b6Zv;CiBwLkc<^JQKL^{n9L57*~z}V;%%d-;f2~1ZTG650cPsv@FsPAX-$6A?=Jib!t!SmI(=dks{5Vvo4w0y@qabtBwZWd zn8w>XO;9@fm{z)lx4z19o-^8B=egYJuT&XzK_VP z8g-3BzZXl~yExCm*&y~L2g@N8+cp<9{;OXS(yQl>-GdUHGXQdV;l4aHRbq~8R!*#< zV%S<$iRd3b)^@J-6^TxdB0&TmZ+F+!qtN^(4Jio*s{F$6ib^^WPHeekg2l`+ zvo*l}+o&1unFiL0F2Ik>AK#2)`;mO#&2VypP%)|&Asvk!2EyO$;^K&0`yBSZ1S8~!fj~Mg<$9@zAT81r+Q^GJ0`>`2 zOU+USL;Htx2?wC!9oA&w<`0Xv$ZwGBe5eqQ-A!o9ujy2foUL|6JUs4$@(b0EVt|7) zGvVAOu`sa?J08EX)c(`}B#FmZU1-|&5})@su#}jlIy%@P>4nh4OvCJ!_jHn>GA0YB z{>HY}40Uh5X`p@P!(|QI&YnLjnNUrO zOW`@I&6F+oIl>aTeHGN5das=@2$~||>{EkszK5My(BRykh39;ETZMvSzmhkes!q*G z1w|a^3(Ow@yYZLuEbS`cO*q*Ob=T8%n75~*W*t$sN6u(!ufWs{mU zUrhbMR*X?yKSJ+}Cr|9=oPGqym+ieJ(DiyurhVog0QL|TkhTvpVshE};YLAU7cReJ ztpwi9vfY1sOM>d1Hd!j*rD;PooqRR!0inOg&sO&K!%i+nQb0(6Q6x0>v&H*DzV&Km zb8^;r5TzIYm%$6t{z1#ga-yj_b5>%1FG65b19puqgohCQUkI4~83Dt}K=O071=8CB z&z!;r3LF_waMS;arp{#Ht%})wV6^wpTlfB0qK5vASs%E)i6kc0d(nxoLRh#69Xo+^ znhL^P=+-qzJK3RwhQQISdVhAg=xGl=2WaPFTEl4g^%SM7K!9u71bfifF=4$0X|Jz0 zN?cWTO%4)_kqAq6;1J&=oUyikDq!?G*5|gcoHYPB-|$P1X2zXPm*rVJq|~zfdP74Y z;J=BN0*B(cb|g_KtYxHR*P(b%IKtnsad5yevu=9nWe`vi{PM#GjPV{#EbPIVW`}($ znn(VSF@0|*5!`-!0(?1fL7L6z$QT@_>cI(oWt@RpdJgEFrr2vM2Y*|`ny@PG<3nt# zw#F*MweVf!n`7Z_|NgP=@MEVavbuMUdcwXa%q=cGX`x>|TNI!?`mRXMFF3N2ay-2Y z49`&X1VLI3enSVni*T7unw#C}vd5d46ZkTokMo|q z{kEA@uLDYd=`r~#F(oDLL$Vz-c{a1l1vYW#kdA}=;D;iyWHelLrXRSRzli} z&Ja6)o`aYV+;MCegQzRl8@ti8y!XdpoJC1wCb=t*xFwbQO#S>YvkxR@`_T?J1%`9F z<*hz?*KZiaGQQ@Yk<~F#MjgJ{c=Vn^#Tcq%Q>S%~u#d|c4(kiL$OH$rj& z{oBJfR~-D><=s)aLVtu{)4h0J5XxOhZs))t@v_{k8hjTR+=AJOrzl4`%kq z>)zUnc4yq+`Nx4!N5WB(u=FNqcl(7_59)^duL%0LSDi;mKpO?VA`Q`*=RKYX5Aar- z#fDq3Fv&)+ZsUpWoqem%ZWAsNveXHL4V>o#L3SC>s_*c`L9+h~7Gjauv@dj$h>%~w z1F~4G>Ig3%aftPsXKlg&xnm#Xlp&C`)a(P@-Eujib$oGDeiPKPV10i5pzU(s1nVwh zn#rEZM-#)r&eMC(yhpW0?7VC`>IHaF-w$t8$BS~<OqCHJWIOwu zW!B!-LdEOT$R=%F(XgS3%vcZKr3F+I-*EEsxR@ke z+T~0NyC1LOc}&Y9XN!o#(c66;$>M6O(mOw`+H3+%A`+b(Ip1Kw4{xJ8K`ciDDF}9j zhOV&t>}m)Lm1lE6^MOuncR*^bL)`+TlE6MPs+hnBV{L^U5Gd9sln`CWWfIX+C}bO> z;K>r-Wv~%2W*0jU{Q>A7Rml6&gxs83PG6XY@r1!2Hrh(^3lqti$Ge18m>d62YY`CN zj)*WPlCd7~GI!-nb;z0Np=(ed(A@3`Ce_ujZ@*ArT<-vK<@rE%#KQ70Mlp<1X!_z9 zj%_k!ki-%iUwCuY+@o3Ryd!AlZy}`FM_gp;QTj&QG)IsfXX3@gQXL z6?-Bc$UAiN1Fc<_R3P6?#Q`@|uN_t>?VvYs!N_QlJSAQ#%OE_EXeh|R`Z#r8B7qpI zNu6hwhe|mc|Ky)k+NbRJFSvdG^ryAB;T1gi(Z8MZw^RUtjo)ZowC$NJYa5Nu|4%LX z&q}FM0F=u*JfOZzA89;O8G$~E|1{cyiZ;1oIABps=Se9+5mAwSF)=YWIF2>!Anya1 z@`HVqTD>=HHE+7}3q5ngpC~Q&z@jun&Op0kw)W^ryK{KF$>8dmUe7c@!-)~$GJ~qv z1NEr#LqrU;g>FFg#VFsNN>GbX@xSlYhL>LK8m(O-xAK3{$2|;d-0txs>8^Js!D9w( zCDUocyx}WSd~&8zIuZy8+>l-`7JKjVUU<^!>JW>u{EY#X#^O^rC+*N>ojTz(@o z#T^ri9wk2ZF3xoTs@QVgI!v=Njcrr2pt=Y5$0SK>iRSawrfK_0IEmu;@U|pOwGTH7v(nJv4Ruo*oDM9#cWF8fd$sa#wy>uyOIoeCi4{8#&K{h59X2%w<(=65gN) zk(Ir|^#2H#Z~(z%~Bw`60w7ul#cc%?i%SBjo)JPk|D31%JTj;&@CXFyvaVXPa`N3Gxba563cC>wPLrRT#1UYY0Ex3;X?S51CCTJ6cDZn9w4~gMnTk88P169-vf2iIz5T z_(CA5NDj2Ckx}NEy?arRkKg6`MnLFK^X5Mlq^0m59t52XB71uU_9OXU97#lgEMU1V zwEu;*DF7Z1XxE*jg3vcu)~v&Meu69>UJ%JQ^f&}0XuxIK^g=}B{L5?*4_k3VScR@b zAc1o-UE;cUEJEZe7_jgyHWhw`5p9jl)14c znt2Ki+gG;!ypsYb_gBn%0^SgP=0$94{=-Ig?-?UH7H{ejh3?kE`l*@b>*dfAro|mp z(3+=gd+yu}MaHD8YcGB}ccc)5t`CkvIVMWwEpAvsYiBPA@g|#Sqf#8Yi@wUJh{|VP zaX{!_-Hx2xnvreWzX{Gj-ZR}F3wF3U=PMb78I*Lb@ZY6~xk0&j%e_-`VKo_cW^6jB zS%$RIuk4xKwDR!PpD+s4TwAH9KaB4%H0f__Fb+w%tq@pQxgNe~X5o1Hix~Xt*IHo} zDN=0As>)~C%9&y@!xT|f4n{0)<^dk~7?keqe(m=CusVKVFLR|t4RvuTOCzd6Z9nzE zDSxI8?;bDWGvuLvg#uCBx;piR2&r7kU2ewlB2DC;#0+N}%awIN|5rJ&q$bgco>_3@sZCwMyF$gt-}A4YCBoTbP)dgmrDtIIwEqu|P{{PsiY=%a{DJ z^1#OlqU{trMnuMuv?!_Os27FTmC>NzPw^DTVJ4qI2Vt)Uhrc(V5T=%kkbp(m?&|oJ zGV^716_Rly=4{M_U)bGG%Vw}Kw7+-NYJgD?9$wt&+8d?~WvIGXWMlCCiT~BKfP7TW-*A_V@ej+9SpZB= z#AY^Z4Afx0`E>ocfvYSf-$-moIYT1&KibG|Th+(~MjJGqV(9*bv>_<+lz#V_0j`s-_7RwQ&0+2WK{# zuFZXK9o{BAZSETacmR`;eJPONBZb9x$>0NTH;JlG!J!w}+3&7H#yk?Td)sw!jZF=~ z99sD$hCu;ICA$>2Z2!3nfLd?3{ARM#QB~*acs+G4Yz7di$l~EN8d<}Nq$E={;V8-- za{0!&+(IL}<9))XLf*CV`e1r(_t8zZ2G!ZTwdQwYYGwqlPZo0D1QnFwzt*Y=l~8rQ zF*i_x^9n!ykt2)bky#Q?0Hn=pLC8N7K6LLa*7<1i3!b6g1$mySHB@ld&!?xX+jrvs z?zi<}fY@58p_~2bl|hxKTL)asdNg-dlJ+WA#K(aa;pdN3m3NR5$bXpF-}zU?84_r3 zI(zx~_+KUx5fJqp@;u0Z#Tvq-F7jvocL37^;}PZvsxgt(mz_Q9D2dkN@|Znm**l`l zLI|W2chIu64$q6rNW<4!A>s^YU-d%*$W3D9=5z#|Vl=p9iU2)thmIIDj+@#0IUmEYM20STcZ$Sz*EPtz^RQY7i)#|Yw zOw2e#Har4qh zmgvb5+#O#Mw^tQ7qia;^t6KwAzO3?3E~S}N+_6`ULNw>j^yE2W2IcZLo5+FUecKLS z(L~M(Gw`A{uSR!9y6O;sxMLXd?HfX@Q6X!ydm$AR#qQQyFdpx>;T!FCLm(6STvKX%vzILVw$o z975lmX6o<3B}FozC{W~;8Vvk9LIAos%5za*0rWIYH__5#JQot8G>~HyK_}doL%!gv zgFS6MHj6#*i>uSE&kyN&hqK%w4l)fj(K~rkJ1BVb^|*(6?Q#B>c2c1P(>FTlnDaC8 zw5mWgiiPxR@+E+$Q~`AaDO;H2Qb|cxPO0ldB*!zG$Cfx>>$_0cR?E29?u6a#w@>MM z)ar$UA{Aw{vA(4v;vYH1!pLcVC)CHB{*qW<=*U}9ds{w88z;lvT!2Sm7IWH>CG zMGEhx*$-}UzF%=8RZ;T_O_8Ea3O>87Jj^EMeCXS2m|il{;_SxXNuL$)$bnDjGuN)J zV-IOrmDMiK0;|xAu;`;wOF#_>Fgq@Z3hXDJN56N>4rdJlZB=BHiLULx{82)FB zB>B0^CRq>%A?m-5j`{iMWB@LszAcpgxjEDb9E;?yzy{VQ521-qC&M`%{|B_%UNm2N@K;e%3C%VBoKkt!{&O=w&=^sA)`l?+B{lCWr{6ISwa5BDon0XKX6+6v;$IcvJzODQ&qZWvr zqTO)UQtjPkX%Va`nodp>UfhW(>;r4prg;N>Ek z?}*Tg?FV?&fri&WJv6#k&9HSyQYSWx(LA!z%EP@(1VC&GC`B8ue-+%WFQy3}zE1X! zkoep3ucQ9#I8GF>AiUOAl&l@O7&~vRmAf5OAA;cX~=by3Oa6FeC2`>XFOufbAmBZsB&OAfw z1h2WDh#Cr5o?SjIAg7-1+*WGmM9?53<*#-EfIM~lgZ~gkI^e*|@P-N=2N|>mtsXZM z>U#@~0>cW5BK&bMz$X1~wE6PfAy6{wsap51SS2Ys{k-LZ_UjX%x=*Nrhms6m zH`AEYHvXo!K?1bCN^}N}7D_tm{EVs;Ff?HKz6h+5oAiZXA7>FsM|26k~Z1&F(#q2#Y*gL zcZ*(pap1qUVpj~Xv0Xvt)vh`4I$GFOBMd9gDB0- z?4hgnP7qRQNfT^=O-w0-W&aj^{x*LhIWN8Uaq9}oeP+x#+S#oUE5yaE+EK&F4VydS z3RN0hQzq+4nodt*eccR|Cd*IFERj{HDT>JdHs67eO8+1y!8bcLP$U!{3g9ju@#H%?|)r% z8U6Rz?oXu*mOKHcbE+bx+%q{9poc{cWXbl|C#S-I>SAj93!Tbe28RYz7dX$=1qmjw zxb9X+_FP?5K^gQ)eq%k=_fyP0rGd1T4}b@!CB*3i{)P#KV`ZI*2(1LgnJ8*A8}-FV zKdm?gV2d4che;JCIhdg_!z+ChtW6LMh)#zwLTi$+5vEz_FM6eDjh{+k)gGJ?;#kaq z1c8IXk{${bS+zpBf38S%+i{b{YSIY8O6F*XkO`*~PkPdw}y$2Wc=k2dNEk=;x!c7hS;qa->u z`WkIK5~b#b2)Yos>EJ&&AkatV4`2}Gd?T7lbC1#_ebATdb4ZnU_wF6%->}a5*+i`! z6|kuO+I`@AR0y9Ls@XOz zI1^&*b2~%mQuWmiyP8m07xGi_wOPN~nkzYZnSDtGpj#FBuOvnP`rL;ay0P5IwtF0A zJDWDqjO$mbX6Turan$Z9T-ok1yjKjXjM?Lke^tpTtBBa#fa5^4m?)E*^C4=^BG5Vm zK2#CvlojGZd}h3!^Lxh&I_JO4aMScpsFW!94%w_-wVdZ$ocmcI&$-wQ4hg9Xd2FGz zVuiKMSaTdhxA6#)P#T2p}qW{9@acrGAb4Xl}xKLJ&GU3?5W>VnPZ=HoY&i9i0}o0t!6eoKo0$hpZGk*!hjWn| zKGk*S``6HVa@@(Ly}P0_quj)FdZ#PV6$h7Ado$$PyO zrBiRB>et~)=l|D1T2cWC%xbenP3^DP3>?C0<}>t)$boWM*~j@D`x}>$(jFV2EeWD{ zpPdA920d>*h06B^HU$@C4+Vi7&o0)WkZJ~3Q7naanq&E&x79qaHjvaX3@HbnR%|_W za7d#e-`=*040IF1A5nZIF0-(Yp%`I!0o_AhQu1rA=2)p=L!`L7M}d@@Q5VsKUx2(F zmC#Rzjf)#1k%yFWw`*zaXVCT_x=~Qmmk?e_IFVE#c$BXE=x|`}ynYd`=9(R1>6`wL zw3B}^7AH(p_*S4ijQ-_|V~Oau)={O-AWfiQ&olm>0;dr}`EHL%^N$0Zl_a9e#- z%`voZokq{jWzAM$K%iA&eH!rtP|B`?{Nl6D_D` zBiCxQ%d)8d+IDN@=Sbuq^6@`G>>sS5LjOAw0VAXguDWV$zn_tUG>)t}_RGC_IUiN< zMfw>ZqSM(Nz{&fb1a}m_Bv~`Bt||?cJpp6@xo^uokR2Z%l?H`auF)_kzT$GG;}Rp; z`3eX>F6sMA3Xk1z{VY!-wk^X-nu+(ojV~bV$fC>&3`BXY(Xb}YFZ9yR%1}#IUP1g^ z$S@=qgz~wV@mzK52b}G>U^qQ(gTITK5@hrEoTWy#2K!JVyuOs;3iu8>IJBV!J;+21)&}uKuDPSDb`_86Of5AC1gK?LHU`XNdq2+~qdT z&NcPXg$|YC8~kT@3b$>nf{KcfCm)8CvFxXkJKx>wx;ht08JROyw>;D%e+D6fe{#j? zALz`jl?3gAN+R4f_TaZ63+N-&?z1#=b2cFFh^n8Yaws4YEy=$E<+CR_L zIDn6rzRuGS^VT7ZTDjf3xr82V_4!izNlg!k2k4f+)JT%;vOGtBm7Ks`rDvNy7R4>) z*{qNDOWwBiw&;@LcF$`$2d76@)Ey=*ym#F5Nzi!0fM)Itt(2su`TR9BvI(3Tlh`PYGV`)%AdBvI}eWs&YH))CCG}p^Oi5Lxtv&6F!DC%ga!5aw8~sxVwS{)9|fx zx|4p-=I#tSD@8_0iH{2y6u|f5ian|)Z&OCH2lt+chWUCcU>5{bqc7GL7eCv4$NNBIBnP*pj2&=reHO`#&z$5Q`t9Q28)x$DP{qDSAHvQXs>>V3 z5P0$CDKLn&`s+4JI&ipKPsH8#XLs0S#JfBsTg3WU^Oe^^;_=LgSo7~j-R_R`yA5Gy zU;FxV?FX#v)u-%w9~$(1=_dSqn^q)ZBzl0;+J3t$H_ZPvJe9Wo9^SWW|Cq+bsF2!!=}cR5{|{#*$@5%Jr|C6~3@OmvBcvRX6{2(2}Cqze_l5U~zp(j{Ubl zD~uK)r_{5Q@M0av0|6Q64(yF#Ns-j?x0(u2+`_lYBd_utA_KP3zmV~c)#DI>dl-om z{h|{yh!RcnVW4d~2c)scsHJ)-S2vf4`iJNxnJbf9LL1iyquAfi$0 zl+yBB*`v=h+~0^+t6ZvAt|ky>tY4L-^xAuKJTO>1KOF%wsysEZ2{0T*^h_1bY~HZU&I|HEtT31fLV9=iXP%~ZMS zMUwi6wV#`}@9DZHo0vLqgA|KF-@pVW6$PN7tNJSk^oI_$cBu6_f%Yx}QU%alYnL?uYo2@fo-HQ891Vas=2?_x|4QgU3w0<^boC?wi=~T+ zSg^n^Ns=K#I?~I59<)wgF1$f1paGuOhyk>WXZ^xcV_5E#w2FfPhdfjQ>XbCF-K;%0 zxCUBTkeVG&^^s8oL2PV_mIeO?tGu@%p z+1ZOk&A8AtF)jEbCGve2n%^Z2hL52c(36%0-x>ucwM1Qj1+zt!cZP`EmpQ-|dQz|V zTC7YIBD5hX{?KSVXA8mZA}YDJh@?B=sec7xWHh*3X|E63S6)|+S$)|=jmN&dM)LF(I=G|IYjF7?g3LS+gr zF6{aF`KIMCU$VA<$vu@y+96~GIXSV{uNjb#gb#@ZLZl)iBY}H35_H!#dX-}@)cgGf zgJRJ6w(hv3>>QOwPY5^^a;E{ETs#t@5O>vC6wd4FFw6u_SUJ))5}12wl7`+Iy2D56dI zq@|=x@8X1xPcFLen|{2(BoXupL8t5|XA;~P%A4C8Ui_)9`Xxb#RN}u<^>cNR;hOUi z`T3mxV;g{6H1k`(11zEaB3t(Ew~*~bmXMGUliB&m7nAo)BxxiDB!6Omjq9@dsqk~5 z$!Nt!DIQI)B-AM~gs!RcIjg$zAP>tX97flBxr==Sewa|BZNUWhVnovG%O!8-mQQaQ zaG%*4*a_rlWY7V6M1P}rEzw;eVFhu_nn5p))Dp*f;z2qVLFhoVJG%FZ_Kf5hDfw{; zWOF=Ie+%Y^592=5l29QX>UfXx73O#=`!dUJ+rRXY=9&~fiIfeVA9?3{Ps8|B+{!;~ zOQek-syxA`OM1T<(VlIf*zgjQ*A5TQMZ*jF2#!JREVEI<;z1vH4;2$7Am<-{CV!Y( zrPn{I@9o*lQKT5s)RZp1yZ>^^v_Bf|sOzH6xu5ROjc#TP=<#HYRC8=OgbSjIp z%m*hk`Hk?=gNa%x^-wP97y?$_R4SwSsgvX5Yt-Vgto{Q510$2X!Q?^H_4P3MFS-c02}2w_g+@#ZgQEO%$AdTY(&Og0&1*6zaNr;(AfZM*#i ze>?+&tHgw~9zFnMB%ckvj<~MzaX*|7KO@1V)_&!Nv(JRfoEBO(E9eM5W+x9f0bj|p z+RlL#SN*jIe!wKr(D9GG!gD`d?!HCVZ0)sanNgLi7 z64C2$ln1%Hofd_P>v=Vk;+DO-%EV@zg=1e#?J>L9o9?W7xXbrAG4Wwe2gPVA5iKz; z;@*X1y?59FUXf@qRYILpe;7V%DJ&OC0z^JG9fwAMf3YIZu@?|n643$W z#jk1{4)BGDZ#1_Hr?TY^h)55YA^Ah`RW3GSZY zPH=(-cL?sTgS!O@?hXUNb>1d9_uO;e|G!sts&-9LdxoLdtH18AzwTbkN(Q(Cm1tME zA~RH-&zjf(w7Y2LyWgH=IZ(JNYg6H{bGiTQ2b}-y(10qL*4(plTSCh4b3WUrX8qrl z?v3EBLtxD@Qzwo! zGvE)P&bQ$qkOqTCO9Y@I#4{82lpJLmj!Jrn&Qkmp-0A9)(o)mSujnW#GFIWjq;LY` z<&Ho<-oW%Gb9I=`zjbU*<+pp@YBME6UXtA_XE;#J(|q`~7l~Qs#_iw(YX?Eo262_E z-|<+9g~@Z$o8;mUa}L5^_5jmtkd)lJQqULS-HPw_w`ypJX9NY5%)5N#iABoew7F8Z z&(S`Id@jBvduD{Ku~3<)`RV7xCw)V9=YEumfmr5#c$a3;qt&LynsVC*neUs>eyj62 zS&b^^?CL=GOtoQieUW$6A~B$bewUL8T%9PIWJSKjV@wUvq!j zW2BZz>Ifp5twWWISW77D+miXlNhlGSD)L8B0Lz>L_>A4umFeQRifp@jJzrNG2WMUB z)Ekyefq1|yY1cPbPsdMn*dsOC7#%Lbo^g=9ut} zAw{h$04MrC)4i~!G@!wXu0&qnQ*RRS{`C_d+&@rD{No28P;|%GL*_U z$`1YJk9c|Tof#GM?uDozygi44 zymPlL^BNnA3?4uRF9UJLHWLmztzvo&#;0p^ zHCPVquymVuw8|bf`8Zd@h4PL1FHmV|S>9TT;e0l6X-5T@j4*w@b=k(dgS6!TXvweL z4~Z;olt`A?YO}voD;`|_V$623^9t@WNb3V7c*ovm^4T+mZVWS#i%!v+u)&9Uiane% z3t)4XorQe@RCOIJCgE? z%d+ra;zaP3av`IHvaV*o2k#DTdfs1`2 zayeWYL03b-vEG6Q+4pT>AxL_mgC%O;@stTnJ4a?;;&n9Cw>O{%$Bphkkyv3(t1m(dT%{lxw`+E z&4ZXmfg>A9?GBC@+QBL_d;1xfNg9bR9`K% zSyH9o9_4VhiuQZ2jxHfmJ!sH(+SmlrHG6CMA-3sziyqGj)zEykR89UOHSt8I5PV%@Dxy%8w@x8~4`CEQd^4OlLN(Cuo1za(+`pq8qZB zBWZd35#Q*_gV{jmd_T?U(sehFbE^hF!1c%*Lyvd!eJ_7q`2f@N;(P~syMU1=y(qNj`#ru@;OBJV*RtrMMZdR%VLJBd9 zOT-hc^IwyrRVRH$%qQ27Dlg$MZtZhT8#A+)BRfzbj?K$u&j`F>c9q3RA35g;f_vE3 zbl#^EW;S4i^&i~VzmhRNEJDW+r{W|0#>W+P0nk>IYS=ViGYj5au~W(1-3&%f@&EdG zVdJ&t6GWnZxa|3@)Zb&STZ?{uIX&2A=~e-0u=U;;*mw`E9$OB&D#3s9qiS#NAU$71 za7AciZ-0uhZqfc};C;HZ7%g8R3hXj5*Sm)1DXh}>jROM%c2m&Bj4tmZcG`e~8l;^M zzS0RL?VwBk93I*M!QG{+IfhZXx7*1!k@ys&bcysAOUwSguhsD$!vZ24Y??36XswQD zIm%9s>1}sHZ{hNH_rq-bXnDEXkGLihh_kefcuz=e-P2w;h zvQ(`tDcDySU*Wb8VL(<;1){I4^`=;eWUwG5?JUg?#RIN(4|qch)%@O-CWWss_~8Pb zd5}uhlz#Xg#JMR{UYC4kVir8L_wRL5yNtCQ04BXVv1?5(4g+_ppQb;1xQ#`ft!?$R zc0QMCPV)-~2go7qe$J(2?%%B6P6L~{WEh^S;mD<<u<%KSkV~GmcH9P?=+`~27pPbtwnyfQWH)|A4g3isT z^-iPgtBRKJ5zo6O-6*clbm>*y%-|X4f5DPlZArquQt%UgvDSzPvv`H%YI7&SQA$)u z4r@u-N^WL~c*hvZFB^<(Q3{E9ueWwyVKalF&>(I+8sRB|wEtt{R!{fSp{)DG zwK}(puopkiFHEYTq&9tnbMnHaTxl9AM81bt>edq<4<@9U3)q-hSV$Qj?&ZG_M($2w zA63{yc)aIvo_fJZV9hp<3T8Tdw;Hdu=u_Hwn{X?5d4(A%_++BK=S%D|~smmRrBcnZRdxUV$!j zlVkskh;~-+)r&!;`Fp2sttw~YQi45upWMC+c?s*NJ;E zr9RG0ps7Wc;eeeox4LZG?L~Cjx`w%~NVOtduaR$M);#ysF%@>}#`HPblRMGbGgm=5$2F z@+!-IZWkM?cPI#*hqSb*zIn)OyU43xTItB6McbtY6S_LlsSf-{WRUr2A-O*A1)FFu z;T!<_R*$y&+q5O?GNd>17D1U6XI@;y{0A71ARqxi0BbXv$o4p>(CK zcaK5Iw;e1%s7ObmV?qwVj}g`iTRHk=Lh;unB`t4xwPBQEcvfvJL|EAGY$x^K_jl){ z=zn>7=kBnS97U7og zUiOOKvxwGb=22#B*Eh~7(YieF$s3-h9h�y9h)U=cu@suSkR?or{C&%Asfm#7kW-^JW3IF?QqCP|_+>R~owu%uxfxfa9Xn&PqD^)M6;?pInacSfzHg&^`?RfF z(Pq&2R^T)|ikoynSKODQq?ni_N3A(aWe;tHz(nu4M-f{F5&^r(eHbRC1Or0DD2+#k zSo-U5QKX$cDb=*ifKa^kOKV`G*miw>A z+}W{{h(9Yl35$Zt>AxZ9N>*VRFWXd|<(FT`;>-sjc*m*Ta=Awg zc}lLN-<8l-sofYD%Y1>8T+xS1>ZQ&QRSG1i95wGDl=c#wwbiAB!7_z|y|<45+r4C- z38y!q3YivAhR`bZ_mWdDo_p8U{O~PdkN@F@c8Q8)#U8cPl-l$qs~K4aY8p3vQ77db z^lF17#wSe8PWStJmoo566#d19nSCu-vfU>risfEk3PV0ONX z<3_dg2)e=T^(DIXDJHHoS2PklLw?OhK{vvI5iTW?`szT7Q5!W(lMIP{Jb`mBDg>ZSQ> z^!0+{;Gz`S#cdh$C01RZuQa=D^3*KNQ9j^HgLIX>dE5jQtyPoH6clt}+jOMW63;kDg@^aA=I0ZuJu z=xO6qzU%waOXRl**IfE-50lkW0VciP1OF~(-X&dgiM-NvpS=-iJHiKnu5W+RC zY8Ge6PjkmQYCJWT)!7cUSjfB>CWUwGENywo0M*Whb6jk48lTovH0Wu*Mp3=(!j8Zl z%Cfs&k)9$k^W&%ApSJ0WDk|-qln-zJX_D%LP9p=>Uhm1)o?))nMYR6->9Pe~rJ2vB z?WMZj=1uEGVxa6F^MCs%uZZ&16sCbbZ`@Bqut@==mSmVSvLv_+zRB z;m*E*Pm9q_yn;o5@Nod^@H;5IdsSYkkATcnD$j4;#hQ`?Cz;`c^h#VjTf2&pqiA@y z9mNYe){eXG>GINg4grZpQscX@)5<`?obEktaN95 z8`f>%990XzPU#UH2Tp@6W0Gw1gZQAJGgq4)T|e{*g9Kl#aDIvjbz^svs*K-?RzT=;pdvYhX4ut$2bO;9K1d=&Z#JmF>R#_3g0 z;{|MEXK>))zyyhuNdCMq$~w=pD$(y=zBK12LPHo4fGTZDUJOk}W@ltzu(aJglj8=? zBxt_y4eSI037WaJPl~gm%EE}2wPJj;8fmoVc?19c>wE`)izG&XQ^DSk@R#&N-L=4L zQ2IOA*?~WCHR1kdK7zk#hNY%av1Q->gwJ6fVJW6ab|weW4uPofHXd*PEViI4p@h@! zt0JfPo8mf?Nb7UFvG)~gAN@eEMWlIhJ*OauP(JG>B+)YGhRgnqJ%)^;qle2) z6YS#-|H$r!EBFNTM!3sGH;L5!63>o9LlE#>&(7n*(;9 z|5&2T$PLCA4f5zeP1R@YiwF#8=YT`~k@jc7P2)j2NKP=`0N*66j~R@NE|GpVtu>L2 z4~!5M11#x{pbxW1`)9kR>>6RJ3Z{!ia+?Gm_6P zZCovHdUd&v1n)%_Jom1X5{E5>1$cW#(*wqZJii}BJ*Kj9@tb^H>)^|G-y7Wp0F5r^%c2utwHY#xAv9Cj%ax&430xU1j zjG0MFP)G>!59;F2cVA3cjke_Jy{_Bq_>PWmkGfU{bqsj{UNI%Edlb}(zWKrV@VstS zl4xhh7)9=oPq^D9^g_i5I(W4Bss2zdVdbu*f`wtG4X{6E_4+wD+oO7Gnm6A@`5+zz zjrm^CT>Ezpk>3v=8VwsD4cF6d<*xlo&u`lp*Z@td@V4`ES!5=gw<(C|Z1E6{cJa9N z{$`TEsO|Ovf&YFebYR^2VpO@ppfk@Kd+hyqdj4&i&Ie6Ro}>DG&zhwKJ)-c~*bg7- z21GZd~OJLZP>0blI4#l zT!Q0=cSy7PB*BWZQwY6gp1HX_AjQD;Sb;=-ApIXp+`(A!o4z^V_*a(5nQ+iuJCTI} z5=fAR^^slik3ZC(gB+di2?=F^)n3k`7+$=>5QZx~aHr7fZ6eWd(l{-*nM@9f^GGDe z>L(@{KU%z6q~Kv>&r2#L%2Vd}`wi%RU4_bJz$r9`;j zH;(pO6L?>X)#-=2Fiq+zuaH|PzOUR%P1l3s4&D1HJ_^~@ozz2nmhVdtO_oC1PP#Io zVEZEYVMA=z?U8LvT+GbCLtN6HvF%*9YVD2lPnXTXh}rMYJ<3;T0LtCqe7_a*Y^B39 z!Q9HL%s+rI`m|uMBY$93>^iCBA?@`kz;y}&gvHD$C?;Yo8nAdlNdTUs&wfXV}1EFm%JdTj*zVzk1~K(6TH%G{q`Dn zRM4wE`Tz*%-TP&Nkk;ZQi>9_xjU&Q*x#TbTX@acs&dzwP4-?vb5E97s5nf>b1Adwt zvWL8oIBNgkU~hQcLI5$J^A`a@LP`mK$372-rWS#VzWXS!oXa=X6ZV6jRS1iXBmoWx zXD%*9m+)TqOc#b|Vb7lCJgNFjN6*~Tv_>>w|Fb=Gtk%jx)h0M$4-7oq`nj$6?W@8} zE;1&jnw~TPD7ffqFBxKYBEHSQ^>$Z;-}r!Aa@D{?=ZQsVzu<2U?fjSg;swB9C2Ht|5*!4BB|mI4e6%HyP& z*iQ!u?}%l3Gdo@+F;D^gToIOUAf&=h&oj6*ZIIfhoqCMD1$V78`v*my?33*^oLm)@DUp~wt5GGk)bXM2&g-q&v`ATJ>csH3vaNjXeQ08sjGtg$YuWmy+ z{mY0l>lo4*gy$`Id8+Pea`YT`y&I*hJ6Axy5VNcfV+>ctfg^sc1*M4ueOK`E`m2z6 z7%|^5b;>fZjgZH~La=%Imo4?w5~Wy^GQ&w`FS&$<$L#Vg83iRg<}lV?Jpu2cbw#v} zofWgq6uhH-7*78A-V`>lr}A9qv{Ey*xaHAA6kz>hRN|gWl2q`Xy~Oh<^K}rF2<_Kt zj64mDXJ8H22M3OVrp-HD_WB> zvg1Y{1}1lX@D(?geI30gXLYVw*6gy9QB>iy?_9$IYIIZ*=>fd5eKF(hMO?=6Py9xL zwW-6Ne5YV3(B%x?phx-#FJmamg6zVl+u{0~Lch?9nvPorbpAK6RbI*2S{|QCQDgdZ zxcku>($hWpNtA+J3p^as&E#QH=f4l1HV<6q)*lVmEybxaYO!j!H0jk^{tT2xKvx|O z#KZd`A#O!Pe1D4 zWU)xD$XopLUu7S~K*dXaU*#w9(UG@T zS(*3IgN;zT`rsDHbfX96m=()X(Zcoz?+Y^~w)HI<1FQ(9sX=w=?X?GpV8N2A1!zg= zzNZ(HJOu)q`zqau5ljA{aH0l3p`+5lCL?ErA9##~n85>5estuuTJol9Z8tZ3{LnQE z^OLCn9cuz>m{gpD6f%;$w5t=7Bk4U*$T)DstZr8~u|6GWe4}%g)a#6ycXQg2!^7oH z0uUA9HlJK<^ojC~^^*a`7gzU<$t3;J)OH?|^e=pndU&&2(BcPZn!qQK4`**4G_@vE z)k3~JirhqAIyRSwQYtj!s+F!Gc^{U~xt21!Tq1=o$R1oCcq*lNTBlsB_*{;_>+<~B zTS_qpUeO~CmkUk|0D;a6ZWi26<@Ct2o#9)#qn=q^n#7KP__39>CfO3w)IlF)v; z<6b8ed-rboh4RdOO?RPZwwvxx7h0~Gy~~Du=O$u6{U)LIxX5jiZjp}OxbKAE8TQK+ zwpic4BeGl$1i7)RJ=8s$x|Cho!J7shx52zP*?DTtd^y+^Dbzd5wX7&RT2*d!i>710 ztGbuuxF1vMfvTFLUun~JI_1co?*+=AEvc-;O3-nx;cZK67)*9KoMR$-(QB~eJ`?o5 zj|hUbOgNmJ&!tkB67=XseZP9=>yK11;S&$RHgZ_Zto9^B)Z7@n+D>ZRp@-Y1MkZOK-_+>AsIlpf8oF9HciTETLCJ z9f*K{aT4aE_O9FCzh2qUd^=)E<9i zXKax{4Y$ztcEj#!wXLnCR27owye>&JMbY#*VR?qVlm~sBr!)w@z6R#nTh^<>|RD^w@?HaP-nD)(G`$6b_SI-b>lg)fDl&=^v- zA4gH_>nj2@(~{BARg~@$2B9I(vgkXuzo*^|P|U z(1}$ph?v&fnh}W33k@i-vtJ|ZVXEz901c%b^2e{)!vKPoc8xh|pss^M%jFl?#?O@N zsQ>k37#NRBKKRAO_dk092+oWBtK~;-!VSH&L>ixR`1uNB7Vfnn_843Lxvdy#h8x(d-<2 zt{C18-xYtZD;&JjYuwTLK$HIobb1+4d|T>GC#aQ6x44~yLj0K7tzZV5B_N4@SgF_J z#5ItI0V!{G)IZ1yhb)Z-|VOPZODDon#qfUPrU6kE+OuVJ3xEicNpgrcEDZsQKNP{+jd&7+8{oj{$b%by>YdYgeFV*R4u5vVaTv2>5h0-ts1`~I=WAGRHSG_#s3Qwwqhgf zMIh^{H*M&rQ)_N|MxXlUTQacZ@?@M`+PAuBpI#uq2*WJCT{*^5ySpVF7-V4G@6}_q zx{(1QHeQS%Nu+{H*!uXR_ycgd=YR13{em2CpK}Mv~gHB?ZJUk;L|t)cqDg4-S7j+uc_f ztZ)>-eqqVu?*?7Yz~8k}fi4lBK$@r*xPJ3Z>EC57N7CUPR{2Xj>f?^6_(aJ-qw`6 zlKAb!nY3P{Uecl(O`xRm`~UW${%voA3x1ly+oNus3;$)(-f(9$?Fc3326F!b*{nVR zZk(ADBM3gCSBSQ|Fp^|C+^b!Q6ysF6@G{S`wK}?{PAf`2*gPo>q>B;O$KYlvVwbc2 zsY|83Su8f*XhQJHPWb~bmez8u*Al(umAR+ikhaIyV1JDd>5If*5;3QFD>?UvIiaZ_ zIB|iJk3_sAsezmzrRHfP2Kvrco}O3KT3Mlmo?adBr~3;1XXJ%s3)KqJD!903=qLbO>1&w$(PR^hi-AEjf9dB68Dtp)hYtS4_}xE5WR*47O7ok$V> zSqB7akXVBYQwhrNtQw7}0ge1(uIoM*rig98S`pXyTIuIoJnL zGHQO2;LWZC+l0{YsH_G_F#=gZs``fNCoyWnr)G=@kBLvDaL@+ciyxVF&dUAMF8W-M zA9E5~@2#O^;4n7xB#?u8w!6e?w4CPt{jSFxd8TZjvsL#UNP{zfbvje_fF`cKOVV*C zIz+BFr_=QHkG=u3imbDAC)%WQ^>9y4$qZhfu*|0zEqabdEX;l%X;O8IP7PAwU<17A zn4c;B-1Yg&dxcQ#@vLi~HtApIf)RjV@%OJE+x&J?_vHV|Nj0ts%z|{Wz;N}BSYzqlZ{0taVGYo6 zHAr?H;tzg%&H+#2^wHRER&lqS0{jB4=}K(%DwsBQzQon4zqrxbKnM`XF)?2JIN^4b zv=?xNlpl4s${I!Lb3(MS?XCUk=#@dV8Wp(WMYV3|=H6+n*)SzH=fYx!)tvKZNJR>< zdYLtT6GW=K^bvN3sB6%TRwtQ9Mt<*Z4Gu-V7lMhW!o5G0@ z@mf0E!qT7FXF3x7sX2CCs8BkwF+)lm=Lyvk1EVdXy69sY3-lF6bUfU3x5z*Fd*dI4 z@jbN$oFgHZbdY4I2=}k}2GiMw!L!!I~p`)eIFn4Z|UZ7CekWwqm?gReqe%gnc{%(71KUFwpzi z9*xb-!;YW-(b-XUqdLoWafdSfhf!c+^+T`}kLG#OsdRb%Uru$Xxyk<|n- z;ibXF%zlkCt;!t9)bmt-N|4lPV$xt7cyqW(k=2U%0N!z@1c|0vE4m~(ySv{rSD3$*|d8&C^6 z3&9|A8EyYz!gD1ydEn8tQy{62tndQ;7qK`(sbFrDM-Yu49W zGU|JGjgMULMcJXF6i1eBLz zsiFmqUOJHdUS>cs2%_r{W%byYw14(r$4KV$gyK(3%7u&ZX7;WP{0^jv@`wE+-LgEu#crAco{WpTuBC> zZYdx`4tbx#9eaF`r|o=~y zpC9l896XGCM~aCy^Xo)FHEfCKykf=oyW+F;BWI)?d4m7Djr1?$we<$vgJ63Wo5jXL zq9gi{>#`s0Zl_SQ0u2wT+KPZ@n%-ob#% zA*?gM^#xyV&3gU&787<&;O`^CV!q3^jl&k{Gt8xA_}eg_C9s!Y4g!90+d| z248#&?3%7?GR8)KQx?6I$j z?T|g7Z;I*#y6>hf(m(w|&|g(`DNXFFp?s2fan>8yNw&hq82iOwjc|wp|wD z-zxV#q5cO(U_gk+F!~@?zkeZ(8^B)B(`-Q&FaY*&ra*;(OTz4LKh_-WnxxbiaHxGoD&?uY=M+xd z@wOd<@XNufsP{eWO(m3*^a7k?+FQPyD;KhtSRR{u~T+gxep#Z3fD^zZKrc z*FWmWzf(lGeH!>?I_covGQPqnhBKrrMA_6SwU2(cEXbrDvO%A#AlEYQUz8&5uG+q3 zdxKi4`;tfMIW2Zltr>j$rp-n2LLwp(9K8>=wzJrB@%@pdDkn~=$1E`inoE`tkoj_s7Pp(b>3JDkC zxq$ovoD?u-sbOctGudAK*T{;XSI-r}o6c?8pv0Zin!c1+Wl*kdA$AsTlWkE9n)72~ zR)c{dGFv~wQ=_Ag|6i{iB}|KXj5GA9mI|29K=Yu`^|X5U1@uZOJuZS3dZYnh%qVP1%r%~Q*K$uI$nCv*;E^6BzxcjFVKoI#y7^Xx3 zyw3auasBO5P`Qf@IXykSxp%~uFDH8zlRf9;ILVw=-`Q$KZ)>m4VlFMtD*hQ6FkF92 z#cuEZg`&Xi^Uc9Fr6+4V=B52qO)=gA$_&271P=(m+6H^gO5( zY>iuLZyc-j^z@dDj-FsKse$ABTsJWIs?>b%Ysqz=c6liq_y>>4UuiUGxv7eXou*`ZPFD42l?!3o=Y8Hy&h3#* zr$M;^t5VQ~Vxh&z+OF$%XmtIrJ2%^r@9K>~90N_`rnZk=*W~0>g~rcUpQyE3BOvDw z2V_@ob((S@RBl4xDvw%-^88=K<$W3?A%Dltr8yuaNdxE9b1&yKQ8O|_(VaT+T@IO# z7@S)w<<3)#^XXW8;2roB!*&HL=w(iI<}?j)MX)`01YnY7ghU%e)Bk;heTp?5QFksQVjR$#xG zHlI@BNcB&={-0tlU0}3GiE;QN~>f??5JapFKbuGXe=&yPBwSFln8JsXhusO>{TRIw3h=WEEQK)+9fvAiVsC)KACePMN$4I4;k2=$6)bY*eiRW>#y*doC zmzMuPI3FS9n{7)tShmG^^82roKZcY(s8tw9P>Pvd(RFs^LkW#2ijejx$Zp-4R-?D=7UQrZyfgkQ<&^&jxmagUPuqJLNOFOT)mo=dA(~w*wlg98e!Owzho2|R4mgs zu+h}n_Hhm?2Jz+jM#pCwI@Q(ANXeYuigC47<>D6fUGU4jkn9v(gWNWW(@lg`>!gee4{OJ_* zphYi3vvNPPj0$@1qfWC>)Wh#F^J?S69#mLe%QyvNA~)+$amj1kn&rFjNi#03cKJlm zl!K%)Mqi@~s|-?UI!yfGb$LQ8mpDNptEI%Nwv*i<%xiz}ri^_1Z zml_ySXEaJJbA3&GS94%ec13A(i*e}C_}#N^R*v(i`3C-M*Ew*;Reyu6QKrIk%vII{m%^9`Cnb&TE!%=~btHA( zpzaX*RgG<&EZ!iTDb1v#?U~G9o9AN`7;$mTVik8dn`3iMrSbo5`fC1Dwf+?W1j+vM zRDl&k96a2?Lix>+d7GY1KZLa|4cboMSbaW=%Lcw`{K*g%Cbr?>vUc zP-gsZT=7s}k9cIr+XH~&6vVW{AAZi%u99(DG-G&o(xbjlH2(ts>)ax`ADx_Ri$#Z4 ztc?{xN0N+ih>6zuK8&(s{Xp+-0XV@Z9&GJW=&am~gSVZT;fmkm@xc8H*<~fKLw;?; zXhivYY&`CI#Y|9!tsV*Ut`|1*5#*lE&I`&%*mPRA(meTqZt(1$cpDm~KH$%Kn8Amjd`G9Hw zO03v=S&AKHJK>mEGLS0wW$yzBQNpK?*Jc$S%k()co0V1p`@#zc2f4qI0zB?^@;~Zb z99)z4QBhf2C(skVHJR7l)wL26x%9S3O_LiK?&%vGRKFBB@1lHRI|B1IRX)ZJ;~!}D zUdGJu9)Z;QBLTkb4LLARmW1Jn9gv6dj`a9%3AIWv<(?d9uX-p)8S;6wAV)H?0GU%~ z>oIaHQ8;>-n2wB;jWuwt6et$?C?zTdpV$Gb^VSX=xXMNd4>GH25@I<-H3Yxd9mMr`A#2> zztr}WVS1?7PT*#>mLUxjwjqfky@YROZG0xMphA9`1BvHbL!mW(L_T&Nf9R=v+q2EOeN*4vP#ktJ;6$T>+V&@Akc?M;|fN!_LOiNJ=7la(rS zuAG>N7o-rO5)eQIMk|p@9J(MASqq-q zws$qQY|lW>n1Rb~G>hANuX<7b`$ZVsk9#(xv>4_A_rm49VHAP>v+CQp2}y#DoUZaZco39=(um zaxr^O2AvUm&R8`q1&W1D4T5yx(^)u2$pHl)=Qv0w0t3|aE+b4B_N_>U{HZfHLsO^) zhpID9soT33RJ*s^hB|}Nn3&75n+lCqEEhw1^Ba!Jjhke-RfBQz)K$)Af_M)E{51-oe7S@<0#n-xlX2oZ}XS%+ug5X^Y%wbb5#pTYMS8s~G6)D7{%v7b)Ch{Ug zeEroU<#RgymTdp%Eh|-n4jGdOzX?7CFWxfZi!2HqYo}->9U3vGtV0Vst;2%CYB0GD zG^f6FKnE!ZXSM>U?_sef$^`EwI{8-}JO2}y`hWUS1~~$Kfu(dBs{{04%T9Ed17QRgD)@L$RE=8?Q=k{6&u* zqF7Lns6!lf1i-xTDVIE$Ho>wZj9vC>`Lgu`nu^9{VwxXw%jz6-o?-`w2Md=~6LAzd z-n%_ONC~)M^C^8+sBD$%S|!7skxVRc2^AX;DHrhxQ=O@^l;u?InBYIoJ`CC~IutPJ z54M6ZW8yPFH%`BJ4;FN?YLc_o%I6Jmz=)bliDwuOS{LlrO}{jWmb1OW9WB8pXAPIu z-E+f(wmo(UD@i_)`rB!;uE(2$QC|~F#hj4r=w5itMkcCHG)9cRwT=WN}{0?nv6 z9()TiW-<2FAN| zrdNNLpwCwi(1EU)(;$#O+9P-~uzgT(e^pc!Yvh|g&*lQQPhoXU!RbA8i3`O$*C3A# zeG_<_BK2(;wrVjiWs~0D);fKPQ3vHvaCy|{27|lylZBO@kQN8}yfn%g(h%({jCQ!n zHRWTkRQU-tg~oO4*@0;@s}_32_q}A)>#(>Z%v}_KdOXc=_I6$DRae%O<|3xCEmEju z9GW|u@$Os5`03hhjKpf4`0{GrU^=+JWn@Z3JK%PgFkLXr>)}?pewa8s$l4W!I%a>g zC9=&8Q)uK~B)sMNmm>G~nJ0&>z^(T>w?vfIpX7NK%>Ey~zA~t;ZRs|+1t&;wcPF?7 zcMITDg%I4G1b26LcZcBa4sVg%^PO|*)xCdGwUWJ4yH?L0J-U0$ZjATk-zFJh zjy!TQg%7|4gk9N7Ew|IRi${v8JtxQpa-lD=$ zMpII5+e30@r}360V5{etFxXH^qlR-?TfCBds_Jvc>%4dXYyOaOS62ffko{gd_Ilr>g0+FgBua<%K-u* z(VmT;aKW2()+YKkXL#Z1k7zSCTA3-^Y3K+JXLjOL!&+_{4EBd|3DkqrJm*h$4`kU! zBG`}DvuI5(SEjBF6MNMyaaJe+U+Lb><9=%vSb&w3f9&O>&}mpXc+VA?!oTqD2|4-T zoJ1>B)z{BkuN9#dbsBDJcN}Na-dJX{0m(Os|ZX|C7hu+g=9) zVwk&5ItHj$gdPj^bwt%jlQlt2wPjOH5Q`Cq+0vI5pdiQD(ho4DQ*XlV^mI4}dNU8* zKo4C8dMjsesYQa*jb#q|1&VJcGOM1W4nWc zVdo{M`l<+%SmEp3Hl2zX;j=2ATT9wHA{KSA3l~Yv@K_J+g9DT@&0O)T0X?rYn=ZCu zC@85fB{ma1cts1*kCc3bg<(X(>)*Qx=z7|~$_g)*3^xfZNK(sH=#olomz*~AM0S#oncpH|Ze~q^$KiVD zt*SWR#+;2n5@z7+>u2ePqkQJvQ^nY8bf`d^;0P!{=%7{OoZ%Q4E-)8drEe>QYZN&fK8GeF6d%xOiI=6>%6-yWYX?c1&2K4xJ(bMIOFNA~>KwhD3Q zj{omDAFq)3=;4z9+#&UC0m#Z^d@Y|)HUN)W1pfmbL6Rr^AR1Zs(IWH^g88Lf>+Ivg zevrk*WO3+(&07lwA}OljoG*V-XoT2OKGS8CltYGQdq1X8N0E3PMzN~;40o+Y_1Qc^ z6Uc2z{IoY7jQC|#X21VtC(7&?^Vm#6Jln8>633_ux3tX9e#MIHly~AVsC+sV_fDdQ z`r!j&@42O)_@V1zp9Ed4%D+?h)-QY1Ze-i&$Z@Q29V+20Z=or*Zv^T9pPBDj5e-3G`Co zv(d1olJabC@QzQY(QXg?v(hr_U5(aIKfB!Y&iFtl5=RJxoFLZ~O#o_n4yUKbOS)e* zANVO1UWpYuC00Pyq=sULGu?VS!6m> z6a{r~DGC0>3qLxM1K!ak*k;!uPRF{mMTJ4TuRwuebh+##$Qe~1U?2OnqaJ0Q!4w$* zhbHr5hJ%Ddj!17|H{HNuI6m8CE(MEoS|K+M=&TD5JQgF&zOqI)*>~$?TlPtoIUez& zpiW(Tub1Oz3*3R4Uu<(r@Qm``k=`4n+I?qLa{KY_Q_tP(XhI;hcl%rve%BgE?dD@k zXO$-3-SfMlqzg**4=29Swarm|V)00FuqSD*2ADtvTc9*srt>Zz{@t;ImLAJ})GiS( zCCX8QIH49~2eEm>5NC0Rv@_<~EryCd9W!{}+Z|nCP+_Q7Qw3?&O{vqpt zh6chKL>DWgIDmMm07~Ygn)1O40yazj_`hs6cx^2xp6gTBw_A5e22Z-&p&uYeCsQ{d z3>U3A68kd`x6$CeiN%4JP?3Sy? ze5rIQ%4UqO4vHyqe7HqpO3{{b!{#S|g_s`Y6_6O}Kz(wofz_%rhk{kHH2cDW@Sd5H z4fO{PLI_Gt5oJgE>O*|k(M+mEtQ_6Yntk5A*SZVl%QVGnsGIj_<*)p;Z5|=B&U(Gj z^>8}s<1?e`AfeCsnw`sVU3a{Hl3ospWX#mMd1Z+~3AagfRSM9G<;K*odBcH~SrtD% z!57>nx@ZTTqQ%=zS2)lgb{m1j^2HRV`a1q(rj$=bnt{pZ+|%BX{9&(5NvIWzHVsp2 z9E>s@`Xah=P)3CwO6NW0y~S^qJfP3xbGHXV;QKTR9gIxES#jQ z#1+vwK7JRIu}VNVNvcE5x>ZglWJ^C#Rp!ffxLyl~;T({L&jVs5<4?!-6G|mH3Y>pK|qC zu*S4u_uO*`89)3qR^QlZaoeOjOyz_^fNeLg_>pTQ6)s%Z*o`*`1q#s!RKwP*xXiKo zOLPfzL(p11;N(*sf5d=N3+9|4jLL-B7NA-?$s{`##>hCKH}Kw{WipWV694S>w5@PM#0Bb`@(|Mg9&!$8L6=8v9EmM5&gkkMg!ncTXP36g9 zOo`J0F}ymk5!wbs{b|vvpaPex5-YuXLZY*)r626J(SREXW>(7obR>aSN6M^T)uaU+ zsU66aU2J*VU1I@K=p6gs%aM`bUjmp1TRmL%F&R$<#e+-hLXreHC=Opf&OQwwdx@Bt1+W2s#8$Y9$hnl8;FZnj7)q;3Z`j~Bos_%$$$_&agsj=BKv#hD6 z#35Jp%%R9pES+YgI58g5UnjPuS6ZfjQPrBvo!@{G(l7OKFox4CKI~#Rfpwj)_=rB% z{*3wbtXwc!r4Gym-V3?8@w)q-miqKp@@xSbkJg@He&;$;i4&Ndf^rCB)Cj-5eo`w< z{s^}{Cs}4Q(nPgs>h6c0B$e9h6Is>F)czGp-1N@$AL9(+0)DK~V9J5pb zI(xL_+kdC&(Y}s68g(8qk;q`wigm80tgN0u@69&Ofn!LRU}>$9S~}4_wi2dYGZ$s> zs8YG@xCoX8X^52oS_qacmKVz^pcfq&NV>7r&D^c#04{Va^$q-zz;;+ZKPwk0X+WRN zMx=iR@e10b4|BcT3Mu`ARD{C|`EM-L8I193%H4d`ER^SV?GmwBL(@IweB0WI>^4RUmpf-v8YbyJA} z8mVa0SUDP6bw5fnKin4vaOFGxEJOiRhZ593yW*RdKo!qkz|4Kk+eD;-Y0_`FJId%fWKsT>mcJdp$|22H_eKO!Q5z+}4fMntK zxIIv_+V^BCuzK%N`+BkKcF?D4MUl-sA7gZ+ILPkuglB! zTvL;+pg{z*&T>B(47RFPn8dW^_IZkBh(jAfuP9G-^H&^$>m*OxGTX*jB zpk^@-w&+~kOI)g5;-1!Gfnv|(P^bl;V*Z*s0TXCmQ>Smv-xJGEN@FSR9O?nT*%$i{ zuZy#!|Ik@sB}+k@Zec|L8YD)TgDT^cXZi|X(Y&1UVd-ZwVbXO|FnXy-)|`O_Bl6lX z@feJ-u$*mr;i?Pz(7Q!-#7AWtXBQTN1Fn=CF2Ij=prxfG(Ybf?(>^bP!D9_78(G5z_MQmM|f~1-@Hs9 zjT-*@HrD@FWn%Udc1zYPpLdL0s9M)2z7G2ZG(59z8i(qe#1K-G9k0HD*26X;4Z)0S zhN2C@l;gm`uzc`~vkNtiPbis~`!ht&V*fj4I{4$~w)x`5Oc!^H*sw|MFB|amcfeQ? z5(WEoN0oA?Z3V*P!m)*C)ljhz;lj!W!l5;kL=9R5PmY-@hB&_Mht>PQgyvI?C2m)= z@SY^Pid>^^*TXA9ilzAAut1GvQj_JJxH7}7lZ0AF$eKgdux+#X-9!&28NO>G%)qsk zRY`mIw+k*7K}*@)=}>sBOYF4D-(lGrvhXqPADG^gwhnR83%W`)B{kZ+5LyP3MxX@8 z1mOWizT1p{LFNvi^`|nLcphcw~z>W)?A`F0= z9Dk$P?w^VhX(-S%D^{tmkIFp-7-~qyx}~ zy}?ENEO`L?=>Ap${eLBj#5O>R4k*$mIezl4zuiFnv`N&YwUrgl+aMIeLW_`0_MIB_ zbG<^LTFAD5q;0{dHKT+eQV0U#tdIaJ;iaeBnUt7|5IPF96KE8UN6Q#;{db|bEQo@> zpdSY3Pbt4uWwP%6-FoDr@X=h7tVNoW>Aq@~?g$;hkq?f%fuG8`5q`AUg?h&F z9?GjB)sL&h6CrK@HvGY!Hpc7@p~gx#(NY7 zjG@F@4iuEJcg+l9{3_pJuKsM)`2Fu~c+g*cNAP5#uU~g;4N#kd?+f&6!%XC)^7*)P?*mJAzn>Clz5HJwpcLq;_3g{SBqTE_jzZ`cUQp*Lyk%7`CCJ z+vt88O5;g&SMIZ6yWbknSYvV&xLTa#kNZ+A;%W;vgn0v>lDf=bGtZt9%1aU8fSRTr z(y%U_X>A(ZA zI|uqIwex!yJ+wUGpWaWL?K^2?9dSWNA8wM4Gz-x|_(co_eZ%%H6ZbU(%SOiQEn7=Z zeM;5ige&+vyPRk~;f_-L(3{_vlOsrOR#GCM`{->8GX^(aNCkN=`OoEK1oWWWpE)jA zqvF6Fg-64IKN95-|1seI&<|*K9j>F9z3#+N{Q^AD2v0a4enslxG!ae-t#pD`?S<1C zomr=Wq9@6S>7HXnI{`X+0Y_c2-RG ziN&-cSsbLTo^IYl*t%S`rOf&W`sy$^($?DDZilpcAPWKR z8%O^7N?$r)n_oU6XoP_EW{82^3kT(KVdN+ssyieh%yu;hAP26Q2lJdMTWf*fj`r*j zUw-da)HMRtfYX0o5CuoP5tqbW@3qwDRmr>WG;MaF3 z#9f%1_dG)E`%{*htL~a~nahj_Y;kAgMJmi@+R6>@En2_f8&I|_#`+*wwavD+hV9XN z`9mVp3dhxBm|P1)a$=9dCr3IhwtW2Pa{1=3SpW(WI6b_qa9RtOsD(8r8lfk%Bb~oY z;G7pAq~BcCed70Qlxi&=-A*Hfi!bw>7=eiSGW`JR6jiYX$FqAad&Ln zSrp`7FMkOh#GyUKEqSrZ1Y~)cA^QX1EPn&uwIrYbxb~>2Vg^h+@VdNj%f$GAS`6AC z6_sS9Yn~IlXfv?HiR@=CwAR8oJf3N+Rc??<24@zJ-e-SP!dtwC%q`ZH*Wce63mMiwt;8Ik6eiStQo-z&D2!4pNbc6oJZd9g%k?tP7&E~H=pEJ3r ze8#F1$=mbVy*ZaldMUT#Pb?O;QL6EYv5*+oY2DM)tjze+X1ihTv|vamnLE0k%5Jq2 z(KVY4iY6tPE{lfCC+#w)dt*XfBb5$Yn$l(cUUFkXZx9e{^|Lt15$Osxu?{rf#F1vv zk!eC<#j?d}y_S5c^eNeKL=gUG+*FYenI{Dz~P{pJlQ;x27Ko znNk|hahK|mxjW6pEN-kCJ`d){F}nw0xc~!67B$& zMM^W@Sna_65(q%Lf_Dw`qi&-;)q@pUNrHbv90-wI1at!2_Ru1ZuoLnaDS7_dNou3r z#xFA*Ui-J=;%vxhXd%ELlT2Yn=F7uz_z&i{D%pkpHUC&5@3$`sm~HxG$gCG|xbLqv zB&{r;MSeA#Vd#GcJ-}=-Wku9``zaDqR1|t!|?z@iS?NK({P!#WzIB7+(mxjpy0Y>S>?aunZ45jdv?TRmgQ@ z17ye2u@F_AIPe;lxRXOtKa+sIBV60v80vDQk;KKAveQeom}m09C|j+pD~Jp`aHKK7 z9aYFz`XS#Y)NN10O`Pr_RE8s%o$xQ``T5niUU#Hv7*NfEHq_N&yFPcH39zV4*aZa5 zbeKq@6O!a8i+?Kk7e{RC0lHZuJ&0dB$U%kLvH-qsBA>#l7aqVc!$Gzol~OF&#;LvQ zUV~u5;YtXSiX-EvPw={YOA*9xaE}c+K2}+86pv0sZ7ZB~bQ-Hd7Y8(N8N~ ziw+U%j-yX;r-RkHncm8TMFhM^HbY65y-9N^VAEfman640`;|XIlu!mNOt|F)mQ&Lu z5rOovlcA=Ta^U#Ve6>%uORo5A4UQ<@;JuNBFxGz5SGtJYvQMZ=w->;DagF0x{8_rT z8L!rLzY=1Gj9!Xc*I9md5vG)PBXwy=5n52QoAsH@0d>}sC0j&Xsds6R*LeOQJffXj z*DpT9y;iwL7&$^-fSc(RzF}uiXo=d~s2nmF7h8VBw1rhBNL59d&&5#b8wv6FJ9& zN9Tux3L`}_g9_~bVqc0uVHdRjx3kc;8m*>OY)lm!`&u7Mck*V_T z&Af!)i+ulzVaNP{U%9*y>U@3u)PVG&P`Q_uRZ;-+Acez@Y-EN|7ndHWJ_T3eGyxl! z5%T#Ne*^DNU;ZpAFboCM!Nd7bBcn5<#9x}i&KxevJM&vhsRMD-zFZT#RYcjE&S~m~ z34?uueiD#ux^Y;b(j=fvrdJuy>W;H%v|pZYrRN& z7FZ4!Qlx6K2Te}4Ml?U}=XnXJ8Zc30i_9HFeOxa_ zL*81J0(;340MZ*|5VCJuYD+1ud7NqGkzxBdgK@MeCO;=DNYjO|4-Kfp)27?ax7LIrGq7}W423y!sx>? ziUn2&p>eg=$y6)*TW%AJb~45N+9C2cO8jKO(k-3K3;aSFp|<6DEGvJaoX4m_dffK; zU+i#dZ-Mw68_qn4Gun@^|IB3~*8`Y&yC2Ob)7)&@{ zXDAO;5%Km#puHDc95+2@e2U3et!W5Lc%EQ0MH*Llzxj^V<76|3;^Bcjrdw&rR)tDP zq~V?xY;FC>{5`xuoEIZHCHBq7WHTH6jgy${h5?Ro!%3_iWtoCV@21i8G6{iIK%Hl(`KK53)OL*b z6)ZN(`{~Fi3XUTJxBYduyH!)Uz+6;l^-4~ z>~$7pvo`i4HG#pLaDnxJFe2ZG#9+o`RM+)IWt{M5?UaqhyTA_QD|PS;kcV@4M>hEM z=JcWZq`m-0k7yt2Wyhi~>L1d*k&cnuI~vJovFp#+3Mo+RCBYBf;*Kh-==!aq@+41zsG{>w{e^#jY}l6Y$9Ovnz|F)LpWxGh zTXE3P)^vL1mvT@%y!*q$o)jh~CPv*g1GyiUh+TJ%{Q|E;9$jIl|AnT9zOM=O8j=|t z@c*lZzb4c{6UJ|&frMK0eJ6+@dx)W?9)Hy>sqF3AWXEK{N*aWyh0x$sQ2btnAFV|)dNkUl5d9DQ<@zymlt>g zc7jJ~Dgtl2Fr~Cv(2h&+Zf(!qT`8K&ogbJSE#3H9Zk^u0LhC4k|LIV+4ThRU817XP zRLGx9tV3m0Ok`jiOirg>-f&1AH`00pI{h+$$uzsk{ue4+&H7c&8!B{xN@07QZ!>6>3EKNauLR+* zw5#A4d(j;^+!yz9*^>Mrjg+4St9V=|oWF+h?@M2Z;#-s5& zdpzX7-1T)7(yryj5`{T%`l*6}2dd!0l;UrIrSb*;N9h9#Wek1yYifKjjujqi{}vGs zUvTv_%|u1mkzpMzY$&uM9B8qB$NJtO*|q!aw$kG}hb;BOWL7mVm~hi27^h}1@Hf)d zG)yJlR;Ub`Ug{mhu4TN(DcqX#wqnk9J6k)QfkuV27BH6BFzN31hdQ3a<63s?UIdv% zgGL`tYNaL1?RIVobhuz`nol88Ql%k?%$*Qco-VO8W$Qws!N@lJtfPo|_h8BBJrx&3 zJ450U&X;y9i^FyYha@_uZyiim%CcE{(W#x@KV*6h6fG(czP1bIVI*yiBMp3?xYQQ6=oX|haMgXcL{wHB8pRe>CVFyc9_|etl z)Y?8cSlJg1C<8X5+leW_w2+ym{@Tf#aSol*>WUR_P_mJBZMAk{a_@4b(ND?lddvQP zDoW_7k8=w_pm3UqaSvUMV zzNje6@?l^zvrxucaL;9Kh7w_Vvpgz2c>BpHaVriLw1I_F1bkuvnz4ObvuSU&fI?$6 zY8RZ9u=LuJK;^>rQD#0`2TcT-Na%xQ(2^F3rxw+u1>jyVF?DL#sa4^URA}#w#m;)Y zXnyBxW03eM1Wnk)MEYunAL`;*mA6OJ-4F^pC7S-o7kK>j(q(F)r_f++!BvlRB&P^6 ze0@5plK!`cvi|WcSW0wmCbS?Xn4_iy&qZ7R<==@%)rQONaGT#r1A#D%iX!X4aDoD?$_a+X_00# zvKE&Mf9Y}R343c3>hq%o7Xm&{C^;T>fV8ot(efWxjJNJf z8T;!AeGAI>Q~~>t=xco$(>Ye-q?oAb`LJmtCe{=hTFQ&4qJk0gfy?=*^BGK(!SPhk zRF1yGu;}M|H@7=iuK|zKtE--eN%D6v2FD$;$QbDa0VceVO=t7*xjkqBg;9QQp9@uEcbbzVTE){OTQ4!Zqpi}&bwwoQ_L~477|Ih!_7ANv=izL=vtV7Z9zX*h0*Q4e*?tyyY|Brzg*|EsQW^ z`TT3#oe6N@jr|6aSm8BmaK}&iKE6XmmP6@J=--cz$ughH^hpu$c>Nf&@dOXz0uk?- z6Aia|_9`*X?q>P2Eb^UQEq95@R;Ks4rBXQIp1pZpZ5EE8=#qx&9Ej6-n&{(TFNc3BY z0%XI0pj2Eae=PE;vyk>@k1OQMiHIvau4L(}d5pJl--y7&yqgm3G+F8|2 z+>K7gQ>hxV=}OE@4Szy|=lA`RqW}Y695@n3+zFOS z2o;q|s+avL8&|`#Jsrct@IchDb+i{UH|JC?T@3hSLZ^G$={4S@WldpJ#yR z)EJur>%yku>gEP;lnu@YwY?#{G0gW0l~c{<)sH+v+TJapV#QO!BL37WHeDq=FYAGf z#K_Y{(c{pz8&e#fS4Xfhhju-vw`rx?VZy^1Z>COfz%Z6_O$@*AU{{>jG3v?4&^ZV1}hluZ?b}cJwnJjfTRYMukmW8Xd&U?^d(S)3nJ+Y8$9&* zbED(Mw6o$fkMj3!ic2++&SB}Z*2u>-1cic^YDNSiHqzCVPQb2?#!}BBw{4#t6x4O# zv$pZ_nn-!gTY%`RLGqJd&r6HZPFnblHo8$m5Vn8ZXrLTHKk;xG5!GMm;5aF>n5fP% zQ$E>YdlTb3vOm}V+Pz{T1-e&>cv7T6!U72r0TzZy?AYxET~u}@LUkf}p_RyQxk|tJ zj*K8C)QG-1ZXK#$OuwBNvHWl6uis6UVupWb@; zkL7Er)G?nG+ua#&(%O5f%7{CWyI=&|Shs^C(&>L8(+OV1zz4&) zS}+f-_lAUPP4*3L;0yF#z7pX4n`{a1%y=<6-_nqMo8;TNg7lDU4=0r+6itnY7a0=C zS4N!MpE;qjcFFx5x(h0#%qfdsi5TGoAt&5R=(eeC%3N_W(4r^5cFKEdn&qS4!peog zp@RBW@DivS`Qjqmp4$d{;7%s19-4Yoz55H=UXQLH?4Q1T{oOu6#^!^RxOjIYP;o#1 zMTx`d`B%l=*-C?u>L-W$)ozb<#Vp@g=xF|5G%MpLG$yzsaS(jhaq|m|d@><=TI^9E zqpSpI?Uj#pcihnnW>D^IrawLkXnuFP7xfhu)o?Ov$DD~MQCR3uUfGaSbpq0U%gW70 z?>isNJm0W}21m=__NdF4d)L6$c-2}v=9;Hwm3)*!0!#cfnszI&} zgfmv3cyjB51}@d$)STxWX_C04Z<#JHW_7%E!kQltH*!L0K(Uwb}SszS6l|SNON-ZszO@RpyayVZ6-irmB2i`{0BUEa+orPqr^X9o-JH zk(fk>nD;|R*!OqT7<*@`^$F$9t_7G((7UcRJl=VBQYpq1>r!1Wzd}S4<)mNc(=uCg zW^4<6XBL;$JFY8Kt;QC^R+a8%{wcE-8o#*`Lu7VPZtJ988Zn_`*&7hGV?HXSKS>CLPVji*jRE^==M{%txD=@R=h9X z{m?;p=MBaH#C}^8G%&zd>J}8k@fp;V*g3acDr>@m5UN3S0YCbNf3*MOjtis4FDFi)7jcr*TVb4vFuS zNJ~Vm)z^bPCwzyf)7qojx{6m*%`?%#mLjyl^>L%>4V1ylMtEaMGJmB7(`I zI>yov^+x7?bW2lK%l@Z!&e6|San_nX0;D^N=jZn2z`9q%pA$&PGvKt?PJXB!5*Fg5 z)Lgh}c)Sy*=T30tMkl2qZ!Nym_Ig7A%o18Ycc86GHcbd<`r;j5y$!nd5?BAUOa*Hq zIu!+rq|dq9mX-L{p@fVm&?sk6wyE(Z$7ux%0xIx%$liuTFeXWD8EMixl)su_O|uiK zs=3`Tne@)pmq%)*f#t876D6yWVrZUka=9bbR9X?ByXDGE?*dx9D>GPM{ur z7`rk(_n6&%qY6pM?ra9gZn`w-93O64iL-cbmix&P2V9-&en{0}yhjQDVG|x>iA@Db zI4gQ#BKEln$bl1hY(m%CH!Wv!KolmKz)=Msc}|W32*L2tjNiT$<>Pp3r6H<^AGWnn zeK2=%La2AK0+3m^8|HO_Q85#wF)T~FOnsqL+xAG4#m%i{7i|oz6W8S>-V z82XU64o#~7mYDP$*&%1g=cACzq+=YqzMUj%rD6hme~5N75NLMdRi;|BK7VtY*rVA@ z2XlV=%mJlc$8SH=B-^Fw{Ur3kCIFl58wnvHhN<)MoU*;a+6dOE1r1YHO&?@J%-{-h z`4#tOYFziqPvK8?5dh^zvq;D00j14O5_5L#ZmUE@-G|2^C=I3nV#2S20-!9w|ACwz zv|--`+SHW zHFY=0=$f+o)W9(9BwrW@eEq}+Zibf#rPC`Iq)*lAwCG-ZAmpPjVXVUq29GgtT~LpA zcjh=ejo5afj0Ni$;RTSm>pQ5b-`pAxO99?>NX;;n-S<2NLn$`zjDgp=WhE%RyrU@3#kb?ry1O=oPn1|;X_S`C%#Q*QuVJ`iLOxpr|^b&O)%qq7( z-t+YXh(CK6Twg4l@1dTn}^Y8PnPHjyzk|=|^A9uRVcg7bdL`q^Q+c@%YL` zUG1IZ48~IirppzHEQWpjyHeSZer*j@tI|B)O3J5mpOK!@m^Gai>1%d< z&|AWc){4B@+WyHH7TRDwb=p}-ly)9vC4Be%RBj_(~2BVEvD7P}ya{UKV*(;3@1jWmBRxuK!)dNI}o zrYwFF+Y!7!%$Yfo=ULC3NxC5@+mnga`|J9ip?Q3wh|sJ1nO3j~OPGMJyn= z>AlQNAIy;`Y42S3m^7nC#N*TP9?=ZB zY4`Y~TEh-S^L&X-SoTZp(Up}?upSc^OwhQ)>{Cy+@z-Z&9Dm=)-s|(Z{6P4Y7x7Q4 z7#+giJR=@2wAXDyCVKn8x>&pYA&8~PlGwg6ld@4ApW9F^2T_>>P4b>iB{hIgeS&QG z$qjN2^#6QQpgnKbn90^Dtoc%=b0!Ni_0qZGm8mLtnYlz0t}o7L#)XaUcVwthT8oR= zY_HE5yjo4E&o0;{sq8shH^4<5pVXgU@Ox$}Q$||rET-Z{S8aJPZeHL!wL^XS5p&oW zDgsqd#^yUH<->pT3<(mTR=p{Aw@#5o7)e3BG3ODF$DDTm)DK_hy&L`#m3K> zZWO|T}OaYmKEK(O?~O#tRrU z%y<|$)sb!=1K^Rr->1TB^y!8f+V;8SDCzDo__ZlGR_;aJFCh%!_)1p-UQlpcD z{BhlLlYAI0{R2(P1uLp;;xnz~#*~^|;f2t4^*5$5yG0}9u|&9=+XndL8vTnJpRpEc zI70PJuOMcsQr}1uXAhry5^Dh<>|_@f!l4hRl3gXMu*;74#otNwZExqjaLYNC*`%0h zw*+-#k*Z>Cj~IRCM9kfjKBxB9its_i={^;O%Fx(B=m_`-%vaAf8O!k2@>eq})#9q| zG!Vp(zL!nqpcncU?PSrZNzxw}$Gv#cOA|&g+CZM)Ve(i3!!TMtJL{nS$AqO~&C7)6#ay4y-c1EktH4?Qx;mq={_f_if?c<(wcTb_ zT1o3h37nvgkv5-8!?o+%*uC_{)=zKkZ$@u);Q+Z@jjaS4@vAj5zQN##H+(sKY?8PZ z*nU0Qu%LJ&bf&0^qV`V@-GX%q?t-tax;Y|0_m+0oBE5&jObh}ZW0)$p{+haX6ic0J zS{g4x6QIQi@ybV~-@G)N@cfmyUeG$~feIa(VD`e59W^ahKh}@k$r9|iCSGjV{Bu6( zp6*4k^&8>#cJY^WJsD?SWiMxe^H1+$;TT034;*+NoQFNu&YnxxJ7NuJh?n0Y%P3~c zxH=4dQxKdqXHk8eB*EdS#5TZB4y3cX*ZWIOqTIky`t;?^i~3x{4clX#wO`qEy_1fk z*)pOyrQPi+A9dG(L#OfDiZhtRl~JjGX7ozID$$#D_)C48O)qmMMX`q)l8R>@t0mg$ zSZQJ;mZJD6Wvws4k;~ltue|Ajc&*R+r~C|Dd27UYtO}~!Um1VpI8zp#t%iK zT7}tKs!3f(9V=nEQq|BWy@$?)#w7Hg((W1pa2cv7Kg|^lccF$QvDtn3rOaTKmz%SI z51_~t5lV{uy~4`cX?Wjwv^fBp73cK=w@_wjGRplyGyJLAiJbM>rm-M+>L+E7Yf$CF zdS+HB&1&5mZ8}UdI(>qgknYWu3*Y8#f2He1b@{j9gK{>8lg?40IPT3NM@XHZ4{?3` zvn{l!{XC3Qy6R17Jopi^t&blKb2sPrTp3g3-5?ydiCFZ)y_lgKR$xFBiZ=xB#`&8i z)(B~q4CV^v%jYSd3uV}q)C=VIQ(kZ6~7WPAW)-ptA}H- z)Z$l2-C#SMzD;7fOw@J?q}{9!Y!3XOE(_YwQJ863%v74rrRBk$G;le3v`PtC|FGjx z76^!{HP}hNM88@?t{;3PpNv2}R;^#Vj~h7SO2Qdt5lB6g2RC@3Xf^0vhFqwFED(4m0NAcxOe*y zW%|QvSc2EXwk@`<()EP-2`Wi)aul}HK5%*U3uAXV{}>w8yqXMrUvxaA@w@V6!#*R>Av2}q7r#bOrIF9veys696#`; zwm^*3R#Hiz{*))B82SXgN0dBGQDIRm5i!)c6J7K4wO_S(2S3OnEnjU2gWZB~?SVHOcG-ouXO+TD6U-F)`j^c9Y>Hn_icuW5efR6`t^7yZ&@7QJtVbNG`H}bpt4x2BGN~BHT0#-u6U|kda>Iykd$z_KeDvk zt*ca-kE4z9S|w2i%dTAC;1w;G%@bkm0`=$!ppjvT5>E=@xWsy+r;SecjG|J~qu((& zn&oY{E~p!^gT;;s_dcRG;vlFVpxJBn7q*CXds^CC*c?~P^Ra%BVeDJxTlJ?!`xmbuL+SvJ0b5)esfzzrO;u{=BO;**QQ;{igk6Ql&DyN24`4M~A zP>(BQtki}J#_5Zb@DZ_bBoRLLR6LwPi?Qh7~DU;hi0P0arN+XPUd_K36p^ z&_$7seC;xpr`-|N6y5}iYU;)g2#eL?#0bHB=cGFKgFyPR9BnSNUD(s>USeCG^(;)C z`w`^=Lo&(F+m>e9VcEI85qX4wule9jB=i<@gtAvpwm@d z!9E^eC65^zW9Lm!1Lwo3Ip4Zm@JRo<+ff}i-#&=|V966n43T`&M)@8R(-1BAf#B?>t$OzjkDK_FI z^<}@B9ca74Xfnj67K7Gy2HL=qlN&ITUExYS)+U9%8D`!+6Sq4HO=z^GO!{Ev`$~${ zU8p%Am`!}Z4a(zL`lulN;z^mtVpaHWeuWU$*kbQnRI7FE4tYJR0YZUmAseUff}o09z_s^>l?FC138$)<|vuhTQ)YK=G=V z3h{jhowN1B_S`t-9d|Sw@Ham{`!-fGt24?6b;!Sn`oWons=Bq;K!_@}M|%$V^T&S; z+C`ob1OJpUD7@cYe-2#)Dt{{y8Ju0&TK3hE9TF?vTCq+2E?!&qOK@u~KKGKuGb!5# zYB1cMOVpmx=SSHe_^|Qle*Q7U9qzThg{9A-X`E!L8aLBsh9*BHHH@Rn1CnPM4=xz{ z`XngzN0+C;yc#3g_IAN&!j|k9@qm8dU5s+)|6}bhqw30uT3~-40f%WRW)l?t)h73juFKC zN@z5E-dchiM_h)$bu>eNZw5e4XVM1DGU1Ov=u10rIEl$6ZZYEN4$qBRt6wm4XjuJP zZnKt_Q1dg+hxadT-XpAqpF@NPq~B|U5bs)cr|#snb8o7quMKh{)ZoFb9es07ZHuwo z@?`)48}PP%_jtWw776}j%$nq21kst9KJN~mMcmzap%C%CDI)Ne32Z-#{`I>Z;1Dz< z*|f6WSKXlrfDQmc><`r;iE3hOY&dv{EYjRCY%1{l2#ti#ZB61dG%z5_KD6*gUiih? ztS#9zKkac;YjbmZJpo%hPr*-OAjsADtYBqzJ)buD?%INa{kDbvm$Uv;)-R^VpJ2N) zjeY})nJEmqdDK;-bIux&4!oMnK*um;jw2Xyh$dUJ_1J5!(t>cfy0d87HJQ^fu|hlD zo1x0us^xjmo}w*IX@Y6vNtB8jJzJl}i;%-}Li%U=#j#Nwon4FlSUYq~R(WTuHa84& z9-H%a+Ueyb$^pU(!fX$a9lxKIJrb!Whj0kQ$;iM|XLC;N%qY>36r?QP$kqd1T%iGY z7O&+!YY|O1GYnfeaG-FbTJHhTCYQ#4iW@Pj87iKhxl+~(zRW>=f5g|~Tl0;e1~fOUPU-N) zljRt**_MKV#n?B{a>pH%Ln}QSPyHL6$8uOHeOX$~?n~}~-2Jr6@Fc|Unb<|u=}k*3 zoIpHdRmB^}1~<+;K<^ThFgn>^JD0ITo)7n4yV7q;68Q6v&~0tK#k*~7QQ7~+iU8>o z+Mh#NP70CcZJr=!K%Rl6naz^a*n9FCv7K79;tcVJz9|;E&-ho)ZQXA#UNB z%BdO$%eflNE7F5p`~JEvq!*qS2nv6DXXkF-MDvjry8BJq9<9d6n{P7y?OEjm6+R(R z_1HQ%7Z6?DLeZHqAz7Xp^i>&W1I}pUxM9DrhCMZV^lcS&z?L$-kk@7t4*cbhYLl`= zmx66Kx3)GwWCJm`STen=U_W$U_!opy&3ysnb!mR}OWbuEvRq?jbY6}x{^~;llo~HP zs;4*B$N~=Sm#@SOah2!3YEdJR`TegpMs&p1XtF@cn}Bm-=?=WF)f=%suQR!2O~h z@J{3_z1pkimg=6=y@x_1`51bA?Lm9?wBVY%Txe}ERlWqiv~Ug5U&w0DMY#^?B+lT{ z7zVaPyuCqSVf*0T>Ttwn!axupenJ=~e$T79-mT z;|f5X{eKcWBJh0F-&1OLAJN7W#G?EDMrw87{x>?4Oy)@Os=snvNmb4bPjPYaDLACA z?xz!M5?X!}y1)%Xt;MO6=S(J;-P<<|o9npaZ#cdO`S+x)KY{7;+{SqBPPej_!!gg+ zXu!uLCV~M%4T{L(?itM0$KD|WKI}D_G!~uVt#uX#mW{2~6uZC|$i3zhV3l&_rx zok^>2ujPmUb)8l?hw*||3})1?Ej!cV%bSFTs-VVmOZQ&b-3HyZ#QwvrHR91g)0vGf zK?eTKbs<1O&go~o@bLPz9m**Jm#i0FH_g^v3Z2jLmSt4MV3MY%u+Cb#J~)Zm0D>;#L|tnOIJqg z?z6jtwb7hO@Uz--6r;`&quW>jSH2w?4o(5Gr!taHa=2#jh;%9bhEW1g6c(eL+AHOL zo51rq))9R)-r6C_GETd+zd|wOz1S2NuP2iG;Oj?HQ7Bvo0mWe!MB!O`Ia|SvimS#S zXH~KVJKWmWYKy!}pIA7l($IFN?wY7+Y0Zv4VZ&7cFJPnLXNWB)>2we@(_8o~%>4Di z@6fz>RMAV6_8reVe>E3xBa@RpoSyV)uViY+kA<cEh*{d2%N67TuNbTX6k ztJ{NcyA@ak9k7Sf2Zu|rsj}&DvY~XbxG2$;b_x-<49%O~pRCOR(PbafJYB4Jr8&8{ zB<)mg22amQ*A8>XM0!OXxHu+XIg!5p%PHW8wD!?9O|#PSwEvbG0R{l6djCj;3FhOx ztsf$_Ilo-G1l*n-(lPSBgg5+b7Ya0E{<{)vCX-L~wqEL^pKCJY2t>s7c58Ns=Cwtg zxf$~6Ka0B$LQOSI`&H$E4e%I2D7lc3GaZ*jz^3nv@^X&1ZkMR;-4L3KNQ_$J)3x?) z#5Hm06>wwsb)SwX()qCIMGV}-;ZHx-nuW$hA^O6jN1c7%oTCOwpI{J9vDcMVr>5QYbrA;6 z#V!aV>=gBJb-|mzlCnO29yG6$1$O(ppriG8J2xKmv(7PxD3Wot^69#tTdM(wbYx4Yf0?g2=Yr3Q zEUo2y)D7OB^Za!p!FXH<9Aa;Dr|s_Qv-G3tt$g2KBoB%LC4x=3*L&%#=2Im*c3$|m z*tfWFUdV&hWarf^SjU*o8S!khdd0crzx_)ko}?5stE2<+FCE#c!w0~><~3A|DD28$ zTC2**M~zKYVp4hcj(LhzE(q(+e4=beZYIEof)wEjkRuv8uDj}_``3+_WOJa|B`5xXK^4STV^VRGKyVUHwsxhC^+OIb1 z9aw@~YtkC$l7){g=T!TZ(2w2^C$e53vkCRx=>EUjPw_Y!4VHHKE{0yJL6Eq%Xl+3>G~gQJ&zvsAV8!` z7ZC>!Vd}8uH8mIdBq+jkl)*FvKnksCyP$_^TSc<}YiLl9`Om<*vk^dXMPYdbW_f97 z=zAW_J`YyiOqEm+umG?8k1BKlqTv+-DJi_CG)8}~MqfZXvV_cspddwRmLIqPu?@Ba z8;ODrk9D89#(I9(Xn1_}49^nx{`MeHMpI*^+Ur!leRWt$VSSSa!B+Fp-bDDifkzsCNUfDlj#y8g=8uF8M7%nEAo0eU`#p=%1(H0mZ zC862sc*3VYg3bOL!vVmN$p_m}+b9_zst~T^7NwcjR5T%4PzP z5P>&^qI|6dKnNJl1gMiq^F%8~GJk5kg3wWtQA~36x~rZ>%XAv|NS*x*9^KAasqPG#qltw$s{0=HDx7-YoZ|Hv^ngAWs+qK(uuVC=?IGl@Z1eS)r=nS9(aczrub#u2v z#C~~wXi|f*f=MT9Sj7I3mYHX=LGybv7f+s}o)s1T<+@)S0B~Ohg(%N*Lfv6orm8p| zwGv1=T85Q=gqGi;*KJj4ic>n@&Sa4Upg;Au>kXsWp<#y4)ug#l&Q&+x)CQqU6yAA-;sN0#Z5xYPhxFx4_h|M z9{mYJoN;V&e$-Oz1mRmJ1o0geOxzSQ9udwB2WjxHfr)KkVgUo7 zW7&p~Lpio^7If%Yf(^{QBl7`r~`iK9~Nch_p(_{h67PW3=M0Ax*t`?L{l08%Sw-s^(ezb) zKxrk9Eb)zMpZ0uZPi})IEKdC?eR?DpW6Hy)b8rU>SLA0NdyHAM4W_4qJG1F*F3-$H zjM30gQ%JbIp9q6Qt%V5EJPlj37ZRbR={IB`R^i5iUr3b(kPSlQq-TV?;uaWH%l&iS87P2ZST71xxy)pD#H5w$}w*ld}s% zyVXaU>(k-Y`tjxmE}`k@xPLpgf$f_g4qagoEeuT4h>C{ z2=HJxZDMem?V4t2Yh%=;e0ndqb_7<>^z>p=+#6^f2gHltN9lLqbpA`}5qKmi=*-8C z1dL`JrzYv^AE+uEp5TZQN*m%7sQnFK*MdZ}ngP_4+g-D>cqejMWDoRK^Uui7%eBZU z8u#r!c;ME6_z2+NTIPlw1G#_zfdFxf*g=-fI-U*slJ7h~m{Mt{_5S}gX!FBgP)n7D zp?6Kk|K9#Z9yLHU!~c>tOVv&!(fLH_MuoF+3MJ6yZOHpC4!t(s zO~0rpJ-Fd5Uhd%EwLFa%Jhjd>IMY_yt4Pz`;4W~OQxAK#dO~iO-y*>4W=4uP@!8gw zeRX7zCPJN|go}jpaFSM01TE_az=t`0;JJ`FJ?$E5h$RUeC^G}mFvXqfIo zjVab2tbUB4W+dm6yp(f0vtTRvmD-!;e>c=e%s?%6xiag@nfXTjR{tfT!JbZYX$8l9 z1)ho?J#%w7kft?oMqI*Q$Eav}7X>c^N~VqfAWI)_v`qF3aYlO@Sq*Er`FYI`&`fJA z613yIm&u!%Nl;%wMfk72f?9CD5A>J6tSgVX9RZm!-hmd>ilo~oAoSqmZ^$$<7f z++02bP_6FE0;3VrCvYHv<7hf3y6FK*MI?4pW@)zuk`Az9K1eAW=l8*7A&$;W@8-cN^f=QZR5Q-8zer;8L@*?@*a<;~3)Wf{t(IaI){gMOr_S&<4R=k$9aw~EP5P&r`_NdIb`~WbSx1STN zN@r=iZTYB?@UZE`^A=(_y^dJkre2cm&wP)N2}>029Nk>M!r{H`lR#*xXT%CmGl@}e z-G|CCapQY!&2;?v&9jc<07)Iau}GHHv0S3nv6`)&CKLJ;-}n`?gY`7Fl<^(pTcEVX zn%_nM=MqlWqT)D;iy`U89}Az|$n-HN6fEeD#Z>C3-aY$l(+uYFWn7t)r`g+d$jxJ! z)L?{GZd5p^aM>V|&;0`4w%<>V1GP)EEh}CGQ!!3zwBft06NV5sBgNMZ$BnLDXIBl^ z@o)LBzvFKZe+P6bM8e?5j=pP~YZTo-sL1|y_TMnk_=odxZMg=nv#RsJ{?^8)#GQy} z;U#Qq8$I>ye@!INhXk)kKtepn!;7hwN(*;elbH_0;M&7L%o9X&1Xo%AdDnDxWWA64VifyHsvO!nO5 zZ!PkW)q2QE$-xtZvOR417ImA8DzvkeNUzp`jUP(WVtl@YzQuBGsDU)h1ZT~%Y8n!L zD_^iE88dogPU^dcw5ivbjMCGt9@AV(Zb%zaQNs8)f;N_C2+l_0MX|!(RmhOJ??ZpM zj(j8tV+}&fcT!PqFgrpRV!yfZd3PHX65+Zxb4`5NVv6!cWS8}P$x4fPc1-U+wxH*n zKO-<#sTkUy$>#1pKnUhWa26Hk?(`t`?ww|P-+rlXXo;g$>QzVCYYS$JN4Y{=6o&0X zfi}z?M#8?r_ex*iUCTGVoQc7}U0`UgY3vx}DdkLKEZSK_$|5O>ac5?XHdNHN{umez zU|_}j@q_JcE;r!1EF`Nx3)%7K9#lc2iT?-mBCE20dG0bWf#-I8+;4$iAeGE+^AXX@ zOQ1;Re@+Yfl+V5>$PEu#%ho!dfswB1@OTnK%spTuj;QvDpuR7>nSem$Yh3AU@c@_~Asz4v ze5k8s*rS`K8Db`jC!gWQ3@RIDcj0clAN*Te94O+K+@}ochAeh>N-dZT=fPWejoA8- z-Bjt+su2=iQ$z?U?$ft08_=m*>iF$8;2<2`p=^iKw{R7=v<>gr$B3wxQ#IVX1`}u0 zy|QTMhQu7gF*%COj0xuxm#!XJT5;v%u04jALnaIhh>J-HZNDz*sPmwW$ulu1`$hg; zfl}K2-jI`PFF+Ss*1A7-D{k$0-zTN~(K|XD=4<|nZSHemuOZQ%~Fw$IzHNgV!Yn^ri`JVH>fO})HzpRih-Ml1PYRo-g#-X z@iDdE8D5=B|F0niSn?m(i!~0YBY&2P>+TJIYq{eNM0iV7TlBYd|F_xYTLJ2#>`Mm6 zQ6gZ^2_VxibKt+`lmcz?p!ttY9!4UoieJ#yt0#;xPy>V@4%1#?LqS$r+P_OC>S{6C z+#(7Hp)NE1nu@IP^=Nn1d**#@j&cKxo2inG-c_$KR;7$sus1o3KePULAw>qc67Fo9 zF9jt4uS&hW#kjn}fg$wf(|5rd&J}}o1%|#0%=RlCnHw)_wQFOBX60b=ti&ff7M?vP zzh*z!O`l$Oho)rZ=$Kg*jiF)Izapf_wV+6mk{j&}w2}L8G+2U>WL0L727NWZy2-yqE(volVkVss^CXAX!|%+HJ1OrpxOSqF&3$BvLAE# z+1mDI%2e-NW>Q)PG9vaw{x@7_B~a|5Az3{l1bKoul_rhg^_{SS3;{J|5rOrt%iqgtS>|g$U1^m%&9BNXdWdC5 z9TaQ08g8wRwe3~fiJt^m#RC{q^p1xdhr)*8k>PrOwD~cA75BPzNj4dg9vkiH^Z2#8 zy&g)uL`YXvS3tOvv)WYi# z&>UYQ;{Mc6m)<1r!k(eQ-n0|cN^2ZaY^LSv+UVjs^ZNAsw6`XyEuh>P@ick)`PRo-y@9P^e#%nz zQmR%h|LDHol0(D5&& z1qBczo4;IfV|mm-z=lW$hcwb?gG=S3fq{_=B(EPZ^82*6XR&4d8;wDM{V~{u;X4CB4j_NEloFrEs)UsX0UGYsZE29{q+T1%-H8P}b zoNpKqDUnpgsyL%_$Q&&r$)uGotXyAgBdJt?My+563&=yKsHery+ge-K29J>;nM4D}#YPw5i0jo+YK?cEuzn(|r|?1y ze1V8l({wX?$Q>`w(lX<0cMO!;j?%@Y z`AvZC#MpE7Ics|XzUzPd$Av%Yv2~o!=6~$6yk>GVRsU71YUS3d3FgQoOn|1JV{uFbjJT|3Ua>b z%s)O02CODHKAgXB`E)t=Sr;1M9z#ENz8h+d#QK+`{zwCo*i8?93ZM>M6BQs^N90zbPtH22uvs3(K`V9UYe~xz+NiA{2Lx3y7AW{6^UU3Oe8v z^WnyPbGhV^E|f%CYuS8EJxDbv2xIJ2%oaM8_JbS)rflZBv3=&&DgV_GXpI*rM4 zgi5h%SNSf$g>zH%z>=;7E=t7_rSty2_m&3HV(ECq#cP8^iA)!C&4RTlZ@e|5n`HG)@2}${&yqCX&IbBKvZc@OAKvvSi%y(eZ3yggm zKJB6hkK4-2JP&-ww=#yvmxIivaV&!4(=~*^Zd*boJ>Z{_Wy3**e)m!!GNE<1b`Wc} z;0O3Aa+%a`=Sw$LEp?LmM`k*@6ZRab7AKkZo;U0@n@=li0hY*F+TDlm{BGMu+85b^ zX~%S)0?daVPQja~{Wv-YenO^8SYN05xZIy3eOEK{f3IzNHh*5W%;$6EW+GS=I=1@Z z#A#zZ+vEYkqi@`7vb-c3li__#Pt}-c*m_+;M1YvYjtRVdSh!Tv*B&FXzT#+n+}ErL zQW#!8U{HS)L(mZ%>1h%jfg!slyzc$yb~KV`NAMHZPxR$m5V2l zw?1W{(=Y{ zk07lf*x#EJoh@WyXKzSIQ&-2%#5#2QDg}8Y-xI*qztbrcunl4Wnm6WY&*OpOs2e0$ zUBmq_0uHO+GY{IA)=NwjiOD^-Zky4lfmS?mf|d2+olY}bsO5PfGFd=SmLwsNc6Ou|Beap2kZBkTxa&s4T_$y1PPjz{BS zh)$Y@qUUa__(-vH~bMmLuyh&f2K@ z|5BA`kZ0540~S0;Zt`X*E-`!iPy2fB{Z6X~; zhjf=K!Oxzt!rx>%()rH5SWYJjMGu||-A~-`)EvTJT`8m+rhfcsq<#(rat9{;xP)Nhmd#OKzq|0ZJYr6AEpsSBtEl*K+mUQZFBJE$I)@CnVA3IW5$kg(U~w%F z9i#=G6=os{LyF}7ALfF9T||Tz(K0w*DWQAMwuy#{0^>5r)iJb;dt8SklvRgTtVp7W z8I|2YWtF7Rl6ZC+kQPCa`8D2%uJwj;9UVQq%lY#J8;tTLjXzev;92L_Z&kw)USmuV z9aSg+wMx{S_fBi36veTp=N(scTE@53W4=0FBlC#IEHY4>rJ?~eKG>s20$$-K`wI>9 zeU~`kZix|-D7{4$*e%6an2DYjByUV_w&^>)ScdfOX>Kct7T^)?(u|W20u{5KkT>oR zO#3(V2)OETe<3ph1JU*h`Ia6&S<18-LCXHMrQ3ackmyov9^`!QQ}e13vtmX^e@Y=6 z3bnkEOpj(@`Dhc)4Zzb6U_^`uZw_15tx$NTELY=y7zfHlT{FDP^knNt&X|qCmNxq3 zepcUjTN3&ST%QQ?6P{S=iesbv({>V|T=Z+Jz$PdcT?bus*3go#7XbvUL-79ySiXM; zEZ@wS4c1a2JoF+{;npD7k59(`epc|7S+bjH=Kz!cu~it zfjQ;`Ps3gz(yyK-4`+fC#0~Dp>8Uo=&=%(xTpeIPsal5mdXkd`lz0Y>t*Z5io`#^0 z*^zJ;VYyLS=t%4kRnOQnzt0h?(h8Zfy?6bHjO2*o<3+4@v}5~-}f3|fTST9PBEZWwL}HL14Dttn=x)Oe^k?QAmPUf^5#_Ci}&c!rws%jf_Z*a#hwW8iJ2BDHw<(OdPC!^{wI9qg)z$rfQ*jxsA37_&H~GjT?GM zAL-W*VFmhY(h`v&7JL0{zX<$z-%~RM4Rg!ckS&+O-DRdV4poR*?q64=Hau*#`q45S zWjm~OHaaz)t|niR%kBvuYGn3Sqh1kl_$?DsCc|-VgQ}bc(5K?# z_eBzDy=_zBys!-cxU>&>hH+qKlZEA(ZV$3$oy&2>@-6a^(l`}RCfnPb?oQ}V_!{Rw zOB}zzhm0#^C$sL?$qX^!py!CVzzl7gKm-hl>}-C5r^LqNvr!o&E8K_|bn#!taRg3i zG#A)IR~u9PB=$EG{xs0)wSUBN@4!E2d<58X^K1^R0p>^F|Azw6n;Hc;$JB=;y+AY< zlm)UdZP^&MOh*YA(or2$({(x|FuRg*SFE6Fj1pioEnKr8|8JillUiM9enm#{;iS(a zWSyj5I^G)--NNM;&&4{I+fX>iIYq%&A^=>NjPXh0`|RSpRO>>*8e7CY%{C$ceyZ15 z)?`Z&SY^#0A~@N#rO;bV)GijvjrJ2PjNhEkuw}0F7NTP~)S2&gk(6ph`~yY!*G)3I zxi&ZpBw|`XTGzfT-1Iye>e3Bv+k{y_oUj*sUfT9Vjy^1uied==55uUJKLgGi+r04{Z!EeTw-FXeUj$m!WAPtbc&ewH&t>{P9mrQN$SR}QLicsLmOBi zLJurn23&tqfkV>}Yuc=kNG=#3n|*<0(vGKuN!C#B$PszwMWuxVl+gcYp6F@_2T1!S ztI<>-Szc~O?j4-QJoj)w)Hql0?_GS`2=7ZW1TDrSxF z_(}zWIb7gj2sg5?23TL(Gf)2?Q9%Uuk>CmGM209WQRFOE6OB^O!n|mJv%kll9V-#H zMWq^VB@b==OcpmR86r`o4hv!Tm$#3KWBvNt z_ZtsRd{_7O-@6+d7MG(T5fUksf2G^|LM|rm*XCi3Ip?{XKZ63?}5QDDaflVyZC1fQE1`~ zie)=;xF4?=c}+yAfw3Vm%-%5lFiS($*KL0XSc%ARA7J@|;V=ruyI?^ivMoi`e)9y^SPJ>^Ghjh@GUuH@q@VFndx82%DY-nuKJ7yHfb8oB(!Z0>Q z{P%ixJ$#U)8vj8=2N=U3LIQZkkZuhrfQKR-wMO|b?;=V!p8kS=C!4z*qbbtC1c6^t zx@JYWQ9Y`Wnr6xr8(m`3#Ra)clZ%>_oUA{Lf!C|u>WWH?t@-&A+zc=07|T&_ia{Yp z90W}K4V|}Y0PSfe5WP=o+f6IJe23sgpM|7+Dc9eUPv>}Z!GfXBkr{T-AzmV*+5Rdm z%7P`;ydZ%}9z)dqqI-pv@H&$xG#-F( zx5)C2=g9;4{puHetrwN9D+3iR-ox=0Q);sS6FUW17!OkHp_cbY>K{`sgt#daVb*(?UEz~F@F zsTA7Lz#mnt05llXhv0VrY645LsC+i3l(mpzMk5~3dPS^LV8Bu$=v$I)|53zjvW`Ly z+yBN4&&7>-UFdwL)cGM6!=RCraT`4PpTO%+~SpUIdv ze3>_QH=dvOeVrQK~e^ThyJ|-*$)+o&=5b3baNQ!$$oK1 zl4x!4NOE}az2&?rH@*=-4ElG`34mDhA2^IefZb(*+vTJvkb4A684f8{{5S9sgMcq* zTivJhX*5nvHDja;A8m@;PZ!Fg!l5p!8GoTKE;Z$$dc&joryFCh=ZioXBqI% zwV~Lft)YmfsuMj>S!NT33_B13y;?1hS#l8kJrT}eLTNN2M3gWt3qz;c^Njxa>&uqD z-266~teW+y6*rcB)e_+!1Xq9l0>`FSwHEO3_POXgP1zarP=#xMX2OJYe-yEwULHei ztNj3X-7suSSto$GpbW--oDl$oplr?|5sq&wpVc+YA%Z@#pLF{%ttUCT+aFzCR8&^Z zBH=#PYL&Vd%KuWU=sqG$@)=bQ!+lWb+9M>+h{(v-Ne)%VROCb@_^thPjqwg>r9Xtb z+w2{uHu-0j?t}lAJ5ZcAc^~hsj4^q2qAfPM=@PZM54bCre$+7g|5%aD2Fk|Ru48gR z*_bIP8#Cp6Gf4x=#_Ino8>2W4G+z9I+Z_^AhypfAvTD84;cw5<@QZ67602BN&`5~a z*MRh@@7zF~nuE|~&Kx38i@hzNK59o40izlWmW@FfYq|yQ0!wj9AsFd)+I!|}YfXY7 zEa#o$MuxPkbl1?+Ecu@8XDK*U!Z}|^9@VpF#7`@DemvK{`2lTIKgPlS;$eJKf@YW3 zNAFN_GLmR18IO8wptps#cLOy9j=YBl=wC-F*G0jzBX%$KW1meY`TeZ&EJxS~v`nr> zPy$sM`L$d&VsG=h9t68#`s<$BPzioH`PJ6e5(^K`EJTj7yNhx2h|{(npsi0!goZ(r zI2SPb;i9 z#|z<)cazWBTYm84|CcBLDC4aFV#pM%u(^P{r@VbY62lH}@&;besmJ)wQxC9D!$&ve zqU_W zSDf6@Pr}9K4yb?|ey{TmND&js3+F{Pp4-#9qU4CsTyS}>YKC$m^ht_F=ddj{?bztk zgNHJN7+pqSF|u`+_I9W)l#IyxM8{)o5gZ|sWm3*VdZDgmVkS0-5es&a`aUaGZAwZW zk9MlpZZ;9SzRmBC=Vl6mU4|eeTpMiH8yfKf*Pkb8lg~ETF;3~r#DSSJl{x26h%Jkc zOcrw|(t3%^JQ>T7TysAwl$bYZ$u`uaC1piz1=-NhW9`R%O^RlH7=Kn6zf&$#M{Iv_ z;_RP&nSwmZC~+mu@RQbEEKp=3&H&XcXqR3zrcKM7Fmqnp(Dry93PpAL60nSc+wlK>AM zB!Z+Z=^%RZ&3{yj>k!s~ZN7@7i494cZ&7cV!0eq~d;e9)%=eQT|m2N9~0>#8|VxYqSqcDbUilT#dMuD{!AmYk{Cv^Xoi3a)`LJ z{{+!CaFt>dHLG}@W`RyJyIt9P%gvr#EedW*HBHXO-7uWr)eKJ7X>dA|s09j`BpOqF zov(+2faJZH?7y-w9OyqL2=j$-z`gmragRx*^zmf{fn_xJ@2vp8E#}P(s?C{?-`oLx ze(xL*gvlG_H#2}-1@Avxr3aQb3aJ+;#Y5aAk5R!qz*VufPpjfO`#W*36LDFa$qK#^ zN#zStp^u1Gl-MiMnj#SdV@xtd@^b2+>G7<*3WbgYh7ewetu@gILZBNww1224bYFfOl^#ucIipQJS|JS zbH&iS8cR#_h;Lc0gIb%K8#+e@aA#E4jnF^S973La7Y!g<;f?B>_h9sASDAomLHOb? z`Qghs0qFys*d1E!1e9oD?MoZ)VTxWj?U`MO%gvxI_%;9Q=GDdC$y=+Dw^QGBlIm09 zzxGA^Qd6k@NYF-~&&YnA2!!s8VHw@ia@BmI7~`)WV8i@1LTmhM6%8cXa45k(s8P;s z+jGe73|RcbHvprdjAIV()p1eEXaLK3U0*dho?Mi>bsA?BD_4TI9n8YtxwpJH^2_{o zrQZc45WAUVL4kbKgR~qdS(y+37r_lIj#ncGWm}--@c(bw7N-wPV#a}jOK?vs*-fzE z8!)^NANV)Yqgq)l>F6e*)MZAjIisZHS2I}NFvG&)_I;fyJkZ5oi6RUsTe*n~*JQ!N zi?<&`X2>H{dxrD!69#i8+aTmJaEDktN@vQ};_EyEmYc{AWdWtgM>_^K7%X-j_gmB( z9nyVCTOHAuqXs@&Y#)0C!nG#60>9Hsr^4}Xa3}=mk!N8|#Hw#Ye$y!#*0}~nOSw#N zNi)GFN=iPf-e!dul2B*wbArY1-UO_!t_J_Y&g%4ilFn8vVscQ{P3N{ph}h@oJ`YIK zv$nQIdC00NOelpkVt7NG(HO9OqJ8v5av!6xA>2X1PC`ZU#uT@-9Z-T+33afybI@fR zR17hhK}L-{`V8);~zd6IVAhGMA}Wd2!SmAY0}AOW2}!52{q| z-K0?g*aNyaKsm`xtCS)sgk$Fv3n(J&V1f+;Myol~^YwsbK8kaY=YQ_LgMeUY_lVrY za7tpuBq7oVzgC?&txRG*OJ}8Xv<{S$P$f-;-4Vk087wCqZ;SC}c0su$1WTKHy_vb2 ze9OW!k-8*WI*!1<8P{-V(gG$NF)lu8GyDw2Og$Un(=EmtfvjYx*kxEi-$n}?&v%O@F(CzO8akgjIs8huYP#)Ye7}KV5y5ekmAJdK1r(n8BR;W=h zzcD2vn=+&ew!hcS6QAWz=5=Dnkb;DInu5n>$Xc^f{S#1b^RA=tUtZT*%mh>qZ{=Me zyfZVm8in6W2b!lJio=E4H_0fz#!-@RaYLEFQ4|7iJUro*8>gRPk#FBV-`&4DXGEyL zx*6sr_MLA<@VjJHn4ABSLwG{~FeVG0CddF7nFv(v#|^6nZ^HnX_Fm@y-B*~v!GSQ2 zk`vAWE;rEIBJsPq!h`FMZ^UHylFu0WRYas1!vz!DXLB6_iq(pFkXLZ_moxbk%l&gh;UCn(RLi&=GYucd8J0Wlbgil`Q z;Xmh^?D^`-R-z`zhjLa{%k3_%RrpD@-COYE`iI4$tj%|nQ?mUttUf}OG~d|dY|M_V zZXAWNidzSd((>Umz-J7r#Knvbie0o75y%+}EK_ZuMdRZ^S99LGY7YhILBwD6=*43Ew*f>JfkEU z((3V^PZ2FPyoX|u?cz}51N`wKEOJkbcRLU#f(2D!;y>RAKa9~>eEUX0d_GU--TFL> zhJ_l%LCj30G=VpxirY*6;yAL{G&)nueb}0Mv5lTWMRB@&wD@^T_h{MW5xYqSH(7sq z6{(fE#$K071=a=q9&2S3AIdTIP0)^wPqTzZOM2KtSG56gXF2vwx82s9MUD*S8Laa6 zgCLe^4~TAJM#Jp*;s7UEwFW$Liz&ttMmLu+SBlJozz5_LgSl0^hMQA%*$l40i~f@i zj;!sI>JMsT`b0yrvkwQ)xB9D8$<@+zYBoAu`&qS6-P(-`h8_|7B9PKUkSQ3z&3!IY#YY zCgqaz2DHKFjYnMVOr^i?i2_D20K<04JcuL#h7EaD?ZRa@N>V77E|xBUs)xl$IjR9+ z3_b}M7CcRY__twuh@zuQ`XZdmdzeJogFD*MZ0qe;Sw~&xxb{aPlqf4KLq0?Fita^7 z76Ae_1ECe-2B+zu^3>%hzpllxpxO^ zn!{QSPz9p`JLS#}6@4uOBR`8A?_O#$F&L^o(;-o|m%FOPqQ{+nesQF3NGL+~FhTCW z<54?nN837coJ5-Y;*M<1*BWI0B$i{5$Nu;ZnlYoRqBo8?XI9?*!gxn|mRY308L_X@ zdpq3jAZz6X+-EEoQ9pF%5gUAl&hX>I$x!#iV0zYoF=V)l>72B=+_PtJBEdn9d0wIm z>M6q5>&$c9orT)H@X&W**#>tsbFEucCu3(yK}=@qHf{XIi}(&F=k#4&!fShLkPJ#0 z5fO-V^rg3FL2}2$oSZOOv)_^3c--0;>)SZFE&LsvBHye`Jj8UcJd*cQN57#y$_koz zkiKg9(9u>XFkE^Cnd6!SBP#n(diGTJkDo850u%$I(cYVXr96gY9ZSHhAh+Qn*Lezn z48kBHow!iSO$MzixLN>EW`_w2;?p{0_O8)E(gMe-iy<0x0Wb;}DX}dF9g1BD4e43p zBAY09=C$mp{`|I<<)w{!l%z6=7H$xVYq)|xzr`F5{*y;}X8G&B2*G-v75&j*JD0~< z4@+Lx=q&WddrYXhz0kr_n6*@!pcii)fh}1veEUSO0^b4w{8CF-FV5!=Cz)vOd2pz= zIAGYC&P^micgA#rbQFv?zEHy4Id-*8 z>ip@(Z!n6~=QK#Y{61GWRIJfcP{mfb;TjKNzxnKPTTfylNjOcG9J3vh+z5givGF=#Z%qqGZVJ&vk2v{ zb#wKHKHYxP6p+SeRZ`zL>{Z(3sVE-LWJwG;YVxG5u`f0_F&Z)bY9Fm}&={SqC&b-| zRKsNqEKbufJlGE#z zG?Fv=4nEYq&sOjSbjPMGhux@tHkuBgl|oy_{~Q4dEJW|X84bJ7#MU)hzxDwnfCG5C z{7_oRb_;=#?Y($Og6FhE0=RytxnDz zSGN7nJV_Oww|Vh@)gnV5>-Y$vMuE}utWB?^B4}PmBFX=Fm*V!VL_HX)^y8*fixx%4 zgms(mQGvoq1t6INkecL_82sw-Lr$HIf+r_AHPlZ=EO#>+F=;;E%nX_wck`#T1GOh7 z#0`_TJLO9ig{1Bt=|8=CbXwp-g{tp+D;-6XkjrTIz*ylMFtf-SaBNqh6qP^a(C15) z;|i<+n->}?3+~hetsEmLqO)Fm*A4ry9(=JcZH?;8+$*S zqgdaOaUw3+Ll>HwA_Euj+Ei?z7?xw-oceNuoZw09Ryg#}g%kN|w2Lhs3A$E$kBDY7 z4dl8n=EJY>d8?pzB3JrC;)0kBmqj=^ISn=jwF{MV;2QAg+%7Gmif0*fouj~Tc-(0s z@ddo4FpF2iz9rnfOXV>4v*2LVA07K3-zsJGW6RFHt_lD1lK^A4ajyO6+JLw)F}74s zV%dgdj4bb|@zcvCV8Xmnwqv0icSh&`VeBoVvfQ>mP(>Ofq`SMjK|w%~6r{Uey1TnW zx?4i&ZjhGl?(VLaz7Oub&wo4a9rv7%KJtMvSZl61e>F?$k6?J-{=1N9-~WBCgym63 za?1k8eyMcZCB?*?TH=fT`GY7BcCX6bmF+P|q+Wi-{^rY#2U)n3-Kl~c{Ej!M^8e>Q zBy8jWU5$;}FPi5f<;4#7o-J$a;Y8b*S6nj*|0NxQt65yU=S#AN%hkJ~)*C#v z_>#`OS%jaH$cHojT4G__JvFI9(8F$mi5H8=z>CHIW1=`5YMygL6%3_sLA?`88OD7D zD6g84e{p#JDziqxerz=?t1eqhlL~4;6fF>gOh~$(OlIf^RYFbVY+z}5%7Y#l9P~3D z$4u?co=lLA^(u23{O$$XcGit)!es-)}Y64snKhVj$X`|fDDht7&OOW zs=b5!3Izuv`~e2(G|a83dG!9%F2BZ84xYI0AC(Q7pZ1htaugJwrr(_n?7+=1v*08EO0FfGXKHaxE}xu?mW1#)(TY(lcYv9)OUzDz zJYFWH0~BpKmi3yFKDoaU=l+(XVQOmO=gFjF^Jta48a+N2#eh&>Nfzf-7-c$!LyN`1x_O;|^3=5m|0jt5GTEpKxMcr9#8WQhK()t)w z&j0NBbZ&Q8t!AlxaglScO1D)d8YO(RBWMNFPP!J(_lh9&SN+Ia<} zxQ1`;c^&uRiyrk5Ok#_Dj-=*DNaXwvsjk88J5E1!hb#cEgl{2RJa!8ZkzvWdU{Ir#D zLv?>m$Ks&xF+wD)NJso6%5eHxtKqET1n`p5(9k5Z>ao`x&ixwR9j!(ddtgt(8n*Un ziYI9O*+0#6vc0-b{Z)&s9Sw2ArfY7>#~^3?nHwGJ>`7Gva0c>DS{+P+Pz6jF4AQT7 zkOQ;B4_95|kVEyWuV#Pm$@$&VK4Un4%Q>*Ve}~;+RB!UpA?rR(Q7SS*HJh(M`Wq(& zw>*6*35x5-I7g4LVr+v{kQs}OcheOyP$L&6VuaAaD&$)OTRXW(X9>Av0F9u zzM;LZoc!41V4vAf)0J{pc4(m`?073|;=J5+y=F(b6r&GovNN0O-8UrDq*wO#6JGR(U{wH=CqB9B9C~(fPLbCgRB4BE*TVwx-V1m+O(Ep$I_6d zl`(k6o7>6>>-mlAI-fdwus%~}H&G#&)*v4LCkp^IYPCSU9M@vGIYMi@NUWb}{&ZcP zvH>RYDBEN+xt;fOp|Wa<$W`Rmp>_!}qlw!@KwKK9?jKu#T~_5XXW>Etk&RMj=ipbI zA@-9tU36#|O7~zsZW;#mx-ivHS-~1I*yg6frFQVZ= z>xF1k>@QF%LbUk1G&8p(WP2#P^c%Ob%XXHTxjB(yMV-qcsF`|IGQu_1-b-xO7xu{} ztm7I2wn#ZH7aj5EJu6ye#2yE?ua7ia(g~3>iY*35o2{aaD`*X{(d*j`GS^v0jr$MF zrnzrf8SY|hGBnRQ0YaD{K*5Oo?bpDA_qq#YSr3+R`;JSQ!!nI1XN*YhttBBeWO(Za z+T^!L^Wpi!9XI`SapzrM1*=E$RCYbpq{r5;GzYc!f1qxV`}M32W?WMo9(R+q>UHOd zHbrg<()pK!&#(3;U#|XIIv&G1+NuVfeUG+< z6tq;q_Lr!KL$FEOu0yn|*N{#X42wd8&XEe02EZ;#`Z0qBfu4%itD6=Ce0+TCy%i28 z7pK!B=`;@Ll-g3X_x4=J>RnH?iamM7rYAeS0$~I!7$uBApqpy^ftqqM9L{c$8LMCs zah!pnZcO z^u+cO79H;-#zEW^&dD4gfJ$Ze305%lygp9>^PQP9Itf$eN@SL3eVjO@>uyYlMi1P< zIH4C@fE;%RByl;Z#D{F^YLa;N~C{Wb( zvPd0rNOb%_QwYPa_1G`OP>2beR<0NA3myiFa5(%I;i{^}(7<<9EW)BwTWPO8NSB!t_e0rNy&{CYC{iq{HR2 zWnz-8FfZP(1v4Ez(D&^UR%!nYZp!TSPCJDluQu4kww5}f0S2}Zp4WyEn7?z?{`1Z_ z|0NrQ`KbVDH#*8HXR~Y)~dz2&Gy>dMqKE1iq3phCd+ZMPj zWuEv*Q|EMuaYf|*if*3M!ze4@vYen^~%9QV!j z%KAq|s`bql)98r9sqwqSG83dN#8j^{(NAYBdEfF@x^r5~_6OeK*IB8bWc15&H7^^* z(iEY}!@nX`7@!|m)oR5zTVOwy{}@a&(|AVs=1X_NrUIn;Ea&QmZYbt*tPenkdz!nM zkuEjIx4`Zv_>Y&lbi7e0{fv+@edJqT&+`TiZM4Dm6+g05NRqsV==PNs0{<=2UO*+5 z^x8b(vfjckW8qd7MSLETv_ggh{NjrRnII*yU|`p!*nT+Ro&zgDU?Mq`(S6|B^`I4R zNdFse{e91g!~fPXvSYj?!0O*(;4639l_r$8I(MWyE|#;eLlx`)eu;tr#5ty$?@^5w3xry_Da zwJ|8$TVYgo+t`jf8M!vnsz;(^(((!bazj~SOaiO@p=ez&y~6#sK;_fcs558a3WY_A z*7xMH6O%An7==H|6O#ujh97)lHzGsn);DOYj&AUd1o{$t%UpXTlrL=QAe$oIXJlNR ztPk#CZQt=Puo=d`Vd=!@Fwi+f+HM!R@1VmNcGTz{y?kA-tZYaASm%VVmZZ#0&8|GG zu<8cIT=u|aq*j}>l!#4GLpXF|`IS;P0{+X|NuIcFBBwK6aVx{Cq{gl50CIcyrKTV; zR@XS2;2=ctOP5?HESY<2C{cK0*2WU$bGj|2ByZX{Q|NgwX+wlM%k`G2Yn@UHyy zgZ+JoDF3HJB(5Bg&?^th{@i7w+-y@mdbC!#{nF_kOq2fjz*R(Fyt;%eW!lJYG`e@1L{?Ws2F|k#@<~ZqcQ$MV&&2qFxgv+D1 zpZ?q{E{=kAzyD)OefiXqI}D5I5QN)o5lfyFP68g|M&ckFh-qb*ZCkck6{E^5>Sk~* zN^X=Hl>GrK0eQLe`d;)!1OcDFg$7^S;2=lOJzI@`9legDh;P`S`56}$Y-0H_jiogA z_6i~uojZv|tb{kS0sT@>&!&%K0N2g=NECPZ_KPhGmC&&`x=cQ_(D(kPo%zjyuXQf1 z6n=bpb*bj@eOnTu|7_-)ktkvY2Zp(e-6URu4NQVTSyf8u%G%|1snyw~dzMsO)5lEt zQxoc=>|XYmZ*Ji;KQEu)b(hZ06RW}WLZxzx*-kjv{#d2#%ObARjy+h_A!UIgy0NQod*dPHv;INl5_ zk(yiU$GwaiUc}=fT<(f&l@@+)hQ5WI6gHK?g}N1@V$FDjFdX6!88dwBzrJ@m4M@CZ zsZK=aNq=e4A8xPzMwnu*k|xD&);8JrUEGL@lWVsdAv6WVW2QK6ZmlV!?+!A|f=5~8 zz}YGWojv{K4mS=Hck1Vj)eZ#mPMfTwJmq0_()4U;7IHK(Uw>moR*NJiXx?UMWlX8a zTMoC|^z#U#P=8G0?^lTaI6ADhJjm~F++|GCcUon$&U zw1Gsz0CS`%qW0{!I!WLCDS87q*ujhL^UpoSBh#{Fc$?o*ya!;FlT+AMQvn74EE|gx zU|>u3F``UG_|ggB;~5^msP~X9m!H$v;W6m0N*{-CSdao854wj<6S6HTDYMxI@*sJq^oN1C?K?3VHE)|GwIX`d*M@$4*dR~xNR;k&=> zHzB9^e)<*em^QYMe&D0l?A4u^o!R^#b!F@PKe*Ea3~|AiUfC{doZW2g_~=wY{U2!F z^r+0WMV`Q~oW1{TA|2}hGu=famb?S`^fF5dLJ2pp5=KW_I);qUC^t)8ki&m5z zo#$EoKRvoUISbdH!$~@$3&YD!o1w@=L1RJ|~>~p%QM;_ah|e z*9Uw)4+)ej`a~`?d%d2~|GPftDW~U#?dugtu z?c2N$1J7y{r+H()zvT3vbh(smakiJbdx)PgFGKopm|6=x?G#4p-ipPNnN~DR`lZM? zsC7!cC(C&j>t23#i)q{}5|W+SOepj-_Eqg#?}ri78RD6_y{9y{y`S&cjb`z;FfobP z$Y#q~30tfxtydo8DX4T7a}a_)_fhOK@fdPLRJ(`fq{aeR!m|c& ztrin`r2g$H5ePJM1+x=6rf9s0M#{W!X|zpi1hMzDCmmp+lMQEVi!}Ub3cSzhHL<|10cqIk-R2S9b)n{*%pV&$FE9McPolmw8;XYpWxAn=zyrg*- z<+s@X_+}g`rfhS|ATn=J;wJzW#D;-XwwKBeY`ayt?dxM{L z9?jJNn0{@d&Gh8rq&@ldCl=7Eg5CZELPuakVC8@)?4A9}Cw4QH*Ku@;9mlN%n74qg z-`upVV$|5r4#0khh@-zr>j?7#VsV4BfDpnW9Wz%T8eX-&S9?9?D$^hEXqf#mZzdxB zttp!Tjxo{vNB_@ou6&J=Qdum2oL)4t-={b0zn+4cQkaQ~bKL z!Y3=BVI$zq3FjiN)^^~aaCbuZVz zsb$e+;&B*~4y85+=?Ec-C6vycA0ziG6?Nqe&PRDzur`i1+D>ays}~S&J)BjRrGHn7 z?SsS@bb%0$!0&m0iS)DLVX>V3fuYR#T{|n1);YziIS!+rdmE7`-hOC|KW8QsP1+h~ z+hQ7p+|nWLs#PpH4md}ESX!J#_6Yk)yg~{SE3vHcJ}7) zF$qj>JEj;eZ>6$2d>-87y9!Z?o>1ij*iILI+<_!X*h5HCAUz5uu%#7~>BWBR><4*f zaIo|)7;H1U_VO&L`VI?;D1=21f9SElZ`lGO+s>2HsSd>5)tfJIISSDy@YrgedF#Zw zLiS?^Gi_|)QbD#Fl#Bb#PTONrk=4z$HjwpH3b9RKa|WK9X}$r02N8KsFF`U4Q_w-k zXtL>eDLtC9@%x}&Nm&dqJv>eC0p94Z(By{!U4z`-?37H2x91M_DBvv&Lm7>*h{J}n zQS+r5BzaKe>i&@hVIr>wV=~9oeOik_kBejyPcqiDR7xVpXjyEO%3pAqG+q3}ZOTA} z?~e`IZ(=>9UvyHDKaO+@m#(3dF|54)B;Mexgg>YM?>^Ky(CeyF%Dl6|yhNxJc88Rd zbQYwAWp(^0ve4k3;A!j3IA4+#bw2DPu$s9kjC5;DP$E0%WPwrjbgF8=iRt^ulrmMBu z+sT;i=jdB_oMb&?>E*&oZG8$Z@oH8m`z1OI>eniiCkr&8iq$y8gV&OI<~S&&A93Uk zb`REjB7OozRPQ|gkUmC?RGL7@OVyqohaJeyVkjzZwm589E;AW~R?x+o2Ib9#>R1;JUVLv3^8~ z>+uoq_UhC+v#V4nx0Lf7!*G*!?1V|vo}oqR&)=BQSYEH)>FMg0uU|KFyBt9J_%5IM zRH||mp1CR}7_9Us42#zZvX!eFy0=3S73g24S|xxeqZHoqvL9eZVU$K9{hxwG%(PMo!kpT(e7m3FSh6u-< zT4z(Xc~#q?NtPb$_I*PGLVAkxL^r$M4QWXG^EM(e`p4iPK$#iN|0ek0SXZ9L`{m0W z%~~9yp^|;j%HjTX+eo}rMtE8wyO7$qj0@+OfI6o&_GJU0iCZpB^B&+~FqOKk@78oI zuNL8P^dt!bjb?!#j!l8aJx?aHER?GO<7pct6c5F7+r>{=^0B`i%mTqu4rerP%625+ zlA?o~5M{AjRC6yv&5D?)+_6*$XQp9#E=S?lf4Vj7Du$!O>Pp;w#1?3^(r&%r?q&1bBxGJ4bRuXSdKuZ>}Z&p18}jZ>@r;J-yY@Ug{`S+C`A zl`VA9AcRU-JnB9yEKn(q7|kv(W8a2~0Z2jRS$#JnVcI)KXagX@p`3o+4BsG?V@`^* zY<-J!s_bcC`lq7N->YQ*LPWg*rJoXW{`^+r2GmP}>-s&%W#mnvyW0_-lk@(-%}-k$ z(_G7ed9p(PK~RBK%_|D+_Z;!|zs?a7=_n(`DvfZ3(-!CsacE4|5M<^mRaQt$m@)n9 za;;HY#;5Ag+|tj6b*8>Hth5d2fs4e&^=<_~2sP z$mYHYX)N@bsE~^@#-Ptwww3XDjE=PCJm0>?>eNmpN~MlyOs5OS^=N~%lLz0LbX!UB z2DohtX>p^jh3&?yY;633w4`D&?vwP`IP;J3$=v@*Bz|%(BwUJgsHQhikl{y>$7=nO zYHD|~5)bHT|)=pzqn-GXpDMbeB&u2wNa-THxBNZ)^7^~e<0$94lm zBA)cZGf^(WLlp!#=TOeW##7s=QjGu`1CCj-I<~3P!gM#GYwxK?fq8a>^3p&gq7GnG zN`$R~!o^RDA-uv&Bsg$NmmBm%LzKLYVzmf)uIfjF@Zbav)JCukp~OQ`A3QQ8~O&+tLZ{FrkJEangdAzws4Dh+lZN5AnwxpOhE zfr#&+(!FbGDjx;a;7YZMzFnJlA)BNTh3a)S7Nz1R(3rKn^b>bEMChmra)~lb~}@& zP!I=%#N-ES|5p9RU%6iOlyKCPuhhOvWC1~l-E*Ug!edO@W;D{A|6E;kx&RAyho^Qw zHj@x;nxg9>f4A;D3>}_%1)|UTf62JP%TJe>Y|%(;@dokz{J-D;O(N^#9Tb+2;)euW zG!QvzREjQY*_GYP>%cz(KLI10@m~M{Xm|q3j!CPf+sj+%EF=5@PwVJ>Dvr)WbX6GY z$(%O)k4_ewUVEvYkonrRh5aWw`uzz8`?)t02K9B&8GJ{A75hokT}FqSQxbULT>(*hmd zE`!S%T8pRpO{ml_Wc>TTVGcw3pixTq#1(Qe+x@yWTD<+l&Fqb@BnU|GwrwVKaF&ue z%scPt{B%V_z54lk;O6Si9=rs17Rm`StdF_}=Y5!qH0I;6xeU31UTL&Q6vpEyz`p+` z%u!wMY$A!<=7M}VLld%_#cZlc;OX5E?G=gCrUVAq%v(K=NxG?8cNaoXM2%F>`sq>R zDl1aViR(VUZRaemTl)7UcUmU`M=#n&Cn+;l3QEWJ8gQ>eresW)w1L33wzivWEex6s zAz1h}jK*DI1iaTPU5N|n_D>CL$HkoINmG|1Fb?pus66GQRH_G0i?us<=8;c!l+_Td zN4^!k2d;j6cO;g}I#UNXD;2CZT{Dn&3qbpHWi4D++UU?7Dbm_=5A}%^W5ikoZF^7) z@krfc^82eN_gedT=|@SM?D6jKJ-v?ZV&xVah6uvBL6G^xk$-usW}^oJ2#66JuEavY z!J+WeGd1n+^s!I$DieJ2AV$>xyz2MaQTP=bP8Op)1>n?s!9Oiz#^UI^~=u* zvOBq?fYsYzqS5)0m2@dk=W(W&-`BVhGe;9aN{m;78c0uRl4U$`ejzsafb&|l8YQpE z=?oH~N2UXik;~ROS!XSy(?!tB>+m=VDJSO}{NTB|eQD9`X&kcpS#lS4Mny$WIX6#O z=Dx96w(Fjv>id~Bgd&pY%0}sp2Bm0Pn3sEZTr-O_iTL@dfKyg#;{e80%~eoXczfI= zj1EXI)OlV}chY;1I<@o#((v7D#dt*`7~P+8&pbJ9yuW|kmb(ODar+|&GNRFFT>_)R z*lUgyEZtTt6TdSc9H_}vN|@%bB)#4W;sM${oKWLV`)p=bmKp>5LY_&z&MhG0bGtX_SN`>B_Cxeyh5v%*0A-=K z-CvZq#ScK*--37Y>gfJ_q{hxjP`OwE(5jTG-?v%g{`GSI4eK#$LOk={uHyfZ_WyyB zJiCyeKM)@)vpBz8oUO!Su^D);30q^{-+;*1_!QZZ$YM(f02w{$%UtJryOp&BI=VPA z$c`;S{QMAFH3z?@6WHXGCV^f36w1j_ScWyVBCt ze!Hg%f>#>f;oyXDW_A{S`djI@;f=h*ZPxK>^B9Nq=9(vw(hjk(4*yUkW`_&rD$D#{ z^|qT!mX`!nXR6GWlmi1}tkCvHbD@#GXm=0ncG}RkR5EF8b#UY07F$rn&!r(GftDL2 zb^u>uJsQRuia* z-O3j@{t%i?-ThZ?Iv-K{)zD&TQk*R1Ne%#EDvHRmz@x;s_7acjc>T<6mfKteawKdG9g}TXc=S zwvrP`n%MAXr$0p(|6KC#);T&mud}+uaK-lH=oeIie&sstmFv%=2`#pE7CsH@j1|gC z;V#>H1uCnY9QKK2@O_hFrn3pZO)6y4q`S-oa79sxfkcj=^YX>S8Xb}!@jrq%^tM)q z)e@M^PW1=y_~Fd=*f*I7Yi%$c(s=xYw#8xH4}Kt>{&&VsAvSkg0fc_-JP&vSuy z&tb9D(g*q$8kwMXmN>gJS{$kUsn;XEMsLfUn0Qp&0t(So110@@{}-u5{@+QZ4FFYDv=Jtg zM$W_V@9OR%A>SZ~XH*hf4r2)ldq*y&|-C zC;%h?WK!VMmnr?iyYm5OE7GEiuAUye&HlL6#>Y^vqlDRU*;Y*go!(ysMw<8C_6G|! zFGWMp-*nf(Q&pIZD3cA1!y`B0uFU1sVa#(hoy5GmL#_50UgfGp zlea5_?J()4#FD8@bn@ z?|VlqMVHwRFTTjpX(8l^>Q$m;Y9Y4RVowm_q3GwhDgwbWn9>h4-|R`d!&v)n9%3I+cxUWjinh3g&As8#oG>=bgY>q;}YY##|Y49WX#>Pt(z z<<&#K-peu!{~_$@K-YF=1lj3laLt-*2?<%(%GG?B_N>(fxVSdQSXx3I2_Arp!+pn| zv9)&I6M1UB&ROPY_tWUgQLQWa%V}6Mh(4K_;N1bhuSJ&7$1F_9u<80J-SP4QVLWU` zkJ2&{QtyPLaU&Et-Kqe~7k!ia0wh`f*D6TpFJ`b=^xLv$Sj?f0Z$}G3Cmro@%7Si~xJrd7`>RfW1ycDC zO-n*BdcB!r0H^`zN@jD3p5M@9EbS&>&9 zYmnz7QHVqmq&>bX7#eU}#WjiloST0=byU%W#Vz_rA~-SpU!bsUI{*p;2c+|B7Mb(Z z!uG7Iqoo0|&FFoj`t9qW@NkjB8V$eU%mjv{K$9;|2_Epzp~nCBj!SyISTtf7qI~n8 zpqGD(8h__1J%9Mcr+DV)6@fNzI8%?6z@!D_>b`4-ftWLwX3AW@trEtQE~v4&5%!q- z+16pTzD3~HVeyrSe}}I{hAv_aSN)1|F?;Z610b01uFcj1t91*yT8DIe;!GM6cB+?K zTq9wS33WF2E@2VfIuO7S1hf62FAJv%O1WB9#sd-s?ID(*v>@%aANf;B;_n8oYTaQ@ z_YE+~xH7}#=|a}ue`vl#+?c*O-ymA4*p*5XgmHJd_G)az^GK@wfZ`oa$cK}PV%7Jp z+^Eg(!`#`eJxYzm6M^GX!!XEb{K{0Tk}lKr_L|M^`1>r^A?||dZIQ<;57loX#uR{^ zn7}C=?=fEQ?JuLa?VPZrzwU|G%P3IHaUggdI7n}cd)=mZ7qKW;VrDEDL!3}9?V9dz zxHMd8Hk*w@DT6;47`MpweQ+lqV>1`jF4~z$M)#gbg9a_MAk!6%NY?^o67v*BOyq?ie78=Ud&w35@ zly4H(m(hUl*-Wbvj(4oZwn``8@|gt=B3|YdU=a$8_g@cF$gihs|6j6m9u(#NeGUc1=umGw~ z*3RO^r(ZKtE1#|{x~L|XwZdqTOo)?6kxEXgZQm%NWh94Djb@eUtku7Xp!Jp~N7F57 zvKKoL$LS!E4dOv|U{G0KhAO{~$PfLR9`D+A_>HHh+-9A~8A2Ci8tjTC4rgKS+#nms z$A^*f0*%d|?aRq#;0LE1q3oEb(EPQLP5HXUO?-L=bjH|9u7@x!q~o7a{%UdywPh=^ zJ!yN25h;;kUreyT(!kD0kqjUe?a+*>Gde!nyP3{{jDn*1r{1{#3spO&*Hp-tt?oQz zDo&)jIUnBlT<^5yG#cI5y8~bWMY^DC7}YQ#e1xr5_3lqd@XG@5$1ev-k7J zCk5%io#=Glxs_sSa=JwHf51R~iHdsx4vh=vvHeyVFu`-@i~TufJPN;ONb(!vL7*>T zX|(XLz)Q3l^lR_${yOztTOJP+G5>y`SM<T=M2&8{(|I*rn$;`PWhY$e>M}x#rlvlS$@(rwZUSyub~MgUXdMWSQggX&8cHSI=+yoaxN~swz;MZ%-c;K zi{&r?SOw$hlNDN7xsu%7GgoO_ITP7!k)gRbn!q!{q0OaZ)3%oNz*pwQlamJ0jo_)w zgEL*h+P;*eg>p1kRFnHm1u345rqYu{PG$9(Q5{u{zY??`J6)C1D@~3nb)V1*_Cb zR{7R)4hAxUijDV>RGq|>Di5H@lFlcVbtC!mJmP4+^LxgDCk$`u?M9a?{%-qygjTP1 z@aDuzWmUu0kLt72*qX%ygR<}Upt*vZ>(m*eT~Tl#4Qc7fwOpyDdcK%>Vqp0XUVCEo z$Fd+oXkixmR1CrAFIRng+u5R?mhT@|+WNsN11)vaV>jU90ueFA4yE=ODsOg?=Q zqWir@ruyuS#K6xvYI!%Ys04*AwUnn>?aAgbQ}d=@Y*=i3 z5B~I2gc8Ywrv}fZ8VucXr0L@o5$WPOZv3IhZvA0=Zt`WzYmAa5eohr5QY6cU;YzVI z+-fGI(soP7h&79)@~DqNh##3v#N18+GgjMuhG7u?){wGK>1@nHWE#I8Nsg=TS)Izx zXf=_;@f`+Q3lZ&w+ReEkd&x2)R%xo}@FM}U?g=E~u8=Ce$TC~}lwsMnFz?my#K3!V z9^>ygK3^HxXmKUK|Ckbk>LAr-toE-iP0?WpQT$^cW~MwOJCtp*0bvmd!cGM*uAmd>5Db;8iy0wQ~mA}il;TGhBfz7NH#9x=QRi% zsh0##Z#N4|8;O~ju@{{CIw#(vpkmN`{(v$@9U1s}MWinz0ZdacIH>tniu(R?6-+b>3 zKF7TG12l7Fr4S9Z&`G(hrP~|ky7je__B#_IRwCneGxE{`_P1vEJT7nIXybeK;)D<; zC6stuJk-?qx=$0qt8rs25s_Tx0c!(kg4QoSe;5Atb()PQA^7@=88u^UQW_`W%zkh# zT)El7mpW5^YJbmE@#SKp?tt-N-+rv{oIiqL))A=M>Y+3R;L^XHpi4ipOB>+w-15Eq zP-{3jT%erQR57=s*^!7hE20uKT0Ad{Y1RR$L&%AAqF-XWmA5CntG@+H`bpxgY&Ies z&G&$c4gS&`t$qh5t8=8Qr8-z8N95{#wj?^O;XLz`gGZ4I-L-8(vcQ6BJo$HholNTd zRD-0Xh#$k+^i-5N5nm2u4N--PEG`xhAGn?=)p#gmWk41U&@<;ru(5zUzq)@2xlyBU zr6ZG(@U`rk6|OD!-Pdg&xfS;4DD~92sOk`Y4E#PgS}Fg9-Q9cuM}&Od4Q>WDaAR4RL8~FJJMimHSgXZtG})f{j3$ z_GMQ*#UtTd_%9?f(K#Orabe+J3)^0~iuSG#Z`Bf`!Q zGtb0SLPk%x0j#eN@ZB*2O@7gfzc;HmDT<#;qmnYo@eRkBRa{pm}gDqLP(o)4@gc*J{WF4vd4yYI_>`BB24@J;({ z&esn`U7YDEHM$H#%u30?o^suj%obraU@dyCQHT)g$;9bHS(&Wk<0_F!mHDz1Hd!G; zx@=TO!ad4J@8-vX`L}Jwp3CVwn7*@|sdAiKfi` zaxeU3bzpAtlOJcUQ5ZrZIFLuB$9-U-g_rFmfebL3cxRMGepT`?p3cGpJKZp3_V4pJ zrzjtp+p7~hZ5{ZVWz%iCs8$^j*JT@M$S5mwI|&FOOew}^gGac zEzOTzX*pKneHn&z9bKPiY?mrn2tP9q_AHnKwyI_YBdpgUdmO-?R;bu| z{A_s$JUy2=m#q}DFJGEr-IaWMp)`X)o}Y_1KX&QTd=;-~1d#a#xRt;I< zz7F8=rCLv~MjecTSa60%nF&4V6_Sb!A3JLGCo}@_SPjr&s zG`w&`?)ZH z{?K!PvA9)|f$c;3IMiNuAkGD^loks1LkBFGZ!n)qzoc)CZw_%Nm_N7s8XuaR5T**&TuGT!2 zjVoFJi+p(wS+U6#>QybCc4o7cpW#z|w`ca+BcLKr^2)J*pAiR##ai2PPbG!AvYat?SN`iQH1u zt%JdPoBh+^hMWdvNqOx~f8Ikr54tcGH*BcAoS8ho7DRwSO~#kN4;;W*Jv3`yKtN0IHxP)A}=j@op@n!U3? z%<3wt(bA7*D*;d+!7Hh!<}CC1t3~B1r=*d1te1;1`NNP(d>$lN;=H`PuzJ+3^vZS0 zDBBzbPdGo63bTtaHE&uTY_AFV1q4paYo$%hiBy#v%&M(CDnc-9abq%eS=K2F(*{RI zn5)ckvML^FH1=G8y`WMAJXLrWPac*V>?K*#LcvHPRz9bT3MG+ud)gGJz%b(^ z&DO<6q9SQSn%?u?%NQz*w5zL2`}1*Io%2m{nI_j&)#Awt3W?TrC}m>9y*Ph^E%GZh zN5Aki2F`RrNaU-|r6OZS+ngqwTYP=gD5H@IoV=%f+T`j;l5O_`eAJZ{N=6nQ0SqQx zvbIH<<+#2EmyTJ9O);B`O`$r}+k1@!xyA@IY}qUl^~c5O*qK&Tq9&$cR3+mING8pG zzx@zQ2k*kl*N=6ls`#M29Wm^&#`u%Q{@LY>)%_(kznXUfrrKNJJY6C8VP!tWfN*g< z9US9e8Ykucye1u*)jB)rAd{``>&2ecXHZ3zu2!#AJ6oYXz| zFECj8&_0)g>OJ7Fg<{RiWz^-?&xO~Rfi4*qdCV$N&jlM<2-vGopgtD8@jVD$N?*7@ z;Z#*`D7DcJ-W~e;W6SDauHY^el97$hx=M8$vT zf8TP!8o_U|_w!4LV2ucPp1yen9f3kPbW@_Sn!!`5TCaR~-s`9#a`;CDxE1;RE64iTOZ)%mQk*N}MQ$*aEz{PKdOtCi!gw4<^ zN6mr4^@@Xg%1zXbw%uoO`zQU-U4sqxH149Im||8|1uKeOOdCEljG605iu^SGs>u+% zOL=yk>&}dObZU9*;F!IqrpMZq?4ErrhE!kPYSWVgK6wwg9nwVXOpU-JVZ;TDVjbTG zW<4ZgrIJUQy8P3(9xAo!DCh>Se<%S_Za;&j4Kys7(I~1OC9KbhiH-+)UzzcD$#2*1 zt4trczdu#>y#>~GGqe$T-qRe!*$jhC?@C+W;GZs0#=EL%OwF*LI}1>iA3(R1&e@{| z+&rwoDXS_I7uHFs^zb3#aEe(mZ`=&;P54FDVu4|lfgvJPiKGx)wm@4;vG~!yp4j3| zhzh~2lmA$C#CEN@3XBw1byIrp<-vW4_I4tb;1t!t-9}fa5_rE`3aD?rp}=AgBiV7$ zub#>(&4wa6>Qbjfr3xV&pW^5v2Jw^-9?teZSwPtt8yoM;)Kf{IGlc-N^>?X^IP{Cs1GhEpmHAu*uN0on0`ik@P9*~2!#Q%d!yz5)+T7(qz$#n5_I>RGWR&^~ z+x(PTYYP4*4AO=`$H#ZeOmh{2F(l>HqRm@UI;Q!z?xg$b0g2myJug!}Zw8$w9Z+JE zP>8Br4o!y~d6d=41{*o>KcdO#!=tYAG36ogivN_^^Et{jdB9Vm)J=czyHMylUT}tU zI4{A&X4xF^)cjnLNEd=--IW!C-09IcZ7=FOXX%)P!M7{d-JS<~@ZbWA3S!Qm2Dv_s z6Gpqovkxi!>L#JxAL~W~pRBc)lyMZXcEY)5%t3A-R2RVkkaw)2$DnE{}wYUp3j} zTPBIPSjcEN0!3ta_yXU{uCBf6)Ak$GU%ThjJ{# z%}^YiikF9S99c6>xmd(@o6YkdVGs}?;4tCBJd?0Sdm_%2njaEg+zh4C(TRHKJ#In< zx$a*HnT%U+*GF~000hmR$z{{e=?b$h+^om7dObe9bg$8KVHzl4y5H#e4Hc_&9 zJtzNNKTnrCWW^V~%m++xbwA57-B zr`DwJZzavXy+vA4qQR@*7@TN(G;UciqH$g{U;wf~=1Wn3?{x5M$!vP-Qu6F^-gA+x zVUR{|Ls;tQS5F#l3L8w`t~?cO%H#Rv*s&5zG!M&ZmE|z!JH#JNUcZpCNOCEzD}vh(z`2VHoPdq@3}W$CK*U?L~(UA56H+URqds` z@cbtWK!{Mt5ow|Nj_ch|8qLRRo5YM8_QzXgIww!=-QG2>!-uV#onh(W zf#FvD?mE<{w`JYa)txDt zWa3k~aJ4KG0@3IP<{ltog99NGpv`$S+u#~*8DcNwp=t8FkWO$I-9V8h@@*1;2xTsgH)bZv{D%@S;JNn6D4t1GHzp`+ zwrRPu(jz@#?q;p+K{ZRCC^d10HB8+8iOIT6gT4-rr|jJk-{!y@nF$KPH)LN4XY*m` z6Hfa49q*P~K%ip2)<&T+#&;`V`(MQpiDoz`4sdvd;VBQGQa|iqwn%daXX2*fLypFW8(W}6$LDG1Ewa%R)BObTxj1a)&hJ9Jr{Uov-u#5 z!xY{=E%zd4C6@m{xRh6`O4KsbwpKQx|Gth9AgS5F`DIcU^0Qh}72RHWD}=JiUjrCM z)ZZ^Op2IT9Go1x)=bAS^&xG6gko>SJtW)=C|MRi1>SMFjG(EObhc^$qNwy~+AKytu z!vAP^fIBu)0&vqR&y1!5SY~`sb!>>4|BqpQGHRp<+43~sU_PO@3NSewOu3qp8I_Qd zlD?!@H#utnmeB~OGWcXWe_D8P9rjLP4u7p8ECk^umzmFA zQ#_=Zh^F!3^gXrl#=1i+59l-VV9xhK=`KJt*{FiA+F9zSBk}evOw&GPVH>7L_u`1& zp!n8F-n=-LVb5!31(cEj)FG=b|51w zB!REahm{mbomA-rrpTk@*TH`NYutKtGf7jWKZak4r=Df#;>IXK02^~#Zrrk-qAGU}Ckz=b+B_4vxqwstTeRI7{1j8hdw%Dng7gi+pz?_)Ks z6YXlX!=Lq_U*u%_&gN)x<|7tH@VPdvIfRZErLymFT%}4*VWew+@Y`x-vlIp&A^<=c zT7AA<;05u*8&*bZizTO|bUk)7z7xHs-of7EDkcB%z;4f><$IE-#mD5$OK==-IU8#aeGb@z+QZNOdIJYcMorv0C zcN^|87UN$xS)iD&XaAtRf}PcHJM5Zguo2RfKhvgF|D_-Yd~FP#30Q8N$$+E8{~wt9 z-<3bW7WoZsXW3jPES4~KM7<){KAU)F2E1^EA6W65NrHzRaQ%bwp6GJE_-C1QBnKCV zX%7z_KM)S_Q-=x%?D(1Ogv~tzQ6@^Gbz0CDS1V&aXBAx*Yls-3jv+f%#ina<36^SFOt2SA zn1=e*J+^b?n>~wxOnA1JDIPJ1g&xBO3U0pGgZ;H6hcLY%p4d7MeTipmd{+~_MyaeV z3OQdSUI;R&s==|d>7vZVHGSZto8<8ohsq5Ignl?p#?P3Ab+rc`I!L#HwpHXK`OpqM?i5DbXZ z7(b=?A+Q$2a$a#!&<8~BBIp$!#u9K5i)ghluh zCytLzB+|gs=20=QxiyO$95WSmNj^>@ z&Fnsd30`!(oz&~Q5ryAAe7~N-Cr>gT$?Zqmy{M~@;XJr2>V*zQr79MhiT9T`t_%ze zJUO_LY4bQih)ga+(~2dWN9Nkrk@)B7wJf*l)<@7sN${Csq*YztL7;4OY!&3_kBd33 znOb6}21YM5Ef7u02v_t(GI82iOsC+xGB_+g3PyG^5}In%;fC=ldD+Cbl#Fdn!IIV7 z!)&hdIPa;be~!nI(i}|RM<0KOG7yqaQw_fLZ1Q}My-2;^HR^jQPs{j@C&9_R$$Zom z#7alDlIQ$!HZQ8Sk(*ek^Q?jdeI((VE#$-SOjvrK9vmyxCC+-#)t+0|dyLFFMWGb! zJGgIem;8c?`6|yTPus$72)z7=8*M(%hq%&vf5?`2M7@0akTU(MUZaX>9VOPPzYo8; z>Y(S*+-MGs^%smU)DJ@{SlkrUnhAFyY6JAWl zEYlD7qaU#GgA;+45Rr2I(3{Q!-{+Ao9RwzP|p0VaJL>wk&=x@cpYqZsq+~0Q<=7$T*GS6`{PN{qObH zTR;@+xA3#UCH(b!yAGc(T%PVl?&qXyU3@RLRM;HHY2uFXLb*F%DhhI7g1sScVhqF2 z{`*_+nSq=XcFx`N)Uy<3$25(FR&y?-ofR2ImC!#Z+GDz~K^xM95z+!axD(!@@tu(& zgaQHVr2@j4A5nJ#I%QGOn*k`J?g-Ytq5|5|=u_7{e?t$aBM9=|9_WvYZPBHQwMs7o z`oHi98SK|gi}+rwEz!PP!~Cd3jcMPzkc9(f+SJ2 zT4ztq+2IQruaH{(`*g`*9p7SoL=Ty|d+LVxQPaa%FFy)yRxG(M)5h}7^@@HDe3Vt$ zx@jf)`yjjp(>SyGpCfjOFIN?1sbFq4u4VW;Z1Fm;>h?5YP%6G;I|ob{$MxxK2(t6E zE_4lvl1YP&3yVxic|~G&95%2noMFDPu>P=C!-t1I(P%lwMZ#agT$Hk#N)vF1;}yxG z97Giw>l?7OUR^)<@W40GHKj|o4qo8{gEGa+_bz6SsMNv%XN#F-{k5Umuxq<>m-EMl z)lP-$S3+tv28W@6aWN6Qqcz-Ar#IhK*y2WmU3P2mQog3L5fwtx80@Yg$>3TB48DOt z`yZyDKOB&D@cSU50@%trWK%$2altcTCowiVB$r zd3cul#L0OC1gztgwlFaD#md-fICKC>AEQ&8e^KQGMm;l;f_@ zXhTZy9zJ_XdZH2Lkj)ThgB!7}TuwR?jS~yG^8K$;TFf9s@_K@OlhsKA(}PrEW-Ri% z`$n+@k%znI=j2mB96Ur`Nh@!((tMxVY!|Dc_#dzjKYAPH0(wo7ct4P%Tg=bnV-;qV zLlqknjGmzNMDhIh4|aQS2e-BiTAX(XLSy>TOLxBg!AD^TNMF<{0>DgJq^#0pql?YE z%=GGIF+e^rnKh% zn0tkzW@gpS#>V;)D>?8yMZ>=tQH7oslDdj+`=yG^`xeJHzg~<1`7r;@LNlhwxk(K+ zOFaXMs5%oti|JoQ6qWp<6Cwr5WuWz`&S`@Ja4mnBbH=c+_?@%(?|a$FC=hnFF=wsy z+gwf98tPC2nnJ`bgGZRM&`DU4&$wt^v*-Y9WE1jN*584g5r^_MtifdC= zO~X2trsyBxXmv3dP!0@?_!GTiKCTAm*NdS|%%y2Z$e={Unt|fijBbq0nj9tu$CWb3 zsl{UoxfCKyhj&mQRH#)SDzp%R^|q>4@{=y+NWu*>peevM+`ma=meevr&?9VlG<=D3 zJU#XEb>B}+FXyPdOPc9w!|&v|4**;{>6zA}WPP*4W1*}|Mmc(7^qO6xmA9+WP}7n6 z50il@>Eg9Yt0_7b-7m&aBJ59anjUVr!qvTAW@WZxYr8b>oRMY1rQUpHpmt)-bGf)Z z+L_;%xtt{C%iz6+UDR0$nI_?{!R#~IF^w(=j^FweF4xZZR*W9o7^_cr=_ z(K~BH#ZIN-3rpQL-!n*LZB^XGy+`h%PID#OfM&*&v^0N2_QG+ss!t}kRzsE@tpyKuw10i-Ky7&7{^>0G3Xm=CN(FAfv+jQ?M)WzzS#(ZH z3l{w=5fI6-6%!9SCnt+?a|`%;6$XwjfCYM1`{%^pIXQK2Nf}viP)&2S(kJk!of;Yp zW1LYO5{p|KkL#b|KeufIAvF2b0z-8pQ@3Z@@=4S*O4{x5UqCg*y*#sH9-( zLN=vmvlI*}kQgj(=I(sY#qD_fqS8P$IM82JYflY#;9(4NccXoECjESbzpHG?aqKl~ z^4@~vw9}^0(Pqq{WYdhqoDV~N6`T8Vz=U8*gFZo|r3@_7d|7a}H01JGEYk?fNaDPr9j!Hhg zPRIs?(c_KRxu_?X;ViS)dkZYL8_5f$5zcl}J{m&n_lEc9yH*&JyHj>bWxtmr0kXIO zyO<}218C)0xyJ;-DF5{6OwtVJnqkoDx=5ZRVE7W1>@!RG-swWfZ>cMXbH%@P*tXq+ z(Cv~Qx8uByeH4!s0YHmHpN`&cjM($BeM^U8FdM^N+!d^s{qb2s)@iY0W zE>FY8Xm-FF&CThH$h$ySVe%-+y8md~c#yEStlxHXy}6i~XFWf@k5_cOz`P)c&pj8bNn1vf=fOsJbPU&D&S`DH;=ir#64<6IyhqO-OJPx9UR~&ivIb znVxkNzO!4rGkOUDpBKF&Ij)sp6pA>jv07Y7U2SsOOA2?r`IAq0^s_1yZQz6r1s9N9;u5__Vl~TY0rp3Vm{gHv=h`@|LFDEp4a#)^nw!uTl)l( zVnp)bHK}V|sBThig;*S;f~Xb07YTB#s@gYeK@4X1ny~uhJwv1$Zgynxe~lgBqj#dr zp-Y)!JVQj*6;AGXBst8>PBOg8dH@_3(A?}+NZ}A+QHi33Dxb;+D!iLn0iQJ%z$tus zujJq3i`)S3ImZa^PO_8~vY85qN?-g$f9*>d{B4{V?Qf`ZBNea?9H^bC`)w-huLds$ zT(j)N;?%%Du7*ZsLU z#{Ct1X2gWXOG~v)OjSn)N=6|8DkPSP)`7)U--+c zID3_yF<}6v0XAE;aIVeR!EitP3a)Bvn0YrNl10z=`o+s!?k|UN=wh^Ek8+>x9mAvE zHHmogwo*_^ll3vKZ^fD#Z|873&wj5r+1NljnlJ3D644u2`!OzIq>0O>k6Q72=L8s~pPBgWH5TiZFvh)f>q{q#-<4&?0Ph4Lm->jE9`9!BMJ zEY2c$o+WJAlP#H)no|qyho**x(a$;(rOF18vM;rWQ_2PaU?a05u|estx0SyyCNS@Ok4VH7piZTM3|LPpHHQZ&xO}3^ z|J-w2A^k$y#f+>z`~*)o!UIIze}OX=;C)GBu2ZMM=D0qMH^N2s)^~9p8yiN|W{0s~ zzkco8;h_f?PUZ+l-F~JSosD;#Az6V1I*G^EbgrFmP1w{=Z7(pUhe~Ab%Ng`f^G}nu;6JC&_DK+Zv{rVuU z!x!6)Nb}*uIbiW@Ro$q00sM>kWMQr8aTVu)vVnFD_k|21VzurJ>-g6Fn$Fv5F8+pv z8gqly1pq#4RH;P)QIYSaT>I_bWRMHX5b_4L}UY0OK@+?>!L!49cory`mUI?TSvH2?p6})eZJlvjOjS zdOfFKl_T7q+q8FCHDc5B*{mORjZ;`*wTvZ`Fxa|3jxW!pm22uoWCCi1&1*`Nx2$Bk z5Uq!McX}yWnmwP38#|bS*8hsFofL&k3*;GN)&B&rhXD&zrAkA@`pmntJxz_I7yq}xL(n~ZxvPoWSuTYY96?k65g_m_aCs{JgNOU*%{Y8 zClbO~3Pr)XrDO>cw5Eni7qVkTv0aE5&~NDJ6L*FRSgJ?FW%*pYF4a=r;$i|rv5WWA zYvUtw_RVOkXDlzqj@j_(q)$AZ$(RB?0qyMD_Wfjl&#%lB?JQ}exRj(oajqD@ohp|H zFSO#W46qg}EN>RDk&}64bgrmhk%So@PJoZEJ)wvNZ|vWI@9Fe&+>@=2su3QV`o{09 zHRh9X1EW!+#J(P(UQiqp<{b#QvxDw^IJ8S&dy%ZLc@cfMy^gfKVRJ=3 znREo-v3>pnseqD_;x+v%YN>%UJ`dl+#=_E!07uL46 z=r(r||Ej{Z=PFz~pehfB+YAM&&`DH^>o!hUlCz*7OCPoQIeErs~{M-vYQQ@cE&ZD24FrU9xCBLxi&PnJ9j2NZM)f!zTSy`3xYivfIV&zL%3SvP)!2AW z1r6w)VY?V(lCt`U2$VNM+Dcw-r#n%T-Myej_DVXsHL@uulf>4yqh5)Xnh_v(q47U)H-;4AcM$6Y@HBqOqMqpYL4N~pM4~&?^nRhcyI%{5h9i~dBy^

2P$Qwupco&`Fh%9Vlps5#wLH&q3#jYl4kS4 zqg&OeuyjpH=dZyEBP*=JT%@@z^Q?|)K1*hHyT>vN)BeM{qyT}4k<;ri+Gb#s|W5$@66lv??UUxQAL@wQ&P!=_d?6e zS$L_?ugHVq#_jNCk~htaW0mE<6j3-|wPimF4iOTnT$sYYCn_SqWVvL}R@V_dh)k4} zQR5%eDl3rfK(BHtexa=p;=nDJ6^IL430|0m=23j*tmE_Q8lfU)+~FgAU&^q@A-|7* z1Ev>ZKQFeRxGQzl-O0>5k(-g0u_}YA_0PYRvqr+GT~mQvj*{a zc`8GzFBlWzY;Uwo!VeJw33aI)PHM25O{=nHs?nvwP3&9}RH0Z|S*zT7S!Wmca#ZdP zzl8E{Hyq6eKd1M;z2Kd#QPV9;8_Yd#;Cp(ka;^*gF^8ar5dz1#Z?suGBnc+x-42%B z?SxO6(-2kGxM-d8yZWs5cjJod{O9odF}U&9lE@mtj1ei?OUt5Gq4 zoz{GNN0*YCY6$Rnxm~VP6ou@^UD$1MZvDKC%!h#o9x(p?0XcU#0F-L?;!^2YjC2Cn z{gcg2pxq$g4eNrk{v%+85d7ylLXKc!rnNO-GgBa{rym#+96I=VOt#`)b zWD~w+#vXJ|!s~;<@6%p=7?ynkh)T-1t6rKisACMW{zP&YMsjcn3Mw4-VPa>&i8aZ6 zAJI295EHSZYWHq2z-}wEc68`tFb;{AXgUrk*6J`M#PYjJ5Biz+u0-l7ymPX4<1dAb z&QqkJ(dgmnIT)b{D`Zb)dTA`zplGo*_8TSYncO#HRK9VySLo!!k|SNU?dqcsM^#QDst*SBh%W9azq=3O)>Clc{O7^U08O68fUO^@1BqB|@Tt*eim@ z9bx+_$G-+td?QZA(WtGdL7pe#x?=icU>PGTq=3;4`;J?awP(4ngq}8;0rEL}rrrRd z;ZOtBZ>6XBT|P*w(IRZ`ofZ5{5gWSokhESP;!-)ogfquyGIwQ!UCM?zzlN_HDgb^- z9M_M>8i=ZuUKqy4s9Ph%xETaf82J}pEnFA`|C@U1jVFpTxpV_2et&__IO*i()R!={ zQEj-P21rC=71h_`oitkC!!JX@ zDK2@KK<(5b|HoBdkre9FoLn=o?oTqPm)=A6hY09!gH251ZNH{q@#Lj+f#ot7wbQHB zgTq1%rVm2!xGfotX2Y(xakjaeuU>FI))8)%z8m;1plxVmMQzaXkJyiZPur%|19IHX z?%Hu(^q{NX?AiJ#l9A;#j=Q7m-_cwq=;xtJHQk zM#67h$|YQj2>Ud-%Y9m_=Um@4lK-B2Qz`k(9g=fizY+3V!;D!UO+j(A&)GS%Y=#e# z-!f8P%ygzwZke=L$#i;ZcNl4&wg^~3|3_IPm0HfRE;yvLF;od z$!c-nwvH2vpfmYpTuVK)>*20*8KPwWKALEfr74)^O)QPrkqPLw9%gM>dE^-pk&s5d zc>SSyd?@8Eqk~e$n$6={s#`yijs*k_oKm`UcWJj`x(asltBfbia-D(W?8)jkT{8WX z_%AyP#>~V5p8owK;9R${_p?n_jgyyqV~Ax7O^_5}vi|u&Du>jpReBA|46}Ti-D*~; zwx&`MvXZ#j;iGW30(!_XC3H3)-uEUv9LoR2U-pN?g8Bo351IgaBTX0fG|oGEiSvis zbKyZ0+i%5|*7bsev5zpIroV+s1{%-sg2tUxDH-Guko4N(j{ZH}kQ93J!1YroN`eVb9!p@{IfL5jX`50jwdm=Dk!MXReniGK6fEAKUTG7}QQiKDg1 zcDAgeQn`YffA~zTYdTPTk=4WW?Y>*`v8K8y8k91;H+#etA^c;?qI37;isRF$wvhA) zy{2ZAqL&_SzR0g*dZ8su_aDQLze1hwDkJ~WN*b)WNOs)Wd>MSthEGvM*mt>N*FF9d z1J#%0WkmhjO4X5$Q_ENI)`_-cG>c79zoI7P9+KkX57Uv3!N@!4)otT`m8rY>!@z1? zmt?!Qnmle8Z!ZWxI8t;z9Z4azy)&|hD9PslLMUp=*#Xv29XAgULjkar2N0ZT zyfnO;@ix9&j{UX#@QVCdehgpL_{UV*@14&*yNOMh$t*OK1tk~3zGAndYv8c`j#g_X z4{##>UUdkcSDlRZf<$1|0ak5YJKEj1B+q3-^1qc$A8TX1_L@C{jjye&&4AtUrHP$0 zu`IW_b;Y6T$E?%<3+fk$<~_|0o*A4y-}ZU(^2tx+$_FH)6ol2lO$5o6Mq*)yfeVXC zh=Z$phh$}J^yGw@`|Q}a6Dw^n9It*%?O*sst-d7GSu-wjii=Q?8<O2U=$v4A55)#mcCr=F zuJ}g{ekM(cTJFC z#lA5Hk_Pff8~~$^Ldu0f&-b`0%>M*u3I|{`5nzYYdKv``9J5e2vU3H6^+5pa>ha-G z5!(;!ZZBWEXKdIxe;c|5-{v)>#Hu#=o#BiF;Q*`Zl}e4CD%<2mXhVc6wWzhBu|e^r zhz+{D5ZZiRWPzT>)a%EUtxAb(9*;5G0ebK*q_ zfesadZ-#`bGUW5UIEZHy&*+nuWGtwpJd;VMa*}GPRkH_hkY9;8~Mu z`D`|2bNEGXn|>-2GZR+zc1p2Oyavqtrq!#j$83{dd|vWs!sk- zqk_P10U8wxy>#fxCCPx$(_%<{JqLgXAnLPQGd_-~MGK@91J1@NoUY^mZM_ z3R}G?RZ$U3w+?wAMjm>$5gu20>1*a}1Oi;9-WKS{>9_lW-e|W`L;J1xP;QTLB%oFL2CBspmc9x9^c>``Us0z{N((dPG&lhtybjM-Q3 zeB~?Sjpsb;LkjBx(X>Sru>zR{CWpAsUj68T#&p=b6<@0{5)@aQ9l-@m5sn?t0vk(V z`7;GpxAstQVI@+`&+&u+8|$+f{hD$HBfO#gx)6f8DBk(E_`98-MX#F(h}`q6m+O$T zI=w&ab5$UWXjgk+rm<}i1>3j?q!Anbo>s3gEU>^F}{9&xHMM(f=>NAo`Lp`Bhr2V zXn*?*v~RqNYkvmXZ~yc5y$WR)+$km^Egdj;LIyFbsny*Z3JCG8 zTqRC|K3L&KV5PouWi?WMUkT70HB|2O1=kBFewJZ2RTYieQI|-u`}I?Z#dllDo2yK4 z0O?Em3fa!02gb~8ToXImx^xoN`o&N>FYd-2R3Fg}Xt^b@>lm#K9(ABJj+Ec~VzXQn z`{Xn%yNK(4v2Cqa%xxJ&OuMZOMfHH4H{PhH>YvCdIDTBAD;-68EzT%^^qw(Eh@GOk zUU(yhYIQXaL&h1G5tJn(EqOP&=6d=bq;q;)8Xx! zte9-xaItN;hrJ6#e$PuZIRehX(`-%zT%E@a$d)TxnoXw6HfRM@`}%-O;@Jqtc-Y=- zo-rce)XZhC4+P4+{AsHb1DFlu$VFaiaGN)KjBOO5qA3<|kFpc9lesa+A>mF)5tSPr znLzt;)>0pSO6d!Bv8>TZp`c{cj~MuS>SXRE-&3BL#;TxihwE&fJ>yH zOz!9gftEnN{*we?fkz&7jcFbByuDt1EMJ)QK7?ar#FD3K{b|?r$+C8Bdn;lL9NRN6 zkQ8ACMBJ7^)9U2m{UlkLSlnU^t_Beb#1NJGy}7u}&NY6@s%mIJ-`ho8wLS_aS5`-d zb{E@RabG*-t{&H5ZAeO@9TIbC*rw;o2(H7jF_L#tdi#|^=(0U3lBt7UOA3#kjRL=B zu=dP&mT+)~^IDyd=Rwk@bHIBATrj@GkSE<)amhK2uul)3^j3a)#9(tzLh0SR8V zZan_=9lnF>7?}p!S{aBM?DXgW+F%HE+c!cx)Ir7>IZ8i)cM$%CBW_?>j`6F2vJi2- z8O!tb4y6=#CbcRIujy{Cd;Cp3c<7W}EQFezMZS~dXHGP73a>Rk06)ZPs-y;)w^sBd zyzZ=s1=356{;`XyXKwP+?Zugni$jZ*v%buEThD8;c&gI&{!Cc5n+rl`xH z(rC2cJx&+|%`t1i{i~>uQvT7|*)c-407vX-+XeUa??(t%jvbc}4_^816BXC@k(G-1 zZ#j_g7fI|YKy49!2^ah!0Ejdb!jArR1l&C=Fq35l$qH$l$-Wguq=BVe97;I{lY zkAjS)YJ}jfO+OU?^at;Zl7D?_`avnivbI<{TWn)HpojhnE4*-O+h`Stb-BF4buckA zGjK^>226d_k+N8`B39l<7PGQ_XSq+ecRV}gP+N(tR}g;Xe7Zl?_Bw0HFB}4MFy}1C z*T`?U7<1JK5|nXP?Tkfmjqk&VC@%8lh|)zMha>Rz-D+HPdwh35eg5yjwS#GN?$(gH}oewD#{>C62>8dAl$&N^a=pT41P z>Vf(0l)#tt93n*4K(!KIw{Xdpn zN4f@7P98^fzsK0Lg{2f1*jNwSiigbW(W*}oXpT8-7=J>?&*<`X+nYGjY}U1xf5;H9 zS>3F__*PU~Khm=m9+3ccfuClB4Ct=>)@G}V#iWJM%1P3_bk}&Y#T5-b(|k5)Z{i$H zz~+c{Ni-kgX4?U{3&=o)#%3+z4y;0hGVTJJCw$aY*5Y_9`Wm?%x8Yh`4nlV0x8Wb6 zcO%>5dp^eSiCIzeILpY!8jJ91Mw!LyCCQDBk{TX5e?GW+{ePJ%%%_>(%Be{yI8}oMym5tZ>o1Q~E1Zv5OgKbmPpIAJyJKImrMM zxS8tR@q;8>ex|^4ZsxxPUIT2vds7m_4-lYv2AOa{jZ2hQs)fw5v)3 zhJow{!jGqbWwZoC=?(`haqystT{N#QCO?bn`RJ|C3I>m}4* z@Mmf@b}4#%-zqCp^4c44luj*dt_s!A#6T(Y>AcE*uMg8z*%bdO(t`R`B$8nsA%(0? z+2&#CV@^;C91nR)N}TdI)Ou=fz7ELT?&aZZjgP?RG5px^UtR_S3D8!!4{i>)1M;t+ z4q4p~cU-x7=*51V`DOr$pQJq1h#C)~Ym9dcJ|A31{Q4uNB$zEW8v~0EH@i#Y<_Rj< zQlCYD0ROYTQPp@DQ3{?;GSXaR;#mgh^QFomsb^T_;R^WSY$Gbje?b|{jQ_5xQOQSeDiUP?q+_?8{E&L1B#%3{TwM|s3=e)p|#0%7(gmGFc?RW zsg`y`Meu$dy!=}W%$%hOz-0Vhaty!!!c@p!8XJj!;xlV=0-(#@NAn2 zG_a`!`+ujZKHRZqHeRnPoHD22r^KRo}!%} zf9Ijy_1Q}K#kbNfZ5o`xqqR9R*WR04>&iB%r8*+Yd5U_xRycxBbse*x?eXu(508sK zUlXracY33RM8al+-{Y(OG_yFBlj3fX>azw;E9mG6{@m1G*|tq=tx**G=~G0S$0i?;=#z+9>Pn)dY0#luewT} zWKt2?YY=)W`t7cTtx6x_=T8Uw$`!GCf8*-_ne&ge0}cROxZX985c7L88ZiO)yu*8E z1zKka-J%%VlXtD4@J}VgC?2<)5SPc8UMH{qzRKXiJii_X1i#Y*#61AQ05ujMbdWqF z>#+ZEx6fgNYGP0;&~ev!15mJ5EjM1EQfJh1sJn+tPK*k(w>k>()1jojKGkTkrU6}wtc>}AZ2o*|GGO@B;br*@?Y9NV>(&?hDoct$NGKB z(8}!d≻PxWU-Qfy}jj(1!SsUuqWX^*>b@%#b`{J9EBrmeeb!RUEjk{)sWZ}xc`i59e*FQxi z3>!}$z5oLY*nz^s!^K)rmOiEwdl-BhxL{EFEGxBT z`d6G4xdG`j22V;LH3CrlC;<#!C-8fK-803H`ae_r#?b(*eZyDPAz;wh(hdeS;-zy& zJgZW83!>JmR>yZq8MIAf;xr?O{AxZZ24ig`)t*Dr36*O2GH&+R!49Z)D{nfte+8TV zYI_fp)zM)k)8@5dk7Toio)4ClNVm)UF<+cRdhB;O{*wPoUUW~``7#+A={Y^Aa)C59 zmUtXFB;<$VAV`GoUPnYq=&HhWqxSVX)Quqs)_huyA?<{pV`EqA`rNH-JCtir5W6WCn4lYGD z5nc-~ev(Lp+~W71>~L}Q1<%!b1nXqyeek&{azt{oTy$fpSVCgg@+eu)+PU&1a@kiL zvuIhw+FifnDLaTf0fp$83*X+fHkWv%oZT7SH^q9K7yOqOzzvrw=p6(>(c|bHr}Z>B z<6MjKk)Hf77eN_BEIS=|H)8oVM5wVcZ4U@2;UaAM8M^S9eQcQ1!h&$5NYOYytf24l zDt5zc6~Y1J@(yka5DDu>bLK5YEa3@R6JW7;f}cI@7fNs`#f z>h`nqn3Cp*<}lyUNh?qyPKJ;QBD-r1V7^y}$(w);)G39^bO>vmF-;c=AeA9X{8feN zNwMP)B%x1JAhitSz2uxW&HN8HOW1bqrVRx5Iy%Iw41XcS!D#u%U?36lV@N#lj!%uJ zazG<5e;JwBBKg;E0DfV>V!l7rj?;w3aF!&rtdcOK%je<*f$x%N1N(a37fcwS$6*&G#Jm?7EaNllIRILE4ykiSZH=U(Q|>?? zi#oDX##t=9s946L#RDr0ZPM zxUW}53=m&7`F57d)sh-$_^=OEcSL8K+Pc%Rwn&hk^3`iq&RCa{bZJo5_C51Gc^>9n zCD84G@4SJv@%`TRdf*B#VV76W6~aw#RJ?k~TAD5JKEK*}3wuk;=X;K;)OC`p`ih8! zFj62fuu&>tjfHqYz#VaUCT+Ykh4RknejjL(gppRW$kG6bVt6%kD7311t8q4|M+_@gE zbf&aEd8ugDUU5S1>fjw)TH5B$D5cdpeyo;6frmA!U3rpXJg{9;%!|`Y-wOHfBKoJM zR^Kt?KyTO0{ODLjn*1f?07daO8r-Y+86Yj`-9$>gSSrJhpDZ@?$x?Xy2$bHxD)FlT zf}}s_Dyr}xLbVGEno`*OgY+ClG?d{e8;Y`dNv$Uqv%+g9L7B|4eBtF1aYz?W^DAl_B44!i9%tBUJZ$mk`~Bc;c9 zFK7QR3T9qNbrE84$f3Cu2_iFYi?XZ=hwMHHc4%Sp)99yLC!<_Y1IqQ@#b@a$iu)uo zvfB!$Ol%sTF#CbDG2CiPO?CF-`1$(q(Uw5bJbYDLn4^1nS`E^EIcA3W_{`zDE1MTy zOiLbpAvIU!?cm>qgA-_{h5Rcf9rb7@amxbiA3c?nSD>KOe#djsQ(uO9s{Xoy{b_Hm zh})-2p}E0`SuPTUy}FmUUXYY=juZgMm&qyby4j_BYrjRrm%eWExtIw(Ue$o&j~abj zKH4D%kBHj8CzO;w1AZ{DwCpF~^|tXVTWNc>)OtQpoEx7w@Kj|&yzR@C*!sg(s}{8a zWXB)FS$auwDs-^e3Y{M+`}V4$J(2&EQXC=>th0EK;+*#y?u$y;=BD}RM-YlsF3^KM zs7bVccP6k$o%LvG`_B1w`1fb_KkcUgQVY7SE8{ZlI~eFc>xCmbC!M|@7)O#pB0%)4 zGSB2vhYv1^`(Z_a_T>m_@wpcCmKM-s{#8102%9KC!6fqyC|!!s8+?Jp$YFa|qMj`u z$h?jJvgCKqNh!kN$u1ni`>89P513&w1{O0<-Q7dz=@TSDL@y~#n9Kb6rb1VFU>OLgx_iGW!sNlw&YV&j zBTT+h>gh)WZb8xzEJ*8`?q^u{JwXXxo)-m%9}$X=RMOmqc*yW_8*xpVvGR+K`t!DE z9IOgl)7=2CO?`tT|3zCPrr+L!wNgI;{VhR=Yi|`HlMTbTsUoZM+{0JLd3>I zM1EJV!J?=<2pi$H#ou2HJ+EiuW&rr$usb)YPgNG~sa6ZmY6e%1?FvnNk1!X&=*LO+q@)TU)8v!R#0r zZyb+%+0F&+D-(BotFUDNc<+g*g9~y5c`m!(uWkE}q+h|p!X7NN!*d?21+o6$RRemi zn$`i8%eVB$+(Luxq{q3U?Vbq=5142T% zDts&K;$Sd=;W<3_!QOI%P(|fcZsb!{x zDNW@s3^paRj4zV`(E}0#lt;!`ySu;ML{agrTr>|55K;SQxBUBei;+Hep4p_c+cO)~ z=uH&Sx82%?VA8yc6*hf0o_YDbo>9%v2AVqVy4JYtIok3_H{gZd_~hHfMc-%{ z6Srh@G%yy!iDg9k01Y1ANoRMEv<6ruQBYhnepFazKb`r`JGBB%SmXbHPtCtVrwFj3 z2+71+((&W|z&tSi33M}yt=;~WF8e!{_j?V$_x+K%s&0nNe?D?#7Ib8gty!N8el@5D zjnjkw9;dhLeEAT{23-6-_KdVk_ldB>~?>f*rxG;&!5SKQ6K4}o>-0`{0d*7eAqTjA6+UhbRq`oJH_Fz%2 zql4ZK5H7;qcGLL%QwH%TPjhqa`a>2_-Y| z{uE2koG^0I5^udqj@Q#Y(aB6fJuXFdU$yo4XX~z5?&C8W#F~|FFql8k4)Zqe?;^a^ zZS@!%Z4H6)X;VEhEplA;%S0)L6^Joh)kb(J?`L6~(pE!pgzVn*dE!J-I{f!h+Vv`pCQ0~C8KSo2ccHhg$ z9`v7zM+8+BEOmJ;e|}Xf2C#@iB20HcV@#-rf@=t6{k+bJEeXuHT1?iIs>Ka$f`@e? zg#ISJ&5GJT+Btyai!=XI3oo=Y0UZ~rP!}}OiGn@R_FOZuPp`~9UJ+Ho`y0&QF9Y=nR|7-;VINmJR zAR37A&a*Vu!lDBY%QP1xG%-MNG0u&q+Fbf1XXf2bIJ`^t!*peVREj@)nP|cYRHO#_ z==jNS(y`$Oy&+#9#(lE+;_PE)Z*YIbxL@j;^^gd~X zOH7>YXn9EI+3bTKt9)uMV~I}CP#RQPDpRT3ir-*8KPUe*y@iIdHN(4B_25N$(*B6! zQqCV<0|$a`*)9|R+d=(FQ@r{!Uen1mrGbbpayTx+M*}-=C9bCc_<&G^H13@+IXZyh zF1gQRH6&sn|DOuuE84#zMK@y&l8@~}MSvl2K$yuC4LsuVt`C04xSp;e2!gY5Bfr@Q z=@YWDVg;Xp-E(tL4w?b_HDQChw;x84z~4IA6g~PdNwe$8I7~8~{)b|DoUvq7=ZTSI zU-mln?UcXeMT@?xQjgxq{jUUeAK}o;hc;$s)Nf^%%bugs3dfYs1_wp|^S}5pTF6!+ z?ytXk{#7&{bm+tD+ttv|7R_p@IFFyFd$2c=vs~(DJ;Y>8ernRX93w`?d0HhHgcE)b z;UHP)` zp!ooSielY`@cmL$2M8$R8?w^4U$7VtDz)r99T@>62h8YqvfZXHzh2-N^=oC0ZB9YL zV$WRJ(+w71es7+Y32*nMlF}{x$eEU!NBQ#BU9|?Dp4)C#U-7;_kL{BNdEmm1((%S~y6_|saeEIpT)Pza^A0lC z=QEowOx{3UdFFTY54V`F?@cy))m!Z$pH3U|l&VfF7x$SAhH}7b$*0P0j$WKHU3)l| z?AHeqg@JpMg2ED#LwTOH6s4+VfbU%8X*BDI0WV%u06+-qZ6?c#_{X~d7f!FMuVQ5) zT%V2BCSQqq&sSTBeXcYX6dGjO4lI%QJ$Bd|&)0`Km+FS{YUbRzUj46Y&U$poSI@kc zpmhAbQL42&Aah7Aj@F*lIy}z@3Ud8Tk3(h})cBKW4b%x=RjajLYoq+&ywM!m-w1>} zS$=bK*zMH&3!uPD6vDdAr&VgE8yKFyh|FHa2bw^Yq9LlhS8;31d!y= zt-p>7hv_85x<<=HcR@DgUXq*riFbSUw~cSktjDaN@F{ez*k)O|Tn&zL4y?&m5M>@{ zXZk1nJ^mP6iXj8=K#?&0HpeR3y^J7ZlCU1qb3JiuE<>I=4czrQ|Lsu5cqwThQEp;W z{!ecSJM3okqll~KTi(iLZC!Q?<^!RAy+d23yRJyZuY^+Ky9L)ge6f(OwwPte8LCFV zJ%mk0Zd=-8|8AQdtdYMR{UUV9&zOC~G^$kPB5&ec4t z*U_xyRqM4zawdF>+v;&1c;cYGXcNtKal0b__YAH}Kmb&(>%1VR#qUeP<@cK@!told z^pjwsOZe7&BV*$p;J$!lzV3otd!_HAGqdjq|DRyt!oevCZBOVQ$^<=~Q>@6D?RoI{ z*{Cokd%Hik+YA$gyGmAqv`tUN_*xU}l9V!E1xbXwW34bF`c`D$xvOuvbiqIMo2jg} z$XD~5$gK;|fCa5#V=@;)7YUa+0r<`#%3xIHya7M|7i0n}4&}l!DT; z?vqXOc>N_ltW;HdCMX_mPJ`1yhQaYCWShcAIqn>mgX_7HLOW&M=gkFE`bVq`}#mW!ZA}JF>E7FR2 z_D5rL*qM?s5+Q+c>oTbL4BH{}9_rU*Pgkzs#wppRp26-Y4sgXsS2RyV+&B8$OuE1- z|Ah_=|0n3MMt?<1kJTgwrC^==--+k+`z#wXT_XSFqjUt>E|opbr!wOf9u*TY0il3H z@%0XW%y5X-hX-xffHv$G`z^_L*}|D>pC-LZsYUlH^vtE=4b|-`XxNZVB(&fFb?rq> zM)^a;gd4+#mjSF#fQ-{E?1QJn36YInr3-K7v=L-Zo{Ipa2vR+j*~7-9HwVs;q=v~I zYU&4;e&{m}d0Y>Y=5RyJ?B0Eh36*?>(bFErl*0tMEX2m(I2*Uk)zTsIt9K62WFHax z$75^rAa41-V$W3RLRQbLCi$-X&mH)eshhaHvZ06W9uGK*-$MA6ewFN|ZZD~s#}EEWiAmw% z^Q!T(8PD#7*VKGMtC*HAYJo>WlLX@i&)1tDEau8)_AzneX7)!%opN%3(;xAf5umNt zgsnEmW5!j#Kk>VoG#_SRfw#6f=#PJ96UjbXa61>(g%vm0yA&P;sP1y~OZM;TSmNaj z6kQrq6(HZuH0IG%3f^+Blz|I% z{^JcEWxH3m1->jk7Ysq6^I_u9`Ey~f1AzaR1`;do$N#TC4v*OF7!rRpl6?oVz$&T}o$ zN8|k8cQ6w1cu>+UwsAUGr{eUk;970++WM?&yV;l-G&pqS{TmT1 zbtYlw+AA|nI!xpJo-o33MQ!MeOUkJNmeepOlI>CiZ=QwzQ=!$rg z!)<`jS5^JciO-eT6_LR31@pk%dJ19$`~mbUkFnoxe#-&>Xj_;bjOmU(iK66IU&c0^mHqPo3^yVsn6C34 zh~Z`?B$yLs<1LHDyTGgnBTZm37h>-5@_@+bp`E63|D>3UviFt(Ac3z=CsSQs-&-dL z`X)9)at(!iPz@WO(sOIxY*?bPSSF_ia$`!A3JnQ2fS9LmywI1uVUo!L-%CZDaFwy# z7LOHm3O?*P(lA1h&q~fnz;NVNwtBGfXdjD2M}}&@;NHStpA8Wsq9SiHogGc?=({Nf zjfdIKRn>Wp60x|b(Hn~=xcvrUwxeE z2dU-Rr30&p+Uh3d%E(5KIubR49Idc|jJ=H;e>LryC_z&98L~z!-tkUuMu=PpAs@09 z9xZ;PSGTVE2(tv3KX%B+8fRVhqN|~h$(k#O-x3M7Q+&5Q8#5%~8p>|et5iems;~Qd zD1AIB4;A!77n#;F*S9yG8w*XqTC*9= z+v_FYYNI!9iUGq^peX+ZDi%6k>DYZoY41hA@NQLQC6BAvV~DsIz67kNce7J^ ztezi5VF6Dv85x?K1uZlzOx=qy?ZubS7K)5FBLaE`F0T03Tu=5tK3+!a!w$F6+*lTf zBGRY={%9{5lN7cOwOdS?;?6>rO-d+%9h?@KjNz_q3iO@^MxCX+|X zP=FN=$S_`LnLsgQpYE8nlC~bWgO9&1cP}^ZLU2#H8*U`YJB|wrOdT)ZpgeJ}OiWKE zgAkoFDW$2ueAxiGu>g)rW8si-uK(O_-$+zYiV~<(^ZJ(^Qrv|NlCiUYznkDqQNt0G zh+Hi3yyvHzz_)ABWs+Ij-bTM)WipyRmaF(A%E=jk5Lm>^4CwF&$1}zcJlLP@I}>`G zFszPcY7hWY(YOpItW`%{)5!)QAiQSNDYA{=O#^Rxg?!_kO0@j-m6+~SQA5zK#!UOt zyJYS6jlX>hB8=^-cBRs$AD`XV<FboXxjnzl*o0181aY62i`Ag6p5i370&xR9I06mVktKdtuhqPaG zLDQVA%7KJEy7RfbbA!`NB;c`U;Kp-29yB_FJ@|ErxM{bT&}U2me0o^AR@1JtXMnpu zx>G>)1pC2(zrc5+@rj1E@RvQ#`tj$D6IN)Dxi~%*9lCTUcD?oR9k74tQbMV>dnGYv z(H_qiV-iU-V1j;;zwuj4R`GT*+v+JCJ&ZOG6k=OuQmf}kXM^IV5=n!c`HE8}f~xtK zs99Wngg4Ep{l@p#@C)>^PQ3XCru|W30=G{5rc6Hc|9IEG8UP-BP&>F7-^$~d8{LV% z-?+=Xn&LxBk+aP-<6=NNhkWa42CykG`1rtuL{(>X1@cl3?mZQcd0*$ET>z(GkGQm0 z@Hh|%Q>#Q?4;0zljww1^UD+)9d2DsA+eFh^)uVo+NJ0|I%O^XI00F3U@g&CAY|TV3 z=(4iT1`J|m*9g4tiBM!=68EOpRnsNN(J?X_73AEl7M|gC%9o~~jhM38!+FB<(Rm3k zP;mQW)Jzk`1;{4V-R$tnJsz!y@Z zm-!t;XlXkZ!~0Kq9o5fS(ubK#XKGo$&BwC?b5jE%mgv=c1{Zvm&8Zn~pURP@-g|t` zSsk8$$0u)H@A`rKKJel@Vv=5+spo{(tw7>t=*t(F71#zIMxDk4!B-DhAc#qo2t>L* z@PaSD93IPMnF#~$W^mq-gyg6$fC83<*2NTlcD*aoL=NFGPC4p;j^rvQv$eJhq)f|;^*0b?%p^^GuF?Y2)-Jp8pU^wk+mznVT&eS12p(sEiNMsSPqO&ecJ9HXBbUULS ztMIL|8g|;!`Mw+;iv)Eu8 zNv4p#K7V}E?wa@-7%%coAGw@7K^*!7sR#Q#O9<`Lnb;oP&{?XOeD4POc0=pzfpq0uPJj~f$%ml8BBnLaQHtpFs70=C z=xlLx%vT<_dkTO3mPs;nG1E@JB}m_^%{9-%^Kb#QDm8WH7RxA+n+nyiUq_P%Y3_{f z=YpZa_~-?TsUjK7*{df(+zc5xG)mcr%<60I7l*5Ak4Zx)JB}0+Q`i;U+aFHTysJNa zoei3hwGQF4JS~1urSiSDN(0^+NzVk#a#FB=;}?#0h7Ubi>A)OKp&N0q+DMaVt)+ye zz4&U?kVMp}+hkh}M-g31iGCSD)kRmMMc?#9m@?Dg!mnMswP#Sz9O+)qM4Vc&(=XlkQw3^ovF$lg9{mUNzB&}jb!Ng{`?GK^z@76LN26-nR<72tFLZMNi3;c)2$dZ z)U%Xg`oP#nOUF$QVM6Gm`g3*MU#1|)djj4pdpK=2`+C@}BNqrr-_$cVWgDTevbs(V z_~~LTB!VQUh&M5ESlvzykfK`?-u@Fr-62ajd6Sr&Wx2a|nE9?4z%>J1**pbtU*zAe zR`LI;tNp@&o`D{L1nG|me`tKzP5h57+K`!*A8cCaC@jFEk=3548??M^=__muJ4wPH z4<^e$S#H(zG-*HexO9B+@8@WItmoJ){X(cUW!QfrDSYE&7*7zaWcY@rl8AAn*TpLa zW{*}QO_mQi7t)qFk*`tkXyR$Gmtgz-;7HgBtFrQr*j<9pOF^Z3We}$rulcua_8;|i z8kL=9lBbVUi2`HJFn{=Y*t9DXRHq6{Kf_ML&@QcF^507g6~L|^iR~8DhKRa?(p`*{ zP*E2f9}eOUQ^Fr!6P-=vx27#86R9Mp z=#w{NJqI`4>3o0^;?5ezIG>D(b7edWdRdU`9W{6tWFu!sMVP4_-)5teO!W=SE-j{cs&~-5SKYCOC&Qg=_e*Al zOe%Z%_F3pcfrgLM=Itw^L2KaF+D~h=EeSRwOBUO$4g{v}O})J}l%|M}&xqCdiThclTR+~<`>=9{;=*dCizD1)dGo)zorOJq1^iEj z9hiaruUj7veWZ#erv!5ZFG21YF9PcfZ1a9i1z;n1~ItQjV+d#_&Ko>qz4 zm1MiBc&E$jO|jv=e%&?nG6)U@ccA^h8J2imC4U3)H*?=}`M>pi=*#W<&|t0p+X(3W z75e3NA#DSDS*D*bngezkBTy3k1Edf%s|q0 zqm9*tN8VRi2k+p-ALH7?pUBWdPf(0et&2h|mG@xXrZ4(Hp2Q~O3lP~5ZnTh)7*smB z@CnUBS>3eg0;*TM&{md=o)q^qFnKnk5Uo-#_dlxIoVKsnHdEWAP#< z*KOD92#CjDP8n5&0_NjG8+Vo$s+KeD7@Gl2bc6wWrvT-wK~gqYtXD8)SbvQ<5a<}R zd{fHii3Nr2aug88F~QJh5_LeU%kh0%!)u|LZKddzhE%>*C>Ius@j@P?5TuRt`B80A zz{8e?-0=oOD{F>#BezB7My5K-qlDf~QM^kn@9A zV%qqb>r%~`L_*k*6OFbOqPG7TA;2uVhQV2_h&9hp8K$$~)T*xQ@FK8aGs6Y9 z7A{1P9iR0FJ2DKUd)bmSph_xsPB1Xm0Fwi6nW6Vdk>By*2%$9J38O@CvweU>Z*cwP z=#CGJWvFyT_K^-1)HjDDK6boy5^$y(`g41HYpx>t>#Z!6=_EDrjMEQlo{C6c&OwDM zZPx@eaFB?unNp7*%p!3-fAF&sPHKGQmg3g4$S)qu+d<-XTb=bSW*dpN-I{`xfo|JM%451gE>eoH3+oZ0aM$2`9KarE}t6vhThPYGv8OwR?rC(eQx^ zIOh*c+~^8zOQX?zYayIu<{M&8j3VPZ7sQ|eJ|TLp@E6o)a#u2`u8WdLgl{XQzfpU< z>isz}V-P_NY(PB8@su;ega$d}T|`{sE|?9+#s7IByhZR7`4l(U2Tjb##x!n(b0t4JoZ;p4|ZneueBt09K(q(7!PouzU zzc(!D*{g0^=!c<5ORsSg7~3<(9sPM2S1fWq3KHO@ zh{tWhM?~aW?IR5&6$5P&dwxGq+zhG876jX6-8ChO+JV4TSIs}ULLPuRT!kKf#Z3!k z{L8!EIQL|y%OK*Tn+c1&Ux!mKvR-_io)UOOI)saMPuYT1>%^B_HX~fQ8=`ZmttIzd z-WB*hs@~l9>YMP5#@47lziyct>Gt(~g&lYqHF9%HQAf4Lo1n8t^HjQL7I2s^8p&kT z2~7$=q+?P;9S5uO2gTHD+AICMnemv$a{5F2PuKO|ay7$Bh?YUT=bsuraYMQ8oV_ba z14)!!WW>b8Yprg$U@HZ-t%RO$G3RTv2(d@gG~RMk%@1s`$hjuflHiFf@BCeUzyH{O zkwn#oZcKbmfbXg{0Zr*i0G0W7I8%F-PCK#Q_ntMcf^M`olq$K3W?dr0SC^hk0n(giuG{mM?8Wq!kVVlOZ_h z&|n~CA8@XFz*fc|pYXw8>7T;k5PXo?rNoVv{$LLSA_qC)`MYTHzLaF%;kcKuGhXxw z#SkN6RHfh6+fS_hU((g?`}WeJvBGh<$I=j~@Xu%@0|)0mD}Ax+qV`{*4?gGd^7)Sn z_$$S0VzEHbwes2;k;3NU>|WP*P8$477Z0^gP`u6k;I~)|1*dVGbpR_`2>re6P>KgC zREk|h2I>AY37`Z%k3L~5X-P2wIqc^Zyh0XNZdzHmQU7Vm6Q7Brp_%^L$U3^m1#kbx z4*Z`FJ$d<4&;hL0Sr7|HSp)L|WPZ~dAFCsIL+ zSiwki37HfV7>M&UfMp3XKk%;A_9C8qpuM8!wKw%Bn6E_gT(|ykS9$)h@_aw81ae54ZG-^1?NE2jGEYO|$g$c4*nnLwhcVU+k|p^yE*G3*t9cSWwyv z%sB8MFt)m@*GQK!z|7%vSJW%nZszCjUt*S+sx5GycC|D;5T1!yh++AY#4jPws>jKMWMgT2GD|nf)fn(%jZQO%TsE< zw%HffM;7jVJ9hc`r)^+dqZ*(3{Zggsn2}s!A1r(Y$)({}81VJG5XFAVJlisn^Eze7(9f0tG{S7jQ;d zGVTX@@56?j`&~a>bFvmqT}vK7`E*QD=f2aQ@%#ce%J(TcqhT{kGef#1`EKd5yDJh2 zamq@6xZ&K5K9%&*kOftq-=;&zd8vi=fNzLP0}n|v-uXp{!WRe-u@XQQ`DCXmFX zL8h4{i^s)2e-ZVYJJpt>>+^-;c#bfF58B07LdWR3IQhNhAK4%^!EEiCz(ZWwGndIg zH;L|<9FxO3S_kf(aS1&eM;ABRSt5SIjQ&ChLbwYek ztF7rbu4U}I@D!I(YJ9u)_SFB3<0l|~#r-$&w3?9#$)`4CyqE=}-Dc0BEabh9UT=Sw zQ>IfV$#*yS=wP8dz2>S+h6AbDiz3Upj7MvVD56!z2SqC+3rSn5=S)k1iyurnEEo|S zC=37jq1mqj_boT$fVPL=1fA%^C`1$Qv{+y=brlaJ6F%T*{&PyHG!J!|C^d$(w6hz9 z2Mq?i1pazg6F@iWd9^Tb6S+Yj1sfh5-`olq_B22i6|oixvH!p$1~D>pE^Kt6RV^HYCld~k&7C*yP_R$O z5Nf6n*_MaH?GFpRZ_9%Q6JFyypqR6`e zBE|Ey^W7eEKrv|+$xlIlidI?I26dopXBNB?OodF*Igft~Lc{JgSz1KX)t(j|Le3_Y z54}?Aa^tVd-4dF5sPeAg(bMx)H?!2<4gHnVjHGl+S&EHD67q+t*Iy1qR*oZ4#Iy4z zb%-T&dCyj^u@Dfr^371wsYFU2u`dAOgsM3$Sep_-E|cA#wu@%8bV!c}n9b9d&2H84 zA>pHF@ovKqhvnNe0fQdV2*S5+)$1Jbyj!e;w~W*na_mp`fAlVd%H3CDfj|ovD;&7f zd7DVQFX9ly6Ka5?(82;s>MG3l=XMUb(gDGfHPb~d@qCHe0$bvyMIZh2Cti_c3;4XT zQk((>r;mrzBMNGOZL91bce=#v1=)N7Qd3ri4bVsI`W?FE3Yj__I?=c778Wz+ZlpZCPz?&HcwlJg_wt*D;#w#3y%^jshx1m z!e6JRjNnaqq!4;}z-X%M)&*YnlUev7Hhd`NbD(@!k?3{f(b(_H}5m9MjhlXtsNvDj@fE_nGC(w5HWFT_{> zDuKnMe~d+St9+JKxwC6NX2i$;3h$0hni=^pto?Jt`Rw%_pK%3PazD_nR-DBB-{kb) zc|34TUFH9^6XgR@o1O3YTKyI?(ehbbs#bowOS%(Ha;|+0gk$?1Ozo-y6-<4|=(z`q`g#0R&|M?F3vH6o` zRFxF?=Jx?S@-w)ewP}u4Jp(5@8;v>rjXY54^t+TBhNlFCD!4T+ocS`a4;3_gww!P8Usz2$~&a zGfPGZYH^6{W@#&UM{@Xx^#}M~)d)%9*YGhd`=4+aDWMS&7yQOlIj`^8BI2JEC?WX7 zT|k-nn4Xzknf$VJ6jhkP4)B^!(Y!k<8>?gx-C$K3n?xHSe(iHGo(+ z?r#**_*IwekO^@Rf^SC28FnsQ=%st7n-HvnbL2L_7OKi<{|61~mi<4_YoS(Oa>wHI#6#yC%a_-znRacmwz5 z`#Q|Rjm(j$r4pX*RB2`XB2hGdz_sv8`-{f~I!`LEYqaC>wrrsdNO)nW6i>McpT|B|S*B1cy!PLam%V$LN+zfi>o;$InHBo-8+ZeM2>bGN~ zP<*C9L>H`;((8m#>w*n8gN>=KTa8W=HuwV?*aE@_tMOw;FXiNS#{B8`j9TK}Fl=(- zkAJySrneAE)I^%bKxj-P~4U8S+F+ zw9(&OeCQHLJA^KhrotqV;abGYX7dJoaiQ)woZ~^zRw`4&0r~H0Ck5f+0%Sk=^dklz=fB-5#e}1ajf3ThsrP%*qPT8`G1k*`* z+~Qm%Ta!?FiM{J_Q2C^$raR_RO#Khl#1lbh!)MejV$1grQxF*ZKFXQMuOrh%~?GL2@URW}^M6+^p|Qx1I~H zZVe66*fkV#969VF+qyCb5FZKe=P3+nl(A-;XAiZ)r1$M(2DA{Qj> zEYNN16+pC?V}%q~K`!wgoZQCRZObVSgVpYe7hhlRXs|^L0?_PoYq0C1yz(P^l@(&M z=Q6plOCe?umti=}AlZ>qeRE0`5PX9;y~&ZlU;hk?z0lv)NOqzn%2huLsflkrhU3x0Y+X><~A(xIm1L08M4A-ytQ{jy(YG(&J-mNvRp3+SM`arZm9J>#u@P122V&o7;Y&~cTKVS z-VGR0WedovbT9TGPELvPAtCw636e8M1-Uxe-ekj6W~qj_(-jYM{7(`sa4Yig;a41QVfF-%v?H^Z31Vt<&bj1dJ|E$lyzbsHs{H^`Hp88bm8XAskyE z{oQ*6!Xl-m^0~F!-4j#g#?Lr@aRfF5|Ht|laWj#Ae@B1ub7e`)*-Zwsv2Xwa#uo`F7tB>`gaU=xf zQStyq@IFBoPr7VflABLHCyL|lkEYDrLciX-p{t8K&dr=8GxKgt@(u zF$EvkTi*qbt`omo-nVT|tEk;|PjModViXua!duTFrZv~-ydw~>Ee1forURy<+^tXN z3@V7%pm~bjtP2HLpz<(v6^JCkzI(DGlq095+AmK-*F9+BRESfln> z?(11uSXA&#|5MGT!PN|dNy5vu=<)3wO}?d$W&#(`+Yn!ZKcl2CZ9ZuQ^%JZ$3-iVq zu!nWPbIwWu?FP`I?bZ;%x;B+4D;=+ct4e-J=iHr5l-$QOgSs0uPQZiU{5&NaT7!cr z{u`RMxOZ^)!F{${VI!?|hk zE))bw++~o${=BE9UX!+K@{K;f zJ@E$s9HXH9tqY;F*eLg%2Khq=$sdW9RGI^|K!3|J{h!d4Ieoc1;0OfX!&PxmEVS%X ztLG2rLQ0ReiKZzIp5=!C*NKu)e?|AyMLhLa{om&OeOrm>UK%Zv<1_dCyKLn*tN z^DF~7h-cxUp&zq&_J)X#(~%}`uG~Xr|IQ`eLp5|VBt}ljOAiGz8K3GVdGMad;=KU% zCgnG#xcnO2odP}LRDa$$FWO+XOj3mok5)6GuqkVNu>Q55dRtQQ7j$mJMw`> z_vQ)#OiU~5;U-o$Ed?iz^6RfdU3;1Ao3zQiNFYnQfLmrYaxn(z2<{!61~+mqCAFKDt3QMpzhz41(9_r*;{Bd0yFAh4l|N-v!-yRMCi zF;~2eu6Dm516kgNc)X&MW$J&$%KrPfB6Ff3BMT#=z=Sb5{0@&x!K2%NwSXT%UeUAh z4$*vN#_Eo&Y{G<6EF_urIGZDy={K&l9312yvz_T9{*})`2 zvx3d%l9L+q{?0@NdG^BkgfSe@OvNytRdkMFj%a}p%0FUBM@gy+-v#jo)W}LGodv8n z>mgmHZGNJQokR7hMBqb$XuENM@8Se9#b}Xg3k$La&5zj2p z2D~PgACN4#KRsBL3bfKdly`OrONKeOUh2(Tg+Xm_9*7)PI_IhNWl{KfL-37?pMS)& zc_|Glh*X!hvAK67qmlME~n}}4w1AfVYy(TZ1 z%B5m8e%Mo;KW_O7WxGdPO%b%ZywU!h)`9We%WWQ)bm#1@vqdvsY+o7jBsSXJaBsTa z!}>~#<#76{J0f^rJrRJxqS*i?*lR6PeCVE8zzNZvm9)*LZ0N{8w21;Hu+W14g4+$XD+I&eJ5mNZudr z*XlzhZp@njhBzY9cSTxAGh8Q7ylmex>8d0tGg3_yKUf{n9yof}s~t{_^V&hALg<@g zC3}Grv-04?>@jdDhAdJGMdY(hTmyMq)0XyHnZvKwLC}YN>eqhlisz3PGkUC8^HwMW zV=rD7Z(p0P17_9>??)dqe*q_^AATqMfYV%blvHbU|862l000Yn9Vu_ENKTvM+k|^oQ=6*{%WijQ8|#(T9$nu>EHkL=rApQ*5ZSJFd|zc7078_rBTYc$*dbR zL`@?_cDs1SsoL4TMl&TS5~C#V6_mZ&9`6*g1=})F7V^I5=sN__MjG%Mv2`(B&W*9BY_={xfA^qH6T%L7NE%Xn!#UB0P?T`WA`RsZ=3Z&>xdPGEf@{tmEq!fDbrS|T-foE8 zywV5BzK%n5_wxZPA8SFE_xifvd8ZpPP|KW!ve85LwXK@0A=Tx~Uc~1vcghYL!oNet zDF996Z!YepWZ4l+m3BpauJl3sDE}$Gf^2Ib{4UE;S8bxlCLlIa7?!51o^h=a6!^9} zOrZn>T_!f^@|Sg(B{ddPc*ax>PhX%9(RPkKQs0=x=s= zDgAV^RMtb@ds|fE49)n%4NwRNk3uMj!d6==1=$LYfg0Vv3=mn8r+u=^^T!^(Eb|3N zsuu`}+$mAa6$tXv^dLg51DUC*aa3kzkfmh3P|DY&ek!!EQ`K6$8{4jV1y1B1{2jpS zaJJgS5I8+f1k~dZzPBI+^n#~g9@~o_D^TCxJcxsWL`zj$06vk~g!d#o!BzbC;C{TJ z#WbIfiFX%+s1Vi`c|tOA2v5WUJ{04^eP2jM$>l`k6hf4*s1APj&e}2_k!KKH#KKY^ z-K-qgD>|Kk13j{7G^ryQ^OUC^Wx}HPx4xOQ3)#OzZkAWPXXi{0&EJhLe;41TgDf40 z!8S(QJgG{J%8hA<{ybrvkfx2qjyR2xC2>j%shx^UOGPs_)#f+e*`)9&_=QvKb}re= z=s$RDFfw{a z6+eWv$lvNzdKdqD*XkpUtGl~`)8zk8DA1978g0jE){Kg>j}#vx-eE|o=fW*B`HYGo zxi9v&aBrKVacEfh_TH)@`h>sH_m>+F%PV^q#vCrficUiS+&$E9ZneRD%_P`n|6_Ll z99~jzma4Y|>M3t%8&b~ePd_KPV6+v6#-x4YiMPA&BqWI}nZXzp^fEDkLF8>MsQ&_4 zJPU{XwH-5O*YSr$dl9CxkMskd&q)iK>dZ{kHP7P%YP=x(8`P@2b-3(+@1r-S=km#R zL-RCdr1!6}BHs+z`HPzro)?gv?|Lgcj?!zw>q8kDMcJ5;&o%jXw}-H;)#iF6f<>mX z_(_*TuF2o{?F&&LemZ7wq%~{Qg`mA0)u%%Rz)XeMEp}7bJLZ_pF;ByfW}&^Rb5q)% z4!z!nZ%&)ho;HA}t-UY)ch7)xorZOEjH1|860JnU5Ch10cjUZ{o6Tht`b@Z<5T?T~ zy>IPn`&uQ{TG0;hyp5}N;wxLJRvRRE|3qBX93A@3*a<_*`v$OXC25?Y7A4B=Haadk zS|SN#LqW^)c}nr3X+hX@_ZGu;Pm=Cz`HF@_pml0pK8Ee#^24Aqad_F@AvoHOn1oAB zCt@FS0YkKXkn%M2F$pmt>VKiV8kv95p1CZz32;1_ua0s!oSN^-n5bd@&5=a?u)y^3OAJem zMpuODj}zj6lHqLWqGI^qDErOMzBkhK*dV!Tfpf5o_-P6fb$x3_Iaw?pyo?ea+(j0Z zAB3P6huBCx_o=dEU^|_gvWLY_JySqCSDef-C-K}_WcXxLgoHv|(&)xg{FYo*>nUIjl1TwQ` ztxuK+NWsh+Gbo||sxrcs$H2vnzBZQ1l^Sfcb9N3P3gk^VH5AJ*W1L)d>x)9l2#%$&iv?1BCQ%4{J^`IM|EpGUjnboWR zwM$GcrJtbPOcwKY90`O>K|^>+n@*9VKiFo;)^~IC(U((NL>>iV%2wD8TaX!iFqT3X z%BO?_7WPxzHC#&nMJ~U|=%c^Q5vK;qF1ykBXGk5s{ZGjL0_ecZO4$8|4SKk}y)F0& zAy`96tb3iWf6VGVx2qaBg^7rYU>KV;NtxA>{?m~J#0#{t;AOcc-}5u@B|w3Y-FBll z+c#4n(4#>{h#y{`Ab0jDNq21;ZgT9=1?GJ9 zuD6dlkmHlYT_o`>voUWz&%iuBNT5&8d?{C2gQS*T)das_qU7G=8BjniSjpLne|VCF zn8Jp36;sIOi13M6sBV@MKjUG#_leW+i@uJ(DXZD+&r!R}D6Zc%5ktm@2-rJhmGsv( zfnrhens7+}ixxy0`UO3B65y%54is*1V8GxYD-eG=AMiWe z2=eAh`q9X0^_Mpe$l-JuM1zt*!)+QaUo+!7{!i6smOLFz<3d0uIPkd?X-14cOCN^J zk6ST6uz}x|KN4tf4rz&<=NCxJDhtLn3d?<36ivN(YmX(5GgO9;lW9MmV%L)ZUdxWD zJWc;=N~;?dczEb?Yh;&hWp(-CK+0O{dEt0%4os3Qwn%@|*;t97Xy=%dK{HdoR1#MI^Kgg_nEQ;-wxU$;3Q&H&jh&ntd>y;Ci{rl%zXjT{dLgtx~FqE7KdmUF)% z`{C4TC!)qZ0Cm@f!{yBCjoae0K6QMmFZDld3p@`mLPIVN*-$HAtwXotl2cOrkhs~5 z(s>w+4*hDZltOHj^i&%eo04>L!q76-l-Mfv=6!~JB>r>t#x4UyeR^xd!mJj|WZ@5Y znEklh-X6|N!!DHFg4mx?H)@q@yE&M5b@JVy_+Kri+L-;LgAswawn^O=)Gne$@#N~{Kyf z1ROZdSuw6;dZmEg5D@=vo)c3YE~bOW;XG`_f&xljfA*VHOH|HEb75eYE2q_W_?&zm z@TxK0>L4&{aDU|XeZcSRDoXS!$e=?_j^Zg!PI2-X*HCz$+(%I^IKSw5DiC}{F3{Sz z_-uPudJA^JOrsD$v7sABk6$IQf&J1E^lRplcI(hSmbvV56b`e1KXX(RKgQ+G1Z^t! zJZo0WzCD>^HyZBGvgA)!RA<2X9)mlZVx@HohayraCJWM*3j|X{``xdi-ILn8D5o*N zw_`hq6y02a!Q&MtLu}lkU_wqxZD)J0tUVKhHbD?|=6axld$lG)cZ3wXUdS;rz^x+< zR93;m=meDW1SO}~c>rzPG9gRH~~rd%{4T(*V52 zc=X~du~5H`3kwb!>722>P`)xe@37X3V?LHEFz$*DqzOaBbE+>dqP~5L<5_IDE~m~U zLR5}}86EmHpz<>(LAo0;FG}}*W()E^*(>sE?DL&TfkNqAA|d^3EJ;U^Sp^fi82tI* zy!h)zeEre%v}`&<{sPbf;hHp7=1rBOiM>Gwwr`H(u)vt5n3flef9w;|&(hrW`q-@L z->wu1et12uK9VK*@zwFiFZOfFm3ohTy+1=*Wj)`~U7K<}g)a0XyWfez^uwEOpnT)J zrCjz}PHh>FIxuI<<_$e7TOi>eMsC3E3SO4M?HOE9qZZFS-5&iSnnWW%)`pE=;l#fy#+-Atu^AdBCp|pPH5a^6O(Y9bdTT(OY0S44)B5?1 zIxqyl-yFc5E7wn7N2rxp8Zw*}?4B9U3_$kL10)QWTlMw7zf3is$+_j%BHdS=m@BGm zq0~?*I8sPr0Q!d3yk&;twb1tJs{K7v6(j*R75w8lgLFAf3Aoqi;ejzwALd3>WJf3T z>EPnS9}Y6H!7UumVK-GsT2HOTR&E*fXKV_1^wwCC=bonYWKGQ5Iffy>vHHAXyFErLiZbjC1Fg9c7;gmC(hqhU8kI% z0y||jJZo!XuoyB$+vL`_RPYylQ2V{4E^o5Dxpyw7ydQRVCYTLo;R|7;k{J3%AJLX( z;`Dm=S)cWdjlCQL;uL^eyYvstf_uo72tjkPs2TrXC~-;sFO*pHu@Z4S(=+93e{(v% zAVYuTbKbNi#^m;z$tp7~9#Tnn(NEIl>M129fBFPHzV4^MPYw-|iwazd^rP23%npMp5cOV|g{&gQRGYJ02erbtW{p-A@)=L1}a<`feur zb@M!qyeV&^9l5Jr6H)K3%L^4mr)gfANNwDedJi>Q9_sVS>_PVqP^*H4PaxL2pTvJB zL5J+;g`s`Q)U=I&LxkD$EAw;dJY2#68nt^%e?Ve$y5W-Fls08Oxw)08^l+`Un&dN3 zsqHn5#O-_Bt=>lMPoMJ=LW7GM7-HFc3Au*|z)NC|1rUA2V_tg?Vw&ZmBZ12UQif&d z>RMr_#wXJn{rq#m4-sFUe5r=!ozwE+u;_))(p08^TI1B$y_BpE22c8%1D6!HtX@c8 zo@qcXbuj-xmS|*Q7{#dg#y*3|gE*9YX4vwu)6SrPqoFLD&DvuhXuP0-OqvU-Dr`i| z;ayG~-N5_#WLJT0`?OW!qxa`4zXWrTSiz${iWOW!6DGI&bJfq{3}c zq|m-@ZM0)@>i7xcv)|eqaQ4bSC=XPrA*ZI8^DF^Mb zqJKuo$HL+9W(nYmVI%VY%ZlM$4hU$f77CriX;zz^&eIs-6&HivBho*5)yNZgINd(w zJT9Qg6B$tcPGc(#LQ9f~n->S6F(+U5%zYMXArnhaGI*v{a;3|Q{mL?Vhnq3|ULC(h zekKwR-Ws3{$h*Z&9%Phk*;B&@iC=^aUNMkcS`6w!RlzT}cGCiK>Y~zj9}y;(wYDIE z#H1Y~)f;<>Wn8ueH2t!rDqNP6nL^#is zctuxbHaa>-kO1p5$XndfQmX+ z^V5*J>v!h+>TGQ(6SDD@CC?jD@a3$?xzRBrBhRoslf8gv2Qc zToN^2=r7>c$);B=kpEzf!{_pgr=dN_Xc|9GWHN)F?aytFW+i~~cKP|itcFpIQ~zi9 zBYwyZPp`4El@?RlPQvLx>)NZHPHW1=_-E&fLcsaPM;p3~FP`d|0iIy#)h%$SF(ke? zrgypr6#?(7Xum_Ek~QeavCnS(H5|HgNS)Sje4eA`v$5y@VTN2+{I zh_{$iFxEdm5DW^uo)gC8Gl0rrFqha54MYhASqM>mx3v&*pnh+Xm2)>JL^Mag`z3-j zk&QqQqNn7btBn1!H*Q0|%Ej5~_%c^l(a7EdMsFL!-*$Igd{R%-yYPPH3zZU{9GB&V z!c0*9+$Kl|r*g41!=C5v`)$kfTBOdDj7+ww=f`F%{Mt8>5lopYn>w-Oee8CMoRg`Y zVyfR6crag>F`$+*kXCxpTLjSdzYKKY?`~SykDpCxf4fx5x zo|&`uOk>R~U@PnCxi|Aw-O{x9Srh%Wn*A=ZO*KBB8-A5mI=@S8w;L5RAu8menI|yiSU=_?t2Qbm&R3| z$cNqXP)7?)y5Rjz40p6RG*T1~%cNFL4VUwG4*W#iF;gaC5d5|4V2L~MP?3CTf;FYD zftAs$)N(emyQ&VK=*petDiJwcu?*M?X7)y~FTAXJ16|Li?QRXybLsj@D``2IDS#_3 zYaaML4?s4Q=en+nt*7g8)*_QS6cm(K+d1B;!tf4g!|)UYQ8J+O!hW?k3!q@p1O!At zGoWLL2+E86`AUmm&1+;s;cWN z+$%%7@;QA25`hanaAFv~36U^_a)2kWJs{A{>m{&ONoS0jyZ$7IT`!%UFLmXlTJ45# zWSdtETDXpD7ULlv0Vej--;W?rkfRGoR>t>Mrx?)Iv>eqxY%99#}rn%DPPyLxk-*9#~W?*~cHToL`Ag5>XN?bPuD zgsKkx_X(K77rQF5Nkwp~982nJ?PPGxkWUa!^t~O-Ws1-<*cJ#x!s7_0^C>91 ztN+I@xtt-Ot&^j8t}>v&V+_D~ZCmQW{cW()@FqTg%?ixXR6eu|U{_Yva|%{gw=ug; z3_&{k&U_>Tpg{_vW6IA*O)olrf)9<~_pahp-nD-d?`qN!?YnsEb7c#RX~qH;`-Usl z*B+cmwO*KdX7XHb?ONNMxjhjVcanmemD#fCoq^pcIsHF>4E|Uwbe7DN*tE0Jpqj$^ ztIw%ySL=Jfy_H(Xw-@!{#+plucsW^Byf%xRv!n0nUyVCAEQ9H^v>iPDLcLm&Qp?}| zt>&-0U45fr%}{^ND$xnJ%h0kPpteR_sWRCqj-1~)XNJQiYc1pCTOBT93(TGK6eTX? zM*937L$HOJw|zwhu!wm;JQ7M#*Q!5tY2N&@vW1$>vl^$ST#w02Js0g}41u|OpsDE~ zRjS7=1dXRu_k)RC)%Q#5%(>W>ARLXP)_wa|Hcn4~>CVer$KKY#eG78&Jr|f#vHM0< zRm(Oc&-4i25>37jK7tmqPBY2XLstiKsZ(VCkrR7ut2Jc zTh@>U4(PE)FeumEZraZ{;FnS0530IeGZHyl>!bt>9X<8HAInhvgChD`rt@|w#-F10 zttr^;otH)=)fS;^D@{9q!jT-T_sfNf1N+(;?SzLx$)nmOy2FJQtf$*H3HSnXw#*X;^>^T|gPs}ji`g_{%)wg6WswYIkirc~Beu20DgDS+;QPdc#vJ6;m=Y2507%&o9xm?i@df}`e zW+vvnODrs1Iu#nYa=#xrDdi?ZmHQLVt zTx$`s;h{RVQc8z64JD9l7lPkLUWLxdZ!1q8DgaKf(1H=?@m&y2>-l+N$Dx-R=74V4 zTMwU>u!010>Pok};#OW{{9JL7CT*kQTK!q^`L$1(H||UOd)H6(W}QST`szFm{;v?x zjB@Ee%vs*mXe)*!s8jf#@icy`o`eV`PS>K|c07DnR!+H^e3jeG;wBO>Pyk_QzWv%_ zy!}}KgR1E=zR+x=G2b?{s`Cw0H}mSV*cyN%WaBQUDieZOwRysL z+B;g@AGm|(-w)y-mcjRPofD4 z2?p0JG2Ldr-ne}^25^6+kfE%FI`Z}Ey;}j#aj_nB?7olp7ba`}YF4)%n%;XbU$UiQ zSDRf$jJ}u>%M>|XapamW+am2WT{Z)D9KggP=6GHAUc20GMx0F!(c3?$K1ioJId^>BG2>R znK3^C$bO9Q$406Lf`}=tGNaJDy_2@z_JPB3r%dn!GVBAGe-EzXBAW?#0is(l07>uz^ zl3*t7c@C@nkUc&*XyM(vb}nhPlodLK);Vxt2^c4e8h2VLKVbGljXNY zcHo!Gb1bs!rOX4;CNT~o>^>X*=kb?Y&oKprlR=^^r0~c8xh1u^(ep}$d2VjeRe9)) z`BkX-?&vtXpMO#H-DoE(le@-f2eXfoe7j)AvzIiZV88PUvGKJHCg$ZrBSmWDa;zP~ z&Gy)`)^Y80Z{st0R5s1Z;!Of}zIbww(_vowxX&~XCkFYVLfpn8bqtry-L)RmQ_;%R zl`TJUo%M>QcO>lf)di6+2?Gh?n(T4-qPh=iB{-EV)(%>T#2t?mXCpdMYy^q@Q4j~4 z6!g)TVA9O@e4IU5y!pMe{_EHDbabf%HzfDldMR&5ffBuCu<_=Ywu- zg|lV1@uRcJI&sMRy@YL3`>y>CciUIBuv0GThK?Lvam!OkrFofa!ZjBx7kX`i*=K~J zF^OnLm`oOAf&*uVvKICs`*CXg1DfDx?P^^V1%)sPHWJ01S72hY8GKvY>jrMWJfj`R z5%f6WFv~0Rl`W%k+!Sz0E#;s>IUSzs(!V578I_PQPN#C|{R#b$A!JMZ)^@Y*|YiMh%7u2G)35S{IkH5v=UAXs}E+8V$zsAFZCh*q!`(wtv-Wdfd-`AAfeUeyQv9FqHg~tLiAYuky-5IJBdzOXJv1}*jb+m3G9mt zfZs0CadGk_;TG|5;~d;wy|4|mf8_)g0hi0v==lIcd2?uJV{4}WozOl)_ALHtngz^$ z-25zhQQVq6HL);Al!aW|!LXC~1?c(U59-&6Qn;tY9#4MTx>jv-VfzL^eji^DW@ z@TlAZ_E;^70k`#gzHN+XiwQaw^dOHey{rK0M4<^ze<-HN^SxmmhcP8rD7{;7YUfzU zw{D9%!{r~;hm)OfkUH*x?I$o3yb(wToq>S$jL`QCXP?Y(WHqZ9a_iz7d{{X;D~RgV zW_(#`w@frN?F{}OY{5WCJvk#m(bS5A{d+x2H?laO#crJ0i1g#C>t7F6K2&+27N=N^z%kx6Z{gB6AIZRR!$T|Czdj7<*&c`i=tYvc@m@KcW@;T zL?_+hRU6%?E-9Qh>r#HEW>tY?-dVz8I*4j2%f+W5@U>uc;@#q)bMuW}{c^Vhm=v8o z=y)Xbc|3ZB+*}{*FJ!?#^`J; z!dzv*a3wdY__2CtluJhCkb zBnfh=uVD{CeML6p-v?dgMg>aO$u2giJF^=T@kMf3?Kmx9nBqh5T%>kQ_yJujb^JE-VNk&!OU zCfR5~D6?b39c679GuYFuk0vuXgaQjH<(}?4cWzXASSz*+B{#qgG$*m0zHyfD-r|Jw z4K}9bwwB8_)44RC%`t?rUO+i&SWc5Jqm$ZBkvep_dctVSX8G$6X;>7Y*blA0eDicz z=A|01%V`f18r&aNNc21Jb;aB)pLxP}P6cysIdq%~cgVJ^YzDDhsOYXdC8%{fU&G1X zd^lhC6wf4sw>g%XGMnqHl;?*RGJ^gaw+n#MkZv-j+*C<%^hgL4*WP~7{@=(#CH99z z1!j^WFdeYm8g7^%CJ@*|Axig;BtrY&l88HK@I9;*-5;1oj%du^Z>MY6{HKCe7(mXt zkgt^8>vvL#g4EB=?75u&U^`Jbg|>uoE-vtcHR?fae5APB+)t8CC1 zyWAZN5Ae8FUUIfG70mN@cd&Bz!dxs7mNWGY8W;)QT4d6e`o}WHV59628vKKx6YXCd z;{-5D(zP%OTvhp5N?{-Xs{d^T9dTR8& z^sWd!5C^(Hj+8cnRlV$j#GC7VY95rF&ZY?{Z-3E8j0~-X0!4+xxf^A7G{^n1p5}0) z?>b$~-tD8R+1{~(Jn47}BBK(IU@%bYnm@QXXV7_Jn5p0xc@$EMt zh9!|5-z|p+F;?Aj|EM*;Ofg^&XX7o!BtLM6fuO#Tg6tn|2?A;q2zMxZ#|^3PAja{j z!47DkRo!}nk=tBevHdytqxDGjrRGJAhv`Z}o7c%sxC#0C)u=)9R@U+&QrH1H1ycT#jw3?h2#O}c zt&m8lFjAWex|W?jF#fFVI`Wa3`i^4P=ar=fHFT}S*E^ruLI{mL)=LF{pSf&xi-&BT zki$*27_q}2x^k*QD`b*+#a9w_=?0GepnGXIq;_z)-wN81?YrWYMU5`z+Mr|Xe1Tv0 z0;ou*-f~sqyH!-J8I}li(T)%J2Xd-^eW$!VbP2f7{e^kRhgF)o(<$-4RLKtW-S<~2!Kc{LQLG|yV;|DI31`H08Og@_| za9n917J($StN}sqp$g2(_#oKB)zx3Gv7T@!hjb#Ys=9(CkoZ2Y9sv(01>aoG-zZ&eS+c|~(|{q# z;>Nu8G}t_`OpL6!pVcjK9Q~L9YiNi~JxI81WHM_<`mNS{x+vdF=#bLLdur4-7WumKub_(oJN45Gu4;WO~R(vkqEGZ3k$CBtZaBhL7jNV8OkEcV|;nnmPA zGVMdyats4BIThk$Cw>hEpH3HuTaQ3(-HsP5p7%+#SnZ+lu5x}cK3+_Tk`nd1nJ+v% z53(&WyUI;IW7)NinPf#CTfI$_C7w;C=8wzYKvM_YoFe3IqFi97wzF!5c9j#JmO(Yt zIXoHO0EccFZeq65&sNbqcX=&0m)j{dhwjVNDV>`}FZaDMZcc|xqk6Ash6s@Gd`(>w zg_RbJ2Z+ts6Qf=grKM>L(N`sZzEJ$RYNh2B+D!=!#B>fvMK!wRQ{#H?YXgtBCWpEj zJNKQWufbrj_RU)@oVFIca;dtU_Ju#m75p8$PShI2vNxuAJra8})0JCu_32E}@`tEo zmCIx?CGlsP+VOIRGP`uNXh$2*hsYtPD@ZeVU6h)YBeDCWZM#|6`5}8MRuOa3pK0bn zB$b-g-|L#?W0erwSlb~s=zkVRz_PfUu2YQSklJelvci7+=);OUFuL98{h5&vKuMGu zRC}%1QZbxc37|IJj%g?(4nI!vZo`DR3jgI$P!?fuv^{6G&={z#b9;B-b~)9y_o(Xi z&R)NKysCPKG_N**zuUyju?+UUO21Ph9tYV3qpa6S_8x)!OcTyt$ z{sCyelx&Mh5EBDMXgFvwQHoq-F_ckaQwP-$zb|E%JRfq(Y#l6w)A0~1DLJs%`B#(3 zTQzNN1iTuc#h{1nQn}i!5dN`RfFycvMeh%WNZ~X1lH~PPcuEC0e5csjbsYaKK4Svx zT~y0+e!hS3=}rdT*NUL4jMpBi>~N&2MALK1vV594L{9!OUqrScg3+^OYiiCXd8(?X zl>>)2{}$}Y(50K@G8&0CRVst2>){n(m$7o@NM8S!5-7&Ug1NBD1s?3~?q)h%_CdEq zPMjXP${2d1dVvi%WeB(T0Umrq)R)Z#(i?=1W8{kr*M;*V*aT6t*l5$Y_F>VbXMN<4 zHX1?PdWlNe`KOF2j$QJ!rPX2F6j$(vGmw93IEJkkZ^o9Z!%ox%QRLb#^uAt(asC;$fGF#a$lFG3kyA7TeY)p`0w8q3U0vCW;}7Ef z^YytBz`FC7-4I1C0HR|wM9m*9gl(J>|6jCTb(BTzj7YCY&Rs(qpwt^Dhh=!MU-4~X zxG#r0`;^L>23ViWIIP@=BK=u;|6m~9(8UQmy%fUBWVSLWBFA-ChGWV>$T z%oFYYzfU~6* zxHB&2QcYO7b!Yx0@7K&K1`IO$-G8Yq^g1@#9EM*V0O#=pM;6Y?=AyLt#p8btscuBS(%-Kd*V*gw3^3StPqtUA9&jo@NE1A6{a*v^2%Hi zXvV4py8ZXje47Nq4C=mn)!NC8-f|&I3A*znQqk7uUJ5+4&_O9p7j=31ETU!2)*b6ljY%|^lXFSMN(z{YuWOO}SJPAZHF9)YLmxFp;J2Oig`j58!+x(`P zNKr-S&k7acfz^g#Sm%z`WgD~sc9E;7e`8Ug{_!>CFIhwedmOYC0gv72&>HY(mCSxM z^kSlq;_3o9pNNpQiI-&yM%%61{lVZ!4jV8_)^b*2AF~CV=i2@9{%=zKFD---6n!#S zjSmL_20s#rUj{#;^8l!W6ezHE{{>b|FtYxYVmwrH{bYGtObR~24OtajNP(>GcBDUr z$xFF{r~YV>P>J6M=_pmh?SmHsqMG)e2|S&8^Odqh0r9f8ckd!$$3^@%JQN+zTtG|U z&%(HnK6FZ+^I=9TV!rA@I@5$^G`%R4*PQ^SiL?ibqpmL;qt^rGIM2JbyG5H_^RwBL zmiqOQ(C+sO(T%tFP|tyALDjbV&O+bEb59=o=Z=Td7~^kaW_y-umRmsybY#c34i9Wi zXz7s-3g^{j7=tJ~vh01iQbK8RW@czMT+FP54}j)TA*Xt%=;;Q#lqLdu!gXlA4=f9W zv_k9Zg~*$y4^GCH*0nI)5wc%D=Q={(9>Gi=mSx7#@DhrMcm(g*q~FBu;CBJYXElZC z@^+9~(p6MHo0^6{1U>$a_?;fBh*%*gU>hOUip(r3rn*8U$>8MvEOa6K*&+yIwmjmaph%7%h96Q|MV&9a>6N4xZqQ{)(RqeGZ?L@c3Sh%CS)0&jgR1;-hw<>vRwGn%TFLAdI1LAN#8 z3}T)5h$>2!UJ$~`P!e;FJIhFmDT62uFvZeMyT`}$ZOf4*Lt1^NI&XU>Y0>dmbUCcHygC^+ zZg#$8;$a?mCN7;b=`U0R^k;duG25>yuQHk0Wx5BnbW^P!kZn;g{zKvbYM$(WS(oUx z9B_xKmB6E!NIaj58xCLwx7M19NA{!`yAa*o9}m|nB2OhLSvw!+>Dph%pRZqAh&lqt zGr5M1-vs}m`y=yxz>sY1FQ}-$kbv~~SeTmQNgg_1n()uR{G3r5o{0}~d{-_6lIh_v z_U!}A5T8OPaFst$`s#h_W8Dn^`7<)qKU&2vyb>+`Hh6e}0>LIB1j1otm*`u5H!D?Z{9xeSs%qPQ305uj==A zt_>zcH`^lGE;~R6J6buF=|ymNZ{P4KASPy({B&i_ zt8aEbEasj|F;N{Z$94a+A|7KWDso9Ux8Zj}wN&J(v!DvMM7v)jyoUViW*VTiz|Zrj z!1DcCrkW6%m&Ck4HZsU2mC1yHWSJ~{AF(P;=U}7b-@5>Anpd|+J&c@JbgD7fHawk2 zOd8C~#6?6&*!qLQsH&v08)hRicrj$s6Y|re1QIAfsZ+(i^%RwknAqoD`r$Ofs;Qvq zfl2??R*0@xVe3{p>PBeN4*78_{qit}Ddzd*6K*`>o4BIq{pgPG>xIN~xtXv2ej(O!)_;)Q?S6276=n1vJ|oWuP9=2zj!q`8 z2dpb|$;u;ud?1a%kNt1>19ef+>yvxZbxur$?MY?r%IeD;e|V^akv;=s?*%{o;Betc z^-)#V&y=))HbR16G`W+giS_4CRXm(EveFA1-gqIrY?>}*WsdO(QJ;xn4#+@s=2Xt> zjnp&f_JVoBG%MA z8Qmi_A)*MWJ9>C{iin%9g?ds^tQy)%^Awp8coa4!hDw4eG#TT4O=QJy z`~0;wg+Vf%s*f#%lujXBlBCE{)he*!ki8jyY-ijpsDH@|9`uUfTv)kY4O;usl})no zlz$*>vzZ__TtsMr4ts@67>g1-OB{Kug#-d}-juO@O@*ezbZ3tkM zPccArzr_t_H*fAOudNt%^8^qR4aTvRd51oDFV1eSKuCY@##qpyO742yR&zRE#2}1; z((`_X!1TW1yoN)}lPb1pzCV87u2&jYPhc^RZrpsQtfh|xxuv$&pVDG%k}D1F{c`iW$(Y zP;stRr@0J$nBDA5b|c!av``zdZ0d6=IO?c0myN+&iA2i#tx7MV3>W$|prJ&iX-FHm zUUL#AO#0b540+s10arqrQu{Zer%KNboqun;M%a-m^i|wrb;sf_e4sj#p2O-Ck43kV z8QMO#lBm_5OAGT;TWCQ#Wx0r$OE)I$4=MLp3u5>_O=bgxL#qhd*BV^_S@9C0I8N7l zOaf$u#D()M8UYUj(!CX}zgGJ-tS+d%1oOACQW85<{^SJAW%<|$)$&#H%gOzl~zuWqOgrK%4WJJG^;=-Ai%1_v$I2EcW}X*EV701>g#> zCS~&2RnJA>dwI_A^(8;n$V5fX2l#yQM?JAe_>X!dANLm~IU~=2a8mT*e{TmhBJ@_I z5vp1+T8hy#nAxwu{&H*6GWL#CGO-Z3->Wab5nBIPr=R)nrUsyP76lBMtt5p3VNh{O z0g$z+NAMY)kLCi%|JGbU?_WUgEEQx~CMcV9yRQWBd)Oa5vh3xLg`J*sv*gIYHbJUPHKv_ zfayM?3|BQu&W67#g_5aQyftsIu$8>w(=#$L(f9jJZD_=Y>A;$Y_mSDjYyl>cUx%Uz zq4UO~T&D?lt&K2dXreu0r!~_LA^oj;v6v`MkBI2?s|}t*jN%I4F;`I^wtb~V7)#7@ zI{V*B#|KKdh5oBqMP!R1C*JU7d!*{}v;b%?<`V3WWsK1{(+g69|(8Sue4_2P)7w&dLeM!3$;@CiDMqN^Fuq%S?!~dpGSeQ*v^* zS%k2=2DOXrTJ(?kR3NiZp(XNtd%`1Z_n{(8;XqVF>S&qgRRt9%RJ zO=$l(t$l)t@B#yqPhm4a-S1$9lk2!bWoSNCq)X#QVvNSovNVw}}QU6FP2*w%hxi}~_70}q}9 zu&uQFG~@}XlW}eco4mIxg@>;I~ZbNuW2uVGJfJqW7r49PWNs@;M7VA zGnEJ?4B*^TcO?Huj_^++`OC9wQw;Qzji@Vc$HxP9c&3`(CY4sNoB@gL7rOU7wU;&n zv{sj+ppibP7acnvy+^+PTL^E2b?V>!~*^`fcQ z3WqSy@5@u}8Ds*29ZMz0t=;-YCW{WF9JOZrhbB8Be1@j9pZF~Iz*V~6!sbU_C9Q%d zx$g-aM-{k5M23V~zsaie9il6BoHNpz6338048_?>4DYr&1XS3sp3s@e4E1i&B z>o@fV>*$r+tcpb8lfx`Y6HFV7N(L|pLhn1xA!dhW)}q=C<#9r3yFhKCARx5YQ}E`= ztOLZ7=U_bTN7|Fw?N;dLb@F3=Ix02z2QC#dB@-;|Rh1IyX(b7KR|Z$q#4(U8$JAS@ zU_d7<_iM;_v^+m8*RBJl^?8NK7mx1G1iWJLzhCp(w7O7b`CN;t(_wI&^q>Jr@W4Vg zqxix&@3GZEw5M&{AQ0VJ)LYL8c3xb$A-jWPjdP)aSNoqkf&>kf{1Y|=B>h!Kta*TS zB+krc@Lq@Gr~plK_kuvslc|~c?|_o02J#f;G`Eln&5w|fJ^oNR)c$)E&EL!9u{P4p2ph3!M@)a$ zh$%jI|Ab>*Yj@C#WZ0X1a`{-k^k-;2^5h&p;(37oJUuY@H*y$qG!cD(S3(iPhhQLQEHIB=seKhUYYrR5MRp1 z+UfE`PB4jC0a3>RaaAQL2H&v+S7Dah#K`HZtgJO9z|~D#sIL)W3fZvmlMc#HO#?B? zASVULE1J&F(Ijc8Cmz}+TVETI?rXcYs5Y>3GVRiS9g=N5uqi?+Q1_W}^XV*|%1fWk z=v&1HrHE`vV>_O%sD6n8?T}^mFWz+YWnf zCi6WP>?E0uNd93Gn|%Vt3+|^#9SLIi4_d<|QSg5?WY89sbc3w6sOD!!OzOg*G>w9= z$*!xFDjs~O3A^sHGyz{$8oHH$KHE8EW*B)kV_zSN(eA&Mvc#1_NC`J~!%6)m>&ks_ zBxx^HH6#MU(UqU0NL^!MkOsqCg0X<|@`wXEy4 z^%gr;9-&{De@2K`_oUAhQR1xvDA=A-l+<7a+sKk`pmUSRGHy7)E|M_fmFd?V)2!_h zG@@G=Ra}une%4UOc^0UN7_oC#+p49O{tQyQ40S}NrLWH=9>kY42s+iZcEP(pUE6a^ z(*kx14e&7I$3%O;y25uf$!d4KcH#@4w?hK^XCI7*HhN?@aP@ov7no}P+4?wn(NQ5z>1w+SU{X@C}wwH4M#d;(35P;1Z?&HH2!T!mThOLfMojNON zP3jc?2m)xwk6hs%fI|rLfRf`kj`R&#?IUk+{WaO#sxPrX3iyS3NCp{DM`=wqDv4*fE|G`HU2<8@X~ZG`H?$+8MOMP#Op2;Rx&_F% zvA&;aGz2*)R(}Yx9nTqo^e6BAe=MPPD#eLVw};d5#z;gpNXq`z7n}D_+DoPtp10vMN!?Zja8d z&Jap_eyyj3L420_oRg=#wL(HC8~sPeh3m8L61b&}{hI8Z)fD-lU^XU{PMiYAD9l2w z`j+PYD<;o2d|Z608WSb{ewqZ+L02<{80EcLZ2FokmenH<mA}|vtHY6;+ip@D3Fq*bMyE&^UwZ&j z$!nn6hQQ$YTJ`auvD-l##J6vfNelLz1a7zU2DS0(09{^Yqb;6hUIw!UA-msYqR<6+ z(zR}t7WPfZ`=@A#!Jfl-j8r9Qw6RssE*Aqb-cOH384vegZ!wUVm388b4CXk?ERsDY*(8 z3&Z-%NtzeM95!o?Qc@zWTVNb)rh_^nL4&)yyE7*t_j}~cojdcUiXS;YNKvP|cdxxE^=~Y2^c?v`L02Z?7#FD+}vxM4O zZ0g*`f}ql&Pdql+9P3TEXXKRzKYIH~FXIQJoh(jprnSzeV0T7Kkhzl2an?SaVqE{g z`0(Qgb8>lQ|g(`kK zf_jeJd$)#ewy(LZC#jw}*HE5|G<*UA7W}~9hj)_rl(6e?Gc6gJiwOkOp=j>RZu-s0 zDr^*1TIm6kX6q5ikOoconx++FeChp0Q4MAvEpmo|X2^6+2EG4-Pf3v&R1Ms( z&LYjKhy&l(o`g?vJ8xE&NndsfcJy7dPI$$E>&9b?L^vlOmfs8tL9BR0jGv7Pe<;G7 zv1?|f{~Me6RIag<-d(f4QG@+Lrd>qy;HYg!Wt=i}if4^wvv#KSt_Fcs9khK^t$H(R zJxdDXo=H~wbVvaKA^e;;AZyX3N}8eLszw>RQQ-cl@C15Lca2k!BMkSfrkQSZSb+pU zo3c5brajWKSRs8hDCI8DSc6k$a45Da;#j|MoD9~QE}nbT0^4%mj+Mx$kNsqOb?ao= z^HI|UAIhHW2A#1Ytj>qDpliA(|`?<&UEV`4!MrYlH zKd+PCKsNjJ>}V5cW>@D%>iSOtHcNSR{SF*G)m92-z z=7qx)sat#aUSui(8u{jKEKp{fGjdLCiiUtF2F#pMO7xWE(aJ@gcIk}Qj@W(_IA}kP zs5CkO_8uXT{TdS*;#zgPVvZ{7l=6yo97KlVH-yQ}4&%izu>^$qdY?32pY>w8wn%p} zJ4lUd!URF2Q2~5%AqrMzoGt_Z7&v$|}WRp1Yh+t}>{iG}5Y^%xmrJZWg#=4kLi z%4dTDExR3?BmJ$o1lSI`vY)sJa*BV1KhADGEh@p=00-rNA=Y>59v@d&T)VHXY71U_ zIB{=<{$5q2`b_%1nH3ITG`%t}^k^MCz1hhfBPW7(Xv6^lPYqF@<)D4hT*^w*2r9$#YixIDb-g!8e*RbeG^C;;o zrBKwqJ=2ttQ@aMSYk64HJ-tq_d(J3|dF6@sW&Pzv{OGm71<4o**cz~)Q{IaJK=PLB zKTuwI!EMy5tTm-gbz^kTWmbsaTCNGQYX;hWY3$4j5#(MejJqAJ9{f5shf?}f6jbeP z>r%o7jm$SU(>Y-p$skygJT##E>c~H}#}zorQRaqblp^O(`hjUXNI+epqM}$!)!|dz z#=sIknhL!!kRL&bLPXq2U4m=)P|EQcU!Z(11Kci9iq}*(6Wb=gGgN6lJQ7wDX-rTc z=y<I@+9k!+;-8ksRx+sAhLZdx=P3sqY)9z>{n)DrZ6CH3ZDm z&=04m8DYY)?}4J`Slc^2`#umP289X<_!5U2rSO!HGuI*v$g`_yWTX%$+J<}ygdEk0 zmgtZlxp!Y>oL~J=mmgY~iGLNaF?H zFF;{?YFK?#KJE$%@MrCOO9Yb8i?xhO3I2TW0nj+aQPy>LLP#yMK$X7*nF^G;#CZbL zj*~MlF$;o?>FBP=-7lqCvEr`F<`i6kz!ZLOE+q~yi`ntn$M;!f4f=UQDOy|j`M;-8 zVj~mMi>jfMb=eEs6(Mg6E0r;^mxx8IN3IM9i#hrsd=0WyB4aDZK`MqU&y}vgDF~`i zD@CfBJd(Bjz2VF@}CadU;BkOewc}B_uImckVfLUCa0rDph zQ>gar8?)P-_NwOeC2_kHT$LBb zAm9~)z)eWGrVw7{9JT4sac&y~%Ty1rsqA+7Os)X*(2;udvHq|Y?^#eqObZ(?+ZMlm zM9{e4$wSUm`7c-Kugv8OpSfa!G>VFbrhS>jUA{Igf0od#!)A6wmd-(m#{4UE`SQcl zhYSFb8?t?GMACTyAkq|}1nuw>07TyO|DTmr9(zz5zd#cgWC1xBhoi0`H=3yW=F6e& zovCxsgOQ~$tdU*PT8S^muot(j&~9qzL${zbTo1%|>b77#EoYgfseW5Tk=lX$3BG#) zVI<{~OJ|wy>*1O0YojC2%2fmU`NWM&{?Han6UOokToRUiEChi?4aB6P{W8&tj}X~= zVSLhaVn=4bf#T;@uhnt!z|BlM%#LcRNvtSh&q6!s)Fh$6fuy4;G^9jd&*8&B-@z@E zk}uJfDS@r@4`4EPp#o95rAl2IYCs9q`Z%EcYem>|dY^1kZdy)*EpX7lua44p$YakG zs};@dh(G%VN?Hb&n0QxrkfrPltX4tO(b056sW9-5MP#G#P3n&G9ofzP^fKLXvGQ3g z-opjzoMZkWtxQ_=Os+O4dsl9HHQg9X-1%)49q@~M$FHj2VoMyFHru`&rl^s*2XoyX@W?rOvyR|}3otZM4#hzBnF%BEaw zA`UxN&k<{n{g#C64JtDq zin&~l8lCp)g-0{gNhzP~FzwjYd6-d6#|bOlTzR(Ei2p9WCVz_WH!HMJ^SLT8{x0xF zoPGA)E@Z1+&k*aQdbh~fM605sCaKqUhs*`DSvL7VA}Mu_aaHL}FtR2x#3+usR>deG^kU9|Y~VV}R*T2dOg-<9gcw+HBe5GpkRV zkbjJQ`^MLafPh2+ZCu`uz)dO^ZARKj+U;2?PY2;sDO>&h==EC6Ce@I$C4nUO<$CfNb!F?jPY$((H}PyVwu^WJf77;RuvcUBc5++@giqysF;iIu^i!> z6f9f-trWl=DX@Qah}HZSd@90|P9>luXqVQgK%M=pcymV0F5MlOQMMEihYnu$Pzzu4 zCcLP>;Y)Eb=I-j+Sw&n6Q|#gN0XrVy1;n_T?sma{4QKf3fH?QlArLv-`+aGa772NI zVbz=aA(9N7*p5a^yo6BZ@5IiNpBpjDuW+D_@mb@4zH5L$W-CSL`vsK^*O#Ath%$AL z2?+<@6lYW}l#lEBZ1Sw9Dn>M`oLmKphV#ct2I6#Y{(?YRN_hmc<0Jr>?Bd5_5r8$T z8sc}a&2ON!tVO652nZHe%hZ`csW$K{I+w#b-|q}7b!X*h95*~0Jk$YRouoB_cprYR z*;a#?fD$r6Sqg35_I^{~??cA-=a8W=LGDyksA#WvitCN31;8EheTZ2g|JPLqxbXhJ z7ReJ3i(I~SN#4-AJe$cq1<>lhOk|1l_v&9as~}@&0ksjJDx9A@+%w1zD(1Jv=)&&A z&p^o_PQrU1mwsp;j&{wdkv2@N7)NTNy@RBD-nv)0Mv{%DbDn~^*s+gBz;pVQ#c^eH zd!K!kkJlO?x!5?pS9&FuiGcMjGG(*VYV@;zad(&yGz=(79?|1Bs6$m*&0{fDXqXOVlB-K&#tF*5!DIg>x z#6P4~{;wK1+W<=>#1#tkNYnGIZpZcIVu##aSmCkp0!9PTS3U&*k z0c$0`o9R|?w)eDo1zJWVDU|S>*aj5zo#wJ$p7frW;lbfTpMu9&bdA4(fq_r%8twQX ztbv6wBawZ5i?LR)=wgmW3S~o~Ra?jRv0-$m*_&tv7!i>$*csQ9 z!2hy90JtQ+s22sS8|62@5Yg)c$gq|9cX_{Jz4KDv;Js1U0{z>D^-m({-39&iZ8@DUTWtTQgre1cbfU5FFv>n&N?}>*2sPB~GKUXq zi$uJ}r(r?IELI)7CedER8fo!V!-T0wWfCJW}?Ut zE!6FeRS-9}j(EFWl^O#g;b)MP0+ryW z(52dgKM@|M>wCYQg{**ur%hoz-2tL?tHo4)>*br?)4jT&nHFaTjZ~I-mXho`2*@DO zmWCwgr(tgw-$E@1<&2~#M)E6+VzgXHbnac7AgQl4Dh_$OA^i9KzIhnMAN%xe z30+i;JKt*^rxPQjVN*1Y$(u`lNvtYr^Y;eXd+-oK4UqO2GBWihXqnTdomgLe`pZL- zUjA|c8EXI}Jn@9}e-`D}c?o-iSEcY?_iyC(uL#XQi}2S(l1NYdvYeYYXOx>j`Z8)t zZyG1JY%!sCHpo*cC3E?weH8*Ho$!_tXhoc3&T=;{yTNT~FHdu=?h~Wx^f#KTU_fBf=XDTg@A8mMMOl5>PS7IE>gQ=0C10JUwq1^oT?SG zvD0G5rveBxHykTFZZD~D*Zdr;MU70w;E zf(}x~AiD`uJP5Vkg{;El_6MUIIDpU`SHbEA=M%VjAEUN&b~RQ!22Sh?^_wGE9Z4jJ zrMGy!r_(WC+T8JR06f+OW@UPP%S$7!_)HCC`}}Rc`B&Nb*LVL{d z(O`DJ((SSatrW+n;ZKU%`**N5x1s0vI^&H$GbZ;ozUb$GU#q(zi$R5)jGd9RBr3gW zAkHS}M4-vCa$cB`Ny4)-6sfk73};#aM8MbR*cbcmrUQqq_}@zwQyuet+MX|I_c=3R?Ro`zoKIHG3a%AjAZUyy!eV zU{bnzhkZ$xfxKOUEFNA24Oe1_Ow6~AIDU&?nhqVyve%{Q)WH4C!N{hF#7N{Io6FTo zjk{u-P6cLN`M#vRPyE7{;vTx7*{t&3ycrcg1Qh}-GHQ&oz%ry%vJre zns+K6kK%G+Q59&t%T9y@8y- ze?j%&rd4G#pF!>3!8Snh%DdWKcFqerKr^FltysacF>Z6IOOjIWST!|uMIY`XAZPVH z9hfb+pT<>)NH&Z$D@rx7-kW!kLO2pxn=9R;_bhTE-L4UU?y>{=kuu9^i-W~_EVn!L zKtqET{||^nH24aIg2z=?TqxayBhP3D*OU9QPWRmjr#~}G=}dPC)8>~~duGkh*Z{+r z(5cPGuZMScaWM63&A_G#v(@&jtYdf?{j~0|KZqRdZITI8mfv81zZTByyxdC8 z38w^?r%H=Pwq&Uz+YIjq$Uv5DK#nEcaIH>S0sp#y{Q}_v?ASN`&^9*nRMTgzg4;O> zsmajtmHkzcDap#9SQ>&=%!@$by{e{!5|NsZBHJq|j(lH18Bb7^c!2Rc`f-2!Xo4{P z-l9L^#(9?J#_;j&#-_Z7ld_5mx#WTKM{2azTCU>-E~;eO63JJmX0!-!YV0f5E+r&~ zxlo1xPwN_V?Psa)^*J^XPb+4xm zEBcNAnUvK60v19-`T=gU$tfu@bDuh+qVS+!X7|NUlk!9j~UD6t2J6v3Fl3>hP^lWrV8B^nNfTN?k*4 za)Pk*zS2?m29+hVE*$|7-1swcP_Nn)JmTU_$Bp5y#=nBqbZ_ArK+l*LyD5BGKpC1O zTq_pgqY*ukw?CvD>UFmjm9OS4jlp#V{gnW?_D~CjQ*XTM5nHPdBI>!>llP@XY~PSfaW94!%7TjNyaWU=Gnnko;85Yr;LgAId_o@A&6FU8NT4k> znpRK)b&TBa784UMHyJusD&J#yI605Fas2uA>oX*0cy9q-JPR8-lc1(WBXkWP69*$R zW-h`gCV+QYwq1Zjcd#^GaB=$S*nyc8!gKLl>4UMXUxa4fbcsrjWfoLqwt3d(=$_Nj z;OK|q6GOlM#-U60jHPYC|wcgP&;derC)y!_>1IW0G%URGw#6-P!UNt6?@x2JQ!EmMdA>F#X%J} zV;%-$-FY`@YBkian{6hEVf*&T#UWS|g;XKmWix1-cH8e4|JGFn_RL=k0&k|hb;?G? zITq-{0R7mX0CC?`-q5vdX`ZEm@HUm(45i_k3*jgFu#XrOwEr--Nvxc6$w=E1#`8(D z(nm)iE*HlPJ@?gt;|Ej_)qNVIZ9|MtI|(xQeg^0TxA|uK2w{uQUqZ`iVJwf3SN-67~brAT9iU>s3`laKfmU%ab!pG|tE&Qx!MauM$ExzFo)! z+4qBifK9ywgQ92O#!0$-{%!JCO>UfK4`b!GdRxit>@at)2io9!1rj4rCPE*D@b&`I zX+>O)3#YlA29->+X-A8VI)m}%5t7x-!9?>V^NUT}tE_2uKx!lrZ{WS(!pG5n`NKP9)4 zCwl0(H!P5oeU#LOkJ16HT#QHWDbl!^GZ^YlWl4$2 z?|r9A^jUiJ8<1*BLKubQ3u$LtOc#|Fz2=j@J>8E$TaVf&U5W39U!z=&i7rNCklbTX zIwLsh&FJ*+FsNSXTJp&*-^Cl|f9~A4m+%hl@M^(y?xXM16rK!!hoP>TMH@2eUo^hW zlQohMdiRm(WM(ZQsAm+6yqFT>oYiEtD75Ih2D+pP1&>B~!Du~#%>*?39XrgTFL@dk zi+P7E%}1Y(2VmD$J+g|*ig!ci;=*YLNCn?_b8>K#k%vu8Rex9w;R2g9!v%d6b;q3~ zL6eJRe{f^g3E&YbLEL4lz*qb+u%FLw{}py}6H#N1-k~O4^!>Y3sMIgnyv1=I-%aSf zK>lV>w?VzZY}?%sr6{3yrXDU?O6vCBK9gav>(Q3fxl-QYOn`rB#$|5A@qn~7Xuf#Y zRew3nVXG+|fxEcZ==!=x2t)*S9aZ@nM*PAx{I_%YVf|$QCjz&|hxCxNW`pl9e})S| z*`P|8N8#X=O+se|q1GrsE#idlpW_jXfyzboNH~Uy3yGX1o2x-ZCDGqmsN^`RyD>3S zt3)G`;zYb|Jt3}AQ4S zKxcwom8Rwdig0>-O$ShjpJCqKdOdOUX!vQyQ}=pnCJ@%9BM`A)MwbP7HzboTMvS1j zdXga@MfEJ*e4+bt5q~Vqq1ueUfgL@sF4n222wrH8b+MFWBvrV0T8IptG1c!)QCf(t zAuQ8qE|d%u$EApXxFxFXqHe%Cu!tDfaloS4%YjGPmWN10=Q<;U!FVE#0qZYB*Yb3Q z9ol-1re^abn0R_|9(GinlZCY80yA4NQ#HKr(_Hm-h?8d;ZT_@DC|S>wT5yRa%J_6j zWyU;;WGZyJ8Pa}92elzZ5~w}fsP%hC_?bFNrhk&X_<=rZVr0_njf;W!lr`Kd-1-Kx z3)*YN;~4x}5U!ju{a)yXb65SkueA`(_R(QCSHk_6FnoGqLg&I`7$JH5^1)V??jVrh zQoZHB#ACpJ0RhBiRQy9I`gh>+&+!G)Z+aOJ68q?x?mJX>~eNAo7!IU0+ZZgLwYmLn$oXVrWfY3k8T6^gndbt8JRXKC)h z)O3F6kW`^AKY2EOO9}OTdn;(dCDtRK80(LlKkJ^r@gr_VMRoPKwyNBI^yt+d5@{p^?p=vwB4xgpF=Am3= zm?k5O1SNUtyY>t(6LRK)qH(tFs5MdXwZz7VN((99DzxFK{}Jl{$n|na5NJQZuDi2! zlzD1(dnHrshn0+v8|-#{ua{FRr`;Y#M4tuq<*V(UVs-{k{+ik$Bj^dQ zLQ$#y!bttM()-Wat@T2K*_~ES|9GJpweUcTa7m|Pk9}41vO6fMK+isrvC>jaTTZN> zXY{G~9ahIZm4{ofraHLZ_oLse4q9eQ!(q~6^rpJgk2B~;MK4-(`b;kn%X92|+~9w@ zT^1LSlsw!iBbxIF=0XIiV87R;tX0k4vwiYHV|IUD6<+wVq%UEBZg&`38&B0PY&p_v zdo9($&+x5Xh7>y>_sA7Nlk%aD`#CZrVAX3oO~67s!-H}T%g45{BX3O9SdL>r%kD7v zDwYqab!q|{(xjd~qPGQ=%kcs7OV@)S+?xEheVYQ38((>v!b9--$Vb2TPnScm1=xJJPPaC8P^;2HYXZmF4t{E3~hNcQ`B$HxX#|?So7Jcca#)=w+9# zrb7i5F~^CH^^y>D7@YWAl^9R&BV&YXuUD-2uZ3(|f&_)$^1fdiP(mBMb+xbCjpsNS zENvB!TuQxu+u)eMZIn+?-8xm$xv8i@0}IRj1>>9ZUb%nm>}#9&|6h^4|5IewOLfNF z%c}Mrt|ut%#Kf-W%UslEEJ}Ftht}}+cZ7CJ)a$MXu*$55=7cgZVm>(;-7)alS4NH3 z%^!AcoH}alu957F)v|m`eQwaynl>WfkR~D4l9oirxC(6g0o*8`Ge0k|bu`$s+FRPf zyN$a@d%C$@u6?QU>8n+Q-hTPCf!2(5?^*-HNavMAGTn1-X;l0-uYn5sqI+8=`pU{N z!!`o*GpziOapW*oR#`L<_9lzA1~_u*rZ>bq39gYRnNc;v=IS&MeVLVaDviS$-YP3r zWoDVfu%^}<(A{bl=nBQkKF5H*DunwPg+k%!eK+@A;`+(z0@z`POe-sI+#6jDpX*E; z23I~Xag9Twbh@1kDVEzXITU4S_1%-}*+42_a(iI<^G_oEA{V4v4tD@R1Z-M7$lW8f z1F45fOu)p@#(9Bj6!jO7)$w@&vIdy*!0dRzA>vlcAQ4)J%UF?7-~4|{azgrm!wXDP zr=A`I<_sKObDykcN@-Qj;w$7Q-`x-aCKa37y^%AKk0}>Io_QS%355E6qnZ=`Ki#Oe z_+5hkng#H$+m#Bxtfc@$ACdUTgtrfoO^_%M74Fj@e>_1yo@SWzrn#&+nORAnbKl(d zrOv}Fy7o|TT-|zqKZe^@e%Zv7&Q><*>0|(&cscjg-6w3fhY$IOmrf@Wi|}hPx5tpS zQk_0DT!$kOVQ;)Z#%&@kqbV+&_guYctFwnP`$L3MJaIZYaag1p@N}tL1pqbp>iF)m z&h=uK^)%&qZOJhAEpSk~!tuq&4UCwa9|ft^wCuHATJgnFWV|^6%=shV{OqkJODvkB zFqAXIF;_;qWE8+GedPnrAeM!vADYp)A0Ck7-JYr9T_63pm;A#DY3hMxalgVeOD#YAh-yFqJyyZsL3x51s9tPrfv^Sots6IRhxT7nK8X>=USJd54d65vtJVS~sBuvf zyId?*kcfPO89LVELqZ69UB9c60NslPQw1{>{x-9==_R4f|NDnLb-;wB2@4#M7bFe= z4%FBi#)QhTf`SXYJ;@CGJ{2yruQwa=!K?X)MbF*9qB#RbkG!Tw6-I;_H&E>-_cw;> z%r#NDcP?uys)GsX;t{yxkL+pa=bB$&Nj0sQKmPN^i!;P<-=QN2}E}LU(13BlaP)e#Zc|@{T)>gAS60tL?J zlzfPO8du{;j3l*dJ*f!iA z%dr*T6uKs~F30ysY0`A7Cuq#;89TUtBQ|5i*dS+>%;;D}?M(v;SoC6Bc7K~SHlZg` z1&{JRCqvkzCf0veKVYexZcY|T`GMS=ozb5g%BqLpBqRCup_n(_*|y z#yd?tc@Shg4UVnYb-Hv-4{X~D2pBAS6u(=rFxn9Lz3}H_GNtk}7T1rK1VZ7g-^U(n z9AMb;r6Kv`PHiUVR%^<16jYU&)pEy8wE6(fqpuVP9~QfzJlyf==4gqHqtx*O6R-js zi>j#)mV|)x^J>&k$iC|l`ww6rzCJgRJU@_s;~v2`D5KQ}7=R(m^pYvBwFLh&;7N-a6V(|o-6 zV1}j~Y27#4X>~slwByhQ6vlURo}fwR{-c}qIBC$j)90G80UbJ(w_g1r4yW*NleQs5 zhoCreBYk|EFKZ;mY|^=4wZSyB>cSu4=>PDkRH%2%vb1Ry@$lZ zm|hak0eB@Y4AYUhD8pWZ9i9uM-<>|r|E$vo1InEy3i80VaHLS^KA!kyJo|w*=N3o_ z>~sRo7Hq%_?OBPKIiC6n20pA26J5g*wP(@Mu#$j_Yt_Q_>WI&^>W(y9Uyqq1z=vl# z7RF8#?qpU?Hk?pgK6%vj?&!X+Z@2@I2t+>DRfDGH;T*n-9jD=9r(Ch|QXZsrrV1*E zPq0g=ejEvQCv8?#tasHuYq$Z|L_k5mJY26>@&L42lFLIw5wj`$N}lVWPi<~rHD?5| z%l9@Kvvd$f*!iM40yW{FM}EDuvzD6@KHrm?*XhlVM0BT8n^@Hqdzp>NB?iS-jkI{s zFd4MZ&Y)gvHDOT{>7@~0OAkpS)5Un=@iWEyVO;w>KYS~kG54wNnRN%ZHsVEjk7g(3 zCsY{RdGPgh1ndoDRq6}sPzl!uQlIa)CVAE2@ld`j0r~%I2}ry?1D>%caHzGBca@kf zkl%^>768-SpXOBk)8C^&eDy@2#i-MSPWOj4QTBj=)Q_)=B4s4+`8i1`p#Z}({Iz`L_TdK+NA z`&^nh05Fh8UhOw5nxZtYn-aRg=$4{4$oQI>6v4N9xjM#Vo1k{g95_PX^6zNYII8XubNfMs;0AC!#d>9q?K&wFu; zJ66r^RbF$3!Y`%F8$AYXKcFivxg*;^gAg_gA?q|{A!EP~!OAT%s5sTAQf2}vMlyeoEjt-0fSooduGb#Czt$z1w&0Lui0@W zBYU2RZ%%7by;dF8S^V!>RZ97F45IaZZl6K|^DBr#ldSl=3N}uXD9FVMZDGRbFIABs zi-?H}IAlPQXOOEu%F7xHJ0toPTzFND|{0Ay3eo0B@xA5-*`R}ef`*Z_{7#OnXc&=XCHFSc1^UEAB?)U$G zum7L;Wh{s~KPbJzLC20QhiYy61L}Ty;*3)KZ>CPD$_3^1--}kI1!|jd;kmxuQ%g3U zs8QbALE_fCd!tx7xZ{Rnb0T3)J@{P$Y~M3^x~Dg$3>lvXfy)CW3qZV)N4%VHy9PHe zwbbS5Oj6BDo$QZMr&sT3S}d4jLM-auqAyu7El8q&Yqlh$PPQWYa<#j7u%Psg@{<^U z#Dp0cN#!71v#zelcp;OjHvPMFG;&d)>l|xCf>^`cl*Z;V+pSIadNSR-+_% zl*)O?tTVx;^SV@Krj~V&22E_oRIQI2*~Hi`7v&gi4;a{P8&Rxzig?e>(kw7+#(Z&% zw+oFXW>%{6Pn;AJ<=x(#<`pumJ{9TJ!~2~jR7_Sg&E=8rY>j}t1Y+JQ-}aAU0dup= z{-8#&4Eu2`NF^d#PSzm61l5qsTMP+-fNCo#{5K#2`2)zhoe)M*QBl{E_ATNCY+dH3 zIyzi`IIS9^pfEn+JTGn8ro3v$@b7+$vR9!m7LY%(z`y9nf8jNr2d4~AYWJ(8uP>Zd zRTNMCqPKlqx49aQ%OE>RZkCH!JU5*TWA)F^U@|=DREnwip{@@#F6Dad;0S`s(@VA- z4i<~Sn8>+z-Kssr$iuByVxc(Pl1`Dz$W-}c?+kfAlYjZXb>ntKtEgjYeovldzTAX~ z9>FS8G5dVNt5m6zv)nR+aGm3F3{rk|EkAy=!Txi3aBSAoTQ zdn@#%;X6)o5RwV>ZO1(t3S@E{=Z-|*%XfZuCo(*n^D>e`Z298^`P}0Yr>N?;Oq;~O zjOJhvqiF_%htQ`8tj?mLVQ&7OEuxn*emw?9op%kpI*t<{U5cWTUL{jH~$y$1>&pE*7f zal%#_a0MJKHXOl{^}a5unTfxTf_a8?ss1DC`rO|J!XiY}la3D$Py6v2un=_Gh)=GVE0rq6OH~Hl5w%&0r z*}hN1t+E_eFbyg}U)6*A`G-9h=|cRa45|mK_aqeREfSL6X>{RtvAi+`bT}66>iV^a zIHikzVGQ~kT5N6`MwlQQ!AfaX2?X-sceWtM`d0voqXa?@)1Pn_u7ZG`SuYo#mqc;A zLSeStCAZoqGh;p+KN8=}&EOkkzH)_v7WiZ z0Zf}5+SY6wjN#!nCFljpmy#pG1=J@9c5$7-u#=6eS9k2>Ma;Kum%GMJ=d-)Nw7kKz zrhtWx4(8dQZ9x-W1UlMA=+JldI$ygFyYO=6`Te`hO4`{1@Su~sgM|$wI{Rd$I+B*% zdqYKKALF+7QZEs4&+1MyT&((51190SCrtUrOscccgr?)&wyy8-06bJVdWL1%w;QuD z%8hNXu8g&gq7EYMnwji-DXC`U(w0-MrRNps{;g#XSKn`(4F^BniI?Pz8Pe(cbR^Sy zVIs_JiT(49KB>q`5$DAar&*XXsWC;}yEOoY5+Ubu1z&Ti1jcTls9B%t*X_s8mmM^2 zvR*zsi?LykW|1mTJ_4zPQ9{9heRBI!VP&D`Vi5vTGPi@|9pKGdXKn=ZW#=b|clsG2 zg9-Wi`F5UFC1Bi!v9~9+Y@U#!2c#dLjJiRLuid5Y=~DrVk@P4LY5}MBPp9qnhrjkg zdhs8$V*!wif`fytw-TWrZvaXW*7i4sw~zODzLI`mGxe1a9wkrEw%b%~+{wVL+^SVp z)KE}okNY$K_`CuC2!sV*18IYI*`0XjagtM`VwOjKdQDWkYByJ|b(O4id0uKYgM(o= zfylb~K-Wk0p^F92!`m4CQx7!svQPr9&18W{2>1BW5WcqX^A0>BS(Pu*+P12TOyUqwd46izw%Y6O&73k5 zbjZ!hE*CtO=nd)}JbYviN{2LY!=1QOBO^>}gu->%=}JM2H7MkhA$9OpA@#URpH_wz z_RE#uk4vKD>T_7wCDrL3SbkTZaykLcy4`BH`b!~R>GX559ODBFP=i!+xs40ks?N=t z+K)^m3xRR7pgGWII;88Zb|FZYV&c^u7k6w1-o{BTSiKa`6zpow?p;MgqRrWhQjY|! z7INoCPWW1w@?jBkE)7QoL$XU^a6cYc*2e4+2H83i6XA6aqK5F&xI_HXm~Io6X`i+@ zvYUrRq&hpUm;C!Ds^&z@i!pOkow>}IZ##Xzx1ON*V{@@m4@1Nd{}=7zM2OF2Bmty; zaL5W~ced=PYiUSCLRJkOvi$KaU|_nFWS3oZb5U6KPndD`4)V>VH*;}@LH`zhtOXyMa7 zda>#y1U+LM&r@Ud{*I9qxqIpzFOTBf!NL{HU6Y2I_1f2QE)A#0$-1i}$hxZw+j95G zcY52~s}I(SYm=mDF$EKgk3ZH~Zx`qet+{Db;n!a@P+7&+$J#CHXqrwHcbAP3MW)31vKY1m zKRmdqS#^`lG`LYHJl|k_u{(rI8wud;#rBFGM*=iVoT2_aBok;HbAtl97D>|iQY4G^ z^7AV-Y*+L#oreUGiE)Gw?D~i;gL@s}L)E{wj*J-oST?VL1`<-37rb8CSM{0Z#ZY$5 zhhXxbm9Tw%&~iH=^lbThul6u>W%d<7%Zl=iG_Zx` zN^V8arN*O>tA_j-iMPkfKCsl5GAuInUhJq4Cyutkp^7{<&HWZRH`PA1YD+c)X)&_% zZatpkyVlm=dGZV<(-{P%$_ZiB+|GI)9hCeXWB+GK++N8WHB^bSkXoR)_o(l5S;!9A zOJQrG`&>uv9!KO^w>D(zF1$nN9`lVqH>J6kgKlfMBfej-f_}er@5$)!yb*A^@B{s1 zJz;q*(g!ZShwl{6yaKU7@7DB(u4B8hKBS-W90XxHQcEdDh3rFC^`=5B>inY{^I8Dl zX$3xm7D!P(!G^m*<7$}D-lbSi`4#b?vuI*|`UhF!Yd{9VzmerZcWIOYQvd0( z-nB&Ss3wF0_s<;HSIA!(b2w@Rz{`rvfc<$01wkIP0BmeDi8k1u{hg5a35w-$m0Dn2 z&mK+Xd{A*U;L%utCy--97;Jx{aE`av9~pAETzBnlK48*rSovhEKK z(s-T^__B952HYGXpno-jByz#f+n1yEEV{eBX}9VZd&}^Z+|KZjw17=KwS=Kf>rNp$#cTA^F(m3W#;rDnCHH zNgFtY;=AM*hKVBwNN1IZfP@eHM|Q-K;Y5F_Wp!UfVH}(aH6%t84BO9-?l_xhHw(qj z?9j?QbY>#I2}MPC6g({ec^>}Nl&F$k2gZ`WD?6S{PE8z{ymV3%w-#PLhj~Il==)49 z*RXW!mZOvxohZ6VWtH%M`St+E-dg+xIJS3Hc$VblVHk!(x>~8FErG8!*^YF0^1}&f zYZEve%mi^OKKtDsHwAbwn_s2HL~tbrJUo2#NP9if)oTVHpX<#hAa%0?{Z7gc=~AcrwqP~W3jT``<8VlRc{hh8XBdMNmS5}ClaD>tQ#Y?0TpO>O3)G}#X4Qj) zH&jEmI|7Ow5?X>Yl{C7Cd}vZi5NNfuvbj`F4LeOyca$pIMMf{_`Yw7}cVlU5Sd0{_ zjM!$e#k`rR@KPr%>Fil-0 zuFtt40N%pk)s5`t)5rx^W$}OJ)WcgnQ2<948DhjQY@7HH3tXWXhjNp!8M84ar%|3CNvCEZTQ+~OXm)?Y1UB%n_^Yr;o|klso9N%fBOM-sFEx_WNT6P;N>2|5!15omYfja z6|9Np6BB1lxBSAz2utn~H)B#>UXY#hp506%btEKtq!p#m{Xsr>bzHTiH?DSh-0b6Y z3j5oAzW|7qU%YXUt5vutf_XDc`H5Ah zIzztD%EcbKq*zb{U?^f)toE?%pzGBHt|XB*r)297)NJ(t5Bh>5$$I#1^=D4) z>gF!|`gq95LTR&6VkCgWDgJsTr-JOOV{xttphgMl_CCM8d7SZs@@;{jDpF9F^|7UC zh2VZVL$+wTW5;&b(JE3oC;gUu>&@+6ZheJmxEh98i52FTnI$^GpGFYk)I<%By;+?> zD~>gUh|rRYSs@ExTD=v8i;)HAe+&(6D5W6K=IoFlrV3G{LDHGq#)0H;=r%^@5r~F( zA61BON!BD8|5eOA3IE*dflBDVGoR}vjbL%|_s^qAp%;uzjHd4z><=^ho<<>GVMWgh z&@OOKvUJ(_dZeXaN18fi8{n<88i$>Ezx^h}s-}-E#SWyVpRJ8Bg~|qwbkWn?2Cgjd z5)I6*yruI;#Bcrw-wf15-Jyt@hR@a`5I*@QE#@#w&WdN1TC2UKI*x;KL0NT82RGU- zY(S@fKuI$gw_EcksLP@M#o1d1)zx*&!hzuK?!hHUg1ZNIw*WzcySuw2!98ejcXyZI z?(Ps^0~`1@AB@9^ojiuB1A4UptCeyS z$3CxbKF%PHEcgjaTK++J85-0x0`zg$Y~YQ=WAFLm=SG(O{#B zAc#a4e}cx&a0UbM%vJUa+@`}a!hR&$n2aVhh(sybEtCyjj1W_PiR{ep&Vox06zOOs zkKB_+)?G+4+09}=qn{3PH9rjdTCF7zPD99;#kPkLvGiyKk(PloFP2=-ybTNgTWi;=ERL((B8Npgi|72 zw&bT7g1nO-8hhWqowOO<)K>_jjK!&&0}W#r3g{WTdRe`*55ah2RvX^&SYcBxJ3z;K z0de6PoqCIV;A7&`*OB##m7T9>OyJFDHi|}yvL-3+PAevOeEC2cPBwBWb{$=0Hsw<> z#}GP3uls$py#-bk30B-Y)9JdkXxvs08ywJi( zhtd0tBV7U9`I3g)qWnS_Gt9J`%b6&AN;^@p`ZXZ^3)N%ZA%n?NmHJ1ngZ<@?aI zoc@DmEJ5;XYY4GCqY$VDifN6r3{yN7p3SB zilSO(Yt`K_>B z)%S<~?)~I%yHwE?8;c4^@$n}8mmG~*Sis{|B6wrsysS4F#<+sOE?5R3oUJF>&}UG}~-^)(r0av@?$tyD{%I`AXVD5b-^T*Xh=g- zXTlou#NO9Ps`oq)A@J;^uGf|wPQNIw-ubCz-5yuBe55xdb_s!}Duixwgb@&@Wj2_S zu@p5?BzspzZsu`OqQ>-V4)wSk<3UO(;F6o9sOnpY7K%rsWlHAx@zde?;;DBRY`!)H zNGEatiaA=reQxFGN?Y{sifC>zLqqLYS(=tZE7Vp3qxm(0%u9Ko$9P?lr`!vzMezk| z_>j$7w0S3YOa1yv(*kvf&~_zhb3b3;W5=Mjf|&Y zF&SM0qXi6%E6-}^)Clb1zxN!ckm*$u^Wjx%%aJIdB;>N9B)IbODaS1+D52u3z(o#d zZaGVp$R(8htFaRRC;c;tIWdqBxH+oEP2{%r6|n_Obe#<=MIXl%ET8yvv?G6Aq$64R z4;SQ%L;eEmjx6aR9ej6F46L2G`QE@mf17{(f79qIqnFncs_V3(>+0!DZRvw_#O&Fx zC?n|$P+ynXsF#=8u_wEill(+W@wg-eY&?i^Sad6J?2Us7^)$%YZk_k72SK023zZaI z>i2F@osCMBNq8E5fn^IX?4pp%5MKgNm}5j8M9}hA<7!u6*#p-`m?dqk3iezgvMn*&iP~Q zoXwt3E5P-(SxkM|3c0jtA9XnCo*B!V3B8Y)y?Elmbl(&qE$io?3T4ZvqD$I3XZA#A zwtgzDPOW@enE>8J14DU21Kvth!8K!Bi4WjOim@5z2Tf(n$XgFNz(aH#;3S{;tcD~J zy=VkduP>4VYd77M?JeJ_-E!!T0)$OKh{wc}61dJ@5sAX08f*g^;zIP*Bd zCg;J^NkSYf9r0JbAn#%&yi6q751P8{W{$?OU`dWcNM6M(_U@Z8&PcX+!vEwpfEE*m z*>`Q#93(7uKBvuuXEsaz>uPPZ5b$TR4`W=kL#&2H1a1!`vDuFOJnaAntr=J}@^zqL zWKXjuCROXdK76+#g>(R2g@TayQtZ)SF<|2w*n+cI)Hv)$m=ed?d5H}m8}EwdH2r0! zbFY>|ydIA4iJ8`cL$;lX?`&4>m11KuzieQN+Fu>tL9Dn~ap}67B~KC3h3v>StXW_< z>??Ywlz~_Pw9O@>H1+wD&#Ykfx6+4lKBN)%5%;uCj(>yp=y zQU7p^sJjfMD8Q$84xKg(lbDu`Cib!)=I3@cTGPQg8_kQ9yMVB9LN z!#IRebNWJ;u-2LgB3UNNzefD6ek8$oL2mGn1O1hPV1%H1GI(M!kOKY- z@v?3aYtOL{W%1SCN3^&OKqI>J!r)OGyO%s=tl=>1W2Qxauhe+O7MH4K6v zTck!bZ)n3iW5X3>z07j+I?8obm2aC9DW~0AYPuo@-%;UL6a9BjGRQ~V*B|PbJ{D-_ z77Yj?0boN+M0n^nwlM=jQv#}V%&GvV!G-6y_r#L!D%PjZHjm<=x231O%jW4ckkEPC zlCE0IvZlv}S|e*I*4`aQvnyRE%SIf=fc1KSpOUS>SZPTuIs<&Qgl7PpYUTK(liTE+d09JjI5w-K;kb{mZ7NA3_fCJdEnuxH<`W!f zLPv##dFrQ{Eh_7@)>87QYpxgRy8jqvI!X)AbKPIEFuSls=Ge+N4G}5vh_>u>jpITB`(Da1fuxm5`Mak)?VRRO{FjR{Q%%wv~M8 zzAHczl>A`-&;J>m3lO0FA<)>;!MPq=C{pv2|F^JPfEoPz_+D8U*%TLH*sVom_HX45 zWTEst&s&SK5`iS%MhL2CZEw2P$367nhevpagP9Uozdw$g4bZXM={l=Rv#fWq0_}1X z-;{HWZg0F965ID)qYo@epq3dIBuNBvI4zo;$*Bw#W!_@fW-6#w;+OH>^6(`+rF&nO zMDqnqGIAlCMfUPzF-8hka+9i1spbE$Rqk3_z+(JS#~_!bnDMqDqg=IAev7S4R3|Op zvev*ht~U?L3)9>SndISoDy+KVw_0$w4b3%MvhXr%C$qiBc zr=>V`zF73SO9nOu;sDO+aBr=r0qhd?=G?!6X$UJzTHR41vO>^v6CC!qYM*T zM)bhyjUj)@G#~mbyA*1HqP8Vj#z9EI@)9;Kh|*9>#EYg}AqwT2?Y|^#&ufRG`|{51 z@v1^P_(LOh=ZK$}qpuYgOOunItF3A{%E71A#uqsNh{gE)9`aGop|v8C*H zs5A9PLMj!Cb4wHFXBGT5SqgdzCx7tK(pmh}N{uJ?C}1B6!Pn@t zj8KJFQ}_jirJ`<{lAi38y696-rZO#C+7P~pLqIj@EzCi32b$Nw9fIw+GqKe=59QgZ zwR}DA-V5TkzJ#IH-n&SAn*(pzUf}G`#|tGT=IwbZru85#rt=kOU_)(9Z02-(B7=9@ z)U8K(LXyJnRqZsvY)y=hWKkd~_dNfiw!ZNG+myC3DA-S1c(Li|0M6P`wctTC?!uur z_o)S}w1PYd;4P$&d>B6Y@xN=>KX-w1`MoH)dNGQ?8?VnE_quNT$A&DUVN3tzuM+rE zJ=c1x-;w{Wp1Y_EyLNEU*P&FO*atX2QQv$HNxk{64{ugbARSQKL=j?Ms^OTFWRJ_?ppM_y;6APa!nD$^8I7} z#L}iXVQ6e0LdRJ))aE#tXRf=1M(}$3>&A`HKC8ZgC)^cNuWBddWM$Kc<(#ua52SjA zi-yn{k51G&wjao7%5DSIMYWP2l|ch@(wfh;>Su@6bmc%0D4MQYT^nQdW~=aC2+cQG zDYAx(+oK;pbR37>Se4faO#*3&jVi(yH++iNDj~VD2Ai^vO=Y0=6u040g=i$cS+IAZ zQDF9RCF?W;u#3ixu#@prL<^qL(Hvd{j2#!%8%~)=B7zD*mVbv~g^>QKqO_0>GVCBv zd7d`TRb-KOJ|Z$%gK>Mqc<;m1!Sp|5iiaI?G2 zU51MU3|Vwo`Mq<5w2|5hBZfu3Ra})tKbF0omJ_e;jwn5%I6SDuB5^|3yQ0tv>5=?M znJWfT~R#AUv4mJPv+yUG+uPmX%Q>`i`s9>#x&?((;M3fSc}<<~!RfFe`Q7|ZBR-~Yb0rhNmP)jT)Gk*POgl-Io=3bTdRNbKe8M-}?0W5hgo z9FG)AsgAIH?Fy1F|2jtaN>bP&5f<0S<$M~n)G5^VLIi94&C0na(-hk0MZm*Ls-lzHU0=%KNHRb>Rj7{w9jp^P6(kNto2A zpBOp{Y4zNP0BPmJ%RotePQ~|p&J;Y?gs5m5TLD?J^gfyi43JyTTIeio(Scfd7hn?A z`QD@wlWBVvhb+o4q5akbhsT-z2bKZ9+S)mbAv~p4l1kYRG4Wh<3}+nLmdstOB@`q~ z>^nJRf+b&67tGVo4DVr_{uKP4gv8Y5jbyTa93bpp*G? zaGIRAR1rYXGlAA5xC(CgA$?v&gzFFfidCg>8L-Zkgu98C&s7f2-Q|* zmXG)}^{sQ=>AsJw;(X!V*k+`OZUFN@!0xIyyi?Y}5`Yi!rpWnaeC^d zBwdO4?l1B*A`rzM>vuCV-C^~B&83%lU?5fHX0s8Vcvn4q^k)L{E#7Kbl^h0byU+{K zQpav$Katnapew7u+*}44Ca!R6@RM%VU8-7vP+t+V?~9D?=f|{JBrSc&s1xpHg_3J;kooTAy4oj$a9nrl zAby^AyLW~h)<8=9*h@;@G%24{3}j&4e)KB9x8`9dEaPQGWMt6wX?+d-VTWqP1;6#~ z%<%dA$8b9I8xqfmB21~;s zQg5?;o!7>qgqPv5`lf#S4!`S*qCvd8pd?jWe&euHec;ojVw8YEUb`OSCCFwYB)WjN zojR$cjQU%f?hE_frR1@s`s;Uex$75vxna?t#k=U2BQEcvQjUY|}dBU!Nj;S{K1Nqy4+vS!DY!$-VaiA%Br`+~i= z=v~96ySix&t`gJ_OXq$EDjWopojA^3AJ?D!x@5YT`f798eGh>ep&4d-4uo{sxV{IT zznup_M~F3aDnEQolc%t}%lYBre2xEQ&T7Grb8q=+?QYS-k`zqAffGb&dpiX#hqVPB z*snM5jJZL+qvZEZ0I3>0p$Pn*;YIS-zO{%7?6ulH;#h6(3L8|)RR`$2)?2ioNIcw8 z8?L2VT2e6Ki$>w5UEu7T)JK~-onN$k7!JFha+|mN))Ec8Ps1(LWd*(6;wB$F?dRe4 z9GDd`sRS963(z3rD?fIsG>Ms32_;rfAU?fO-khSiS$((R@2KXo5{%b~AbNj&f7($z zt0$JB+roU?8f?3Wr$-S!m*9TrlY;IKj} zI)+j5kn#XN8r@nm?l5PO;8)6=lE0MY+GBD=RlU$0LNCU?Zq(Pzgf1@*UnzAyCdV5I z7<+AIXmp)?L;4pU@PWWXeevlJfRfvUdjB4I3m~BX!?q-XbAfJKa4n=EfcZ1bgfR(E z?UG>sn3DRMzH^>z_n+CP`g1)vl>+2MUWLuJbN}E#9FOO1hj`-qM<<@! z89E%dqYyTi=yZyCKS0eG(RtCxreAMu>2gOnGSsr$uJW*ltJfPXDk5(TtQPi`3HA5R zXuliy9E^hl9wEo_nu%0db;H?Q0C&@4Y+pV}g3 zw}Ot1^Ybq~>J32bUk9!NU0PY6;X4_Wbd&Ykw+pH}4{d^a*-ENIe0np3`FKe_6oN$4 zD)4bVF0lgk5Y=w1Aon+D;ti}LWMdz6)>yB02O6%M;(T@NKc$4>bNyFJ_$yck>X&03 zAqu<^X_<`c@2nj87$3kZCP)W3aJ7ES7qnNP@V}L(i6DT?z6{C$TECHFBnj#7XJQy@ zQ+il+=vwAO3ftw=$fCcBrVV;|)wHQ#3x0Di=~u<_gmemFx4XHk8>1C!QpemGZW#IL z-m+B<9*>W~92bDt53&-L*L=_^RO4@0;R7Wq%SWhSN*{mFi2h)GKOL7U%RP!?LvDdZ z$MT5JVZhd=O$!CdVnaJi zD?{>b>A!pbS}O+6IW)5UP?HTMHainTzI}OXGie!Zcx?_3yw2lu!?$X%Ep8(|M*O2v ziv$^ntPXok+iasHVV0|d!FU- zdTnLhS0<^aH|#qX6&yR?&|~70d|lt^^_ZN#?cRI$5)zPs9v(@ah6KWSaf;}o5p0LX zdmiyIxwK(>lzeRHPwwuhVNP)y`PRDzW2vZi0tLXji;bkIvJoJxMT{J>XneY%JyDqHY-P%mjLJ=Q~BLK&~OCH)b8Zc1MS+-gyAUBSTG_L?M7CRE~su7xQBgyKMUm!Aa(X_aB=3)07X7aBS#)HbWB5?Wns~P(g~Mi+^S;*p zP<6@s%EdyrE-Um@_u+p1_GYKuH0)T zJ2dTphIQ$jpSjM$~Xkt+7#cNlwF-@SoIkg>~k2U_?4uL`FaLMDd3v3L8eyAg?pO zvHFF#BnNksXKvkYh%Ad>z6VMN=+v0}z^7d!R3jYDTl{F+Oye6QBzA6P*??)(vlN_{ z!|^lb`My|i!vx;1oWbRG6)7;y_} z)|7*~0u9avAy!s+T~9ka5cQYG-=anA36rnm^7g%uDAoCe8xLSV#Yp{nV3&HK5mADM zhU2j*p9|pN;$N=+c1IIiBytm7~NiaYDve@=p$Jzp>p+*opVPqDa^1}Op(7pTX#Uw}Geq#TSzq+firB8~ErVw1Pb0YLJ1z*n8-S;`3; zN(b=Clz!TFY+Ns3s_P?|t&R1W0cB^YtUPh)5lT8ub!r}3WwX8w#|96jj09P){Z>!_ zeEKDhu)BQ-=L9vok^@X6P4bUPg}hGn|7Pp|vqdA&SIij<{w$NHO#M(L>aG<4cKKL?}$8Y1LEE2dJ&4HI`EvNT|-2Op%3riH3R3~ zslPWNdKN%cJ3oPJPeL?5pPO+|2x(U1ceFC^Tht3~=aV&r?_(|M$I``as@|b0C_QE& zS&ff6ZA1yte1vMNj&!|IZL%!fw>#WtJ@?_jx80sCkG@SzK>qC57?c8-%?uQ(NDD)> zyPTm7Duw=n%11(~q~NzQCHt?)3yjwNW-DInsu}G?h?nQG?|6imTYKOrQOdQKY%+dU z$bn5JH;v@YZE)1Zx1fjut@xesi))P|KQy&Y8z~jT$ayH9H?ETN5 zKcI@#w?N&9Yq;X_X`P`45xXjXZLq{cfhfxZLY=l@V!5QnG74EJm7=zO$Vf+s6vWbZ zPbIQgR3}_Veb@YfBy-|NOdKfvfR&`saewlaEe-FGlKrjA3#)Lx# zxIF{U;3VSTa6+IPt-L->ohoFHK!~EWMF+Oi{~k2)j4^@%qV*p+eUy^HHA|f!^)r22 zcR0#{ZSJiX*kkT3Dp{y4TIjXH&DatK$}=P5r9)?=_rTY2`xRpqIz2KNE;ViN*p#0ufgf%D zB{ZB0gqSH-r)f9d;K&-M=o`Ya z60>KIg+)UVcM4}7cuJ;!#L|WA{(@2!j_RrEO#Qoo`=0VA%L%lY4yVl7e*=0`&X?M) zIZCH#tSA7w%92*|nm&0W$3`G&`G1BqsRr4TKf8?4oP3#I@-(^`eC-7LtF0J?D6>_= z`TX_99Bfe(%pN~D zxVfHSYLYM#zYwxC6ipw252uUlt~aABiNnI4`{z-47dffu}NlNw+(|3QwvP zqmBL|?8rmpdUK}q#9QzK%J&X7tYd^kN4vqJ6|h3DD2~h(CLjU07j%T<{K2xBV?GL| zvw574^EWEF$1YPM#JE7A#boW79b!YHvBxA+xV+TP);1)=_Tx?4zGL?F`?8g{Ce?Gt z@NMNzLV@1Iv}F~=I>0m6{%5dU)L?ueT;M64o z5hevT>O%Emo`*tpyP8lu-l8D2o|= z=AFH6r?4E48SAJP9jyL@DGDA%fLf+Xr=Dk?WLBQ;kU$q!o&KI@o&IFwY|*D7CCdAL zzf2e_V~08sWXld%IolR#epj}RXujLt6Pyy&=yxVx&yR1o<>d>yk2K^q~NcYz-CSnwTS?8R)UZSKcBeMT3Z6F1(x?73)?nC<}E&(b7)WsRh$rUXRh7b)TCitzSQp-0lMdCJco8WGiR zFL)4KZK#b))ir7TmX7F`CR?$wyf28{sdWRjP8*7*aLlMP1kz$`-ovuPV<^Gd+mJF= z0Yl>mV$))M<AKlYd3lNu(S(U*1ldBo?Q7#6!<>d zwO20E4e`*a)&U^m5#>p{6N-ifVjj)n47QQM9S=AWKvDV}&UV~D^*nm(HV@487-%+( zPI_i0QYFyUjsYI5tb~!8NVM$nM9T}CeW$C!>IIHixs{Z(LYnP;v(y|vcXnCM6HG!P zp%7c(?~#uB+8^uIc3K}M>YRxkEEbXMQZlHFdQOV@L~ULHJN+T-p(2qEiZ6QDMm1B8 zzEPr}5JDxjo!^AX{^-iJcg=-XfJdzd1A8LjM4t#G@$n2xs1yjV9)hH1o5RKl7K0)w zC0hQ5={iC6e_rt4+rdU0yw;C%k?ST2!r`ReehdBOV;k^%*^Hjq)rbB^q!q%tU#G`4 z^0mNfC6s|k+}l?mlcg!wU)@c1IXQgxug)2QyzhS`M^7j)-Tx@o)L)*!wMi{q$5VtyFn&!R=bHe_(Q# z>{|<%=v#Z~A(px;9%8B$O_XH3T)k-ZRUm^5-VMGxDp~qJE(X@G}jI)bY>q*l+9rJWzwVjNiz8jeJ5?!92sw&h#y5adF@rhCm zk!Vzurausgxrt$wYRib{BbA(;-@{Kds(cNTxgJ+&^{R-0o)jW-5=rqu41?3ksUHt)RY<->>s4LHUvolgf_9 zU90iG2vT-Tfh!E3Rrr zsx0bOGzTt(QJ|6$%C^m?daO+Pr-b~U1E&RM4sOTda7hboykRyymR;m`h51N%HkM@w z_;pz}UgS;{fyX?xq#(9mw|sv#yBf@t+7eN!@ij>GO#{v`9cBOFsEFBX=wCGlMWcgX zwu|O@OU(WHL&78J%SNIDRshswcSuwF>DU0-uRKSNzKp$HS6B}SQ}X`gEP8r^}ajnRBzYq<0_u_t3(Kg z>vpzq%vz*yq-eOfhe9~4 zw02<-zq~^(2wewg zEKuTxf<-(~bwNz>wu~75^c^ROWVFe_(jA!^{%{)Sl>D&c{c#b&aF<+^1 zspvUsaTX2Z%hM0IR&G%o3J3`teJ@u_Ku%&Jr1mW;VmcVM13%5HVnr#=)|=p%vHOwi7FH610fVF4WmA=9k^Uf?8+X2LB` zZb~+aCg7;_l|0jaGLp3J<(SGeM(>}&SXWl14U>{=#_P_#+^smf-KX@8!=WEjzur+h zM9~^bERnLv9}9b~jQ)+Jz0wju!PuOo_c?U%v~2SO*^=r`Jvv%-`d2`s{tqpb>csDV z5lJWV!PXq6yxZb*)u?-iopUCfP!I7{4>EAzjB)hcG@X`w;gnyd+1QHr*eulDb^PQjIr%Rw|gr1J+y8IUOy) zu6Ui;kokcVHvQ1m53$G`9zzCW?oDB#2r{6aoWChgcuIE)kaLW_6i( zw0qGGDer&^CJqxI4o#NFhHj`yo;W0-#zLBgW_u-siuZX`aW_NFP?q7i%KV8oJz<^DvuS~zv zJ4_ezDDLlFUJ0qI)`0FiG9(-C!4as})TgbkGBAIAnExX_2bW>UlG#p3)G-H=;5`DARQ>VuMXkJgeLM6 z_xcr?FLQ4>C1hJ8aCX#0ToU8Pu4$v9%0l?JjWX#J3+GmH$tbxbIsC5y^Ow_=GGn72 z7d;pORXDdq-yBuQ#THL}zu~7M@^iDCDwfGvAT+y}b4Uv1i1?*&sstIT2QjWM~#y60ITw5#CKOlEDIf>l884^oo= zAIhIjq?{!4(|qTnqe3lHxKU9_!R-Fo*or5I+Zr+Td}OHcvF7HC`{_q-ZKOiB3?A3@ z`b_!ikYXb^(i&=H6Z=USM;dr2r%S(6qlLI4X&_E??J{>&3T$tRt!4=xfAJHzc|sZ5 zb<+L$auz=dy2%q|+&3@P;A1F#g%2>1Sn+SCeyrt7e(8?%6QX#$yN9_3o+EqRIubu} z+exaMTotO#X(0zoROS^$()y)zh#LcMGu3p2D&F=@zx`0VQkUYqHe_8(x*zcn5etM` zPpZOBQm2QxI>3eOW#r+tjQV!NLR`ZKvziAIF zL~kXp0?v(yRzc4;{4HjN^qbIjNAM2)N52r+6O&P>l1U8Vb?Z`e`hWFupogUtpOTNG zwWBRmU}^5Bq^{!6FHpe%1U=+O?e6Pcy{BXwoAaf_SmaFmzFMJ0(4SL&upBM(V31{b zh~;unG2wC@IB)QEe{yvd*_xiYHry{CS1G-7@zfJ8ZUNwI)oL}gBXhP_AB?hQ%>aIP z+7C;bO^AIOswU*$h{J7%v$1IqKv|+1jHu@U{pdC~@#e$?oSWaa;H+W4XhcXGJp(6v zh9O1c%J$xT*3(z(?xuI#9fZRGZW)$9tiD9RsNHdEOXEfd^a)$&ApLD52ur-rxc|j@ zIbg?UG7)M7yP0%L59yy_eTU^u$P*#n$M?yA0Z;S%I+(+I9gU+3N_vS>*Zb%mf6)nu z^tK$mY|&~zyt-PNfHyWIpO`qDt)$oxvroh80`9VYPCeGQz z7j!urZs+Qr_#F=B!devGjn*!{ISd=0IqHpz%`M%dmqge}2_?cEcg$zhZS>nYmRxnA zW6bNhq%u6nIX6POJiqcM%ZX#k%Ta&5%{r!kJ(KLrY~Eqf%yUIC?4jSd%%L<{nx(PJ z<^u2yK3ms1T_D^n78A800d_|6k0Ia@PHF6aC9A90Aat7Qp%v?%zjC}@oOQ;Aoc z+{`W&Zd$gTUp~q-KJ+cq9DqBBTiJrzx2*UVes0mShTU&$`w#R5J%HNk-$V+ZFN8yG zxx(ugbXX4yrtqq_$4;BNx2lKr6Ye?^F>mO`hC#=WYgx0;Ucra0t)2B7-uuAT;v)h< z^`5H2=`uACa<4;Y8PjR>fXp9D#jbR$v0jwy4`cl_{;DI2nrOoy%Rrc!%gGe+?R#$5 zgNSmc?4YajPJ3;UPr#GI- zXT516@Y&rs8Xc_|zx6O~G}7t0Pt#@-onrTxYmax&u3oH z>*HY;oJ(!Zf-rmtI2Yej8fyj|LH%A>_%+8+caD806*jqDMXF0E9}mlppu_%@tOXXI zDA;oKfE?WXjZ1c-LUaP>6J;dc8UebSj*JYt%UKOAS>~oYa3VjYK1tE3`|{)G{Fu-q zEP8h-6lX{%h)kVDtPe6WeMa%yk$P{4n~_`GolpmX;n|ynSK>=*Qeex0;R)xxg~$-Z z2UQWik+>Lu+yjlmH)mhpEc=2z zxWO8U8)A6wcr+B0*>*v7df744m<;Nfe*Snr8w<-&mTLs#K8WoGjE&tJA9ZPyQBU+l z9a|Bg)NMXJS?n>c18n_f#u#clf5^u8L_s*n^2)RIe&G1{TI4&eZ9GhIq{fEDfBPOk znF1^g-wLilchG?^IDcJp_IdB=F#;Yn{ZTwek7h`oK4Tfb0vlH~R z%jVqFUREIgBM|%bX`)X@-BriNt-=Gdy zoy2+Gwlf~xMVj>%?PH_zQ5~-|i$KBN9@-?S;7Kb~R&{|*xz{4ix`I9}^$@9P7Ce@mitF+;kE zF1u@5Bw=eVyN!r?n`>?2%=$|(4hJ7wojdOzA8$fpm`k0bM}_iOS15JkH?rp6QNbJV zuH>tlGr2$7k-j0s2DcSNY2&*+q66NqG9xtB5H~$Jq>T5r+1P3stJaqDVNajaTZHR* zi|=KyK4_dpm~Qmk0~!$zraM6StXL^B8Si%KF)PbjZtt}F=U3NnYcA{f%WwM#{Y+y_ zyx?2Ymm|tJohKyqBdBRHZZ+WcoPdq^Pm7I8iR@2tKm1^#HN!>-P{%*N z*Oc~ljV0;E?_rt0GDz(SH(6hNy73m8Rs>L9YkApmgSsD-WHEl=D>tV@(}R_>?VCC8 zwHW!j>MFA<%~Z|=dKhq5HvaR9(Foq8fX>o8!$MFK_Xz^I+&HwW`p}+jUW6g z!lJ46U?#LHdbK5ZrX+dp_-0CsSOW#4VW>WUDSFeMm+vg^3)^0!Zp2m(oCjW~B@gxFki=E&pX2T2zZTMt_|lzukbydd zkZ7(y9dR;j2so2FcohTxL#K$idq9Mh_6KrZ70hwR-;86@v29bITzYSEG#_@QC-3DJ zhdzx$|8$+28qfP9A|+$43FINU^P9577TKf4zJQPTNhHIn5dHU6_IAuB9r$ZWr+Iu& z0UVIlt(T~y>1`nr(uq^W62eN{jHyQ8l@avmo@KCPon6uz?H~vLh6fS!n69y_tsn_D z)P;osPZ3TV=pD0dtA7ZBy<)Qb`87T-c912W!2ovyU_|3lh3C*h7PewxxV!v$KS{lv zrTko~y6aXpnNQ7BtFzm%L(rHM)*7S79T~9+pZ)6O?Wc45PtDnnXRM;k$)K@p(oTHa zZR<4d#wMVr>O#izvoA@h`+ejsJC9VnZEJ6U1sK?)*z4IgB7=FP8ZO@ZbW7+~E*L%~sV#GP4%Rl10{D|sp4!)hn%a=TAJ>T|J9NK6d z31XO=*tc+B@DB>uGc7wT;$SvtC7hpy06szArEz$OI|?Y5RskFO=u#4aJ9;=cG}5tb z>7F@T!frU0hIp1yt0InBcCayEvyuB8;Ff6ukEPN zS04Md!szf+h_cePjK{ye9!I;`0rHUVi8#LHJhoid6y(`ls0wX4X6mSJ&Byk@M3t`p z6p`PZ=~qfUFez-;{{-|SqpVB`)4xIP%-)R9Af_`DKwTo>W7&*U_S8puf14ib_cr(; z;>T(pje(&-MQ}?}wb!y+UQAhT{^oM@N?+KtHJqhZ+fu}%r!~u!luFF)Jt@fo0NU5! zdPhvfEnQhER!1BL03e}$o0?{?rytLy=TCMS4aQ%{ad8JOo1TeKyO8Yndhud3EB1Floy z+iuO#oJrdu9?aI@UG%lKoo};isXI0K(huo)E3JORy@be`=BC3+T(D9`d9Fv@w?(=c zT7zTX$tdd2Xx@|KXovJND)3zWCT72~CSY27hg@R6)nC}6nkX0KJzA>4PN}nCjEj@| z6>So?Ilm;bo-${3-|+u&_SR8Zwci$~q;z+S(%s#qlG5GX-Q67`-Jl?y(%sVC-O?fX z5_cr#vSK(|8NXmHwxof&#JlRTzhktk5+Ppq25c^XUQw%mh8(${f}xaSX?kM zp8Hki2yG91-p$n^vo9wNMEadoK+Ot!M!?0r^1-J*D;Gx^W9(?5nixRp-t`mAHK(Yh zllT5a9wh0jej4_2gVWE=>ozWy9k=oDXDjwAA&oAjMCV`KVp#;CI74?Iq@C1lTnjvQ zR)CJ%hacR-hU?Qmh8xkW(2*q%^$+zn_s~H3QDD0_F82IxteTGAPd@-t&6HPs?b=rm zhudK<4$shcPx&h?$*r}jI9BZ;hZ!_pbg3ou#NH$fm(x0@)15gG3dDWe&J4BkWH{7H zG&s7P^qf5+KC2^_TbbX?`*EN6aDr@+d#thfL`Y>Yn)Kb!{)UmmYkrmeCc?KnDR=I% zw5uvcV!O+l-?cYB>A30Tf4P(&Gc3lBZ=9c;D~Fh-)Er=M2DeR#6_CN04Q4XHOYuTj z=$jDUp3hg~cw7+TaJZ3@OQl)5EdMN4VJZO)?=fW)Yd;N99#`>pBBGV3|JV zxrOvjuNdjUTkZ4u#p8KV$FXT1Qt({PH z3jL4#hiZ93OXwE|jAfS|@5zeFXN~9Q=8)MVsX$z9AzLV)C)UIh*g9z9Q_a(hj&CHzOJP9D z?TuTL!uYjicQ;q2K%%Y{d0laXE2P%=?EZT)x0z>ygW=;hk_(O%S9a5joRO)dUsw4w zWJbBf8{Q!)(R$ctzHx0TzD|6}=7K<*Y6E8KN*M+ObX-)&DCiR6o~IyxeGGZdXL{*T2uphFq8C zMRlYSHP~_lgOuol`!~8IVLd%m?bPZiYL>L^7mrP>KMvgv4RXtARH7IlFsiH6qN{0j z8d8JF23LjBl!qaOQjCb7ydF9uE`stC%3I9mp_l^Fzr>E3`-=4dMt)4Ag~(VUSI~Yn zD0q!FD2Ppj6)xsr0+T2TwhTaqFltw{Lk1laN^d1cS&gzm8AfWLU?a7rFFrO1EiR$k zayiY0x8{B^$y{Yqz6XdN*Tmh}I!`CTDTm!oVmz}G%oVot8d6KdF=~@pbVgUJPtoh~ zqpiZ%WrU2*Ta28)13yHqK5N`?sg&Hz6S)HxhlWX)aKOBz@OJI6FkeDXLuk)DV-8Wi zwEM&{PUZMG&MmJ-mY7B~+}?`X1yz0hPk^T(QR=$+AUU4M<9Ytl_ZzUV=Z$p z7&5ZXxt32%=_*iCQiB>$WmC&duJ3P*ZteAC&sU8t0*iR=7~o#kbGE0A#5A2@k2v7u($cOo#(@%ZB%$mZ5TB(fv^9^0$--cjO-Zj>cM=f~s2>r4|50gi4K;rqcI z27CK!S>U>Zkm7v)UiUKeemP7MrbTaMQh!Aj*eTdBK|udRyvcxV_?m0=en&#(Lkj;6 z6T#fKm&3rT($5izUy)KTnEx31$%=5~iGEDLgup!J$oUqrfTNBM}EIEnylaihr zN=H$v`)v2|$#!r};`E*+Z(f6?U>QYkb_H3ubbRfmO<>73vcRc70I#Y-LO)e`Wm@!pBwJz#Aocc|++l z7Q(uMM%$kF{4eoah02dJ7|pxoiuphAvfk7_)?4%o7PkgG5%mD@K%UjX4gh;I31?-t zkg#Ng_0^jWp5L9uNByEYST}uPIBq#`9;7cmkJfS7^wDtH$kB7z%wJh9z3V>Iy{ZZ+ zbp?r}x7ofs4FDOq5elRP4h_-P*v!Ixh(oRDvzgxi#_2$x5_Z+gc$Rs25Aj6MYl7eQ zZD8wa8ChTx7?A6xT}tJR>+ef#!as^uuH9})s-De+gvLamb}R5kl)8qIifUsA+305- z6;RS67^f^I4tc~G4P3GzuKV-RXKyB%hCG3cCw?{vFY1%u!^6U24Qybyx_BZ>AhabJ z^&U_gPC5NtYJR#yH*QH%sXp$2Ojl}9GqY~K?xp^S@598#*P=$xF?&Iy+Vj2s zbjUdo8~g4ITjA1eK%1f*kb3|tU_4Q&cts%`PFyFCr0ij=xzwKNwmqPFxv$)m=8xFV3NU{PLyHoY(8|GE z@cdFO6`w(kh5{LFr>E<(1|>N_fGMvKUSyh(@A2BNe~v_Sy2|^e6Myq_@^feX7oZlD zCi(3Z4$yD1i(x7J^xypQ7gzG%b~t^l22gurKM>elY$jUK`^i=M^$ z8$G4+Z<~=vMxgI(VOLlx!LRtrlw%*-H9?bSrm;KZjP>@&X=3y+JbENXG)=HnmGnN^ z954v4^0^=~8+mzbmLl7}x@86i@6@5okU%4Q-)w+gYYjpKhV#TN9*(t#Xx)~YQ@z#Q z!@#R?*5i>;#I&26bw^l5#RC^H$LyF0vWRg|d>a^K!LSR@XgC;%FR)56^zj}}A@=4= z^Tt|To&;#|myrEQEC#A$az1q3jhQ=v_kFI$4rI#pjjsDOY3=Fhsox!03`DT^d{JJm zbsa=PyXExZrgxC5!ENq*lEHML9<|A5Hi!eZ#F#-fdTGhC#&QKRFJ+F2mlq>Rp=<+! zTyE>=zN)4gK-CY80!+qBV4ElguS79UGB^_gulet#Z~%RJSTx!|bmT5*|Es`;8yb{j zqDil_&h^s+F}vqkM(n!ndhz5d0|uI{&7%zbahuGB(=!Q)l#$8f7N7NllUjA7cNl%j zpTbHq!!vwsvi#`_lZw4YDX=jN%lQM9e)&#e|y6UK9azZVFK_Q{MR3~_Epr30l zYEOU0y2E=$K%XVc?lxYgVIsuYhks0X!I)27i4+T5pY9A{D>{P7357WGF9nMNUdqwL~4v?+voA zodqznzO(p(4zF!*OzH$-Wp4fv`Fg_`;-|Xy5MrC|ar7|%`Q9NHdRxiXWYQ@Qrj8X# z@+EYJOta%J^OBHygf^S}7akn<=hqkL8vu~seDpKr!WGma>k4ev>4Ls&uP(P6$HzXv z#H1<>w9!oO6LY^;A5aaQ-#kBupW|z*g9HihUNZ3FYgtNRxc0J3f@R2m>C82<2^ihf zOy#h61B1)L95sp@N&G<4=*({N#?cYL#zJ@BVT{>byBT+E7xSaIUJL~Rd_w))cE$Bo z{pKfF@=%M_S~7+OK8|LsFY*TKRds=!x7xO6JKHpc!X?c8rUPN&T21`l^BmTXhGcBPwduiWF8$6`qWgMunJZ1Ul) zUI!z0EU>}9N*a_h;B8!c9in53uK?5NpVyhjC5=d=+&?hVqvJzd`e~Lfl`PvV9`fbx zT{}a`!zCA)lweYqw$*-im^o2qTuRt+-IbVlJ{P*h@`4ki;o4Dsp^A=kUJZqL->iLM zlF%6{ElqBDMLxSMlvdoX$&~|@U>NqrGYPCIB!Yk;3y1`^*p|D;_$w|kc1{^K`>g6Lw#yo31Icxu|blgqy_uyq3LvH7N-mP0_V-x0SN=Fb=wv);*^NqF+; z0i7o5&9Tu}opyE`5|hC^ysKXV6q)N_iAGXGE97OvK{}d{l+5d$-8t7t9Z2M#Hgbg| z!3eV)PFM48%s}ObtwFcjbs{M`g=Rne_r~OJocB)cJewaSg)sWAzuQ}7VxElo^w~y+ zJ-Ct!()Z%qgI;*n-I@r!Ff|J)AAA6vrxC|G?)bku#U{oM(0I9|NFA?Z)XTFmN^_xu zEgFyr&fQAB3L^Gd35!T7gE0xMJ7bw_vyqKIjjEgH;b_j#0Z2>!UymFo+!WGz^VUMw zuVFk)35@RdVdC*`X@LbW$Sn$|3NdNG1WWnxgVNB3zhv0@6cQ5h-Elw@-53`?SciR{>1&mQD3WEPf_hHNEkgnUJ80sT zx))v^F2)?I(G_V~t83L!8d6uA`gx~7t5f0m-SGr$)*kRpYZ!ihQxG?eXW> zekn}Y8>oJ{wv@A+OzPC!AAeKy-_oug^*IMMy$9#!SYWgddajq##eJVf2EPxB*vg^Y zKSW*U(?(rH>f5JC^@sN^ih*TNx^9q?1?1pp`kGMfSJk{qgolraO;hnz|E3R>rr&h) z9m?kZBMTEzTPtYY1bA~GF?l4upA6v;!@Dgn3iQ#nW#pMW*-?7eWFvH%lL7r}HsHna zkYMU=0K9p@>E&e<8czGvqt2U`f(+8p%|1JMx;j*=wWHU(QKsQnM!8YDQcIl1i;5i{ zNn}|SS!Cyz9U3#CSwgoucT-WA3`(Znun_B0nIRr$7?h>gZ+536v|}1~9;G0*@UW)c zy{OuAQ8i^0R;%r*qPL@6-3@1?8k~u`a|K55EZ8thyQ7)LE;y?PFMNE8Tk((DS}K*% zY1Dql_Og$sORjjZdjpTSYrOyhSO$<|*cL_qj|{c1kYMy4oXO5acr7_-)n?%oXfS#< zL6+DG#P-AnwRyaya1t!?MQon{aRI`?4Dows1JfS`7GoZ3bkqAWJhViZIFalhoFG*k zd))Wn(O(5Pw900ATGR7uwc);eya6X%tYZxtw6WBd97M5ZBxC(*VSb(OUrq{s-VXWd zGg`n$qdV@+@pZCH{umBrFLTVUd55H56i#7{;za4O94!Y^C-?OCyrYjkGNv{&tYCvl zBkgO8cdEmsZ-d}b8c^bN+{s&~x43pSl?|;-B7bmaa{#K8&C#Q#v7FLm=~3K78k?>V z*lPb|!3drE{1WbBlpb}hZNv$w0`yZQN)#M?^D2$lLQ(gk3B>~8VN#NKP`2KnDLHwW znw>(;zi(zXIm+6TmbDuY)d4~vE$oMs=Zk4h4RA0sJ`wz)4;pT$1N_0OPH79KaX@F==37^TYR{+Kwftz5k5j>&HJqXWYRW-c{8H{ZtK&&)sh`ZdW7)@6T9cbCdqX< z-Hk@cV1RbQAycbL_Xm3a!?6c%&89>@29A>MQjY72)I>*eTmy=sZXXGm^*MpG@n$uV z;>U2sEkDFxq+P9v;uK%{#cD{$>nMWgj3ytEi8czkfJ=ou! zB$~;)?@i3LztKo|jQqrklW&oqgfX@(Xbi%4Tsi#$u|C9taCJo2)^lP(|2D5L%pA(^ zoPBGHHa0JqNBsAV2&5;ai9T%>;$^jJ< z)q3Di6_(|r>~BAou^*z>@r87JlO2CP7H2E?M-B4NWb#iHQgaJH>9$$b3;#2@Z_X5q z(+&_ZOKRpHNhQ(^7^8d>SQ$w*TMmDV`Oh1v<7K;wTl-%EFMx>^3APKJOVC#xok-fP~0)2clA2pe66Sn#8T(oKD>EQ&@eU%sPVuv>(DWBii zMM^EI_3=z9&=eyRw+2eiM7jJ$9j(sMrPX2sL{~3gqzSPPp5!h)E!&p-fYBic#Bg|f zfqaU8k~ULD!zLaM&E;WH=A&4lyO7Nym=QQ#HDaqsf;O?X5^DKt`RslYLTXR&0}Xc&A`nn143&mWv%zv=S? zyF14$Z-2YtDCK|bhS}mM{nM0ov={HALcfti;}YUT&U|o^$}ypYk4<(MRxB?Qww7V% z_x8g4ba)h7UgF-;xMW-GbPy~Gl;I_7=-74CpTcA=Y)0-~Dh{J!N)DrN_#x|-7w~}^ zK)frkQQ2!nIqoH!fB91KylnY9u}bpgVqwjuV+|=!Z!msO7oy(i##w7isG#@VQ%6yc zUQPOa$_LfDF8C%UZ$_w= z$2G~Ve3jA*6*LAC-YHk(67Dx&A$ug+C5(s6zl>1ngUgN@(12lGGym8O$iA_?xzS!N z@I)-rq_t%r{*M10rh6J*$kfo+@aj9`vswOHjRbsJ_L&An^wGEM?mCS3cdLrxw@)GW zS+PTxk%aZl+?URh{g|Z|zO^UkcdeiN@9%}X`+7*|+3{LupE9)wGXZ-|ceGE=J~P`U zT`Fsy-ekW9)B2&X-i(EY#2I6xmKf@w=9oS!k)F|4MJw6eK+8RH@Oos#KrNAMLlcYe zWdAi-hRYF!n8@?+jV)O)m6`Y*ml<2KuS+lyNm8DbBOl~I6s`iCllgs;_xyH8rX+6^ za$>XJ>z7ER-1Jx(pr4&B1`^q3#mbaaRK^^0k^YcLJUhnl&fylmC_!y&N}1f)ehU#Y z7pMEvtcME@C~YUV0H60z%w4=T!74Ms`ZPPu)}hV1{^VF=eRo$&%^Bd!qzF>Uh0bR; z!UT*oRY_PqxN!tWCkJ|*v_k24Uj;9x%?LdH zIO_5x!RM(}q?1eLL+b_-c29dR=+^Ze5!ab`V}wN>7LWn47Gi#@yNvsuBe-#l}EJ&vW7nn}SjZuxbTI43kgkN^QO zE23H>thzdEp-v+G$idE;#?G1j1L!KW+KYa~nrvhQ7`0si9Q;-fkxbOTPM<7j?~O%| ztr}rYz%Gow6fRiZ?>Yt7nCTP&J1t|RB~~WBElV znYgSwXcmb8qpvSvfW^tTNTa1kYDm^-Z>&_pL&pc7WwYS_$l)Y1J7N|1?w!fUN`Ogq zUkiFsYxM-d%ah`|UGRkHLymElKL}7!k6vR7PhgVebgwO(KoqL&>|kb_9V`ZU5j?gZ zx!UbR0?-@|bK*4Z_5hpZY6J49j5cL`<<61HS^pe}(D{3x3Ygei3q5UEp0okQQFOOb zcN;csZO%RnkXGHQUmEBNz;gM<^TlX-C5`tTj5O@X$@qSebh8xM(%M|xD$=ICV-6Q=4p#Hb#iME5DCvxd8fHvld zKrZlKkHx`%k51iI%>Zup@I5lgEWAGJx4S=I#=1Y9C+`Ryd)Oxg?z(y zYd+E)eKy+@eVZx_X*$A%*teb+wr4j9^K);8$iume!Ke;k(oo1|bP1-8!F(Z5l3)vkgwBw=`TRgEoG0*#wZp>De1O+EoFhhJjbB+4;?f)F} zqd!Z=JYmtsxWHIb{y5CD_ngA~F-EsC*VdcgQm!#SJ6lHBmjsZ?-`BevKCTg@i>DL* zuOE1AfewP#cCz2-uPbh&a;DqCLa9r;b$wlpf(-<{%=MDuiw{vNB26D^H7{x^s<54K zJiNJj=~?sO!D?eL!yL zM{V%{{lDkb`@N9gQOc{e)6AK#CpLx_Cwwj6zlp2|?^RP)!Oij4EZ)VXiEWFZL;nJ_ zVbURItJKYgu-CwgHkPGWm2YV+5>xJ{=I0r|5?+pZ^&VWh6L7mjF7vpcrmO#^|FJwu zZ6G=rH%H>eYul!DoeTQhNI=6MU>+dI8O2f#8l4hq_J?>OL-nKtDGg|{$umq2z9i`0 zo9V)QWM(xb`Z2@*(cxd$9r(bR^e1uw$-p5c{*MgnZ{#9-j$EK)StGvRB64aEXKLn{ zKnTnn#Y?8{hJ6GYeLqf>K>6uDl-(khl2E7(P1N^F#3Jd%BV!7*0LxdwIsE?j5CibR zH4?vv!rg2WwZgq~UT}LIotm(+0LC`K4!1Ab5h6d5bWd`S3-j=os?ay~r+V*Jy{nq0 z&U}#dHdA~*>Utk}3nNt@OTVSSylAW87ngaeM=B+A49r3lLQEu`D~AqTY;00{A=0*=Vhv+kZaXJo zn_(18cV}mBC1ty&yA2b+m7_SRvtw+S&o@I=C37;qW`W2mc|_?t!Kbci+K>daxi>d> zUuqUK$sFG!D^oUttFo2pQMro3#yWjNX_&9knXV_3(O6K~2@o&M%P@{X_#3_dUhy?t zNXsW@bB)~(z#*|*eQf@FNP@q7}nOh)3$|`KJj+k;!#tLa%y!F%Fe#wu;9O>C3hb<+6A$Z;dw*eqKyA^x*+oXjqhY zm1xPK>r%&S-|g_u4!<^&H*}2AK|Bjz=Cm_f#_kd|7Y2oNP+^x;&STu{!+D68{=ual z_^U79cT($gdPKTHNGQkZ^9#Eq;em=c7Bq{NOEa^}1g2G$ByLWqJdt8ZaDUCI&T11_ zmQl(gs2)?|DovzH+!{`)=P#7;(y2CQBYxTN%~R&yRQb!1Oo0%jBkr}NlRDDdb1_Ha zv6s^L933lGO}4l1;TjS5=zcym9C0MM9b;obiiMtm&dVBD&rx3JzW{7uR;vmltUfd0@EjD(=)m%d1<;Ec!fuPP>hVMt7c+u zXcE0T`2i@mt`Et?g#SdnYz(k(LLmXOA0@vj1c1;&k&(nMVDjWbJ>0%AV(*?a7Y*xu zAh>RSZE(7@q;{I{{rxSo%?8H(U0dm#dpPW#utlaXJu?Z6RbCYCIs#eG7)EArv#3V6 zf)T#G{l(eXSL_Op6M-*MKTj4hA)tSXw()C?eNn)Ngv1FV`2y|k8bF&(Wa!;%DcrLl zwKuK8%bOeC@btJ)etHidaRx9A&h9qMFw+!AD0QAV$;C_PBAHF$vqz>9Sh^k>WwZDK z=pQ`bHtLrJj(s)hO;(A0)al%`=tTH}%A@ zhwKT)P0|wn|IFCG()W))Vo?aRv3G6AHQ@g;lE5KnB^^@CYhddweyuKiCQ> zXFhv)0@$J;8d%0}d`a(C-wRdoM{0Qe1|TinX^7@<>iZNHU$M5$p7Epp4U@os>-Tl2iLZz^Gz7Zj0t0suNBLYFtSgv zwvtrC{3xVW$bicfd2Tu>dHeLvKmAWr6reqW3i^Opn%bWEU(E5fUdWqY`ym`Q5sN-s z{O(7{Vq}8y<7~5qlZ$vmIaP4=f)G%4;q;2mNj5Z%0x_8d(`f<=2LeJJ5>VYE!GI~v zkaAq!-y}sXOQO;x>X`B-x0qLGcF6J%oO5Fqamm@)?O?8TX%ezfbtc)&Z&3TK$P;CNlJNRFI!-FObpPQFk||;&xSSu z1F%YfJ9FQ`Jo(UgzyMJ6F!-Mgse+LS55)u1H^WIkLwR~aKpMCkF^6BejW8YVD1Sy7 zyY2VSfw86*)z+62O4)G}&N)oCWHntx2(Tdxw3)F%)4w(AW9Pl;rv%8ho2sq0R9DBV zA?tuhT}bcM#ArSVCF7V;6CLu;5Ff*e3hm07_NuYz$cugEb~M`0FtC9-$!C$DaKhuf zzrX~!Wm3>5yol;cE?K5T5PD_o*Ve}=6a7Dz1Ff+>V*xs$fV`$?Qom|vJoad&0mDFzynB92l5G}AexTT^SF8&)13~vvpE0(Q_seMaQcO>N zR&IV>qy$5a`_MT-f%FgpH7eaT9g!s2!0fh8fIukFsOTYW`V}25ntZ)?NSQhSt14IF zW1!cMbEU&&7ns?Js@Sn?_JvyOU}I_YwSxl-bp{$9Y(GCRDM~|()D-UK>^1BKtWzdq z<0(wC+-^CRK)R1Gd!Cqbfi+k%V(%)E1}vb6+=PP>ny`HiS0h$y4+XDBv?|V*>zF*o zH4_t#-GDzzOC0u`&c~04lbIf14m$4h+f2~2(S{~7lqJ(!7((SmxF$2(*%|e^zfrl~ zLnHSnBJ6nk4ATs$cki;DMaVPZ$2(;J{}tdJR@YHAOGVLXc=1xtkcz||HoA+u|7wA#^Zd!4wOb6M8mlpvMkHh&( zg!MP&zWO^DB^)S=hJ9X0v-phTRf>bQK84X?8Y7N_eSS-zCqHg8A-TVg%#D!`XwK=7 zKx!LfpM6c`$Nuz{LsTgT$9v)NCBG&J^SIUF1rZ@fjj#hXb3a2#fLZdnI{W)@X{8vd z`}!k_$Ye(7N~TI2R$UTyPpcu(I^!N5oQJWlxtrl6O5>Dnab89O`$VdV=_DUl#;uOW z&MNl=tkiU2l_tRhuJ^vML;)MGRcj^lPCsa6cO)2&VkC3pHB!V-oTXEo5Z%iByWL2a zd`4Z0ffYv$L*McKWfBnDbEfyYE~v_k`&Drz@bO@#NObyz%N5<>Y-ly@@>ezfGdJnw*w&EqAFDKCP+t&&~o z-&zl)%V$rn+1`CA!Y>O9T1vN!+;b`>$&4t~g2yd1M%4ikX`LOWCyiB!fZnTKjZmS2 z`I%yC$-n@v9AG}3b#WAX8J${5EBBQ0{7#7r#`35F>fr?z$k%W2QvBG4$e1#v|T zZ^+Ys2JKHGPLn2AL+uTE*S_oxh8rf6>Ms}=GD$(_lPfgEPfnUOI@~oCthw#guvSN{ zno!av`nDUaLh}ltLvQ7_Y1F|bi1&ZU{-!0KPaZhfvb(DgW%7SE<+gOswXWvi66P<{ zcoL6dHd`#<{i4G}qyHc2Fq%>%3QD00^M&-<35nGb*=_)!AJ7>{FY*pn##l$JOx?`p z>z37G>n%|PMO&zyLS{!`VSKi+_x<@p%#G>%`z=Fb*aPI|6Kh^}12kZ*21$d!ajRf_ zDCZO`67~}981;HN|E6NntqA|}9dDok#m5StYjMZpIlQof(L9msoMgTOGbvB~Ul1`G z_Q!JF@#gQz>~75pvo6>MK%v_YaR7e|#Pe(#?gRQVu4Uww72i?zM`S?x?w|biErQRQ zv!mszyeb7l8_K%gNW&{&qZv4H%6MWcC3Y(BD5f(eRRZVDi2w{TvP7TrQ3~VO%R;kR zlBDly&W$()CvmT#A@n;*E?A7)CaWxs8^H~XWhE@fRAXF~+s)-Ef_Ouq!Is3ASrXI|^q<9~0|v7gp`SnP?KknIzHA_0T=fMKD+`oIdz^ zi|+wo4`jA{e)~5$af0^MWz%x0xNoEMQV%%2DioCHFhW0`aW) zv>0{Rhu?$Zv&mV=MPl!B#LSFl6rNh|KmZxuuzydTT8rzS26F1Vq9f*X@^WD!zbJ=F z@o8R@sf;#~R8W!)7FRjNVYg?lwR~7MFNE;%d=Bb*9LBzm}nFKv3Eb zzR#qmQo|@+J`zB_=+P}SxZ()`udNfQ#?Tz9reMMu-dni2Ed+KN!}v%`H-o2&)yP}0 zKw&U}T7e<3|4ChwJBeXg-*8^phcgg7 z98ZcZ{8g5&9p6a7i1YAM3CPfWi;8C{)LVohJ(J&ZQ;sC-eUg={YLS#K%si~Xw6BLo zBt6qaT(E>o_;-QK`Sv-~?EndZL=o>_DQKKg6xgFB3?8O@jgjXXnzN%p8-3{Qe&4$1}qh`a`R0x0XL;_iC4y~X* zQrI5#U^(*z2D460cu|0Do1k9fKz3J~8MfX@PV~T>i=&K?H&L)l8}2|Ssop-%s+Az< zc-h*N{Ps|d5(92Z`fdF>j?Kv)iUzXY>@`D-(J9;%IS=1fGca?QK8dKGqr9&^vFH|+ zAZ-=Was06~^T|r4oFn_g;NqNjzun^$QUPcU33^*7YMlldQ%eCI|-r!UzP=shsE?K99!Jk@7 z!A#?ror#7A9`+~|-ug>sYk$4ci8RL3scwHjR7%xP+V~Xmy0PWhH~|h45))FRr?&>s zLXRM>gZHn_?VEQ!wxRW!oE$v865Z(inMWHg$>aV9@|BGTJNIZcT|1%$3{BXqQRt-q zSuCu{Kf6)`MuQ|4@C}zMAgAx-Dx0K0QbP3nzw)8k(BG=;Y&y!Qvw3`QNVFj!iU4*f z=KBJaNdsc+^ldcY2j5y20n z(#E+a1+<+Z#6EPP1^KcWzFZe8z4t0vU4VQ91;?xXF4Mq3oZpdx|5i6n!=bpuAv`wm z^o$LT+_4Cra(r85=99+g=KQv6V#B3H(prw52&7I@>lvzc#uF0K{TURXfr15yCPE)F z?5;C7Hq)YPl(~tX#mj-WWYBD%%qG%T-}9*Ugz>$+>N-=PIPD6yu{{`uC^9WIpY%$Z z<7Awnd_kuNDj4V&dB^nhT_}kH<$2YZtnGC6^yc|I@0HhEkP4v(c3-zc&YR3)q@Ok9 z|E#}&iW%p*Vnz;xbR??I*rNRBV?j*V-xafpSg18;#&c{_{r^!h0~GboOsHCDfXBQo zKJVHH=o;fCT`?s2v!Cd4pZe1$jLqxP#k0qc+x6~eRcqo;Jl1`i4AMdYy-~%3bak4u z@-NhWuOk&_7I3h?u$z65-OLi9kg{0f`YgchWE%7oo!&W<<&yWIt8wnzgTho9rUl-n zG*sJ|vo0L>t2bI5REdQj4y4yp^uLdM7dZ-kINLHn-YDfThCNEFyAKZ$m+h%bTj|zv zsi2LcW+Sz@>;?!TYauquX*=BNr)Nrns1pmErJ^ypiYI7fBigLU#HCL-H1ng?s3IZo zcGODLn)RO|+3D1|!ixtsfwJJ$MLeu?%`NpFoRU)QJ7`S_5=MG|qYl7he%}H7?390H72v}Z%(HDm1i>5e>@X9pWeZd|YH%JZ`V`fqy!}=>X2LDaZ_;piGf9U_1DoJ zw!7IK!29}$JB3AxF8Gt3V{Vj4&G^}L9h`5ap8dM` zNBqh4IL`_w^WyP@jAZ!7ZRwO}TiJ3bJz=r2nz{TgMAeJHsc1(6HbZkgwi^=)u|CoV zOOZm@U}{=bbtS*)V0e?7{?Sc7$7`$TQVNVwvC50|rVK6tC`v&vI5}T%jO-Us_hRi0 zx+88nniTMR_uJMEgunjs&vO+t6oD5*;Egm?N^KXk*#-dknWc_}RIgBHYR!$UR__oo zay&(snl>Vab-a{Y&EpiYlkX50)MiuZJF&i=SGp2O$^v>VpY|KG6Tk=F({ynz5{OS0h&DyR_TVGy8R)@4p z^jVN%OQOi)oO`I;JkPsr90ycO-t9QeM+!%>h^VmcidQW;u$6t+Z*>`7#uerQ_9rpY zt2WgeCv)X`eI4{<@}%c@;I$1tjmmM=mz32E`K8J{V*z77KbGnc%G}rrOR6E0Asbj6 z7;54D<2Vcg^s^69B-lW%?a_29Td(1i4h#N@ke37l|G3>|(Wh@`^$04ohrxQbmawF= zJ|F~nJrQ4gE#jJ=-g|*=(GL}ma_Y)oEMf%4pthx}K*Qfoz77UbEJ&E>^QWC!oT0be znVX56=~MJ58Y+~T5yoc(Sug*ZU>|s6RVKU&p~1Ru@f!vKj+ z%`pNQMqn8N%hF{*zs*m%ChS*zJO8%7)&+ z-v-lb$o!hMw)(TvVS9|}RE0KMe6eTadHX`_%bAbllof_uC6Yz=hWy^!cZiF&gL^Me z#~wDBJWaEht4nn_kfhUCedorjiWuDF`1+NYCRmkoaHeAQ3im%HG=KSD`tO+h84ty=xQ+ti1VKZ+2)bQMrdoSARMbUJx!i zp@g48>z`RjG8(q)dS2h!Z<&2Fb+f{+v6{rfS1F}&iYi9#S9%ZGGY5~=gJgVHqlqzR zS%%bgyF^8D->NVhjsoyFZauCgbgKrVGL~UXtGclNrG~u&2BnZkiSKxCHUG5urfY7 zh}BRFB#tE17567NmW3*B_f0gMJ7YF{9KjqfS}{-)RB1UOt}b}?)_Nrpv9zdoF528; zIQv-nFn~aXk_+=Ge>^qnhT_suDc^DM+kr|+cSQBht6CW=&lZRHvE_lxat(i_$#-eN zec74h@&o*%pGC6Q>m`({EJnS567qsw25uC_hj6&R$uEce0LkGig-iCufbC0%Ip+aQ zVFPbW%}-j-r!HdzqA`dl{D!u-^7-MIji7mWkJ24poC$!>r{G4ec{g*QTEB;DW~wd> z=O1uLSRg-=feE+a-4{{b64^Z&7F~#RxDY{(h|hJ^gSac>tY5jD?F}(j4076AD1`6q z>im4>vcv*LwJTrY^k8hJ(=0^TEF{+*r16xIOw>~;4E|Bat4Lpy+*7x!$Z7^rJ+KUh zC8(W0vGr8X55p=^PBiJb3-`|191tevBra$->(N!Lw+%V;v+sFQn+3#<9xX$Y(C|UX zwt=|smKmoC&M$%t745moqAVbThP3ZLmP!UK*pIv}r1Rc>&3pSZt=?sVviWjO7$&_{pPIjT2JRonBf3IJXupHZKc4Ae{7z5YI?XIfgJHiMsCWV0@wQlv)7Fhx zCF4u=|3@_Z`QWB1xC^=t#r+dlo9Sa|F~&3WQMH0jMEIm3Q-k}s%Xs3G!n!qAXtBn(x=F|AV>y_4^s73%XP3hWCW+dutKtvQ{yk6|Ei-7o}qK3t*0 z*s&6eDO+Z`Eepfpzr!-~nTbqsHGV`75?Q`t6U2JqWaWV^$rSpE4_P_hh5M<&Dvr%? zgCr*{`(B?zsCp%GlHwlJ@*Ta7tq!KG|Ufdv+L{+ouJj ziT$@ez{vKk_Pqhq#Tw%(R($fp8UylvhAb2O%cVjMR*sAa+NB0D6PJCgVd-5`co*yO z`HV&}hslQi&eb~L@K0Ql5Ayy*ueT&>l#kro0X;hO>Y0NDVK8vL)8m(@wst!RBK(ho zoCoKem>G;bED!?pPe>r=r?Bib-5Se9JQ4Bb$gjz&hOoQ(8;4^0m>ILHeL92+$Z>w= zW+`03ypU-!?v~%PyeskW*-zRhuuXuqiJUP#mqCI>6}7^6%v6~1SB!yJj;*nY8uk_Q zmV0wv7)ZqL1S58$7%ku0{M@&r+k)c)7AyKmr#Y`(ANjniygpJ3yHOr4`Xu2iMddhd zPB;8PPS@{P(>h_Nc&~?{g{(l%vu3d%aYlCeVead^Pq*we!^qopqGSu$HxKE$SJIrZp zzuzZhY{_-=`IS4vEX=bh}ayC^KMQfWC_mT zIfU8p5C}OTy~+-v4jP?AF7me-Ff{A*_}Fc3G1Gij<%<|)X}j^~3fdTL7&_`-;>N z;!Nb}Y*SmRPpRjOHz6&OLRJmhuc9b6aahOd!8iZ8$y_jn}Ru_Mo?i2JDLO3a`s zNk;Y8M?@2a^^^RgtOnes?N3>7U<{Vgw&GP5@!xepyPDwr3r6_8bfuyve)v7WQAP@q zgCPF5LYt>@)`mF*)8YeGy_Z6Vi)Y{GabFzev=je%P zIfZL!8*ror_GPz{%d5A|So*&AnXc91ro!@8eTn4=w)vqKz22m= zpIPC(pT#r?LsN1awJwWH$jPmb||38$yWmMH&*FCHt z-ICHF-5`1BR=PpDyFt2B8cAuCMoPN7q(i#v(B1j|yp{Wk|1+LoWqB`_KG>z zTx(b1m6$Jn8Cc?&X}?`Q;J?fi^oKTeQ1-}KRXO{jo8|CXYD<@*S*p%$WoA;<5kB$~ z&3Bams+fXy=(S;oxt^$@s|`vR_y=v5-9PLo;QAsJVKeozi%U&FmGEt3)_ zC4M??Sp$C9;{F5kk1^*NqT>>M$Ll^@M=26OPQb$n_lLZXoESE*h>4EfoW7h4VrRte zSOw|z=4&uL{_G+j{tJXe4&J;m)12l1670fkh0aB0hZAKGd6is$h;STd_t&1a2s#RQK< z`3;8Pd5-c7oom^a%*_nEBm)>M4PsiYepPGp1E;at(7G=c`|_nsy4Wr$2M;}r`;mEj&tGB=6$xv(=Luqp!%jZvD3OdFkSeLxo+oQps^UMd*|_UM;~iMxoED-kotE~*-U23u0w^` zf8nKlf9V}WBoiHgBch<(8tW{>kh?s;CL=ee>?kfqIMNf_W@Ck>{Zq2Qc- z7?bc0yhjZREAN}O(^`Ww+nSA41oVE$T>(NI${c-GleRDX`v_)r^ug2u`A#WaU z*bemsmP*L=Um;Qqc&-9F&mX309R_SY?iNqUhg6Nl36-$zmA^R_bWvf97`c@A3~?>- z6szorsoq_c2cU1UT0ZM^=+Zf)^F&|k38(kk`ZVX}4?O-*fj#$Ozm-v_Ep^&z==x`i zvrc&PHG6o&Ju+C)dIkj*{&u1&l-m=RwXzIH+WKSH+XY5qMH)1G3q}#luNyhL(QY!} zht{8*LYBNp?O*%~kKvQJ|4N8}+b)OwvFZ@udR?HN)W7A@d6HI?XAQztXQ_@1R;!U@ zjvs=}x4E`8XFCbRxAu^Kjya6gRel6Tj?54g=76&u%+Q_jvnoJJo(?hqwAcimockR$ ze9cLs^#*#pw-2_vmFb^_lD|Sl^||Vu4MCoi5bx42@-#EiElUcEI2qb3Fz6{e&y&6~ z?b}Vdo{z0{TCHV4S3m8tr%S6rRRr_;flQ?69i*f|(-gT3Um%3Djlj64sD_R@*p*yS zj9t4np1zRY#bW(f5qcQ#=Bsl{K5-QVE{DZ=Om=sJ)8Efg5bNyVDHfer7u`>(Tbc<% zmxH3I$#U4>(7I|g99P-5LuXhuSHgVRCi^QPM@)yrL5tKdjj0^t zP~G^rD6S<~MH#OG9@oqpSd2p&HQlNeA$!6Tho(nx3nTob)yqiTh%szM1DStDXg2KM z#cLwKl9+qNe&+kj>H>98fVbK!0uOhyQ>7tRm_K{+%~M-Lv0# z#K#%xgkEf~X?ZCv>j&996&)^;@K=0c+0ASc(Ukq^%gyfjkK<(y6-}_@fQtXHM9Y^O z2{-PY*?nldi`^s-or?h+^b+@%iRPYk#bE(m((7iwLm6N#U0yZ=RENCQ39!C<$ip-OceDlHSPoL`k3+SNszFkeWnvT1qNyt+Mlv-uJW zg|WCh2q6?ckf&E0$C&MXw95d;1M;#YN49(s6;&LI&byCwe~YfbN3Yk*noQtEMuvDO zM=!^YI*h;Ipl?6?5oBxPhTY6t?uPJ_@93k~-+357Z%q>AwLg$@>m>9TQEuz}SLDvAqzk4}o&caG095|iAP+2LOk(G%kdQ+86i zgr?D8${Q)jX8HA_9ESR%zI^uY0;(8dxaEv5-SxpL9M`pJ1hWWflfgwaRJCz#`iTx} zXJtL^6-Hl3j;f(lHGfYcfJK!9(3$PV1zb>K`XpNV3g4APC?RkVDeysd@K&oD0u0Vt z$8UW!k&Gk|`f6LveGdF&W-kJDI#KEZC!=B%)KB)pYHh}vI6phWPn~VOCb+#AFJ*EZ zInPn>1h1hS&8X_YLOFPjYEUJiHw=mf1SjHx5n%k*NQo7v5A&GCQ6!revB&h0<1tY~ zQ-#e%pM8I32K{w1U|q2;K5ekH1U+mMw>lhSaeSZMtBR8$=&zy{s7a4rJqP=7fjyb! zftWb3uTT0nKefhMhVfZI^ssZ|9-m=_NdMRl{(mTz+zOKy<}w&qBR^B!2jl;s_IZXQ zRddoaS;v2RQV#qMI=W)l@0*H5M{2wZlzvF%REnoz$y80>joa+eeo;K6@JBv`{Gkt>OYwMTpf%TC@9PsX*uGwWQ3 z={oy`G}pD_uuBoaSi-Kt;e_dK)9lLPkmRnyo&0?dhl2&*V!9^ghlpsurs?)?yx|Zj zeRI^VubcnH$Y8)%T8_f*&vhBhu8)Rd#9;yk&u=!8?tZ^Q0 zbl=lbt2w63&dGawor}*GcvMzKyNLd^FC>HAs`Ek%WXp0KCntsNd!SVh2lc^oAxxNyOV4mr~_ z9%yN_QYr-qTbk6>@H!%3_*mr~2yWHT;&$xOx^}~#7Z5->GpEth`BctOAKAFE*oU)$ zJ62UiCxudHwLA6DxhV*KNC;L(edFK1gLe0{TlDq-E3J%FIyU=Af)8xniONa!S2}0s_Ws zE#_h8z2@YS=&|Nqb{+9S=^+!9QorimNsmkZ8u04iv*#@2amkYx7y<1Jii?6axohRq zc`sv`9Xpj$-$_xk8t02eL@jz^ky+!*ZC?Mtr_;{Qm+ki(+MKy0{}NNq6~Ph|C{V zRY&pQ7+>Nq^ZbWdruhT>=K)46l&Li5FI18*19A7P%;W$oZF}$4^I?&dQz?^SU||@1 zh6%U3SSzdi70)jRWTS*f*fJk#+I;uNQiSN7pPZ1*>OVoD5F#A337o${GsPv`4RPUS zgnV1~InvX{`mVwPWpjZSiQB4~EF#|9M%0qtT|Nm2hL;&0ABVNQ=a`N6JY$(J9;ji_ zx!?ReQ{COFHWOY!M znT;dgHQzH*k9xYRkT%C#aHG<&6{8YYIFGzB1`60y%jXLtb7H!4CHuA9%}CJacs{%J zAH-{hv;t-9F516WfQQ#^tBL}dL8#d1VQ<$czj$htgH|?lTJEZ$$POB%aWM)11AJ2vLtZ%{g{&9vsrQTfFwypU{0>rVZ0X~_|^F=34b z8;TUHNnNv~+VtuzrAJZ2*OWv?X(BDq3$*eJRVD{-{;x*G=TyLa{>OM0p3(3^2{8$L1F5rW~-jUhm{R+(Uxt-j=$i!Gz zD#}+uZ$9AjxO~f7gBMURS;J){V{EQioZ&&i7T>P3Q7Z_qB~Pr$_H$-lc2TWt{a$rnntP5-?D znVaxO{*&o-myW+uArE>WuzZx4Z22>lNBZBLc_NhxaC@%HWZFM|@1nVE>Bau?`#2Bb z)WY+4d#=^5JH(nshu^-`B$YGXBhsl1W2I}Fr&%37FE*xkmx%?WC%*)sCD zZn-?3EM&BkP8=G$j>{Hld|WM>{(eDe)^h99tadkZn^RH@2ZI|d`c=?0u5!X74DHo8kBtGZE2#7T8e`R9_jtdV6iP^E zZN;|H7HwU!g~5OaC^y4^CI*RP$XuXKwRPJALl;BA=c)UnSv=Rg5P-b>6yR}#sc69qA$fBg8<&j|iyoM~2gZ)4J zK;qjh=^5@MCup1Owj>5DxqN?AoU8<6dep@p*5M5@(D>t_RT_n!oW(n=XAMaS_I)qHBzw?zX#|LPlR+_oc?U<3` zvl0yQMNQoC^fcFSV9kRdHN0m7l-+AcC`wcc9Qi!Y={*|HklsYJz-L&$*I2#FYIw1wE0l-ac-9&F%is@3Q9I&y=adG4DAw zh~u=2>d~-c65il${n4eAF)i3E)`rn;K*t%Q4T(fi>|K9FvH~DX5OWrHc6)3zgAto& zhy0CF;u85gpmaH~&y#7OH7+8^c$rzzTY!7{BST(KW-xHGK~z+?%ezYk?=& z3B{gp+MUM)07iYoK`r|E?(8XJxaay6v*XSjfdf&xKUCB#=$wG(gb0}a3#0_|L~@}F zehLcJ+BtLMjeKy*JW?q2P!1~0g0FJEtHc>#GQJtgpwxbT{5A7;*Iu8csLyXb0AGy` z%B!;dOU?^eZ?8!UT;En**HJ<1f7$gY)918>A9NU2PzF3v!x516WN^Th8);fm-n$27 z3_W!T|0looO-2uda%2N*JLLTF^isGGtwv;{>{ip`2xKc|-+Y3XL0D*_qGrw0Mu$0E z2xSLFm@eR8n~_|DV1@pw_jI*~n{#%COV2%Sd$1<#Y51s}1d+H=^N_ogW2$m6H3E>8 zC+~z|smki4TP>?IW!4s9k&)Yv{rSnLBmz@4>65!q#L`uQ#Z49?^7Cy6yieEy%qKWA zDv{s=AF(N^gp&~n>h=h_zXchpNx!mgfN5s2v;X1x#)4PmoymRjB~zx&)XReZneO=@ zo(qc&?}00sh^^)Xw6e5=>54|W9Dq1_JXm;`?eQzy&WX+Ym5s=mwd7}7W3yXbL&2aB zwXa1DbTz71W_RZ?|YVW)sNr;bxG6r}wHIj?M~{-jeD|^oEVwVoI`U{~TNQP+q2ABnQ$&hI_XiUpn{^0$3v`HH!8Owh@|5#?)2csZf zPt@WK^ZfbqBqmqF=7$SP{MiQR!4x)otCxJ7DGKOO0IO~h%f5;Kc*skh zCK}zO`FvAQ?P2C6b?=Nr!Pcw=qQW>!&V6wTzxdS9l*F9!J-GlOqLGB8Su#YCJXL0Y z=`Tfw_MO~Z6N*gFRFO(t?ZeI$yMnKVVL%g^-f^t@jJiaBuRy=?U>H$Cb?_oP#M}p~ z9xa1|&N-nT>0>s#o2D!4L7I8ylMi${*Ab4EgNaLUU7`2cRyGeWF)-m>qZQt@ePe5n z+fBP&mWK3>p#M$mL10eh500#~tEVl|alEEOt->`8xZHczqK=L&^pApAN%prj?UaGU zn0}d{uJ|`CjiwJ#Wl62NQAwtQ(FBbbQW~wb%4gaw%~w^SI>O-46y;5LZdI}3)v1xX zRpa;3rN^eo&4-&xe?8ev=RaY?z#JpZ%mf&u^D&)jBbVv|vVkFG|!B zAZRag(tH>9+_n79{0?gug`+1Mv7)MMz}@bg3^;3=kd22g|6fto!zTpiQFz9 zBaI`wbc}`RqAiK$Mwm%e-Ejr0>3W($>@u%k!)ZZ?>#k~XtTl0D{HN$$a>~Xqe<_;1PN1JO()2Q;X42BTd6 z8MuE+60-%v$ggTAjk8k@Tt^J|>;d*3Jg;K7tqWg^)hQ%=_Rg%W}N*UM?pb{Vw zduqo55U_cJb8MPuFdGP_&pDLdVNwhx(O`~NS&>|dXQXp?;6-A=fg57OM>yEvyx$zn)3`X;A-mDTvmId3hBc}cD_XtH#VP3gw_MSC7j1N?-> zqkMzZ7V8&OLRm_4phHZxb0#p+=~Rxkz1A*=Wk+P1yWQCp^|U3F5M?{XmWP!_cx@Ju zAvVG{23I?B87ekaxIhiTvH0#ix-8rN)5njOt3`}!b&1#{>=alqA08rr*ySwU0JBu8 z;s4NdyBfSfOIyxzOKzg@DJHR0bT^@x_yJrrEnj(LkwfX!5%@!{Y6NM-i-^vRHC)}* zI;5StiGui!3tfR0q8*YdN4J-il)T(+aV@Ey1U9PLdEzvg67t_J^V0Sqq3X1mGZo5F z#&rH~6v1Ee&nGvUAb$QKvq+F5Me@(ru9914?kry$=3T#kPksWYLX)#vhbo%s$TMu& z**q~$-tFQ}38F=36_;)8>k!XTdS7kjzhYqBfn;Fgukb2_?DnziK&NJP{IJ>jCvT;6I=q3|fp_v*OVoL1E(qa#vNq4_Ma9FG}K>@gUsoAFYTZq^M zm=R0Pmhl(Z{O3Hz^Ppl|)A(kurX7vOtDTqgpcTS_B%Z2w4s|!H&sHv*xY-BzisiQQ zhDX|sSsJ(z!KYt*c;o^zO(V$sQztyKbw)rJMIB(&0S^p*zURovMd|XdZ(Sf zF*(hAEMJ9&j!#p}Kb0>U&D^$&^|fcP-8&easm$A1DuV?Y0PGiTGU*ZmzdL#uKa7Wb zL=Qj9_@t}NZRm#(?clohNZnnHAC8sb1z!fLQ>EXyjw2%y&BAEZ+<)XLMy5~ZXg?_K z&w`WJv95%91g3-btKa7HGLNNX>unOk}7J0RDW$fZt& zK?s(wMAPmE?i)9~%9Fji@Kk~7M^j})^levd{u_|`_3^6kPcq>^*z!0(U}pTQ^Yf2l z??2Ara|;FNX1olJ_Mjk>ZxEL?%BdySRnPE2#I>htq1i&V#Wlg@``aylS^f_ znFPopoj`pya@d`f#B!-OVKIS&r&7{=iZa-SK-3bE?hnK5r$LWpsa6Gj2p8z6zI~xz z2K;e320KH{F|}zt&cGIF$rJ}GP%LZoli#AgpQiIP8EK2nBLbO?x7-em3eWN?m`Jdw zD4CR*`jsL@gr5`zt=H^fO*{!bDshdoYQ@%YtMP^PXklI}|AQswf&0-bkE4t6+T9^E zh3Qq`6+>3L3r(8jO5AYfuR*I7DA;v$Y@bQ-fhcCimm*4uG4e{2y@pZ7Q8}+#g3B38 zW70|pj7;FkAnLR)k!6v8KTK$lAhXrJwRG75w)TN}2`|^16^Y<1G6u%6y{MclKa|94 z!zEwc2^QKD==qz@?>{$R2kUomaxejeu1kWOV*l^K|K%aJrOyzy=6CyN{xHZG`93~X ztwC!u1rp;M%F8rUD9U{sLdTi}0R?_JeMmxfOZ-6hyZpTt(KiUzgBv4+^mJwfAUHYx z+;XSe>I(OnvU82}yDQ6Uue+aLorNhYIG1a+cmvPH+zIYTU3T8x zmMxbTSP%CkLQn~7kP){oVh(%(!KHLH9Kxi3cYR#5Id1J3Hn;{eu1%s{=&OMt>VYW6 zeD0<@;zOubvtyN*gGG!I#FCxk*$lyYGJIWg9WGAPZqlEqHyS&<;#+W8H!!M~b!vgha1%i%l89?Li3q<|(D9IrLS*NMp@+0b# zID~)1lK&0=w0{%}=|BjIZ|LIrm&ZJP@3(X$9b5N#8hG$k%%6*+Cv$H(W&&5_=VPR6v)$~{v&@Q!X3bAtlngooe)k;?5phi3s4+qQ2T?$-SI%8=feLSV&_WdHqdkAM zQNxSFu5bSFzx~r|k!ce(Uz2yf*6n{Qq^TE~>xN!$2gI<6@I|_&+t}|2%Vyqg=oV8ViP} zpK^?*0pF~mp=+t zOAsK*dfmI4(+{<72flW4_S2?xWMGU2&^;oRZRVBsks^0o{O+tk zSN2(N@&P;t*T4h<&IyjXasnW5La=!y!Wc~Sr`JuN3=IFv9tlS1nG*+H_ zth(|L=rCFUc8X-4r_vx6$r0+A7K@CnyY7Si?v{JH(lnmY3D$Y=A-kQ*db@TrUFS}8 zqs5O_+Qfr>xd0OTQBX!U17w7@f!iL?$r(7}S95D8ckCs?H@BqIsOwXE$zrRi^!qK4 zi=X3N>}7^TcqmZRyHM;~!xbsOS9e}>FBKsM9l z_Mv^jdBIQcz5$!);JcNmEm?0I+L(umCj+8-`u@ZA_drekFNc#JQ6I-C6FD2U`oKr6 z6SrkoRXJByw<(B7Ply->56IafZn67e|8?r~e`GR2z^qrw5f}acR>EfD!j}1z z;Lg9!eQG279IXW1;ivY>IN^yJWJMSH%E>8Ty+hSc!_>d|(XY?0w{UWJbbuh4Ild`r zChg(^-7S?CfEv-{5b;yL?Z!rRrK78qly+h9tu$SAO4F5k@A@8v;+-}$tSB|XDlV}I z8Wq9Nq=}#vpO#06Mh&0<9j*LHT+pEwwt2ze0v^sIIUo4YYshkUeJP08WESf9Fz``_ z1WWE`Kq5~*!+N2bS%Hco^f%~3XP<9y2dlUnzD@y;JzAC6@LOZN8jWk#;GzbdFkrCg z7d{YMbVR^vx_K#+D%EPkZ!MO0L7-bPV>_qith<&l$XV;oh|58>BeQ)l&%oxb>jH~G za&bu&w)h%j)QpiWuIFBWn2KBJiZ?$_MgKqgq$YmOOip#FG}M5eX@sj#BJkg2^}mWA z-<>~4UjnfDKer=URR7mH)#6v3`d)VEDKh!sLD@^YrS`rRZ4PT_?Q!xrWkW zh&0l&-MbwVo4s~O;&Su*I{vHAdP|rASuQ7&Rq1`Co!8$Jddc6_!`Kq}oCB$+y+-Fe zhx|%}fw>L0Q+(#I?n)0=Yf+C%@50m?2AM#(r42oYw649Cx4ugJy&G0!hQudiE49n# zHy1maF0+R%G!qddiUE?lmB|W$5cLjTEyiG|oik{UCVgJ+$|&*R565HM?IvGqqC8_F0)Ohb^}w?px31ZSR>p?vJs@ z>RWU!A-iRp0Db8RG(~vR`1PcVhYm$!9!$?HLUvb)VNf{FG@VKmxXp*~Wi%9VcESkM z_p)8xbU0w<&Kju%F;18+T`{}0zNJjyGpaLYoJK0g<`2VjUI^`FF8@z4* z_LS&r1AMxSF+;b;qI3HjIzvJUkg?z~I)w_`Wei=7Aun=5(|RFj*kfSC^3r+3ZpFd{ zXX{QwiWN0(-s4nTe}zsuUe`Rs=MlKtYm(wljY$rLSn+1ItAY5?6tJG<3TJyuQ)QATOa>YK_0>v0(?GR z^WwWMTD!#3D>M|IyGCI2?&QG%$Nd)RN^b!xy#7>AobMDY)z;pV2fEOzBEez^g$iHo zHy(w9a)dUU)A6b+RMc4C+#uavw#$#Z(9ar0KkU4b=3kp$3YM$+V0CvghZSCX%07^B zjpaJ6E!vviiV&1Tm0dr*BA&D_@JlsxLo>X)14n1fN`Z*O;FON%{HP@5w*Gt?-g3I;R`%P& z8Lj2gRT##1D{y4eL#Ki1c)5R(;!(=AkP?k!xYfFvY~%r*AH7+mr?U+p?dcv)ss1%I zH(DhL8c28L2p2*G7F+kc7mfSGxcPVb$;#i z8+E5mI{k0v=kx*uKx7F z=y4P~VOhWWIdTj3l7#t7wB{uiZS@<&H5quTUspO~W*i&VH1ZtbuQA>+RF?|Ufa`5;k z^Nn#t`KKLH3|#y?&`{O?STjA@k%j_D*`cm>Z=P}p-|Og-sa3TLS2ZiB_#cH{rmvF& zx;RUC=`l9Q>oTc^nX?c$F7_AwVQlcCMlWSL?-9U>$*zOnH`KVDv(~QEvQQ0Y?`9%B ztuf%WseSu(=0f{@EV?5ZcB}9${x{Fy-4@T9t?J0L8u}E(0Dv z|NSoXNMANX;a@mGA@(A31b%R5`tmY@&BD8F%PwkJJ}dL&I*;g6!fn5eJCkLnQfG~M z5Ir7WTg=zI5$B^9fYy>X!LxC?>h*K@e4#nb)QV@!C-cvSlw51#pSclDbpf!XbNIhhuK)589$J9s z8+K#GeKG+9)`*6b5ZVINIxZ4sG8cR64`oZNfHHbnz7sY6VxiPD<$v2$McQ@jWJJZlDcV}>ZeoBP>{n!vt zy%2#VlEv9doyexf`+9)l*nq3?c7?-bD@OEcJNR;>MOKyiVDFl7E#i^BgO-su=#}E3 z&!Dlet)aN1DRvYfM{eNZP~Q3}l$FqA+7lfERa9=@)yE(^Ac_uj?$26|-SBxl@&{i1 z5{Xk1ru|yWAMd)T0R!0q?0P6~F;RD8RTF}T)*T0JE5f>`iy7rP_%VApg!QS-RRap67n}ATFcYQ_}{_XO9-SqqJ2bv4psd?ZL^$qi;^tUjCO(M(^<+Hf!9vyUxSVL}f1+3Zq069WCTN(%!J# z3bWV0dJoGsf7FX^fN$71r|tgBP=AvAA7(F3#|O%Bqh?j&$v_^O%bH%uGKP8D%>Bk_ z<@tCoS8$wP@A8Z}x<-2H%=h*Ww&gQ;W{q#Ijdl$$=Yo3T-Z}gZP9%I+W|$@Bw2q%v zi{b?Od*A2hRAcv<4!Y%^^}LI)oAT9izxaB%441@j0*}SV*EGQ7et92!;MuMHy|-i_ z>~1|%3KLRPj@OKhT@snDUW8v={W_ss?-Y6djXkv3{4`O9*Ac|Uqq~xuHqc;=cC=)z zymsSh*h+gzu>FI>;aZ&94^JpJJdUAk%RzVGWZ}!|Nok?!x`jtsw+siq|zCgb>o%p(D=1Wx708u#BTwMb+$?@R3BWs`_~-(G?K3t!NjDK z50H?WG3ekwr}h-_my7;f`bFT<|7_@K{NFGAFAC{4;+5}Hc1D3;Pd-CMSPjRL{48(r zdltH<4#SFFW-}XD>)~p!JB(MZdvdQ3dT)&%szDLn^>gZjk5GY7d(77)yNafK>-(%0 z;@CL^dJk9L^daeDr7yo!N3f6RIy18v`BvM6k_NX!O*l-BFN3s}5SB_^Dh6t2JqW(+ zUgXC>IofBr$S`1xeq>DHLdUxQ%o1^To;hkN)WA@)tfUVw#Ad#3whyI%B1IIOh|L?? zcggF^*!(_>B4T%CiCzYjT#`@?=A@O=?0pe4c2M~DC2=i+DaBI)z7H5E1Fkr- z!|pGqoc5uc+I-k{r&fEA_*Y!o;S7yTvMll#+Up3DT)>bpD(YC@#ldz7B>~{l}O!yxj8G zpQ|4a?1HEy8h$dJ6zb=m())fjgr%Bl8(WCg;F{AiAI40Tz$?cz*4D_C*@XJNF!cH#lr9WCrm`WVR zR%4#SLrI3JX3s~$wxr`IKp?x?2TV;LjVC+H=Y60v9`=3(?TuE-lqK@F1+=n@SvySinaD&dVereo0j<;zzgs^Y2pRWF(n41dpR zN>E8Rq|&BZy_|9X4PxS!61cyJ&-3JUv&XLIU8R0J*$|_YwqEu!o360T);sjd(6eF=O`0;w4~ps|*}}5<5`@?xb*DupnuH>h>4iI00xSA?FY5yJQmN4y<^@>xj7*Z0R@9ouzN2!$c7Xucxq2QE%SIsS=I z+S}lwQ`ZtyyDD5@i<7xiLlWK7Nn>J4Oo3NyH(lQ#hlv4?rS$+Z^|9zLgCF)(dyr!L zd>q>OVM88A6iW4kv&Io0SJo9SnYlS%6o1{}ma%Y%5`ywKSc=6fnzZbW+m?lYY*qUJ zlZBm;5*SQW+aF7PEkdVkibve~fS7VB3k#)54wASL`9vroMCk#!2|PeDn&rvET^W{0 znww(+7pV0XPzRH&>W3}%Xr@J~wNhcR{DDY`kK(whJ(m+6Unv(q0t(`KeZ9$#_ZGTa%s$%Qwee^wL8k?qGkh%FX5m_OF>&D@gf zh1_3~E61gm;9`*@3)M?xOI;pRImv9I?qc~9+{EZr2W`KvnxNIwtI@oEyQ3C^v8&bLe3#{mIct$pLalcLzi?W5U{oYhu#0ITbCnO3#Bc`g?zc>?^wmUAxvZLeeNY6xTSg3FXlC`e4r^7cU z*aFf`ra-X3hH*Z`^wQVZ&N!lAcq}oy)cra8bNarYU2~zZO7e3Ni@L2Pr{TN0H-Xfu zC>4|Z4KGx>dTmPM0me!tTh7!{CyRMFWWAHeO#Ibr@qK7LIXIo`FMqX3e-&hMihl+> zuz}&Wi9G+^za|167>PdwCtt3IjS1P{@}WZB&a{9VUHjSZj@FE~ufCXU3hjk=t6sn8 zY_Dr?XDCOX{T$~&Rpe9R;@fsVPVq&#-lrITsTuNBvfOoKG*m)V{eZP;Qa9n(~$aA}577`jRV64IpOmLJ; zoXgUw;Ir=Jwo_jzqoRgc5_vdgDLp%#l|<-&Lrq7DEqmhmRq6{Z;lNN|mtS6@#F|)C zBifWxgUXhGN!J1YV_Qwpt2ghx#%(vD{ zm&gouiS@^)`jheuc5Afy;rq~|GC8SaTTn8)b;!3p{BN2~gtsX8SYAn zm+w@Rl;m=Me%Sbkq*8h>y7T(Oa_LXgnJ?uS+NB(%oVCV}o%zqyiQ|%0J_S!-4}9a@ zE6`YDwd>5#9MAr#OP%3P8S%0nHB$U*(0PD?e{^yJwFj#tJ?7*`$fu58!hD!B#G7oB z4)c>1p>A$fwwGQCdI*+UHjl=7>d{Ss-afMpk3^R0HE?MlM>>lT)ktb#zbtr^1pP3r zUc^^*+I{|lO=QH_UaPutmECAO9P~tPO-NO^vmkVC8QXsmsX)c~TM+OTP%A+aAu@b^ z0tWCCsJ>48Rsg5wCEiedTzh#?POfs_Myd0b2$_&2AH^DnyR4JzK=b`_jO(xvxyPgc z9pOum%l%=~@DI97jg#313GOsfjJj|EAdcaqzyGGf^DrUVJ3OVAJ0e=>IxZIJFkgm% zfklnHvxGoqUFKb?$wM|fn0}eM-fa8O5fbt76T`BDwR6!{ss2c3Xm|~kN^XG_v9F!#W8&SOzxYNp}7hM-C+dO zT|(I9VX0~%ubWXgu}40pZ5s1GG%BI0+;L&Y0D1oS459R$s6J!M5vLN3azuHT4Q@)}1PTgVO|pc9Yl}gRNyR@@@~{(evqsL*kpWy-@j@ zMdGxzTQRsVG>5>OzhsWjJ$0_Kmf`8Vtkcg3TQ9?ZRA6Df0Xb_9_K)i?ws(znGQ#tl z3OO9ZNFTYDG&(ueeF9nz8#2tYPvKOPG+J+DRYZnHs$EuerN|g|0wqEuwhYItoFWBk zgz#jmy{er*;CzptFgWV9gdOlgHh@Yi&QP?BE1;y;U<@w4y-i|vqFcBBEbed`ugfBe zgRw)QzzwBBFmT=DNzN9vQ7%SRg3o(^#>0JT&GUFBtT3d&0f)qCS2)si6M-v_@+uT{!Cj1UHlpo1{ zb6&jMvP*UB7@=pFSfrSNxjO{}2tz3+s@e&taad3F(7d>bb=brOFtJE6@aMux5GY{fPmfziHE7y#}0AXICX(UT8|^Q=A$-?@;P~RQ3n3I zS~xuKnb4B7S%bUjm<&D-H$4aVAp%8xb)KPZXusRCG6PaxS?V+8(*rsj3Gn zsQeYAAGlsNq(W)lwT%a|Vq#4{WHjAAvnkx0d*)?Qvu#*uX^8SXh8|CT-hYaohBJB? ziUxuO6GKG6w&}ok73)kCRbC*5ggC^HO7S9SES~q4claZcG;U^K<=a@$6cq32s}=`N zffSJUt44an5zn)2)vNOwq*^J>#NCnuMVI`OpWBZ5)22FGyLE7~q--1O!QRmLI6bs1 z(ad5>2cI?#GVuMdMRAywd}LH=<46?LS5EpU327))aISD{!Gl{P7k>J;Yfc^21PwvVga*bbBG8E7Gf-{A5xF#q*>Ob5#)u^v;u3N}n1I3$5uRJGKRrQ~c`GxX#O?1s-u{Jf=M-{3ll*_zfWVfB3M zC_P?|HnHvN!d|IL?Ed1_H2d&SW3?24z|o~YtG=UA#^v}azV7e>*-)R2{U6@b=(JU$DU*Zc z#@8lBEbp!K3G$tqWse-@PJm?rS>rhFgBn-#H%R!zUINkKw=jqziIHixT{+FNZ-7K5 zwvZ4J|7zG{pJ0CeGAKW#iG)}Eg^cG?fTKp5?RxT8>u`Lz8Ti-6xx&TgP$j&i0(qld zCRg>A@iYJ2WFj~E!Vl7+ZP%U;aYVVY=*RJY%h%`daZ1ZES!;2^I%yA5(KwZTO3H+!noi9ProTR_t|Kn3mhj#(t;IWcy1&?2{z&2LT3mEr3F&aahD!=*(Dg&lq z7f=8!C@HM+jP`>qzLi>)F)!b}J+LBfNlEFdC`hZ}l7yM$IiN%pF2a(Id5N*J?(p@D zBe+p#!;`inEeeG&WXWqOU{Iq*SVh2sWZr0+o%3t}EVi8{>(o88;C{SXboij*XZi{iyA(sRT87r=jlDHx{1+dW4zCPyfhF27QaSdcT(!G6My@ zrGGJIum2QBQe}Wrj#KxCyq}}>aRI+aSFS*O=j&9R8SH^itd(jXguv8GWqtdQL2J8p zVddL3b*5vr+RR&wn{*G9tySu;5LG&Dd-}U~-1&I5Z zJ@>3NYvQJ6t}maxdj8g%+ow;r))gnOUV37#Xy#=6pilL>Z1clGP#sCZ1n#^1S=e}X zW!IGty6B%@;o>lQZ}z{)A``WXBN;DNUeIUWoP5Dz0IuqIgML?GZ9458m{sRsHvL`C z?5d}nH+59~wh8K`woU%IK(F*&;TP3@U-5mBjK!8~DX)=exlh-74p;Ccq&;de+O&9xVh!T6FP-mst&*Y^Q9*ytF%& zbVQ`I%F=;F6FX7#=8R#1b;yZ`c7!b6Xn+^)o*}v{+$gBcH^KL|H&mO_Snv96D|2$0 zvkwkQ(H&$iw4PeN)pv_-0@W5o5Fsj13Dwyq`jnCHjMkSMVeavbd-2>&`fIg|ze!hf zHb7Q(80iqP)Jlx@o}PC6_~J_7=UINuRiobc{+jOe)SYZeZGnz~56V#cU8x<%tmE0M zw8b?~b8%h@e(ZF(ey79MyMoKHxq-cJb?X+A)tb~^e1*O7lZ(MhP6XX5+exg``#t3W z1?TDLM0$BchIAI=%^BY|9QL3SafqUOD-Pz9UqxLveb$$#&wGB$X-`QpkE>v1HJ<7r zQ7%SxXU)xWjkZ=pyOYKOT%pS+33mKR61F70o{O8|8ZAvVG`YWg_D%qHy7TJnS~m!| zeT*p0zF3(6WXeMvt~5@&x5n=`e$)9xWm{FLH}Dq+b9)Z6%%02o#vL?a{TViRl?Yul z$=seKi!_a_xvavdf1)h%3XQtn8pT<)4r9VcF7eRk*&T~5CwCMR=A6?J2KB~DHn;39 zM3B0VqL!1SXa}Z*1xIkh7Atn+fWVI}f^XOETPBV##?+>82x^XSnQto*YpHQuy8}DN ztDRuGF>n&%uZ4I8tBPJ^Dyj)eLmbPzKdz!Gz_Sb&WRVuB@13t;JTekkPN=e{uA;lVRA_V{!2i%)@A?BH@L)`AV@U*z9+e?)cBWfU0` z`-(@6dWRIyV)dqvo5`LFME3NV*+_(5`S!my>fLwF^LjmlLF$Ie@A9MNmD8Xmg%pHXH!om~)W*#QIg+j8$?1(FPGy$$WM*(B`(R{x zufO&K^tAnuRV#Mrh<(C~lblb2tF4*hm{Wa-tx(RF7nqJ*dk(EeH5G|NpQOS)Y!fld z*<-2b_sKjGz4DQaX&O{+Ogs@#(CY9B=)kDUafV1kJop?dKJRY@upI#c7yI;aV)j7x zm0)A_lC?@*x_bAyfr$LYfY09BCGQio04b>TSzA4f+u5SGuzsBd`um@keo)!!t)>GD z5a{r0>RtACD^%194XI@Pulk~*Tmu}eWp2ed%=T%ut*9@Y2o!?ExH+`t0`%>y#Lca93v4K_nS&nn-U8T5g15&q*IkA^q-WTxB7|9v$D{j7J zzg-MWJjW&xcYvmFxqN{)**ZrG+6ar~Pdk;7wwO9?-0FngKFkyqxt#z&_#w?KE|yw3#Pr(gr~mr%byvjZbBF2`{U|dh59Vu`MhAD%k?F;TVo@CFP z)e~2Ul0NZ8hRVlH>X%5@0n#)p}lq zYQoJ)xqR87+)vszR}RxtB{XgqwJ1&u*ry&YS3Zf|ZB-{Oi@j5(ErNK|$EGyO^2H_) z+_&2l2ly`sX7Na;D5m@J-M|mISib(KbKj2RT(P4}>~b`L#Et-o%0`7pkgRNFb$hxk1 z{Hn}IF^^%g2<4}_ykICbPUY!2Twu7D4r7S|1sfjXpkrdf+M&IKI`;*c;tE^cp0m8$ z-88-Y#$g&Juxf9w3aMieC)A6kddBZm#k4KhToc2tnW({Wsr<7-(-Ifb0tYO0xvF1Yn}LSRq22l1vd&_ zH4-3;tyd~d7r%R{+{V#D?@sZqTckQ;-PPFWlp{D?%9`qBcSqT8?%6I!!pwVL@ zNKVy7Et8w&q>`?4EJg1iT2eZ7xy$Z?L=q2_Wzpo@PQW|EUV2SBg@^Pp`j$OdPiJWr zCr_x)q%JF~Ch+{Eo8&Ib`-b%tb#C=dGNR{=|ch+ zvR^OPGpxAwrPkDDlBM`FJ&K#IP0cfe3b3A-QJ)U&)@p{eHw%?hCUwsV>Nwb5Y6Tjl zlS{te0>49vyNGQm8mq@Qg*PdOo+{h(mg5YFVKR6UFQ!xn2?RGt?7N*2i#OGdS2XRj z%zm2|EHhR(Nch}n{hzmFa|fy&Xh3_@Py|i~WVdHKEaSE2IP_Vvh^*9u6y72o{Un{n@fTn=hEQ zHFS6qaayB9YWch|bZiUrGq`OGBmiK2k%*N>A|v)DC&N~CM)Ae%I7BNp?1?GUY+q}X zrU?WDh|cCc8_}bx(L@xwQ=nc?hI4`Bz#5~4vqCAs*652NBj&8>+ggLlo?jU!Y+l51 zA=-kK@95hhHRs)7#8tU8m&RdIjcrn7`Aw3(dBLX zMigzsAhNXp)9Fic)rlgDc`FR*K(|PX@aFcQHk`eBukdAUgo+z#(B2?ApeFLKh>+HI z)PpYQb8c=}5Vl=dvZV7;jtL=b*mK3C1G?Ynge-6=ze>P_l?jUws(oo|z(Jh_<*$dR zhOWe$`&DKQ;nqyMH33mr{0}p`FMKCm|4L_HBlJhiov4fdE1y`Q*dIt&TNs;Texrej zWlwf_c^T_YkI%DFs@Gqb3i5kaR`2-=dSnO#c{V>_{q?Fl~Ut9`>=Eajz_fc*nf z(;weyeV>k#Wk=?K;gFG&!6d5a^UR*hVsnUIs-mt;AkKyUKy#tp7E;aaDJ2@>G!!mM zI)#_ag$Vr(R$qvRYQC_EDtDV$)Q`BsCQGd^q3ZjICgmLANh#B`2OA6T#6O(u1)M=) zQBIdS@a)#yJSC1(9$xyz3zccW-#OhP5*}1aN@py0(esjefKt7=+!dL!q2gF=Zjt4S zK*avCdCQisTr-9#l*;#7T;{HM?dIl>`hv+%bG{)SMoSvXu6P28ck_J$etGhc)iV`c zN0y!+W?$$#XneTOh;(@N)-*rTmAe6IOZE4--zzW{o|`#vjhps1f=PY}&i5zof5U~! z6gC*nr!QGi**-zCs_$S?P`iSe))pBD$ISwpw-(8VfI6JS9uMa{((?G4^S0 zVZxxiTRU8&j<7AZE`=Ud(g#DBh&Ie_i{-TjyoFmCjN zU{hY|y_C*jm&2$r`uYp?A3V(0+-<%=dA}--8#q+XsAl%RJ&Q0H3hpg!*!&mhU7=zU zMD(C07VWNxfoAAb-Jpg|P$%E@P9S(XeE$t)R(H=cnN@ACdOC5WQ)m?o$GcQp(}upz z*oAaaY}E2SXjVLvx();^`V#q^lqOjRNrSD+Aw23?tp#|84j?Z`{6?<67QT_Mb=TNj zkD>VRm0F!x2N;qT~Q!;Mi8{KHb;w{cdz8`^6XvC!PNIbI!i8dlnocLg69n`w6VCeL;1ePgc!fwXSOzEs;{Ub$hNr|6T(&$B2L1nI;*|I%( z@B9b4K^+RY`HllE+MVbQk(0_MDPSC-z?YU@kmCARRC%ksCKWcMsQ-E# ziQ7C&7LbJ&0uU)G7pV0wh=eI`SSw!BSlP4^DK4@Icf{lRmgcxKTIm5ps*+B5R6YnF zN6otiVn1l=GNmwel*=B;kg9%a0SNP1pdwO*9syaVh3txkdvepHWFa2W86jYsaqd7? zr93>V_Fe?P{R&v~u}i!+$1-~XLytnJMlY{js2Fi2o!7N#Db9K6A|k_9Nv*bZH|`lt z;FL+(WoWsvkr~PdF(K50Jwm%Zz$b#vwDRQETG5TPT~rnvMDr0tW)*=nySw8npz;SB z(9~vnq9Z=7)uiAFRB~o5S0(_kD?^oPsbr^pN(`$ep0Y`Zq*ySzswUBx8K=ndF#P0m zUJaz&@dkQB)0)r|VL#dB#1q)QT2Iu8x)g}UUctBJUWkX4l5Zrd^1bfbLS0tHWt{Q~ z1i2aDh(*q<212^%OdB;sP#MpIaZ? z3U;N_)0J*pajHrYEPHtWS-!uU=Q{^<dz9C zLa12MeU>l;MbLX91run$X-B-xv(#Hp?;EIe--l8rQB*`7)efL zcB(#i9Xt_7kV&LWS)TaVdn=E3PgSMQ_BkM2yoR%DXcJWeG&`Pofbrel6g6r3Sm(An zFz3T4ptzkCCz7vXyhsYD{Ll&e*c>A94G2o8r%_@Js}>PDEJjzjkcv9P{8h6VC82Ay zL<5CexQZOrQY$zh#nQb1yu0mIM5il4I=&EbZZ(OV!f@@>bD?PTKCYvvbAkNofSnK@ zL`5x#j8d{r=^3O0Kb>H$1KOR8gj7W}1!<_9)WCtQvIc8PYY2trw&0dnhB-28F6zyG z*vR9G7c(3-g4N8%t%(bsn(YEz-kzOg{jblRc^8UU=ev)b1{F&JLzZBu2%AIfCHW*i zQ{Fab^y`^XJl0DdVJ=RLkd+p*hPqG3br-@M1+ zTFvB>2_ z+CA=UD1P+V5>%hzN|%)z4nTgubb5mIBcMH!x)Mv;aL(o3OqtVumBr#0BK2O`1H^TQ zr$LfsX+K_ToG+cFykD{hYY$)X7m0<7FRU9BbZbZ2lKiY-jX6+8+85>hekf6RYSg%2 z33AomdV_>pC8PE{S+=8Y19PD9ZmLq&@ol@r1dD1&*DLa;{vw$xY9I#eH{{(fO8lO# ze|j!x8zr+w-YvMq``;WZ12fcgmFyBuHS+335(RmS&Z8+FMYj9b_t-DW>j+EBi>Wpi zTm0B#O&AC+oO>}&;SNG7=LpO#%Cvl@AC=%2^WH!NRW=eracb1kU^l1FX{(loPJ7+* z{M5xXNqnzYgu@E^MChuFYQLUF&8usrjaY6LKI9xS6P?EyvXtHVE!t(cED9`p>rb7D zVDONgoEfc^mKsL}`YjNARPXvT4_e3dTH0^Tr07}0u>Hg=Cnsw2-YaGoJ`xZlYTguV zm28Vrhr{p0kGNR0<*LtiS{DKissB~vluTBK0j}&{^6tGg2$`WCYGR{+%&}U!_Iudt z-{$&lIpSyPu6eITIR7lLj^l4wHPEi;)!BH6xay*tFE z&fkT&jHcbN;$%57&bhomE%`hIZe5LPFv7mLd+T&Cn!OaERe!zdFm1K>&Pe%+DTc`y z#mxCSCnHH5SRB8B(GXq#o)X$w(e_$CF3uq1N&K`@wl0ZkG&lB`^2pY5qfX)X=R}F& z-)_I<`dFfDit61$XlgI~EYz~q9#1{LZ5JfcV>Dd<`r=|7wci&-x}+9FCS>08JY2&L zmwH@$fA70~wNTNgBx)u;>G*)UE7HjvR{X!*NADHNb!`ApyCDH;H?O)Zf4kCe+dKvj zKt(Df0%Q&&W#Qh(aV<9(c-*pOKSPj$nO)5@{P)+^Y7BssHbjs1qz|}(B=&gg( zt75wIgZC8&Jdq1KV{Nb0q|vhHw&^*UD|mi<#LWscZ*0=3SSS-dI7&etsFd2Os4)|y zh)1{G0kYE8w72`;1D>weUE8u#%Hky8GC;Hk>rwcqTG`z%r2$9W9E0U%GTN$IUQMA* zQZ?xN5)WU_Mep*hi8+~pv1G5oS=q``ZF{0znC-AAfChc!6^-D^vB-F-9*e5oRy}QW zPt@u5k?sEMRbRj2#h$F+lR`QMnGN|mzJBK>g#00yTL_JiR!C{XXJ{B;!m{xcLd}T( zvdI0HP2>-PT0Efl%33f#PImtP42YH?0S>T}jIP$k#~Lk44>(3S>eXR!s7|rK5v`WB zQEt{Ke^p~fH_e;|zq^)P%c}kHIBbc&WiHIL{J}Is$O2Fl;Qth1y*`rqYSrZg``8{& zC@?xW^6u)Hv%)3pWV!LP!a|`Utx{$HZ@6?|RLh}Ews^kaiVYvDF!Hjj4Mm#mjMRoZ z7)%D9(dk@P-Ja zv#DE$I9EV`!!be4SRmB}lF%l%krkSzuUY=l(O`+hRLDoP~QqjQ@9 z1zMnfVeF1y6)uormBWrHEC08N2t9et)TwP%5}KZ{eo#OMM#F)_CY-SZRD`N(6XWuH*Kij=8O`K&;5L0sRG?^q^i*q<;h`BNCZb$%Db)Im+?(R^DGri1}wKPhR!rt*YT@qe!n z1+GhYNN_nr!Pt2)G5_abHYWuR^R$YE*ki`xc8FqTKP}?Bo5WVmSru@_jr~I}N%vFL zqPi7FQmIK0`&S#DC=VZk_!qQ!UPrV1dkOL2WvxU0B+1N-mo9G=dno}Tyku|*X2}J# zLvONFQ>rVym%EieLhm)5E%@#exz75FAQzfQ4h)z#$)p^SZ}N4NW+mB#s79Sl$fd_M zeczCxvui_hJX>J_E^(S73kg_8(mDZU3>)ge1aneMV>kfsA<}6p?0NDBX5O>|6`u-$ z`S1UMOfWbB-UpuJ)AB?Gk{Y4CZ+mrOXN& zgG-#`;2`17;;W2Jib-&gp^A<^>ed?})pGPQtwOw(thuUa`mx+C=B6YTv}%?dW*qj@ zU2m?d)A{~UE}$AjX8n;7xNr4mp=CJls6pU64DtIM%8B;SV4QSGJoWJl?f>mf&P>)*&AF^_5jek3cD< zntX@x6m&iXshF;+V~hf+MgLY&bp)PCIZpN2Ie$_#R>YTY)|UmNHEef+9+!0mN(bNi zOaeq=!Q%_vEG+(ER9h2F(tN%4){{q3hl7lPINaFHKAcD=^)k~nsx%lkC6IkRQT}r* zw{8h44(g4OcL9?MnIOd%44<5qjxZX&8GDamO^raja-#cQ$xQ~Pn94o)R^#rkn7yd@ z;34J!=igHD{QB!s)&EvX9{!CRE2g?Db+73YU=_=+?;N7;quH7_gr`DoX!i%?@57Yj zD8fe|2&ENr`oQ`Ht1K9>BII5dEMqF$EHwkV2iqv+9VG%)n=I<(u&gG(q0T4jE^9Pf zqe7;};y6*&I;?1`Dl)yki(_JC2dn&Iqm6BGsZ3M>;^H475KyWtIl_m1b%k(dt6#L* z`!hr>b-wq+FbZD5PZ81Z5X3UyrAfzs<-lgr_w}+|O%^KMl;leFB+u-B;V9ETjRB2o zm*c8Pg84DcT?}&VIAs&JgU=+d6?eILtm5Jp$1GahF2sTC`Clr^WbT;K_mx2VLD}7&yrT)UyVR-KAN+{mu#NvQ zW?%oi530&d_V7#Fmk=NnbckBB=-aRlo%S_%s}_|9yU>S2rdj}T9k_Ig& z1{-_57V^^2fd}(@r}1}5a}BrSRZg)kvtICL$6FzVuY{5nz4Iq^7EblAvqTviB*@-l z#f+`E?bsf3qNWaP8MVC*vg&}9*kaVPWbgZz4)f2)bE8LjsAW)NB~d`wGQax}eSMPk4b{$jXDFQHR0up8>F{ki@e`V7mQeskh8PC@dg^SUPg0|y~a#YVK zWOFW|K770J{1Fs0|J8=ucd~L_>Z?G17p604O2tgOcyXgrnKDA?6?lDJmgU+YQr}~~ z^!TFPiclYHkO24thfCSV|K$(9*1(BKxq&nPy@3YCdi|=WxyR0+l@0eCx{~&yJEc4UAa-Aa#`C@ImhBAFc$*q!i-S18i zJCvR%l?kHRgM@}qD7xiKge0jL*!Vo(kD%*zOC zz*%mjDClXcI)tcaJ~W%@Y017_daqoG1>)JqTxmD`s~<@Sq;azRLba^YU_*u=9b}IorTcVL z(>cy&6bRUSvHIjMBeYaLklI5aAzx#GP5-ON_2_5+xRp5-K*f~RoW&9z z5k?<9G-4e|-a_4`)meSTD333O=ozMT?hen0_AImqOM5-OpVuDdo%@!lJ*)Ou2;y!? zJANfRQA{tuFwbYQ@%zFA#4cg zP~)cyLlP=1l)Sb{5Xtu9?s$@W-um~pK{#pLU*#EC2oU<3y~X#xVd~$+&CLuRu&jw> z*&h|F>Gk}neZgFu2gHw`Pn(+<;|rLF2y@8|iLbJ%CZ@&obCjAUoegl54!Z1>?MIwC z4FJ&)FY;sqXc{a!2*?mBH%iM7lhGB@xvsiq7|v11E$IR7?5SGTmB@4gLyxqgft#+R zW9thO+sv*E=r?VES=qnCv4s~xte+#OD4B}Sm?^*nT99-)DOzrbAz}|@>Q$+XW-53U zkj_lWjp0CTPwRARk>rD0oS}+yIm(uPetES%UI!8A=STEjRF}b!kqf!#M5hBH_YcQl>U)>%pP3m z%*~e{;RP#PVxOw7oNi#--Hgo#U=(n7(g#q=TJyJV1@1MYu0e6|)AlWY?h|l2E46p6 z|7b*1s$|zkvvpd?ZCpp>tG!o}6U-*Z9=68|)uCZV(%_cKR0OM@n9Qlz;BRkz}NojV*SsFM1#3MlKPk?e{eyP)NIx0vv7P%bC5G#43q(2%&Sxn&gdTVTOu9}(Kt)+tzXp=}2ZYmp69$>iclMh-Ja zOj#8ipjl|OtIZ{w#K*Kw`eq}NGaZxVI!aORHyK=hpu}uJZ`>fEX#V!9y|*EY2`7Ai zdfD%-`B}UZQF9c5%PE!h?reyz=;l(wty9;j>Zd%Z4|LLM{R03UYNnjGnk-o{1=W@K zSis(?9zpkJOPzrt8B(r>+3}t;d~(#<$7qO&pvmI0f64wse^WVkh#Y;b#P3oc8>9XI zWCwag59xy_J+BQ$0jJmhbe~s%`?UV_T4sDSv@bGPK1@C??b>|O`O2yNlGY$!v5{mc z2{}$!c|oUPFB_ziyzB$aK_5otFga0>s_67Z8*Wp$M&pBX3kD zMqoWG=8Yxw{^SC^X+ZWxB&Y};gSz?a%Xj5ViM98QeLs8&XROAKxmUPk2dzI?#^vym zQVeuN-Uv{02A@0b;<8&nW;?3{*}>PhjvcL$<3AQ&bl75CK4ipf=I5-IvCjVlgcq|e z9V7Bm5$V+rp4@E7v;>OOH$|v_{Vmzj#@}d6VUS99mj;JmEa639%KijC4>OS z7TA@K=b0Fp-#QvJ=T9rW6WZR=B~(g{IN4&~392<=m>&JQtzf45cxE${tt#Y3l`=@95<%f}4st28%tn`Suh%OcZg5b0aZ!Q& z3^wJR4sqR`Io;{@6zaT_q>q^G*$9h7ey<(aRI0h)=Z~&LGZ_dyOQ2@ztp3)c5BBR} zh>La9s#J^#Dy%kt84F$IA;Vg0f1)B----LDF7^Lm3G>@fFOoPMI1>KQ?w8c+78B;< zVLqwm&%b{Tl|?TNqafQw3V|o@TJ=@)D4$CVY77xS3`yOyikx@5G8N3<#S0hFzz@MJ z=Dv7}jF8}Z-|(_mZ*?et_ujlLiCLTfb4GG^RYN>{q?KtLtY^Y*<6B|#z8kFqqZQLz z2z;Dr0@Or&@W`p4ySfXqwjdY537ebJ+JkK=kAaf+PIrYmg-P!-sInquBx6p;4>kJC zBZ0=|ksqywf~9Sw9#vi*)r(+WLQS2Q=R#K)-m_qBr*2 z8wr)cFT`S>f9KF;^2+YW_$-_*8L(+-^(AA3Osnf30#3NNbiI6JO1IM*Jzm6A;I9aP z9;4~xle_In9}l14WTz>NsGAN100XHOwSteI{8LAlk@a4%(rGm2c(FkwSmRPY!YrO9tYIz<6QRpnto; z^N}v)wQ)|<}QJRikep*{TC{+$$RAX8>KW_N0R;pi)gJ@_?=2|Jw2Bo;Lo*U~pt z)AB3x0HM3()2C~iM~4=_?$`ZI%C8@apmu~1AZKdo-(>Um&mSWc;CqW=u3%La)yr|T zkKkEI8JZ5cVPQUv?Xcjx`94!W&Y9j(w`UH4DuuM$5)fZ=6pO*SWOJI&0%Xsw{biXqn7{IVNC?o11=%?4qe*`I(!WrVkQ_Lq z0i9hVpdd?o zYY}xNo3x=C6HU1la?Nf{Mby~_$;HUD;5v)Cr^U~I^2V6J-?WvZ$`opF$Pp|fW#_uk z9Dcc0Iy;aYC#!_49}DNa>X==fO_OZWNtv?#y6y7|hJ(yd%UqdMlDg}8)DjarzMnS( zC3Hlu5V7Nhu)^*+J`Zz#8uP-OzvWY7#sf>rzfB_1_G{{e3j(C$_-vf>f7;If-gb)t z&B_0=9Xim6Y~B(E)aHPu*Dr?ec(<~wu5s;FA>JJ)?B_?W@oQvkOlCXybxLJMopf+^ zJ373)oU!jQ@G1O!=A5H^!U0Tj$V#It1u;JJzWjW{lFmgcYqKe(bd|nJZ_4L3wxJd> z<~7G+B(#=r6TX3LcP@5Zd-^;O@2=?62(2_!)uF|wOhlkKcU8_oL+NADmA#d*u6Gz{ z5XE?7r$b5B(E(IPDvrK6uRENSro5cF+rJo7^M`Zm7_Zcz07$DO-KrF@%03*%DaJGq zDBkYa8bQf9HL`IrKAp*gsrWw{lBWCvBBb{|Q9+n{68C$%+25AEr}^^;0J(?<^R51! zR`F88Xme1$d>841iq7~>jt3z2q;j9Ay_%QYJB!#fBXy=d<>;*19Kde6T!(a=s*-K; zgV$%%@Brl`T{`nC^iAyrLCwi*XHYlNdNe;J3 z_X)x0TPmXpHz5tQheMur;K4362o~F6*W67nUO2EdJ92fFF9E^oevI+vvzb$xeM>3h zLS72jwn>`E)~igREbEXt>D%VP^pp$q{;B@+7jXe?Tg`O8J>?;ay`lMaR-u8jYQ;2; z{6GEe5)$yYy3b9|e*YCWdQ?^-574Tz_EfIUsBi_&Xx4~+yd<IBlo-{4b@>-@?}D1LnnMEM@5D%I+%S?XtbK!Z;J=$ znpC*l7Pu!dr;Rsfvw`igZn0pHw~msgj3E9$X_^C3Jk^3XRTN973&jkD+x(#eFS5d%ZuKny$=Fdo93-WQ2Z zK|twEdiAc?hvDFSUE_RV3u=9G<0USaGXf%wQ7~BfoZpzLE!$w^X5h`|WBb?AqO!ph z`?eZAoe-SpTlSsvakA2JLq&_zSoti-fAKIB@rQV3(D+1!bLLsx|LGq2H+B$803gbX zocG7ODxQb(RW*+)FHagva_p@}d`>bdzPVewDoj(HTu8>!nAQE5(p#$pK!AHK4;|FqE{Tv7wt-ZyHGlY`)5Ql zKMSE>tIvmP3a{1!ap~tOjk4<$^r`UO)NaGpkea08t-}-sXmbW}$vdRYSJ+3hMM`VG z?aEYRyFl{A#d!hksj9UovF>-i+@UvktfDD!-!pCJ%eU=$uDl@Rfrlay&cVcRvjHJ)1Ug;;bY7p#_dEUrtn#=r%)>OUb6J~Ex^D8Y}1SA zokJMl@vj=;I3jJaYzO*N$8@}RDj2ALn9#>cre*@S3-@-J&Y#AbxQ%TI=B}PdQWaxo z$!7X9Z8^(Oo|;TjlLOZ^qfi4P!nzb{M4^4W$#~IWs{J%}ZLgepaARdgofz)#G3y5- zxV?jigkE(YTR8_J%CU^*-=&m)Q7b??{&|0Z*c?v(9H11j`6wne*ufQ!ZArQ^`%D=L z(pJne3wwbPimth5IC3Tlup^t+$m=}B6K}G*X8d<&CQ~ibN8f!ok?Ex1)CYP4G9+I? z7}Idpn@LT(j1V)qi+uggTCw9ZZ-pP?@KqmLVvF1_OU)`m!+u6~JXo;(D4BD*PU)D- zq;d@@EqgRqajDpbr{%l@^Z|8`TQ%+aV(d1x zyPq%I<*u0SK@CV$U(nZ5R$|O>|8j;Dg$EpK2XKs0jW76rYAh0E0FFiE(kT6@Frj~% z&v^d5%d6vAr3BF4Dzp{IPHX72;HT_B9oSp@>c?K$j@wuSWF&xJUnrQs!@~!8;RI9F%MoHWz_cb%>2lW7?PiZpS4fDp zifoJ-AtFrh&ET1l)jxCSU8Q$JR&Dds8=#7i-wypN7>E%+=ml$Zyf)-qCVxKUUpBjU zl9oCkQ7Lo@Vte~L-!U5n7pAlm5o9kezV-k`x1llSO3(0EXB*&@Kn+M<7;c}-(eAXK z9js=HFEu2mo*Qgn16;h3XEX)=X0HNiujcmSfT($Gj=1qoVtrQ;I#j}8efc%SJii~% zu>k?<=n2Hj1a~fC5MYxc)|e)~d8rxFQVV6~~6^l}Ai{jFroC%kryp^_kG|nk`G6 zzT}n?Rw~aQ5Ei@F>64Co=J(J_G` zH{^)NWK>R;RA$WvmmJ)yDg%0%pWY@;gQKXeblEe?K@z;eDf36$NVsu0xD_tm@AcVh z(&knu%{AU)j=DY;0PTPzzkADWI-@cSC5;+}AH|VyD3g57oPueG#jX|eTzwG-??XKG zH+uB_LJyz~m2-|L?)RS5|DPjN1CDUu3~hG%`-e$r;A}_~!3syMG*V=}SFhU1mF=Ql57nLUm-$r z=ZB%&*Aoa_RQC$PiUl|4QVR zS*hPsV%Bsz>6}fc75|pr|HL#PyeGB%3jZh&AmY_!x8KkGNF4qJ0d7&Kz*}CWCLt-ifyMjV-M;`94XxzA2u}_ciB|F zV%?L0l@w;6{g?{q+lRpp$`=`%C?n`v%e30)CrL>EIIzXsY&?V2H58OtX%KWGSXv~l zBW7ZWk9(026*Cu2Qmk{u463LIu#guTLEvQAB%8Kh67AnQHmiygk*U&HO7KJ&zA0U` zSuYtNfRplDi!4-(aoIe@Ert()Xducr%m{QA`l$$dBmUiku(gR0G`kDE^@CR^72}ORDYOU(kTxqtmLVVO)wSo z`#h&)q@bT=8mX!c+4(NGMSH+}FZI?CVy%OfKzXn6y(E(%?PYb$pYU7`XT;mEA3KY} z^0dlQ(AC6Lxu^c6xa@t0wv&twoJloIzfQZH>u%wf=KWn^2Jyk9*O-~%-2S?0}0Bn+~a>$ z#DL&d{vg?G0`NC?2BY`CB%6bKZP`)HrT4Mi0|w_QN;st<*#v6O{b6ay&>ZEi8{tSq zF%dda1EH9I5;uu3*1=YJk>RY0oK_iaDlP!5Coi}!jWULr3!#WvZMW~qWLnsoPA6GNZ1U-=$F^>Z=>_t4cxi9&}pRPR_zStvI}%) z@*f5PFWo&GpA>Unp&=vU1pXqM2(x$*Ta%Dn2oYZ+3hid_%~g&h=c!<(3}BhrkWd3x;E|!Ey`-dk4&g%WH69 zC-{Fwhgzrt=9|U4T-w}vszVdLVOWgc5L6(m^(6+V;FK-eT4TuODtIKyQNPt4L8xK1 zQ~YU}qLEstSaoihDeJx1UEZiu7C%%Vjg6>HD=r%=wRL{YLHaS_4=wr?Vu&#w%FNzC zb1xk!^8cq(iO?Hr+Jt5F`V!}Kdj`6?C%7|$B3Up%SAX)mIYM8I)USDfb7!%nXL}Jt z`Xv&uD5bXfu_9^iiaQQ>aY8wmPUthF<=HL3HOprQ$AS)v^nX%EUM~z_P!$-5R=d!# zU>9MG)ULg!rf!PY9@2FdJwEEkLgGI+6XP8QQg%*kjm%s=MzfX(ST6FBLLHN(U?+CU z`E}~d1cBS!cEl_D8-hhJW3g+!)d_@BCCw4;mgJf>L*5-?Q&aCxMPAq-ZPz>xZHI`l z@m-rLkyC9tq7joROMguoU>Hv7L@(fKa@Lj$wk9y-Pu&XRB;rp0I;0u#%CGp!GIP{G z@aG`mE^6(0ulpVrzUa~NpPJP#q$Mnaa(B_jtD)BG1DaIlAmZ@;e9DJkkv0OWo^eb3 zM%^Ap5UIIWck{EeQ|QLtN}wQ{4QNrr-I-GHH5{R*IDMU}eq4RF-CFQWtI%}L&2>Q8 z@?^!Rz>=j9n=~<)SI2-~1sh8Eo#rwI6eb(e>r3#`}uE9c7(wTS$LlH0-U@QA82{4YxFnESurzdePJ6VM8@N^ z<6Uhclhr?CW~`>{G!a3oL^)n$49^{Xqrj^!W<60Q^Z9sp79N-;;7dos`|>Re`vK`WNd*57;vKM0}@cRh~b%EtjKA*nqW@LO^!@XT@VyCt7xnT(!3!EKErWLe1$^N zge%4eJcP8$2X}SAc%lxG1$o^EXxc;jTq)_{U2!k}i$bnefofnPC}gOC7CzH=8FApE z?le!<%Geivaw+i93|GjcG{p%?#{y6iL|tIyl(AI#e-j9a(O-On2S_)a(8sy|c4djA zWAHgD<-l}OPPs)?AI`%kyH!V{&j|=}p=X)YQOZoF76@j;2r;^j!y3FO3pbaiIKsUi{pXI@4)0KkIeytMuVbUJFn?5+-! z8A&B>N-;I`A_Oh^7@4ev#7Z_7j^l!hu~&ua^h$-gJ3^Fd2RIma6>u&_Xfi|Ysz7yJ zB~xOo_A^HbFlnJk)%==IpfgKE%ab~@u;`ayv`K3cpb4h(2{nV!uM-B3teOPGZkfJrgbxH?3{=XS0&N1^s;u2EbTT1b?M&9ZytBl&OOM5b;N%K94$Ht4Cu}xwET@ z8-&BeJM=?Ty)dfqcrBv!w9j$Rs>EoZX8hE@gy=a~6)_KWa|Yeg&BsX9!4H|6YjX`= zpMdmNj+`3*KF$-8-)nIGT@8GXf1KCt9Q|iev|to9a5Pgad1k?+aI-Y@LR(+#`uPIe-VU6bU!dTb3F(}rCFd4o0`3JG^G)f5%QO|sS?fNjBZ2GI-1%NpLhV(7-4Qb` zhczyHEz(E}^rE%?9ErA7x$%^Z`rYl@TM~9_qkv(wIfuyQw&`ik>oR8#7nj_ak%1aJ zDIKo!=>P{S524h?+1jhZ+cQL<=}mvUAR%La6r24(qtq*Zrus~CEsx9AdQe(Em(+!t z$D&0-C$I=E4guxca>UozfRinj#h(MIX4TUfvQ!XjET*zKVam>Ru%E~7`;CkmB8%59 zV|OP~De@|6LW-y(1A>QKLgmf;k%iUjG)rBiauu2SYZOqgi!Cu_a~0uB6@#41=e|2q zaq34#Eq%+KirA9KRU}a?H3|mObG|h88=sR-iOH(D+lGZ^VFA}ca)hl^g`u{eKQk1^ zK|k{a`?^@7CDTNR88g(xj~$$Ua=WOOJvTW3Yd+LrBuV+O7R>6*2~Q!LCj?}xd6kXOn9iMD3!RTp@En9NL`Z+3-TZ+XEF0+yIzwOEci zr(6P;&QI`riny69*&L>_)@1#QiTA1iGM*)iHvI4K=?boa5-J(jWcp=UF}Pu!4cl9` ztIRL8UF;mfYK}(HZN>qK9Ix*5P#&S?>POK|jeBVxowQGzgeX?&7;$#wPOdt`ycrX0 zY0|(|9nnVNT64kbFCQ!lec$IEN8q*?nc{W@g^ViP499o$%i^4N_^ zq!T_A+e&gFK17u-2~mfRk~5s+!=v3;*moOzLnNpRJ2!j}@jIS3S3dNTSF%7MD?X=r zWTZ7HTHbWz2pCpokz^Rpt~2bpH`NLqCpTAMj3p~EJV4J*K~}m+j}jW*6XZyhraJu3 zO>#q2LXj5n2vZ~!zrkk|J$r#Pq--=%;5(BORQ&oJDO4pcmzsi(jxjo``GSy|PP26w zinbwr{muouIJ`E&r=F1@cqi9-qkuqYGiUdC%BlF4-L#q&T#LIhUWGWt9z|`Qk$m1c zqbehma6rO;%Ww(0X$1JmkD2w_Uv7dfFbRVL&n))ka{F8e; zeEi2eh(iP!Jl1ae_U|Q`OwbseA7a{9&CBCe1J?!7l$|ES%LQTWA(Q^#a}2LQk7rhh z2m7z_3%ipoPphPF&Xvw&H;?Buqc1m5MGQWdcgCE_j5Eu7m~~6?)CFR!V<)Zq%!$6b z{c%+8$zEm+BOSD_%f7|=lT@M7z+Mc`4sdMORv+x$I1Vw1s=ALfTgLXDrR#6+0Lw>2 zGT4ZCeRBN-somawBI-CW+F-x;O55w%?s<|=9;NqW7v2OvCA9rMn+)EZY1aQLC=A%a zC+J{##XBoG%t1n$7uis36V$WjVLqLyv{{uG?gdXQT;Sa}$c|^!^t^-rNxB+qfRN+q z6mTcym!vqm$aSiYD;C|gt!Ok4Zgtdo4slH?e#HkAN`S-%->$=caM>%hm2chRJ7mtz z7@nuRaBv?=Ud23Oj=LTIqRzJ9Yi^_MNdurvlKJ?+F4zZcl2@@jn!<1WUqRs3^*^FS z91taVgk*RX{zCx&j1tUGKvdr+eXMf=e|X|IA|g28Qw=7`lox7a$qJhjPu@2k!8~ir zhbZuMwG+6)WnQI#mkTak1WK!BQ%za<&1-`>cV3&wAZ89Y5~lHT;@=|_yB+9OAn#IKRsrc+o2 zo;rPMF}A5bL7-Q6+-Gj)Zth7JO5IGp@tX34CXox7tdh%1K`We5h=pZ7=O2rY3J=zz zvU9HoS0)G~^PzxB|}9;?Lvb(@u!GFC~rvc_6{be!DWgNMX?HYGvgDr zod7ymi<+83c#kJG-K_vL97IJljv<53wnoi<-s+`XO^C-NOV~eG&)&$Mk@SApe+-Q= z^$S}PA|eB!cQ$Z_3SSkr65e=Y8(P-UzJvqCx94B6f~!aVkNIAc2AFS0PlCYzbzK8> znNW4mlTS={rA)QqerLVd%-&i9>xz zlVG}p7UqI`7NeZcK3db-n6 zk}U4=T%PwOk>)0~)@$$qJkkg2mjc{IPl1k+QT*k@riZ+#(Ws=bS1|}G+0Z;8O@4wi z=-7WgK&nh9psQm0+pp&rKP(r0=zGuss7P41xM6z~-MJ2h4~o1L)jhKI?@zM&yz)%UWsub(;=BEd5626Hlyf!M z>Rj_f%->3jne9}qd^5Tp!RAx42F)s*)wmSvyc|fBk%vRp9ae}USo)gfWEYbIee09) zGgjOUeosL|8(LG=V<;uaOvrZ3y?J<12=RGQ5aM{%qa2?+V!MYCV?uL6w zItlTKos$Q|F?(c)esP_Hu0y9qkkf8Slk3O@`Pvn=r2Wtdw<&p(F^=FkT{!B^(r;0#dKes%b3>(_DOdLaQ+NU zpJRxo%&p6(Y`1M(2R^sdF>i}H?=Cl3jjr>i3G-imfh$hTh<8UCx6*SLA7bUKzSbja zxA!n<+;zTS!6s~utZT7D)!K+j!{;cCM8t-7Bj16p@klza*{qT@@^?m zqQmzOTZ`3a0C`c65prn6j~py`f$!Ao1Qq`5yHZ#!C|`1trr~IEdXT<%4-}N^X{95` zXSk<5h)`O;Mjyf(MORJ`;0tp`#MfBAeDYo8|N%}llSaX zeIex_!P(W5FMhe}&#T6Zbb!!Xge{k6C-;`1;R|UGy-!`jG-G>Xv@~P|vrsi$f(cQw z#GwKN28y!4qdgJ;iL+OG!d7dsZzsiM)9_)b-Z)AVeO>Lr=mgZrRS=#?&C$8X@=e!q z&_(ooE}10h+{yJcNxv7VxBN=hVm}{4Ye+i@G0HgSl3+ai?{|H8M02kBZLY68e*E|b zf#FSYR}T8{a{1ZZF*{?kp1^b+s+Lf!?7_XB+Xc&Fn^T@QLHLEjz%k~T2{Bbw-OhRf zgS!I4lW(e~V-MRZq~!nLH3K+{J#eC;k7pkMdAtV$I#}3?9oM4 zuSlr#b$uAqL*4MSTg?b79&!k<8??St^_C8}YnGagJMm3E?F(D^n^!&OPDi|-o@B~xLPcnaPST+Xq)qhY{8{o6KQryrU^g(lbS#(Yu6RBGZV=pwS zdBAXcSIES8lU?+__t(XSc313%{bNU;p0z6U`;uhS{Q9AvA{sKyRH0amRew4}>OW6* z1b%vC_dMuVIu`-(1Nl=ti@Eahz4p>G<}j-;_`v?juQeA=we>7rnWjuJpG4h!L9TcuO+^P_f;a#)!V-~hGsDh;Lc@~>qW@Xui85IHmE22Mct7k zTqs`t9>X>Fh3ReSeE7*ebzcYgguCZ(oy~3VY^22YI@efJF!d_$Eo`p_v3#S+q)cvZ z;YMdC-^Y*TUzk7n2l&2JrkXtL}08L#L$OGd~c?K}b(r}xgEInwA^vSvtRbC<#qB8r`Qk)*w(lf=RFkxxRd z^p)885UpjtQ+8!pG+2kH5ihmRDto&ON5t;1rC?cgIfp6{p{~d>mdJO|=z;k|>wFi} z;AP!T+ORJBGmPC~Sl4{dOsc;s^ynEnoTpNK84}`yjv4dq%1@s@{dc~T91prVT8XYS zY!{G-O57PSZuNa@Bg(@P3BNb#zad`?-C##_7<;Of&uhvO)Ow_>KO%F?)%@pVi-8T- z?lDMN1nG{1cupl>my|TCA%+{yg|U#9D%gCxj@29v)=yt ze{?+RM~6@5Wkvd&rHGAa=M^e6i>h*h0G%ah+>x5!aboO<` zK(s!YvA>3H)}X-S$|qMoHCW)t-;CIhkJYTGRy!V|%CqMSK3b^ge=ts=+oOQNx*oVm zZpAN*FDRem$liCp{kwlgk~i%wKGj!0(O2=U;bi)Sznenlb-J!}Y^9OUo)}G4URM6> zTefR5zD_qx{RtJdxN(R6o3Vkca_blOuuasX`QN`kV-4S~viGuYG>wYh-WINz`DQqu zK}uc{+nBJX_MWbnc95+0Nz+O9>7aql;!y2fNb8qWJ%@(CE*?$Jla`4_HW}B8jnn5A zJ`%SlroENeUGm=4A6}t}XxW~?3U#VWXl_rzYQ+ww1}Ys{4Uy4gaP5LuA4zw$gC+gh zHX86A{o30QI_SvA2PFw_B8MixZts@AlrR;N>9PZZ8?g08vcU0T;%s>OvH_zuzp+h! zyxbK=P4BL^Sq(nm(j>Kdf)#7y&@_sYONfPV;EbyC)Qm-YteL-FqF8)hu(!1A#RR?p zhL+X%?e-g8a9`4PvO#!~NfC^e`&yzjb`fci6^b$I4H?IV=?Bm2d>n6RYGx$gJV*JH z%!Hq|DLG~gQ+XNgP4P3bCRZNIg69zSojrljDg}gAm{&CP*{3gEjD{_=b93P9`dN2; zW7?KYxnVvkEhf?ZtZJOnxn-eP@rv2jD+?*GbMd0173Ztrplek(L=)M1pp(HD|C*Q_ z`K`fckh7DNp3XS{p?^e$v?~6F&;#Tbom0%7n=UzBJdd#ZagFu78%FIXHsX&%^=64# z)a&okJSHY_d)p1BoqcAQkuc1V@4Ex1^S)z*BZR&@0v7(+e~! z8y1_fb03+ac9Jg&gK}AFNKK!&`&tHTSC)dqTVB0-Wx4hJOCTSlJ&$f~_pZ`dy=sDB zoJfz9X~5omRj6AW^IOUNV%M*hTk-45u9IX0d>kv3ltMqbR1GMie$S&m)pb0n-HFRK zjjqr315svq>Qmt0O*0b{ROm3SoKWl56MZ>EbK7(N{E4Z!EQGWcM%OueZ!w0RV$@|)X%}9DPlXG5K-fhgILXs)H^Cby$O+h#RH>5meQ$gM&x%^b$4DhdU zIY#zNzxfvp-Tf=4Yw-0E1!0k~=>%3RqIESxP_|KN7x>ImkQ^p5a|DQ7L`ibzH@Dvc|gl*+3n%!=pd1Uj=0} zpVSi3cA#a&!}WM#qsZ zJ(sUKQsQ#8hxeAy)`$l^I!*R);$kn#z89^aTi)5-y%Vm+3(8Hi?ha5DM0^KNdJ{wZ z@nfo!J_jdCTen=$}bN8%B#xw$BOI5`;e{^z>%jaZGJYac1)E`k~+zqZ}>j^H4z7%UG5M( z?dM)nsHqtQwItDRLVkwaUmx9u(^w%QUoUZ%au3;Ht>YVw_C)DZvH3oU|2AJCMU|T}%8je5&3T1$uhz3E_1Fi{PQkdKso$<90C+lC$|n z(r!7F81HpYd9|4-d1pzlNnj$E3&`L^5z`b)`Gk#nd{#j$kf}$%R(cyv*ymUnUb6EA z&~Q24eZCH3ReLo`ZtI<=05Z>?y<6W_T<(& zi7Z4Ht*TSR+A96hD@!0dak?kbS~O(L*;$*;14@iH*AyVufu8l-pd)79Py`pImV~;s z@Q7OLB#Fqy#`mcm(doZaAG^~hdN5R-K2l_GgHyJ@K`AJc=7deA;}~on=CH>xQ14$~ zi0F|TZq^h-=Mc+qmYs>69n5^(7hiYm1Da=(hU6`sEiTH;d^lcitChRr&5NAPEO8E_ z(Ic2`l-VN%Rdh#H#SUq)sjtrom3A9TdB(brEE(itwIU6teDG3vwh4O@r`)~S9z1xU z(BipYRbo~}e?}*@V5xq>+j4$>K(-;Ruxb*1h9SaU>XU|}6mh_^^N4B>*%}d2ADGT^ zt0wBdRu>=Bb9MVpTF=pt09pTxQ$BQ}K0$(G77BG4S3-`9?i_SZe-J)PE^sgNb6D@P zo7|3Ml|t?NI}}F=;TKAXJKW}L$1bh=JYN^uYSs5@@@^b*0|)yPF0Y=u91m*xCL|DS!SVbC^!l3mEs@ee=9xV2_$_WiIp-r}9!7$4}-IwO1hLQsFQASbxTY zN%GPciye?h#!1j;Vfw)Zg_H7?Lu4>Fxbkf<(}CA5a~+c({;K{%I#{C_4;gOhiFR4= zUOxGC!@EI(X)JPlXN9vQ%Q}oumuOaQxQ+3PB)(^1hmJcu<;$M8s({6YX-8fXQw@HITIV@YnO=u)TV{R?FU;1LRWhG|cxb%c zJBW%{5WUkH{%5-VYXtOMr&5I&5_a+_7B7BFfAo70`{e>aI(Grs7cV8q=0yZJZ$)&d zn%=DO{Rz%!BTg-|GPTIKLqR6{!5SSY|1(OTLXVzPGD7)`*~1c^r=KKfQ2JOc+o@=3 zV7xZic`_$9ZE$Sz-baU*_a6irr&P66h;T+bHoKWIWgl_d2M-cq2H2m)V8KJ}Ty~ z41EIU-^x=u7Cdr2S_34ICcD$GYJCXVAHuNTX8CC>Gk@gJH;vT-uY98S%;J%9)gUJD z+<#}i0qh&j@-jidG264l@e^NWurj^ka!!HJIiVXW_@Q%SLVTAJN@#%U;WynB`xwS{ z`JdtMFA)iFpXb=GO|VH>GB^+MimUJMBmPE z>C;(+ZFBPmzTOr2((!4rY6PDg4%9idcfV&z>Ll5Z1olka`McGE=m7W=qwd^)PqApw z_PX2r*YJM7Dxo5`7XV>+1SVv?Ha;(h5PlYPBDtga8yA)*>g(~3QMdm(+-mYt<b@A?;o{VcDHpe}=uZ9=q(NA&2|VE=lRNkapmp9U}Q^QIaLrgQ3Tp@v7) zYDAe+KTkkf+BdQV(*BKZQcueNIp*Qdz-41X-t8R^FML=Jq#9;T=KYVEG7oaRXWXi; zQ@U>ZraaY`Mw#e5{(2*t~9p@9#t4^bejsbSo+3I-RLH6_@_|8~iei za?xNanm)1nHiBbUl~jFid9eef4Jq;+`W(t$Bxjma(>^4N{tj1LbqK_9mF@c`~@w!M5w{KaX(8kn;l>T>0a^T(X+Dd7zNYkx}Q72PF#7ZmsPpq({6&==IzUK&6$?M)fCu2a2 zc=GPhw9}8wU`8u!+#~Vfx(}|M>r>ccc`=8vzXW7CFRzZGNWtpJiP56M;KAI-U`8 z``TYjhu((;rIAvT--eji)PG(!mi`HBg5;l@tv@dhUNAiFO6-oD$Bi%S@2(tTcB4dw zTjh9Kf8M`HDbp?v&8#zRZW+vmsW+GvyotQwCR#2=V8!i%z7(K7Uf-TM58Cep}D^=jJt;*)Qt5ub!Fuh!q;;;dowxJmlT z!uT$ch42(wAWv(5fdJ#<{x9SE#Sa?Cnese?oOYInt%zB6r=?^(x{#y?zRumPrH=e5V-BNA+3hXd{i+UKIo8PuptySB82o8m5n&GY zcdzj@$~}$^l>2(z^>S&jBz;FxqtP{s=ZRLIB>x-nL7Z&C(?%{Oh32O+Rh438|5cCHtbJB2Sx%7~Mc zR6DRXf7jnn*dG8w@h$33DJn8J4#O{1JV%7rGZapUVbDh#S6r}&%FoGpsS~ZNjLp~{Yl~-E5{UZD6rgxn@@urYUUFX zK*t>ghjI?a?|B4Bc$zr66Fp=!JWNU$E&o6#;mgtI3q|;bRVqVK9%b^aSGXUW{BYzE zY&oy4%*oqOMblJK=2;HU1l@R$opVY2ZjBcR7}v#EH@;4>EJKXWU&GnYIF}hlQ@v-4 z*K2}}FlD+)t^Nx!^(Wt9=woJKN!g=DoJgx8Pou&()ov+zFC)p?e$==O(FQtvK zso9%iumbDkyiS^(UUsKts;9<|$J~Zp9eSIs2Z|};w zCnD3V`@NmCM$Bb|E=KzJ$`t!n(L?@67V_(s-FhGljcD#^+N3}}+w_)hrs_KpRJrQUw@Es_m}~OKApL%g7I%|rji|K_k9c2t)R;$Ehj9TNYERw; z{w$TQ&GvTBq0M;>{6!m4lHQv?1o<}tW<&F5=f@&BWGp`8W%WxJY!lF9o3N?WDDsQ? z{C@Q?qfgAHIl4E9l1DS$K{wltOp?B8DT+^;Th~-;x4WXI zPFiA2Hchs@=L5qZ8eI^0S}%9!oLJN;(ty z>27@SB$AiNST?cK<&5Jn|4QI&=1ms<0!lLY$PbpLvfnA!e}W=s^tFc@Ku?sJnFH}~ zZ=ecn`ttsjmmjq59l3WNPo}DGz-ANm0KyYoc4*y3Z1EzrZV@>=AH$@O3pi*LAF>=- z|36IaFD{~b=BLs51Lu4QEHPvB{|iHY0?E(ErGOO4AuZwban>3Bl}@@j5=Y4Xit?=t zPS1OHCc+VD@3@0`?hKd=UG3hAQA*%O&kmAX+GCd6{!fYjP4&Mp+2-w^M)2bxo7>7n z@v1bREMuJU9(Tl<*D77*E0%T-bimI|uAQYK5>ogH;TtSxM`{4{ycMe+s0AoN}?xR4mX_~Qv)afPwA z2L43e-ZYSuy#LAW!%tfJ9~t}_^Uo_Ar#}ZS9|Wzb%byTBa-(0u{p(fI5frWG7eHS{ za>&WLdA^&8p<-m`C+zQ($;tTQekf+h_*U}km4MO%iQe8bVJx*i48U6je>+pXzg#dM zt14J(CP`m!3+f4*J~WdIyw+oyu_}w+Yac&!C*C6L{Ly>xPfzbw=RE(OE@8*pj;?R1 zsz>pIl^9%aXx*J#3auC1BfNQ(rTzA9e|`74FV&MiMFPXTm zpZ>?Y1WVBXzaA4u#8~z~uoO-)T-}gei8OgZm<{QFjl7~HLokvRVAm}2Fqp`@GkpcnMly6@W*tg@XALpFr&+k3K8@I zPbcN(3ySMsHIPx?gZMc5x46r#o2=ez!ZWtp9=n{7VtzMsG#!H-Oo@mLCd zt75|;PfY-1b*|B9?pG~4QbfK)$!2a`? z{-b(rUQ|$hlb}iMDAm{xz2lC_4>c;zq#+XM>TBu>kp3|Elbz4|`>p?<7h3-Fg)+`( z4!(4$x@cT}1C(3PpTv85P58d?AS(cyWk-gJTe+2>B!(k(zM=612#@^vMGr zO@{NrEx>e4zj~TfMUT1j(VX!^mf%mSi9T79c&e3V$agedsY&b*5*yOSWb<6h#frd}Q`1=^zcqlw&%8X7X)hQ^ zF~R%Kupo9~@lJ3LrHvDpMZmtNZ;ec^};B67+h8 zKQ3vtd{CpZ_GuHjH*pVRIoB4mL)%-^Wc&h}nF-p*ZwO%*y4}=|7+CNdI-rSIV`w?0 z#9L&;);!X>kDw zJAhNWm05Me_)V_(#P{v(|$rWodqEQ!eI9#&{#%x0?ZLze8p&D8Kk zQMI4EM>MqY``6cXXUlk!&^I9KqsCgD#BPpIEQfu@)3HF4lDf+JCb#SV`fBQbAfj%u zVBGU&W?*}S4YVAGc|xiPU!TI-7q9QMkc*kGA0P$OKB}jPtFOh>aQqWO0!FN?)d+B` zu(uPF^P(emLC{=%mvx{)r(&iim&%mSpNo~pzpxjU*wLs|9D`)%5cCBT-3DasA4?Wb zKO9>ri4pc#)w>{K)s=j*N%9Cni^z$`(!$3kSWDSgqI~5&d?hmFb{FJEa8Jk5W~UAg zcB2UXxBuNn|G>~<1MRB{U%6?pf>Ltd7fj0=5(>y6j}Ar+dV0aY1WGxW;p7C@KU?RC ztEZi@6oSPwIHz=={mv+i9l;@ys{c;o88o_`F!Wi=67a>|1(OJ3iq}O%o~U&M6n0)Ghl+5l(|LPg9QQd-_Wf=geU9;?l|p zk3D*y`S0Ja?BP~~<~B6%@OLH%Lh%)%pj>d}I{oMxI;Dt2FX>e}&05}oo?0lzb0B1$ zHo*TM7!m|vD0Q-`!D(s0^32O`tEp-pl^QO*0Wn#0eP6pCKpqWhcJ2cetB2PNM@+%! zg?ml@|4hY#Kp;TNHYV~I8d#aUI47ppe%FoJXEk8rAwAI9Lh~|=j-^A0MeaI!TMDtF zjS`Z5rnThzeP$c2O8p?p-7UWYnftwE3jdA}b&*SYqqeLoMWR?%-bIl7glKe7I0jln z#8EN!P=ZZEAhS?*{f$%TY=zejUOkkUAM|>G6Df|)8x4$(STGSr8lB?xTHUYlFG&;r z7wsLj8$z5Ut83ujV;}36J_}2VqVdHFjU&5T7fW%&HD}PRYBquflIaOtF)twNL;YO} z^R~MGqZsfX__I+YCwh}hNKE%SE`9(`^wpEHo(`y$a(n16-dq8lsn^Vq-CoMg=vZNt z6-epU*O|Rm$1bNtn@GA*GnHy$-XLas=oO%hlUZX4gp6k=iuEZ2Kchv-bvEbXKeC7jwqQ zIHVASEH;%(60=XZBfHEq=KDy=v&arO>sYrfz1K)EqjvATLmc*g1#VyG>^TLCmJq9s z=ah6Gb&E}Q*q|yI4YtJsSLGT){C4JZ=>sy1;ZQE$)rtm(njKs$5}L-Z{{vCG{e2L& zi#KIG95>3Gr%|g1!wJ$C{kJaAv!}cHT+B{!Mup&fe9-$24J0DMI9OxKt7T?aA_G3W z2r(kD7E9wyd+W>)Qo0_#x~3?T10=BHz_*Y8I6rt~1vV$iSQ4+_AW<-lkU0HsBq+IL^vQjJ zW5=#KsocN&1mv6!!cald8wu5ho^I4c7&~tl_j}iGx|xHo7ef^t`TG1X=<^3A1r*id zcAdw3u^Bt%Z@}KZ1jB`{B(96g_HAqLnZn!NO0Om0xL>_~J(uH>n2T=6c^fFXe1EU= z5$~v=sh_y+dhHH88ICM)M6h|rV1?l0DVeSz=v!M-d)wF=X!SQ=!ffq6Tt)oFk3DOS zPPz2t<;Y=DX3M9k;0V;Vql7V67-gWB<0VnkU}|>%rpd#kTzZ?Kh_)ej0+|$v7P3!O z2xQF?%hU4vQ_&UOrZ^7jUR50rai}M)TJpSv zXEt9)l0NgnZJ)xKn*3YO&J1&}bmh2T%p25R{Bc`OPE*Qr*#fm2_Scl-ueSuA1<>&l zXN3xH^2DSQVX*GQyE|RsvXKEx>Gp0|+RDj8yXa%+T5qgH+zz6hnq`95utHz6SljWS z&_3p5?d%zE^YKS8WCHi_xX7a|_q}$QaHUEJ^&%9paP1N+Dfa;_w>KyNpqG0kCxV} zTt^z<>jK>7{I$}{cm<6%>)w!1Une`OpRb66 z8tcF8xwri<2^7z@=>-~?{LB|`^0K~|p0lCNW*bmr#g=&?NP6ZYatM(9y;F(fX>SZZ zUYF7zB1FW#<$u5PvhDf&fXK+B@d#AMcP{bxdR}(H3^}*xACq~@3rre?)@F_ri#mx3 z<23J+o&0x}&(y3o585xsdZ1(vIQVnvSwJ67o z{PQCipn6p~gpk>faFhJ~seps-@b5;>J!=GTGx2Fkf#+kYl+# zcxk}V|GM`^UudP;xozBjRacTo?jzkyRsd~b4olzFWEG3dE9?`&JTc8MS4*>s`Xt)E zv^%>FW2DBG)m@?P_ku#*Uisq{%RmbRwElVbh98R`9o3Osc{`qvrf+|SCgx89(TrZN z#clrsxYED_{LQJ@d^gHia%{9Ipnd;pfg4F7x-jz3;@kgD*E6rvEOt0sTFyVVtIvEA z*ui(jLy+5H!LTb>W<(nU>!yX^P|wtFYG9b$*}1Lmd91Tq08o|2*AIKkwvlTlWgOg7 zq|6dW>&CXm#9*yzg1Tdisw|pYSQzzA&zWnf`xnfL1!m$Ym}7QX=4-sk30-n#>5WgT zyTakSSSBgn=zNV8k#m`>k1wPjIND~VZjG{>S+1|ED>=}91iR;&5Xfr?DU1&B937<_ zBK#m2>3eQzLk$)28~!Q0)F;y~Q&Lh2yUr;mi8~r7w&EE*(CVI@;b?J~wmlaJ(~vmr zl0yz5x;Ujd$NOP-5}QHL_f5m}6$1z8t*OLvh5&yx*Ch)M^J|NXO{$v1Q zEqUs+^*_?oa`NCtrPVFX)fLjj0+%0Fvi_|W-kaPv0i530O;hbn4%9&0p~dSJg7rvq z5t>IeH9jb-07}^yPxQbP9QfKma|DFWVhfDLMok({zV~>y zT4AYDgck zuK1?Wib%R`%&~S=vFkiRtb0hWUkQ|T$Sg92?Rt9qb;#hn>UJdFX@#fTM_G6KDJ=MJ z2g}H=&zTLFe^9slpziY^f+5WTIHiNYAINWN6*ZMEq9yA?67V$|EI!R*Dj+FYbG>zM zxzl@lnXh;3@?*5B^C6L%P0-&1J*YEv%cU^wO~*N`cJD4P=xn}qXmH;p`zjv z!>?bfOxzhL+eTNJQi4UY3h^TwK`jBK6dy<>va6B zq>4D|nZ0@alN?#E2nPhA2ZoU)SV)&KM!3yYra)uD;XCTFE#D{65i7zxeUN?mT(h;sX_?Nm}KNjEo zV{q;pr_2Y|3zXmYU!Z|pxqMqQI*kp6CHKh?RK_gOOdJNIR%$~6-F6IeHH|hjrveYR zl$OTIaxZxwNS|4*Od}bHu_p=;HHhv+r`RR!McLh=;vdpJh4j5_k~sI56>C>e3nW3! zx6)ssipYjQ(wm6IWu{E6k6TO|Ec6*mxNlvF^PgMU%UjnIHO{ER4_w;qkv%%L2;86} zQU;e$rf6gpMcVr=vVB+Y10CAO#XugN zyL^sX`Mxyi68qzZ_gfs`k>>+a-^CYIw$cOZk0Ap~uA5oMSKVU?K5iogCf9C_PJUXE zaz#htl~XDmL)0s4;pI=95L?T3WK}7=nlU}b@Z?OB(%K(~5XtqAW;7UT-EC>&+>Gn= znbpWM z$lb__;yc_Pyq9zn_jp6hZO0z2$!wvjZHip^c##*duGT<&9b+x{Zlvb+x8sm~#R8@} z{djOAQR11Ssu!2|yhTcbCJgt)y=hBp=iiIwdQ4Nt9D40A@?Xm0ea|Rr^^f^Z$FE|OqR`z5 zde-)8@_r_qJ9mOBsWCL)TeQ2G7WDwW5am9Ig_L1wao32Q!}cn^PXgX>fD2bPF3X3v z0cF)Wc&l|gP^w+=fnP%I_)6|g8;ihb(XX;!@Nf9UIFxnHY!9qz&L>+3#unmMyz%84 z?N!_3b4~PTvJ1dLP~RwZi>^@VwYuf|UGX1!-dU=$0Ox;o(a6_=;=(hbY%}w1 z@v{&y5qjtOh00O_9UW=2Sy$+A_T@XiSnrUO5c}4t%aSz!1bT0*NzBEwq*vyCgtL%< zt*b`K;DZ_*mk)kOk0R)eXEs>MZWx*%{PY7uoJYY0wn{^ME5YFlPSrcXp*NrP z=f`_|t#Jp6BkQa;cidC_I!8mX#z7jWLsAo;pn)Y(o~`n3xoO~@oNrwKHM<}$y=*6< zGQG@i?2PSHz4<-ojTKS=Pn^?!3bL2Yp;kqx#s}!ASy@~u0v~gtyth_hR{w}gLtSsa zk0Vnn#rd{F#Be>I?zvY~C)}CuRn;AgtavEM=t6sC{{*%8KS7PaC<|k%+>gvjcF@__ zO)0H!N``lUm3JCWBN`~d8Q-%7{Svb!Eh{9P<^yRyt|}k@w*)KtZt(6L4#T?ZCjIHI5gZF!wY-n5jCpU0XIe|cq%YKNZ zc)*rn?Tn?>-gOde!rf}{%h=a-e}K1H9{McowfR(Xl~~MO<)(e=IvUH>5O7_{v^>gB z81rc95%E2wi}91M-Mt38nHrWv6&QnX)bmM7EkmyhCcL8-=O&Yya3NhDGf-xSe0YLEY!7$dkd5d4VBnljjII?^P^r* zcBxX0ij=58iw$|rx+kibHE~o`c`cnEtHqC09u78hSWbv>q5E*|gU3Fgtm<%@ z-V5y!bz8=SO4J5Fmk{ghE8(>)={bU@m2Lo6j&g?aen*m3{9P6Yg!MK>k_6trIIvYC z&9SYQlG|OZ4nvgf4nHg(q+<0*eDt9eb?Rfnls8t)Ez;{LP#8XzmLPT?-zUQ~9~U(> znC*XjprMz*c&9622N`CaVbkJe^7SJ7M_SmY{NfeM$A6H-Kwx!Jit`Bg!7x~MxZy(D zbcI&42TVdXcxAHI-4D;Riu(**lH=9Rc(UWQtFsTJeB%;mO`5_gbl=S;BvqN3p3R$1!;yT&TbJBtUj!R@pio zgy2o#-Rz~?MWHuUFihp8uIZV=Gmjd2e^>+4D27f*rJex)?i{M|!~K{${*U}DOP*Uc zwAD&7wkb-2Re>Vrgxe52gX9+G;MypvNT+f z2ux)*Y9sA882bo7R1vCvXV(WDRc07KTEm1|(N9hIAU_NUHq;e)7GxRweZ4*AgJN?; ztBRz@CR(X!-Y%}}GmvVk3MJDzJ8&Vl($_^^!YarqETwLB6K57+lrW=9#u1I zQL^izOBH)M!uS@?xo&+DuHM_Vx9*^G$@=SY7x)>JCCka3dyeaKmELPzE8^XTS&l!x zT6+~x!X_JC>HxByOF= znMyO1bTQ?1!O6a*QeSbFFM|y0cVymXVVD5JdNp=$|D4o->863A6)BH5W4*?F##|f984AA;f~>STZct2%L86#Y`)uX2pDPYx;DGzmV?J7#48E;E6|>qX+-vH^38M%Ug09BZnPIpHl)E$D zO4pXeH0y7^@LHroT`8Y-gtGNkTE%cW)BBvFT1pX5RuU=R(&L}4x12pV|2nzvyUpqS z3$+1?;92`E#<@BV!(vD6<6f^>YkGkWP5;vw1$0*Y<+6IYEH4@D19d0mfrD6p`oQ*f z#MH1PsA^^aKTpImFw^&@5jxxka(pE|U%Qd8-brh*TTl4Zd#+BPgV&8ce%q8ikV6ObY61PGsZv{;8`&3|jfsiz>vsLY)Y0Snvh9oE?i?PDZ{243lkNer`_H+1``&M<3NcM4!CZ zAiu}b0pWpHq;7|&o%f87k3$1tP&=jR|MhXDQAwt4*sN@^$z7u+eW z%ogn%x60H?TnfQTTv4(7$|+MCH!MJ#8gqxt6+tP-B{aoSL|G)kBtSt!a6#~Uo0)Uw zoH?i7U+=%?$9R@6pU@i06Z^RcOTPilyMf>f$92H`l@r_P8aqBc)|C2Z-{~bs* zLIsf43ft{^Z;!VFxIRWV6~eS~J)Z2l9I>crz4{%!$R$w8L!k_(=Wf?6LQ8|XU4Mak zyL`XfdAqa2lG=?lnFdB4X)bOpwvh9hgO#j`_P7)kIcxlb&#s&hg9Dh?AWB|bLSK+@ zz-VsE#^qSi`wlvy02Q$7(vhT z*hT75D%N~5u$&L>T%O|p7CPA~Y`xh@!VKGKBW^r}tZ+<$#=ZtM0?mFqnkCJ0FiiTh z;5k{3sw_uHga3Sh^EYn*{MoMaJ@d2VXzYuKE5Js#4vz8$MPFw3V)Pdq=hud}n*LUQ zPhhIFHod;T;Y}zYXZWeSX=oB~`%?@uvv6*_A2!jqUdnkQ71^ zuibjz*U#<8t*)5R;mcP^t(WJmO;ZUWD(73-df?J)M3bwQ?viwvp8$%&jQkuz7RNKr zQi_c?iV#U6O&IvF6A`F7EguZ!Ic`j~pSb`KB11=y_RVP_h?E21_ZUfDp zE?7f8ZcwJh_D)BDQ&i8FL@xkwR{Exfn2F$&bsoyGZMC_1Y9#XaSm$v_iuflC?F;5^ z#!7$LNLEb4$FlD+X_#WV0=P3+Zcx!G-jbli(JKPSl6GWqhgUeZNX@Wtv(lo}q9_(r zH{NKS$}|&&F(Q&r`xExgin;s4nqLB7rbx;tMLq=TJ^nfZS=mNZ3|L=Kg=i) z$T>5fF`$|$Sy?4LY{9HW4RfT9P1xT?o~a?xU`)E=9bRU9=%A=|Xq7@@4wy-Dx|ZcN&T@~> zmvS}%ejs^c@V*QwsX8)2+8UDj@Omn_j##_ML2*2X_)K{dS7bK-Cvnp!+CL~!il^Kz7ogShAoApe8LLNPaC z=G8_1U=!-21Jiqsw#bSLNuw)j6^vBBpe`HB7@ns;_Iye4SI!LF};c3m^V*C zKB@UkP^UzpZ2%U~VX*_b8*e_1e+DB2S&e0@6$HX(0}7ssc4016%tgp+Bj^R{IbKLM z*2c#_p2sB@I!$K?i*V|@&g3gs@oh11V=ghc`J&Wme(k-yd&Y_K(wuy(EZR$Ak76Vz zst5xR;Cb@b%Y?ApXP)FOr~cU? zax_M4kH4`v`97fUyTp?3_}s=|O!?-~|HACmCX~5fP{aKNc6M=TmI>}oQ!g`cF`8|o z>WlG=JD=s=x>2C*X#=-`GHORO9LfrjE=BJ7A!4(OqsUNmmW7O_?)KSPh^q^!=;mKulOC}8C>NOsDvPtxxJJ~+o4K`cL>3@2YZy}Wd^-Y!NDP>ftPFCHm%b;O9) z4xWdMo`pXfeH)$xw=p=Auxd&m6A}zFkFU&~xL5ghf&NYu+dCZwP@rj#T3n8Q)xR4# zrtMcOir^oq>|Nb%G1<>xovy~3UoT#ea3h~sjyT`i#9v&EuCKzn@b1p=!vX?i-U8LE z$YjS;$zXZz1`4d8J!x_>=+~&3x&LVB5}IWo><2+{%1Kwr`%!4%K)PaC1|mT}8Q$bG z&^^oh?TGS&CUI7n%UzRST%GylKBYqoOAvF&{=@N_GAeD8)6_Mq83sl^K8B3W4U`u0 z?~rqz5^Y?EA zrvSQxO)qY#h=T(W9;`Z;MLcIYPrdmC0TDlwSlSKjC4d>6 zx!c3|K&8JyH=rWaR?RTt#ksi`z|->4Y026>%knD zVXf^?+#2gTKUoXd`%pZuT30h35VAPh8^K9{K{?6Y=p%;{5-5OH@gCYlETzb_K8+kmno@wyx*S z$D3N9xOFl+3g2VlQ&BEttnJQw;PR-WS5}9bX(QNhYV89`)Pt5h!nrunYWJ{`b*Iz| z)6d3-_3sWZwzYxBZ`N*kjJi_Vpv6rK^~y2PF^;CA1YoNkA2c`;Em^d{YvH{hTu|&? z&@8Vw;Y2V>VM^pc$vWa6AmUHmi8auyY!gnCiY3q0V)3u9qStH8oS# zm*1Lx7HpPJ-T3qJ_p8)!QOw>itOo_jTuG(seCPuU5@ZTbAXy~z!48*EjzF2TcUdKl zd6eAq?|X&R70Ype!T{;_EM@P{}S2jaclgLa9c=hd@qFkSs2?9?M|>o{KnS{I8JczF_QvYVbfp zHk5d^SPaNewpqu%K@b2Y+}t$$yD}W}1jAdnmmkEJ?;?a;m$rcmpqa%+V0v$UvmGc~ z_f=RxYGqYH5S~q*#)k7aQ~vddCL?|m6-=_SyCr*9+0%c<4*pG!9ENV4Ml}?R7i?qn zmZQK6&bP3-)9CykbH_S2_vtq!fxJI-H!q`(`44U#x=}x*1$>^zyp9swF5Uh=7S>t1 literal 0 HcmV?d00001 diff --git a/packages/cisco_meraki/img/cisco-meraki-dashboard-3.png b/packages/cisco_meraki/img/cisco-meraki-dashboard-3.png new file mode 100644 index 0000000000000000000000000000000000000000..1cfa3ccb7d54b603c31af82a8b71dd58732e2aac GIT binary patch literal 632033 zcmb@u2V4`~wmyth0RaIKLFppWMU)b%0@920j&$ir2)&31C`Eb`LWj_i4xy-b;$&rGZ;6E^_dZ^SKv$#lW|~1vRMY@A zc@%}0tXDk6Q({I&txx1Jl270BG3EdG#KlqPM*bzVH1s|kj$M)eu8AwOiT9>v9OOB* z%yUmliUEkp@yu~^{oX9UHAZ8rr^y{_U}I6?u4n#Dtm6f2o2SxO!G`*v*!>$XBq{T8 zWaqk;JMR`B9o@pR%)e-8Y`Ah=#(zZq%R&Fn1qa9{Ae;c};gtoY=I}(aSHxIH_-WGm zSXj?9Ym>AYpU;`SgXBJtd^dLAxrSm}eNKthk-kb^;f0hB4c23hM9yA($wm5Meqzt@ zDA`5IZ#-tra@Stxv3v^2U>^wN#6{@f`n6_?Ox3{y~lDtZP zS5_>7bzkOwq>}bT_A^nM+oNO;7~ST7n~Zy<}=?{sJ=g#@oC1 zR~K%`8#i{*3sNu1+}~fh?){yJQVYBjhg~NWf98>p!zeCK!)6@U8WF0~9$1FO_nPGC z70U0X-MAW(q}QtOp!)bypGPciKDLcT%H?)1Ic1Wj OeE{0AoEtdqMGq+pKROkhsT2%(H}P!FN`H} z&I?VSD2FSsFzkLGzEg2Gm|W_8^f%`$I>&be3mA`UjrgrA!KZW0Ql385Y@)1Hl=S4K zl%T7%Y+);kEnzO#)?S~@7wTL184yp=x_B)xd0<(D^a$Yy;;PgU?6-am%&=C?w=7!F z)(kqPL(e`uTCvIB_|9VyC;H}&Qq8$vUT{VvSX(b-X18oL$ertwym*;8wO4PWt% z?3UVZH_Zvk`G36HxHB6580((fH9J7;WN&zQK*VSajihEM@E1FSM6>*lZhKXPDs&mz z8o>?4**l1E5yUrcM~cZjl;Y^RdGmqZ&vnKZF5g70W%E+PQf^~~Iz{Xr93=1^kvzGz z+Jd^7bmjU3^A|5Nj*EC`o55uC0h1SfI#6XcALUenxeZX7p??1Gd?@jiX4XgZD*RaY zK4bs*>NEA4`X|8`#%t06LQ%LwpYPskx?T!qPr|nf@XWxC3!r+zosXOHMc@Lsh|%#K8O6J|Onh?KF~Js$ zLFh15pYk%cUpXNhE&yiJXxFpM^PbnX5yfo104 zO9~Kq?=x7I%-T~|8vOw6Z0`ZDeIc(aO&{Dccn6KIy+GZ<;crcSzz`nMW{T9kd9Q8d zMXs)}cEpIO@=sxtHqa->4IGtkNFhr1H=IHgs_mXfnm(k>H_E=b&mSDgpK)NWZ+~gI z{t}nv4bGRy&rIPg7LtKrNGp_n0mFO5GKyhegHqvZ<`imi*Qi>{0O z@zkD8{N7=V++Ca)9QM~YWEWzHR1Xb2xKU)YCu0KNfsU(XZ2of7Eqo)~}y% ztj@O88BQxWh^_vvZ6V=uCs{S^iLuIziX*cLvwO@b`^1gg3RtY~W2BO03o?eEt32O& zK2um!lu~qB7^y{FKwYGhzpW!tgi$-k(F(CuwbWo!TOPI?h7R9EIiL(^BdnB(^KubH zFS}npuA;0Ws1hfE2Up_D2A1*ZWGiGFFNU^rDp%yi-%|v~SVddauRQ5h{5Y*|!EMJ~ zb5qCegLeF=X-SHH(}b&o&Zf|&&t~pKLv_E6#26D&cl|B$C*&r|9wD5$m-Jzfd(9pc z+5Ea0>K8gwpg3GTxV*NqmVn$EaX@SiA_n&c6bDmEb#mRM%K`)VifQgVqc;~`#9G8( zT)etSUQGUmT=Cg(MBT%MCXC$q3*P|00*v_i`UwL`622*ZJw7K1?X|7j3&DrM<|Hs0 z$A_YpKg87Cb1vj&z7ItcJe%Qr8nF>U5pG56zz=^pY-ewF$CQiD*vaQ>-Q-(S3i}xI ziuR>^`9${VM+2G`@b>*AByk>nY+H}H_5;<2-aX+x%)Lui2E7wKC%q0mvAwG)+x#s~ zPs)Fmf3MIrAG94bx3Lv&cS*1;S*GKxh>wgPu!WA$6ro22Mhiy6ifQ=uZ{G=pkCe~qiNLAf&%IsFpCWT;SWB#b>4oFPYPQ2O;%80_=R%)FU*G=pID;jM zCW*X`^%Ki?u6MUJ>GtpcU`}FaWI3Yg{t(|f(dtFDK*3BRd}B9lvm>q7k+AJ4%Tq{>EEV=Sci-SqoqBb^@P8Ce^>gMY-xC7C*R6Xp~tCd_qX%MpR;8b489+X zAB;5HFwfyrHXq=7Zmu0!Pi;rV`N82G&a2eAkyq$NhXq*s1t>vCz|Vf<2aK?ku#%$h z?hqv#+m?z?;*FRpQKVyqLxpJlV;O$SrwYnlr^5roS_O2A&mvO9ww``8{dm8G4;q&i z)6CN3?(^fQdQpVUL*;(5vw2qUHzZ}h^25|PLF9Lf-p;8`0{*Ks1vCx(;;$C#My6(z zR91p}=;>2xKcHh6dQ4ikDR8f96Q)_>S(J2nrO`z-ff^KV-Q}Wo3;U6!Fu0!jJ+)VO z8@%Y^zCyZ`yRzA>)7}4Ff@_p~HB?oFFZrRbLc_Nw>deR_lpthtnBJz!HRM{fa@^ya zYhTk(!dwiF$#z460)n)Hd=ct-bg89cMxy5n*G_2^twcGAcu#EZiN^|7LK4P{JuB(^ zta@ia1j(_&Fi2_JR1jDsj3v~)H@l}Bik|dIJT6+fsAhybK|EayY9nU2xV|Ih@c!BR zs-+d?3z-z^#W0z$$%Hyyy_O|K_LhC0WJNvCaae9+?yA4*dHF&|fTdpdM1nW>Y}K2( zr;Q8kT^aEW+BRhz`Uf5dNh1e#Np=cjXVq@I6X0d~<&?4Kqn%?A&2O5IN^1>U%+6s7 zrppI~QH8#@!v(m;fBLcbFUBi>NkIwRcH)^ldlmMwyQGBNV7;iMsJoWDmdeo^E@pX} zobKaSIBr^(ZQrp9U4YUxP`E*hcS;M!9jd%Nx%D~AHYfN^`G9lqH4CxH#jHB z4!hAUN5YG%w+XVys_6HHbK*@4){^tv~Nl1B5WcyL$XP01&#&jPDYN$ zpuJYTTC)2exFi&W;Xl_tmuHzbamOTVEsl3E)T%f(d7DkWw`1!_vlpTAMQtE|BG~#q z_1zJf0x1_!F+?Ke)G$IV4X8FC@RlyAb%}J@_$D%!M_xf%`fEABzqnrPj{b|0eLw z{rF06uXAm)cR{_|>*;S8KV_i=%s0SoJi zhLpTKu+=bkv9xpqzjSgfZ#Q%R4iGxa>4CAZZn9o}ugI(4{R!OvhmEGLtFE#V$lS?+ z$JD~f%#z2$!TIt&SfU;vVAsLY)s)f0!QK%J@(^SG?FtaEe|eafnen$vTxie-!0^{OG|y7yYMG|5{WFZ0RE96-2Z(G?Bm_bv>bX- zhlM4HB`^I%)8op)0Yk@5KmAsvOTzbLBBmJWPA$i$3KaDs($8;DvC5Knkr&*T z@8W*CHOY{fe^+`-^8;jKC%wOTd!uK=X{_SI^ufmo=&|3b$X?1U_z>-V=I6JE@qMEb z4E;bcc7w|DaY?!y)F5`cW`&%b+->r_yBJZgmyj=KXMnzsuJ}+nv3j^^-1-pvD&uRc zfBPdzbmJ-!#k#*;g?}47@XG|#0LcrI`@s0Z^M{Ga1J?Z>g_>NyQeI;g!B0Z#oITPm!?sZA5 z|KVqD;)e6Zq@N-77ws&bli9=Ui>BFd{)-tWaboA~Zl5dZeZ4{#Zg~zXD`0Gg4x0Qu zog4%iMGwLCdxkKuMrYrK;pz&`yCgD(DZA-zzFGXWElZmJp_+fGn(>$jm+1TPcEmB( z)NGl<-hAz`v!R4H>7yB+7p0R){RO=>6EKba8hC#a%B|0Oc2FwSq2&3f|DcJ0U5%LF zH-7%wWn}os+}=;!yRLsJDu$HU)Vsm~7qbUc-wQ-x5o=KSjGw96#d}WMPANup5^O(l zQTq(%kcZ$srZ+YQoEuosz4_N8H5Xy)#77$khdg2}Sy{}RHNN1!TXt-N7vAkd|6?Ei z_r}RhU=Mx~6l+g%iX_<&sII5Jci(zqtKN^Nv|M2CN_{EuqZzt91Yh6k#Duf*lP9$H z{Iia?E5G{C(<8D?9C!Vhfe~j185&fv2TmcjEyKnc;WD7Ie1<~aruAG<#pc(ef z(MT^kYBM^y!r_9u!wNe=Z*>VQtCRm{S^4kn{I^{Z6Y@E;RW@cSz}8LK|0_#zdgc7# zPOg0Hv!NV$?gI7Pib>j!d#mHvXynhNsPv}t!?#e7`SQ|!aHHkQhVyhi>eW3tm|)x} zd}mlY=>y^aE>Zvf*%&>E?zTxnO?Hc^3Pm6%;YM;izHrwV9wYq*xm2x_zLVKf$f`ZX zonqg?pv5d5nKE=FF^I;ktFI54VD&|8OgdeqKs`voYaRdpLD$qux?CNmng65#+YE&i zXuuM}Y53({zRYjxdb@14;!^5mr1Yb&nEy1CDjytz>~XQ>R7w6Y+vs>e0&tcXO4e*?PW$E?%EXWuCx^7iGE3+NIf=Wa0K~Cmztd1C|89O zk*fmjYQW?E^>N^iGQ@#c_Xmez4Bd^i2?+;38!E+v(1e2-P_1kg9q)T=YA`CKnP0Ia zRI7vsyb_-F<$#B8h&LSJDLCrer_d-eP8y0OVedkG)X4Y#;ExekmxF}{8 zmd%~#&!gRfKqX2rDpb-h*Q=f&=|VaT1^GUEXx(L@laEk?s^~}eDbapHbS5`Eg}7w^ zk|mvW_aU=7bBQg4W(XEPFrZdRw(=iLkpKP?c4L%sdYQYMiu&9tx@}9I020rz}L2=RJiMC|R$JS@v$s z1Y7>HRNr8Zn!EECZDQCQ|4C|0<{Wxc6AMS79nKx<55?KkH=sBs`|1^ zG0Nbf47E^?G*{D=GE`2@u_3EZA>_ayGBZDQtP?NtZyQ=zfJlb)Y(OGP)KpaL4=oiGOAYHS7TXyt z`_r2GjySY96ydJOR5wFnRHfhfv+;VnL|-l%eygadda!&!jJrZ#sxY)y1qx!_TfJaR z5paqo3yE|+IdJ><$m^S<#J(B{Aqh!&q|*iFyf4Xir11NA<$Q%lr~2{1n8|X$DW`ma zIxF-5zP;S7)0OUh_>N~*FRL!@{`02~E#$Vt39Fn}dT8{Tyh@s;=UZj(s-~snIA^|5 zuXARSPZ21wj)jW2cP4O42>ZGxa&ih+SSK1axOETZcHfPMkaB1>_BU@^Md_E#ej3~z ze_;^E4NhF@P8=)#RVyg3#K?+=$|@SdQ~VUX0{9aXqYUU9_8dRxMEr(I)vU20pvds> zPaMNW+w}g=yQjVP<6bScIMz_0ps1!q3g302`nm=-d-Q;~WT4K~RMT!)ryK*yu+kk1>WRqRQ?Tq|IiCh?4 zdeoSA69-_8qXP-Z6bc%)2!;Aw9WM^pM81tRFM=PMw{s!55qU}pUL>@_n~BCgPe3g{ z8>iC*e1l!R>qG8H_zItvNo& zNsH%adxX0#=&{sH%H|`b_Q-U`+1}*!edL>&)n+GjO=}>xe$8PqqCLfFKWzVGi?)vhx+>UYtA^OYA5Qk-Qs!oz^CNkzA4184gXTIwMcz~Xg4i0IHbFeI{$RN z%vZf$;o$WX0rZFU;R4GL1O;V2ry64mTNN;Xdn?>gF#YORvxdc%ByAC=uHkH&t7IK* z6KjSYKgmMmn&6O)1pgEl_r!=j(Z*dD9psq*3&VzZ8bovSP_ANIeHzt&(!#&C*3J-I z;3ztw*tFO}@AWvd8yxc3{K#nDm~PM!KeumWds+K4q}~ObCc0~t z-dy1@DWKPI=-=liLquIuJMy7+)=NV@SAi8n1nGNW_aySP-a0+nyE`!!bU^>AEN0S? zlf$xWid7>|>0rt)0ySc>(UHATuHU&;T7mW$9V<1`*s42s)2nbzE;g+18n@03MRz7r zwvRjbXY^g$B_LOBNnYPMDOwd9+~7mbZaeV575+5|yGtGrcRe3b2xel+EXRf@+_Bdx zB(4}0c>+=%(bFiFH1hDMdzlL_(#qWW9Dt(^SMofa>nUp^UX{;$inqC<6MIiFk-8yS z%dO5HgC1mRkT+3H=rb}KUG9S_TJ|BzRPV{aFDMJDrVyifo2%4OP3WJ}8&Uz-YVWIaDNMhRHWC7R^ zu$5}!LR;8)Jc?F)H@}H&PmyzvDMd~5GqsIetZZ)T?5oS13?e6h!P$8)QoWBeH$YC4*zCineIFxJt~ReW>369*o_ZV zKma-gn9bDb;X)%50Zd(|jcVGXFQr)dbdxpb%vyzF8^xEVhRf)VhRuN9mw$uT{U=t$ zP%9wrM!v@Pxfdh@NW(qjEk+~PmJfq!MguJubhQhvg8?ArQ5#l4s7VPCO6D?Y9zybGmIAsOeXuSlbWX_@o)}8SDdf=PR7=f?Ea-7- zmV|0odGF*VLVb^@Z8gj89iT>PI6o)HWqqhmlAO+YZz2~Z#Mflh))#))&jrPE`w ztm!1w^(6zP+?nY-^YP(i!R}&SZ-sdW!z;(zIvHENf?f*iFayx!aS_Tvw?*H@qTjKM zjF>p~smzvhJ4HVDzV5#TX8y@R`ya1klqbxIlZ4(>LKr6Eqg;sy2SXvHp{{NL@HMsR zddX=*PBm&voqR>20QiS~*BBdwwUGavYzbPX#|)+ORgn2*9pm`^mZKpgqR>%)x};|s z-PP=S3dQ_k1E4iLN1V-2UNzXH58#|5cWil$!oh_`4SCo6oL=Xsrq9rW`2yhev%P@3 zZia2sf;mjl^c(P=T@-x{=1lW1&2F69WEF;>;u;5Xi+Ymy)_qcbtS=G`A0W@+Rkq__ z#|Z*JA#d=0DVB*Tk?guQj3@sxUps$~09D-Ost;B1$B5(wfXX>8V;CfJzgB)&702*& z#`OD-aP%7cV!QwR#^NF$%W@{|2-GbjXrAR+C*Tx_6r~}57<;*HuT(*vNLkSe@FP;k z5xE{aWr*H=pQ%){JrDJovQm1NS^5bK>5)O~s zmSbDf6PwBS``eto^iH;Dqfp7|@k;CE1ngQ+Z8WcwF>-WM21fTX^9Nn+B-2;Vy_?@P zN*d$Ot3Dd%Dxf<{YHvo9vq)4FttIu38bCr{SrLu|h%4YF+1NT`kFK{!1Z55`i<;d5n&D`jdhbCjSxm)#gfm6|n$ z%EhqODkw)GzRPjF%zX6K`A&yQXDWNFMPKSTX7EOCOX%$CqC|8T*_4wL3|%yIt|gi& zi47rT|4)$pzcy4k9+v@TSZHVkwhNPX6wmO-u%==*?k&KWlvI9o6 znqcUYMQz?pj}p1`rrR$UBZ34R^v9o6v|uLKoEpbFh}xk)iz5LI&8#P);uKlr2OOd> z>b_XRdY5tER`FX*=O<*YqqPouRgE+2S`AIENEe$E53sdS0QT{65wAqzJ`y26TCBH; zd5eoWY37#{zau_0u3D79oukuF@0QQQ#nn^VRr_*>!utGEW?-&qpx0224ZmKqPcA~j zX^X4={BUxk<^5{@Ng0P zC)uId?y8|z)5O#pRB(iSj^0)Bk{mAgr%Q~!vcYQ@;Y?JRsIpm(m~rY{8#ISHxI%-; z{7;b9HFuvxDECmP!+2AFO<03Nsw4Mr6YfvL&!D*1V1$O5xa~`w7gHR;-ZvA>lw|63+t_>GVZU7xn7K2BWk~4Ouyh(<5&C$BArn zF`>2UbU3t&8C7c?w+ZVnCoqxO^VRgjSK;SNmAbXLS87(%koUC;H9u5utqo@Hy3JyC zm%quULBK63Ol_glOi*Kw=lA^i+w`nYprm7O@K0xaw|$d^!8JvKUOVM^$~jV}HR_*U zTaVSoGLA1NyfWWY>F%p5UGW-2dCIq6>b^NqNfTv1J={#Zz?`a9 z7(5Y}P8S}3wK?~5o~0)9L(>*~eS!9w#IFTDhAh~Z>SJSB{YcchLW>DNlV0%r*g~8c zrUtAiX7@p=C@wT9yDKu`r)J+ zS@k46@f(Ma+f@Eldhf3z-Tz*~kQketPYtHE_Vnq~4Ft?ogx`~67>EWwZWOwL7z?!W z`3ay=#{oD5Ij+gO<-s?3jg}d>42Aw5D~CDykj%Db;eXrx;c3nT-=4AhT$}nzcwI@&b?Q2h9#kdqef~O zmzb~1a!;DQDrU4~(qbup@S*h<+U4wsaMf?AJ4Gjys=?@^#Gn$Oz;pY*-sOtF$pSe! zI};NV1ud;@x`2BW&vz7I&1gN$gL9Y_EeSpSfH_A$7k1l7vgl7!9)hWE8@K%jtcHJ^ zPjFTy%2|?xrm2xk*2C&9(?<%@78VtyYOBrJzn%~Cz*Cpb;1SY&s*zih@N5 z{jQwdh>R*ODjfG0!&b>TT1q)&0EqGvKkV^~3?2>+1?I1<1!~rDf1Tm}4^@C&iSgk> z1&p|t<|EYvLl}T;H4quez0B8o$0MioT4fb94#coJxqvHS_JHZXE6;ye!#`ZLv5e2N zvKP_s-o3N%?x&;xq#O1G#9u1~xxlzj5m5kf8*k3Pya(t`melj_2SP!n(pq# zaDj#Q#Z&;Oi4qVtm0XZRiUI@|r5X6EDe<~syuMU1&WrQYbZJ(NKwJXUK1NRqwSjU4 zjS)ejqocDVK+iM#tmdeHQBR|?@IIt}DjW`C?dO1C03SAoU&3ohDF|fb_SF>^75D2c zImBgVW?uT%8S8SgpKRg2N;u5gpwWKiS5r(nI+9WlQymb+d(A^7~_mqJb;EDu;>cV5}h6E@c>MATdLJ_0Ai!QTD6 zN=Qf;9W|hK`XDeckoErk?^_5`hZOej`d2}<;`ag5H$^nOd{51~@t5`J>RqM)-%~P$ z`vLH~uFr&S{BnD`nVp#eKw?-LUw9;g;FT2gCBWh{9kTf%p0J2InFnQ@PFMp^GIfFRZxO) z{^eo+{$KegjBNy{4|k3YnvdN=H)j1MX$5WX*G_9cVy^@LdhhAzGIrvjfV??Nf6Gs^ ztXrtzLiTD~G5hUod4yGk&#{8Fzl4MFZz=lU85Cpi&!621y0=B#gsuh7-eyD&<%0j2 zTVW_3aEY|`8#^g@NWTTMcse!f{f5x?*M4#yG&{B(vgrRb@t7fDqT0^u?5FBF>qEvXrWtFeV)}mz5aktLjFnCUv9#%GhCf*ViQzxIXd%S+aK{ z4EfnAO|ll}CnRZFyiG@MT>a)fRT)VBrda*NLvcmTMO`N(A_B6`FH+dP**36M@~ox% zN6P5MO5dB8gwlI7koI>0nbghGD1c+9*WguuiJ$tWtDo%x%!6FyVlVU*0MYo7W3`dL zu})$VUSGUfgV<@yZB5nlOg=H*lANyIzvG(QKW%xM{i5T~X0_oi5Di0K&T1QbAH?s` zcL1SZj_tvZ__eFU(8Lc{{+1w*<-dkKg<3j~;6MQIVW`GP_I-G0I7DHk*I*9G31oFU zKRzyksoqu<#UyE#oMcSRo)Tzk#>ah)lT{B^{N-GNFA2L z-9Nc3b0mv6HQSHxR<2bf?=JUpj@W5dr?@9_b3SJH;5&6&5OW{A;>X+Iz8!sjitYx8 zIJ};Y&GH-)&MlgaWp9AFF=bj9Tnj;I7UasJ9e4XBF1}Y-a$3x1wE+Q%4Z9IMPP16| z2@y5Nl6@_Bl}FE%E(+pC>$$hswBr8h=c z!>ayZlzAv;hb4yB#CX+BSI!t9wCfIbd?jd=6>@)|^^yaLQ5bve4>PEBj4f+U+X(MX z<4zGpls6$p@k-)^oiIL^u=)mOPxXChcm+Mq*d>1`H}62VJ6f#4x^diUu3@_q$#1;@ zk#TC$`Y1l3OG+osRislAo!gzz%^>1F(NBFMl&@1;^Y*Q@1S|>KG+o=0N+Q7t7|_Q? zhiB2j2g@h7OKTGwnt#Y#Qjqlgn=g%6561BWmtKXE+ZK?vue6B1BuY(#s+XUw3*XHQ zfQxw_c3pBz(6jE}XIc&wJ`USla+Q{N)-h}5qb6d@3K9e~Apj9zUDzw)Y!R%fD5DZdopQQ zXnT9r#D|@?W!Lue!44h@bGj{&Y}HhH`U+ts?6DRlty|`Q0D(4_m1tKh6pukLw+F^_ z;hVgp-iY*C$9N#2p_rE97(>AtI$p+y$WvaQ{bqAm!?Usw05A}6%oI2X{h0mwGw!I~v zMbIzWU-B2!v%Ma}HjM|+gc>lF#LY>6>T|(2k8FnIW_$z{BW$&nw;HZc#ZLeij(wLZy%)=8=XqP z`dcyr8vDg>FA}yPZ`DHD!)Yu!vyRozGbh}B_P0bnXAzGACgZNRye%=M)9_Q^i4q%{ z?)FQJ4OaH~_leVq=;tY?GiekP)8Hucx_duQ^RCHGd~d;d7g)_9e|pEm}mB z;0$`;!SlQ^39#jtC@rO~-ArTh{`zDG4UGDc#8910V`R0ln73TYXo+Zmm_OwD`RUe= zOz3d2R{wadcV;Ridh^}96f2NWQ$Z^WQadLs>gzVS6!?~d4cE`ly}mf_-7MKqOZJC~ zt91AZXoK9hI2zox-L#!1;hlS;uI)sGhaT05KEkhJ_}g1DPHFeIutapNM~#rHj7>(q zq~4eyY8>&%l*OTp{U4FC^2VIu8|geN+p6eS!hO(-AAb^OCA)51y69-#S=ddopK$Fl zEx%8}XD5?R@LP7FoN9vp7_y-(%XQsF<&fsm)9+p;MJ8N}>HF2{EmyX^j8#uNEV|tS z8zqj6P8F}6t>5!IsBSzO>c%*#Hk@)!FO6F_ns{X5@Ekra828lFjBAvzNNPNtInC?l zcLI_?!`03ES(ZgLDlL9H!G6!f{b`T3UU-{e{1BszOCb!`q7587t>J$UkhsePxZ9nnVfy>?~I%ybhShOc4g`kRHmA=V{buHfEJLaX}qsL4)B zu}smD-QoPs#aE7t#+h2X?cpCvhas7!36})FYTD|BCjXV1edbQ#O6yCHLMaj8)G)#Y*u`_C@x-E{AF&uGH*glUfIM9gW)--=kNG-=MQW` zz4^6-+N!_r$_4gSmMkjx`s0@t9~WkM)H3>7A}U|K4(b=DVbLlQU(?IpR-7K`7vuDe zNJg|&bBd;HF-b{8UBMwpwrbp~J!xd(PWKw3iA@^Iv0@9vCyPeolkoMv2A9OZMk0D| z+*gB*5?v$#SZ`ZePj|qmW=T^c1+lubpIaGYF@a6WF)y_ zbL+d(wDA^`iBi(bk69z}my?+z9QjNH>!=g9mC*&Bct{mXTr`f5Mtpoid(EiDG5+n_x9{*5 zXbq^ZHsE|bsXab2k5owD(zB>O5EMO5VYkxo#*8GUcLT{vJKj?qh*gH?wNw(aL?FkM z;%F`I&}9Lz0jj1)SKs?%&Q;reL`NyVA&5QsExRltZFVg9J5z-#D}8;4p~VUg81vB% z|8fz>T27yybHB7zK8M3)(&65ZVzLu8d)lGJT6;_d9wvB$SPM&?8lqReRakDv6wLZL zY@>il+E>K#qbS>K9X2nAl9BE0!W z{L9!z3?$!Aa*0pcu5Br-8~9J$T7R5zQJvN-2-YzH7&m^$2Z99#Wtpo7vw`sppQOMi z`Y!=&H;q?%aIBm&fji;0W8I86f%oA?bxY%C->3T3_Dtw04VC?Fy?a0k2;8Ip#fURB zr2t?bc^QWxPbNlBhcf0~toyE`v&uwzb84Gx7D4i{_adg_0r7?hI!yXSbBtuo;-pLt z)Hly6r;9`Fr{TTe4XbboH9^S4HP4mtBs2=7f)jb-xBoqwC2PBPT5EZ_ETUID`ETLO zhQ5HA19IoZ$r_ts^ZUbGz#DQtiqA}e6V9lqY}HD@iH>P}w*`x%H^wW*eKAB>`h&_X z1rj=?NnMVUwHG{Sozj&JDJS#pyaTs*P)U-j>`qKt7`+acfkn{HE@)BW!sm?!Qn`o+ zQvTHg@Z#r+(X)|~RHOhxp5xbgufp#f-&%ySho27fDO7tuXKJa|Nd(#6l7@r_pbNgD2w8jFFf^SXa`PIgnCbxqep-Fpn-97zG_5?5pTN zwnZJ>7C1~gE_yF4V!_mT)iAW9%gAzj2Y2u+lFDBzd^K&8v8-`wL}1{B-K;yl5dGsq zo!EH>(&#E11jrXd{BoLV1sf05mDnOHUc>RsmQfW3@YMCF7PD}Qtzb?q2YI3+Ur$9f zU^6Uf9SiWsoT4L)y)`?%kpSYL5XZGhlSM6R_f84tE$F<)x8afPSyG46>2v_7qOYfUbpp7+0~hL)EqJDnqc>-U7CPDPT)(gr zBXJZ%WHyP86h`p3GvwPHe$z-RY&`+#nvkW)&sH`8@g2?T$-`Ujxpn>RzC2>ZykUH? z&3!{-23DX~3poePHHCEd5$LKQqMLCx8ZG5B>p|~=kLiomTdz_1&cZErd`^8ckoL1X z!pVH*3Dd)90LUOo%#v}co_z1Cd;&1ZJJ zYK(TCPhvXYBDd_?*A0v2Y#xj9Bh4ilhy$=80URtRQYM(y8`ImlS1oNUK_&WT_ei3U z=8S-coY$S^|JbI&)pPJRksAT3XU@FiLnjdC$PXHXCGl8q)fzn57Fk`epmWVl3p}HK z?+&oH8YW`!+eVBGdPgYuHo91Pw?;zlnzWUsMXe}i(lfwf#^nL@!;{G)h+8k-vyA}+^3Mp14Y1y4QkHrKBg~S+()jj z%1HF=`Ph5|n9?%-3q|cd!c0Gk>EC$ zqL?%-&(C7Vfr69%=bhm4T>O*WCGNGEZ{XX2W7mRuGyXuW4vC)iJJh_*Z=TFXa^+&S z9|$`Dss%IINb&j4MPnI_i76BNN(X zdh4#ppx#S_jtZcjs`TO`tb5`}>Cy$2PlaXEy{8a>xRLm{f4cO@D-B2zA?p)uHYq`p z@dAKBnp&)NIF%U&kCjSTZo(lIFTOmjoJi|W7BkvscHlQESY^D}3!G^VwqbA>(p50% z?`#X3WfFE-dJwXlY!cccF+HCvnkYZksa>Wr#88?Xj|G%Wmy&H2DUN76qa+#X*(4z7peEp8P;O>ruVBt`gOM z{_zl4yOVPqTQViJ$(!JjV~WGBQ(7E%-*^h6e$!u0RqzNs>%V+xmMc1Go2}g&lB1p* z>H<4x)-Gy0ZaHHb#a{*OKem5r5_@8@zRu%!Y8l3M^`)cr&r>Netr5W7pJU%SXTHP# z*te=227)5T%)Q$VmU$u{74u4kTzgpb_vY!lSAGjere#?q;`FuUdc~RsPq}HtyowRI zvwdZ=L)&Q+?mj92jc3`l9tVPP`s$7kwSE%FOZ$3IzR1)@tN197V5{tIq{QLN;>9rs zp1VC+@x=Hf^c;#ec_BOl;oEMD#KR6pvxU0zRQ?%T{YI1KS~7J9H4A-ssa}&?lRpWp z_P6C~0mZTI?5gQw`7e657BBAY?5{lM|rW3(93(TG^UM!ugm&N`z zsTglA@1uQ68mgSe+8s}M&D`)=U(Ba;QZA>txOWf@+fYU4hEac;Xq~9Oh&>^>EpiUH z35YGa$r^t)|u-}h}^qd6;mWIH@y(?ET82*|hbjkCeENXzz~@$#qDTjxp3-*8bB zdv|iQWH~f_KJT5Ge(3CRYADI4GxLFuXrvL>oa0-a9j{(p>D19N7`xS(!|A zS1mrOs-i+$S3o211hO1xx*aBQ=g(D#Jt?(}eUj5lowEwCKHg*_qXC~WhL#Df)vAYH zv3aWByW)!$ro;_uZWp7iNs7nDOU#?7_d`aoH>FK(*H#$AY(Do%7;V@MP5Wcmm$#c{ z$D#C#k+;p78C&&CxqbFFH9ea(dJ@$D@(i@WH5OQX;zp)AP;sg#PEmCw@NZ>jeor*r z$!|ceU{gaV(tY!qT>W!XDoeC)dt`PiRyfW2!FUJ0#%jk0%s3tH;>u9a<|DfFj2a-3 zg5e7-%I-gUP3DmbxTs)%A!*b|$)W^TgRfH%foSIEWku>P?%E|{p@hC7UgrXO&Ob@F zTTz5Y;)h4E6&A>cF#m(D+!(fgWw%NH@(TX@SBMuoBH{@+C8CzFAzn4+yF<>2O39V%*J#Ung$FyY#!)K4d)UV^O0r`E;{q& z?`5Lvm;qmf2b|HzpgE|fDEIQar>Y~yz%d%|oeshg#McEK&z>jn81P(FKIJLWDI@e? zGHYq}&8ep<=GSVtB- zyXzevrj(@~{=v~xF(~RjSfi(W3DL&Ytt)b67m0&x9KB-qG9a}6HUf~n%1V!)m5t>n zr)c->BnRc^-|vjA&9IpOg9lwbJl<-Ss!wa|s1m$<{R!Z$5B3w+-b^qqLmz4)8-W!k zxgMl0v+plgfszqZk5ikJRits^1Vsbu`B+&($SMUJH2wWCVKZYTdQ3o|?7~3%UnGjx zvY#(bMu0a(Ji&z8oQOM}0qdDJ0sLU0NNtrYbfoY&>d{NJ{&7_w;*mn_YG4WPY%9H( zm*&m0PjaK@PEExI=$6-7;RokS{RRRGa_`(H5ir#-KhyB$X9fU>`Vwzd67l93oU>LU za~JR{F3!;=^-a3${mL6N#|FiVLszoJX;}acKcpRw11UT3krF?4O|2|dTvc&7-IRd> z>uvQOS|@mKM|hTzj|rXpExto(>SfOO&TsB|1wcz*4d>B6YPtcu(bG$qlh^r)lzDez zSsVap@}>wny{Z|_=&nf0!@W^C9zux78;(JDXIFBr>1k zD-8+VpY}=nM;R7_ZcS-Y%8=f<5aZNXa%YvsNB8s7xh(GlfLbd$^+b~RD9>TIEp{=t z^qk&PseI0N|4nEVrpvT17@45Jc_p~e0xSdgy)3Y3Rh{Q7n5^d_XyQJZ$rj1sJk7o` ze2{mc$qe9u+p)5K+)=~hx)M$SJgsJ9<3ybcSiFq0Yb1VLsEmIzfa1OafNcJco>=3- z7Mz^g{+P--fg|pDGlW~Bc`f*w^S$$+g7fgts*&LMop|C z=@$W=AjBP$soo!@uw1qaa1{A^uRpdf;G!HyH{VO`oSS}hoJ{%SwL|SCS)Kfv!zft#DjoHc~iaFA(iFB2hf=>snZ1z&07OQqL$#{5g53VWZ z8so`jy)wJK&kU#=&VE5A;`}OpbGpWuQfr*_js)d8kQ_>dN~6{?#ft%`kt}|BocZQU z-^qXJ7X7R=Njn5GezyI3w3)mOf05AJvR!N%zei8Fg9Mn=4b{F~#mxEMKmHM+pti)Y zYqnXWj8@5{at%tb42Q(aQzK_ib@wT1y{;KijMto1MIIopj2?(cApBM9fl_99otkOs zMB>dPaxh;;p;RM20-VeNqJJ`|+_F;bB;X%UHy(=n@^ZgN@~3Zao60LP zi)e1L2gvta2;^H<`=72ffGYIE(Rfnf2^;1 zlqnyVkZ)k3z&uMscuH-q%qfOJt^j##cKh69QOolyHxb}Cd-3v+B*^58aNNL6QSyU`g!29J65q;%Y#??zM*3P-EW_l%hl=CxMDSwIoIyLtWnE7$2%n0 z3~{@14Hs93Fm2K77RG8!j}Bns`>%J@c>H`HB1-*QfSy`Cx^F@XzxXob@rrq+T9|w2 z2U!3nopXpo#L4j2KUCNkeosa~xO(G`JhI{i_WA>h%-Z-=>*D$WlaeNmAW7mMqg+DC zbjG!5H}t{H$@9o+$o~9&m`OOLUPqgAa%Sybd3b!iVxh+c+(Bh8FbKD!QKsw{jV=PX z)~Qkxq(`@--q84)XD^>YrrVrhz${jqB?VNfo)9==kJS8M>Wwb8kAIxRpw8zHi6rIk zM#MYK3m)m1Rr&!KzTdB@BU4tMBB3{e;`PegyqEbcS7q7z`I>`UzEE#e|HCZ~?H%32 zTule`ZbpaQ5Hg3hozHnMaDuvb{Qh!lKs&R4INtbp!_ivb`NQxcpK&Ki>*7~qJK$g| zP}myaIpvTEYLPlmRn`OjHT3n;nYir+I)h^4Mj=1V4ehn$M=FD6p@c>!@T||^86Ypz*XH`Ss4Knn{e2#qxm>DSoEH)7Vf)t zSMD-^LFxV9Gf0gh1yCNCZ$vXaBPAt(1*Y~> za@nCNlg!aoKFZ?5XVbpgToafsj_wyfNiH{h5K6y-^43`SoeZH9{G|9k3nT z3(FB^wvhTu-uJ*n<$5(5Jm5o~NYb>1cM8(oFXsgNBh2hy$_-7q47g`bg%Qu|B+q)= zBGu6W&6FfB-1X6Q;a|p_kbDE-SBGMh3q4XVV4{Nl?Zl9Xl<03%D}$5{kZ7C_-imr< zO+^6iUKC`Qb^-P?RV~}K4GlRJ(^?yCkPFV}qih&<`z-PQwK7!Z{pw8_xYm?f3mHpi z{^IZNPbp6=>ymvM>V$aJ;o9>s>kQK-b)9-uPzhR4`F%tXv6cMF+wyvytGZCOmMu|! zyJ3HCVXgpHN@ca!Z2HpjpP`jt0IkpgCVUKn;s=#%4Be7VuZ!~^u|O7uyIH+zf2mH9 zU|0Ct48c8Y*mjPt%Ho~VXgX@;R%aPJwoNFHCRo>}*|gh71< zI_&@G>ZHM_&zgw(bZAZ`^XJkn-(U7j#_xIKdSKPTcCRn&2f-*Pf7@!VR& zx$W#!7P?8$%~)J>R?zNOGML#8YR{C<(nuvTn6(_=FQ1ya(k@u+`T7MI4^I3ZXfiu% z7R?jGAB^I64pZ%6jYpWV@HmevxNxn-HdQHa)^*e_RhE!*og^uqj{LLSVQ)1XEa{|@ z7{Z;>Ur;JA7oQU=s~K!%kAMXZ5TfdT6QW)9A7f$!R_gXY0Wl%WSbf)CTR;+m+d2>m zG2Q(qwxvk3L1N;t0O&-L05;pzcB@@b*mz={EVDxZxnh~!dXN;b=oHnu1G0?^k;^1m z?n)Rh)Z58H)MG{$W+R3^tEscIuWnmojoa~Z?Y6t@#7&)XthP_zo9G$=28N40=M;SH zbWukW&zmFWp!J{GYbz@SY7l4c>14+;*U`E5PHG?dmBmm8(CB~_dSpNC^RpJW{-$HPmU^>geFW}(EWLWwM5pAH)-zkS zQm3wtLV0mli_z4_G-^~9Phq4rkE=*aAVZrnqKAr?KO|aE5UiWO zo2G^32CBocO`TzPZ>Zi-*Db6^|L>PFl?rmutvjF?nOi=evD>_D=T(=M=AF25lJ99C+3O{3$P)~nK7F5at^miiArs8IhD z+bA!O+eJQRNBs|r#mj+I_E;CVo69R0OX;TrE4<5dsv4)m2KBP*&7CNsMTx#JES^J# z2B8eqrfEr+7mK}doeSAlKNg2wYj7!Zp4cFu5~_NH?c`Tp^?Tqo+4O~nhm9r^xnhYz09rpj# znWQgG1<{=o<~Qcyg!%x(gvVxQG2h|LzHpr68z63CwiNZ?%vZ_q_0Ki~xyqFB?`;Or zT;MSCA~F3@7i3F>_maa=SExt$Rj&YUXQA5YrYT2Ny+YK|yAn9noWJOr4eVjd zrgK_&{pvQqw_e`My!A3o@8GjBQelohY%lPJ=pIzaGr7M=G{rE}1z~7+rI!@nIa#< zFlnsYvl!m9RnX2M;V>joWw|dlj|up3>6DO(KO5qBMIUEfIXQ>i*z64L$_)Yvs69Oy zg8xJePl^CfSq3Pk&sr!$&enWhhdQ3&w!dS=jR2}TV6az1s81zeZiMxtkUd6I5qAKDt_l+7@ zdxyR8k9g&sAiB>M0@gr`6S^($jlffXMVC5#I-l_` zVGq5G{GRSB=0kE27FE|qPUe?ZedHAjWZ!=&XOys4vxv5$O1@yT$X>epJ9J2e(RrUz zhigC?)=@QGYa%uyuB?P>ERuQdw=c>ooq= zMEvh6NgNLt;VAaIwV9s4__Y8L0S;pS<<6z*MiQHPX>tIMEDW=5F z*J`j1lFs@p1*Dw)j+hLpFH2rh+2hIh&!p>d?ZCS?_CW+ya0A$Ck!x*P>%TxU(rQQp z0|UkL7g_-2zCfQI-0yJ>kF4lQp1H#QOO^IN+WY=(P5Y~p9oo~j&rf>e$My2|zs)5X zl-Gf5ovCs+sb4KlOKu#`X8~l2ow^y9QAYo}$N$$g6S%-6l~3jYFR^*d#CK%U*LJ2I zF24eM>kt6VIc@$X>;Emeho?jX5*8eGM-wIDJ7cqaRu7c_3T44$RF$>`roS^4N>Ud) zBLwCS5C82I|IfcFeg{5R%x~n)1b;7yf4_~GuMo%!FmP}h{M`s^-(&y3zyJFq`)_6V z=hq=!z_3!oAGG|xtFHf{6#W9>(Tb(MqZ|Ft@8f^**B9`r${Se)&sT*iEd>dfcStdD zDEl!dCnvJ|z_*hVY&HzDp<3L!-^`gdxS3mP{QNLlIg+!Q1t>UVm(UC7wh2UE-OawpIRfpvveT?CA66TY-bz-oySYL>eq~(niw%+H*w>!bg~1;$%gjFHLO>~M}g*V z#@GNSuh)BVMhv&=rT29H$d+<5IY9hQgQXz+2RL;--iWH#Wlb-xJB6hX>yI~vO`>;? z_i+_#9;BDNkGKoQVs2-HI1uB;G#QN%<+<XZItefuV)EJneO zoIrdKKqblu(v2^jvq1L0JzSwBv{ImY1-8d99)eK$F~yPh)%rxb>T&AjKtGbY zgM2L#ie-pxl6|M^1aL&r}> z2^?^!?P6B<(=4}_V16;HbhVw-*DgPoF?2o8bC}qNdbPfJJs%1bl6!$*enF3G^uF*^ zi?6jdj|}I>jcY?pNA@hH(p1DAR|@Bcpw3XRY&s@TVe$400SRSqM4X=$zCyYZR>|mfF@)!#Viw>X5VFc|M$Rv`HHhNtbtw9dxsCP>-*4~{hb`W zsDV@u-xt>kq*H{p2QyW`vK9=XV_FR(OyxP%Nw7KKCF+_gI53BeG8vg$%WkK-&rI?&y>HlhJP@(i{Bl6BKLl}+x!_6z6rGm zK2R?B=H}O~L-`PPak6T2vn9&&aIzI zgvj2w&-3$>?L|guW6i#A>J-`gO7r14w=iJ)8oQBzxy->-_$PDZa&iL9DK9~ zd_iF{X^j$muq>(-im~2Bu4E?K`PFZXpf3&rzv;T|ygxS_#q-nDwpDq$IV@r4%xSr*jh6k^n>&ZHqW7e7 zzAV)>uX|R~(@LOMkoKL=6Tj%&=TLe2f`!ttcW9whHjsUI!u!~(*6RRQVh_nP3}_lh zs{COtLq&SkYVy<{igeuEaqm3WaZ360azzxlDR*fw~YYlpbms9{qOX0p#qo>h>Fr@i{yLp4HgGJPn!RQ(K4 zyM$f?BjXY6j_TOAoisOnv4bP{sw8SpxB(RPV+^`kwMYGN>U%D&T*p7JoHSIq0z5*; zH!%&`1KTkknqeQ zU;w0bLG;*WwO_(8C(7VGK&OHv`3}8ttR#k@EfG!v6^BSA{4` zklw{q%SXJ5we;Ve>C+R1AGMstGjUJO2?~LM`1tNVPpWs>Cr8uDU7KF+Yt(w!FZduH z{)oKcxY_Nw8JaZ>ONIS{u*&k!fy4~)E;`=i( zZARkWW8_L-SVfy)|K5tkA?`ZuWmJE+j)4wMGpk<)bOsOt?*trxU#Ixz&Cfl`X!hLltx39L8}AH&n5C zqN*@2jT=Q3@N_!Wx;_dEeJ@i^F`J2dp%?W1 zbvvo;<-_T^)`v3loY)V5gYDO}Ccqfivu9=>G+1Q^-F?=ckh`qPlV zzfZ}w)3GZuHHRu6&co~Vp-&#Q1h?}Ey9q&;QMEf&OURv>xgKSh^HYR!rBWL{cehcQ zdQOB=&G(H`!dAPFhNdCV5AMwTL&=n6pW~Z8WQc{gkea2(xq@Q6e5Il8Le{#zq~#tVEF*tDug2CYM?-=0@QggOGtK)c}-MU@G0%e(HSH3DK+}4A&9&2?R=*C z$XN})klw`Y@SW;c;?%QWX7A+=)9gCgz`m2F9DDr_t!_K_`)=*4Tcap@I$@+euTKu( zp^gY=fqs!JEiw|=&&(O51XmgYuq5ifW*1k}2;w(;cJ{GXMpa-%z|86FhLV$M-{-!r z`dfOv9DiVzlP=i0pZAK<`>C~HG#EsDaCUK~9OC0M&Cis79_Q#RV<+`m{B9B*m*bHA zB<5F^>yv^)lfacfF&s)eV@JzfBt0D-jqlDN{^$|nyl5K+dk5#BdssqFx&NDui&9SN z9WSTuVt&2MBi3TRf?RDqHP906%hMraO2@Z*^vcV91fRSy6x{jfNx>q`{KNA(kNlM; zr^dIz&X+JplSfp~`ciLX zefoplJ|V>W#l4rJ9Zsf`N!!%-<7Co9CFG=>7Qp>vHg0{vx12@9eKXf49V?<@B|?SAisT>F|fH|8IRONQn@hDfcDE0U|&$0F#3;AMkqQ#ebuG{RVfULe^~ zp!RN>H({z!Htqe$o7yq~zqSivq`}0px1w+#+Bhz^<2Lk%Z5H(5-{~tw1h}Am=t-&F z3#a4Piv>Ho8h%3J5k%#?^EIET(j7dF;$y8$+N%q!1NOzJP z=Gt)kdG46IZ!$Wf=M9roPFKM+i{c9x0oslEV!mIOL1Yx%6eQ~UW>DLW9HWVc1d{b^ zf2~o-oI&lwB>$S*UJMO=9Ql`TC7Aen4&mWWy^@AkG^5?-4Ty6=Hk4v4e~-#u1K<9s^{!h%N68# zev|{>kZcvSRtJ))$gw8xXHfM#&nJ06v<8-9B|z$`=dnaI@!zHexyh>^Taug?@C=2 zQ~4~utj@IPo){brDY`OF_=)%7yLa*HO?q!aK`xdw(Z|1__ zrfR;#S3SviMf4hYBOi!yng_((UtpD)VA;CqxqD2A&B3{{uBT}vrl@FUpejC9kSnIh z^_3hZ(y4vtXVv0GR}5S+1-E z*d_rPuwS9^lkad1XU;*TOc_3nFG;){i67;Pq?`@Qj^Gk5(Dp1tAEld<)w5S!Bk@IM zakc_vrP4-ps@7LRx0~gLgq_yraP2SUNd*F(g72Xe+kxdaFk@&fhvk6NZQ<~hlc z%{K4xR=K?v(a`;Jq7n>t)p$Y4kLqA!Wu5BvlD)`XPsGO`lSUtk3!7RD!Qt(8lovI@ z*A8!^W*CZGJNI0Q+{uHCmV55tXhnX;OTK~MLfcIW$LUP6f8c^bGzHYN2^)=@sIF+! zMQc2_mdnMu-^moLxD8XHt5j1td}5pV6tDNKzMC_3*`aKFgx40*|3C~G)h-L6T-!xS{>!&|h^19@g+IaiE71ILVNy;MEI!(V?$ z^1v-Ja;fCH?tU;bT{t=a^%0LZI?ISD@HBypcm{%^Iwr4M6Wimh{5MSxfI+4g=XM8i}l55_+pzCjOWBT48Wru+hN$Te0%NIfpNPndu6 zur}S{E~~F+<3e0K44EZ$4sGzAp0L|B!FGm5Tk~wm;LQueW*?t$&G<%#LIxaGrF3u5 z)_smFZtQE^92e=4aMdkz_d>2am_8pK=~wYro46E6pSGwhcim^=&RE57%6m@kZQju? z-5QvS<Uh7Bhk+wfky-FH~n87r{51#$Tec;+9{e52vsGs{ypm#VvZ*ZAYU_^K7T7C5)zj>h5!%-$16H2-`PO|Api zRpN8-M7(Y?i!ou6y(wb030r@|ARLLj1~b0B6)&BTBjVCXcm zm4_^HobBO8FiT<{15UA%E|sHlRa6dB41G&HeA9lJX$^&PW~IVt=MjUYLZM^2SmVXW z3xm5q@{fEQNv07^t?SR-9+}?j z-L>&BcE!IazA>$w=&@^O){7aas^Gra7ra=#;~jR>ln=o~C(}O|4H8U(UO#3MYmm+- zyrsq@2^_H2XIC(}QD5lLyJ~2+b4c|k^UQp>@*k9vmKwoJ zQxsq1-z)Ix`yWo*RgGpu)1P;_!~Z6y0RsUvnyWqdQ1mc<>k1+WN9*!BG>Zm#EKU#B zDX`LL@FolI%9oFkU16*Rg&HKAfQ#7GSxWb@Xz5#fAyk7U2B+yvOw})7g4OPh zN?F*HWB#jJm=4`v23>Iv!H}H}LXO(n&(vru8PE^JvF0WYAvVuoqF+#V+D8odths#4MY2Hfs}hS+;h9zBiOA=ARoY5UBt zFo?TcZWdozFAqXWAMs$dBCleKgvaIfh)tl-Zx%fFF>TP}Fzdb-O(mGCOZ|Acq@oG@ zQ>0;60j%#XC{OC$cGqC#noq#y?r%Y9An;0jHI7<#WW4`Gh>(FFp`fo57ZE6(!8dZ1 zeZfidd!w=6FC7PfUF`|S??2MVb$7uRD~C4bSG6m7^FQpptHI@9>{|EcwZTVUtmUV~ zW43Igsp50|s;8zaN~-@BmZg}TNO41ejbXnQBP+gOSf}u;p%iKLMqdGSb!QoVzS#2s z(W*-_`;Dl@vg^Evu9sce@K3C;%#{{L_-fYTqWg<04QA)`oOQ^pPfqm#aLw!3YUz+8&IUml8@|!M+kNd#;DiS$-u90d#e+tGXh3J__{CE{<2Ok1?Y%y;rA0aJ3ofLcX) z5X*B;BHrwWQCkP2=xY{FAKEus$yLEHtdE3oYcy|mP>5L+JqhHePUed|(7=*lxE*?+ z+Y_$7$cd;Pp=`fr4~abIFr2dCH*y?iQAfF61GX%KTxKPX2c@7!00F5* z*YWFoSar|~xQ#HQ3+iE=d$FjXOWgx?7PgNu8QI0Zza*Ga|E}}ds9%PCo~3KWG6mOd z)$8`Vda)bZ;c~T&NPw@iQwb9Q*S5Qxphr$fsb1LI@_;TgMH=d~BX(TPSSZ@ZkT+go zw$I9^>(V3efH0422C&;n z;-MN*$S(&s%Hj&h?^*t!+AvU#lwgb@6+cuRBOJN<1UWZ05RqYCX*ZleE1M~NDN;_J zbPw-9wJR_G1>I8tGOR04DLIpcr;>SMfJRxJ)JHe=B4~RPl?BZK=$KD|)_BQ}-(u*j zKoL#e&-)l*6A>xnHHbZAX=@q9A$7dSp9yokt>S8cWZpb-MGAK58ud9NlMO->?o8xb`1b+-DKmV%1)yR*`!Q8IM(}dgg38ytlROSL++#8j*)2-AxnbMFD57*z%aT02&aUv(a>Uv%#K7QvXV?1qu!%%qo7~q5413m02iu}zr z=Cgw_6w6%A3Qw7L&fV;~Q9$GQ>IMZ1_s<*=$2jAsnY$y(@Z$Ns|A)t(k7$=UK+$BX z^y?aDXy-)&Ong7UhG*Ctu{RN1dVncGmb_a@j!X;9fS)fD(@j9NSvmt0&71>Q(YV1j zD9Pp1YYSTE$dX#~iNf0+m05py}8Fr>vsM8G;#ajJCPkEp~ARpn8JV!*ZM zJ_a^|UA}PXjn(x6Y1JAV}+-S3=5^UsoIK9N_ zgCHRe@$e&WAcUK7a{7x0=nzpKg-HCHw6j?i!S|x3MAvXqTwkBWZ6wTnkKE0Cwe=ah z!ioD^doDOQK~tg6C*8H zV6aI@PVCv>)hrbfu103d3`YYsSU3(W)Ei6p;$$=U=&(Pswb79|)JqnGN<6mheKQ=Z zGQ9q9fEjEkI%c^e@{J(8CiVcA&$P5|G1QT_r7kRiXZOw}+Eauipqq2_2VdlsY!Tw~ z(WR2%eW`E3LWIRok2W8ciN~`)_FUPVZ9&I5qefX1aRMxM2mVZ@P!b|BGUDx_LD$52 z++@fF`lPW!k?EHb&Z6NEwt$jPI1@R*WHa`3jF4Q-*(}l_5p}*A!%Sj?ugPw%xX=+b z+=K3z-}MKy0cvWu3T;AuC|l5dM4DWb4}&Ubg}f(wVZKBML#ddBdgFBv3iE53av9y) zEu;a}WEw7F5 zYFXzZ2^^F{rFT^3KRe*W!L~Bf1az;@lVhaS?|$SSw3NhTG}Ns0FZdY+5!64NI4sHN zFCMrig0MMTq9a4xK|xsAWRDBw|5eJghSEk1VCDRLVSp|S?Q&;?DDFt>o7Qq^WcQOt z5WSnAACu+-z|2CI3-l=Bvzw4oBaNqP57RpJv-?mer!FF zQGAFQe4t=ABR&92@=AJSGTD38gO*Guruu4kW>2C?o-esRu9nT4lZMLyT&(Xz6Oq@q zBc(~;wtuf9af)Wzngk8L9>0H>t}T8DNTswv{zx4CA~fYoy0(w8%L+HkjcpxkJA$h06bWynnKZ9*05J72ZJv?V{A0N-{SnJ4(ir#J2`-oCA9GJsj2^k`b)4-XTcna8Lom zcnW`ZpMxw2h2v`f93y|7RoLBNfTKWZQv@8A$;%br*GzS-?}mz0!Gsvtj(w+-Cx(Ke zh<1GAOv2LSBwCokVMdFvy+WWU+T?53`3U$ue8kJOI)@1L&W}00PTe)++bovrBH#Lx zD*>m^)o(3lRG0x^lNxydW^0!7HijK${So^j9tV53=8`I$%fO8Yi+^=igT&S*X&8Jk zo^J{Hoqs4}PaV#kx}5&9!@s6cYX~e>Z1%^C6yER)c>Dg7D@x$)$Hpr%4NqcL*L>+H z`+9{ut|$#=j>bG;!agM5uk<{F@5zNl&^r7$q@KAQH|GVru;JWrI$Ed^u}2A53)i*Z z7{x2jb-6H^OyN#DkYKhgHgKRsSFsNYXHpncA(;3BoUA|j zy4J?T#6v~y3CgjSM7On=yy16W$op>L5EFzh#OGgJ45LM#--Sq$w%MhzkL`Hn^P`FQ z$um+Dg3h1R^g>aHJbv`4ywCj5#&!U`Gwn>&l7btJJGWLBTrt(R$WJC8P>nDHvU919 zEw`h!W)iKZ*b!Bic=d&Lft$=lGA}dIo?!;zpUd~ZH=eGf^-V;HW%H`Cs(BaTX?|qR!so0FZ zRUoTg$Hzh>CAwCF6s$4u`d4i$pU%>xtU!+Bi7 z5sy3GPO+sVBGwa`oO9HfZ10Z{-EL00K}@d5bc&q(L9e1uh(@we*GC9DEo8V<{cX87 zo$AppCo}!C+Gxj~(5IRv7e#v zPQBQvks_3@NH~|@)}Fk3TKF@cTQG7uTpdWCE>)=@g;5+!u3r8N>yb>{E4wRETt}~D--7v09S5H9NJSd4}o}- zG_s>PbY0&7)Hr1ij>FiZ$2%~E(}CKU*>am)W_QS2HgBqOC@L93B1%sW0Q?Ce&k?sp zbT^Kq7qapHoVVDOGwSGKlA;i7VhDZ0NX6^z4Db zd4I+G^uhajZ27Z@!v*?{UYz%;>5kxGjbZ@YH5tWK&PD6PX)3MCa205(T*3K@STAYNN$+nIhD&<^U^-6W(9L$H){s<(z94xh#xqiWj;h?A^ zcy80w109+<#P;J?aDp34_4G5?%?0e3J-5{@FiBu?vIMHB1pTRk#>0aI16eKn=ReJb zwU;NCyBWDfeIcGg1yGw0ThLvwv#2b^F~ZfU@zIZ*I&f=AS6-Fhg6Fvrm%Ars&uE5<$5_( zmQ$)I5}HmTtn3apo=0H7hOu$<8Oa2TGr4yeZ9f0@T;tP+MSR`>LYMfi6pNO+lD;K7 z7f0(PK3JhBXe$N~rVJhz|Ehas@jNKmCWINY6%~5CWltR6|BIs=ACn>HOZP5iHF^gS_a6i9Vm-#jHW&8IX8*5fY- z=b#`uOID-Yu1%#Rf)JhL<>MqBC$@TCB~wu9OFR&QZu!5S@_qe5b`=*GsG`XM+AE1c z%BN@c9@bV$DRm4LA~$Q`;7Qz2+q@4~LvS62Vyo1X$*=o`DN45dFCWT3%Z&2d3zeea5Yz@=I%&?C9I}E2$d`2ASvRqRxj3n1=~Ip zx-leik_`IDmCWdD4{+Ke%i z^^zgI=h5)gqiEeTMo6NQI2wAwCo|{CB|&kbOj2&R@?4=525gRP=hL4Cf9qGfGJ@Z< z&6cZMj85w>{!Ejm40EzMQ06PgRH@Vy6K&P$?2&W`iOLauS7S0pF5gd(GQ~~od|$2S zYY1drFBzu|#8;h;Pzvmd6bvhq3GVaf!}Qme;c&mdB&=*SxSw(>oQzuC&JnIq;IL6Q z(Da=8gPC9{aFFrq&$MqB*`#`*Zr4cS?5GiH?3Svfg5@%JRP)aUvwS(sk9_80e{L2? zB?}GDLzO>ckA7x)fBd_`@QZo$^e6+Zp*rjHC&L^C%7w;P(&LYCBk91=fIvrDaT{s= zxF?T3xGX9pmo0%I_L(-T-e&0wA@@s)bjS@R275fft;&S`i z@*ts_%(ML0wux2u&jJ?YHid4@GTD!sPBCyn@LHYDDO5pR@IMJ3ubQ65IP91)r{u@C zqWM20eQc(=3ufZ>SBzw_P5@MW5TKM-7#Y&=d`Sgrba0`3?35`6&c`1Ta2`3TvK#go zVK&(S&5gOTc4EBSEu;PX;epUh4YUfcZ%3W-N{0R}+T&s7T+mbXnFwHsq(!5SP#LaR zW_eNKRXWo}y;$5X_EZv%v9`X>+qUndo23aL1tyM#8obrFkO;6nAJboL`MP0+R~apb zc2Tl6;VoP1{pq2p%3!62bkv{rEzi0(Ya;>p3JP0(|!QJBXP9@uH!RB^Yu@-Q#Y~pH0yS@6>8=|OYG~Zd z-yR#_39Arv^V`kj7u@TVorxP^C+HBccch@6>SWP3@;#mPINmr46Y@p$%v5i0T!hir zm_;)PW`2A6omE;EWZ3;c-Ai?dPMBX7DJb@MDWp)7|HDD@6QHX2HBoJzub zZ|P4DD97S^7SdG0xyD!$(A!a2kDLWjGH$1oFSMEus z(wJ5sCP|>C*6Hf~fRE$(!3Miy7Yd2_qJg}dPvgyqWS7mXyl<9=fzHi z%^hP__bJ0e(gr5vo}7c39J1v&yrQv!M`|{_d)07fsomJIMsPh(>z+#4Txe)~(Fk?A z)TSp(rNrK3rDk=E>m+KBa%g=FSF7JZIq-6W@)aOjM#s+#psd^DO6p|i&4(xUWN^<) zv<5h>YUUuk5qAk=uAkrx_+Reww)H$QzP9->q1_4E#h59i*LNLOVet2eAD`-Z5eD+K z#0#l4X+Bd!?Rfkm+27-dIS-+)Ct}NXm~e0;MqI41P?>16NG3M0b@P_JZx6IvX$W}h z6Pc)y%3&pP7_-^%%f2wk1s0ibLW+w<5y1dW``D+!R`+FyekZjf$%2~q zD+GHZQ=R%Sps$$m+rMi0-tUmw7*~AUTJ^lbX@isfi8|N@PpGMn6nWF{_bs0f8PECn zXyx_hpV{`YZ;s~kLxW}RPb49?k_nd2<=Lvm7R;^dxm7goOK^bMU`aL5>WkfO(&qBO zc1wj;T_cA))5T40Aoj-M)>p$GR)7v*FzAS^SU(CvC6G)i1(_nd4{?h5)LtD20f}Wg zDfmDf)sFY1Ua^72*rA@MEgDa<>N1_Qeb!2r7r}FJ<;jQeBbk`6>iiUaj~^&Wt3chj z%cN0H-a)nzY9vRk)phG;*(HJL$@62QK=P*aYv62Z|JxXzv#Ga*ktAZFnB5&YX+M)% ze^G7SHpz|rf1}gud-(pSY)XKxpfCXKgd-RUL+OQ#_0mfn%jdJf58o0QZIN_LDf(j* z2DGe2*uo9*tmXa^$8n30vCHSUU1jt|w2?gqp>MlyV3L>xB(tW|VaLBGrJI_UYICu> ziV_pC7?i1@AjfUYN_MB1wdy z5YUKKZT(A*O5LaflDR7l6;;j}q%F)J;bQo)`QdU>Iy)30A~`(Z{Tf;+CC#}u5Wk^7 z+4h-Ml|hrm+<4plOW0xp-D)lpoKQO6`7JPSKlc73142EfIouNm(pq;LBrm}r1N$1r zoe)Fx4byujRIE1=q9ZxN6nH+H<$gHFz4`KZlJa5M;i=wUMht0gGdIv|N8{&2oZ892 zwF|sjvGBS>v-1}V9-T(!Lf@$5?c^2lL3hc&X?oOI@|7z=rs>rwP$}>E=oji2V?Tcy zQ`{RE=g?9?Uh{*zQpd})qz48)=J8UC29Gtfd#zmd3264KyZ7lCmQzNRUR&!`mOm2H zD+4`_@ctu+)#>v7l3);ZknLB-4NTx|r&K+LhLZv{X;Rj_2gb`%xz?p=wMb*ny28$I zLqI&8LcGk!rP^`nhC?2FgDe56>61msP(sqKSb%gW+FRC6pk_B#-^!oydL!2gX@OXY$C6Vz`l#ayw!&JP~f$7o2{zPiS?8WiyJb;B~)$hRa&hr>Y`R z3A_Ci#^xhq6bSVpaO>nQBM5u{?F|EqB@&U6Cc#;Bv(167@~%An6^NmoH<mKq$^K*Z8?mc*t!j-8a6-Z9D_@y!|)0ssJ5-gWczvMgp6BRLjL5`QZU` zt1DizZmdT`^r5I+s9*G9t$>iI*)v^;e(6UY{&C*`H8cEDHMr$?2|>Ip;GO=r<@ikm zq24}m{kd!p;q@M%g=|8X3ihjcK=VhP2c8bA=Un}y$bchlJ}eSn@tHU3#tY@0oLq8c zv!#VPH{&R`N$?dG+84^U6mFYx6Nlfstan%*dWCpJg#< z^5r-6%37}+F{EI2B6!`FAgcuLzu60w`Grz(k&XOX?C&ztjYa_C4f=>&E6FYwlEj{S zU1%V_)5%ny6Yi*(##KzWNgrYv!2 z;j9HqVu(O|igurY^JdISxNtIFlgtFLX?oDELLFk@Bl7W$LoFx!(i40`0MvA|r~ik8 znVHlRSDBn0a}-%tVLBfM6=5g-@cehb9{yS`83MTuH(%)1mFgD&ua!RUF4pZyMy2uI zF4^6@vQV%kbP=Ms1uP_tWm_W^QYnum5y=pGd^*qk^6)!5y*=3|OBt6b1{%XjPjAKq z_oGyAqw;*Sk3dZ(`WxN#+T;b=mT^>06VTuTd=o3Cutq5VVH|;RB*edSqkW}05K<|p z!lw1;w;68`eZhSkd_zjV==4nn%Q2a#$PQ)l<95uO*WNI)@~QsWS&S?)w+B3?*?9TD zc8Ww1GWYF`99jd2hZ^JX%Xj_wFC!@vP1hHAi44IZ_CpJzccG;snY;v*nwjsToEIbx zo$t;<%u?ZG7D&T0!75?ONuvU)ivkl`K?i#<9NNgp;;T*Ix(GYl`WPWpK<1cg_0;>~ zj5kEK@S{N3Pehbeiz6f>m>Pv)HvmHfyF%MFexsF{@m-E?fg6N^h~!;HKN|II#KfQM zZ+8r=>u0hZ2#3(YHR1GtMAwd@2DmFW+_5ZS=%wlRJ-bI8Ptyg><3a>?rbCY;j@aOEXh0U0e3)`%ncF z!8sqcg1qtLa)b@9YK9@6W`6s|-Kbq6DVs?Gu?T`OY@k=+TsM-;G)I~Bk;-j3Q!Lo^ z%bak{hYwFBKg#^vgN>hQubo|Pfz!2%dwcL_>eR?EoT%roRr-1)Nr%_Z&`>Nm0J~I6 zNpFF-yl#LU9!!OYZAlMOUR_HTT<$M`Xzhy4?@w|SX5oY5v%jl<*cN{H zxK2Y=sK0k3ucl^HrBU_5_<%v8IBecI0<@w1!BJ9pV71&``Lh`i6Fo#*PdQ<-kyw?n zwAeCWc$wKBb99)N)=H?@DoKS;6YQUk$2Ji9^+cEo%IDmsFzh9isNMiBcH{^`5;cPi z6DQsw@QFKL+#SuZl7>^NOTBPWHx1%I_70vKFJ2_o(rZ2|BcPu0WAjq<3D1KJ9Omhx+~YczfanCR`;bSSHA zLo&yT#!IS;?tQ*GcAAoJcSh3bLWhb>n;^nc{;jP9G2@v_-(pZ?eTh=ZomGpn&UKP$ z%D6K>%jz%8h!x9YO#v8k3jPctXTIiS_fNkSr59z(6sCjWBb1WD?E zb5tj-UyCDN>4?C^_BcbZfabMZ3@)Kg+=z+NvG%OwH0||{@az9etiNA9aAQwaQNwcyJ%I_d!=$*6g_ns8jY41DM z5SLUcFiKJMNJRh-EW=iXis|H2v9Z5#c9@j>6HUQ%K}`dFX2#_Yl5m5=4cKOD?Z1*r zl;%@$lWvX{>B<&6UCT<8imJqBKgt^{cRVRGN}H85j4jrhHmZs2ONfu9^AL-l^11oM z31PO-&_9(3W8bh`AI{=d#a(mg{U&)|_y}c3m#lck59a?Emx3*+DEeGq|Fy|z%M6b? z=xuvFGLgw~w%HE*+R+k3!vieN{yB{spSxRA?G~7=o~>`n88-3Wvqn}wT%Xe+Dq8K` zTvy`447F-i2zrXYiPl!*56N0a{!3llcx%RRTs7NdE%gsgXfBCfKe1iM3`yX_)U@WQ z>lA6_@-oDft^F^3)#048UG~O?<>*3K;|@2i>14jNsEbZw>dCBz0al$Ep=s$CdV{0Y z+h|R>VN9UiEEk2RYN08GN^BZXUZxqv*|A`e6@K-_zzMs>EGgIAymn{Aou z*Fp6x+{(|$)Pyya6$L-I<^W2!Vjj(RX6Ty&@>U}t{DY~w=EZF;wS7czs zhWg$uC!Pk1ZJ)6BBi7*A2@!b~coLUO4g=}=D927%Zq+EB5&*0q&e`_6smqZ!7(OmG zI;^A~^tE}-`UPv~5FeOj#)(mvh%`(7s*IE2>rJTBl%p~wsYtg{djQ^|j?ovZf9r9^ zV@uZ;+^U@cw~H>vZNt@QhshB|Ssu!aGk7dkUVHbKdw6iR?J2NB$Ddie=4n@d*?z_U z5{YLrN0+8K&h6x-)mv z9*<^cR-sXH|8hK8zAOOOO*I%W6{n+!)vTQbRaCTV?~$GeR!t)Gz(v)sFkPuv`SMFyW>5d-zwZ`$(jOa-`&&Nt53_I6 zZ1}xDarM7$Oq+HV!h;SiIUr5!vRVvs1nQWSdg;4^8M9lvnaqpEgKeaG5J5Cm-}?CV zfNh!2-9|jUR%?8Dx1B*HEO@V^@i_9*&~0wt;=G`IYU5*yCo_bU_ZAq1(s}H0ydOTI z5CZ?w*l5HvH5KA1D*xs$WxRk{XiiF+6A{Ydlyz%n>_td#y1Uz=PNgvGX+536G0f2T=rikE9Ccx3eU=96$}|fK z69thnoYwS@$CdfEHw~Nj4sXpr8gX6xu$Y;#tm_-qax#5fd8rxKdC1sJvL__4hHpCE z;K_`3YJP#Ixy)!m(~{%e(}^AO<8>!|@RKGL9b&4K!yiM|B4z@U&yBaa5PG4BF7FpI zi@JfAU61gAhxDY`u4aTtv&G4RAZNe*SY1dOwgfi zWFn6?f2+(6>lP zN#n&!+zq_Igy-UvyO{YC3Whgn(@o3$_PNDVF9V0=5O&|!HD0GOn`n(QU#cjbnv0gw z1jnZogRErRg(h=r&3uMvv}X*;D|>kTJ^kAa zLh8@6v3Av6X`)gQU?B3gXE$E>vh2i`h-!asKEz2pI7Srzo$wAPdatM`Vuw`L6S!q2 zO77Rb&T$mUXMZNarO-XDQvEpS&y-pP_vjjUW}qhUY$ItvcSn&>33KplfHebC5X+Bl zbN?lOlnu-Yj43==Jnc97)_QyV8qH=EGCnUMWECP5jH>nwWiETw5tq#v&EGM|W}{l- zq%e^r8mTHJ-oYy+f)o^xC)8b$Sr2Qqu)uCCoKhvYev?UH6k2y1>jmX1F~C1CXwt9{ zaM<^*aVYtflSW6tkd{=Z!4QCv5N zOu?f`+npzcwUTm}UioK49fkgzpTlqTx1y}@X6iQ?fZQVX8l(A(tFi*Ah$Ay(*-A@@ zIj4xO!d4Us1!Ov`mLRD{L(pZbO|z$pzVQ%c*1TPH@%2vt{bG1Q;e2I#2|J6`T8s z>m9es|5RFZq>)UCw!OBnq(Sh9&!LSv3~T*4`9xLARxVUQq3h!+)J7rtSd{*dF=fb( z6cLu=it+KikBcQhrfc@@4ywuE$3zjryB{GD`z2SrLjg5}l@tJ0N4bgr-!@6$UH&&q zlgYfD3+@^zubaj7=cd)ifmWUdCLALrO%Eo+E|PF(M(*~{a7MDGen(NfPuw??*@?(=72JWxO*Sa% z#VY!hPzw95^R0oDF@Nz)ZD5^s~ z@J_>2_u$N?U_)UQsxB^Bs+dRZ^7DQ~3lgyI3=-FqxUfR&UNc`x{N*f9{vQRU5B@;< zu6wdln#}tvE6))G`pju#YD7tKhk`($6k!%Mc<6}dZht!v^TO{r{?4!GJEo9_AOpnc zG+6i(Qpi6$p_#5JjiPbkpQJ^?Ns*EHqN2~vTIJex(afqWczn&%$lgDPHWw?~ACDGV zLU3UZgGZm!rtOt`UU>Z|p%3!urmf7W9Q=&5$2kEGpK$%x4{|Boqcz}j@ijfJWR(H~ zn`9)bsTXM0NtA*%!XdbkPq<9lgLM~37h4X5?{UfLxt=uU!a*HU)LCfg5Rr#LC1qVU z=nE#MS9<$>R1d``V}>q@_9BB$z}02&FY^3>85YLV!j7y`7w*Ar3Ondm5wIl$9^Y>)wvmCrXRyyX6mc%O?U7`L!^ zoJ)Vd34lIsyLTG{a?Y)w6bspq=~h=^h^>I4Evvg?`)SAH)qajAQb|{YZyMQLl^$aj zSU^lEt=a7#d(a5IJ;@e#zcA+=V`6ew%wXTpSC&drV803<{2 zvFP8s@ePJ*;~)<9hVhXHPG!k;xKpYiup4JD9~w*^-%8CVED>7e#tV!(l@{k$CY@pY z42t^pC?H#HUK}8{s5Iu<-m2G==c_qjI3VQ~8EOi?)l4#Rq)%h&0iRV1|CRbim=vW51v76viuL#`O~}E-vsnCAnFdxVxt~`ytfR_l9ZzT>o`Ak3tTe$YfByW{$*!B ziO-bU76c67(dFm5*t*mW)Q;>)|0W>y6=4ymK%OidQZY{>MO$CwkO)o>Cu|z=DyWWd z`5^VOY^0!aY6S7vDABwuHTM?HznfqjKlq56rC{2Md~5PFb1P*Bo0%?troEdZ`y|Ym z53ut_Wn8{8&$oVJzs@+HsQdP6v#@@S*$sB@d$H^FOOUlWi-^|?fknr2oZU&A2(=y$ zj~k^N9!c${51tvYG1Ri58-8;`zHn|h`_kltlR=!=yN#J1t)F#VL$e@=gXDv6VTcoI ztHcaGPt*4#g5)kTCv@HhH9|OW-A*1j(m9|xw-TB?<+L?x1fF8Z?<1)%&b#c zR{Lj@#(m)p9LFdZk*QqYjO$2%WzXSO1`fuejjtl_gJ#a0(_G$0Zlz33Er+IPKy6`9 z-T3>zL_fJuK$D5NBa?F_DpBLiM<8@(t)Fg8;J0<(KKIrr6 zTBS4ee|dh4NxnUjCW3JTOwkp$cr&Li{Y**A`MMx)6i5H?rHXCzb?N2Ca1tu$YyNPy zfH%JTb~+uIbPNj5yRs2@tpV&LG7Y^(@x30{Bi>aTfDs{q2nqI3KmwRGYZAGYp4l6< zgl@%$QxxsuB=9%Vk(spPnVs~PLW(E3%MDian*$L9)+)y17(oI%xs{+xk00*EhchH7 zpkU0&z#q@Xb_ptP0W}x3f|n8Vhm5I=!l1LZ5YhO_2^u+ON3#j$)9KiE3jjUAsF2Oi z>Vpd3O-#177_DBp$PDDV(N)VdSg0I-I*I;XPBJHGv|7cl@!kUyA=n3jtO7~ZH=4Ta z;bj#`Z$8e|5LAml0rE3!r75_s^wsLOtCTE2N6ulZ#quI%vv>zscsYX3^0F9*uvGXl ziku)tyvAq~ZpZ)`~sf;cudcF0%zkj8yT?4jTT{DO_{zf7GMrqVD=?h-G(EB6C08RZMTx+ulXB)L^EPqvuh7tf>|kz{E$?lUbLhqjzC2 z+KoC)iGWAWil20l6wV0j#FJ0s8=e+l1Y$&>-o6I$KWT;HtDYe)K^5IGFD3JPS9+WO z$|VMxOmz&kdWK|G7Wy5j|F8G*Of>LKVi!J(HZ2q>l8F}u1TL39CJ*dZuG!o%#l?m7 z$6p^i1YTncP5K3+9ot(Y%d_HyG>r`TXDZa35ReP4ajZYzG|cPAC9hv!%s!VdUdsQW z_WoSHY0`2-mwVS>%{xpsT^naJuz7v{Tr2G6(Xeik=C#d9m) zGT{3%iv7re7>yz(%UQ=^CI}=-kP%Djf6stlG<~~724QVE$ktXju&4M}j+?6;&s*;R zyud3(NQc9zUWJtRs-w-KKN#md01*w&mYX6)Z|a?oyKq_aBoY>l6pO)mATS_{HSae41+TKO zcK^juf;vu+X7)jD*O&$no*m$}I+PKmNab71!9#CSTha?$uC6fNVdtpVo zgu9s~FM{M+5um>vQ2fnEmf3IaZI7{23ViDqA1VKskAe0w$J!a%DiTq@3-B2$l{6YC zweNghyTU9<$%po&FZl<_nPP(NX)Gco_}yY_sWKIVI<{w<6ZBG*uGIWVG4sBXHDUK3 z0Nc%>bxKK;P_XxhE)8n|dV3N9XHCS3AjeTA*3@rTE$AW4L-DliTQg|5b<3`7cW@7< zC?k=>UsABkYgDKM#i&h@WV7v6@4>p){Aj}mXAf4~_=rKcAbQk4nwnBBl$U$nqYI-T0fRhP0r?t;>A zdqe%-Uok2f_wjX83I4euPD)%D3O)->`p?_d!{<+7S5UOWZ{Y=V&uK`ffz zDGDqa7+D4ETXhPXUP^QuqTT>J@9@ zFl@9P`KW^dQhIYZ4_%P!0?-%0?K_`s!P(IxIw)}fw;g4;mQk{Mo8K9;X1`_p;d<-4 zR0A)*kjbij9va`>t@xaKHv=m!EHO9Q!CG@W2K2$jDq#LhbJw*B#Q$f0VBg`8i}0VS zHLJJ2Gb3->*?;R*F1w|rQGwKQTl3M_aW8aNoI|fb;l#9w3|NcQp3}O9uP7WO)AjcC z8}A)}a~E!Nt{a$w4o!Hn3cVrJAH-v`@aM6~ar$KqZM=B80#RJ7uv}s-VUG|-J~j1Z z1iLK60qYt)aNvRYjlk<7gLk=`K++-YO3XPxRnh*8VFUYh=WA5HtFo`zjm<`s^)Ofh7b9 z9qHBYaLvrtZByr-Y}b-l)?V+D0&41(;Dc$b778PHltgc}n|*=i1R?5!!w+pvZGe0v z9RpvO7X&yQrrqa~n38agNg~aHsvL{QN6sM7BBjM4A zRtA7%scI?bs0hH%PYQ*j3 zDXOHRm4H_YCX{Zm!*P9%khOXoIr>FP*uZb|0(5)>|6uRWkLVPYltWmRXj9?IKYIRW zm=L97{j!Ig@FvnF5F)bsrVnmz`fhA*%3YEzGT0lM`Ne!9lOTz4K3N_ii?7M!s7Bg0 zUF0V{!%T%P)mHf)CosiG_*rZhpVx|H$So0>*4bKo@QX^T=ZOM!BT;-9)%unlLpfBS zNL55ST{w{}`PI{mRG#P|ZN!olr3Ew6TQ+OuA-$XU9@vKcTsE@6BBiJZ1ex52^ClI6 z_${rqMYFm_f+OK9CMxBPb_OzGm-!#m8dIJpuZW!Fg(yZgf8wf%p7J@rSzA6yp6&ZT zv(3ny;pjrWQPA;e&PbWoJVQd!D0R$quouBD)+n7z!D(FiWe^$1feWY=EkZq4;mKbNyP#tLoz`r7gM5<+a?b4haiYcm?$`g9p(X4^XA6A&zqq=QAm2mQ@wo0ZxD zutK~R)kx_Bw%dR%z|PsrGv}%4^{-LWqW_e9He|tOdCwpNJ>2Qhmxo?xWp{G=`EGiL z_-_p;WQ|uUI@4tf(1%`IDBc$Mnl+l9*EUeN16n-0{`|25LxT8Sf>JWuAE(ZMK~!RD z0l~}tVI_+6S!#tGp@H~s68@{p&}cP~y6Gy115tD;6wEl~0|1g)8WovWxpc_NL|WU- z_co);@mRMaUj|P6wEO<=8SVk-ngQ`A`5k|%zj*#DdYuoW1t8zL-K1BmIV-oV6az4_ zyQ#7NZ%YeDjIbtDLLRU3)V%~nkp?;AV7)e%vF{O$8N$R%8gb1gd!%Lp#z^V+zXC)w z8$5(L!9D$-#m?PwzU?Dw`SVUc-7MRSS-Mzi=9Fi%7@&tsll&x_8x=KNKg+q(B$FW@ zWlj$)8r@XL5;6@|%w`|>K-WdhnSl;B>LB3NEEd9S_DMdi(fht9Mx^81tfR^91Cao% zA7}(I-JQ1|&wd?d4nb$UDh|E z^_N>rRp&2Wa4sh6GiUMCU%1cvratiF$4jnlMz-mCq-|{2QykDP7JZD%e4kBMC8!{> z*7Pk{tx6oQ+F&8C!1rCk{l9tU73*#J$jsCIans2S^uJ-Ix=;e4?sGwbSqe41P5)?% z*#iK3FIOTfdV#0Dn`oGoKO!*UGig+yT2Ybiv&mG-;f?QgwqnN9Cci1?R9mE0wa5Q+ z%3AHCUQi{bMpy|z32Y-2_T;=Q`cK-x1W!%x0(WRwj?;4-FsKr*g}(;<9GBCUis4Co zn6;bj6UxeInU;!pYHLe(ql^+`)H49DR&gpE8;rj0zu6<~cAPy|Tm4EKoU=j|OK@0y zr*#RNpuV%}fUdMeTouQ9iayZY5k0(EA2uqHA|Ml`+rF!ugMKbB^7CEwyh*>`_Z??g z{ERC7N=dUy3?r`DB3s}#dyHP)_4Msr|N0YY===K&HW96Z;Uok9GnY*=&C7#{eFGTr z-&1pG>J_GGL-f!>^fnHxU`T#x8z_BTVQ5q66STuhy151gt&1>kYV%<+Y#kbuxMSy= zT`&ct$No7zu0GLvKsZq>R zsny0#9i{iC!}E-ZZ6G&W+r4Q{D0JSPX|6GcWZkpGC6YvRQTyw^x@c4)Vw7;yTVHnV zS-+e8L$vLl)3VK9eHjNqD_4q#8D`I8N@U14>Bnam;L?h9oRV8|I88>r?T>P=)MA)* z=*mBl8HnF{d@L{N#(H?;9?vyWpRUur6GMaEZW5FN5-v=MXp#SOXzXr&^(#{YXi~Hh zwnkE1vCEp>GfFfac;9%lkt0hf)O?VQ74AS%ar?Pkr-I9EaO{-iw||JWwDr6#7kkr| z&hid2!LI3Zm}453t;w9?JG@58Lr)Cl(0X|sxg0WJ;qmgn{g)+6m;@Tn%QcUUR{~pB zA87w*@lP1pQ6T6+WS2d?Nh8d_O-x*Ab(r22X17rr%_ozArTC%sbB2UR`4%FKXxSEPWj~ygSDc zv)uGhT*pWC!a?D@BI&%BZn9Ej6s^DLF(HExhviA%pDL~jns z<#Zhc`Kb|{a!LY??Z|rAUO11X?0h_V%;B;d5B^K=SD(Ne!`k1${cn+)H~OVJ-_-4& zpI$8VB_0^M&jo;~<@Y0Tn-eaC1vu3_2z}5!JJ$M^5+?C+5KoGdb&GD->N&F3XiL5F zM%05?=56nj-Zy^P7?f5z`zAAiDtfhP^C% zCWTx{u;6&=2H|xy0O5wX5HOmLh~LxB#1^2Sooy`k|fh)EH*n1n-OYw`J+qGPAdWl3X zJHu*X!}5SzS_b+y0A|R-_y&Fx)OwoUECd60`6?cikI7!irBCX zhg?>M*4G^r8i`s~?N+HHQMcX?tcjvcGS60wCAOX$n@z@J!4;bT93OvP)$x>PG1>bs zo|ltv<%)zWxxM$qmRsIp}in#O!5LZF9Yi?Dr2zR5uYKx&P||*h|W~1e4o) z5%ZqnY7AmC?Gx38FPAOLNBEfq|3#Yu9hzRfw?M-aHRy9EfA z=}`y5RK4R3i1#86C=Ro4sa2L@ddm6(>b6PMfoTKa2r1 z@`C7^%Tia-qo+-5>9+cxv#*dfy>)abwAB<8+Mri2;Vvj4<{+2-+1l*<4ku>lMr_(Z zE4N8|^^1q$+mXfI$e#TAX`Q{9*wWNwi{ys`kR!^>h=Ph z@-v_%_zMO~t%!L;`xoL5KZ^8mrX4Ss06nEjQ6%a)JOB-Uu)-DoCzkY^W48K}AD^41 zZ_<)O;7dh6e-ip!ZW0KkEXcPg8_YP^3L$%*w!(r-&KOQ+U{EgnE;cvcnLJmTgkWAj zIaC{LC2BzQf2v6QUNMmN@qNm(I=Ue~<<`^CA(O6nnqbMVY7;;sCZk~(F}$_S8Gios zp``(!+BanjSO?`8oA$J^zq^d*4M*9L!@=0lI`9Lk@1i3BdH}`E?(KnojOm-_bCb?5 z;?H^RBR8co7Z<7ufYd*rU0;Y=q_BZ^PR&Yw+f2_CfBT}J6$8|3fpa}nN6el#npT7O zJ>h|Sb8-cf4se;L4|V@udLL9*fL{?J@I+eePzdI1@CgVKJOTlGE^`ktm8g0TnyJs8 zOYUvHNnF?p8jC@*aDBy}KXKeYKI3UK5olLy z`p{z^dmr^(>>OzDMO~T(1e>4{aPfyZ1*jWU{xxnJuwh`=DSe$RRQ2{5md#tnhR% zUbiY1Gi3CgB97A#+;qTp7y~x9?VNhCmyDp}-Iq8fjhpJlav`?JF3rooha(SBI-~q= zpJ_7GG*$C%CF%52^-O%tA&9(?p6+*?512x)8%=$uxpM*l6@i6D+`QFQ*6Q5ebFH{q zM!rVyOzGWPA3xw3==N(koNG9f*R}MDtqA7eBnkGq%yC%r0I)E^Ehe=Rlg*%(c8^)v zskUXnb_qYnP^M0-5B-NuXMGq7cVK! zXH}5hin*3&kLasM%b|I^;eUMy!NjYKAjz_l5yP#4u|0@H;NiTk}`oV-DP-4 z_;nj%$d8n6?c^JX(@aH-v@Ak1_cbrnU1F0EY0=s52S4}?)`T2a#lrm^W4_ADn6-n1 z?WKC%wgyr^q~-Wr>I=Wz*FYn&5C@L*=c?&@PuU6EpM=~4CSo!l>OH~$F}PYZIBJ&} z-uhsZhVggbx=k^;`x+#BZhn6YFdcE+)}Q^3_O=8Rl2U(lmFrxn>Y}-vS@25GkF1?z z*1;3fE~g<4Z~^2I$(YWetoPgEoXkz{@0&~0ARkz_3o2Cu70X@r{^17)&q@I*z5G~`I;_RN2! zt!m>Jfu;3qIius=IK?B~jch{UDBC>yI^I}@$fOGy*&(T%y*ZZI?J!(*boLzy zqZ&OEX@M~7L!fp<{u6+G%4(sgrL?}xU&fJ{u&wO?V;FAb!z`1cq4TzszluV3;yZ z1V1-F%s~|RYj$l7pzc5F33(>Ph?9!$cj{B|K?3Hl7*Aye zBb<6<5`jc}s5MJDcLXk~{_QEWE$FAuDTsLuK#PCQk+&f#x7W^8K`3`BMQOCYMhe4t z{r2SC{ziV)?^j$U#vbl_*_)ImL)Jm~35}=oS^J(pLA2ad2^v)#mdG>Qn7Z&js}yXi zLiGgWjM?XTejMOisg=Zu^Ir<*#&B~%u|BhzE7!JZGvhR1cGv=j%rUZKC+3UT;^`&P zE`wXfl*Nvo<-$*;u?;gZrR%1Twtk z##4@4cltpE^<>r>4?^cd{JuU~?ySi(`Mp$p|D5CYmu$^HJ3yOKSCdvTj9p8eO03j9!TTqw~`&J} zd-a1~QH39vSl?|C&*?h8zC4l{k2I1Pk0g_ral4p%YL@vcB6M&dJ!%hb|A%Kj=vN_e zcriBGtr}&`LrUCvcu*T#&N;{q7D22hcH^Pf?J$vK4&$WU=vfIp-Sels4XX90YW!<7 z$=GaGO|~kxn?>`VoxY=i+C}71vl1lT>n&J^Xp$A$JnRz)w+ZNe;2RUy-Ehc|PbsIE z2hsWFs{HF_MB6^i32ka@n@s1Ip&U)&{Lw9Zs@?|6IVU-=G5iq57SmGvqc*=RmTL#-A>W1Tgx8uWuv)1xRgntotWqWamhB?+{^Z1A1T+YY#s!nX284|5cF7l&e;o?A&>G*2?LXs z8p{=jHIPZBnRQykj@Ddd`pqZOe#{hOw{JL(5{BMg)g>5js`iZiQPHMDkSw}#_2ARO z!paZP^i)u7YJnVk!a(~nfP>sa(guUIll4a4faHA|SDCr`$?YJw-6AyU) z;SwQHa{=NfHT#4@#W5AcR)&5(Hh)wJ0A*^mCK*pb_Fx8ozMk`p5twl%7wf^8Pd9(< zWKJxR#q`sX)^uO3U+*295f>6CA6B($f=D3QdZ|uP@(i6SxJ;a6Dh`3-N1ZxV-3LKG zSs>!EM!TYu>TlTZ&p;fF>%^`5Q5gL@Hd4j`kYoYUw=sWe|8(oILOmu>KaeID_oTrA-^SXRHkRwqhAPAH40VCxlyzAY6+NR8lqJoU9qDWtZ1 zl&|gL8sw6_w)(XuFKF~<94;)@;V$%-7$RTJ0^)8ZW#>Z?BZfxVn>U10Iy|em)N|9N zp0(6;gH8<|&Y-^2cusS+SIW7UFo_KCa|k^9Xb<zV}%^PfrKTz5aN|s#wxPT&Eq>O&`vq)`#|m*CKJZ;JYai@ zte42;K6>EFVEX`3?0jvJXT>kRy_fPkBcZ=AYZ6IYg;|jCSWUi>y@0}nrYwl zUXrM%WG@Y@=bWNk?tX88w&X$962ToI6M|kkQ9DhTnIUW21rkLk8+EAe`ZdN{2gYEH zFc+)}UNIpkma$eNufZ+5(7)KUZ0QrncDv^&+7`doGiZAJLstICOay}<2p#gxzlmin z|0R?AuCL=p>bt(^Df{PF+R#4Ag4wC`ZkdR%tiTVyM-0eKSEtj?PD zd)mEENxT)0zcZZP)MVU7xFkefy$H!#2|9YOoSd0dqYG+@Os`zeoVZPt1S(cdtU7%C zXMJ1vOk!EEx5q!H_qxLjkyCpMLHJOGoW^P};wPOeU}W zW73{ZU(l$yQ5vM5>^52pWf0yg+QYi?(knRCU30v8?6z={FIaP+EWw{RzkGRbB`K^y zSkEjBt=NM!wDA52#V@?t-FmqpJYJF|5#>J}dU<~Qlh9Jgv2@DoarAMa(|i!k5OR&` z@qPUEPtJYs^2F-<;T2HZD&1D5v~1PL%%u)c7IkZ{Noac?_d@Gn-;c)y$+Dg~#aW{C z&Yth|mIrN9iyAcKNJ--eT#KW-6#Bg4jMOLsFF`0p-$Z}eYt3_m%9UUL7O)%atT;J& zD8i9#@q-b^$y0@|gA1-5XNoRp?w8w3<*VxW9Hs<_#NTI zUYsD#sXZ2iX!j^}(h2v(+0IpV7wd&&EYn`e_3jjOa@soyzWilhS#5V*8f&7VopC95 z;tucn`oZJbt~2LL<{H~?(_y|*^`y5?mW`}q36!LQ;v%Etd@g`+)JO2h&e*BtAYmuWvQYkr2SI{fj z=PwnpROOu_LhJ4GH=1*^&*y}k2t;YVUX<Dj+7>$hE!l=VvOXCRHxAF zxL%LVM=Mk-kE!oWRiAY)Jo0YoB3gduiMK4pkgTlZNL7&?nDN(qEI>_EUL(2 z&%-WixA;)^JsWr&b;#}reqXjqrD5Q%HF_zaCN+clW+1iTg1E3YLnl`j&?HfSYbUp` zaGpGj%JqE-6?Gt1zw%I_SKhO%bshsFXP~pWe1+qXgmykTrllxSVf_v^f|gdF?ZcEe z5S8E;3f!x{J{_M`h3h*=t-B|%7FWG~MDv`N31zGFb1VNi4IOb>=) zvEbjx7`Z`y1*|0vwsGbNvOY(bPpg$HvA|+n8SXv1bk>@nsVJX&2JU#jpFJFYt4`b9 z)D!;oY37O+MKtx4^_&aB^xKtk6+%A%sgag;`jzeK+IhR?y^4V>mPBYNGTH0qx^m zD!Wr<#RssyLN?c8`R=QnBR!visqklWWh zV!wS1#;7sq2M+=s;a`RF^U|jt2i&)9<@(>N2xdcgpRt|}Xg@#Q9}ejV=fV(JRGc2K zk}E`eg^f>spX!m5$n_OzvLIdUo(dyoTFe*?t%^YIVbFjCTE&J9{8R3Iwg%uH{|A{b z^4zCBio175|I>V(bV_VE@|q)O_f~pgxM8}B-chNPpw=M-zro9U)@qXRa^vxLaPrkD zZbf}&-wKG0zrrZr?4>btM$aLE^VMRy+0}d2Fe+;t1QT7Op^ETCxx>i{9%W9ggv4N#9DdS1=b6 z&`Vi)+zK(xcQSZ81o^ba-AaWDFKrRqiVkLXH>&VJC0$6C3}hWI4D zt$6;c7pu$(yX)zicVla|=YX_cF&JOy?h7}LahVagUhc`nY6g!JZfj8lr0-E_(_35< z#_Vh`KjHn{5t~ssVESC6yj+YGkf%?WFm~1zjMkWm}Pe>xDSYW-UXBhh(4pMHhPKYj0?ZQ^p#2vs|c(;pncu*J>C@pN3%m) zfbyLcg-9OGBcbs7C6j&|9BA2MYC*O2dq3Lt=Bmj5BJDk+n(WqfVHE)Z5fu>y0TB_U zs+1_bDZNOQE+W#4v;d)q2&hy+Kzgqspp*ci1VKT12}KB@NKZ&Y4-f+9VXb%XZy(>Y z_uAuIe==aC&gYr)Zr62RH)i2hk(pJ*)VdWh2rtp}R8d56kho%5JWL@FW1vfv?Hi&l zv*6$04hF1tFEPtMFEUwkBxB998e!g){X`^NqYrYidg|kTLA%@iJL_Ac0^)~LTZ@UN zvFkw*+evAu9nTn>anq+Kywa{bf1~gkxI*9>Qh?G z%=;fGnR*SQN{do~EEUG_vFiaU?gE}SAKKWx%|;&S&u#uRQC2N7y3sIK{_XZf}Q2@O9gEDI(% zBxbNN8F{Mcj1WlEN4MuE--A3Y;KH@#CDn6Au500t*phWn5~yN6J#VAXn=1iw?pa&7 z)=MjnrC=K0&0)`C|0$g#AI;K&v85-DoT1y|nSxmkdkaI;;>j*x! z8RKgE0_>-NnN`rEG?2d05;Vk0UEP4@jIUX<`{O0SOe&HQGg_+_XMu=rTCh4k9dbCv zE;nSe>!zzPw=$gxfcqQ$+z8MmdbVkN@{nhcfAmOen8u6hhZQV`h^=;MMt13!!C9JJ z-DX9;F%YFS#_cZmE>JrGA%U=4H8P={{5BrZ~bjB2F z8*mj36PXc)V^7V1-~B`KNOi7Y%U{*4`A(CtKC%rvE$LPkBrq>kmkD)pg;O_~e1-$j z00$gkcMmlXv*Yk)v7nls`ei^TV;4jlG-YhzBZ%x+0UN_s3p@JPD4Mm=lCiQcf>pXwL|3kbHy8TK z#!6F>q^$&z;}BGR?467VQs6{}UA3zWCt^%DHtX(qx;~d1-+Q=B189k!X?W#(NnoD{ zFA$eXXK;pMra|6m1H{`6q}BCc)KyvM*PogXC**}GO)oyw@7eEao!+`qzT_#4JQ!+O zY0NBnrG)@h_;QLGWD94qCMC^bsh#9f&KulfZsgaid)C8xIe$Tt7d&NZ1YYX1*r6Tv zg|6~~Q>MK9757;;!<5W8J>BJ``uKyV0EwJrt6)*NokL+j04A>N-egW&hEcHYbQ7dP z=w2DC;d~#4)P6M#Cx;Za$sNNwveTT+Ocjt-9F2=-! ztu_-5FBHiA!kF>S(qgh#Rw7QEI&=MX3sRwl@=b7x-n(4KF#zPfl$`EL(XIoAU+wiC zBtP`L#jFVY-ZdrlBg+9UGr05kt>9GRjj-My_(9>(p|O?2&zv}%>=Upt3V9NqihLNu zDf1F(gCn)tgNX0EDK;EBI*r(AEtTGf%#;|eZcNwn46uJxQ6@XcwKBNslCZ&D8KZAg zEqup6n0Nb4tqg>uuCNI%wp=YBPcecLzvf{j;tdvL+%k*Qv-==2oqk*JR~Zsk&6|0a z(#h$2qFM*15Hh&fl!o4E5}TLg^ficmC$nz%@P5w#*Hq01ti!D`!{TS(UKm0~NQOwh zWooANpv>hkeZ+y%Vk>-d@tP%PmCH?1%}T&ldUqJ>WsOnXz?W#wh?i5n8zyy9}RP@k??3cB<+%D z$Lv#npMo7o0vob3zg@Cmi`YB-G-CL(isQA=ZMP-HMIz5VlKU|K?auK&{f#}s!~Ct< z^TcbfjUElJC0m}4Pfr>mp6N6x1od|A`sH`DP%VC;n5A0=ZEfevA3Dd$S2tr9k`&IC0V&8KHI-=LTeH6#%4O?Pe^o!jv>z3->zRW5P#HkVh()uY=xH~cOUea?#=cCMvduC}~d zpOuN;8$ZC8g7zMEm@CB(re+3@AX&Gi^sGH8YI;b~^s+^dU!S5D> z!w;5<#-8GTtw&Ovd+o}ZqZbM<5hQ&vS1G$IO);OE`PeuI`af3nOQJ24uXZy&YqZUB zjNO+J;~lfbZuy6*QSgm%dx2tR@G^-n%sPgijB)t;M+=~i_r6E%p3_X2F?bq9IkIed z`s6x+uf#7?qyNH+EIDEiEe@QBMd_CzbwQ%4#JQs8iv9Y!wu8WeB|w-_Nu&OCrqz({ z>PgRxw^IS)R)92s+veB4HpbzR3S;zT&q3qt5%F#0Ji!f!o;JUA97(#CuRoYB4+i`= z;>~&xXFceoIl@=F2UP8qoWi#0zLY$LDe>zQDOkGD==9AqjTkURB)XvG>_SmkF}u+h zWHVJUQ4D4h?&S?8>#k;By@h!hO~%dx#sJ9K=#KZ=~^|`r7_Kzv3U?^Z$Hk>Ez4Kne;v7 z%{MLZEc*P<-BTY=d0*X5bhx6e826 zY7?x?VKpUwq`}zuju|k<60_yHVR~_IVLicFuBp3cH6>wOHjrELy!?rirw?JLT(kSc zKZEQ_o2n4#SVHxM0Vyvh?{(kQsd^o^8}dps%4dAR&l~1;%<=;plDNU1(a4YOTG9(==o{OFq=wZ)5%=%&fMP%oQ+CLSjn=<_kWC<{8y)X{YZq zQ!onI!sc(60Qd6`AN1cmr27M(uH8iXWc+CzSfp(uNstG&K7R*g`)h6RkRMlblUEp_ z>q9uul0C3*vPuz#?5y4g?|f?E_c{E2wK`PZf+le8smouBL$s(Yb{o|$K_cERO^)ST zwM^7HaVPR8c|uUpe|bWqXXG7@jYwum(sg0v>c!6VhgGCcDyPryvNBwg4R}h^^uQe8 zMPGU{+b89g0EcCXD>O`A=oman-l6D7q;?I>;#;4ys`jNXy(KL^Ja(@C&BFfiM7rYf z>T*B{$??|I!0LY03b&Q*_LywGXlcp0FjlMl{`XM54SW68P$W-G!bjTk#oa%NoVb{O ze5O1N>w}G@tc@MC(*lJg7cXQ6@A^8|Q2?amdIzn~B~-zE4hVf|KB_R%U{>q=$2~& zf!?1)WXuuoj~*=$yYv%KTN91Zm5?amFV=0huF6?g23`fHq%9>0LF^s}tCbz8-Tne5 z%9=DSy6gcci*1JpvTNKf%eG=p*swI;;I`FcK-$LZV!1cA>|zLF_|*&He{t>p=PP^s zEMNVJ5JbWOC;cZ-ISqpY^ZH_`iJH-@i8`!Thy6M(vR1tN*{f zz7ih!Y+>(fDGdK=oBgXx)uJXWpG~+K9Qst|-(KJFh3mS>k}*Bh|FPr#|6Zz@o2=J$ z!SP6iGR}W@ee&2d=ZiHsR2JX-PlxeeU8Upqy2mq|FP7?@zHY?y@2>BXiI zsdAh=^HF*_#u&z~Nm|1?{DBy|H?O5)@1=obR5nem&GmELKqN7F%_sp8N}B9?-k>#^4!-jF-^@-4c*Bd%i@?zA#kE1D%-|zREMW43 zCxTe5%)3q}Xfs^RwA29-GJZ1Y$d%P9TR!L^vC%WHysLIPP^2SPiwq-vkrPJ-$&tT4;U#XrV`xd8+NHk;e2~^h>F|zQ$nMbJyY`0k^82 zRCimg$bNHlkK;Z%3;vwd^7?p{ZKMQ(18BBr=y4jq2?$XcYKx|658il`4>+qkrm;6! z9Ut3o4OeZf6lI~G7{da3SB>pD?wjyV3w*QmYo}DZ7IQ95ZBu`wt?O{g0<3qHzUZLRTgm+&_C6r_jQPJxLG?YxEbmf z)bE8|Mg#LMfvK#*l;f}>C@?d&?iO1iRKND4T)<#!N<4_Tcet5QFvrg9?BA@yCHHKl zJej6;0v=@4mDGg7bNm8^!QwW|$1FqIN)5_yy7UD6#>k01HEGbM3eIecV2m3Yv%<+S z5qBvhs{6BvcL34$tu=+6dRLq`XP_#uI?e~u1v01`x<%F<+c>$zvCBdUyc));RfRgK zV{7j5Q2(vvCs)Py7v2FPEMkcfjz+OpUPwJZ1*>ShZ`dA_cBQVYK_Iaf7tg0dXqg@K z$I9lDr4QnRb2tDbDUM`*z1KZ2g~8JEc<3bF`%((;gzOudW2-7+YG*$=kf zhb+E8bF5^2qQQ#Ih&g|^mm;fh2I-oLxm|R4QW@}re`Uj5N6NewE!)KWCinv1gAl5q zL%#+CsAad+@3N~2n!L3)4n1r0%t%ubCkiN>0W-1yT3Ii(o4*`$`HiRXmvw!{{Gg@@ z*NQj-w~|UHRNpRqiy_z}r$m@ERQ%0js(uiQi6XNMP?9``EBIQ{%l6+@{m8RoYyL(+ zfVK7cf+dG`QE=loR0y|*n`z*1%fgle^Yb7bZ?-@SL#RxCMi7tglKw!*zw{tCHGp`i z^4I4xf1JLMD1o(Sy^G_TP(CrK@-a^RbCb?(urc@^rrGQg=s3iQmZ-oBsg2qU8t2-u-LY}degK( z3tIEY(E_paX`$PA{98YmcoPWuBgGsMTSSaqc264er?8ZsuCTON^|M2-J8^PWh%&eQ zFv5XL@^G<<@i|UudlkRNAP)8e)CU_=ynEO1Rqm1ALTx`2^-s4m?R{nwcg0Tlp`r`$ z5TxIx&QSj%!G*1opvtm9BBf;{l2;exIVyeiu6uEYB~?{F z72t^C-=IsW_Oz&vSUwu7YGsXT^6# zk>ysgnSr)wINm4KW6^g_v7($Cr2@&FwPHNk5G|hpRRH~Y`u;SS*Uuw?kb1ZG^Qk}Y z`&l921S=r}`4+mEi>2;NCnb0kILhq5h0WxLu)qv1TQ009mu(R+ko+N;5q$2Au!h#L zIXrk&9Xd*9t>N~x>Xwdrh9nb2hgk*@f&dE3f^69Lwe=mi6@5NcK*RN7FVLkBtG@Sv zwD+xO%vkV~XJ6+>`^K%+9EDsm*KUzIX2W*#qT#X!mD&i@IC00tEPsigRv0ZaDzolu z;aB;DqCB^a2mLZqMV(~p8gX~^MY*We-f>X~0WrE`Aw=rBB*9c6wu#75xHIM!lk~2A z?vpo*#ON)}O?ag%CSqsh^S6H z;f#uPPu|hJj^t9;Pxk;S`V@c3RJ{&+Ecw1eJ$NSsWMf9Sb*bF7!q z{<~R@wm^;ZbhA=3h&9QsKS@jdlVIj@?)n|p{nV{#Yr`*O7Jrv{-K_+o9&nhXbLa3%6va@^xP+2LE)0CQAczgB?B$tS*oemOF zIh4M^E6ndY#$!68u5=#B_2Ai3yp*x9KHcqaE;xAB0@|%vG$+>+7=_X5gFa*SDX_G{ zFPYBR&jml>J%kH8x#Iv+aa6@mF!_ZZbf}`g$SLxBUy~sB#LBr=lhX*BKZI{PlA?WI zA_F@_e9&E~+nR%2c1x)?%K1LP4Bv;o%W=ioG+>_;mjecUL$#v%-QRjUzMcoWRxdLo ze%{hofa-ob1^3sNCQpJEWlGFMxD7@R#)}?Bho&L}Qz?6mn|(ETtCM?a4+#hM4I=gV zpO6?DttM@pUC3#~}R2Q|&qwkt+03lYuftdp!^4qC^iK za_(*FjMox_JqlM?IhBXk7VdebuUUfI9{0`zPOKVL{!~KFJ!}8lDo>3g-|33#4=F~X zo@oR-@RWBfz96yZrDodlxt#`J&W;m*A!Aj47H&wp)ZiQ}ZaLOo(remzsJbBFptA^0 ziUwH{X%}*-u>?W=aVDTd)zD?6&yYcURlmMi2~Vc^VN_vyY4<8Yo7oMlo82ch>MWL3 zq!!4zve77SQ9~|OUFc$QSKX|bsqQqlCMVk76d6D< zUHC--j=_l^2{!(X+x%yliz9D! z-2L@6M8rw=S$x9F+s<{arwgD&4)ra!M)VmjFBo8nh}lrE{o zq(@zlaGews+2Wju@R>9*D0^y@>9GGPJvfN77OYxJ^TaYkvhD4cTYUa<;&FqOkM!&D zqXYZ~lA)~rOrQ1`E|2>;7z)*Fr#3SwMQkO=2GWK#su)|osz1xN`)0iFIW)X*_PR`_ zL!{BGZU&(hvbejvh{JRa)ZUw~*5P~!xWYAr1wFa`2GL~mtom+(REF6}Z7a|B7g_gM zeqQd&x^VByO1M`%V6sWk{;_=5m?{uh`m38m=fNY+wXC;>_)JH%pbhmx1>^>rKG!DL zn+)4tHWIqjnN6Be?i|i%Xmr&MJZ&Mn_G^Jt%6rmQV{yMDsRZ@%y-_gAC%A@xC?`)6JZY)pSX)Gmjzk*6E4r2pV4TyH}fKmS0UUB={wsg&M#dVnq-x!ln;I z-Fqh;ZI9ESD6Zu5Q(KQm0}paku;WG8k`8S4A^=y-J!_+(L!FLpcsBc7?ra&$x|p-v zdZIDD_@i9J;r)t=C=QkBSaCPObE!4HISux6r?s!x=(v%G2Z5|o>t(;m^$N|@)a6~n z+CHAb-_tgS5_5e)9Who5>FEy@WgCo})?fC7ApAC2)rhiGctHqqK&vaMzAd9^TIR*_ zZO;HL-)WVN zPc=M+$mXv(@Ho5g{u!}iJQ%i5pm+GG+4i1V)9_0++_u}uFZ(fv)bep=$x}Flo*+#z zu^BG*q&f@a*HhJ)8Wai39AFg)cWce4xY!QPI693s3IT``tJqIsQ3w+(%Aj)oQIK3k z8{=Jj)$WF8)9eIU8o;s9U~lQ92)BjD`mm-Hn`P8&V6K`}zCG(n<;@m;w&MC?Oc@bZ zZOr%9;B1t4n#WQ?QivqXJfEzgrzK$Ou*=uzkXW&V*p3Ib9;@u_`TB69w3KI=#)CSv zh>3I$NecypH-3f*ELH7q!^nJj_)7!lQem^CWqUM)w^Kf&FK;wYXP0|CMbz?Z;$4iN zlkFrM6R*L=VUoc#df0W{Im{63Pb)HKV=>A-&LmK zYl46^E}g>Jl+N{LGz@5$X0ip6xy2)J_LVj3KuBU$+!-573@5&jU_yyOejrPIg$)NI+fS!i9Pt@ zwW2=w;fZCMv_sUVeH}Go$+ZXWx<14`zF!-aB`@JGR_LY7p)8gTaHd+@&UD@{AIA7_ zatTFjAd5C&LrEGdLt|YJm*(Su zrg3Gl+p~s-!~EXjoMnq5I##%TG9f znBXX2)Xbfs6=#rUl)+FMztqbkty^>sxJlg98%xPYL7Om{9lw$5HQ1?i6Mdj8F-hrX z)bZ;+=kHaNB5o7UScVC*w&H)-IDfIDliIlCn{0_c~ z`VJn(20%lvi+x_M@E@mnN>lujNxQ*1;-FIFMKWFe%DOR$%LTzD{23(kCH}KnK_7(Z zgvUM|1onvKObM&Ors?g?S zy`p{2G#Lo{$Sk_z4@!+(&2}gB2A}1?ckrg_+hpQ4EtibH!Q-Z_$`VUS46%sgV<|KC zF4)hMQAbY4%SxwIF+&?VGPA$URhHp{I1GfS5+>_cHv#P%4S>jc;O?{ww^LCM3vR9L zkJL!~1R*x5lsE6wKlI=FEO>up`ek40lE_LTok%Bd@~4d~6)bSd$6ye*BT-E`QNZXd z_8Y~DBLbU`zNrMs;Rn=ToA!#1?(~AD)iC}#6NB4zC1?ZP1w)Qm(lpcOnZrDvhGB}s zPLG;|sz$c3kxTo(uHDC9E@CS-{0}VvpyX41!RAl!AWrxcBfEG)zwFVFFu(=HXCU$M zDmbyV&=U?9iqU|k>~KI`rUfnIa?gEM@2o67@Vkz9UI9(sj45~)%>}Wz8Tjy-;rhfk zVuEXxCD)mQxc5I9+x;A{78!r!^ouZV$JPMlc4f&0g29hPnE}!->Wl{bt6iz~R*GQo zVBdE=?Bk4Id?{j+`PPX1R5QGaNc@=kgGcnN^eLK3&$Lo&Dk-g@ToapnoPiW|XQq)d zVW7sz`1OH(sfxpP-f=+Mmlue>ED`09bwG(_e>SkzTKq9|p{%O1A@3(c6K&T4b)>VL zMSB~Q%=!D1f%koXs>;0v{Z;C!52b2g;*u3)8UuvuN9pMm!XaT1UX$_}u2~2RbFaZL z?rt;qfwx>)f`M&y?Ubbe4DD5kqQ!f1i)t_Mxn}2SXG9d3B)pvotNlFJ5v!3<2%Db+ z1d^J8C@MKlpFIEl4q z!w$O_2|M+&M>aiD4%lkdL`?pu=vBY8;l<}g<&B80b==btzsI4|7O|b>J0Z8TE#8sd zaClCkev^(k8aUV2K=|5}7xogfBIacR4=_aTkFBQAeY1d_uWvWFfPz0C4`A={E<(A2 zbdB3jKjI47{kHbxU$Q}J^6;T&t;HSk&R|-R_25s8OhC{iAuQeUAU57R1UbKEU#`D9> z$l&7F=t&JHVNMz zJj+)zQjY(2)<*4Se(QUL4uo5g@!`~~4w%o>Y3z-QqJLsbf0WdKf8Ut_Ro2NDntyY* z6AaEE!zx0<(S?TVO~pY!Hum20XROGBuE$*tL0Gq`kP|%+UakTpqk5^qNV%W`5%&Cn z56%-)eopo2uiCF3`j%WMCeL;->OpsyeKP&OBE#XWX_jjQ!&gJ}mOw3hTV)&>jAZ;_ zAKU2HpX}#ZsGcO4V~F?l0To$@C6Mkpf4-$4X z)li|dwBC-3oL{Z#AL@(SSxB~u43DpNC~jjo>Bm!lGMsv|P%Y%tUX#KhAbwVn+^%&| zQCi$-(oKMQpQ=qVp1ByZltIe3#l`q&n}(E`jh(ah)bhpBFdVl^j#)x#_Y4A8e)?hZGFx;(3jsd-zR52v-3OdXtE=pCzw$S+NS`N zO;*_568u+0O@1eeG4$~!8DK9n;!4zf(;hmNTlIcb+`B&nbRn!gxhP|Wa4zt|@4Ugw z?f#JU*wg~uWaDe>*x%0TPKeH`X~JA50A-c~Y#=5Rcbzn;&mAxnCvTA(Vl9*Fl4e>{ zW*$a%u2T~d`}Mig;MMSAGZT>VetP~x_)J<=N&fb5RZxq>LvjOqF{;$VUwS=>DBOeL z`bT1uO7El4%NUGkg96zLkj0GRS%zRJO0}(qD$-uZivvU2?X8`vnZ2Fyl8|m(;GXkl zBef)GG|x`4<^jGUi$k@JG136&4EW%)68O9g;`Fbc8xaxbg(KiQe3x)2S-M?1X%ihGm)ZN z;)2~OG34bDw>bQ219;{gvQxou_FQU1ps?9}V~+*N{;YP~z%w&I>JE>xH$2<4zCB2h zb{idjtHq^tO=7#9iD`Ho-(nDUZR@wY+oeH2^Jo0w{y8{+1ZMhCSAf}3zyBl!5`J2b z688BVtZ!nu)6ThKZAK(S()fexpJ~_Miz&9pi1%X0@Sj0${`=QP;SL903{pfDO~bs) zz09poW*OK;ecsr=Q!q0nU)yP*`)@E(|V$ zu`96&WpoiSAFmhk?VJUW&KJlrmN=jy*Rx!9K1ux|PSrToT74AJ``OJnOdWRZAcfki z+I~b~DiEB(QTZ1d(em^LyM%N6v=2TW)pH~!?*o9?E0ecEE|wI2Fb90zn`n?_a5K-B1|6ZwF>(ef5 z@WFxTvB?wtkyMawq1wr1MtZ+8UlJuqyvlyIVvBw_&}GV)QQaQuW5qHU_fi*C8e}=r z^@f_^mwX&3v%#ea{w#dHJ9&)#(nhi2h}g{{eCOlsh2!oeLiO3*K(fVqaiMI7G^& zJGnPuvropj(WcnQ4t2t-dMB+!xQP74$Yr=N=LushjW|em42ZqSvi=>497vb6#f=#% zQp(}c>2IO3PLnP-8e8qkLL>v-q`a0Fjf+tWxWk-YSXbexg$5Gdu#-1z{u&hbXt+9;R1i0w?Jr!7R^!0(4(5EjE9djgwLlExw{-SFB z={Wu?uGb0BYmx(`3jdQV@z>F~-g{axl&=5tvsOw-w>nPVqKvhxL4Y;LIv7BuybfJ| z4p?LwLFxeuztGNJo&f0XHiRA!{wlLjmcDwK2kjNWTXlEqT(ir2ENV4?X7)Cf_q&Y% zZz5>sIcCD})@`u=_gA4bbu92yIdU~43r%zp#hkQuUSIGe4JaVqAnXRnD}RKl=EE~R zm}fF)FcsV1|Hs^v3`R8ag56WZd%+5;C&R+e zh--c}Kw;Cs#^tVK7RkT@E5cT*xN%o?)%t<1Qg4h3b7>5X5Xfm%l!p`P6#!Zt2QbTA zmP^KI?k^gUZ69aJ;SEur2t?psc?FMBOw+I!9 z5!*tS*rdH9XR{Z3E|nNA?r-~9id`=iGR^M8!1;~KZ(B4}gY9hFy4XxdB?5k(xD!aJ z;cjc<3*2wI?YSgety6Q+s^}byBHu{Uuw9qUqEq7_uNN9W+lyvuBS*-^UfPcWCIdBq zfeE?>y?q-9TzS&RHrlX$*}=_u8tmlN6}uE8WKV`vGM>XN+qH9uMWTA8*Ax3Gxd5Pk zOrexxMWQ(YRXI&KMclre9EJvBb~dknMd&?o>JBro5%0?tKK>&hx~_HluL2W%ldv9O zSMoH+dB$VtzAhL5N9v)@3oQ$eaaTEI-9s%rmm1mh47=0%{~1r1P88K}mTQ>G}UO(uXJ!O=z0sg3bf5W@w2aKe&iA6nRa6c;<$C&m^%3b=m9sE5_aE=kG_J*3;08z$N|f9QvRkT^@cbQBlvG7d!f-LbBBU@0cg08$eU zRii%CZ%*AfDjS!x;8v(P!-Dl%rF9zpnwVZqZUS4yn!frAgL&(iY3d@Xw`;VtP$Poe zuaG|cF4u8`@kc!#m;kv0_1zX%C~hD$_HqciE|>J>F=+tIjqtOvOPx7N!9O{`yasl| z@-Z}?)gE)LV@VU^ns-_Dg~?LySY)Sx4GUypC~s#JyvmA2xFq{y%+ZRS)z78E3Hvf3 z&&8hiiXC_D<-w5%C6@F$IrB=?)^% z$l6Qk#c_k1wK6QcD2sQqXUP$mt4dj^wgDpkgMMkodaEOFb|2KIbnf6_)2GBpCg($@ zk!G5Vr$?@10UH+b<)uZi6jNzgDS7u}n~GP`6Er|C<@N8ObNlL?<-k$w38nbqjFFZu z?B?DACWvpN?K9=* zz7zAX2=cPgYyZM={SAA3#N;<_OgS0gt0*dle?5I=NK%*d7vk-cQG8F|6JkA zZ0)6$uy556Ky_RX;4Yax(Q4DxVC|3I%`EZ?)`7}rm~ptQ=Z<>>0TRwbHzYupuD;6u za&ngCPSY0zjZTfab!;YO^`32e_4`TyR9M+=Jwa}K66)`h6$N+UkP9+D#=%)j=U*0v1Mwsgqh=ey?n(R!Iq)gZi0X$G z0WHlwCQJrMorxM3&bmn;`dT@KlO0uU-rIpRtS)pfcKR)4ve$7A`Zo_ivU{w){EXS? zdYi0F1)l9?yaK4tu*znT4$|D36M_m`#{k&I1yVmth5x$KMABl(+3|VmvFOHkK+gIE z1il|Mfz3#$Y;D-~9)*$e@fHOhyn`RCKBlrynUVX{2OYI6Jw+z1YBp+=4c~h;R-YRN zhF3hkrIq>8xFmR*)1!l<)*m1M<*~mRXtC2hp=h@l-rGtgL1>-CDn+x6Ce!HLd}}iK zYA6>C(=@2}c(gLXYi$;7XL3B~wszXYiSNAuogVFDdSbz&>^|5RmS&yD5EsCq``{;p zz{c8V*nl{%;C|5LyLVMyq$7Lo&udrf(9!JkULEMVS5-$_8MVeg0jy%TUtdbM79h?^ zv=lH5U_Y@nj$XE`AKdXeR9iXBGztO61<`b;*E6i93f~JsNUNR3w#Pso0c^MB#>#xD zHWHXrwWzKC#JxAQ*5#2T>;snO*D=j2MaC{<@)cPK{@Z*Yp5`y=Q>YjD3h3qMhe?ZP z*u?Xv;Vx+WJvB&@XyS(DUGAFfoprt}^|>OmUka`RqZCcXRAEy&lCNA~`?ae;(j(=c zHrlTqO$(*g#>TJ;&2T+JEE5)oXPxjyS*tp_~%Ts2f&3&2zcl^z%T85UiKA$zS&M4 zyuF(q9x3+XQVECTmdcEzV;CRIJr5R)%#_GJFUthFeesenJHT#&DKGWr0b&9Fm)Hlr};=w#`sBw{HCkn4)Wd#lBRuyiF>#3yLjQKOiDV^mh$m)4*dtv=I=?)bA1M*F{W+U_9Yy} zWPseGQBQA3*@JNKgfo5uK=F1+>hiq;GQ^Y`3zVImm7EZ*`&W~tz~#y~!p<)6g6{`% z<(Dl>UL74y7dYESUMeqwiQ76eXA?fVoSk>#=ebWUI9j7aot6mS4(*P(g<4C zrrNeke-)k%an(K!jt6hqT=~k_LnIEy03FrwaDb_2II

2B|kKtl4lsg2|fB`)ysQZw@87T@vK7w(v)S8{yy6|_cXHwTswP3GB8lG zKJ>@-aH$fe0UWHthBLl00jtbY1*p^ovyQvqL4`%Rd(nups&lO!*8mwPo1T^zUqs$ z6eGqV^3s&Y*f!kEEh&V`Kdh%M@OSuJZrFuM2eE5UDc>d}8gnV)*9*TTu93D;{moxS zsEPFrjbd(7H}g+Dbp&qJjBSo0we$HWR1E79jEnYb)_@0f8G()7D$X?=&J_n$>)~ZF z?Pi}T6tCcTn~oSYv`_z@;c}~z0fAh=Ol=rC{NbfVL({XRk{lGk1>8+!09eXPVLHPe zgjHkarrN_u1{?rBDJXEsycF}tUJXWH72kMNzmp1WU5sDzA`xUHZWi?arc*gO{r>rq_Fnv#HOE}wl%T@IAcfJ507`O*Sbn7(T4PdqpdT{CwF_1e4B-Wn z>87WF6tYNR1sGj0USke_Q9j@0ZMj=o)agkQ)n)y1T>DlZA`oQufByc_U4w#W_e+E2 zhMw)zeQhfMWH+X6-jhLetY>50(cps{vBUn8LBiPkmwVELO{y}lq8hz#GJbXXY+*Lw zG;qjvhyV!Z6Aos&wi={OZ58!M(w!u{D2&RxBbF;!1t+o9=3%<7C4j8&g*{_4s9yu1 zn_qMBtaZ@M<+h=+l>~yI-sCay{LqeU=9KiKMl0WUw&#!B>i_ZYgC78foAKQ3wg~P2 zU5TC&De+muY8~sI9bnNn^odC4>!K0 zwO!U=^ukXk1)%OaFzj1g4*I~jD6`uV zsCPYB)(nt}6lqSX-@LrP=`fyKB7HDGb+|i`V_n}x8eJnh{9Ib!_nrs3@_rsp2ZKhC zhfbxuy`-fa3DXsU#`=>~upLwpn6&mJSC;FZN7*tYTdRppyo@i|Qm-p~cglj?Y|kQ9 zu}wrP5$fiQh$Vr;&lGB~H32$|OpYfss5ndwafzM!wsY;hKIV+4HPi1(-h5X=^_=dm zGQ+Q5DN;wrJ*1AZ=KaJx;w(q)w4;)&oZB?_bRa2I`o&c28ojpZM-}M0AAT{-H4Xwb zh(Dm-=sqWk+1Ekd4M}_3r7GF?IXV2Np|Qnmw6N>)9dZ6)4!OhRNsEU$iiyI?E?j=Q z3J;gkJ)L*wRhXZTELZ_ue20>!z3aFII4pCOUjZQcLiQ6%kn5TT#PM04UcrW5ox6hB zNBg0Chg@q7mt;%-udrR8$4P=a^`!n^ub3Y}sr~UOFLgQ%jSsVqTOOzGjat?SaLC%X zFnHi#Aiq5I<8yttJX~GO{Gt;;_mI@8uLP@)-v_I5>NBd>@?s*k>TdDNtr^@ z3Mm&!&sK_`C}=v8F6IHe)dV#*e2+{5SibX(o}tiinx?`}Tb{MsYk{7Fzil@HVw(?F z+os9KEEu2=i)R|M!Tex7>Imi>&N1w1rOJ}h`V6aNeu>&!_Q@1?GHQrsx+>9iB`WsGLCF;J^*73dtOoGV{4sDp}~$v1dQaZt2ajb z8&x|lyG;>zfZ}xMzf+tpX#u9uya1%eY)l{PW|sp|okSEf>THiHTgy&EaX>lhM<3Mle&GEE;O8R|`N~6mXgF zfzK(ERiHE5gc0$4$21Tyzc=VcMiy?CmZkAoQJ)(|~ff2EZO&5gb0t!!iNll%!U3EJmz8xzQms8~uSzGf`CM&1H&5;JWV7*CcqswO2OrmhYM@8U z$IiBa_Ur+lV2$tKsT;o8DGdyBnKRBS;t|d#mUXawGyFpF=1t!}E4+U<{(3h_!#LNUatVu({m|d<=s?F28k+8a+hja2U5k|G>FZiimi%l9wpoE zjCZV>qdo}*S7f+hBx6-kx1tr3W@W}*OOqU^g)4Gn#;mx!Ew?$LLI5IJl{g3}Uy=YJ zLfBF%XzHv9D{w2$$UJ}ZxOUp7N=i+&*1r@g0lU5RhK|TvwBj`ItR0AEnD5uq_ySZ- zgLuPOF-;Ia`}1?d&~jHODP6bip1c#yHj=zX|8nXLn;b?__HbUG>;<6XF19z^K9iPd zPK)LLs_5UG%5G6%e5rYVWZjFM&TW6nYjr^Kxh;tCE+bGSwBV~?iwDIvXeCO(TniKP zThY682@3^-b1uaH?D+Z+NFdNE%vP+uPZBn}1I#ntfoA))HI+U(=ICtG2MoKcew@(R zwFU}OGS;OWvTP4refy_17x-b?+uvxpA{r|Ys~tEwM*-!Rz5XwEUvT#umjx&lYNlk~ zzL|%vHOfXDY-lL8kMWsqYeKUe%xXMxtZXau=vbQ%!N0bFDk3Sg)HK=wgJ8n%&K4qs z3=l<#ZB$n(7425#+>iZO0CP~+MPvkT4erNvdZ#&$71q!9We5NVLOIq@Qp81pTM=wt z3mIMA8wzeYkA`aD?08E^X0f~+l0H>)AjhZwhrO?iisQ@nZJgjv2o525Ah=7Akl?}H z-QC?Cf;$8c?$)@wyL)hVdzJspy>ISZnYY&c`o8p{o2IBbb?ThG_fNLgJ096N$3rfD zASF7EbX2b>*h|D{sx8lpdzKz}ezy|VTSq-)EzYA(&;#+m4r0(3a_9YUgmKnJcP z_b%EF5f4FXg5Qc>gyU^WKet+Nh38C50i+7IiiI8eEfdLLteRz`Y>h8~Kj~!##;m=r z=R|k74wq;gl1}`x9xzeepXSDi0=Sug)80XF^~8bcyE7t-{5Pm3X2uF_W`!caV3CcI zQ$Xo1@LeaV0_26}Br%AdGY99(5vN?q=8ttwJdbUPQiPvO&HJ4`riWNQzRPdE2p#Ie zrD%3MW}A@|D&G9?jykIkT24cb7P5Eo9h>Q{5{<`R>5dH?y`Bcj);}i)|CB2LZ(m`7 z0?uooQ}SH!f6TY7zri1^y*8Uax-@T(I%ND|6+fmdAIRDnN+tm4O2NGuuj5gYaeN&= z3UQ2`-7d@F5AHI=W7fjjp{GQCFFwxO<+K4+tns;O{IMJP>?1-Jxc-ygXm4~)f9{0$dj%jO z-Af~w5S6^t`4UM`NjeI+-YjbCwSryrJTtF7o_7+{tK4oa2Y_m%W_5a|i{aIovT6&- z%4n_WTt>^|HcK@cvgJOT?V`y8-F|*{RRli!!klb_Oh+yy{M)W2rHkzWLgko`+CQQ- zA2iKBEh*+p6fEfpslw=f#xcz>&MF5mpE{@9LH~`ZhOrfablkU7&-z2sYFn=KmSWcX zo1C&;PA3=pqU*wlfO=~Aq_}C!lu8wz{}0k_5up!jdT5dVJ1&Q8(Bzp4DOUA0X{({Nrg^W~fQ zHFr^L+&Gid*|+n@@xl5hbWP_{5U~eYvZP2cu<`d03co>^rZ8Gzm8oBXmK0Ap2m~4) zh>y}G!T!^F``^7?$HD@%@CdC%;P?L#(DsoNYA?Q!|3{Y(#HDJda-OxEa`58`*HZc4 zxCyvk9E3n-DhWCiueDx(o5BK%z(|OzY3=^abmHF!!dsvU=I`*#O~D^? z55S@ncW^YlE%`wD@OjXFq1q_1vAO_SvGS5K9}2jzei8s^XX?lAF(v!Y566Gbx&eb4 zd4T=$5AGfRR(kUB3Tpp1iwrIE5R9HYyFNDC{XE<+1VMjku|+WeKq+RGeir+`8_)l^ z1NJ-rIkQ!_-go~5Ry_?t-<+&a0(4Y*fX-BTbho3#`FK>Fdl%4?3y8eGXS?GK#8FSR zN%$v*fglU2+8Yun2LR#WPR*2bEa3M)02CS11{o6P0{`!@{f|Fc`~Fe#Yg^;|?}hw) zz%@ga3KD zP$~l^8gF2YZ2s3r+W+IB;jyej^RMeb|KpwWZhwOVJfglGDg^)ABMChGajPJ9N(lX* z|Kq>@?f;)n|9R^CS2O1SPpAKCRQ}Uv|9?9DFQ?P{FYEo8UV|I_FJdevkp!F=*Ew*& zY7zb22Pk|F0Af7Mkq>}>)gSW^;phE-t-}BNLMb5n$8$$^m3kKQKW=#ITJ(&6avq0+ zVPV+IJ*jwrxb^-(8Wo5kNGKp_wY2Edx%e}UaavsYD0hZd;tTozmDAY&MX~#-{%o3q z+&!*;?J&8;?LfXo4xD}Mp>-GX+}GXV2xHdiIm05&@kPAxC(| z-{)3zE2LjgcpM-$qfia`Lo?0(41IvnF}{_H`5}2t)s*V06On;qe~xn!;pJxO z;~xtUa^wVn71?k7xE~sCCARmG7o#OVgSSa6;KBgoy5P^C{_R$^hhTDGw|Ql7@Fw{G zSufFw|I$IPJQ5FT^}YT`;~a|t@>G`DuXz6)6#Cd>-(3{H4z{*D9&s((%b9QjYGdGv zlj9ZKzs0Jq*0@2U2H9Rl>gBeJP080~NIZa`0+?ki)Vf7&54m|tFx*Kq zzuX+R^-HVOFEI+QUS5i2``+hj`?&9WT0a3Cv>)Vs3%0w-M%`DczM_jamnfI67jVd2 zI?n){N$&RYGCq+0$ivAH0@Za2hcXD5We?3-EbaVJ!@s!iE!_$cPc39=gMhvoFacHBe&T7=O$m%4Lp)+#+EoK8J|bZ_ z3B_eiWEa6mf+V2=)kcf`fMJ_{pYk6L`9Li9;CvesYRmv2 zc{{R72MDYHWq_UE6MD9*E_=Pg@^S$e6zV(LhE`bm_wR)kp#1vdaE-r;B zyj;D~^LaiHumKrK0Zc?n{__<$?ZqQ$wc`jd&8X#P(FgMCDy{NW=sny^RiJ|((IqE` zlTIa=vMB?Q8aYyi6{)SQDUTr@JZ3*;)`54QobK*}fJasY`Ak$bTfNctE1+&CN5=86 z_(L2qXXOX&j3v&&`Y<&8?hM{)hN?@p13%tSJdy0*pq}z|r9m;+$ey3AzSwzKJU~rH z@ta3y)}K~9CP!+Gr#(g*ymGkTRhR>;u>~de)LWA%mzMin07S5jN$vwob?%;ryma!n zyg7+mJ^D}{Q$>M=WLdCIEs7cNp%kCyFCqej$4qSu?=!TI;8 zxWh;?bHVFE#n6-DIq-xnE*Oqwj1UobCT{TZ|1quWy5)D3&I7ECc0EvAKP?zu>Rs+; z*3EB?{t+_i;$qc4n$?-BJnwJqi;dpkjXg=%*+}=CW>Th}57hCw@yuXpgn!cUe- z(v_8!kvsBeA*hP=hR2+1lmwL?J$Kz-cC_Zz)-QE=|JHsl-RZ(HuXbpY zmdLiU+NjMzJ}}jT1>wr=gY^>bon-6I<18knbZCqE!Srp|8mrKQz4~j{t;(pvIdEs`zPP@pM0@ApaOwPAp z{Uh9#@f>v`tZlwuHdAcsmCNt;J0K*>ichoQ2Q0#R^mSn1ZY)U`MHzm8d+r&6eFkir)s`(mOkmvK5$Y-`@u7J&GeY~u$AP8h zk7XWTP$CNP5C~Ma;OBsQfST$aNl( zr;CBK5=m`y)ShCh)t-n-4|l!4hm^EDGgu4ddg_jpArFbN1PYU_w zb0A>Id>N7~Ip23;Hl7rzTvtZzb|smGsw4`&7AS%HxeSFRQ}1|9(^N-K?s-ti5G+XdIBpIe;RJVFdmRVlk?3 z|96AsOGNR+kE5>khgga@L?E_<#Zo0@;z8jgA#QtPinuQZNhj~-C^C+h8`W^JabWYJ zC9O)45MxpAkS9=TzT^Sq20S)n0S3eCQlJtZi%iHTN+nx-pSj`PdvmN7Qd!n3a)_tB z;PHr30TYHXUyw;;Akz=C!HaOwC`7?ro@L5)-6(x(c{HLMFr&SN*Z#RiXReI*^H(@@ zMy@(Kos5{?{fOA}uS32%-CyMlD_kydrnI+O0oG5+x1EcG&u-+O8hv~vB2F`p&7|PNcSE~mcEPf)CMSBB^c3eq;#@Kvy zT+c$+EsLkv$AUY1+#S+V|A4-QwS`?{G{#-x(Pt^Te4r2}8DFp=i@%36?)7p>T<3ZG z9cA<`Dh8JwO+Si|J4DAT8)NrPF`vTJkWu}X+-`G1`P}2nrRs}?uX%GKFWo`ZEWy#u z%2U~?!U9f_?SkErJP*` zba)YTQF^VS)n{2aiJmUxWl%=LQrWEZ)`LLP8{NMxWuB?m$otLEE(=mGKL}6(TxV=| z(G@qALao$GqT*n?n2&roI4eYAgS?-|t#+^7zO(|o_)3$hJ>yhpO`TLlNkV+nNt{il z3f&!5STEDZS%;&t=93yah%Ch=WQdYJ1fd z{<{7ZnRqd??N#urcO zPRqz?qzh07FLztgb+79>5PW{PEMHBC-KKG5_OR}z!8Y_a%hjXozE#MU40<6QpN8a2F_n>I za3?4-AWi2?%&B0Iw}SG(R@*>JV!Ek_6)3DbocCEDse38uOvTY^o)nhqPIU<~(in#f zTIX5+eF4;A)inw8{oEKRC;5LWs~K(F{)puDHd@Vwnt@y+WR507V9lPrVxF7`Zrr zDbqFJ=k_Fp9idyifM-pS{ercCye{Z~QL6rQzDKc4wJ(yO(Ugv+(z~GQl<)QFty;Y& z`D+`sg!L(`OwcDz>v3y(=Rw4*(S55;Y#BH-yxvg4iCQ8PKj>+Na>bBZ3rx!_l&vg- zLn)m$zeUj+x05641c8^P>r|5t(WWYU@1|q!RYQ%YKyPkSqI)EY;B&no6J!I)WUjE0 zBu=FdtSwTRY#A+gop$->f+Fow&?NWjP=1*{N2s=ty-toW>fJZ6$w!P-w@* zXP_aoXgbqG{&*@{`Y^MS)f6vIBh{HO#))e!NaJ<7% z@j}Wbj0|o>OD#g-l+Tue3?&GJAro|KzQQ&tBLjK&zSYR+{-O7p-SShN{lc%_v`Ow( zT3StTFnSa|)p0_(@{|}R&R3!ocC-G2*&@NuB~~lp(uY6F(&rC7UR{o#FeXfj=6LB; zF-tk;k5eBs)>dYX5fH{m-$tEHK5O<7VF4_c}Sq^UHNk>bV(qeEJQu5N7eYy0KXO2G*xWNEx(bEf{ zAkb5*KMpTkj7&@x+^15#f|3SV*^U|mj~UhM5w zpM3oGX%xyVnp^$$*i3;9)@YUFaZB_gE%hzD;7xPpDIrlmm*atD+SbTo0IS6dct0aN zHaXq|2gS-*p;!w>E&06P*ppuyMO8}XR@2$D%JTO}-8Pu%Z9?_WqXjLaoG&O78Hgnp zoFR6DOBqZiNNzjvxan8}O*V|_%aqPLoLs-ezS{J1MS|{Sx*U5Z4sLJZAUFe&t32gyD53yRg3n zB;U;#oIM;Q_)>LQq|beK{dMSLRc;*PTb6p7i`2$79p|NeL%6`olfuK_+@yED!3$Wd zIDp0|O4P?9-ECRGJxUozAcs>gYyXj?YT?{K+Raddu=s+3}pX`Lyusk%YO*wBmFUKmd+;h%n=8Wc#T*Mbp`2&~1e2?}Y zW~)rnD{TEdIi5Bs%^!}e4;#*+6F(m7(Xl$crqh1GDLve?x@)+P@#Y>`ye6+_Yp@;p zfS&$Ih-)_6AtyNZY@Xfx3hUDcgZCx1t^JQX5UYU&%=`mPxze;bx=K;JXD=J5cqN2} z>t&&&{%yx~OFRi!LyqLP0yQ9q0R#8%;xdlI7x*p&-K)I+u%rPSfB;PA*W+vy1a!cK zW}B!^x|$|_@RKrQm~08$^3A{fwL$9JtkL7&XPHD>X1l{K=4;$=H37*!#QM5a&YveR zp{)d0njF_>CA4=*@BzC!ZnF@;P`_l+n3DCilsrVS%Tc7cQS_D%D zj$~tczq*mK9=Yb*7GEXE0S#?Lt3vp&10uo(q0r6fwYfxc$(jTX46Q$!_SL%;0eg7N zvV}F^+*8Uj?d5|^3Ww7P4dYbF(dlS9W`ZX=Dh$v%{UM2hwKLmUrA-HM3y+;kV1@tn ziP-J+8MSjVnO7o-V+KS-pTDMX+VJ(X?v z4#KLT{MCrRb2;D;vsSd`|QpCw+qkZ!8>U$%u z6wIVU;W8T@q7!ON?0$ys7a;rfjM2{ugGZ67L2^%znB@Do-m(~RI7m2_{qERl&$*3_ zbrtT~(B<0T=Af9NGKknUc&9&EvN#ty8l7%qX`=1*F|pQSPUO9im!5Q?8!@&%ynyaG zJ7P7Eafc&1PknN~wd~)&i!=B@r!f#1^_G?>TVkr-$?1mW77IR$7_54=v8w*Qe<30Z z-434a;5#s(T?jJ)Lq6K#@1hy!z1L?v&ZUOACFLa zrVkN?BZz@@iO*_c@wVE#1K=2>RMe>BJmcQhfju5So@|&0%Tj;^;~2CSoqHwG4rP^n zwl_Kh5KGA5pkyefyMbUXT}K;AzF1Kqn^qtN+fl7rRG~EpOiPD^Dwz3Z`6>Y6XQ5U( zPO)+}lAE{NfT-4}RztTk>V)D-N{BTfMIS4DC4__3=_;^C{U&xk>`kVs6ia7jq+G9; zOlG2(Q+tqbe(#UV5Z$EoSvlH>E^aU0cN1viVIQIs<-EQkBq~=?KbFWI#o^X=w`rH) zR-3CC<(uSpzBynZc{wEKQ!j8-t5l|n&vuH>|FNxd5*_{*zln$7D%>Y8E?%om^`$1s zv~!E~;k9fJ+JsMfuz{Xj&cAtQgYXw(4$Y!YY)b5l*!|pBlvQwmK+g?2%&;-^;;|*C z3VoUT;)g#PKk`$Br3P13qNb$4MZ`3TpUxZoW6V^0Nj2^DF8~Q$Ibu7-J&Qp%5`m7Mg4YVjp>y z1&LD^K4Z``J9<4|3tXolhd0`up3s-=NPS%(kNXnrxUPO}SlRic){yB#%w*9^AS4yS zsk8rs^9bP8z?)TNa^BIwk$v{k%!_z>RIlUNZbaFmPmdhXGa)i4l3Ob`ynZ663F7)y z&1|wsMfz&9)Ic(5t+rPir#Xnm$o46yKw_V0X{#2Aoom_?!eL_jUPHXi$=1ZI3T9eX zfPf1ztD%4?&*)230NbUbchg5+xN5{@Nv1-Z=Yyj>+zjm73seD9URPA+Nfr~Cbibs| zss0+z@|8!Vt>Kfka9yHJ#4!=efqk-ico^XE)!5d2*la>&x!8hjXE>OkqXs#g9n4mb zS?8b{K#hPLEV!>ffqc>zS#|a~t0OQ#LA=f`75xzJ_^Yg@QOrOJC~sY_vtUpISbrrL z6rF@zk$hSDz3T~a>t1j5>PCjx?gM)B3wq3+nDAa5S}%OASRth4V$x35&8qfg-mU~r zmv`~>nn%}UcKEExiC0R@`jMTmp?df0y|GNA@1zrNvQB`G zXNK{=)D;T-6LS?yQ;d0`f)nk|D1lB&{vlJ)X9P3Ssa#Ud4;7{eC8Be`R)RYgxhV*< zB74Y#KwArMWLCsix(M-i#-Rgckd{pMHSVw5ppzKwbT zix65-L*K{J{@H^gS^`Gpz9`mn%#a8yA4PqHuCB$!l7~~d4 zM+2-GaZom=s6*u1)0!LwzWy}7KM;+zw}Wks0VGiPCbOkq(Xt%Kz1NTk*%oDf8Bc)G zi{&0olUdTiPTYJ3t%ujHyvO|Ib8G!4El(#pIjnF?wQ3Q!&8@{dE*|;XIxDUa2IBpq z@B7`lnhYSZc53-piLadlpJ%73^~h(N>D8Pn0Q!7r2^XUp%Uq72- zfX&AU0$4{;i)9qr^1=6F@7;9yND50C?u5K)#F}|jvEjEev&9JLLMT*-OGdH1jYlMQ zFcNC_5Ba>stWo7E_i`myLjgQZ7mz(_2oo$yFm9H9vj_Kq1j?Z-njPaRMPrGHrwdJ+ z-E$*kz_-nKq)yH+uGpWmX3_}cz23#cIb(J|?eBu`N0O^c+ykO-Wxb^^8X%i^)CT5U zZ`a*Q42mN+ClJep6EK^b4t;W0$s5c{T}<27xHZZdy%;2u@FAGGc#w&Tm*JxDnZpf+ zZc$qI%8{eSW^Bm~9p3k2yJM zKGFAkbU?p7$dpubs$@N^4_*Hma8Wf$@!8jlHT?mJ!A!007>A^7k^-^%sJ!jxhc|Ap zStpyPUKIojng%Ym1_mZX9?H&RP{wH6STb-GN~=5z%A@8g{uFf$M1Dvz8Mp$30-jTb z44aDaUi$l!c{<3ZO6ZD|o$sv9LFF!It#F;E_78{Eo0@QikI9JoJ62Aw9!1J+cW7Gz z`XpZKrN`4sYr)YO8miTR>w9!JtP{7%gL~H_sb`z&j1Z=^3@eB(WDQRLrgg8u;jGoK zHOSy?t$zik}%GsWqqV(}Kpqj(5N1>~!Ozbxi+H&C=U-#wvx=D>>ArXbSZ z58|8xIyf+^slxbtpHH?Ly%0GgXl7TSxq;72)LDUC`-vwDk(n%meF|IgDY#BH0q^QA zZU@%Jp&C#A5K-4XgZs9n!ry_?$iJhwo!5QDkD@QL!IlDkYkc$}X0hyV8wyZX`BQ3M zcRhsoRj~ypv*&2_?N+CWPjY}ax_O0IZ|w?MDYTbp-LmzBKj8!N8ZO_qY5B+F$)z_vSP@MJ=!S-moSz#BQb_(|y$Q`IudH zHg>u5qzje*{ieOw`lmOc({~!#-Dgy5drRr*X`llc98b!xsMcZj@-~$3w&Z4aZV!~Q z7f$c|DQwb&I=uRmNO||3c|P`HU>UzW9Ws3A%Z|Ox{l*Na;q?LgG3y`nvXkvOa=qdE zg)BVew@%vV`AP}zw4}(;7NS9j%W+zu zz44tadFC#AMdi8HZ798Zig2|5@#)F|+H+BmsCZ|df8C>G?x`B% zjKZ|ThX<|QWuzO-M3$ctzeKZI;9wv?@xY>~j0?wS8!Vhn%6q$wLzk+yM3N!{5dw-^ z@Q*xNeC>gdtuMBxrKI=DW17#%S!`g2c0|8#lpLAFS#oH*T+Wp8`_*HSRb0zMMdW~|+UCW#aXFPM*}&N=~f(BI%>P^7xX$PF##W{8E8h?6CvpYgg~ro_GO7P@}6 z8V`49u6CV1oa9NdqUs0SU*O_)fa<$q3nSOxINb%?kRe=h>|SOCLzV|2ACIkPOHsJH z-6JNj?9MvfSR!*T37he{p0;$AsD$18peS0&*LD`v;L^$w_KPpU{ z$WS9rgid^w+-{-8V!AxYIGeQ;mEECb-70nc4q13&?ouu&$lftMX> zC?2!^`e8eHno)0C9waHlv{Y}9S_ZL((nN;G;|>05Yh_|dwsV8%yLfj03XC~|u8V?9Nywdu`zLLRuF=4xc2<8*qmPc$?N}%K2PLY^^M!p0d zj8?u($5ZE7NLs9H5O&tb!WUs)nvG>x>CZ{rnO-k#bY*&KrB2^jGu>~vy_$HfEVqaZ zDZDB*SKgJVOa)d^_hKKq)e(@sP=kl8Txq)>nJ}QO$sOb@+m6|?)gU~6GPK_Pxb&WS z2mXFGYt!5LLi9-bTU{jvm#D3br=E#Q15dN_hijDftYQ5lMcdjVU~attP*jEOxEzf~ zXp|7}mcK83xmP}WheQ&Gy%EmhxU7G3bJEgjtr6r{Iv*=-STU&Eo$RCNz#~qM*%ktu z1hrGHQtd;p97l4q0x04Q?i+)cX@7d`#P3nA!CW7$)zg3GM|S&p#EBSc=-t++x5TAJ z-wXb3!feU(K;BR3z2W{6mwh+Y^-jA-f_j6XmgmIq!nFEoX?C{eeS!fAbnO| z1vio(bU4#1H`H(#?eA`o+=!#cyCP-TO8qhmwyuAOHin#qV{lEbx}RqT)i?tWYC??H zR`iCDBhpy$_|Wt|%sK%C!x2e!3zui?B^U|K*@Wh;hHy0h+xospuMW?3CJJX>iA+9? zd6ne%Gpj#emoFLtf!%noq$*xkjRGxBmD+uZ_&_Lw*wlS8zX_+*Y0;b&?LG08cgG=& zU?7-|w8pXDbsLQRzA$;v^k^2efYPQ!m?d?fC(s7jG$eiY9BYatGaFXv3>aAMkf$;k zz^YZ>(4QkE-_w?Z^}9Ddh=i(9}=C+B&}a zW~|r2?T2!WXURwgP$$&u$s^XG8dyhv+w=Z(NL`Wh`(U_dTMcGfmd2AB`%)N|Aw+Tr zdWC~tc=^*Q@hWRFPm=a3OW6N{Qk924@7-L~eC)cp&1U!4GNo5|zYH`m^!L?A5B0V; zdcC0}OWxs7F3fi35cWTp(R$r=bwB)|&q6`aKx4^kebvl)rJ@=F>WsTbPUhlbhs@^v{R3og z+G#1)=tu;7;m08k&PWOGuad;P80tk+Kl!~x^Epn^bs=UGj>}-}Zj4FqdFh-#f9}*V zABDX->9(xBuUJv6HhjjZGdWx$Q;VQ6P#HZ^Aq!37WcO)ty3<3~Z2bH+f!(Ptn1$UG zlte2O6!i)EtcJL~;bgipVwQ|;a-R-<@<}SLI+`f_=Zx7bB5fB3S|RjKx+wC&JX2)0 zGP~Fp8YP(YnP^EMw)fAZ35 z)PLpvV>YKA{_ zRkD}LHK&~U3yz&Jt)9lyFhjkE_>lU3n%8l7Jo*B(z^u2%Z`&Z#U_EkSXn;2;-hCm;Jl!1bZd7UQ@<88ZmVyQl};V3f}$Rq_} zXNd7==j`#9K3t(+{PYcB)4Rb-nY$#Q#y5{g(|=x6H+EXB6krIz%b`|X9Aa-E#p1I_ zLhWLp8D&pdOjRG!mO&2MS(|AH6{uh-i>0a$oA@2`4U{u0I-fazo$1093K4&6|7MD^ z>92!FD0}9O=?NvtZ_+8o7MW>cqX?S}ae(ttb?_bmGeFlWFVtY6dW^5sEYu(g4bm2E z#}8GLbz4}_PZ5%J$X7$ucmMfr%cRqvQ(jqnE(qwiKu#qjBB(Om$dVH1;Lu31^) zny?ZIat=w2;Bt;ahwr_yeK+rHuPN(6*cn}U>u^^4WSs`?`4P5E(7l{1ypR?JT?VcH zYK`qQL=Qyt3I1n}biK;5_N9z(Xo2mnpWwggCta>YV+|fa*HsaK1Q4;`oS)1%uB-L1 zBX&s6&XK!RQ2F@=l(c%NWX{pRS(senWt^8P zF1THsUbTkgaIPSzpEMq!{WRd`8=eX6lTLzsjM@|gilT+;d~1qyJy>{@{WaA#b+flo zkviTV+xZnjA{#%0k-5ganNTJ1r=O^Y>YBczh8eC4ZYMs6K9;7=!BZ$L%R#OYBN%4^ z9tBmn4Gj0?cTr8_!^N6HS0(OX6L0GI zAVfvvI|gA@%!OfgoJzXm!0d@Ik|=MMV%~+iTqwbFoBMIBgNfjDKGttLuM)cW+{Y=2 z&7+P{pZs#D7<(-09aZ%HaoNPYS&mc_0~9>28+rUXr>LuqGT1r+RNBwN(w51bKsR>C z3Qq*O!c2Hyf+qQUsyUT0bSt0t?@R-3${<$c<1?V-J9)N0RX}bp{+n|aK?YaeYg0r1 zr;$)M=ea!n5WMb-z1wPcnoAn(ogb6F7z5JKh9(84Bbw)W`f*+RTh_LfYV{~4kAxQwcy{2mT2Cs)qcFosy6hXI5c&%g11MMNYaIIYPL-_j5_JbP$w#d#OYNPlBRcAbbz3n1TBm{2z z8B@pzS;u{?XT2*q(ArbR-%O+HD+x6?2@+Z%ZPn}b&8qUz(+|;RhQ0I7*-2h0?tLAe z1mcg8!5V}DTXyF0qT#hP{L06xshmxluBJR4Sj3gluT>JoX11VddbL(nz&{I4stBNI zl#tHBDLFKnq?))^yAcMn2QwAI>6hdcG-Mk%t0)zDwy1W_$FTe?>D|J+JbAhop9kNE zIZTl8UsaDF4HPA(m3=Yg1MZ!j4G}wYWZux1uBSNC%bz^Om*|@c0)(A`Q3Uut*r4$; zarI{St(l4S`)p)S_`tpoQYq+;fdVe^wDEgJ;YI-&>=`5BGP=(i71kk&PViD2J=kSnj8*coM}dvJ1ILpho!{P;bTIWKzc9d5n;O}O{KxSTN+Quh$RZB0uH!h|t4AA6gCD>3`Ow-&4KvY%GIQ<&YP$v-O6sdGRIyr9tHI%oa7yJ=t~!tZ$IYW*a!% zvVnwW-r5_HsjH&NXL$~Hs=M3xrhRneYD2ywem=UUk*)6icy*Lay^uJXq?nT5&~9is(Fm0ZliRh0lO2Ck;ehL z3y&j67BZ_GC|06(VyD2~YDbQ249=c?mKZ>gfg|M`6#}?)I4ahTDNH63{yV?2dMPcG zWNt07Q-G6~0a0r83sDBlmZeYn2>`w7Q z4a>IbN_KGspU_EMPB0hAV->2kCF=>K(;*^!Let$IO6{9uZkDieltd6nFQb>QFzTz$ zHtKJXvIt;jp-M`7c`$>Rbh}9|ki-_YcW`@_v^N-F3=jKm@C&|!DNaPl zn+`*-#lJutV1;q z!xd*F$icI>pp4%1EsUA!vCfS9MKa{edL!oG-~=Fo7Us_GhxKJb_ureWcvmtJm5R2x zF=$g#2WJ%afSihdiF4OTt5n8{b+!a_J3%Tax<5lgTo4J3$Cgc!TVGMwf$1Uv^?vF% zfBBp?cOC-ve6z-iMJA{iY7Fo@4W>*>&rZdU!rgow{I>sDZ=eT+ceD(M3t^T~>~C{4)F;jw=zx zORiVS2q(8dlgZS(LOL~0YaM|6^Kh%f3uvk_`sv>Sru-LTf{h zaqWotr^d+dCY}SHN!nK11JuOiWy)jOad4dkp&q<9vdX7&{MKzCLe=9;KR!(81>7rx zqB(Atmz?t}KI%D^8YrS{)tVzT9dKNo>}qNRDnAc@fr|mY^$c|t+$T7>Rod{y1Zu)} z#Z{JP9fL}Rq_d_aBUYta=!OmN3z-v282XEWO!}#=Lv6XqrIt|?2}%-xmryS~4Q6|R z(nE4>MBvg$2Mb?{k>cV9_FGG58pEAQ8?ypNQ^i1}g6ADW$(%jxxScC=YydOZ15>Z5 zIpy^#JyAg&4kqYaaL12HmFtP3>Tp&WvHp16InNpK-Vhn1?zjvc#QZwy27O&$ zwZyRh(6N6TxyJ025shw7x$6B%@%8!E>xivvE$QaG&t3svhoihxx$ZqB2~V=3>tlD5 z@1+gYs8Tx-Xl(sB)ny8(AqY{*F>zPtJPV#bQB{05GKX?M`KDkR_R(&T{DRACa80D; zyEbU_4WqZI=rlgPv)~yK>=q=+Kr{PLabWYaWTCpq^;tv}DJ7I~EM(QNb5RYw<*hhN zd8S(%umvxbYwk|y^{E`P*<_4C10{IROsT|#jF{nBS5V+4S0BESy+)faKN3k_&a&B$ z$fvVL06V;7_BvRd_!$1~xH4t!XfULgK*Go1>qa(;=q{VZqT#~KQYtTFN3d*p1!m2UHdc(Zx8*S0E17lje_??Md{0b!ZMeMwc@hTj$w?=9(mBc9t~P?^M^|EE`->U) z#}1}T3SqVzE$3OIA&?l%e{bs|=et{+5N_g?p*i@d{nV_qjnEMxF3;gU(iZeL!2V`k zNn2_(Pi;g>T$0qD@&+D1&Cx=wf=)$q13{*~VvLWQ2K-a70)eTTMr=rcOWA8M;h43o z!IuBgzusoJ;cMW9)&diSN`2V|juYeDbjeD;Ok_Z4SYLC?0#2ijmtpK*ZvNtM0Y=!h{VJlSTye64h-YbI|cg@;>-y8xdvJAWp%?0 zar`)#E*o8UIrW(?;v~5vP#dL}78Ak9oq)Iih@~`1qo&Nb-FI=PXjd~MhK#}IU$KqP zK2`{;2B*(n{(_qg*m5VaCYip{SBq~ixA%sZvC&HJ5!8?Sal=kQGND3PoPBdU7 zg>o~|_oeeD-w{E&|1_cS2RD!9bdj8fvsBD1hb)l*YOSfffeeV4(-d6z8CwFG(1$44A{gQMFg6=FqbfIN>m%p=sG?g*PEq^LpU%&Twu|viaA&N#t$$XjWRkL z`c&cP0rEOL%^Q;T-_zO1ZW}#&fVA$G;W5|^8Na8+VdyelYGEEproeY!hOOQH3@iV; z%$6KId$3VG!iZq_*npg2AcW{f$UduQ28=VLW^Fc|*uE;nbO+P!1vY7hHxK{dEeOhW z<0&~3L}nQmV{qR@+e=6{{FTAmk;vZj^_h$vO-?RN<=lf_Jc%~0plDsGHk#%zfXte> zY`fUi@C&Cxu{;(CYo(s_GF2n?8%If9Ul9}h1u`L9N{8)xc+FTGYk}Zxkzj!rxJ!{! z&6WAfFc!7gCK2pZj&L=Y>3H`m)^ z$O=SF=Jw`=1|1Q95lMOYp&X1FbA!?pn&;nfhlT7U(*>S6@Wmr7CqB422&b)Np=3>` zV%RK0o=eScVdMhTSWVg{p5yCi#5ijsswX1CFlYU?&*~d_kfBf{RL4S}RIrDCGA!Eh z<)Ew^E3qHbo^^^Mwf$-rz8rkUS;ZF3Ig2Q|gu@bq_)(wA4UUvs%Hti{8l*)fz!KzUJ0LE> z$Wa<*@$5I8A3RAo`O!?SAPiN3(z>=yG+q{pO{VqfuWJq}b&BDRFr4A4C%z(IlZu}F4O2(e1^&=FPE5sEKh{OoMW5G zOwX~@dE(X>h9|J_QdV;it7BT&asLQW!YHlaaEGJCRL>ME?YqO~GAWI>D~Uy-Xq8&N zV8m}han>gRRWiC53cr}-XlhKOmagG#N4c(3LdkSU-KK*Dbywp_*qPhoRPcY}VXcRV zxbp%A7uI@QEDYDJ0$uyOSj(GSbrT7g+sP!qTeD6DZW$b534hp13Z>$+T2k<|Z4tHU zOntZxSiVjzAA?_=RBRoK*JtC~Cc@fZzIbAM^-ZLBLzIwfgXU~d)*As)2rY!os7gm& z$eC1jKHn^z!IB~^$I~6ASuvTLf;K6&{Yh?CxobG(r?i48ni!%_gzP)9PWUngx53wY(R2Pf3x>XhfszBo4%6Q}-?3J&}KU=)%)H6XlEE4K&FlE7tq&B0t~~weHxKdk9^y#(h0a zdF$GA0rr;#(Oh(OiOta5MB<-GYJ+`qA;MIuanGLb?9l_C*>5(uLID)wK}s^E?$Zsw z%UXX=g%)#8mb2%&nO>T2mKnSU_du$jY?)NL+dHu3S!+jPC3*Q}LD@2YgJ6YiS^?dC zup$rMHt{fTaOpY|KH3#K@orQ3g~ZV;W-XB8Q{6&GIO?|LyMF9m4&!{g6*-w3lJl0w zRW&B{`G*3h<<`@0p`T?WS4>4E2u8k+?oqd$0454Y3Mh$?Qga-PAO}yGr*vwerUj$W zY>@|W{nhb|w%tx8d!*8MD6TMaTg&j)CK)mj*H6N_&43^!9ccv?aE3)sm;~CX;ceLa z_71rLr#pOlL$fD!Hc#?+{;i5&rGB?oqDe~vL4a^Ef?2cZd(Q%ZBJ}s&wV4yLJ110J znerF8KZN1Fu8#(JvT3@&&Y8sbhU(~F0KF_2H?8f=Le-2rBfUpb z*X93k>t-C39E-!{CDfN|aM^oAZHabq+V*Prh)RI*Kz+gOU(bC8e?(Py9b7l^&C+Cs zsLh~(lUNow4Sy?`i*camP5g@8tp-wCavTKtYRK~2{r8PK_XF;lWmr^EPvfNw@+8D= zNr!eG7XwD0`~1sF0q$$z1m-+Iu!R1s)$L%~rMdk!y6xpD?0Df3#YqNh@sU&$ZW;A6 zC82>^9zKrD7eNIO{U3>#4e<-H(Lp-bb*=U!gv^&@2Pwp_DBfH(*OX-qcf9p?3A-^t zgf0et>t&}|m7A=mEw@Co^h;mZ%#L>5Ts2rfaX7dSj&RNc?eVg_O&Dl_p;2ooZQ}KRnEJ|~sseRw zYSSs*D4=wgG$JA0ogyvW-QCjNu%){j>F#EOba&UcJolbE-wgkVVc5X4-X{rDWv$6} zu-^%%pF6v>W8*si#bmeG-arh>HeY=_uREv}Q|D2o>&b&NA(CY4{u3}nPE-4338p}K z8zj~FeP_A}hV&yI;WkLb z&-u7%XjQ<%-*p~|S}brt=-LpL^TcvxRm=R*O5mo1*`d@#yYooUE%{^GQSL6$wt`ibIUQQa2sow7IhE zpYH#!zpm?M8CDOD2K^KYQNjxrvAXfCBN%TC&*q+A@yu3A)dGvx6v6o&G6 zD4zQ{^a3fzGWSDa)Iti2HJr!Gje3;nDhdC62b9rp*ETvh;Kl(_y};m01Fk`iB3ZR zb6;oO+mGmr{@2bsh>aYMT#oj4V6VlK8D#O|r6dCY&KJOr_0eN-n%Dyg9hfd3eRYhVEA2op6|w!sTSF&BRK2of<1^ zGSfE=CT|o(=NuV|pyNSP?*7<*dc`2VR<^ct9w_8MCtb{WFM>BEBrmGO%{iVM!XCAR zc&?Kziv-tOcER5g!pOT_Ef~gPzf(l%t!Jy4EN83G(cayun1}hJn)$#|B;DLFV7Xy! zn0l6gdX@!t$MwBmR0+QN)-+Pl!)midxfepz>!3*hjj+9F+sf$W{&}DEBGUj3m|6TV zl9cajR+9QX+!LdvGSQHCy)rUh{rdf`1FdJDhG!i8evUr%AilYihm&S-_66<8xkKUb z?Y`*wFQ@H!QPN>38oS5Yi=-!HU0t@(u~%$2F58LD_9ygrOGk6%-DuGq31VUNzC!?I z#a=cH6Nsc>Gr6t)k#a?JA`;PICYz%Y|3O8;0R4gK`p^V}c$-9KWn))x|7J~gjf1g% zLk4#V8s}iXyfIf;`i_vdPgu)j@{X?Q=U53fmXx|hruRJMapK{u<@e*5A6||an}rw# z`i)4?U#b=|K!uo+G5Ry)Z z%l+pjtlG!VFWe9IFQsrc@OZG_3UWFNMi8DTaK6d+`Bx?RenlR5B+y;S9PI|Y-s~Ru z!z<_R>xIv{YpIYjYtGegJ|%AZ>^Nf+wlRhB1=95QgB)@$>EE=?dcDA!D4k;f5v=-uEP%fx1@5N{XyZ7RSE-*$c< z5Gw+L21}oMz;QoOuesVjw);Hnd{ZkIm%Jd&+4uHx-w(ecfu}Uq&*B-18iL?g%d^wt zWXWw@z)?*+4#fBjS*~dO!lZprDN*vnXCgkod7w*R6RA?d z&N}w&AJZS+a8UKf##ZUM92K^+WH^cFx2zv`7Em&LoKs(7Y+{+NBHv!0e0o3}T|!fN z*`JZyC9)@rJ~2X|Tn@}^q7)bKTw%0ZzPE?AaEc+%cdARk*SUUIvWK2+b~AlmhYgY4 z!0QydJiYavas`02(?;O$e0eYD|FyL>7|I#fv|L86wDs*E_`zu?iuC7g( z@m)v2&x`5UMD(TDw&vREjHOz{pqQBEVnJ7!1eH7uXtg#o?+4d4z2EN+94ib^L|UYL z?Cb2;pKZboSV{-%a#Bf~K@3x}f(#Swk5W|NccHJ?pX9<(4vJ(+2W&TDzdpfa5g1^JP+x-*QVPGsWjXz8GMzW>5K z5WBYyB+H59EG9ejUraxIoM$vZ@~A%KBnr)=pn!2uq-N1iq6!>WHaN#+RAOO3S_^Rf z%skn_VhKwZ81!hjRUF!K5-4tn=6EigTCI}uHAv>^_9rU?-;4l_@uDJp$9OAS+L!Wg z+O+1%!lZ#wC_JI(LaRpE*#0$8ft*!!@E{`6Ih)0vs*+~&tzi~vFS?uxYHkIQZbyZj zfG@24ge~tIw`OFQtfyNP&CtJlDh2=S@N`>LI5pRiP-&)UhB?e>1JT#dT5_&~97GGl zcPd=vSnu3(JZu90VYu;REh8F2E&g!aZ>2TSfZo&1)ONf0`42LH)&=Q7R**nxv)y!o z&u6t?qSQ)0|)|{6Siv}X8q7t>A4W`icRn&u32|#V{N&5{@te3F)1!(HZ_xf9@ zgfTC!xd&=-r#RQ7d>=^hZxfh^t$8qql~w7~F|TlNf^tYGL3$>ZL6D2zbQ8$k0+6k5 z6Roc58ofS$!yJQa>d+PL04b`PZKnij{ZqeM&#%w@WI=T7Ko0deQvQZJ_lcPZA>yrS z{vZilKW^ri@FSfj#~R2G^caxVw?sH@9P}7vs5B`oFlZ*VO~2svWLzG`CDA$j)ub*J zyx|j^YiZ+`z*g8>$O%b*`Lv!%$CY-`xEW{5jlk_|?_i_0XagtfZOm39fP)jl!u@h^ z*M@YyDQNAuSreN!f~Tp^ZZfzbxj8dN#s&Vo*s?QUEmCaf zQWne(mZzN#!eqAx@0x;mG8e^xssvrHcPh&rDfPInj-PUWKf*b zA6B5Z@PW84KCdAHMmu>!V~C;NxdJUvsuJ2D(eA>F@F|&7)~eIfxmP*PZMGD+<2frm zotLxO+95zGfGOsl>;qXWHCWFED}sepA_!Xp6Cfkp<__-UCQ8+K zwe(gtsr74jPf)W?Zp)7XqnSFkzW0rwkm0%t#=0Fw?kci`=&q?fF}1d-U5H#hLkU|A z8k?Nw6;TpYLC4Tkhxx}=Edb95+XRx_Ku}x%}u_Bk6o!F z8XvKi@Vl_mCre*JvT7%s((cN5LzHcBf`%HdN_3($jVM5PJYR{O^ z_B^Vx&VT0Bzhl>M6!{_OgI25bl)DdqC`$G=<~$5B|Mzm!;uX@W** zFkOw*9chwiSSFbZ%@WcQ2Q@y#%cT1l0*f%0qhvoQ)ZUS{iALt(Y-SQD0vY8 zHV&4r(;H5|Th7~X{!Qa78_M!IH3wp^2%qEI3+rk}Q-Zu7>ch>?4-Aa`@knnH*5S`J*2-4nYob z5`505hCDfb?v61=h0;O7@f?hx*#kH(j`B5uGP?{RpRAWbfzmFEkNdN~XTHQ?+$s2X ziwC|_H3{Ci)oVu}no1Bcfa7hm;}aysJK{~9`3IKRGI^_RUm~#+yQPWcM50X)pwk4M z$^U@k6EQVZ#uvG?(NWE?tUmc5N2_$R=W?6n*x{5kXr2FEZ5 z6ZUYTya$h#Hb*D!s8r$H*p*PwB>^@&6}Iyca4x0KQN>iZFU9_B8~T0+$=3USxB zu4a=NZTk8lnw)W|_qyqtNP%5j65dIIZ&wpN`FME)4nZ)qBq{@p#&W$H{Xi#=nQNzT zx~W|DzGSzGdGI;nX@5Xonh@BugvM-dj2Dm{QX8OVM9f7cW_wZy^L54=k51ZqN-=xN zJIFb+7fcfkBiXfn|FWss({VMJnUf8&f^wKGAymqkD=ajGGT$5xuPwL+Q*J?j^=H9r zLrv^z^(|bRDelDjqJx-MXew230|U-?>Uz8@l3gL-_mnc?Q-ko09f_w#17~;^vi*rG zmx^n01pT!rkKIanBay6s4p?ji9ez^blR@aN%@-f}Ofj4M+~;6Ad@!&s1$9Uf=*t2V z=!VD#*-zDuo)Jf3;d2FJfFW`j`7f%RNV?O9M1i52lM02RgTVz{nw$V&P75%A zN?7_W-0aV)7i;d&y|<}youG{$Ah=ngl~`_%Nq0Tx*a#!3S?6vVRk#tBKx53)xrxO5 zlS-lG<;RXU4recG`JZ@SYm50ERS0L)B?3)$IM=eZ=l#yZREzByNTE1sbB}P?P~lyC zpaWc_!w3X-a|2c;jVDduUf3d4Mkj#RCNU003cCzlz_KOmp^Z=oX6( z#C{SvhFvJvBr5VuCz+?LQv{N?vbT;a?Wc5_Vk)Ts0Z)<|vZ z4Np}>mO*E7`=s7LSOnIWm{Q%@t-U+`Huq`~9fu3ox3rL#IXPaLa zk2#F2 z7S4=|gZOsa1KmA8hiaUTJx;}t9l1@V(2ucASuVv4gnhK?j?5Eg0nVAxHl|}jS-!~B zN}G%2GGz^lipPA}6U!bZ=94jtszs9eOGAxH< zzt+~I-SsZPy2bGX*Ev+o%OD!iRsxL2(!^-y*S()kmQ56nI83tG>j*31lvs%IG#MI9 zz7j55GbE%We(E(Reug@9x22|Wy>bvW+2BA1)5pG{aiwU-+eu^oVbpK#w`H|Sf}jJ2 zDD8F&yTDcl&Zwo@l?!vVXozibx(F{9paar)seuWU_StHKqwjLVKeGb%FMXaQq5pG* zRfLe`j55=Ig!5AG^ibBqYcKwSRs7^K9GYv~{rAK0VAcs|5VP>8xi# z6+qBK02S^3VHv&zyxlKK+J>(BTW!H9-uZMf$2d?4Sh>SMuYvBg_3j3E;bxZzPQzg_ z;HsLl1H@wv($f=P3JdqgV`I6-@0!ckl`yV)s$8>C?~*p zXi6=OH-kL4_N)hpzGK56a+EBse)$v&M8e!A7=__6ZU{+|)n!6zk0lX|;SYGJy964j zk>4S_spR1hK+4BjsWOZ=6u_~=u<#FXnc z;{|3_ys=yQ4-UmvsB+Kf)hZaFK0{42=!!>W@dx!^Fpb7W^ICzD}k&$RqHv-{a9*k&xa2f2gEA)`w|dF;Y2}D#>H}8orpkmPto}C9d&q(o`9&Zq9&dff)G4(S$}bv zv`e2&v-62Isv0+S>dPtc0{qTVMR+YV4`>3Mf9I^Z&$?hq!mX9$^+;OqAHbgX>Q+y5 z6M3f9Fl9Xs6AGipvEvCv_A|l+EhzVMndOY&1Tp3~@!BR~-FlIij(lJllXRh~dboq+(E~Rn4 zr)N>uPnGg|}y3b{~~x@^tvtTXGf)Xv!ea@3*c&7Mtg-)-=|`aTLfi(EG538)7X zDMDM~LbNpO>=0Nys%)q8mhiOMdRVtXgTVTqpNww}zm@#b|DI9(6;|i9JB1#oEE_C@ zA)3ttPZiT8j?|)`X#f89hkeI59&LqzDc3diare$|Fl$pV$pQ4_!bms=|E3$+Y@$csD{ zqJvq}0hWq&Ff^LvL8T4;wsR3dBHe(e#4ukC-e)jO{qwoaIs?`v6XNUcZMkLdeauZW zg5U$0+>X38L^&FTlUx{zQJaHRcy!?dFor7l13(rQHhPiFvr|Z}bE#_sANDw$auvS3$3X?hyY< zSivezClUm6OW&e>c`ce`65n!Oglr?>@9|B?JtHIny0Ay$DCtKY-SKW$9VXH)*&|V* z*A?2&;mM-LL5lEtLt_u2!)|3zPO)*{W8jxNZL}9#Xkj>gGA^GvG<6Xa1E_g1u4{zp zg){lnDNg)c8q%Z5EePt&ru;2c;n?$i9rz`j4gJQO{UCpO?t_Hg+IV}AS8CErx>~%}^o=c~n3t6xqNQGUXAi9-b zgC-sGQ2%q=i+;T`lDG>LfpAFqUQjf_Q!}LYP7B2`F|40% z4t~n6end-)_~FbH=yJR|#_JLW2rU(5Cx>hi#V85n!lcFp>2rm_>8$YkMFS_$@0=9Q zbIY)a|7~=|u8l+Y;CsKVEz-1rW<`Ggq{DYDlKG9GIsE9T&b+0p9t~kB{*UIE^2s32 zw~GaKOGYBW4-aOj-3(+Iwj&gR@bg-3PWlCU10=OBQwQk@pv1F` zktn=XmUw|XP?Aj%a}VTt?6*f2o5?1yMhqIFD9)j+^yNMDlDv(Hr{{%N~I%FHa-B_>g;XYbF0q>vVD*-csGXr zdgwQMLT6to59R&A)e|jP5FD+n)K9%T?uf7YQo#>s4**qz>Y;U9C~P7{VnJ3$eqMkg zhSLTKz8R?#$C&l>&Z5ncbDu1DQbIZe3~4ANX6jlhL0+Fb)JYXF;Ghzv4Oym{^tpt3 zR$>`okJLRYq5n>eD&Vh?e;3rK{^?iE1kWmHto^KWu(a(CHJi)a6_Uwi)d1a~_=Mmf zwzkY!hnF!|rWislSjPV{S$-j1?@Mo%MjpMCK)QR6Fvh_0I3>apR=c(>Y# zEm5+@QLC;8*Ut?HN5~`zQq{nS3OpJ#HGPevhH{1@;Y?IvT@-;qNnOYpd&5;x}gHNMZS4Y zz)kI=xDo?Y5j&sbewEqBE~(z&TW%aT&t>Mbe8qB8N(~EgZfZqWKwr|sPU0z6 z=5R+qO28C3F5Mi@+Ve5#3lE9JT69~ySo!$rfp!8X{4s|Au`2F_d7OOd=2q_l74~lA-7cZs z$qmmN2MZU5M#$T)(@Ls{TOpdp@mwR!hFZ zGWHtdA#c)KOKYH3CgXUwg(`cn<^o|Kb~N$~Pcn3ohc;ki-1$7hLZ_b1Ys}#BKyBHs z4d{QG5}4{jkFg^A#={TTd&&fCvvI)fR578)KP#KUGq!Pac(@RhIz}u>jFTNPOyxg| zKiMuHYj{np*v+>$?lrNYBQYIG=n&bgF_#_MPeKAa8|0ofE-xqImZ1K9CpY>MYi!r~ z_$`Twfx9hg=z^j$7Ng z5q)_z>`n%{9r2li8BRK~cBs`FO$Hy|d50F{0FDcmD5 z%@?ly0J^FI%r!jYM;wMLa$cwgJA>T<&7l32I!$e-eQN&8_hbiU`&8=ugyZex{z}Ci zG2K_0xF@Ua*^Ii?dQ@(d>S}5`$WV%7wRR&+4bHu4SUSy~KulMji*v~7N@i^rp0Vl@ zRs-hh`A=B<_xvc)Y?ZD=Qhgv!K40X-{yy7h#t8+QHDXN=5agtG{l^oV9?@G&g#i4@TKHf5GRE8SqD;nQI9!&+ zfC0{?ijePy|65l5UBEW~2FkeXcNbM{$9d~N@M1PV^3T2dY_LnAzPj3K)0tc5|CpnJ zdd6u^?lTG&1jxYpSFmz8E8Q0NFA>!4By4$kj>)`|o2AWW& zFF2F6zYW|^Vu2iZ>M@bKor{~u@_5*TSao&1dviQ%ejFh8@y}Fjr={T- zcY*PYhboWAmaRN)3KWaK#CvYI!Wtuq7nH&CJzU>^89fDirpt`=%er0SBzR zf(LUS=0U(Y@*=LdiVWk6FrRwXawJFiLubreozkxl4V1QYvCI%&9hsLSfNLPluCxP# z^fT|`n(PILXKV{tt+fRM#Mv6hw?zSl@T5{qrSa;^Dp5a56&Bpt`+_fDkB{JO#f+c` zRPwf9HiUekL^wLr22R}u8g428=G%Gl!dxBy@8-@&kMYtTF;x)}_5Nw&(#5Jxqpvu^ zwX*3vDoze^{q2ws9K@P#vvVQFS_D>2$ULQmFTq74hlE>hI{ zqexGOz!?mXp}7bd@uVYM1&M)r^#`1`xVAXvRpRQO$xFC3)PpI<|FOR2>g^h|Ht>YW z|I5TM9=1(oc>F2TEp=aX!!?GwSNbhwrAVTSe=>acPQF{`-fMR>?I&`Ni*g45MFQu| zwAkkHQcR*g*iO0^4j)6s^>fak@j^`5F?WZnJ(;}+NNM|OPh)twoXkgij>q9l9!7i2 zebS)Kj}uJiYSu2FXP^Ih$40xWruFkw5HoW5l1H4CV*b)?C>O;om}OP}AeF1Mc7;+g zoEU~>ol^!pq;<5P%OoryuBid>BWXn)5&u=ZlmW#nJNZ>*#P*2;o9NS$1;66NSGjHN z$ss@PhqqNbga9Rn*zE>=C-@R7Axsa`LAGE1{u>WgODzFTXH)7NopL9KWnx$2%j&5- z=DdK<$}e;V`cGXdKU|5hmW3Ilf@fL0wNCG5|9H62(|aEuope>+qvCMRBgeML_fjP% zwgMf14PEa_L+|VN0h1#ISH-F7?_1fScihqmSMrXUcz1WlwhYiu(TL#I7M>s0t4@IO z=I5A`ww>e&r*fFXeeN3DZq%fMp~#|_ZwtwZBlv6t+Hp8hpLyWHC^t-VPe?=x5<3`c ztxi9TrIKTX%>UqCcF9M3_M?;e>piyyV`-$?0#(TjHtVaGtaR!?giMyyo&~weURe{< zc<^yGBW8c;3nv@pNbg((z>q+~_ddZv=VHZ}U$<}(zgIO8?fw3*g&O^U{SPnIbUApk zhlBu};vnJhR5rox<$7e=wLw=m-8x6Km0D&vaf|gPwLnwh)KmASo;>Xa640O04TZP) zN8Foc7#@yFxNCR_t0%2`krp#8Oh$$ zBHV>!+mW3BI51@R=}VIV{MgE7PGb2#+RZxlpYZ}W<;Oh8`>x1j2OdqMNAD+%Iz!UB zoeFgW1rWW!V>SZ%D={nKBCh))j?kLma%IftZE()FaTV_P?hct42TJEn#}4a}?*IrH zma2kja@}M|^4AVl4WmN`ZzaJT+TQx%K8KLG`#SBC!a;%j zMH>@TdJO9`6Dkc0QT;vT0)01Dw#UfXxDs~ek_q7yfB8Sk{&2gL+M5FEbrE3&+2q=l z&SWey)@l=3g6T+&thzFO_Dk24O7t6@SWT4#K>t;F(3eEe8(VhDwV?*;5Rd!tv*MR} zD;&L*5=9ES$ii9q8p>xHh`+Q0YTgkSh_{RKy{lmILnj9boJOu^YL)vAtnNy=uL)aw zGCghv&?RlTob-sMP4Gm@SK44X-_e&-2V0`^n?InMjy}(l{m}s^(bsxC^n(r2DCNrh zstDx(Jqtp%@Kgfn5Y*G@S0vErzlc6XUUJgjOOF}d0k@M@Z%-rS0%`LV5a%tZgITr|#ixV-^>RJtM`?e; zOsK<+Df@peGskArfkk@diW2Bo4%iXs4Ce9)Z9>_cgMv6;AVYhAH_@ojPpixYH>~bQ zR;SQnZM9U#J4%@(vxf`y@v2mv`$?X&@)1?={B+G@sjHhZ5~8M>q<-~vYbi`deEz6j zD1gUCiMhE(z*)VRLa*3EV|LF4y}`0}##QL3b%ytNS~17%J^C`a*UTHx-nH}tXYOD37+PCq@0aUKs*@OrO1rbNH^b~7BbQd=DY1h&cOLWc z?%&@j1US%30tTw)IT_Z;V;Rh-j+{2$z~_2)&+@sW9=SywRb}I3O|^&i+-dS3Tu6Q@%k7|KGZdV_=_rAIuT3q z3^RdQ+=+jGRqO##&+S=cFb6CcGb5-pU}?WX$>W7le6a6Yvz0r2ql=&v@8r+zX9riq z{_f*dQ?vDQThvV?#(~}!j94Q6T6U{X$LL^X8H)gzh&8A}4RQag&c5qi;81|fzf$Hy)qN2b`P&-M5EO$!}> zcOu+?ES)tPTeIYZjJBjW%B zOAztzNMUm;J9tk5!$cnu<&7RYTauKjZO~F(bEVMer!DTi;WwKH!A`2!h8nK^OXjm` zodE0`wcXI=o{MA2ioPpD-lCUnYAi|?S@uLhT zNqSR2ORL)7MS$h~7|xP;W>c{dlG{Kux*yi8ADF!R@3)sE;2} zNiQ2kcE3I=qmushY!_O9tT^kkK^5!n!*zYA`VLM;tg~#Er^DOys?J!8*Va zeo)bipRF}Il@jx^Ad_c? zg2Jy)%cD)Ws&zR~#{j0_c4)etq>Y1QrVQtey`VjXtU~%6jHu@5D5jE2<;ba5 z0$s?_4%@|@#Hwli_j)z1a)CWKZHr^6tqLjvKWz1_t$1T92o3SHU34yZ31;tS)%Mw9 ziBOai)r}RQ@kxEzGb{C423iOs+wpbrNmc){ zO#QE8jo|kud7?2ruN~^GrNjO+_dxapIQI0pEBxe%Z#F&qrSs)!;RXM8*%lYzzWvHJ zG}cKxeNx?^jdJk#h}gmm#s^)mFr1n{chlF1mI_MCSrR2GHdu7GH(hxpN~u&Ue7ZyT z-;+4v2gp2yOYsyrJ?WWgk4^^`P6Olm%6#DujWyDrOc@^KMAln3p}~4fjt0_+dlGj+ zW-j)cF_U;g4lI}dsr8wRBhCtE66yhu>VaquF7Hp|byMYf{Zsyf=um{$VZ(`Y#NowI zpf#86>-MqfAx>3+_$J`#rF#qG3w+RLkgo@K!D(Uq3|aS>2aoL0u1E3n4|*H3*%>eg z-D#bG+;pE)m?@vjDc-j+)c2EK!E)C4Xe=S|4Ko}G_fH`6$XHir{lJ z<2Q}>B^b->tjHiC$_fX5*h*YDN)b``yD6d(9Ha!H|FQ#L#_szom5wFb~pJL-`u$LZrBc9cI_ zNV$B>=|sAQf?8J#gV~y^C7HhmPV`WQjjKwX4&TjDFlEL~HT=G-hR9VjO(kN^hm5BR z5bw>LxmvRn>6FU#r)@RB8=PM^X0Jq$7fH|vCa!_rye;k?1PtL2OR$(iuY+^iQeXOj`=zQB~qsU7jl zr!{$f*BgZa?}wY7oot_n6Sli&=Ld<`x79l#9l@uQ&))rEWSMUd$s=Pcx0r7TXz2!; zSol0Zpu#FEuH(*kD*54uVd{YSc0Xe)lgpu?!ZW1yENAAY;X%=a-p{&|{R?bEJ2~=6 z_$6|=t4T*8;7hSRR?7~oCrd5s+>d79r#CEB$vrPH=54-xwqlizZs~F;>V3Y@1JB5iIU~!Jf z9KHPwD=NAvo0Gd+vekR*Hq^D&mzEum=%HUG!z~p>qxaY8u95UDXgPq@s~uaPfVne^ zG5cP>)H#2o^W|3i4?RFd#04{-VqLWO8uktlxe31BW9z=71p1m^*{1Uti{-?kRjE#A zn~US3*#o1Vo4N_g)bcy9I=y>~s$BWc#rEyPloBI3@R{{crE3GOLBqU&kIwJ{Y&01g zC;kcz8xqp@DUVF#Sq<_{` z78ZbM(z+lIo+)Z1lz&WeocBh~=CZ)%oCe^$F@pMw3guggZQM4<#d;dP)F{+UxYK$38!!W~WqF&|#M$3hz!w@tEzld-0Q2 zW`O$*nOQ>6or{#t)Y@Q3ZIpY_!=3(kaw^A|WWb%;N?2{eaSZUn1**zUkV*D}Yz;5e zFsuiPweZFv8SiPv5uFY>>yL#vnZ0(yEBl|uGFwB%#a0nm1-mD5_A1A;Ke*xO3@w^r zKdQd0eIRnCHUM@X#08mh*rk)qHVO1e3OqEuDS2Q0Dp-M0BaU_0XAt|};MhpV{ZFIv zbT5xbHij=&{Xz;?Q>Ky34`>^AGgt^}VH_H;z|IIgwjmGSaLY>F$fU{%ybrx7w_^96+z=t@u|-`%AMrPm-ZmP_TGX&5{k zvO&s%bJg}nv?Sm8oGTRLW7r{RK>Ew8;&N~@IsgH}{dY>xsZ5y+_FjMv1LuI4%fdV% z_x04COqe){Q6Kl>kOt!kd8vQSlIv^16lkLrp%ccEr2qGDtLha+)}`8PLk{VN$B=U* zsgNe)hvU>+=>fU5-oIsJED|HUlVmLrVZrAPHZt|HRO`W^dzA%_8*WiAooa|#Ncvs8 z6)0P>V*qHt7}^Le&Au4I6^Z0+aXundOnOMFv z+}`0tKep}_41!xiD)fRM`mk-#YPH!scM^=+?${nc+i%;x3Ph_&cJ;RA^~_-&g07y! zJkvO=wh}5os<@h1b$ZZ<6qsh1@f%&p_9u{|O_)KrWl7)tUFdLbt6*#$4Ll4;G*g4@ z+1hB@|3iM{K{ICYn=0z8sr!R$8J$?9V;@k8sYEPWNys-2R^65+L@j=m^JxgBF9I7(#}3&% zNH21jbSOI5!Gz0lWdkux3j%0c!n-_OFX=Yu_vihsjV~mdbAsPlcTMr#HO4-(IrY5Y zZD}WuEKOXkG@L}LGaP;wn%G>&3P-sk9T~@7P+{l?_mIL?L6AJI56OYGPj3@Z@{NvL z?2#9mWkG_y57hv%=4{x|OQ_6hzS`;B>Jrj?XVg8D`RSIm!mpb4y4V#1$th!kzEa~l zyL+Acgw<;GjpbAS$?*d_Peq_D4e<;0BlSwEAkM^Nf36Vs>n)!vL;wBSf(O-AzKlTr zgDk@YqTT@J>D4cFvQ3?{rr_hf-!VcD40=hx>`{b#hC&CLp$^npieTnrL#hdi_h8MU7mAd=|;~7i@lfrBffB5HHQA@<0qD;jb#Tu4>^**26~1p_;PPy z9`!F#HB%$yU)h6h}5u#3&F8v0kR@L#gSP{!k$Brm&M zFqN6c!=BQs-CQ{Aj!i|B2kszmlS8muS9%LesqCg+9X=jWo9WM^HavHf@$j8Z3#pHP zNjcu(NAMrp_qqwyoJII`d|TNTKl9(!*~CB7 zZRmaGEX8 z@$`FZYRAg2(rRV#3+t{cNOYQQIji;~W8)nQ;c= zi=~%&!GTW6?!9flC;Jjy*otIw4AQu{qsGBzhdrlzuV#D6h>v!3ZlCc&wvy+x$EU^i zUe|=%tlPJiVWW-A-k9uXWNBBY`0oteDoi_@ZX*!^CLlI1C~IbT9iZ;A+svyirmKSa zue;i_9(1I$_LYAgfi%AT7QdnUrCjbEstT)Kxdv37+RTTbQeOkLpmUt*LkNC{;GGEO zj@yfs<}1#J=ZMNW{ex*{y7}a3onkyFF~Xr=)K1f=gj`x`Wg7W+igNMEM<`{RFZpWt zeaNyN3C3u(X_P&UKlN~J>UC#f)utj#729ioQaf$ycEy6HRi_PtWCLhKGOj-%&vSd%I`GtWtlr(|$yDe4Y|a&r-xg!D9wyKZ0xIG6ktM!idpJ ztGl%#PsqIYz1{wX4UjNvkb+eT8)~!lHS@t5xsgPol9i0Hp3fJiHQ#rL{C4n~fchz* zngloFelfJ~$v-4{bi-uYX_UWJ50J+deESuul^|wdJkYlA zR6A`p{rFU_-TB*rw6o*?vGx`~adlg_XhLv;TL>E5B?;~X0tAQP8r(Iw1q<%(?(XjH zZjF1e#%Y|lIp_QD|G&E5edpYIr>d)~3-;bLd#%0Jm}8DPrkO&Eqgc-UReg38sq=Zp zR?^eZ>7HkJO2pWUID8XwirJxm8DD_w^Y70TnR3^h8d;1!YyU2L`dXL?h)uVslFhF1GJ4V+N)mhARIaDs%{M9}JB`0JW%QpZ zg;Xgp_JuNs{jLl+iJ|yLutb&amRH?z(amfyJLJH|bhDKR{b)9%ZYeiEZguA@BDFao zu4AHGR@Lz{x~d0jgwfnVbo+L5t^ggDo@x(G%A=4x z>vJ(eGUtk>2P#3o_xk&a2o05vF}I$blvr@MBHKLMiR4R+KbZgC7P3hHV1Pr8aez>) zWUa!2j}vpM1s#lQYU^{fa$hEcg771g5obKzbTi}f&*EAk9X%%Yz;lZSSXM~zF)T+| zOuFITc@-hRmJA0_5Ww6goh)S5elJpC+fM4;bpN#7)fMt?>=S)em_2bw<-^{E_8s4^ zj}NsbzMUejp5ep25Gw$4oziPoeHWo3a|@@_pl){oOEVg8>GjJvteX5_Aw0?L)ZiG0 zZ-}2MnqHvU61>u+Rl&PieM`64*L&xoe_rc(X8tR7Z=f01Tbz8&W3mI|8P_JRW|;7C5t#33HJCMn+s^d_W_!aRxwM#c9f zpYIGa%oZudd@qzoSk-Hnvw%Nw%~W%)xj?ByrWGDmJ5*H2i_*fs41q{Q{|n2N4=N9)_dT1 zb?=UQzcCgrl%&!?_ZYH%@~+EW>wJi6`Otm8N->M_3%6?GSrfTe~i7~E$d9Itbzl#D~~rneIFGOUeg;xpx5q#GJL^> zChA{=+MJ%nV`&XKNSPrF>UGU29M`;hOL43o({yJMSd404iBZGs`|E07x33A?N}Ee; z{qa|?GbVK`ZrV(Q({uRE+Gnm*uCaYPvP-bgj=#aj)Hp5LL_F#y7PD`e9yu~>zLwei z33awcMngsvTP8%jz|SM4`@)4vV9CAmJ4HTn_ta1HE3o@R5Al%NsehIIlJp)gDxULb ztfKcq<4Bc6dupwQtpzY&f2MZq?DSnhUr3#` zJa3`;&!j-ob5s@9IOE1%tKe^3rYltyuys}&9)Cq)IxSKCGTJ?s_+`AYBOyRdc-R@G zhvPWJWQ)RJNa9gQ=(5uxo!{^hP0&@!c)mg0Y_HMcey;Z5omHT6js*+r#3M2SYLQjX zjin9&=mKe+zj!ZwOPyjtN$x@eO0^=K92KGheaFsYw-14QGBUWBJFarRa8O`4yQ}jz zQVdZ@IiD-Nt z;DBOZgL8mkI>HoX1MP-iRtoxUlfbXtVC^BE&X;P5oABvJngUwCMJ9>|K&i+*Yjx&1 zl&Z1Wv>}0&-b39lh0n7qw4-o<|}QxLUoO~SNIox;^A!5Oo_oAsq| z5!CcAd$V(t?s?z?egDcrA8GA zx{G1!eAnZ74;qm6RU zDJY)pZd2ULk$D=z)0h=dJRsT171!PRxpfTq#+k|OViL+F@tRggvz;Mj=_si|iWDIqmmyaJ-mat|T1Fh4c#ePAHt+$JH5CtHL%EBp4@+1@Soma=usI$^< zYY`7D`}972?CG(C&tHCn5kP!=4|T56rd#`#5a))IaNIVPyLOh8JSQ+VI5q?2N=_*^ zSG4?f*g%Ii;fXTw_SbNN5~@3w-oWp&{w>QsHd?n!B* z%4R_mVol}qa5cX+Rq9G?lu733vC!||$&&qhNYl~a3K8WG?ign!e~eC+LGW%o-)Crg zaxoo_=yvHe9tyu8jU;{VHbi$NjiY?aC`u{Q zmK1Htl0M%Qz!IC=1B`t6nEmx_+*`a&ra$biV{VB&6cwj)2duxjEI%+a)5E9t7g-2Tu4~W>w-bGs!+}uC4IFav&_gi=YDYznQ&- z7tt_2@3ks8#w2bdx&9s(bF_U{_d%!&df!^J0wK)7W3oo3eqm*7eig;QJLhp@^$@RP zjA?G^I$^sA8>xnRqWEpCP7kh7-4IvU_uajuc205L-FC!j&*uJv zQ1*xHcIQ>yM;7q%OZ8?Zt}rVoweGN^)V}a&?|zWt@wvEihA`zzCHLKqZOFJ`g}$O! z8czqG8I*5%5epwBkVK&|Dy`{fZ3J!w_1+r_og(bv;q3G`ph>av%Uo$vOpvQZlcX5=$_}yJg4!(wztEqEI&d1| zuNjkK&os8P!?=zKCMHNOw)&rtBIGgd;-07iM#-~CEO`7E$q^^enHBImi(NCb4?-cI zEhU#pTl<(MPIg-IHx?^fT_CmT?#E4wTU=VvM(FG~dL9mmon?gO2n`N*#&s5v_3dsQ z`m1yb6vb-G{lm^z$pN@y+;M~KQ7p94b5EiAKvyQ4c7b4Xjs1JM3J3j*%K8;|=B}5` zy^IRL0tzcjtjxDI=a??8LO1FN_*uW{x8mJ!fUG4N?(kk zn%ckVPHt-PZsACs<5I~3U9kFi?asP5rP-X%u_u<^jVJQZSbC88X5OYT7Cf?u4yL^$ z9ICZkLt55*$XhpV6HMgEdTgBm0`%R5jCZSCp$ov|gw=2u&3;DMr9nN1lIShJdN3?<;}FnX;Lvo|hs-m=Y9ZvAj< zmZ9Udcg2b)?a~wKphekN52`ubq*r-Y;O2P(eXXmZwa+pau!q3mIey^;QJjnPS=Ig_ zo1Ki2`aaTU>~f7i^U^)w{SXK4Zo<4Q#FdP%YM5n7ovk!V-Ac;Bf!DKppP%smipnyKIYE#lGP_I56|vK;>E-SM|Aq%jppJygnp@G zt6`L=kWWde<@0s-uBnfy924xst~P$Hu66g9ng}erxceO5?(Qyx?ZISJfIjTh zxxRWj;aK3&ihegI*|zJE*Nqk7!2HnK(QuSJb?MgA3p}G&k;3OrNl(;^*iMowfrF9& zn-%i<3l#^>q^*9tL}1x_SjjDHV|9PCr7W-Q2C8J`nqMA(CAHka{WRBD&t$w(#M^`c z#E13las9g^3F4Zi0+;QO45EQ^vRbH)nM9`W7uIcGdA;JM~|q&K`ap@ z{_@fqXQ`6YAyf~b&2-GwP!R#a`Jd_5QWr7tT*#Zp&Nt(Asa8XI49%B8gOrR!HAF5X z@i_f3Rc!e%T!i;U*oBM-fQx5XO?|St(9`2af4cr;Rqa`iJIC)J1MQf8B4?8Ama^D@ zgjXD2Xks0yhi&WpXbFgk0<-uv#t+M{m^ekmaohk`BrE&*U056M@k>O)!H-XmaMuqnu64pU30{_lHzu>sOWF43| z6?CjO)z>{}_1Ijl9|PJEOu>rUcbD?frCKeY7ipD_r}-?Cc^|04i1EJb;DH4YV9j5o zytu{nWESZTUyX5r=2vk*g~z~+O6xaD6d&o{fSfn*@b-hS83<0dG(Vpp<+U)iJ$$2-Ou(_~gn8?& zs1)sJao9qM>`@ue1v$8-An;f091&>ZrRmpN$WBgLHd2DP9*$asB~$=9&9Q!xas*_w z2YRh4A$5pdd;Kq}G`rz=x?>tG=6+_Kb!OFShwN3&8l5`*@w8EBzsvhVwYLT%34v!g zP@QnGc?YSliz|MtzeTy~EQ;@29Ir}{3>Uw$^bcPLG-&qc{p$>{-$U0w#vM<`glh1G z`2Uv|0IJRGOwg^N_fKk^bfH8v<8$_Qtv8|Y!8PtlZfATPj;l}%mMs0hm@5va3R5vS zB<=V>ziBtCsQQurtWEdpdecBmZ``F+(T^4y^UF*#I@RpxbpW_6?G@_`VTGNy|MpTF!DwyibTtq%u7mOjr39N=rqoo; zf3yDBrZVY0Rb(*jw8hhT{&^!a4KoBEoBko{(_FR7Ea~`Q8|9j{$8orB1^sV?peF() znVwb{l;SoAIo(rh!oCS4EZV|*cu9D_-v0daoyh$3F?{QhAx1d8w&pcAiSWjT(&$Z( z@6Cp+ym?0XHdg8KTg!TVQc)I54xAe3aP#l`LML$HlEl1S5ur8e6gd@O>8HH28;S9s z1==Oz$|kZbdjtuY1*xTyCi*p7?mvQxaK)1^b=!y|C6hx?~P#7ap93Ih(cq3n6lp$B%qUT~cWr zwCgpLCD||e%>hEpfr%dc@RNk!La<=F{zr{q- zl$29)T-K|h#>ITk;>8$cx2b65=}~z@iHR(uP_EKqmDHkpg%AEzLc`1l7Q9Mh?{0)k;9>b4WW(RW4Qr=-;DI&F_pU!d1#H50BG&i) z=yIWs%F$)TQ}RLO;`8k$?!3nE93f%(qNy9aQZlK{3wCh_uuG%U8R8@O7+lPJ0&~Lp z=NWS-k&_r4*lKv*%ph3>W3O^*3`p4dW`hhv*2bu(tYjUCCM~rGji5d4!!Ml&$C#!L zSJrru$2;FS)-aGQ?KoRB`{g*Dl&WM(wiFm!!63y?L9Ca#&-jk4-gc6+MQ>DEc~<|T z;BeQBTrF)oUF4(2imJS~izFUf@aCY!WNJe$o4RTVhr7bg&fptB%4pWQ=N-SsE?yaH5b*mzY*B_2=_S!n{LY)m4a={ezxspq8K|i zrn^aocYB)^Fi!2|%3eTlnLxJ@lxxO&2Ag;|CtTbPZQzTyVUH`m%zlC5{YjIs}lgHg9oHf{ed_521C>Oie5E_hPa41sLPDG;UCM z)!gCO*UpY@&pdoZ4qJA?pfjOk{^QS;AXpgefu=lCSq7}M!1 z=k@)`7<($hmZ(_TvW(Ma7bNP|^h^#y3iYR(CG8@k>Jo3DS6A94$s+D~0#BEMH|{X+m_??c6CdqTcB&0hhNE%@WIY*H+UbTmWDlMP?@trffE&WPqhaeY}kJSR72D$qwhbwyJW+!2=KMWgoJx!`M8;R5Ke`?M>UGi6k4T_ii70M=izL!CrL{7$Rs0^ULG> z&qZa;dQj-vP25wkDQMV&=&z&KH69*@na=Mk*J>$7MiM`X^4zlM2*$IZMd#>zC76c? z{fV{SsF5kZ`;i4jnNKAVCt3O@K~?+kS^|r2q4hg0*r!a{$ zDm=-cTal_zqpobx@Ik8s?Wr8`82Arggg5<-*KkiOcl?P_2DJ}V$%B)YiHxgo!ls`R zhz@MD%VuX!QBJd6_HOP^knZsC$Nju;PT*^wGW)ta=vI@Tl=LW_`cMsOt7I?QFwQzI zI=p=DQYj>MC6%)fU0$bKgYuOrST>F!Tm2N#E~vfwOd77v>9hseS)tI?Ek@@pO3?PZ zPNcW276c}MsD^BPyHV`iDCra-gLg}Bm*vU>HFKJ<=p-{Z+~wOKY&Ubbx?miXqAF`P*o0dpUZcXO5_ zDx&&E)aT!CPJIVQ^T$&Z_sGCnXwH_A`8^E>;Rnfx%c+irt-5+PKzz*edQi@93aDSXI@QhS3D6t4>v{{jjXva2A}-?QnMyB z^6pg$snCNT!iUHP<8*XVn&}+z5D3|&SN<$SLuCM=p18k0v)hz@j0umiRJGf@y52B0ulc38*eXIY+ZIk0EF|6#sIbp;L*@sKa% zBv(%EzM)&iJqw8u8RbW~PW@0xl#cft;t;}L>E`oIa_jdb4^wYeYl2-czG=>ueF2S7;_*6sRDC{7Pj+&nXANKG`DY+n$vO=XGFSAD(8GBDmW*6YL;CZIi{`1NN`i}E z2ZGKK7@6#}+YtyvTGPd3<1+_?HkXVi5<<^g3w%4xC~`S9x~nwYL8q!hQR<{X0eb|B z5bq{gY8I3i)UIIw%}nyRjI@Dpu#9+Dd=#O&QXKJ0$+z>>tj~~X@Y04znd*hZ7~+R& zL+NusD$wu#SMszW4q?H&X@9!!&`Xbi33m5sm>8CEkJI12b$^Ido&#))aL`qVxuw+% zeQIM2_!JC%+>l7~iBj=Gr9127ef+K^cz?OaJmCCY%FxTzYC|#EblL`Lcc}}S z=f%pf_h2%e72kd719v(rMaEkaJt{s9IZV^KAaDiOD_Qa)-U97s=MX? z3Ibza!Pq~~ej4AR^qN4ZF(9e$@q3NlXug^AknYuPyG~@ZbIE{%A0j@N14? zw4*Tk&l)n~!Lo3J%)d4C^F*%^56W7Beqc>^@WAL@rB)Xg_Fe2UMV(>haVhp`L=ixi z8QP!jl3RefX}v^nUb1Br_VBK&TBRL^b}l~FjAkxX*evBgQ~)Gi#i<>9R~57QYdXYd zDejU^uMVdgOR<=g7Or>M{t?-}LU=GjAmDQo_NWuygYEG_U8WL`retk?pa4V!sF)m% z;FOT}yn;$)YJ2fQPY>hb`6#8a6O5s29Pk`Ao2Z-_^b*Z0D~sSLpi@#~YvaH7Pm)_B zqi1A*-*YAM#1zK?H&yw#u-TNhO@IFz9*b?t+THFzq^8TyLu$yHXZae3vfaxe7mIo; z;{TX~V(YY2)=%Z_+o9~&14~vX(LknKj!~n9da>Fl`pD5}TBr#~IBM;P4je@Pb1(mE zN8h13U2)_eD4So62rE!j8wO5R2|1rQVvv`OA{UQ>HzQ1@m6OHA4;%6OYp(u_$Kszi zG=&jtCbrA8vmI&`(Kk9gA=$57`F(zSO3}T>VEm<-Lzn> z&-m}o%71eMPXX>i-~)7}%YXK|l^+BIHO)Cb;{JtH{y9bd|Gs+(O9OX7*uz_e_dk2x z1vFs6VIxRH`fIECpOc3C8`R0kv+P(J=b>u-VYCL5%+Bx@-dCCb{sv;kQ0Z=W{G2uq zzKpwt`R4;y^V;bXA|E~f`;dS6pQ9ljEWrQGlv#gIDO>c@;C3fo`;lma+tu+7S??cD z06DamUcW~?nW)E{>fTVS!pn+`)(bs);ZKY@ILI&k?R*RiPMwg+ zY;Gj#qruQGld%+DIsmxiGKX<9yIwadx?9eyuDRI>jHPnt*W2xme0UKuib58j4~ng} z0a!HU0a;C!K!`58Kxmie=6^WNPT_I>hMUf!2MhEbQh%cas3O||$&&VjjXBY4Oiiy2 zpwU%iw}1FRJsipaDnCKgXA{f#W^j`Nc+4Sx*-3Ai^KGsgM?c(m?pyiP_UU|?VO{_& zaM~?n#wcX8M6RjMKCM@+xW_NYkcwpd;X0~c3oFv&q+auU&eq6J8cS8J{uV~Cm|Y|~ zA*ATrC#5zFN9>l94J6@}G?nXpqv*FesASS&+7(?9=fFpABX{ZSOSfEP;^-5(h!-iE zxtKDoh57Pj(&hFpGhUdmTZPoMX7C8@;`e4TK;fV%sj>tVmc%f%-FySw!H5~Sgx8!2 zrLhSAW_tY3sq){S1%zL=8hCunzge_8W(9#+T)f3o8ApDqO*)Znm_)YJDqSR^Q%C@HWsM;)vyXD=GHjhb)O$Q|`+1c=YFhl4#aK zv$Q{$P(#EXvT}8`v;wtA0aYS@@RW-5ZT1V!5g>QJDyqJg{+3R|>K7Ce6&KKJPZv^^R(cz z7}Knl|E(5uS15PFb*i;;ih2Jc( z!gs$znS-LfQ7n=D3S>6*;HZL*1xPuXy`_>r$GF&=EokvA>Gey+DdW$U^XHtaNlmI=thr?3K&5G5N*-GF|N0D_C_bzZDg}qTCc2Gg0 z7J`H&v4U8*Bahl+1k#!)L=Vz{?Q(H+$2a_v+FLtbSJa5ncC=}O6U@9@ZZ!t;SH z9=k`-4jG1+tdVwjg}{8hqq6hezMJjYCd}d$$P$l7KgO;EjeT>u7t|{x3z_UsA1YD3 z&>vT~a#do&5?qPOr85A0uDN)js~_)v#%na%4)H&CfL27OlvT+;leSKh!2znA?F$;S zt{#(*5N$y=-v~|a`sn+UcI7~{a@?76K&WH;XW~a{Uc~__Eb`HDG~WbDPdnP{r7&-< zWZ3$@;-vpVPk*xk{_|HPZU74O8xNuRnmrQz~*9g#~$I zLeo`z->p0U$w}*ev~VK-(0krQ?YYV5$h*4GDhhH8z*JAFh#S?81L~fWR-D=a8c1oh z2ue<-VGLZ3%aFhT#A(6tz1p6S3_vGz8($fqk~|WK*!qGUDR@c9X_YskVw*;jmHMhD z43MIR;+YsUxoTUZ6tC%*z=!W=${Cp0%W#=iCw}PF_Jh(WR`Tgqg}lNoAW-GVujezr0W4=_x(@L9r{7=O= zyp6xa8D;f)w^TUZT+PQBmO$-EObFg5j;tOX@1|;_=NO=&D98N7+-Na{{lRxW|64%v zgm}l);2Jvtj^$KHeL~V5(xn*MXNJdAE^}hlx_8iiQ+~WmO(Rb}ZvypLStkmK4T$(o0&z{djd&6hw{y^7QGsU_uR zE2nJSqCPJ!M?4y~G?`%neqM->zV;>3Z7Gv_^0XUbyON3IUw;1t&=H2? z_x5`aeA7e~&08zGwNsAbIh*64jqe z*4Vj@HY1|34MPpQuGd2yf@GJLSEjK!Uqfjr2Y_+^oeIwa;>a&cv})tbC}-EWSOh?r zHvWdb=gq))lLdv0M|Q{gVrfzM>7H~t9~n?XgpKBFy;oqmMNC)xP0a43wehE?-PtC8 zk@VV-pn)KrU0w*tMS){}dG8=)rVO8o)@-^d@mFQM9Vovk&8qoWiEsxnY*lz1V|Tf4 zySL>$o}+VTZU-a~gMU~s?Q1xzDb48QJEtxI+H0`YyT1IQ#ed19YvmeaCb4bzS5rD{GjS#l zSpl7TUQ7(Vs-$|GFU(Nc%H5v>Xv~?#dD=S)4KuAWy?ml`(4o~q#?J7r1W>VXbq#C+ zFNH4iOI}l7Qs5&=m(6D(JQ?&0Ft+W){ERz8^AmgU^Y8A|^?oFHHwkRN`}*&46`cUP zft!M^_ut_5e?{OO*c89SuK@R#pOmf1L*L83YXLT>eEWcR+Vy*WhlcIZ`y7Ppd;G!- zO8_Q74RaffrJN0Nr(%TtsPY8zfj2kFgsxDxLpw+{r(M2@+5xYU*n+FSeg}LaO;(Bu z5zcS@I*ji^IK2bUE&W|STg{09;uS0zES-KoW_`daaxBM*`>nSh3ZWVd*5#touOh|L zf>P-pANg-OzJ(q?AmEXJ6L^i_rLH*oBszus(U@KdrM_Z`6)x5sU?)Bk{s@?N#RDyzopz6R z0`)*GHo3|X*Y`)&<1o7TDzB;tp$P!Od$Nm;>BmY)qMZTga*+#xp2PiSqyMAJ5qW=6 z^x&c2UV3C0p&Ak>;FwQ&vlV3jeo0HP-U3}@VgOy3!+MB^??nKQ7oR{Z_!aiG7s%`e#h>R z@D`72XpeyR{M6^8={Cvim{9d^SR1svPYnV%^&!RxduBk**Ho^Vm6tu$l3>7RCmmv$ zU<(JHa*Js=Sd34L`{qd29J>UZU>o{~Qq|gpa-C_MePPo~l=-hKcQ%h3+2MTj(|IAa z#d-Ci3Gmz%2e5~hb-~vz{_97JdqD^Ebjq~(rB#AX2Vnn6X|BS<65&A7H23%wM^bPe zGF?iWL1$Mk)S;F2KT+{!k2r`7){_LPR3kTRtWdN*Oup%7N(M3!+BYHQeM{6o`Jo9T zDj(?;o2tOt6Kp`!k4@E2OKOWgsH;rXhCPAoQu-QOK+(u-^Lk(#Xn0WxeG-+;^j&-( z9r%FtkdTF$epAq#e=kk0kM31UuAXcY|Fm0UUAePMXC z0AqpqxePs;M3)-pfF$qFicy4~Vz2gVh9q_zNhe2cb=i8|+u|q+J4#0^=abe)K=jUi zd@|l7QLstnxgUAUebPpi$^{8xms=}C6E;MnGW@R8*#cme2Wr5BcuMg0f}d(HHn*PF zs`VIK5$Jc5&ycg|Re>|xYUJ7P5p996j02h;#Us z5u5qzH^OR$U2O>Uo~;My5`rs$4}<=LZ=plvSzRYy+=-=F+z8bO&WzyO{W=mu(LQI* zn*(#=V6V(N8t!yoteH+*^s;yz6r56$CmU{++k;u7jF#J7Eysv)KH*}9Smtq+%P$!g zydzY$5rhGZ$*dOd$m8Hk60toiTiUKktO@wcf31DK!e^V08-MtE!~P1282*mPQC0YD z3<}O{1iyy=H3Ll7w$2z%U#Bg0i9j8YPoX-TsSFh`-`P3(8Hsp65yL*7p!I!>&F_<_0ZVn-h?3Bs%6>H@gt0N7`(zI zmN-QL4N(f&#~Pf$(wJTiIwZ1ZYx%J@X;_fEAyEbde%hdoqssxa9|4y?iW(gf~Y% zM}4IOphZwgKV10)1|cbhTSMDpQc2B|@@;eK-9cMyjExZ=8v%|_Y7W{m;|9pviQCS!Cf$P_P*j zw5N>3sM0;|_`MXfv^{QTY4|gt?LQfHdaI^jGs7e6NCCBrL>K{%4q%rRgfAjEBk6@D z>;{epzM(3Bly(xn2L=tsK$bp?kh`q3do+o6oMwJljkxEX!LYI;G$NXgpqt}iY2nV& z8@O6~a=j0wvY8J= zY1>dPf6=Hk?lc!q`dk=T=6Njsc-jG^O7miPo^HsXHahx3)nRb5Lz3AYleX{LQw)_~ zFk8PzJGpscVM(IJLW78Zx7r3-k^2Ip>Xd$(Qp@VvbLM9gP+uUToS_%gxP&}~@2!Ap zay0{~19;{uZ43mPanYMgA1W=DHZGdSIV}Q+ZiZf<1lqTE#X%MF%7wbB`8))NGXCKl z_pXpOx^B@P)mJ`ZMMjr+V#bb&dgfj{OW!ODahz^=>Ct z@`#T|UXbu35#at&MS^Fvi28_eN40hI1g~2U0M%rYJ$BIH3eHTTof)Xd*n+|u| z?}5t`&zpB%-S!PGJESrax^=N!cHjxNkX%Kk*X1;rkPpk@T{d;bEvmr|ckjJpJNKs< zuc~{$#n|<@0Z#px@J<`%g42M$(J3gp^&h5LPm}jt2r05$_4M;?o-{vh}m=y(B^o)*aHz&?o8QzRalq@rp3_k zIW1`lm%SPS#O%N!@X%y2s!>f$LQu1y2Jhca+IhdE`8de>{$^G1q7%vh)VJpVm-MHq zmD2M0Zb`0CwK$UuS`1!rrPF6ke5c6Xo{(fhwTRMwEs`x1H5?hgj#`4trx^hcu>sqln#ULdxIn`+gi|ffi=xsdtUHyU9n?AB|7NUJOgFzu+kr ze?LX2ckByE-G)DU!<4#UZut{1#VxpWgh?7|mX2 zIj{=AM^-_n_hvnk)Q*6W>6vhvgAgF{V_R)op)k`8fIIuq3Okz8W>s)thxkC}U3Fn& zwFMf`UKcqg6#HzJ@AIchHgYQLs@y<-tx-Z1-Dj!FBo=2Ev|nL?bbv^kX*^qm zy&{+L2you_0ZOT_YF~e#xan+U_$g@oS$CU*@Hd-J-Il|o)(P;Cmlz1b8$voOJ}Q@f z<;{OixgYv0xVE`-#P`;_x^UW%Q)voH^;d|JEW7j2+eF?yMa|q+R|jLH(7F!P*L8l= zjTbnkXOs_+qt*8nqogP)76usJyA;7%fmGMR?Lkl2V>mM#X{)8`#CvVwX2StqtzZ~2 zt9YY%-tU5hAoh~Fwn|sjs_FUa{r1WEg!3QnIC0dNLXzh7GVpNyA@55LGwCi*h?_mn zjgaTV!jFL+65#!;>1#pWP2qe`-;r=af6X&y%XK$R75pGv8a`nw%WS$z;yC6>;6R_R zK}Q$bzUe{&niSF$Tm&b){&!PxXly{PvFmFe^xvEiaSDw>SFCCq`a$+RO8EgP=et!O83TGb;XDY=Gk_F4I%CA6CTxZ2kS!sBJegJI5IijNjiSTjjch z!g9$-Ui%vlA2V;PsMvVJlprg`io2fsN&kLFZOm8_k#B|nQ$nHJS;jB+b^v8 z!)NQA6I%li=Nv~&w-Y3Hp|r82P;?S^OcpI z&w8`KIegwtPF{@R0v4D`!-%*H*}YOauYc%a81$l#@u32ajFIMxVB4J%dJ|TYV|a72 z#?==ZdMJ~hWoOB6aeixE&^;%jN@s7!{4AeP3y3|YvR$c`hK=y|+nzVzh}#9Y3$oqA zv|S&i7{Y{-u!pr{=@UN`m~T->4z zlt>#7{Gxk5^s$4tCHxhX2*puP1VccME2~|npEypw^^UdK-4awGWZC}6MisjFtD^Kr zHjWE>1ojt9;`Zyu76T*-wo*K8bJNXc82ctd>f#8XLW)@q+Icyb{`dPydk$|d6>?t# zA&yf57PnvFB(pTa79Ct>Tk+~9O!cSn0Mm^1?=#I@0MjheA71!3)HI18e8)%0X+sP9 z)!7)u>^h6h9yxGVo>V#m8cPR-Z^jso8ND{w_%tHs5D~9olpd?a{$?XzTqW=@`Pi3v z`)S+uzyb}T=i_|A%}nw66>sdT2|E>i zJQrqe@1c=)_8^EqGMhnXq0PQDN77lM#oT;Ys*}E1gtQ>}VyGBu5>BH$EfvPVsWG+L z0jUSx8f{77r(O!fIv%fW1fALjOjdWkS+f08Q6*?cUDnraK4K_fpgulF@Db#~{Q<`Q+WDO7ZYuT$ z5+0smxd$ssuHWyKP#{+M5p?);e-aCzt)$Uoyqm!}IAD*SSyS-_(N-+mxo8i{+u#sg{8emew9!adn1M1s-z73!bH%U!mgo!YRct?ztBUytrvmRLfR%^{ zjLtjcB4twP_!P2&ElRBYMV07xu10`SJWX+j$#X4EP{T`Ex6MDxy8mTT3u^71vQfLU1r1B0iYJ z8ceut4p^Q@!=mEtANg0Et@}XCkiLK$fSd|Y%xN&N-Ug=jfJnra9lle3{YqZkqF!{jq{FP)sDBp*Ild7h!C#?UB$w^!RoXlvu@4t7^>?8XPUu z&Fv*!73TX>@T$wg&DEOqsS;k%vOAySKVEAGSOxRGxZPA_G$;g;aX-_A{nW;Hzyq*K zCgOoL?^e@qA9w;?YftdH5C1^k*TC32q*Z)mHy7jg z62Jm@8ApA%Whr86q5DlayXjl zu0+I@H1@p#+NxH%<&=c}J^)M%-pl-42I%3%$_x9>)~rN~S;d0y5=QmTTi@_l4ZY1* zTQu`&6pI?Zmrn}#m#S3?=%7yxdr2kNr5dcYJ#yXb=bsOq{&+*KT9u$xj z#DkDpg`V5}{BHR=w-jt%6-o6veJvidT(m325{)I3J*_xJo6vNAMUn#v-QGN{R^*(*Hl~y=72bTemhE!yN*_-93=tF2UU$LU0c>P7|CY zSa5>7yE}mZ!L5Pd4xw>vtl=(RIp4Xp_c`_6s{8Z%M>S0YYt1$17>^AF;R{8xLPOmr zXuV4wChX1d%Z0Qepf|g&xsH9SV979SAIx0Dee!zX0S>1aXtkw&NcFiCnCZvH4EWL3 zJmou>!mEPvlA#afrI~P%82Di(RFUYB58c^(uzmqrL;j>Fyl=AbOtUmmDbF&J*}ZD4 zVZ`sTFrn^IeSwa`R%AC_5ce1rRl!|G4mfTG3h#{tvFjK8U`ER0_0&ZR0Q20y82%iM ze$p9px!%lRZK2gFtR}BOlYkskyRKw50uQxaH>c=)cS);Xo>4sA;j{D3M=#U0><2J^2Z!9-f2a!h-MEP@;dYQIocI^53-{SZG&b}EEJfmP{5sD;kgji@Xn!FS6u-(ve zlt6{5njQ#5Zk=&-OjxjrHETY+-d*CZC=b=pzQtVH zid^z>!}U+3#QCGrmV^xeI^Bu4-_hOdvyq`u<@FvORx6)@~j)qYmJ$V|ngvV$b}?eo}eJKKH)8jc{u~s7oKBINT8=C;U{pA(b7;-(dt*o~KIT#xkZo;Vp$VCIDe>g9- z18SW`oq~|mh?BqRW&Un=l3f*50hZl^FCOKSzhLzNKV`cJzIN#k_FW7KmoNXuyXpTI zwRG-mpPgV}zp5nOPYf$puI1-TmTRt-tpS4nc)l>bf)zKb;FPS)#po1;#jDjbsykf2L{W58RP2pB&2 zZ!I^1utadfU#?P~f4ZPs2%$DbmQl4rGeTq>5&@KIbzjdGm)k5_&-dSoh5e|Rf-r5Y z>sfQ5!0Xuz7O~O90rkyoJ^<*p{65`MP)JgCc~77b9eg9~x*gFq|J|kGPw&;*D`4cs z$m(|<8%p5Zfh=5cTR?#*LBWcV*-`^ZgBI6k-UDJ9AUkb-V8vdMR8;-r4tR0D?>6$%TZK`42^er! zXN`g1C(N$&ePLsI>GEnP(_acsk?3k*E97+=|B`u~C6R0P=_$wkd#`IaY@=mlttI%P zsRd;FlVz&G8`aLEHX)?Sl;Bd4zNug6%n+yjYh9@h`^(B(jCtO9{>84R?Rmg(4ewk3 zhg%8o)k)0qCCsWPluchY>KG7M$peljrdcD8^p~v1Z5oMeZ^|FBQ>WQU?$&R)eM9SX zEN;3*V?-H5*C#+hN?(^XYW$N@)&JREM%5`wBltkQc_XS$MCM|_Nv7UHfF{CjqOH0{ zM0bQCs*`N-Or@0P)vrhr(O#S-aaDf+!unMXXo>(0Dsp^;+27z}|ARc994JW7K1p!= zW%WPBl|_Fc0NTwj-^pSJCfLUT4EzmpRL8%f2{oow8Ct?Yk8Nacz=iDqVe!1uNE5-xT8ygN??w|`2g9w+?O*xynmN?(bxg7yzQBYd% zSNw+B@%Mt^hpTs=8~0m8VEa>CAAgEv3hk2_kiL?QFf9z=tMct7)^B^}kNlI;&?R#g zOXN=1;FWK+6pqbQL31=h6|nN`*DL_RVm&raV2CqWFh914{ZfO5!4fnpn7Jy4;MZIZ z5ZyT5w@|VN_huLfL3@>_v11&CFVGl1C}JYJX@P-DFyaj($~z1G<2DgE7q!(Lj13_= zLD8+yy|is}-6Ku211L8y6u)sRzy~*IBN)dJnaDuy4@pp1JgheFwEOn*vKvQk-l6ng zv6y3bEB|D^-i0-nf9}&)4U^DsfHFFD){YgU-QXbG#nH8X2$)2<^PqY8BX$YAIO`*U z0;P;Mu5rt+*aAcfn?RV4tB$bv<$(_+>hDL~n$E1%>4B;S47aqm-2si&R?;BX0ugVN zfJvQ4PU5Ei)`erwIV}2)b-HAB7A75E4X{IU8Fzg#r|)RPe^Xh8oe3abN#0$&FaGiy zGCEX~4^$#~!F(#&bz?wRVFV!d00*%dzGZrXk+@=SWx#n+W9SKm*er1n{V)PV)A<%( zlMYyOmI0`+*wxA3Z?>RnUJ4Sz{rqp%>fbObPjQ?29`(+V>8j-aaGn15iXx_~UUC(v z8)5-HiXhU9Z<1@>*N^1&=?S0+-RG|qpnfBDiVG>%t$wG>So*HP$KvoAgV7W{#sQ^; z16`yTwngg+UIIdamkUAis!6lD7oai~ie0$$muA)g!o-8Y?9iKf2qX(VoS&Rsu+&(GqZ*-*9`2~WWLVDaNF#aN9@ z)Zhw11)1l|D-LSCnh%o%pSMSi7_kkym;4{v=hqi724Z*p&a40t)ib+*zIxj^smJ(Q ze!wibuU!^d&k`I>{8~1{?~(~m>pfdhZEq8Hf|wz0Ni70MR-;K3%%pjYAXi!@p3SyK zEYbN4iNG};#OaT@t`VNJYB`cjsQKIav|3sRki`PBH}y=*^;OtW=YzKP#^9fuRqy3$ zhjN-=MPzZZn{%q3cY<1t=nrQJ{T-v#@O?maPVZ_VQ3~GL1K2cLNWT z)V&#}Sio^0FxNT;f0UlE>AO33Ps}d)96j*g8k1DL-zMLN*fQkEzp%!5X++IOd)S_({&kEc`~3PZfM^@Ebz?UF79 z99bWN|53+>ZFrf($mxoXDzHYXIN>`TuuH*2cO0|jMVonOW>ndI7KJs?C7HwV?tuV9 zG-m2P;W3ky_oog1O#h#BvN?b+*vRcJ`TO4iZt-0?y+am|KPXfQYji~{fZmBUJl4uEe*+-v9 z`yO49WS3oKCli_A#kk8ecmRIekLNzOx(?hYD}FG)-HFmpU}En5;mTybNxY*xpQ!;d zx67mJVDXKio~3@RWzfLn8E*_SiuQs43tDIc_Cz|$DBVvmfcLr~^%|;%J+rsdI6>7U z?+L>gr+)3BTja1fbYoVA04gGxH=8~5Tbg#egx9Mu1kV3Hn^~AI$vEk$ul6!eqhsIL zxj-uoNN>Hw^fab=kuCyiYw+C}eeQq;N2q8Nt5Djr4BV(nXXC12bDv8j12{XVZe1-~ zetWG)VS2(c`RmhIU0ZmI#mUe36I@+D0g#TrS)0PXL^gk;-Oze?e$wa>!HG$5oyeAA zg>=2tfY1hrMUxf3a}GKgzBu0%)CG(tIU8O2b3ItXS&cv~1_R_5s5hXEHmOGX;k!_3 zT~yjErN=%tVZzb1U>W72)%HSw=ndZ?c(WtJU+6q8zEV~4RivH6)+ygfZSfFLS;ZfF z*Uw?>&JMk2#zow-!!FdVmYA&dVL+Kxw=4=2SX?3LTvVrA#oDAaOc(HqAOItMc_pXI zcyRU+8EUHc^8FG(P$CLNGz_XU2hTLPqR}2yi7mMM<1l8R;jD1MtBQ^elPnxJa2Ec>-Tm@`2|Qy4Je;{Td$&mE5___1QWR?fQ0IB8he^| zXX=AYh8(dufr?Rjc0gB>%PU@0d){;jJuz?5ac19(3#i=>gu(mH1F0}MkC*LECP>EX z93DB5sSSgGoS&4%ntoB2twgiB?Bw)Lnxs@aH-N?xz?cGR+;yk8D;CapEt*khikH21 zgdbCO_GU|q*`(+Jv9(~z*nMKT;D`G=X+TeEy;3E10U+hKKl?GuGJf0;Enb$}k+Q@s z#Wy)GbiSW$TwdHp)-sEAr`SNPig{*TV&fb~oxdH-C0plWndjLNY&rUyDXk207 zpZ~BE0nV{N!dG{oMZTeYxO) zE|y6Pwv!c^OyK~?$5&hTgGEZ-d|4b$P~Gh9qxoS>NJlCO=MT9V+E0l!9?N}Ny(;J8 z(OCx+_SL7-MAioWWUqZq+wPZ|8NjmNqgkc&%l<_& z?W}~&2eeM4H@j7UM4#ueL%B(|-%}e(8jS;{HPBvF8v_mn)BJ-m*PX2yNU@gDWboSw za*6U>s7WaL?$(TfhK#0(ZtRa2mn)D?zyTrKhfcJ)o$7=tSotVU?~wr~evpep4Svp~ zv5X6ZX3>ATD5UV`qkZ+zTqG5s2miAAEa7agvU6aCkV)k}clXxJ%~bv4SKxj^gOjPj^X0d9{a z)tAsum-2ijY7 zd3g!eL90bj4ln`a4cI`7_DXJvsz|UPxPU(a)bkEw?_Dgy)c^UdT@SS$1g1JK9VjRS zaRgPdvG;0Qr2Feer^%7knW0LakcR#IN&u%xnfwkNdd8 z_C=oF?X+ZA*}1!4dbnFz9X1F3O@Z)N=Z(Agvo}Qx2>zPOxPLhyx+=uG-gz-=@4tBK zEXDzXGBF79UM|5_O2P0WwK0*_ANwpim)>syfx-@-&f`a$TG7SCi!Y6OKa}zQ<y=-5sPNx;^m=1Y>uh?{WdHw?pbEkj2nknGFH-!H6>i^d(?jnyrcn#*BN&d@i zGv%c@hQmaQKzo_mB)lDE9l!7M1+G?uGzV~dr;7_S$_5kKjSuQ)ja!Lumf3*>&k9A; z^}Jo%vuza!xzAy?_hpm8K`U^-P7h9(|LZsYhhLl~Kf!>W67q5U|C>w^Bl^NxHA!^Q zOY1LJ`G2KF{+B!V_^kjTdaT8rT^re*OH$QLDxO$I{&F)`aiqozs!L}I%K}uM*9Ep;r^d5 z?Bm53yT=9|{d?yft^X8c{#)evFE9SzrTciB{_oO#++qIj(tX@F{_n2)xC#HSyKW3d zfG99=3Vw2X#IMYzS)>}}wV5XV4zn=At^v(}O)wVPH&HRL{#(W0&Odk!S;Q#s)kjso~l|e@n95Oi1k!{#-N+;@93`kVgi@22!eiD>hW_zpjABTdi+qPhj{J%NMrNe>x9 z1`sO&FI)E9P|{E#3`t~kc^^<&Yk~m8xshBf`%qkwY4?83Y?^8>jIIPrT>P06?H2|D zwlxx1eEk0X|NiT!i}85j-g|GgJh74R&&$}2`$#-NLSONeJiyOHwVIBppu^k`9Q(z? ze^;ek%dd_!E~|<9J_Hr_SR@&hT`szg`IcjG7&{~XoX%dp+2yIxBL`kK*b?O1w@7U#&5m`QnS7ycpYg-Z=*oy(4V?4(O4!d=Bb$ ziq7uu&NwbEcvnjNF6U&(K$~mXqh|E}&sO%V&VXuAtM^NK)~GPd{vkq0;u#Tgo$Zob z`|-L0eg7AWv*~X#!F~I{(n}m|9C(ikY$5f0P3lP zCR+AFhP~yFZ~alnTr^W{bME5>f!5F7=QcRPHH}$r`QoQEVMoAtcKVR8#8Twsh!%Snu=ttIJ zVJ27|`0N#ERSzac2>CUy-`(e%tBny1mYyS16zk9ePH(Ze+YM7J4UT z;foLTfV|PuVr1GcX2{Gpc_nlXFu>=hSpW8afY)@G@co#pINI6-267LrZuWNH(HHFi z3!Oy;tv+gnx6BZ`6KPpAFSq_~fz2O?t?lF{KEBcVbKHZa1AJ=Tidl%yBi{}w^nUgS zxH&wbT@2}(-MpPbRZ2si{#R6QshD7`v#@EdW1t^#J92MuaZ3IKBqAz7YsWe{kBClR zP1GE59`#fB-(~ao*GPAkX8u{(74+-uFUnyctyG@0*l)I4?lc*V+)Xg469R5)2d67> z2r7PT*s#ESO1VMf)^CcsT=Q%uh z4o?LaJy0I?3F@nxJaj$BJRT&sr2ucNfED<^GFM=nawjDGJiCt8rj+UQ0NR4{v_2~+ z@NaUD0aMNyiWLuL3Y1c(0o_z53-?5~sqR@9*K%{~`0wz_v<*{o8|4s<4;py(+Ah z%d^ihf3NV14$AY4S;e2C=`R~qKj@7UzN)*)5{{eXv{g$c;N(+8KHG>w$*JjbI&D5|biBDTpGp#35APW{($DdH zUH@TRQnrPYpU0&phg#lpdUiu1~!p7o_J*8mrUn{>6!CoX-u z&Al8bL|uTL$>t{1XRib9;ysK{j~{%bw#Y*W(^KuRaoqNt$!bfnv0oSIZ;$NoioX;^ z$v70CtxlJ^W$Kp}-%x@O&Hm)iw4ZywZ8L6cI_&d1du=mHZjpBgnLcLLFL;&MB8esy z21hF2xVpckAa3px)hCDqqmn+!S&5xR;Yy$Y`Ed=$tuy}e= zCj#NZhwmPrrw}C*Bktex?D7dy#D5Sik*np=uiV1WNT@GOBKC>2hxWRjCO+9l^}jh` z5bm1;d;)qxrC*T}aCE}FAG_4MV5R~`*pi^GkxOsB-ZUP=R^l+n9_m3T!=WZ3$l&7V zU7U)ODu=zV5?N*BT8mp7%Q1t`<#iH-<}3*sc92Qxg(X^6Rbq1M4pJXzyZCeuJZ>eC z9Gw+2dppwuT1QMp z$NGD%b|_m$QrP6gB)%O4Peo+M>uxjdOX>G%CoN9z;nHBt9^l2w4Dg}!lG)X)YK4Dg z6zW*GU}WZ9l{Z|}snr9?5eA)q$D(+(GHWR;t6$?=uYGd`F#{4#2=uo-%2EAUK#{ZrPQMMHT9hzk{q)%sI2L1s|kV@bK=9U zS7X@DLM_EUtLz*#iMOMsk-YNZ*Z3`@J47Lepqzjstvs?jFn8d-1S7aat8$0$hmD(+ z(R7|mP~Dyx^=YC(?hqP_c3BpXg&MC-z+-9;sW&)!6Uu`(KMuq*5N)Zoj@ivMD{$0< z;Zw$8lb7O5AEwQ}PF~Jo+=Uh)K{u3v5x0fK06|r%cr-s>zc)R;1|y-fgd<`#m}ym9qEnjYGPyj! zs+~otQL0R1HTFC=tn@2KOV^xxplN;TI zSDwD1wl!Z2bOScyk}ZWDn~jL)>8{m*pZC>r`qlifl%g$%kVRpqt}U4^$c?+4m82l_@{H z4T+w_+Z2u@mv1pU@oh|V*0cp43(MzV^f{>l8|tN3IE#ijKOskjw{Ll%(2I9uW@(4? zy;I9Fu|u@;V~iV0gxNyJtDZDg=Pl8KBs0@B{ZLE8O;FnH$0RZEB~ENdt^JBe8n5|w zk1Y^1m7x__R;5&GnN9ZAivZWfYT6b=dJVy|ODqO7UX11_oX|$D`UoNqQv11_&m{&s zQNS>oQ9P|}296graHc8Co58`;oF(0M%XDHs>m~-BU#6{Yj)lsC2QT#wBK8P3valk9 zZ+IPI*@s3wKMn_R#vd$s#LQQjnMcJ^#u1CSeQG)GKKn>|wt&;vxv9erixUImcD3~s zO5T*we1qi z4y=Q#WTbae6;8=q>rhn&3)Q4luFhYp?i+ZhZQ@Hn^kM;zz3(((CKc*;CFy8Ub^viI zTbnXcf);TrW3AxSfx=tvtfv^ZMT~tm4&FTPtU?5N{%~POKjHCfqdPdgwo&B;ZTp&2 zTC;3gsUqd}-AleJ1qKh#TV5C**20!c{EwnaRJ*bU&NjmZO?-DjZ+%AJhcJd7#@C52 zWr?JNAfajGi2k<+9&a5dSucLbq%LWx0x(hlZ7CUO@2yLGVCe3T$+tQt-?aFJY+&@1 z7%Q>Bx1)FP$m`2->fl-n4M*$f8QsW32VRE%l~=q;77+MB6}DeXqS=aRG%}JjzMQfn zB=q)3>{z}P{i)3r!8;U&{m7mEGn=*;+sbn;VPGh|?Rn6~a7FrSiS)Ll^tmidV;>5G z=6S`%E{$R(aYRr|&s(R7s*1l z5sdS*P?UG6f#}e6p-hgp<5=5i`a-Ib_6DOHKaHB#MMIGt^$S^}Lww5)5R~Un>{P>U z0ex0&Zq|#9IAh_XhQ=dSe+aob%d&QljmFJ6w1iocafh@YHQt>?r~F`3PLPr3&~{n& z(J#F}&_=vguL*mOdZ&qU%F8S&B*7t?#HUl>sI9i= zWpRs*xxj+TFYRqYs6>Tgs_0zKcW99YXUS0f;o+jTR%$F&|qd`QF^ZZSnyI2^c&c!dJs8US>*Fvg& zdob<(eVp8F@2@PYSslcp{r?_gD5yu}>N--I)_Yz7M3jm&ilf^~pq3Kko_9WvC zG6Ud&t8BY0`2NNrY9LberXHaS`?jrcEdOQY+}jUHkT^ zF>_A&h5~(++~h3&MqGv7JD)PB<-s+Lkvtm(^RFgiJeo>*TgceFoi_M0)aZm zG#VD_OAHeJQK7g?%C`E9@@CTFJ!gP1D+VT&&Py6v%B?2onCKk4>q>+%_tD;U+#aS{ z$O$=k(8m}cf)KW@<1?}XgST4GT)TY!WfBRvqorgBJ`Z@o^@FBZ=@JPEd~?o7EQf8c$|kPRn*0Hb>j zM$UcN`sWQC=Fh96*gZ1M8P(VNK9;B)Ra`>4=+I-SekC#SVn9u0`GCMsvH^#Xw!GR5 z9Yjzv<#&F&D61Dpn)GGjOJ^j;nhx^?Bp)f|yO;{&x!##r$eR>i&RIF_+;^7+!i%!M>6=CMy434mmyB$5PonkeiCsdL^_J&{mXMe*7-+jCXl+Hv3&I)X>dh%fRRHC zWv9Ww>2%0a$auCQ!BO!G&+Ux-Thc8gDeGd*U4q;+)R1tw8{rJVL%@V*99yVJ99Iwy zAa+iSo`m%%IF`rC5`Cx$jh}Dk!f==-Pv+$)(w=M<*dL#9G}u*)q}~1iaqvADf`I7W zBJ(H_eIxg4x(s=FPOdkEE>W0l;HU8Jwz4)S7<%)IWTpr&A*!r?j)&Jpo!FpZ(YLr3+W#k>fdgx2q+@eq$4 zA80wD3D8ZtG>WI|v_i7YJ<5@f(=;j;vM}Lbsqwmjr2;B|dr4N5p+*(8bG-zkze`Cd- zpdNV9d)KFAAUMjpdR%MqwVuT*p}rxwLYkc&4%rFApJF|p#F9=x>Sd27n!zK!0;outU$ z+eiq{Jb-XGpzoCknCeS1*7mE9BfIrGm}svp@f?bjTV@{`6r%(V1ELcAUDZVx*{fC^ z8JP@jUOJT^p)!M{C}^7Nn7Yqlb=WtAZZ)EuXlikKzV}yIZ@g0ZV~#t4=!)Xk<{GE& zFO52UZKgY&q9b&^^^rQq}{iVib7u?eU&^US~IlS z`Vs0j$(a(AaKYMGpvRem4Ot%Z1wrPNIzi~-Go^OC85j%D_rKy-CUg0@cBoOi ztSlgr4w)ko+!o<}z^nf#7msuCT~Gro81~5u&jA2ZWEu|!8X_14ATAitj~d&J-0)?D z{0fAbEM?-KPYEK{fk(oy9R@Dprud*bo45N?9)$C#H$;&71IX-a^(T1J{q$sxWpea{d@{!U>L9L_5wBQoi$* z00QclGbJvm%)YXt$RBH>)Ml)9e|d~Kc+RCg+Ylo}X~CnOYCqX-wdBn>K?FJK?4-NC zt5|Bhy;%gZuaH$J8_}WNvy>jL?{?9*9hGzi{>|KeqIk-rJLD83&?)dy6h(^a@fcEr z#-w^}eLw)NO1=BM>1^qS?}_A%n=Z@aphjZtG({2tm%G@BE-2in(~ z89owXtQvagUtH-=114&iV?rt-=wl7(tG*XMwRDUMw9EDFpx=PAgiAt@J>qi>&~|I< zh5Y111ZDcxXe}ATO+w_QijNaCnI;^Qy^Shio zAtM_+MLk}7v*qKMj98q~rt1xh7`yL$jpf%TO-JDepJIPHB-jaPo!W9AM;U@G^cco! z=v*TwT52UL(aCrw)k>^gbj-CX4?8Ueecgrs0S#y+wW>e3>cArd4_O>3cmQA^%eytY zAKuYAG~{kTjOOFVk!An68OLt3{r#M;`OAcZi^ZLRaH~H~krcel{V>Oi@1PQ&Xz;cs zhk3)|9XSU1$I1=Qu9>A$%u8K$1^$)90neTz@8;L^;oTC0JBRkVI&U2&DP^?sdBL3` z6}NeTH%bfX=uk>YF~NvU{579c_qGV+pFGV8wsFMfbEmaNgRh?t{?bOIyp3TrAMY~m zW8^PdiLxUA@K#_mKFt5;W(=OWah*+SCTiTIjc~Qsq}m^b&@=Q-HG2lK$kk=4^`&My z-YRNU#C{P$&5di;f4US^zVFc9bYd}Gqa{voA- zVW-1$(s!2Dg;eJC@YM+zmc}DJ=AVztM~$Ij@1i2w%$3_VNbI^QG9y~On31?MMEe0; zzToaojfhFXqiW_jix7SMkbk4E) z_8#HdkqR%Y?D@)b+Dc@TWZvBZ3mj{on6^IA<_SbmE~@}y7ZZ6We*iF~7QE+9h`fqM z1mOg1xw`XZwq;9LXrS>m1$^^@ye#}bd*Z7EqB9n)RSYPQl$uk~3{?l+^IH+qydgBC z0vf8@jc8G=TXwiohXfKuUg-JJ`?U^qNJO9=mES9nxm^=#RFv>bbPQAnZrbca{Rnp8OzlJLlXFw+CQh*1??lejNUW~|B z%+jTc+ldvs0(YEU{&9;zZgJX`T+zQ&UYE2^Gs5$bkDTQiR#igbFkgl#Tvx>meqSwi z^xPB+>j!w(`Jh>k8R>ef_V%@@)Xv8Rt4tyedg;1TviM_E{4bWiC}W`jr;>ehQkZ#h z`!SHY1VbLSWJTeV(nY5$c6D~rpBmZUsGhG3fJq|95`tV=Q}*prq`u?g^HUchP%>f4 z5KaW+fFDm#U>6hz;$*v{K zh0p64x`IHrQNeIk&A=p2LIsN4ki^0aZ~1qXl&Yu;m%COsG)+ci`b|{=+KofUjsYGM z90MpKopM@>BoUF{K9D)2$cbh)EYc>b2?QPP(Vh4@uH5IJ1cPD-f~iWnsBTh`RH9a_ zx8!Ms!o-)O7cbWT?J(ZAeUaC#Od8ZuwZ#)C@;9=Pg+Lx4UZ7q9+#F(iZ|}4=Bi;e$AWWi zd6%*b_#PiOuIpyMv__PUlftfp8C)VHsr(uBa+(t1X{H%;jN^B}NYX)(FtbAq<`MLN zQP#;*r?gnq0*~ZIzt8)GZ%(ZjmY^x6t?4gAuYBcnAI2(i{U*~y0dbkj!T7uY+-0n`g_+~Nv8+SDTg@qt;D}X{Qn4Xo$q=^Y z(6r8m55X6Zn2DaRPH2~DR13bn%WKF+58SE#64mllC0V-O_r*l|YCSnqg!s}Y@t!nB zWn;WGwY~2nPPlH7nRWYxZgU2T4T@vYtTM_is~$Bt=snCUgEjj%c>`1UIq_6pN{Zd# z7+(TpVbN{aFVg@Ipg0Z5?I%9h~wNR(<=gEx6(#+wT<=0=mh6>_;YI%}OTPV$gq^!43(KNS{} zAd@MkoY>QaGw9=@4%s;id1b6#KJUhrbpAcO5%kUBPvAAT)&yQuW7tR52~pdLns(Qt z@b67#J@4Yi6i|KNv%*+vo9i}}l32DJ}F|&E0mDrKavZ zO=RDs+HtAZFgrc!_=DX^54_anh>fvG1jMK$(goL+S}V>+loxL9YV9Wbc$zPSy|1@) zw9W_)lt3RIxJv*pl?yDIxOBX-j}Hf@H!${~(@e3>`p16OK7SO0Fn#!7j!T?&R4roV zJt6a5cH$nS3{+U$y23l=XMTO6Oo;g1wG&BYC8H_H4XLAHGz z&U_ZPq6OJ$-r?b!=$J?<+xp@hDdaeZeM$E%j|S`4Q_c)m2AiTi_l`IS;gH`*(SqEs zCyRZAwN}b+;DJ>jCghb|+IiDOC-JL-Y;qS1=9#Pt&EnX1>>35r~>dyQ)^Z_Zi$yr|KI@`+cNryhLCRw5)DzW32tD2u*7$mH3r}H z9cdXu_!%p?YUYww{9bel$Q*F=`mIn9^Xe&OaP?>w0;c7qil`mwEXaCRKHW|Ivtl7%|6PQ3`-j9)Id3}N2!7T3SUMI+S=i2Zu*b%` zi)oNRw_X9Qo(0gX!2d)8cRkoG16lf$Z7T*Hzd2f;OXq)wT>z zMO3Zh3d%`y>w3|wO8w4xbqW+eil=ZW-!cK)JbNzK>ia_wIp>FV*<{HKQQnJ#s@duT z?bvrCA1mnpkeKe_c&-WYQ6&lqIfxRVy@J4xOOg@t;nHhaMG66onC08#IOrQIedq zPp`3Xw=Y+~w??^0kMw#jk_BedJ-}Lzfl_{@{)scSueO=$*RQ9G8&VNublu2rJDJU3cbW3k5r z8Ve6oBp|F@^xe4Vlf@QnLx&zyw_ji0(m!O+lQ<0EE(e{fnHTb@AqSyjD4FTq-EJ=& zX;t1A516@)B3|z1U7~na=NelMoKD+Le=i)isV`Y6VDCH+B$Zao5YcJBgZdBO+iE## z&l-BkMG3X;VIu2b=pH5ir>6IQqg_YIup zkZjYYE*#|q1(>F)7GtlcyWY0k;!plzb*k|JyWaPj*_E08l8TcoJCc=ifCVp}h%@6O z1M;Vx5tBT6rHnPkCxb#-%qu11Nj*n<$^cw{96R43sUzb>j!FT9Wy+CA(p~$u?7afQ z-$S;W#u#3%gxb*1DT=k=y_9;*UW2H}B@iiCxyWvf2*S>KpN48qA(gJ*>Ma-L@nWox zDg-TGX;3aC3E0X_tueHt#^0qmvu-5horn>71r3W{{=l)VBcFO-76Fisytiv!`W2jg zjF-#C7d)Vw-9m3Ix(yL-l%hz+XaT5+jPj&4=TxwMUmy*6@c3;o-j_V3?Oy|dl%bCv zk(S-Wg%PdSp_#&VA8D`irzzCH;7e9#ZJA$s!STHuPP|#GX%}JUMzq8mL(O+ zBPw4LS7VIV&_GJ~DUm5DcByqQzytq?mEMuPgRu~uz(UqMTk)u)-MB%4$pD25duW^3 zspBHb)^o>bTT^tS_tD+qaTG43Tm2qkI@h4ko_#AVZse@l`h<%nSDGpa=|U~Pva^p# zr9$i)49G(*XM=K&v|bsxbqJ+3VDcYyi8EP!jVXTLVFsFKd%#6W@d#telj+{H=_Rq&;Atp#!Xffl<5BCiN$-nDvq<83;Yim z_P3dwo8-LU8W&Icp&o(xB?7kZMXqD~Lw<}C2ed#rwE9>MVJ7ndq6J>w`BnQv20$m4 zYS%I*evTkzCKibMI{tHeY(&YYW@bhReL`L!Q_k!aQ}vKF&Y_1eZ-)$F|B6~^KuT*c z>-+5p6y-cJ4-=N~kn`WsZFmeqrfDf31di4fG|rrpkpf-Z;~ymqBm}B_!Ru6;q~Q(F zgyF`^zWCFYOd;uvB$Jgl24R(T8Y#vCu`NK1DZHsaV_tSyK;hT9?0?rkzj^sDWTTnVcS<$7i3^_*!)dODF3j;WX}={vYJOoj>`mYNjosfZ zRnlNVJMmcVjv0Tw4Fsd!`CHAxk&RHSdnt0xS7V9B|U5hVV`UF>xi_D8RfCPfh zjt^{#Z;uZI-4x>HB(?oLb{hDK!Rxr36|cfN%Ag^81QRLUlw z1(0^J{GgJ!CQ*mu54U%z3Tec`EjPd7N{y98@s9(nf~EaBqGn%?UB?l( zFG${imJwilET8XV+rs$vv%HgzNDj!+QWvy{ZU3VXIO1-{Jp2U$RU=Ed#Z+#5HezNTr^Ss3Ei-u z1$3wyStrtDkYq5Uw+%CZajh%mpc6eMTA3V~pWwldQ<|0D~oVF#b2knU~;Noj^=0O{_K?(XjHZbtgOyr2Ji zS&Ppwvu3X2JomBpZ#OeRmUkTtAVh3JGZYE|+f}S4w0V&fN(O*?AZ?-BlI9IZg!3L->nrG3}(c|ihW)IJxMVq_UZ-{-O; z_KUV!8_|bVl0iN+g{ZGeNp7rFnDbe7E4kW7kzA@We4x86a5EwKTDS$tjq;&?Zf}%myc6+H#J$LFoo)9T;`Bq+vV$WCO9Bgw4^9$h0j}=wxsKg z;Yur}+|w!|eckrE6}!dGul5k@)bo}0ba2-~9avuM2>NTT_DN<>uL?N%sI5Sc&HsE% zfLYl$;*;V*_M9k$p7BjgXQB7oR>#X3AQgj5Mivk=Ah_OwiGME?Ax|;pH}B={>dqHF z#{?y9Cbmd$9#_V-*G-WurWb3J&AdwyorYsO@QL&@((Ah_pC$EoVD^iB{AZC?Zxk>i zk8JTjg7(wSpvuoxR+Vd87OP7n3s5q>L#O)?aBWa;e|wWiJ)h*Mdut zi9bsgWV?8*rI z*!M~F{BYme=sQ0^3DaO8^(HR)cJ=O^Vg+nJ0e;9JY+zer8Sh@QUaV&&+U5dBnN1|9 zhYdKXc2f)Xi88m|6!XBD6gZlkk8d{87wxOgF%;bvB8>tsMCpxPPNeAye5@aI2XAx` z(w>DsW9(#dAKpJ}b1I-g*z-VF+;~n^Dhzo9s)O*I)yj329nrQv<0kG8vKFah7p_-& zS_Jay;$nYg33ELCtZ5c8Vt4(>c-@^fR>I`;m09W=ReubGukQ2YM3xb7nAI@Jb$_rd zc%TpU(C1rT?x6S z=$+T-uC1Y`##igC9D?K$cPLgN-!`9wvjO8d$Qb|a^265;=&_m?ew0JsCbRpAqG$ck zz$|o5`iE+@$U+~9#cGdM@(Qp zyno%vibZVV&z$E4<^%8xIS#h=Zze~Kl6Mlau-%(A9y+-?2&Wa&xf#L2`sw@AB}`|& zQ(Ek*WOKlMI1%1IbOq6DcSTBtCd^AD78P+wESbL{YIY;i?8= z-3|F_Mf_JHFVbJzMfIZFmyW`Bm!K zEjb*q`wM7UdSr0J%h9us#J+0)7y5w{*!5xZq>Fe!i1N_WT!>E8GqZd>Z++2=Ln67q z`}l?5E8(94Z8SO5Tc6KRn-o^ICl4P6^oN2+?D#4?^z7NV0Cl0r!9k5p0oEBGYej)VZ&Ln+d^d6PoupOx&C{tmlijUzL~$|0TVj zl|Mtb3f#S1A+8zX71xfYRJ~--6l@Si%JDN>c#hKq+ouv&WR+H$lmH85?rnMRbpzQ$ zpN~;&m70rgnZAmrZVS85ROiY``d(G>0_728aJ`VgE-g&un=TqL1IJ-8Bqy@YXI;44 zq!#XoudYjjB)2=`79{gU&LGyV8c*9=MITKT z!8X-loC$;uPSZ!fNf)Q?adi`+#*!W zu|qa0O^jeFOF?hU8K?UBZ4(Lfp)EVoCX0lN^4+)mpB-G=WKBXjos9xQMdy=gOPlNu zC{h6Lf=xp2j?g&CaX6GsFm7G`phk4;AZda*?Rub=_?p7+{`94gO~~7TQ&y~~uJ2NK zzqucK0Nv!)z!#o=q}^PGrPyw^T051$cTZ7-b~O>lwQ(7^^0Su6j#KmF!~$vKuO`X zGW1!o*uG7gEV;Y7$?=)+2uQ|I8k(Ixn9p`eYNlS>f!xcQcKgx;k$*CuEuI_1@6V{p z6mLiI=#=^Mno~LbbFq8Xm3R^Eh?g%YIJ|>3IG9+B{`~XG)zu|*x>jUHaS7|TOI((i z`QZ;qMJJkI=tU_dmdJ_DIf3wyHaEI~+{P#@B1t+xzAHp#;#Oq%a+>!KaDs({id7=z zX8>nLFo1Bb_;1Cgp~s`wns@B+dQcU0wQk$6R@&q$5B(EZpYOKX7v=P+<(blJ3Gg7P zWLowvN|Nbk;MR@VvjkY1$FIP)hr6I@iU0^D7 zGjJxs>uQunjNE$e$&gvo$Z^$GGj0E&ZvNGzt5-J~{UR8yLd!rJjePgAq`XB>h^oLs zc=+u%qmbyMjZWVwUNWVv0CVEBquH_|4A1ics;CM0&gI#6r=DH(apciS!Wo&ukmY11 zRdc4W{pmH)sbLVLlR87O=u4pY58A1trTDj9z1#PqA=7OQ+-G@WQO|P!i@H_vVaCXi zC}(T-oThz!YWa5B#4!_!9r!>V^trG^EiZo>Avlf@_T#^FQU>UGO^hT_!p?v+G7g{l zOQ=~ZL-yHd+Nvc#If+BZ+an;3l`_YLs^ZaguN<%DB-s<`b!(M6KsQH3I}|u63eowD zjol%+0{!0j)BEd(U`<9HSBHpE@(G*O;uK~6Zja4a$vwU`0@i%(>c5zEfZpY)p-DKi zh{C-ed}Sub!QhdyQg53kVu}lD9^~-r!loS}rD5T9wa6LceMGs1`oC(}9~2rx4=q;R zeD?EfPRy0|IrBvqS@K15S=?m+)g&pc$4xD0k2+&Kq)%Rf9bcR}ANke;w+}0{7}ZQT z#SJ%**P~CblI0^-<+h|Z8OE3K3?3fv4=HRjQ{A@t591{KBa5K#!k8|80FM8ZJinfx zX6rds$h}E9BN40J4!!8ENeT9>B*AAjc2QX&@<=`MZTNh%@iZ+@q;SVQ4vMlEu%erW33#nB-gWM_|=9=J`<8A3+$D-Fg3zZUSZ zDF?aU_;b`(Lwyog^lE(Q&MK{la?i1VlOl(%-9IM`SeOpGX~WX*A_h#1dp@c{BHm-$ zVKN+9BL+qSp^*z)l7$bRg=tq>RP06=z()zsCzg^UH@p9BN0PhJTVC&K?XtvPV|9Og zE3Sk;h)_qeD41DozZtdkqv^~2&=8*ODyA#ic(Z0)IEqF+-?x(l$-;U>%8+VHj&Br7@k)4_3!k(auu7EV=x4widIMWF@@GE7yXdq@pnnCnjX{{s>UCNG{kv37D5=K)1%frq`FMom zr=i-z%Y3MeJrj^T2xUE~$_wV;+2P! zlOfZn2R8qm!mii6Ozql@m%h-Z{CUAeW@kQOF@MBseI;Hn;eG(Ez>92*Xvou3{_nBKv|6^<^{S}#O6}?3Z)>;HWy=vZmXT-sOFK}X z1wqi2c*6bf=b%r+G-6uSW5O5-_h_dm9gvN}cM893Wr_iSqsPrE86lsFaTF=ynCcl3 zPoFZ=bvQl*SemS9#tnnm-iWO?9qtwHU3rixe$tQ=hCfgUeF=LBOTx4P4i}Bb$8{t# z@OZ!(LUXl>Ib5!{0@(4t`**Mq=C>7ust|T=CzC)MuNxcUEriUxZ7Yb}S`N#jSA+TU zbKHK0T%yJ`lYPDJ)tB)^CB`!J>@|}JkveK6|IoL%pI&sati|&Uvh=z3-Eq5Dl%v_x zAN0k{emAve5VvqThbONBDrAMNIABFGbjk240OQU#DfYp}aJ;0&=1v+$Ej{`@)#qXa z1iKEtANx3iyp_ppu8C*SiX4vIZor8t!%nFP2sMZ3>wn7EFX$#TRYDLD8L`%CB;QM5l@Pp{ z=(3syR{913v-7v{x_t@GoqrzjFzZTP(-flYU`#)SzGs;3L?8oG9sK0Co3F7II=xp; zsz3c1f$A)@NTVAy-<)WhQr(_R2Jc$P)#uT$q9P1&Ut4@2c-3W`MjPK7drXSgRd@wZ zb4MGZ>pTto(#N$r=DiMVo?|@bJpGl`<759%{OLg--hvja=bS1!- zu^fe>kc)C7!5g4jN;3qTS8J22#<_!=^xGQ#y-hg%b9th`-=BWSrMKXij%?=w&LbOJn5#$o_7d|9Ujqb?%6EgM-&TL%JSL>@8PV zXp{Wsn9Bp)I4X)RAa;8^xdsvu`&=l>LuBAH>l0J&e_!YI8Ymy-xcwF|dwRKAn-GF4 z`Ez!T7w!LG=`$a+JS-)jW+RUw4($>5Bd<0-8r?3Rx2O4vBDmb5c+-3G&_0$D7Z6e7 z+fpvAmS^mk(!#SsBk|)zH_Zd?1o@4()B-6>RWJo*F!Cw1DUug2?h(v1K)U3fbXQ$6 z?N)V7W8_Yw+p<%Xj8f+=pl(~EU|)O`s-@IZAO6O(Dvn*DqLUv#ZeVhPQ=(DE!~@=) z0^y&-i$dqo`uW^ko|s)Bo{sM<#7Nvysm zC`>ILGQu3ZSJ6yf)cxmC)*h(j1&So*G_DT(syYQY1?Ov+iKH^J7j`EK)$BoI<+|Dn z!&wSfUpzP7GARQqcXpXYTK%+Ap@CEwG z@BJT1W-sQd>zD6W8d{5!?>EFgD@yvr@}27H08x%9M^xTIdrmm7#z># znMjCR=mwvNQX;8hmQ7G&QDO@hAq~n}oSP{jd;}4sp!KP2_eb8T=O@nB94lukdK&=e zvj0>H78gd<@@!|oiQcBE?=pEm#;L(+=hKUCvIK!!%|crnXKnmSOJmbo)w9Fb=e~dF zPHxjv02&&&((y>l)Pm-w@UIjnAZ7a61yW&ku=AQtEkq3Ms%#2NxW~qW{eW*X0yc{A z-&&jAA!2x5?x;%!@IA{VCg<+IQ;1)je9VZ%l~dC88rs#(r;4;u`>i(8dJ4Rso75S2 zxj=~4>f=V>Xw$sVqQuvC_Cq^W`HV@JbzMVkruQYJh9zEiGIT#o*;L}3FvNNT_D$U5 zNRu5$%1VFw0`(sxix(O=ilBAZ6BOMCJv;3`J zvl$`m?mzAsS*l>n-ti4aT?b^a?hJBD2Q_E0RmVDZfH2lvV=q=iu9@B6QI(*a3+}D; znKBH~>D<6VDQZXn9|q>zJXVCZM#2eBNrmhUFug zFGrZe)Og~hsxH)v?M+r~Xbtro^gCs3h83;dce}zF-&)iWM$jvZWxn#dowX$Zjy1Xx z>3M4P2%-aVttvC`T|qDsVOae_F;#|}u8hshGOt+sr4zCKk2gd%3ie9viEi9e1Gr|1 zEOKWPMQPjWxDv@MNAkSAkoc+m6VaTl8e#(-t3eg6IGFR-mC-&(?zeg$j$dfn<{_k~L)Rl{$KHhIZU0##bdRFaAPEpz{!9w4J0 z({sqx2%wag^4p#Zd2sLmz9#C7a_e&&Onrn+qTAV<_0)T3^JL0gAN=b4!)cYVS<@R@ zsFtE2%;Lb`_~byDuB`GbC}#FeQcFfi<@uu|nQ!S?VSw>_wIi_N_fM zIhA{-7r{J)#Z-(r(Ru|kn<{ljxqX=i*FWk%S&#g%WnRo14f*(h8Z#Rr?NE6M zXdT6^wb!ZfvJmhkNdjA8RyF(J6Zy8}4kNd%WEXc2p-1b}kag4v*5t7(gSy(4qpum*=~qAdn-YWX@Qgtk~T1JoYo%e3NL;84oxFyT-^U&4wW!4kD5 zfPS_>kk<|_N-yl+IuND#okSN2VxdVchWL>bxDJ}dT~SrA3V(oi^?gJK5RVmXNw;iU z!kO)Es}fOE^90lVC8~XV-+w7UtpGoKv?>k40cUbgMk_Th|n$M-ea&> z&~=W!?+(;}O6uU0DzmxCv|^_n%CA<~7E&!xG(rTI`3;8utW)8;8G7r(sn#~PAGr!t z_)3E*9{Ys1sVtR3?wp@QbDW-N*utG+4AhBJGV!88kGVA;nYB@Nit1d~N5{?^fjN%) zef^qlS72ke9xH}d>HaJGWp9#KhM(edLqnHtO+i#RDhc*7tutR_UH{$RmypcbrxX7p zvQ^=SOu;T0ueK*&Fvm{FBJZ5~fgCPWw$KXN$~Ms0NIe zyILjg_^_H1%2DvqSHY=l zCI(Ube+2;9B}RFXx?dX8z4m;{P*?T!FgS>E%tM$Dvh?82rpWsVz3% zT(WI~@xSsRw$D=D*W)>u}*U8ui48)22 zG`l|r>L7o}>WW#CN|;NwMrE&96W?=wSwcnQnM4gy*U{wC#3zvWXRSDhk4FaIYfHLB zLgm4Ftz}Ik2exY2JpRd-fho5ojQ4cYk`7%xMN8Zcse@d`PZmLML*(P&C|NtG0{DKw zfs@Nblw;h1EniA~o-hQPROYt?fK{J?psHr%?7}ABhycOySHcZ#MNxzKgf23nJaXup z56aINtITpDA*dOhu`-DuJO1rt!06}3yDPB#$u6)7TB}L)$VU~uV?2&n6Y<~^Ovj$a z57Oj6kY7)EXg?^G&rIYsn8_^LA3E2Ab(;FV|}E2v`A zgp%vI(7rd^8Th#8q0(n;={b%rLkV#-!&bCsz?AeCm5o)`HZeFpQfiyDM%R1Kdom-S^k zfe^@-dCcn7IVq}i$=;k57%G^E~8Q~ZzOzJfVml8^S-|1<|hx|r6xrIHyX z63Z0^>D_<;DIBhPxm*JI)W;BeUsbS-De~KRq$@=@ITgmdx0jGl-18AW- zR}bct)0DpV7oO^JgMVJ;Y=Ih04i)pR*g!6Mnm3Tb9{tE->>h15z5yB}?7t_N=|sc@ z^R!H<*;eBB9?Xh@)-6F4aU=t9g z_>6X(JFmYJD2Io+UD_4&m}WLyExWkh)mB;UwUaQEzTj3MC$}w_d1h@^0|BxpjwD`U zhyGh@d0%rfeTXm-Gw1qHr8JK$G!E>kAzNdE3lCB`+`vfxryKNzj9V5Uzp~ft)k~x# zeUt^i&$}Q1Ru90FwQ(;cn&#Pe+~@Oa4se;d2wnfJif(Rzx<1&P$^|&D5}m*YdH4tZ zK^~GDkQT>j4TV=4o1QN2bt+4XH6Tv44TfHrF{GcL8No(V4DeBdPVneVl z_Z|)-brGwuT~*8#^NMIbs{&wml;%muWTyf785q)hCOf{38t}f0Z-5(o>KLLaGTP1S zF}of#o3drehUyg5U-4>53i(e4X!BsRIDRT(#T}C26_0%@Max)E>fonbKjJDuYqKp| zk$Zc(nT*G#mV(p;m742sC9Owg0wT-q&!=wKDd7VBtr6K&8-nw8A-k5>{rWVMel)CW zwa_1puIW@onOpgH`Fo#zBN?`n zoK9_SbF#iS11q?F(g2MPY=tzlYW|Zpo892XS;@-VAvXd*1=yaI+K^NG$bJbmx8{>-e3?pH2%T&O z_#J(zPuk5L46z6X>c{!wh4rz0rFh&E4k1alp}Ne@9UZ@;0yWwXq=ii+=;jA$L?Gbf z9Ql7dvx03+Il@UCI4Z{EU5n^R5wS<48%PqMF52-f5U2ve3Tr_Fl_ z^R3J_|IK6u%}*Q>n`aNQ5V&?Dk~`v}ns`HaS3j>>2Mz7BV40{D>!>rT>+TOZ;7iT4U)wOl=~#7ve2%R=MP`n`8wY}S2GMHuUf1F zWcuT=Et_G^{>36qw$Y>kpT%-n-M2oXWQKLzqddioc#}bwHsruGmJllJ7h@-7?Z=p% zIB&FEF8?JWCQ9utW=DwzB(l^c`1piWJp`!`#Y!4HU#ya)%770*~ z<^*nAQrj(pemm`&;T7{0uO4B9TPZ;S3t&+Z`(BCv3sf=HkqC+ZAPZ)8^)%JeEV?`W zDqhcW_ICrTj%Z46IIi-kE*EF8^Bo~jo0`N)?DK_z%+K0Qy``v>-f+*#n|oVDqWyTb zE|PcefJ)%HLgzXc;O0a+mwM(b{S#qb>#M4jiAWSyja}Y%w`~SC^T{Mw61c~r(sdv{ zICOX*lbwhn;UM8ajiUnJTRq8@k<+5x1@A&zO+~cmK3SpA?=fe0d z8jqtOhcSjS-Pee&H>gFD(6QnzM!Fp76hIR9lwTNV5k9`?y9Bm-#TBlmI3A;7OD&$i zly|y$!A299vC@D+&)NH2FfhGa<;%tiO5=yydlYS(9UEi5eTns$b3VOhgY`V?_&hPKaWf+3VojW z>GWY64%GF90^aib9g=RjjnzA#`;O`N4$Qcol+)BAX><)ZTxOAQrc-u%S2Le~*tq3; z;i%ssnr%<$0U7>$sh3TxIj5ykk~GEYwduTqoQF?Y|J1r46cSb#)QxTt^p20`z|Stv zfpCni?cu?i_5tn)K(8k&A?24_C5LV(Q-Yet6|HpXk>JH^6t?ccBD(m~!j|0((B z0Zvd)MZw$BF#4a*DQjd<&qcdtxIX-xRj2F7qlovI3oYf0w97^#$^~vRj&lqZD+pAK z5!$SYwV19aj`)ULA1frVD9>b@A@om7SO-vW`D5LCdwJft z(HCpxI{jEywIUAWl@l>ydxv;RPqY5~p=}h)m)oY1bHr{@ z4$f>r3wO4E+LzzDZF;&jAgc^2NbDdtJq4Q36k1NJ zUUkYxrjzk!yg)4@2(^;qbp6iJ=qEW48fds=zba zA;$p@j4)#7R?TA`QFmD0LkrB^rvCTR5r|H|;QF-iu@>xgel-)80OH`o7LYsOpd*WM zqSrpm+NUZXQ8Yk4Uc{ei91g8P-DLrVE&g6HWy4t`XBCm4 zVIe}KZ2Cq8lOV~RLEnTd``G0mIh;DwZ=?F-^%U41xeNOK_C`i|X(QlD{<;bMakB0OnNP1(OCY@#0v{1_?oxJ(*mc@z}ADQ>}`tf zI%Tmiq?uIN?5XiH!fv_dgq!dg73{3Q$YteuGjYW?wsJ)0QR=IKd(Ior-{khwtyB_x z3Y?honAOtmaqZSI&PfIWywkaxerIcJ3e(M6~m1t4VQNLSJ|XB<8Tj_p%XKWvWoqk z#2N9zFkVEG5Eb0!8vGe?l6c_uyO^s@)Ze&^#K;A9*1BszB*YqkQWFL85)8a`erK!m zxh6?LcZ&e%zGz$ApY8hy3|Z$7&Edijjx4#r5-uBT@8ji~k)G_$gw%OyCtIBBZ}-Q zeBzt#=+6yn)xXN6fQ?WY%Nk{jJ`ofXc31-Y9TJ2p5{ftt|ck1P$A2#`8-i)fg+_Ih*{ENA}P2Vv?I}YSqLwy)O0vi z=e|UaJ0IxqG{nH9if8EaL%DPn@GtV0P_$0}6(76cckEZN90`v8Bv|h!jZ~ZC0lH)u zKTC2AHBp)uWe}!FH3aXNr_-PwmA9W+eHQbM4@+giY%rSqK-<%@eh+xW&#nPDnN*a+ z{u#gDG9a?HJ8hkzFB5>rCF%idykLo%Je|wEr)dAPR4*~%Oz(4$r{I6K_>S@~Uy$0_ z5Gi(A`%cq_s&|^wu@RU3lLGLyarv3DBV?Hym2eon0{C}IX;}?o`fP-itxCV+$Fs6< z%g_(RHs-0rlhld z4FH$sn^yvUz<^#q7vAdX>ks^$F}preiV-4wm*vs`R+Zr94#S0&BUyP+eX zQ{y6CE&9q^Tv_6d0nh1^n3d;7=j9kR6}F}kxOzXsJ0Eg4@n?|6iqNfV5Cwc@76-3o zOf|E3{rm6p(y@IZ4ub~Iny4cR7OEe7?VaAI9MJUOb({fu2};1RP7rx%cVOnS7UE+b zYid%birq8K716${{>&&%Wra>zIqSd=iczYX0uY@^92DcT2n6z}tF8ql&xYjW!zl~p zuCWL|$kUS@l^3D^a%`g+u3LqAQBZnU%vtHlxt-nVYH2)6A>A(fjbGC#`!*&f(k-Vz z(}A(;3ec%G+LP#1Jur^-u`OlS?$4+myA2u4&}-iC+Sjp56}1Ge@AXALG`1u}sGC!! zX?HA=8~`=ewXwOiSdUI!Fbc?r%Is=`EwPAkIzW%1RA^kyYy>mXW)Eq0^c7xEIfC$| z>K%a|$M-RZK&4p`qB8~I@`RwkG-cXnZ^R{6MSD34%5&{nmxP2JhJnIRy zBySnDH`s}b~t=pf)i7bH~nr*oZGhn34VQ)%2y4if!!ijXowLvNwi*jW+ z@WWPS>%P{kS6c?Imm2lxi4sP<$Qt}o!07%E5hCB-XJ-<2w--Ll{Mnfz>A-QxI3yqZ zWST)ezYSapn*ii3h(8|Reu;Od@1MdO#>ssqu(JmhkO2l2gdg2kikrMD*4k_tPu){F zk;sh%4FMjFv^?>XG*4A8mv`5n$-YgS1vZ;DAUp)hTr`a{|Wa?MCUm#4fSIgQE`P1I`)lXnX952J(PqM`x{h)3A!zzMUS2Ld|!)tTG z)794qGkT0mvW!L~F3r#8ji`hx;?f0*K&QC|&~D~r&bq9U|HILCFs>Kk14zC*Y7(Vl zwt>h)T=FX-OIFw^GD~4!|4k?EUhT-CX&%--8DKowMR8%`z{3|foS36JvbRdIDis26 z@kE~)!}fR?53r6yvLd56^8LGu{@6BrpF>WNw_X>w!rX76-|V8~&}SAugK*_k`_sqx zfxfVySj2jlWGH)y3lDd%jofTftN3O+j>tH;lR*t`W)Z5n64Ln1aAH3TU)4sa|V~B|5Qmq$!H7>kKVg!HkK-*M23FPJD6kfy2@b7}&$3_VcCoz{n-runF(*BOO zJ5D*hx?b(gLYwS^Ut`yK&Z9kvDR19%Qs1pl$Be0lBe-pW02jKpNvzqBG!%O{K zf`ZIAw_%nq-2xQ)p7-L#60^D^O`6R&;bJb zBmmbHH+|sUit4m6*|fS!XMFfOgftue?hM;wlA^o6u#8WTt?b+?OF^J9_nb$TOt(Zs zux*XF!si&Z_@-`6xp|LCD?h_$4=x^E!kwjUSv@}eXCkWE2WVPk=LZ@G%y+nCZy65a zTz_DYz&s2k&>x|%kY2^G_I3Aso&uC1wM(pDc_ipd9@k~=YTbP2Y>NRR?<;g)Ynz&7 znd9dfz^)T@Pf^3@YQUMDP72zb=-r-a^u^698;#r%)zZhJA`I;n2z%$`~l#OcAttX&AFSi6nfvz za?RYNpz~#n*gXHP40iNbWScJnl*y`QQRW;F6#~w~vVHsU0n8}z+ds=$+pSO`CD$WP z)?TA4vzzDc+6(U0jdH;7JF~p>1|CtO0-&q4kLCCTjSN5+%`-~?*KQ%u`nngR*>Q+S z6Un-W3C;#h!zJMCduW+q=ylWgnWnag!ZwwZOA|0Pp>{YOa|y5RJkqvaZ6)&!4w}i; zL)_1JEVVgXF0!%A&=f+*&xM_aGp7`$h@4tT=N3rJ$O%bMoXWBT8S$P{58s>r;mRc^ zNDvserlZw1T}BIR7*e;&g9J#g8ADN6kczLqr?>dMEPm#})-*GKHlb{uWk9!D&UdH2=%3)?4^oT8Dy<^9is~wVe4LOlLC(?G*HE3L>ndi%kVl zBAwayUfpLXps(!rE&{qWXF&c*l1@$=00fsNT2kjo5@{zsFVT#{d~c*?M;jRH4m5J| zWTP&!T|ECorZ3(&&wP9gu|UTi%iQ(Bi}w(;)d%cP3#OVZg)qni#6ZhlBevL0MnTBMx%g{?xmIpuQuVu#&*wt?)k zR3}v}4{Zpu=DkR(5>VN?NlxY^Qc&1X6>MLf+3>nmH7uR{q7(23-4RUo>EinebE0_J z6k;X%;tsv3_xm@V8-<^FE$6$r4jJI`1g8@f>+EU-Sp;zQ zl3?w?Ba0DPE}z-mPRUlJT6JkzE=;_QqO2%u*2Dd2pBgcCm}g;mOq9!Sef=-|yuX}x zLKO^oRLDk!kEU;!ciIc5J$ApAD-#1@E&X*nZRWia=l%r(%BNC#OZR*68T!Rx+{9wv z4zwAd+v0~;Woe2~Um;=@q=?$>b^;jLt77LF&OZPrrsWLoF?&GmX(-0YLFl7byK~Of z4Fm1a%b!zogGjDCWvnyik-tJn2s?E$C5}`xy$P4JtO&PD$FIuvCoE6s-NyDLjmTbd zY&boF0i}j3x4@zj;K>)*6~;J8U|<{5+CjR~na%Q*W`yqkn50kp&0odRW_r!pbay^K zHL|Chxcy6g+bkLV5ijXW;Cb*A31_AI(!2pNBPVo90flPzt>5EH{z@S^DO&18TdZ^Q3fc@ zY{#n-hs=xC)Kw8V=qW!9@@<7!1%s$WE3i3eV%GO(=(GL1vkvI~a+W^cD5eJeq8u`?{+FrZouoa6yKpmoFUM{GV@Kn)=qXR@z zs)xGMgV)iN=8iDVZIvEv1{XlpwmPVcrLm7bgW&L!(!|EG6_$Mvk`+X%*7%gvU;@6N5c#Gb`PUdqV?3Pq> z^QaF&A<)SEtsPU!D9TEJE}bLL@S}`hnI2E8o5oYGJP_UVr^a3F-sQ)m7*V9bPnO3Q zAe|x^86H~IpCp#tl(hMAUV^*Sln<^jb=j;a_$$(acq}i0nB;N%>%IyTcTIJ}RFZ#V zZ)3*IC+ZxCmF<{XpVkM(8v+6}3H}R01+Uwqbz0PGPdoVXR8)7JU9%O&D-f1$2Laf& zYQw1G@l@8yfsx;T1AasNqJ(vCCa z^a(pVR?pYgi{q;TGvkU-gFuZ2F;&SxY+yd0V zK)8i&E#lbGmzKlal1Os_d~|J#t;MaqBNQ61P~$g#kI_c^hznk2w4 zar5_!XTSb$%-9G$XCnb`SMJF2_+sKyRC8t{0edZLNECb|?CSh+c`Gl*zAyp_{(@a^ zg7ax9a6lnR5wMPbB(X zXh*Ahd^U9L+j2PDU|avP*fBwF zh$qk`Oit^Nc<-3wZCoTs3@?IMQK;$zu%*8y{ zN#9(DIg1G?8wBoW;8pul%%6n3&EHyxU)Eo0zJ=3e6~@Nwd01W$4h#TK#l4H0T3w}B zU0sdLdY7F|-WQS``ooAK^n12byXPM7aJoQq0rSeQaS-%mOySht9QfH!;c8fMABSWd z+OFQUjU?A-kp+67P*#gIm$w?klg)ky=^cM_-OaZtptVeGF=DLnOe6Jz@_znZp}MR& zN-@5^nNu+E>U$R?c&E}kb+yoq?h(wM0lYM^@a;J9a31HCPx3?`6`NT5N6$+=WzDYV zOj%W)dDR0x!K6CucQI?Yc<)p_J*Zu%v|IIxtV?`ex|Yv1LX2O)Wi-f_ho(CHF$4zU zpx*#ixoZDhK=jchx3~BgxtFe7RUzwWw*t<&PP&Tfk1|SJK0R7L=xqOZ@M&GPeEI6i zUmAz7&vnmEC=AhVeam1r>$&Ulh*2#1n;rT$e&FFS)~ClH)(sv@S?E-_MXAIq7qTDM4kCW^{uUc@fccvdp-*J2IQA<~71iSKi zZ+&lGTMFQ9c{IX#vaV>=No}w>*P;m&5_A0x3wy?or7yI4DA`07nZ<;8i$$h$$%<8O z9<8txo~Efi9hWr*CM!wU)c0As;dzVI>`3eiJGXf`DU|-pg^lf}&#)#9G9Q`Wfv}K?rL^%MVETIJPDnX&_K2#hi?f3h%srzFCT zC75XV*sXo6A@4J+QlkM=(2ixNz6?0&5NS?35*TzPDz(%>=0a(m*SELB0{xonp61OQ zRx2vBaIAP@`VL{mnRl>ypRCmLZ?1WLp=4<(0_B#!+E*OAPVKcCMzlBi)*iy5AOBtM z(+gg@wX){BU_sFW`FC?fCA07R@E&ln;%6!;c}mYa%d|L|?MlSjQnV3l@+Ahs20MQx zl}@xoB(r`1y03N0wW=fv>>f@Ey+6uoI`m}vedP(g9zDALjVoW-og)73gSrsoCszBf zYzl)agV{a}6Wt0kes*QLHPjuHiHLY5Z$^6DUnQnrUHVFTqczu+LrwCl?O%QNnr;h{rCr;PUHuj`JnY+Il@LBvDNNGfKJr*8 z#^cvzYBmVuK2!JZw-qi#&3?n5mpRyV#;w*r$fMkN(@G)Y-f59MY;O0Xsg7&B!eKZl z6dk5$v>US*wA+iFfO1Z|uATeC#FdglIXxP5^m480b{?X{wJ+`VcWs9E zf8(Owh7%3)C2F>a{S{}2H){CxyA(H?lwFxdL8hLDP&W+3b~L72<8^x@~o4y};N{@xQFQnzKZXsRCGzRXa2r8}PtDT2mh zYpY`_F)z~C;F@FAKdfqx_h%nf*ge16yt{qRv_ff2qrlN_J!cma1&P}?_)419y3r_& z(8oH0A2uIAMMts6;wkxH9c|dlyJwCpCBmrlE##Nki#GNC&qq?%9-ru5(>n!{WsfKd zuRL?bWXZ?v-3#B|Kcn_#3CL`wEX|1bb>dO@2;;F-&E`#R%@=oxw{0fgG)^4PAF*gL z+b>5#;>=vj zI)0bxbvSeRD&3tSNi-w^5y0b_*@`}6GbTeGjUW{0)PBNW-+2C{>D3$EJKpwcLgK9; zMwovx*+RDH`%`J%;ThKTGU`5st^d(Fx_gt4;epS937j>Sfwf~Nds2JSh;zqX`rH=a z<*vbjwO<{?E4M(#?UL^EJnH8wVAn=h!r@(4pR1TO)+T6f#>a?w1O)S9PS$F;s0&() zsh-BX`COCJs?B0)Nr!V9&fB&*Z$(^EPM(j5d>J=9b;opb9bwMZHSw6V8HqS;Cmk7* zm_J4fJ!GvZ>|}}$&ka1xa~)GZm*V(UUYm4&4ro@?UMMO1f2_TAR2-%22@v9 zty*i&x#s-l_t78UHj;quHJUC#vLr!l&5wLbfyX`>ytj$0)@dzgh-A*tY3(v4rl`7Z zAB%j*i|vVW@fw%<$Wh936<>p+lijX5zQS=^!Pl5(Z*V^3QcnaPw%}4ZQfsdq{5Hcraw#oQA=WW(Jc(Q+IAZp+FA~I{ zKZES?H3D3;kt7k;iPBQjQL51@QPx7n>_nmH$L-FmE@ly<;<8B2($OEYF0w2vuzLLFk!#mBuwb}QF1ptKDfJ<1$@a5jjBK2 zrIH_*h@Q@H1>+nIZf2>bq_es;5z~mag%a1u2V|mdvyco|64|_eN7B#otU&1~Qymvn5_S z49hIaZMQo-yC*?T(%o{JqH7Y=vKg{;LeWAvX|6aj;5{f}OH z_1Q123}rfGa69~XakTAx)75=W5jU;qTu=Ptsh63ecvJhY9~OI1ENV2OHtY?JSaN7@mMjcc5)fvcI_l-0zlFTj1u=a@- zj3k%8d4q=LkxHA;o7RF+8`uVlr8y2gsK8%nwL~b->Cye*aqTE}l)RMHam z3kDz5+FGyD-r&A4)l>5@=~M9I^$?Napjy#mGk~d5_AE*IO#F?|NdfXlLy1=n7Q;ZJ3jQDuonD2APkt zukS`5jK*HHJGaV)va_Otjb+@7u%<~tEzlnlFGwDL+5D|hnfiBkPlIG3Gz4}#i$*yIST`XqN2nNPr9Z8(|@##ledWA zF<0yHdlx_*`cgisw=Ncxp{8sm9QlD{$ZHJ9=Nq6-W}HuORQENIY@0evl>0KDYnuzl)g^NSYZ-vR31J@GzrZ|`Qv{2L`H)VtaRDXwLsXLyQkRN?^xKwEBjO<{jG;8)yNT1DzzdJbO>qnSLvLNZM+ zgt)|*y>tr2-IVX)psD%rc3FIL*=v7#T0CTjmkfnq^uZ>II=Cw6ixxgx*f(*_bcwE7 ziz!KVYjodN`e z%!Yd;-fiNQYPw*A*LE31XSR7YxicmdzG!$nS~$=BT&5%qyNkftT&q|&n%)ShcH(U3 zin`Me_de=fy6@|%lrZ|WJG4jG715nyC_1IbVvli3FzzYgF+w%#mh22O3?n#l@V{Zx z^EIYZ(}ljgV(a967E-@5hTYc;-aZLuQY>nT^s|2yL;8Zaiq}fGdU=X`g5NE5!I{XX z`ce^n6*lR&bbZO8ROZR1^ZBI5r5I>{9I4*(f}x@e@9P zK)|g|xo-UG2!#`SA9YCIRTRG;^?EokZG55sN|)ykO4^f_9y*L>Xom(@I}%^~$fZyEotBEuTjkiSq@-eB;xbeeG~G zU+MFafB{?LaH72Z6`?qBD-8AP#`O`~`!&}V9t+{5*t)8Xb&BiTT|LgnO==nY`2)QjE0SUFFRO`zuNG-0UO(+s<7(+nPi zmdWsIug+1!^=uP3lb*;s+#FbL&^e$_jPs6)813Sd?4pHIYi!&D$oJZG^N7FTv>Te* zh?MFm6eM+Ps3)`6O)x?uJAZ>OP%07MdHaGYpvRSi=w z?feI~Q-T+b84s`z-o(3t%`G~08ojfKsZ^%2bJDBN^m{n0+>aQQa*ZHy#rpCPBs=D&@7XzC82CNaZY|(y@Hmq2mcgeUeB;ZL-Wqjh0)f*OV9F0r z;YLn}tK3?Tr@B9Zn4JOqW3_q}@2>k>ZHLf{N`-|cf|4q39@tSAI)^6!zJ~t=!k<&Gx&C1rhBxVc=NAu z87DRO4=6-lufjUGBF`ERoA~;CPKmE^X}ac$Rwg97y;fv-d{{>GDmeG1qlxdZ^1`JP z%8=h|Zu`QBH?ds%veKLSZC32k;@SJ=xuV9Vd_9?KM&M~V^ygAbXuMb zy=U;Jbu%LXuZW}}uZHn4 z;k<0jV=#x3H4l$)XQco6Ym50W*rzor^*E~S7UPh-IY@EvUaNxyy^YU(bfmux?LiJ#) zr%m-oyvju=s@WP3som8kr!m{k3F%8$4)h7T&1%_|o=BB23*Bqnw(U%BKiE5{5(M;3 zjVt?@Jd?!aOpxF8)gPNjrm|$|;<|2|trIm*doE&|Cth#8>@Jc|Rw0n##;Gcph($~( ztOD|5z6FRuT?CWjK-3{|@Q~Nt$WGM1HpNX3l7sBuI}oou0y%p4lfLHqm8g>Q8)`JA}zB>uzDErJuHs9`Eli3H+#q#(}|)R%)pgLtoHJhhT*h}%+FwH6(ac% zA*hIR28y*0Y*n6N{3j3tXopRo$y6T(E<}Ej>Fu$9TD)BK8fncyOoy;mM%kl;%VzQQ zdPwAKdg_`}Wr^QLU@#D7806FltR57+9xHuinj0ePb zFS9oEQ)j2Sc*jM!V6C4S_;KD&ry_tb_p#{#%2%+fmw4s5R8LaI1K}&2We?yELPc;# z=#Y1_%>_e>}&LEAGStKLT}G;kpfI`N!C{O>ACOIEno6->$Oe`#Y*>nXS2FB)8A z$l!Vq8x>T|&+W^AK2?@`)tr-JGBaU98-lPPwdHM#I01v{OM91c`qwC@qf5sp*2Bx= z1H5$t(DsNA5W`hGZGm92J?_ZC}6>EfH zVU#GI2+X$|DGlv-KU~By`yfauETEIlU^#r;jO(WHND=|`lZPcsWN?lt=%*WTGUrWi z^;jGZG_$e+@bZ~_pr9)WivAO#CG8 zyk?gvt8R~vBfYckz3ZH> zhU`do-|TC5%uPLqkSY#_SZ`&Au{8R-LAuYh`)vj<@!+by0OCS8u2OU!0{44Q#$mlh zHl;&n?aemVGP~MmqCbEtP=}NhkOEEAwzw22!EZ2LkkY6$jNmt+$;y`}$cHS@!y$ea zVaV{h67vD~Mc58N#;?rUF(}iOOXT~xhzfWKzrEe$sc`p0WpAa}<~^$V zwA;2yt2@C}rREz|_=e-UR6iB21V)|x5?ueyP~Bg&ir5DV>?O~@HEvo~7S}gMQ3W$7 z--a$Zw3!gl2;+!&1TacAOj4ILGftyS#S*sZRHf@7Ub0GylLJqXHs$Hbndh+^eU7!S zeNeybX@U_mo3Zg zhYS{hVbDv9nY!NB?eT0f$v4t}<`tgcpI?0wu#wiw8WUJ;+qXBV)E`TodSKhSgjIs! z>Fm1=*x1#>Dp&ZPnw5z?PeA=hst7{~@8gA`Nm{?{D{h%A2fb=RO~1 zumd!OxF_qeGD_l-gO%rk5q_wHH{?F1x8Hwx45t2ZOs zXiKgGzq;ZmWLNvV&w$Ymp~HXgr=VE56`_>p$W+QEz|8! zx|Ls7PnvDqJ*bvzj5kJsmutB9h%in;cegl$am+^Z_Ok7~_xIzo7R8XW`QnT_4W|0d z`GndvaE`rKoRRu z9ozdJbA|Rg3n=mT_Bf|Jz~@NVjfPvU6iF&%2#s!kKVZ|fKkIEk@B8%;`?R)7G}Hlh zvnlU{u_th$tXgVidhRE1M`5PN)VhV?^mJbWqqD#Wj(jeSsT>cV7ZyjEXIG~CkY~6- zdXx#*x&>4kknl$NUInq^ngq=xZqvo_dc|uw%WX}BZS<`` zWWi>n2yfFpsZH)!b0*ihbf9ldR+k;Ba5+^+8*(nz+5laB+Gk!pwxGA!Dlk4wmvC8} zu3YR&9VCy@>*?o1!x_@F<-NqT_H2AJL!|4PpjM_XS7qEN6iLWMwwF(@*|Pkh3~X^o z<+DPKHpB609rN}FB9arQntFFYH=9nQXZmC9uz7h5l6QSBMtGKLq3TlQV$h=zkqTOM z(Ou}N_k~J$pj;1hwbcLJ2kmD+&>JNVO+`ZkUk7~cD#9XE9SMS`Y{BW=2uxXizf{+X z^Icdmg}n{M#t-Cg`rvZ_ z>zYu-l<=*=IMfv!&RGqRTTBIuO@`X|GbcPbu1Z7!y|2}JV3(zxE~iQ6vucN=<_yPSyRLEqI^sx<1L(0c_FIc+^%h3=x9ZZ zwRU!fIF$|z$LmE2FWRn&bqDIs!jS5gqy zKDA;^MM%>js!8Vsnss3ZD9>#sN;Ld-L3;wkt95kYI`uPZC;A(fZrm_qv&;!GEVoF+ z6&yA_^fS%5!CGAiGFe)WSpt+q&Zd>44(~!;autoJI3IAsv1ADaCeQi!S6%4ypIMM6 zFw^q1EkrsacdP(AvpA2+8tt4_H$`e0J;MDcLVk(y+>dU_;OYlnDL~uTL6TvdwR`3< z!da#_(y~sEUahxqE{lGe@>~Ak++%IKM+bPEJCdm1mIwXVwBcGde00uoLdF@goEv7a z+U&61qN2Z!4sE$omk7Qp&FMKGzr*7C@+1np>>gYJxegGx7gTfp^DQ+x#OfOT{vWX( z_penb0KmXz!&{Ub3ZKiB&X9``_s#>Gj@~HH(2>bKw|H^Br7zjrpkPE$C#Ke7YG}1G zz5r%jtg)dok;+JSuqYuXWo#n|a%lXzf?qct*!Csb^abqU2Uz>(&ZF+y4^Ohb`;Vq5 z4s&ZG>I*t9t7W@7-q|~3*~iRtFB6yy;64E};i0CKlvJnXN!xiLm$bTLx&COu*12nb zJp9r!@vcv8gY<)XLk>Sl>fzyGV&FXpbC|7?A>t>I&2&ZCa`whYb_`F4U|SBcA~Mk`UK{1j)7bK~keChUOJc5<-A0W~CF@11FwR_T$^b+EAGhjQUc@kV@^YF(mAKGiT(RdZVKNL66s7XGlVb5LeLEDRMUq0ox z*)uv%o*pn!xTjhUPGV(anKj!p%}M zduzX4X%$PJmX7n>Aq!&XvQ+mm_&(8TGEF&wx0^LUsVr8SiEo85N0h*-{#NAGHTv{i zoHKx;b-uGEm}OAjb(K^|sOz0p80QdO&Tm8CZ1%M;7$4_-$VvB(w2jx-(j9epZPLk~ zz`AUNZU&y%orFUB$jDz578BoGKLmw z2~wd>73{C+4A-?;$H{pZmcDsVfJ2TOzVM{8ZlsA2l?OHf5o(wTAsjfUxTwj1aAzEc zK1r>t8KSAf^wG5ILiufGt>s6m%4oo( zNshEj+g+mWn6jx|TMFja^hq5366`T+yct62OTQ*;YmcE&fyW7I^!*IK+l;u$ah%t9 z_okE$0L;)%Fo|DE)X5yTQdjV0Z7lvvCnM^ycZl`j9u(tVO0`OB0b&mH%eEAL+_~=Y z{4c~qt9Wr(xGIjO>+E~FYOZu(!|UDcT;>T3$}(sCmj%_(THi?6+B&8&cn<7FGz&^9 znXdUYthu*?W479bRkdGgeRpCM#rvK~1<`Z;EDQiw+_sOKY|Wd0nLD48&)mbiAw2n9 z93o+9(x>tvP9%MFPf>&yVd!`ejuf*3)keLZHS<$Qq)4}#7B|rcI_!qb*UV4a)la$DDl6<#b$R^> zaUg^9cu$KjM5Nw3#ldHHg7873Nci(WEC2UKgs=yUo*oCp{N)!Ih$K+h^GWpzyU>ec zoTiM(Hf^B#UW@qJ9%CDWvOvTwPQ`qGqA-}8<%DiC?ZAI|&A0VZRImJF<(q@=2_7HE z=)9UUR%)er-0I9osnt1!h@PY3a?n{IMogqFp{@(t0r?prM-Jo~el0$>teB?A%&}+Qi zvC<6|xf64cJwl^QGFzzV+($zp{q)-5W6GeOc+?{!{F}6NW52pL)~c*yX+fc3y9hmt z(K7eFH;GymmXplwu5H%`za%H~ zgU|6}Pl5T!d|Nw47a@GsbDp2yL>wK0B-?ZoQ3KlO#_35PiisiOGb13Qkog`t8~9_* zEFVYy!7*&**zx#Sf=XhM1k!r<%-KD3wXUB6hbgsC%vaZ~0Ly(QARpuIJA#u_}6rriOGCWFuUc~^#Efl(Uz zR+fY`rbV{ts$6U0`@n8=TGT=xM+yL^fk0)~@3;mqV?QjpAZk-|#`WHB@L3M5wYig0 zZJL6V&(hvwU`Jmt$Y_i*^+<>WQ!q_h-U~mZ51QiNMUKuim#By!YE$(|E>xIcG9 z4Ld{a7*npQFOcGeBeC4K15a(jJ-QddXaX>Qyl;6pW}aS_3W(TFA>?!ayjaW?pVbD= zJjS1I7w>ppF)%*fJE?ajO^5FdBOb_rntRFrfk|SpnU)xOT1qv#$ccm$IwuHEevXKD;H6h3zK`hNr84uW^rXH|RI`rDr}uQ$rq#UP5a9m+Lp! zljXAg{8C=tGQoJvHy3YWNXa!2Tp)L!`((KvgqlNX#mjJqd?{QCv7YtGBo!(LC!u7s zGX)EMQrFdL`sy`tIhaYM{EqRarfzbFt+I=b@1|6{T2Ymz_^X}7Pia_QQS8^`RkTY4 zqV!9G`hkPm9~a*Sspz>ipPK3FvHJt7*z@7J8Jdf*3gz|-2Ch?z%UK3Rf$FFWc=+gc z*ssTnGZ;sjkNO(yq1I!bMhC|XXV;=c+g?ULyntO~2ikkvu9Tlw?ni=Y#0fHmA%s7Sc?s5qf7K9OSTutA=VzdI@T)VIarWurP?!ORj1(YFbr;FyDQ^8ruKWO zI4+grC@l8(U;VnJ*4ZrCCYC^S?Hk+fdlkRjoos)=lNo%4r}vr1G;%VWC2`z2@k0y7 z67?vQoc+a#EH{$E$7JS*rEVyufIPB@DYC4(cQp7OggL!j+~&BSL#4&%;$Ec!cs{RH zc8{AVT=tJ89W0B!7|8Q7>6}Ajs=RgOm|l#^h@>7iq=b7Yqa7{mTKX%VYcFf zc-`mE?Subh$a*w-xq&_nr&8jjeErQXTK^ie+i3k&iIlM_0Cf^3!8`r-juH24Q->Fd zMAbgd4<_#pjzZD2gY(zlp5D?~;w}&M*Q3uqi8yE%-K?NZ!jq_{-kwMDs8NoEjU0e% zZ8e}Ful1}ahi-AV*s|dKGPoRYEDk}CYwQzIfqI#JjPwn72UI@yt5^Vpx4*LRiCQv} zaA7nn1SFssmW7PRLS{z#)>EM{e-*Fd4Z*9iH3i}lck|Sh#9m`}nIab+&zI%k%)(gy zSGLTV7B3S+OERczJwu8MR7W^4bI2=i-VFu_#%HJA8+#l!5nc|oe8Bp2iZaRC2YIT6AppKfAwS+ zu+dwFbw2onx=-q=P}yY(kma2D*7UJm@!B6Tx~v9ADte?Poq|sbc30IX&@|U4lh}ZtOM_)rJw!Jd-x2OKKBIr^kc4txg3Jg@&`ra zgx-%rzs3zNMR~Q>Dh@0OC|^a*8X)uO`5HDwbOb10Ta$j?OG1>KJ29Ij3 z&Kfb=9Ok$Zt9TV=6HirdHq?8oZ7z!hMaEqoa&T#*zq-cni;^uqB_%%J3R6h! zXz#b83W#a>O^D1Xz3XY9l2nhXs#gutV-kLq{((O0C8oJSiB(U5y%4=!`DSC(qcA<{ zF$=$HR|GyY%~nqm5R6e>hG%?S0NR1J#bBW-v)z{&N6aeAm=31$5uxpAF04z=B#!$V zTzetZ~>NgD!G3iCwqU)6-J$BjQD#T*kI~OC4Ia z4QoL@y-r_+k9N)F)EGyCbt;1DegDB+UAOUT8DSxTl@O`pwss=y&Br9;SG&5QVAS2( zw1G!z>?YjO5=cY8Su_(BtKoAU`njIsWe_Ozh6)o+Ub#%P#Wtk|84~Ne3hsTfyiMGJ^goJG(`q?oazrHsfKgUz+Z9)M!~5%uZ+O<1?!|8V7A~*rGo0 zbW2&_Kr!SK22P_to+NudT*|$D9p>vFw9mfE=+ba(25ua?_;h>|is^pTw}Ke41Iw_r?7`svgF8mR|J9$q;Tucox%2^VDs> za#+5n+8`Rv!5YSm54C*i<9=1)0_DF<=U8=nmBh*%^vzzNg(t|t^w2F1c>LWY&2)2i zsCwV$qnr6UY8Q7tZbJqP0oNMi$eGEk9k`|tbsy__v0W2lC7g%(O%XCcm0dj0p z{1FNdWixwH9!lmSfrPexIcsK+se*S>KPk}5uz~CSW*QEbqnWi;aK=Bi$r$DL(_1h) zW?Ic9+nuZ~uVYUyTXv1{onzRV5=w zdBJ|b(+@6ewo|o$%K<2&8fS|KyV?9Qo=6SOyR$d8uwI^>U@leZ#IiVM3+-VqUG=1V z0OEWHGv?IIllfJX!ES^pu*}pmnk0>2s>OHl1IH}ilnEKrCY)#1($96ubVM=iE92L; z-7Mq+7dPT2y{K+K%N)kpN2Q#7SYVh7e~u(DcFB9)8#=p}5w@=`I+<1HL}%dXv0v>{ z7j#$3{#cD!^+JH3wyoiapH_DyH3?mzN5!@96~6F3Eeqk^YLkDDU0#6g;jXC>jk=A& zH5Le+@Skz9J0}8<;XuXJYsM@gWkigVS5uL(1=c4$UM!}NY@fq#u&qZJ^w&6?2eUR0 zIL^%fxUOf|FD1=8yROnT>(*wgexihrk$BLLGbuRS_H>6JP)Bw877)L1#Sg3O27;EA z@m{`{SxfWwu`kN#&LX!w2=B@&j)JbHyfU(EKD!mRJVrX+Zm&Dxa^?eZOOP+$7|tMv z2j=)=1P97gM%@&0ZN$|?x(J{BBr97UzoPhSm5k%w#$`WlQMrpGJzgOG%NHTA@&=2h z36cQ7$98V8V-Om_d$e7*2~3=}L>aZPs3shAL4wHB)aLlyaRo+nhe?rKs0+R9>w|l_ z4H=kG*CL11%Xqohbl%R30{1u7ck{63W!FuV7-l~#?xTjAOwithfwduSEG>&3)(Y*Iv*xMQ)9tP# zS0;T-TKVVoIl52DINIMy)3?Tw8*r1BpB}F7OsFjr2%b+bm>y7Mr9SFvsP-`NZ)tlu z?Nl(qAXNq(`cID!evuO>9NHwxUgAXH@)8AY``hidSYnyBf!+NUu~8e*c8G6X2wCr2 z#Oq}skDUW)7I}^iuAS2+`YQYxStB6a&+@c8N?@ow7&MdcvHHs>{`pq_cf7Pt|0D|d zPa6&53gY8IVR<0;cr;9`k6e5rLC6+j{Uvw0^?KPSoe%&~MB>=GG4+pTai5ouNH34j zzWmZGsJ^AhwzbH|8D_r=Xutm|0aASewx9W;h;#iEppa`XI6x}s!MXiD_l}ICXz)0T z%5t6eIBGvS{W@7w2L<{JT<8+n{`4q*UHOX%xz<%YXFH0O@RjcA>P0>NCm|Ann3*9m zS(sJ8i*caznh(~n8A;i;dMCuRhAI1SK}$i^^5A|`VXO$vN;(SkfJXP99cC7guhT=5 zS;w)2(zr6zL9#^R%ZFvnR9jn(>XW9ad#^M3H;r~kFF|NoQ*1@YSz!^+)Ts`VebJy5 z+3x8WmL{VylvI}GKu|}m-z8ErjwzEW{760BQ#WFP47E_9qX;YdnH5l782{>k1AA2>gE6h{b8NyPe4F>i zi^phkaYun0?io~Z!%Dheb5sD#5JNG~70iLD7$lk#9m0+a9rKuhMN@>ArjCxKW=G(XoXq?%Rtym2ch~l@b6b`FGZQCvP(F)6I3arG`PcOSihM z&4$q#!_$N@H9H?4zg>%6MB98mm+$g2l_=dc?GxA}+LUJiXDUrK81O#iicaG=Sf2_; zIJKZ|`+RotePG=sgtGa%J{ymgW^5B39}YK$!;QUeyb1%E@t(7wlOV}#EV-#( zda)|!g=r27pXYKl+IF$w<+-XDuK(psajOqPpSlabGF^@^Wh2;QKiaP@aVxmqIyJD-3HB zwi3}E{?z;P`Ews3@!uRMk-&v~{fR!E+xAI6RO0?#w5DTvW0a?V&0Mpju|c z9U+>7uH3h4mZMTU_qs&egTe8e*cbp0+foe#^!Zptx$A8&Wxc3Y)*%jHWYyEHIc54I;0RCl?YQ5$vvA1Au3u0U?U zKn<70ee3)8S%%S$Ld<!5b@Q-H>SSe4zQqdc9n+!kw-kdO|3s~tW2pZe4} zPS2NAOpB%KSK&6eV5t*umQziI?--OOu6F);%Dw4pLQXpcP=)C3s~(^ZPr5&q&(VAj zXhhtgVcwjN3zz^&k}9*)uX=CX&iN@zHCa`Kn@8FV?A8XN!CQ1D8jHs^gP>|{(5;D$ zEhH9Lb${cN3Md5>@B}kb$y1I3gUUFn+r+AT(s+(N=;JHmHT(m>((g}{A&X6zvDn+`}Zhp z1rH%J$ zuRFbe@1MPJz*j!Vu5HRc%109NXIHx&RR(Y0pO4G$(tJ7ud^j*d3$XpUjmGwd%^dJ$8X@@7an| z8uf+80MN~fb@_DO55I$);Nb*@Vr}>RT+&TK0ej&quS=(aj}U*ZuK<+7A?xb#Y`A=D zT;OSXsqyP}95UWyvp>QS6zI#jzns%sgkCK<&>2j+!S#>Nj{SCNKq<7Wx_uqMZV%Cw zBWlF`P9s0vKSZG#og?Dy(-ZPK(MqBca?*IT-%0)6eHxE>#xHxG%YK!<`mxo86kBdU z(c8uLC^Zv1K642)TP6Jl2FB3smKtycN)ha*DO{p4!WcM)#gbV9-;_l?+@CWYXkQI- zfIX>q3yU0->#SlvnMO7Yp|dMvWy-DeRXOZ35;=A^nH;n=QN);`2Xnb!6x^2{C^xv9 zQipJQOt(hDe($IcfY^udph>g~eV>rWSzBkys|xUkw<0>=AGSkO3o5M*kS5DxtL#O7 zr-L}ps|8|7DXGb9k(#vKb>Uxsf0guz0#hoff*Iq#8ukB}3^^#jS6#$mk5WvBcc>r` zW||x~&0T(Iue6Uh9*R2+&v*pDy5!?n-in}y%L?9$i3gUiH<=YC^A!fMKt)s~*rV}_ zid(K+#CQAEe>AhR7~@`dhHi=vthj&+TLJ0~>I_hmmMxk`X*=)PfCyx5?6Eu;O*%R| zH|>FgqtrRTEpk_5ac{{sgkHTtbT^#?sytaP&jF4Rlu^sIAlkh-%XQdZv@Ey3QXcNJ zp|m=fZH*$Ys2PS|S1rbl$QAT$sjJ_;I$%4@Ro+cc@BfBFN6VlBK#EA-s;ZVL4NE%Q zRKT6tr6Z(yUH3uTNn$0H^M-58t5{I@A{5|2fi%lrQ9+vtG=c0(=W0DELlJVXa zOIEW-&TwlMAPIJ-;l38EIGNq4cREtDP*Y2AwTWcTttPPk4GtZu(P(-b_+}^e{x+Sz z8J-)#LBR7SSs|bj^R|xgI4;Si6=SAz z#c?Wv#T&xfdVCGE;5DB*PvR-Nj9tXWCs(SMzyoQLmsWP%|fb|$4@})Tk{!wJB}XBhf+=UO0@iM#|mVe%|4e0voZKH zbW6H$OXVm;l%Kwgp`18Cm$OTTBY-|fpn14PMF0~`_!quZ$m`Awd!S>y!hQB+2D{1& zhKjj-e*H`QeBir~mvYa60RT@yKzpPqRxO`;F1N%Dz;Bua9&eQKKVXwU?&f2CPwBO3 z+A~M(w1P$MQ)&-9zR}BS-wWGudCca7lz-S*YmthhjgswGRM^d2d-WH~Dk~xs0BIu> zYW)0${n)vITS6q4!A0HCv@o)dNntuhC^Xo}a4PidcK#>Yq2<%%99TlYDGE1QYlapp z*T8>D73POg&HHD&c%7%H@auyk7&`V|ld}ySu!Af}<-UxvayP2JfP5O@QVSulKgKx5 zAT3zB{6)=Tzrnh2cg2(58z!p2;j&7G_tCB(60Os!p7EFx*bKzPy|i>`&MB^vFcWq6 zN4QF$PIqN}U%pP>H#F@HzwlPL&U!@#(sJ%hDa@;<&<5eV8+v>|a7^_p;@g|4b`ZQ* z;CcHb{L+f&&4CsEGS%OVlYIApKoE!TQ{TU0qW|Z>msJ+9wya*aN+#uW%bSNb+4NWD}TmbG;>URTa$$gIw(4|R-|jXM9bg>1 zOHEuuc`m2zLB6Kh=-DP%gEQm>TLHPP_a^%Jx#rqFZ(YoZw_3VNUnQDo&*y!Z-rV{A zxboZlt0ds96T97z;<4AX|K=+YMLala@~<)(b@yMk>%NSnVNT72^n?m*Ef_L!UQaZ! zNpGDEGa+$~GPTXqnYFLks0lZJi0$V*#_5R@OJ^vJ5=v??TMy5?J8nZ*oo|q0F&Qe@ z47fAW%Bbm9R4|=d`{!2tFPGzg{-dZo@Dlctng41nr`kWymrIK&Z+}$1f;>o-sm1o# zj@pOS89SV9NphVnDe9!tl{aVuX={=?t2#k)O(ds^>91=YLJL2s67=Fe#BPnmlLJad z&Ch;Au)ObY^RL>t&sD}=I`S<4_LafY0geq}Ol=bR)+8>rB>bMDZOR+IBp_fDtI`!+ zqER&f1Tl0#jO2iDxe~0ue$J;iATRKkQz~OJ4pJ69?OfZ{L)~}$WHLenXo6R+1_{tV zbrwy74?N41v2(xfw#l*>BYMf&p?X|-7B(7>gQ~INQoSGD+P0lZI@~+~*|8M(4e_tU z;!(sZb6Yt@O#7*a!Q5AkwEaN9Qmn2^%>j;MkWkP+`y*Z4`)TE9D2W-&fc5XRTU=h8l(1jV)YT_jfY})PjEO zkDsqc67@j2P>$vE1wfk}Oz?}sduFHLK%n0jntD!~sY%C2ms7AtDMloQD-{ zl6)wZ3UPoPH#&JZ9DI(UodU$&=*>(s)x8&Om&5YP6OY$80F~WsgT`8nRy);Z1vYesRs6zF z=<_G1q4{S59@OZ5P0U8rg8`w+PF0{0{`u3a>C!pT;8P4fE?%P+aP-Oe5Q|pKUF{NY z%?p6twD3M}5fd@Vrfr|9zbTzD{7^nh_rYX;GJX+9m=$p{yxSpLFl%?T41fqr*9S(5 zrxIMXf*RewXxnwd%YCDMx|0T4KV=y|gKS92dJ>-soV!w8j=3YYx^+kn8vu^itCsvW zg=>l2p}{UXb!LCIPfP3k!#|*0$MDi$0K$VhG@d1($o?67Dro;fjz~-T)X*0jBhAO+ z#q}5epwX=dG-nH_ILYWH;x=G`&vux0LIwcym|0o~pXVV(?A79P<)>h^8MK`~ZpR~6 zv!v_CJvHl@o1VX(ElXl+_N@ZiFq=5n0S=eeZ_cl;QxYu~iu_wn zcd)(8I`8*mj{8d7VXfEv-vNT9!()Y0Qn>&Lbek9p4~P=>k#M6P8cD*W3GJa}fCut% zY2`;5Asw2pynp;f-1C>w)B11gn~pB>pBMa}#~m7!K9ZN@;<9#Btv|Zr0Kz3m8w_=S zx-tI>|4P%_Z7Vu>!~hHi0D3^EfT_O91-f??T%4m_$EAV^r0#Y;^R70Mf3F810I_wG zjCOFyeB3W%OVNL~L*ch;juXDQ3G6Uiz8UljJ+le^%37eO^*d;ycvI0Wj5}Em);CpZ z@j~_s1gODKKI~POK2rh0r8@4w!TYrrbZm9!m@Ia08l_>Pj7Eqr@F4h*Aug51=*xUyc zvN$hO5W!=o^5373+^OcBVVkow0DTDz8`qiicKfxX%Fy z<=kZP^)vArBWlGQ2{^Y}1D(d5lwxbBk2Rv=myy(;qUuwAWz;Y6es?$Jrz6)02flQ_ zB&G>Vq@OeIEW)104?g^OQ45;Phi3X%IzstehBJLzKl6o+;N$lQnT@XrYb>*5Q)-v{ zzHpcNQI`fkn`VVTssv5f;bo{>SZ}G5CBT&$G48Ks=vYs6*lC%m6s&VRCDiN8W0(w` z5hj8}9I(YMb;BUd;s6iLC}YYhyCK<8M-f3u^8({4jL5H=I)k<(mR_x{rf%rfdSNrs zAAIJykZRKmhOGtX1#9ZAGTp`rbFD99Dby8@uhg18+nX;@X{6@xVVoe4O?=%h-jCz1 zvHUR41@Gi=JK2~{SzQ{x;&q+IV((eyI`y)T zPq)p`sTC>RthhDR8Vmhc|5$U-zNL#%qp1u1MK>97&sA*x$b`^ChKS_B{n_Ei2I3#O zdh78uxW9A?KBl9SUjR6lPL2{Ss&gFr=nu-KuWI#Fia&qGek$T}>XUn1>m=E(8fHRq zb+&bVhzNmq0w{VCSG`^xPi?KPQBD!hiAf7Ypq# zGYNttK*lKykBB_x|NU>lAxs}1>&`Apbd!t4?`>y5tQd@9*+YSd8yd(R@`2lBe_LJU zbU4$%pWE*>)W#I)0Glz1l;g|j1}Yh}y@0(xMf*kdC}Oe=5OUxUDRD3yR`TX`MFKi1hT^3mx$Fu=T|C; zjejGDZ+uR=hpiVc5^5}_1`q!adv6(4_1gA}F6mH01eFdEX$2)FjdXVkNFyyU=}9A< z5+W%eOuD;4x}>|MCMn(Qo99{2K4YJ?&b!wh=ZtZ_yk8uQ2@EIydB=7A>WW-JZ$W3G zS?z)5t(bCH-a{7AGHGq(w!U?ZrHS&X{V-zM3$j4AnS3i-p2qF5bVX7veqo0DJ{h(W z>ca`$f>?B9{t@CGHBQfy9P?DVB{wd!U{thPbqD;7m5OGlD<|DoAsJD-n-%Z!y6X` zhFi@<{V5nd#9V@+Q1nm?N#Bmk6no`;4VD^Z;%lpnj0*E95z5K~JI8u(zTrvmYv+g3 zjL#KYe~9!d0rFSUmZef!`(L$Ng%4iH)t}Ze!|RkaMT z3fXcXPH4S&w;tYos#|R*LIWpxWtT+so2vi!$|nnKC&vr800EusgpbDx zg>3T6kK6VSXgfrm%U5I*>GbTCBPa{Mrw#o4#rltXJ#kP_o}In=y9zY($vy2*Z<+T{ z`1_lBySd|u9=g=4)MkdEJ9_L_s*+DFCV_qn(-hVdKeXa3`-O&EffT$$)_)g zUr5uYXDJ4gB9JbC@C;)Zl)Ld?2zsIZo+DI$ z$KuvBon1il6#D}z)-ToZA_&js6iH>;z)8SZ5s1K-WvPAfndpTYVhl>iGIM#&CuQF`McdZ0h~bvW1* z`H>)ti(r?k@C#@^GUZd}Q6`#BGCiCZzs53Xz9V;D)b+M~Kb8wc3Q_EkO@ye~EyVS1 z_mmiR0^LovKQlqhn=%lpk60;Ib1urIsO*j8_su3O!gX|i0o{7@(MLEYfpuXdS{GB_ zk-@^gQuN1o!PhQqVtHgP2)_ceD|W z5~>_GX;ny-nhwTK+r?x0vZ?006PlktDKz|s2Sq=HaaB3aZ4C=yN-n*J4)jW;NVYM< zkpqxWQ=)*uUH8W3)D(=L8K=~T+O*Vf;_DGy-juZ~Kes8;;~A*uR<3xz0~9;Zp8-JP zC5A)si%@o(gI7(6>>)V_D=MW-u$;o(c{okCvVDSKP}NN!p73_S=3l#)JxKUbf}ZB@ z+RH+oUyo_+-d=`WqT`${MT?g4F$YblA^Ixb&b^FNYe1=gF3%gV&l}t^mHzwULE@$x zh8kLD7#~O@a;Yq*S=*Y(P84j$HpTvGB15uAFL%Nq-K$1MiVepL_leyBaTv6CM6DGc z=45(eJm$HtP8U3T;X?#5$HPe4g>Dc9q?_uk^_?2~ZoruWX|-p>)%B@B={rr&L>`-{&m%FC z8LQzuc089JBtsa8T3{97ZQJkb11W=_nWl+H2meJK>m$egq2JH0RONQMu2gZs2;rKR z9i?aO&BNHg-0O_7y`|M*{V33%%A<+R$gA-h8OqD6*>pN>g(|yq_nM1^%X;$)NaVa^Al z(d&cPXYH$RTxhULEO*Hb?a>gLSzg`dxbIU2dPj)bu&}0AsJa5D`H^$NYnM+f!<7X^ z7T95x&A8~6*x5iUKD;b@W;0jMVw5cUglnef8A?A;DPul#OV<&-!~$i|zKqR8VaVZZ zXM^#NX5B%gA618Cz2rII>655wFHF}Hc5hxzl`oiCfC=&Z*wQidRL?87==^-&q8*Q~ z{zSbvjhN#<*KDh3Gvpx_(&-%FBb6?wOtYR4Pc>^v$KRiJ87)-RF`vjaaXYtOAKDgcZ+_~ zerdaZ`mVQLznY>*XRd1Vb24nlB&r9E*dodu(L&VTyaMQgD3Glt_36I1+Kg>qiq{?; z+zuNtU13#NP)Fs#g`Vew_o3PUA?l<-56Clx7B;}hC00Nt?`pI(ONWWqov$A?{TWvv zBow0yr4;qPG*N#viFNfnsh!7yr)R*ZMI_TQ{asHXvq9=$^@AEdQ-5ytVLUxq4wI;> z*1>v9>W#|;5m6}dD~Y>w2)ZO@_}29IWM1v^Nc%p^BwiP#6!+S|`C|k9)};xeq;nll z9{2Rh9iXm-jRm73d4o7U1L;8RT=l$dl&2iRb9p1t1zJK(SVQo5-$}cznZ1p-mGCyA z{7Ix&+FT|f!618axMb2u``%%X{p}4h682}?v0Sxiv}23Aq%%t)vLCMRmmL8-;E>Nv z#1fae$g^RT?h{1~!1`#t`If~`7&_hyntNPm|6&$z+y`AR&e^Wd@Y<3^U`=^pz* zLPzljc%!If4laJViN#uK#kP{n)=1bGBqQ{U;kGBxFFbCgcW@M=v9V;HwW0WXlHO}; zY{Yw2oSmTVg@L|Cihs2xF{nJOrXd15E1&^U1C5BW8>%JEJc#omS$u4cZd_jUo5aR? zX!*qt&Fc4`X1}}%VNxC+tUZ;eBtrM(`mX6lX6#hcYYr%L-ikC|4Q7W-KP3RFD&D(eyxuVJZ%!)f4A%?st{$vT-n5R{JN zg6}Dh#kleaif@{~KFgQ7;QnsOeAo+PNB&T4Ke-_|<4&A&{lDP*X7xw0f_5 z-S8oy^!8oE zEftCdb*&^fz{Tr^#iQ_ire&By#N75v=t8xk&Si1gbuViGX^6WAHLJG5I<1}U!^26l z>G}fD)5ub2mO59?+FnD+zloge&d~|n9)y5&YG1Eyz&(#F@t-?XjlvTwU5aE99wKeo zdlb62BbMpx%2DqFKRGa)H#~dsbjD7ZtJk^&1LXH4P~pLvp@>PX$bk5n>JMdtp?{#4 zJP_gRm_kZvL3ZmUkmohWLA|;wT@3q~V$QZKF%kT#6NJK;)k?G>*dkwban!Cu$9kAF zt$+GZ5)2e-_r~=_0mbk59eShsCh*syE*OENTd1jOlbxA1&?x7T&Z-mWd5eO9;3#wu z5q5kM7z6Au4x85>tx?!Zm{<6gF$}JR(s-p zV`W`ihJ-#>c(LX1T!yzv;A%gESFf~Q&Oq=s<={v;B7`2jkP5}g)Bx3-v=_QS7tIeF@78Q()kFC8{ciZB`@(`jKV@>$t2U$h=q?Bi)a;lnLeq* z4(DhrE#aZ@DPXedL6FQA2)!1h-_qLD?jwDhzCF?O$7fzzdL91Q+0!eojRg zt?btAjS_vD)dvL2jk~;b>b%aJkozfUbk{Lh?f_9gyYN8(z`$T@-|d#E^BR!wtL!eLMa9GEwkciw0L4v=)beK zT{jN=OW(nf&#p?g#(8X-b}g>ED$`LJHRkFZf6`~gr0u49-bAg(;Gr#(Ho5h{q@pko zc%9|)cqz@%IxkEYs_^iIWu6SQT&$I~_iU8XL`+PuVpp3Y_iXA*4ib%eL&xHy3&LGj z6JM?PH|{)coiP{$8aqM_g<1HIsDfKU@!GuyJQ2=&rxK{p>eP>VZ9*tGuc}l3lP|h% z``bXYqImqb#J2}Dg$3%T#yN`Dw68ABI;j+VD=Kbab-jiW0@U*Sv6fK0&Y$C#H4B~s zS^0l7GTbRS(7iXRV0Cegr)kXavJt=78V^`4CQ7<3*ba_!3~Kp-4!e^ba#A6&R9c@% z_$|G70m|yNVv;T2)KY4@q||^d?Y=WpX^Zk3&oM*Ct6iB3;~7 zlyaV#nYIhuuhB(U+Rv`oV4}|5!sLI5M7vjPl`0}}Y3e}g) z-PQM^+1ANl!zr8nyrEAtf`U5EWpAqdxreY2yf2inE4CT~$Yxt{*~ruTirzB{gsGVLi3gnJ?8;b_Ap2%arg#Mb$P)w^pmI(Z%o zFZWyn{&wSWuj)`-Qt>s2c&B0>2z$yS`CLY(at+fW(PLRV(|EQM03M_6=MLH^ib*^3 zuv1uPu(}?tUr+og{bliFdNu>AYNXf$Jxnh0{(&F@&o1`!=mK`(NMwB+CQcTeN+~*a zNzIMAEj_9@o;k2kK{5C(lvx{Uo8RhBKumQtfGZHK(=%rj?jHg*If= z{unTqPRsg+qZ_{m*m0>(d2g{0p%u!0=l@nbloIl3$Rr9lX+>5j1zzYfsgLEX>&B^m zj7YsYd=`Cw^G?4il(^y;H98nWG&(hYBXe%9Qk3tXS4k_aJ*ib>%}m>qZ|Q@6eHU8w z0fc+5;NnvjW~5$jAMz=EH!r0X@oR(f?9~en!TPn1QHf-iIC3h%et)X^#EUI9+w~yV19w_Jc%mEXgwn1$tU|88g21Y_YJdp1(b~ zyF!igZIM)Gq*9ov@2iJLWpsp;91ybP_YeEYW~SkMAb$0v@-g!l`q;eDVWKh0Pg)fQ z-}c@_oO;O9gGQdr3Jf~5>mN(_Xx=zLBzl2nM`o*?`Pu-AA+P_v*e$}NRyKj%qLfLq zR@n7~IPG+6G`DcCTLHQ?nxj0NV=v!1yw-3!%ltMLg8>*!3YAcHrw4gRbM%VhR0@>n zH!fh;$5l#|?y6)pB0=k!zNN0{rd4j!G{FKVeAOTu=)=Od#BiMgbK1MmGE=D&*iT?f zU=};N|0Kf{gqwaxg>oprJ51?eAQK6e>a0I27@mKf~=G192e zBAdFNB2Pa3Iu`P)hp}*}(0UBr_I;hw&3hUqF_dJb|-(iYVdghrgrlu2quh7^28*Z@E1fi^=1h zTf4prdI<5Zc)qe7bO|a=>{2N|Td@kUyx9ZEFvU0$}~~ElV{Mngas13NP%Z%@A6@30v#lu<4Ntg1ze$fF3tqf9mq_mv)d; zXAqhj(??osrkTO7^*!l}S+X`CLL7>N&9Nu%;s-%MugIOV#OmV! zV>VS$SWH6M+U8q0#oa6vtIhAaLdaJqdje@Q&zy-=;tpKtqrS$w-TEdg6?rJbx`?Ky z2UUukzg=ygc$_4mvYGAMlGPiBbSRy)E2SvzfXn?RC5mQ0G}9xiJPk+9rp{rfKzb$% z%1*C*;W8LKGniCj_^AhWdc*pH^a4XQw;{c~kPCzA*>sa_p>vQOQl9TnE#Ru7bCf&8 zNWzx>q18uXQQ%J2aqCV<`Nv4c5A)JhdS%+EHMiM1NLtH(+`GAlyPDA20c$c;>U(x*!KEqJh>FNtD4a zcXJ+`@SVETHE##!U7Dq39jx519_4!(WcUU*IJNsIp(x%H5){n!I?~NNr6$`rr{gD6A%1M%(Loh##4k#;p%l8n-Jln#5_#$@DyFG0wI79S|S+Xj_xNlxr&F1>k7V*+D;ny zXZ)e!j8_=}t`KYOC7B799aaB>TP)w={)-2LIY3KephQLeb5RJ^2co9nf>1EMBE7~L z6G8dN=RL+|OYkY9NTfHH;Pa=eTXEXfDnPK#q|Vq)pcvqKx|=JyFMEUj4~XXbqVRC7GZyT zL_*)e<$hLdK9rkrvFIBilfr+&+Z#tu8}ibCCvZ3N>WB7$#$I*97h;ZbPm!l~V!Z;1k=V~=YP>O-sQOP+$z*Cn-#P2=T zJc>S!A1+DCoKd=U#e^`Sh+;@wrrCD`)Y0D@7aq3)rk{bASsS`N+7=|dPNdkqev*D4@xMs&2-f4w6By)x}l3wws*N}Sx>Qvqwg z+M8O7ci%Jn$+`A@@g?NyHjM?uoFA;lYchg>krWJ(Dc?@h zg;~|vGdYI~Y9unxG~vHUjun6IgAr$R{c&M0=i#W(i-z}0O7<}p6HJOV_Nhz!M=^c9 zPLz(t9y@F_QmqbqjlQFZv8|UMq9=Id=f&|%1m3uWGH6gX%{}{Bmho(E1+nTQ`i(3t|x@@B7b^@pDob;TXP0%UTk<%AHXxu_r< z^)SLU)A6l1Q$V0i;MMcbq3;odHT%G<$1zCDSeDL+xL@WZ95so2Hp z9h7=Ax$Lhe|6f<|zg{_uxN|@XI10Hy{>tRsk|9yRu5xm9vZL&U@wj6cpz)B?S^Lqt zy~d&}xx}5opOM|t3ROnkSWpS^H_;z1Lb(SVWr;Z>^Bl@!*$Gh;*}};4XkPZqgf#oD z0$GMqd+=PQ-CEZ-{#*C>>4Ra$@O|9n@Yvq<98%Y0*}wzk-5Z7hekybN0vdiY-lGgx z6urR83yB)(0@CE4UmcSx_I>U+$utgHT5~ZmXHs>bL*~{?&={ z!|s$%pUqm5oQa!jE_oKk*K!6S8{LCBJFHBT~s%XaW?)b3R}VAz7JE zrI*yMAsEN@nr;g#&Bi&V3CD3MAcAuqmjxVoSlSA7?bUd(g6|%_mJ}kZq*py)Q7sku z2#pIz^RM-D!x$udR{SL^!}pvvP@YOx`0K&wH$c=0 zF@J|@&s&|E>gM>J#!tpS4QKF3$XA>z;15Ns!QBX+LtTRI`Mn&1(J;r|J*Y)|F1y@m zI57e$*Uj`9ItQ~U)M`*W-n{fvuD_gas@#E&)r-2B@})q53^a-z7}Z~xShuWuFq_oL z2Tm#AAkHP}l8q2&@S&AtCq*#VGYmeTXW3*dgaVx;S`W4t6TY?@FaK8iZb2CX1qkyg zi1kw%CMZqzuAF&3bM^`Rdnw0P5@r>Yj&}iIq zpVaJbTFEs*FF@}fDvN|Vr7V=S$1wx=`txh9ze7jzVbd9561_%um$^LQ$D{h_Y||=0I*kg_QQ4_qoz|v7XBjW_f!Ujs1fjoP*f1Bc*>^c6 zPv@KByt%3_tHM`z|FomlbeQ_%l(BA8An|05{U975);|HApV;NJ%cfAZU*CL9#9U!L zrn1Cq6irR@v_x9W(fva&8eMvFXw1npW1^9w2}t+yY*)%tXO^PNlBx36SR@(^QpNwg zo@8Gc)To+i`z>(Qt^;cYFUn@fC&4auul&*eylq>B`RtdaMwgOw^*wL%e)cU{auLQl zL{D$O0|N?l!J|%ZsmA(q{Kh!2Pzj+(522KU%b^<{S~@VbA~&{Ix|%oY<^5rg=JdMW zbWc53Y4xkgMD;`*iyVQ#j3JQFW)kVLR+V{sG*D+5v}p_y|DspU%0$dpWCU|6nJ5U6 z&F_VgTYRHjjEJLrm(1mniSHra8{bt+dCX3O0u5xsD%lN9u+K;lBO#+F6t+m1MUt#x znJ#zN73npd0HSZn{rJCGF@J+zc%ek!8DS6ZYa;!Ps3$Y#kMyk2)cx}5k`;SXfxwiz zF_O^50E(oIk0A9@m2=Ly;WIh`u3F(YAPR>VXqG3K4W&>%^zqsRI@Z7!NS#VGb}q*f z{pN}^_pRoy(uvQ0>|>PRiLksOFHDz;XZa=-=g}OaU8e?it!73bY%-w;I?5)pSc(tb zw!2EtuZ5cDvYp1TMGgIeaKp~__1o-M><7h3u@5MN6`;(oYY)Q>>^=v6*hf)+Ch~|l zt=%o?SrW3}Q!pG`@y8n8e!1m5m&qti;HDTKw{F8#j|KkvJ$w+v>XaiEhM;#sVXw;o zK707Yf^%=5wTE>@kc`p9lpZ~vm&C{YG=9g}bymNp><$jRqxep(6`R8~4K_xc7+>xR zNz%_@pNx8|)x|%&bzm2Xw#x=$!(2>)>@V#Z;tv#oX55!2Bq9FPJN~SU)p>>1hc!!YCW3 zU@XCOEnI`ebU$BMQ$m+oI6+;G^BrevwH!q&o{O>G;KoM zISYCZ`Y_u}&%22pAom&&g>(N70@<=7ZMBKzByfyHwX~e^nffD!i zYAsERDBrhd>OC7pZv&3xPwT6M9Yid4h8mQA%x7Y}G!TtRn6a)CrSi#AZ!N<$_@%Bl zLta8W*!T5KF1?7q^fRjA92ijq1B_(_Y(2$ZZgDGgtJY@01G?CJFZOL}CwFa1sIv9a>Kjgi0#kw2!&q%;E{S;t zQ+KL5^q-!H5{oZr1%>7mU6-6E|9UHTqTLhesXfmkQL$!Dx6k&~+E6Z0dO#N(7fQbR zvznaaKUn|+y)Ji+Vb=?!!2L?AOA-VM*-)-iQQ=2yMNqv4k@BEG(aV1x36lX+kZ*0! zqZX^bJ)ZxI7jJxlaQG5eS0&}I9@S<~U$3wO6}ZB^u_irS=x@=-5W17L7T;X?1-jAk zf}$_Rr!g$wE{=D0^Vd=CPJYq?l-7r%WCiPkD}Mt|{y%gJ|AxvXnD0#8z471wCY?jD z6$NO-v&AA3HY`2+->B!LKTgU%*}Ih!_jDZzl5y&x&xX^6n7D|Q*mJD?`;E|ozlukS z{%TFDy1SDu=-yequ{I$HYwZsEi*Ez(HZOMht%vwk8V+GRa&?)2iv$Z9x zyN`+ME5K%*Uh6QEGycsz_+Lo5Nnv+y_oDD=#FxLk-Nh#~w)=}z6(0^m%x5Ym#yBq< zRkM>Fb0N3&)Cd6QtK5AC;lOff7>XeeF6_l7nZ=xJQ@BoDqeAEP!pB^qQ62@oL8>+PD z7kJf8kMMx+NBnr+jp9o*HX%bA77C6S5zY0-Knw^tZ zRJ;5|zn=i))^WLF8jbVpY|zGC(0~l%BLVK=?7>qQ!o?o;h!wtT2{W3+naOx~lkQLEGQc;Jgzdr31_RUN*0@eQj>GOc#$1VSSCHDbT{or8NM z>3^>8E(l6yTA@Y!2_m0;WSWL^-Z{A^g>RD6Si=-qys2v5Refi^LHrJ2zai>-sy4*5 z{)Bpepl&Y@*dG$v3$<2-#u{~c6$bdhe=`jo%muc)OLET;lZYHZA)e@@5~@o?EhgGD zWB`k;1-1ij7B&!QOn)*tfRhCx}b)$r*9m(r;y#}*+_|^41YP5G2Zj&pyQw?|3lcdE?P#0^wS0=yRn)b%^ zkMG)*5 zOlbjHeL;!Bo(dLAzvGr zOufH&5u7}}(DkR`AT3@pbMf{NOL9Muq*mYW))*XIq-~Es1aSu+Q+PmxblDw=#*mI4 zERmIrw}9`L$iu!pwv^H`q)oh=IHOtX(VfqqdoK~pURxW%5gW*)6)~P zfH~D={xUK@!q0SJ;dS?|BaboOdwHuB@FXBx?3-DQ!Sx&Rog(QW=_->I?7rE@;yH>9 z!RB+hA7;xNFAx^002U~li)^`8`ORY!QWq-1VK!VI=JNz^bLyBey7cL@(pwc9Uz`1% zq9*;634IJz_LZlzHqCey2JOV`Tq{>KBgXn$2B4&6n zg5M|f;mR_X=Y->6#IeivkmHW;v>XnJnLdo={9tX2;{!~gFouDo$%50{PT{02*K_)YVO122W%D0~1}-)9PWz@G;^qG6hkI{G;TaoEt@cj`S!XT$u^+$Q%M{tG zaSj*I(w(j2B5Hbe`Sj|*nK>dmV$|YNqjwpG<`x@IXnA!;B$!H#=;W*wK)X(Kj!$b? zK7Ej?T8N1#ouMFuDGr6tZ9$CIN;9Mssgr4**G}?O}Tg;MePL1sg&GGfFv~Hke;+gj-8*;O0I=p+g^;U2^<0UGz zbT%|Mb=+&yJ~!A0BEa@e?oXL+g0vtOLX9PrBA&)>Qk=zKq20PcGmP}ri*23adP6U- zd~tm&gi*~?Re{?OABZMu>V)s8!^UJk81Vu;&|CHAYue_kxfOT3hib^0)~~a`ri_r4tObiB+TxkkQA%^UZ0CvrxVF>U++O0+QoUvbEk-ef%o{i_6Jg=Wma=U`fC zHVAbnEUdZck#Pyn7}@lHT$KyV^f@~-3o5@o2r_(8ChXgT#}G95RCX2QDC^s0!y@bV zK7O$jD(p^cp&5;)Wn88o|D{uD6i(jE==fUm{!djPhsz#m>HT;=Jr12gCFJr+PdsaO zEp#)|nkR4xIO3nS{4{B0FW0Ff5+gN;ce!?SuMe26KNl@h#qVAGQM{Y*9l!UbFR*X! zQI077(hahLRN8!(LR>Pd3G)%NS;pYY)f@_c`B`a&t-LU|)tc1#-fM-9zrbW5Xi@V-YK>`#P?zqN_y zg^_UfrYCQ9M2xAwu~2!yG|iia?wZ8sGP4RbY06q8hoO$}Z*6NaFpmw!) zEvMdP0J^q{LT$cMhq@V~ET?!UjM-p}`cOsmlkfbOv;T=d&r(V!Pwi}jF)vy8?D>v+ z9|Sn8fLpP7+XQzR2lf};-;T}C#0n{M*Z`WMwxaUmVG1~y)ne}QEe zm@+_F9Y)4El_Y`ZCK1V=mBxZWyC&%;XoArUW+JFqe#WYEG}$k|d2u#x4MsA}!ZXj_ z1L^@0J`>WeBSuYf6^{xnZku;e*YrhQKmav`Y<&>L_+vI&T3vJ#D z)LBf&WI3|w7x#4$@vX)7=dsCs2hNsPn(bo7gO8zhYxyi)xm-jUUXG5$ zg~ID2oGdedvN_#h=DXd!3*Pa91^7>KEPcDzO-m}LLbP@%LA<`J9;Lxy6btt@)Jvjj zS6`(MW{OwIAu4CAqeA)})M}o8elD*n&&NkI_gnwov=w||mEuKq;qcH-nR(9vnCZac zW;~N9=Ke{-fP-*UamoM_@mw|`Z{Fh+xh`nWW<;#wk>C3qxzrD@NJSiM8V-g0BAMdS zaD-c1+UP_qSD^WU)f3;}mI)^R)}2Au^5^#3fHURT>R4DH#CU3eO(2a@A$lsbpxSOjT@E#@@?_;8z4mIAgaHq7KCEH1M~{ zq(J*Bw`jotH)0 zO+j}mtJ%b?L~%`PAsr^6Qszv_6|`L4xv!2KbF4ocK*peK)ojE2VLwHz@IP`SHs09` zl{OS1`^>HLeV2we!fHh;R_K)OYPuiXK5wtlWcg5|3@ z&A0;aHRkC=(NG1tZlkN$)59YXBDkzN2y4~lT^{xuO5y31FD0Lknyd8kRvcW+NKnJ> zKOElGypKt$jAGl=&vmf9f59Px(oq5!ks@AS(13A{WiJq{mFn5vxOALEN{~s6aU@Xv zAw5>}L))5RdpeW~-TkGuT%*kcocOd#DO2Q# zpgs^zQi)EY7wPw6JL1iURqj9HXXja`&7U~3)TA0^6IA@BqlQcShheQp*eslo)j}Mf z3p_8*>HB&fv%ctZW^GltQ(TNGE`8=f#(fn8cWg47>C{3OS~N<%*Z!;WKa_FV3q>Iv zjUBFa!6T8^LdpH;B?_H51xJ5q+$@)=OkHiiLb-+=kL~1&<{cqpyISoT*Oi~QZgdK3 zCLGI^t+y;3f%eL}H)IP&4JO&Vs&jg&({cGXuYMSK4AhI_IZGu$_4Q<2m7kv*cn2B z9(Y+yf1F5WtHWp;VjpnN~`Cc&fiWR@`A%=-g%4f_~_`|L|cT!4Q{{< zZ97)aQI_MEgdHFAzp)>9i299qI0%xz=rvE4A*Rayl;8>(f9}FmPa(j;G+jOTIsENP z(S%o2PcUZ4BbGFCm4Y;9^`5@ zn)@m%-RhE!Zr0dA4($xU$XP^t{4gY{gcQ1iU}RMVglQa3`&V%tr+z}VI`-?OPM+Z) z&7@d^<<*IK+g)$;UFMvgdHZ;c-tIJ%dFMl`3fmzzSOIo|+}U>R09%w`J&F=7yqDql z@LO(0QdC98o6wcjj;lYhRzajC{7AX<1hQ{9WD-xNoF^XZ<(jLK%On`OIv;5$sXYUX zs*YMt>Pta^`I>AYc_E#S3Bl1K5WAWiuj?^pzg~g@1s3}8sLd3%8EP$s_<^0#2b}M+ z<+yH8cHY-3i^r2J1)BT}n#?mb9lUmC_M?1?!^ZYqNdcW|>DgRP9q3PLq)j0iD9|Ug zw&UC9jns*0K9EfeBY7l6FP2(393K|T;8Jx5T+}iAwE1aKYBBNHe4+9BRqvI_0zZ4t zGq%=lm!Hk^ud2MO3p{*H@XrAw3c#Is*Ojm;>VxzCP%_T$r$$&A9EOhs6Y(latQ$I$ zj-O27W!$XwrpkXSt2QmVkuxgL2tPF5h5Za9S^A|=(h75Yyy;>8tLqzi&Uw)nhg+wG zJO(hbx%KPCv3bs&Mlew86F$teKY`*^Yw;!NHqQQR(f(pvcyp;tLUgY2VFzNnY>4Wzis|~P1M@GA5V6LliF{dDM14gbBSXxoZo4jIgs=L&A6@?FDvD*e-qJ9MXuA=XI6aE- z6rb=TkgRe0mws;xKMR|lSG?h&nA43cPhN)<35T^^$`F}@NQVZ^R0qRg1MpWLy0TPQ zEPzbpRa#T!sx+J(50Rhc-CG_%1d%u(G-9O52cy*vIMQY$Q*y2%;oH*{zO}_>igT<- zpPw$NhZ{hEpzV%4p4PdzL4$c*5JffzM+ls&jOEUCO_jQoiLISOhb8GY`IB*FM`c4d zLVlTSTE>Xdl?FFJLY5^r^^L*&pb1Ip<@JVBRgOG^3hesI_0oNe`u%0;j`K&fV)mn0 zHW4|DIUO_+kOeety;(db5`L(7N3`T(llULu^~I~?*)zYO<;dFe^)Au;-G+(^r+O}E z6hPg;pp)g3gZw*CDZ23WJ?zMZAG(fFUhSl@Q%d?11NT$LJnvG!F52V84ns-g|JV7X@9Q&W_p6Z{yH0v#DRP%$4$OL2GS>eQ0<>% z$33C0ey&4qQ&iZvCUxxDNoHy}_C&&_Gkmb$buvEymn_oyJ=>W#&eN~YbAME96NN=yo0DGJ}vci}25I+b9Mv$FkSNfF8C@CE0 zYP+M~gwJv~gs9J!de`50#mO<{hu@=7A-HSDQ`3!=TPYa8xy)xyIH^TK2pMN>E_&)6 z<3Uk7;bFks_C9=k7kh?%yTv0%BxrflGD82@a0+HJ&eOk}+O&zeNPLRm`N=T?yy@9sscYGKf$(It{UPCIeYadYJz1bXUfZ{6lbG&ky5w z6?Vog0za>ph+Dw(3aeF2Fs*7W_NWjb8!q`^V2JGe&WcY%8uA?OW_3AZez7fT0%p_q z6u3HmNG|lQK3?51AMja~OVQPt;kv}KH`ouvM1XXSuhb3B*FZ0tYd=Uw`c0!LW#@RK zw1yf-f3pXQm|Cy=V$3;b8^=m4h8H7 zm6Toxd9rqvVXYiCrFy;`!PuPLN=2?(nA9fDl7B%_&UuI$q<61jodqi2%_FQj;JC-G zLUy(knR5%U1G#SLVeWf!fZY(Gy}JfRlT8+-fDQnU!%6f{Z~*gRmy}N}ioADXlpuFVKhRWOr#y#f#1P3G5#BQ#x)4-J&H%Ml5Do}No;(IG#zns zO+)4P-(_}XRI40^0O?`u8v))yI8F#TX8EG8** zGiKyG~k#K6Z@9E*a2d|QQ zE-4xwjK;xE9ul7 ze>_;!J(k*i5p1Q!sT@o0E{OZ^iLPmC*a3!#?tr##C*dF)IHYH+=gY-#1zk$%(K0F) zlq(HHqI9WW(tojU;`wFP`=V2^IZb0vhhq93p19tvz#~UCveJ z=?_v`iyFys_UJjd&ca_pwR-TZXsBiGI7t{^Ao?8(hytbiU^^Yr>?zvkeVCCpu*YD} zjY&!dq#e>s2Wo27wO~2;=S6<(j7;#UwbtRuJ;43JIy+r<%BY%SCyR`UvkIWQKD_t0 zP$8X3JodK==u!87unD181B93dx`2Ee44Ej@Ot)L-Zxgy#_Z&^@Z47xPh**FF1s`Oq zt<;_y_4%tPMUZGa^FNq63$G}{wd<>NgLHQ&-3@}spwitTE!_>$Al=;vNOyNP(lB)A z&@jLNevjvzcdhR~U>5g!?)$p--oIT^*a7ca9jtBQ+DL#g3@^<5`0BLVU?4hal?WUMLAcOJx>pfjt5Droc1~6P%{krF}G6zrf8$2Fur9- zW0!&B$R`Ku3RR+KO~+8+L7gzveI)b7YQaK6FUMb7#IrR#lb~h63lj?a=kia|hr;G8 z>*^1WEbAyF4be-O5?0rlY2KgZr8m4l`mRQ40R`cavEuhTrQ?^d32KpssdwdJ3?&gu z9HX-BK8i{|uXOPjxCNM(?vXG_iV&j9#yu9wbX0gPSE<$n+4XBzZ<4+Z0MI%!DVHOz z0nONBD*)H7fPP$X)_D>gMjKGwWn6p~9g7=xhwZ@5{ELOXgjtm%=e_R`>v3yY6$eed zZAU1HFYsW;c5U!!uNp}K#H0D#PRmh!{(F}xv8qohQ|SYy&WZI`&|fZ3ZPzUa{I=_* zeAeF6VVR>F2HFz#_^c9&&})UR)Dj!FRo4U{madB{ij^->Xc5qg5TWt=z@?w3P>7dO z8Tha@q$T@t^xBNwb=)AM{RK?0p|^ZP4A<^*A9wjZz`CNPS8k<>dEUp<;CVc}DSecJ z&H9tosq&wL&J(S2-*3SOvYnyt*UQe>D3&$J1@|p)kIdV~ANeLI)jqK^eJk3de7Ab? zXP;9|DrTS5EWNB?)JE{FTBU2$=deOonvtu2e4LofY8$sW`4pias~pUi&Af4h1B#OuzEx$# znf!M`KjdJ^9tnv0YPvkn2ojM6WT(Z6j%%4nT# z|APLrgCNqwx+yV@ur~pG?`c;0A46V8WVMPu4OFsEKzk8dv&icqCNU@n_GV|R(NxGA zYLxANnzn8$5mY9~ znIG9nz7v!A^jr`7a>uVFp;vp0Td=()j2B3l<)@Eh1AAw9{5Ep0+I-2AXjkMHN1nmP z*>Uy^eSmc`wTIaA4Y$k7!>5@wMu4-4!+qXX6^S#oneKcxGe)MtBeCWt^j*CLM#=Sn zZDgKKaNtfK#(Rp~_?2Kv9l_b8%HlI>qP^eddgHX!6THhmZ4bw0IQqo`cA;%9yfPiG z^5XC4soI<|A0tlTIyuey^Wr^ir0HRpluvni!G|@S#(E0k`XAx@!6o`KKwRY+5#1qQ zVBT}rDEK5*_RDU1KX}6k_yJmvuK|nWbKIVxl#DYU)t1mQa)|F6u9k`oo_tH{Qi7Rb zoWPk+e|p1GoDP0r?DBoz#XVlovHhZfM}sOR=oz4O#^|1aV}-4UN&A8*S6k=%3^v{O zIb3%Q^<`Wrc_`63oyQ5suT|NwySWB>!%1FKUKM{+-PSNztJJPP{;@4Oz-t!#LYqSx zK{%m|fVSIIHg31%B9d<}nsEHsVzWY8sukgC)}&8E>m_1u;ctu5!NIuQ0ws>F%0p8AZiUx zd*uP@w$!9lp->?pF1*`~15#+AeEonBEi^tDMO<0XRCF8Ta=tu;^S#gLZFIufO-tjo zxNbqV)~TDg-~HB5seH#EL(C#)^O)=au(HCc@;Jf{c72l#J)NLq5W!LHYea2h%s$=#*XjM2GzSOcwZf120uCt9u=RQXXH;p z3#?C!f5?w_!6spYI41yo*kM${>o5>YOu6{vCF^SgEnenXK0Vpj_B%hFY?JtLC{8wK z*!PG|`bY-r%J7#?Ct+0Z^ETmuAB-HD`UzWqDphPmwm>gtIMjZhMUg7!%=kUgy%*Mo zi(!qSqJ6ZDq}LJN@T^;nM?|23+VovTag) z5T|;ZO4C5CWsnVb%D4UM zOIz4!M*o#NOu>O-0V(>grL;lC*70PWdCi><8JRlL8-6tiCJHpV{%g){A z7N5XovFrxf&DlNSt7TWu$1YET^1`fa;&AocoljR^ZK_r+tpg7X?6bFWrUQiL60pP{ zHL)(9+Zvs+%r#$1H=Nv(nx`@u5Px2h()BrZ`}n&K6nj?V&gJD3W>en!D$H{WL_QK% zMNvZHx?=7V$!8ip1eeA*Qu^54_h$HDrdzMWJT^4=4SOdB-`H!B52aeKc z-MtqmUv_;{rtC)gqfJAn%R`McEsVk z(6@7WqW*ln;(mXPrHE_17j}IeqIRAcVpoiXrXRzhp|^UDDd9|pmzhY7SUbe0V$o9j z6}gjD;v;%RWQyegB&XCe;YR-WexdZQg-YG;mCvH+!YQ!SQxPyNJ-5l%8Sd)F#=vYktZBkI^EeXfoX*_x)NEZ$`iuBuA?8>4p{TeMPv@fgRmL5!L#q z#>dL0OF+)dq39RuJsT?tQTYIzJ_;ln6-%AJY}c(*L%+(j#`;Nr#ZXIRQ3`wrfasXc zJ;-mX0tqCk@~RxpPJiS0rv0vdFfur|%u$s}3(7)zjt`rmV8$Tl(`MCd?l;k?*r1+1 z<d;`2LkSMp zJM$X$V6y>&K*n8CD}N{3M$`2&-SmxkfkvOHwa?RuI-8J|p19!4)pK=44b`T$X^n`I zbRr@y;w~d-P2L2y9p$^xumfML6XHx%Qa_P%x23#uwzNCZ2)Fr1moX7u1SXX`m45-q z%L>;zXvS2S)mz|GWgOUX=#M&|*>`hH>!NPfE0v57oVIRzAG0&Rs3h^jL0@c%we_k_ zCAg4CUIF&58=CogC02#{Dr+y5iOht%tM-DWsN=2od!pAP!J+kapHs2}_h@*x!zrYJ ztcBwEru)@*+GgIFZ}YRW2W3i%Xy7gqXcyFr1RUf)5fm7plCwZf&jnk z*-Wj$u`r$3G?%4tXoX)5Te@`?nOxL1G@2&##=VUJ{F^FA_^a}D!JxcS&gqin=*7?c zP<#t1=h^8kYZD266)m^Q=BID-g%aRUZ)K!?ux9OXMFD2^FIqgnl8;f`BgE2#er-8L z9u*v8w;`%bkE`PLRa$48DM)H@IMji26)aF{_TgtF&)VXQ}v8tR&nN z#A5nusN#^!2YnRsb$irWqh%Wk9>iP$&`^$ZWWx!h>Z!Z?Ws3(1>9e;~TUFc!69%QF z@o9oFg8&YS_455E+J_qHTeTx)x3PgqXBLSpGJHHz55cq$HSw%KR0o>45C`Dlg_s67 zm_T#vnFN^*7Y>SLuCz|czO)=cVLv|o&+h*rnK8CJmu%Cxwx)b91*&lTJcwt;0mn4cZBrO-g}{cCo7qF3LyWzLndNmoMgK zVRW0Xta0z2cT0LKvv|S3`xxqBp;)Aw0$Jd_`{2Ow-I3W$CK*Ta#*^PGz?N971BM9% zC#$$KD!t5pn_VT5RDL2jKaxjHTO|*7C6DYzBV<)mP)Iu>3Wo?isaL8>oO3M&vO*d3PNO?N;V1MB?i9Pb3bQr+FSfNdL8jCO&*h_gy=(=Y?YX^EWFN$ z@*kh2i{l6^EBmW!}6r4t7L0k5gw>Hr$-djYq>3`3^BauH0w zR66j=O%ii4qtom+lWDf{S}VbiL=kypN<JQ36eARvmYPGw1 zO8h--H9(0m!_@7fUcn~SpVo;TGchFz^6VTwZ4yn^RQ``$Ix!Ifn5S^jL^AqN?Bp@? z@*F1`sR|-NTohWy?KDariBvdq_I6tA-=oYUlV7^r;!M^bE?tj%e#Y@xCPsv5xI<}0 z*MC=pbC{V)J_h2@89^m}?sFg_{aALInVc6*w|jrw47;H#Q=OYiD$7>#f&IG8ks=M( zM-^IgZ3kRi3q7a@U4}2t+=>|)2>W}()%sIgazgRO#k6r`WB;*8e8!dYOiDWB@?dA+ zwveuW9^+#oQ=RZp1CpmJZ5hkuN;~Su6;11$clrXb9%_^+HX!y`OMCxKkj%eGE~^Ad z0oISxWAwmXM(8DU@R^ZUpeI*uOCAW4PdgyFlLf9x?_-=iSdK;CGFOpiQW-M4F}@?q z;x{iPe$}1Dxa@IbnwK5Dz-I?-!WbQFBC%fA$C0iPll5wFNpFazw%N(+tmmMMO>%|l4 zyg)qO=a=5@Q!9cCE~AKLC)P9)4Q?kn0Oij+W7ZgKQZVgueL|R`|EfMLH^I~Bry3J! z@JX0W`Xncw)T{_tjV}NZO?$-J*r8xPN7x-JE%-?j>)>;Ju=NH`r%Q$X7hAjHJy^G0 zZln~fx$uGzbL*eIiG=gJZmSqhSl9I5qZik~4?*^a5saUlWKjBmH%!fNyQAUjmQ_0v zpBmA&;)aMgkaYdE)%9}i1%#Sbr%I>nq#GwL(}f7ZDr}GPe3g5R8*i!>@O2D$yM`L2 z)C^@F+7Ue$r>$);ZlrxBoN_>PO_IHc!pwtvOEZ*zrLZy(;@jjX3r}-B zF62+93v!H$YgV=>&VUFqcXjv%f7wI~^c_vE&Vg4O*ul8G%BM-YrKwGhWAl8z zmkisM6~QVhT*Clpxxts9Viq)4BZ2B(1}a?eEl`Z@*uN7F{$!HoJ8N_gPw&+AH6vn? zb8zynKE zAQ)=#dLO=WfkB!)O}PV+mJj0Uv4Cy;)oPx8m{ZRO5x#++`N=qZzLqD*-wS%3s%4jD zlva}o7arD|xE?j?&v~@i9uYYe7ce~XtKREBxmH=5r9G`jg5Yub2hST+MkXs`T;)!oI9HD-$A*5T#lgjm;$t>{ zF<17@V|0AszAdXH45jvPLp-ZCqQS{%oUHMSufFTA44aPJ8IRO*WNDrAc#(~C#wg0u z@QJti!7?mJ7i=l_*`?}8`Nix`7m4V&)B~oZfQot9MhiHfFT!PHVVHqT8Wrk8)-iXy z;AMT3TY_7{&tQd)E3oP1`nhX0UQ?F`jc?x_(Q4P_oy0O^r)8th6LAcxugUk~zJA^; zj`NQ29r#s}CcDo-euHJ~ViwnSIy}zYR`YJRhy;?1eU3uuJ|Or`o&*J=9=A8%YB$=C zd~bLd&=`Loc0^Sgk#y(h_TlzeoQ7s4S1ijLL>o5DWEOyW+|SUN(DigxcKpZXhZYt! zdB1_gOn6EHV zJ2~mU3SOT&{DgpOTEbZ@2o0aT&i$;-a6VPVx*|S$FWLrUjm$QDgSFEj%ztLgwx}C= zZc`zB2#wA(X>8lgM^lYpaM@wou~>UG7>1eE`s<|GJ|`x}{;LpDb5oBu%K^)-L|>ly z`Ac?ySa}l)rEZ;>{GGGnCt?6MrjCq8%9{7l44jCPT@X$qYrk@rWn3#0%w0f6O%J~G zsz}IEcJ1I%UNSv1h+GPAx{O#2wFpisD?}-bgJL~rR!1A0)dDa^OX-`$F;h4xHa7)W z)DK)a#RFU92SKx7CGoW((gp8!j2(_+Ms$d)RG#L+7QeP?IixxJe__OzukeL&bQU1Q zN%7^z-(=Q35$1oQ*K#qDrz1a&__B9z##o5D-h8aO?%{IQy**!~t&Gch8jT+_og;1$ zS*X|0LAJSbC2uV{`IBV2m0@~;>mx!gY269X=Sq2}%K7W;r6oh-GiIF399z6d;+l)B%&nxTli#HS#v)N~ESrs&qGk9EdEB9xFN7UT<&W=Tn9Gmc5nPPs z6p-b0EaM_|u#ep29fL%=L^QM2;9U;gwL8o@(hESsN%A|s->9I12>5d?P1ot5!q_jK zg(fT0XSb{@O$i%?*s$)`fFQvjk5qVClCq*Dk)?+yfkSqF_TCrNkDTl3^Jilmd(MMg zMGhH|>4nzCho__KnuR{v$ff74MD@A70R${0O=`@Y` z2eLXz1p&qN$!3%Dfd z=&pNSeh3BC+rLBxk+qt5oE_EdFbKbKtBUri&g61QCf4k>Jt4>p)*FKOp4tKGz5oUD zX79~U(`&iHZ?Z^omtuh(qrp4PhB=}1wM1@rN zal!zQWIKuV$aIDwys^>6d$0{D>kR*Wk)Uc{i|5T!xS5}CfRMM&oZUqg9L8zO*OW?U zvdrgvseHxASU-j3pGDprp%w!+Xd%dGt8q`+2AV0Q2aKbb@w-jLh#h5$FP&i%f8;Aw zTZ$|hH`i{)kLizsCU8jU1ZcC6^6|H#;VrL6Ta5sS0M+w5zAl%_o(FZ$YHuNj%!$Pg z9nfv}Gc;Z6VYTig@X0d@k#*x_di0|1?}|pvn)jY>?(!JFd!>4K0{zEBZY z^nK%kBJGXDY~{YA3Z40NksxRQ*De_|2F(la8lU;zE(|W7&`^u2G=Zm5S-Oq z0FDA#{#f){`W3%){6`o7&Q_Rv--Y&cY{4~!jY#%qCF2Of57l$-Iey8+B7*a2UO{5c$blj`pgA8cX^kS^~Fi)XSq4Hw+)INZ$%Pr zQNG;yVvSX1u}oF3gKAPKF;0HvvMpRjlW`7f{7D+;e|<+P{fz!mG3At-$mK}`GE2gf z6HtoYZOf(;&AJ!o9npfE5iNu4POhB5nZ zp)h)))o8TlhC#C+b{enam?HSSaM^r8! ze^XR{)kHX4+@d$YlE(=omL@C7_W$vCK&v!1y-4i*VUdc@7uv}|ImIjS0*th~3EwEC zXrwOSGkWVEmborZe3SoAIZC5ntB1G+>LCPzy??=Gp+{CfUI$wj?m3eVXksgft4HQ@ zIlI)J(|T0{8-mlukwzn>CTvSVi{2mEfXaoQE~?lW_To$a3O-+`3SQh{i6++YV5p8U zn+^g3U}D^XibG(rb=X>!$g%;Es`I&;Iw0@VM*a};KKnlwfcqJ=I=kn0_2tmDZ^|NB z=VxDk!|o#xIXZfvBhB7~S0(Q2X_l}n#)8VviomESHGfVjHhNU(JkQBo5@<}2-@1IU z;Nw-V0T|cuarva{Pq^(93FOH+JpQ?(gz9}+_Fd1=0ZX@fm5+RdR@2Do_TWjCx(lVp zaEI`e$GiBCA<1$lza!X1Hn`6RCv@iH_pBybQK2d7&_v)&LsMK4Q-%Fn0&?YxoF>J- z-k#2UVN-7FTrCKRlsSq0v{Nm24Vr&Az~}OK0U}_$dY}of69{zTsX@b_l4S1I_W?k! z9LSzvc1*Yoy-=4V99?G_lyc%0lS<_1t`~069{(I;b0ugvUp06x1>J=lR(<&e!|P9L zWLuVfxcOM7RR9Jrvlr{(-Mftk9Ub?@xTQYXX!9t3nqnt&Unvlz73$%9AIi(I7WmLgwZ52F97AyAOKBhry+@aOd#wJup^b+H`*cWKy%#ub@BT$06q66>OYUj?x# z1gJye!=MyKjoTPrszpykgFBtz-^e9rbu5G4az>Mgt~R$>|8f#;^SX{OpP+3Z z6`HIef)LV<=sPPZ&He!}MlMpt83qTEQh5&J&Hq*6CgyhRz%kJA~F&PE&#@7tKOe_ve#n9<0`WtDiA3NxqxK?;sfC?E&P!Q7sef46`w>dtjXODTeZh4d#6-MfEJg0bAD2a!kLFHMZ zc5Q^<-+O^$JpRoML=vPipG8I| zGNDRsm@9@ino@PWG9_NnGc^Eurq-$y{>un`(wZFHpsbY5h@UpfUvFW7XQ zw@d3@Kpr$s+~E&Ug>z*jz1fL@a0=kPlJ;klLo?4$iR zjEB3YXab3~PM?j^0ijkznzR8z;jXgxJ|@*p zeboT)+Hge2HX36s_9-Za`kQz{i4!M1(Dy`iA=GLw{$8Tz7+z7&zI~_G&=pYZ-lek? zO)F7;BsKN732V`}oeiIse6~EM%ghN~2KG|^F@Q#Nai`wIumoY08vLz4)SZ^1Z;V7h zOJNdlrP>mF0l-Q74>^&!XY8VeS_5BrBg5btNh9B%;QJI=UN=s9(Sa?xYjMZQXffos z?nFbLTh5hO$|?#dy9sCuaJ3O@e1GlS0s*8*!>Nv_Q|#VWeNmw@$GtO$+L18r5?bKL zI4=bAQg0NW$*3Mu9Z%PF8LQO6q)bo+kid9m=ta}%{0>j^5rWIY&b;ni|@rtBEDU<>#{jQ z)Ok#WzNTY)Gt|hFlSJ6BQItIXsMo>0?|x{iC5WJXKsl~H^C8!3$R-GG!#!hf!tT!k z360anJ7n-pkO{MqC6n@7LPS97R>diGQ$n+PL1_wrP~!v=Lz@wSPwUGrvrw=m9WN^h?=mHmQw&u5o^BXOTiirJ527cF3$Lj@M zD&o68P>q)ULLA0mGi+#&KD%cc61(bB#^Y(%JgljIN0F;8qYP((AQTNEdfa3%pMnFc zD!baTt;_N+!m@Mcjho%#V!?AevPEUqb@5MrQ=@cQTZ)V%;_3$YY|6tobvC{)pRU)e zuG==!Tw7rL+`xPI*)vORR0UbO zMX!ED+goo8IQF}>P+zU76y^6h58iy9@R7*4rUj;Ex6zR&)w;5mMd(@f{m|)mDsS+~d$V zC#9He6u|3abD0iS54{_XCeKN`6Y126Q?ygB)ZFx*0?*3dWxU!8QWBqDyqLv#9V5!O zL0j0+|pc+7OHzovc4szh}*e#rdsIc}v1sRi*LM1&!m) zrJOSspEF9b(Bv=Gocn3KFVc+c+ zfdd$Y49xfQoo7MLt43A2d)w_t?G>_417YXmvm5eU_SYMcHE*q%!qiPvcqmnt_0b%~ zm$?F85F0MNk_e}Gd+x6Ep%IFq-dtRbi~P;jvy8^qeVx|vKG_y%lUdL82UN6t;=aFp zP*;{DIBh8A2&Du=vZyS67E>}?r2U>G9E1&16qtNZ8K`|&_P)vrF}-|LEFh1$GZ%Sx z>h<=e4BMXCs9U9;v?D$ekHW@~vC78p;a1}|x6yyuuH3@ap~VO2`dd|(AKKw(X#$Ax zD@gQBG5^0Tb3d^n2H*AilCD6ii2FEQrih6yu zN7g=M9XFTFvolF2b9GZT4g?4Dn2E(%oopxQ^`Eo4K zxAd*oe^d5NOKwi8+JMelF{Z3OEa`;Ir#T*A6BA`F0m`gl*@8C#h21#r4#=orsZ~ID z3|F_BrHZtPQE|CuyGh#Vyx9m&+WyDfpo-81U+n7$-IL{UE$6B+8e zQ;~B9=}V6(HX@ULPK+w~*0gR-Q*1Joy(UO5VB0iL9aZrIm=}>S82^jXiZ*&PGs0Yw z%NE)AoAAm#>*((Ed9*%Gi2&TBpg@r@ndSso+KZwhMC`Ex3Swn}B}uN2((M*le#Lq7 zhkmI^__iZq5%(+F*%jB;m2eswr#IXHOi$@@QfQk>w@sebRQTI3;}U$%=BUrLqKJ7b zfFMCDg?g`lSVimA{UK!6bvPlEO?af5jJCX!wi^f(faNU7b3&-_F_+-r0!+v~nC5ulRrapPwy4fVJtPsyg9Z z9ydt<66q(UZ1hZuOCPt2PNdbzEv}qQd0>`oeOfI#z!&0lvns9tcIw+p@QR>fF;THz zV(l~B+1ffe*Ht8(IU_Ftdur{SQeLb1Ru|G5CYqiWqRINhZq)SNQ){eNg(~lOxq8g+ z*32FrN%ScLB)?V9_~Wc-pr*w}xWV>sZxJkaLXujYpge6tYgOLT->B%FlRwxq&~_p; z_>AH(_eoU4%@Iuv+ob0ZIja{j{~CD>N|ttrgir(y$k%`=Qf?Ar8`Lv@x!Qo zM7z@=yAX_LoLNQqT~D~p8OyzpuVTpi6CO%vcI! zeqR85rVBO#I9jpgD^#Y_Xu+X{Qr0}_F}%@o%`+;?>TQ1>{jzyAAd>uoL*DPm-^~+s z*9adjF&;iiQf&G|!CX@C8A0yqMbZls=ZkU@uobY8vsxL1?G(g_b1uT2$NpA`QQ_av z?j;LJF^&`wTdr&v>#*)}&3YbyA-Svx)%{pg)6lQPq!8K-3yNJVtFRrDnZKS*ro7RJ z7K*glMECZr)b-4bhGty{ZaRMWOTn4t6L6-opP*#ip1sq&@%=~w#_@_g-k=^&i=ha& zL1QJ_UT1wL3w$i&g0-YIWdJZ_7s=w@0>EGMM*olWWRO@Bz3hUllArqaomvzj&l`A! zf9bA$=nz(Kj~C|Pnt7@R(hVX<*D5~}23vT_U^hr!nBi6~L)@O2k%!zk;i0t^5$7R5 zm4YB#N^?QJWVLFeF1<=&&aj#gw+Dvzw;0fi*&x6Af7#ZS&yD)|xZc8I%5DCAyY32rl=Hp`!3Mcxfh-Iy^|K*0i+O(pD!USDfS_ zdV_jqwbxvw{R@QrQq@pqQkrZ4vY$ThW_gg=LqUVR9CG71^yT2}yBhOvR~sFvQ_OP< zDWW0l6unsmQROv73?JlwU}5STTDWA6tE? zw=xhKL21e^RfEO_y_YgW->b|q`eDr}6U-WHw{Kd4lZPYTHv62!0G( zk;PIpJtiT=5c9h}7M&TJ6 zTMrCv!jOrn6K}&s$)GN@dW_+(r|eA<9nH6m%8qg8^(zcJ8A?^L&!1}^Yx0v4;!b+q zDVKMWY$#aJzFmLp`MLZLXoM-tM0YH_t> zlA-e`J0gYwhQ4nn3P%4p+m4vjm@iXR?0Agf7=Quei(^Q%6!f^UNdyaS(Zn!E zo|E)LHYt+kA;FwPf9T2OOK47N1$BL3_thFy%rXBAU}j7IIQ7^igPhr)L6hZ4oyS$Jy=~wxp`K6cjD~qNi=AZc1+9dWt!JQWTo$ zoH2sqvnRL`X)CcdMbHNt)> z=Md*h98(E5(S7KDB#ccW#@Mj`UeFN|yh+A#kLF znVl3qw`h;>$;{dczR76Leo)i8WGBz>@;9OYu!(Zy$t_9`? zq2(H2|h}z$C)!wW!9*4koIZt*nEXDWYwg(RGHFc(DhS>PJX>7>RbXJ@tI& zM~%AQI*NqqyclKx})PV!%J zgSZ+~$-p!~j<5ivGeiUx{<=R`f3d6-KI zS{Jz9a=oKh?|gY0=6|*75uY~X^w!m`u*@Y9zlyKjS;+qo{+35Qe(IKLN?#}28Gw%v zF|Jf`p&kKpP$sf&ZH)BK=3fcMM0b8(6eHf0Mp8zRERnm520xHv*pG*&WdJ7v71)li zXL=a*c-+h6jHm7WwuX>r^FX4zU)O`WwknNOvVYpTKnx;Cfr<-MAz> z)3S1&p(!mn05$LGT!ZZI17$!ouEfaJ1~YICPYQq0(kI2wMG)Gegz0Df-rLxO-+{*X z%AYFZhTffjsshG${+zH}`Gp9RY~rg_+%#$7y|Z|zun*Mt7VQpmX}0#HBoZ5aEV0y! zmx46Oxpc^F^PevcNt&43HNICE<=wwa8FWj^f*$>o{>!fiw14F%-N6-vDAV4Q&EgYN z{VW1kNKo4T<2zwbfX95(Fv3&{`;+90KO7`R2b%Ju!a|-L z4GG#r^FJx%a1Kqr7gS8H`(sXnBb=h3gu;qBHkhNt_nsJq2@F+JB)Si=%|&=o-#uQ( zYy>T>D#w+l!ZlJt4f99N*eOW;YGJ*1z<+4i%0}GR2VrFCNzu3Vb0&k>=Nom5Y%PD%rb@z15L^^zvB-Hpcd>MGh3YDjDhM~)kh${&yHBYA zH3DE5zzd%T)QPNb6igall34XtBQvLedx3}Yb8>A*t{QMwB)gLVl(W3E5T0jgv?kQO zt>`_JxFypkh?g3{C2NJB7v~Ps>Lck)nt67fHeaPx{?kNeUB8MV^cO|=Q}`BcX5Txd z_S8~c&Y26uX}xp*0Rp$ZD!Jvpd9We1 z@c>o{%RN!kY2DMzHsJOFfjL8RX^;1RKkSMI@6~=B9;1pDk-(Lf6SUv_@hA^M?Pp?; zX>;|ll*a4fA>-R@rcQ7+lP)#~dU7)7^$QAwn2lxob;OPFQZ9~j|Ct2L6^CBEbG$h= z{CaQFLj6C`G1)KpxBpQDZa>mv%uEYiLhdX+CNkarFfNo1G8I@g@H`s8iJQ0fh1wBq zpxHYIbE2a}E82%$eX*wsG$IH}n@SjiTNAkE)|>sI6Nf8}BZnx6hW6K2$gi}n~**%8Sa zc$!>fi)r!&LwaALhP2*AKE5O8EfAC)o8%NfVB?QCFj)Fd!(!x74;$*x%fFrx#4+6@ z#gJD>8N%_Ou-cf}BIr%ljuAOcVqN13tN$YyZTFc}X~-;~@1&WtPn4X+u&qRkne{uO z5YaS><3ikU;*uDSMAjO+FOCrk&I$I`Y&0q*#5ZLnWPX`#Ox8pwJ6dK%BH-Du|68Pe zil`2sd6T`A?LvDNEziwclftX?;gci$hFL*HQEFO=W>A^Dv?62HVzy`X_A^c|j`PdTGJLTZ-6|6H z!vM+W1<`bye;Ao8@L%as?%fWIqpx3 znD^2v1=4ol?5s0HQL5bnps>%3M$X{x^CyB+o4Hwj;$(A>iCRmD+}!K{nz;u>U|j(n zBQVDV)gMPM0W&l|QGz)F?OhH@`&6`7 z8rivN7$UGB?8HAI4~IVY1cu74-CzDO0=3Tq1u-hluE;kiLvYI7~~-`M#@)i zg&2>qT@vB=-&q#i`7DQE^ge!(svZd21j_8W%hS+Xsqh3hzsSIn>I+7#tAjU%QAfu7 zKHQyueDZueT7LlnWCQMvBPPalT4S33`1pW9_8~HY51Z6|IFUu6Ug?}ke*upek`@=K zCq-dbe`Mklpy*l)ZCkt?nB5=!BGNIrXQ2x)VWuh#^19+?h3j^7`Y@$-=9B-es#kkU za`c}9AK{Hw05_`sP%QD7Nk5f0u3>sku`#c6zllVv}5eei2rq*Z(n}xWM z$g?Jn@OXb3$2#cl;#UVv$pqF)$XZClPy%rm*Y>-+7>O*~j$4LVP>btx-S_=*51i0F z{#<1#2GPKt2%N0tqR+U}@9L+xg$8D&FN7Q2A9J5Zky}^AB6{5s&5NQ8z>@hsp@@6i zlPPhFbQBUsYFMB<8Y6-V`*!qv$b$e0;H;b8%xG zjO-xOa)YGXB+pv^v3JD(E=z_1*z&9Z6$`HO^+v2}Hvu$eoYFr4GRn%;3?HxC7HR@v z+~M(jWoc#W_FHaLNX)%rT9a%Cw5RJJ_|PAFH8>4$>FF`h^oS}yOBBC`FqXh>>h!+v zrWQ}^8=kvGIuWpF08BjFE4AjX`qqQL%WbIc%s<(D6|E&cDYc%m!AqdSOTGRq@mk_j zVcXXav1c5}mT|U(xfvY0s7dLlSmE+07zeJlDaQcliI^NyM>R>uzj#?7MOG2LuLt-fTYwe`PtRj1E^dqzM-C>KuqL zQ##WnTnhAALxSXVqGH4ipZBIhqpF`1C@nm-&gGrE3AQ=ufo4-=M+Mv zCMNvq)ji6A&1L|VgveZv_SJI(<(-P2Y&tKS3Hh}|c<*GNr|T*mgcl>+(4$?(T>yo(y4vh@CFm!&R(OQ}QT0)ZFP;|%W}iy7((o>%-oOjx zZe{k$%bPp3snL45G_Yfkk?xgWi&BDmG8bhen~Mg4c%8{eZ$wnfz6h;Ux7X`L7!}iN zv5i#^G}axBu+Yo*hLrS|a8&wiiPw4kj%O``&ebWBdU!sWi#C-id484dm!`exeTu2P zNLPr&fpU8Lga_||Tx3IH1i+y|mLuYqCWUfa-m?!rf=GDgC1iw+!9mRq6mhz-OI3SX zmAYGnPh%@M13;n$j*`1r`Ham=1OH@&U$TDHD0n`xE#5!Ukf(E{(7g6=O4LGc7KfV7lw>; zNX#du4#j7az9s7A_1Wp^AN@G`NobIV@blog<+x5iF%H#5fAm9ploInCecxYx$QM_? z{*IwEu4$0%JC8aso%fY@9S50^a@lcwmG*r-+tYl@gpe=GO_je#9|t;d4nVGUiRuA= z*)oHEKrHQZroC7)Yy5L?f;J&o`uLFks1$TXtB;X(RNiI4SgB^v=D`-W9T^exppWV@ z|9!3|F{-08k7JbVk$Rr8lYztN{!_d=vrN$(nvIY*rJ^9Gk{FcF9hCQh9NeV5 z9yg1(7)zw2UZSyds$2JUH!kKK_i8oL zcHSw1|5xN&eUH7pY*@z4y?Wq9Np2*T7=DS$5TCO_)cZ&9OK4T#?8m%G2&c)#B<5a|N z`vPrf6g)T%7cXj(31T|krYcqQdi8vN#)!zp@&>5vd1Gaq-k+&Vqh-ils&OM_jKU*hZhm;G&Y?^?uyNhFYhY9 zPDwn9xm8{_ncEe+zX zd(U9}BZH4Tr~1)>B4s(Q7r83C`7lcR9n*(JefIlW8W`ZN=9bK8{Rn~P&SQy#7F zIublrd(>Bynz|8{<14X~{q>qfJ%0&9TZ^5+A7a*3I|%P>=z{)6^W&pSUFzS)!l7N( zCds$`yw#K(y-Y0r68?R<=r{6`d8r?aKD7chxW_&Ns5c*ov1Bd(WG<`xR_uA>n{N5* z;iitgq^DrwMwG>_SFW10LccBIWzqB-fOMB)^9AxEMt`RbAj#l;W+pXzv9!m zhTSMHl(bjvT!oXZg7dj}d#P=LPWWuzQI@J@OpLL(7(PA<3X=G%7yg`BkiTV0OBHxd z6$1maB_*9oY5__DU!2}hw~ArbPYo({BFYav(mh zlX=o{Ajs}QAh?SzhG2UK@fRaP;(C1ymaH!^mS>>jKazQ=_-Z2!cSf9eKPDYpczu~8 z_$UK9aFxRTtwNpnAvWQU`Pi5K+-q*-ZakQ}R_1Yb^!xE@atfiG?>!gB60fpXbj zHsAGilsYfqK_(8;Ry}U6(8cXAT$%_-Nqn~V2wWZ@GreyO>mCgaX`Y+9VBFKhq&?*z z&(XFT<9#Z@dak3|$M+m9Pi}Qa%44&$%AXKXpeUMe42@amtCjrmTWMh!B^u)umB6~# zT~2JJ&`aB3M~h4#c3pi*sHQ}~83{YnEG_`M?>pRVJow>g!YyWNtUV416}=f;Ce?+? zd8B~<_tH_L{DHsfj)62pYGHMXXyX%ioE45MbIO%ui55Nhig#jaM-u^Id5KD3aUZ^8U8)pX6|KpvWZArxRHt2p9_)*9df)Sqsr_*=L_CT@ScK+0MWV!QdwNoON+E2?oCmX5qam%R z^;0GK=Jn{H;SvrMA?$+2slZEzjxQWYe67DQoY?_LGVr~OlIhF+QCxNx^N57iFLeet zbXXg9oudX0u%T=G{nh47w`I>My$R`#1b$t=-O; zTG|ytQ1m~gC}iboEgtv2a?W|%)_zHOuVTh#Eb9;8l(BEmhY=m-wYYa>t}+zp=oxjc zSI3*-=<}onZqK=r$5DWkK20rAax#2@|l0XeIl4VFnc#c?d-aXaZ=i!!T4aN zz$jSA&8BOurtF3Wh$_To(fAf_ZXTcrQS*l9vEHMt*~U5x&PtDgm2|fg%D*;Gr>I4A6cB-)F?a}1(A?RJ_Iy~CfgB?KE}G#`3b?zczCpPJ zEYXMEp|v0Dk=rmr7Ms6CtI3g~W(*XIme-qm+>;Mw&o?-eE*WMvLUY!8!p0NFtg-Hm zMs|r|FTSi&f1)g3y*;)<8|H(c=Wp@i<;HuqFC4iU{a;Skj~x^WqG@ZX_RbAja9$wgK5 zvNX_9;)Jy}Z^bh`U`d&^k33GFT)fl6t1GIbuziE}y?4YqHS1_JO|N4#>1Xl> z`1zsGx{EIG-d@;EW2Du38pS!)ndIVVuERY1=3#eZ#A-cGSLpE8wmc^U4~$QgaX3Wu zAUnp<&rQa-kYuS^{5e|SlfZTo)A`oS%AQM0V@=-Kldu5{3Gn^Qh5(}c>&Ygs=1^2A zyN@3eLL=me#w*M+c@`d<&rd1zZr7Qq^@=u?G@Cxpchs=Wae3VpS7HEZbMtPP{#aiG zva>4C+Y4xkcJh=~h)5FPt#|&AXLj>wNYr1-1QF8b*N)kH02R1BhFR`*cpZFP>eQwT z!@El5{zUNJy-$vMD%*=8VCtBWkvUjM=SH{gSY+v~j@RE529?h3t-rA;ufCb)SD;HU z?r7w-2Ycy+qtR^x`wX3>c^qx`$@}0``jhpyI#ZQevU*Q;$usiiV#!kqj^nIfj#7H6 z)rp>z@_gypmwd5WN6+=hWXHgQ&RqlZ*sV<@Y!lm9UqH!B;ZqX8fc2j_s~r&`Mh2WS zGkJFI=z_BlW@L17TIS%St4Z&t>4gJUQ_Y;<-?Ys$4&sZ9m)MJXnX#iR_LiPpj`gcf zI>AD%wZYGn&2s&ALmf^!QE!#f%~50o>2SSBF$4@8d$za~Xpe+l>Y9BS)C;;y-?2hC z^dEm((*z?-V!u39Gpn4w`Jd`{Rc_snjddGJgy{OCsa3#p6yo=I*nnMKQH;sc#@Xv^ zpX-Go5xn~2CX?~yzACLYqg7$h+P;W;P-su-w_EEJd1QFfiFzL<`a*ddBJb3ts#BeJ z9U(wflzCZTXC&&O=bUzE+Qh^#XDq7nPF-pv)YXXQVUWy@)bHDA+R4u2KSN2omg}E_`Tej4%2FNDUqXUjU)Mu?62YEh>8Va~$94dK56dC-Wlo8F>MIODH27(r`vH7L%FnV#GM~-ulp< zEuSaoej`T}7LOFMh6=`lcpFA-gTOvn+ewnDWSiStn2v#H(UUY)4o4Qb3D^wm#_v_U zCO?cIh>kENPNdWj%e);p`5p^#J;8^obEq^%Svh+=aakv`)jW(5wnq!KIe@J>Vq4bFStGrOO2v`O5996@HIZjNOYu1CULo$txCdn0Hl%yKxe zf`ta%UNTQr?~flyO+8&dQXKIpEJAm>BbLn^rQK7#;#)V~BNrdQ$t_crPZU?B7E|ix z5|aO**~(xD2_7Y63v8_025ADV&^5}|K%%$WBYie7Hoe7OM$*1@5^Cf7dIgM8moIgM zP2gX?MGKnVa2tG^h)da>8FG-CJ)6)Jf^T3!?D}uK+1evJp4Sz?BBbD*_MqO2kvM|w ztL4y$j;3GY)Um#Ozgu1Ij&cV}H|#Z6Z18DbUORD;J$E`g|5gtaEy){i-%VH7p(~F| zK4Icug++A|Y3ok1!%+6Nd-eVw8&t3yQ{w%s-HcQ>LYc?zN6vqb+RtF63kAJC*4*Z9 zj7S3=3ZvuSuZ4s}UhXR{nF968=!~-GDylM|q#>)Fr~jtU#F6*uR;!>`v*A}RW9{+L z%%@?=!x35+6_XKK=_g)`TVSfXHHVqRb<7ylt4P^}xDjq)6XJ2`tuT>`dE0VIIgbTP zW0+;Bohob|@r&FTh^KeuDE)$EjDeU%6RrueLI=r~=l1f`NUCPMwx*^gTV&^{PE{X- zCY$HX(0(Qww|+!$pOVD>-FdOXGMpwd6gz?u_#Q}fnS4je=82pJP&Z{YZwEHq*k) zd%`{4?C3Mo(I2AHxD=vRpntV2%j>iKyjbZ-UqnV4i?rf+;w*sWhoQIWYnzF6HQ2uB zg8|dBlAK0!;JD!hv-SMFT=U)?8}ApF`Ap{d$V*`Y73~5O(f!%pg{)!?awAhK+Ih_V z@zz2iDW{JoYhiBLp_jF|>ZAGdkiFtFNfT^GT@%qo8OrxiWg_~v-;y6zjD8*$@0abK z*L~WC>@R1izAqTrIGR{G_+7>r{AiM?*4&-eC_T&DQt$20F!5S$B3n}@0DqxV`U7U? zV8|f}>NcY(coLKQBY~10xXt7nS-7o0U)Nf?2Cby78Y?Jmo;Y4&X*R!?h#ne~A&Hb< zn^*xex+X@9VgSjZwN>c+R$RhnwqcKz>cb*`Z7S%(?WediAw zZl+YyPn(K_<;Y%Y1R(;c34if1pa);!`CRai z>{$*6)A41ICiP$}Hw3-TjDehhjTx=M8dHhH60PrHw(!8m@uT3^VRIacf97en-;}g7 zg1>|^`04U65S6sf{RKL`OHp9mH5W+CiJo^mwDX{s6hPUiv>f@&F@GVt|G1~87Vzy= zr-It~2$M#}OsAsNuLM*_sKBp%EC|{s9rhlh#lQQsw;0V`8>)N+H(CXOZ&oT_T8E|e zge}YUgp)#8J*SHJP&&Z)&9mTX&Pb#PFLoV&uQn8aMMf!#b%{)RoVM8yQ>D&rAA9{z z98?u9D@3e(?DhnW>Bhw0YJW?)xp&rE?J#1$eqWcMywS1b-UUIya|p@uWXJ=Z4Zzem zK3vL;u+=2rLw#FND%LE@wjVAaYKfGb^i7DL_tT*bbshtkzXHrf!Zi4B$JLOVM>+$cyG7aW1j2nnEs zCQve{{5Y6tQ(@D0o7ByuLVqX7AAqkqwGUzKXxjR)BM{wsY<+7! zpib@ZJR7J(>VwJDI$DL7eirV7O1foc`7{dR_iRhv9NCzlG!NrFJ}6ob;ofTut*1<0 zj%uS$*F~P91hqe$U&Uxz^PJC=2WJxPydAwBOmC)4gKV=-RY_5wR#w|#O65?S@w*39 zW1pk>x`L;6)9JcT+9gpEnYczqDK&B$%Wm9MR`a&oQXG%X^5HB0YE145BT9HZIw{7Z z_zh`*@+%Bu35<#FSwLBFZkzFpqQp4S8wpa|cJO@frSqmWLd1vo>M!GDCbZQx;2r$? zh*C|2H+w2r1D=#R|2Md42{efiwdYSJKs65Wns&9x)<{e-4XfD6FLYUk%`kI%KMST8 z_F$Tn7Wq7T5VcS9+-n4Mmuex0bsr&RT2L~?HB>2uQMBt=w;D@Q~G=z{3NCZq?2Nu!ROmO&}0RXO947l(lb-Y%+}$ zLwVF-^y&etULxf@4d<(fCSEXoqHnPs7UU%P`wpiO5Y)w^ND1Labu>yRD0;e^9)YQ52=78qY8O$guCuNx**_s$AaI+zCqnc77Xj~5 z$O}ro=;t>@TBTBkP1SC!&%IqD0%hpYa6z7;%RPw2jz4}bSU8n375x5Z>O^Tj=FdV} zqCep%qtbv^ycnFeJ0p1*=6x;yQzd4K-F!Qfo?$q>j479UDU|nepYulC{~(lYfp-~j z+sk!T_|9_ho#C_4qxj2x(Ytk9PtSXo;-w*qscaUGw(dq1I5umRzMCQuzR*@&thLqC zu?;@>b=kZ%&(6f{)%)EOp_-ymws%n&R7ZDb9HqP=au~Nb&`MhaD2hXm_@=C&+IT<@ z$5;`cb!hFCRp@&G~y2a!*sg_EZ2FG*~~7 z>Y17Ic%Gr<3w{t?J)0d`f#gVV_^&+|H*2kb^x3tAwoX ztFk|p6rOZZ@fWWPRCH_;M0`>uRx~k;xg`Q>Nq>U&*oH{PWY6<($B`&k!)F1A4GRe9 z&>x?9C!Ggqr;n{_GI*-eaFZKC8(;QwSB{-#@VI4u{4$AG_$a1>C*cKUl6yMW|D5O| zPVx`XGs;LAeG87m$Ag$I7i|*!gYm@h1*Y*=1Gam!JhLn#K7HNSl#K~A+(geNPu~@j zL<8>?pmYql2z^s@ZEFusYXQlhbX75;T%AikT`>UdC~;4`1R>X8d!oq2q=q}sr!qmw zp@SGY`q;+*B9tx_l!18tWYGn@8NQFX%9ijtgMuH}yY08{n`OIra4q%lqF&a;Fw;#j*jPO%fqP~%wf~7 z)$1wqwD``^L)nG}F?jY^=H#|-S<7rjnrdpVP3U=03aJKyHiZTVoiWq>1pR`|!#(owPHJAjR0UQlt(?Lg#oomFt9*#<5*hZl|AUz_-a**q zX=EsQP!sj7B-e~i%B3Fq?7*eh6QWn8#tC~|yU4xnedShMLUf0#MG;VdT3QDWGsw(N zj0VXp>-4_Zv$O&Kito34azJnR?dInf$E!vnawyB%rW;jUI_}C+{&1FkS<4-bY7{81 z{?v0i`GNYEC5q$g3n0=-Jss3QU91F5J~MWVepjYtnpmi5b5(i0x{D#CO~AI+eq&4X zOA6aoIjd&nyqW7lN}>}y?Hq^sy2SN*Zp+DLCHITw2J_^Yj07#WsD>3j105)YY%RF} zXx>+!Qm#l`eS_}FHlEaJj8!y3X!2N)F_rH~MR89=@K0qkRbeA(H1IKbFBh4))QS~m zjj~Ey1+8Eq@3Z*gb6XUFOu+Mc59B_y8*-Y2C8(nfSwzO&u^VrNab4?Xr`5n+XLXmn++<9Du zx^|lPrS9ct`ay55le35 zTm@`~wj)XJX>X;i8YV%{2+&4_OX4^4YOCZ^-kawjS$#6?0_U^D{uXy34?RU!6@2L@ zm#(y{1gU;B0Hzb5Re$m(@+N<4`)bh5;_2OHdgz}OoucU+<>juQYtE=&HDb=ahuL+r z1UlM(7_WP!75Hs;{nra1Vp9!qhRXqWI@{*R>yVV$hjGckhpG@fes{K7`Ikp}$pwik zrd_bnLqY4|4>FNdQt#~8Nr*BAUkrt2`sHcO^@wJq4=P3!#MHMs+Pb>*IkH&@S>I!8+I2IzQ15`NJaCM=ACPpMO8S zptugo?pQy!%GXX3pT=lT{cWiVvge)w?h63dp{rCG+%RKqJsqLFSkXEAS$wbZxrGQA z`R|)?n?rKLEpL9pHXmX(wtMjj?kik+`onUi6>PTd$a8Vy@iEzgqbw}k_-?xCBPiW^1ny-v zzN*hT@_ogy>9V`~jPhLTanL<|Bc7P<>O`prKKgVp<$HJnZ+oIa4<=;&GhQGrz`o36 z(l!}t$3Jq^Fj zYe@Zi3tuVk-Q`iZd{wfkf2Hg3{7a%}sHn-P152AzAvJ(hMkec&R?0?zxR;?17j+-& zE6=U8va7dB9o{(r-tWOM)1L0yb$X?AD4EZ)GVRw{_v_2?m$-Nop!E~~K=h-rTj;PfW*$8ygy4v(R;+`p+o=#QvusY zf4^$P90#ZMtD&QYj?wx%H(f5_E-Y-v!I(;9hR{nb9l~}@fy&y9e%8YB+V-La7L{GU zv+`r!`;5M?=KpjV253U1sSl>FeA1Jvduunjo3)k0fzyiWMeqCgpi;AH{(=aD4)c#Rs*qppS8hwki)8g-CR1cY=AeZbg^-$ zKeQ#%M+KPm!Z^+bQCME2FDxq`=Hk#uhD3!GCc{NyJ`c`1av_ZP#qaW4SPymMRAZLu zK<9EqD))yTH!bSRmFf2L)uis4ixA=m4a~>x!!{%6R!zO_Bup-90~|UIt+%+hs2ICIsH$ z&9%sF!VTKVW2zjc(>`w^a_8ilCVgjx8!x2JZeos2w=r~Mf&b`)qIeWP;x#=RwC$Sv zvV{?~w`-LliC3Zhy~Eu@Gm%k2WsvPu=pR8W_2)<*lK_h=1)WWfL&E?Dq~(v?K@HJo zseU{BD~%&~iJ>^#t~BKHh<{8M!YZSsoaG%A3yt%~#D;_`x|3h2-@vg#&)gIUi9+Bs z_gI6DjK<`t;os|4W?_zAPg0)mh^<6yfdqvkX{luxPqFWMs((2+{?uWy$`e(J4=sBo zYb5Cr^FEMp8x%|1%+m^$)ZHzor)kp(tS6Wzt)X%6Q-Jf<)o&>QDRpKO%6Fa-36Tv$ zIS1pV{L$kp&wR@_7!<#Muk%G#K4Z-YRr^ImI~(Pp_zu%9ASweh>?~rtc~aZhkUD|H z*733RPr~_AB})$P6`RCZV@{#nA5?2P~= zFbhsn|0~T($+dsx^Mgv1esHyUbL0~%nysHGCEDZLQt+?ap2^2rcE8nc_0H8oyG(NJ zB#V5gEkr*{rB!f^-pa@IqG(m=ZT?=9o)))WYxKnDUD9J(^1az=Y~5noIb{cKLwRs` z1E7!U)03s1Ez|klN*4C$ZBM#s;whJOc)gThVpQW^6%p}qKd^Z^s@K%-poY+BSYAoA z=nSjLy?Cz7rYktur*4dB?~5(T$?%MESZgD#MVn zK8uD&u|XUPzCST5wl^)^;I(@Iw;Fp4NnzEaA2eS}=y zFP2hz zXanz5dGu+}%>;(oeBTP_h1P%Ia{qEw;7F(4RO_Jam<@OS#E_)1Omeb2SS1!R-Wt+F z4g!0@1Xe?@ZzKU|61-(0MX?O-8kB90^!6R>A~MW}QM^}6BPWk;p>l7fqCH_u!|+KM z_-^v0A|qaK>x_tG)60#8qmRNrfnbYVa}*8`p%rGFzQ+ab_u@Nl!^rKeV|%RXKW6yrQqP^XjIksfz0qOxd!QYa%jR#EtGi{N+ox9W6^rP| zk0;+p$m+=>awx8)_#5f-^6}(guJ1s6m;S?3g42!=_?v|B@9L&FNG6R6&XmU~%Ymbz zP>!yI8?*UvfW`Uk{KZGjo+fw>&j_fi(XEkDoe{jHvE@0IF5*?F5AWcTm%-UDWR=Sx zCi=D8TOKNOp%ug$z9v{ke1^00%e_Cs<9r#NR)5UmxIVZ@ zyJ4ZR&iHV#CX@yq8vJ(#h^hn7mWCg=`-vwqV1qtwvy~$VlE;_~FK(D?jM*S?AS6c2(6BPJS~?kIX?!k!Qe5e616; z&@Sz6Z#_ILX5M^sJ(op}8f_mI5^@@`M>Od*K!l83661X_RmWvotlg&UFop$0lRn=X za(;`)y7)UPR=MA1YwcJ~O(nMXMRj~kSN|ufX3pkPkZn6N2?m0r+<@3JGelofys;5t zGd9#?pH(#?_@NGuVy;)BYAK9n964MjQlFqiKhT66=hq<+(eNhVWffqbsxys+-)7*U zi2bR7(xaJ?84pr`OtQLA3%AiiFBZ7^*qGw9H7vd0`>$)bmTGc;k9oL!tLV;6Ledb= z7>7Ps-nx&K$e)ELdi~90E+jSHpb&gSal>62n6V9rZXe!y7H7Ldb8w}bfN83NW;0WZD&pY#f<=TK(CaW}LT#2STeR!|RBf+zL4lcL z-*Qx@=CZf3zeMG}q_`x&+em6FQ<>}c-WW_z$BRKTnr{`@Atv-Tl-5Tv4AU0XtQ5=E$tbABkMK*R{OJY%%6O5Mtqa+5hmv%(JGG=qgHx{A zWi^0E1F%`_r?`C~1p2gKI7y4RKA~~d=dX*)upx>zt#)71S>*hHP$91-hqjwgHqBSQ zq85%PDEYgIoNYAwF?>41}Oj@&LZ`1N-`4mFezT>ks#074_Da7j{MzN=9|Y$65nJ z$&2Ov14P%#->;MHAoam4NYq8Dd!p3Tlb)seNv55FdY7B&zg3M>riXTui_70y%!aH^ zwMPh_s3JW|sGgoFD<(C$!t+kuv?uCT@j5gn0FKTsOY*6;>ex^n{Yt2f_QT=gZSj&` zd4^0oj}4a`py6C;Y%1@-S;@6Qs zm99xA%C5%8#R~0wH2M;CQrwaK^?a5t4s2}nP`c`qRI_3Bf;JCEA=+I9GdSaGn3-p# z*O1~@b1%@Zw@SK{^QX`BE!TOk{d7t{-)4Q>fxFi(S$Z{U_N&IIgqD(N@st_V@dVRD zrSZqPIGPCTUy0ui9t!e!K%)k?^eYh8ed-yQY#MpSqWj=kvp22(p{OcH<6P%hj6N!A{qBStzCZj$r?5x0xJV0qKo!8F9Gd7WK51(> zI2T^8RK5|{f#0&zooe3K3J&X(qz221iwGPPIH(BrXY~pU0vRW4)x9zkxJ_ zjRE(}ujSPxoIjE{D}U6{OO7InGkuaoja zU?=RK-aIwQUq-Ol;6V~ojtkw*IdI|6u4}6-N0fCofX;@#Q*ZY82Om~z1d-_9pnt4m z9Crl!^9`L1ndsdrVQ*}G-$fbyDP6Uyygxfym$&ZZ-@5Ak5FO$5+V68%^tW-Dop+90 z()BFY^?PpT2jO<`6J=oeHiU2&!@c%WZLnJyO(9aSAY9aq!BH$f3_7~f*wquyg7f)0!G1qX1bEl zr^oy2>wEA*>P`WSqsOB|-c{vU>d&JLMmpW3S8)VAWD!p4!49rj#DRM|N5ZTly?I|( zcl^rD@(ZpFE}a}lMhqNiL$ry1!A5rCI4`nVLL6i;pwII8S9A(Dzb|e1+@#aq;DB$s zOBjH3zw+vQt1228%?Nu}2*@=ZqrYC=BP@{W&QhV4$XiE428f3*uuY(|?COI{-BZyZ zzF#Kps`QIxXc2D@c^$LM?xgzEiq@$|VU?U=m1wlDIGmNFvqrDj1T|vZD%XcL0`Ue+ z_TrW{_WcBKai|`$fqna6crVeJ&6-%xaS;Qx4>)DD&N2g7zV(!|UN0mRxk@k@pp*jSI z&+lI_aD=nUufo%Iwq~xTiY$HjT}5B3z{;~l1F>#fWVz7t(WAk;_qZw^0xP`S=!qQd zvh6fqL&pn|Rz5JX+3x-^P7}6FE>0Kw+)8wuiR)xCQ?S#1b4Y3o&D|k9^LEE~@AYZ+ z+NpKa^Yleh_jePHOBrMmO>R$ixy8CIZ43(Y9DxPIK?LHnyRUiM{#>hasIHk^27Ju!-O zWc@_Du(d{&gkeR;idk3$39k_M{GO69>=Qu%^Yur$E!4NjvMrQ70Z;@f_j9Q^a`7G=re`H+Q2U=f@QH!9Kk}}lK9QQ zP5el%{5&2&T_$_}vRi50EPEBmUMYj*7a_U*H6_wI204;`6G-O74@7|CU!P);x~Mil zDswnMg8e^)2R=%a8HxZM(E3xq`tbQ{SXVCdevB~2RB?XXef%jVgYelm7{ZouLEN!_ zPxbZO!}ERrik{ycbRO}JGdcs1u`ve2yQISJAi;}%RxbvX-6f#;!$!9Y@zs@gQinMqtO)%{7 z6R?HM0eLtHlic0Gy$TNv;~@s*@4BPls5zh+wRoEvHkx!&ygH=?c2BloZ=EaC2bgu0 zx`J=LI8QMv4XoUh__t4!NiTX}L`HL2#f(AUSSe0PaJ~w)>`nZs?_?0N_0~f#p^PhY zMtRTc*{N)OSfY8eeYceR;_Qfq;y7m~pBg|U z3&LnWzPWdPSTEmfHDY^LA4B8CI)dgd)wwGdo$e!YCs>*7>!$Jir@+F+o7T4OWXF!? z9U^9*>}K=f`s>s~zDMn1HCVE3>Nee@!S`)J1`E2)=m3tcg&&7}C~*hVwq$g#tU1oM z5=h48EHfzoI?S!Hf@M-LSDb7ZEA#E<=Wnl>TO;%Vx6fEXurzg{ z(=sgnDlMJbmdLESuQXa#YHx$a+FKWRZBEQyGW)eb_HnpC6WyO}$2*iQG9(@#?c@Srz{X z_K6W;#82?rNHAB4&4mz%ahu}43=pAw$Lvxfb`M}!EP~_*c|D&@0Isaohw|>OMYd*J z0TqNOi$Yxo{usJLhw-B~8HY?X#i11==HAaaqF25EZT}Bo=`{hV6vd>?gu1R7cKS(f zd9er_V`r^93!0kjSgbFy{4kaE5;XO=S350OCI0O+b!V1*xj*oMkU8x7M)~(BUXsG` z+YZg38;pCQI=%pTbeb!H+&(m9x$jo(?WRF|g|8VOtAQ=xMWIJ0WZNiA%~!+@9V4zA zu(_KvQ}_Gk|c>9t)c42%${R3+=;v;|Dmj|0K&(bn|ltIkP$DAN=I=G*Ym4lzBY>6}2;Ghd{ zYV3|E-_Mf*t=Q)tnX~Q^`)`cXQtn) zMCb!_^MCZ0UXgK0|DIq2AO6TF;Nr?$IvlR?BMQ*Z9#i9nDWoklaOenKkePT0ond?5 zRMu%&Y*`G3J20MY{{HhzwmLkFIH#74($m5*VqOJPssl;!-tkr&H}G$E=s934pB*#D)>ma8H()2g7&|jL zsazHf4n2XzQg)$icl z>>9t=pBkq@D#Zv5Ux^>>&&p-7e(<9F^vP84zE-^-TRWILijqCnJ-o7v-|D*RmLxzs zFwW`oFIHW}bH}@I$*%7TEKfC4<@(8RG#sihKD)_wtpSRFKloxe62;nV(L~;oPwks% zaN}MZR1Tt}0_`jRpibQrD}H5a17^}KE^Nq`UnYN1em!ql7Q~IES4k3QG4h@hl9LqX zY=~12peUWnERMAl(vj5%_B#T!McU$&bp1oL-0;aHb#nabInUize9H0m2ypYBlLWrf z$?8HPE-(w7);w!1x=nuS2(dU%wA>5C#NV7q1|hdjk98 zQm<~{y`SJ1OfGK50g=X1=yXc(z3(*OG!H(#bzAn>(X(#g{I;+?Wmj13rt1+d567zf%5assmkDugNyYaXi`S$J#o`-1Y) z*wbbww*L{Fy~3cf#{l-M&`UbYl#WPT9#)U@aPYcbRJ2=wm`*AyWMo=T-Qpo2DlY5T zIgUi`*4tZ33Sn38)DBcK!h+l&Hx@0I%Vpfp(z6ym(vKwwUfH(l+Tg`Hdo+ibp)&9j_+v}W#sI?SIZ=`{q?-Xb@# zr_D22L?fnOXQycMYW%v{>NHTf^Z^YAM$0Gcx0SPS1W*fu%Tkhd{V=}!Z50=PBuZ?* zw8sfOn$2$yyObY1@WIEq7Poj)Tq@pw5&KJ@DfkUWkQYzj_2PSrah{+D%Qv0%&%(Wl z;`n6QbG|+J+%z5k%Ny=Rco4>0uRpXBokSk9dX@LA=rmjXx@@%Rm)}nC0?tZSjOYe} z5+yS`q>gY&Qh=?AyJYGz%N@|1oW{*OL5hwRh+zU;Y#BzvW{{;T`Byw;&kQ0G#E7DA z3LXP%sM!|qC`DyP%;-xqjLRRxB=7QHuE5+$SGUBU)#=8{`modtCN+t%K(cYX;rLd9 zSBq55ax=Ckq3NEV11$V!-%3688iWdthXZcCfa=Zn?rZ*O^2XQdk-a&FVmR%`9Km-y zXyyO2hxRx8402SxEYZ8vbTv9@&12S_|C-8~rTO(V^mkr9pVF{K5C58Z56xCCDS~hJ zr*svQcG($qaVJHAVgqlm(6Dc?mc4t}v&;wl5(qcc-~F+q-WPf+)p)&*?PyIve4aPt z{<>G=+xKp_@#ex)7xGTO)C>fXLf{E5QPAnuz=0=j1@z&L%a%ohef#Z6-vNsx-CW#N z?D?CL;0&ni8#d!s?mVpXAz2#F7^_C*(HcyJ{4I`%D939e$53HE!(Pfj^hb-g$|} zPlwU@a=l+OK=0+cp2uVQeQm7IM8BK|lDf^bkH4xFvMER3A8pOORNrKv9S;)OSjUPo zO832Kh+OdQUcd_0^zL$fE$$t7GQ8@d9D1*IV&N|Qvqi?2GSeL^grRdFFkghRL^v%l z*=03+^$VU4wQX%~zs~kwhBWgmYTpJ4>SnZPiU-BTD=ahoG~rtL`p579j*Z#AXa0ZF zGqQ>_1>s#n(DvVJTq{D`4TFM@T?|Y@1gDyIw$p4<+U$b<%VRFcvDA>@}okUK1 zoj_Ycf?#y~3fuaTKV?y~HSj66?m!@9&_;Ux@R--daXD?rF@i@O6rWFULSpO#Q5sAP zM{=8G+$2F_;o>JvS`H~gLe4j-Zw%J8@)5gn^p{ajnM-}^MIc>%dv*eh#e(VkcU^) zw5^#rrEQolhvG-0`A`@lu{~jb@lWYN>paM7R>c2r#+Ro}+YcIfGvy19$jj+~qOWCt zxIlnRz3X1D!USn(q5igrrMe_JfuV-+#^7=%sB$^5zdlHp#YNp##oYx{qA$EfpfB9A ze_+!)h0$Gew-|_;nW^+E2&J@IzYsEPLTHY%M?AR|USyD(zGyQ4i$#$?Y>yK~FB11@ z%>(}|j1q4E=&h|(2Bu|k2m}!3tJ9hI(P>IOtf4z^Z9-W6UR#?106xU!c{BA z;JR>@5`;s!E#tXF`doMb6mDnX2zP+Gs~7O^^Nd%lcvYHlayq6&bACqILWHKREcL2X zBgtr(JbUToz~6u9*11A!PdA;YZ2)C5blrQWS)}#2k3L zU1W-iP=5V9SE^Tb3$;K3_F{wcSQ1i;UKZ6k;%mS9?3`s9LjD@uIxydKdo=j8KsnIBc84soU-)nkKjR&L>nf0ysP*vB5G^dFBKD zsw2~1!33=YU;20g1I|_QFU2`&I`;I8@A`- za~diawW_iCb5_|-Bj+WluM$W-Up)XypKz=?%moS}; zojyn9*(~)pv?uqEcSD{dKRN8v6|FT!ANMBZFo=)lTT)I7d>Dfo5JxXLez;B;XS3bUj-W{TQ;{zQ}h-r*VQ>nUt@0Wc>AUhbM;yEBtPy=uYEGY-dMA=zgy z8DqelPx80*A<9qk@myp9LinxoS3AZ#3<9qQFy|?tWaa(h3-ReY8i@;QL#SvUU*7|cU`gUB z2`-)yhDjd1J+$p59P zx~cG@BXnXnSOpJL!~PI$9cs(ey>|P-W9cx52eRZg<2*&*%aF6rXY{xSeyZtCKQh>o zsr+}tR2{5kU;!9-{;pe_qbLh*nb(92#WJ0WxzpH+WCSUyR;~!c_zodOtK_v0g^45Q zjx{Kg3OeF57=0Os>94{blUQrjB0K)p(k0y|Y6K2;{GHt5=O8BG_kBW6%O0NKyrd}& zg0@;ud=?2IWjBy}Ky#)yMLcNMR@|GHXjNpi3!`xe92yZ=z5p{V(?$$iXmdx3V>FYW z#6GEeB^wmI=$*BR;m%S>ITV(!rS^W2!a9PduyHpDC0KS2>`z!vg@mquKm6Da#JusS zH796NqW|ofw|`{ZrfY+E_&K-Y6{o{+_76JLw=H|?asPJ^el1h& z4J$KLz`dtpi;YRz_{a@^+u!;GpV{V7J!eDrXU3M(pIiLw4rq6b@Jm&p zhH-!cX{oWkRGi|9(~b5gko=^Dt1Dwc$QRGe${NkqnpNDPW3C@Mc=SNIy#N2A|1k>q zU%vn`d^s?RR3`gFMf^|Hf4bv7O%#(3)Q>;!30axmo%XHOvC1=Gyp?!%{EOCZG-6Z* z{ro`MqJPoU!oTO6d~E)Nb8OxoCnNS?3XkD!esGMzf9@$TrIceh1PeuVbl&hp+v1^6 zg`c;Epl%}fdphC=NM8(|R8!|f{=A$OH(6aJs5a>!Y<#HIFZi(IIxp$((P-bcBt}ptNKeo*Kf3|({`#vQ&;I{Q5>UYR3!Z6$0`}aP*ftxW%!p|0^>ja7wAOs-*}0nRv>J&(hRD5wMy&%{%h0d z0=%S-TkOwq^Vx8Aseawqt=mdnXL-{xh3DnokMw0WX#gty@PAkM_g4Mi`>6iRpU-xh z5LE7ak6<|8(q7pmNrT?*0YPwQF2jPBcQ%=flQ#i>-QEbo&tAm8CH^0U`Tza;|H7~T z`64I&@6&*49L6jE-|Gv|;JZIPL>IVaAaV6O-#0j7%;!4mH#Yr0_TDNeu6BzS4Frea z8XST{fDqh*1PM+cxLfcLtf7OuCrI!Hf(H%m8X&m4G!m?F>&7`N|M|DvefNDhr_RHD zI902vp{b%*ueH8!&N=2BV|>!1;hg>FRd9*w7?pG`1cK&M#I25zm$20^I}OpgKX8{; zg=AMd0v^Bo^ix+K=p61%LS6dGrix|k^WS@x+dq}vpFb1zsSs0IEdG!a=r*G_f6)1n z`yb`*-_O(EFL@lu)S?&JvrrI6L2Lw3?*zY&2?f!XJ0l=}vlASZaMt#rLGk&&Uz>mb za==B}Wpo$pVD9iAcBk zY8z3fA79YP{^P=RF&qQ7P!nmhvl9SyeH!W1J zjtpqUd;<*Ca*+$@*tK@&-V)@hk|77D@_3x;7xQS`Ihfz|yo(&6*|4|41%$`;*vODfvp0iH2w%jZYJn)!Y-WoI{WFe68eBb+}| z9FstAi{z1yqMf`yLLN+Y==xjeFP(tGBDW_>BoHV%tyA`$-$7x^)u}o#&@^$8ntvQE zMW=oJj#w@I&D|NmI?LG{)FE6rAFhXvAGIIlpN)v>94wz{{z!Mq19L1B^)MFyVsxZ&9?DlShj%2*RJ?-G{N6?VJ=>NC9pDo;V=?n9Jjm#Lx9w;Ap?uP5r-viu)-C2_d z`Nro$CYVXvh1lGjrNnirl`L_$zKeBPN%3=#;7!P*4-=RAI^FkbQ)eJu zupaaD;$~f`LcL<;&V3=-L_bkeS_@C`{hL2@JEuiTd*g|)+%_5*tJ=Bc1APquHnAHv z&<*>Vz3D0x{&dOXlb^`&aEE{f+o}W_Ha;IiHrl!$ZNL9E41F*KTG6CznnI_Z$N?E9 z+LCZ37Hjb@zy#QO%5NbpXuY$Ea>}fV0Mib|g%p?=Bo`1e>v|KTL^{fPT?no7&KG^R zqWIU_)O%UJ*Qwv%RpbVR;rPZowI7gz<8xs&clURA5>v?beeo0XqI)a(GmavAp5w>k z*Hb$`e7{Rhx?Np&z#i4wQA;U%(}uCpHBX6fI&!v8S%wJh=Vd@O(w zNE*3me8JIHmiVyx$S420XNIAX=X*g}q-`3CDRO{PB0TVdDs1 z+Av@1qzI~gbBos)`~z4t@hWJ6Lz))@OA7zCUHxECRrEk>v`&@)(`?$g{c1!1mnUpZu#^~O?spVjz6ysxQHbw^}DkvP!y_6!D)Q)WNWADf>3?$7VF;HSIEW8L!1 z(te%hu&%jKQ19gR6oA!f`19|0B@sE}EpS)ko4xe@F zyY!PfE8z6DUqg%TdJyS;V*{yk_U3*G{Pypl7|hLEr$%4m zf+q{wUjY)6M`77r$NWuZ{m)Wko#0PJ@%~q(#(8Vd z`j}O+vGTz}Z608MEFxhMOrP0wo(B{(%$x)(KJVHZc+5n^22V*iY*%i3nhqG{ag` z#>Ko#!h4|o&wKH#$;)#Ymh$Y$Q-OLho*vnTrMxgxgTEHWAR{`K>Yw#ula1E=OyZyG z#oBjH!r{GSQ>~UFuu!&qAMPK!EmC{#!687kbv_Y^8jy&mc_sBa=ea91mY@M4+Adn_ z0mv&%)!q<^z{b%oid}N$Gva$fa!k~+PLNeng!rH1A|-L?WY2J=qr4k){|!?}A-e#cg|{xF?IoN5{&I znm4`&j5#5ksB0#e;)3b!TD1?irP|8JN4?#!>sFMtjxA#JC;BKQ-IdXpaySwNvjM?8 zc`{Z;_6Uqf{#+7LfL+5VYUVss_1fb52Q@EwCK>Q`B?8~0%%CEtV!svak&i`kc&Z%L zcHO&BUt>-I?~jZlQ~GZuKJ=(1l5j)E3bG^+$ehX-xr+_aZ~X1{>L%eZ2a zOtWX^S(=~yI~z-q=>2JyMfFZTx_qL;uk$nao85~5MhBL`F0ahugtaKT+4aw_8-xn| zwdRRh0GXVr7AtT`1P^C~IMlWf@&@R9sEJGZn41PAybI_%4q=_5rsfvhN5mqU-R7fS zew^Y%$rlk#;&Kh!vbmgx<_#d6{LmWzRU-!EqW>xKy;qWIwEnd={!w)z{V9tdAqNAN zwn~@3H?pYn@zx2MaZ>#`BD_e}^405|p;_k(uvy!+Z&tjKGE7Rug_gvy6~mhsnWd%5 zg;*}76N@s-$tJ#KD8a^KamM8iwtrNMQ_+G5esu@%Tw5@_(MC;|J@AN(laAojL**&- zKz$M=ZN`Sh8CbW-=2Hcd8<)&nAbGj3>%{_)R#8bkZm-O4_|%>hQaYcrBwBE@kQ^co zmzAsrwCmE4H$8^>`;Ygq`eKVU?lTMN*bs(!Nmy37rb@0;l6h)I^twB}gUyRXHb6bgFmGydcw@ep)RzrNK+8H8g+nylsN^VP~i?=Gpp}+YH zR#sAxN#66qdzl!FH&)q2E!Z{%07`eUZC?V-er^QzYEy}(w2;R;+3ewoyjrg2-6dwj zavw*IYNV!d7d}|3jnc2#&kmaC{)|^Kc#y^+j=FgzMR(KhD^ps_Qo&dX$Q4?4zpYdM zh>_O?;ZJQN@lZ2WkFsmE9N@#k0s6C0-J80V>Kv81D|6bZcW(Z{u#) zxwpcaTOY+N`1$p*UL z`ZQE~vn47j>0(bO`(i_#e-f@DkuG+NDIC+ucaw|XrV zpSCuOhXrH*6XkjZ`>Wo5h|LT6uPJpO8*=56LH@$y8G7@pQ>!BFDCR`IZLi?Rfdq_M zRbm9Ire-Hydb?XO1-IhUZldaH)9fThPz6A-d8f1K2ZZ)dR`j$Y*f^O}Z!Lv88fa{4 zp8J~nKOa5Z9sCiGgEOQMBJ#Z9b1E{iKjLq)acvlj?t+@EVJF&(?lp(~bp&f%Rh=IV zQOb4~t5ssp8_=nOY_j1ejo(mA9R~Y_yd2Ge#*u0Y{AZ1@fkBIj52%$upjEHipEqAW z5S-U;F;eJ(Fz@*M+2CJ~d5Gq#{gn{CZ4L~j<~VwWC6?RK6)PzwFSUmH5>O^{Ydpnp zdr7o4U+dhaQornhy==gif!eXMxKvN%=38I?75t6I#noCR;*7?6edwri&Eh>g z1NEAebg9{W_tmViCx7N=rl@xXJCdeFOo<+YT!NFwId^PPkx}vSM%`VH=Y2Q72okhb z+11vn9?s?PPq$Rqed7$+$n9`FYly)`g&LN5>kV zab6hfxYPDDB7`bP;+NefZ*%o&h9d@KXW%Panb>+}L5OLVuXiBRt2m#*7U4-wywEV* zI~7{rhEB_iTOZi&$=8XIA&OA~v6pg+hB>&QtRuqPRMYoaI~@6}=PNg~y{ugC$}}UI z+{M?&{p%kO@T*rLb-H>X4ygeu(erOUH}~0O*29y?cFcF@wi~+>O3wxAzuZe>ma9Rf znv`|FjAltz*k1u7FknN`%KG$^TZg^$Ivd>YvL21hCIl``!z1`Wmb3eoujwEk) zEV^{H8q|@>o_PbBC@gmhfY1wBf!~6cjLK8NY`f{h>A?Ks-=|A?yYFZN3Y+>z#WO#s zDtq{R4LXDuvj$#)&!T@R}codYr_WI zpmuiFzP#~;6Yi<>=&|%-jgy>uCD|LAfT5M@&|QQ6LrfgI{_Yy^;oLyKRhq98AH|0XG9*W9Y{?V@Md=cp$FX>Q)U1ky&L2%*v(OAfi|0*-xXq? zwfg<7d|MJvI!tLxGf_O?x>1|Ig$r_AQEl?O&~2ypdAP$9 z8UBfBu?vu8qN%uiKe*c$$N!esixgZx@SJ&@UT0KFhq1ciZI7wn_%R6=8wga=Y*QB$ z*=5i!Y&G`rlke*2^!gZK9Z_=5Os1LP4S`RB6X{E-5*q?l{-#}_b1}r98%E$D-vQJX z48!L-j|?sb2$e2HKS(KBh9i%%Rw}F$l$Q3dQ@nntd7ALE=f|lkARdRsxnE(vSC>`f z9rH3y+|@=cHxTt~G2xfbUyyw24PoHO5qw6vpD1uR15m_OzJQ5$1eupN(&5a+xF%^P zE?yvkZ$HMVSpt092EJ&$kgt+%qHNFwvcPq5a>HgMLt(~s=wXY*b z=6c+*{%f=?k=T28?G+5Eo+y%h-T@`e#9;A$K#0FC`1{g|Fd}?z^@}%3PXb+yJ;I6I z4_Ng~;*iIvt|1~UW@CU6doM<`1iv-;vfJbn-nbJ4)bDM-=4NT7mC_b|@Jrz*G%w<} zhD}O?(geZLG~crdWJe}tUBs$4*i)IvEFn z_3Pl#uK}f^VeS>*-+60Bq(?Dn@wm%OV}#QVM@l=5dbEUAV2sy)TOfMYY+Th|t+kV- zdqc_Hv}+dJbw9N0&W$B7&PZ9~*Y(!@E^PAhdJbFc=KPmX+%`5TXHGzn{7&z+Fgix{ zR^-!&KTVt+6FSK^QW~>{Pc8)Y-{3|hMK+Xt#_b5 z|LV3$N^a5_jr}E0(mPVg)^O~}j!6_4rnKDgqp#f@P=f#`HoXkr2OnjSn@vurQUx0FaEgbXo4oB)_ z6%gMM!GfouNBvn`JO{k(l1|HV{D)w5Xt}Ncckg4smSpp2rPXiD*D6!Qeuk)4p1>G> zxD4L;tQjk`yO`N?L;uiyDmh}2cqHyDar!sIvl)TzrLX5ME zP5?!O@zF)koeOCRe#t-6fvysN;EcQ5GmmRIOq@*L1zWfAp4aOTK8^Hjs*4c9yosx% zDtjHC|@E|UlD6edNqd`K^Gp;_w?}*5@Z&OguSRQhDh}nVFGij^Pg=2o^mTj70OVc zqC%9h26)1cGU>iGbzGCJ)Pw?3Sk$Pf;;b+)jWJ#!@tI0EymL`Ap}^MOo>f$8w;vBR z6`I?17Awl3PqQ=A+R9!oX_4ve+W(^I>Qe4qh5nYXHJ#b#tIW~I$GSWqQ(F0=) z;eGP4`$VE$2EKl{3w0$kPnks)}Khbz6o#Pbt z^ub=MLK(4Sr0Uf$C=UeIcQo}AIE5(MMT0w6)T0;e4|j55(?=0@8EU_|EP#7#C;mab z`-{vl2MfTbZ1cG3K6w%u0@%|fyiF9W2Y{yRPgkc6hl1m1rHl7-^=g9KOH{&~X4V*N zzWG}_`}5U%o{1c@S57Li&prV%C71`EjFNLFEf4o#T{c^%96&$V82p|6+svx2vt^C6 z5nw)o5OA`8cet7JN7iWXgi$U=2zP5?Xw(;R#B4Iveo51zb7fSPfL-J)+5Yqh=yg4t zwOb;F4e39DtYH5ht+;M#zmM<@xY&Mo5o3CX*7I9zfKqiNW4o~qiC{}~YtMTq$fU%5 z@hg`k%()EkuKm+KG#cdH=(Qan>ic8jHfeSc=W^*8f-QDV%BkLwP-w|b1x5jhii39O zjNHr!mSeMNJ_+OTREtf8tX;Wu+Ly{$kE9e`+BY8Hqc#a5um7bJHqdP+M@aklN;lf& zkI7HK+*W87nXKk7RK;|0}d?qZ&$`6;K)Z6C~?l)wv`-<~|X z@cdS(@)9avYr}sKzAmT?jkHti*goUgW4bxBk$d>LLIJjxIi`x?#YV}++J<yXc$B8;_j=U1p()4687auO z{R;is?2J@gz_4fwIhuq*Me2qHT8&FFmF(2ss%4mP;sBI@Ghof*NJ0ud9AIxRd1?9x z$8>#}Vxi&WEo`BzzAc2HYij^IIrH{BCwq?xOs%n$?h^ua<(%qo=O3B;eb5PBE^cGP zZ{z#q9Ez{A{MKN^r$Cy!||0A5Emd1Lwq9&m*Q(nXa4K8 zfmJ1E&s;}<94YkYb$3jFvPP)on$@Bz&j>1`QMT-x#nhA5#YGOpzhc7&w?DOvJmMx{ z=3fQQzcopzx-o|SNT9cLFnSzJKmbKOVnofc(4*1E+0QcI-l+k+&aVBb-}q7} z;!}}Jm~(crf6p|n_3rFq(%+$R0W<+Yczo7F1-pFK^HF1nN+FY*fE#n%J%W>b!sx&b zTl_RhXSB`HWI=_m>b5Qo7l1g%__U76n$j_OSa^MMoBXU5u58e|A=HvP-GU1PiNs() z+pO;mgDLA{6lUI z1B*eOnD-~icH@{4z~|x|HDu;`@bO%>^WF1yM8W#<$lat&Y*{+z@XbY4$X%JP_3kEx&M_rTpT#7uF(L{<$HH-EtdTV5fEqw*8+%>zV>}N`+>yKJ4?4(h7 z6Gm_EkGtda`=hYoEV=5*<7cA1j^~sZIzcVHT)>Eaqv<`6Qo3`mBVYQGz(%>k%QnOqdr8P&m;w}> znhzRjg=~ckx8?yYDd65{YTA0$V(scC0XP2(()ar*IheDYB4&hsUFT|ib>@a2`B+ib zma9CqXSljEL;;cS(Ra*z?O@VMSl_)yXhYy+31y&uioa2-m}1y z)Jk6En!e{;@x6TeiZ}#NZCiIg}LtD6g#=e8{$4oOchbu8D-Zu=h+j z#*f+%0Lwj3-0#vzv>;I0h#Ue1YWXQq-E7*2h?V7y)DS7p=$$g^EHfLj6P;mC&$ag*z?CED*W7PLeB-aU3E`tFNw}y+R*AX za4vfripFf~nPHc;_8-?kDes%EpaC{e+sscg+BM=g5Du@motDrJc z$dQDqD5yD|GV-=G5#lsgmAxM*gAR6sRy_Boy1#6%y^A%{$lO@KE3 zVm5T`wNhrFd;hS10y6QwN}6?xaq4|s$>MYQrFRDOyC+v#3aDfi#i~Z^wuLX*Mu*Qt zPD72juZm}#pYFSNXISKXI_&wlcAFZD^^NvZLqM8Uss`Frv7%VudKZ2oPx zy%iRx))03CfSFaRS)O#&9%b2%;I-(}vjI8XIK5?Ah~iVL=Kj4cd)i8wIN>YI?EuGq zTl8Tq@CW7;^^s(?wdzdh$~xg4*=Gu9vw^`g!+#;Gv8ur6(&5f0=Lx(2HUJc`@hCuW zrcH%f#A8-XADH@w-N?o@6o%^HV*Ci&8i9OO?|2N+{I2CgSCFCe?m4_BZCJc}^$}U1 zE51;m_QLJenVmD6FRH6@Pe1!q>cSWH!x zBpn$Gr03wczcAVi2-A+J;$INer0a)G>Ypr{j}$jO&BCIORxylrbj5AA-$0lKag`bAh==E+3dFyxx zIfsLLp|teq;cT?s?Uap$ysE<@(h<^{4k=jDAp8O8Xb+uNTUSR}* z8!L;T+n6ufDK}B48b9qWky}u=P&cf!-H|OIvckA9tSPwh;coDoKNbP_fN)ZmV5svj z9;z1$>u8)b^@Nn-ldf4h5NViZFg?hpaqsZ^HR+xktMz=VNT)pwG3P7atUif$(C|@{ z=|vxCr`He(X)Y@7E=kdV|{@N4{`LuiF(#ssSlplg3}NS^-@Org$P1y-vm!~{Fj((Z2p zgz}9y0`M362oJz+5Bp}f@MRo7yv7M}MI86@o~tSUf(Vye`wwMEaXH$h!@{cYd7Ob5 zTD^OE*7bzwli;;1U+chpx`TJLy@zZGkeD;%t{awUb<+$t#!^P>(KOhlL_>U?fp4(d zyGS}!Eb33H$n8#>1KQ<1LS>7Wx6$sKCIfpZ8YrIZzm%kKLeuE>4_bKx=K#iDOiX)bPw!CPa1f%y{`11u{81TTl($UGO4fl9K-9UR z;hfKE!P0&!!|h9!n3l7Y5x#^&o#MIvRdO6cVoweFd8PzvN5$Skq>B~1nZZ$Ze;B`k z(Mwxy-5^QMXTpbnq2oCK-O3MI@3%I;Ip@a7tMs$aeULz&krqmD5v5!^i!tKGGyZWP z=d%PMxv~9Jp^Cy?b}&sr_`#hqIwlDH!sR8Ezc~MvO*?=?HzsnW*KbR;Tcx^f-E_1j z1mGUO>7d={&AQD9Nj>F*2}VmV7kvpT`Z?TVo|dxj%~nwP%qd>DPrBBSeqi|XFLc^Z zvMLXwD_$K(T6ZqD93@PIRZIusd9T?O>A{0V(fei6`THbH!~>E0D#RL3(-y#bYtTeO z&HHUv-^@KRMC0h$(ze&(*^T(Qu(9uG>ox>@*m%@Da_Ku#FXL(S1|ir_I@KfcWa@^- z&p|8YJ@@=JwQY3B!%Z|!D& zy+2CPD&hzdy)GKB^K$Cxs`MyP95f-ML;Cx`2z-R{f zZq_gNAN-%nmV1Nny*3B7^B=lp&cEaiYdMiUsot*F=Ch@gBLC^a7>ZYu5X`l>V$X9K zIe)+J->^0OR55BxB?E~8+&ue{Ar#&C%F-jlku}1?6E^p5RUExnt%762bA!J-aZpKJ z(CzYl-`htx*dle#j5ZKGIrtHjn-U5#0Jrl+^Cny^JMy)>p;N(^`vsv*#Xb%+r~RH{UlVuF~dapUNSR zj(lSOCZ&Qe7Gz35;KuCePlinnWr(H}eN*1B{-V{v&&EtFI@L>s2a<1!f{pi)xdU{G z@ath<#zjMH-4F~4jqh7v!<4Cf?Uy`CPD!D&v=Ki`B>iGOkFuDKwNCf^eNjsfF^91hSiH8i%^b{*>TVi0zlq@3 z0ID#&k1&(VcQWBs7Tcluf$5%DSAFVuTss!}%>94Zn@6 zHuU~Ucy!DSVee#NM!ZQfNiU-Hun~HahI|y8lqg@LOAk2$A2g{@Y(biU~QT|R}UsU(H)u&>e)3|j3=F1}d`3Cj4vAW2i=brU@ zu$F2E?m`cm!%a}zk+sQ&70F%^QA5algUO)|q~!#1K^gl}DwFHGo8RDpYuyv{FkCOz zf_j2|%8Klfws!W!cDZ^MB{r!un$1p!J0;2*dA+yHp0tnG9XknUPQ<^PRMaJMcs9b} zmoo-O0}Uq$8DMN0OW5onz9)l^I+Afp+hPmTv*!Fk$fR*6K1E4P=u1}nFjeu&qQ`B+ zfE{qFX;(^p(#i8+h29_(!Uj}#=eCPjxBaQNM|%jhXGmY6cgwpDKdO=o73+1E_8(xO zWY26ysI2)NeV2*YOeaD(DmXc=&bE`|ruqHc_EENtOiHZXcU_@tdtnJ5pjicy-yP-$ zf9Hv@V3nsDnVb^RHB{`~-Fag}k~U&R-_fbcE|Wr8P+BHerDnJiD^cAQ!Xh-)R|cOq z>mnA#5KGwf?(GzlETJI5I#l;LTBJKy!4+MN=RyyLSBeqg5Xg(}R7<4MHGtUJ-KKQp zJxl~Y%J9-!l7Z%ZkA|RU9Y6s3 zOjvaHoyEHQ&MGk3^BIPl-Hek%yh3xcfo)s^OQzd5hedcRJkSc<2KJp^=NWy~U#GW0 zK${X+@GbWJX`LUDEm7XLHp^r-zOUnTbA{IxDh&?-0kMLc5o!`!HBW}%7IEV5ut&i>A@l1hs+K5CkzKT@QRTzKUc%u^c_Tpo11!31s zx7aw;DavRa;nEFiUxOGlRcd6SXW2e`xC)-GN&2dpw%0WgA4lfH!~t_+m&zieJpo~Z z{P`BE60s7ooitvm-%ngrzc7Tz;69EkDcWnfgELdd-A9dN9?m3Wnc|qi_pf5N1zTjk zK8J8Mx^8=%cKk*vh&hz))%E{Hc9cjLi zxbt%4VanAU8CIPVjD@r^yr91!#ynj7z5EM@&hzT;ehFpVA(mf%MlKf;9SM=*+Sls@ z5l)#^J)b0l)5Buld~mv!ZWa5*bkov2+ATgF6EjPC)Od4y)v}oPB6u3#mT|Sw&%BF# z`!3w&WZa_H9w3&+x~M4+^!!^CDSq}!%7}gUh4a6n%|FAALOejCqg7b+Fv>7A&3jv* zYCMihNnUUI2CKa#++#go?GDSomv=XTG~ zbAr#u*J255bdfn22)ZBJBRKWkDDM`{G2YVE^QI?fkKo{2&@Pfgf1ix^WesEw1W`+K z9%qY4~XjwyI~L=u})0Z?&R z3@JlC-w6-le0d8&q9$Kz_bQ!!<&(I@WuIh2@7*4P1Ts!_I)?(SXLS|*jEv}m5d-8r znnJDTwhJlz6CR=xkZo}ch*V|epfh)$t4jPP#m_t2v?u27*Q%ODRb3RfP&{~#ko z#WiI=HpKhp%wA!KbV@2)(rbOgtoO5VUk~Tjlc%*)>87_l&WGnb7QzO%N2I9c@&-k| z!_zu2ib+Qq2J)U)_{fjhgSD_=p*V-!Nr?n}U2`sK1JM-K7cWpY@jdA0Rz6y@5$saH zR^)XHQDPCdd#?uuu`ws+LKTiL_XIxGKG`~1P8Hidsq_ry!twvHoEH&>>LC<*ci8P+ zieFA&o+8A5Q~@T7KOy3)q+&O`COnazfme*^41ajq2{>){MnFWY5T`U9Ms z`=72aPa^ud#5Ct2LFG*_tYs5x+MjU!oz1H!n+`KAwHv%nowqh!Fw44Z-1TtGjlN%) zEL6_4%y}#CXYamX^s$<(S+n>Y=udC1fSbZF5XU3$m(FnueUC`ZJKnczB#2TGgeS8O z7`2}hZVHE7dafxDPqnt4sO(PgpBrsSa987w4>B@_1xFAK!`-gjv04Hgu)1VLX^!j?>Ohgp(@T z?&b7r4}VWlx56CZxDjGU_;TNd{ryD{XCJd z2?jE*n$YpQ>DHh5TASR*Kf?U{KaW>cD6BkNY~RKUW-L0_a%o%5Y3rVmUSvrN1O(Fq@}I-&X&{GASghJd`Llo-=KjNha0~^)XcpPZD#fdeia0E(eO>m_yZzoA^4yD0Fx+wsGGUj7-t&eJrMMS<8Q} zsi37ECRMyVFgD{X^m>>yPER2Sr>>({tY?)KZr300qbJ_(zq%zus=)vkbm6imlwqdY@n;4Te39G&d%Ekte>ad{ufB4Ge_2p(b`=3jpg-jlppOu(6w z8|KLfAizVG9X6a|p?y--cRUJ!6 zrTF0jnx8S`OWQS!lDAr`J6-MpopCl`_{WPg!6K3U9o~)KdYfF2IxCPqGHg@4R3k^! zYKB_M{f0d!61!dfq)8C{g$acip9Y;mT|SJpv!&$rDGG}|+Kq55bCJyb7G;1y(4xWP zx<$x%ukn=ebAkxd_1(p@G$yO|;x{|4aob?)`aTOUt00Z@0>sK}pMSCzNZK>3b)fkg@KK%~ zH(oh+=!{RE!w{7o(!OtE7m3rVt3F36l{~4e3>jQFcE4Ev>|D@4bAR82>VEv{rZbE- zHLuN=8;}$|=C7LJ4!iAmbPvFg|*=xI56zf7uaOp6Zz}5kxv>0e@hpB)zmW%7iH4V?Dx&O zwtYKybn$++KarOjmQ}~Pl33ziLaKRHK$&=aL+iD7;JNu_JT6_ONeylGS!NJdQMdSu zw_Z2!CY{z1Bm^j-z;jmxpR+S6L9|13JEIZX{bd`fwo^HAyd}`6iItzMb3FXqeCR+^ zMa@B5;yD)jgo21GQHSXBD|}*(pOe+?hJE2Nlhoe z*f7kcW+afxTy~CCwB(@(7M=4^z<(R<;}9&Wn7tQ);Q-&C&t>_{i+XZRT5~kFocg=# z(3$6E4w@$4hm%lJ!EPfU+@9qJG=#kB$M=j6kec^_67Mr1Q>5rk8tP(Hp}}03MEb1p zB5T-`Wc%9rM7}sn)LC=8j>zN;-*&jj0bo*va)%B~a}>0Q=9=`J%TSjEHqpV9jH5SV zu+6DB6r`xzLI8EPQ?Vz_eyB80ot+oP_^25UYrxpe%ni>f8h;M1lifoS>uPoP!#`BN{{0iR@ll)z4@39SEZFa>sFI^^Dm zBHlxwJ`B5+jNMo=0?>4k`Uz=kT(VSq{}5b=AnsA;KJ9@Zt5oI<`7!G$;O8(HH!z6R zBE;|su}pg4f;s38o5Bw_-1qM%iVh27in3Aq(p9*So@q7J=X<-$(qC{dW$87)Z= zD=o(GVz&Iv+Kf_c4s+%DjWF`Fy)9159Z;xr!#g=-u{l6_vcJjXZDl^Jmlwu~~vFi`pMa)CGJH z!GfuCzq)(WIfy@>9lG{V5A`k78P$f+oc->%5ZJvhj7TWhxpx%;}ekbgU{q>c;@{%ipsYb+Tq`Sdw z$Oae_ea)<1ezdI#RHSryL6}Ce9b~Z(*aU*AfDlm7q~iz}d4=nQ2B_+*#Y57Kx8H+> zdp(ptBN6BpYcjRO-^42A4Z}pwl$FVy)9JJ?@|DG`MrG!GkbRl+{6Tx)?O&`E8VB0k z&>ioGc%CZ4C|BXv_J!Ey^Y^~JjFmqYTeu8fP8&C=cY+_E6d9?G*WBzOk zLYH6-!6qXFn-}J4tCPw4u+hNBCzwTJt?K7E!b{c8?{%f<<*M`&r*D+Dsi+> ze%_Vodrqaprpwp>QOb)q1snU@Y>;j0yV_&&2>%F{LJ4sx?v1!*+@DR!$zl>mbVN@b z2pH|oQi`nOCe@y||V^*)vNA9>Y36Rby=&*VDnuX$a3Izm9UY`%hYs^qDzx6c=Mf))86!C^xt36L4Zgv= z7(6&FCr^uf_*N&&*KAzAochM*YKtYS$T+>(ingYV4vdT2v(Y4nd2`BNv|NEAOZDAh zxIC<4euIf@)YcA8;D92{{P>sctv|Ng!o}coOOWbwxh4A8Cv~QnXoEV5t(@yCSBYz1 zXCGyAJqkLRRb=HGYzGa z4}%obFtEc@uW4VnFPmhg=Us&{<6|^jGK_(z{G}{_f6T<7D_pk#WSfrI>KOM|uEudBJE_x1J0APkvSLZsgIAjTy!5h>DJ%x}2% zQQDdZ;+zT)IeeV`V}~(B8zfePKN#{DJ?=B$BqD1<0xAt%^ZVS{;@T2y)lbt$Dkmm- zW-Haom(&Tsdhlmkq=p^-q{bJ@lsHF8xCi>SYnYJESrb1Q8XBP?0#RIT8fvGOwI(gd zyPqxe%DaUquP~f66!S7;Wu>S`P^FQkxU&dTu3&SS%-!Z zBV3Pk)NR@&o81rSVkoCwBO?&(b$vt*6`fz;qCi>)Z=M~LDH7IcZg+y0vVFYXElgFh zMc8A*zFkPkv0sWFwXqy5gsH9u)HIOMC$_)_s(5dHt%_3`iyb`T9RZl3Oq&Bn&vm|w zsg5L%u28uOe-W@BQm&?x!goaW{Bf|o?CjH@DQ{iT$5GU6iO+9m)j~F@SZVJkxj``3 z(7I;+4d+~vvEwbtPX-Keup23NMT#$~KwVM4ujjm@xDQ>H-%N$U?&3!NC})DI^@8_d z^zriETu#~Vp;TVIK|iTKi@txDcl^S#@5c)zb@U&s*Hieb#co48IRt9L%d8Q_3_LlhDoV$#Bnoapu9)rpH5*7XA%+VGkO2Orr(z?{}q;^2mpj}``4K$dgTDg>x2T87ib~-k4I8?4SK(K zqM~qbIEXs3C-ce(;iTg`bayKBDTk~{I$e~k#er4);eZyZ06vK9<1D@ z1NwU%W?Lf|Xw}rBb<^u22m!FThSV}U(<+ZK!~QJ;7a6xP=ZD9J2Bt)gq2mfx(kII7a&t*$0X<7eQ_ac;-wKM6T ztJyg8m1lM9>rS52)Ku3*-lMYxAyQ*g%9nP5~%3lsKbEf*VTYojHFp3J{d>QCV0UVVQRa`86G0##yVY%;(?#<6ESR)OuMbMG;XX7Z`1a%fLHZ>z9sN7w-9 z6VA7jd$*|ZW1sHY!5lG+1I^I+-W$6nEZBYGfSXO-#i(5@EETWWv4?PcoI`0A<6gdYhDuexOp}uc&h9P ziBt+3MAFR(;5{Ff9V4`wgX650s%KqcF%KODp}7AVBo(C05oMMxHOw#AU^?yLAFQ2a zLj1VHa@hAi`N={vosdq)y*OAWdh~t|UfU%b0SfDi`UX{ppDNV?(Zcbz5FVYKsiMH@y)dHa0m&Hagd)_{R? zdoEho3QjtO&(BIE%^&7o31a(#8bIqx0BdlHksZ`v!L zmS!M7GWQv>*r;`p%DVAZ06bzWzP|hesOWtQ6d^Y<@;Ojprc|R3s~*=E0y0V_zxxFD zp?{>ZAM+?Oew--aPjzyTt%x!&fz>>@WJi;^D*Fb`XPK@FeYq&FS&@IVE6eCmb50;i>S^qRM^F>x^tL z{7W26^YVl+!P13^6~bMr$KrEiHB`0o&5LMvtgY5&eBb`a>d|gv!sxFNBk*8vjPvdk zFp3{%cl+eW7%-h!I{8%_66Cr$L~+7ecanbanr|H!$>Erz=ntBQ^HfZe_J>87z(k9l z#r95jXxuo>FZ=+COZt^lERRLYp3^G`B)%1nEiwWZAsF8pDZb{GCD@VWDgEAf}6 zMWwnw^lg4P^iwgFKF>pS!fzsB*HZt==`HX)=dBnGY)n$U*4wAgpRy~kX@JiFlV2*5 zIy!u@1h2EgwEwW;*j43VgQbZI54&c0JXAjXHwD__K4NCWLOxX4F34HAPgVTOkY{D9 z_T>uOn=Zf%QsHXvyAT_le?Zt6k(yX%1RwU6aJNt0r(Hv$Oo4W|YbJ1=p*MVK*-pKD zcIMyvvZf4=an5&U6#ulT`!hxByJ7S5XYS(E1jcABbvBa#;CMz%l)oU8d1n-?GiUxf zN@O#x=8-evIGUR4Cr6P|*fk4^1%5VtO;br@jjd1EHrt3vrL2nn3pr$6iXUlg2)dxfUI<2l$4$ag%qMJU3}jYEjRA(Iba=!Ie)2 z0uG?%s}a+i9x|hB=1%fm(AJ9^(A|O~L>G!{@M#qQy$wsnTH%V%p3e&aAvO&mRA)2O zD9av|bqVZplDC%$S|!G6Hb!;(`7eNVb4$g%X&X;4_o)=->3J*qB_Nf@Y5Dqpu=kc> zQN3-yuplW&3W9WlNQ-m{(v1j6OC#MiAR*mIr*sL@&Cm@a(lHE;++kLP&r z{XWNjpZ#HfxxdXZpfjv>t@FCh^H-0ZAZ@t6oJ<0w6u=Fjmj(4EM2kTlVxTL%8}onTPU09?QZt2an#xjmrG zzq(FDYElJl3tvffON;f@lyD0JB|$t+W3qgVFe|0pIl?Wve%$(nL}rU6iDKGek4Cfu zM-q)5@c1u;&gi36o;}*Aj8mgS_q3JgKd>a2MWNBIj`{)2n=k5}+!T{6@DN2BDfGkv zcyXwXevFQfyZ{OnS|{z?35KS;5fr^O zZ;0a}>%li}HO`EcHXfoAVcU8Y2v~Q>Tb8>0ZsM z)GP{HW8hEgU!#W5VPpY3(O4O2v5JT(z=@&$h0(W(D^Fpl)%Ar--Ill z(h9gcJk&w4mI@M!fe*NzOO+f20lkTb`)aDpA%T7RTACwhq)T3bDpRzw!hbdWHx>(a2(4g z5j#pe+F4`@avOBu?R?n7kKrqlo9?r$W8NLCW%m8}r-`t@6%ljagn8Y9_U3GrFVC*` zlYh-Gw1w5%L<}S-gmLse&!U>OQ-n8~h_E(NOsWf-Q@Bo4q>Tbcl&El%m{h#<7{z!; zQ!z}(19ZFyq->ng!N_FSO;!ERd;#@h(@|mMVDgWo)RVop2$~NSaKNqe`P-30dJ3K+ zFy?Q?!e4wG33kglE7dM@&R#^e)e|aWqc)E&>vWg|@zrF5Sq$X6P0C`nLxcfx^@}tZ5>Q?HHdYG3vmZMD0-Yd-kA8^~PbYwu_M4gK-R7#z2qy>e zazR*^tskYXaIfOWiy|G?9?uN^puycXLu5n17wT!e5ZRF1_ooZoe?R`Q;-wh$&x;cb z-QfbK!xhcMdU%_xg+F?}+b$+D(K3xUg384P58r_1c@3?Vx1?ILq8X-7h zeEbugqTcp;X%Gy1_>k5dR-(Yc1TD(;rR2(-%RyVrIMr`nGRd8|a^H{O5HRbzlzs$2 z%?>|V@a1H=c|V?ieee2g_f8@C8}^*}yFZ*}p?X^1!=FqVeRVFU>81?(^5VrUmDx?e z+Qm)GsYFPd_nphoQsZ_erdeg{7k*CwAq)#T#`wU*5a2RYW!(J{)6BD9e?L>$_jDOLM{!gN7?AYramaFS-93VGBEislG+V!xCTw>2 zgGV-t!LGZogFQmtuXW?(xcwPI_HlI#=c~&!beU@+0!Q1$Ld%qgkK9u4gGMXqL#Dx} z;qWyNb36tDnAu5NucP7vEW%1`7p2p$EE?I4t712MSWJ|zqzOP4@i*nxwwzW8eyi5@ zIU~#C6n?AHwvPi&GY1I4?Q<%AylOUzcDSL>QKCk>_w^|*OLkiTyk5Xi80MBD@Ufys ziIj0J{dH2};kX>)^b0A?f_h!NB8A)34zIH3wU{uy<{Ru`K8&pMo3bEf<9<&3S@VkB zkCkBK+=rJp7i%h+t>Xt0BGarsmm4$6&2ALUo(ztwdx#VQ5}~6K1IwxAJdHltec{E4 z-~z3Mhmhd8+tub|I^sFIbmqK;&}{-Jr_nNJ5jo8FI@99SQ0%1KM4Jp1>r zXm4H7WE%ZpoF_72>Pml+=8XpLlGgMxgR+FY=nV|yHlM22iAFKKdIGOMrgUk*5~}1U7}^u z?Uv9?TId}O>1|7H(Caa-wsx@t(9f^8B`7q?shzuilsA^lMNmj7%I<-NT$wBHc8Ifb z@j?&b;bUGQ8w&7>-@fBPQLh2CN@?f*QUgGcn;-0!G6R5d5F#%y&3_{YHHyZs$R4ar0*9 z{3%)#uLh1$5|h)GJDWs{`>!y8hUhmr)4Me4zN)=lYedsr|2sl`fk;)3hKKE9n{!=l zl-u4xw?qkcV~d~Nh>eE_Md9b5Q0`OYqT3W8AwioA3|#RN2yVzXo1@9Z z2Bl7t{{d;#Uq5)pZ@H2a7WfM1nSkYn@4`vQ?Op#8C}i)>`)<+C5_Sv5QBzHhAMR9? z`!{e$c9|1tA=F{k!9I|g#57&vvt{465N8n=%gz9X5KdM9I|%qNw{6gQ?$wt-u6&`{ zTy|_XnP(Ywh=`fPjwQabB*gxLJH|tk;D)C{3!GHji!YWy2#|#zNx|Dha40F0SiPC8wj;y(R;FbCVEoXgb@ZH71vxoBemxp;OUDf_y^D-Hyub+_i zT;t#f6^F~#;zYRT+b-VCZH1uHg7;_t@&ZUT=no@$3PAu=rE|}q;LfXf0 znCxpV?|u(3{GMY;-p%$xyuBD}LAreT3Cr?qVQXWu>Wm6wkF$~uohTnuEtO5)$1nJB zJa_FHw>AymR;IRj?0P)9w6AHI?!qwly$179!6I_J$i}F-yQ|$w$@(f@lq}x>C~-6c z?MZ^6c~K`HWYKUF(aub}X1Ng|BUKM@p0*kR%Ba{2T_3IeK?l_sXJDM;OOLhVV8Ch0 z_uEmW2@bJuzZ{#3c8S~Jwv$e6Yaiog>=kI*g?iY}!ijWGv**mB+=N5t_Pn6siDljK zYnhhV364s)7j$ni_7JzV;3j|*gI;^B+uGhgWa2OY^1sRznuR@cznRKcs>{KlwYt`$ z?s0>WF%K6aM1Qz4p0av@SQR}-E7@v~>56%-&CV*JV&Rybi_(a5KKy-cj(0jBob#gu z{7I3sQLSD9Q!>bbt2j(lP;~39%vgPlH1Lnp#al|5fq9+gQKb zTU{KMJ5Rqmkm}8yO!yP_FVF40M*d4R`TKx!tAX;xG5MvnQ;72zQDw_J0Ow)2Jjs3` zcK17iInZ|QaOmUMd6RSDpjCmq;I07{`1f(y+on3VfkG_<1GXlojYnZMT9f5D+(yd| zOr?_7(@t*ya%^QF`UXI{d&2A7P_v)4q+ei{nKtH?kIMUDbp9i1Ra(Ei|=vicA&9{ z7Fvs(C@_mCyoY{D2P51fo=qlgWgD^rIf?~K(H})WT!>rvAp)vLlK}JsUr#HjtfKk# zGrm&5bJ`{T(-DA5(A^VY_1w055A}incoBl z08{DQiEkj|lJ&s^rcKc*f}ZPE^n3KjV2cROEB8kmH{;2?rno)Tl3i0`GpAtodo6~4 z_u#WjJL6-r2A3r>W<(DYRe}P0`w!3~uRlnQKqE;kbue26XbtT4$UWCXC7kp>f6Q?8 zDH`=|vr0hwS>P;Wk*=fN=uonEYa6381s)1j1N;HXl8=_EB|8I(WY4S{X4SmrZu<~B zb8mKL%7~H}-}n4ULd>LpyfYK`u>uhPl(>`Za8ILTJ|_S=CqyX||b3NisQ0zK8fuep($XG<4L zt1S^me(>xR&c4g&T;Vk)#c8WTm2_qx9kbBDp#4Llu&_~zL0>jw)b8--rx{G~Z0Ufx zHe)K-D6Hl&7SWI)U7j?~qp z?AboYO~O~RC|kb$eDffP5UCEKQWu3HC&vs?gLwXlV#hCfiqOg}F1V6K&}C4OUA>l{)RR zC2p+yT&}l_>Y5&FOsoUGo#P7}?Z1#aPtrxa-I&_ijKu8s584%`&g>fa`s>KyyjIY{ zgyJyyQ!cObU*$^?OhbSX==z$9XrfZOsKbFReIp|4K)vYP)_9|{p-v}adhFy~vkQyW zL}>w_Tu?l;>uu2ro5{FA6JAs)UDO-YiK)edASgWdZcbFJD(3k%^+A_r$piaJWb#O7 zP_-pL)2ma9OlOhHb)Ra}@x9n{wS1@I!4DbrQxggOgQy-wloCjgt~0)OSS&|Djxhrp z$%fAewhTI3Rsq%6qcDSp1BN0{sCT>ecgtI_>|_`-I$NL`Pi2( zz1OKOL9n(D10*n~_9n*hbh4S$H#b6;CEH^N^V4D)r~Nvu&o+Flb-S;|5p2^?&y<&g zzZr*-`}?kQ2KU_sdLP698JGsjB6YEL-XbC!sj*x8M^$tM0MS8cd%_H9|2E0J*7e{a zAaRcly@Hx+s=S7F)-qIr+XJwvt{j@5h?J9`Bk;%^DFOHM&+9@0mF)<%na-AnNM|J# z`t!SHC;jjnEAa5E_WD=((JQxEP*)2c7MN;xfR)p6VO3uuxUrgXE+;8Z0=kj}SVXF;s8w8ucRENhsFxLgkH1IBoI!w6v}n ztz`&hhI%b-?S*@<)$cUOuF!rqE3$UB@q$YNg4ka+*%v)|%`pQ~%M_v(V=McifDI!o z^9uC!HEQ?O1$*;hYYLn@!O#5mHs`9N^kxAPx|Zu#F3~pc^c%B3A}!-h1F&QMK$8Kz z$dtSb2@WN2-l5F}WAD?0jZZeese_H3nFN-w&UU8X*6S68r#+E46Y-_RddlY7j{fJA zMR2>y2UP-Y%OcBg|goxIr|Hr&#M}7O}6}P z$CviaVN6WQ_za(T%bc>Tb*IYJln^1z#u>~ix;RYqUcOTw27%Fd0wtEb4}*K%0ZBa0 z&Dzrpzbxw_ia*BX?@D}ed8T7+bYHG7BUR=^+0S$Ih7+mX{B~E^o{-<>!a0Se)LRPM zhJT76ad)#k`MMwS>9#scggeQ^?28SE<=w4sJvvwP=T~Y|J7<|!Zkd9-`A!A9Q~a~` zrO@m4*6-$-Cv2}%7hS~`VOoaX8nTW@N@bq9ngYf3pxk)~!02?T=PNeUpIkeBIBNO_PLa>Fh6)8?qm2dL8G|-? zIqb?m6qWzsh5e1PgyE^y@DJVKVn;UZ#!BGIGw_lSvF^R4Kmwp>lGBvh@yJZ2v=zF( zAkx5e+s&teIsm7HTENMa<^{Fb@L&-n$P-5!9xj zNQ4f=6Magpo&_I?!X+@00*s8a19hSiY4pQ9q1O{%ptr8z2`*}KCB?L{nS8G(wCF0< zG5l3(l5nrj_rr^>G8-KtbUJT3VMnqzbJFc`?Qpx>sxi8FF0JZ-X3+Kd@PJy(&`&eS z8#d%fd1;o;Bh;;IvZRBD42jpWK;0%dXpyRg{$7f!3dV`aSi zlId;nD>j6jE6ls4jS?<2yEOBH>3vAuV|X6s+Y!gyo4#uhpC`jGA;deqK9k%;F`@GM zX>g9pa~d-2uOI%{f^Z4LPk+tvSx+-45GVKdVJ8Fp6Cj-4pgCWCqnox)yU#u=RXgs; zfKXS}!i=ywRIsc2=31IJCxpguSZF~Ao)n8+PNazZGp|K#O$mWum`6a#ks+c%(VG+& ztNVtn4?}RhXB)J)WuH#2EXqVb+r`lNQLoGIS4bJu(A1cWj!Vig)RHMAxYO*-jiY$# zFW3b8?y*uHYtdV2#4-h(a>>Z968hwD$-{IVk42Ba zjY<66S&4HH3Ai05ME`FNZQ4T3~%`6t)GrrPGc(K*YqP zmR$+Ka}+1|8u4sn!@}-3<7B6))Xn5Y9RAG0_1v&!(O0%-N~b18ki88N?{is02HFq| zLG=!V=VYkA70cfFb7ueuSWi?04VJwK>p=y|3m0+iH63cC)dwG}PLXIctew5)ROP*^ zKup&ka1twZrUc>8Eeg-CDqV_h@BhUUJjMKc(VEWcaN+*za2)vvRQqXH)MP$E{k4*B z=l`Z;2;D(be6u$4g64v-?@5 zbS#;{`wc5aY?BEK3&>2302znW=5H?9$-VR7c{1arR;JWn#o&|z*V#j^v79!!$kt^M zdV?5A^SigVT|btacX?VF7_48O0Ib7&Q2#-5N=k1vfGzqznIk@+?q*R@`9Y~oYbI)S z{4y1Q=9jSTBT|S&0r>x&4EI0;AH*XY@kepk6<%v&{A09vDu_Fh=GVgglM4cZ8|a@Y z9vN8SCy&kayfW{-w!fMT%gQ2kpu8Vepbo{eBcY9RI-L?|&Kpb+kN8Q;GuulZ7?D-A zGN^W}CO4*@JNE82*9wBP5n<7Gn2wM1r1^e3U`q9$<%^@`rONU06!x;rn z%|g1%Vd+f19LVbD%kCEJ)`?Dx=^$XfmekNk&Fh zu1XLbPVuDZ(=ea*twEx#8?#PwYe1mah?M!+a#;EbQ|6Aj7-ru#&mMgIIED(pb6jHz z4r^4s>k;MCY9FVMx+DXN6>GQD&UYYA?%S(H8DD0^;@rekdD2{KHG=3V9047BsguPi z8n}ESw;?g$Gpu-v7hZ2S_1e4plzZsa_8ts4Kbym3_vuJNy7Js3Hly;qmg}<}N8LB7DvsK@Ij$Adres2A4teBN~zPBg4gks&a;847Nh+Pj^|_MARqG-c{(0ZR&P z=>HBM-uqQNeB=Y$kEB-hPkvGBxcBMgxz>Txb_oioQRX+=f;UaOA%8L*oA?8>cEdwy zq{=5%$n!2(#KB&?QFRc2MX-*t;XjB{tF^MfQdOlARI63hCZ8zp`_@UDQh&}=8O{s7Fpm74j zSAA!hh=qbk0;VNLi{NC-FIKmUq_d-#fbE6z)zmb&@%0QMBkGQQmU4pneYFVshw8$Q ztZ%1T=%yyB#=RV(k>#i1oSJi#u@V`-d8t;p@MAt6ngiA68Rye4EMBd=d^&++Nx zLWSxL%>{AaMBzZV^Y@rAQEtVn;AP^7xouiDruT-gsTPPe`9hg8Dj7SRyv2KNB_d6} z8G8ro|_OF%=dQVDa-qOSt%O1@`V1qvP0`5$XCC7)y@E~Wp3U2i>UI^o1@{%7F6$S zCwX6yjtp6Ys-fS8vp96g@WdlEIo@lt@>HdXRGDgsw_xT1ATl}!tm%Ca`{n`ycZ2Hr zhb7xV{0G$?;%m5Ov${a<3X{fiqzV!uS3@}*n`?GW-&^n#Ki(K+Ma2RC-9KM9T+DKD!j#vn3X_^u`N|XoAL=@sXcmjb`p{nZU*Hfunw^qOm;fw{%mM zArE70bsKgCUk}DJe0aA0W_VW?hDKKb2g6v3*XcFxgx@c94*J3ZmoYi)g%T~uCV9u% z2NSk>g6wKc+u?ZhIr_(2?I3mS#LnRdoL^rveAlR+q4$>z-b2QpQW3j(Ay#_V?x2^K#H4fdZ{!r}2jG=F$&rk}<%;){MScSwAR`BnuvR8Yej0;@zSeb0C3Yrpo zVNZTj(v4%j`@L!ZbEU0Lzm4a|yJ+(#_CJeGIId_9N4krJ!PZ*jB}iw5`wI=bVVFSP z)eFEC@O5FVYg3sI^AcN_uM5DO~Pe-#o zy21hkUvnq?43ZG+qFw#Qq4bt;*(mpmM?kh5asowvm+3>XlDp5EejePm?k7=@Z&@*` zrEt#iYaxKIy1&tUW;f$O!%lTQ8=6vl*(xJb>v!i1-D=j=I>DDL0>G^_ z(A>x^98L(kTNc-8^ZF(#30}NtrRwDaqUio=j-;Lh|Lbq~_qRQS(SFit zzI$sxwT5|^AIoDA?crwp{;wk8&yUej7Vh+AL&y}8B|?Myq8+y*=_9rcYI2N8eLMM)^-2oq_0Pcef86_c2u>$6F=)66e%1JOEnV z@!==qD{O^ib_U2;#_F&)Z8jqBqHwt+?k_q&IT0Y26nf51rxNhjU-j?c)PMgDwI&KM ziln}$Gyoo!A;)uDhCAKl_j5_hPDKG=Ue%7H;2*`Is3?W3qr41cn`(PQd}Z}&i5}VHj<38TkflO)-eUU_m)95kq}U>6>}QVeer%&9tIty2 z{g40tlmRc~CzED3yhfP+e7*nvy8PQuf2N3URkWF{^)=+14z4;4GCY+l6VjDk>H56- z{Am8EVZ7_E!Sr>l&D`5DW@j(GYaT#+A-;*{;WdPvDr!={K9&g#oG)Hm{cLR4%k^Eu z^jTW_+FSegI-!rf1n%Xq&!#Z#Un~8uyZjG3;(zdtI58f;w!+FeiT&rJ{$AMs2QN}p z0RH)i1<>mM55Cm@_dhX3LVC1Q{Xh^`?td{q`Jev<|GBvLi|RiY_kL0RXXOHq-+#)& zeKGk@S@^$I7J8JHI}H5>Z$Z~x=feq1D%#|9_d7GS4l>ZgH|#-M_+F&1#fTXI@q3iS z5R89z^1rwA|NaHPI)4)0UKHL7uH^lWHnDEkn&QXEM6K57gC39Vs&X!}pvoq7MMwQ@xx7)z#RD zB<>sqAT{ZWUM$n;D~G-Y4vC59X3=ju07zL5FpD3SP2Z@Ukf(5jY@cwnGT$6f;khY4 zL|^0prcGQgvhe?3TWJ^}zss-KR=@^D;1ohL=&VlJ1kkMsAwUom?(ehY*0W6^eCL7e zJ5vEbIzeZ*g?4{KWKsR0Eq)320!9mcfac7imh15xr(4(rZ?@I5?8W<5#rDf{p-X^q zu|8|!tN;LP8?DZexHR4}xvund#HnB7*mgzO08u3?S0s>O8>Z7Oz z7bv^^Qo=ewWfrPdVSX$h1AowtJ{LX6sHLx?9IXZ}!4@kPz2msuKLGc4XjgB&m)N2PyN*!Gz zvtOtuZ34c+Ny0mHi9+t|hW!_3Gk|dH9B#I7o*B<$f#XW~xuB6dW5jtCv;AB}GZ%I@ z%j!q|jztrjrk57j}Jk`L^gaAmLhDg1~XaZcZasnw||RhcDnRAvlC>9{b131qthn+@Dg_C8>)TF$5#>27)AE?>A5=k6I=1_LQ&BZ zeug|zr(U9DxeC48`7aWQl)=96HpEvOz*XS+yBC%70ZgcgyeF5q_!rCFF$J2t(N~dV zla*|Mz!GPDuV(dDug)t<_;5KVbOS#5_1nvj)6A>qE{jGHD12=Qf5q&ha`w$}>f&zd zF^Q>|4fo|o+u%#L8lN)kJ{J#>2T6} zI=srR+p`%7sOX5b@wqZ@Y%+(Tfo*`<3$rA^A@17*(>6w zv2p<2JcH)6MQ`CE1&1BnhJf#Gg-Sp1t#?ez-~PTVa9DZ$PVpD**!~Ge`y`srXH6=W zpboR4FE~n1j2}zW04;v>_cI3<_9=8<>C_2a8Eu6-=A#EYM4aq%g;!u>ZDbR`+?|>5 zto;){F!;DG&-lQxIhMJAXzCqf6Mpl2iIo2lng$Sei0>;NlLFkT_qXZ+q1r2^y-l(! z8kwep$BMwHZo%IB6cpp{7g@AS;nU77et4}Xz+}nR(>*ais?*a1*kG$114~V+H9LM| zoBYKf>NS*TU*PvU(C+PT9utBJAh1I)0qOVY1f=@o%$*BMwAd~Gjc@2%dh9O0f&($a zG2s(zk@FAJ`-Xafqq^MKA;z58blKcH6po9I{quu99Q|H?S7XeBK@vU_@h@Jhw^+RK zb5%zb4R`B1(ExDytH?1m*O2WAM)SeB{n;i3>*?@CH-D}p6O&*Ixj7G20&0J{Kp+tv z-L#vva`%-TAP&8sL?^KGqx1u;?7R~zS1o6&iL2=R6H~M!d~xuPwKZD5bV@2A^&x#n z&q+nKJMZgEcUQr1T1mC2Y)+j*<@6G|oA21r^pD%JMnKGi(@oTr%eYaasMYGM%M0_N zp)cWEZ5x^UD1^pzt*ySAlef9l%6mUVl>uaF5 z(Nh*r_fxhTAKx(CQ=ShH(G5NVnwcvjJi|RLy7NWZuRuwWWMXp3&I8N0>f3$c{$B)$ zTr0#M5z8?ClDT<(Mz@mbZ-EYyEXsVxU9KV={o?LKE=tKLq3^8VWAgc(C#BBgWq{@* z`%O^Eg-aTniWy*uy(*z)5G>?#IK;_dU zYlegW&c-=JK00b|g7r)5JKt?v3Eo z`qd+?IW@g=xensjA|jsT7QV-WQG>5BXAx?#0fIuXk!CTaHGxxX+{$~~6x8HDiyn0* z24KnqWEKI{{DiJ7fGwzbbBEOoPOEf7_USl=kU2SvuT<3D}`nZo#bp+x%Xhaqqkc zFhyE{2^~lTaPFYVz7f)WIp+8|4W-D)|AMLW$XO{Ehl&mBDSMsT)q8_hholZdi}LSU zm;f!pW<@bz&5Zex+ORDzS>Moe8}F!Rngxd02F6Et-O!n>PP|}7{H3oVUM}I=W;uv9 z+<~hzvJpFcKbjBvH;cL7_ZxjBLqt|d-ppZs$IY54ZFqN-;o0g2Wejiz5ai-Uz{A?Z z?I`gT5j-+`swbcf;1f2AHQ3BC`d-@%>AMD2a%)w(MF>0i1sij_$tGF+Krm&6t?cNB zA?k&Uj%&TWTnQD~SNQ0MCe~waEJTI047|39Kq7cCP9xbu-Sn83N=X*7=5poOl-%;* zk4nTJ4Ydo=sYeBUJFl+DN(I#tC;99Ka?sDNScjC}2nJW?V{0VJx^X)R z{@aT+v)*b?hF>I;gj(P9Qk=LVT`y`4M{L&SYSEpZJUIlvC{~y{$w~}p z=7n%XZ43Nt-z-o_j+YJi%(vvBE9fe)D8uJ6An63iYA8_ML47P8ht2c0XN00uV2~ju z6*ZPy?XL76D>AUu*^HR7l_@JzgkyCU>#AC))}9TJu|2alNbRK|>gRgpFO&C)g{W0M zvxrUm8Lw09TV_9{*CC2-iV%#QF;znKF|R)F5uUFBZ|1fwpH3F!;_}ukph!To&z`+> z?o%+(s}ZK@mylS;-*7vvW62V|-7@r0yMl^!XtlfLhFl@ybnQ!QWKip|$w(tdJIZQ= zj21WieGvn7Gtx6TMy`guOW!3j z^BEUUhxqnUUA+;vEM&0x{5QIXjOMQ~rz8jg)8(UWi;WxHZhP#6kV{)wVQPlofsQ$^ z8Q74Oi(JYD4my+z?Ew6Ja9)2~i4n%Hj?to7ajaCS#9_%EeYV<|YzWdY@VsI3=l>D( z7GtNP@%IM?uW}0<`~f(`x_$>8Jvw@j5HTwvGXG{Hb>t>2p|g$CO1=*pUZorz(5xLq zYj3}l8)fq3Nsl6KTucv}3=dKZ0eOB7JL`eU$b}sk>5}7lRwIpx1XPdMJTpg0}H?l;}28&<&F60chf!m^6 z7Xt(v@Z&O<45Cj*7-_ZT-#{4#+|iDKq#QN|5|FY;4aWkB59ZEdS8*)19;*b#j!jnB zqn%dZIvs|S+8DpUW9vCyihZF%PL_ZrDq7s z0Ej2`&NE9_?LF1k?Goh3!kE*l2H!?n+U_1A?l|J!)>vj- zGE<511mO9mo>w9chxnilQe=kR6H{)y3ofrdJ9c#6AoB$c{x0jLdxqRt-#6T*B?8Hh z*h&VBj4V;J>j7Tnw$4GE^ND#>0Tk-~S-9rHttYL7lIKFJRIi&Q1Ljs;)2-GXo7z|7 zciW@___-(&vN?NMK@kr5tG(;2hoNCV>RlD~>!|g|dWp4eW`rjTc03!dv$^v)rp{Fn zL%~}nUT5DcJ@e~D7(ZLjmnTjz+Ksn{5kD>%29Ze#Fc)JLSz^Hg0N=mdF(QMjWs_xN zEJFVF^D8nno{$HAfYHjm?6G(|Iw?v5G!dDDLz&6d-Vs}eV$=EaPb%t8i?~GeHmL*! zV{ZyTo@^hERqV>sS4|EVogA?tT%Koi_Dl1A2nvl#TQq)mMh_y<4P`=!lM(KBE>g;m zfr(_Tj`94w`jbQ)_lk)e?p|K!T9)*)SrZGgCayRGXjmb(ZuCnu9?AK%My>6=6t*J$ zcl&FJY~Cf2AQvfFa8R2_+(s?1iwg6(k3YKnwFVJ^uqNdkKoO$xMTMi|*STwj2H#56 z&yOS4FV>J3o#l z{SHaEK6FjU6D2b~wl19$!z$6KzKfrMdB|*X_>K+MOViVb zn&khSR#*Wpas;E+xUMOgm=DEawo9~+cW0D!LgdnNEV$IAs5JwcU7Eyb0vZwR*bsJL zh5TX+k7qlmEXvNpcT{~9&);tA>K>IE3l7(B;C6)wtP_~&$VDA1MQase)EACvE$4T`$4CsM2g z-+gM_AA3jfI^Gj=$H?LEpauRpKcbe~?zfahJj;k+_?(Q=rGx?IQZx3Oe&O3ZQI6NEGQcH+5j}^9l$Qe zeQ8e7ncuRk}A4UiN_L;u4;&zA;8oAwF@s2 z>ucXM0KBbq;MUO2ZL&9QUH~cH{~0oqOAT5p;U0(B?K%%cPq*%%cx@bVqIwr8_$`xD z=6tUi-XAUWEJ=f*Sm8}3E00GEIq$p8G2LR^&!Y89rIqL5PRSp~cYr?S`8|p9$R!A| zMM&63?g|Nex|P#zRai+$>BHHCDmhK?DfU?cGOc3zanOCT02kJmaIQB0z~EtkA!~)} zdH5xnbmhEa?-wADEO2JskI}uhS3JYaNPtt36N5I+p9AVp#f}46h_!_Ny1Ek<<^@yibBWA5g8WwusIDa& zWUTJqZtwDYsYN0$I9r~*2AnELU8LS~jCXK=Z=cugzH}9|B(^}ZC}eE8Q477DJ?G5g4-vx3 zijL+ALy1OFy^~Y>>=LZp<~6Z~qf%c~cK%~o#~eAr{zquHd8i~m_&zQPju2{b2j@1* zlr5_3Qk@SunVIdG(7g`-?t6o_4T3)u92@5B1jVR$dIe-uqHrI4LW(Y{Y?G7GV)l#b z;UQ^pD&SW1;_v3f%pK?qkQXEo$DpuXIO~ik|sW896HW!cb5v zVj5@}Lt;qiPM(@Zy1QD!-gD~u)y9S+ENa(MZGl;rqQP$lB*{+!f|3E?aR6d?8imt9 zF?x^OHJ(*-yL6&w?fnczrVyg z7~h{xT~ob>&9JtiSrl%Hzu@p?OqSUxA(kcA)AoYtbT#u6_0f z<45Wrb9@W`_?tddc%*9Wax_xZ_uA7AR*~q2@kE96CZB@a8Um5RXDWE1aq2d2DP}QoIQY+D3dET_QidBp84JJu<<|#usxexObZ-xnp z7Yze5a&8y#;O2?PHfL$crrY7Xg3UupL>f6Tp3~^>OxF?<&4Nz)E^}p*Gcx^n+tavlwrCzbu3rP6_rM0%Q zZcvx@@cN>?WRpjg*Xpo291;pe%gi-z)#Q_2Ja^}{XJ*Q9Xw_1uut0Hrs_zi3r*$hY zuvN}oeKe{R;1NWP;(GF>q5f>>BUzU|+p{6FWGTK^@UlPlz8|f(-);&q zERC=hu@oG!6s?P8beLd9Js&ZmVEI&alNTM%^In!;+K?3|JUHbTm)0@9b2A@#m}q-I?`Ib1wpbVyl&R8x_8 z7))6X0qVV5UsR^{)-B6Fyffky@9+c_o2$z3pN#OFVy}8J3{jC-`rKY7J1ti}bOHw7 zi6753x`Vn5S{BR#au8ByzB1y!lh_teYI-DJJcitl=-*AIzA&z>0WBcp@mdw`xrm>q zyqmPgY1Lqvz9_Ezd}}K|+4BUlbKoio_IThyjGcf+G57te>@1=?6th{(O5|VsJvNtO zENk*8iy{3i95vW~!di!hj7IMHOmxK&4R+Qu-K`f?Wq>4FS4_IiD*ZSsKv10W49fAY zwz%{uad=rpmaKQDzAp)`&uwpVK&k{puqG1TTp~mT-YpbOQQH4R`jvC|E@UWzcwT6W z8J8>N5Y;uO5_~J|jU+*FW;10>RQC8GF|73Ja1&nt>-;sTCgfb#o!hKSAR}H3Oo#Eh zWhWsDLi=&bat8U`Oa^co?(|b>KkLcmzp{;smt7pZbCczr~skN?5>tEXjEo= zqH5b^GbheTm%n=Z(v#^ry*!6~?)n6nm^V{2E7YwibAZxzu30MJ3>etAiw!CxpkG_U zE2za<@W{D!v_Bntv!UD!j|G(h7G>@CtsaaW;LyuHRjN6j+1$v8INPoqCQ?#G04S^6 z)DCHGre)x@(Fb9AHa$*_a8`)HcmSJf*NMLc*}hJYtTeTd+umd#PJJx>JXdRd>X?@Y zb(y2CX482Z>jochNuq#E19KN^4D~7}r~h@8UFNfUQD#BV4wXNms_BILiueX&2MvdE z#e?*tn>QU>q++2>m|lW*|3coC?{m#|C8h|syV=VQ*0~-z4VNbs2}edLKr6abyR3<2 z3`|&!DQh{?saqvzgayr0^gx;dZ8mrQGM)W>qF?h4nroVBZJk5fbT}3$cY+Kk{_+C& z_@}MzV+BH%uJ&6KDhe7c1D#hdScHGAEJ=L&bnJf($5bF>Mdtau1ZB_D!`l+iCp5*_ z$uveWI;0QXLRlg{*%Xmm-LI(viyd;J<;_q_;t88Tv+I{@0DW|TzqI?`PLYe@!ijWSTp^o+z>4MiyiwqSBRy~&Ai}(Y=j5ISso3re+!}0)9T7^;jMLZ7eH>w!DLw``f!Z_N0%SY(Z zd=k6fpPo%+SA`)I@A$ zTd-U3yC1ZQQ2G248A41?3b`+(@@!>nW$1Hrn~Rp13{iQ3LqHT)$kGx0`jc zzKu&)g)xwPldd(&DrC1mlcsFGtb<;Gu+ZQBP|IT&kM&Q!Ypf1r)H%0^7gGtz&nzcs zV99Oqia4~(u)N#iY|s@KLQzSz#u?zHMA1(u#qf!C|8IAiS;T%Dl>bP6=v>fH$}5}y z_liK)gwx48b~D!bGm85iV~b+e!mwDqeZDt1wQ)&iDR=?vD_>#OLDvCPqr{Rp^`FtH zUaWD`v5>~89y@Vh5D+h^0v;spId^r*aNr7skL797)G-{-2SZh|_F_()eG2_2QoUDv z9>%Y8cZmq7#J0_7(;BeU5|<{=!^^wnYRgs(kH5^A9A+z{qH)fVR6U-_Qr?L{gvjS zP9!Sj;{+CdKKsEVMR<5W8pF%l2gdIbI{GHYp>0@T(uF8fL*YLG!XPXVIKaU7;-_v^ z=&hy%cohgR=!Z-`!I<+S+23ktzK{+MM5PhB#Vqe_6x)z2;Ss9IT{S)^Kb;7uQ$kCW z*Kj8yBP4z`t>?y;#eae$LR1UCXn;afI*T51A@c|mGS6HsR(&0hsf|xhk~N8cbhF)0 z+Y&tm4%0a0YL0HFCq-}XWhbk>DL)Rv`0E1B|u7Q0SeVu)=G0-VdhW z;XW@!KQtdWTVfJ^z+pf`j|?j$rdwf}e`{CUNOQKv-?gnCZOg7MC%7B97H+*)TSAw- zoBi%lUNo2rFy%VNOW1Pzdyyg5qMcS6yDw$>b7+^|mFb^&HtT5g57wa8_FEEiX2 zQ1TCg6eF2*gr1ny+B^C_JGJg+CZ9pOT;0Pthf)t*x^zC5q|64p$hK;b>-#@^ZTSXh zkUn_$-W%(((vWnI#T;i%N<_7mmyz0E0R_z0JG*H{G@1NW)+d!?`bGo|d+Z-3?0@Wf zsaHGe+6en4%c&JT(IVcdnc%ha$A6yC)j(ExrzeVq2J!wp#ddM~sy?LCXB)_W`TTcK~uu?Qxj3D}ufQr=oCRh;_XtzsgWY~rj6g5NUd zW5Qlz8X`f)&_lL^>9LbYe|z$?{R}48`15*T#Vl3wtYI1g@#p_CSyT1}DL0mUjj@Pa z0eJQf3lN2={RAgb;2-ta&w47mYi+z_Gg>i`0+j> zE9$rDEpi{LQYq@J_Bl(n5aT!pY}C&Dn30uWM(%n1F#Fm8#j|xNwtpA`DYe{#K!4sg znb}G2rddij@)dCikm%5?{nO=2cgltWvAK|UW3lnT^W*`+qK{NilqDnV4FFxK=d#(} zbkh>7>5MYbv6l3{Tg!iaVHs^*7nsOkoQaR+L#LY;e*}(QdB2WwI`!SmYY;r%=i(>C zQ;0~)(fz^NK?yMdvLy-nqY3s}ZalH`N_XemFw~F=IBv^9PgJszC*MhO|c~0$9XF?s1*PHdQc7;hEg?hnlMzw&f3g;=r{5n`|zbE zKO)Ep#w}gqjLlGCY-GPO^vdc>4{sBt8<-2N-dC!10;ZG^=I4W}Q90CZjY z-^g&#Ocy@kk}-WK|ERwjhxWR2MiL&*y=-puBa=ry5>-l9McslQxHTt~DzPQtwch&d zH2Y2ad^@nnK?+hy+f;nV0sWJPsfI0iNX+M2DMK#w7vCO1@_@TE;%*7>-RBgt&B z-aYcvP()`ramRA%6Oto2= zTlqrmN|jybZo6I+%H*s48~ug8X zUmvqRh46|O+(a*hM4llU^?St+R1s)i2Lajj~Qma0e_u8$8JYI zTbA*Ugpu>ht?VCvtos&#d>;f@(e&8-=`j0LI5KAPJ1UjCd#)%^c;~{JRWB+U*eDdYMj`plj`r$={QYGGsHzboSZI}Uzp~5MkMgQ#L(*4z z!svxy0(XuXlY@3xs1P=WScF+BOs~XQ2H`mf9eKy%D8R~To)-3dehg=bQ_25gHVv~I2V2AUP!1iMuy~@8=u5G|$1_4*HhX`Kl8rX6A&42BT=CO>I8t$P z;+tv>Z+VUk)Dl%M*Y90}yQY)3K)7M2#N3DHE`EwPD*CDH`Z!EVCG`emroTE&`!v7! zlMa|HpsC$$rKZVTy*Y79{yBt}D0p!HUL$OTPr18Qw4jaY(1+BjJJQQD6Tdx8WW(wAx2E$PzfADCkVjkAO3xxF8Dxp-j!@i}JC`S;YJ`@Z$~7Uyj2 z49)2myUVi1i1z5+&5p0pJv?}Z7mnrL)o4FprAs#fwyXBiekBTZVWXAvdQEs$_anRh z4;1@vU_Lb^qWOuRJ|B1~7u`v_jL1a3ite*aJiQsmvs4 zXiP`Tdg7L0op#6VQspVOUPWGDzFl+N(U+cDHsVT$4M+0m7=h2=Uf=DdXuFy;;E zPixf`jKhVTP$1r}FUg;FmoO@pqIMM{3*A>pN>RqAeW*LfFv(KiO+Ly9^0LP9h*R$K zygy!O)2G5+JMYDk=U81YhnSqBd)DxBqE-%ZFFP|CoAE3cXx^dshd!tnkRBkXI(z*Hrp(1N#S`+LGp`I}8TR=6Y|iB}C#q;K_UST@%Pwg42_ePZZrL5> z7>(3%L{B#)>zwXm&AS_9p#E=*KZqMX06)T~(EbPypDZcp2$RobvOB5RoBs}OGE1>NR$ zY8+|*@%Hef#TriY%{>XU#WMG%T83MsxaYY65jsk9A*v2%Ia{GMzoMf-&}`uM821(0 zjRSg_3vb?Mot`OQ50KX2y*%B>Uk#gk-$CwLTZ)-H?K-eMZUGNb3&E<5-A@zT=8lxc zaA8KBNKt$?^Od%apL;rsFY7k~NuD@W)OaOv(BW()g0x4%OTIT9Y%XG{A@w8ON^x{v zSFn(H0~X4179JgM5D9w9lT07S|2J0dzcx?x^AyA zFD`8_?rqs^BNM8tPT-d^>eFl^jau$8;k)!_qM2~-;XXG7AH}qT#YF~o7_OBdEXEzb zeN2E`q;~nMA1BDI`KvU{%!L@8XIF5&*)lYbRc5*5Z%QJa4|>ViJ+=z^yZt?A3Eg5e+^{%!yZC;$Y{9XSGHUiSA10I-f9hVmpm8GaudP#ROu`Nn965X;d^x1+CmN*fhj|~o zX${ymbSCZXzd&3N9nk+){~WUQFo%mN|Cc;0llUT4vrIS?(V*Uiw}zShWB*@&UkEm% zyBFC-pH$6Vu6L9B?s@fQc2q8POmln8w!xFUL_+8cv5!<*I#k=^oHF8T%1q_==vUtL ziLYZ8N%wI>YJ^nMOnf8XR0Cg4&&4fQq(6iZ=3{zCx8GzPdZJyfSWI~{6DN3ia>x{% zzv>rid43Sz!w>lQUY8TBv+tfT{~T&1#OGgl+=_3Z9IYRo5l?fOc{g@+Fg>6z>E>gb z?&)}P_mXk&y9dYReLt!NPmfc|Yv3ulOvaBhtu!CIGN@@B|F%+B&C|C{`oCqO3b%4h zW{Z~}hA(KpLEXrNTWguLASO#@_8Sp?qS~@o2>XN49q6lEav!=|?85?o=wkMe!O@xQ zpZ8($P+AyJvVqBC;zhn5Za%R)Qh=zCJTO%p_jo*q`wmmr&*C6AI}2EGuh_oR#dN~# zn8+}kFo`N1$Y;%WX$J@pH2sfcxzY1yZn^ksgHZJA*+K*!v4{8K5}7@s zrx#0=)vZ_=sAOb@X3`>sq6)j*j%0yud~7*R1J=ajsRKhZ@Uy8T#(g@lWIdwS% zAB@p@FnfIJzTZL{lRFevATC{7)(do+esd$r+{1A2te^}(vD#tbjiHhM)LaxhSXUD5 zf~Ar|$oBrkDd^H0<}j&B4*nBLMOLo&1@VS<{`z{|rh?)ZG5$16_%E}K%UN`Z7eC-B z=?+voczZsMWwxO4H9O;~K|lGb{_HE{Nb);lg4=)*oWI)kPmCLKtq6W$py3LmCpw{h z%uxzD&Md@DqCQVEewC9Asj7X@^&z|$4`MpFmwr$fc5EumI8$&@pLyUP_rr5@0h4<; zjoR^V1+)*&i6!BTp^Lu5B?U`>b5KfypK(uk1L+k!*}K-I|I$V=2oZe0K{1DXj#kD9WX~DjVU$uoKd0v>0J6)Q!e>M7+(GDsF%!-4tL} zukXmkQhuS!Wtf%6P zG&jT`nUS2ovAgx9S%2RNQlvyIK_-}3N?un`Da!FBZVwV1PY)awqYs_Oj3-=S}?es<=lyRPKj3oE!@12#hc;BIo*fm5DPi zqlZ4<{-#JZg71jGf~BVWR#E+_%X{>&YQDDPHZ>|m4ojcEn)cP{0>PE|a359eE}VCK zpGh+C?>7*!Gz<}czCMJ>yMTn4dh%}l48LzsB{6E1Qme+ zg+wo#Wi8c?jL))z|CQDF)PAx_NtlMxWz4sU z>fXipYMl&XPR_ItmVi0w{%RR@jb?C&-Z@Z01%>tdCZ%AV_L3!ntUJ^3v1T-{!XR=Y4!m|fqcoQ z0!R(Z(+Mo`FzGhdD22diGjZY%k2721|9?@JDo5IaJxsbRU67FIqHcl~zXsJIoWO)4 z%zS{j*6szuj8`~05IF5+_@^n38!Ddvl(grs9bmsjE9FuEMDOtTzqie$vw_?U)>r}h z9<Qf&~f*gSAN zMO6!T60p60WeSkQarJw&j(5d&$y;jJdeZA~EaeVChl2#uW~})lS`b0=v%h>e!#S_A zdEy^+7pQfKzI+??2{uutfDNfP`HJkIEyo<^+Ap2M>*ko{)$O6gb;RraWtI-wiaQ=R z#P1~>!YTo$zycRQ4GIUR51v)3e;E6#0CMw}_jG@Vx?`zhG#5C(wsBdSZS>UdjJuby z+eBp|O-Ga6Y>X=qzas7L)Z>1~XwGGtVl^WmxOHc@Rv*mna++PfRftyfyY@jioC(LN zQ1p_&UnpMKD&0*wagmC{4~u(lP(ad#>l@m(etwSO3S-n7-|M`!sNYq*>Z z@d)p*901hg`}Bcj_qAL7G5KD5v<+ltGG6#uPK$<&tLFfm-6m-5uR$6VX8?n?ZEzWb zRXa&UxuXUHic!R6!@Pu@*<4)4g*Pa($IC9o8OTC`S5TtjXdi;`nERj!IcD*XHIfky ze;rD+rqF#$E0p8(Xl;peD9pI0Y9oVVFRMFEgMXAU6XOiZ*Zbn&Qgsj5%1;+=ZTtw= ze1o@ftYM^#7}wFeP!>Rl0CJni%`5r7RyJHma_NJOG}yC&zvl3l^`Qz-k)!+C0G(#| zug}dlk9;|QG4WO@1j0-IF9Ltr4~!OG63ewEcRos+jV43kQPTfv$h={sMNR2^o!qs? zlxppzoHdk(osA}7Wn)iPkLpftKlrU_wSPl;qQ}ttWEr9z)fLLk$pEEqc6eyNkyirrjJ%qpP+G7z8qQb_sYr>7Y1$|8Rd4)E?KGER73IFJbP!mMc`N{I z06CL+zznj1#q0&!M7xj7D4$T`w8bqEQ!OZbBFPO)Cj65@`5#K~gtU}oLlk_+=?oO{XTuX=Skg99M5zrdBmX4tuqt#L-;==HNZs z0Fb^kS25T;*dJ_v?Arzkjll^beQ$ozEvSQYKjVUnh>oa6MHU#TFWGz4Nb`L3B>G$g z=_MbslZNkmHBT4XD0%rlEa4|K2!hmVcxf6b-FDO!k$RT{u8LnGxdkU=%+P#J38z}| zu6}Q$yQU`xv=<+FYf!xLO}zG&BTmlXfj5wYK zepfRf_$-hhJO9W(X;t10f$*O-RVjF;e};s9YI%Rhd2)`l>Lg7E>) zMN1$rn8Wv+hiC%Xvl-PP2upu{=#x4<9&Apgt}FG)AopG7WN3TMNANr4i)#n8 zTjeg(>~ZJ?()5$JtkSV)vsI6~JWed1b#Zhe`c?$k8oxqqE&@dv+xLU6qybYyslQ$7 zzzD~t*Lb8b`#@ncU&U6_J>c(j@pc2-v(`pXK3pP+CMUa0a1tpk zOryZZFm@zOg^<|QeJ(uL&+}BDLjt}LbBK~mpQlTqC8jpoZbq6UQj#dJTe*&c zOqj5DU+(56vl#UKo%ebjr0n5l#(A|t(I^z z7q4JX)0B6Xo$7;S8SArd_+~VO+sO_gn-=hinyrNhVaw-WSXkJe2p!^WcsTbJ$ zXqMS8)@!c+I6jCLKCs}R<{m_@1L*_6Rl&d;rz)~Ni)gpVUb6risG?}J5IkmROK@N<`ce6`Qp!^tayLbJoA@k@QC zTEp?sx2f_G1Lu)Uf|CIPAruK|y4S;Q>K9k;z)XjzaJ;ZMbKa2|{y${Gnj}A#^eVsg z_0eX^Xas)_`W3wDeb&jbQId>qc0U3ZjDK03y(Hy~?ei4&qaaiZ|Ni`IpbS2M>fGb@ z*d?p!J;==UapuB$;7^B2w#%jnQdkJg47Ef|EGXZwX;1yT{VL*$A}tYNU-}zacvI#U zrge|?duI4^qmJ&NHJ+g(s#<|@hfkH1_2M8#E+a50g+4O@ALBw&g||;!2rWI6u!&k9 zZCB_w-wVaL>UAm@B<4`*J^S(yb9-Aav(xX9d{gOCo;rKohZr?+xt%0m)$S1oEd?QMz%|Vy)taI!3TjEc4xQT4Vh* z`--b+<+MA?kYD3c*37M8NZfGWXoCsa?iQk3d3`2FYw((e^DX|79D&5y5KiwRwq`PL!=K3@~ znCmthC1dSvO85_u=v||@Oh79!lT$+91c78dNoi;a=%ZR58T^p7ETCG39@r#d$`$<~3goE(bvEmU&h6k^EA7aEay;HK)eO zmzf;j`1283oL_=q;T@69dHnXQgU9S>Bwa>FgXP!%(KdphwnYT9mm}m zwkb&pKsuHrS4%Sf&cu~=wvyr!I>KQzj!wYeHK;m!7KrZa%Y0FqSMR#xbhaDkD2Q9Z zguroNmZ=z|+6d3&cWuc5D5(rF`yB79kt?uQ5L$Le3LAnB4fb^b0RZ0na9t$|Jm+UThnlS7~@ z7X;ZpTD7Uf*oZjkFg=Ki*JnPf5k)TicRKvxLLBnp)NhN;2x+D>2%+T6%73^}0_Y*O zuc9sc*B)6x#c_P6fr~7&buI#AP zNh@EO^Mub}+JoC`{fLdKfoV@djNsy-aRtk;5Tc zneN<^Z_qrr#Rqnf+rK;x*y)p0iXUM5XaZadB|?#e+D&*hfG$j<2=0%c(iedEPhd_V zGf%*H#_PJIMFH}IG04#~?1Rkmn;S8SwHWkESuHSm;fC9hm=@v9gc3XcypeCH;B!P@ zKOl9a<`?^$6hMuMyzQ#CK2E&Bo%5jT{4-WwnVzb13%K!TK_%$YH2nE=MuftPRtOnI zyGs%=eU^6`o7J||f(fOC&!X~(+M$RjK)0g}1XFc?CN~h`^qeAsp(epOLzDj0`gr&r zO#iqwKJ~59WY+w$yh>0Gs3TcA0DSmGN3JIsDFSVZdZG4XQ&M|(B+U5`UZ9uB^JYv0 zA)G1fVIf<#3FpQEqHFI1g7jL)L6Gwb^gW}$l_;E(86A;?!#73J$DE7oJEWREjhPGL z<`u}n{Q&Qf;7I>H-L_-nbm{(pZ&%_N?BO3;-QoWu^}VnhCB1aOIcRG$b7$(Y2d(px zL^D!tcDU%@0G)7!eV@0_Z(Nz_Bu5ImalgR3P;F8*YJu^sar!9|ysIEm3YT4GZ5q** z1FjR@%&Yutxougi=KbN%Yb{ecZP%;Jp`m%E@B%~#oS);a$!ui>&%F#ighHL)Snro;;GFW2p?~l2qW*5z9-2t-QSv}Xs2}Z(GZ^>WEy@Cj0U81%jh5X zUj&($TVM}COhJSq+}K6UX7*s-aINBayo0a%W(HvL_2tW96V3+5*S;x*Z!KhKiHoHC zU&`wx=YCv%#{}$gfEj2-fTOoPO5R~>x2s?9}YF6 zg;n+N43;4kx(CUMgTkCaRQP{*;;WGvuWOW) zy)MN_Ke*Ih;m{67dUAhZ9fE)BvFqd{@jKhJQX*;;@xjw;h!jR%k|MElDI z%#-ud5o`wRY^qpbpZn|SU8=)Mvb$Sg@LS`05e+tNnlbYG z@&;#}oWKze-s+USXs*4>N);ni920=3f_;a3#zt8e_AW@+!U?ogbBZq%(_NUC*T)SoM zYtJj$WnPg5z9h&XmMe43s< zn#w+8_;zvC{;vy~0^j~IIsPq&)mI4x(pH*&jj((n1c=M`F2-HcvGtIezSGXc+%vT2 z+c}@-^m;A9%eC7FsFv>r&cGwc=|?fupeX;~n&k`oKv^_*QjPVV_hb{WKQ6p59J<0l zw%bX&I}`FS@=+jC*Gpc`Zy7U^#tJ|;8S7lA6a9Bt8_YPm1Mt=P>|OrU0U^euKse4< z&!#UQwG&@G{GN^ee)FbHj!T{Fzh9d}$Y*Dki05z5mDsMbwlpTMvcZhuf6#2ShSnGs znwR5K?lmzm%>KjeDOCr_&(d)wduTf^_Vg3mFAghf8ZVC%QBe{Ff&Tc8_XFeR2ARGz zSW&0R%Wh0WB^h)5A9{B!-@4GyzLDk{yr6(jToElMX-}G`oY_1nth@AM>n^B>qsk!x z3IM-wExLE*nuHeV77U$VskfnDg-yxv`t1bL%-HleHM8A~UR!0#eX`HK6PUwEFHgyI z4$cE9M8Z+^7TkB4>LW3kuN+7aDe3xfhOw!anJV?SPKy#8bMr`tbbxwoO*=d`lTIMm zxPk$i7Gpoy97_w+W6)6N6FrNY5lAR;ZChJ;Nbtg?*Z<8W&i8+ zE~Nd9@)sK^+1Jsp6a;GF{bo;T#*yx8Pii|aPk>B<^_B;g>F<$47hZ69y!PakqhaB` zUE#_qz2jpU9rB!gJN@p*l}{0EjU8==u4&3M|?j5>GLY`VD)#*uG{ z5Hn*_pn&uI+LdK6dfH+mp#!7XOLxb7AO(WOj-siCd^4ceX&J3RO%XByh@5cdp82?q zlO7Ec{WM~EW$|Brdg!(%uNZfjfc-xCX)b%QvbjI=ss z#Ry*Do=A9v$#yppi%P#EmY{ftOpd#+pJ0o8J=MZ#N^q#+ZKT55+H2hn5cbG;1O$$* zjfjn&ODW;pG5tRq=@0MGH7&Dw)l)KnFQD!ENc`Rf%fo2EdGAU5=DJ}xTKM$ISHiNZ zb>1K&lDkeWIB|Rzho)}va1XKNZKeP&-&v)lQmPXc)!Sp;?`g#m!YRnZz2O6x+EFm= za&klL8<7sn%^WEOE1wS9p00fpnG+c>^W%mGaExp>cZqPse@C~i-;H1Gz1h{r@Bc+E zqj+>DT}&b!6~LW?95w`Sd(&VkQYu;*qw?800A#NW;a{<2<9OoC z?Xk?B&Tp_t|E@IdZWa{yyEwHt5B;>YbFj2cHGG~lf3kShpuydDfiFth2Tnk~R2^03 zWP;fw2KyNqQ5TGcIlDl|S07tG67S|Qt+QP^(u>WF&_`QRaxQwV2nDariiUk#R1+T} zgOPug5#C{?{ib4Iih^Wl*nW#k#7aeU97DzxQSU`zcx{z(5gB&Q6h$Nwp@FP>t}5|L zS7-mpZp)kp0-ZPz1vW_;kxPDS1J#*wUrK_aIKan07NXY~M^Ou;xQ_r2FV%ECH2Ssi z+mTy5pma$&(L5*tqNT1MV0`p)MLipNeoz6k^>TqxmBdKe_|_hDEG?bEXWZ>GqM>_K8zxn3fuW$lpfP(vNn)!C|is{n(zb%pGR8yw8P zHQAEMXGe8f>sI?Vqdok_Z@y;ri|upWlN`pH^;%)47e#S!VG!0eMRc$L2;G66_GS_J zq)=XnzlU_K+xFqhm$+WNdixU%r%|rK{leDCNIP<;g6*v*UJ565fluowf5Vp))w zkYP)2LxU?{V;wO0;qE1urhAB(Mv1q^5#JnPmirSgcy)m9BbXa0D}5lnW|v#xksF|| z-CP{@(!EJ|A=RQ~%K=NK%Oo-sL3~He?@F{L{e=7Io{H;ERF?9{d^QN%(&ArYNk2w! z$E%(cfZA(lX&-`Y+rPY0tn8=2r5dF49`y?4C1btGXFq*jtaD;LsY0n&Kd)j4i0@|SgKjZ1BpAyu{T!OaOi#v^&u1cjT*F2qRr>q$b;vTU@J?xFB(T$-VdGip5pfR z1)aS~GzYIY&bgK%`Q0Ndo0nyXEi>3_fG5+&BQNnB5Pj>s$gu9+&zuE(ILi9%ld1Bz zIQP286Sd9o$c4O4aXvZcKe2u>3n=Dx@OQpy6h zGpP_1O=v{R+FHeui$*S<%$>^HV#%LQ<4c6iRD=QTYjCoW4!53@$8?f`oJ)d4*Xw^@ z8U7vlecwrJBKZ{-;pArX0cAED641^WN~5^i5gHFE{$IZOeX|rd#@+o9bdr92M8?!e zO+2MK=f^cZAUl&~anw)Q2(8(x+GBx{c!5`muJ1ShUk~yw{c!yAO6pW@T9+ zCBn{VchYwak$oYSq@d;r&iC6?E}*!)hAndf8z%m2K?~W7Q#_Y#H(x|0f49Qgt*p?C z@XNAGE_H&?Dko#UgZxk!DB&MI$4CP`$j9~=C&x@=MYA-PRKnT_`=`?GKW&Cb6&w54 z`-$4^7}ebMSx!r!*>^Y_QA?g=`bUO9^6MTQvg0&6lDlG@Z^~4Q*Id6rCI830yN@YA9s*WV!^IvgcL5%k7V^{R+OlYX!W`OVz z*F?g`=_mT(1Bbkr&z{nF5@7NjXoRrjIv*eP=kcIk+``Wq;zK4`eC4%dW2T1QMzCT} z*Q8ZqjZ&{@LY(R<<9S+gNkwQD-ZPJrWj1r-45^A4cOpp=7e#O=kSjR23;uS*nSVOu zA4#Y29@l~_c+ZQ~Ei1*YN&>^aXUvRNBv-U=1@5o(-P;e;cDk z03lJqB=Ji7Tl{xr&fZJ$3-KGD9*lRMDHdJqUP6TV{4Pap{{t6k#v7zay8Yp5fjfNO zQ?*Y&<7)}y>neSX@CtE(8+rkgi!{Eu(_*oD8+67Bl;7x^2yK#or$RIwtozx)O8@Hk zW9v8_z!J##YZ%`jU;$OU4CJ z-fldUHAUwJK!JB04d#OXGToj5F*>1eJKdT9;?bE&0Hh(RLhF0>{>*nbz3}4l7^c5N!DxUwhIU>eS>kh?qF9D&0U4S z*pZ<%@VCenS+~(cQ4T)iyn-P5m%1EzM%{g$9xz;%Z_v`W4}U%KSdT|l8d${*N>Q1X<{{Ye(X2*9ES!@%Ar9 z%Q}JE5#NX38=ei`^O(81{NfKWKptbb7sUssJza=TkEA9rw;JT{YE$~}?JmY~EIEPP z$b95)Op8(l&WN|ti{jr%yj~}Nd?SM}BiSZqy+u@AS9IA&wjDFUxht!T_c8zAlTX*p zoCqwc5;hSB=N$hQ`qwvVR!0TLo&TqYtpxP2#aTUcwOs*45p*5p+HFoSN_l?G%A@IA zawNVrEpIUTG6pb?EIrQMzZ-vEEp3P!_;e*YLHf(Hh)LG41ASQtNx2^YBlg*wg*#5E zY5o90smu$($X=!xjzhlBrLl$Oj!Z2otI&&#!s*QnA^R7QoBTv9xf6NnR@_A0Zn!d` zOa|~tFS$Rm8B+m1p=WcY6sW-d@itq?J2y^8o&y#Pce@GP1-)U+NeQ8Iai3tqlG@7e2vW*q}S-*2{{U>{K9yFfj zK^*wF+ak7Y14EMvW3ns5{>XEBFAe`oQYx(Sb9RSs!dUZ{MQNFR_`J^~bLWkFo(r!& zcdOM~ufpXK@)4Y~KeV+QnA|!6wV?2l{#fR$bhKq`)xmyg^lNebPYR*@IGWGST`Ax) ziRbeo_@!?j`hz$I@4nEU=8)$*>!Brn{k^qF^H=C=S)@+4*Y$gtj~y|{LjK61$5Z_- z*X`+=S7j&U+bhxarTxt7qi|=#`>I4ajz8~Uy8aH)#$g-#UsWSAh4D>Av)1l~IhaCO z?5`(i)qh2*rD?sY`lg%vOIv_z#5^z2$@$Vwr*T|lPW1Tb(y!s$OX5s1$bvy`XY!8p zt~}Xw6uEwne zjR8ZE8Tm>C8boS##Uvs-4cwyNvE$d%O1L1-mLGS8J|XecD)?@^l8VroSkSP?3sr8| z^q}3QRweop{E)QYSdKpA{?BK^^J}}R+%ZPx2-BJAZRQZ348_lRzbsR}rcE&DP)$1t zkcx|Mi1rnu6v1bc24MU8U8kcQl65e8sBvr={S}G;2!G3*aPIuL9b~_!(7J(nOTcAp zk1Fc*#fvE;^=&O>{&>IFucH_^NZ(qO2l`91>i+OgYxEMQy6RZ z{&ffkIeS59kC3y^PZ-r2E~Uh0PgwnDf7ngZ%qPoQx%BEY`E# z;lD}gF&qTa?4+5u!DSev1(=xidX0*Ua^A5xgx((spK;Inn7FmNFn_J$?UY{pb}QU) znGm({r%Ey|@x!cFN=U21oG?fUbT+_SuSGiWwsX4@6LOVFfP>OGErPQ*Bxd+)q=HT{ z)ajKo`E0tr27PI$6_}Q5+Y>~V#*~4dgj4oM0h43r`O>FjlKT9)nKxqovJM^hewR)8 zmObBobz3!(ppsJi!_OnPv|D8vaem@{Yo#Pn1sFH1xLh{zSM#hdsWV9q|LXrUYnT=Wp|?^x`B+s(KNL3?Rb1Hy%LDbC)O zscpxDADZhWzpEI0bC^b>bqPaE0gv^_rRR?Ot&t^A+SKAtoGTf(sb7;@6|A-SI|ct) z{FyXsDile7fv%JbN7Tw{KyK$Woqz!Th8-Ef|7({|pl<@ly6*6g?hF9KDS|yT!IuTG zr=a1B3=2N&B)jqf4%%Ii4ygs*WV@uy*4uda|Cv94(YocF%=2O$cqwj&IOU3D4={s$_aXiyQxenW# zMmmyYx+XBvwqXwi9ngYHWpM+D!ay}t+Z?&#K=&YY{d5)tp-VITYE80VWcXw+{MaI7 z-!_TA1YbfF)9|s{PfK8Og0@=4Je!U@PuA%>M-dYb@X5uyEX75C^JJ1Dsqf4oyUiS^ z<+JNFYWe?grIZugW_G#Dft3xlG#AW`%liR8Q(%C}#M#MkDgV9$LlVkw1{=VU>*bXk zBi$m~aXnQ@EYovel(bUhCG#*kMCGvaW|!2sEC?TOMQxoobMs8zrM3LC`$N|G<3Hbg z^&(4OH&*2Ho6C{fD2B16%j1FxxmYqb`>q4TiR+ctVDEstQ4`Vohcx3~Px=ySlTPEp zNAH_3C78*DsH0er*N|D)lcTminPYV9tO*p6d;)PgPrsFMBhSiP#=akOp+W>l#*&8W zv%1j>xo!zq-G3ndXt}K&_7LOkpC@Eicn_7};7Z=NA$-Yj^`SwXm(!4q=A!@?M6-8* z!I4IXHBl8g>gJ)QPcA=PJHkH`Qb}yf+2fNSdK?x?d?=!M-W*ngopIWxcJ9DNR2zJ7 z<~1F!Vpg=oJVzU19mdPWpy1Y!8U6V%gcA&ZFGuRMEdlGZxASamBbDu~KG!I?o8@Ua zmWq1(y__kR6HwchhW^vS-d?CVfI$7{Hm-iW)JAFN01_<2mUo98clhm2AmC1@Rs zX@&oIv)SjXH;?9UzdJdZ!JpW^m=ag&?q zM%2X92I&HXDPBNv+EgMN0|NXnZ<_$DHSU%mLDTf?{V!;Ct243vvBEAQc_(@%lQCHi z|85EGUO~&cm$t1Zitq(t6C9D3xaTGj#hL{(o7s0=_kCTz_^Pj3q$1XI zE+iEb^fkJZf}89Dk2GOH3hk+iv}51ySmo-I(HHj6mL;E7)3Dz4HZo>+#4iM3JLxB3 z&xfa^uGt4yFIMkWP^Xr4>q4ERHc@ugAi0VR#+TAl7X1Qu=M<&Yu9BlYZvplIaFVEh zgOi0Lx|(XkRuG0rB8;W$whQhlF3iY@J#F=8O{FU5!N4rCAJ5d0+TyKy-7sjQOjPIQQ}8iH*zWLDU;^%Mr`Q-HS!7*ubV=-uB1y zOJZ1w7{2wIwOuK6&279*=+I-YCG#`xX&B-x!c%qI+j6+);WSk-DzRkA#3#+oxX;ZKo zG_+w^C7R*^6oTRokKlhlZMHqa%HELW6Zh$U7tt~Jc-nhMv-tCJvEadkw+>wj?~i=p zkAl0uNCJ8gr>s^^e>4m6cE2LWARC`Bkw$^`nHL-nUSH{Ke`m*2%8KlySD_a>n2( z3_xJ_X1ZJWqgV{u){5a*RU7IypT6Y=?NG<(+13XQvPfZkOr^2EWn5|zL17Om)1`u8r;R5Ucy{%@xf+rk&CUZ;_6n(FxoT~I!d-L=_ zm?v!l*>iz1doxkADJpP_(i~kFnLuXKx=rvRVDHxhvEjn>PHOm{s}6Th5%yz zsfwTT8gipzc9-)H?O8qh1RpMi&L1!- zm*xvjM)!f(uBm`mn(nDTKNpIn72IQ*QLG#HJK`)`grGhWz{LIpNJHq|YX!N)wwY@!a7}c~R zb$_U$r69CKr}5kLYfRk64JM?Q#R|QYK*%B3AQ(vljOj?ghCja8LPVA&2cF&eCiYt7 z=>{GukM3WS-h9PvLa;&V*#(X^lO>kzcYLB0@y$b&T4gjQs^@W>K7u%M)EN|>@5{w` z%a|^ah8%b1blnRt>{B`>W8!?$Qo!(Aw!IplowJV?uB}z{^OVYEmtvP5o-FuB1 zxn#f~>n{kv+V;=@o?XN{Im%1)##^2-Ay!l@Hx+NzPbN>TkIhc~TR=dPERExpRR$7l zksM7;z@&eVF|)AtHE2ipIT{>^5Z&(wT~7pe3cp2BNBjGd*$D1%0&&qmrcC&6I;aO|_m;(o?LXS9hfPsqkl)DT@T^G48KOelPUn0(2AM zb;sU6;7ZB#&YLFb#E^GNBBX`c0|DWX((rwSE~Gu3bH-~nJGZT$h1;lwK)f=$RGzpH z#=-?`ie^1Bp2nIgWO7ND^S@L7z|Nmjy|aT>wBe2J^n~ej0RYnA*t-(T??rQ;rb&q_EBKvGJprk1A>4i{b z{ZlNp!xcd{Z}dJSKh*O`6IRjy=+kD%u&gMB7Xi*SIoP_P;e(*UISuy_Kcb@!5F6Xp zU>3mlK0ed4D!8-#>-;gDs2#bQ{O2&ed$PJiBpA_b;)CrYk3dJk<5u*uIE^x_#D3fK zdW7q~xmctAyMvClbbZK>`uT`Y9F>_P;{03iC=e)qV}Hj0$g~ENVUFalGzB%8UqZVp z37y9VhoXi!BxACh<_I>wpEO#-QBOpp)Q_=-$Aq#lE?5ziAs%OCO|=4OcB-h;TenFP zz3o71dA#BgZ<>zhTjjo!nyZH;3gUQ!AGFFikXd?G9p~h8!{tUycR{XQH>fe~WdNnt z`mRpG8Oyd1s7^$?3Cx>?lZr1Pnk!=rO?R*R%qsR-8f5EV#(}dVj5GI?0P*n98A6P! zn3BIZS8J$fdy~JSXYANTE+PvozOSsxUEm|m?=fM_9Icqoo9KhIS$k3(U;NsW&Q!UG zZ*KNyQk`nMzKp}iKC$(=z5L9fB)mlj0LmFzvaIhn=hw@e>weJSn;(;hsd(?-QHG6g z6qdXqX{T6xb!pK>{TR;bgRexYSFF$#SST@Y8hV1W|C8nE8Pb!e8LM|7b3D>)zzF#h z!PJFl@wrZ&$NN1GQ4ZBw8S3;%Kc9PKW1*IP;LtoFWM*d?nOIM0d2E1%nvKO2`CE;D z;k7MMb|epYCkzm>aJPP_Di%CyFpl_s(5`?~w4tZa(vtoarA%>r80E;~1KSKbJRt15 zEW+03<=>UxJ`UoUdZ=Zjy_UlN+(eSuBEpe7P?+heRGZj4l?9Z~8NDtnlmAIJ`&#rT z(G`U97Z@AfgB?bNM=8urPg0%#OZZqmSOV=^HeF6=QqNE=>2JDaj<3dMU@<}dQ76NO zKFB11n%}Zj31&W6zgQ!G>JM;~dt1sXfZ)=0aoL<>-CFR2oMVkVoNllG6|ChfL(VKx z+j^=WTW&Q0Ydja96jefwm?JAduIJ&nitv+1b*YkaqgsJvja1I3k@)qQ4mT6O1K&g-N}vm5Q^4M8{BYZwB*-C0U3(m*MT**7qocw zE#-KG?81rM9jvKNMKEDd~MKr@KoN+Mad#xO(b@J8A4bwA`M;;&<-v3w(SwD)3ru4Yvu!|H{5_C(Vr=Xj= zIdJQN4k>vkvTB^eU1ihi7oRr&SdCL6oBHrh4mLOfte3y*iV~4$XRe7ZeHJ z$_svFLFP_wndL&|6Rj2zq}NTC!n>U9^F!&ZqnR2FC%AhI?z;C}<~uEBbM@ zF!y(X;#gSSVe^ld!AjQ)7B)p^S^YnC`nG;DqJl-foV&cwz@FO_XMaMw$Yde~`r)@5V}|VX1eV#~++^)Gfv0vi6464)uCKkf^LaK6)&ZUIkU;Fq7j0^- zvXKC)$`7}NCj4wCbejw(x4TR7>WvW}_U$g5bH?x*mmBc~`(T#ajtkS1y#~;V#Y?-d z$(h4Rx3qgPL;95k)Pl7m4Bv(x6kRL+oK#X@qy=rEL}$VdzqP&PSi}{%YOcgsr}|NO zUktVERgMbvWLq3;_WDLmatf4O3{eJCM0rJP};ovh`%w$O+5%lJrQF2E0h!#6M51qu|K*%yjS6cb||GC#S4iLYKOyAF-;KYjgb=&%RTQLl+?cyfzHeYQ!B zN3ASOxCGN{U}iRr@_eCBP2}P3*D^s?=@O?1fWo29@Hi#C_@XzeEI?^_2hxof^W48B z(dfl>^~@i+Q|{t0qDEnwR!@u*Ex-I; zb-5Z|E@YKvF9LQKu##x}>V#F;M@8VAZQXkhNZ2tt9X{B?Ms>jl@Q1r}_x89)Kmm5K z^$(q=5j-HUPz4xa6qGfWcs~h>JS&sI8EwT?%*da-+5_8FkmI$vc8PeLR~245?eK}h z7tfczSI$pNC?<31*IVtQQ5FjGaEL5k{#x0#a^E@UXgg0yrklCA0v=BiT=xZH0XrU# zy8`@ilw*cmtCv8HU<4{$z&r&eJx7RhTxaXcR6v&>UnQa?CFnu#J&W~%y3Cz%n^kSWX!8$F4oOl4s)N=p(Ff|I{NV|6B)Y+*7&czh?iF}-eG1mk7rtr^<`%Kql0kLg=%u}Fv}!JQ zAE}!^ojZ~ZRBHD-6le!fAnVRqFkLdOAsAd*FQ91~67%Xo#yz9;Um9vaqL0WO!Gp9c zQ{R)w`VqS=rlQ!^<(;;^e0HX_eAovHOWBDd#dN-Rg_N9MlM)y`Z1(R2Bg%&J?oett z0Cl3|87Uo)<4);Nj(jfwh)GOp9=n8)DQhZk10Yb^+OOePkPFXIzrEB`lg=*srnFO{ z64-JZT>e2b-8d6lgv28UB2r{lf!Or2#ar|CKI~AC@{(^mW83>N&Mx^R&XKI8eqQMy zzX%+N^CIB`FT|Z{B&mvEGUHBHf+F*i)?B81K-2>5l73;8&116b%}->T-K$gqdysd$ z?U9j(+}ng&c%r(;r>PpC2E5F0UUJiHYBJ}%F;K|2>!C&sOE~aZ?z@hqT5dg$nA=3F z>lJESlZAt#Ib6m8Rpau>>`YE@G97mL#O0)%+>GZ?G)lJ$T+N`OF-20+g({%hb1SgW z*Vh!TQ<&+v`z5ja^p$4KJ^Gn*!k4RkZYxN+zSjemD|JN&S&%JDgvIqn?O9p|PfovO z-mEhGVHJ^zpWA$5lT;AfL{<+7ow`xVEx03LuZ}9~B(s^|A-qw0Vj`pM*-9Q9fd1z( z)t~pY4&pT7&U5{o-0XAFE47L*uQ^d%f3bS^G@Mq6fx}qa>_#xW+S1OTX3UjB45|tp z%R0>wiK;G;WLx~6F|=%TmW~YCfe^HpAPX;q4m1#J=#4DKsTTEN*M{_xUn|nEzxl4p zzk8{-doNK4_3**G0l$Cd?CpOaky<-*7>5d0H(7{*ZRM$&F7S8|Oi`|yw*;SUPZo?R z$=A7E2QCGJ_TZQy2Y-C% zXMwMrKj__~C2WZI(MQlYwtC$&LyL>N7EizvAisquAw$Ol0CZh8W7a7CSC|1WUbh5>sYY7 z8}$OztZN@C%OIcP{vscZ-SMSUZ?lgE`Oh;ZTRm-Z8qWlfE0ge$D^ZB8_#@xvDYe4R zdxK{X8#GA$!psYRapYwC2H_Y(HrTsHY^xy&+(|or6$vjwuE~3kd7}pL z@^d6Rw^G8hd{IQPN~+3H7zKV%2TL~*>v@ELR{+?V9IJ}nS8bv>Lx1XBg#P+;byUwu zO?O2(mJR+PfL`v9+CdOVO$^5n5QG=#8Hd5TJ4!Z@8~*~E>A{G$-22FfXZ2EbQehOo zuXNfrrvsmOQdT>W5l1V}qdR?wM>Xz?r)?m~WFP!mRWQGjxgxyhG1M1Srqk}8HWs)t zkSFFRy#ql$i9)O}pTcFq5 z@<+bKU2$l*qwh8e`G^g+qn+#1iKM#FPtA6dj@IM5lDh(ZD(7FXyY$fN=(k#_*_%i z#$xHCnC2-iQTafb&^5>#ueUoT3g0}@BgD>eub*llW06;W?dU;#ffi0)X$QVfcCP7Q#& z33zPe4D0^tafPO{Jw(ea^PBcG^kvTF)ntKxa~LuWUQ4)&-e2zU>jWJ4I_m8@RyY)Q zt;feHKZ6W$_La<9<3YUYpF{!J5fC%#)jmz6!1iZHxEb6}K=Ns#<2jN`P%)5bvjxm| z(Hn2@qe^vX^SD)7MWSzO%oM*vEZb_2d>Bv5w809^^|l-D)?3Rci`-3zR_I4Z>%n7& zK^X7*08~ox+41j!A~cWz9=1)zc?aObG&ayrcKi*k>kJUAHFH_q0*%L%_qM+80U&W4 zO5ewE#zkE2ax3fjY?yb#0Db4DF7FXLc}Rqw=-CZOB4r4yRc$3Jjuo3-*L;*xc(ZXn zdG0ttpn<>l8^^`RhPKrmuTx$sxmiAhXH4*&$3?6Er zXVST{{E4U6uXc8V33#0g-~;_@ojz*E>~$jm&s*;_gijv1N*2APX=En&xz9I~5w|An z1dw}4V?=er$7-bpFbD83T!LtRxa#wc=eW`~)q?(bJUTrd8!zy;&Mx4fo5+xc;#3$BsX*-`f&OgPG2W6?)@QG7gcwHv_Q)tZ_pgx0^ zhh_A=;IZ-il7w+6n3rc3Mf-)q;1I2v?UFBRV&tkmuicgmwF4XVAi%=U#sMfcNU5 z>&be+@@s2z-5@NZ7j>78IJWi!42b4=A~ZR;@h z+1HFdo5S35uRaFFMRbhy-?D+YFQ}eAZ_(0EWfTxFTY8sYa2ZRnIZbi6Zt>>2wm@+& z40Du&YU{VVdc3lEQEn>O`BL52aa0Px(g2!W&6Rc3cCB<;CGUKw?B8e zr?}+2<=jE4^$%XIye755fw7NiHPiLqP83^c7kn>WV!|HIS>Eil0mPQ;=lC&5{sJ~5 zKP311_qX*HZ8N1SyLnBDcwshKeLUBFfz^=F?{JJ8unSS>?~rpo8+ZduQWdIPVYj{# z1qfr71)YkmU^nukx68IR@e(Q1MLeU!y;VpR?yAQb-W{f7O~^>xkxR(WI3 zs?R6ftwFg8+Y7M-?k|6^4yuxcVVDbL*FieQzWH2;yo~;TNM-Dmq3zjN6e_v@QmL^Qxn?AyKJ>A4#JpteD7$fQ> zwY_j-1fV!9L(?ZQL?r>pFN)SVqj&*U>F&`no5#tG(@DS-k#E!qtsd&cjihs)or}NV z5-Y30>nNPD>X#bx$sPi4;S-CUC9<*)jVrUZsMe+`gH8Q%l6h!hd7AZ@9)E6<7B(_ zmOUzL^caI(kw}?y=I{(X**_fM#PGu)TW*(;(Fm^aRN4sAY@Dmua%m>N$tS{hA&&ce zMcSIiRgqnnQb?K!OZzt5>+F^m3SA}8!;F29ije&f8$j7RY_p094R z&1_&ox@UVtyGVOgYUjf&)N$(mDB3Zvth;4O-DafKR(t25;|CKdKO`GHjBYc zfBa3Z?lojvS7IhaE*udbV$rJ!Cq-g2wt9{K+C07hWk;T_y=hchi1vYc95oXABM(o~ zcG9{`DE@_MipBgx&O^Ky>J+q&_h>^#{jqnVE$)0Ix%4R;P-w_83gBib4&!dw+Z+#% z`Sf?l&#|0!E2T#7*u{`+Zh>tx=PPcRZRT|5qR-7H^*)aH)f5M3Z4bBFi1W$Fq$O7< znN^?HhQs0bo4vtv^2j%1!U=;VGLFFtXnJWIM9G|Lv_SDgGQ@EuUo_=H=P*2`LK zIX$9K+REM!F+Am=_A_J7z^*%$5WBUIBfccz7uPLEoB9cx(7!+3uQ0q5%V+(NmsO-v zkY|$tqw6R(d&D<4N4+?Fsf2~FpKlsX4A3$W(h)tLC-g?_yht*gsBK)o;D=1_TDLr~ zsP3;g_({TlZ_okwg(uC%SH4X>h^>O5aY_puqT{&Y84duu{b1q3Pf54Y$lSKiihtMQ z%%pF0IcLl#hAi*1Na6kvN2|muE6q6eCsC@1j!a+wl*GkwBNMYVAIEAuNc?$=-YMSS z=_k4s-0%oT>q$s3GP}4z)2}@A!&p^a#jVLZV0Y;@E|!uhc(~!3XWuEfv0ho4DkKYi zAhn*)=v1-o{~c2&eG7V?A@;;Qj5bd!Lv|s#J-C27 z7$g7k{!qh!9ieSHM2n0y-U_`jW%KVBj$EQ=8*(r~h8~D>h1J|C%39 zIF6kWSkW<5T6O16#dYMwP z^BszR%0W+QBqX|gU`g_XaH0`X2z?gwE+j|Ipd+Sz2z^`%+G~4+N+>m0jz_e z?~U@eL$RPq8kMOBvvvPC-_C5we8N00jaP@kA^w_6kMPkAdv`ZbDACx2ljYNUsa6;DwTpXc{ze0rDhHt2RsG!XD1sMkWsnZH}5 z^&z&A2P6>PH}#kf)ty&~tE7qS83bP_WOFvwg>osq)v_l5!$7X9$4|so(NdhcO&5GN z`xdFR%0ipQ(u{R!*8`?62aF-Hpc=`DlsoJ}D-_%Lki*8^ma4yqw*y9XdAAuDMU%MU z1UpX=zxWzfMCc5dTABv6Ld6TQL1;M0{f4m`%h#U@lt6{y#V%wTr+EFrAM5r=`f0O{ z(vYU;50wc#I_?I9g1p*QsGDi6NWOK;jKlbSkDl|Pew8w!1t2{DirrE6V!V7?nS`j$ zdQt1mYW7t%g*~8q)zsAwEmj1e2O0EQQAL)5MmSGgCc|1fM3bC@gkQ^*YBtWWmNZ2P zFZy+(%AkEsc2bhH`ZgRYKxr+~&Fj3>0k{n)9}q3d&Qm8+9G?nsWW4hcocg<*EVgXB zb39@)#7C^VHqLSBEcXeU{DlRkFy@n@w;$)a#ZYCDUByp~0(R9X;v$s^WAm^yEIuyC z4}|$47In9vXyK72r&=M6IX5{NC_9A$-|^Hxxv$j{0f0w;W&bTB=$gj|_nopDf8tK&PC!?*%tihMz>WdR=YXVr z4cvD2RZW_oCw7N`D82;icMd$Wj9tni#^O;@NE1d;?(GOIfTqpYeJ%59Xta2LDQ7b5 z)QemNZRNL(_mjTnuML*=87U59p?r*6i8=!+-KF$XeR}RlZeE;`U;VMr%(JK}$?7k9 z`T0Mct0as`lK!9?qKspd6eW7i6C&;b%HT6iyC(ithm4nI-zCe~|H+IZT6lwt{Dqxa zF2d;(&28yQ-9*(Y&vu>zWmKFU=0Dg;3sr8pG8fSWN|cxpj5;=4B(wxJecr?IjeQN7 zLW30->ftRmZRe?`mD=G0nn*vb@5^p(GKhOF4h{BaP=fRYH(We~I)tTA@xN)Y++k{F z$BX&%ga$i}qd-IW*jkc#DsEjJ8u&)`L&Df!8Ynio4wV?qES<|B%=q_?aQZaOuDD1m zWQZt3E!h@rtEAsJ&}?i5uvLU4+b0$^=Z6xjjjx2$ktXhgyg!y|rl+V^w5)TFS6W|$ zzf!d>)v8x5^*YB$K#5s$bF`opcHKH*L!zWOweq;V!Qxz$JvEl>X|bqi>#D~(GmJkO zI6I0R+}UEC31O>f>9k?pUTv`-d+vBt@)9rkxI$vCM=|-d@|2{jbtD@%i_l`K(i&Af zUP`~`pMs6q5enXxZI&b;N5L8&)iW{RGFP74TjBFJAqRovAI_Y17N3CJPn z-~{L5GQ|~)C6%>sea*#wX^oPfEmiVCvCI<@Hz8HuMOAVdbCH;FunM>0hzk8#hk;K6 z*SR#MXHNWi18y#nPnzg)8Y&85(c8NZc0Ag8>1W{MOHQ|8mAJJ zlLU5dYFPb-bZ@(Qv#56S#%{9#OPY%F*=L$7tYahv{K;V^hqS~1X-_7o!Z(^$^BTS; z50bBJdavcLVuns+9Up-thaKddGOK1c`Xh_2Y)*$7oM*Z zv~3iZ$y6azsT3oGyF0*4C-^&Cib=ogx4}H9p*KN)L?|I^uBmX;%glpx^%#kZhvrZe&T)$+OTQM9ui-=pDn&GK8 zpfkLary2ESSz~!`K4Z{F&2(^z)J-_&?zNFe*O2M&+aA*oMfPj=$)qu4E{$SPOk%e8 zS=M>oS2&_q02gU5m920a>*)PtFYX)}im`!2PO6~QhXv6^0CfZL?>o?66PHR397^6agJ|KIF6Xb}gMJd}36^M-9K2ZpU{pWB zqcLY$UZ^iueM6rsBknca6XAE_k)rxT3_4p#Q;2yMyCFnl+rud|>}}UwwI&EVBWc1M zY}F|A9oLpK5>id!YohGK_ZYvaat{rSbVwTNm~DN_jja37LnV@%741)hMkI9P0ASnFQ-*SS5N{6t%*!$WgP1{CZfa)Z6AQ!7V2qBAd%eJd29FB3$ z+*R2tP1%cg_kbU1BZeEr>psqi3WWO#cHfYC$n(+H z+iyu*5A_;npLB8(s5*A3=}-`(y}or-+ICCj+!w}5I>t`D<@4|hCb68HT+`LDH`A4 zY18m|`o{4yMgJq$7)36-a zZ)+te6OeYa;?BAcn_XgT)PcmEGon#;bQ}Z_>wgduc$75^pZze{{w@6U_>F;Omm$KV zVr4Hen_bXnCR#z%2uEVmtV10yD9YRxOa|(qm+S5&ZGUJl;B5rC0~qNnDI}TvRgoQ> zRUZzeewbhD8oZL-bW`*r;2>E!^WX< z$RLIx{iYpU^}i}sFD`AUka}-BIN*e4BLfrfRlfL!>;IDQkPAcT>n!^r4^6#V6QI%B z-xlo&ez=Y^x8R#$RG}5--76(Hl86&vn`7h~Kk!xL`{u$b z8udPc@Yz)EdXjNuc4_1Kby&EPX3=r_4>mmn&=)4Owbf>=dMESVJAg@1#A;2-KKshe zj2uJ7Y_wh|;!tSRD=zVg0CG;2G43D+LPKOM)GxzoyEGn~ZFc#j_H|T=Svs%wk!fGS zWp%I&y51yRzcfB+;0*IISQxaE7e~L<*mcA&@OxzFL7AUr4Wr}v+2V@!3KHD`kC@7|luhK>H()wuLWAw0X=FVtt*IRu!KLMbU0R>qOWO znDkuM=*M&3qb<+us(E`grpbek15Dh}g&2 ziS5SQWCip~-nk&=L6ykir^eV?fb3Ti6BLsjR}6GevLG|ulb`s|T@kD~hQlnXTgpG| zt6-2<=XsKkMc~oU@2%AKI}kDAEB+8Rl2KRk}3{k)Ay0R$Ox$`VGnNM{#w@DeRKrl(wB#*cIW z4%|OvEY0L`E%-Q)1>k|l$Y=TC48gP{7B5-EhJEH4I0+Z)Z8ShRV*r`OR=lU^I}@&6 zdcC}|A!DY4TGlL1n=I$zy5nKJ@A)7BRK(u^oxa()4+jws0vUTP{FaljaH-PuSla_W z!f#Y~zIs>RPQgfeR%84E99YIvIN4bQ1yoa?deD;OqWR^7D{J3Ty$Z6uRaF~L20za4 zY3tXzG(P)6EzI}9^hgPV((0z>>MskpzcXCD13;@?sYUpEE{_eXimtA2uH>o?T-htkxggJn8>e0PxijKhEifYa3W2y@s?kaXu2dumops}lR6Ctg zh9T~8z>@v_N#7%36n5LO=n*q@e{b6^E;A2el=oh7;cM3lzxU|3XMl>wd-w15fGW01 z3cjPq0vSfPUwX4sh=(1e+jwvn%TWB6@WcqV9; z0q@~dMps+|p>70Xd^ZFK!MCHrTA{N~cH}iIP_c;Cmai(iapUYlJz{cNze%f}&5Wk6 zBNuOWEfKv(C9Xg_Xgmf*H>P=e`O3h2C+sHE5CbOpAzrMJF@ti)Z-P>)e1=X!APg9t zjf8|ScdrM@NZ8auN?uF5o8En0En~;^Fyq~;LTnm=9d^sd=5TScy3wNDER#Uc7O?=| z+2%lQxN6S#6EoS&)Xm4=jNMFjS4YcV^bsjcbU42*LD1Y0OUr^Nof<-o9H?3F}qS7_7mk9!bqO1(9L(D8^W-UQTjeTbwrtLR`1>So(cXpw>jXl0gTJ zhI!C?F9M=B?@x96icj2@Z2M53V;E2)sx;85w1<dq(aBP90{2nBdP z9|jD!$RgmKuF#AZOzyQ8M3=3QAy1A=X|IeWE7#o&zyzc8?M*P`N$=h2es)xE(=hE) z5><8D$4QxrauZTS)CfKJp`9?2a^zjVa#9)PW=c@EYGy5uyj`W}|GM zwDn%*+g7%(!KeB6it7smbjyDv#&qsc0T~wdg%dN@C;RuHn`PQ{C#8KdyJ}e0U9U3| zW0C5tI5{V;Zi9i5U85+*}xRG6*~|t5F7tEEQ}=K8cA8ikWtwm`Hd} z-;X&QZ8Rt%{muDXAlZklsQV?HGgiEVG7#?N(m#-No8-%W7lz# zTp7PhM>g;ni$4n%Lpbu?7g>-P>z`}2Fgu)>CI3d6ARPf>1onv2%~a2mL>$Rs%1?sj z|J;JgS4Y0%`P4k#r;((jsc?5EJ)I~egc@R)M$O?ZMv|)VjKYG~sqx2W!BSb$6<*x- z+d7ShGpYHW&4sl=NO2FTHf?cyhk|>_DOIrD%d*YRP*X*RIlGh8p*-V4cEda7BFwj4 z6o2<-7e$))NBCs6-0WOY0r-Vs2W zQFvOYe3+>y4D(%`Ts%Ac%`dcF=f#8NW@R$r2mey-c2%;e3fd&5&dcX_Gup5s8`Jc( zZ^~($YNK!J{c9qKF3qW5H;5t8Ma!dCDi6^Ur%coNl1un}Ya(~x(jxkM6B16DB06Nm z{?)!d$aZghl|^n8$V67UI#u#ys2jIaN=(Kwgui_67)v9Sj9E?a_1s#psIZ%`3;4%J zSP`G@+3hEowaQX?A+cpza==>K7X%QxntFw_-=Z6#x4)Y7F}`#y=;iAUEa*h^dr>pdS^l~kRP$l!a>-8)^ zyxf`17n=f}Eu=r^!lrS8Jt*=qk4+q@v}mdd0EFkI=Ei@_;D3%1-~}`N?*c1n*Zo81 zx1(G}*Hn%7)$-z(l8eB%C8Ox2f9tdEXR?!jr0MYvcJJZbX;Kj*4%BG#AB-J$6J9@~ zI${K7ha>V_;Z~FU=+ijSIz~}3-MV)F(!Zv%2{X`P)r4SWrGGqhYKOk}BO9wm8)Jz^ zMNFA?{QwvZS1#n)uRMtpqmMGq6S9ok)}p1t|5^)xflDX4dIzf?46Xk#2aO6m*zoQUn79!!yWJS*Hs@ONPZBx zpo>iCb2f#s?)i=Cs`x)`AI*o%R3x7&-}&vIE8hRgi@aC_6vyJcp%&SHw!#0#i-|zs zw&wQCns|Q=%D)ZG|K{iDo^#DVv;hA9-}!HU^;Lfc47db`Wd8rs@&D6S`S)4(e-Hit z_t(*Kz}(J{Wk37-JpFGPVY>4F{=~qj z{kO~fEpXe~M#7iq|GS;Wf&qkHxu)UNf1A<&lg6O3`V-Ol62GBP{|8<1XZ8KhE*W}Y zjZ>3Nbp5l;|Li)SvH5jar70ZM7ZPGn zX#TW4zi*VtgT&?GG9#3bh3Qx5b6aV%`O8i}G}Gxl+^yf8Z|zP87zgqb_0mjD2Zjl1 zyvGz4gouGytAY%eXTO=h*#Pw4Lm2ys67|W{>zK#P_UjI-x9-Yrg%Wk_Vm8OT?FPq^ z%7daq5qyc2%=S*kt!;QIu=zYP9r z@Si~X$ZLZA?<<2H72-X3NuCli3s9RTcvMy|}g)O!m#SNu=jwyXiiRT;o& z#^H3ORWE+gx>aE1Z8Ezg@`~nlfrD3h>Zs>Q*F46HP3y%6zx%p7{sCtP5dk1vVk9`h z10znye7!dbO>5npd~2Q!()Rlq?7XY}ycVpLgMF~@lhw#0FBp^kT3Ie2?CuJdc=4hw z#!9<>sG`|few-#C|8o_M+VMfnRzGc2uzG1U-236C(DHu!&3v_K36N<3Sxu>zx~MWc zD0N0V6t8sfJb^#K>Qh$lJ^B?&l(4?{c+y7+b=`AlWI)3qkH+33yT+iGBfPp0ig5J4 z6>!cmx3yUXiMnR&BYuiErQ*vs58 zOxxaL!zVngSX#DS61P`WeL83fKDNNlEWvP_Vg5&kXJNY2k0#2nBB&&OrwbQPxAin} z4%}wBNf8Gmm^b8OMm$K!yxKP3;u>alE-RPh3ix=*t+cobZM^$QAhoJpXZcQQ?ZxJ- zzVp7<>iyZ+{D(1ZwXc$<-pFDO*l2>doo)Pv=4hiuH(0-K`FcD4|oCWxn4cl_0jPh(|z* zWjxluC*5Ttge#(2|6oRYdsLU|*EEUQU>+BBU*TDAaE!6(-0^r*F#Ogj5jc5Jr-!9p znl7GfC>5)mtOalN3=B4y}IjigblaO79iARal zE;6ePF-ZaL0sYnhO^tx0yv=3DBo>iweUd@KtJu^+P^#A|wIIB##ff_I^n$X44g1B^ zS?GEjxdPSv9f5H}#E(|Xh5ObAYxfmb`g0R**VCRyz36`Tk3ZN4=4|6kezSJdd;)(q zpoHrHVnc~itE~sUsj!KkeZri!_x(C@G_57+pWXYK`4-HDsAsM=9lpR$rh?4>KXa%$ z64>8p^<|j-H__ZT7#UQm^VXnpk5Lqz&*n%S9Mq$L=_f~0euF_-`Vqu)!(fW_#=Day zS;ROp9w>3{LMo((jnxtmdK=%DOxuQAz)3C-7VGs_^lr+BGkBC|O0`&XrCQd9?jqqq z%Wa-ba>d%#a_@PQZPJh}jhpDhpo6l5*RNxaRi-~K9E1AUwYfR0-`d!-lYC5MzKdS* zmu6hj*1~r>yp;sh|5$iFjgDW0%(S_m?=kY2jb7*u&+{$vC6+BPQLbJd6@QG9;4`^mDd+m|Lo4@3txHaoM(oRZX|Z&f7Pz~LF}n+*YqmV@ zjZ}!wGNSlMU75Cw`Ne^pV+V=((zPtNM~_8DA&dS4qWSo}t#bGAm4+u3+sC>yq0xgD zm5?fnnNo&)Sc~F4$#}{J{3ZDMnAUvpNNdasVQi&03e3<)0cEq~gUZ%{xo_yIv0}{@ zFUJN$iCB%FKe<}S;s5kY0m_J2{c8jrfb)OFYQv`xASzJ zwF1FU$AyJi|HwB99yNR7b=fND;vep6B|i0*a~w5emtJ1)C>e)9RDz7yg#s@MeGvV7 zb*e2lild%}(23_Rdy)M1!|;G{c~6DQ3@GHJ3lKOg#Pn@*So@aT#xRYZb1vrjL}v31 zagP|U#dK5&*_iNMt@r($JUeH{mt5U%F_hL9Txa28lVQS zn{LjB_?Y=v(VQzr2E3hn4}Ptmd)<|88xMQA3{1`2DXiV=Elznu&U3ind(9L+n=L|o zW3BL;Na1Y~F)*N=X~u216#O#NXO!81tPI#0NfFb^sXnuU9a}Cmj}58XiIDT!_xcwR zr02`KgLRC`WB%*jChyN#eBxrTQs>`yBaJDdG{A<_3{As<(%z^9a zFJgUx*{gyV6=P~*x{rza2>_u>U@Jsgr5^CRO6K>@zHR?MoV{gKlz+QDE+rrhf`oJ` z-8F!OfHbJYm+tPEp%svjmXzwEJy!x-j3l{ea z>i%4xeeG-SeGTxF$~_*$Ie6T0{>3QJJK!;chIuoo7}`?$Np?y!*|{z{kp2C55 z|GCljUwDGHZ9Gzb?OR*?!K+^4%xGg#8jq!Q&9cztS#btaxq~IQ2HxQun7P5{X!Mlx znVeqr@(1*$_ zCedF1B&$_J9$`Uo3LIKh4l9*iDGgb8C-9S?apM>kO6kdMRHu-0yew=pLoH)sdNA{Y zO3=6fcg?xjJJS{vYjO-ayM11T|9a)l5QNT`M6|fri59416A+JBsMQPhlo(?TQwj73 zNAC&qM&1ux^tzt_FZzlS&9I*7k7(bW5rA&O3IYEl)NCYdtx90~nm0OH==0-X$Wz03 zFpW32O|tqD_@Q^K5<&6bbhNNTPt4^v1g(U(M}~@}ObR1fwyJsov{kQUC0SzJal3)@ z&nAiOV*lfM7tGwK<=kfT5%Q!{@U@UKx~MP+-K{ z6-K9#LGJFr8f`Ho~f!rIhO8#fOg9wc;T z`RIV{q5Kll+X?>B=xc%+sXct)QBqVa9a-Q8i6@gxNDHK6I34;gn&y82`vGI16(2U9 z%dBVpUtj$%%saq_DSdZ@x6lYS9hq!z_G<2YM3WzTE~c}c|CvAjEU8oE1lU)XJ%p!R z_b4=7mA9FL1y=#RC%N=jvLK6&vsG~(VRyUIp(w!%9U)m-{L6mL^bJa>u;-;Bw@(h% zJ`r!c37bnEX9$#jFa6&DX*M0^sl39hrg zU|$?KAet3>BLP}bd8x~B=u~2{-T4t?(Q&w9p-M?e_j8}s#SYwhcQn_M;av zT4E&|y!=us`J?f;dGmSBl!osFKU&V-$;-fqa|W*pkk*IYt%pTuiCi^_H6GKNal9+nkl)R~z}R6o z6iO+09X-%~hpN-x{=_3iYYrzHTAE@WvP{C=_fU6|U768KN$!ia^fwp#E3^9v$LdR) z3_;R6E_0k)t(ir}W8m#PsU7P`)-LQD^oLg=xHNzg;tvnj%B5d@GGSVxI^ZOm?c6DO zH4_wq;^vfNy7T`D+#w=A3Qpwtlpu8`+;<}q#!)rvGv>FwF9ckct+4xh&zP}Hf^y#nS4lrYa)t0hjNnswb~wYH$p1{RREAsR`B+~pYEHYDqD>v zc*(!-h=7p)aH8akQG&L9XIa{uG*OsW=!4eyr|ji*ZaFgKb#$r(s~n0_cw;7^eIQEB z;}^yBdPeZ4^ZD2h?JmIo+iKxwBc_})*)naD+gEhpuIs;1TG25p-*QKX zz#)$bGV$8&nba}`blX}fMmdZ`Q1w`v@X7$ejb7Y^ihm6LSynjFT#`ILZcO`6XYOHU=X%Da71Hvo#WCJKomM8%jK(5;Q?I>VD^B{xu9nIhx97wkK1@uM9+qL= zbkk4ozctz__u8NDK(JddnH8wx$-=Ye+;o)=?ZWCJRq2>*?i+wQ8a~4AaHPvnb6-ROVyr?*<~^P@`g|7`J2{n7UCYbnXcap zpoK6~VpST{>cW8=Z|*FkL8sklhlVM$r75lXy;hp?-<+fLVG1&7gq^efbaf8O!%oxj zv?-j}8A|4p7f*|*C9!O`SE)WiylT`_r`9h1$GKmy5GC%6*SYqFi0*Q^i`!3QYhibE zs%@p}FQ>-bqIXAC4>e8)A2izIYsOnifD4L4M_^&dFPxq>5t0B1KZUOC zW?!hD&R74GhnAb=Jcok2Lt&%+dPlPB?o-0|C|S}MdOqTPLF`?al<6F73!R7@uCCL~ zy9RJls8pBHPgvemep{xW`{CT{nOWEe(bS0yDrch-1 zY}^O;ov=4=>p3tU7r4mlfES;&0#2we~LvI5dgphJjcB9-`zx<=xEEJVM35 z^r)*$*N!Ar-ZuTk1{W%CU7c1F{YC;_?FKN+xHw5ckS`+7rR2N`8_t4+fg8U{K@YAB^x1ix>C?ji zKqDuk#=<6&w_sE%@IVY!Qdd1&p4-||#u4b|E7b+ETH0E9I3j)662$^3s(wOw#Y|WzXo= zTJMH+S+X14 zFcQ4E|KqQ&mOXM_7(c7B`Au_Qy_FXL+t^h})_|}{-Eni;A z0j@HCW|5}hv7MqP=C1FKe9xGO<}x2B3%zUQ&Us@sV(pJ%0Cj74pxpFh`E0&x3-&(`5xi~$wkpr-A(eZ3s)kFJC zF9LM?%_ocH>J&Mu9mljAPJ(CMnbA9Y(i7SIY_WW+Y%A6{-(@^<$(Dj{kU%*Ip@ukp znya%4&ApdO%_FqFM!_-8_3zk5F)0DW$$?ybyZFL}OO}?@0%TO#ZSGnn_$@xIn;+V- zE+#X_LMKam4tQU`GlPt40zN(moZ0g~WW+cnyC7?9t#lg-1u5n?!&ZB_06l)zj+ zKjo=_xo(tAb%jOe@y>^LtK64F)MgLz6Ks6`UB^AUCCx*a>k*_m|wpbaHYnGD>yTN)F6#9Z0~ zd6@w>3cMkF2TKxw-i+$O!j_YWuYNR<@LBChqJeI{y6vsWu7J&H#zrUT;3)Rz!O(Wi z-~1-3F$)bYD{O!h-5}n6-CTGE`FPbDQHG=>1H2sFb1 zO<*y?R{xAr%B(fpUm(x#cDQdA+$zu4qHSN>V0R!(?o1|HZJ#wCHyCz*j%i70Z-r90 zhv-#A)sXsX;z^c`(NgB#xA-@DP6KnrbtuY`H1wM~jfA@mYmWZ_95T2?yG438hH#cC zZ8#5Y-yIV#$-5^cc9!FB{gGXnbB)+~_RXoOvh`i2+$+i2{?5qOvz=D2ERt#Sqj2eC zLsnhTo522FQRzrOW~^3x<)rt=v}C_;Yi#3rzU|Lxi$wCcj{&Ug#h)vF9VsZnb`Ifk zV9_pXxeRjbQ>c~9x7MvghCLYy{dc-5>w&Hc!qtEDA1Hj~m=DgKsGF=8+63Q5sGuOz zwhIK);I05Z|9+D2iK6sP{4@&jiISn)jm1EgHtabNt|9z-CPWSgZxa_5)cWT8+{me- z_vL%mdd9}Hf@kVl*xJhZa#-?VHb6(d)@-|c^`d3qG=OwpqW5iy!sLgZQxeO%gq}c9 zOfJJ@7|BomBlnW72L8wwCeTu~3?W4tvUpmVK@zhJOD5l8*;_-`4$eE%pkMsD0{v#V ziKEQI<*$W7^;7Jvgf(50#jf_2+?3HM0y1{>x8A<*=@CvPKIlD~Vc49hDJ4sdlZQ1y zPKgu>BAJ zG(84eRD*j%Sz{EcTm~RL4V@4jvLjor6X)g4lheBMuv)MECvE=cy%RbG3jE+N3CBRc z&fe6{W)!?4Ea3Jk+-~7WP?b`tix0o6j+boL@9t5SYp8CS6~wyUf(~P{RCiWoFZBL9gy=hG;r8UTv%N^ zyy_8iKuR*Lo+BXtFtk5uMe@A(r>^>i#WyZ<1ysd((bYtMZdex4oih72{}_%@A^)2? z8M!vo15u7G=!D1y|IZko0H}M^ANXKgbIj@E<=x*>AnBjO`0}QImT=Nz9+9E-lHJyU zmoj_CHZ_I+;??gUU~H@kh5k%dMP^HZ#AHh z3S4It{~kSx7Re#{Tyji8Zi2z@qb_o_58EV}&IkDfu53gC6v99c1@ss5>Y2a#(JixY zsl0fMs7FOldPg29G(F*oEbZa|z(}MG^R$YcL@}uOhUl~1Xsl68=W_*`P!l6u(AHH^ z4VsDpuHmoju0N*;xQ!=NTPCuHS;bOIzf6Ou{d@%9ZA@;#9;{2CG?8odIV3~md^(d` zn&sZQN5KgN8HkvOj6VbiGqCj*;qeVMU<`e*B?s~OQ`Icl|MvTDP_~$Uc+Deab$|Q% z=4W2~rw{9_+v?;6>XHhFoBWC6Kso7uuT8Ox|P=>1nA z2=>X$uC+m(UD?7m7k`&J&E@SMzsHhMU-a##8Vc`4$XzMYDT_Tz5E>r-&=^;ltH)1Y z%)|SYYwhx>1^-IQrev^SSo%RQT>g6PR!if;0C965&khp%4`)wAeBxYRc(l&=swAgt z-KXS7FKa_!s9Hb@^z-Vsbqges?L`+jq~(%Ye5|ffk1OWpjxP~eXLa2Klie8PUA*F( zIMV^`#)=a3wQtTKkK8xe{pmtnn`h{QI261bNEcxf4Cx_mL$s&P`R+;VmnT3tvr05O zwd9*+xc%>U9W(10&+1Ai-xTTcx%jU)+k)7?zDYy4bYwzB{2~u>l_Znu(_74z!{Ni= zRrm6R?dFk_ACMm@xR>@Z3UCjg z9%_nOyD6qN$A%@)r=5FJx{<$T0IHDBbieCdz++l}j7!qniF12sm7Wy4CruBVD6M9b z?b8w1wNu}2q?FNI(9Y7wf25S&RqUX&P=`l|pYE60>4yeuXptEW-Hukc9a^|=U#KC# z@PFBrXap;~FII(BzP6i)YuvnT0HgH%r8s0)06Ax|RQs!Ov`s$B@cys$E6F{Y{;pRL zJV3NF_9y?sG?#*DNBBB}HO2{fD@h}CB4`MDV$Op31qUGYxygrYAqxWi-TK8k+g}$$ zaZmn=?u>as71D)Hw!2@eZY_)&XRo-BM3Lp|I$;zHrMy&bZAg?t`*=M2W9f4JRD~RV zbT?>3*2wRayK1~Wt0TJb-fh-7w96mP&25|m-|J;<{c?1-zx%am*df}Q0mAJ)9J|p^ zlbLP$GeknNYQ!i4&11^u2j;PaZX`>o>NlAua$4BtTSPKekle`k*kq=qr{W*|wbWKbr>uq@TfQpG7S0272U|Hgpi3R7se?37;bZw7<%1`I7>i z)kf>A^Tq1IE&j#Pg#`d(d1yP((j{2Vvxjj?&ZKd>#)*b%cQh{J{D6&4s<_*O%ZMSX z(Ikyw1x#=6!|7yT16jm-j13r|9}JJ`U&eKJ-J~OuVBxH;Y2%e2mvJ7NkKANx?QqAt z7!fVjzw8nHmUiQlR9=aHIp7=@nl`KJoP$gDJ`=)~s8p513-R;q6QjNJgs#U3Y9x_q zf;`EG1CmB**G2-ANYk&&Qj}KG)cUA ziaVGoT=7J%9eMA-Z?a8{&C8h{C8e7#;rtEgQ?=Or3$8a8Q5nt*S%#S2M7ovhlrOs| zaRu)I4F8R^^zJ1eCbh6%R;a+@$N*4ySado0zBcU~aBfe()zr2qmPz5?w<$9&_e;;0 zwE5Z>GsR}6yAFhUDbj+!2b9??1pBU;mBf&9CX+)PYeVUKFg%U8Fr<=r61O#F?zs4f z75Efm3j5U(y5tr20{K{805Zrny8V8eNo`-Bm!>B{_LE013~FtDNcW07iBFDLfH$^f zZY~d7VX3lpG*@*n^74))Bv%-l=Z&Qwhu7Nj*DN15?O zi%@$h?|j9lk{I&U=zQci8J0*wus3O-wY&Ru{1Rk%(9>M^zWs9~413zsvi0Pdd87+A<&qwxx}_E`M-kqP(%8;N zVG0BFYB6-?=eDclS@g3}!ixi-?IniZpTWb}cC74jziCFzn0{Llee@Qai|l&T`iA;> zye(e)i+MCy)7lx8Wug~>;SA<`w&(B2Sb?|B(6vB1)b!Z4Aj|qbN%M)nYuKyD7FXPc z4f|dY*HU8|SOQN1Eae$Aqjm?N@@um|I*ebtt#a^9tXV0j^F8;GFp%a<_g zPBe5S3JgzgQXYO6P|J7RZd$HSk}Zdrhqv3po*Kz(4)TeSDl3WldCI%)H#7fx?JqfN?qe& zt_v@drddpPT*Wy40`JBj7B(Ma4;6ove&&biMR=<@p%ka#*^!d})}DHh z1A}3YnQa^E|5t_TfsQsZVo;+)U`$R)EMK(A-uVjhz{8b-lm>%GB}GS0yGMtCsair2 zY`Dc7eG0gItmTs{=PD+etWOMB+Z-?F*i`P=Q<1#aCuHXR+ zfTq-4v{$o_9`*bldhZ~vNbJfT%-pM*y>!|sEi&oHh0&(m|ErdM<0WM&lNTJ3m8|=? zu0iw-P63m<(DhO{>%|QIrEONwSG7!OLqFu8-EJVtYo@P_EwG|E7eV);3c#X#LRCiF zB>fD|`VEipF+&Q_Ni28fVfxq<1RVmN)owD%IG|0 ztYN4XVS7n1XL_iy;k227&-f0?7>N>Gb+j15wA_{e8iLxpv23Z=(RFUHjDH9CFT; z#sB6*D+nPHlWrQ+tY>6WEl(goW29p*Ix#B|S^7N7E zxsDci2W~{UzI{|;vFGzw@lNwsv6dY1fu}|nBU3+mp#1Y8EtxJ*6AfMTPs(V=B=(d1 zm}eTmP~dcgQp5^KzMx+690xRs<+(H>M3G)4!2A&W`kYR$+y|ro@HsSVX;W-^GgT)- zimeNeV>Q}og0_!n#&Om&$J~YFHL-7J`rSJ9Wfp(qTrbCodxqh>ttbEC(`hPFgH|u# zdj#x_x7Tm|&SbagqTtf!8fzOjF1a8r@43(}7omM#(=z98OY93FpB{rque77hU!I|| zhvU;&s}9X`C5>m@=~vvQvRlL`T{Uw3AO+v-tOEj9X(qRS#SDV^;`Wd_@x)#HakSDK z!k57@qkV9&WMIM=y;^1H8z16T<7*qE;}HbmL5^Kl)+$|+f8bO-pjg?Y4Im2#^D%$F zIB#;)4Ef-RAGBSZFi3csGh1)y+Jz~J7Cd&>A5qiw+-J+o->JJ zv8tQ0x|G1wNl$;A?~tN0+46qt4U?KdC?#(O^o#K#>|)a?)dNiPti7w z)LhK5QLVPbbO(I6a?L-HOC<@e?ROf!B(5g`nm+MMa-`+46%KHp+;I3s75)*;xif(? zNzz8ey;&^J&pAQHk~;9aaTl7FZjzuFvn9G{CFP-&f7hZAKLd)1VmF3_6qzVvKobQ&E|m7%Eh7f8c5NY< zKM7**sCORb5*aTfO?Z9zKYu;9qokNF%~r*kQ4et@_r%bUB`Qs0Nacsb|l+Yc2 z27(TO77pyQOVYH<#i{VWnTdVk3z&a(ygty|Md>v>`@=?Xhg2^69W~if_}p;n$dq8} zW_v6Aqsrp^;Be+A<2`_VA9My=QGV=9Ku3~=NXhep2(CzI7OvS_PWn6fC&kyI@|;n& z-d>>YZsqIVS{S8qSDxPlO@wVt{H}hLQ2K&jcW;@A_CE?jj(wQis~2hsy`%erJIcJQ zigJ9bPm%_Bj>bozYz^x^`m!LOE0Xrd?!kUf84q|2-=U9%ooYoUEMa={cH?-Spc{i5 zNxrR?1u>YkTvX!om!{?M4BX@FswrqS`XgOcSTfg}=aMC7&xgL~?b!xYcm-{|72c7f zavGi2n1TF49NB~FHv)n}rFf#fkMceSZnZd8#ielNLk!JAZ$L|BZKRBJ>swf|dzP1( z5|4j_Q`(JjDPMI$1))jOMD%HOYFru#pf*?K>#J-W<43EtpYLuRUZIH-!4N@kOFw`C(d6PUD(7H z%`y}9tE94?$wJBILnL_3(O%l%>2-RqE|1sH<|Gk=nL1nd-TUdv=Z@)@_NZ1l7*qMW zD0;dqi4|B(a;T4gE?Q`A0WbzwbBgD)9H8a!-saw<2iWp=Eq8w?t zhZCBnk|R7I&4V!swCwzRMn}7(C$+dLMQh$wUjgKub6c$4<99w^NM+J{BxD*?uc2ER zpb2kz?Q7O2Swu(HL>GysFI(8FK#n zXB}w|q2ns++dg%|;~nl3WSVSYukDh4{O<(1axy@zM}66J|4-!t3p42YQm+}=j(wSN zrnCwC1yJWa8;t`E?xOgRQSlP9Uarb_wRAoDf;nq*;~Y64%i}w0};p+)&Q?y5HwCbOGq7$J^_h0Cc}(e@lV^eH`}VUpR%C^ zPkh>q_#JTMt3`1X_K1XwczHu-i2-&T)y;DNkm=>NbbZo|>$Us>VQ0NxetC97ljpB7 z+gwIt1MYCLk36OW>uLgu@r6iiIORJ-u*Mn+F^okO^<)8(3sVR(VD1W93kCv^C0F;g z+(w`>S2OpEnPv&(Z|d`S1goOBOEG##SwFv4NMYBcGtJQpZIWT8=wr6HKpGY~)JsS_ zMz6^qQmr^UPXS6p`g?l8NM>a-#6>En>4PH)Z`QX{wng6atVv}zqmaRmt1!*+5*oi~jqftL$T@IjzDWJ`2#L{o6j_^RcI zNjSi^8~*`xdm$<4w%PkuXQtcv*JR$o3uvn^E87q+{nLO7p%&y0DA6N&muQIe%DMQO zH2aBrB|mcO9L_biE?0!TGU-A{G#|8CGol-S{V0$B-opM40X9OrP`BP5=3Pir&d9fOpX>+m3|4jhjQOWiBNr>Yo2sA z)gYO^CQn{6v2s^uaQpC~+-{=V-L!z={8YlgCVsbVh`3j}1J*na4ysz^o((#0reJDj z$N9kiGd#Z0tMM&VyP&NqU#PuPYqRZM641^cAmOl?n52 z!{yv0=to%b?JO|3msKZ-0q z;qwX(=8RS4YZLGKmpV9eGla_G##qDy(j9igrExJ)oCB@12j|L~_HSC16_2D&<@4~v zsnjOs11upe1NS4RBkaHw8+wQ}JSHFhwpLIUI!*e;M zW+3WsE0Q@b!8CZ~N7z$&>yty*JqYDl%-irO7t1DvvDnRV>2V+lpZ~*Z;+Ce3DVd?x zZhw+BXhscjAG7wHd(uzBvCyZr08oav8-VUbP3WX!$)?@w3>#|5mA9Mi%z!) zC9zo%vrowP5cA(WjO2hA569{1iVQuUM()}JIV`Ah`e|4HWjCOUQmsGm_MROC!H?ZD z{7Esb2zw4i)3}l}fF<-}pK|j=JrNlEa#h5IMBav-u4%H4uhtc1<_1nt)}S(*_c!!roQMZFa_78cO`rqL{j6aj)YU zPx_1g=SgRGBuSU)?QP!WfTZiwJtN6sZK%B81}ca^`<6-M#}i|u&}ATqB*o~rURb8JZ3+5pWJ z1veml;3@Rqs7(m@7Zyh}npA<&-)b24+G+ktOj>L$bF8qAH@SPR>3uTz!h&`f^6xil z0E6?ZQTo`)N|k~QsM1rBD2cG1}sXtn`pLGKjmxJ`7H%k zM0~tUVXeY>)9!GIJ$XKe@T13nLL*XIG8YdLXz23IZO5=Ws56iV^vR?m&q?j$kYB-a zPvFvYR$IBqN`$4{oV_(7H&^OuwjlQ&aGI#D3Ex=zM?oe4%4CaYGy@ zr)n*VmmCc_2B=SG4SFJrIu~rkOBPBNc>t-Sg1}1@z{GB)8p6HfKJE<=o<26iB&mrR zINl7=*PQK~ut}nF?&YaUtMLM^}4vt2tB`3 zLR^H;i_{MHi;U(_RMwH|r9xXtZaTEE#Hvr*+$D4aS zZ!B>;)l?$C#zqvsqt57PJD1v@3r?6~PrtCt^7=i)n!Ve7G3GtK8l)CLe3v-LnPF{n zUWetl(&|IO_vGajaJ49w2!4z8WQ(dEo~!N0^XNY=W}+CQbT8?4ROOP*ev!)^G5r(h94W4s+{M3~)IY{3)2^F80Jx-8fMYniV2yqWqV#M*s`DLY=R3I6N zblG$w#8h?#7;QbT`e))?*!@#7_7_Qb(~Q$MuZ)#GBN2R5Mgs7+@Le~M2)LrO4Z)EN zu9*9NSv~#3_$@9((@jZyNp@@9>YMJ-y}&Gs)czlW&Pt5gw`bXS=!XEJ(#(Cin7(A3 zTCvywBVh_exuyL^xIO=~#d+d+y`b^VEYx#;!v=!KZMY--ASGHXf4&+|oXVZS&Ynel zVk}}J3ryQqgTYaP%|z|08Su;-1^4^T+G^j9E*9L=$Z%J>vv9}CcAYhD-T|{B`;%c9y*joBSS*ozZ3y1oIV6H1B!lm zpFmJFcOz6}MdRXFD{r>`N8NRI6}R;BH5og>$rz1myQ-_wg%)ymwao)XOSI=T0mWvP z)vZTDu)Gm4I$-8vpprV0uFS?>4-U-VxT=BSTKdw(FiW!iKmJ(t4Y6Qz zfn7)2oAtSa5kpNUD@ff>lri#9Tq5RADT#%8)dWTsR2>WbOUtCfkQxG_BWU3d)CZ}GKihzxjSw}TyAw8X1`ad z;(jDqRQ}#W#=SK3{XPA`6r`qMtOKB07wR3;R=s1-rPFv_P1@q98i$jIiA}pXoJLB! z5ay#Tfh!>*TUSRHz^bNDn;Rpd<=}V_ps3!3o}@_m-@j9=$vs@b8kJC0N#@uAs5aYQ z!h^UW5*^3OXqCDLvt=*Tscq{p{5#rmXk%M9eeZ#5Ly+ssetbfNvl>-Zgv1iVa5D3( zN1Y#=5ovXo9l)kF@?pxs(Rh)mz$!&H-I*_+8)IoUNfrF30Mn4y-hrSr<@<;r3usykc_3obnXmS&Aw?DDc5Q{K+;`eLMO%Tvi{wJU*)P2i5HSOjLlN8HXLd8FXEJF#^SsoV6{g4xz*8?TG?;(5$rlf?G%Q9zaZV@L7uU%S?Qxo1Ug|tvj_4^08Hgs&Wzbsw)Z$W6_ ziT-BHzbG$?-}1&Rvep2gWfXmrOn^dJJZK02x1i#i-yHwX9UBjHt!M5QFaP}kU}G83 zLFW^x)GrGc97f&Fl?(zx#GG@11x0|=aA76qw1TX@LG+dh2%W!tX44XwA@OZ@Q%XJU3vp!O~in(X~8dqfIuNJ(z89v&vIeBp`I%}~X{g%`-iLo{5? zufGF`*}p%cl=vn$VxBu}g0x(-qmS@j+N)JU?h5|8=(XGSc0WxZY2l#FwddR(UV-zZ z*4~+IQ^$RHs%XcjDF0!+(kDCIk9Ji+%crV3s7JBvy(F{o_-Y~o4&yC$89r4^U@XYW zS4dX!BbWDo+r@Q-6EF3TA=U4h3$=)B19x?&(6qcZLKe?p#jq_Bw9xe@gTj(&yegGjUhZhtFOv@g_u^!jfX%GtA5l1pi3w}&q zBBmVdU(JFKw@xa<6ROISV6qMJ>4orx{}!@;pN*AuDD0qq_M zJK;}*C9)TL7*nV0BmlP9EFO9Faj*=qw7$65v4x64)cq!Z_?u=(v2UVw9Sb7{9!CAT zb-;**KIp1O$az&|m)2Q;kY(UIg03oW^n@K|QZr5h-7P}Iz0p>Td0q&z{G7A5evdjK zY~`))agmYLblUNiJ9$X{`ClIcEbkSe25q!MVOE}u@fU5uj6-yIT4 z#M{yN-=0RY|8Qt9TjZPg0_b78U_vO{V(0Aw<7JB?wV>vUNMMY$*%9>c04mc2GFa}4GM16r4& z0$=GGCuK2|hH9?^P|R@?-w@Ua&V|nZXk3l=zmM99KfEOU6^#obQ@~r8Xrd{wqeL(Y zxh^U@%=n2_d`8rc9U9OBv#O*e#aS1)tof%}pH7@*P3707q|@n+%VOKs`ziRms!c?U zod{CNo3g6hI)Eyj>Q;RIw#0|PezEA|?)sGNNTNv_>agj-MSOW6y-^gc_XvR)LKXp@ z%s=iAWOR%7@zGY|0XgNZcTi@`k_Hla|^Yi!v9cm|58K4Jna(4ps zkSfJ05mHRMPi3%bva02zDW+oN85Sym9`Y3l3U1Qqcq(AYh(T+821 z)j{rwK`^ONi+pV-_Xf8+0{lq~O~0^Zx6Fe@AC2Y9KZeAGYFD;7ER$C4>Y!Hm=&E9a zU{i5gagFhvnrvZ5Vmku*Ur459xvIf%6Yt;gDeedNfBblB;kn=6(>@Or^DKcQs?N@HAc`$_j7_ zw`Z=|mzR=elTQTmr~Z3b&`>Bp%P;$jzyCSyPa>NA(;zF&X<~aO9!Nqv(95*kF35U) z4p|Jz`~LoAnXR*@@x7glY)o3gHofaI4Ib=iObH3y4?WeP6oTB&CrFL$m%`bDHkGLgxeK$!bz+j@oYd5<4$}Xh!T_9qYy;&Xz2FWDb1#h<@ z^(42cB%G3~di;^T3*v~2v5r69PP(jg;tmyWcU)Fb&%32|2%E-6q~@TnX~1>01ov#& zwSsZvtW1*c+I9*@Yc8H~J&{zQa-nz)-q~Z3sTIhs!XlXB>P71Y;Y5`z+ z1c3TyvstWAoAENl!FQKned=1~0mpM-Cp!K2_pKi*hdX8E zrE-~fpqZks?nCou3p_Sp233><>z90(BkA#Th+;-V$l)P7hjyH2g#hunr(J6CuRF&B z|0PKR5M0u#2X6(tYyNG1zE;Wso2yYZ8$CoHU&^L zdoXJs!SG>WybNwLdyap;zdm)$g*q+t=D2LiM*K_}c>@*gK98*H857p-=Gq07>jqM$ zvYrTLEhUqyf+e--nzFCdGesh{6ODZUrYx^_nh=lGEK=Xwe>wbOu`8(L%nznp;J5p{ zi4L;5X#UqUSp1BV{`C`;>a8Nrcwf*U~@kgav$%LWyb!o?AigJ_=~)4)@;L|zyG_tdKZB> z{)-wXQ7#I3{ti$spUei|i|5_bC)eU-WqhcNkNA&;M}a9X#;kZdiHdIjOZF$KRq8eE z5kfe$P5FF#*cR?F>+JfX5oV%N*>e7boo7%=fs?uG$0-m!*{jL3PHARvl%HJcnTngw85;6i^En9(h&ZFmYPUZfsM(X8Z$3!h% zra}FRASrX81m==F6;!ZG^=%QK?-0Ir2pjDRp#IU>@AB|#gR5cydHMLfnhyp#$eWm_ zi*?6)kioAY_qt>bZ7v<1z&k+or%ZKyMrn3_wXJtq(agJPfC1+LwAgI@^ubwCh_*jV ztLxrBHQMmuW?}}{=R|g6NhMojyqO&^CT7KUHW&wyH_quQzm?lxK3)Pm3N8xkn5wC@ z5}>Kj`97`g@etJHGo$gCi1r1L{xfxUD*ad!Vj|coNmWV?5$h2aV$8AiLzPHI3-C=x zn5FJeXbPoXjLB#sj;`M(leBZlei_tw+`epB*>O*8yJUiU^YvZ1iJpk_&8qmX>U@l% zE%G$+CB)~ukq09VNS}XmwQ;IxZi4U$pdf0KbdpR&O^vc7I$F@XR`m>T9fMORS_^y^ zYU2417iJ7U2L>1Xm@6|j=4swyI=-~&8xg;u6ZZaNVF9C2PE!jG+Z1)ZH~B7Y^sHPW z58iYs4~Q9+w#8N2ZyeeXr5_O?YuoNKbZK3M*dX8Z(}xvmq*MF+ zVG9wq`ycMxSTu7$Hfg&86Nos}(?GF4mP1h|FHq1L3xuab#IN*eMKY2!KJ;0@!*3QZa^X0{i zU1C-wUfm8E!1xpf-egZnvm{$vZ!%gy0gN@)meS0#%DXMk{vNK$rZ$?tWzcl>j4x*{ z{~v8%9Ti8L?wJr0AUFgI?gWCn2X}XO2oNAhL9 zWaY#YWh*Z!aYJ{vmW@ljtzhh!*$qkosS!8SZZ8i4REk)DUO0HP>f84&^VwLerM^Fm z&y{B*Y7(BLp<3+tE(_VN9O%MF`KfQ~q--=3CpEIhNu!DRWxT3ImswZR*lnGLuSUwY z3(tQKZtP@1@W%yOnua1Cl_F%OcpS50I{D2;-cD}{Lj?)5J9nB}+fO(`tj@0;yNdn{ zIOpLZf>uY~Dv3e60*<4SsQUvJP%qN#>BTzxRJ%pLIGSiNm=-Y75x~G33Hr`E16%~3 z<4*nC(ZwkrM~Hptaf;2t5a2vRXO_fmxb*fypc=wiofZ9e)O9vylq~vd z?cVi}F~8-9jJL6V^bSlqN8Yi$jz_SLhBk-h8zz3a2jV=@MubiO$U7iU+u}S8NwGP# zPlNV!6{o4(($cG5a4L`P<0Ozd8}B^ESRru#klTinu|u(r$DGM{bCwgOLAzOa`8ZO) zDii%RmKW5unnu#_WdA_yns_@Cv=eY5Zm7G=zRW%@)}lsN@t0+PQyMP96I_tXB(;K8 z_U4}vQ9i7X|EW!J88?lvGfjR1R>TB=6CFaOSM6TW-af$qSS1*q7~YX(Mp*pXoBh?l zFR<)&o~%=|!>fW}Ch{>s`Uh&Xb5Jf?)RN>@e1pi6zpyeXXi6np253FVyZ(@pDpwu^ z&$#$a{KpIK&M=3JCoFmg}mB9MCV2Z3mq(PT|nbcC@t2jC|L4m$*lys|&e&+H*k zP}|>Mo5`k~N*8{lrXT_$JEZ|8<~zMsoABdYhnxykXiA2_7z|gzgU0Fb;C8*n>B_*Z z;WE^L#>sD?k;+NoVB-*kAG*aQvOFexJuXXdNN6UXfiN>J6xC4-@X)OT0bvVXAfwCJ z9QG}8kkC299&Q4$a~`uq4wQE3bJx#X0{ne^K#RV~xtnZ~FA$NYFh-qCu)9j`UJDSb zYOcJ>#pq7&oryO$6O~RQ(dJV>0!Be<^53qOe2N7svRkT9Ai#)en78VDu?=B>J^K#D ztj``wKqB`$90JJu02h*&=r_j4F(>h}H^~Ud%cPQgxOXQ@(ECqb)Ew_{7VndY2Xq)_{F;Wt!1I@e0~Hji}5mX!bq3kx6eDUl^7}iO(B}nI)F7Eaz!N% zZ`M0xXwg?wtTl%Bhh%mcsaWb0@fxa(v=uGC@O{Ai(@D7277Kx*K%$Qa@xE2gX&^OV z#N`$&X4vN$p?Bcop4tX9l%p3uYd2P#tzKdwA6z}lngC-6_Zn2kGoTwS)E=j>)apO| z)_ea+;7ti>PyR zFZBfVOY2mb7O4r9wQC>b4dVRdE|(_Z8+p!i#ZZZcjE%DPRm%gMk5w%Ao;G`zQI^Xi zjk;o$a*%Fp7`#-cAa_XK*Da;{_;B^y!(e1kSRLv4a1{;XQ4nqN_&zXhGDy;uyOkK(zVun(b{O zun+2j3oQkvx#w?2a*g(mUH0W!J2|%^+|mJOmP^;SFy0N~pc`x0Wh14aup=?cN+8(? z!`ud2r8^NiIw4MS7~7K8NvQZ@6J}w@=Snb}E|dN>(c#6EJI^}LgvvK zG|UfcWe(Ca+%#@-2j1zP7#W(Y@VUJ$Ve=iQrGWTZ7w5M#IJxKU=W{f>ng@ z+l<&Htzh;&qJ;fw8Ww4n(0 zjJ1^iy}lh$wJ=h2B*}H_^J~ZqW8IkO@tmDtY)a4Fd|u2E^O$ z7Gc`qEdZ_ZWi~2nV-UZ;Sh|zOQd5EbMhk07@i#EA6q&n{IJeCGOda-lKviH!sXvvL z7FJsc3Z+w81dw)Axj-vAnw5sjh0@OT1LA?r69Bas+#f~bZvyYTlStYqsh|%B_KUYU zi~K@n_5lDp^mm*q+?7p7Hr5a7&W8kSRBQ^|fZV57L5(K*L_-zvixk*FeJG`E%l(L* z;6wisci`^~71hKy-m2fPM!Mn^W!?4yv%tP$FfF^F3NacfhaF zHD_U>*RM`)m%b+epeKLE4-lZavp--tj2~DwWc3i?zhGReom52SUs(w_Q%dJkvmE_O z*o*yuFW{!(`J;J<3f@&nrzOU52FR+b#Zy?!U|Hz@IjF{YtA>bDBj?|bIZM#Ni2J1& zEg~lM^UCrda%Rrwjp*4B`47f1Jq>VU@7=jTKywWGej&~IFv7S{NPDd~+p;4^-nY?O zcJdjgQLlwIrL`$jD9cNfZc&W58Q^X`#$oNWyrJloAox9xf(;|~IUoNvr;@5OzH;aW zCvRDQ8x(7Pnc0kti zV~zPM7X<|%iK8Gf{j*+0nk*Hgom9K+&c5a`$o*u!Cjo2Mf|CuO=FjH#_JM4da^yj;|~90}(#Z)$ha#!kG=YM<-zkXvm_=U4AXB{X9?SEYP(U zfnC!i_W6xm8C2sZ*N}5AXM^ZZ1-dsN1kmf46XkS4mmUkoP-3DBG&jq3sapuQTKS6NTz8+N;05Bx6Ks57JAtRJx(p12)8k)`_oLV@?wB z15?6EW+oEXem6)UTMYok*EifLr;K+-Mne|Bg9sq%daW+LDe?`tQlJTXnf$|LIptJM z95a)D`u@~EsTQgFA2k#IdQbiJt^Z`*?)3V(yURkUK*t@@aX%vS%y-0NuDNn4qjY|^ zfYDanY1s+r_ie|l$UsN~3#$qoJOJlb3cl&}+Ql5aAr%m36Q_-n_bSe1;?wI*_(yBf zxDS??z+u%$p9%bn9nL@5*#G4{ypipIPwW;jI*kWpwfZyVtKj`tA`@i<*qcdere4Ke z&)-aKf%O8D2Rh&bKf-_)zX^jiDE~JA@DI+X`3D2kO#Kq_&$g0(9o+rnCxPEe!r$6#9jv@g5AM!E)R7M{vtSj~U4bP;OJ*8w!@<>KoDrJm-C?Dt(E#NSH0TRFl zl+@;Ez~S6YSU3!vZaM73&6ew_jq=xvZ@nUIzauZ+Ham|7$V-x8C4H4?J(2pve|3|E-VxU*9bHN8KJ6MEIA2 z{vW>NO$NFJ-iyI%!~fwI{pI82z#W3z(SiEkuhaiSEeB-E0`;HiX`#dX|Mz<_fC3Bo z{rfM}@&8UO{fiR+phyke4T>$*Wk71d|M0v1_m6)-3=n?_dO~>i?CFWpQLXjwp)3am zFPCt7W=UTBQo@u_QN{S7r^2H0T!fFRPy(U{k>i6eY-*Bwk0SquwOzDI`H9Xnf0uhq z-%`-+=wM~p>#7xooVnK5#QAe9YdMQ|M_?!Oa&nFGX^`rX*H!+WA(+SYz~SbJG@fCn z=QJFfvK^5HF6!C8iW- z^k3hLWSBg+vqtMU>rp@Rd%E&lk76GU=N+T{ ze?B7t*e`+l$f9d|bCvk7uHEk>Nn-$OHSOpuV#O~rY*gMH&0^RV$oY>;LI7VU_)xYx zZ~H+WCkWvJvq*M@)Hz$}|NY$2{wXAW72kJ9wEuBxK0qjrAMZ#bN&W6+F7iH(Q>+8F z$MUm}RFl_wO)HpfPnS(UBPYjr43<<5T=zMJ2L7wa_rA0Pp%~qr5<{kZRW?1M@wDjJ zP*eXkYyy%1N-1B=CO4SM1N^)5>Y-DsYoR94aTw_%?d8!!|6w(qGT9T-Ri^#&Wz_Dp zm+`P5>f1Rz0c~hN+L?FYUrrN`3g+C|3c~uaQkcdStYO2|@piAcc&Oa_biitT(E%M& z=L7WoU!2DT`!4v5{&TV7xxwV|zP75e8oPr^GPiJ4_5-wQ$kO>v4k?C_?@hAJ-R*uQ z&Q4Y;r@?JUbZA(+@Y6k|YwIoK`YOjyqVCg9#C}B+P4l2q$JdD$W3Zwq&s9ePP?c$Y z1p6otCCe$P-|2Ur>qEEorLvvKKTboRZ^U1F-%QW0pFJ3X^Jn$Fk{f_z73}ZZN%TRm zXRQduS-xNCG~eu}PO5r7Nj=@lH3QPe_|@IFH-rZ5Z7Q#+rut)(9=Pz(K%z_cHB!_6=fKIp7n~pS7Rhq87dz^K{%r97|EAd~mvHh5VBGeyuZM=ABZhE#`f-d{vRkwa z<9JB?O}}0JG6kE}W&Jml(yOP(yGr-FL${uQ7edk8qaXQ+h?N$ zLnx(U!rPvNw)IY8?{j=F8?O&)9@clq+r$mO?>3%Kc&pN+@~`EfNpg~zm^ODB-wiS_ zUomRQHK@pSv_0PHm7@bP!-sN?sQ~?>vYKjb&pp_i%-=*ww#!4vc=G+m{bLS+z9f7u z{YGKZO!uw6(P=*n`_95#s*?ONPQ%RlVmz?iWolHK=4<2#>_@*8jE=upT3qoVeHYZ9 znW|qF-X8MWK(eOc$nRpBTUC*WoV>v@0gp|Nzg*@C%lVns zKK^u)4S+82^yW_ZNwoD&D0Smeir1G36X@D7LpB}oyOsBMa$>=($S+>)iXJ~UYrZwQ z@t`5&2JS+K^^SsyKCjUPf{l+rm{Ysntl}#;~nA7P;!_E;ub_s0(u55^ca+f3{d}bhJ%kk27p?Qh#=b%sDoTeA( z_klDW@e?mtq#nxHR3*UUNJMvH>lYANicTfd3d$;3g`d}OeaA091fTvTRiBWp^92G0 z{5jdfAg!Hvjimyy4zW{P%bgIe(O~NX)fVKYsF}$xK&~jumTA>VxOs={DOlh#)yP+) zx*Bf6(UQ$Gkqm#Y89yhkgE;P#x}Su+9wPrJyp#Dfsgqx)u80dF9~BXpH_KdSP0f43 zVs}MWA9TP`zbI?8i~;<$yA%3ti4c-sG<$|N(n zH{nWX_Ku)fbnir=;Hv$u3h`sc^g^sU-r?fUs1f5#M?$?{SNiTIt{0?thI>G&6e#ec z`_|-awJa~E`IB|}aryCtUa>55+JWFYaj*kt>x)&{hvzO|u2bMWV%JvA>o)-+h%zWw zz=i6>chUS#X{bx3L+HjJ_+e7`w3R9GDgcJmo6cyF1Zz6ve?~GUkwBZgLGg5XXn)4F z*s`HdpN+j(-(K$H(`wu?B$|PcqZ|x*q00JnACt8{J-dqQK}ArZw{y)rm1^iA_TI2{ zl+U`~SA=W)hdoFIoZED&6hyL(3tv6E>MbQe3wtU2p-D5k8z+SM>=T?gMCU9eGFCV` zn`c+_3a?E~{kOSX z5a(%}5bEzG^)SH~3g3%i((E$80Y9MS14%Qsn0(t*Zp z*~F$LyGuSlt_6Qk2-e^Wmbu9rcvA?$B_Z|<_FlU?qVdDI5QWHq3ogD*Ur&9(zRP;u z5zNPJel76#l{u~zQCV~u!YS8HtxA?`7=e{{)La0@=eN}M1cfXL24LoH(8-Gumvfi* z?hHtS3&i$4_6onr%^E_dB4ojLQl7IbKlkmb>>n(v949r$zx|}*ow=al71e1oUQ=bg z`A+Z#&8p2j;!a(#(P_(N^k!M7$|>62^je$NOBY{=CwhQ5j)v>g5(V(=ptOga+`4$g z0=aED>mkI`DQefmu|Vb>c^_ER0KKIyi|XVw#GAyG+UaGqE5lAyvXwp9fm z`o%rW6*@&zary(uM_F&&aosho&~vX`skTnOxIOGSs?X+DN@3QLJl`W`B`KQyv*p7V zFfa5c4@<9z-z>K`;14gYfOIy$xn<3Kt_b+{4rkQQ>ALlyl}n7g)p&vZanjSkO?DUmtoOZQYXxES*02_Sf`2XP)<*m^7S zrDjkTOYgO9W!pQ5&`KX)>#VE6p5FaQxZnYsV=&ob~&&XTCDMX=-v}+GG;oY zM%XNME@U4BL)7Qsi)iyknfKx^$GJ3*%aWP3bf?O6Ml>!F6Dk#EtV+>$bn9*Cp|f7y zhfW`Ng8F~f+j~i#Lj_qrFFxE|V4x?z!)eIOfs31tPIMyR0kdNxPJf0%x8#vF!vLO@ z%*~kjJ}fb6rTZXumNnclG3P7O@lg$R9Ehx*J0oQ#_;B1!)ztRzB ztyQM1xkN_!ys2o_qOfxPN_f+C-ctw%?Sn{UZ9VxZl);?i6QPw^5BNKxZS|bOwe1c}ifG8_2|{ zeoV2^IR!XI6 z2GF3^c`l7I8rEqZxZi;4hemJe7)g>z;7tWlgQVyD`n4UkJqs^n(?-3`RlbG0n3>Xk3L~I!0`bT z6?pGCcw)rABcOqiD_X&V1OoPfYckJa=3f`w4z}?R#w8d=y6*mKpa86E=2W7~a?FQs zi1|QT{`xd6sNa%{C(a*UHeCF`%$1Zd!GZ#N)<0RCuY%EXI%sR!+5HZxPya?; zCA#SPw>Zs|$oJP0Nd0tEi&lXAGO3eM7vw^b+#rHd)Lu>P{DJ_StAxWKg`GbUs2t{a zJ6tpNMWb|93aMu@(!GTB{^dWTQ^eKfd#0w*jyLU4#kFs3$NgNU6>z62=d`K2= zQr0bZt{2-39Ly&Y;k;d&#G|(_D;LQ{yq8w zeJiY(A`h*1{lzQ6yjN=EdjTZ2TiBcd-9NQ9#vGmtWl2#V{E@xX*FWW*>ZWCYSDr0*TeZ0^ z`eoNO*Dt;nL=Xq5biTq?Cb{$W@OkZmFb*Q<{F}(=-grxmLs;aWt<}TUgEl-z9-2zs z!|>h%2GoUtix|JcfwwY+i`#8}M@RJ~JPq*&qV~eDc zsSs2$rSJx8UKp6T+3x+thmoW+MK}`unHY zb6J9zFz>jXl!^ti%jWvon~q&Y0nueW2N)*%_InkH&+O=0Obn4ro+YqPi& z@;dyoob(Gl>2^oIqgs#E9XgnvnITST%B!%Xfu}EIU1`tbJ_OGQ$9Cpvr_uCt8`HWs zsY$P2yrfLaZFD%rULz({XztDtCB4Vhud?|v9GHy;Zc3V? zg>p)Sh282%wCd@MS$qVlp-R&|nAQe=MgJaNRRTOjw{ezkWrVQ|xzhN|n#WY8ve8Bo zRSEEVBT|h#rgiB^^3dSXFnHrI7{O9kiuuy)*-a9+y;`4gS56I^ zU1X@BE0Z>&mRlkfvl+ixssk3nhdW_B1ax1RX0-F;Vi1BxEk~w*!0C^?hb&urezM08 zCL)Q^%2%^SeqZWWJTokvmveZmOE%138}_WtYtp*6eWHs-b8!)-D_FB&b<19Y>m~QO zLv^LF?K$JnzRjZ_bbl^eG?+ZNM`KzC_#Wec_Qexr;*rKnN@N02CqT0Xl=g|CX!b}e zA7M=}k{!0}lS^U>#s1%RCnpt$J%Vnl-ziK*Mp-Qn#CHV!tq9=fYKmgWaIE*LHB2|b zCnYv?#jnoy-&G`yFXc)BZUXhY!k^Q`4v5)pKI+3VA+grHLaV-B_0PVG7c*ro4oI7z z(+h~4rZKHjlWkFS@Uvvn&zYAWJ4GYr@ENVHEGKDgITYG&%gAue#t$54*y*W zJoV!fJPtl6H+sq|NsL(VMtLisUuIA*GoXnP@t$#FKoKk#qJTkNTBKT0=J!-t7|odZ zihLyfBB|jP%5XtF%XmnMs9+^Ws8%TacrDhBbp4f+kf@Prv@35`L(3q*fL2A6n25he z4rp(p*j!^%S78_Cn+u=c1JaJ1Zae6la32u?t$Eq67mMchjtr;$#|O^*-5bldJiHhY zXw@!rPo0kag))=flYLo@x#)n2RdhsujoYeJzTv|+MdI++*PnmNvO!05CVDSkyc;6i zp36?JrY=@a;Qt(|t@KLkm*=bg3jSJK>eHPz_4|_@(n$R0=@ctn(so6|8H0st?>5k# zY?GA3K6<(>>&V|4RCe7Y^*OI{e|l(%^e*&M z>Q5|I${>46K4*s_Dl&Z2 zlSplpD^>25zccD3N5B8{CHDAKEnk+%pz(bxF8^ey-fmfcv)?iPSp=!4V7XZ5)yI*N z9#)v}vM<}BN&#&+wHzgz)^3xh%l>=&<~>ixTkGQQyswFxpbn@m-~uT$MU5AAlS%n{DCXq`7tTw$1;XI^wP3SnLh*81m->u^KE27f9;2^6MvOeo}ngeKxvs)hB?{rod=9O?C3t0&BLfLQBl)1WPM-ZqG|Sef7-vMB*Bz#RK9 z3SBH{Ir{*8ZRELyTJ?GFEofKr_k;)bvf@`hrRJ*+A&n);g&>t@`C~p$UF6BdW*NQt z${qKL&SB`Jn1Z(wow@7vL{s(7^6-$Li3Y3oU*R3kU&p+iVW6gx5`Rr3xYi(&bkBI} z;y@U*hb!Z+-$X82!r;0%l5coeGTPE`D4*5%iyQ|kFz`syf)J%1EMd&$t$dY4;I;dB zngR^NmoTMq@dMh@%(HnpgBBX3t}4 ziHoiMvWw{)D`n75fY_O*9M;EQ2s9n#QzC|h*3TkG=r#6vWaqP(g|Wrne$ZjJn}-;j zAF=lfFsfQ#e?XG@i2u6J>!`6yrT-gFUW})iq_8o(8<5~B73ZKh0@}pgb+v{Sz6aPskg5LD^RygAHW zfvU6}W(Dk=j5f)wRm<+rGHDcoe4-A4@TZppj*r!!LMOQ#p@3;`#TS6 z2!C)kzBUk>+h8!n{MSY`(4%4C0&tgH6IjRO!LpWwe#1(XSYmr~Q3+3USyBc}$fDkU zj31wbC8NuPF%_UqVYkOd%b%yXYL%wPDD@%hdlJLGkRJf*j)%)19$m=0a`Bag`r5#R5MevQc~mHpr(5JK6Ien2Yv&@tqFciNCSkr!c-P^?!ac2;Ye2 zL9_{87>DS=Ljd(Ke<2@Fip@%yiaPtR#t&D4=3l(U2U7bJUrSM`8`>n=78u0glVi_V z-_`wO-TdG)Vn?Xn3)75U^pFL6na(|P6n3NtV~b07^J%UZ;}J_z zw0H5Lq;2ii)*43!HVMPoCK#fM5C{|D>gC7fv*xLga3Tyc%#yjd%EE&F-gUm2@K9O4 z0p^%JX#mVPm~1=kv9w>3jBI)iO;S$n=VmV%hexN&t1w*F9ZaF@D8ZsnSwjM)ZVxd= zuByo|Icg4%U)^Z`D9o?HQc+UO#ByXr7#liLo6MVopQ(f72r zKhb{pIyhOz=rC(2Mhy46pIorKy8<;M2a~W~pfpmeQde<_){i^O6?XGMJ{^;lqVaHs zP@)Usy1k1p<8r5swGxMshZYa*RQ!@sj>Ft~4=JhhJ+#T+wW}h*^tWhYdcgViX9^NU zymr{~JpK)>QcfkbJMCe;ebz>pK$I9Uij0k7S?54grP#7oRL_8C;K`U3p^_uV8)B5{ z=gZY|-*()2knM(=4|QmJI{Hf6^oD3Ww$iqD121>8ukWn1vMt5X=`m@{LD3=@A$CDz zBA!yJ5FtLcXAA&+fz!`$IuNV1EuZeK_58gt$K|}$U2^?JX9zO2dFEQZNVAsjwNWsc z*AefIbR~EC8#Cg>7w#`Z$tkdokPTJhm{LDEIIHF{;rkiqR=L5X)_0AhlI!C#d6^@c z+C^|`mBNEPD!kkF&$N$&G|;QhsS~XIfEY-3&sRO0C#B47DJHt;gNRA<;)*whqlx^f zJ57mij~gVwT`dpPeJEIm1$^XB!Gc1d7L!kjzq3=w7%_4OFU=7_B0Jw)NGzMiYRspua?i|$Gg_0zKe8bByA=pD zI)4F<6OBVl$-Kq*l5{0{O#!p>2Llr`)!lCgdz+b!EA24^6FziigQrC2BR7jTjAd>W z37Bri{?WX@Xmh;jFto545jOX}!bzC{8%nqwO>uqmoC;Z$ zDgLtgHI80dl~o9&H(;MgJw?qg6bnGTGkKql)sL&;R4)^?qKk|QUzDsC;b{w^JuJ~S zw}bW;1Fn0nzGStLV3Ckcp)G0rkS_K0uEZb>vc6(#2qx5-?QJgB!dBZ7qc z!^JIPrKm)Mv*uOf9OT-?z54YUO#}KFD7`$WWtBV60<82Hek`Mq0ui!$@zioDbZn7Y zgmt#M+UPJ3AZsQ$Tk%U|j-Sx_Qh`k5k7>+aUVIW`0Sd^Zn1yVFx2jO!N5gPv$Yz)_ zLQz^wEnX;#VEif-39eM(L9zJv*Yp{)*LfH6IjmYA0%C$!Wu#c-LzTJBw)I&pYzjw# zgeRo?Q4W>-Ukz1C;rx-yip-@x;%|tA*WUen(k{5o*O`Qqih=;E8MEuf$6w;B zsbWQdYY#9-FQJ1RRNvFu6TWv*tbF;Yb43{97(Cr7^rYjeD8>xwaf=;hXaG4ao0! zRR1SMzR|DQb-OP7jievelrs6~;c?+t?-Qb@zB9Ss2Nd6KGg6G9_M4H#hh%*U<`W+k zFXSr(FiGUiya7pY7g4@<&s#J{mx;szi}RUq-!ivV5i}LTUJRBE zBNQFotJNi%pb#A`PbqMhgFo+{R02L4h5gzPaxcEYFCnq*CbPWDaVY$ zr$fw8ry1w5izzR1n9yF-yEL0#)-)Zrh1$T-E)lZTHEEjuT@6WxuGa<8EJ$`uLf-x=xw% z5BrDnnz1dfa|Rq0IA@4E8^(g`uM?S}(5jq%{<-qy^SI}~R=G0n4VLqBcdd{hc9Yh@ z9>N3t;9&@sU~j_*bI0AQHBJ)41!p;e3{t^5dv;91=e4C5`w$X{f_UibWx%n&^s160 z;gt+cITGla#P_5JPu1`yJpmQ>y-PY2ozwn;9UaYv(tq`6&XEw@rJ5q2l^9h$Oxe== zot zV%uj>ARKXX7_11kM6#OBi42PiO6No~P17V5rIAhZa_OK+p#?-xzf!@{+$Q)t#gs^E zv+=kpC*agMK*g4Rg%zs5ST-qOKVBW=epX&Ty;q*0#n6(M-Y3v|#(EGj4%G?pF1Ove z99>!*ma|B`l3AbmEc3gXy6k~o!$aJl8dHsK4b2n#-rf>A)mR*P9dX8G6=La2gm9w( z9)D_X1OW7ca>Wukf0WnNbZzf23521&y3PP4i++OW{9`!cQ3}vYDWi?~hRAYe(aU={ zl^}xBU>}%|J7ZFl3I-L47s5rI&~{T)6~JOmaWw)n4Mo`VPQU#P^Us5*mmr0se_)#f zWwuqyTLl@(uvj6J(Xbl_ayQH6zR0tOn$|PqT0~^=;MCMv?ihZ6w)%Sky)v81 zr>v? zd0B>Ox7e4`KN&}Oi5H!s^MM4c0+ zn7X)u%rouj8yLjo1Y%T1_^`Fg1$IQ zr|EZmd7b2H2**O7D{{x;+bxcrm_i!M@SB1YLRjfdhl93}<2@K54Qye)AW77Gixvlv zkIBhVUtngA%x{RB)pYK1x)>$j^)^S5lKkl73u^Vf*$p@R4Qxp z%}QT2BHb4MQsn!vzZ3U(LICJ21^}NTMil__Cw`TxQ@>76>{HVod+d!q$;!kLfm{4Q z-Qg+|9tRry`gVW(P6voD*BNz<;V)3fG5k1lErwD~-%_o}gOoZIN~O^5y-5938UYm& z{B(#s-C)v zdwIzC-baGymvB;Fm!g)*3-#)}lhat8v(5AshBQibWk$A+@4mhR#?g_vF>Ha+niQQ) z>%)7A`7_EUF-kRl10-sJh{2^8)wePOF-mk2lF|tYG{oavcjvzP#s-B*^50Ygwu|oE z{Qww{82&`NIPl;_Y!X)oQ*W=wd^O*=+h^g$9FG;eJT!c$Bf^WfJSkPwvLwfp4!Jk9 zN<@q_{hW+5gVOe)=(;BU(x0YDE8bVM-pcA}35>lHGk#Y;7{5V5OG=FjOd8N)0za_i zzN!`hZV)KW%rP?Fa4o$}X2y9{V!s1crLL^#nHXAE{YgAuwEEBb6{kc`E&tr0Bw&67 zQzB+W)n+sh(DKz&QUgJSli)xt-84&%yrO5$#%$jB6oJ*e6dq9LBr;mA+hRCCt5;?V`gjNxs8ZaBh zowWq8&h_OmH?pW2`?f<(+f}-oK}p4IZojIuLsO&&QFi!TTHtUk)1}#A}-nEd0TVpc8T6d&czj_Fd2xV9FUR^*-~I`wy+3E zQH5YpA7Q(PrCV>Dgd^~vca_Z7e3Ra>z9YgS8g*Fs(P`r^8r zfxpe}ihBwQ7w~(;3b=}66rp{w95`YuEsQ`{@3Y8<^A2;|@D^NMZ4-qN zzV@%nA352}V!-QcOt1+Cq! zHaahYdD~iJE>4%P#9gLYA_L6)fn3Gje#+x!*JRJWFcNy4f`WW;cZ14VTu4`I3*{LP zyAj*QWEsOQYbHS_B9C-_=vQqo(7}=zPM@237X)~?|JF2Wdlbu(rkr{fDoNaaJa2P40(@wAzaVG+ zM&Lrw-@nf1?#xE;Rk2h=Au)67`>kZJ9>669dn5B*{Ox^GUNGeG!84qA;&OZMa7+S6 z!?}*>5T0Vkqljf&e;{h?$EUz!gAjJgMNe$BPns3Fgjy8`A!@&Dwb6$YZ5gThAD5)B zYYl~i`KC%En%&XK69g5$lTDdKB{5;!aXhUf>j}W#=`?b+&@Kukr@}jGOKwGh@%S`( zY^$jiHrsz@s)o<7>R@o@eW^Zj2*9s)Fg?Cv!e^5 zoo4*@($81#?p++}cnkG=yup*eBUnR?sF0hA;PDF_yas_dN_a;-Bs5ONz+%Kn%H|1K zc?fjAepG|0v--pr@G{r9{`lY3#uvYYBW+0ScBL^=e{&xQGJ8!TEHWEehX{fYf!;rF z2_uM**_m7fX6Ji#UDqTbRV(-Md_M@-Tne$5m9EhB`ojRX8x+S*Dyj;# z^qd>RT$naS(}!a=>|`w$FM#!>OTFGdH7peybWg)^`~H*p540NU+vwM~*$Q7^O-7ibcL9S2j8xMzq%UfR8 zl9G)QhSw2XjBiUG)Yj1ZH4R8$IA(J;D@_^7Id2itEIuFfwWAu&++LD?qCOwzBma>u z?C^E^0}e?3tH4MJVm`>&k=tuqZDtoU?U(Dpk{}Z<*E+5pWxNm6k>=wKW5yQz#{DkR zE6zg4Qgo8fpPB9B@6d>@Rn<#L$fYS^Dl(SSD>);4TJJN81(qkzTtubDGVbh25P*Jt zyL-Y83$OQ@A9j$h_%wKM#A?Mg5324Of zVK}vhWjdk4tnD_N;4>95ZXOPQxY3kca4%mJ4IN0Ye((K?FaJ7zm|?-)@vX4bTfGd! z1EAb69!&(#dkLG=HMIE^(gm1$8LYH75-+*S9&&>rEWNZz5rS91v--&VGx_;#@X*qkdT(>6zuDPH_%!{cY|H&#1u}FOnE6FZ8PP=oJX0AZQrw3p+n*4^A$e9_$gpVDr)crbX-EcOq=T) zvO3x^lwqtJKd#^z^_%%9-MBFNDwB5Y`<14tGo+%At==9<2zty2076AC5zwInkOuOz z9~s-&Us?pKb4%b3-pX(UCXzpNJ`ioJ7ZJdQEnbG1=@JL29??hQsgHS`k^H^HVw+M;D#5B+%r2wwHL<|6=MaqoNAe zzHgAy-Q6W!LwCo}4blz5&?Vj7-7qxL4FXb1cPpLJ9lqOh&a>A0kuR(c4 zqS|=>+rE%U42}|_LR7nG=@}v}WUoZ>NkbZ;F;XxKQxAFy=5pnsu+;M zB;NeYOkCSAZcD4YqdU4yW`p-DaWBT-c4=fTdV@-^#u|o=`5(!_Hv<^Hi!g+Z=DUA0 z;6)gzjE@d_JB(bB%45~@3GvLBf#4q-{R&_$>dx`IQz?aphR#l1ko2BuHX3jYx8aTa zX~rngH>{yyhozRtG75NMnXXhC{P9(L=Y7+K$>G?9tGRx5AGG#(+b>73iKH8i3WTq@ zn?$-`BmR=58oo&a_9$3%R`7)1HdIvC0sMqvx>I$^C;wgcCP#VbfB@d6W;fiG3#sVl z4K)7f7@A1!@S`REY>J%V^B2(e)I$DC8cP7>nTer_bi!NJ z_uRZ{Onzx=F~j{yU>kePbu~IXBeyn!L^?Yv^o2XW;}$E)x{deUj^EnT4zi{z`pn>! z1Jaod4->b06&!(2V-M30jMArxK0{inWYlEUbmY7vVd~{d&0}TuiKxF%G=EnWXbLCJ zJVq5%5>Bp2;R;cAn$6D#d9f1lUub=?FbYr16;o94&R#`3hC3(I{w?hS!iSHm3o;@+ zcFu8dGQrN&`*fKu76)47B8W+s@&tM9!f0w6Y3XA<>%>nE8<$NkeX*C$gKxu$xk`gn zt)7gWRvTy?v5i((Pv8^nvMt890iY`=P6W8C;`m9IcQ|{|C%M+^H+e8 zm9hk{3`v5TA$QOljY^%5m3%#&npN{)Z>$jruY(Q&6;>o8Ia<&&ZGs5J3K}M{x9~=D z_e$$aVD)QXVBK8ll|>&)@3c(t*uBl_-krrx#J8;tpFbtKIex%NmhzORIXmipOQCL*?MH!!p#@5>CrM#5o#}zi1^+AzD~j}$oi|t5##BR zz&x=y{g82!0e;)8rHv+C9*~uX%UkH3)_+IdINqq|$H4x6(K{L*$^V^$!GJKmTZ~j9hi> z26I(E)i3AV;A31)q2;c$_-Yta$Jm>$Jmtv+>SBA1c1K9Z&V7w%sgb zr=~Zf2`^O@71}c+|ou52f`- zCE{%z&nKztCLklk+>;j8Xt!V=5v2#e9o*&RGP|m5yQu*cp^)e{rbPKhE5a@DFA`Ph zsOVDQJmR8-y9*X2vdh#WzYA1@t^U*j%kCOv7KPm?uc857I>r#xjJ3GwT*G&J z$Np8H(PwzXdfnU4Dw=>L*(XQ9MK$29GjieX0_foQu;Y|(6ko6Nqz)~;V7 zV}bo;&m2feiwz2d<2=kC7daTc|2l@^9Z{E30R5$V0x0z_>jJ(_Lb0=F~ zln5ua6FvLR-;7>&STiM$@IMN13$YfT3j4teaBv&;W@G3`6XbW~dn4^WWHl4z$ohJs z)gJqg5NXsex;1~KNbMKzyQTNOyv3VE}QTV zPlE`K0ZK(hsm{UoG3rp%D0>&~;MC1a63lY%lo;EY89Jt47Y zmPOv;d$3PyA*_OEYnB`;S zUo=5ggK?a{bSO&{;Zr+~Yx`N6(Zzd8Y%YIOt3_7Eph8(1VP}42KQkfown$s4ht8OI zNhJB;SZe1tULVY1LBI3dASRN1o|0R(Wr8!=0^B)LDU6a#k{q#oHoA}ga2w>C$L5$v zY{S9!2Wk3_8l*=Q!v%>8>%>vCoWj$1w$vq0d(GX)wWg*&p@j>~kzK)VQUqdf=x~J} z6$w&@XcKE593-yoB?pDhx?D?Vlj>5hkVb4ED;-{LF|)Lc65j;Boww+8%ef0kM8Bxg5l94#D33>3)I(L zK3&N>GS`nnXZ52Z5aDhmT$P{AY{J3RA}=4*jHO5IFpuitoB+aOlr8MAIuVck=WCLK zMh1`RJB*CZkukm`kl*>)Ug|Xa53xsBn++)^b>u`KZ#p$~ zllP9cl;`6J`AF@(b;gXkkz8Vc#^krCxIyk0KI*XzFt$n(FiP~T?fDZJ^s%I-fkWBu z-tA2tAEq#hlgP5o+wnN}L<3ivrajW%iLzYxD0PC@wd+{?oV=s}U4hFsn<4((mWrh= z^g>8HAX(QbNCzb|O1WO-iyvIhT;P}6xfFspe}v8T_QrC_WlR$X*E2s0$Y;6A`MX@< zs*C!fM}yNgtxclT)CV{7>K`2r!M>Ydc&wwfgr*#{WK~|jThp({xpx{&t!t26&uTFx zh3H##^p%s%08zw5;P}#S?i0Dx_zB~vCy|r_PKf=R4Y{>O>tDG6Danu@xmTEnHdI=N zCmM?G=a;a7XBh@2edidGZ3AlcKep2 zn-Ax-8C_q&y+kx~LN6!Lrt>Q-3rAVJwN$kLHu^UL@neFp-3egClRW={ms*jO`It5o z?dQ|fczb9r*sjb-4UZayPa=lTW_evt{~hNKf%tm_w1npm5y6Z^6&Ug333x`-q_yBp z_CfZ6Y;`B5gK~$$H)z8VEoHDSlOmlA@_h;-M&zeL3A~^6@q9yh?9JO?-dB|jF=P@H%aaWKS~s$ z3MdODL4g8i^p%w5<`X%~haAYQzugqD_%c=ZMF#}_*PPLVic|RU*AK z?;BfhF8k>yK0G6E;{({$ASLh}jJS4Ik|C>!Ke$-S&&tvE3W_>#>J8l3eRW+Ady%5r z3RJ{DPfOud>Q`?TRD5~Mj)|jcgBe^wUUKoEfwR~2WK5j6;h8=48&tUC=S5u zk;1`|Pt|U=Efcc99&6K=e-iw|n;Q`Viqh_Sy1smlY8VAnh+7ILn9rEous~kSO-Ca zJk}P zxxcorgynb!b=1bim!q)Q9PuZa{pQCmrQ52yLzW&9&-`PAy89Q$wpYE2+1~?k81R=X zdq*8{8r>ppFBdK3ODPOQpP_rwlqK8m_#`%nS!qDwO6J03Y0qSLDJNN?+etCcWNy~m z94E8fIB|)$U3Y=j)Kp6pnWzfRahONvig6@DT=I0mf{?XU%Er)8*p(uN8i2OnVNk3k zF%MfUl`dz6zULi7*s?S-n4$qI{(+J?yP|4txi5ocwB@!;+Jy&`dLa&I47x|$)A9q8 z;hT+e>#%@y4as?pPsv2FGD*uB#wjnd%uVZgDaopDO*U9~`9kgqeMp#w(|a7xMt>?m zM58u~ik1CB+GvE*1i3nwN>uA@cqs@>B^Seju0Ad+kYezrSQxz-V90S9hBi&h`unO; zQIwm;ldx`AN^X3!W-K0g(@#DZ%20fHPq1ZFbVjq<@z#7(+0Yw7GDtee>@9xHY)W

Ld{T;e<+VY-STZ zg*UdtEf-LA%s8`}CW>3{jh1(K9zpBk6TMEG!vNuB5)v=?K)#>sYi8)RO2$7C+_-~4HpbrDlwY`yzb0Z?4bL!Gi z@I>fzyw58}6hCKEQt1+%fLE96xj1|Dq?|twWUQmwD_Bb#IL=8XZl;{@x~jiGjCS&! zc04Ae5Z%y5z6dolUz*1X7cu%%yr%&)}8E&S6?BJjN-6{AeJ2#RvF%5O`NR{1*X zJwQJ9a=UsKrC2^{U#ftMhw~$~WW2$Aae@u=UaX^3*HiPyUB5)9PrUR9}P4rlssqad8qp>J@Fv8bn+ zjXqH3h#Jl*d=#u$GtJzQpgCaSOUUfPNSi!A6oa z{eq{#nF$a@;=3)EJ%=?4l_mPAyrpx!F$PL4mB?`7xuZNs3*kP_F^xute1SI`_V=S| z%Q#gR3(o%1rvZi6#h3VUenFRCX?Y>myOXr!gkzX9?X%!lI%KGm^CuN<^3g+@G%Eb# zwiOY?_pyRAQBVwK5O@R~h~s)zu2IKe<% zdOadtSyG(DP-g2@^woN$r0^1o=mLvfq4%)ATTgegDQSih?A$e(Xg}zj3z%>7t1ZVz ze2Im}TR`FziWe7Kz$WezjSy@%_kfBdFH+S{zoCrMjmlPY5aUbEIu42aAlEj%*sR>j4CfC>&>4?aimhZ zz5bamA!U)tWfk-kkHj<-N3PcbQLZ<~LPbSX6j5)SXTtK@EU6ko*@t9e^M3tQp;$ec z?bJ^Ji^QCgCMR-med36iZDcp2i;{{?FMiSrc66gC5dltd4nGKY>m7m48@O4bEIQ(| z$2wNzn3aEH5yy}Bpv`{n-UjcTm%Y{CA~g$-a&w@spbAz^SX8X=4#)yB_uDUR$EO|| zxRT;x*j$_xpgq64bj|YlCzEM=PKBTB-{%zSOmG$dJNy0Q+?5K>=m;J}hQ7bhj0wPH zI=UMCWc}(t%3K^3SRjQ(Ge^s%-&sc|<8;Q!fg>!-vfFW32hGedX0B6P z8(jD-!LIvh4w*75&$a8mA2;$i0QCw=Q9qusJ)G~4S^7f*e6xald&rA$g_MxRX%WQ} zA^r)}%Zo?`l%<+KcIjq^p+U_$Vz6N(q)R-9JRvN9(*K>CHFA+IR47A0Tq-wNYzCou zakQZLK#I8_ui0XR7!9=jva7)KOZeTTDYylNohPg_a4w*Nd8VN$P_}MDKHZ+wUgiB8 z`@H`h`_ucBx&*14n}ccb(qPE!GUeExI1<*XEsq}~!8#KE-{7BhW6h&j6%3XxmV+&f z1NrxXoc|@vhUwW#7Qso1?+qAbNYG!*1I~fzk|1Cg77}n9M)qTX09IE?4-GL$wEk2HuLb7C> zL0lH_^0#@C*<-m00=>>Pa9HecZk|()T~c8$t7iqY_O-sE?uq= zJ1<|t3dt1Lc-LqLFH~KX@7@UkrsdeCk|A#M;q=|_77|cf-IrJT6G?~f+w%^|yu(ab zXO9dr(DydBGjm?3A8WGa@fHnmJ}OLCteMg2ij&|kPz@`kMjzK{GCh<~7T68%fup73 z_mVq8B6ZH*77vR2eWk)tktsfUM^H0b+&qY~Xh`C=ar_4S8=V9d5oY+c8}t~Lwy#;Y z3LNH+H`+__MQqaeC}AaJ@r*nJtyjAWV=xm8f%^4Ks_GrU!il1wqOIiMH{TFmU*%tV zpFbf4C$RWWIFocV0SoRo#KPSO}JNiZ|ys$~v#c;S_L~QlRbe4nV1cfhm-I|9FROA-@_~d++Rj zyX>EOW=mkfQq@I9?fHe?-D=PiKlu~=hjmQuE@!I0?Ws2)vNZ8rZ-#I@BmCB-na0U( zdN`E07{69n)|Uc0roPbqVTo|mNHX&hQO{7ZmEONdyM?4rnpIlZIuJlq%>3PMNK{D~ zKQ6$?a@PmG1*%h2VG}y6pBa#|8{{LCp?)W%s}zYXX@h6U1T(`T=I+OboBs!{v0~w zzW!~LhE*s0k;U5h(h~FCGZJeBf&$;!&2z>srcfE27xcXy7yhLY5&669no~&}EOMJq z<5A5ealjK5-scX4)M3pDEQ3zoDchhIzLjT6@cKwOjavZ@w7EA~un>^e7-!LML6W?m zgDW?h6sQR%EbPO#I>GO}V%DR@c@jfLYnmZ@5lunxbQsTJNSLvpIS>a!+z|QtQygH2DE7oGLN#SZ2gY77b66J>* z3~q{R^5P2s=@^rRk1I!ifHgCuqrW_N47%V>%D%+qXlUKsVDV2!-C>laLO8NUX;=Vm zmPTA7O4_{mp!S}U_aNlJm^`DL5oqZ~{3Vxn0C+sMsFS<(6fda*%(e(Nm`5CA_jCBa zyMsJ3PS?XXF)?_@WuYC+v8dr)OmlmAO<52A;k@_p~@Is@33G>z&npKF_{9y9M zaSLYd04+y8n!;<{lX9!rB20&U!)3q`1;J($trB77h>m}5DDYm>PtmnS{v9rvMUP8} z)vaVl@@_u#3$g3#!!ks>s0ENV)h4NxS7NLW9v7)i)u~1T-+O=On=4c%zHoF{Ec4P> zeS9++8&_sU*rzH4GXx|1&?33XDP!?NU(wOXCti@f?mZdJijB+-LyNt^T@L&zTO|ntE4E<&Z)^*3Ycz1(~ZgBBv8f z7JUzmatCE=H-FnT+cE5cCJa#@;5h^|>=26N1fIbh<)sE0MRoS|Kcqmo9?9!Ry23Vr@gGT(-XfqI!=8-H8< zF4Zyk=RQWM#*b-fWU?JwGpXH#NPr&lSFKs)2?73#mAo2M*;u~4Wr657vH1zsP&{_K zi&0S{lqD5DTk;+nb6F4%fm18!3y8!2dHjhC@aj98l}MDmmhn1L(Oito4z&Y*Y4YaG zEBf1ZB*QlJ0$fcx`Ig{K$Yse__UVaSal}7U4^`QIpMo^2Od)GS$rp69sAF&xbKqr8 zH$`_w%p>#~>;`3O$-+9l(x8<|*?^=M(nB9PNcTezggWSJ%uXp?|D(k5tjqoc&E?)` zP4)zve#c&)2RR*L(c4brgH-D*zE2u46G4C?KLOg$akWl_zUXmRF_hPW>C`+DR4AAe z%E5Uuyn#KwOx-AT>-9<}X&CDepb?#mT<4uA3|XJC4jh>)mEZ)6Dnr#Xxe6!j-zWY$ z5?1>j3G)l+8?(buKUr&@tQ02)|{YzN>wG2INwrkraW6FDJ9 zt7(jlpUA`H0`-eFT7x9*U8_{`%l!(1E(FhP%FLS(sV~3k|`;stIWYIMH&Y%;35o((6n*t`h z@59OQH^5Og8uIOk_pZWGK%WV8#?~tGD+ogpqnx97Cps=e2=`~kb<(j(IqK+WV-g} z<=n4rNs2j&BF%?O3mD{2$#S3QX+?2EwS7EI7o!O2O@85E$CX(Z8S(!%FY|4W_>?mt zk=iJRLS`~|b1TsKeJECcaK$Yfl9~sjN0+=-I8^VCDBt9(^KaBRvby)qG83~e%f`&r zPiepvI9CEairB{HV~D|@H&5YqbJ}6Hs;FXbl`RynNrR+`3e4XeRiw43++C1Lmk7!u z6fGY1q*H*#t^RChe)B*YRHLrDOV-sQn?*q6y92Udl8Ju+M=Dh2Vn}I)?{3$UxcVym zYpFC!lW@Y7m}C#o#yo1mEBr_mqq5@BfhP2(=<9fPt4^P_7#$G?>LS|&P*)|C8k@7Q zU$x3J%1@w!$gedflK10pYCcmTo2YXEa5ucCX$fVd(3+Kel|MGZ(!ahVcHoeIJ_ zqh8VwF0+IHh=w?T;@R1cP%O>2TW|I}W5!<}(69XnPhih<_<|p|cW&q-g=qzk?A;%E z5C6cr(+4WOe5qJPX!zbmeCfrxlCLYHhk5iov0o9xOYqR!vk0W8JK}%BYU(yB3HC7(n{GSPu`X;w~w+2M{4 zL`CXgE7FUWBRWy~kPvg?Z8} zlBAVa7nE~gwPYJ|f`xm@fPUG?F%6C=Gy$o z#!THgc5X**;9p!pDEJDA&52y(n=^v;3 zep;*~;`T58a3AqG&LMC7TWP)(i{?wbwi9}LOHD1HLTN;*VNjy)F#$FEM(N#_RHYpQ z9i5pQtVa}hhE|+*shZ}mr2Z~j*fPd}?c0KfOM|!!f{8w&1RYvjiytBvDt=7wi{!-^ zr^{Iaj*ko#yu)V80^*7&qFaIp3K_2MYR65LYT*ylYaK_g;GA+72foq%3}=P?AD`bZ zQ!7Dg@PTig0}@Yjz2Q%5hL|&qKMd11ducVRQfI=!*vtu<5|(~Nv>ki(qj{pVS=>H( z&%L7SlzSb=3(W3$7&#@I3#HLk3F# z?}pnI=^ap0e%?2j@5(!1KPAi2U#L5N{R29#X0C0qh-?WMLq8JrCwv}+xk%Soq7YJj zRtDF&49;2>{i0F-NFctRw0k^=#M)h!HJL=yc(B|Y+s4+}`HMBvAC5u5YsL5L{!4e| zh>*tyt*vI=fv)eOz**#BBc6cQe_g^`#(h3bfz!@wkD)-vV&(C%tqIfCBZ=nRMw3v_ z)7aK||KmNB!Fg?5t*3uoc1(nPt*5(npK#A5e3@Rkx=}+PAoGlIQ7aOuD$~tWg}gIK zmUOXMI*cxLAM$n~;+qf*>7zOgc!Ad_?ETZ-htq{%1Ug9ZJ)6@?my*|e_U>&;G~Cd0 zO2cM(srD&8B|LTggbNeC$R@}rF_`>ssqN-jzR;N;Iib*knnnEn{JpLmvd=$TuoVE{ z!p7kC%YI^*tN1eL)N4YI_#U5gI#L7BGvtNm+{`fjMrrsZ(|%@Jl#Ce@TllB~%)77Z z<%+Tgng1FIui@=COysC$zJHdldito55tD!aSuYYYJ$@=evZS4}(eV87Uktf3Bb8|C zDJ}abO8Wl|qC&Tmzt2eQ`X9J>9arR41fJM%Z8n;~F?R>R96A+%xE8Ip5d<8^O|^s3 z>#jPwR?`R-Y2=~BMnh{WUvoE`K82e7RH>t5jFBN>vjnodOvChgi%3Zd?(LT1MMl!& zpN|25d>PK7|1-CDBvJ?J z1oJ_sdO#tyON0?KsE5>vD9lv6^{te}fb_V<&coz9!>p(MSx>xV_alZHEOKq(0sm=} zb-!Wp5DToJ6y-PQuWDwiQNjNCDWV5a=9R8po3AeO9r&0`*x_t%!oGQSK`60~x?*~v zG6A#BAkALH`m)LV@q+MI(z#%&n0?2dLuqf_6W<$dO)};FL-ZXX*|KN3TjrfmzOYvA(PmwER7g?XYRkR9AmD^iHvaZ&`8?oKHTzzFS#lD58GKu-v|pMvCo_uP z#w%FYB3Wz_tWnz=I?`$S@SI^C)Pd^T`*=-Kjk-?kHvK@6vcr_l3gjOE+3@HUc6sXw zWtms$UWm1WzVpiG$m{$ctO-yD*%h^3xcazK0* z7q@A0NkxI=-NyP|dW2*d`_peXdrT8IBl(=wuFs`2g;P)tM@jReQQbuxC#3QW0J`Mb z0LDz zhQJyV)anomA{pkfX(|2ibl>|~AlJ3*`gie5y3;(YKC%D1w?ikGj zv{6NRj?0-GA4C+d{0#DkfuGx-y6}NXr7)Sm6SEn8uIKY(v?47^8k>8u~ z4e${p8w00dQ=4EfUQ8)`*IGaodC3j>xnEp#UZYRz(gwp>a0WXICK~C}Z*?d)jOaA3 zwYRByrFRsIM{bG-@&-};2*jv95H7-53~e21ws=QcUj{(E+A#%^4y7yMVgh^g6^hp+ ztyjCJh>4ZwuT@&zaaTU$IqY%
&YFy#g$Aa{@Jug+YzCKd43X(hK6x#s^x%QPof z#^aV<9eZ;4>wTQ|W8@6@$6e`-**QqNZhX^zl%`abW1ql@+bd%F-U-y}%u)Icm8LzG zlwWeq?~Wu;uhi~4;B^tcIDBvLD#T)Z=e9=WioaPbxtI;{+W_G7;0jY`el%hlakv<( z6(>fQc$+ha%=V_sZUtl4FbmO05nLP@Dn8WUFYjJHMjK!w8?=5%z1(y22xaDG`r# zu;g6rr@M{N4jv~zdToM&2wRwS_MYI=pWGowE_>e)81g zKVQ#IrYsIF8u`rXo*(+U*#gN@@<)9A4(mLSMOWM5(DC7J+tYc!dZ8M%p0Ob7g~l|7 zCH+-Bg4?-dx9k4#Q69VQc(Q=U+7o;*Nf^GRymVoY)now7$2lZcZdLzW0Ekkai6*i} zcf=dx8{&}6#@HrKvE!wMNf+>ZL8mDLKnk&69^E~Tt~!%{-e0eV<@;)QZqfW3UTTw< z-_N=gV(>{XqD*g-KW1dAS``fp|6k~Z@}0)ABWCj2xvab6k(Lv>8M;16g#Sev_0O)4 zu?9xoUggEUVn+By;x=h2gv^K7L*5i)J{3}<#jE`bO6+1+)D0>q>3~Tw-Odv8E?e$h zQ9g_dEcd~p1@z1EkL`*Hl~#@RkY*%eUjx_id2mTQz~BRs0`p4&B~+C)=0X%kulG~q ztm2e#p-IE`tc~DkF8P1jG$h8ZrHd*tX!=DZDKUh=myrnWQ6a4c8~r>Bal(`QAT$V$ zgF_^e&{7-$>61N2B<6>ok5I6C0#AXxc#3#d0k+?3C>~9qMX~30tl@RiN;ta`ce}J( z^d*71XdWL1qFX6hr0Q4eW&qyPtv|JiZyuAj@(qc`7OLbH) zH36^7pW@+HaCcE4H4EkUWJ5}{q9i}c-Ku+GDm7!^s)SUrYAqdcX?RL$%1G%8QLbPx z6_q)QzTu~s&-8j1KdH8qU!NZ&0X&v$(YoYU>kF6pl6)^DZtFKTEnb`fuKcS)4?;3H zb6Kh~D8HJwVMRhfAXb?tq&+2V4p#@r>5ae_PlR$SS+ike^=%mv`~c{5F6~s=<%zr;-axl!X$hMA`{+^9HROmOF!mnw-Rj5x`u z_S8kikFaK?Fx7Bj$idwDXMYZtL6gsCLLQY7gIOjuy-bz?6%)hJsxrN)bN8%(@D>~L zQ+OqAUG~>V_J{!f?!O)DDANHvKdt@9oGIM_Y*|xAI*4&RYyqA(&AfwgBz1h74s-Db zrGT7u4N1w0i2YJ?2552cJcPKx?LjN5QzsREN)=EyW4kZ&t?CC%nDv^(Fhzq7mgjORD>rEi(5f+?ugz0tSkB24}KWn=rHnUD&b2~YQ|DyamqjLr5`_WdQ!d>Y; zo48RS4Gq4EzQm~#@GjCe@?NQYLcLcn;qu}5&tzI{6`}i;fgB0CL2@ZhDcNq#Az~kM z^3oUX*gK!`0qeFN5+@y{DFYSK(IZ%g44>R$aMAX1rNry=^6R9go3??G4ydSes-i=_ zc_q$os&SQ9r#N@IInwx{V^%bW1Xvd%$6AUq^u;D`0<7{$XneS?%7*`iILjK@8w0wZ zP+f>kvO;7Tnasr3Gq<=9Hx6e4@q?^w1h8ip`$xx3*1f<^^GboWo(6PoM)4>~ zZixhG3t!j4*SO%;G{dF)R^K@EdDLwj8__dm0?H#3ao#KwiY}FZu{Oro__;C^rs5bj ztZFSBB+8tKMO0kMDy_Qc4-9tRs0NI&FH^LD5Am&vc?}ZkjP}yfNWU(GdDS*~bmkOJqnvGemCsuSn zfgqPqtDryZzdQ$s;U?=`O^gi4&HD2TPyXL_Me)DwD*XSptIt)zdBXq$9NlzS0eD2&U<`ZN#ZS7rM{0_! zrzsaIE7U%KPqMk<=(!Wy0Y*|_5$OS(qM7m0XU+X@xONqwX1hvRSvFGCtbYj&ZisQ4 zNf_mB#+?$*$Ula{m(N+spI&G?gu6@6z^w<&AlBH4lF5hl4zCSqFL}oPRsapptDCfW zdw%LLUzRMf#kFe;g>T4mJEofa&^58){L;K|boewHqY57%?9_A9!l-RXXuC%)&#gz` z1}Q=0xd!zp0QLc750edg0AwVrFQrz}9LT0U*l`nnja1mCerU00w8e~}Nq{o50ve#C zX9)7C@dIlswI(HF7|V1!W=vwaQtXJBgV*}Rc$Sc{qCex7v(x_wG(`>le5Q{v%QNq5 zRpVMo8Pyq&I)puCysw5mP#Bs!@QW#(ED&vtQs>l4r$GHKVG z`jYW@dSd6%gquERaz+}8ph zwjY}niW_FVq=Dy??Q6tQhM=q+Nl+YPxWD~!m%M@V>w{&wFPWKRS+Pt1Ioefb!%RCZ zvP`$2sJaAH67dq?SxkIAL@Ch>0jcbFr;lr$@1(mBDJl&jH*sdN2%Ul8}IMLoZ;0l>0Y2l*DBsnOOzO=;_ z_5wR3Tfn`GIt-a;_oudE@QbIz!&eM|PbMiH+P;;rmt6F| zHo{ttFQ<#pw&IxVH1;yptV zd?Ny)-whpX`I-l z^jhcC@6*j2W*k90ls26-pt^XvZI3Fd1252RHz1#KphHxrqz)x-DE15t_vNA;^nl;? z#L6Zt9E;I|NS)QNjEMsfJ}jxe zl>#mK;7Ms@1*u^teC*~u>{d9F1y|0L-qkLNo}m0NmcqbbhH^=L{rvY~oc*^0&$5!c ztA~$=)4g-HB5m?0Z?d9K=-oaQLl&9feWTHpjL~#VWtr5IV}7zx52R?Jw@7i1zD+alL7P9NgEn|~}>@UQ{8C*t2 zq_Ax|6!BpLCkTD}MTUgd1K(=pmd5&@abYO%U^2pG5S4 zP;fIh{hhRRyh#HmU}^&sgr0QeKd~*dSblr=0JZ)dBv{eh?YA$`qN>y7e zj(Ltm$d{k+brkb?Ml}-jnv{dk4V>+^A9vH{LrQ;W zRluIgY3X(=`(|T3&#Aa7%RfJ6lA{*+UmmwB5nf6ef}skLcd;@ zW}Jha=5^cJk->-AFYbj=fgqeKBTZ7@_FX|R2_rqa-UPm&l5`&bkZ#Bsf$cKGS!>+P zUPcoyMD_Yy=<@_q(w_G4omwxBczN7$$*DT|BH#B>#CC;wnX`K}gds#Z3(A%6ciY}m z+r8nUkYpeVpJx19=n+WHUVBNO&p6&NoLDMLop+eGE*!Wk%MU(*p-BHeuT;mGcRX)# zUC&CfQzmPewCS7Q9tf>eZ3GOF5P#KSw*3Z+V}&u(Q_7WAr{2^WZ3P=6oTGcw*9Ey>&`C&$927O!z!_h%M29R$+RksDU9UIZ{lUnOX407u-fnh2fqot+epXs z*!T_V;n|mdREq!Lwsu*#dY2i0T8KQ?C_{%Np*lG@rt08~c7i?;KBHUWG#@WQT4G2R z(BFu#8g^F~8l4pSe9;wKgoF+Ad;JH)xff&SuSj)o*3Skbt-zD37cuNl+B1t@FZyM1 zgd#Y(7wZ3j9;O+WHY&I)@p!>mR-j31A^N*G%4p)s^70^a_D|VN$WM|Z{%$euP=I&-AC7Sqz>o$9h(N5VH{ZStqcS)g@#Z&~?+xy>F!edKC$mX5{(9PZr zkmo)8RmwIdFRn(Oj6XNEM?DJZ}`y6=KX z;h6p#jT;2bpRWCV$A{P8u7`G&M5e74Xw`=%qG%)%PrWm|4_#aEWeb1H+G2U?`u!4? zf>bmZnx9eiWu|AbAOto}ay|O{wd?E;W{;O05cz$^?_-)~! zRxcJ|qc`uL)>P5`YRQkvXRm(Wd{^Qb%Gq~|%a6}K{opo&v`r>LL35Ob7Yh1$$ZfL{ zRsan(Ia9Ed1b*(Fhd#7%^SC8{y1IJqD)|l~$wPd%Ae*0i)3nVCYbSF*LAkWc(asKA z?q=YZ^f(X;({b~pw4&qRK5WlhtUQ88+F^o?@$F-J1(nLng~0ISWUSR{wD>wa*-4R> z1L){SfpLrDxTyv4aTBjZ%;^7P@2lgY`qydWIOJK~iby z2I;N=q@}w%haNhHy32j`Z=Ze7+54XRxqsh3r`D{szVCX!Z#>WQ!Z~7u(bpz)qVl~U zL&{GA1)qUEp%Tvh;z5f|-_uX>KFrb1z0hpY?MYscLq4fw8A`mp7H)QAH;Y{5!=EE4 z!*ccdT;GF7kWXd1*%|O#)&OBIxrk+!=+;?UV$9f2Z9=Ojea+B&lOY8p7ecrNk zYNzo)xBgx5(u*6@aMG0J{hQWXr{BydL+XdA9b>~r^$QABkn!5`^>5Gbuhv!f7JQ|8 zWEFl!`5FyFUKBfj7E9tS2=&boQiz>;pm_c1o6G)81t*b$T)RRx8i`p?>htdK)DNkr ze@2ebSFEX|@SEjI>s=f!T2ZZ2EP7tljTLsGLFA^}8qbsUd-y&r5I9i^*_;T=H%Qct zQHnu?Uk>(%KRyw3x%&LuapDv|yW0SUOCkDZ0|XVaDYxD%fr4~ry{|WQv~P=Nol8LU za^_tuW<)H;Px4|Wa*AA)lmh^5kNFOCnnQ)g)`1RrpgJsv*n_to1fSoxcrWW+pY8Mh z;)*cXSYeRWhcQ2{FaOZj{Q39kGwx3=x<4+c8uh@8wsdqo=s1*?R2|-4!0Z~jo)-sK zh3P8S1%Q^$gzV?Tu^QFy&7V|Y{9T2Z6noSuk*D>vy9{am;N`gJ8js}~n86eJej>b*?Unrl z(w=a*-M;ychkMOa?%{#zv6YsC%}(9Eqh~x9h0%(q73gD1Y1|?kpd6~!^YJv&ZdRK$ zqbPiG-j7t@((epg%3|w^Z<6`oU`9mD0;lVK5et;%^ z8MLuOP!;pIo?fvAG{KRZll)-`KmQsfznw7`eNU9Lb%g{NL_xzs#lL#<0k==k1H+;2 z8s!G;MRVQ{MFBxnB$%{!UR$HQZwS&%3+b2{HEc4^PqXjU5T=H=Fv;dP5M%i{gvf_2 zKX_9k3}cba3ASRCeozT59T`D5h6AhwA?-wa9#?PB@nbbI;$UZF!!m;>w4U*aF~1hH zg^}!l(N@UAizW?qxYofq&Nq}~eaAyWaDyIoQBNbCDXNln>nhG+GhCqDRWW9I=#TDI z1-_Zfnj|!vUfF53UvKX5dOXKJp}EQSe68>TUf&E^`#^tXvnX44=>1{~=EBLln}1!p zmc(vSAz1uuB?9sTyk$FOkE6Iw;%jBw@^Q6nt)r;VAiW|uq@l1C^$y+48ArBR4<$rUH)SM^Sxdla<9nQo~F43%C zXW8-Wc$|}U;_kSAiDEf2J~8z{PnpwOdisJRA8dNYqeS*=QuXNO?kt8+wMh6(&*H7v z5_S1h_cEcEEHps(ro7?|=KtdX_q~$oOefC+Fd3LeZy43Jf5*FXj>@E{d|K>YWghlZ znT#ul=e$a}Y3P;y16uF%m*zEuaB@G9R_hyuhUG@p1-OAj>mKN9(z;2rW%Ift;q@S& zr__m58i>Se-*)W8L{vqlY3IyvG)nwI6)dYLnI3{JY<>!j?q)lJM-t>YD(0=ND zyI*O#8R-!jem~!{gz~!NiUIYAdUl9q-7P+?smQ@YQL21O4xxF&3V@Z z6@BL}h?!$=0URbdhD!GW@B3;YRqH|1b?usQ%9QHp@QOD#hq+9?lXO^zK6Ewo7;noA zG*iWJHgE61;unk0IlWm)yv+x~lEgQr;#16q z*J)fdd>MAip?IBw5>R;4y!Z9D1UaHK`^)c3Yv5*a&wv&zT8dtPa{?RGjqF=cEM8Ym!Hvwb&xi`)LXC zT!P$)K={pS={Riq0G7jQBRQyN-*))|(YNWrB}@G7=(MHDC}uc8XfVGim2{&qWBD@m zGJ(_G%ArZ!a?@EK_fg#()ZhEuMiJUT5N8i!_qQxNohA=2EhL^3Z|77JAtjSM++CI- ze7>^}x>s1)iMC>{E*3AZR3NG)``Rta?0e%!Qcv_6okW@&@7VU#a=%*aEI1EWT%^AF zO3L>3u~y5s_R;KC^>m3|_5|fd%xpA9>@lk!MyjpGA`^wdSt5;hr|?$6<%I^0oD&NL zX($@>cU{z&+5(5KJSaA|9YNcFyT5B zcCwI0$<^EV=EQz1I6n1#0WOj29*YvB-w zuLw?qCG4-nERyGYlX<`hfl?^>y|nF=-OC!?5=D$63hb@ncf)Kxa-n9Sx7eF(--3bB z%afIsnl-x}?`R)(oK3axruk0?K20$#EV7o4H)?6xxzfw)9r?zMruJ2#v9{8!TureR zbrc^sg>B2}v>LND7Ijj&v;{V}T$@^;9-88(u-^Mh_iL+06AX=fH2wG_UaJgx;^b$c zQeVE*VxBJ=Bt{Y2Qw=C48QdJ(qgrH=Y<>wm7&7uSkY)zEV_MMFKHqG5O>=kE5p~uU zOfx=a!BVnruWeS}RVY`wUJ^djjd+s0(@U3K{EYL@Ob|1T?@OL=6hC?-YSUgXKnwhG zrn3oL(BTNZj7YAnWo77?+X>%^k!tamBYk`KR#dn^g;_cMIE8pqTF7U!ug2wU#$ife zMh#mw{ygMONpdh{e=;9mTVo@p#DuD@?25LG8B_jTw$^rK|5qkOrRBYo&ryU-W;MST zqHh1AcJKvHjsvycf~_gPOzslTVVTI-ES^D=?##Sgu zpL5-|*)%A!bZvyUe0LcVfQ_(EUdpug=}KIVl~r<|)Z@nn3-azL59(Lfb*t11v%WU+ zS*)>%d=)DCaH}|141N8qD9w%KJG8z+zpmp{+~?`KH7XCJKW@)UWJ<5bBX#rfpyBXg zT!^PYg#lWRK>1oe3HHFwhs#GnD8PN#L(YG*^sw?m13OH+nzShLC@U*=2oSeF-aIU0 z-Ae$Wxi3HrejlS#GZJ#=J;{Qw8&~>GtfjlA&ei-ZI^Hjt`+mhz_6e8bCWjB#btLh*%R6M2br(@Pb zt~Z+`SNl`f0|MoZp$$dWr$1gbPn*zB$l~filo)#Wsp1XCpZ_|k(tkFU5NVl77CP}f z{6y^vsx_fPH9r=?XDHiO{$wzzX#{cjOA&30^cIa{xN`%1^&9`ETE&m0u3J1|UNhs@ zOGn+w4lx7)BeS66H@`$gr7I)1wb?-qVEsv}fdgtayULG3N{C+7h)e={KzC>IJ^d3h z504hg_$P3+WvT%ypR>^(L{buTg==KV>KE4%Nv6qYt+F$-aWNxPuE{~12Ig)uYdfo! z^WMGOM9ChZ%l&nJ$(cSw<&%MVA~yYit^kMHkMl_rlFhEBw==8neoib-wTzv*+$th4RC?chOGl#zc&rM(%>ac&kEPaL+5cOlh_)rC5EU8 zKB+W`U|QjcKN`=TSK_m3t$d{>c|Ksh1{htZGp^fA52cO23>zy))wWpeJJ$^HHe`f| zgh>}@`z?Y_^&%S!_m!t|C#3qz@)T^7(`LxMYe_Oms@}d?{pp&y$o_}$ zJ~g}Fe#ePJ!QzkBhL$_Ng6jv`Zq&R_DMicIKDx7ZBL%seWoi#vaPP>imTfhViJ9^=uaAsz?M;EE0x>WQaCFm5R1f&1&o2y^!}w@598E zWzBhunNhabUV8A*^z}cct4)- zTZp`1VUl?5AzxBKQC7i!_*#r$gOa!u-&U>tXrk-^Z|@AP??yXm>~g1~ntLt>b~i9X z7`pHLE+kAxhBoAaiW^@mPFDQX{`g!Iq}o=WP?nzeE*-|Qm5TOhWSPmN<+YJhZ`bb4 z4VlQz0;+_NQT|Cm*@JA<-z|hHp^9b?eFL2Qh(y`w&scB3Nk@fIALoSo?J5yeB zj2rXjzbjHPXTfs9zFgK(=r1z0M>(&l{XtsS4?%6KN;px-K)pDx8I9z%(dE0QC`Rl6 z><2pfU)FIfxxy1>pNQdt5_oV==n282I1J$u^!On@pzgDPg}_iI7gO23yaOf+RzvPA z72U9UQiUI*kHWCBAZVlMCbeF?OcKruKc9L{G6<#A}Vxne*$Jb`{rCA zV2_%6E8aJQ&(!8z)GP(nG3l1sccfbz#0XZIez|ZwM?!z& z89#e|w&!j<|Dms;zPBf-dK7Zq$Tc?C^Y-GDOEy1Xx5TTVbplJ^xdQ7sdN9ZQo7x_)<~2u1C&yr(qJd`&3o{x zTZ(W8nI48Y>m-FuU8y>&=vQPkCR!baIm`SKZ51(b0k9c&AC(e!>Co;9El`s5^O~iS(qyP*?iAg_JeXWSY$aW6H*0^$y$hyqIVB zb%IKw$zkTx<>G!0meT$pQNb;aB`{3HwgnfxeCdlTIyJ5Bqa+m6-##0I$-y*F=erRE zQ{LH+#o$c_#*nEJF!gaM_6hX11%9NhpKnaKM-g~|d|Li2`wjqa1vK#FG8S<7a`jZ^ zp0;=)hrq{^lPL$9yy}#JOaxh-2chyTm z*PpvmD$%*R|J|uyj@HeP$b_$ZSz0Qlvs+@nx`H3wo|834PdN3@=}GWxMJfUH?rkl6 zXHv?jon^vxPbBh+L4ZblXC`Ejy3jX)0C#~U$@1ay@AgT2fB4Zm38L9m^&G_Jos5x-U2u5tDYxsA2EsvASid5IQ^@%;!^xXw-Zc z(T4+lnn+ACjBKW`SCQZs1gy&F80`j$0qb<%C8@?F@SqYM@!HfX$Z zZiP!dAek8EecyjEUbz=bY{ng{ukke#w!2EO z;d)BIll78xybVfjmson!4Uc0@bZ$RMqiWBMo;y}0aYnp#Vs@p@Q|@^+v|m}DS--yX zauTU|Ofyy_xhMt%alrJ9N*t;r*e{<7YaYj2MrMtdE|Bl}j`J6%N|u9Zvbtw7Usl9# z+}IW?&xzr(bf|v*K;Pm0W|TwR{N<9uhxu}t+0*R1FO_bu>4OW$Lc7nINgOMpd*eh)aAss+DhJggf?+4sN&4rf4FcG)8prz~7Lqrj-gBJ=3chZU zzlmIl{N8C52^W7dvIqsGk{Wv@Auc?*-;;X<)4fHKdZI!XB4|%)%sUM}@~xa`bgjaB z40ay4?~ij$K|H!RlQ=vT=mq99so&ow2wIjwoz$<t4jy$X*A$I~d4UrjSRX}d~Wfi;e0Y?3S=1u&) zSM=$_aU>>A6KLz<8~U7I-r#%?#)lu!YYqfvm6gg9Lg*TNyOwln6bwu4R~?`48-K;r zf8jANpU8?qa_jws<%?o~cSJvZQkix2pm~powC%LrR}gi}&U)D7+|kF1$`MvYi?~3>~FeFN4 zzEGrW{~cOBzi8B^%R=YsJjx5hM5%K0QZ*~Ft!ms3wcjinU+`~!Mom4HKUtfqQGenR zn3CakRksk9$)AGzLW^@PaOGuiF7DM84}gyMLwZSQT8#YF;u|s_##a1O8Gv+5c_8T1 z8G%>7=?fF|Idoyp38$06t`H`yhO4^l;%n9N{6K2VfL$FNV259KaQbSlV7aRF;G;*P zpr2_3JwJ3+`mTZH+V?`>T*r3gRec1?z%ecHu2PyxE2oWrMbLVP3}ql3(DGzST2_dqW%|in_XdQ zR=MI^e4pW;Q|I|Ke~e30Re?@ZajoyO)KniuV%mK(CfXHUI42wQIt1?xsQjeVsgLb= ziFkiWtzYTY?E3JEx>XI;vv{tfPcU=*`8b!~TJrKrt`bEZREgqEYfe>=tN97%^Eb!R99`-ntr4Nj_Dh;}m@IK6g;GTvc|O^@7PZ zFuPlIyoV0NtH5L>$c9sI87+Zp`ptH#xM6OWs;)d}zAH-?!0&fdPd&lH=zf3PrV0Yj z2XVIXP2j$sE7yI`fpQ`vKt54MsKt*>eUPW>qiyTyoJ)rznpyEwvFKZx011q?v(j;V z3U8Ixg6 zH}VTtM{){+EQmYIVNCK04>kTM$T##c`?E@Q@ZGxqV|JXiDf}AjX&my5fD&p^yNc%p zh+cSdmF(?A?|K%qE`s=tKi*=BRr+eeP;QjuDx~5)$Qlxv6=T>xNT;IghA@!Ls?Zb-14E2a?H<*~36)s2? z=)6Y8k!ahVwHV99(~iS#ic}O&u(Y`Z9u&Ch+E@{t^f@Lp{kVuRek}cp{cJ`Svw}>~ z$N_qvm8%reMVmcfere;&Exu~iI~F(Bl9PHkx3;LplOd&p=bb&rE-Ad~pg&LHjHW`aF zGFn8D#jk`ju3KN^@SFdjAdWK)s`9 zPtXHv1uPCCPTK~WYGNA=&!6l*E>=qhvp|;2YsmSB7LQ+F*kQz*QZs7kHh#+0-jyMT z!qv8iQg5>4@^yPS#a^E$CDFw@JK|mX);_iSz)Huv2P7bj=;RJAQ0S2cYMaq`>uS&b zJYJgQLs>{A_1DJF9p}@#U~w_+R`vXhl^(Y5Yl0wlPQNb=YjW|W{srqY>e!Nv^$C)J zSla;a&hg;VZW-qMbEVwn7+N0aeIo$u{G!$`=}FFf`$VFP)p}qi4J*ifxDpl&>!gf4 ztvdT0DPm!!bZO{}+k*y2ULlt(&XjQZrZ;`#7C2}dw_aj{=kM>j+;Q*32Ha2YNlpM_ zDP@iQZ1^it-bsx|G+bVIaV(y#t_`&R(cnpYh_X^L&FB<*i1I2weDs(`m#Y>VJ2QP` z<#=vxjtgotk8-KBYw6SlQ0T*10WnXyaZ-XA01qpZhj14 znawB*tndkbT2k1ckJ4Qs=eJxjq~6t(X9vTysQ%c;gLV1!<5;ZPUSxsiHw4-7Zw%Dg zmUT~2{pNHx^NPf(Vx6+Q&E8p2OPn7JOFS6QP8_LQ@CSdq8QI&$Q;`N)?t&T*Y7KC9 zqnAMzs31%0DASR^X)Wi4-kB1Cpk+`inZ$s6@`<=TlC!(D`2o^$n`m>B0C|GU90=SV z^L)z&m{u1T4d<9E2j(zYOXHpqSKtoIGZFjgGK9dqaTSc8tAp|;oE1vEU_%BuFxt-| z#p)SRNV&#KvJyT+VXOJH2*cxvVbINKkU)0|Fn~6b-UjkDN??#u4AGq^D>ZY!Yk5F5 zkdn;UYREZn{HmHB-~$n7+656TG{Dl#RkJQv<%dMkJ}ZHk$6C-fV@d41n=Xt>1UT%~ zels;27_y$ud9iVZxRS7gBArC@x2DT9;R@A{%w<)JxTgLTJmtUM(+H!s`G2f#5Hd_I z<4p=b`otA!U4T=TmM@&*iCG~^7=ArfGA}nCH!9>QA|W)T*Za=cc~GlVS}s%oQkoHb z>AI9c7K!Gm#+VjQO0e8ytJP4}va7(XwR_0vFD}fclM^zb1A~EPgT}7b`x3)fvFLF? zqt4j6H$5It+B-2{6mBfipVdx_8IlF2`$I<0r;QYK3eP>gIBrYLPN5o}LLnE7A;+)6 zZAE#n$vkcjE{kE9Bp{t+X8115G$0k&4VD83tz3BU?PJ6|l!o32+9 zexMTmkYh#fniA}Rt`}hK+uAX@lk2~rvMtIzEHcH@ZM7bE(14@O1yPi? zvabnasI2Wp*>`Uh4~W=b*)4NLjn{gUrg}yPeG(x_fT+okR$7Wk-3`m=O~_j@q8yDJ zd{M#o^Hv_9R3yZ8ZG4M)gdXF2bK#?^N1P+s_t@s8MItJredlvZb?gKnyDF+h2Br0{ zbTXkZs#Cs$we__Hl5S~)(Kn36cBrEJ&{-RkvVxd4f2S=L{>EQlsW{B&TTgLzB8XiX zJLQQ0W$zr(8g^1&-Fq&EvShHrene^7EcKZv$e(y_4&t?1TaS#)i$#w1`SSf9CGnZ45Vo`=E)sz<37AcSteYtoK3h8md1CicpqOt(Pn>U22vuDHtOCPkaX%8@3~ znMu3YTItfaq4Um$3MupRs^pH-J*FSi%27T+<3P#Q+tUK~K~*EnN_(@zZS=|MtJ6-* zKKI_PG$O=nuXBbFC)97jOi{P52p?(ky!v&MCg#)fE|uZwt^nXZMW@O1hDN65&9!!) z{uKV06t%-a-=6qLLATt`lY1wJJbhzw8Aoin3?z_892QGn_1=!s7*&-KC094QFM0Yw zP!Fo)C>r3pf`o;p&C&AA`{eVBG6};TMe4+;EA_a|0GkA-t%1Vj2LSO363{C7m~VHt z5!hK32+QsGIgDb4e^%7?X70xC)O6-iUpZdN&n&XzpQ} zOP0-y`}3#Dv51cx3CnkH6H$KY)9mu5F`*)xKY?r&XxJ!IoFgCn0?0+@3q$ljjb#aO z>XsdVT<=2o?lAd$e1CQrkXrJ2rxzN#_HoMhe8wOG`#t9N&13o(UqoM`ialtV2N)`7 zV=nz{j->Fvvg{OMu)C7D!e1U;w=pK}{=wcbbHmSIoTmFieE#VyNAci|x7dJ4=S_bP zYDFm_>TyetCrxNO&(e)t_363$?Tk8`oOkW6!}XKniv|GW0O{Y4H6He%7A@Yo;!qyH zFVmbIv!!gI@VwZcJg}*FFFncO(Z0iDYJcl#F@PmAHl)K1g81>mNjnUa8zLu7H0;Q? zo{Z{*you+8oh*aWLz9wyZ|SDapcmL6GQYVXvw(FQC`N~2ArmgyyK7}pHS*<~!8(^r zeYmuVqU1j6nqAcUR;TTxZLx=+_pml$pKx!)2&IMU(&dL94t;8gb1io0kz{kwVI7q? z#g_)AftxnGIeMGBo-(hN!iZyGLZ0+6%u3y9K4pQmyNG=6sLMHtG#ZB+>JNHZoAf~1 zhtcc!Hz=~;%P&ZK&6l$7n|%&!-vd?BRB8jo)lf}&pMG_oW+`L4_|n^3d(fz>otc(; zS8XnM1Fqyi4fyisp{9L72;`(ZR!URID)lC;)%mclw6n8;`aqGgO%=94!LrS7E@a7% zUeW86>gNj+YCEP_Z)sDT(Gi@FvxyhLbZVZ39d!@Yv2y52=&HCj<#qlQ`~L?{3yBU- z2#Kt!dq`#IO!g7AdQjA}eAN>h-Z|yWq2)MwUIw7J^=O!nx6VRYNO!KCM>p+z^51>U z-*bq+juU;186s)a?bGcP3;@7BXdsUy>IllGp;RLXX9KHX6yE}N{2m#;0i+n>)l_A1 zC<+!|C;N3^0aAK{b%t&o#zl3gX;>PRW)dlF@zf% z70zYH4X&0imvBJe-XU-?!$<=gIbRac{rwgLaJ4_zLg4o$T#s;#>%*0#=_ft-vE`I^ zsY%lWH{ye|;HMDDRFqi$Y`+wgkSa#URCe1r$5m`0Jx~zcH;g|^{I|9G`+@#?QBQyu zD5&$==|A6=V?w5Z)Q9QU9$H(N)PI&}yt^>ixjJ4yYeR3sD9un#6a-T)I`))U>Ocbj ze#8&@$XRL$A8DEw>hX@0GBjbv)u$14#b;{8{V@!<2g^QRmOO5ZSnjuy9dbUZs)lbb zY7p(R8dm<7iv!N-_XO%n8|A6SAGWgHLiObP(VrHCHdED^H8dZkh<2Zkh92lfJ3p$3 z6CWZ#{)6HBb5s7hmj8UQll+BoA{P#0$R+*zx1#Map*M%g>H3^+Er&#JK5c4c z^Jo>TrOEc!{$p!WTnVOuP10j>86F!kDphzN6pV7PFU@5yS|cS8a52o$@aJW3nToXhHT>1kWBvi6PXk6 zq{Zc#Ng-II*sKCNn+|~Wqez-r_XpOmnaC;cU;O&7E0k+ReVfUCCo06$@Yk8UsII_$ z?lTYO-Ny_ZniZG5>(cLqz~8@;awv3#5l?<~fu;KxH@3<){FgfxJ%`!?3_bSPoII$u zoz6eo%an3C?gH;ru61os8Q2rRhYRmGH$48^z4mocd1T9vg7zf4^&XM@N6p^jsIBr{ zgNAh9clt1x(0r8@2hfl6N^J?}K0^)^#%#lj7WiVyufYD_4)u>SN{RxO&7#GM-JSJc zEb71i-T&1mzhnR0Gfh#qhL8W!X8x}Z@|Pp|uSO@n^@0}5H3^>7PxW7Y*MI%$zj_M) zTGxMbcy4+m^@9G`C?k9Qe`oRk?`I!;D z`;++ZzWNU<_`g4k52Ank&UISDLdE~#Vfi;V^}l&nnyQ}|i>i^mt{=cdJYtQ$8HuVqhk>Sk`bg5UTsKktk>0e2hQaE2mQj5r>dz~b) ztFE>`E>z3(!_=&eW&OSUa4Q9e-les4)=V2K0}96y3dSlYe|tJnC0B~dE=N=Wa+UM2 zP=bBqF+%(#R>_ayiyQHQZ9Grqh!Oo^4$nkczyuxbf#>e$_#)tuz+?42n`=3BC?)&` z^y#BZ8@8D9r3gr0_{K1(jwL%ZOUX0DFzS?^?f|9d2rdSAKE1-7(u6>q+{>8n-?t<9 zmZygIpr^yx6b|+58cqURzP~tHZxu|uD&~1DMzf>~#C;WwqVgwv&veC7b#IHWAmFcX zBlkrKy(&vrg;$O{;a?_(W5K2lt*6v>^A}hLvsDQf!0zV+YYAZ=Oi-;EoK{;D*b}xeA#!&^KI!8Kv74%`7|TRI1Wtp%L8T&WDA3xiq7+qU0_so>T!Lz^cz)5 zdy)rYM3jO%L}P`i#PZ*u-i`=v<%ds|NHmt`>b=^vegyqO=L@AJ60v*YQ zDOrprX#zEOmUU@Tqqo;5M*D93hgY(VdXedo$W86z!O)=eG%sVh2AmvNpuhV9L0BDG`(mE_dGkM$HD^`8ZJ^$wS zcY5s2-sIpD=G75hDG$44pQ~dAkBw2m(z+)W;qrvCP1M6U=p%fP%jV0Pk5T*1hX}%i)yAVgiMGsyV-tsDmdRO7uPX&zJ{O0@&{f*0|*8 z{^f2MK=8$N7NGP5%B0Qt)AsS|m`GnP8GL8fW-JS&qa+l3`=cuYac-jyK#TZuX9v}g6Cd|d!ba%VN2=#esQ6% zry7Qz)%ex{D@TN}JtIA;zyAsuDmKR@4VyAl7@!x9_HA#1vP21AjCfsdc6}W6n>Dtl zHyhtaTmj{?tY&tT-X_HnpoU3UTMWT|h2;tfeVmZSG6A+*PAwI6TX?D8_$f~GwZ(~U z3C3#d5OuJJ$Z=sl)jTn%gKDIVVbOWm=we*s(?e%y>vqjS+4wH+-p-=CScaV4v8uv# zS>KBq?}S{N$>2g08Xs@uGEz)GhC|PR`uu9{;JZdO`|Yt@ltr)cCl^w_hwB0ZCP%`9 zDZJBMCY<{-nXZWh3sa=VS&+M6{xm`+CqVS3;=*<1v;#w-_>! z-3A#ZiUWolukQ&O5@6SkZnkQGz_&>qJ-}0KH>f-_6S!WMpSw8_ZBKN$ zo6DVYoc&FSx>lI}ZLaog#ze4Cn5oWwUY=}p&O*d%z@O;14-=J6H=XI1U9?S$29srK z;0OH5fJLfQ0jO8d(j_gdz;D~<6|*^0!apL$XzLFN@NBcr zSNa#wB>-Q%H6`I&L3*0DLO`EWE4kRMY*1rix!_Yo5>cZQS#8?(_%J<5FwMT{Aikgr zL(+^XL^zA&wSpfl>JNXlH(xcBRD%I)EJIGr_mhz)LLH{nean=W-|;tR>%nXt`!*Dz z6#naOkZ)OzCr^ZUlbzt^=nsQBwdrCiZ~%k)lHX3fVEwg*yHNbaqOqjzSN2PBEx$2j zNnk2Mfx$GxesB9lGlUNS*ebF8;KLFU`yDbY_V9hmVW#-rq2dtbIzK?tNC9l})QnGi{x~#IgovGVAf1@IHbg7aexQJE?$oLi8^Qmq^NKOM z8g3}TOwisQh&`6!>%EQGD-Deu5R5mTcLzb2s;tUfX=eBVy?u*}SM)gQ0fww??kg4q z2ceh-Z%R%M;s#S}A>$gELkgM`>^^uF}W#!)wg!}vzw__@74%fxl+sZ=YWcK|S^Y*dk>)zV)6!9%M6 zB__cb5(jAP(!8IbBgv*W6!+@6DEYXi%!Vq7Hj~8diZ+=10Bwnh-Q|<*Alkd+2?45- z^F?LNDvO?HRaxd*1&T!o%&zvYxH@%x@Cmrg10!#&?}Ssy{*eq4!-+|Xq50>uYD$}kXn^kmT=yvqo7AM8* zob-Q{Wm63d{yDnZAzPr?Q;Ul9^(|&$i5hwtTUeS&p2I^@KEsGz-BQXcMu2|k`v+T9 zCUV*E(PfZVN16>?N7rV&u|cCf%+L)(btcf-|Mv?UiR_mv$b+ONDG5Qi6wfwsvThT$ z{zOLxJN40?4Nkd*_NhI^=Jpgi#*W|xYO;MWdRq+37v*PsenVmJeW^(14kRC4I9)H| z`dQ(z-p0=}dH>Dvs%)N6B>agc%18f<#|Cy2`2(YIxHr9q2P6G2eKFShX>BY;rrd$= zB$upMt{){tu76Zi!!O1l)q8|Cqm}-|Pms!$DYV}beXaKVC}{#eM%1{@V`ldA+VYJ7 zIDS2_jK-%bg06C;j>p&}?3sXc!8*t-XYc-Wxb+MOodnaYqEZlNIEdS@MM3fTk~W(yf<&oNNtdH_Ip`^2gDRgnhAsT28M0x?%e5xp386{b5Jp z69Lrda%VEazVRAO@P#7D;ODE5im6k-w#Z}iU<2cFb$2)Ty?#2y&ae-|LpGpexAU?- z!PPc?M9(Ufc!$WO$L|@9MeIc?%S0xPi0cVI;&R#NBYeqW$47zlI!>p~woDT3D8sjT z2LQysZYpghEA)OipO!jP%Oyt`^E63P(H3hhKO6|Tjd@=#N@+3QoDv+qGaCbn8$tIl zQj^0xv?m7ob)0~xStB6De(ru@FnLKKa=~;UK#WQLraTCNfmo?vulJ?F{3NT?^31!WfL)8C7Jwh``l+aNQ7<$BVB z{_w#ZysY^?vJWU(3uE@G|5E|vm=H+NugDah{tLHFi;B$f>#>aO^iLI|rWBHb?k>pv zHReRGJ<}kU4dOhgD|8rezRwofXi?LdfOPlu;PdD+iK7iH(|KcE zMOdo4F|EaEj69yOzv*iJfc?kyO|rLlE-cCES8u&vsXiskZC1&(YGV@{rfbe44s5LU zbo!f}3+jbL<%9&C%7#BP03a2L#_CO&sHa|S6Q%Fvr96gAaE zi_xTrLZDe!N#vEa7@V+2BkB~u{H{1JCcggE?T7Hk@Pu)%TueV$X_Q#*7Tet3p0W2N z@!3Mvu-a6yUWt>q@6mD4;0`cEdeX7VQY90}z=i~=JJEEG0_Y+w6k&m&j1JzB!^z^s zXj-Bu&g(+1cUheW9`k$YsSZ#JrimK6@f31Cg~N3Z5i$Kn+HP60TyFqLb|hKnwR4N- z<#TsVs;q|gR=d=&X#IFWr^N8t10)4Ns!$^5 zLAkZh)@pT%>#ecupm#m;*3O5`m-cg&7Rf^|UIjKrC}bY?;?K=Ig4!tjeujDr5d)$? zl?@QhGUa8iTEe4q=j*S$uRWAb5=&(-RnBxHWCu!eicHkYG4CDi!ZRV36ZaYpHEy*B z?>yrP&_I4Z9-(pBj1%-zr=OXXS>c`v1M1g6aCj)a_D?}?^wghvV@diK!@t9X|LL z)G*+K%8!cF+&6x!1JipR0eEzYgWe+X``cKK;tltAYA>{_xaN93B^d z8*1E)PcAl}`5n(@`_6Yfn(+O?waTJYL=W|}l_&m^R68wEyx;GRop`b94IV$_M*#~o zUKy-yjpYUyk{JRR7BBKoBp$hM6da#TPJ3eXp@}rQYGB#J1nDOoC62;%kOoRVmlL!e zUFRYetw*6;aZKK21{zp@{C*17_GMCMKd{H{xX=LPN*d)K!V$*v_l>m}%QepEjr*1F zRpea_{}zZFDuP}1rp_^^PtYA#HhN>uicTT}q7}iG8%vS2lwN1sTz#d&v~9L8aE}Vk z(gpdfA}L)C8(`Z~^78U$VIHlEl9BsXU~Nkg$Sp2neOSy@yMd!o4*aA)s}BEiHa~rQ z)Vzlgh-zK*j^DfV(vvnBY4l`AAT+=kcX~BZ(qSa(57icm6G-WrwE) zQ2b}4C*B>nTQ6M|AcAlAC^&8diRkF0j!CXaYl?8vTazL&(c6;<&QWSm5TwB1c37kc-xaK=YV zy;6Oig21xOzPPCS)?IyYRGcVuDIMbUq`;uUqadtC1hJW5!XzITaw&3DeDp*l54!qG z=)<@6K+R5UdUW546S2O%Sk0sMA;=OSsZrVuH^G~mUhDb_z_71l2@ccWHGXnRUYEse zORG!wZapXTt{k(Vo=RZ+j}k@X`er=4LE&6MFJk7)y-1-`?$^j2r4P>s3Rf1d51a1J z&eNI^24O8KIqvPsnTPP!hdf|}Y5Ji95o=;P7AbSiP1%<5i@W!tSk&k^i*0{t0hEn6 zNZluFHNBlamJ2ew5*ofaFQ~#h9Q-M4Ma-%zem4xCv+8ueyNlj`L>M^kaV)ze$@P(b6yb!eE8we2@P!fvxa?oan<+Plm9 z=3;OD^rsp+ZXJMKSGtU4mFS7QllenCOs4@vTmU{QCL9_w#&4BIFz+?+yA>9KP6+b9 z)0s?CoY39;SyY4;&4(rSHw%%^4*7>yz#%}1$(-*{D5}}g}!l&;&yTpud$VW*YveT zD(4#ersgQ(7iFjYX0A~g*icul^TZiCSDi>3do9>~Ucc5dSNbk?Q-wGp76Y>E z9!p2RRRExunc5^zi2k#rEe`$T{Ehvb{<%Q-j}5?=h;~KVlqg~ItF70SG(hEV~O>A`Af-D}cvE#QZf5qVF5IM5Yl73Zrjq7?&?I2^q)P_X( z9IS^4cy?p651J}BWs59$yIR>n=li|IceH8pP%Kkzvl+C@CG#wIXl++b+T%7J43fO! z+i5sYXo3|U0Owo&3V|qOsU~L>naGtax3g}^AH?9WRiZE3q-b8GY_UYEx@QvkP z?2V`X)K(@5mkGe9EXS6YvIdlUd$G34C!Rhg4xsT7meZnnLOL>rKAGNh*ys=7;O*RA z+&`t}{ti@Sv&J);zeI0bg=(^yQ8_!k#5Ki(((rm9HzVfuUNxL!n;qIOrj7XNYUkLY z_(@vNhoe7-JTqnjc+5p<<1j(QpW-9)YXPrLe*I?4<{^rMi{jbS;{N}|*jvEF8E)&s zEyba@7KgUDQ(TI>m*Q63-K|)0_u}qQ+}+(>26wjs2Km44bGH2F+?(8FNC=q_GJNlP z*LrLTr&vrY=f+{jsi(dn>$}|k6@>8o_2Oh#wSH!YdWP;3BQ0y4@BVa&k#h6da;cl+ zB0I0=dlKgPtMw5~pvXpMn1YrY?1?9OCYtXZks+6Aa(lG_XBlqrEy#dBAwV=h%-;a=!b=3m!~Z zEWg>MD;%C$jva}J_Y1vHe|W|#o${ENoH2faXaQktD6~dj;2To@2)co)k)(bb+{=#L z5iR&D36*n4R29E37r9a!!`@K{;;_-eSJaCs1TVJ_%n)bGGB}<4Kk8)FE(7E{Uwd7Y z=9Jjo!F&v{`+;xp?gD<_{a?UZ-@rOUg>4rv?#^UR9-m3CD4)t=i}~!V@(~}%sb5g^ zjz^Oru6lYb&pg1LtyodhrHMs{UuUlc?7x#|Vu)s3g;3f1QwEvUygrxqI;D@2YbtB@ zM~s&M&R0BBC_DYkMx}K9^Kq%%0jFj?O*kl`>ap}Q-{W18!GZY7yT>$Ea9U*r^{G1cuC?}FQBfYzzzATtv zW!!Tu{<@^zIW5@u$yPP)v$aaE*`Vli`|OOw^!v>=LNU=akhSO03of;O{_L(5c)sTM zz*_7c@yH$WkD^=HHZgiWVg*S^;@}>q)N9`X98Nc$Z2ii-Sy6L!(s1rsp7;ySKMTPv z&rM4FU5mZ)YE_y;v5X|OllC(usTdOt5(3Upua+qGge@R>~LFI7O!bes- zXN4kB{hH!ksZ^A~@#^Lk{%W?I=j*MTOO3w;dBb?&oMGx8-LWRj&>=Rt;(cr)cEq@} zPoGmI3NnklB0b0Yaq7Uei)}#|j$5YQB3K!?v_i6@UaSOTK2;W@G~3R0f}xiA7B!$m zg_wL4ojWkGoM$?S?3#2#6Q{kKyoNGa<05 z64x1+11oTAmNuhh;Y0KA(!H_(68N$BIL%DVOR_K#|JW~Zg>id=(Z#`M#vM9B@7XYe2$OfLXAaH2Jz8s%Bvh8voXX|CJqi0C7jy|^H#7dm< z7DA_|1@y*Puhgp+H7G4d;cTSC3N7<~l!A$0N=7B% z{)!~HJd^C@`u^czU-#xLKS?JiFl&^#P*>ozW#%CmNh#ZU>1vKmj2eq{5!=csZ-hhu zw2|f7UJx+e>~vl#4c#|R<_`%>K+)L@SLy+V@thBBwvUNTb>~_kG{0QAG%Z==%#Hd*Wc0mY4F`tRjJx0t3$*b- zI1W}Z7aEEHrOhtZPkzs-Rvo{9*gklZdJE7O8ModH+`II6v)?zJ!u5e<1LkYT48!c` zG3Db(V8Z^QgqH+|yw_l%SCDn$#+METkeCN6xam-z*cMP(F0p{80Cv@)YJWe~szOA6 z%N2tB4vXo}CeDSIr}w5qBysPCXi=$oW|JVP2R|AH3Ez?AL@1g!_R-{?Q1+O`U@C`8 zvOZ$v{-f-^c=kB;Iq=x0UCESly84tU*7&w-9ZrL%LBkHH?UZu*ebo=k6yyT1pTa*6 z5B^k?*a3`<%c1x)8TM?hSQAf_75eAbSI0kqa6xUcvdq?Wk}E@j=7!m|;xntc7rNH7 zfjkB9^shg5#78E&Uj%@43FjiMY{>ZfY1obz8VwIlZkj(I$j+?zVmahoqul>&<$nME zqnCeKj?xUf+e!OS`wF6TKV1&!=sMsyc>RFbVDi(6epN` z1zh<|+9DJGm#)sP9>NH!3k$qmJ=f6fw_rU0v(gm;jZ@nOazoOfREr$AlLiD82`$`t z4Qs(fU|7+IA?1SW7338$kp4mRi@t?l$VGeZAE4x5!wQoBt9JvGU?_h@gxsE{N`_?r zTg) zXK(GalHWik#(y7~5|Ip``TgY~)a)gNUb~MRX^qV0;icCr%Wk6ZPp$KL|I)zlZDBin z9TOjQGJvU|5b_gBT6WiJOs)Lvzhh#kizB6XOtv%*usA0HRlGZR4YeD(e$#0{&5W4u zO44r<3JOeDXZu3eycIg)$cu%hvwBy(&h9fQ)}@InREFsEnGv3<=bhzxs~db`9x5T{ zR}PRTg`jI79K0g0Mq7posx4t?3$9jl*qvvMYSI8aSjg3)_mA(BV;i5tJfTs(dj&SC z^zp?#;@cOFc-u5>L3&_XA1-BKH~$s|V6eY42w8?{Fas_C4_$8C;fH+Z7L4LHt5aY* z6NV+7B$vZp7N5u6G%zQtLzS7T&X=oW7$4#fpKX{yRfKs9O_2v83@6MKOw8ZH4P?u3 z*o-?4XYjR168}hF4-K!5!8qmV$UD5wlCxU=6YK2tgivRB8z8q;AORJ24}?TanfWo0 zyw;0bfF8UqPP4F%0HM0>GZ0b++ih^6lt3|XxIa{B2D-a`j}p2M@_Ch2AuhJ^DusQo z5Q>7DS-;+HxBWeTlvxP(%kLlYO(X)RJZDWx3BMm_J$-j{QwJoT zDCg&mRfX6Cxx44UJP!&}8xW_SYlpaf*2A!YoB_w%)uGR6v+7G7-}6Q@U_EWc7z&2L zjgHteLtVHoRTwzN9S5%v+Xa3~i~8B_vQ!P80UR5`9W?r8;i?gDc-qe`zSG}5Jxh&G zt>{vPJbOR6N^Dhaf7X0PVMKJ&nnDLX&zJw625=EcNC(eXS7Sz&E;~vfwiXwaI(S4* z$}@AmVkNIN^OFa0y~nGF<`s}SroWy$Y2)uFodZLK))^hEIQjPa*ZboV6MO9Eg2(D) zWp#jMRk3XOQKR`xSILW}?J=fuGr|~Tx_83$-3Q^;VQyGdKO3_^6_U6i2$P06VF+6f&o^zs~$1k7e4?Xq@A^!KiJ;jalKpO za_T^lnxPOwM#M}eDdvqPK;0_RJYA`u-JSw;0@AcGKeP<@-fcW1f>b@24Bqxa(qDVI z@JQNTyTli3p;{4A?M0P~MuKnSJl=3vp=1ajRwuAg6xNUWCA}d~2;i~5Nmhx?msXv| zxFyMUD0KcNMGdzsoUN?0=E_@{dEeeu%GK&?%(soaeECQ)3_om0`w-_3IeK_cOaAkH zt;zlP@1Nc=%<+Ew=GtEvf1tv|gUeaJJ;-z>;~IPkkeG-dF!(bOv<&e&INpG`AD44X zDfZ!8z2P8*-c5!hp|S|odmi_8&d8|w3hnBA{0O~PHjk(G=5SY4rzUcG z%#D1KeaepTS>5hMaKPjI?>F-4nbbBv;8_dgr*-7Vn4k6rV<<*FTw1*tGJJSfJi`N; z1Hn)AE7pp{_%#^qCJJcm*S}nYs+_xo0oS@df4NmE&bLB8UDYuBI8tT?6OQzp)Y=kIf8jN+Zld1j z`{o@^u3jBRmt=ON2SGRa=1GcjH}nxO+6e*q*E4Q<=!D&3)^CR~|FUza0@pXtK2Y0SgRjYH@dajawCLYz{R5}0mxddLV)rI zOk8Mr21i8EAwc4_U`TSO*{U|hWbvvWA}9J)4LD&PIc4Tu&!HoXNa#XUnV5em>ctVG zyJy}wS2tKi0okV0j=#V=kX!p++i@yTvF-KaBWo2%Q|eTJ)e47?!z6qBWh|Ys*gY+< zUAdd!3o*}W`Y)tS;S}WVPw+f0ty$1=)rVGv0^TrZvc#*xL|Zf}C11VVog8j{>W?#b zXrZr524g^lM{!tMBVexZ-7R9z70MBd{|)*W(s^BO!^q16X!qL@YWa-S$L7B@$nv!n zV_98%Nkju7)z`Khy4_SJ>nB5Lw8*f1eR@LldC^$aQ*83sot${aZ!i$8f)% z={|=d(1@855>&$1SumnBu zS^=p0rcQ~FNyzp9N%l7r{}|G0WIX{Ywike4b9{0j2NE%2!t44={cHJ~X{$(lilVut(XVdo~Q|ddf<8thaK7JW~A2WT=SMNUN z?uRP_U7-NJX6#VPnFKYF)fV$!c>mE3fjVr=VUDMoa=vVWoxRk*=r44kZX%%&)jF&a)qRrM`>qgqKpGMo3`hQ$n{!%(PW`?KEAu{ zzf(58G-0?3K4YtMPs|{yRDIN(xhejc8$by}*ZE~(A6=k~W^g5Js4PRfP7!dK^Jb%v zapEg8nO&x4fLy5h7K#^oS?&&RWKKY8Etl~kuAs5&4F~98VV{rdTr_bF|B4j+e=mNX z*_EnMIESEvm$Yfv3 zn}a|g&Lc2=N$UCtUPW_7ejY1EUrb&uCbXSW5}}7nw^I86)6GZDiC}d2?g&-YT3Rx&88~Ma=kATxQ9AG7 zGwjeBStxJ~x1jV)LD@3?Z)~be_D72w9!MA*yZO+`-|r)kvBOJtwWRaec6HWU{Z`%< zyDk41GTojEWhacFB@u-5Ed|_}<_}tz%C=sijuLd9VB^)+u!750fa{WgXBKQi?J8B! zq5~7M$)9n}6!XdvBc)A0L~Q#xUf8mj0=idq5gF9Jc&UWA_a8VB0>yck_PhRziv>t` z@R|#xSZvHtp67y!d$sGhctRZA)xLsLK*}wb#$kB7tZ5PeKI!FuIOm(j^}if9ctthv zZ6Qh@;L_=G3y25~#7EJ-%P(Litbp%Z(N|`8;lTw$ zHeqnp4uQ6f7ZH3sv&P-ep#kIr1BNAOal4-P!5inm5`Y-k&}P8Q`&0H*67`${b#;3; z)ad%J0Q%|A`rc`35;Kh4Rqh{XvYT`sP~OMe2@5KnvgF(@!0`!@1cvF&cpEXLqT`ts zTE0h#EAaTCjvL`)iP5l1eLFMLM?dCJzD_md_57M~?l?WYz@V&s0onDGCU5&)*0XYs z8tU1ugXl{`)CsBg1hZe}D0Y%Oir1>VERu2iqkHYndUN#rrR}%9Tm>#OuHM)v_V@7g zQ>jI5NbPuP`8K^BMPGc!@%Ymq*+z)K9O^u?yT%R>BBuz?Gq&F{73lR>^60E!{NRK_ zqOlrm#7;+e+nWX!>w1J#h|+B(hOR zvi4$2mAIzyTpy_zOocyhxwV}W(->2{WEuRYXX-651Y?8%#+^^oGtt%mM~eif=ugHI zG36o$je8laXf(7Y@JnbjXAE@1y6d&o(PD9-+0l)==y_-5SlUhZx&)7ZzC4Q{iDh$cKIiLAb?ys`*^Q)^j@cxu_ zc>$t4nyA@%9$-OXF64~fjJme#7#iygEqv1Yv^k=#69c-JlnRIX9=nml%??l#bU$-~ zbG0+kpl8uYB~}&P;Or2olB%4oapyOPCH{)7^)|5nDQ)JDFG6&>vlo`!0irImg@aHm z$dn0#qNCAI8jvnGUTibr<@_8Ue?I!Zz%NpCrXt3(V17w{47;-PZAnVV`5~YGCwMa7 z!J|aEM z9G-w;Ng0@c0fo(FojiRGXyKLm5O@6t=b2H*ndkqZ0DY#KwL8ZTDNz_`(^%q5=(^T@ zfFqgO{@Thxn@Ep*iL#}p{>`xLv}I_*#-kTIal;8^eLoEf96t9KXjiFeR<7>cexe$% z6?Cs)n?On+jz_!am7E|>kH>g9Pvjt34O1-H7=8#TQh?KcYLQBuyVnob2c(%#iUF3n zmHzw_5Bur3Te2e-&jCO9mjwcVjSdO`za(_kaQ<_Rv4b#2I0zN9^^jaf5%Eu^PnD)k zrDjb4L(@*Ji*SVkZgJ*#8?bv475JCbrrsNK!km2yr;XW4RjQtS_lV`Gyx}%VKdVCQ zk4pTsG_{g3!{v>Ym^Ln-$0-0pF0^-e>p|rslg2a+?A7hJ6TMMuM_3(UUiQbK|6p<6 zCihD??F}^Ft64>i`tkm{4Op>!If4zAcj9m+qdJ~%T3FLKBl9_l7Qy{iVWG*wru?gK z>wKAx3_$nx0z7<>-#BB(i4Kjm)D)iRrVAk8enk^D! z>h~n7Y-U=S%e5$~MLh_f&u>7?6{GzLby;a%T`)~T75dJfWjvR!*b;-cZ^EZ_S%9=J zA2A@Q2ne9MJRYcNv)|SDz{S0k^^sSq-g-`E;`wi*ol(7e{YH>#HiCdB{ES{@`f@p~ zX67-1i<+!ACkm>BVE9$H5b9e+Z|SnfexL9qN8J+FI!X4{Xkro)wqR~Lp{5h z23~)SUambQbmqpnK5ITk0aBSyBNO|2foGhh*tlm0T+{o;8YiQ?31GY7{-gdC z_>llwzTyomQUO4wFO!$G5h}m}Itp9b{X0i*@IUn39lOp_B#aZlmKEiur+%Y6lP&Q2 z>0yL|W$OG`k>vKk(21}saz+a&GKcXjT62pb0*#YR^`Cg$u4*-yvnHW*k_n~K@0Eq< z6az~(j9V{&*HapR%FOebiSN$oLAJto~i9N$1 z&lQuaFEtp&{b|wq3GRX$#yDFDFkS!ocuSI#fEx4i5IBLcJSKv;s>E@`dQ=DMEH5m) z;e+jq6Hs1dY~@q&s0C_YV#Eu8muu8}CY&XGz`4)}@m5rLyN;HX7lKyHf*r3s%%>o_ z|DLSl)*^|^eRUQA>K^mI1i9W=N3Oa#g8tmI+1jOVGQ=*_ZOP8xA15jTz}k&yEL{?s6xK0l0VR&>^ybRxLwS}osK_xxZc>yU*=ur5-K-aep;*a%VBJ#Z~6e zNTy`|R>w}{d{;A;pgmpl4{RH~Ki(Uv)uzGnIY8xgv`JyF8FI#RIL>38dtA}-xmPn$ z(!kq4?Ul{Vxc?DhxA*(-c0O}iwc{lrjmAxFP}R+3V#>bB>+Ud-&K{qw_ijmD*}3ya zMx{H8{2lKyM0To~3-oPxD?TB>X`t}zUUzd>Wza!wfUI)M{>Y-4&@c;J@6zX~0-jpv zz!*>a<@RVPutZgw7(z-iqs!vv{;*4Y(3U43!G@pTvC|t$>+bew@9@uCe_JO z@Ym&b1CznSKqTBeCGe`O%eq^t&IEuTdJNjt#QjEeY6an#RZs$F*VB8DDe?{pwYFUI zOGF~wTvXvLp-KtpkCwuJuvx?aLn@zoq-1E~cN;xyhGsEN>jE7CK^ z`Lb09K$6s7Y^HPyixr>I{ft}-H-JZYzpMHpjSDGZKlW-TL z$h>P1(b2rM5a1i+3Epm!y4u710mkwC>v&b)S(Lvlmna&T=QEH` zO>wZNR#IbwHcn(rx9M}pCarMP`@~rnLyUDqy2Gir!6c17y815OVba?ei1GGT>Rt{) zC7B93L3A2PtSn$Q$ebQ{ygL+&`c`gOeesk^b;^U-s<(;po6YSv15bR(iIhpv{^v!Q z?*52O8R^7|*&vg#G$D?4+jPm_XdRa{vtCz+uSI4x^^ZC~RH!cAkyB+@`(?D!UGFm% z3@H~L7ah%&DpeA1!hUph7g)KtQ@h+WL{tG&BD& z)oBY!AU6a2DzLGuM2U;Je8-`W>*kQ4sGSdrQ+M&e7dj;&eLQ#n*9RdUm@Hu1= z`NdW$2NwkVaT^IsoNS+YxNG!-K|;e)^+N{2d-Db5BjJZI)<-vrKdV;E^h^J>0HS_# z6)9{1O#BCj)Z4=2lE*|0XzwXlgkizg+8--#S$_)=seQ4Sio82rAyI;*qSncKw1)5J zA*#nz1U~T=QT#SokB*T;UI9eui-U%P2c!7-_?`F!gVobv<#chP%$ZjUwW(qn70oBAmyW{rRHOH@}_ zmev`t0H?#aMTt-CU6qJ8kC2vVw(T*eaGI5vw0w9rc44z93&>ExAeUSoh@C+{0-iNG z!F@}#+=pHJ1wB8BNV>I&G67dB{o6oE!VY-``s|RFjuTr<#z{tuF{a@ z$6Z6;I@oddsCjiYQaS7}VH1A+gxvEph4r(PnNj?H(lq+)(tdBH7Wk@Ixqry4Fyllg zZORkNFQ007@PKr-UlET@oQ!?=hVzdX7B4IIPfItff3986k()2hP zx6!nGXi8K$G(4#;suFonm;I`pk$c0v|{VKhCl3+#A9CBhLKBI-z*8 zAGao_^6uX8?r>;v!~lBC)k)0+TgyE91EBHA-M?(-Iqba}=l1Akzjt--`9M@Wqmw!0 z2zn7Ve7F*KLa*=42DU&}>-Vs_KU`1n7v$RN_p=*T=LRHShw?J5+W5#5aJ@b`^xjoJ z53UBX{4k^w%G6Y7@P3B%YOiY3{fJ#Aomjp59Lc@BPp6(r(z#xzB&IU2K+9J~zzlH40K~F zeJPf=(%kz{un=5b_quf~SQj)hO6f)twEW|r|XMt3jW+Z7{Q@K z+2-!Zyrlf{%d5lWkspypZP;0msPi{fXL3DgDVbx)+nVfXIxoavl;+u@p>O;9{pi;N z*mtW`Go_X74D=dn$5>0%qO4|%S=N4Cmx=V6`QJ~ItGp6uI3xgTSh`iU{?@Tgdjf$? zs3?n!>ILr2qs*rw3m17@U()voiUYsb))f$1M7K=w*z@ZF8K-Sk|`PNLFPv+myF zs|zff&GMn`ms^X}rfZmVMyk_KmD_cY?57GCj~1$BEoV1H*`Ce50@=*N%kCtdZpg=Z z9M)Y5Zi;1i=V4jF^fdua*@(c0kk{+uXOs$;hU1R}9PMT3!XH&j3?&H~_8o^}KRF82 zsi(XL^Bl!4czyc?=Og(OTH?Q6q$}_W3Q1Nb0k>ptF-ZUCOSF@CQP!9V(ZCs5gUk)T z`Viag9uBrCNy|B+!k4EzQoH<*AGe35jL$`vIE$KSk*^(=5{+=9BeWB+2Bo>y@;Os5 zV_h*+fVDt2I!>OSS+v5oG#8CdR8g!^gK{sjJBtgkO7X{7H)Dujp_St>ywm1{uSb}S zo0y$f^KtyRC)R>1)`AJQQDc&C}NQ<9dFVEwc7?oz7MebScjQQ|YGwO27 zhvEv*Y%0Ve9PvLL7?@4|X`Lf`hZgIK*tV6f?S;RMs4N7d@=vk4E$n&mzf)wsbnjnim3haeLyGfK>N zy471jlnBCq_?ObE#J`k`?Ih@UoxV4lV!^>@)3$3@ZBnEchOR+kY?s1?)4w@V3EPIY z6uiR(&fn)E2LYE02C+Os7vQX~$qSr1lPlrx6P_7JxbTPT9X5cx;}BK9q12UnEZ4(1NUrnClV?Yd8+N-&j9>8P z={Eb!l5IyWgCHcsZ;y3gK=9VurFmh${uKGyPF*h`Lc&o3O(LFW^S<#mxhmpw9DX8sCEw58 zNN4|BZv5LSU++c0#GLOZHQ_ zigl4oV!x{#jyC~L;s)?Wwdirl*dF9sL`8ENZ3hP}omN!RH2*2-T>|q1Fj;^E)739= zH`he@gcBDya`|v#e9YjyWd?1*bWOH8!zoK&yINHtER9z2)hQ-RgF!>53hlxwyh{~! z#3Nw+pH0(2tkmOVoap!m$mGWqeuK#IeQ%Q$*yq6wN}Q_PnA*l;XR~Qe96nXtk{81s z$l9GZs7aZpSUtC-SZCE{?Xdx=HG*PkAnbVe_i@S5G0E{$_@f@0Zr!7m9EADE;vM8p zDh2+Cv`D?$F`uE{Bx>A#CSntLvh66&T>Trbm40ca-I5E)t1?r+2(z`Rr_>|fY@7m# z(4a-^{jpSOqKhjID)ZF_8O1GkC8XCfz@x#q{8298KorSX>Tr4>d5-IjpbxAl=+@B^ zNRPBXA+r%lp7q zt$5c9=F+FL1an9MV8?m5E}`^rWN4%cb=mkxccV7x(Q+Nhhg`-rQdfg)Zxt>F8}CEQ z%D2U}qN#1eyR_u2d|gn6{n(tUm|B==X!ZL95_j81Ql)gB%@3`2&F0NS8<{aFh! zTHWe)S@+WYy}qt=J}=)Gb-gaK>vrCT>ey}>t`HO|$cuu`6{|^_jjQ2v(YogI+C7i) zD%lco=5oHMX(9}nsfgmU0&goSxO7B(KD;^l5;fE-sqBMD;s2Orb0gWdxYyKlkMwEi3oMSB+)viOGA^i3D--bLB3W~ueS;K z&W$TGG7Dv4ZzsrLYVyoQN0)a*n3U#EOX%S)jkaE)aF}d6*2_x;=NMd;L9C3A5nc< zKtv9)1(n3}dGbe1u4u zNhCUTu8A1QWK+5#0_>bZYSU&BOxG0{oiEoda?zkGp+$7N45aj2xp{c-)@`wFyE(vj zSpH>`3GkAT^{^$+j%`9CVG``4E|GtB*I%KQ#D4lUTk=qpq5iM#`V9gV)LmyqQr21B z0w~^N#l->EX(nPgmf(-oJGQ7h-Kij_1_Q#gFYs0#y#aPcN#o$p$m2_j z=1Tao%l>*y!~I!$-ja&&i8)j~VYoTS@0GU(&f8xFX>?uc*cb0u!^8h^A;&D(eJxwA z1fjXT`lIfqIgBS-YoDnsoOJ1^-&Rw(8q>VFE+r&K1GYs2Z zQKnplZ#~{{qu{Z1N<5^PWF}$sMJ0|8t5Kz7e`n9ctlSuC&D(0 z#d3+KUg^2dYoXXd-V3C^xyanJ^K?C7H*Yc$aEiam2*gT0Uc}?G=>Hg1SnxVKy~7~q zBKOPIyC-FIC&aI0}{f-3omYmc`f|w4QOqm;E$w8JxHXXm`NqJV9E+w)x$jI=X^ zHS|T^q21N%1IFv~^0<2SgZ7u$o>7lNJc5*(2-^o)8%LaZ;EDHY|{%k_Ut7n_|gFgF0 zM=;LPpUd=dmJWU@Rt9_B1{9^b;Rv}G%imPMXuzS|LSlYfB5HrX*|(~WvBzrV@Chrq zAIb$wvxDl|`872uSGI+o&0}vT0OB>d5mRk?$x`?W7(q-aT{G_7oq@MP9oUm}G5V2R@E5T2Mys0k?Io1}To;{!GA*0V2x*=DWrvtA<+yODYL zNkd0WE-{9P1M|>nI*5*=L-Att+Z*GfAFo1|@3!@L_#ihLx&}voTchrZ$`lk2IhNfN zWms^13{50`LX136<{Yf;uNQFanlcFh*ggjC5!t@v`o4MBevk}~=Q{cRAxYP8y*2q_ zxa{5xEYISwr^Sb~t>^OX59f!2X680loIh7@l zz{fr`Z@7Z$@P1Z~gqJf>@Htb2rFOCo3n?9C;c3QA6x>i&4>^nED#(lEXEErfSY|>y zMtep&FR)}auL>kFT^LK|N1wZuA@RJg>O>NV)kK4%gt=g{&Z+2x#}MOh>~}u7*GQz- z{S;LR%4&c)hq*R^Ha`X`-*GqJ%c2;MH+mQ!JErEFWIFTT3-xD4|EPMawPrQ^lm!fp z{5HkvvJESCr&~IKgUfjj*99Y0MkC4U6QDomE?8UM#-tic4@W6g6YUVHsktC-p*ZxJ zFJ@Zu7ps@j_2SndfE|-uFfX;c6_k6=KU@s1_Rk1)F!md%zjIkm{FDS{wUm&qo1F|F1;siys*CgF(mNv zXq&-6VTgc1b2)pmQ(a9AzA-H1tpePA6ovvD%@X;{^ueOaO2IkTs0;khCp zkC-jh)Eq87H@#_~)4VL&R)gBNm>-q2mnn{w^YYWlyz`h|dl4a$5i!NGJW{AVAZuQ$ zGCT}z^rqRd3)`#~Re*HZ(TMR&)rd|_7O0_R#aQm;S^dxG8mCu^g`F$D$OuzH8Ngrt$qw_Oyof?AVb z>t^5dw|y0X9}H;;yhZ=YbTVJp~o=tQ*c#fN7b)uhF|`?p64XMv4GM)E6lW> z27TCn0;#twqrtRNEWBH7!WzhDl?dw*XLK9wZiBO#kN_?@69ongx*Ahb^vd{MkWJuL|T9C3WyK2qs?5}iQ1!0BbB)?xqPsm))|rsUlLLVqAa=ap^V z*+NqJxIC=XDq{B_6+zkl(!a87=C7VK6|8uJtS%I^(~lbc{V zu8ZI|%sG*F-tUea@7hr3#|8+F_B>n;v4NqZ~dODT*KU;v8yByE6> ztMKrR_xoA5W5XUGyqT&^}!1x~k1Uz?3U9Rz0-de*cLX-5AuUN4qG}W5PvsqnM(*<)r zIs;?%z$B*74`@F>1NmPetdA^4D;+8&t64dQ^-*Dszixpz-ohIa&ROP+`i9HjO8ARTY(?)vfeb!N@2l}?}w6syE*@atLy07;yUrbbnY?%H7nGzhW$;U!D2yP>F{@I zIyumw<-G4ogCV2r=J!|h#Nu6p+?KMFBYsyBiuy)<0$Ga(Z!Cte80=9P&tK!7vg1Ye z3;OlziKguRL8F`QIg}DP{Q@4TX#*CuGmOa%A2Nuc|vH)UHt}R}A|w zhy3xgv|{T&k(*yxkK8&&qD6r(vikuHT(oyyjeV=T_SLIkT1jIk=AzgbCw>rjLrxz8u0% zBEQqY6&y}5i@M-)1)AS1P--h&^Aga>r}#jhQ%1JAu2HM^U5F&KO?&bj(bC^8DUts7 zCy|_P?%JUs6oOA9s%8CUHr+gii<2)1irrougZ|jX{wqnfsOW*wN3sG zVt9Mwnjd?_c}-CUz#OR*N;%VtV8sW&4aEPzWyJsDGUAkBDxdz>p#}#eM3-F8MQG$K=towsIK_-i1C4W5snFSDb%Qk#8 zUkBXm8bbZNYCpF#0UmMvdJz2`%sNv~0oCxuGNqba8kXfuceOHA=H25!B9G2| z3$?!!=G)W2ec~jqyCv}?FP9d%NbqqIJ3oGdKw45zzq}k8+!p6=wh~6lqCphd-}RF# z8_%t_FQbj8W5~RV6w{;9jBOtVFn_Jdrp_*`Z-GG_e}*ztI-Ea}idY6Nva473nQix@ z$Oq>HJMb9HQ`oIvDH5x7s=q=0*aMH$(+YY%vJxjxEm$vQQjkwTGeTJSpoFFy z8(BBS3lYbipxNhkfJQ1%+s8fMPjp#h$X9XfC;eM_7%Pj zd=wL~K;arBxUcW$sOM=bh4!LIFx?z$SP#*J(KkYxGk!V9l_wN75P1^b5s1_Ad8Tiw z5v7ANsx~e14+{S_^*iZs%y=S=4j9MuLZkly%`&KM;4;G>pFld-?t0xnij<^s_*Bv9 zRP*{$R=l6>5WA(xKq({kc#>?YguJWrgL)zQVy~cQ0{b>>w93-i@rQu-kTXgy0TmsOCf!RKY}AI#*ukNGl> z0&ZT9iV?cjJQ{|M8#9-Xrb_4{A3d4bkmPU^iNqE-hi3njO0Hm^2F}z z;)FS#CsL3PvjxN)B6HU&m z^hKBrM~pM^?4{a?N2JDoanr-eiqLsc-~MJw+}(X1Rq5653OJhhgfQ~0Nt>6%VBYW| zfSjTdcm1%#o6P(7px@VdK~%|0)D-~gk6OvlN7=FB6$jvO3-&)QbU6gIL+5ysJe>6! z1X``0RxLXy#>$T4Z?|#~n{5pI1 z@|@S+G-ch*98aT8UhbVB6S>wZ{_^d-E;o|5n|1j6=iU9gdNeJcDy!7yaf1PW2|AC{ z1fPy{hg1^qzWf`xZ)ihzz^Z`n;Nh6&4(8E1Y@^pgANnR^`A9w%`*vPYp(>TTnm^b~9aU3#xqZCd~d zKIc1nUz`K(Y&W}?4tr^rB$@ZgXZTADAsgKP(Jr9=Z5L2YLY)2&J^X(*5Wd0ic?R%c zfT%YMTc9Xm5BqNl))z{;Gg1rhhLqq-St&&W^w@;wf5s}L;w7nqgA2N5YBM1hd5i=e6|KC=x|Kpom zszBt)MdjPCbHZg;2`uXIKHeVvfC&<1{gQ34KS+#QNAc;r)c0#o7clNj@W1cmb8g_W zpP$WdSN?ko_y2HP{*S--uP@(;GMsFLm&-y{5L-a$OyW@#Q!i`1Vrks(9jpRE;hu>W zDWvfY#TW88Kd`cD;Gv%-1J_*@{RDP>B*a*P|L^O4q4xB})XOQJp-sB~da(b0e;!Kz zPF$A)XY{}S|NlQ-?0@;;|NU?O7ODSzZJ%KL?@9RIlkm^l^1mnHe^0{y`$=F@M)7&v z#JxS9)hCSFUkkuh{M`HOZ%_7<+3&B90^sty8)$?hu=WIS!1pFdbVU01GxC4<4BH|G z9;Mq!JUt%&_h##897Q^kim`fkSjhm038r8M@{YS4*#FY?{N&MvuWsTT^smtf!uDqC z^K~3A6EKDv|Hm!Re|9uym_S=`Hk4u{@=tc)S$u~l%$o*S`2>`82N7p50^^l!#tdT| z7+~(Eoee?S-H0l$MLmalh;`Q*qcH!IQ+Srx@wcH$mmzwkW;Bp3_^If{GiMBg2AV^R zqlL@3mdhETrVP9wDp#HPlJaW(XYIE;+P5d&(Fl#9%D%)A*X#YJzKowxk-JwEs=!WT z3)pac{5<-Pm-|1-$nT!+6W##x%2rS$$AFmcBRv|mLq)oKuf;xbVrOFe<7r6C{X}uw zYk+5&obE9Aq3y8I{~sNc0feT)bV%cNBi#DV0HO>lk(g>`t)B$0@(sDZmsYz_IFX2? zq8MUosqE=>5;BSl^j-zX>JZU&Na6021t>mS9eP*kbm#uNfPXt}`@>mrJSZ=hLc31> z>zs?{#gwX2VmFS^TPMml&@IaCVd{Ay|?7edmL{!zVlk$6}E-?p`2m*c`+Bj&mm&l zi?Ft&oM;d?-maM114sK3ZKm((Zz2f_=PmqCMO)*as{V}s?d#E4=<~U~&qrJxD!y$I zv+FR8u>+ZFp7Tw|a`R30A?Wm>$^cze#VMSO{`BR&1A z2Jez)OiwVFHey6W(Iusv^!1SaZn&GG$0{jRwisl+FgPtGf3nYbU z_of)2_}m!g3nMNZ{YUGnA)-8U(!)|u*`HcNp-dcY7h!sLdxJp^fAB+^9dh~8h-Y^d z)NK+T5irZu=j}D8A6A|JJsSLU1t^Nk-pinV{E)r{df=EuyYx|5kj*vD$2FNgGPwHnU*V-HZ-C{d0w2(Kk|65!c-JJYUE zEc9DEV9{&VeDk^XtD8G=+kuFb=)G@5DB{ayy3Jd_0P)-^!tXv!bdfI8yG{#WRpSau zU+O0?tA2@MR_8ue4H0Du<+N|j_C3pu8$>$@_~;oTO8#)#mw5;01Z?c|nI%FcaNne= zw9}-o9VxFiZ4XgqCU(mGboBS|0Tk7uZxO_s_o%#Go!20!SZbN^vbOtr1M?I4#u!Aw(F5TA0vxje5ztwS9(KBY(iFO)I4;r{B zGMf^_Ik;6RWE}aE0Y!?X8?>v4rJj*F$3_eQ03EwdVwo zbNK^=IFlQ09IyQN&IcgnFw1p2S9}n071i`UDJuSQiJg?_aBz3U^J?hFArGTlUiSuY z0}`Xf=5s$=y^LUu7tM?Rp0nym0y!@Ic0_B%QhK+FD=NU(8$&3(d9mxxR>)m_3pjuc zOoRuq-yr;~nDSF?>SH}-M5J^y1w{dy**}Mxew?QjF!!B#VyE_Q(Mr>@E zMqpoKgKCFUShgkGUGz@gUNJczPQ?OXS#U70x=H#}Dy`eP{Ik=08*oCw)|Cd4*L-!4 zeuou$0k8+$>0T)2uZY)o^53um(NUSRD(LFx8>CD1k9b;b_bSKf_JFj(pUOi=w1rSi z#amw1MNC;I?*)%ae2fwCFAcQ)%~=Fd`vY0gQr94q_v@owfq&^R9>V8hoYAA@)|OYp zA^kvAy!~Q5gt*$_btcwgNNP*X#Y{HtrGztue!)XOwVIgVUC3aOF|$^7Alah|Wpi1) zs`q`_GD>PsH4)Ux}Io@MvntY~K@iXavsdCrV0;@;GR%|d`JrkIZ|!jNP^YH>VgPQTO)C={=>SUo7X z^7~}HT{BFi=FBTJRSf&GS_b=_NZXzPwq62rn%{&`jceVKIv6@(O`6(qmm`T-&ts$*y>Y#X z_0ku80SL1P^m1Bl2lnRm-Dp>`EG~a;(|BEfSgo7|RY#`GDM^(Vd7RgNs_c@&Kvkh^ zx{A|(@0POaK1WXgbHzbUoYD;Y!PVYrye-R^K-+Khs?i@XTiZD;Nkw zF!Vmb7~MVFF5W_BeZR%Bjk4QMZJmL&iAFoB+(t= zaxkIFXXVywslLRG-Z@jIM^HaJY^5H9Egen8=(f^8Sl2D$*?l?dPDYb_KakPGzx-JX z3BA(h+X2AYjQK^C2$ZkdJm9)a5wzCQPwEISBJCyB&nd zwe=wZSX2@oEiwP?R*&#e@*v6d#?+~~(Y&(0vUp4{rk?%!BfO8-kBRgdbUFOP+96wC zh{KJ{Gv345Hlfb79zAl9h#JrlC;@tc4}07b^I0^Q2V=ON?mdHKm~GRu!c793ZF?;* zraITB(zRB+uL?&IcbDY3hu+tRR(rX|GD6vm*lEPkzSBi*ENAY4Z13g^>iwp(<1#M(|zH9W9~`HfU2QTBeGQ_5>2j{rekg{>4j=f^Tvyb@S`3N zkoM?bg0$&bHxI!<$g{8Yv4z#+4F9SR#A*Y+SmloFhsTybnV(j-x9PT7dcA?-Q;6ccTG*>m-bTMscUr`n>}0b_ zC*HE1z`tzDv%@yw-)pi+?KS2%QESW!DR9Rl#32D`v}wfL#=b_!g4xW!l8NqV^_9dt znzof(+5prN)bSw^RJd4j?s_chEo$G?BE92Ny8y+7-(iQSt~~xdws@9d&Q6qyvW*AF za}_DG5i}Gl34bPlwPNp07aJk;(X83CSpd~@fUNg+O|3HQUlmB%0K+6M3rJ7k8x%Qi z{x;KBxJR?^;m=mV7>-61`rVoa?{^kEN12i&<1HWx+=zk)5$nZr88hyg-g3PMdvo4u zDWgHGNGLkreLp6BlYm4D8q=<6(v;ft8j_CTj8r^&c5W7U_BjHiUP#0dI*2V!SvJX- z;q@_*O_y|*HdDJx6&V(QD;k?nJX7#!xrxGUh~nJ90KD4{1ZBZdS?qg)A6yNd(sAps z7RDmVWLAI+($nkY;+(vLM%nLn>dH)c_SRs0KpQ6Kx2A=)Ui*1Y2D-;@zb@$ht{bU+ zz*vg*+;ToU<*khx$1feW@8eHVDh3D^*f#qj_V$M6 z^y7tF52&|%t{2$BrZ(c>B!QKYVWKI+%>U4Rx#IeLgHTn5;=6eJ+}kGs85KKALweH8 zDod~{(Ge$`vp`yfNwYVU(N}pmQ2lbtNiZY%?m18n$OX5gzyOUb#1%iAcy7NL)}AzD z4ce26P&SVnKv>lL&VM8qxlb)Fk1sB35x!={AE%%9i zV{$7`AvTz!QAq5pYSh%1P=He?pJHsXexKq28qNgXvDIQiwoTsm0O!l$+dc7W8zpFE z_kw4>&s-@--*jepAY=5LdtajVI%fYZil5JD;!#y!1Q{I=PnuE9q${qgb}W!j_l+(k zYji6BuO3Lb8e9jr->~K1-OE$@KeXL!uukMzXB&%`AGhAIE3`57Rw`@gwN4J(pYX?g ze^cOjmEznM(@s!-Z#%H@n$=`2Ykkz;srPjbQ+MIJevF9eta9p6tW3AF{f5%GdFuJ^of7I+(LrmxPJ}8b~9;zih3LU;>E@3~iUTlxG zs3tlH_3XDh4ce7OEEWm5kNnB8%#2sJ%owXa`MA*Xfl?4UH*psI1gt0o;YcNwea9r?|_ylRpck zmY#yJ7Dtm+?<;lG-ps;12YQNfFp1>RGAjf3)l!NjEy@7r&q`Ir=La;e(goa8!?vyp zTII|^^(f9K1Ok>mBqo<=q5N%Rf-gaE7OU*b#?bY&fB(oj}*OY7l#b&jA)zm zMU|^2-cCnRP5=sLFs}3{GTKt619|9TDxc-cB#4~ybsx3wpk;Y0eiFpi>_~!;l9srI zuNyP#L+HX>!vJ{H!;LQxV8Z|Y_#8Fd^Afu2_D0cEz<2p_y0!sd8fUs_<*Q4~iRVct znjFI8)aa8*SM>ze0@&-5dn2qZ>QkGJ;Cw5b(cJ{vB~TvxFQEms=2Zx_Hybt?pKGGu zHLx(s60x>bu}!i#1bYbE&Uqol{O#nGtG1gC&9K=&jU#6%EcURfXBJX1N0im$)V$t*KZ9h?D za2s3w4JInZiF7&(;&($`Gvm%5oLP>AxjdKvONO2^x<|XGb=oL*eb(q<;}jqqJ{zuv z2=z3lWG_dfr!q8VGJnRAdCE{lCmf}ia<81eN9fMox~dW^w9TiqNJH6csw=cwEK*{` zMsOT0Iw&yj=G_M`d~A<-Sh^gYxwYCaAJq^Q)GD{apK_<%{L4|8UHz|7^p~@Z6~!v%VR=8ZG@`0HJ##p?9$j{k^~%ImNH? zgP?~8wSp0V{|0&7@*SvrMw}~c2jnH0N%bW~pUoje^$>KTX)i;21joz4#KH<=8%BdcL5mcya4~%s9<0;OLd5G;IImZu=vvkY~Ho zw7TZ22wq9vDATJHP1xIN-v zqk7D5T>f1cT6tk5$XJ(!v-%{d$bJOodm}FTX|vw8_!L%aIh!UiWjswHv;e5;Mysrn z`@e{T--IGFVM!)%xR!X`sFYO3e^j3R-S=+(a?)m`!F{sHVTLsS&*_8ekMX8!s*SD2 z^Q$I@o&8hy4ZePZoi=z#Kd#vQUcB8@j7&c?(^mr(N$k)RAS&xKBS(rN%N%-rxtZ0* zc+?>t*9H^>gj5+h=kae;KZ2GWld8*^7*V51IJ8Aq^TIDSp80*A)eE5b^?6l~GG22o zTk)k2;+TJbuC$$S+^|EknYLmP^WQpx& znCrozuia|dCrOO=DZpC#Ecp9!Xe9T0-4zOj4L#-pIg_r}|1r*5qf~tWWb0O+Gw(mp z++@ z{cL9K;f!2#hPSSql*1=wG?icY5e9vD`)UPtm6PsZZGVu^2KE6`PALqqyaO~bXh=W% zz(6z?3y?D7L`47bQyQOZuT-9c25Nf$4@Yhd?8NTR_!bj?xEyAHV}>u6M2-)Rz)lbpQ>qZ(y^nH(!yIF`wBl z0wA<6_9W?*5^FXb5nxyj`y;i;u{ZZJy8z^fr})KSR9sSKKm#%v{-w4>f{ZtUR6Rww z4zFLX1XY6g!ZVpEp>evr`ZC=5ld9B;BV#!zRoLZ4#V?7wf$f*?m z#RT~D>)uT!r$>RVKj8~r2Lsa-iVRUELlicG8fdA$OEm-M(d z`0S4VD`mh|HC)~f3p2j|NcJ^Z1tDFb5mv{=c2iC>t*y<)uLWlZr5vRe7jW z_dH+8c_GsvCmiP-9yc+iU%Cvx`r62#uLfCLA_?GjzJgP7 z+9eYRluZ?^3|&VT#J9l3zpi37ZOtl^-;Z^W3JTv!uU4F;tASqQPTvED2{cDd^>Wl;*jfNi zyq~ubmGtu3tms2LoBm~kp4T$4@Jb*zMt+2PL2oa~GvfMY#B!t*)oq%j*+GwwOIjN{ zv;~WZNeJkhc90y$&)C;dGvntpWRf2l3Ov_)W=&?6<|N=%;gC2`y+$M}IZvq3?A=Oo zeE{NWSyLM4hr5_k|K67;F{`;2(M;uos|9#7ubl&VB_q#2a)Q3D@|qpRMHEu{K@-2t z4kc*b^RGSjYQqL{3#0coAY#{S7CMha<+=kuV+c*o6FDxLpx{MWfXwH<6aI~s4sE09 zJ<}fDVDs?`{OCB85`p5Z-9E>T91=OH-od+YyF!F9eQPpFM9Rf5Bf#qFrPY|Puo1v+ zNN?HM%wn`EL1=8)!_l~>Q>ZEA^KNnQivi>5#$wYY=B?AD*~@1Y1prbMLBLKV=h1>! z^l(4K(dHgj82r1P76Q-`q3Kk6I;EU~DXO1U>5y-5ul~++>;%N24kb=7BN7d{1H? zJ_ixoalY%a7Z;CGYx8OhjMi!Gx6A7$At8us#qC?s^={mipb`!JfpT^B(C?yIJa9 zAhx)&CG%VnwnT3E1MC^h+#3>6HICq!avKxznaz3 zrOPB%^uXyDVWSf02`|{;!uxSpX%@-i;Js}bZ$4)HHzb+cSG)wq6Pi_K`$!uVvV?kR zOPJm#{|U7FYWl&Yur2fB>{3bf>t>%Lhc$eH0Bl(SB?f;(2LC32E&LOM(AYGJf=k&h zRcS2Vp1UnDDC7uYD%4AorLeVO$uBp<& z{)j#pTXydLuhL3d!ANmyiH^FZoJG$)UZEH?%3NJxMba22``Ld z21W)#;Ym|N^7J*q2>1Zl>NGRyW*)pMVoN?$s$H#CKd|H;JCeV#Uu&(n1k;08Cb?rA z;0@r%9Q^#dtL`^uylxG4{wlGgwym*C=DpXs&f;NdC$M6T$6(C1DZ9PKqgB=Z ztmQ0-RH@VF@&26SuNTFJWbn<-?cS!+#iiriuaKfPxWnjm&hku1fZ}jFVy1aP`>Ze@ zd=wvWg@<*AqrNGW&m_Sl{22Rs>b2ElJ2S*AcHkPnO%-pN$XM=#p#<`SEWnQZc`9Oq zxX)KB$nug-(hAHa!oVWkOcf(YyC=Mp9Q!Sz&}j`OB0Ssqv}>m;==r{_UcBFxX>vR^ z{sE_Sh~>Veb1A+59{{fZaD!SAjbVM~JLT^kKdDzQo(0C8++(~|pC_jI-30B9vj5e- zp1;h+*m1@CET;)~x?zzvgd%&fXOHmoquaG_aT#q~hObW!AqFYrmj~6j@AB%1nKqn1 z%!jnOg=W&twhO8J!wAf3Q}RNm$t~(Azf46){Kk5beT}L^fQBH06wcBdYBHdM-0#@H z{X7WS{FP(dwfd?tXO_er09tHqDv3@{hWZEWswc;PXqQh$xNXWKQ!2y#-cT`)|YoW5)PeqU{lYxz28J+t}#aHm@ z;s-QpCuJrf4#7Ei(j& zHVdrYJ+6HEAoYlmW|c48xcvgdxdx6-rC+bJSdt~;$Je#$izt;MEwq|BGVT$?fh!o; zM(;b7E47G49LF}xOCn)9Qp|~lnO8JZ?GKZSFPGL9$%S0GhOl>8+1h^f^_(9<fuT33;V4 zJKyKy9258lB{%(R<0d1bt?~mEmG$(y=KJOx!28ofea;e_{P)4;^#WsJkRT(__cOr? z^D`2nKBD^tR`$x6DMeNf4gU}oJ36E^jRSqV5LgCo_6JD|r36mY@0Cw-)me!djzdma zSi|hunwMHU^5>oVFTCRwGc#L#JwaCFGb?;W7KA-`vu9nmmAfj*RU=nW>lv}SrTufK zaz}`aN-#6eFv14Kd0VZS+_*NhNDGkYF3|oaEgw}=4&jrS{8$Oox^OMmZk|$A{myN;h)szcYmtAD^2FC+Gd-7J>Q`z7c5~x5>-^quqS4ri zzIcb7a}PSpXU+}EWA@%|m5(6ScFjlxjepbMUE701@3*>qutRo@)k;U)d2f<_Qi`Jy z2jqEDI!FC<(MAeH5B*fVUN7KSirYw8=?&ix?XM$QqIf|mieE}R-0p-i=n5qAv+$D= zG>|D|sMg;we4A`bBD_8BT*pNrlg#8YkNFFmDk{WDsVo-R{PB~Zo^Xcg3N(x0f~%kt{5xS~TnF#hl2u75Kq4QtoDmkE-%_3>|t7Q2;~jsj;F+Zi=()-X-zW5fA4tuth1T+?E zqnu?M&u>Qp_#5b#eOE;W=O*AwaO=#>q@4A)ZhK7TPgX>UNEB&u8Cd>8haDkOOpz|$BGkG23O`#Q@|u& zRn&{q-vXrbZD6@xLo7529Ns!jWveYy6SC>ceKnS@AArgcC=q)<_vefCmo9_4{kaqu zo3)v65hIr>ckTwEcu3*@;$QofF#aseVqdP?*97=QMQY~{s3tF|=_+yPi zre_lNtI8^RnJ%q4$%>lFN&A-=-PyDsa|3alT>V2)R;8pnOl0!ycWZY~@B10VDM3-E z;OCXN!l~}qpVk%xa`!szrCkm)-9GxGA9Rd`8W`w2>EqTLAi_o2x2-sjCKu9?x=SgD z>{hAE%(4M|oz&X9B);6M9wvT!x;a{bLAl+|g8$oE%{Cm>QBE06Mx1l4PO1w4iZ~rw zPj|lDot$EenP0tt_yuu#O#oG9uwLpbfXT)J{wfU1D6n3@DD*&hH^Z^6<6Vd33wcfD zkX=Seo0AvV8t1#C%CMQ%jRQaL4m{+6L#i$ZIO(BzI=YHwD=L?a(Mfu!xlb~R-@D00 z?E?i)rl^M(u2rO++Gf5z)2}2i1NaScO?uzfUGFWOc!m1(_#li&k;c)`xlmd*>25Ez zJC!f9<;o`9$Jpmi{;-G~KNw?4$8Ou(8UrfVe~$JA<=&C+nSQj%x>iZa0lsw8Pc2=k z+TGy`axz$94yvb4u*J5-oF-txKS`}$%;Hp@R+%X)e&r2~{;{35I<2wdw)tj+q}RvI zWotSez3(m}Bk>u+ z>kPsZ5m0yd=LvAI_;4J{#vaM^?(svNc*>22M5e1^biRRp@7I~ov~eOZ*CBqN`;#-8 z`KQMK`D)g?8&D$k90gjQH16t0kW+W^M!*=#ue2Btk7n&DKGeS`&^H<7)3Yi2QyfM( zR`N@~@FrD5K;3K(KFj`1fZ@_1Od`T>4g>OtbG!%`RqE^t<(<`X-#>%&geNVg9avcT zHlIc4%aO7(kY`r$56g*DE|dnKM%z(n&0YGxYm*3R-dwo6%!6lgfJ;_DThXJflCr86I z`V8{AM=f;{1fGqnZ+neAFK;0BRg~jpmPuEiS{Hm>(4pK*F{QI*DzhE!bb`j5&u2o* zmVR572bwcwm;&caalS4zTfbNLy5d|VB6H``Eps_fyXtGy=G?TIpRE%*<K1_>Zjn^Oy{l92-7>q1#TJ@e-V5$=G_Tz| z9s`*6fw>)E3mK3MBMx zeP43@v0e@IscZB0IDoC2z&~E6b;PFt1;Sha3LlD(T+Qk|QxOR`_BQ8^d;sk2;L4){ zn^P#ehJ}OACN0Z~i&l}{%sXO4RvcxAl13*L#T;|6s&Sjk35M8P)`UrUJVLd=Cu!u~ z_b&QN08b_sH2?PHAIFoX!PD#p^Gv-%&(($T_E_)y`E4UByr>%a!9r0r^m;Q$imgjd zUkNSS#mC-X^fTC`Q!-_MXK1;VM+%~qR2l_8H+t1FpHHY-bY75aRi^*&l7TnLQB4pfm?WaI9jVglEElczT)ukcu>P-$toUUDZR^R>rv0Xh-tF=bH)Wqg zQWCJZR*jZlm0@B8i;7kIo~PN6&sb4!b4XSn&Winpmvgb>@y#nfG&x(t=9I48vzqH1 zF+S0A^;p|xL@igW+6PneaBT-RuI6~4F2Y(1db0ql0(;+;94o`0v4XH} zk3|hDU`6jRZ%S-zpA}EO`zkaGC!v<|{1y2mwvz$A`5>^bp0!7PIpuDBSZmd}pfb7@sZc8qstvIz(g7tmG`|giV?}AW$~-t^a@b6^Z+&8Z)$;r7 zzE|_oD~%{}dy7!XZpQFw06AuoD2tK^A!LnDc91p2+6wBqIM&jb-JY|rn38y=E(0nhVAs86krl>GMaKUD zkBCpJ>-%sG^QK7a52F+43XZO7)d_*k>qYaQ&UGR2G`GjXS6T5|QAhz?xQd+B8SN)? z{>G=_OCeu_crANSCi>yc1iIwi9Ik%hM8i{5BFEb<$ba;p8CU1uRj43iMr>~B8hn0X)f6Q#VjLeAyVd-THi#2iipKLomo~A3&(8SKb27L z#9te@#-dR6KM9v#%&V(@#!)AZ<`O_g^Xiao@WK;`@*#A_xP{t-5;xIstq5=uTtF_= z&u~gyj7jLSf=v^>PiqBWE&^1iV~5ibZnrVy3{+YMeHa|AKc{$hUrXR^$M+b`ru93^ zXRC%T{_CF)`6z3U>ROjXB4u?Z6DoPL@fQE0%kM?JaR2V;J%9jT1rmN1S_gTx*?isd zg1qkM2iXmxv;x+}lH4}pxvN~_C4RuxcaTV&5;a3Zq)Bmy$u_@kydjgM-&;rgnKSgb zWrsGZ&|c2FkF)bodv0a)fgxy}5$hd5)L6%Qmq##_Qbl7Ew65F3%JRqk3GZRR!%k4v zXt53OT)*Ofm7Qgng&B|rfXqc`Qc8kaQn5GuU4gT0OG6VPj8KOocOBxBGPF%=l5N@v z>8gHGypRtuzu8pa0XOD*|6g7kEEYhY6K`9X!R z=a}6?%f5rvJh%OH7q5P?i$p6{3>6Hv{Km$+Durg&d`g(d(6HWnU9IF>0{JEm?(t7D z-oyP}PAFo!n1~TwW|Pluq{D4R!2L6)t@Ky=b{gSh-JL0f4XoRC0U9T%y+|Uuxf~#V zT{LYonby_dF+BH~x-1ibw}=$d5a#a!9+qCqX$YW>9xv2Q1+?oq4_x@v4-Ly@xQN{6 zMatqI29WLCCL~xjS_}VV%LIrl@P(5F(SEnE`B9SDHJ=id)-WQ+6z413XefAVC#`HY z{K&N#%s5@6iSilVnqlSH{@`1!zyOp!QV=N8ej=Qe~@d|8g8odpcKmiJ(Dn~fsnm8=&$YLa-%_o3A{ zCKl`}S;`-USlh!L=U--y<6_qaG9N$MFHi29X%4(KiE($(kUe)ppTAGF0vj z`PIMW`;@8;TOdSJw?Dq=LM5_!nPud0lvQJEIP*DP4 z`J@%HWnd0-)AeNfH}Fl zcgf~yb<9n9+OO*hPb1z8w#)s=wtjn&6o#WEJHL}C${^~mpm_1C2`+oTkX}%|46FXu z<1b(y3^n%u?s46&GQ>4QI`zx)r>M_$8z=QnI*l)|l|B0vO=-mYN|G*c5)_wxbk1YC zF^ga$2jyn!=&ch7$#vC`x=OS^PhYUo+}szM68tVfOK2fznDYX&E5i6U6N{!MU|i0f zppXxNSfyEz6U`FQy+Kp3+taGE+RvJo*sZ4bRtMlXQ=xGwDdX^G4rhl-uCP~O-0~^F zqqQ0gpQYl!VrgO06+ZWqtm-&yj2)E)#Ye-P2ckagXC!d`ekf!&di|9oimhD%|H%qqaxw_ zNK+yKsypJEs9Xj!*E^brepJ2&lFEio&=`jR__x4SpA=LZ65Q~*6rCy$%FwKmvl}Oh3iNQ-&EZ7Bect5lhv(FZ4cpf1;h-u#??*v3OvlN zUfI{nuhMoG)k#o7G;t<7BhbtwUQ%wDnBvvSwc`DC`g0ra6Zaqmb$qouPlRleu<2JW zaGhXrKe2KZ_+{^{)U4qEZG6mcEopsx2m!IAp1$8A{@uxroFI;N^jEgj6ZSIBRh?2M zl605kQ5_%&bZGm5?T)8x-9n5hFm2mUUU_c(*mjceov%{253unGz;sD5%mZczab)VB zISK1i4X3z6;T)~m;a%?tP`xpWadF#ySkP+czsl8bV6RSAhFTSzPxr)fvpki8a5j z&;-at)EM`0K?fCY90Ir~79cKR8=jreBboU(&?eon47N|Xp<#(viaLu^=z2#W6Oc9L z0iI#LN=}o%coEv&ABwsxuTUzosb&QlWfIX1@m9I(cVvN@r3*E#f6O?$8kKT=l*XK9 zhjVSE>GnGoXS12U1KNWpj)7q_)@?8Y0rUVRp<9fDB_mKgHWwvbP@^i)Ff=bQ?fkQ0 z=u=82U?h<;ft^oXTgA}9F|)sQ7mO+1O8vv0GroTAbLRKOI000>-Qm=Y{eoUm4S5-W zyy?vEbmOb?WEsDD369v$Umg^f_eP9_!7TyO$pYR4))8$x@QB+;geTzjOU`nd=Aw7PKKy4;xLg2~>LlTXNIA3N8;K$m!kXx5Hgu07ns1*Eg>vbFS@2 z_vSxgIeh7z2RJo>uVuMyJFaLFXWx-Ubd7jo!5vp~KF=siElcP}P=d!eJIbx!h5P*S zgj#H09Cmy^Eh9QkchD>pKcSBnSejolgSyzE5bX{5 znzljKR~r@RBXiN3a!vgQi&E&?t_)6tj|aeTTDQ8HE*XIBZ`V^qIcJo3m-AbnCD}e? zVN@iU2(SLrS5$mm>2KsEwef&B1BSE&YNh63fGKc%7N@X?D&Fw0hKGdF7g?8TU+`pe zHT5G~RQ&LhHQnvVrXK`B&4d}9HngEaN(|S{x*B?CHHYiGkxUlY)$LXbHCjRhTsZqQVZHph+HM4qkY5B4B3RXtpsECJnqt7<~U<}e?{MKsfQ@`!C9Gdwy2k$&xWtV|pB;HwIg zZ;M{qWC>jg`x+5K;qa4S*mgFiC-NsTT)W=PBE1`Lv0-d#_xWqJ_PYbt?I~5oSlg+& zi`VO}Rvj zV2V@r;*I5TSz~&sc4eK8NrVqFIKTO&)DdlkL#LyE^7c64s4dYC8A^~L#JM92$+Bm=k$|0)SIHc~I_wf9avm6eT)msMZrJJfv0VG&E zDC~z&0*hAHq%6;*59zf}*JwAoP5n#K185y37;wr@T`nK%|%u)V%UiUKh+|EC+?XBye$^BdHUii_K-)gcei@0tc1dD&xX&0?1G?f9wv|FL7%oIo1MM%1 z%Zr#AIP_IEq`iz&;3)2~-kZtX6SuXi7GELXi5Kwot(NoPqSX5Boy;>35?p-kbpvb+ zh(TxxJ~L5piIR=mf>y|7s87IE+6Q1$kkcT_bG#`d^sG)-R%lv?2=e|F1&5XR5{Ao* zJtY9XbIWFnVAb)q9^NB4@0HGqucDTiVxB`u+2jA5sp=0(V=N1IvhoKAfjN7#qw(hP zF#7cJ`-~-jP)*NaVH>DMM)Y<|bvZ*u>?J{2+RMSy_(f*5yj2t?p|C?jV{9=5>za6q z>|VfI7)`lo+vl>!2eUgYm-@yB)_Ko^2|12f{BBgY@(6=MZ%Eh5$zD#h!-BC-6z@`V zWHy#+-f`gbA!uuU?E$RZLIdqCvMPG@fha@Nxg|ZjO+4UL4I`|jxO5W>^?C#llZo*6 zaILyI9>HHvo`VU!3+i&XD8BE{UV=!PTZy)O&RFQ@tFpZB^-Kc=8Ru5oW)XB#w3(Eo zi-+V(Hj^R1YjmqOKy@yueG)T|>j@&QtgnUVS40YZVZ2+y-zGtzh^r>smt>jlIJGgY z$mB)wsaCV8XJ!tVw@+5Em0VU1m=W`v zb!K0xE(U>de7pXRK%vp>t>um1n8G5td??9q8i5M z-zn&*tiNxp?NzwS?$0}R9ILQVXgs;EcAggpUSN7UhAUEmFPWIb^q+J|rw7jC$X@)3 zH2nmyqya^BhOwFI1N3H<|4Ype0IN3|j68P_e#xpSm)XXZlj8^x)RxAgPBu6}wvCO8 z*Zh#11vcM%(eXs+Q&lu2SRCPp|ML`Y-?Sf7Nwt1yVQl}EOUP#LyU5e12=3*lJZ#-- z^x35;qha|OI+U}t7UcB5XdknlA4U;}ejq6z6)|fe{3e`mnlaD5SH4_OCs8a4Kf+}B zD9NuYk8Fw+gyZ^3Tgx_lgHymxdzoSMdor=o;`e7@#i7Ju1p(Mx$n5tqz<1CoUvP#| zPN`@#d-T!cgP$Ka>e})E^ycL3=-_V%NmdIDG9DBW+$y@fD8oygXGj4oF!;0C8*koI z3jS99^?r1{!w#@)sNWk&$Uhp3gH+!k*P|*tC}Zn&hMWmwUe_u?OdqjC}>6Wot?NB*92h zVAd;lleuR_|2kLDnC$m?k#j1PWC{Gi#S<(0yS;Hp-;Wn3tz$}3XX0q2v5Pd2vL+GP z;Ol~TEocQNHhe6O-O6V#+VUET-MIen%3Rf^jg3~oVjCizoOKiTPKy%ES|zk$(= zRlZ*_o3BZ#!iGs-5WaEeM6Mh`$s<21Ce|j_WsR3`><=Qzg@Eh(e`J5nBqkBrfI}ar zMArCl>d*h-9&h(X>~u@jUwpW9@atjYECV?7Yf?UksX8f0#BmK0jj_(n}mvEo@zN8vW7A z!4oN}g3f5)N>l1<6-2fq(qE!@Q=1uMmmAngfIfN@YAX(JJL;M((=JCr{qCg)gZ>`Uc>d?TY~7P1OLen)n^sC=oEEte_%dYd6LIW1wWP@R(0?z=)g8u2;^hz~ceBB#eZqhrtG$sOi2&u7 zngWNwlQPFvnku_T9}!hD)hyvSfHTzpy!Bpm z^YuFUMdtWvL#jn0PxSt$j@zkvlK@9IiKm!L^9<_^GZ+hNP8AC$o75qy^PDH^V*sev7O6swlT^2F01>aM7`JwR|nG1Oguo-4XV;_;P zyd&0YTy#BR2+a#YQDH@~Wmr$w)mRs^CvOX(-&(T&1h4CnBlzu5LUVjbhtT#pkk5CZ(Up##ULsZe)wICr# zH%NC#_fXQ^-BMCYNVjx%cXta&gLL;0QbTt)4B&UX_rBjRV3;{)KYP`){%6y-*Vg}P z(!A)7<=#sO)Jr{lF>Lh~U2S&2F*5*c%;zpQp;>vv@0UkN&E$dlfo~i1#eor8u}M|c zrJOo`1qZ415s~JzF^re1oUsG-_bV_Gf@Y*ydD_|wG z*LfV<#Xk^W4o2w=k73Zy`KHsuqohaWE)T_@xjW-*`~1561_Ynza|j*r#WFbWpwnmD zoCBgu3mS&TGIof1Iw|V+Hfh3);69$JJI{qr9kE^`-e$W&d6Q>-y_}v;;J=pVa&KJe z*B>;T6P-tJLB#@C3K?YmN1+L$60Tm;-_MCD4F{1C0Y(0 z39%|7GoNTT#O@qd^3!XO527?lZi&Y;n9zUDOU<~}#}-!k;OXGqPbCm6fx1IQp~tSt z1Ld8s0EzTG66{3TRJ(e2z+`K|mi3j_jU&ikOa+tlDggL}A|`>DP*{##<)dwqe9>RLr1@m>!Vz>*`?zU%|JY z2aJ)k3kiz^GHkAQ{7vsm?ICtAO8ogF$(*4t&b?;pg1)0~(XI@qNrF~)j%%C4I61N? zYPyc(w0(E~lUr!G)okLhkc;S2zMZCqwND%n52ol>Y9(!fH&dBQMU5@N89vyCp`sbt!Z%w zyQxAOs}mZnqKQoi-c3T51}XqF{o1Ob^6Sh$#~hN>jk9WhCRnJ1%6NpqhQf(UNchi< z)B>hLDz*GBBg0%frW7XT(WHo5bD1fDQ{`-7W$%kiT9>2xwt30?6}#_@u4;R#G-~Y_ zD#jN*fua4KG@}*b^zu7OhapWO@w%7mlf=}O>Ou9_Ms6{K7>Yb;Gi20P4OH&+=z23q?2QtVQ;H5g%;K-1=#I$ z(+P3^N+OkuU&>SJ`7ILlhU)h_HrP@=SQC^Zg>l8~&*+Rx0|r&D*^Te0RFM7bzAm@L z&xRDtX0=+!ux;ShjK9zvT8r+Jn=HJ?dEYFYCt8sunJwS%OuGZ4DOl3W&)Db%ozOOS zK0&E~2O$>2Dpfe|;TRGoo5-ltJc~!fq`rw_jOt~x3c2b38taf3#`pYtg&PNj^ULtT z0WPU#*|hWgSfpvk*b3^Ao=hkSI1LQ}H<30fTs6ho1r7FgA|tgI z!yDDYA`R}cK+zdskDh6P*7mQBwI5b!*73p|@LlRAs7D9ODLlx*HLVTCaY_{&b0=v& z5?}1WEy<$|ALypNHiv8}!iqdpj9G!jE7pX_hY0y^kOpkq>+6J-n@fUDlfI<+jH1g> zhZP;mG{SGkN}-ae&+wZV_{)^C@rm_zIyx`@k?4l>JUIi+TNYS*v-h zl!8sz#u8(yg4pKpwJ4g-NUxqe#8MLaDH@&pO{fVy_nXEKeC-T~DqRTcD;woI@v084 zr%#$5P-z_8Y*3>;gU#^4jZ(N&ydwxwtgi20_U>-S{7uLK?y10Co%MukG$N)p-`@@@ZiG2eDRzZ_K@$D z__SoUA1^xN?NU^=vi2@C4&kKe(x_Wm{k{~FX&OGdS&dcU?toQSWye&B4ouy$05$WP~#6^lXU^h1q~m@FY>rT zCxb~3zV=ILc**bLEiiCLa$Z61Dmbi{d82nWp$mmm9jU943*kS}hf-ABC3|^YW&+Y< z2DO}h&&@AHEl`v~)SYwAi|Ul8LX#a;13}Q2SpteHn|iO&GI6>A2}87%xS88oB98z2T;lC1w%mwD1rVU1Mt{a@cS{eO~zUkqyDc*+9a>a#}d_ z&yZlT#K_eGsQ;U{KLo~iIh})%3MIr^ZlQrFNLn)as2#~Z{cs;K!}(9;C3)`*uAEwkxq zs0U&uL2i=$!7a(%tVlhJ*jW&F8K*y;k0p6R!<<2|)VuFb!gIDr?aB}V=Pubpk3+b0 z_jPN1PmzNxCdM4vZs{i?r5$F?Geefbsm)AN*Jt5RS%9zv- zqs`9Z-(%mk_tG+gTyXKc`h-uN>np8_t^{}9+FthE{Na{Yzkgi!y1KP(i%H(HUg??3 zD^qkw=dSJ0keDGp3LG5*@t!;XJjX%by(qfx9hT!YfZO`4b*p*izMe>q z;F9!L*miJ-Z^*2Rg#{^Ci9Zk|;r>Cuqz&HUdhoXYc5%S7vO$T~k*-RVq@cg^@eXm6 z>P}>~{jDM!itV2pcKOSgoX9q1)FZ|eCYtJ3^a$?b^`FC9?sZA-c{iP~D3y~!b9j+P z2rdWv^0R4nV+-fFs02JbRmSo-!+y~ZDnyBj@lqBtBWz`XDh1NHCRaqSY6xLIp1%^2 zeelcfF18o*&UmdAcpa9Uwl?y`wG1W7#cw`kkhXNUl&SD&VJ792LZPoqtZlbMRX+jr z|CPPPc(I63cGgwhge)pUAhN`x8(tlD9H|*@o0%=0({gl&38V|m%8s-id0s5qDMccY ze7IKK2BU+8;iJGChLG#pN0$9nF9Qp?cp zc8=FQBIAEy8UXYtxbCXLK~<&$3h)#)(h0?;j5?wEr3`%oqc^SC&fZVdA6n8N;q~E{ zhuZ8vi1s|dlxA?5Pe zzFT*OXnKDnaS+59*=krji4GEW5t>^eAC;pWq|*f7sHK(kvh(h;2;kLrU#3Ky{qU~c zA2MP+Vb@fGL#>+0yU`&31jkeQtGxHy7+$pGn)GaxZPw_lAc3{XL_||jOkVMn_@>KA z+GY$g-i9H#JQI)mE$raqEcVlYG?jXRFF_z^jpY}{EV(HOrMFG(h0&BiwXNKel6A-* zbjmO=ELP*&*ntZNw=aWHS`8bIKsEh32bVL)Z@E38{QEfuo6>pJR`F!+ll6*1;Ginz z?9kqf8fM;HG1%Uet}bHo{d!WlgFW|H^fx{a28>&uOHC41<6wb>-mPe>>9Z{qHZF%%le;GaUN1|I}j-yq}wWs5a`*Z+;rS zkE9!=J@!ES)*Vg+?qOKrIsDV=F}8I7cF!7k5q@R;q2VYi^cJ{zyX}10tLr$`+!?Ey z<2Ee^FL=6G6w6-2))n_-=p@s(cVkFteoO47WWMf5l&3EXEUs`pV z&6uC=UUov--ExUO_?@iS6P`C({Sn1gqz;_DiMc0=1UX7*94&CD<*JKyJMU1?1uGc% zNm{GK^22ulRk?cflc3{|kvN(LjvV706x#*ITttpDNBuJ-PbjLPpu6uTQT(5%7>x(l z(Xoe|*Y+3l&`#A}(+piDaR0F7_WJ~jktnhwxY%lg7**8Fu=%di7z<^O%`;dF4@1^M zl5JdZrDvcK~T;4K8z$h_<}MDogHn zu}6LAyzdA~DEayGHR*O@A>1)6WX|%B+DWl;hd=OPjbIYyK(V9uCeInc2k@#ODybOF zYlR&T29A*b3_JiY-jM9?hDDnOy_C6|#(3U$qSOC0I*+3F#`MZvizz&U^S1-9JWwBpisT}<Dqg zZl|)0!f#$8<{xXN2%j5a9;p}`^DZpLvCiTo?@L<;uZ0S3LC>4zrNwg@AFoJ)?P4k5 zhcKfv8h^Qu`R)b*GmIUzWZOUdJpN30SNmc2F~8=Jzv@ic^ILh{PK z-XU*ZcU=C?SnAOFtuw!HG0M@ezjf*;g#0}bWm=s!{Ho7q0(0;WbqFqv4Q#6cmwy6i zSaqcgnjxNrWyZA#%wNoNiNLA>Y~;2Jbu}$Vqk@bpz>8Sym~Q^1IRU{{_h*sEwbC!q zwJHz!WL3(i3zglUzz~$QcJn3#zcBT^?Ylrlrjp@>xObKrHYD)KDk92h4>-~pK!?O;z!Hp8MR&R_4?m4;}Qri zcWv@`Q+TPC?c+J8$9w=LljM@1=*Bh!@$|+hGfv+`WW~$;#@pg(Mg9*G0|1$W7}cj> zZr48Q=J$~xUYA1oU5FDT*ztR43e-xO32G<1r~?Ze*)3g ze-K_eTpD8LE^A0tG=FExsvO%FrK|@5`vMT_-$$G(eL}-w(yCHhbGt^4P1N9XEg%3> z6lgwPp}(Uql#~S!mR088L_rD(Jb${o=nuT*>MF1Sh)r|KBH4Jj+k?tls&jEjbetCo zGT0X809-FU?wfYsrpxRfO|Gnx;p5xacKqMd9~U166*GzxP#0)i4?gW!{fBx)(j=v?0g-nQIq&!eB4NQ}-Qq&Mc? z`LGW7dg*#bSt3BHPgmT^zCxi$$Rigml~aLqa~;-icioY6%; zl)!Hk_D$Zy+YsO%pZoj-{wZ+u_ubJjBcb-`vj;7n;6zq>B?{5{dap&a6pF!x>J_*y ze4y8)W^#KitjsT5E$-49R#{!=H^#dTN$QT3r@KQ6WZVu#Noeo0*?0r6LW*pUb*^|b z+|Xn_2DQK&SeMjO(CU3CI20y*=Xt~TE@#Ah-8vWRR6P)M!Oj{#xK?~tYc2%U3r`WI z18#I1xl|FMzIHCq@O53)+Y z`j6T`n4c<<2vdy%+Zg9<^e5pva`M>*iH|6E(O*Ii1;4&rSXg>2JUfxSAun z916UD83@&hR(>~};&5GyN(|!yOZ^XA6Wi#vD)_j{eCOpx4LJb|ww;*4tXs~Itg8ax z;4cZ^Ut4b`cdF6oo%1E3JE|uO1Q~qDZtjHMW$@)VByqzW0GKJyO!?obuPkzI#PL(& z{IeJI&;{ky^v`!qTzkyL>*dNZ(=*-iRTZLl`B6gYc_yXSTT5`Uxi#8Z#NhOU(h|}A znQ-@mwwM(jLP3q@Us+c#f>cVk&pYtDm(ct}&5%))PLw07MlXRWO2({DZRul3EQVrRu6UP z)vMd6e$p6UfQu#w2tf-N$IQwovRx`WccXi{6I4I{{3Ogq6ZrFf{y6Q5u=pP z9lOJUjt@P8(3&Qpt1cme>*pPKGuDjn`=d2cha46l$Y{u?wz0%O@a66w7F;0^8TJ7c z2RS9&tVWfLsOoh-GW+{vbm1on1s`_iDCdzaxA2N&)8uHYmpmxs8&nj<=Sx6E$g9io zl3r&l`&dUX;>EyG;5dojG-69xN>elt-SxIoa zisKSypU?D>ae{2tv3ElqLwIVWTG> zABbF+Wxyeu4w3e=1e;if9UDuuOfdNgFc9&9@VL2vH3ceS@MiOfM0l9Zw1(S*oE^Sg2OSfIu_kdv5qnIjqyK# zt*PC|0OIaH{9O?R#$X=H(JB}fN*-V+XO?+`%&W=BBf1G@5RF?eQuUE{G)QHyH?o@h z6?t`pn4y%j@1nmn+p3DedYBY4C(NCJY^x$IgbixiObHG9gm0L{ea2<6ilF%%d^LcL znmNRv-WNtuX~0Qwc;LK*ZmJS`rSS)I$X9*o@-Vdv@?A73Ss_YU&J1V|rp(;&;-g_C zme&kyL;b)LZp}LRlM?Uf_(u=i!e+62G6udu++Lb&?sWsViAw1Tzxzd8lnPivD(A0} z#UCm`-`iW>0=rJBBVsr@m0{3nqfTJ^6KaO;=sBCG5VWenf^c(0B;e{`tkNhs;(BcB z0oTD(?RYaZDIn*pbY&r^ZY|n1?wLG5=9|iX@vvy8(@JpLNE=;?(bKak>yVO;ip9+S zU<^j{`gbRVdN+ud@r*ca7MedK(0pH{T;WQ5@z^(dO_c;$hi!OXN-u-@!gh8CsggC^ zU85~$E(KZbl)t(qjMk3KPk^*=BUZhU{*j(Y_# zqHLuHsmy5vaEL}{#8y~hZ9B~b5dJ)UZ#pdAsxK|s2hE#SJ#V?`QrmU7Al;wJW`UO- zaz7`37f457eq`n1nZ1!`Y|;x8(J~tedN`vdqTRC}w}2 zLG`>>g?JhwmSo8GS2CW-60Owc2#UMwp^PhdiZ6}p>o_TI-D|`<%1*iTM)}>VbuaYo z^(zVoQ+&XO;IJ-md%4g$UjbQ)S9dZnz3>tg6 zv_^cjJ!jQib#xLA0wwX@OzPL_g+Kw$&H?0q&alVntKPF>-;^ae4Kmp+b$*GnsyU~P z<)Jw*gggMW8!dzoXQd9R<24SntxF!e7Wg-5MdC#ZEuNL+&XWr=61g-(=9C#pqvl+w z=km~w{RJY|OEYetv^)r%h~p;f<&zX5jrPHQ&4TUN_TRRvDZkHSbghVe{<#q;CpWPx`z+QcQ~e6744WDHSU2Q6`Icx}w&)PZ^#5F# z2rP1{!5TO(DV^^^B65^KHJ8}E6dzRmWx&1bfMh$E%(SO(EA@6QlB(Y8p7io}pr)qp zrT}upOyMlb!!|PQunZnLw`c=<>EZQ`xy}c5zTYq;wxaIOFd1P?auy-Lb%bjxT}aGZ zgVfKUG$GCLVA{k{`I5`Wxz>aBR1AY3uR0YOs@g5x62c}Z0_J27U3(ZQHJvM&Am3-Q z7>*N_{Bx(t_bI>o@2fsedufzr-z#&^HH;5lQ3iKK#NBDkAH@SXS}QBPlIEN2J#J|S zTi&qo{%EN`irHO(}ZL6d;K=GvbcvM7)3MpCt3cdkGb+M6;)NsJ2?(!1R$L+&Mh3Wh3Yl`XnLb zrPpxAT<uAtNt;V=AO(8{x>Z#n572{&J zv+uieIr4LI%qH-^e-o2U0=w0*(+o^8Q7MoVU2GOHs`UquX%DGAdmmJ{QZl!P_=`;- zkfvjN)qFL*Mq$R)hSa{xXL$Mk4GOCHa?&+{@Ce*d5bpad%h9|V%}k}OH8&BJ(>^oT zn3F%)cQjsiV`hSU2goMyVr9zkAilHN)@;*$^O5fgt%tzY3%pxW+o-wTSU^szN)AcX zqv+|<(FpQ>mLSX(9)_}r(PbF@Q=Jkycsn{eH(G6HI8N7~ONA~HoQL^2*#95sFjD>B z;5r8e7afrb!e1Stac}bOd;89pn&OYqKQWfcJyA9Lx$BMc){(Q5ep-tp4)o_ojQtaK zR`HPeqKjb)a^ZR+)xjzB$c0Imp-t~`h-2as@-qt9W8%4=iVMVD|6 zhN98WDs)E=aH!Y}VLubXFJ*@oxd@99xBD1WH+3q2^U_yb)NisQSgVmXJC->J7k4xj zSA`KScSM=P8aQ^!L`CJxQMB*l%|Zylk!87Eha6!g!SumgqIEC8s`^nG1*U;eGP}G| zurTqaMxw1oGkvZjuDO(kNjvrgo5zhn@-Rj;@@WU<)1e#RIzyOwY2t`ifwd`gf)^42 za+zDGw2N1DevB1fCI^VEQuMdqatZlma9Xd?7C{<(hr6nf=r<_&U9U$UU@Tt8Sf@(5 z`i_gJ=p>jy#MOSzxk~d3P1gtJ(a77V^R2+ux`x#U%igCyG zE8pqUTMprL1bVvI4tYna#CX~%7qLZMiDGFcp{t==EY|2!ObW10T;DR)*5Iyr-KbKN zR%`2X*)L4T6KfhYeV|`vf+Nf=`+)lo^33_QBG1q7@^#|hx~NHxg;r>)VRGH@L-Am3 zFATU@&jHdza&J8SWI!-BaKn0NHnHy1ykLJ#OK>wkQIv!mVLAr?nE*WF!B3RK?vt>U zF0Kj$_C~QMB|X;Fk(3Q0m0bIZC3;N_r}|x=A{zz{*tc;R=-)Kiuc#3nuj66gIxn0& zn)VNKrLT>ARgnf(HB+PfHHIY8A5$rc+xtCvqvP0Br3YaAn~vl(<5V;1Wjk`k>mU%4Y;~{)5Pe zf5hGe0;m#)F7OW;Is(TM5Pp+K4vld2ImO0cL83(qWnd(g0}2p=i{0R(Gs~y!9$56b za}7w=)!W!2oLqsb??BYos z6Kdp7ltPGEX+P8M!nBOk00`nUy~a+BnpUMdB2@PA+L-C*m(J;WD}c=f-p(tf-hb=j+V6a!_bc*Dc!Lw@0Br_#UAq3~g5U`lRyc9# zBh7S2q!UNLz45fd8IfrFJH7wcZsoor+_t7m4y4pR+|+v0Lg$Nmv?2HoO)fqrb+d&@ z#$V{NA#m%Rb&B*u7%{46@~sQ5H)s$UMI>TCGPrL@SC zS7fLc++=W-QQ3WT$X2hP_P8+pWBHq2^Y0PUbr=tGjzdw?qm#8eFZ;yBB&lJHRBNS1 zS7S?eQNzXC_>0C(!${g#LXvSTjni(FB@?gT=~1&2PiQm!>QC0$|6XU(u4J zhqu!VGv813xp5w^_FNfhUz5i>l-8j7KF2_!q=nu#gV%2ena+e(@B)|Rdu|&?v#jLO z7>{)w9L+Du$W$bH&SUdfJ9ceGXucx#DXwbjZ3DcxgqJ}eIeM=U5k>qg8~bI^%}p0W zU>hJ>Vmw?>Jz^ps+-3g)hD;u}%@|{xelA;u)<_^o`-}Z2vPk!9WfPw6- zV_8pz*ma-c`M+}jrMJ-m%E9b?St^}ZQfZE!i%+*cEBsfRk0JJN*GKF+sJl-$S5`VK zyvD-jCjY{cT-c;AD|=~0;4)F#wblQi@_6$7`QeAl30Rycs;l_OgHUzuJJ`y7e==7? z0w05(hRWvFExhb@X6OSvPGMXIk2U!t$OYULPG(bulSF!JF6=c4%kJGzAlW%S#D}G$p<}mz@4}XaepR&B7 z)eYCr@w{(uk0Dquh-eKt$)%od>Q4NMeZb8!iJ3@z#_#f$V z0h7OmEp4f<+OA#mJC~%|&u$qe0j%OwwgR^^3{z)mVyQ?>B8oH~WZ9J+Y!+ERL=%Mo z*H^l)<N@Z#YT zt=ypLmj!W~=^sJI5gPo=lN>5$(60`Z8H_cIXK!k#ch;4Z;-w0Sz;Qgk#SsdBZDx@i zHAg_+_K-X+Fekc)Xmm;s8jilGgqEeZppm#-{h8@YQm0d-MxIihW2-l;a|mB*I@WgF zOSfdCt5f27Ir=!;252XZMipm>FQmbnkDJSi<0cGKQ>;0FQ2v4Z(IXO%Ron3QJ!FId zdysU2PDZ_G8w@+^&!|XirQ%6@A2^PAa;j!zLrGZPX}4sC4Iq@^yZ|F~L$7wiTiXmU zzf-}jo98MvFfV~J7W_CQa?x7YC*1M`C7VEy_j5>ehLxmUJEa@ij1m#I1>bg*^H46) zZx6{N{Z^Z5oy#lRitgl52y688R-fGV&Kw6UnH?<_WjRGb#z>H?^Kp!|*m1)oNFC)A zvNi*~Z%lvR??v`iLlM|-A-k%%lh!+fZ~P6@Y_KzL5*Kg*SS^&*nBlkI5`DaTsW;B% z{HBBOb|6r#s_uc- zKiD$sl()p1OcEb*b4*Lc3~Xqu_Jh7<_gYueJbOB>(UQtN+Q5P4W8c)9g}kS)UB-rs zxKAywq9yZ9)(?F5qn^)tuBO2TFCMea)!P0%091mV1@qz+nQ*^mn_MXM>4F2~D3;-v zt+{b98Oga9rdl{uUWl}v6Mk7D7R+yFG(b_;v!$xsufXQ-LIxNDs`WahZoIFoCGm8k z$aonip#gT-QMpc&{Q6{r-};b)K7~n50%_~E!bRWFaaSy^=CAXrzY{;s${ivZ>OTTz za2X<%5<=o_;-uTW#(iFZck#6jVZb*x{c7qxd$*cr5cKu`b^#>Oma7C%frDEs4MP7n zZOp}iX_Fn^T8RKJ4WAD)h56uExLp{61U~jsZsxXPGluvrm}*N;k^iEbmFqUUipB$) zjzag}OYpGl)ZL>?ja}tF^d41uFB#6O9O_>oIeQ218W%f$Y7oIu$8hW{=EV?Mtr|ZG zyG$r8ej>bcrOIz!_tYllW8`zJh!nhlYkY%+=0UzAPVI6*28D!Q5|;i zsXq4nR`_nE^8koLOJK+f-L`h-{+IbEa4O}|N>y0Hj?7!l$6U%sImBC&SbWsIvgh?_ z(oJAH{1@E2?Ej+J)Q9lhyCx**%LYE?R%UnKBnT zSMrfhl1>IUiDs*311f~`S;&*dADdnIO8C8G8Mdb!PG~S6d?Wpo7vpBQZND4NO!bZ1 z>RI{+i-dHxlJk#xYTTQ<^Vz0nZfN-b<=K*eOZsbfm$AvBbXly&ohaeuE%D)jNt<(A z9^^cO=a{uSXArOub9U(pJtGrqtrNP1|&C5fuxoF}VAScF>#nS{i5#BUM4u znD3b(!}cbmXGf3)e#n2;H&aY4(r;qx(j*Q)?B7Wv-AP0rpC0#^cW|DZLiq>XQ02^J z!miZvy)zo{_3-aI^=?569pG0q!1^ZVA;p}@t7VI|%-W{>2=9(al~JFFl6zHweM!gQ z(+zc2+FID}^tum+l9g4-fDSFDo4!-_RY|lVTT%aiPA+Elc@o~?h4$j+dNR*@SmGY_ z1vx|E;GeH8`-#MP(gM)&AXKHt{4-Z&qS^ZW8bkwg46~+SZhycb6e2*v8XkqJ&=E*M zmhji7bZ$q3t|E}l%Zy7b@`E3?3&snH>c;#lr?@HcNqS!XJG#wK--bv$hL0N?!}bNX z+5giNAF7GUiId%a*CP>U@fAP5PYLT0m#R=-KI~+%%m}SGMEE0ihSY_DWj>im7wwX? z_!S6ES4*n0#OE-*OlE9d7OqKz*Nm;A9F?7{%D&1xDx0`Jhd&+M3ucw~loQRa{!y3A z5!CM2EPht(4(R~KnCDjLncal z+J9Xrh|K34WG0;r%;d&|dQ=YSyi>&F^yxO$JH?Jb#j(6z19bO{;xP@mvcL9jRu6-1 zsfM?Hv&T6P>}4x;CW%(7jZFc_Q?oy58hj4jf_iuqvH?qg>3P?S^xetJ_V9W4IsaAW zb0X$=%=5z>%j2t@(Q>EddHk1eo@L!I;yJfpWsnnNqO$qc7$NPDVXE&c9t)RVSG(Fq zBD3{gez*5~D`XGVcjWx2!)LMa`^SduMJo8QN3iMX*oW`*U`f7@%EmId0D7@^hXJa{i7=1 z?CppsUbKC)FPZfA3p%gfK4L5ZzS}y(TW8NZ5?8o~H`3zBujw<}vrc}$cwIVXs{jeRdF za;`R_CwvaI#y&~|?9-PdPC4lR^W72nt7F29kKNo~@8`Z$ceC3ULBMQI>U34baf3&Z zTxw2?Sc&(~JJwo{uWv&@lStjqN4Aww*b`;P@B(fn4~@(;dH)tZ8thZ_PUF_-iWRe z+(GfQH?0QS79ovCvZ9sx_1h`2mo(ANu?Lp@;eH$7bnV5ehMKp}@Xa^(kiR;+Kd{%8 z@2ERHhBi(IMd}s{hX{!idPG#`jkKez|v2rdK6Y9JfI~|AH;c2&cmZME$ekc35|e z0_b4YwUUDD$#(f+rtE*U_>o&!wl6im4mi~KUmMxr`*1&fee6c?B?T4R< z@{KUxrO)qD(Um;^^MX!vS5Lk{Cv;!HXs#Qpp3(kqfrafUVY0&8i*IwgZO)O&+?#}X#}P=_rLz@|f{vx?eG^N*RlUm6*eY^-kzf2inHUJS zA4wFU@!hTR&zygnm;vWtg0E5?DJ)q?Nwt2n?!M~ew`lQWxHZIFwR@QRzbp3Lkre*I zGaf8m@ORWCzB*hTPvt}GUARUJCjxv&4~^HTfGe)N26>&zHvvhId!dC)=^O=Wu!3&f zuMDv!#0H7d=D01>b&@$xCL_Bab>*VygK~$m{s>R?3j7cju&?rCI{V2G&1MUWz0Fyp zF3ow+F;X2h$$N>m&^YTPzrQuh2Weu`aXYe~{4GjlI+~t`DSmMP^YGE?y%{p3j{J&W zG4={8@Zy2uZJ{7HT~2^q-;`@l0F8}N4Er8+Y5^DdSpIdJGOwSKa^;I*yKgvy*-(fP z@0q>^X~o%_g{0q@wlEh1SR>g7*DR>;+=RA~ZZds?)m8QIS*r=wq<(Q;0hgsi-PwyM z!k&;)MBocT1Et(0eas=dQSBk?af0QqPn={peeXW}q?addo!cjdP`evJkNB9Giz5-U z8@hf;FFs_M1`KT~L$bMN3Ft^#AFT~1;eHSH^ft0LN^?+C4hy0%%ztpGv&itZ((%j- z;6~S*DjKIgxK30tv8joXLbYL{`*WK48zfUhD565vk*Thih@x~@qDB54A9WI;% z*=M?H`%Q%{zrRrJ*B3gLDOYQPK4D{*JDGDap&X)$(Y=KAZJ_q^I_ONp-P3s zw{%paYMoEPr#2_SN88ssByumA${aiMD;A9q* z#l?`YpXKwb?BX+n;{YyyfA=itc5bR03kau{%p1(hp@$_5Yzw*S!Vgb^@%JME14;j= zs1VpqzWx3LTL@aT8Os6CYLYk%-kEK8-yr80k*PIUe}`pUWqw0@IB3AaFOM7Bil#?5 z9*qAk!uY%9=|E|dnn%~#zqr{%TXWSGi5@SO$F7iU(h~{+%?|mm2qB~9HhT9J#RbP{ z5(BClTx2VXx+pO)(ZoPXA7ZM!qPpWuQMcAf01PURCWt$vW=*$9i=NoAjOkUsm4(w zC{y_nd=)uIH)_e_g~E6tc9k3zA~Uz#RQo>2O0q)dQZ$|lS`WH#2;|}TGX7aJe^Yhl z-*TYj)HteHGvWfa4rVIb-%NN|leI=oe3L6IPcXG*p!sq`@m1ZHxM9jd=>osH;e~bE zQ==OdL>(@hRXG_+YDw6fo{f>S4BHy43)5fDhjR6=6V2Qn^et1iLT5pUgZt`{JNSg5_}zV6H#dw~(Gi z_e+y~!?^e=o|uS;1rT0kbogQ63#u6YgSHF?l>70 ze}{M6P4+0(9wbY4(;;%~9UE&o!?!2=ueYDTKam9H=ys9xaO`-wa8mJa0_olUxNKxV z!OG+H?_ATT8!r3k3-TEHPh4xx+qYYHE3uMUA=(p1+{e0-8?D#*Hpx3g2OPLFyMW&j zAGmbj&JHUiTQB|!c5nH@4G2jJRrp0}-B#;AJ0+W?ZY#EOydom5Ck2$hCOFxTSKed| zPj!q^?l=u;1c5G)bF7wn^#t-g#$f=dxpQZR7}MDIvB_Q6b70|^oV7O8go^ z;}mq5J~(MgoL|d@Wl-bln?-oPOyJdjnE)k+da0Cc)R&nJe>7~97|&Sff5;ND^pA^D zo2T`~*enA?mL$4Mm*a(@YM<4POMSSQGnJ`n-@?o#YwBb7mHQRRGXwtOp`JNxo=sjc zl6OM9b_t*0K-n9pFAFPnc!ZOD;xhjEKZX=LYuqAd%Z}T=ZT8$;7h)2xb&R|)Qf>So zOAD(#TnN$c(wN3XPw|t204@@{ijjE2j60r^Ro4o(Q^$je_5g+@n48=Xzh2{}!4vdC$)+&GbWZq?ia1jTt*3A_{b%H zWO?MUd~cn{oJ07Mb=!F~-IW}1_3!^K*Z!VFDBRdhuT>SM55#!Qax;qt>5)Ap?GNVM z;@*(GN7_bq$BQ$Hp$L3bxS|o2p3#qYO^$g5)b)|yiFXsMcwtA2?aF%n zoZwpR=9CubSwVuaUkXv>RJ7kZ5$}UmA9ka@hSAg4_DfQ0vQwz)MdMrnz=FH!@eX%| zzjOIVXks!~HXv^!FN8SMI<$6TZ_^t7YiW1&gT? zsZbc>HU~+*(ot8$&)t~n0ZfuNQ?7tat$8zU-@V4jhQBZs-9-y97m8zG*O6IVF`_>D z?+?GY>~2~T);4vQF8h?~#YZDDxP|s+*2)d#-tJ!-0TYF3rtB+ysE64I^b8l@_XuQ_jX)_;D(AdH1b^k(9 z5M%3*P@M^o{PkB(&&^=$a;O!RyipWC<4$InQl}e4m?C>PY`$_)$CgE6 ztM5LR7JI4!i4=EXAUN28M#VJbu;*)`iHc-|NMFzkM{85K~xXcWdeBy?m^m8tHE~BLXrd6 zo+7wRB435(+?5(*-V`u=?vi$ad%lo7@wss#)}$NmzqT`-OlEX{>Uox+H`|9d@eaU; zNk`n9oo#IyK%dMOD2?*vVrD^B0&~MSM1X`vsVbB(tkT>O1C=~WLT$iJ>kPFuMn`Qd zLweod7i&z@3ugDzd5e^e9ynAwl(KR7{mvbCrQ3M?lp*DA29xFD7yl@X=QkPa-e$>Q zx|qf0d5eP#GLMX0Z>bQ@qK+LVTn4?Vp;OfyE>rW}D}bA2hJn~qsl(F~{)!Oqj6 z1&o{Rx_ADwTfHB3;dZn*RQzdbe+$Atqn4Iwl@TWo{xkG8h}iYwUq2ZOu2Yj7vH1$PS&+&y@3 z8Qh)V!7WG#?he5rxCPhXE`zg|=kNQ!-P+oHU)5AmGYofzzTJIJpYxN8L@q_!py6t( zm8(UbbD=2^+Rw{r*Zl`rPf^zruB@wNR3c%W(e#XOjGQJ5Z=B}!-CNv>O^ZoW4DJA) zkwk}&r@A)QyG%lq`!<2e_oPpAzwd(WT@^+Y0)yWJeAoN1IeR9_cE zCup<;k2zghxhCx2VsVS<4-?I}?ky@43%byu*A<;G(v+#wZE5em{+|Xd zR}vC__eS$Y9sgz@m^VmNe&@M~Ax$ODX0G~@1s0AiH5H-r_H$D0u$A?0*m43FhlaO% zzf_HBRO%>UcP>2@nB%zoJ~vefD-&>grhc_UE!>5|le7N)H~LDbO?vUYh$(?WKJjqQ zu&fsWM%G(Xb;hJ-W6_Y3I%Eyh+&hB@_@5cF915wdia|ez!mAoTEfsbpKpx=EwYC{zjpS zwTVx^iyY}fG6LgAIz}&-Q!`dvXT1&+6dO!j=boJ|**CyDOg2zV zy?{ys{yPt9I}Up?=jO4jMFy(ErbG-51wb?uNri3ie0y3hqVK!B$}^-hULZsD-hpE=m z_=NA*d6hq~riBh}gE#Z8aINWksSgH+j8szh2>0*EVO>??d%Z#!ELC;9$ofUtHsMWW zBvAx`@~Dfzw?^ZT<8Kcb>gaa>TQJgo#akDWzWDk5Alv6#^8I+G>H-$;CvtEwgS2?_ zH_1yWx6gU8LHNP%Cx4jjn?l;QeP3P$+h{#0Zi#sEARS6e zTyy^wUVoI{RMR58EbA7eoRf@_AWJd-O>(Mf3l$r|_7zpa|rvKDKM7R_leX-&=Z&UMfdGT1c=HV?m z_CEF=!e~42%nEw1Bh^`*l#n$%)y#|C>g95XuNEB}lZHhK=jIv7LI@y#|JIR+1%Or) zRhNfc`VY8D5Ju=?i3mab6B&Z$E%-dX9B+@C9sF3SO=EU`L&POI@=t9Ib!2Z5&$4&4 z%2HiQC~@!IV>sXlp%@&=2Z_3gcq00B`z1wse% zUYeYWUWHntXmns<*3CgGUKEoyOO>VWfZJ{iDEokglum7!|Fq7Or^J~dNN^C*m^x`U zayeE~;oO`!0&XyxQbdxol=8Ho|3N7=t~tU@XPdiUv6D0NJ^>KBo}nmR%hm1y}usvm)G&o53o--mA2q#THCDPIlUIp_H_ zwKx@VrBkry*46-zs8ap;R~n^3e^g6u&Mq|U(?n^ZD5eWYO;BACZ3zM@3}IB(HE=`u z@T1~&-WF~*`l9>ZiHDM9&l~rd!S0GjUI9O0G=_nE*JQ z8aoC3`>Zf521|O&{sqcr0nkMAsKY3wq{85D!|W@c^wI z+?L5iJO;Z#mJ?}cfcvuQ#KqnNAiy&$K>uUp;cvk(x~nwwJ%G|N!f~_z1kOE#bLTPj z;I&Vq+r8(%Kr9O3<2Xoe?o29hlt_)KF_?JQaeq(5ZZR6n8-}D(Q$dk@J(B7iyNYTt z=f>xU@MWD#o6%1-lvqRJmm_-RM@K3S1DGhlIF`$U_T^he@_> zy_}@<77PeQ8BAnLpQNH}eeaWhY{}6wH<&Qq&j%TRDX-RS@tzu%g#8z3NbH#ThANpV z=Mh3b=dZ7g^?TwQR)8QCt`yBcvAy@p^V8>*%iyC)pWR>Y|c9|6= z1O_6+2+)ksQ2lc}j*kssXaew#qp1(tbA0zW)K$_4ZN68Sev)s;?a82o-rY~wYeY#P zt9n*QIy3N>?ubbI)(?+Y)xqlg0?OAI`R3%4E%EN!vl9&MQ}C*(a7zTRWk0HFa%Iu! z5^j|Kg+Dd0jM=8RwG&8#l9LKnVEg2?>JgEAIsgj7#Uq9a7TWtLB^z}})&iXhm^MG2`0 zMIqI2#-ZJXqBH&E^R*Z2X^I{mx8!owo2=ib^&N@e<+|uxVk~hPV~-`-T8vqXb!D*u-*;u5p{cR~EaennF89@)8onZq;P3x3RKny{=M z=sKDG80bx#!jlS}1<^*sVvx|t45xF3y@k7d0ev2>*s)zB|jbB(jUo?Gxao~+m=B- zAK;8UYHS_2;m2&9<`EZdbU^N=eK_eW!3{egum69DU9$c7gp)Ie1E}u-$ixA}EnqJr&9jx<)A4 zb@X?NtR)~SH(H`BU|%Y_a%GLB4vqY9iD-$QCD0(t`@-3s>U3o0KU#93_AZ&>q5~*# zML`6G4hSCJ`p)_`wb1F`3y-9Sr`8xOxJ#*LleL?BuweATtI8gqG7A>Cl9kevmVMNg z6wJTg^G&jxrH(_4#mo(tpZ9EnmFRER8lLpNKB;W6Gu*=OQK z`OxOBt70N)`v;BgNNOwBx>GClTU)N%m3r~=K!`04VzhL_m!z&^l9fC-XN6CEs^I!W zyHR?J@voFIHley0OxIiiaf{8Sy7R8}EO>5;xrcyoo{N2{wU^z>99j4ckWU=Vy48$L z(plMi+1A+|L@RfCD@^3tO@Q#3gekM+_nO6M`M?qqspRy?aXA-uY~!CJ>+lQF@W21k ztufSERESEO#Tf*K zzwrEUl}Z3!v)ZpAYXZG_68B{mewkv>dhLUv@wS$)HEpXN0Cc#=3*EKsWC1b?fnzh$ z>A{tW%g}^M&HS;2tNUJPlt%6#;Zu7TD;Hi7LHary9Vx;a&$xS3SQ`5^sy5EY!Cblu zT&8JC>OmRjc22 z;WZoQh1x@J)GRH9HR@p@<&=($b;N}cySQ4aPDY{V4p{4QkdIIZ?b2MZq$As+k_j^v zh&(b?^_jqt(eQ*oG~Q6WUv73TzF2U*1FH3R5CuAcEd94i`}9mBFnH8vWA8nDl$|W! z8Z`=sUQZlJjWd&tBlS$4thVcRg`ZBzv$$Pr76F%vyF!aUn-rn3_b{{i*B{@kMf`t?1Lu%ts^7+^KY3GZYv+XESd#1aD{e;w; zVJI!0Cq_@2v@HS8g$51Teew0X75Al?uWv15kM^hLbGN2T6IJLIYuziio6XevVLfgD zUj{5OlW6M5wqomSCRo>duO8cLeCd@Dme$^B4=Q9(1r{+xv?U#xC@-RTvHW&xm>Ms% ze^IFeEb`U*{&U^5a-vVAJ~y3vt7Ck6SDU<1lCA5S~X8q>?J)FNKcJUIj})^_S>aQD7SyqE+Wer|oZ++DvtrW>|gh zK>;dlK@ohF4c)V~gcs`0BTQEz-)vP7O6f)Ufm7bxDyf`L%i2&E)|!WeS@4CR*^qH( zsfT;uSl&-R#`Y-rLVM*jOW|Pwd|qJI5o)$@4Q;{YkdCi(Ug&!SL?e1N``l#ak4)cO z`>G4p$G*8*{VYRj>$L~9p;LZs0iBf#NQCyk8|KzHi~fvK`cX5^i4R6yNiML1RYm0B zE6|gQj{IKg?l|L{X?ty4)pXo?+84rM!o1o}`>BU_t;IFN3*dogNZSX&BvzTR*685- zayW7VN}lB#()+}?O1m8LS^eY)Z3JhDXv18J+(QGiV;_Si*fh8ggd!Hv_`^^}w&p?p zleZAf1`=1xwU7rPL6tFGeBMRQfMEnp$m6C zz{rJl#SW50vdEsofTzP9S`CBS{yF9C6b~JDu)m|tBO}s$G!)R))lJpg6C&T&4qko> zl!l8bvG*94YRtdyEi{KkXFn$nA1oHNmwae$6DDcYe;T&Q2h?Yr?rc@?;1DeTrT_r^ z=t2m5BiKfoM7kbCEg>?L#x5SupqGNdyMtkLH$yK1{RQ<6CCU{Upl_q!@}XX%R!U>C zLtozTxJERKHO&W)Uwa!gdU**N0pXYlg1UP{{%;2h2HhyA1-l7h8RjqYXs@?OUEBz$ zcIK-l&dr(cj%BG~GkIk2IP1Rcx4S5+Ma_2A2$t6!*VhHb4yrg1baO<5bX) zhiaWHfZMJ$ym8HQyzI@-mMGQ^ts{Vr)&{WlK0Y%yE>ri%kn9tzd_g&2YV!CS?D|!j z?e7;LX!D5iC&#>lJ|SW8t???>hm|^pe4~u)_VSp zbmWi0YmRXXp!i+`Vod8Z5#lx;0f%F6Fs~7B5C$&{2CvU;6~3@Zv{s!*^WiKWt8e4p zOkVxFI)EmItaP*l4!c#7N@*x=^Q?FkN%)=p>mLj4-@oMh4;Xt3rC}aVF^wjRY44n( zoA&!5**y*501i}$Qj;^&DN-2Gyve@|&c6?pKZcAS^g=Gn($yn^oIB7snV zGE*!&u8g%*c$o%RNGe_(O=@SRvzzAL>n#vKq=5OhdYb?Jp8fl?(wNsfc=NQe`j0#K z?{D~TJi{0BM>#--7&7~h|Jr}&#ScWlB9T9S_}Omy|8PJ5bs_xA=>EU`3T(l^Xc0hu z8T#jD^6xY5zwoS(8`4%KbrBrqJ@9wclK=jv8Nmai#R*NF__rPS|L3^;$3K^`dtE#A zr)c2Vf7^imKaBf-y#8Na>_P`d%MxCO=I8(3V8t)K2E9*fWG5t4uM*JzjV1AaT*aRP z7_Bk%c!kjay}=@{#{dG-Oozy_z~2MXfAwbk^3WRTd@%J1A|9gWKFe3$QjUOJK9Z&!7_Mk3^07JhAeV?aUo`caWcU(-% zOs7!s(yO7xwmau)hc&WI;LwESj@u!g$*;vHEb=u=g%~43B5cbFh%4 z1G0M*FdOwScoRBL0c)hJ+q+%;ig~xoUp$eQ<09kNf;sT90Nw9}-0f(glwsAw6e5Ao z`P;e#03;>(J)2`7&e*zfv1W&*+h~tvnFC5` zx|)*jy}ql&N@hsLYX1C(H{j&#{P1Auw2e0Q(LLB)X#nk_i~0PL6rZEwUzYlR$aDUE z-nl`Or#)MYe5?jNpl!|@`eFTMX;o)P-o?~3NY^B^&9Y~;e|+Wr7A7oo1iOq29xA*t zjxkfFVV>`H4bK6ckVs-amU-=t2G;h+$i3OtPKMU|oj&>^iEFK=Z=0`dHjuaJ%7`5A z!C}7AnV2$|j538qpZ?-cyVz(t7uUutG2dqipSLlTFAt}k!RD?3Kx&|dsDFQ383fnY zaN02+*3keYC|thEx$&3Zi3fbA2?)l}=M9`)6`bH_(TI7`6L($XWf{D_;?`w!O+(`v z%pZgG0ID%i+5%lOxYsOWVR?M*>WRIM6M3d)(ERbECJfnEXW4sP|AvxwhQ0qOj0{wc zJ*PxdQ0u-5GOV+o)?SH%Ri43$Ar$r%TS>)guNCb)RhoYQulYqWehAKSv3^CU*Ksv!%^jUv@1~k={0ohoQn8j04r6qCemO1{fw= z$nmx9Ww=QHrN&eAV%ar}X6GGDP5tE4CPErAVIM7@w*!5#WNwk|pR+!P=n?5t3`pIK zu)4cg1zcnQ$re?cE7z6;3d*oQ{%EgSX9qUx#~$r@H`S9^`LfPOvLOeGqGP{QCLPuQ z#K@&uRvINSZPyW=wR=jOE0VKXmj#F*0=mq5McNB+`-{J^$@!O^id25jsoKp@q6&8* zznYu{KtR@GE2c3i;0Z{|&9*-e2=mA)fQ&=)xh$?!xZ*g(7D8lZ&Li9jqK7+@*JjE5 z?zPWDx`KwXg))4|M(}FJ%>cKZTKa-M8X*xyg*0BtNn&K`IXwK@n-g_GHP~?t;DE{4xmH4>8>2KqhrrBBRIu{`tZ`ce07FTnnja`Z4Rf<~9FNlI@znoiZ~prW?# z30|>g8T@CAr4M;cPiKzT$NrCi`PV)A9Ny=41D4%vfpb#;?q}X%MY~R&&HRVu&zCXh zI4FNy4lW9T(+)^1GW?_#kUByb+0gk|uJ`s2t5*KK@aNvHU{@=MvNz`k2Su`AO64V` zI=?canL8YN(jeb=<#f_% zrTif9nm&NQikI>)Juvp-RRBSl|iV>LfSol=jURTlhdlEN#pTDmnR8E`*G@?c2 zW&QG!_CW+^pTFut!KwR=3xV~{FNQ-plJ1p)k<5TnX}i46#_B0}rL@szt{h9hRisEs zNVPND3b4W`HgWRApPx3&d`qL`MR7vR!SK;XrOy60byYw%6?;y)=$|T$vRPaeHk2>x zdA@g3&7x(uEP&|?9gm{th9o=a-gdyv$?s73gW9@K(rDd9(d=fr>Ue~Z_f0<+RME=G z3O`+eyccHV6%NB}p?1d&`SOtKKi-8gzS2js=<7u&$!JIfilt>lG_re7?Hqp62g6 z4K^=EYMb>xDRe}fdLwslxc~`)MSw5{@DslXGz{q(IfR;L- z*9UrJEpkZ!?RwDsR^S+XVb51CCJ}!$JbBhdKB5>;u+S5IBf87jQmc$TG%Z@~~Ov zD~<*rV?Jly1NojKHy`mfv@mTtoX3Q9*9D?aXQKBLAq6t);In%LY*pM%mY1u>1x`)@ zdQ(KgxFD^Ox}|cF9IoagvdCeEy65WgeAmC6Zyh(uf&Y|ttbH?^<3DAhnSt={1FE#6 z+z={#dYUYg$XSfL<6%k?((n*igIb{Ao-r$bfb;?7Ucr9H603wB%1F_bj6=;R&Z5+P zby@81X3`}O7bBHLffG!w`>!&DfMPH0iqQn3Cpx^TAdOtnMOPEa+IAvEwW$96Y9D}~D_(U=?02b@E8s5#3ht42&R9fwRDt4Qu`47v``CE} zBKW(kayzy1h4c4jMODrVfEt}I)e~&{M=TG@GRLToB+zrT1_)9wRAFdxUm@_2nP`>1 z9?ZhH+5?iN5*s}*KRyGxC0{U-`$uw>-0=|$viKWP`W;XDEddRD3=J}`Ue!B=>Fx&Y zY1qwb>B9-8f(Ox#NkGC)Yl+G5yyj6C$5~MnrC4eER3KmIG*NZI%FBTN#NU|Xg9?*+ zQQ}_lYC#NiG-14gB%YFTPz(9x`21W4MT^VvYpHP+pYv0AC0!^@$7yz!?365U`a)vr zI1Vq7p9a{75>Y86>K{3X?69;nmb2^zGo=c z{u#~Oc}dL6Uh*)=PHW^=_c$dgRC)L1+jkWFDQ6#GJ=xV;i04$X5V78Mhf_*nt#Sfj zcs2f^W$EpzEFg9(CC0p>u``|e35IM>l5$BbeC!{5TdkH0>kFo_5p{Nz>?G>TlC4s< ze9OuaK8aie<8)UWtmx!hC(@eqFGQS0^FsO%b0h+WDC4bnM0kHZrCImdR)1*THjHL- zN$REbWej97jJGbGHEEsxT?@d~QTU&yfkNTe6Yf1Y-1}d4`hVtAj**ma#@mz21Z@#8 zMw001b?U7sS(>*^ARxNK6UKEC;K{YLYOLI*@+Xt%btSK%j@2vF$F5_|hLdCkKhSbt z{ABHXWT25LnlF;q z#T~bQpRgSYd1pGT0#yZ=V}>iFbM|F6l9{FK9?LP@aEQhMiXV_sxle8kWH`!LK(oY9 z^inCs+XNDj%wIT{-loHEBX0*JN(Nb}AhQM$)_z|*bTFSZ@3N@o`BcH@minv!x@g!d`Jh6&2=gRB<43P-b;m(qkWtPaTU(%dq^7vKbbG-Xy z4H?ayeK4zm&Foct3$%hFTq`^20f#z!0#Vn41t~#w=ISq|6G+;OR2J?j3AL_b)GZ(0 z$`6Kn?9#nms5Yh5LA=sx9L*8<6=`()3LuOVSuOeQWuHSL(9N-!ez$oEi9x7H^GO9x z8XM2RBk$-XZj;fP?y5VCYyhA6V}-hb%b^!jKEyFxw2hHjQ1IZ+N~=4zrlD&xP#;xh zx4H2t%KbK?oWm`u=lyH;eqs+-$`N#r`r+M%q_AcMamCeX>*;EfuaO;iGn#LX)2@*;n2B?rDO>f#T;fRh*(yc``&b!kI6=!sSqa43=8 zy3dzOMwF|@PSDHF5nLgp3RmaZxvNI#j8N@7O$b1f^=DW$S&8O*Lt6{~`21l1suU^t z4p0vRqR#X4gTrKpxI5#Qw=9rj#F1;>jgj|W(~2;g9ij$%)&^D?bHAXGkN6~|$=m14 zMF-{#thWtn=S*=ONTmd?59c+;1Yf;)m<*q5@cC_%U`8{w)nJItc#BFd-wOOv$IqFW zgvp=KD0eiupeX5{);%=DAmFs9`uS@B0t22?SYXI?mA`paoWbDHeo{&bR?>`NG{^`! ziY|e_z3p?};MZ$0&|VV?=k8}}Y>LaXjh~w*-efA+V3 zkuKZ({w6W|k&5{%&j-Q6TJ!DxSEY?RB&fcdV}Y5wFJA`yWtI)-akAYjpU?UJc}$i8 zy_SBiPcgvp|EZd>jxA|4U7QmEi=tcdJuGlLX=uF9qcZrz9@RBr_-V(3L2~-vinaZd z`GMbCqi}G1ql>I)SABPdCcoL?F(M&0xv%L?SycY=+dJc+#{>3I$(s*CQp?D zQ|zq{T^MTIt$8>L>L1{Yx1(_cKB4lh7EBEQSS~z!;h2>?dms??1oNX)2m1Q`_Om zir>8MWgR>ee_5mWo?_MM-%@^=Uxl`uOcIq)BL9iGEL2Srf+SgGoVA(5V)GKOk)|p* z4p~v|C!Q;1^*RZ+0W1x(-=PZ3mul?^s(CbgnjVS-B$;JIoW@rqP49!@b@a{Oi52#^ zV`CSXCs8LN*kIDVvngU|^j4yxobzj|@ZXS)ud_TgQ2i6YP$tJw0To;-nw7}0*CRP% zf-RNv*M@@bsQDvsGR(KCp8B|YQREDh^v;@4(5x`6(lJo?%y)=sg6Mqb``g1mpM64Ung`y#Gn>xUprYf@k5=^Bxy9 zIUfBj(wNIpM90Hpxom;&+VL@2r72L76`rCuR>AwSJMY)UR_!tL83yx@+S7v&edMyI zv>22ck9vLJZG5Ob<&*d*#v;dQE(&0l2}00DsI2; znZ9~#o(^&u(E8o^awqNcbd6hWGtW8<4>j4dZmiBIS&+vw*M3BRg0dRzesZgNlq5w` zl0hZymLTNK?KG!t$#--4+L`D)T{X?}emHiQ1f>3E*`bwPZ6_g|HaDYcLO+t$5MERl z;9PtH^sfLbwd5+PGQx%2E&R(fuhyNVAFn4`Jiucu0oH!E)gTdps-^_i$UY0{qAi0> ziz6Upx*ocn_OEGQ1ytml0;xDGfNd=Ascpa3P}FoW+@>U{VZgAK_$xyMZ#>#dsq1Y0 zc?!(Oa0AS;*Jb76cXbm+A|P2GMyeXdm^vO8;a@tEwtTYoQp`);u4Xyt7#c|@X8rT> zNo0x_ppfA8dVCM1J$dqbE{&W5H?t^P?|~%FT4XvNo~R|97H9!0BfP=ERQ@R>WUh|8 zKf34BrT6FUL5y>Nff(gb*fY_*n@LsC!f&|jN^^h}UC0&HCxh@8->TQy6v0e($dpP*K6E&!%OwnceX=Y@ z(Wb;O-}e*Vb^7MKJGLy~e7d|Ve9qVIbuyaHxtr-Z{&_6(&UXxa_Or+%qM%592y>X6 z$&Uk?eQ9!_%hP|i-ZYlJIEU!&ayLpgaX-20xV2RnumvT>l2piyH{~@Q$S`kZ7R`YK zAyxWoACT?+)^rGbk0#bGL2<;%iv`khe_FTOufXL4*@S12dm&=>)SarHw{4b{#lp3? zvi^u}&7M?l-}@rha^EEV@rPdKS$aUQ@uGVxiT^-gz!TYpM94$^z2fzCgW3F7O;}}N zF4b&&AteXGdl|p(R=IfeKbh26GkI;h$@86K;N{||eu42i`Yn?-bD!tC)DM;2c3uLj zwdA4+$9I2;HB+>TV90#*p6F=i`{0J~7H z-=}fEc$knbI}m7Kl6e|8`{GijisbJ*9P&~38lQmrQwzUj6t+`zx^dxc!lwc>fg?6h zY$Tq@aOH49@5}w6lIYWu7`od{hu=%Pbi_NJVW5_nC!|60{eFGVVY?xhCHZjLxAFY2 zcF_O;y0w2KZE`p*l;Vb~wO!oJJw3JPEb(&^G1A+yoKOe=)rh)abYj|S80U6oI_t31=Y|mxyVT!GZ+DEjc!Hjg>vH-$ zSbWc(!wyJJEcy0wp>~=~M-DA@@>@1qy0~K9k(Q|d0i+qQOwG-}b_BQ$P+6W{b!jYR zmj&g}H4H62l&oqi3gzFTc-wV9WbVh^D*idkYuTMh6>ZA^I z-I~PG=t8vY^y3)!C);P6c0@E2xF*5%{7%O~3U6AW0QUtEjdqM>Q(pe5>jA-241IM^ z4bCk{0}#s$3T1gtgG1_zz=p>PZc~kX6JoZZPqQeuPqV5BQLLIBL^e({NsmF!jlf|p zM0=r0AEJ{+f3-%Lo?>UBNjcqb>ZsDI=1oKtf&c_IrxOK_-7IjSO=GqfP9l242ZN?% zia{>yhR$sksz}#M1B@#H+~K-YE^meD3be69ZdYZBb>W{+7LX14KKrv?v+xHK?m_P0 z@fpzPv;)hHERjk4EPXgL>>J-ku*g-s_?K1X+mmMbn0iX$ZymJhr#@|KT$sCYLIi^z zTnS8VwyjV!yFJwU@Iw+yznj)pu6Otm;@|w`(bb{oAJ_tVc&xsmeh>LS9xo=4iN&K6 zJxIhR^WFl(id^>L0y-YV{<{#t-lzNITn;VlEHNa;-g<23tQ}RO?72KnH>}9bMBJas z3Urod)$MJ*Z2cNgO0?4UbGd&4;|Edu$S6sxz~xO3CyyVZ9iiXtSom*r#Y;=UTS&UX zjp_)wuZr2Z#M$`<@@Iw(C0Y&^4o$CU@41fh8g?2Sr^Q__7!g@}oa|xnS>Bk@tFh7?81~E+b;O^5iUjF*~ZxZJRs+shW$lGnMbc?$v>3nc~vEH z4|fi`Zf488AoWGnvjoYzQ@WcI5f>NNlKqHJHq{b)zF5uEru(>*K7BW%%}42o0OS-N z(N-w+`mVXsi6{a06ZP>80xtr)42;C)X~}xuHK_J__mB8q<-Yc^3Jv`W@Q@hrk_uHJ zmkpCED6qK|M%gBJ&cS&pnK+(e%-c?1_8J&SPH~G%DPBw|ot>74EA#B#eqO-I0wOR?AY+Xs zxw2#G^#ky|mv4ve7kjxr!6mI!ixXu@Yi(HxI**~&YwX^97VOezoHa8kZUuqHvN$Elb(FDfp&oOYI@C^=tft#mwVnJ{^V)dk zR84lE(3tQw>zK6yJr0i>*OH}YsD)3sTQ+x6<#v^hHwCHs&C^T(*<`elwmZJ;Z*4X3 z!;la8#{|MAE_xzG_E}%O@}aI8(WQ{dGV8|kvA&(tCO;Q@Hf%O;^W>pNyH|F6`&vP; zxXfM1Q$>3_y0er6 zVccj&jiw_)eQJpqckWI_uzQZ~b)Y_q9r>!{isih%CSRV+6R^gTRzYyq7@=7ZCtwRj zhuLhAz#EdwKp?cScZP)_Ywj9V2tUGkyG=vdWk@oNOk0jlCOW7$-yG%^rK zmu%^X{*riA22jO2RPECPQfK%tIXPN*58oCI5kJ^Zyz`h>+!4UNXl&OS%ix?*H81JXCNAVx8n?l4Dl1;b`yapO$FEAat|T0sBAz1#`=3rU z@%j`08Wr9k9A!Y$l`Qd$6WJ*K&!|9sMn-8~c@u~$liiH4IB5oVHF$4Jgao$q!Kc(QzO*F>%@ z`nfC%T~H5^Pj8jA&9K&a~fw#-x_VPAJ0c( zcYSEp<>O*o6<@A(XuT5L8JBTM|nNg#b^Wcw<5c3Eyql=hPoDY^m^2EXe0dVcLgu2DcC z7JM)W);pQVoNO+;4$`36=#hjv*m|vC+nOkLER$W-JFe=`hA0YFD4XrL6@xW*6d=0y zDa;wqLyfHYT>f~xj|*eQw;*6eKXEy^)~?+hAva%$^7lpt>%6AsDE;&B zXH2N7!3byfpB0k{y>Omf;A@u+vevoKAd!M|2e#}DG3!tHO|J($_M~(npcX2VQoDW} z5WjzK(&nFDC+atiF$2R)HSB`U6ipx?YMH*r=irSYaN1V8Q;i}1gSr zzP2C*8oR9t3vEdhG~}XYyODQ*k4=_g`2==3?;Ra+$Vy|hxVc*Z6Tm* zjo1M~cb(4bsZY_pAXeagm}smTnjg!`67LoJA>xwtPuj-`OwSG*Vdz<>t&Nah7E0J- z-!E1Q3bqc2Tzh2Vp+DUBQe%54-NRf_St#VJdkWhoG^{;`lNAS(8w8@ZD)xA+)R;4Z zYR?ZEe;;$+CwJ0Uno7Z+0KSR=_%xpatKIY8d_*^ZYv%rmcyJ;2GF@kgo>Q*X@t&<3 zil%j;!7c++IAv05p}|oAqq42)$8ONm_P%AxVcB~3K0_xxw!c<qYei_o2`gz7XU60Z^nDnY?dKXRLC9LQVQ2RSw?>x_^9kRI)IR zQ%}hCFs?(WP){8gal*v3i}GOKu+)>U^@RL=w1iRqS%Vul3E>{2oA8I~!dG2RYb)_3y%+?7<(b8}e`BS(XvW&Ho= zgX6ss;BD~P^g1Jp0L6Q?Qkc@P6HIk6t<0L5jdnf#miBAuas{Eqc&FO0LOW<<^Z^vY zg(W4-MqBU7?g7olM(kdI-l=SFx7>C29y>LHky6goOmmJvzaHhSs!GP3J7U{z*X_Q! z`J;WCMVg!k!ofY7PwzSQo1cMm%o!sHw8XTnZpU9-E88mC*9iL4h8`;foZIBcm3<_F z1IiHCns}r-&t^2&wtjk*etEkY9d1{hFvK{?YT?dP+es^jXQ7K7_;yJ}L=MgMWzMGTAUFFXh#W~)}6wZ!&hC%Sk_If1-L2He*`l@{MRW<6uwtk!f6R`f;~ zOJheyc6){A*)Y?%cVrENzS4O}b@$-8u-N(IA>pr4MiW0*W%@nydHuGxG!~3b_f%xd zE;52fLiE(*o){F)CHcx7$C*jD5_`_LP~>U4i$)n8v{w+Hhj zcQStHn#W$y*&<8ETa1;G?|HWc4b`1n!#65;-Ho6jT^4SXP0UEck|n%kAh; z;-G1BeDdjOHXPD!gygatEN%5t*|J%5>cT4+qfZ6aoO8CgU{*;OHCiY)oQzDU6e*9#T+*4njnhVUR;n^p5zS(5f>m~`53@JD3^6aHj;RLl~rWELXA9w1z}wPa1Ti zryr4^SgXtfsA3aUxVm3Jqb0t-qD}BAqOd^w!+v+)}Vh>NyWR* zIUCm2@C+99@2b}OT?47icJju-zlr8%P2_Zi=%i)wNum~I9^(F`FOsAbCP=rz7Q;g^ z==L|skuMgs?Ag6q+pVfx?oDEL8p?bsg28G6`9!I&8YofX^?>Z%D|A#PZhrZvvJQ`F z>2l?w=yFRCs_0>iP|C-M;cJ9&{?O7Po}I>FLsk~IQyC#1-*b~``xiNyd--e_b2d!C zm;L*>4c19(XXBQl=M`2Q|0%4+LjW8pU0*EIr;pdH{S6yG<`v$-om$5b&8H?R@vDM0 z*kIY5=L9Wt6vDre&pggvz^*muTNWP&;1xn460ax4!CVnVYx0$E5%`+cwvI1v`aUV6PT;!!08xwHTruiDZkP{fZolo)cVaj`2Lbd~fBj5mlphIJ!=8(F`mS%5iXT*JbNd&6=cE9Yq6FV-$NSmfQ= z8uwFZGA3po_q2K7(X(@@@N@7ix;52$ho8@k%I;nG>1G@vw zEF|`f`4^T;8VF4C|M3WThfr?#61)66KPwR_+9g(?qRr>#H{Muz0o$3U%iepTrJ6*x zZpdg!Kn7Ipw=%&%j^m?~lL;fZVvANml`}lfReIouxE8nV!ux@6PL=>1j3V}$WIHLm z6{(j7{2uHhZi`FInRK+?g#qq<9#4SK@v`l<(~U}z4rW-2GQPBEw9X3{qMdXwVDqSf z;cg0L*KINMKPQYHUapN;f+X_LDk&BexP!qT$h!6Oj=_DLO83BzuvJ}!A1+NFHFk`r zTL>LsK4}pj6Mj%w+wO}McBdJf?r6rwEUDQfdoT9~Iphy!*F!{}+329TrvF?hPx_ASnpaA|Oa3 z-2x)rAWBL}i`2jn(juvJx0Eu3bPU}vq{PrE-7~;2@GhRX?|r;`f5-Rk|DXRBG7gL3 zTIY40zdB8eY*cIShnqdPCyPs1M8eNrv@=y(sH^>Q5Vu27iYbm&ZEAodUT!+X3_MT~ z#bUr7uqt^2`g(l)BGA`S?g{A1ou*|L`{cc6cQiFAGO|46E^iHufH$O-$Z8rU^@EK- zi{SU}@dva%fbr1?&5%pC!YL!|Nt+0rM|*xQ9(pv-!{n+Kl2@{LVP=rWx!WD>tE8Q8 zae0G74OV!W-lOPQG}6bpk#juB?hJR4l9xBQ&P^AI7M}@QH9RNQ=g_YHgkajKM?z3K<*rfC7I|OI#(Vr$5Bo( zH;GcMYM&OvM9{hywkVIDB1+r6&9oWeQRfi^o!7LZUamyN-g2AoulFp5Vh)Q_nC?YY zjxwSySLFS?S2rYknCTjyA)__RqEOKC51GJ1-as*`Nd5Yj@7&~5kx57qxXeRG(%C2C z(}65=&Ke~MTniG9@xN`UiQ5znT9pNHe)o^*|etUT5QnX zyLXpS9*Yd&nlD2J%3Q`4byu`cp8!X z9w@p|AqT)lV->@s%ZMMgQ{h_fnn8Q!f9K~=PRziUC5tUKoiKRjab@A>yazv=jslE< z(XJy%GblQ)YxN@V`r+l9Lm@{n<-tTn)P!DK2Pj1KEUBr#f2dAKS@pcX6teR;%aET< zU2{|KA(#;3fGmb^i@{U6eTSzTpCp(5-bhNr^>ijO5P!_^Alt-(?&-Vr{>e9*!B!AY zDb%B$<}c3o5z~)4o&K0U>K2~*$qwi_WIfc&+1|gP&U;A|PAwg_R2FmmI!XzTWR9F^ zjY2kKv2h_VL`4^kBi>`rbB;&7_k6}Al#vXrg(<;snEr|~_YV)tGv+@Cpd>2*o9h!? z;e`*zs%O&ZU02)LA5r6;r$Boop8pXlM-}dgjd@z1#FO!G3f5g0nnH`er7zX^N=>2` zi6T1i)C|9$oc_Q>LQRI@=izeLfcQbnL8MEo9FV|=M5(XXAl7;Q4Nu>}%U1#LX*ax& z{{OAq-X-hhy-UUR>tK4a_5n`}PfNHC01y9cdsP*19Ox05y6m^}``{NcCA<5c$EX%H zGu+GCdq$}L7^N94M&IPob&||@#zJ5|_6T7!{9Jz8ys138Uz2@3{a(ifh)h#YuW5McyOW|+@eV;=kt<9R7?agO#g-cBU?J2QvZX`FkRxx?Uquj@q(!h|{vJ=xj8-5J zUWdXKENvtWR84uV4|bTu`zc+6Q(6?YwOd2??#^cn66>MN1JI`~&c4kn=J*;m>hh>m zbCG+@^q8MBm&1qX9Gsv2QE3wor8AR%Co$jNh%2vT(ng8XRA=oqD39%x<16f5!xmC5 zxj&2TZ<6^{3VrIzSEbvL_7aA3g=+o&W9}-dgc#L3@)g+m31o2XKBf1&yc{C$_Ek$@ zN+GRp*uf;07Rgk_w6Mgxixu3Xg?&28q|6H|$;NIg{@vCRLyor{3$`^DtuH@txmq!hyD<~d#5RBGz7ekL|M zke12y`k0KyT=8=~hmqgUVdl64!-hLM8dQ`u9}H<)xYHQMty3NL5K~-5K{&I3P#yN< z{wWw?Xk(`#6hMaaYK^5RX!9x6Q~$%ZFfkm}P5~J&{?IxGm@lShmWrbFMT}(4I*XgY zWYA}fclem9^q-V4Rm&k7v?mGu5mn;T?G%ybTqYs{taz6We;S$6izS|cCF30OY(U}N zRIzjpvKdJ|jQPHDUa}6OB|!^Al0;?%+sX+XOjS1OUr1$=D|c7jBl7lalyjxx&=U8L z)y<`+$TQe|D_@;{0CN~7%4ucFg@LLE_*gy;mb+$T{oEdw`!31%?EcvHj5H_Y;qPb8l?S5Kk zNxNc}7NS6Lk#veyvgD->7N53wMWRFK?-nbrl)r=Uy3bJrudoQqlk^mnBN>sePY!g?|~2`sClSSTTW~t z#MAss9Z}>j+flJT09L1b=;jY`+c1XFGGG3>hjX7Il7W%Y@6+*qqzi=r(U~*FguT6uw>ji);Hg zwtD-e3^wj`_Y^DGM`E^e-M*?s`e`e;f5s+jxl^J3PK+4uwNjiY8E7+QUGwwFTYQC3&~V=&l{Xw%HRri@xkOq0FFV z{pI#B@cw1*NDnP@k)Z&qn2G$7-fHC+y;CU@Y&5F?d{v(6Zs3gcsIzXMm?!n&(@ICU z(1nSYVZcMhU>@jPktDZyz4eeCMxKhe*)itovU%IpmUiy>D8kx?8eMVVe=d7m>`!92 z0n38TBqmWV3EFJ`GHg(;xzj1cdUkC0p!yD{9jn%SdH0QRBf?E$B8Qvz!;4Q^HFyae#!Sue0W;UA1Lxew7lJPnQ%ELe+UFllI>$O0 zi@(&ifvP%KG+73Uxz2UhO$?u;Ik)J&i)yr3xX(n-_rfZU(h)!MlArWYs?NOQCCiGp z0nKld57+g4T{07x%i+a3Br&DEt(2dpVX?`BC)53a`haWFZeqOW%SrWaO1*ZunQUQV zjcjq!Xm#93HOWi)jafZB_)TJ#-z@i{?@jYnlW&*>=X`@2TgJoy?TnI5R`eiH{f5P<0n(Co0jEMD z$7)XoxQqx7u+({EZtk=Vkj#7tUA}o}>Qii>p`S@lK*3=tv~^TCYSF!QCO@^QR{cl> z*6q$CnN$wN%=4XNK0N$<&5j`<%58N1%Vd9kN2>n&v7YzL6@Ul%p- z=S%-qGt7labz+HPHyn3v0kRuTzhp~h1q#tCH3jG+>}@s42G6f{!rk5;E(aFKNr23o zL)lo&Q~Kxl@GLV*?0W1@7#k4#hG(0+sB)2bI!-we;w!W~<3BkmEC#~^)poibuElAb zK5+7;%iCM0g7e8@%bTtDCmbo$i*P4+{%%d#eDMNA5M&0}ziP#O)GER+MN+nTQYx#? z>|^jSQ(`ezenxQjd1ZRzW$vwhvf+`4Bi3>J1mA&VaDTCCL=!TXS1fv^&CP0pw}j3r z;CE=BUHXyu&H_6>$ctLgcJK1%oBGb9&-lbMNxHp9)=^S)5>HSem&%qA*C5t~f~$T) za%bqtEmic0pb?g`i}`N8rI{fX5R{OC-xd0oW^;eJ)}}&)k9|kc4fx%plm=@78v4j* z!Jujx?gi z27o#AIPc~MROk;pW5e&);F7*QB=QA>9wHVvpF7sL4l#{)dvjk~{oSbsM3Mq%sm1#g zzQ2!Hf0d_v#a5w8MfD8v>hVA!s={_nFpv=!%|}*a5&F_cVrcIZ@!P|?DwkDjq(-VBt%vkXUvaX4r)DsC;i{}A+9j!&!`c`aMn-`7vZyfA zyK-$HX-?*P@o`ayyLh=jPf+^_vTn7%hdK>z!dM1SNzYpfS~gogOB}WaW>%eE?vuO= z0yx&T19opJ%mk+Ue9)?s9z0)8Rmu`wmLcQ@br5YJnw-z&(%J*>b=Z{ev#KQzPd0fFyP zNrl~NWOF*QlFF)`)M_@ph*~=vhA#9BRPfa{WWx2N#d+6P> zV-maQNqR_{lzTcYc$d#wClduQ4B_33XpZZDa-|jIAV#h-1zZ-MhQp?O3(LdI`#hN* zpQtv0tfhYdpxnA%v|4rL&7xZ$ISzg(2@Gjt{Mw6{K%o!6f)!N#G6jNkM_U$y5J`b+ zX?@QDa5b4Q_f1s#<~tLz-Pt`Gs(>gs4L56l>$w1igq|#C;7GB>+oR(z)VgLC5vjX2 zN$9dd0{nBEvy#Gl;3mRktJ%K6#!PYMU*Ml_=h<;+V+9Nc{AD#CD){#e@lBoqE!BEr zHqkq+$YQ2eovjhYOBDUb5~R4iYxVZriqAMrA*OpFhdEuKr1gDB_o34+QPZMD__QPa zC1o@Hb`G?7Iqm7}6lsZL7nK-BXMEhm8o86!M~7%5=D!fCfKyye%_Ms1{r^tq%3x44 zkJK)9@cYX~S7pgxki-F!OOjE3kkfjWe*(sUu^ zOKlWpB4;WK0DNv4#ye)OuICVmJ1$;V4JM2Bm~RZ@VpsiqyI9=izVC?eE(vTXP;NDE zlApe~;7Z~)=JY7}LV_>zO}^-hngORiqB2GXUCD@FFBa&Y*+x;SV1V z^Fhw5903)Vuv_Bdao2XwZsIN41WU#T)T94?yuTDOjm=OIU^SZy1+FSuA7K zI5o32G+C)^_O;4(SOOg~28>yU+KY`{I zNYP&f{Fx_$v|NTVAG^?Gw2P}I>;UNdLz54gg#OPJ3C$0(hSuFs9-kbLF>pbg^rx~7KJkcY{f18IedlhdZOvH8=WjR=U9(_QB_&AQlO|eS)y^1)r|O2 z-a}j+3)z8UaPh&jDPv|yhCkaA3`i83_;hq9$;A7s%=sD-!j-bUxW1|oGxb+ThDO8A z;kDZZg=j7V&)p=0Yg9@0Fha(b#&tNOQIkF#r8# zAj^1bfn`}tqL+f}%@gxfUK(NN3uU|Cc2rda!*D<-SM5^V+$Kcg=e74m!p67#(R@p4)>+;5zDs&UB;fOeiL1EHna^ zisfZ74}j;=E9b@*e9{IcU&v}|Pp(+C8l1-S)|s}cFz`!>R58#DYw#_W=#4fAq;GQe z#!|KWXmA40z$0rKYr34J0fxJP0&007BSl)0wqteXM$nOGTr0cRMwKAg0$EAg2Nr}MGor5XiTAO2CzCK1$pT1KrLy|twv(tol0|fq3sb0Kh zRhwmw>Hc(pQkW)3ob|;IA4m6|h-KGjl=cvn{RS+G>1p)JXbkaqTpA+}e4s}BKz;{N z-!2~x3T=;gH}YYj-o~ETSauvo$p$PXwAI|gH)C>FQTnJT-F;(=)hqL=tBU-<4_9{9 zEI%R_8tjvczva`@&n0V|8~%QdcC3Dpj}H?w23N1t9F3EEJjNFcaZ`G^*&982e0Vf9Iz`3md zn_LCxR(|LQRw{AfglL;r`_w;uF&U?=DT z()hgP&#AY(pWLTCb0(XXXL?)(!^3h9;9*`2{s**j`qSw1eXY;Exph)y4s=g(Fosbbl8}0UaDLU+tCSkBCk5dXi~Lh&=B?*X4*J!+1B=e1k_kaO!{cW}LS> zoV7|9%bmBO;e4!AO(^pPkxgFphvPmr<*$zw|0MtWm}>>4POoq=C7Eb@_ApbNbq=h7 z!zIsSbpC;yg~9K<;`@#h<%lOL(R`^|)mlAicfGl+feN~d{yv9ll4_?q6B&N zh)V=!*-$xDWxZt%C5}#+z;;yK5z2_={7~Mkhq=Hm+YVStR6+(I?%FbU?h)sN(R+U; zx1k*L4c&1#YENMmgI&!c-Ai5`%0giBfelJ=lbyQEnIlFYh}|3(Uk*#((6YZS&+f3B zJ)LRDipJ%+X9BO<>bH65^(CBtFK5{4;W9;yZr?X`G@5d0k3O@4JOq%7-y$hkYHA1X zIfv5bH@rSqZE|YHB@#};>33(;%1XbTm~5no41CqX-5z8z8w(Pif-*yjZDwbaev4x7 zP7}2Wc8kpK1Yfuh3l0RTVpuTXus_kLo z61-Ga?3JNb&uLs&_&>xiLTM+~~LSoEWL-DlQy=VYCtq`pp&5(IN_77c`J2 zv=U#(jH=HUL)DaW$jwO9*vAoGp3X0(M?%2>$y zYsE-!;Ud3Lw-*2M!F=ifyTbuc)KSik+}#~f#n3+CUI-UA=i8cJ2+(?UmZQwqUYXzairE8B*>>WuOmL2a|vf!aca#gKl{SqsP2S zIR;RkQ2Hc4M+n@b*D!C|q}X*sxDGsX|heI18ou{qf8{emR&Lco`l-4?R#PJ9M!N-MKXahVzL8SP*N(-P0afvSA+=( zKtgtYHgAm`=Ea0qxh6H45hQF&u@-!c9ydBH60vlt?7gAN7;3FE3$n!$`Zo$3;PK{0l z_99mXk_8oPVAc?0w=C{9>HOL~7(bBYkkHbv5_7ahrJGH)kumAl!*9igifWL2v506q zfF}8Dn?^M5e~^E*?>*g9y>U^%hhdyQr0d^j95ZJ^{H!RbCx?KiMcIHnu27=NvTO~O z#Zy~KXJ8_RL1Ss%4Jw!L7{sMUtzp_cj`ec=zO6)3F+>-L@36ZwaQ*ubNSo=`GuTvZ z3HD5(9`A09c-7EiKgC`D<6Sh{R(|-65{V^$SGHG*TQiC<{#Gqg3StvSOj`_oPc}_+ zFCi!GvP@o1_*c#Fc`b%wT&%c6fL{Zl8b8K00BpqU8<*$j7n;afduQcRAv*Wp|0Jo_ zKv-@`A!lv}o{ca{EF3)gdL2|@8OhFU23-vDomLiyhx4U!$P-XBw>6LP-p?}PTBn|-RB$IGhX_JL82y}}tY*-~|) zTkv_`nDF6o=(8;FLa{*f6wky@&(b*c@K^7?6&qF|CyESBZ%pg{Y$ZEduS1~Mzu`k( zSkIu@Qj}s=XEeN>JcdS1sghpA{dkuQTX{s{p4S@_&3+wloqiK9c9&z2+xaT{I%$`> zGUnEV#ZYRJcK>mW_!}{=tE&?j`})^?^?v{y4Lt$q@mrNEb(hQ4+hL{KYDC&48vdAg zowTEV@#u$QqdCSbcBdYYcg!}lKkuJBgy(NRS>H9oX8yuHkDb_RI9(7n`^~4q8QP}q zr4i}Ju}oBl-4tlN38=~zpY>%`{3C*+;O?lb-OihX zj+hM4sg>$w6pgUx5hCyydpZBeuBvThjn8`!1fEJ>Zxo-~$%j{iJqK%m0_A^oRH%;L z-}^1_-4B6}R}i7_?<{~>N7tr0=pL`twyI4UziOp$7w5C(ytw^hm$-K|R(32IQoCbT z&(bduK1HVAOQ@2ZA4u%&7~o~B^z)KVTMzH3@Ic??GGF-Kpl?LIR-19quOWwhY+0gP zZ+_VwBy@&XWmzbj?RMID=h#;LR;NQRoP1EDNi;d2uM-|bZ0a{Jy|qHk%Tv!^ephjq z18|~rZy$hR%A9#Br_H7YgiT0{*D)usDcUeV5pB&HCU1IB_lJoW046ly&-^gtItcrq z8SjiuI|%o2e3C?AG>xz$V(=(L&_3fi8b@L!g%$pF$-azQ0tX%FO9wH% z@ldVIo+?D|>g1ZR5p$-A8R-;+k{_6qAHb~!3>t(FY&~q=vSnrYFOb&KkuLgFO)9PW zA##XqwnvLx1Yl^=@Jh9Y;&JP){3;a1($*CBJ2vQ!G;4>y{>0i{^%Rr67%;Gz+~@|9 z6b>(){p=BWv~3$x#nIM)(mbAMNImTkWj%Fl$NZIJy?Yd=(TuEy2`u!@-QA-)ZiS>i zXm2)zz^54d3CVVmP|GbqvLC)5U}<&Xcra1l=t?hjGuN0Egmib!@~)6y0ASjSN%7j1 zJp|sAZmbzHh_7sq;xO{L#pAxq6BATeRMk#?Q$*;zFL8I^kf2#DaleXjdsBSx)C}xk zeoJzPuD5hv+axnxqUn;)18Z)PeNbpT4DZq&5pg_4Z+`^lse%T1otfwT(9rcN#-mR^ z3G#D@B~kEaeUl_N%8GxlRTXOf{H-gO4cUoVo|=Jt$oU zwiXT$?w`d{z$8evOJ=_SB+7(e+~aB`od@bcUd%UaKD^W0)4eXQrsn>Ko%qShN=6q=3mu~E(abu+>(qM9NChDNm1@GNSk+Y$98dmqTs zS_~q#2(5i64(Daqn&VvXIdQb{rz*H=a4n2d;OQ9Y|JgYk-l3}LM55@pC|PUE}D3{YMq_#b_iJEu8JsX-#IPO3Tj z9>cZy(wCUM^G{iWyxcrl{wi`%Km5s!30 zW7MUdYzti}Hrf+D{kk!al=?h?9UASCY6;V^BtcNq8WeqbRZSdWlkYfpv#bclN-)w&Goa z4l(Y_x$a${D)!LBrypU!7~A|FsO_-5)J@3 zP_$8n!cD#Ll>EBvpfz$QQKFfXTQoDgo0ocXZOYUlq!j>b8;1Z)_2~$`^O0RlLeEn2 z4hCAmvmE}&^JX%C=vOw;V_Vc~#!e4YnxcWr+J#YH*2rhx)fC@bHl`@wV3AIwpexb# zF){C6@Yaqt&$F&b{*KVAiD~1OrjwnI(@=9OGgqZwa{p0>7&?LNNWgu$Khrg}N2a)@ zOR%b@ZznwAzU6Z2R6p{)@OtVQJqn?#9banl`nO0%q%r0p0C^KU`M~2HRnKvdMuY^Y zE32#6u?)+5dy&45Y2X1ad{2hYT;**b-0tDsPY2i@;2@z9x?L2>B6f|#MSq4ol-Ya` z!||obp1~@5;e(uXtNr8HoDO=|v8Ni9Er4IV$t?~nD4xNS53J3~oEJ~@QG`B2j_2?~fr&S(Bk*KIe~`P7e@?_5S?ary~( zeoSt5&J^WJ!`~@A z1ry+@&)t5{6Kn?+6~%lP^X^@0(ave_+JB-nuL%>Q@U++i0X&CAq zj|UEE;upfrc@@u{Yiga>9A3G|Qipxv_nrXfH7hhmnAIX4`@)V)RWcvdxnF5TBo$JI&uk~D7Z9)p=xtuvt^0~|(=iHY~g$-^iFS1Xq! z9)B`8u~u7)kJE?`#3JaQO)??1lE|-JhW*PoJ?w2_SY%xL)pb~()3oUF$--U=f8@7P zNO2j&kah<^O_i>%E;2gGVRs*^-MB*0$T(uD^H-sgV*T|Cqc0mFUTnecwd(DAz@3a2K$T+KNyQu+pJ&pm=5Q2du8lnDaHn!fvEWfhaTl6Ln^4?P5gAersqJcj%<5mHcM-uNp4A7|ywytiMLSpk`q?DmxNkONN zgJ_|5=VtXwSFRbSURHMx&}vSNueo{fos3<1yEcNSK88%eQcQ3tOQcXEDWH4sn9 zVicS3EGvfEMy?*96AO9_Rp}1lS7jc@zuzAGDN2BGkHK8P;)w|&GEP7Is-iuRXpftt zFkPVaZ@!OKI(^n0nA)r4JvXJ|d|c8qTfLL-+fz1NRwv}tl=I~QkCsu3)&cF#qPKyh z%BC1xQCdnhhBO6NqQhozx{>Y(dUY8w4wc?6dgo%{W0UTuJZ6*9CoSv`)v++syP>v` zucu-teT!lhJ&z4iP#ex&e5UGqNEChj+Js1wVV6yLu(w0M7yw@j7CxiW}62YD3)?6)f;$Kv)Oo8|VVvVlun*8*X-g zRZ(=*J!Goa!}}-dq%IV4HesGpO(-U_rXM;z>Fbu%1#na4ME}@5EuWrt@zFEk3755s17Jw(PD2WjIc^Ne|kYxwQ*+zTKowE-k z8r+? zo;$U?ZGZ}-I6jyN!5muqyY=`B+K9!!D;SYC=jnft--y^b`J}7OkoPUbc|t~}`jIHM zB&*|N3!6CWrR*G+?j`HAi>{s@EzJi>Xe5kpL*U2+TKtF^yq=Kea@(_??nzHylxO{L zsLdwYGUo(?#}oM&2%3-E!dBUOA}27EA$zP&0NFZLjS8|B+@C@-@pH>2K0dB&{cd^_ zWwi&4k+go+(m*jv<&lT2nI#wqk z-!y4+Ed=aXbbR69#%6j1wZnmZqRw8&Y$!4uljD23JQRpjh%;!AaDfU#tD-C-ZI9h= z+DT6FSS*8>bSp_}d=>qYHS;YB_wlN@0T@_9%q?5U1EE~h#E3R<52u^_3L}$74jUP_(shEs z?3EqHV-=M_?F;DxRhbp=-vn~3v-2z`N6tG3#a1iUric3wf*Xxt-?NF%Qlu=R3B4?X zi&GDrfx*DPG&|G}&xGF=G^EZwR{d07qE;&2vHQ*5c2T$cqQB}*`*E&c)~naAAJOdj zeS9rT_r+b~$+7`ONnEe#h_N$G%&A^YuSb#y++$ ze@2@lbQ}3>R(K&|*16C%J$0w$KwA3N2s0+5uo1~I`&B|xb6E88C^Rn9z zE1#$jj`%!H@yz(VjtNt8tS^KF3iI}PzctmW;22)aokWwarEVs9KO*m#b^~ZQZy}r2 zkX~A8DKf!^b?d#T!@~|@fl)kvK9!wM0dg5J2v)x1KxAw=ec0f2%2h~C+q%ITNJV+_ z{RWUZ{R4EZMk_r# zE^sfJ`BtYdV|=XqN%napZL@qr&D1Z^DmE4Bb;n*h2WAhX5X7BIJ<0&a@A+x!9+my$ zb1&JC2dmZ5GgU5Xb@%H=h$c())WFXIaoC}EH1O`}iCbIO3U4jxL1cr(#V*nI;l%qa`YfGA0bW2X}Zg`Ku6V_eqL@ z0Y$$Wo28TYX0EH7v$2jqpQUuBoFv_==Qn@T5@g;mGtkhnt-QD)M;Yl{aKt^|at5rh z2BF2L=F+HL0>`?TE6szHakdget`jdShNs*PC?}g#ZVjp|*~5$AV@Ata{y6F2TtIkU z(roTcZI$K*)O5hTx`Xt?T-5}fwp6>IgX!z`z_e9si|~TxKCyzu^36`lcgYw>KR($E zkS7#AzJk222z(&2bf;Dib%@4vEU8!gNv&XkG%`R3`t%4U`YP?&%)7dW+SHU^I& zsHfsy^iCkbaDuw>NSOVT_vOtGbJ6V;yY_c6o{syq(O@-cKOq1WrU?lDF14-n1>(sb zhdm`$WnJ>6SfHn;y9N!SIBHD6jx6=17j*n?)34@4zWg{ zWiM-;LCE~W3dxDKwAls&lLX0a;rCDTn^GDSCbi0W*YmP4%s)#e2H2Bl_Ki@|I9JOy z;igJd9ieV16hL7RNAXNw9E~?|4<-fL39cPte7E5+F>ky9?yuS+S3bWeJ05eoeEBNK zgUrMR(s2AyTNQCiy&d zz!K2zr2c-ivRR<4=CYop0lMjMWz&X8#vc8)CrT10XzXohl`#g%ijG2HDu-X{lWZ?# z_Pov-BKKOFZIvek9elv~P~>gVMADxzY~uXUz9T;~b@#Nsnb0{sZ=$}dF_DgUf8vE# za>IEp!R{Z4#<@nAjLq1$EuEgeiXM9MhO)!RXue0QlYPT?rUZxAtEY@IKD@(M^*gRR zCJREkc-9>To?u$I_@N0KGd>*bRA>G%IaJO{b4ivk-;G<%aDA5)<>L5RH7Gr=2&Lj7 zSy?d$h#8{KZD+LCGuYe2p^ZSen2^447K~k^se8OaDF_%hAp|x4;?=}cD2{E`|KVoE z>m0D4RIV_X$26mVR1L>U*^$XYE|c9zu9tin7V$^8d9=y@JlPol{Et3aUh9*>>CX79 zrXbt>Y>5Kali!iY%cDdKZ1cdbY@wRFp*D%37W}?{xSMC86bNq5fu>9^8UqnJrcq(p zT!bg;U!yF_2Rf;!S$*X`M0D-C`3)2!l6bpow9f9g2kT5?zIG!1JS`2l3Q7$iU;XZd zc1AKSH8^NOqILBx#H=f6kVv|>nx1I)saNRB>I4zzSA(yq%kG2LoTh3Nmi#_6AjRvZ z_uNR9#Q~R81hJomt_bA(`^;;#HO(T;oO3#AxxZyOq~w4s=Uw(-^xt^WUsa!9;SNJA zZ_u+yR;FKKmw)mkY)I7grH%sv@aD#oc>Go02Q8TT&$B0AJkR3CnMHwltm@}kmB1DanN83en%t}dBvqj@$9>_(Z;~Th2B{s2I=cx#^s))xeBK^ z8@k8J`kOcH9#r){1(7lRB{Mv6Lk_7)Uio0?W`PB&Ha#u_ie@$StB{R;`Y|~Esh^w4 z3)%*5-jQ=XYD6NBDR=qki$5>wI;0ftz|z&yga!^8Jye!Eh?9U2iqP%S)*_;p(pUtP znlH}2H9)@Mww6MgnSR3El;fW`rNL#`xMfpGNyr?~h_@G7)yy~yKCxoa+IUgA6f~ z5UFkPs}%Z%G2T63fugS)9~ihF^50P{)@I+0-xpQN=}k6f%)ML=b3AUoG%c68yYBJ> z)bHpjwkIBGR?8u`lI3@$g#XOqUHZe8n9lSPBjbys!mMBBp4UDX)eptqf|82AOp~)? zaxqWh=?88&k1f|%D@Y0)mZkSTUC4(GK&c{HC5iKnA8$9mGrj*u*m0&(K|@tDSKdYR zbVTmsndV5e!^QTq3&&08?dBU^NiFR%ea4mc5lV;o%M1s2jT)n_WXbeb_F61b1Fos6 zj;i-n-lhsPy5CicgI}PGAV%B|-y=y8i~iDrL|PIrKhx!l{n<3z{fI*BUCxTVkp$xx zU3dF)Eu~<6g~ix$o@-7bxr#I2%CdbcH>`kKj*|qK(Zb&0K2=WO{Q7~Gaoplg5y66s zpTWUH96GnyeQB%FIWq=frQU+=wI_13c0|~PBf~2 z`U5GCPB@H*@Q0|?bL+s03prv@-4VrCHrlBouTZb$r?1D}3*IGSRmLL^R3%H^_vBO+ zIt;orHHr!=JlS`eJrCTze)_YUNT<0)r+M+H#i$g)^@yi)y@P=+{(;~Dvh%aY-fTh7 zmB-!!mtu*hU=yUk+k`x+^XK2~(Grk;C+5r@$?}&__W$Few*%7w79v~fWxt9&3$`CQ zRaN}=qezl|Cz6S$GCVcSw*EW$@l3LfVP9SxK#| zCzyuq{sDKI;-aa=r6zK)Nhd=34^7k0TX4JwfT)=>Qtb6^6x!5B_Hg8{XZo4~ILM(4 z(qGbJ{tpz!{co<XPL^OS$mg5D7hreRn z!IT0{FDU?)ar?j+0%>A8Sz63tz4e=!dq3FTETJ<$6V-nG>xauA@BoE0+O_r3fBh`~ zSJ!Li7#WSHvA3yyIvo`jFM9zM(j)Su_aPW*@@{oen8!o`DODT&OJQL>x55Fi@0q13Cp0{h!{l2jlrla<`EZa(l2&;78TVEddO>H78e?Zl#P+X~+e&aeN&_Vd@8{a;@&65PHmh8v~Qzn`xEw_o?~8~Yz$ z|DU@BOo{*bY=O1$pOx^RmGI9J@t>9OpOx_cuo7O7PosMnDtC~JtB7a1MVdym%(uH5 zqcMg*8t}Kz)eCT^-JU-XaA#;8=;i%#S!c(;wJkK_z+rq(}N&0_%D8=N{RW>nAP5XK?CrEmB zx7SRftEW0TFwQ7RPk_5?LTuBth(2Kd7@Y2N9Nq%2|EH3C2`X#W5vo?{bwcS|URWx$ z!#nA*?r{!GyRe#n2HC1P0YJ#OadmN)+S1lzATtn!$XahkN{xsnalL)hAJ3iIPTTWJ%BEWRlL1t|-s$)v=+!{V}?e)`5>ohZ$d&rOH%OUylM|t^1DcS+BVgs}m zgu#EdOqhbpJD67M`~$=?lHk=6Ti0>O!{7MW@L{o?$WLHCYP?Re_v1BHO~>0iV#ixu zRqMUX5#6k>T)1eaHi1m+ejsyy^X;m^)X(Gj?)!iJk!P5Jw2KDMohOQvLt8Pov4q;$ zGUcBAMRqZsIkgMk211UroB*PxdGI1kAwlruf|wMvIgcy=WSp0ucYfC^iMcz_^o`oA zUK%wxgv{N@Ff3ly+PW7$x6_4rf=%YkA~2_*XVI$Z&(#c078(B$J^@7anFd7h#a^HA z2=xM%c=krm8>WH;zE?AqR{3tl-`KOnsAy$^!*?iF0*tbbMpZa?bzZh1(ymY$snuW=-ZqS+KKA|+awa=BrmE$D{M zuMz{*!{EhTi0S&52kei#ChH1JTPu7|kJx4zE9)M)hLW5EwrCU!@dE}#`qH!zd(a?E z3T+fs@0WK_wHhO?@3q2}d5r!VX_I{qFXibM8|-a#i1)t3be$IRq(7dUrKjY?MSgiA zs@Lyg-Czb72q2XzM)?wow$SDN25*PT-QqX;YJJofWS72PPOd@7&khB1hEUI+!?+b%`(1N zylcUp-J-DEa*U6t7X=2MXY}3iJ2y`QP>G)l>q|kzV=x>Dnsl?pLtSJUgytG}CK*{S z{FIfqGxV+yAyGOtQ%yjGCd;s_{`r+l2JPQVD|l zS@=oDc{@Jew#5NAh1j#Ro6EGH+RdRijRcWV^mJmp&)h9?{<)rtNvE5^wSXSV3T>hX zXnnMSfeP9Ky|X(NS{7DU!R%tzori57+b%ZWymhs4*&NRJ*rliEZcd^fNi8V>c-h#g zSw7)m&jR9Z?z}C!r~;NNra!L%#&DwtT zgvC+djvn+d_?JM1Z+^BU#2ZNPaU1`7|JAZl49=H$U4Q9uYu2BfB4vO3{r@oaR$*) z&N=3gDALOIciYK?1b7Pt6=AW{PPVIcQhtl=`i3Ms)76R0s^Za4C34N;h5h&XeQ-K` zwHrW2ZM1BptRMTgw8K>MX;VLrB>9?6@(hJUq2nf=eytwAf#EM1$@@)jM@!k-kL5yu z0YHD1&w-DxQV;usz7^?t7R)&7O}wV^Ye0Ar2IM+UbiwROP^<=Jb5-$rW$<+@j+xEd zyKtbtM>y!DCC&WWMp$)?_5vMoZF0ES!TH`VDTXCrNN}HR6<+wI2xG1IjN|@GWCPq< z-1F+j)iA%9Zqymqx6a05Nw>zS-H;t$ITggNnJb&wA*RZ<4+V*Yr>jashAp%0&n*f$ zZJ&&=HZY`O`1I13Kg+}j^0-@yuGQN#w%+zH)##9+DvAF2(m3))X1J=~mg@GStWY6` z?d|CkBpA|do|4Hn@5F3eK=K_C{P=js zJpC5!-$Xl+U8J>RFEXf*rbfpFar0(Pq&SH;wCiNn1$y}PY*yRA?*QJ}<%HzqxS8~4 z086l!_3@`M1^k~B342&omA~lW-M+OqyZNSr6*^qx#j+@f{;xB)=r`o~z!oV~3$q*8 zXqMoX?M+nkeVUhA)UblH1i0fPdO5MIEC+l2oHuE)EMHYfC2h$8pbd&y)P#5QXHup( zn(O!wiO-f)l%vgRr^6J##qt{3&8J0}shB39CJlMbkM7ZKZ<)js$ie;)A?PGV0Qdk= z!XjX}{p_gnveGf(r27?silxZx>6Hf1y+p?ZuCB|41~?FIyVL7A{ku&5b9}_U%_5}u zcgG=Q8QPPQ&Sb+8vO1N1GwyUWy&^;g0r?T6omqs!!R~ zzpfESw7g`Jvb9#;s{r|#Qhhc+tsNuZCKcW6esU{{CXs+NJ`qEqgXf8C)BG2XGpK+vWn#T~m_Ayl}_Sd|Zh+oa_9QJZE-dmPpDh=l(jMcOiP)DG|;A zyo4I(9qTOGwCV#oIfc0@)v4fzv}nlL8RMK`4h@LI$*<$oCxK{nlN3XJTu!KQ1)NZ{ zGS%E>43L6+nh#8`2goK&M!~e7$W;t+r@m<)vdRsb+ewU z`n8o@`;tXjApGrscFJ+0MfY zEtxI|@VXlD!0dF#+bUU7iglp9yK9nRZM&ux)M498a^dtExfZIo=jFw_2>(a}@&MbnLRxfHA1Ujwvj#TN;dHeCg>qGDN8@sAE$x*3Af zV$J;Cs)yXW*`DzMcAu~cpsXZwbV5Uf|0;}q-NU@eg4!g>OcSy@{mX`K84Vm)}xu&;Ox|0X%$7hw4=p!7i1i#;{3=128^g3ySCTBwRDKAXm zN$b{JjLgEKXW*R=QkA8&yoG4!MJb>srFY0Yo2TDQ=J)}z>F-tH!vCc-W8I6A=PUtO zu3R^3j02Gxk){aSF7h7M>%M@ntHxvK^Nqju=s-ANTB(=d`-Fb`{3$B}%DT@ld(+bk zFs|U!-_6+{buj^l<6QarJ^NIP-CpXI(OAMmAGa`IfhjAJTI8aX4TN4SFLBE>nGU*gej*C8vwM5HW(C$@lv9a^* zg5^D#h0cXN;QPks2P8$v#y)xR?*K+^k_~NtB7tmx^i@BJ8Aj(fUw(3$OtNVh3$Mz; zRvn@Z=v@7G%xi9&waxtMyT%mVhOdl3oX1z04|-#NpH|e(rngMZm+wg{0dtx&cSG!H zbJNzv*d>1!;Yy@Kc3GBIf_Y%15Rn7a)~>ja=>;=qeUY0z2L8fV{_7;9bSn|9-&!G-@vfC6H$EbAgQ8#)9%roDTEzbc&o)z|-Jidmuuo3=#Z)@CRyN!F-c#_XqYB96=LU8C6ve# zw#)p_!v!ZLJVbrqUhUnq`QZ}~vn=R#dK$&`-~=-T&=0+ovcv9XXYB+J!XKY+WrS7@ z!!U@jtS1X4ADSD*u=eTd>ZUL#cs~8-OHIe9A*QeX!dFCXO$BH?^LyrfQpQfE;j~^8 zO3kfD$ET_G9n`lL0kV#GR_#n7{LYP`f+gyqfnM$M+*Qh71e2Dh(=!%A31wXD8{f-r zcNjHypRz73kzliXVaqVdZ#`nMU1OLds@HD+eI z0EL2BZKl;(2~emWqww0R8+uYYP{X6(R{gr_bzIYks*0(B>w0IfUlDZRT^Z>Z{3d}ZI65wHrCw6dM4+1G(JBeKdzP;;J6H|H z=~mXO6zd+y@uTXI7RF0R3~V7JW%%6+00|IXThE)NXVFQjhQ7xD>?CBjK zVGaL>iVDH);U^JDMdh328RPnI#)jAX1!XBoU&aWNx!O1^xPm`|t%tt=Dz0cB*fmS+j^tW%A|+iP}kp0e=b&L@O|Z zIRw4W6n0^~+ir-*FBzLcRY7F>j*8Ffq%M4pTKp?Q^peVm>O5K39vfP@*%wh&J1#80 zdg*rkq=Z3wA4SH0S#OzbNXAdys!Bzjm>Gsi0+^t$H}os&4D@k<5B=U=FmG>{{%mgY z>kDysw!pA;S#y7Tgh-QdbvD}1wKI92-0(_i zoQ}J(9ZgrW{Q1trE8g?~7%x?WVZ+M49j=ryHSTKlYu4v})X0LpDNZtD6D1R^ghlMb zWxnv;S-(W0W7N4e{&vK|E4cDyYG(}}%CbMI;QrX?O?^2$1 zEv*-P1VRpkPEoO$P%SKa#P+RLx@N#`3NLO&{ zkCRecGY^F?ix){+TThxhZSJ>cn3G&e;a@#jKvD+h&g1JXYUoWcx+-UDh4}nrV7IqK zj(Y$>E0-*h+pI?b7od7ARrcE#Ovp85naV1K^3d-UE;tolv-i4xPOZ9hzu$?A z;D&SrKQqvifojQD1W;aauj8qL2tRrRZ{`Mu@woo@^N(G`ji)bscq(l&&S`Loxzv(eM$JJwr&%SL^j>_^k`x-SdBnlzJL)+6kLx0LFR`9J6|V35+0v&&fV#HdBiVmI<~7^Gjz7| z$-kGh8c%&SoIUb_Y&Q+x1Plo=(ni~0MLImonlRb>0b+RK07O^FPs1Y^2c;NR<>se6 z>&DGn;K|CL*sJ`t7});_kRBXX==%_~XURCg#LQ^8luRl=%k^vbqqg5+>O73czzZT8 z4)62fpvf!To8Dw6xNSbjXY>IG_?jQqINA)Tr`5K!h{t*Ea-v=DsMKj=RWf*=gDTU= zQ%%K{Yc9nf%ZV`JeCJmeTQK85%cc#4IrsWFt$OY`9Z!<8(vVbKm$-R`%i&&Zk5tA~ z$t{1%eP5nMQKA{yb;J@dY;*spc*sNa11{8^?6!xKc-pjKXZP#D^$$b zp+V8+Hj~-QN+BIhW~5)2Erg#|1rcN;M^0oo3=iG<;p#F2M^nok(OCPQy|36`;yLrX zWw$?kDI)%kRIX>Qztl6$z)dO!mEd2St(7lNmm~ABA}_u0!6M;@P2j`!O%&pwP-UzO zxbsR8#8<1VuXoHFkH*e=8J<@)LXg_fFVQ=n(K~lFw>^e8Ho+9wY2`upfg*ud` zx|G@hEm6LuY6V3gx1vRAw`A+@>ZtiTlru0T_=DvvacLm8wEF1JH;>-+qBX$Z1$dwT z`v)BLiRg4ucGQq+-nC^0#$DhYBPf2@!k`Br>lIi-J|wPO45K1L!K!h$wFe7-yCZV( zM}Hz0{|Y2dLbp~E zD<*<_cL>8dVw3e@;)Roe*tM{*f3 z7m-(Y4nPA3Cy`GrHrfDkvEL=9bhQu-Dmvxm_B$On;?lFl>vAlkIeD8+Vi`8J(Rz$x z33A;=TXkQw*+u!}3euE%Sy2VB%j2@xZx$MwsnqX#EGkvOjFvBp1u%6LF!w`)s#^<} zcs7zMM_&}RgC03P$PtHSTlU_ujubtc@JhiFiMT1$2WX<^gWL>Q5?f;N?~4NX&zTuS z$#kfsO7QQW8bn9ix6=Qw7XXS1!PwOo3y&=ZQGE*!)C0}1D7a~O4g^Wv;L`(RkKL9d z=ZPg*!M7sVLt9=wY0zQ5F-Zr)Y2IauQ6`Fz2$siT*%wxYbqTd9w9U4ror8Qrc{w(6 z|DJx91%NC@pRLJj6tWj7SJyUCIKnr0?2JJSg;Oq#1A`=yCfoi{mFtI9M6mIBO=I1v zC~YfoAbt!A+8H$A;HFvEN9670L7BK4^OfHwEU< zm7IAJ#Qf2xS1ai`Jls?(Tc~-OTj^)lRU{K-r<8ho13EwcZ+q##R&^L9SNHhyP4TdY z2pC)I|H`{vbe{FE@OG{;+VA*X2plJ-nBxgW*PTpF0w8H5iaGJlffRg&gQlAu zfj=TS!%nw7E-u-2ZE8>(bUim~XQhYFVjJ1jD-NXA2i1-XL`GBWj8FEtuaQ}D?F#q( zX7ul=XyXy|uJdC-7%3L`PzF&w6YHU?p`jz_(6sFMsmpsWhnvGJniYK;yeIK+n$A<& zbK3TV(Ka+smqTu5N;`_R;lApJYBR&kLKQ;}iX-pzqP%_z3TwyOE8>D;;H>3JT~1feMm>LpF@Hr{f65=DG=@bO6uBHfFHtSsj)OuHoX&dAifEel zafhZp)rk-Sz0S7BtiQL8N89t|-J2g5LBV@4fuycie|bOHI`^TUAfgagnOrWNbyR2A zw|>|6+`&UmHmiHT`E&Nb#~yxNT(~_5D+Zl$;ua*|ld$)@adp#r2%BWAC&#}l;C$Tc zqVHHvnAI@rg^{BoQUP5=UCdpe8TkX zXbRv`Sl6JGPmXNbf#Mwd>osEs`=z3xuJA0fCdrh-e`bmM|4;HZolbmU6kklN=usH= zT5aBgGoUbCx#rg_?_N5}rEbAOC#bTroBsQ<<3#1hv&tGg&SCTY`WinOVH*WpvPN&8#xiH8@ z^1?IR^FGOX1|7x`tS01-+-IMo*%y5N%=uU}DtO4j2xYZ?3)T=imgsVC-gwN+ymN`( zmp4j&dmdp^xRnqYM`jb%Z@I-+MZ`SpkxQmOq|~^OHyH%xXSLiW( zyVG|^iRFWM-4fgY_qgxX-#4v=%NZ#lkNLEb?~=6Q8J{p^nKYTr<{ZZj>?Of+_rm9P z^54sFpr-(-++;7?+nzM8_cz)UguylptH>mzW|>h>_}laS-64^iN-zT^i7}RBp2(Ln zo%kdM{Xp;5me6Q&uJ7Iykr%=*phE;qvI6GqLdfTg4Ty9u`&n;U>ly!9kybbgb-M0b z?n5W_`(Sj+R=R_(31lPbDS@omY%jX#>`R#k_bpu}! zc^|o*UJkdzEIpOdv^z|t&so+s3;%^~andKB@pJWE>7lR6jhD7jL>Y!2@k19wvR^~_ z*$iLj?~gR+pJsIhwE$S!~Uga7ifEOThFppnd61@@uHEkK>#?s|!wM*Ww*wHE;4u3R7h+9*c zwW5Sw9T9;TCm87?_;8&cC;L#eY_8n$hr|$EaSw5xPhUEUg0SbL)@d6zEydB4Llum5 zk2f_go!evZ)q~AkbTkcZA58CBttFeyL~+O`>(ZcXOE3SkI-eoszRY%ODKtsNv!Xrz zcCPc&YW#s^1S3{6q7)a{9DB(-m_m<*CX?_v1Ia>(WPLJ@hR&hLbFhuO2OMFhkC#7bSl-M@x@FB(!-v#q}`cdNa2sK4=?{Yo^_3piw5 zCkY_M3g*~it{~WuuEC@nDat1R4W+V4h%Js>j5aynlZ8>@U)KSywAy72nh&*Kd+AK2oDP0i@UCYooj@Eg$ZPotG1~N z-3CNRX#5|u(A!?FProF3LT@emnlzuFlF^rZ7ZHKG2XyVoDq%Npvq=6g4=Lvtit{UQYIz7e}S^QkUyXuiq zZ@(m)X!^M>1rOwi3Sx~L>Wpj3eKE4*0(J!U>|5r>NL5p&b_>xyF>ZO+>lZzyzLCjf zl6XezNTD&$SgjPSKGr4kIb!?D0Dpeqs4EGSu}?H3#0cb)$1VInHf)FwDg zV;xO#(yDuvZMU>GOYM-EsoO5U$nszgt1OThX{4IP+TDR}3mzgt06Np8^Pmk56OS7LRg#Mg zK4S>G#+y{XFz=RH^8V&AL5ZVVedmY<-OJHuaxJ^5$*P#z%JKjos_^cIY81Oh#5S8e zz$9;_mt~b^oo=MztAxeC^xqULC~+`#>_qyC1PBDwgvNM@e=HPN`o0Zw(;UIo^&tVjk)D18T?Mgl{rk8uLG#W! zOw0%yS5Wxkw?jJoz#n{8$D-r#l$(Eb>jK+u`&lzl7!C3%%RW~pwyF=9)$d*DHq>g^ z@P<31xJ4T0M$Z3`c(=rf4tZ1^6ZfGH zs?h!;*0j}^_lb`F?4xfT*mBySU@hWLsL9IxK#ocRQCql_@N(^;0i6|TREVQnOh~4Z z5lW9fA6!^Nc+1b z_z##5R6df z0w7uSC=rshAJlYT)HH@SWm7|{qhFCj71sPDHXjMdQHS|dsDIigWhD+V^N2B){qHRM zsa~|u;d^mFOO?%3Ws~JaM3OQG&vj_v=j-5$izhQkOl#<7AK-rjUn~_mM1zY)mC2w{ zqqY31y_zyW{{)|g7<_r|N0p|;Noq5NaC3yDOz4Wqb|wS)Y;F~z9r>oyN zuFqTVlbEcgddgiVoI!&RUIw>!y9xG)Hy_YKgd4Mj-IXN(4_ibSS@RuHNdV^V>2X@Z z)~yQ9Q;|VO@tiT(P4$TmH&WUu4x4aa;O1m1+Su?tSYcW)nmon8l1G$`aA3X&<`_28 zA|ppP<2)MbVAgz}$M-=HrOFX@Iv3r%Bgh$yHj?@y5b^n(ANaZoNLy`x&+Gi88)wJM?ay%ee? z2|TLUBHgIq#c)pGL@4^f0FbS8oDSz=n&lNOmHFhdG6JQX*r+BnVrGV7Y+3$?)ip&m z=(Ko{=je|AC_@|$phg(HMyJY*sixhLBsr606lp?c1A|x$IQ#$b&cM1QB}UyQdJ2-+ zMG+ZFh(!j$i2{3LHPDn(MS?9`aL4T-YDMeE(SL4-+}KBChh6;e#?gJgx|sEpX@*ah#T0v0;|sL&UJiWD@>m z=V6@;oOp*h1p~3UKX3_qI1n>_FuL=DH5Cs6ga2{UXiTj7-%w!lAN^Io3Q6vt6ltI)#o2tQl{;RBv5O2UD{QN9UQzW5<;Y$MSvBI3fJ ze&q~dUBbA8hhdujwb|bp)!t{#@(3lrFp4vH+ydt*#1X`iO}+M%?6jL}3P|_BQ9)nF zlbGfv^EXKkD0Y%BY#jTfcpq>TQ{w{!%5`O;NQ=<4C%lY(PL`YXm(wZka)rX{;}Xe? zE1ABleQXmdO76}=GY?L3Qe9`m?OyZT)8~n)JllExaCCkyfr;`^)b1WiB~E`0PsJO8 z8Gm#$l}fZYPd#;-YP>0`)4_bu7g+T-S-4a{u1_xhR}hv zQ^@0os9eGk;8tUcYUIQ3c9>ruY1%p4%SL~&k{)>~#ugAgoUCH<^*jCtb_I2DahUy} zMd7kYy$r`j2$_OMO=d5*QViziFk8W8FCB=y{4L;VoMJ9YMfRj50=I<;+z`s^4?s27 z2-xqc1@ZqrdP&^CLv+zuYY)Q9k?tShT`tnpEEqklAL#NyDSQ3=ki8pJ@3ks)H$v%F z2SHfc&oTCVc0MU3AKQYn3-p`~@2;c!i|S)cUv+pzHG5MaPoU{NSmpChCwZzFJqt>| zCb-j_dPpdF`jcoeLAYo015tsPh*d=S&nX52`j946t$9F-i1=TSIC`RjQZqLB` zectc>0I|@pn&KN1({Z-wE>XSzXTR{#1o9WgktO1w|6ZIs@d{8d7WCa$;*Eqx6CKoF zCtGfmYsG?0FO_*?Bc~nH*7)Cz!+h|SH87Z-3>r{==sTKacH*vKIEr?vQa|ueS-wr- z;rDBteo9#qj^0IGpcF;>3A*)%imEz=zpw-_(f;&NZ{+((7NCntz@i}*rwyz1mD+0J z-JNtaVK2E~6ODSX=N=hUVAwRX;x|40+MtABvnIATnDq)W2ImAvq7N4^VU<>W8 zo>gdnoPwPoF8%L~g>d$iaFZ&@G-3+onEu0yV~eleT_X2fCG3ot&U2S5I9wr39Pj>R zLwR+(u@1+Gxvqh7fqUX8c_nhx*;0w~{eJ;$bR?^%}5~Nuyy~)A*SY4qQ6gyM7S#B7k6OOkL_+Y zXv}*jp@MZ5-dG#7UV270;MjI?ix zAEmjNqRmbL?M9VGihUan96?Rn_CMq%sU%o4J+JFu>!BeM9bk#50O5239z7LF4u)dt z*da9w_NEXw8ij5bOJ!~yoR{mVajk(dh|p3u+_E#%)HuYNs!!R6I1Hu0jL-b@Ao~ka zB#TF~%b2ik$A^lI-&H!%ADv>FI-Dlz)t@JE%C&e5wXX9wT*2Z!H!gIjeD(nXzEsm~ zx-wtt z{|lBnD?40g&?O@1d=#cQXx*x(-*SQ4{v?qxTJZb#Ys*X2;;E^$3NTWM&da-kd(%bK zDOXozls;wp03O@r&&ZSvSiyw}0Rlt_j!d{`C?b0FV=%?7XLqUZ0tD1n0zrrS z$T_pUu>$z3)E+!+a0oZopw)ACTh#07zoOh!_`p1l-47l%(m5T8B>khFEA zDIH*)_P(W91;AbZ_@2M_IM#eSqWh8mj1ukjwLKSgW z6?4db9F&cMM!M5-Ms8YH>_b#8#a{VX0N`35yW-F$rGbea!IMHm#RaDR^Z1C8@5kZP zjXQ`(AFLt5aQ`Gpo0`w4`Bagxy*f|qRHg@wLdKF-==TtxG6mAAJ#U6;io-k+yN{sCZK}e z8z#}_m;WMYT8b>_-+=$?fn{Z(`W;*AIm|C(X*{Z4S+DaH6&9;vq&*u=wvFtrw`euZ z$vqpgkGtvj+lm=Nuf9*h7B`dWKQc!WS-TLf&kl-EMn5J)8m*$wJ@PF@?^@$Xy5j;# zjC~#xyu*a{mR+!g=2h1FCO;^n2&4T)b%wPv>N&gG7s4*$rW?*Z^XX|Zcj`y8f;eJ; zZer=$l7otl=AdO1-@OS%XJ@#e$If$lGfZe%MT@wnC@z>)8Rjs! zdVrIIvVDqtb;s$a*HIn(v=~R3ch1Ie+YPimOS?gy_14xlAO``%I}@yhIPAH?T`nKC zn|*MN)BtjOds=I>JWXZC#oqc4(<-Hn@HY8}L+#0Q9dlD^b%&!f8miF8 zTPZh_8DFu0JqO&4>Hb%DVa_!AWKo!(q5{ytkk;y#Ac&pK>U@w7?rT<;c~|U z&?K0iT?q&aJ4JkcEz>IzI$EIFr8bx)dD)A9R7`SaE`RC%dCbzd{2o_pwtNAL&ea8* zb?`Zm+)Z@l#|A7>E1goBKxEsk*J#3fI9aU6>=8Vxs-`%U3;~$zmS7pk1in-g^p?3j zV5N`6>9f2ekdA^y&a7}#07K=~q0$A@8oS(0fV_ulApj@R6M7S?*3b9tn2$-d^rsvG zD(88t`$9pAGwA4DgGnE8!Kc7aw4&KKP$k5vE>7n1%d|o1w~sqEG|YqD^FaB{u$ra_ zJk)7jfhLB$hQZS?o62)C#E*EFnEpTegLPLc@bCmOOmSojPoLk}!(ZLabRsm8X~b;; z70m)2{dxohKGfNKD)m4_M|vsMIFiJTD!)QA(+<(Jm%%^gkuuHBo?!d+O`nFRmAlQ^ zLhN(#BdnWDn8S6aUt&Qm%OrmXY}cXh7;OT`Cl6;V&Oh^fTYmqp0(BD9YQ55s0Fxnx zTm-OU#f{)X?)oBAxLVz@Za)IgvIPLcS2WG~7k3x8hJCCeM|Jp873_6?Zv5@6&7Dr` zLtzvLeXZNUboPqdUDolq$gA0(=FL66)8D$MXHdRkZwn`w=>sEyZFF`rp^yW!GXKMe z#ikh3s;8<~yI=lFSv-QLx`6}@%RVCBuMc}19y7^NJ`XdLUv=3-7VwXinX-vi=&TJkgJ;mRBM!8ktr4uDX z8$u)G6B6@8djPCsvoy+8`tR*1m3eCzY~7g#jtsEG-U~&t?mf9<3C%KZC!c>{6HgAh z$n)>WJ{ECbWetiNpg-$P-53%*hazBxYqNZVO&SzRX4M^n&V#%8UO%+FvvqU~2k23=yS%Tn=kg3e{{ zh(X!(tzx3cz0t*+t=l7?Q4^IS8eMi-v3x#l+reZFa+b`@JzN!%K)wt$T@(IS)ji3t zy;BbM0c#Gx5b^$w5khabzTP*&_9s!g+F1!NaAKGJ2PjaJynH5K44(e&%a)N707hWk zt?sRAkT|I{DG>&_QT`wgV;t>CxG;^a|Kg)}eTL5>Slqn&8^ZbMU9=i-ZJ9U+FycBZ zvX)4?FagI^n#7u&Ka#?r(!N`sJ&u5Q<4=;r`91DYkZmH%%y*jkihkT=yk=DMMMf;? zEK48sJdf#a4~h_j^91f6C{bd%JYa%gJ1*V6ti4K1yMGq~RXksoRcht5OQ^p=5%6r! z-^{aq9ml#h%Z=bG61H+!3^`LFj`~vxMViJ^9xPaX86ZN-9S-3f>shwZzSxwSCu>|A zZr`XmAgbLheIPmN(jaYpV{6YTkWAW`pws#2Fj_I<`8%!_VB}=X-woftJlz_Zk0d9i z#0*4%ro}=7xTE#nOqG#C`pdQ1EOO4<;j)7hXVUtaOVzi5sEgL*jUEJc5ITbtFn8|| zZb#mI`Q?R|%zO6Iy+2Cg(E2w!RY(G2Ng!FzKvzJe;=)xxo5B1H*iSq@=TLYS=SD$EV0m zto3IBV;N7@-S#yf8>aviL#WiGk9?Oru+q$1IBMv-InlgBg;oP)F67sxd6lqFaaHXe z-J{SYsdQYY{1ijP^T*o3r~SuH+1(TP;z$9D{S)F_FTT5ChPEIR44bJ^qCXG2Bt)$` zXC5btT}KI9I;N*AxTbYVsvQ~u&m7-W1Lv@`*#Mw6N^u<`7pT|f@vj?gZ70Lw1b6jr z+dYs^>BuWh_&9#dN^2b2RuuzqHH^ESeEhDyB-KxmBa-V@v%(moAq)~{n`|6dj?AV^ zLzcttNY0HvED#6TUH{jul&ih2yP)h7=9m_wpbN3Nin#`o!{3JsNLeXwOF<^KbPkd9 zd=&RE}2J@EaIdboBG*R#P8f&k*u!A@Fk^ zQ~xHo7W7C}PM6X6wKA$}{SOhha}@_ecC%i{{OgCqr_fALs}&X6(U(Pe=k?}fj%d^ac?X=A%l$s@kCd0xLp?8^&4dJssF;f} zxMwf4{1K>@*4|%hg4bcX)){7_Y4ftXSI`90CPV+HuTeCoVg9jNrACevOU;G+Kf`;M zCY&epRUXjUT<@B{Dj{674qvt87@P$kq8s~b z2MdlmQS%o<|7Nw03KS?>+*_d*2i>s+B#SnmzF>OSiLtDmpwaexhYf?*(A# z$0zUhnk|+F$06%@mYdaNV4Nd4dDv{2n|B|GaSC0EJ*Fi1LH4?tsPaqiAg|oEggQpi zBbZ4Xjg&`hc|4sPm1O?Uuc~6-7MR20vg`lA)Bb3(Z0I?x%}=f-4cR!u-892UE^4(` zSo1GdRFnCGsPbwvHnW;ABr9aRQiU|iWJaOvwyW!QikwUa%a^XC64*QP1v<9Rw2Fjy zVT@r=i|*c%;h84c1Eihc4=u%o6&j5W{z=~9`wTUT@@0QJ9T8RG=};nq9HHMJ8}HY*>8Yg_jGF&O{sZb#(N~{tmtp?B%wOb)5ldvv@}|h^3gAQaseGmXr7x_1 zvtz|0bG z+stX&Oc_f&)tX3A6iOi(i|V{sSZ7r*srE`?IEjJX&TpL;WJ3-f(bE~=Jxd80#n1$} z!Yc+qt{IoTTGc6u8r^=zNO#9z1foxxg9#Uo`Qn^>tInj*iGf6aoa0E=nu~=qnX-csSymJttmek8H1mkp3fWOykjKr}BmF3?(p~ z#=C|Tk75)Dv3p(o#2b#J_9di;nE1O>ydk*mI1Y$W5G_SCtV%0Cq@@uK*By7^zZoZt?m`nos(c1G8*Gg$lcgl z<8V*`6le^}3BZPbe{YE#as?VjbgD^4mQtXvk)MQ*S6xFcN0X1WNo<4{!<&U*i-vou zTu!K@oUqx+oo~mL-zJWeZxgzWifXF__~tORy6+no z6A_}*nc}|JMMd*m!xs0X(m-%Z#mSUFgD_e>lII|>6be@T{xPD84E%{wtI%`;vE@|K zj#XA3fSbx>1BigRz{@AGl0?L^fk-b!u$z{R+$zs*Easha8V&)eDMlKX4d+NoM=||a zKB2^s*jzp5a_>{p-S)dH%zg~y$zYR_755beGv-Myj?MJhL(bUI^R^xvLfn{Eq;X#J z%O*JaLxY3oArrG%A&*+ETycoA$E7d}vf8 zuq-VEi)>5VYsFzFRW~z0snO92KxUZEx<}zi+XD!Op=OpliC#%S01A{qvJD=8cbK0B zof4}B0Xz<8&`GblbE?B#R-;6=HQ-YIeZyEGFhn6j6aeaZz-X%5Mc4e@!@ukXpNcQ- zv;cM&N6>9T)t;+xzL0PlMSxwj=NrrcLLF9exdS&+EXoZuVy3VfVcpk9-Z>{3O_XfM z*fk-%3^j~47|3T>b*UgtZbYxYBG0k|vxi+=$#clp`Uw^0^t@gR zkBUJ|YT2%5ra>L~Dc>)esd&GBK=-|ew;%E`x<1)b7RHnQ>a6Edk9O-@*SA$9v`%>y zSWdr9`ybIP%X2pEcsIk|bz2)?wHNt_ENQ(DdY2~#>ovj*L(xSL%83U zyV1Rb8>Mx;!Fr*$T8SF`0LI#6U&GXMx5KEGdEdCH)MeV28RDD(MmQhYiY>!!K7Ue* z3$A!t2D#0Ph-lI8I-x#??#S;YU=#7e;AZU+q-+eKp4YE$oJo(ta(;iYBG&b>OQ#zv z5gL+@DJc3|Y(sJtUoNPBMLCK&j(K5QZp;M>#gH~+Qjge>&x|@<_beG@q5mWh@!twQ z#w(qEkhm+6+?dCV)~~}o!<7Ao`Nv*BS8O?f;b^o|N2M9z!{x4pMA-EW+%+|1@a%at zVPri2*x_Kanb}gw9X7do`Q@!}PcXNY3Wp+kHoc;`WDGYt;oTlEtJ@znkl8K_qvy4a z3m-A_G#OeN%Q8R=MYTj%fED{f4DUBu^_#~`eyxFqR|0=zB1t5q$?SQ(+hY+qwCp`+ z_fd%_ca6?8pe4Xv{aVxpBv46HluUzq zCL|!w_%UO0Xb=3jFFG4u^_{m}93Mw?; zDA@0!_NxN)E;jww;b;m5vUM!$;T!Ewr^$`e@9b0y^|J6>a(W%c6T?}r`kJVz={V8sg56!Eybl9)d~eY?kb zcN2Q#QUj3V+{HPq|D_1mMis*z-a1DPT|#Iu>@d^%$2q>fT_;$k@`>U1^E?)*W60<$ z2HFRA^s{g`?BL6ZF^Fb;4V_m0-!VROmjw&q|CG>MXrO+1-{EYewtJu`tXzSBn5xy# zWD+&u>=uwifKL!oA=Z6N@Ku*@1`Pjshj}UDulhx*7tQ`~v`D83{eIHPxYOCZWw=WV zLII3YsjJ0hMO3e$OP5qLK%f)0hhZ;eN1;6zw-498bEM?tcoyX+LkYFaaceMQCC)?I zAwCeZp5iLoEFU=vXyI8lLWG|Z1AFdX%Q_8n7II!!L0{CA9gYNk)clNomBstHf*U{& zqOAqAJM`&X?#7vO)~y6l=;ymwSJ&^B+10f~$ySyoU%??21(7-1(xo*M>rE~m77nwm zSx8e|$k+OOp2d+PQHH(D#SW%Nvv%rV49!XDMa3_45K%{-uD{C9D_xvxGmCSTkGoGT75nMQH4G>#9c*Sny(_?^~DBPLe+IZ1$;eD?|W3q>n{8>cOMDYF> zMLF}tm|p&Szf|7w*R7Q~^xYf*0%ZSeqsc9HPe`oHh%@MozYXG#iRp-Clo&k??S2EI*O)8R)jdPrSF9&uV3FZj0_c|)TP9j1V05wk$0T9d1qXq%iCdb#0Bh=K_T6|RQgkS} zfEZ7|!Jv199Xzbp;gsbf6hYW^Ooi3kAHBVekCbtSviPZlLO*O%#ju6iPc5`TZ+6=m z28zsjEX4&xUR9drM~H(~-n$KQCs`@BJ{>SkM~4>*7oZ_>#61W_MP3@hI?yP)m+Ont zh`1YII`qc1lEsul+~-`pL~^6XJ++B~k=ohIxDH}cF? zW_bP#AptoeEIv{U%Cm_qQ+akkNRvW*SI!>)ZQGG4(JQaW4>`=K6vgdFFVuZNI3z1| z6dSy5yKH>1jg?O~z~e>|fMVI#&1cT%mRdRQ__x7w2=sH+iT&mC!pn{0;iCdz(b2uX z76sN|p+p{zN9)ZOkYu8f4$&xPR4g?(T|b>fEL*G1A3A-&1vj{@)>u9>+8~53bT}NN z#cpJkTa5(CTt=+P&bdz9NiI{O7JjE>F=%~`&7`A*0KQiaGY{WS2BU2jDs&bgC0X+6Yj-A*f_ zhm0)Sw0!!wFd0co2bK$vV1p9N!kUyX!^#<_FVk*h7A3*4?GcE<4mmcpS!_=8orLg< zEBKA`A!$*C+{7s4*tJ===g075j`Sk$iZXd=q7ND|A05;04PqoB@Jgm+T++vzlX>sL zW~=ImVr#cln9~f>#lZGcXG6;z?0d7i$Z`R7z5IV84bREy zXhtRW<0(yV!eLbqomQ*gS32J*P#FG-*K=7p(q_Sw^g1h(PHn6&0h}KNHg>igi~$*b z4>|8f8hx2MK8|=0>`d3NhOZwxvd;o*=WsjL>?XOC%eyVs0XRri#bOGK@wk_gb8^tI zjufd?I8TL!5Y^4JT0;T+HI4rHb&s4@?#wX&1kS?{$}d!bg1#hTDzH32J}krYM5{XE zsGOMJ%}%?^(#EXkacBy6jz->aF0F`nm&`y*fqpWXdE;mffo_>!UDOR64gagTL|G?4 z`Jo$PsyiLW{mY?}w3J`>@y-|Ha3tIf-5J?X*S|hKm#~D__Cbc7(m|`(!o!Q#lDXSMlgSrS5CCo6sDx|PWLoP%G z|I)|1O#`Nvy{T-Ko+n(<8%mbRe#B{j7>@wU0aC=!55Y*0P3kU0IHg47+T` zyi{^I!Ij>usSFrqJ<#CLa(oFv=O2tNT_UzQo{7Bdyh=Zlg`6ss4tUBgqS=m&l`Z#2qH7eG4*mH=P;(76qts4v6#i&_J6r%_{^Wf- z>-{hN9?Pqk+xL(?UI7$1KRg2~eynD@bLr6L7rg4AS1m!vBNh3>+?rU0`QgiW%WIJ%+ zwW|^ovB$l{1V}w|6%r|8*1GF8?IM$r`o_=oK^+!Ni&>1G1HkDqWR4sW6DJ0#)YgJ#x5F^gC z9+9FXPx6yD7&Kq`sNzzLp=GzGO-dcVv60BuCDZ z1`ppudi_nlHA>b=izE`!JekJa$RETv`xoN|HoHUoeX|gG?unt8!qZ>eKeB>lLswS% z!{|IP+r|{;|1EVk|CYK2a*OiOne=?~N5LQ^(benm@?G~GNq_4ZiJ0%qB*0MmSu-gj ze+uM*5x!f6b>$0~NG8g^eJB$N19dH6A%HOP-MZO@hTtOKm(LsJY8~Zhehar5EkgCl z*1j_F0D403-NB^3YoUa$>9efjGy=4@1;+d;=s5SIa=;?_5T0~WJ*1PE%L`9>px3!I z=@B^I!x}4-g<*WWzh+?r7(7#B{W;86@kNYBg(Nn&wgI%BaplaR0#UlJluJ;tM5gQE$Uz#*-$z`l8b5BQ;a>ohC)y?Hz5F z)+51hr3az=8P23c0-4ASqCX>kI|u-~cVW2({~qCdq6>*+uv zHg;SOHj$B(d#@}F*+A=B!k(Z=!xFU$JTZlI&Tk&CseX&CI!nqHAH+cQho(pKwP>+Q zq%#t_HsvsZu%;OHPz6f9;7JPfD!})E8B*&Fr0DsrY7zJerlD8QM?mN_c{X%WRb4L& z{<#@#NyO8XkmApJAp0qi;WI7Hw`SL|iw~87E~6@c{%`tdy&1N!I|@zC-mS9GLb<@h zAK|AdDVQZ#^ee3fLNDotuSb(+1o8YqLtkC^D->*v7$y>uk^)tdEsd{_GNH(3Et(1@ zRYu64VSFkY^x%Zh<)ZF;_S|oWS}wGYmJd z8|vs=62Nq)^*6`VF#5;VYJ{aG*8s<4;t+Tr)h>2h5SAO7ShxI*N?A-!IC(;Ce+Ccx?dvA88Ah@%n4>Wq!#ID z!Pk1;Cf~w-Ly6$$IPh^2*0s!e}t`cfrw^shIiU2=<^&J!_(1T5LJEri%4S!w9e7b4A{YNhtJ65UJ8_s9Q zj>KXR4T5BL@s5`Cl?1M{7`;9@CN%U;R%|h^S+$_)Zu_L!5q!sE1$F2l2-Ix^$ab72 zMO~PPMxC$5!na0neP2@Zbp9XbjO$Y!t`wxxhOypQ*J_`v+E=G2nc5lmAfimP7YCP1 zK9`H@Mgg~QO$hSN?s_?RQp@9b`G73`QHzT9Cqg1VmjI|}zjtKe%G}Ynwh^~sO4TK3 za_nP*U~$)@pJ{#T-wYrR20c$b0RPv5V<|Zaq^aI8yEsr3A1WZZ|JDsLHjnr$H5ln=6YB)Q5!uGRYoKKgEQ-C(Td0eBBNNSm{OF7# zf90-(izRUZxxir*;Tr85p-cDox$Ly3^j#tR7N2hFFx3^;{nPR_i$9lTaGOeyVd%m* zA#Sbl;}nrz^S2yc6FJkopRX^Mwg*Aq2rI6C0Y_*PE99~N_ZNH*)KPXlZ5VKr9cLQL zVcAA&gL z5lem!k~o59$fLpr_cU|NxP98=Kcv#U?e)r!VmlfNt|pQ$|MEFWP)92dI2`SuCB2?u z56&$Fe#Lj+9&Cic60{40W8n4{3!(O)nR-lg1m=0WaV!Kdg$xFNx|^)DEJPeWnE@3iM{jq z2lKuba>ny7b1pgod-RtI>rZ4XoyDpOH$JgpQarogp~1A*LXHozJRUbDu0v8NXI(6< z8~R5A1hitySmH~4il*1~lOx zJXv=|J8tcl27_=AhV1Ddz(Kx`4#3sQ8VCN&+h;N_aCbNm(6q!ZP)sR=`N`oeGQjpa zt=KNM{h*5vM6wOE3=Cn4zczu6CxzB1>Py{`z_i*FKsO%PF8;@V>eV7g$z(ZNnkhO3 ze)E4Py-4OrVB`^7Frh%0(&n-#4It%+2!9n19%$y&xP?w)8Xu{)&9%rOm(k@ypXP^^ z4+QWKBLVpwsom*om43Qz-|GXGm9V9G1!IWi!q_y?+k=l+n!&u9=P>B<9U`o(k}8^x!#j2-?e6ElEE-5E+E}h6$ivWl z*P*8#6)B=#CSKhzj8(y%P~_?i_=8N7Ud&pc;v=IirB9x;fVJnRT84`bZDVZEyZO^7Fd;z2~H&T5srvPrt8F9#dtt*>S zrJh7Q5~1?H7D$CLq+Ey1DhzTYB5y+QORCtPjCCXG5`Pss8Tt(G>Vz~h#}pzmqXRz%F@ zM-b&M>f~(!YCB5oC0jv-CYe<;Ul==p${>_1~AbDZRk z_~qXaWAk{Y>DDWePuVMXcV1rqfkBFM+sJ8RtKa3%E+owX>BLrlA?ll*tIZKy)ev(# z841+C&u0oFyhMiUfZc&42V4LU%{VUJIsLM)9=a-+l*^OZ8Uuv3`%y<`)7c5e9c~U9 zN*xyytFk;?9cq4I89}^dnkqpPZTK3H6`ofZav@2bQYljX&hk)xJ-9c4noFK~K+LhY zAqRPhxC-`VaY*orlH9uFyN5&$Upo|Qb9ARYELoevMjJQn#$euOk4YCg{Il1%Ps*Lw zOj{HQF>a>4%L?y7uNDU#Hc-~Ty zOs~u#xCywDd@`fBMzGJlMHPhG_EalTQalVDPv=g04JPWyf=T~tOyW*QLfP@+lpMVL zm{^6ye{PT$@}b`@QhV+2^`Fi~MgGB|(TcUg+G@+`ycS}{bG$7Gb<042DMHNktRtA) zgUT$etHk$@(>hHiniDafNq*7{3z6P@%qB{ zMWW!>QaXl7{i&nO0?2L@!ZaF~%J1&y7~B-X2Qv0g%P-S zg1%G~;jvX3LZ|U;tt`i&*W|C8OxAu6x`@#&5zm0t9y~ahPn*y7t9ASB-|WG`0maz2 zLrV8`r33M4tA9e)*S#R?zEm~*bzPuk@Ck#5w5+l32s`ipC|U~pxCqeyVwO%n&dL3B zl}Ry7TK__F+FU%o?W+Hzlfu~&{|0@o#ou@#_Xk)u>eRj&g$z~O%Hd)KGq3=mfyp{% zY};f9h-@;yjXo20#^2p^roD#eP|#$~D|YUw;vNNKZL#+@K!q}P)3C_>HOPF1GO+3d zs0kH!Q>McxsZ~#ke1A_KV9w3*P7FaB;9$&Dm?J`Zl8rAj0sovu>~{ge?md|*2;1^r zgTVK7S4mV%yBsCq?z5FD>W@zY8O1!03GOy%`XRp;NnZ6 z;+TZ-02mN?aph{Pc_N#DqATQN;l$YAoDAX~C!g@Y&f*zP>+O-6ZM6$tvqPM}!`}ak zCb$f0*b%DO-rkn3d_muF3X=+qvBtekkMLq{o(1plF3^CtBLO!Iq_R-+f%Xld$)yb?m8 zkAG$Rkw+Y&&tV=v>wSPl9ejBuZLnPHWU*z#MqnHub0B5jbAbr7ZoY(r>-$s`03FCk z*A7QraOXHoJ9uBd@B8#s0%j&8iFE$14iPNf1u=Eu2e>x62|4LNCJP(nK!@a?+6vlS z3yIzi9AHXq(LBr>{zWv$ibs0;X1y+$9_Tv*$B>Qb>MPXIjuyNJ!$}(TBs(pWeh`D*ut!@28;#HY6n*In7w6D3 zUFH~Ks^UD>0lZjW36p9hLhz?kfFtWaVmK?-z zu?vSr`0;3a=Ma-O2C-1$&1()9DCs~1UWsTBYa({zp9EWXysE_m0nYwHz-R#$hTXJ) zNs&o1n*WRm(x(@;5;Y++aIWp9xaH1;uiI=dH*ATEYZs3h1{+(LLX=)W_&JFyoTkI# zH^r3e=rtPe0gDcwX5e=zL*_z+x?V_3@WD8Vqhe-3!=#95x|fq5hR6|q80a7wd0ubF z#ASd{H|kmGQMUQ=52gn(WA{K!Sau=k&2&V)Mk$93Z#LMl0r&6g5K)gXYnto}-K2y$ z%K3@@eg;{?y!+WBbE*3I0`XL)m+l-O5E{oFXi=9!DjN5LqRwyG%?Nx9p< zR*thii-4G#adSYAj-~cH+1aDgUVAXgu-{t(b$b+2goFPk3ysIN87F2q14Om~RG(4< zrYmw@HN@=-UVF{H$Nh|fAG6=-P{w_OD^0K6OsN#cIVg8w+;n%G0Ov%GGE&Keh9fdl znh4+@$tRRxKDxHa z7wClK8fa{??LV3;-6^b{t-EJ~-6H1AMi&fr?}Tc*xjMESx^faLVcFs>*N<8C)@QR- zEA-%IV6)9mvLjoyYNI1?CR0`lpv=0t^0k zkaQj{K>h~%n*_f@_u)K{S+ zxga4IJ_DyJ;+zTavo)?}bX4!zXbo|siYiIcA#hofdkk*nX^RV4aPUlte|*AoCvzEo zyzgK&2Fi6`(}yt7`Wl%uS^f-xA^}v9xi1>#e|Hy$3>~`IBrpjt@)oeVEJ8X}e>ZHx zcDIX}6}iE52@VF&h63^h#Ey0cJKV`=%Ci@6j?&tAE``^|6#N3+73w)n!w$z*UStGY z{`vu%12QC5GEUqSKVm_4wnRG=fa_3TuQL@_rp-|g^Y2=?AX3niTTgatLVkwuoveH z6c5Z+976`w?eK$F1lY^xLjaYFtAPEEMb~)HRraq`7eVYsQ<;6-J(Jm0`oF17$P2MW zHNB@|(C#%~sY8njm6nxFbJJiR*S>!(P0^}5ESzg*8=Y-Xbhdc0(TYDzZO1#zLi3rM zwctTOUQ3h}^@4E1j-{ACacP%P{lVB{tYFZ@qU-M9^DvUl#G8Z2mCp4c3h*yfNYkOr z#*#*= zNB^?yL=)#LWf{O%6uD7ivwX)vB;XPDqy{vk=;!P?&;`~HEyM}nr9Gq{6hxV|xi-^T z6kXi|FJZ%Y$zwJ}?fl4F3ajx+9t#9g)?)f)*hKb|3N*}+Qh$(Kv6-ulCnNaq_I42;avOuj_ zbEFB=j0Rl@m`Tr>~zEu@a{yE9qXR0rhIQh8=ENh|v?S;MxQ~+m0bL zsO2)@8>qBtijYgaU)JsZgaY8OE4XDyZ(bUs6zSBJLj_xFG=%ATJ(_;;hFNM@@%eUP zjo>BxSwE6hui7u1g!jt|CxI^(?*n=`o>Ye7p0U7KQcG0DvDt5JJ#vJj@D+KQ1QgPa zqBA%ASG6<C^%cZ6NGLY$ zfAzJ^B-d@Javlf;oM2Vy!!!|Ct~^f)$E%6pj{mj$oM@iqZo_KMGQ(Fh|0YPe_Df$> zx8qHMzyyl?KvlGZqGm#b5DcGnmWaq1yI=nw{H5i5EI|29B3OIFhS=Xzvfj>TMuA`f z=Uq{24jGx1;QBYg3%ANm{I`v!;Hvw<7uPGhcK=OL*jV50V=Ix>zG#g^a0j;1)&Ac; z`@K=fQNoc7)&$CLf0;$5g@{i1f4p%0+^8Avxb>H%^0|yKzF}f0%q-FRs0h-qsy~rhk+B68ADNKI0vzd<+mKg85A? ztBOmcQYR{&aBt)C=X)ta{Vy{(-1{R_zFk0 zHByq7C_@bJ4!gbu(F#lyM*D}8BP17m!60zzxLC5Vsjfe52@z=2Ov>)&B>L^1-5Ddo z1K~9I+fTd|-^^e%-FdC4me6iLHfxV&Cq%ZFb?tu@zmwh#X#5<^$m=e6vfnPi+pahh z`gr+*)boKV5@Hw{;!h$7?%=kY`&3r%H+=q0efNK7O)aQlKVK%)x?6AwP38N11qYA3 z%`veIX-c}MFOjuoFB)msrCHSd-u|4us1NVK6i~J zNSUHQ0YTFH1c;I18~f2ZT~JafMXDkA=jnN{0trXE75$M~>jAp%pA8=VYseHKx$#e_ z{pQUL6>4=Kj_2z9i~p24XLIb(&Oi&seoSjk8RXKpdpkXIUXMxW-%b~DU+n(Go+s04 zgE#|G0h!(;C;6yi7$%r>l}jFG)Q7}*W0#iQj5-5w zjEzS#yG<`BKRR+_stRPuEAe&_7tv%xg^lImU7Gqctf(hZWba5^KX3FPig>brQqZCrD zUwXKyK{=Me5M7tW6(P7+z(8aDsW_$`pu7e*rnZvDt>3$BKjmO(_PC}*8>JK3LI9s@ zoQs7(5wCr*-tqPnO0*m5`+2prd79_`KXy7=j*c-h*xdh}bzOYn6?4is?UnQX!A+R= zhAo5WGh6s~6*KXB(a$!}VCh{2Pd8^A(zIw^>XU}wafNh#D=2G|T!4Yn&8uH!&#VON zbEaOVF*q?V57XEF{@lSCb}GL;;)#*oTF3JlKBH!H_25))g4q4AUMCZ)E-dzk|MgqCSpU)ZCat~Zp+YQkgkHl4 zV$lz8*Lo#jUaGRNOt#&5RRs@{N2J`Bk|X8Dubq)|d<19#6>jVMRV}`gqCt+gK%L+z ztDXTg@TA|7V3XWV7~7CdD}?KQiKpIny-Y9xjfP*?GP^!DJF^h5wnaLQu|$cG`TJ6K zNZt$l$FXbNEVv-x5(oAe~_O%;3u z7zBBT$mrkc>Bh%Pyu{9=H!WJ?up}dP;}zZ3LIubsn}aqVKemN)TTV2=>lqJsE!(tj z_Z>Eh9zE}oFZah-`W~(Uk@`b9IqP1|*{Z>7Tiy$Wv^vOJ-MLsX=A-JD&*%i+e$EW@ zTwXT9*DIm4%{PP$Zw(z+LF*=Vmu6$SrAPJ7>$GloY9IgiN!L6H3*_FUMNQ1`Woy2QoZ< zW{+pG(@qF~Qy0GE%deVDXPgJ+9PwLk$r)>MjrGzygxjq^t*_mtGZF>^(CQ+FKFK5`^h>aVi1e=NK( z+JAF1t>tHiOXKH7EJ~>e!OLTtj>Cq&+b;iL72(z9d+vTaBw{w(Mwt;vTg1sm!Ij2) z_HToO0en_VKh<1qLyhe2pYMpW&o=qnAFfIopRMtL!AMWWLdWO(7V`6Kp=ckm%{ree zzw!q+snWPXvtp0sjbbbOW19oD#ao-VVkpM^jo?Lrp94My^Ry@j4vkP&xFwcl%tv6fW5Z4eO^;4D4uT4V-b%M>Q3n2BFQ{T*j{jkd@V8LnUU z%8vLu^=-4)y`FXZBm@mTrhaK(M_Aataet68Tg|^2-P~krAqKVZG*<6t*OsRL4RbeW3&6E}#o$w1i%qgf8 z`XNq??&O{{7li=N!%}nn5gB*Hz^T^_+qgRH-;=4>yt}$Be%}sV5Fe zyuSSLb_qEtqSGI%fZKekVL`9sQ(cY+81;>>mxmq(z>GykY!MNE`d6WTvZJ<0GF^#2 z+vV%zIwNgITqM<)=EKxY8BebvXITnDO;I6TFh7FPWV>6gCLZPYqB|lTQ6z99ZdN>7 z$(u(ky>;9|Dl>Wwc15+I;MHm~Yjd-Hd=aXxQc$!3m`G(sCHAXx1q;g~Zily-^ZNFl zC*;X6@hz_+_|NUX48vwp6>rQs;+@1(`bLZ*TH$jDo}=!0fo@kptW)Rn zJ8+40`%jjFW17X%wyi%I1A2qouvb`9cX)S1m(p`V`&@n3_5h)1J!?Ovh)Ir+sdkPf zfMu^kT6KQd41FjP3^$hePoVmkYTUoPi9^DDxcMC`!ci!ayQY1t8(*{|Eup?G^6VI5$~WjLS2W_4(`W%{SX(8Q6O2tV-4SEX{-NkqhBdZyql2R z{)8fPnApHP65bLU_*!6c`O=9F?+s(jy3^ZyLY_tXWy=CS+W63ExX@xrq-RvRcFoaS zuBUA*rYh)`fm7(*m=*pNXGwTNDVZ+G-j95}rN|lqxmqgIH6S`^;^qc)aIf&}vcR4w z%)4VGU`SkWO}*BD2b;D|j}GxH6~kmdg*83PchWa9TIlTOnUX3icPe?$9D)~welUBd zbPf#-&qT~-*VzwA317N$dG3w$iN~LhZYORaaPX%0b zMSpw8YdISBrbUH$U~XWUaqs*VEz;`OC76iCtlN~{)_BV8)B+T8Pr8v=!SnesM2*t5 z7B219jwcKErRML^c1i%`bAMPqEu<(LG=&+)TOHqZxQwwRpaKG{`Y z#}@lbRyK0>Hhy|jzx~*0h=qUNd*qc4=SeiNG3G|wY z+J9TZF6FVe$z|`xTHIBtRt4$}=Jy)4bf5Vb0U}D6KlG=WVA9c%AF34_w2SM)X#Ln@ zT*_<6LV_poXOe>jT{|@EkWt}N0DTMBY2gXHVtr!uvvbA;#S$qy1Z+!n(U6}i+ zgs$-^PNl+H{!X+V#Kd?{`s)cYnwfe2K!#o-6Y%-;8M^B$K^8K zn!{-t8V#sQK+N~tiDoTcs6Ax22u6@~&*iaL&Tne90+s7D#ghoWd9Da)1jnzT0jIt` zIG+Q>R@2H(`XPYGz8f%QT2jnmh}b5xi*(XYRI#r{(19^$STumRj7z#xlN<3rq4od7 zN;;I0!6hBd1*{GGA9-8s62e zky5>zkbqr)1sL`}uj_c{RPE(=%ysiPu3U{qBuMV+BYCWH?iA>NI_dk0EByXsssWkT z1EzbBc3=E6Id4g@p%B}Kr-2addeTaVu7@3N)x0JUS6m)vX8oGX>rB{kTCc5waciIL zZZ1lt@wAIn#?XESiNXuKh*Ud=Vj7&=d-$-_V2#U=EbOfV+91>|!$Yqo+g~lO_sS?x z&dC+el=TKMG_ob58->ck-$`;3b{FrU(2L_NGy>p&W=t1!8kL4b2kX4hNh#;JiH-qX>&c*J zTTFsf(%c~ea=uQN-pbEvntSdBFJ!MwJpJh+lmgrG%%0)+3KnblI=y4Sn7qi07iyaD zai{Z;!I{nSWc){q=dfM~0{m=Z=Z!3=m%z-O{j@<)$LpD(TCpRJ9pW1Xh+EgTt7GSM zVnE%wb*yniFZbT~SDKdhY}xHo5lri*+@4-er@qjrQ0P#TM84CN%ExnQPg)&se;`ew z6Bqi1AWZ0jnPI0GyP@8x#WiU1s6E$n2yjwNg=ZM}yZa+ZhmmkcS#4;Eb0P>5m$mE9 z3PB}4cnhW9DaY{IqJcBlHernRoV9hiYi-TdK=VRKZ}2&va*i)BG#;x#ZjH!W+O2NE^d-$;Wt-ftuO^@&le+|$_M+27FMoT7p0n@%x4Rce)45Wzk)*_MOyEO>5xByQRa;bVE9}k$lyy|-Xo%MTItiE zMbSdThZ}6T`(G%KTBXv=NnS*?xL$|aT|xJk_D z<^CF-`&G)ZBKREF6=>piyeQPS4nRl?SS9-?q)u$|4?w1gcrNk@NrY<7Zp9#E!NGnP z(n)`vZ1Don8R+N`s?l!#az1D!`I9YF@0O^n$Kp)3DN`9oQjZ|n@5uZKWBgl0^;O}g z(0%IDE4s+VZ5L^Khh|wiynVP7>T%J-6Ji?tZX3YZ4d2!sv~>$(*sca{s#z3p>?)l0 zZIWavoE~|24Ru%czb8g2Y9NoCO9_Xfwug<5%-Q{2LJjjbl>CW5kj!gAW#asRD=gxe z=s9NksZ6VXq~xahJ85IE9ptt@ky3?ah)N4&tj8e!g7vlpXJMiDQHpa3_XK8ri8}Y$VjNAxH@$YjpQ&~}RR0XgBkcjsM3dwC z0hG3~7ail(^#1wDuX-q6A9hkM247aIjKhec4abFBG*3M@exYBJQ4_5fqmts>&0YNX zhDJU9dThjl@X(0_D8_mTrs+AiG z{%p;vc39e$^Ds)@GN$Bs=z>MsF$KCypGU)&o6g|pvdCjM&8S6A@PSl?)b3>{Je7#& z6RH`|Lcsl)Xv`ideh(+0xZ(a9>b??a9j>6XjO8W*oLf;_=bFXz;e{=|FO2XZYY)+r z7WvmFu=F_RnbS$i6MC(ET>ls`hAjSGnxPgfw&z>N#miED)4DNaa=7J+sArpfhB%=B zke07Pim?JfmSJ6kv^8M-w-4$+%mHvA4ynwp1Ioer^mGjALyF!D8H0n^nzcPhv)&73 zWV^sYCei-8Q0Fs*h|d&&P_@%Na`*;b;a|PpmIBW7G`%q430{|SHno~mTwpWLZ!c^g z3Rr&5xt5F?Nb@*F6S})^vZj5Abd4qR<(DG>b zAssvUUn*xdsYA7kSKSepiiJh2i02Z_&vPN?&6&?bz|$_yn1C^1%=cfZZkG)tk`y1o zi-24#!F)Z$Bn=uzW^JXrAZ~H)AiMY68A(YAC*b4~izIeZjQSc+f8doOZ-(ErUXQ6>%F~MN zJG%^*=r%-a85^}jkU_fFQcAa*ZMfS_RMR0n&zj2aR{_+h85ORPL1%HH88P$|>o;QQ zNUxDQk4E)T>aPV*IKk#C!fnmer8(i~aS^_TLNlgrqPqK}5)0!UFCPl&L-Cjgi&f}$ zllM{pYO5Epq4W_57YeovLYLwt_~--1^vBgno5(6(;?7$^{oIzxw1)L=EpAzd&=1Zw zPbZ)3Ix9R}&rENR)j|Oy?aypFhc_{ha&|+-?*ppgjl;!Kv-YL7S@1J;UPd`W&JG{{ z0tdZrO0mlQA&9?kP2+%rc{bFfG$9P2=c*dOQ67{W? zoW6i3*ml_g7;aXhX|wcdWXc&OO4t?9b-?G9`-Y65PhB_`3r{noLSkLT0Bu8C3s@v}3B zP+q1oFV48&FIiJk?~7^2?SkbX$*J@#?4kn?`>XG*$o-h<5c@U=OQ z(0Jqi57)!vko&6*|I3%q!dI-{!7Ez1Uqdd72Sp&k`?p~?UO>nio2p7bYgm(u)fJ5m z0{_6!M@6htyBefDP}%)cdw0ac4~fDXkksaC)V)m)KJQ6HVsM0!3HlLHjfnYsrop?? zs_+wv$Mck>JTmk!e#H<)z+U|w$4A}Sud&OuCKy+;|8d*!4MKy+fPuIAQUOBlaH_5W zV@5D8u*&=7!0=?4(VyT3c`Ciu5@MLHvC_MPlsF3fN9vbg1G^c7=<{bStUL{Tb%-XP z$((jiqfFTkC$30up@7ZE;YY!WExzKylejG%fj@Y)_X|GEU6qP1Q^6Z=knEKh=?;f6 z)=9;vdNJLwJlom5saUdyC z$%{Bbw+89pC-rC{1vrt-dB>vJ?ydxdYZtZt`$pzKqzTmLiKXuwb~ulRkx+;>b*P{F zqB$FPY0!p|@rvVrunWiEqJf!OaSuLD6r0}yp8(`pS)DJnHodF1O%uEH96#`P3AF(% z(u?;avC^INpv3ZH^CjMuvRc1Oss&*SBUV`(f|ImL zHymRKPM;>L5&;qnE+3c|{@`IUd;}2MY5?D9dJ7Y-PiR1lvoz;fV?%_itcYVAEO6P~1Ldf=l%fiBzB(h}t5@gJDEZdoR z;w^Rf0+OK86_1IynvfkY5fY}7bVqUOVc^B$vh-=tZeVE`yf1IYN}%;jx4`Q2yZ$2I?N{!JgDc|F+9Qw1Jz z7&1{_q+&FloDb3%ZL%=uF~LFYp3T#`&TD5{0ks~qso;GzQINzvp1}003>gyvwJzpS zqjRGl?A6zT`ZMVGh}Ea5%^qnFL%qGOuPW`9JFse&!=1*dmmxnjC&g#-KY8julC#~T z&F4SXIBHgPV@`LH+ddXM)mrxm#+!3tZ9S zP>mST9ge00m5t60ow!y^2g#ow%E}*!l;IYa?=Mj=s-ky|i z+EF5a#L81!Z23L&nT!`;Z)>FLkW|RM^`4m(JNOOJcSNIL#;LmUH(^ZM?&WtiBeXN1 z;1;lf6L{&2BZR-Jz@j&l$8#*m${sxp5o4%p9Ve!2yM?MXZYsM>F17BTtaKRgc0VHf zB{FsWL1cn88;t6zYg~{^=KD^_tY0M{`3RLJ`z6n1QO2rSfPKu6Ub)*x+{STHx*%J056JMK$B6(Dl&;W zoLx%m5_8<0ix|DO&`+5~hQg;IG9Tl};~Z(U2${+o!OzY$odg!IJG;_t2O_rLLO#*1 zz_VZcG;Qk9xbdvlv$9Hy9f)%f6UD%Q0Y0P~auVdE;v|*7oh*MeWFEsh^KyVtcsrpI zE^|AlyYUGwhe0oy+j}91MB^S^xtFu^>l1}a+ubNEol&CPd95RD*U5Z*Mu2uf*ztg= zA>(V;Iv%c*ZyucqZ?fhtDbL)1KoO4g# zr}{i>hi3?qKacRf`s(gSSjFXy*v--8q^NVn#Pi#mmYZCI&4&+mAL6el7P6+V1-{jy zQoumPTg;VD>+PMc<73mZDf$+i%8eekCD2Wc#Rm0q0 zz@VFgNgc2>Ql!?Q{vUg985CE$Z3`zj!QFzpyEhsv5In)%o!}0^9YWCHF2M;-0|^@3 zCAhm=Lt}Sk+k5t{eZTrno%{3t>gv^1Yps4{K68#a=9qy5;iFNgCz>^3{sH@S3k#Hd z!E5JOBwV!eOIS`LQM))j!hv{w#?*b|>AZ)mdI^XfycHyQtT*|$KZZhG#5^yW0S(mg zLI=G!M7iT%xGmAiXpTS;eBD~5;g+JpU(pUNM$&nZs7=H1dbVL$;8R1Cf2vP1F$_Ja=ao|18)O0cHZv^p~XkSJKUl!|FDfxk$N`D#fosKe)3` zvmB)|xTJ+8RS^%9BwmpRvuX1zCZ|Pls_ciWA-VZJCMQyyqvvWJnmxdn?;Q5uiufJC zwLV;!2sFUKwKGmxgn7Q=FUT3DG&t{oo!%Jp?IPFATjL&!Yy=9BTWf$>q9dibnre}F{A zkO2Nh4@K>=fJ7 z%9FOCN%vO9R^*We=zgN=1KK#h^#ZNhe71ehk@TWSbrX%uyodV-_en3oZXwVGWzS@> z|2lA^3}j_$KOw3qMRM-j6bA=`y70-$}Kf1gDjaeJK=gLrv=z7Z+JC4Oz{9{fuywOX~{+cuieLMsw`;_4-Z zYtY8s$|kAH`K}@Y$jfW;u!XZOmb16wD^7Ci4P^?V!sR)QkJPP6b*ActH=9Uqucq5Hs> z?W@7tNMlpB3T?hpL)lYEYo+n;DH$)F`U4~Vn+q~5La91Vo6)FR7J_Oyk1T zJX^3El-D3WyXG6aOTw9{yo_5US7g=|t3F_Rj*lM?VEA z^n))77&$&g2{vaGUJI|E#;0PL4%=3Be5q=^c*UfBQB?|vlVmLH?nkMlF03_ghlfs( zw)y7+9adhptNje$?=iM7#-L!#dKcq2@za=Hz6`94Y8;@s*$cj>#mL;|By z{2M5#^fuQ<`&T_{7& zZ=Ij#Y&VY&+>cdBL8Bj5?K*t#Of>xKu@yHHVG+?MtCq#EIM_Nxr^?kr6wtTQ2b@en@n?eYA^6@&QTj4>5M=;ruyq{~WxdaB#OKm4+B@uX8B+ib3sK zqv|`V_xqX+M9G|+zoSAv3)5Y^0bjziumIhSGM+R{u^0wr)ZMpVtr_I_%#ZuO->4D> zBg6~7-g(hBow=D4@HAs;7lWei(hf5So5ufGF#C?9&!et}^s>81LTatW?;gW@^oy9G zU7zy?YvU?(KZzVS%3ti`r;Bf14EWyX$IDKdgLE_pay(-`bR$!tDwf&wDFtPl5kC7x zEg<&H{x7LL=V31nxRc^*1YhN=v(4N@^n|^rLCqgSI>=gUmo$ct!m$3G^TR}JRxb*d z@o3T39@8FS!Lfc*D}1`_N(&CA{${xTeV7G@S3R04*2jj@bQ4{4P*=V z3CuE&*`5nVYg;A$#Cms}zj*y)2F{ls3l_Rik~GIb2aC~Wxv{C#2B6ru7gsA6WxVtC zm_14FiYnD_znPt^K_pxOLm#p)pMr$>m`9v@gPq3dApMC->sQKj2^JfJZ;xMR*Z zfv%4!O?i#f@Y^h#X%@3d^*X)zJc`V29dnk9SWp8|1%1iP0w%jH_%x&hZ%B~5yRU5r zaq`xf*DwU4*NFg`^wt-~Kf=bNk9cB;sDl>_L(2#GPs#Ol&{TGMbP~$EA|Hd00a0IU zOB{Jg^b9e{PG@Zl>Bj!*d92lA+-iWP_Zoq9R*2RhCbFd%WW$Tz|Ke>}jby1pSQCZ$ z-`rmcBe?OFRrNvgywQ;jl^@cHTW~K?UTR7F%)fOTw2jv1cxk;*QEA@0*Pz)i5ca)4 zaW&`@&_@ahCg{h0%nSPIpYmc!g%qg<&XK1hkyAt^Qlcc_!&ptSgaQ7w_VvC zNJbOBKfC6VExVlKUVSxKAXBKdP>VH@Eut!nzb5IyJmI7#aPQ$)Z zl!@e4rgt^P);49_sXY4-RGAWFS>q{h^Uv4*$J_twJT=IQB9PdbNtqf>^t(TXOy{ZdZ;SZFcL0@j!ru8Cn>+6FPS+%kYE8R7VfqA; z`h+yj5`Pb1{+QEAWSE*WXlmVyQ`xmg8uj8B|9m+uiM1G6@tcy-Tc*z+U#wZ@DtG>@ zHyd!ynoFEvQf+Hw1#L5j2q|-Tp}V#oK?c%ub~R5JbJzBf>5ysu%95sEl-EW0nV zYG?^!{c~PN-veXrQQYC>7Zsj5WvMX#X zDK|^LhXUoa_Q!$9zpuQ1e=~7xiW>h%nV{Y4c(JFXj)wyh{d|`(kyQNA9Hl>~dkOZd zyiuHY*{}otIhLg~x&P@N|G1+#HWfukD~&Is8qHtfp|}wsVmZB8)Iqr=__Q<+cf3@F zCZe_@;jcXk|M$ZT7zF%45ucmMj+_8wpQk^pc`ggwcx2-rzu+a-P^H%9YfX8~_84@U zt;!CkRy|flrfdC}rR#_Gi4pkG$sU3mna3vG8P%FG^*>6u-<#jD{@eJ^v&475cp?7c zt(3(3f6WCAZXh~o+k`F&U+5O6@dHEaI@I<}l{Azxq*ZRO$6fj6-lSX61o=Nt;`6;NqSi`R$jQzc$+amIovc@&lAJbMvK9)F-Gyc@x-tZtN^s z_%7D|x5Xh|f%I^@sigBfD+Aq19NTYtyx;$#;H+AkFTDqJGsit0s|{j0|L2nV$DsZF zV-hzorBZkjU@t1eqwLUo8dMurqi>J;MOJeudb+)O%#GTgFC;H1r)eSg3BbEFMb4W$%rGl4Ltf6y8gEY`M)<~ zFDU^_^yyQQ*X*P||t@s_QOk)0FmsC*7~6RX^qXo2PfXmcls>;PqDS^@MFA z;0U0|qW<`B+PVJ-5gk`{8sXKPkS5Si8_n6fViASDzpDHk1b?X>2y>@AhNw7M^5se7 ztzitV0$}I#u;j)b?>$!SOWJ)PEuxFD{07RqIRV*+el6?df#d;8Z`<6DXR&~4Xq~}q zk&I_4-yXRX=vRY#NY;V=vC1i`^KpabR49SL8mu3(jqIm6*?Ws56@5_^CFlU}KjWR5nrGAZ1bA_w^M`hoXi&yNs8oklynymza<_oR>K z{gkb@8<{pI+3^mY#~MtK+X4wtU135Trd$|w;J(>R>#{q|Wj%jx|NdBP9J2Z>zMGjC z%GN?dpzm`1;eDQ@Hq&P@Lm}_(GR-lgI(6Z2*wp8@YR4oJL90jUo3DJYBr}D9#>p)$tQKfg3R@2!is@z$^Oa^K-R4wlAIX-( z>vBiq*vWHoR}B>y84m^FggJV!P-tIlPU&|-p=S1FKS);O@JYS0PdwF`Myb~FwV?42 zo1U7NRS+CEY5-M?k%k=qNv;iU+1hWPU(8&ko5z-XQv-NGIM>aV?^~@!EMrR?j7KnR z4OSgjt9EGHuJsB(6FV9^1aX21e%@Y(lY8u4H$L76XqpZyT(_e3*(q(#$yw7WJoaQu zgexsq+-0{9bF}`!-T{~1FP$3G@v*1%ir>b+R==_~I5V<^ZinB0_6~q^;qRh~-(|fm zkcoFuEDu@kj-orQR$zd3Z4CLp!W$bRmdnWD+hr#nV5hmtvmO7_A_OVm(yq zI`C@rw`@S8HK}+Joxblus1+8ee&8r21o`hO*@|d^K_I@{)M~BcwB_&DHtLlnIfXzl zH+L=?QFSZYE}xHgwP7!|JE|)Mi--of5x(74{aY03=-2htU zd@A{-nWum^Ae0V;^>&MCS7P&8KU5t0Y#W;jJ}YQnv%7VQMQ^dD^XBU` zEF}x)MchCqlcRpMy~Bc2#-d4K&5~_Ns*5F9&o~Z7ye{^UPdUS8W$b<};vI9+eu|~f z=bOWv%6=v-DmNGotyTd-s>LQ#+!NE|RaIz%?VNgQ75f3AgxF-MvA!}!sJDpQ!aHIy z<2uvZi*51(4OZfNx;;UA%T2oLKw=n`U&|}y3x(`a)v;EQxu5D<)qz1r zs}dDNc{QF22{A|5Lxj`WVX3Ps?v>i*9jUp~o1tu1^QIWGsL`#h#+!7CEZth8?2#-Y zkW5?usMYXy|3QoLe=-4s~VM@7vG%L-aAmVdaNEe0f z;T#qP@1atwgwM3Hp^oZT&+@dn9a}A@CUV0DY8}#d#GkO=x7xS^@_)kG0= z3La%og_?cE0Y5*5Pgh6_mq&20MDi|I04=a$kWZ!_r?1Lzd`U9vu|cuQK&&Nd-~i+W zKHswqT(pCL_O!Po7wi^=l7mod}U;Y+ve1Ut(fXQdS!e?U*vBty}uZ$ zP7WG>_qc~4;wdKb@wwd^Az1ZScNoV(0ePTo6B+xp3r)ct<+O2P!_}K@)~?Tn=8R(I zJH|~w#LlWCtyzyyRy8|y0!Nv>6BJr)8)?UNy;Y|_7TZpCx9 z2Xuv8`$>B%ZELX)u-B96u=7T7=M|pO$LNy3fk@qs06Mjwcd?RUqU)M$wW+b$>qwRG zmXS$w=9%XYlw(_|0?FC;9x?qGOzd`g23Z0ha1xzH*zrMGQ|n;&tgsZy&|EM|32ol! z*zM(r8%e24>Is%1^+GH_{`0;tA(VP1tK~p$WejOG3Y1<&k8jnxd43Y+b(}CTl&^pJ zI-6Z=w~)Tm)}Lc^x*Q^Ido(b0-6ms(+p|tdl3gdg@#b%PVY(6^8jYhY`^fs;(#0OC zFI#5z>sH5P$W?dn(b^E>^u_0sRCV&%2*3djVTL%0c|nRry_l!LZY9lmyEUywg2Q#*Y6#~gUnK#1 zW-^B(k2#s2WGd|4`wErW>$i30Lo&*9sMil?mt&pd0!3G?0D9T)2`q`V|b3k?3B(K6hx}rfc0!A=#f) zV9RThUs~6GOO_4J&9#HOcI&OXL;kQNkc(@O<9k3<{xCmYty!JIcA3!mlwUL$j1S%+ z`YPgrEuk%%{_zwA>0U3@{b11tq*I@E+Wp38NQ0C$9>WvyI0-V8FCC4^SG~Flec4_r z7vJ}VuR){8H$9sSteD1CS*67Sph@}rZ!j459w*Tp?O&0@TfLn|dOrFUOnL3gS)Sk{q0 zF9c+40&-VtaSEIc>bzu${u zW}C`}lCk)8TB=ciWCPD&zJi=s^eaJ6MV1m`ZRf`$u0T6q^_Kqb&ao?~-9y%!1iZ&A zxdTc}+h+&)Um~h$wk{TmuP(_fPQGpeatGEoneb40mS(ZJ7LjGoscTn_Fx2#SFV$E< z@#1Un#=mk!?*=^9&oqk(z5eYPrw=4!(s?b4p zA5J?@ff4Bo1aSCT5aFMc%oU)k^tBW#zMwzmyPPn0al8E4IAI~&L}vkrV(ya}Y@lUg zmA>%!cB;NiIL7l^Zp#sBOy!t&SzK{d;0@TNgrm2PMtxER4D%>yzKP4Ie{Z8tPmZal4Fe6}(j8|jAX zoci;ui$%w+lm* z_-c8$P}gHr=~p2IyIWULN&glZ&(oLic`-@Sa}pb~OK|8#)mNir&S@$O zI=m=y!4o{vD>33UM0qs^!1y|3fLDH`2w735Dtu=z#TRr|kQ-7UV`@{_uYyI5&`RQ@C?M66TY#Hi7Ieqs{ zsROozFOMw+8d(eKyTat(gaIGJ4uH)D+Neyh9G}TJ&*4^ZCG}x`KCc$;Jp+v?L!9P-l#7MD(+Cc$AS( zHK1C3dJfjT-lQ_0R5~e&W;!GcF%bGpMh;zL=tEks&NUwWPj||KmOS2uoi2k?U;mXI zq44{Y)w;S{DV+X~fVJfdm`sLs3pAn(==@T+=QZ3*+aFVwqZ3~Pl-=O`(7@^P(~#q<9Hy8v0HGBm|Mf`6ari%mF4TLigH`rcirt$% zf|fkH-Q>@`RiwaFw6EZkWXa0Syi~Z2ZRfnBfT}Gke{Z4u(e4AF7Tr&IPTvE~&2DvJ z=8_ORHu5z?^1xO7=t<2BCpe!24lb7<`xLkKb+P{0KgJ9YtUmx4kQ{60H5k@IKC)3hQ8Bqlh`j3Y~WZdY?sD z#6D+FXuOe$eJ$0r>Tat=cpo|@dLJZi0)M`?9!?gq$IHSXsb4J$%gU}~kYsse-uS%I zV$1)b>Y}~_?7I(=jrY6}IDZgz-BT9&R-tY=?CDO3jJd-0tg#gl%?76E(cxurB8Ofo zXR$htDSDP%{0P=mnz`}8@^lg?g_`|>A2cnj4Z+Co<6rfaJ)`n&yckY1yjGTu#*drN z$&H==ZprRffEyrvv5c^v7uz3R~`y7h939*X8XEz@0=`d4q7R zghIepxET9=bPyA*PyFqu_pQdu_LMh_)0jJQI=`QpD;{Uw zq&v{<4!fZq{s4~1@c<0iAE(2r8<&A(NBa#T1dVy;`3ZtIqne#dStP>r5xB2nSms&7 zyXz8nm%J@uhij1 z!>F{q)$hr(M10&I;{fE2My+SU{i3y zLP)FDfn_^%1ZkD7$9@NCS{|pd^vA z&uKiIV~b6v1lwr0^wOTsBHO~M^D>90!Rg=Ao#C9WbenF|?19o9*SvJ@1$f(VUK`PJ zcH!88;Z|&ziU60dn|jW(M|XcR{#i2d1g+zy@gfyt)Q@kYp^+`zJHs+-f(uv56fiqr zfs&S@ctRgDO*ghLMsbZUyKGRUSo=Ws*}3*AODTE&Ns;e-rd>RM_4ez21WV!w zEL$JS8G{wv3i7k+cG&#f$9IJOJjWtc+wTo#M%6Z@Bc{?&%wdrafBXz~?cGk@?+{14 zxkdDJcwU!w=h_DBS-PNbd0UGzHnY|KLG?3 z;8uw`_^F#MQT>Qv?FrlR#Gp!k^uK3_`F9=?X7@aaK3A=tX7!6bgD>;_mFFR#;#nQa z-`}$wN7}Z0=01l!a6X!1-m_Vsw}*pb9{$Q92fD@sj`8Fpa}wfT7yk*#0KkiYK2{na zG(%^wcGv3aAglb|7j&e$?(`xXkpke<6v-jSpj>F{Ty-Y5|h)W~=-Z9BYENQqy62Uor^(VEU$S)ZqQIi&kf! z3<4~0PmHPJk>au`i{FXkog{pv7EJuLkZ=mfiC88Yw}yDrT*N3@=~cN@{w zd(gw`^9oNpz7dr#odVG-tUMo;$HzQ|%Q2tGV0M0vc{8sE<7Kv*YF zqI%PCFt(RtfK+(41q-4abF-GMsYBntQ{!j4{1}zr+JU(ppL6<1aINTnInpH5OC|kE zovg_2kVfyT|B$d_7~>#)l*;aIR_>BSLr&AGS7%tB=Xr+pa4DtI=i62b$TaTAC7R}n z^My+IaNd#z4;+iinP zu4w1&y_6PWllhGVhlME}^Kk=2&j>Q;NZT)mD7OA2^~%85_BC~BFVhAB%(nlX6LIRvD?kg zGsND2#3d;n8KQXMI?UmE2A?D4ni*V_E_E12E^~GBl3rb0%{Nh#X|07;w+y$D%v=Dj z(~2ka<|xwVoI93fFjdavQH;g12w#r`FE-fcO`Vm$wjb+1JO#>#68Vw_$e7e6#1JDc zQ}s25FIH;IChRoLJx(fLWmBImDRtcovfD?m@(Ey>YTdhhl)OBQwv_!4A>;eBMAt62 zc?ZB)lM7k2WaGaD8;pxzTV!G~#vn%*X_9AG{-7Rveft92wZM)nJeO_RDr7 zuhYBU&RpN}d}Q=1Z!Z<U0AvcV)1=8<*U)Q{>oK4hB~l)f`+OLS%u3>7BkFOp`^I_W;?p zSZ~;E8@WPv6o}WO9!EecUFBwLMvr7^_dJhAYJAJY%g8txbJ!^jF0j($LI zZJzf;=e3ZDqLcOvp?XKW9ioY2!3TrWMMn+*=bYwE&+&daCIJZkqa13Mf2b@(BPBe2 zV}Pd6j6c|o7L)uit31`1ukXyw0Jpu2NUn759U|)S(42s!fTIlf=*IElz#q!fp1!3V{xpqLt;vycwbP2G zK_>7MvY_f`2~gTp=9e-MA2y=dk^5w8M1R7cb2bIPq^maVHv{5@x*dMcUvk&z_{iUEn;WHvr19wuQJgK}~h*en}SCU=}n2)XYi z09n2&*F=i;BA#un=`;H!qGWBia8<>{bCzxpU%x7=3+wz#k>9|vvnT+O*V64Bs4v?8 zFvSaD4c_sGQqU9mrB}q%{q0(J{9YPgMdE~;0qR(k#W99KlaV+>dZF}VeLPM<@;UKL zn3DIgdA|__5*i_oUUkAeECpE~p@V&m2zYgsRLGsWgcqa9^+?JsE_g9J_ASb$o~H(X zolQ~tszDl8Cn>)_mGKfh01j2~9T>;xe?7D6uPwg#@d!y*h?Biy-t1S-A5galS?+II zX!l7iH65*qaMC-|6>Ae&P1NW-FCLv3@qDpUI5ur>)*zcOTl!gr#k5L*Ok1`AkTQEa zHX=^G(I;eZ@uhl>Bki!SE=q}Db2{od}a=O?dri`K0R#fAY@5fvQ*Il&L|57Ht8+?8Kb=tDvMen=18_6Ba47z;?8io z)LAKR$gLkekO!EL2)$r}%Z6Xi!nwxpsmdhS9oP82u00w5@dABAn);KcYO}16ib*(^ za0t!@nCVT>@cT{)7t&7OyZ+Ke7t$-QLNS@z;SeG~SY+8p8TpcXix4g^&L^LXOgk^F z-gH-~@>9U|2hG+m4wA1D!^8vx9RTPxWyZ}x8d7%fp;YnELW40Dg4uR$FZ`qt@~i~L zJ}@wB4f4Jr&Ncm6Kz~rGZ%oF2eD|Ch+o%+O>VLd&z4K)gOP*bB^=&Q>JkawCnAMj2LM4D;XH?ybN-QH`$W~LJT>I&l1BP z!`+*i%xON9y#hLWtleK$4^NN*ZH^w&4DmkC=7D?S30E*R^7S|;?KupJ78Yb zh%vGU-cJj^2<-8E$!*+Dwn;hdHA4OCBLz!L4u>{9QCZfmK@XVN?o6Tdji2u~nRX6o z_4`Xn&Nk&!GUGy3rP6M~w8X(<>rd~@AaQmWIERit_eRS7%z1H%c1PCp0gK3PXZT^~ zo#X@6vvNnP`GAII&6%28zU3rp1kyW7;^>&dNDmQCfUfI#0mi))i0V?@HX`Obh& zDpCCLl}16Q#UwH9coBo6a#ZQc*9Ld1KumX?Xe6r!*X_Y1gJo z-elS9OT1d1_(Q=~xFOt({=;RB6$#>1z(B%uq#!TUvib|NrqW;vYsTDKcGuTCI2d7~ zy&pQrv;6{ClS2k+CBv|&0D$6fTl3@!v``37qFOmulQVI8h_EC_`Ry#3l|hNM61H$p zqf{DwLr4gTCFT@}sV6vvptCP0GtJf4#n@rx`2<2ui;Jj$p#XLxqI%*5q zq3Hat8OpP8!1z6^)8_pJ4*geBVc`2WYq#f{@2k2JQ>44e*h>|+`jzad*bO_u&U#?vhMpz#^j{{9I+XEXOr$<1c2hA-mQujG;nFQw!K13r)A!e=(kElw?Fe~%%Jbk{Rv+#?bSChM;dPFG76^u27Wylm+c7c84j z^gE+%q1b(sG{Pg%$Um01D%G{etL=&Ax&%_{R??^p7*$%0pG5DjxNYW3i#WP_im|YN3C5a`S|rdN?{*-5=kPDXWYIc z@V;v7Gu$hekox`IqxxcNezD8*m_(sM2!k5-tj7Y*G+#b>a0)=|CRhCKtvbH7_1&X& z4d)1dAfo-{7^EvJD)S;+B|SJb7^s$uURk+{^Y5oSQ($+WS>YOXe4UsVu)DoJ25Zjm z8QB8qkafl6r$UCv5MAANJCY3N^kyOohHXbpav*%Xp3zLVqau6!n^hJuEijPu60#h9 z-CCj2aXP;5Rjw~19Q(wOe!IUqqJ?4YZNHhnJ$70!7E+5C<_>E@dAp zcVb=8uKu!uEhntdCm*bV}hjNfa)2e^@&CTu8J^ADw=VoOqJOl$x?nUKxQbqf@vcY3|xd|F79!!|Nahe zIvKGiY;j6-Wbn^O*$f1jD-5AP;;gk&`7I^<*gc*$UjY@qUm;k*8DkQVIib74o9JQB zVPUMYjjgH#gxt{Y^Rj((4o z=(qV#8q_q)_RcU9gnA)Fd5j)}`x?DUkKoLIyLkL-fY^WFBgF`dLESJF+XiW86=>ay zva>arK4FftN#NUTbu8#vlAYJ_S?&2XWDv>L!RRE%WmGWfa3gc4MAXEdWW_r+Pta4j zT>qZ2Ri5Z=mlnM33!q}XeuE~62R?ttxUqAh?gL`^=^r@&^TEu4L2`ORe!^fr#_i8J*M}2RN?lPyv?vusQ~f;@${drUQlwoA z*6D#@J@BgV#roJ!wBPGw1S{n8a}V1-yK-3P4RPbbCH{BI9)fu4qyKh{{egoXOzAlP z>&3s2A>bG@T5MD2+)TluE19A=>FyQ*ippxWPvg*F1&J@?a`qQ`Wd$RMx zb}AkUweIf%rF4+KHfD}d=j$7ip1SpJM9+mQ3^gLb3JT;_BTeY88B$`A{@0Pn2Q$71 ztZ?Sd3?9+@hk*CWUNyl|mj=DXP2obrt_7Z662bI ziFtEoAbAwgO%B!YH{PRvXF z+VI~iVo6gWujcYbjVC7WRf=U|)6Xm-l4XCnm0G_dX z5s$a(w16HZanxhPCQVI807QhbM^N}@I`brJrWp0G8vEpC6tT)yj7&YB`6mK+&lgO^ za``IaZa7M%um)#wYji3a@RXw`BA;~2-J@-*e9ntayNY)bd!Rvx zdL@@nJ}L}Te4O(Zn(nT^TklL{nz7NAw>H2-J`NF@&OzRk31xhSLQ1-3rE~JMs!oo*s&m8n~AbQkH&w<#&anM3#O%Lil`Z9h_B%WP>^+axIBPY!LYv zG4~`Q2Rc_0cJ~f6aw88qCEE=6g-Gsi##k%y6K#{P#3=~f?tZf&Abd`%9$85~rIE%I z3iKb*kxp0SNK~IyOJ)h@kVzHz4&d@;}7U{mEQ( z-+!~(hZ6M{^GlLuXECcNeZ7iOL+zx3!;YB~?~oCZ5$<#y&{Gbf7Yh+$h!MTe8uW#= zuTF#rh@QML3=xe)p=Vk5@%eBKRM@X|?Y8^(#erhAMjwp=ukM<5uJnUJp&e5U>vYt4 zaq&$8dFTjI;^RCB^k-GWE^EJ6S8ABd-i6v)vr^#y=nl939)^1GhE`z(PmSes3m|%K zE;6Khs1Y*E?fKZ_!Q*fg!4dy{$z>dn7c8C|@}yg`%}d~35vnD6InNz3vJF{E- z!B6ukkj4WR4VDaYnNpX*jA{uZHcnT$&YDv!gMeC%7s%dd;`BE6-6E%6w1qCGxk|RA zzk=p4N(9NPH*Ym+=YGu1io18;P8vO!HONm_+3yL_@{fmr49G-i%tX*a+ExZld1J7} zkHRp&gsSZF&B3nMd*n#89^HsJNXhs#*FTKRrPR`YY7ex+?(t;QAu~AbZ;S7R2nJD1 z|3s2(=_f~H6uk*O;I}f4CC%!y2T8K53P&WQaf@^87_>VZ&kK+o5}OZYT~M{$#LgvS zRb5tAZ2L6jj?+IZBDLc{hfX^btnBXojgjH;hY?B2jLi6-X&QydFe*w`Q&rKnD@tUB zda(T;gPALhVGF`8f;6~9z zu62RDQ9YnQmlCO^_u5+|`vzxrR@h@7XdfH&0_6CUnXuxKU8|<2HI+fyqzdj2-!O=f z7O|djDVSN6ywlxC!h>8+0qaAV`jPozqYTU_s*h$8TL742}A zavqHv7g!fx;J-Nk_UZMI3qmY?()~fXX!mEmWAmVJa*#4r4}*4oEaJI<+)qN%Lbxdn zuMbFZ4X6*oaSZ|dUM^!+KoZBBDEQ*ce@yTk#);f-i?S7xjqP1=d(FSfgrRs@(SotE z+y&3Qw^X5BV37!@@arZuoddu#a?jiKKP^i08jo|PAdgp;zM^D`6J+uei=t4i-IwfT zXCV%$)PrqMKZsZ{yRg^PW(X~P9Trv4@P~^PE+I6f^jQMz+kOoE%;pL_LrvCK``n70 zUeC5bF+40QDCa&Q!?9J>r|ukwUQLT0Fha5t5_i$hV3?nu-UVzM6L0yy8Lo+Mq1sN+ zf!r<)NA6h+avCHsh!=nQ;rSv4iE#ZIXUw-VJ!c^l$FDZ5;k}p7Mi3`SpTlR8nTOFb z#SQtfvz1sc4g#f8mkYv>8gd5q2*vbFuG^@STyb2Lk;&W483NmwdF7 zX^~AO20OT5{rIcw;qNrvw~2`xiY>&`)o%cbaVM33PA;U$Uk>P9$<M#9xjps#|txp;b+S+?OgT(c81IU#ok*+#no(Uqk%xs;Fb`a;Lu2L zcW*4XTOc90ySoPn4#5Hh3-0b7v~hQ9+~qFz+3$YO_|Cp^zI*S#GtwiYp=B(pR?V7o z)+08%F{FTDY7JisaCnlKQKHVfA>idvI`<=zPz9AS{^KjD-%+^o_d}X2BunM?W>u6W zcN+Pp##Q}c1nWq>Z=}Wcb1=66xvIHq{E)mJUP#@;YLt)s5VTfHb*4_bhybxp#2m)+!N0o6Vb)2<)`e)-LReSoRsH|0q5*l<{ z>)DKs?>f6Znl1zA*w(J4U>|i)fDbxT0Kx)vT>4_P2!~O*YfK{%at&S`(i!EW=&AaL z3eSaYbL;6*gd=XHo@WEro*w~-+wkB@3*$~h7;EnjeurXO-0=mji@8U`Rvftfoc(dw zszX_>a69DsSFzPNmyoj%|99e?(jyn1BHgVin*(TJJWJC5cC&Mmxe(%p-g<-&c3y8x?l%6;w zpwAj%Y@Tcy;ry7j@v0m9UA;|(1m(AAvI0^j^>-V@{s(xgt^&dtop#LeU%Z|ke&q3e z9gmhEb+_oGvUDX_Jv59Q$80HQFTz*piFhMlfyCXxHsL2OJIQu$idiBjajbX+2>nHU zALGtKlhNExcg_gKb1Hr`F?GAnLg*+(a3ov0#LoECa(`;!*FEW;0I7k!5#|45oA)_> zHvBYx*=#-aVhrc#aDbW$)R@iBC%~^%{!TZBzfrmFG2n;TP_t&8D};5o+iqh(QE!bG zb8qO3OrR-H*q6ipr<|Id;(-+)R^+8$mt+p>n@~QAy`DGZGO|!_pLp5fYa%ox#%q8B zTIohvY9e(S?77W8jQ&h*Gh1Zp1upRaMj8LU8CgBUe{K4i*+<~G^PA;6*5tyh3ImAz z_?N9hAr8nAjQl{wa%9_q4%6Nh?SLAlXg2yX1K|?7tk6maqCZ|kyjcwWA9!RehdhGGmM0I06uw<;dLa4oD`52s_k3Vne+>5A_c=y{Da33`f$2mcHY}A z`n|&84DZlUk-GaMcx6>j>+rL^{|midqRS8WkC*=NO&>&JiHv&Gz&Ey|yG|nMD%X=O zpMWaHvl!LUvn8M1t9Pc^bN>5WBf2`q*4f%5Q>C^S0ltC93tMF|j*}nPt$@VO?e^5b zgfSppFvQsW_`&L4?15MLVMDKBdGY>J*9lhq zl(pQ-NUr^yV6y}D)}gwhq&z(z7gAb`{Z;{QW=xq_$cFrZhoLQ4&mVgo!suve1>nWxwOP?@QF`Yi5) z(DA#tp@I(>U$4`yl6lyx6RlK;mk?GoSuQIHsn_8Mtw=|54WpVo04>N$zHFn#3bFoR z2j+;~6|!0Rj9)j!rS_povh|z0+YQP4tGr3T0iYI&`x2`YY=u>(-Xbl4ISPT|rj-UX zkoL%W{f-9CB@#w{>^&~qw&4oC zctL<#n%x6KxVNzX9VXbDTG7tGA~ja1scl|!eb?WAO zk2U4>)(+?NH$B&yR@0j5YKHq;TjjnqfQDCdaFEA$90m{75Jsk+%*uTGr_8KtBOI3= zOMzLJ$dS#7@T2GvORSPMvy&r3eiXc$U1z)@R%j=5+b|G)*RA#Zr@zUo$ z)1JGZ>Z71?8frTcqL#Q{s>*XZpg#nG)F4B7f>O#J{$pRCm(WCT$FfBQ_MT8xdaDhR zFX|gg#*?3X!LWtrUo8Mt;Vr&E>3_J|KwKe9<9F z(322jav$YS&}mm8lilA69Gu|AkUKoN@Ua92yVBb2>Wx3on=xFy>&=j4hdHBh}=VaExKQS zT77IYcaLbndO)5D<)klapc4{oo)!&+N7{{ia&{0M3%7}wa22_uU#ehTZ*Q>)E7{DJ z_f+5mR#p_@qU~Gttk=3NYp=C_^jP*xWNK#sgriG5MUNPrR@HAp)X!e&W$5Bs{tomsO|_h#=co=i z_Q*rNIWH+KjK$$bGXuB~OP^r9^&j7JPnwxpNowXc^PCuC9jh29Tpn#8)MFjCx-dPemJQ$@9iSfwpvnaC}+PI1?4N zVd7P$7b1s~bsckn;|Mox56(&p2e66MwpsAkq&o>S3@ELMkUAgoGUtxORtMIMqbHxk9}wBEe^NPelCohT&ox2#E9 z^0Um!NNz3TDBZs+GGj_Hb^s&R>a3+-rr5tUDNI#D1mQRqUu*VCbEgK&Z*VgNh?XOD z;36!ZqKdqkWjqwq-IjqJ)XS8ux6?gH!d3rc3qYWx0KBSj<@Qi5b0syLh}_v$VJ^yexss&!wYa{sMsFHje@k4Q+Dz2cK|-_sQ})$ zC`XtKN6n(XSgU&acDGxr0+*{TZj)ZkqT<~*v6~gsPNw71=Q;vVQ^Q<`-CvQ=r2ghd z5RH9audCF#>q&`{#Z*0~a0CxZfnU&ALMVHR<(stKKZ)kQWxm*1de6XHg)bT$S;6rr z|ANL1zx9G@PtYK#<=iNGyK2+bUND4$dQ!ZC<{d3av>;q8cZGN~EhI2@T%p8$K^q5$ zVk{^t(&rmSQ=3}RV+7N{uLKlaBs;DW-NuY2x7QKk+$?G$L`{$-{f1)e8LljU?U+)X zLRiPWnK_o`b6~r3?`iA&(W2+}nQ7n~HyaUvAl|>Te_QEVxE}SQJRCS!&*94Sd=&h3 z^;Mw>IL4#AcJ)Hcj$7DOWDN-~TO)23^b%`@!|Adj0ShS!E;kH=Ragv+{v!1?+ zY&j>8%`D#ml)3$F-)%Jv*@KRG&4@Vsq0}So+4+o546TM~t4nvvQi5POru+{Rz^S+U zkBxyeKy{0Z22O-L)+eo;pfJQ1<(v_;bSs3`krt0Kml_TlF|6j)_X4yj4$lReu)cpw zSLAdZKz+;qsmW_(safwwFmY3+s8PBk`K0iP_XT18R-9TcBK0w8BAZzhBH8^S>}eWH{ z%qVWztYvhP0mVYr-cM$I6{JD0h{MT3IFqMt*AiL}x?p&T1UCG=#o~2OIf&iFFIS>9 zwVOQ0-q{m)X|u&iGAd4C?0tTce;#_OyrpX3!=yy)D*r|($a3)~b~_3koaaLuOfy48 zG}87JVh%5J%gd8}?j>tI;h=4cO}%NI8#lzQ5PtmwJQG_ZaQJgbaqNqUOMN{?6of%S zr_z3kb+eU{=kR#59hfjm-yRel-Wy2-X10P|)vM{minj4>r6-UPBSiMgSEu#bABIEM z6-K`D_&V-5XS}8d)7#AIXVq}xhRsJCeOwh%Ptqkz5@918kr)G3#2OV)1C-{n-=wT- zbe%PWbgDiQiio$8x4OU-hs%^t)(kL96Jv^Xp->IgA<5}XG$2JIhB4<;daACB+R5O;I`q%s6FOnwop z4`ytH_>#6={jzCw>1W+rG>aL*TH0JO9g!C*z1~WN(o~XPJV!aS6i7}7j* zh}S4yZrn62MG!7nA7GE2Q!}1=OMI}>&om3S#4HoIxR+i z<~|d`lHzj#FeE>gi-gqhzLDlYg>({_U+A#j_Zm*g4>F(x#IQYQ0bSA~+%S-I1r8PxlV}sO4E&*cK*xu%yCVd1t?3Pv!0D(-{DaLO8(n0O zp3xcu6MWz{p~bWk#EMpJdVjK1csPZ_hT*OE6&N`NP$bs-I@>_ee0Oxm<3MSQiuj`9 z&*Q_Lk%?vTWu3Qf#+ZzFsSWFL*;aD_lUiwY+a7v#%jPaKRNM z-uo?ZJhQIK2ycafLPtOP6+YeyxtP+sNl4{poYOw6gOYjFdOR8 ziPN9}Xj3K)abLWy78$gf6If2D2LtnpSR@_iY}omG@w&mIZtpKRXtkFF`J{Y0;OH6Y zCN3In{X;hu&tcxOR`ELntzMwbOM8l;Skiu(g7pXTCMUp6Mm>>poTNCvjnIkmL>7>X zJfY?^!uj0N#$QX_5hF*b^RR^Cr)YK>Fy@b5>nQ>)vONP7{InzlY)Aquif!lakgy@| zt_~I@Nj!c>)-=^7a9DZt?wQ#<^$?b-NHD+B1T47UZr6#gw?-b3x++U@7!>T+{`WVb!l7+63+jRPj=b!YtU z$@F6+S6(fJm+zU+C6?8d@o>EFsbX`cb*vLiY7_0y*R9C!Ye2JOCr z$=L{kl~hJNe#`V7VY%KOzq#c@pqN_4hOR^B1%!u+?enQaNk~vCKnPk_m2hGZ^8lgZBHVUBEjxyxNekDtqgvJajym#IyJe!M0aEIm~)b^aLK6 zS*OmZGfgwDz-F~?z>Uu;W?OGwyw>J7760m#^neK4=fF-$5@|A_*}*-(eBpaB%M*#I+|2QM}l@I&NQ^{%KeuG3&TEqD1qfz*Un3eZf{ z@SF$Y=*_cAM^ac=RQc*otfz)wT2?)#*S?AEJLXG+Ja!?`*IJNX7)Bsx3rL}YJ8;R; z5p}?}*GX*6fX{`Q5CKn{4)O*uVqXDi-YupeC9BI&J14p=xpk_?Fu}~O=dr66B|7+? z_l)O=`KH(H+#jBg5MVPZo2i!UVW)iDj<=>1A?lr=EuE;Qjnm62DsAZ4RU3jt7$Ob1 zLP~V^X28Pz^&9-?`+VO*bK6MXX5gKmk@bY5w?a1;EFL1n3f3);0ocKFKcS-nj2_US zl+!yFU&!V-oAbsP*}V-BA6V^N8JORyt==1XK08KaQ_0Wo@CosBr=-V4cy6-0SsD$b zttTV~PYiSBySUmRr%prsC?{t#;m^Lo479!MR1tDZ+V9US2sfZ_NqD*O>2`>+LrICpnXDYbJvjeH}M!=URkEv)w?JlkDD6`?w5r(Wg&kDs((eKe|!O)uTO=X`)LjD(Zo}N zNVxI0I;##+k3SU_5Cyf{MZKNf6pwHOos(r$!H86xE zsBXsf_3nEIpleMARj6J*6CO;TV6`nlEN@ddEK0ToCRO@&Q)DF^>Ep zahF65TA!a?q@tvW1s`j1f7(sucXrUg-^Jw}dCLX2W45N7toID7@fhn7Lvbj#ES}3j z019;M2ysaHU|}41H=AYE@~64h(fiKHj86v}{a6Cy&}`OD^`esRUP`?8HgpY~!P@Dz z^oDKw)ioTg^py3V1)1d%5=CTRwInIaIF(gJ&PF~+XIL2@H8*_t-CQh%x2EfgdxSXG z^niANG1kCbOM*h{qbN})WvBQiW+xr>9Mw6Y#2?O;l+V~UQCAz{e_E1iMr2(ASZ>IO z=ROLK=R-;9Th)7-@mT2geBzE-y#bSDurRpPd*5>OhKmYgmHgJ!|IH~&#~ps&4-2Nu zG_KDnxR2iYUY5GO8a=s{#=YQu9>G;Wy?yjm5LKk@I`v5b*>=giQ%wgEuNU8j9*}D3 zdq0$@wv7Dpw2cES!?af8A>}a!0QbH8h_*X7#{C{)j=}%UT*qXLOV4k>9JPF49#G3I zRMJV8#Be#iEeZjbn)dRafjL?$yV-RZI0c^Wz18M+wppSau{Hyzkb`YyDOV4Z$O$Bo z-|jS%-a2~_zS`%6SlTd>WTw*OX+vzvmv&~0T2;|%%SlMCYAvtQ@{8lCCFyl*AKO(# zKI8Na2{H$-Lg~gAMoJ1^BBbAzW*cVlS!>qS4|4*Ok4_&k@lF<#p!m+Z^&v{TTx6@b z)EBm86#->Q&sb-Z1FyYq+(UNYOj#qec_dlB?l&B4-Jd3L_o4`1rz1N#+s+<&wImZF zgqQmM>~q4Ls~0ZwHPNDet|ggGhbp;x^sm!WSq(C_sqPzftKBR$e!q&;(%P*nVL4cA z97Q&^zGDtz13Y#bg*9%sU{5(#56G7Kyhp+NA9s3VUPW11d~8A^ zR{(WvdyjS8m1xJd_?o+lHwu~#$nAR?l=Kxwap$$qzdILqp`xC>9HUmd)hl<9p{_1F zc|>v?2tT%Eo~}-Zv&_}R4&}&j4uf931x>Vg3f@I}0j!MEM`72(@TBkLH(Jm|%cJu* zsV})Nv_BnUS!Paf1>v`~C>S0kvqV60Lh(0Z%c|>!2d@Q^CI~qCPT>;1vmP5X8%G#7 zOJS_P2i=IFV0Q`Nd6#(%M{YM8Z4%;1Twds%3x0YR&~P+OV(8f&kjifcqabj=w**ax zh{pGO_+JaK5ZhwkEQ!Xh*41Audw|*m(9q=Nz5Zr%_>f`Cql-imuw zDDi<2e&|bs`1&57(XlQGFNl##+Xx7+$8grKsan$&gD(T=%X3iYy{}mq6!KB7TaHI= zI0K+#h4OY`(G~^hijQ5DKBQYe34(q%9c3Sei#tID#E*L_?O3tLMQ4?W&mzT?Uqruu zB3-xf;}{skmH0tvnE@j?2~*ZF|FO(=jcn3aXmoJzXOn5)=K(rLjq)M>Tor(C_^bK# zdwvq0^L(|n4>w{IM}ejoo3PN@dOLJbBEHCCIOwACw~$Wb%KV1`a+mKJ%?LC8X&W*S zb8R8HN)+qhhsoFOJfZi)xQkgP`&4aHP3nzng15R$Enc^?_=f#LW3j=Z(;4J202^H6 z=blKhu|`#_PW{th85ol_{WR2R*y1V5!LKb&kaKB%M7Oas43V|aHJ@wluH-l3p5O9g zvu)h88Zj7Il>p_e&+=yLA!ZQ1m~_ly^?e0b;z`4?_>JDGisY| z&I4{shSE9un>{vvIA;TE*JFEBJkr}TB(lBk+F?z7$Q#>990vf31xEKm@0cY+T*3B9 z$`Oxv3j1ak+idS*68^DMw*dGuMIpP>SHtgefNv1+$nB^QTW;@_3q}vd@@<}0SlR}< z{j3}NjNpgzQ-ZGvn5Nw>V@yqD<fPLB-COa^6yG$@Iy4m@WXsXE_1#NL zZ+mnrK@mX|Jn!O^Lmeh+%-jyg~`hY)Ux@ln}b}NJAWI$*VCd08)n7! zCy%c@f9PI2hm^mW9y##i#+qhO^p11XiM(kBuy-%=9Y1frA4ksN>z^ZGqxC*xe^>U8 zYEIba#PG$PMibOACH4NeGb+ZBs6`;mOi15q4?YTf*zOMX#K5A`(gyq?qU=ssf@$?X zP$-->zpPjJ7UG$xQaG6WpVOg7%#Z}dM3`dU_YP~z-U;?@*}%k0J_riC+Ub*LJpFr& zDiC*Gz{T6)1IjWGnZijxZ7E>@msT<=T*~!`Jny$W;qubg#Y{GLR$Qi!e{K&QPVbwkdS# zzYHFnc$EmX&wZp?b zRipLW2sd@OhHSriv6V4`z`Fyss9op7Gd!7&({Cqf>BNIW651=c@LN z65w5y07;=|ncOOe8#=8+R-nYB1U_=U+I{=BwFxYVmI-^z#P8aI3x6O^#z?bBpu$ECBt6JV242ZA0K` zEX$Zv8QJT0y!Z`vA&{QmJN4CPLIFD@6`%pIn-eWC_IU$9+yFAIvWfa?5sKEhyPyqi z=yWwj0_e(I%Ii8SzU7>4y=i)4idMb!snQwGKpn@EkR*>GUQw8*%SxODBNihTyn7V? zO}Rnk`5y)nVdI0`TR3r4xbQ2_*7|MR@7(TAqqF>t3Zz#$kh8DDLnDtP2M1k(rCp^K zb@!)3+4t+Fx@G$)US8O_NI4Jp5-oy``|K0q7^-yYF{X?Ztfm8$xpomQRvjPr7wO;c zPyOb)Kz_4Y+i6|!a&ItR+W5k7vIdZQ6rpP=JX>sV!bxV+r$Qrn1bbZGJcXhQT+jS+ z4*7Go%apA(6{h66gMD{Jf+L$)f>lrnbjYjc_AE3jKVhD2gYmgNhYkU|xS215F{2T? z*j+@m%fBikW@O0pm9kBgJ%t-QHcy!y_<9S zKne2aXgJBKrlbZdH#Qw=;tFJx#tEO!3&_@1*U&Y3ufh9H&4BV*wn{I@G<$QU+lAZ7 zU>WsA)|?EPL=pJMB5S9rx+y+x28~&U^4%6^i+e3N`%@&HlC4pC5|?X(Mx9L|Zl2ok zmo;C6Biux@k>aIJ$kGg>)1jNHuB3L0;i9r;G@JHGoH@(k2j%f(;&XGXHdN0FgLX@A7{JY3U&E^^+*WLBJnqX;5Q}%&+bCZC zgz#kYsx$33+z*AgIa-9Hz8NpFM?fdWnzG>dUApe>|F{od;VJ&)(mlXF&8aTw=6(fk zE~=^g1p3{=S>8jXS_DyjP^PTd#*8)eLlD+nso5c%F7XD0Scvmv1<8Six|Rn}k{OLG zY?riPuPLN(X)S1&2i-~U@UFOGFlP{Rdl;n9wQ3Ta zxrdy&L>XP-;%ZjtW$g*v@|g2t{K*vYUPjg1&!7E%=w<9KM$-AnZ!ulv+n2~09TSFP zhqksE;>xjbS2%Jw$rr8}1?X~V8gC!Ya}?O7xDwqda|?Ye*3nL{xq5iKy|X@1JgL~z zD!xJej3IUI`6(uB8|Vh6A@50aBX5e0SlET-*bSYu2WR%xeE3`nlWY(XQ2q_gyfcxJ z*PUqFoA)Ahs=v9=**UreO3fAVn*(IIN^sm)*Yz6B zpPDcDcTPXLpO_rx-ms_l6}xjmezeDBZ&09z4>C1=lU@UMNWAvFw+cCmxJ`*1b1FI5XHm-#y+sstx=wmxn&ZtNK$;I`*bw zunWC6y68&&Euj+RY;!PYixX6TZA9;-wY2-EyfJ2A=T`{mtJeDpvr)X-x)`?j0b@J4 ztH7{u0ft*vaT6j*5~szWVUf3piV)^47q3;hSn8|U7KH^uN({rrTY00tKV#GU+SOmP zd(O;@(24jM(1--c=W0UJjLVmMhF(I9stODc-qw;i`T-v*?ofb zuv?lJ*YIcKz?<;kQ8v^q-X%4T87m1Ihi%XmK|EOU!^=rvw+0&=<>#Uk1<6_HmeQ)`erM+Kl8cQLw&4=^0WmSw-2j<&e}PRKaDskU)y%Y|4q)W zxKV7$SCUc)_MeZH=r(7`)w_^EFrT}X_|6Vi>ON=n!30LRtQMpp7JPg!{X?=h^8G>adc-?+0T}`v{RwS`Pp^sY zi={FJq>~gfo#&|NA`ar!WisyWpln7v$79nSUQO=vxO*5R1I+TNwUHVO4g&}%y_IHQ zHRO0OM2S_xRK5u~zki?WT$GgOGY$jyX9%z$`o!Y0L*q#Iy@QZ^ z1{Xcu3!e>Y*x4&a19Xt9c0P>D=9ojsTK?3KTaogCJZDYw0(&quc|W7?mQv8 z{-<4cO8{q1mOy3OVp#;kq2Z&6Kdf6*Oy3pJEAa-WeQY)hL<$80LFG4GHeoc)4x!2b zZ!U2SsZ|qG*XjO|%FuI}tPfK6S-Z&6mNvs@EUZ+w3CVh{6;$2=z4dar%GxQI=ki=y z$bS8f+vtaxX`a1q7TTzQ+mM)SEc`e=8=RrEa;0ZKD8=|g*k6`SHBHkL5 z3ewi=cU>B^hNVEbZkZ2MZJHj{Kz3wSe9ynx{q8E|frF+3up;A!4ZYD-0PYYRWC@j? zs8k#!fqZ{~=0;la*JpFilF^|9<8^_VFS>uB9ctZ3e>1XOPVBfDuhbg43*^rTajkrT zKkQYZAIP&XZ6(!FLX$Muoiy=SO4gFtLa`=%f@>drX#iE3DVvX8>?yu

;hl6^4SQHC>@nciIcj&ZS;$LXmEWu_ya8h^CDqi zQmcMR&g{rIEvVd_A&-R3O9qIO1**cKSoLlK36Z_d-Rp%i*+BKVhOF-i9}hTur zKNaml#8`E$iAyZf<3#`mn#H(G-i%)+^PBi?Zr}P>xA!58)G|73(d&H(CI;*2TR9Ng zaZh0Pg8h4+?z2%4_F!&;wIw%^X>g3mD6wwWB@swlB&MvTsaq+DpyQ|P_tKBkY1QNj zUS14nfV--;E5!%?irsy%w#H{77Q3cu^RjhP5RLB51y}Aw{v@87I$42nnKp)qub-se z?&nToH<|WuB3^x^{ANV_WRd!lCefyg>Bel){7P7RfMKUftN}QIN0UkMTU_!<=3!0R zBBpV>#<4Y1@oAkJzW-ppWwFdzQrdggk%W%noV_s{Vek*Z$l#sxH7syTffR4*#Tt04YB|YQi&XT5P7{qn1 z_UDhEEkRdrGs;R6Gs=(Ev%5seje}5cEB4j2#e-oDymp5_ST8LM6h$u@XIs3gLHWr{ zKi3L>_KC~wlMpK+9{;`6H|MG!B6f;3<&NszqxfB zSSH~oq)L@O)A{R5c`_%^C~|wDYXxH^f(yUTZz>T!Q1E5d7R#LNBvRuGe6Pg4DSBFK z@nh0WycJr*-213m-0>f6+O<~lgW8mQW+I4c!TR3(g-wln#-Mq=)6{HSCizj6pWm>X zXi-VH!KR${Jz_BJ@8De4{nZ5m#8J#b0d1}#&wEjR{R#*1_#c!6Z89A3m8;2$^l4w0 z>Xda{O`YhQ>t7D;V`Q+FjIHy;Px8pnAD%RkC%NWrwCutUhx<|8$~C)Psf$-V)if-a zKT#_rW9D@QLJ`J=XlE>r=U?$|rb>|j#?@DJ?VcOKb|C!*A+74BHd=RuZLFJ?{Rscl zfa5nf0{OD&B9{UTIO5tLtaF$H^` zEkKe;W$3l+9XtJi&)3>@N@apaY$1P70MPQuc|@^Y@t9onqz z5QpqpK%wWq+l;Xc;v1~TlPkJAmVhb4If3nQC{mMjV~WO~Z9mdfM9>#culAbx?g6)W%(SOW1z4T>065G+Mu=?S!R>kN(fOah}(Mj_G zDIVUEq{*>k{wKca)+Al4>#{^dTkcT~`Y#7zw(@Zj7vhH8mzLun`ei>1n2=P~e7=ikFRQWWrP{2Y(o?fP zK+AhSVNcrg0UZyN^R4b;!glP#51b-v`0h_lXG!~PuH@*GuL+FW>N<(rRzt(a!W1uE zwrtlWF4o+>u&(C=fHPZgLMtQAz>trvIpMD1-lNe~O8&&bBOtb2a+8-AzRfd2-A&KO zmou8izI?i8(j(d2V|}ABJI?Z2rR}=EYPYhx5$a_?rG9s{=pJo8^CQYau=5@)_TGsL zb6?jcB!fJ^CnCL|Dd46)d7h86XW%%dcza`*Z%nd{3v%Q+6cLAa1sr}D(h6EGk~gz; z6P(QtqC>4KO&%7=_)oql^zxuh6EH)Z5;|SDci#E51bc>G+ALi6uf6|VH$u$(#3S|= z(}6BJ3Z)?PI{q%|3z}`lGmt~%AcDKS$q6lTK0_EPYd3&r&F*? z)Q5a0EyiG=%^;J3O19^o--EaQYa5?Y#e!<90p-?GeA5H5CD5w}r|<-Ii~nSa({c%% zUO^w8e6nzfeF!p)I`lapyhh@beW?MqR3zBf(15(-F#6i{4tCFUk=i1R)ebC4*x1gQ z=h^sOtsK}lhuR^9Dx!4Tk&#LCqKiI~M_{6Pmm>rO&t)Z{Gu}f}%P?r;MWw_+K>ZO` zEDQSIdq5jC43L$=_3Zq+tW*o`w+|djDMm^_wrbQnbzUuuD0P92moV6M`2ZWx$J%#E zB_E8UAk{{jru0T->2f#dDEF97~zUL zzhaaAu$4i+6p;qy1v;NF{CfQzN;lUCAOcuX#fB(IVVW$Si)!!to5Vi5ZroGn{-dJT zUGA^4GUbw4WyCLZewASrNm;j^WtcB#X&2KdK@MPflrUj4+MHKru9m|yO%|IrzJ+hv zZ$#1NzTJ0PvE5lQoRaKI1X=6&Hfgw~??Xtt9K~wdcQ)X5y?=fpe79wdv2hn=7toHa zw-hBa%5hz4pz}@h(j5y)xCN>x)mBHjQ_CG|H$MUQAb)Uk!{6h4(o3QcvVIDRJCNNT zNMKvFwvU1G1{g&5w;YcOJ}^{B85*4@cO1B1Z`!r=LLP2VKy`|)S+YnuFMpE3m)-ln z)j4(}snQNMP0hNELKC^wJCjB^`GelWi=K7*)lSE@^woJP8i_zLDz*+q??|Gq)8{Y& zlrCjug;3t=_V-Ul`e<2KnXzVWlH+xes(uqNI6D!o#HLfa?HT$Bdj~7CYisgMIqQDxB|uPks$TI zm*am;&;Ie7aT*vG8T0v;@Un6CFBdE9?0B|1 zd6}sh9~LRhKOVmE6ft<)FMcejY@t!bh)`9)LQNE-Vngu+d! z;4ERamFtx4;Z=Bvc5M;$`9LJ}uC-3&c(YYj+0GOXg~@KjI&n2eQ+ab+!TQ114zHV1A85yxb4sn-w?R2|70{; z`GL7Nh61$WzB8ok_q&rXU!9fL94G&4xJKRs$uMuC7vuMY|B?*HT+U)a}|^UX%XbCGMu zu@q|;5NGYpWFFVzy1OIZl64JUk7eVrRrbH;3I3X1h*EkeiJZc_z5rMJ0BRq?Z+Zh$MtyL-3e3==mw) zULfV7`f}Ujhry#Hh5=zUY~H$6b+SZ7Wr3{L3wGIAu!vh zeKY;%JMzEvJO&xK(G!vXxXS)LHUHZa^7jXQlE&{#m2_wKD$qe$0gh z_VGMehox_SkIcWncmE&W;{WkB(oH1AET+xmv#9?MhV(y;f1!{MvSZO3L+l?YM3=QT$c;{=Xa5f6j#v9mWq4T{@v{#(xEo{}0C22kw7v-REigpIi4i z!u-#z`y65ZC+a>2mjBDByOP?b@BPI1c)uQ9;E)WEw0L^4pN9@3zRmmbjKuc#e7E2$ zQ~d^3ER$|S!5N?Me|uZpMh5nhboy4DLFxbUSsOj<=i~Qs^OIAWR~G6ZJb-(M?U+IR zkIP2%wFDjFc;2E#3>fvTn29Hkzt0&tgZsaW#rqi1lYeOe{Fiv0Mi1=6&ZYOt4AlSl z9-&`Y&xgQW3W5*C12#Z2CFFc}BL9o4-@^R^x&RhXfGo0vqfF@19D$t5*4Z=uwZTZ~ z!mekglH-9iF;zp@i}1o1>I)U|;e)8h`F!K3y|GEW?+fXu<3)hXF>`D1K&@@P*Bb{= zg|D7BRr(?HXn(}-X*-WLc9krwH2T5i4_o%vWXb>X*WITg-2=XdYZD5B>d{Fced1V7 zYvO&|r>oYdP)_Go#z(+XICLn{4DT5%;26nExgz$0xSi8-jteHU&4Tn9BpY6 zYh$r`eRs1s^jXI6D4t<$p+AngJ1oJX8{dwh!E98|m#=InLs!S$(om`4oB}u!J_-pL z^`C+3W8)yvd;gF9QOX@o;Njq@3nciIjqC(~xWWJ$67wPMxA)}#%l_&60lbn1B*pey z5!WYO3go?0>aHDkwGmH?&b?i}qRX_VAw^{k${QmIq8klVlE2WYqDchFSj}4GOa|h| zCMrp>#t&wl72ok+`lsQH(w%OM(4O}9U&JH#ce7#Q31{5QTnUE6Q7d#0lNcpLWiPe83*7H*Nz0mrkxWGy(GV)G66gU~3RMC+Lqdcxm z6LQ;3fWYH%LF?9Q`oj6hVWQ!991fV4-0pO7-OqXwz8Fpzk0*^O=Xj|Ve3bP7%?s5Y zUmm4fCAwt%l@yWUA|)X^db&BQh$z#5$FiM6Bi=Me({{SRMFa}mA7k4duaGGLy<0m5 z2Umhw*66c{w%$w+s+3yuvWy1cP%s8J@tXb(I5`FD{d4%tNb%gB=I12T}Q75Ju_t9@} z*tyC;adumu9?FzE#5@Ck4_-j-5n`X;9^_p?zmul0S4-eAB9&yrw3(dPYCg8HZEIuf`%W7=a0 zF%C4q{)EbIz*V-^$LtO;d+yE>4c_G2n3BP)vsv}C8Y3DFjtx#`$pAcoy>Rlu=~!Na z*=HwrE&C3kRxG3T8-30h-+F)H7a+KsHda2h!Ay+;I<~bml-|+BnoZT(&-m)=J80|r zcM6M|Vmkp|$psf4k*3?i^<-@t#2+JGXNSbqcz%~>Td7vZ_uwSg-3R8mh=)7$u=|^{ zJqAzfPIEz(UtTGe>Js&Mj+Uz;QKR8JS9efpiMrCdHRM5pwrIf&jNT~EvT+@|{_bC% zHbX)g_p;NC)+P@VSyHhU;z6h*LH);s2ZA<=)x3$a@VT%zXZ_C2F?H8#;SP5C^J07X zWrWP9t_m-Z?bCS#OSnD&_?N1$V_imm4NuPqg6mf|i~7voLCWT|i!uJ)+GnF1vW;$IIPKdh0XXCua#;b3LNz&+mXgZB9Y zD=YwWZtSf!)23vbEnBQtyY>$^+nLYMk}qHFLE1f5-R_5JjEzAAT>iMbr8DnXmz>$o`_bMm>h}v&67S>1hW*joE&!+Vlx*b#-81UP z7}w3j^&(jK)6jQz?=s)6=4X22EfaD7vhrMXgt&3Y-0Oc1SZRbt4cyc;?>RsFz`x7f z#D?Fj1Qzi1LJa<^r0`AxTxcG|ry)~5DziC=xu;m~XsW`Ix*mL19@gMF|B8L<@>`Vc zh%RjCWXX>+)+B79#%kwfFK)>M;pU=1WIPOl-uzF9#$fnmw;|`;(U|tLdxG0#{XwsL z81BrIdF%X1=W?G9cyCNfNNIY-whH{bqW!+lGJ29bE-->JsQ(U0WpE?3ferq4b^yc6 zIlOl1Msef&fDM0Rb>v-IS?f)yMuVOIx)7K4G`-mRExY)t2(1Oo1E5EY1#P;Doq3-L zFDR7nB;V}_>A?s42=xUNo^=7QzP(s*&ExcwxUirxEiDKq%Ro#u%Vy|s$sHRVj`45y zx2+r?ZB~pVnF7%*0TA7;g}}k?(9Cbe4@sCYKkd3J)?(MXjgUnT6Ht0`dfl}@7HJ+L zC1kpi9Jx~%(1{EuvuiHc4azTJvEm^Szzwkr;LnIQI!RD4@uCeK=R`kA*t6 zomOMGk#!arvz7gRuzL{HN(Ha-4K=o1YIAF4-;O1&Ad_LU5b*a!)lp zJHYaX9QWr_)G08x>3H#H(OIV{yhI(l&xqx~)8~ z6j#zmso9aN;cA5Yp9;?2GH-%@>)Z39&3z)(pDZf@S>d}ZE45;=(BW1+$VJ|AJIoMF zO@FBY`+dJ|CZ^TYlf=y1;Ix{F$#sl{=((#n>`u=&)L0!Vs|&NaO!m~l!(2E_1mUiY z%Tny`3)2$t8+Ls3eGKFmiXm9uIgJ+Fl9igbeyCbb?4?`@1bP)sibiQJaK}XEi#3(+ z@1w5K1^y4F-h!>IXj>aCPJ!ZD99rDn-6`%+G&lu{ySo>6_u_8Bt;OBl-Ce)cbI(5e z{($637G%ybUe)~e8LC4fBd(_<+vhE)S*;RucRJn6PU|`Td$z=udOEi~NF(iJ$`>+H zuwQv!Zz zzvnt80fdiRRRc#A<8nA9JW9Dx732i|U!jNoV(RNNPSYu>S2i91zmTCEtn2XURYsmW z>Y?|g3HB|N1H!|~fv-7WL7z7xW`{YxL7m)@14;eVF3(U0%$8 zw)ICL>g-oQUOaa#g-kt@APH{BAD!-tAS>V9>Ix1%jfwMenWkrKj4k0li_>G=|sX!hyDVg za!LO!sCA|!`{D~!kSVL<+0=9z9SaWr2-nL0osYmAYayL`2H=Ph#jSVBLI^U$5yMF% zvbtR0XKv{(RnO~MgTq@=m3;3W9=39t^vzMub!-eu1&v}byl#rc^wL{PxguOd5#x`= zq6Er~7Ksp71Sd@r+v!T#z??F9D;v^-I-^BMeQYeYryX> z&d$nYm80%g89j|)>_7)pp|L(XLK|EER(s>9@I{KR1f0w|I z6>wF+v34|9O3mY9S>^-VAkJ^TUgObsj*2EsloQRE!nvvzD;UZ5Q$aH{o7E*ZMF3RU z4nIX+z!}skwtioN56i{uv_!}3vPP!By?}M({cFgP-HJW((Srm8uG=0!c3|Hz)rbsN z!xcnu(mN{dz~Q@Xu$-3GVwwjI89iu*fJQv?aTfrC{K$X0@F*k33?B0Xc>N;N*LvC+ zZtB5hm}r1S6FOdK3E2wuYI27vy9cVaEoL|0#_!N~hb1dx780?4WviGk7qytLlw?hR z9dz(MDh9#w;UPd!O?1#;F`;QUnA5cv7L*H5D-w}OP^gwfK!haoVYu$ja*8#bd8vBd z)Dn^0{Tjbhb8`ozW*A>ODz@ zbseYlQJYn5%N5s$Wg!AT=H?$jOR=4;pw-?NyX6Yb!Kh@Zz!~Kde0HN>R7zX9V&Md= zqYhI!(2*Sd2q|WOkk>Q8%%18qoAuh962#~T%6ejJVOzOVSY<_HIig3FvyH*@w3WCqd z$?Qh>3b|*mD1umZ`;00UOq<{HW!&t>SDV6Q89Jm09?w!Vn_U}x2YCbkfyTK|?x7KJ zf35lWCfgsTXt!`$QVuY;sAq&za;j9{rm_yNc1OP+%~p~H;Z~x1+z}{->vq0hh79qz zRA%J4+&jxReRO1?%M#Xtc8Ay58e4@6?HtcQQ%q^AIv{K;Gea@tZ0+j#H(IrO9?f&#wI@r@$mkK9i%wogO>aD@X7SykJStOJcpOSM+D#ihQjYC`5sNOX zattpT!)m){P^uQvn?D9`$Z!1HV5^aJtAzv_;Io-Q68C?=B9IKwak9A#6*J?2SXwh_ zy&VCgC1=axKd7{yF_{6vLqTH*Po&o#qbA+msUV5vd^yb-up}9~Tbe%GQvCXk;ABzg zEn?njR`q3^0YFF}(;}bP&BjD72hwf1*Z8tT2r-Rva0C9;5QMF@w}yM1wa6AIB08{q;qoPI!qQKLVIT@Q&uP?SO1+9GHV|-9E+BQLTVG&1D+fuvsl*vBTIcqP)}m# zZ@dnT@s7%^>R^LyK*#yri$4Jh0hq2P37+|rqj?WygiigUO3$%0FW=DC?s{6>9URiL~S-DNNqM0DT|v$JY9$>>AF`4H;cPBQ`5kl zuJ%N6erF_dD`;LeIR?)^m13myaJTHPxOSSkho{@L3e#j0#}hpi=>S3xUfZ?ip2=;! z36AZ^jOUQ*Y2c`(vuX8o$G1hMi@al{pHXN7q6FJ!8gz(D;ctT_FgA0MDJRcE;N%ET ztP#d~e|7Z)$*N(#tN~$cVd%d_*QIDVdg`RJ1y;plt*Wq!)NUs42eOrkOk@8A3XDwg{%geQ#00^C=&Isl_-KQnnKc&aISK_V7MJq18C!<41M2RBIui2LvwoW9ma1#Jh-85H!OXqvqJDu)Kj~d9G%8%m;9X{}cEhv0#!iofF+%dp^$2=Lz>FsiQGT{`9Hw z=oiN^L4P(8#LxNwz(P)>>~Q?Kz-HyC$Gk+ADLNUrRAV$Z3BaTW9vF1S!?^_&LP|0 z#63bSJJu1?{(g`~rIo#e+dCqU>8C3sp3_dX+)A5Q)47+;<0_kL{_*0+jIw2>BlTZy zcq5_>=ChM5e_-=(fkZNNx9dG@pBL&~G8Zsi`?u)oi@TG{gc9|NI46QVc})iz03k^3 z0*7R|h~nkay-S5{SqeNhF55(NzZ=*NPRi%MwjSg~6#Te;r>;r|d>qO#dNPf@y>YpO z$e`$z{V#Dl3NX=2q^r z_V)i>moIImPoKkTT6cHef~Fk*Gv>4YmS4_Qkv0q1ThQ?&zanqyXG7%EnQ$4q01a5- zDpN-=bP^4S#GynRB(wRWpIUg=2nwO3Ce{dblI-hQhd zn$NY0Q`C9$Y!Qzs*7g|tEaOM3ZmWFRjR!t8eEc1?wL8D2TujXP99nYWO6`H^1a@D= zuJM{bw(OJ**~|Nx`x1TW3ea36w;#VGi|8H+YAJsNs5*7;k4gWzJyt%Z^n{gGDDLaY z=#fI4Ls#Q20Y2!&t_T>#bME4(6yOM4UGK)^5RoR?af-t9o`jUS#5^MM0RJxZ-TcyZ zJv}ZM@q6}2OWob2vxZ#8qARRx4yP%?EQ^r9iJBYhC`Yv$O?Rc0FRFJyFnu1_Z87Lpm-T0}FVB-^%kLwEa&d(WCK|H2O5Lh(BK~Z(eMJGy zZUr+cpT*;c6>gROQDxx)B*PuQmlN!x?4uQV)iQ0R&ppG&YhzA=2hV3|c91wDkNK`c z+NO6Q$i!%~zbUoWLxk3^Os)&ATEEVX6MJ(pWR+-6x6UVxmWen1(5e8zn+liU>TRR)IQ<|8rgRhCd0ye=$n~A4 ziTpy^gOeHTp2DSJc=^8Ps2+2{X_0?3*5;zi>B^5;X3a`Qok|3Goo?w5BdRHNKD^OV z=MZYYXB(z?8}JnEJvVY$)H9-vlW7Z`jssWlxGlk&EtZ))vz69}lO>yre50=J>$a~m zhs|I^MW{7pkwwpSAJ%yC_!ej zVjUUml*sJ<>F~-KiRv@WUav|vCQnakE4oCWWL#C;=+ov;_=?J5``v=tR(KN0K^5No ze!g4}lN}Bc#HCi2eahJhzJ{@@VdKbN=~i8sybot@0^MN&!KhT)fQuqtYZ=(iBh<>` z2cU%a#LAHfo&Oz!L_POhv8awCX@B@nElL#4D6h`BkhPoq$A-Z#L&td@F&zjLdq`&A zvPl@4H~it7m-UvYpKb`v`@3Jv>;tR!R7c#<>I+3f_{uQTPsexfkQ6N?v`}+)R$Ek- zLrdJ1MR8cc=9r z$eG5|Dw@JZ8LXjDBk^;`7`iH>GI`3Uxg z(fQ|Tr@WA3y;CUVeWF@CA(%X^02XPaUFxs6uqi58p#I1lyBkg`CcntAKjtJC zSXKAcsdG;#5vi0-%Zvp+{~(i!Je$5RbFsdpUH}u2dxtKO>HOEp1+sTtk)b-X&qTtWH^9NkW}34@uDG*1#=H(#HTOD;tW7sv0GT&7HV zSdGV%MwQ`vnvbr>J5W1cp2~*Gs&9V9lMl{T#vsH^xo6Gw&3YXo zagYdnCnNFUV)79FFa`nD?z3dElJ0lmSl?j2f{7pa>vy$*rT4sp_jf}0HN<21L=n16J6Cc7 z`lx&Oj6%dSbX7l}^A-=;3HtTxk1hJSH|6e%LMaQDTD|7&;0T;vz3E6snf#{96cJJY ze9UN8olw^?eh+|1=JSE0@CCKp0(x%u2VxXOzASJ;@gc~kaLHxbqdOy#qj>f*QRcR9 z3QHpm8F`ERx?dgl0{6{c)4C4MmusJV4GXW+)xMuQRRJ2Q#M0+R^QX4bUDjWvPZ{an zZM{ejS8F8MIt8mkKlPW8blbkNVbSAr{-z{Jutcd|TdmiMyFddUY`!*y++e(O=F&mCd~VflM-3KL}uVG2Xw~~|?j8&G&?R$8Ro;$Y!ms^IqA3>;*>s9f`M!4gH2vnQ{4Lp4GpFVF8iu$6< zI4`$q7e(UDK7~fd(DOYVTnPR}vu1`&xXA7Lfuc93f^NZj<24Z?;IJo%*2!3D7`^?k zvj8+!u2uWzG13Y&hEq8AoJGJlN%XJP+cK+6$nOP`D5<@}%RYRxzikz8TT77D~A~INK`}#s*svW5?oLFUw zmp?V1!FO_KRV1m%IcK2Vq{o`rXFZa0&D!+PDAJ8`PPhkzCrW*GNwK@}2FOU^{T9bm z^i>|}nZsL{avULS%EIUGVV>*E$*|*QJoP_jyVEGO+uUpZkUUG83K8?GXD>v0Fr2|< zqI~3GWCh^ZLnXHk5l+h;0|*qSJ710*<5GmVm#*}x&YhNX&^Ya!9e}|U)#7(pL}X`w zwg20|DVW>D7M}Zw&9LHwL&u!~P1#pVuHLL-Hv-3K!Grrhbg~n#IZk{Buc`k>oBBeZ z{97FeDK3~Mv-owe%SHsH{dgG>oB+))mZ;=c`mO}v1YV! z8k6|Y_yLF^hbT;>z+`^HZ-wOm*w`znfCg76g3<$DN>Gw0<*2tnB5tR) z=9R_5$a}`936=rh%1`y7k|i)a{wmQvtSM=8-ecOnoDng?7WX!pd2~j{T)n|DXjXGJGa*Vkj6GUX(1sIE$DDtq{oRz}eVdUD z!Pujp`w5Ljt8D;tN5x;Ff?0@oSHQ#VTrSFkywt-Cq708pZ#+<$!%p&jx;dl3G3mMg z5em~iq!x!MS0?Qj5AX-mwV}a~UA62Ko~QoUug`x!UJqtcjsP|DmirNl;aD874apC-c`MWYjF%$Qabi zOH!Bw>@!ZV@%()cK%x`NL?rOAjF>Tr^jOT^jf03RdJ}HKsOW2q^%oriF&!3wAt!+n z$pNXV3T`#6XGAg1_d_*u^L^mH1jR=Xu9xY}^I$aI5mg{;E;yBSUrX;7@J~UeE4U~a zQ@p`yF!8g-Vp=^B)BiD~FeIZ!`7fjhyy;I2=a7j7KoQXgw4qn@tFY?cS|-9g**|!l zk^+EMAbzV93Ws(HjDPt*NCa0jNK5c^7t#F(4ckMF5mCLj$boZ$s|+%{Q7 zm$7?s%^-Wsq_=rly*!AJ)kfw-GzDo}mFl^R?CH+>IDZXoCTh6q&kwhC;g)YfiJAyb z1|`RYNY7o>kt$4yaNrTnl*?jyB3gd+UKcr;L~i0Rrfm;v#@=2G$dh%3#je=R ztBPFbjRe|)GTr6W^!@=+<`Wyz!}$gP#%?Z1?334OncQvpI0ci`Q_sK##uh<^>OLgw zajT2!cj>pW=85EUmQip+rIRdCEd?Jex3w+ZUo-xBKHC@2+gj71v(Wo^{aKOY>NCm0 zYXhc`Bo$!pQ2sX9!EcU2!}UIw&P$ds;Il> zXsh7xNDm~5f`!8G*tzYMi~oM#S}##PV!roIn%ze=clOVoVv~q2Yc| zVP6h}*Q{-R5EJvd$H@Z9@6(?urpw?*@kyTzrbJ|s-RnL1O(R2 z5}qh@CNwGSp)|j*?_pAw&=9VgFgXuUNMpuo`R*o@`5tCo&nY@>W{sLziI;L!y2Uj^ zC|(Tpi1OVpnWVfBL85`5@bwi>k?suZAqQwP{4Fkk)ViLmv2$CaBF;~SIpyj43%~c4 zKzPZMAfXYAUY!ONCjP6IQAysyIv-oJ(TsvfEAIaO4C$~qX#(c;jFOPn9FTf(?IVBj z^LMExK*z9q>hb2^ujIu*#lw+&CHHr6AK}W2Gb+i=@Pk{0_xQ~X`fWxeM!gM8W-@ak zFj1seMY?nOi7f|nAa`5n4N^y~I~b0X3hmhdR@h zS)6e-i4UiC{seHD`3O(^2+GbLOF2#}S;R5_zx|r(AHT7GW1xq1lrhDVsZ-+~zi@kG zoxxo8`i_`z`{Op#E-_LXYp_JH@BkOhR{)Pi3$B3<wr2`>#6CPsf5|1xXuHqi70Y*@y){{17IWRA@YZ}_NRahM5qSDG zlGdcETcOkdrgERRo)WpUvyi?{Q1%8t{XU7#(5;Q&X}2CMGdc~%nSIQ2S!eh>Uxfy2 z%UO6_+S)j;;>N$?V?mO9`9mM7461Qc6%cUy(?))dTnS!+8iYr9?Ldr;E2yjgAL32*sdbUQCsI&k5+@7j{dpkYCIN~MP zBi3w-dyCNn;6y05H@G&~qx@e@zx*$=@{o)w1>Ae)>oaVP8-Y`0BC9x4vdrbk1Bf+r zr?7;KU6vH!+mX~ZCR1jT6c*!)Iwkc@5XIHc$(wSZ!40dwlrd1iL&IXC+orll=8FrH zDIQ?CFS|h8x+7-#hQRkFN}qHD(GRuwLoXg~NGgQCD}ci}U=pxy3;#0ez-$c0F=Fjg zE(ypZ8W8;_$&m4{nZ79<7uO0yF7r;?MX*}064Cwl;mtA&;v#iPr%qE>=%SXli?RN( z+zJtL%D;SS>P>BE`dX=>7PEWHL^Am^r#G~4H5a~_MN5~dmy)>Op3r>e zwBFXrmEVUkB*RU0D-gR($y#*sY_hhbn&D3Dj}gh_4i5ZTAu73fjq4x5gkWImGHR zsO3&-6|*q6Yn;-$5)~X>$5@&{yvJ3BFZ^R7x&5+Iz;<5-38p3KON%%KXy1kQXF@F7 z)wHie%fURMm*WcQn@Lexw(Xx2S*{WCU%wqbS&T{NRedtChK2_VhpOYN2SE6S#TS=Z z0rxzv&Odt9vWY3X&2$u27OmZ(xN+!b+ECveir&glQd!tNK3JLB-TrwE;S3A+gxRv1~cZyta!XVCg7ZV46-BL%@gapO_fU1754 z7aHf|ewXwG6CDt|FlU@GbaKBEvFse$F^+VVF!C0~;g**?4gDTD-Szz<U^T0Yxe3IBuV=mRKTJhQ$8C%Wj_vC5MdvJV6K;s)h?%jt7gq- z>4tlb;Q6IxIsuKgqK~+bbs9+1BLQOG@@xv%39mbBp0%|U^ojW`LtUF6pq`kF@RLMz z#fshu0+~&nhUQN*9@_?w9a^Y!gC_S8p1e2*`EAB6vs^r|S>?%|T`9cwYoIp*+D+b+5K+uVA z(u0Zcze4P0G%j1LBa)Qa>(tGyb5=9Vbm4JljKx~L&4Ir>DE$q7y;&HF<)T!-1Y-`? zS`wXBkE4md)^?Lq$Uyj?tIdf%-~YmpiG?(O%F=a5j!VjWQx1tA?AO0=d+$|9WJ#A_ zud&9k^NJODnwaNM%4!ZH#_mACBEK5bSi_{9|Dt6XG7s@mY1-BD4_mgJ0%hx0LF;?f zX?)Az86N`j*(!E>v}{;CtU4X;A=C*2$qL?H9Rp7m>%y_+j;I)2o>n^DBE)}cR&$fI ze<17H(h)r*+=8V>byC(g_znaunTQk5XHu|}vNhYjLws-S0peXWA+u@%xf~%KCNZH_ zi+P$bT-LpcFoJiqURxm@<`8$S2)GdD8^({aEEQM(+cS(9CTYmt|-Ax4@YgE!@Z;F<@Buq1p6p=Z{@Ou|3>rx)Jz(>Mj%Q z-v0yoP{0O2bz0uGsuSaiK%jCAr(Rp`LJ-KH7sW02?Msxt)wxYG4Inxj7IRdjQ`24n zfvq(U5Ah1*PetC?C!_WQOPoQ88+Q3h`K?p);I~> zWG(>ELT|zfzv6Trw;l%;hVTDf2c?O?lGxf}3;^8mO zgu@N$5u%>o*>|43Tz6%PIKU$c(z-yZMhA*=$3^g9^ctA6*n3;@6kPx;eCo63RK^EP z^^p%jqy6LKmjyq!U20arF)cCfobD%DjJ}tA2QL(#xYVk&^rN&cy(_+V2)WH%19>t* zXAsII2-vNozMfg-x}sVXF7BKo&GOIQ*vpwyAx>lCBHVltl?mG}(5~J(U$8`Oz6Ua( zEJeJ%x<}~PbSP!pufRUa5wO1Of7#1{MUlQ*`Yc;2whvKA4&OqOLs+F>)oA%1KsA#Y zd%X%UYHE-`Qr2RvTSNY2W#eg^<~o`ym3XE-g7yLQ{K=3cpuBvBYZiq5p+tFdOBjBp zcyy;S-|N1fnbMpY5E6H!JjtQ%>x<9FZ!&hmH+Y_eJ=C^ZK*o=RNz#nx(8E3*$F=tH zm41L78lFcObwRF~i8@J9#x87T9LUqra0vYa=MVyf{1pJ9iOBc@66IQLN|`#%2Ek>V zimb8O9KApw&T}dh>-0Yb_;^BPc2O52Sgnf$vL|IyRP}WN7AwcM^td`*gmB7>qP>hG zR%Y|g_o>l%awP>}y{O-L1WNE$mDh?0=NA9^&y!B4#kP#yY~tc+lhWYdNpGIDKfA^g z+~=F*gJH9^wgDS=Ss7fH@l+ZD7Fl>dYKZK+VQ@6RBJfZ!VRbnceI@c%K9;u~Lu8*1b=2yizfQgBWz)cGjwEkO^I$ zo0B7IkNZPxt>`CbG;>kEHtvvL%_}0~j|k0pyC>v8W`Ume0NCkmlqYrmRu}Z9zqiAJ z1up6HdOj+j=QB)Jjee;rdY1p7KE~x$EPoeucc0o!HG|WU`Fruj>U>=YZEfu?Hzv2& z=lxn=sm@u{DRkWh=mdF+YZ$ff-&OL80+9H`mX%2agFWsMS%Z_00r2MdcW0}V8=v5g zT}-7A&pmMYCOJg~wcx`2tf}DQ}i>3e4I`%r^{rI7TT*slP3_PWh$_z zNfb_=qGP-GJ3ri?`<@~S6caTH9`RDC87ix#m`ZoZdk|pIV&gs1DLKEkRV(Se7OpHY z0vMVxURw;a9fDVh!_A+M;p|V7g_CU-TM~<$?4r0{l{xD!kzVq64jqJr%5@w?!M5hX zk$59yh*Y&Eqg#A2SZI^`!qa=Fd3&EhCYKul{Rvy1WNA8lx0 zz4Abv#Hk}lq!240b-^l`h`ydrGQL$D4cCG){a-7xFNWW>dM@(X-;F|~%}QPyw9(JA z&Rg5AXOS5PK*xCw&^IEIsUJjZd?Xq6V<6+}R=$FOhDoVfyFbM{+Ay-h5T zz)F7!g!KLM357w0M2GfDMr$i&Q{9(Py=zJzFRXO$B;3)MXSpoduH+P5{7cgWgrG5+8U1xYo`L?`s7j2rezhtk;hS4SM}B;o2&KF~xcWgqUtLtT zdA|^6UeZ;YiGG|!q0Jv}?3Icit!Ft68`;%u9}%s`2avVa1X||Sb6WIJu~SKEL(_T6 z0n8VjHuyW?AjX;xr#q8;!Pq|pD7B4%FWJY-}Kmnxk{S>_T zfFlSHVmI+k+0EX8VLbrJb#V*SLl*ND8;_(+(y%}`wMoVJYx@C8V(ian|DQ)WV-Ol$ zsRS|K_9&3xb#X9T3Vr1wPZ6$LP}59I=-v5lL|Q50X`E5J=&3mr%1_W$mQ{4(67mVB zA?t_vtz5{bQ$`tSLnT(BlHdOnRf7DX?7FP_?Y0QC)=7{(8gJwzNaJ3pBoa*g))rr3 z=_Z6PrQzxXVId+);|C=)C;D6sfwC7!L}U2X!VPZ#>vX&dtpK9s=5#&oPq0-`wapCf zNH>G1lY#vf3cH>3yPt1|04B%CMuDQ4Mo~cR43M##4~;PDdGZWM()hhJ2fZp6Jlr+IWz9{W8gvwI0lYD!ux7@*|6=RPf`|dyb{p?5uK_}Gx*hOx?B&t= zl3`xw4mud6u|GA3hL=zHZ57-QGm|ZK#S(4`Y}4rx-9-~%oFJYZs7(=9tCeQAh8AjnXYyuT;cg zLz&J`SHT-~kTLk~eSReqBd8~mcixr^Uft@#P>M(*TmiBX8!kN7_{Jm_P|=2Xvc2wn zwqgX|6p8ZnmO6%IP{fN#r)X1_TLZa6OupJLSWGo%nNPR2^kU^6)w~5iS7aBFWG?e% z=$gBCzu+a2#DV3PENpY~+$&{BMu+2(kDO30)fs8>vi>32vXz{!70?=Udf(j-zoNCITF2{he~G+Q>KjGpW16p8aqao}F<}kOsKV}$EM@%=hod4~xn%ls zrBTt8`c6n$=aYCv;xJCDcoY{gfU&aH(fTf8iH$Vhy#lO8x`|9e@gqTll^RA#@7}Yw zw)<P-cJYHC zyV-4r73>TfyH2+)G?H%r(vMCrYt+H(y#13$7hG{zh;zOUh&(}aXdd27V9%o&YNh6% zx$ukl9(*df$lGYRxIYoimksNwv+ij!1tOWt#)gOIP8q^*U>vHAmyPM6&D?A);$PHtbuqnv`}<0eDG*(a zd|{|PJ|My~ABW9qVtbrgY!jvf+!H&g>v+jLiS$H~+Au|)762jBsTlnE{@^*P*cDJs zULM8^<6v;YVQ3BL!ZZXm*>2I9a-+g@14UpEx!fI?aneT3)WdcJ9bz#MW%XtJ%wBoP zqyLH)U)J902)6H}N)Z5vtKp0SJwbFWk5+d7W7C?uhU2ffLDUk(Vx|k?|A8mE+~m73 z>e3!AWbG+NiY6r?XEOPAO3c+qBY&?m)HOz1!5D+hL$0k>pupn zra{OTBS35{HDbQ#B8ocUdcbO#jyA=Vcn0%<11BL9Oq>6sXm?aoJxb0`jtZ9E-P<`K z8M?_V2=x1aK=jI+Y= z$BJwo-31+htOLG_tNY2kPlx3@>sPwQbhlKH&NUx&5y^@}(9MTU?2S}ior6YN%9PH2+O|g5w0my1D^3W% z{!jQEIwBfRYl@n|A5wL-H1#=~{@rknhUe+m5SP%GBX(bgAa-Mt=s(lO&?{E@;$+^h zy(?ldCowrJbcUH4Y2P?2Bh6n{2W>eF%Jb8av+Ol5VBSa-iO`W+ zt6X6DTPh;4V|_S97<1mW*&$|&$(QWJN&GGLxiz5SV5#AE**$`P(#5wD{<(h3Wkn*^ zFHarmZV#)R%U%URzm^E6c&BZZb5L&OJ@R`RT-R_XaB4iLg?N~JeU0f11stN`uA>w! zhm+XL7Mk9DZ{VA{l_Q0{<%gJsk16*y0evaPVp+AOJ8aC4%J=_d0W_;4u%#JZC8Qbw ze9auSW(K2biSNG{_2SW=!@WD8yQ-C~<^SAdiRz8ky2VIysd@+(ktx$bgUxUe$x1Ol z-c1*|Q(o!6U-M|hG_Mo#Q_yJGamrxJ9+H^9_Pqwc*6E`fk1e0TagCm)dwEYE1T%EH z@y9azm3|1e`;cItv6Q4Wb)3<-K`c9ow#zbD4h$y1rDaYb+-NEYrKcN?NllQLc^EbD zKk(~#>yN+Sk{d2V1j8k)B~o*wugK7zE|-KM#TFh+QO5Pw)89ukkGb}ELY6al_^1-- zHDt5`)cMB1{bqk?F$j(x2w-H zt!gTh_0mv--*dQvp8QZ1V!H|U2an3Q*QBz(sY1}1ryC{>s(uh%x1R9r*xOBcw%GLI zL`;EKxYiZdQv|g^Se)< z3p}-e+~CQ4SV^jf0ct&wWaf9sn4j=PR|%!64gchElr9Y8kLky7Qkb^Ue;fvo(d1Ie zLxz=#GoFr=V&AyY22y6}ZHuo>v#o~rW@QfNfU4+#Cj9n~W#d?P_p2vO1qC96ny+M^ zjyygs)|tr8IZx1qWVa>)8`Xu_N*)lm9EKCj{7S=?KA!le1GrnJFH$-*BKD%h@D8P4 z1gEaAdCxl-fmGrGMrzPCZhCXjKE<~Nr1j-(0|ED_AJ0rlvZWhl(KIcclET@G3WO-` zj79(F)+2%7^}CkOJ*#_vmid-iGqE*MsU~U%C{)U~6P7OX#bB)h__GN~=?^p1`-kIp z?Uf2ewCv=@$_lsUnQLseBhV0Z6;bhdS62PyQ^s*&6$I&eXr2$JJ0lo7*T^f1JSm6x zo)r81F|my`$``+ExFJIzgy#p}VdIz#?YMeSu@dn*e}AFI$+^%;&HYijl~?;xkpX!I zW$T>na~bu=?ly7jPRBMf6t*gWd_X?2C(Nhxy5=fe$~BrO1rZxHZKYY@?{(VrwvZd5 zNIK9laq^cpRX^w}d{b8s2P7=GLWf;NgkiDP#EC|Jrlnt2y(9?q9hWO7hU#APu!M`t zFKh{zGD@vD*M4T2+YxYF zwO$l?<-@Q!pO5LNbajM^IPUhXH)FwB& z9uw(!5_f)~z4wp}Fov(T`9*I#A(EzV4=RKLNtp$FmZYm+N>Ov#xfYHqT2fFzc!C6i z4Ar4AzAWRZ?BW}EudtoB)3$GV+v(w0mtd_BB|$kuGpcFf!yf7`5A=aqcnh`MG0Zd} zZf1!x%}qPIIuw*2Qf4Usvkoav^`u~dq)(M3^+ODHfSMGTJ(d#)2OK6Dhm9`MhF=}_ zkC4NxU$@fyZvZZO#G~u;#azWQ44(`omq7kfZb|{*zM-yF*i_#n}SPv z>^6XeS579(ML?wE`0A|uM`~=n?}a}T?5quw$Xmozv?{BK8pNYAL3~ORiPi$+nQq0u z_(!?YzyE!26hFe#%|RBV57&Q_>OjAVyR*rr59~&5UEcwzs2Cs_B@g!mz}7tHOo}<% zPUA@e3+oO8F@oX%v2~YXFgUB1^K%xv5*%@ogMphh(ZRP~;XkZNz9fP78dbWC+0QPr zxr)h9;qp+=_jU~v(cF@*qK~>o6;%5R-)yN-2~K9)I=|kWe{uZ`K)vlaBEL#>=8-Ll z?m0^_BW>4)tH71SlGdvU^kigzp#-gi`6~qOc;Je*mzxahv#E6j0jnr{z*)RZ($5#Rl0J$`bZDy9MGJp%d;2*qkA1PTZ6aD%0~ z1K<`+1*rpLhw!}dcf=iFdxz_nO;D);QTO&gNqFp9xa(QWHwKx{F#XNvv;i8*^-JDJ z??7IIN_wm7e#t*oG*>-2PrZADTp>J3&NgnUh8{yYKe zo`}XY?GB6(l69RnW9*B|beS&p(VVyZV4HxumK!god0)3r#gC{r*PEB^=96uXH;PR~ zB7{$AEg&khRcd|*C-e28>sL7_;+h?9J~LeMywa`<$Cxq5;JEr1=r{|7J^&}u(1ORM z?ye*8MMFw7NMGr$ux5=qOOZ&~PJ{!|jg%fR`?belGPbWDzpDrFG}+dc3R!XnqN``q zo}9OFb7sULIC&o{%M9G}62}qzyD=6kB=yUDBANRZm_@zZ;*bJTv$+%h6SL6d#B%X= zWMvy#xjN>avDWMzw4H&E^g%u|>C1aC(j_7Iq*k_~5pjPaJJ98~KlP|*2)SG}-R;v2srhHi?*d&5T$xA7#GAZ*NdJQwXjZ|99do4;31G}3-AZesUiYm^YLE0pwo?DWbWXn$^1Oo2H( z1@&yPEW0ab5efG};AZ1>3+PH$_isr3oj6;do?1g>!tKJ{9G4-4M z7zUdY1XB#dMIXhkXucWGMF9+Yiz3l*E4bz1+*FR! zPtpYae}x-dW*<`^32UHRM&OW^IN7gR?&V0)t6p8G3hFKJE$TnG_1H69Q8};kli9BE z?OB(<0!&p=jv^o8khTRBqLCsO0&R+k)Ql)07+Ki7+jgPBp)P-)TP4?~=0+Z_Y{a_< z2ouQzua?IJOV>{X=(u~d18%?*3!{&}mbRB-FiNxU_njYeSRUYBou`9Zm@k=Cqz)Cfz=gEkBZz-Qaz5uY6_9@} zx@g7eXRYtONGQevDg|fuR}$#`cMK88x1X3pB^pV`Q*1}(({UmQ8AG;#yv#>|__M6J(by)LJ6hpQGF8)!-B)O$Y6 zDCMG>w<`O|2OR&8z4r`js@>LwEr114Ul9#xuq}?s1QD z1+TX0`F=B_jwtI_Km)!&$-Akl&~(Xr_Q`T@BqGch#Ro~VX@6t`1$1aw&2x*ymm$7` zD_TJHd%Etus~6@MG(0P|(XB)| z3(TQHO!Zy)cyUGdgHsj3G*08;$ROxd##6b(1z}VDE#nwighbv8^Tv~pgP%CC+xBc* zIfsg^Tcm3q`w4TG!lXaa2I5}X?qElwqk~nA7<4FMXz^2f$)JN*%)0lE_w8tBZY?jp zIF*5vVOGY|_ux@yx{L?{?<=U;Hx;!U@Ny$Eli~~egFXyXS|Ne^uUt#TA{9Eh#XMeK zLVTL#Q$BZ1p7WMA;J*``PGc8+T6xcC@+t=3gAt!SY(H!B_VLm$8^FL?r}~_K=qzl) z@1pxk;iBA^Q&sbCI8es6;DdC2^ zv`mEM44^mU2~*0Vj4pQVhXAdJjkkazbR$ltF<2TQ^4?r&Th}DbFuE2N&-uc3q5j|@AHsQptm%4Z5eZ^N4JQ7u(##9*=KHJ$87(@LH5y?XoX>3?L;ZnEUKu zPMHnWJ3{#n&t_`SNFj{=Qr?dDSsx&XW~Ulw6gpt)dA_RcprOUMDu8WM?PF_Ju0r$w9b8B-nD+Z$%Q?|*Tu@8b=18nm~ zXJqdgm$#P8rKuEp*e;QQ_)0@T6@Z)S1TABEalPbe)il)#;?`mLrw`=_Fm9V zJ`cXA{xUZt=@C}$eVw4t`ZQUU08^ZuX_kU!(7tae*kmg~cVVa*i{VU?!e02y61GhD zX!Z&}*_{>oj^j-cqkxQx@+N4iLwCJHa+9Y;(pJzSi!Hl0L!oW4q->_6)=v(C@{LZ|5MjXp3kXBh~n$E6%Hpe@)y zf2bWf${_1_wDGCExVT`yhVbi`zFu511gqo8$+ziNU(>-?cA~?~N4sJ$a-O#w`qwhV z<#|!ea`kK98^6X^=DdJ=C8D?<;yBRF?4~}JyxMBoY}>_N4s`?XtU`paD^4wmC<462!9i+f zXtk*+fTc<%Qn%gRvX|V`VH;KHz{9Rm4tO**3M1LtP7UPml|C{kB5(fasDF#KH@?q2#Yz=7TNzNn zm0QvCtRVhuG5pD>@iMe03!m#nL~8=V0T&v$1ZmBfG~=WGMA)tJ=*dLpK3iM<=vE^} zbTh?tb%kmzH---@Y&EU0YVK!#H}2y8t|s6`f&U*5Q{sG|w~BZl|1>dA!r{)Y58uqu zw>-(KJjdf@8gy7n`Dj>j7=Bf9^M@e*d$HPVQ?}uNK8Aqg=#`1<7rj2LG#NZco!WUx zTLu{|x77_sW-Oq>aOd_h>|?0Pr_WWJZXo37(N8A-pkxateA!-_!koL(RA_g6WI}V)$U>M6)0>yJFIuTmvhTgX zsrZF2NxNNd4h`xE{rty^o3{goGhqjm;(ceONPHX~U4y)BUj1#gpu&1*b^3ap!!0Gf zKWA;o4Q=~5xFA@$*0EMJZN|6Ybn(EViW#Viv?`RNk3!hZcjxZ*foO^P#SHweZNb~9 z`N@8#_BY8{m;FidUPjyaz(FK*0BDGq9H%!B#6zro)1VJNe7!_&$_V@5K#~rVy8ZTw zjHza93+i%y5`GniS%C$7I$d9$=-j;WdWq{I=Ihlz z1YYX8Ramvn`I6>Gd0I)XU=8eD8<@w3H(@#QQVm!}w)uT+Hf?vQt#!_x+|RP3gMoM{ zvHnDtTBL@Rt#TO`Mt7{^@IZLTvI;h(oPSusi7~%u^?X=sv1qw6;!CH0r?>1glCW;Y z7n4C9d%b1JleIX!{861f+qS?>r(ChCG6_}?#pdO$Ab;dBK2KH3Rj1G4*g*YeYFQKa=>5V~u(JF+J_QuK()!9e zl46s~C=n^Bua?Dry7s7*BBa9GBx)-F>!KAV!5h5sUb?BYNzIi1sK4Uy82?kB@lxJ4 zm{s7No67+@T4AAS0iP8>Qr4RMvku_YTf99*maKagPT30%Z(da7(Y6rbE#g=AuKpfa zclTq>4CpUNxwn$Bm#gz-i0yXA9Brg1Q)2DguMe+jrxZn8z_v`ZFF54uQ3GwBT0T1k z|KX5QfM|$T6xqmnpkqL+D`_Dcn)e|a$B#8&(vE!Ajb}1@HvW=RAZIw_MQuPo(%Il@BKB@JPKke3ImO+k;Y13@ zE-vIMZ!nC+?tCgkwiGd;TPdU7`ha;)nKr{*SdG2i@$S8nm2g*yN48-enCjP4kDF?9 zZyZbfTm;XmiC{1s@McagbR9uucSkWI$jt^b{`-Jf+5FZXCJ0%_m*%Nu97NxV9?iG# z1PIFt#c`QFTdxdj^^3nhI4*A>DbnGX5K3Q{qb_yFX)xEV*P98F6!!Euz(jdVp*t$BwNxL|$}%E092K!HoNL zq#2W23oON|Bqg|=W+s35^j{gTu@i+{vKj>?UE?C(_2_{$9e!fYPowsg7%dpB82^~??` z1tyt+6fHv7^(D3XxO@=hMQH_C{|sIUd5y1f4w^40x{&RUqqb0lmho&AF~FxYrDoRs zNdvy802~9%(E)9Br~Nig7C4^yvT7;BoJS4a zl(rk^i%MFSoar|lO>*k>%kJFNzLrA-g3oQRRy~Qb2$HZ4n6#sP&n54v1oBR!>%Pt8 zgd+3ZUen4`SDGnE3P_wyS!NR>acO4x+^r91DK;v&Ymbs3Ba#onQ_r)FWL&a8*(RiX z+?lW}$naSE!GLDjVA1)REzFCd__IA+Y`C{_y*Hx$mjPT;*D2l>j9iJ?HT zuY;-|4Q9&SesQX{&&b=7dN%=G5^aw9NAbPjHTOYh?r^&p{|N z{z@{6PqNBlz5On7fyqD1YZ=q{{Ah#DE8nZ1-eCW~lWn#^G?AI9|RUhln|13g^0(8eLDQ)SkEY-NTkfVQ(N z>XhXlguXVm8^`*vNamEwTlMtZ(_xOR51riHL&z141)KhILF94O3NW58#pcoUVfF(p z5MY>+Ib`$;qhD=#2d^}*Cyov8m}X=5MGx}?*}idi%=U`v6ZwSz4roM(=G#lI z;F2jla3gZcD@~W?_Rv~3+Hxx-n5j{4jPy4z_zIjr&yDVo-dP(Ncl#pZZp|#1GhErx z@GA%Pb5=k%5fUa+DL!y^?D0Lz7X-)E3XiH@lrE&fjgRog;!8x908g0J6We&pB@4@s zUViII2Q_7;RT(C4zXo*K>PUMIYzJJSqn%0yR;_>5Kd)YIm~M)aTp3<)fNM$t=}|ez zb?c|^EY&t6Xr!G;pU4=0W({trJ8Z<1&%GZ5`be%t5MkT9_{PHWG^~fT~6K8gw{DXi}v9qL9VJ4a*|EexL=Iv2b%&N$kp zVd>R?fndJ5HKRnYuSks%;OOnCT}=9<7Ea0ZOoo}Ev9ZogFOeXvZRPSlAS3xRrmFX{ zSNr@Yp%nm zRS__}qJf;6!SS#4UpPd}%NI3R0?r5K^|z^XWaHfH}O!q$&jyV9n&8CV@X~ zqsL+_Q?=P1&a%Hd!~S&;EoGvXHQi#EB$PCtEXrMjyIAGZdpW&vvrq>xGVLiR8|pH5 z)bH{?B~AOBDjw(|8}_<7;08jnvm~jZQ$>D(1@DQzcUo-kQ@GrZr`K9YP`LFG@(}V%BAV>jFr72oN_jMe_jM^FwHU+< zb|CdMgt<0&lV|qFjFa-7>1DWd#GfqAIGCKpBaK+x45ua3huE%wjvwO0ZbB$#~h#XHqoCee}y_hBo&TA?pn zh0+!V7|4a|QY}hV^|&m(?ALJ53g_WYllhfw2GLbWj7LXC~m)ax0yO!UA%#&5C|CHgsbAJS23T#mzzYoOna}9t)SKPIBlE zf2i}A@vaPGYUBe*d%ZKf3}eYGv$Otw#&x{{Y@0T?a6z{uBsVjW`i}(WI=Y z{m9rL%rf=q@S2vxVphNw=DNNXVA>ayB@9~p)_+vI2A}D0dg|PHi~Ek$XxHfzlj|=5 z%%dSwg8F{*L;Y^6%weJ12Ty=YQZwz@8dSEsaXl{mNdHgY*Sp`kg22vVV~InXY0JvK zoT!kJluFH!-+t&;ZfFWhLwJkr`^7B{rwiP3-#kg8DMFa>%AqA_S3@6(SDwTuZ>mQ=W9WyDqLw)IyJ?puRge14i zxbG}wZl~#uF4k5S(G9l66lhx6!w)!xHfaZ5bUQQr`*9&>OT2r8z;9DK4DBs$S+}eAb>ItEg%nX3OSyt zj0xqH+6`qr|LDr+VzJqsf;K&_D`XwMU#PRSh;)ICioT-Je6}rT2VHD@%YxSATtj3L zy-qy-z(!wj^I7kro03N<3UJDc(hX+prrK`t${pMp;bYP>Ty&yL;TyIeV_NYRY2r>J{J(d&yQo(SCeBI5) z_=+;GRZ*c_-B#2U557#LSW9w1QEY`q6gl#N<%PED{x6}~Kg+~a=NWC2(VLuB?bEMc zfmLMbb{%{^PiMYU+=n?kUDly;213?6saap?gFRGV4_<^FfH25T5&eKa$P9fc@<**F zltUq?Uz`fdUiPnVArELKmLFTath~Q~OTeQ|b2VlAT`LBt48grv2M=z<#IZFWsmx&F_O&d zCJz|U%dI>fE||h%HED{ntMFm%SQG4sA#7#uO>xCDEL0~!K=0+5xd!sku9T;mH7Gl- z#(J@O6Bk)ua_k~*wRQpKd=y(;Cwgqf&-!OJ;AHp79B~h!B3q~9b<}WT9s5E~W>#d& z5T9Y`DeoTcnW-S0S9|mQ?ZzBIlj!@+K|xZnn*tD+F*WeSWjT}>Qz?OZ?+F1?;e6R)}LlQEt+ytWZaXFzfEE(MZzAnYOc8-zqY%t>Fr?nlA@m+PUr6 zGlX%H1xBZZXWk7LMebXa;K`ID{0Wu*HX?qDU1{fEwFmmcSf)UJ{K6a@2PTvEscXgu&B@P`p8G{M%qT#FyWXzJ2O1*N1k-%7WJK8eX}c43#BbeD+V^e)53fVt5hW6> z+sk=e=EtOj2!`6tbe418U^bv>_6(=&1os@Y)&Uf`-c8na!Rw zkXxlvVAPsy^xI(x+V2gZ(iCejR9l<8Tm+g)Xg} z)t(Mn^=PDxr5|a^-&D1%k+uu-BTdPcaV5!*D z6@(p``r`#}%yyvhqG^Q^8zV-pTPaiu^@&aR#A}@Q6f7AMQWia(MoByJuwmY-JHh$09BiI+IrIOqsgdBf*$_;d#+s{Q4$m zW(o+Aam19w`J=zA%3zrzbAs+^v$i)a=Q$Ha%*iJL$8Vwd{VsBf;C^OZW{;yXu_~d3 ziDEg*aJUn=FvYRItb28Oi-jfBHxhq64oDeLu4%GXY+=|Q+Mv9WDO~AXWCQJ7WA4hT1sL{R;oK!5D)sd zDLgV_bevmgw9V|cybN2h#@iJNCRn7kvhZC6fe^6NvI?r1O%3-|D(*${uSm)mh@{T! z%OTre+%#$$MRdgGQ8hcI?dQzHt_lxFp~>vD`Fhpx(6V!&!!*H%Q- zA_J6jxn=eWVtHZxEXpanao7wcwg<1@-6aEUmV7xf(A<wZ+55rpbrhO84 z#Da(oG|z*546ak7Y8dkU+?bpG#=!_^b#l4N%g3l|o4Pl;)N+}=b8>+`?cm)0+&b?2 z&aFUw3l0>iC7Ywt9Wl`A=N@l2MX>%Jl|JTv>V#px< zGeb13Lj;+vadT|+ttx&!gh}%)JC>lrpSyLWiy!UVA*zF5)%{{@bKo!;*Z`S2B+Ims2nyL%~zt3*n4l{30Qli(nNYNdX6=f87G2C(qo)mgR z$v2sV2iJN=7M~93j1a2uazz6vJ}6E*2evx*h!9gWj43Yed&tX@96=vk4fnetkarac zQgDm6c>ey{<{vXCqQ6n241`MBYb&SJ?J11}&)HIiG4mKm7#U+gB5kE@Z4Ran?KRPE ztYqtuE!Ga4N6Q_$*2vx{lM5JV$crZ!h3Vj^XDl<}?Q^q}{rnJ3^09T;14?v>)s2S2 z5cUy5i4E)6JfoJ#H{@{iyb42+FIhnex}NPvSOAe%U^mwGKVU@Qy2DvCzo&m_?13tY z1!jA*OGv$z{KdO)y-Y<9&6bh7FPt*8*eF348!k|VYLnw0E4$N|Ui=38e+NHLuH{Hr za4{E2cynDYlJMaYri`sX+71CpN%(u(A%<{pYmXk+@mhA|y>5J%p72w!LJy$i<#BK* z3{S#dw>}RU?lz-unY3d7Ws^`2AV80O;lE;=- z2J-g}U)PBV29yM^dQtO?%b%vBOTF6ba`Hs+{_Pj5q4&)emYqSEx zCvol}UOs3L@~|Ybxwd8fM7iIgz8Q3#XLRfCr8?X#ta&;)Oj^fTSP)4z&B~&+i-Cx5IjWT`tl-R0`tX z_H|?Nw=5oeuUptq@&_@fV`1*@S{>sAox%5ZxbsoFMx*gw_ML6m9b5 zN^-{w|D{d(tU(zolgs+I22CtK29hD}PQgKwN=+uLcmeE?$*oi6+x{>Ri0GY_&nYkA z+|U84#v8x9syB%;>UvIQJo;y3xueUM!oK3i`V*hwD$LI+P}vL_gB|P-pmJsUTt~5Y z>e=|@xc%qsd;p!2U&y-TQNU#_!X@WNmht4uSaj(; zi_h}SdirMlbs*zjh1`8E?S{u9ya4EAZcxfVrozTuIA##ph&P*p=jsy6_BkCU-&bKf zhGIOMzt*ieo+eXuCg7j0pH&^48@bpAv_ZO23z$jO69uj~B@A${Va{bt=~^H9Kpid> zYha@q!KG`6;F?K@>iQ+QfTk-xy@&gup27ll^%fb&oa~Ps>~BVigfE8!C;Y*&gVn&t zKP>G}C+{J5Y)mXkI!Pd!dr4~7$5VO1+nWNCUU(@RRon@ID;EPzGY5r39NQ?F77l+?!pkHSJt7%U`-jYMN!6}jzWqF`9vc&)LH<=e`7zf=3krZGV-X(O?J5+`JmP`S0v53=IjaXz;I^|EVJ%G zlE(+b7tr?REPyc+5x{?wf~};u=w(<5&-W9(wmyVyf~nHce)}#pE?K4m{ky-=tMLsj zzs50yU(=2pm9$3`7g@n+U(LxjoN2N12T{Y`i=PsGg-s|x)yarf(eQZ>7Ndl0vg1(T zXWDkqKBdQlQwPrI=8sWE@0rPNS*DHCdcH1Px`i}w5j%vCOx&5X6hkP}iaPV!Uqtek zD1L&|vr@SIM=U6_>_+S7)7lNY19OV(l(d{1;9^UA;`ibE?Ln zv>mxL@|-fzFEl#~`NSuSqBWd*-ILkBr8rob*WqLT`@C2nOTkcicD19yH9G{ ziG&@_XE#bVL!J_3R6xEyPnbUkz&Z_(P(>=*w+&wc?mel`0r)e+V)`+ztK9%oA=yer zuhXu%*i_{ZWMcUW1MdhKlF_qNY(>?TR#F+#x3hqlt^2y=rMTH;Pn`xFwLh=F=TEkR zLo2;=69@m?Y@nOM9WV)!e@($LG^WuCxbW>5cy7@GDA_RdnSSOFxv=#q1^a<+G*4dM zXrfpVRg#7c$RRT4+-U0!Qm~5z7_4j8;sNUJEb;QyX?J9OY`Wxf?K>WlXV8ykg~D=^ zK+a2z(TYPl!}%sR=-i(5Z*5sZhx47zVIsUf zl`#I9{yEALeI)DdgtD+}%$IZn*90D4Yz-}vk=aA6x!$s#u zU^ID6UfpRcq^Srk*9QLvU8DS!;B?B`VPKxwDEl5+QMNE~^<$Dw`Ys%=4Kb!vVF;C4W>>Iv(MYwD3K9nngDtt$c5 z>q#SvFGtSZU=S6>H_x&3 ztlPn>xNmk1P8O_B0O?pvV03}IDqUJ+@|6qsw{IK$_^?#oOb*#> zke_VJ-Xn#Tmv_6Fyq?nAsSB1agiZDiH48M8rp!%388pnBIr^R+Y4q%&U0_Q~vDRXx{J;#^;23mjN!W6i! zR1##!#SjG1r|VSDbC%&|2 zo$Rx2Y{F56%JWx0L@NRw`&CjK*`|MdR6QA}*I*a9&zU@_1J3l6R9^5gw>+XX?T`JG4hB9&9rgc`-o zjDhzZdN`BU2X^HLv}HUR#QG2SR=t+}eC0ZF^QvKPe4~JDX})e+NHtk+YyV1kP0=v3?RKwLS|8PRaMcf|8BYC%26o7P&(TR9E;DDD%Jy-b$~py$!pcT zV=KA?{*Uq&975ZjN|miDp6HVbq?bbw_`~K0$15vcC(($MKY!{d(5a8Ot392yzL^&A z+(olj3po4kRX?8J( z8S(wI?VX)!7mp6%%V_d&PloeQ0!%;cB5?wGX57{4r-(v%{9W$z6zVPBjDpT&u*)kZ z_9AWYNEG{hy_6ZKo*N+Ng%KWB=*CsbAGKW_AmKa>fLymC(uL�Ia2NHI|Yv+bSDC zje`S6+BRp8l#8RqcCQ(a2?*c0;@Tr}{oR*BfwwEB4D9Ug7cxH$>FAi4^2uAvqB4ke zh4WXI?YEA2^xrsgi>P8IK1mRrrlXZReo)TDM;$`nO)J&VR;xN>I#<6ehA2HM{jMRG zGaQQ`N|}F%;)WbQQa^f8&yIv#4@?Vn)nFz1--*Il&P?8zp93$O_GEbJDd^AlvlYa^ zP$VW!CK9XB@F&jHzK>}@1WwUHtGuyp%eE9Nt|`1Go3U8n;1tQmJ?)YUlG$+B$Z0o> zq91f_odd&a@Q`OWkF7A>`1l#Q*iYH9KK?*Vj(S~IUd1I^FHXSGASp{Xdgro^5298x zu0=<>S0o`(r(KtSv8>vmXy9?*JW^-U$ES}xFlTML!70|{F85SgelQf{Hv5bAe4xGX z*e7Gb+hRK-edhw%+zZl0lnGg&8a|B+}6SF1e6 z_?vigwvo^d*P)q?a9-dFbhJF^zo=z-b!?*d(aoXrYa>p@glpJ{`TqL@3sab&pABa* zqYUocfu9aa*jHJkhK6;fGvKiLN2Hno{X&geTpRmxtVr0s39)Sd=U$>g2AZ+3Z;(o+ zSni7-d2Y^^Fr&V7L0rZp+=j;_eRqv)#60>criVm^?vl?EZ+*al$EG5qy$15e90lsp z`O!H-2)JXvtvpL5&|$`6YZ%VUKLm+G1^K(Bf|n-ho+V3m?~lILf*RQ+e`qnlT`_T5br z4C_cY%;%gaETKG8*VsEB+9G%#-PM-EJh4!^T9lSp)uu>rGco9Jif@pUS$C-*rq_MF zI^>6*V}E|IJ%*aA8Mquoum2vyq~J2D-o{epvEbkMCs)kMsyhiY+o8HAX}|Ff-iAe5 zGjo?m3)dZqYd`W*8(duKxE_SJZRD>l-i)Hxi;qN|Q@PeneBf@OE>bUhb7(1m`8h+> z!b}&RAtO3ch84Q%dfL*usj%9lJ=Op^Z3SNs!@N6iIevRw!sMz9^Z;8Cz4SGfhkZ>1 z;8GLcY&R{9dD*I01Swh_KW?DB8Q4+%RfgqqpiEpd0D%38(|r2Me_kL*zrqJ8XZ93uSbc0jY!deA9DzyIX9v%vl>h`Bgf@YqF#fEoj9d6*h z%hF4g`LEStK`SR+?6W!Rk{zb)(<|d9YTOgxVr7iJ_2Hi4E*rXIjv{obTj$7wb8(cn zTd-iPLzN8@t4y()HB*28AjTk#;o&588l`k%=e?0WXe4w;)mH_yer6l?G_!;S!dyJb zj`mB%`a5I#>&j)j&ec>ig4gN{5uTj{UFJZoAvf#Yu!*{BlMNvpUTl(r8>PvO@xz6XJ1hJ#L3;Jc0DR)TT*CG02C6kJ^sX?hRZydN+=HY|m$`}owDv!OH5)@)N zKAWSiaOHhr{rSe6W)Q)w(l2&qvhBemkUgQ_bzcau?T3g$># zW`BlB#@2~z8IQ6r?O=0DOeyC`c8OnWcGQ}iqM@osAl;5Z`T^qo|BL!Z3n zKvxiUD3wQXfQ(uUcjlInrStfH(IO;J&`vokj%nTn?`T|hs$t%w{^SC}rQM>I|80Ea zM^^SN0*A<8VNxtkDJZy$bnnC}N!Rjt12x=kOlxOg;TIa_{J{=+C~V}YIs#{{Fti~b z#U0Bv95}s-7*Mz_&)Ya3SxqbZ{;QKjl@I%>0*YEqB(}oODgIdxAk=1m7I^~j47{2B zJr7oK-I`RHhSku_U*F9SZEgd$^w9hTPBk>~ir=@Rr}A9F@xO}(L~L4*?*QUB$|Ajhh?ja>j?^AP%9=J^idfJOMa!I~^Qp)(GleIz_j$pSsQY(FUm)s+0d`xJguEVEKy4 z*{{xLyk1|QP9;MObZ32WxFAzPY`kDSd+hc6NBdCcwQ*MuT!UN?4SP_l*`& z;-$|d+vEvtK0VG*XP?#HNMLVSYC>s!kQ(|>#FV0+y7BJtwu94$q;t}4*juyeLqy+$ zD`ZOotZ1X(Yi&OYvG>Lvz`yuHR0Nz7d{ms82C9$R1}U!`49Qjipt&`vDLV*~Q*qwy zVI$2wmr~7!D&c#p7o%wD-VW2wZORsO%C^sehn<&;6Cx^^x26M}pIUPN0{Q&|BS5_s z8kF$Fr^1(c>qOOwlH`nKvg1>p&ew9-dSsvS_3@Lj$=fPKm6U~Pmzbpn8Aa&PAns8o zlZ?gXvoR|ZgwWc{U>cdZ;pLS~(aAl#r-74{@3au5*bGW~TyTXM#F}r&vaY^1MS@>- zcH_*J)HdGmI8!8rGsvU84S$nAuB24eVERYH87G>cIdFBUv*b) z^^W)P>(6mAYCu)UrDavymnkXSvZ2Nuy5#a1?YQkL%ARW{jY@U{KGcr;CVOxS@g7Yk zssl*+%CMLw4lKG@x6Xz27;*fM$Q?_;kqg-lLsbx2vL!Y4p@2Mn6x+&U- z&j-CZvDgj$&zO%RA`&3_I~>=s=NfW8*pCr&Fk;=vKWcQ-&=-OZayxGhN-65J5;hGc zA=QQ&l90vzRvh#W>aNlVR%v(2No>k>K%~}&k;QcXtMZ#w5U!g+$WiJXP5{VWYlr@F zsdsN3nyBd^wraNP>et(+H*e7UdE36XbL-iTdGfy$MbH$-YcPv;08}4y`*2H#bkoPh z2##Rls$9>nHwbkBvjQSDziKi{Hl@nz-x#kJh&@RbgAiq=+c7o;Pg-wV)}vvo674f} z>L15ql{DFds#m`|9>az%gUDGHm+F=2L&4;s(-uJA0O#`rpb&uHa$%$OZF*SCL5o;B zb=T6O-X}?+vO$)yR(sLvmjte6V&bWY-|m+!F^#b6L2oK!05_epA#^WZm$}Hx)8;m@ z)ysv{NNoSKG75lSWkGi)^SAH*89m$P{qYpS|72P{D<&}xZUhZ&_Ty01sz@ZYLtG+} zvNCs07WkYFeMxJ}LD>x?i==c6B71>qinAi`mOK#+_b!@>qqzkpRR9#xXGKte5xz)o z1sxBz%T@q-uJV$2EJ@6m1*rn|JtJHPN7+w< zf{G^RY@MkZ+9KMuV!=Pyq4F(&8MG!!iZDAFO&VitP=p{JOmJ_A?tzK%`Rv#XA(tQN zUS{R*L>ec%S_u!>oDr^|<}(8r@Am^WX^wP`Z?kuqPp(Qu@F3tBgnjIwz;Mw!&w-Xf za>H~@CF0at&{7f8u4{p3N9rO&MX)VOMN;+L!fe)?R?%j^>HQUv#+k0RyOZ#&wv3w9 ziinGZjKe)o?ZYB%Pc_`QnKjX5t$5ZgJo`Y*#1&OurB#yLDEnf57Kln#%X%6XuDiFC z2nyH=UF+Qqu>(z9g^e1BHT;saK@cdLhu-CbyD^Z#qY5tQYRT>LaCCs9hh+Dx?7Vtuz`xJf1DIntblsoi6 zTp8>SNV=0*MI!$+p$%EMETa+CA$|U_bpeYD!uiX|j?^s;uBSG|D7MuV`KKvv0PC2L z)-;AC2HOyJf;M(Agwz_-j*Pan3Zy9n&~6fLy#*ROS?)!ZT-C0VZZShjw*)Vc+UiBKfx3DX;*N93t=i;;qEEK}X%h;L9Q7B3 zU3v+)bQcT5L2U@{393a!a4FciHvNz5*WZ2k1kkc}Y*Me-fjv&~4^6sZ%ab5FKbGL6 z zE6zrXUpsbq>b6CVF%V80Z_BUa$m}KNA0xf;WVmB_q-==XD#NQqoyQV*cu87Lpm7RGByc@1H{%IKu(|X8>{zSpC zc>ruqIJ<5MlgY!rrOhRL8Epu0swz0Yj`?`ktpsLhq9ngeekFj2AGU50*a3Ltub%Pz z{Rx0yEay1JfUe+ZjY#?%T=%Ed`RA8g=Z_v+IsHWIWBT8|=YId#Z+;dRgwRFEr|(W{ z#i|~dQ-MBzPkwZ1Y^^s6@7qCHmc;}zpOznHo&DSV%bEh$keyIL1zdmE{7FwlsaHp= zW5pmR!oPLBAtQM6ix15I;8;f(bxW&H1$s_;O|T7 zpKlZ3I_=yG4{zCdqE*fHA9w10jG6s*qG#id{>f}#mWCJdG~4jI01t4gTC4T- zo{^)f2fq@69l^6)v=5xi!FPU!oOVqlW6Yb_<_c&YQOdzIwwW zg}2U6-|heZ=>OyH`48;(f1jYg?cgS0#eHFW67;X8@!!5s z4>&-DM{G1aVqUHtR3q{{#JLU&G{ ze`t2T^;Ocn|8|Z1m%;eg3+g3cgsrXa6l(oXFLdkVZ!>2v_c8weX>9&+F?a*}K1R5A z`+s~P#;d@?-C5%|z3_iABLA%+=c@z^jW=T&&;Rs7IeZK!i-lj}K5Jk5zuzAJ{Eg3S zd^w_(d}II8I{qJ);y(`e$-j)#zqQi-GEV>2f>Qg-IQ`S^`d5SYmvQ>Hj={f-(_h9Z z{4dYxpO5~3WmEq0oc=AF@|WlIZ`qW;!n%L8&;Dun{xVK~8K=L(y8kw8{@+1`h`%tW ze+xkPJLdF5m3;%%ZSg%kf7JiCl-2EE-}g(4K#Ji#Ps_ps_&;hm@W5G0lolj_L@1qMO_?dGb!`+)>BwW&AVXgJE@ZQWUA)p zy7r}aKL;$FvP6@FO>`wR7ow!^`|mxjof|jf2xR3Bn~``_X1bFo_3O9XR6V0tAZ@#z zk=damL}$R;v1Ln(SFkA4C)fSs7k0rS)Dv6&0AlcVCVihQ);DP3JC|U<0be8nbt=8B zu_iz%$ZuIH;*x@Y+4w%S3XbWM!w2f%D3cS-y>jpVt*HU zd#HF)qI~?hmHgdBIL3?9t6R)u+^><4lsoDjevrzREgu)`9M&(dfcs$F45Cwor_Ya5 zzjXR3-ucZ6q*Y{HFA8!0Iy;KgBJ}%RUiP&d-MQuy`R-^McItslYNZZ_M-rp( zbxoXRfy6S7{`^|Vf8I}NTDZ)>`uTxup?=063cs_Lq8JEN@Bd@(y~CQ!y0=jU5k;|# zfJ(KDB3+c;5f!CNZvh1XA#?~WKtx1Fs*3b3(wh(<5K3%-f}umCgdj*ufKU^XkmNkf zH}m`EobP(iHFD0MuYY(U7xLuUd+oLEwbs4v{b(OD`^vZnd~j{AWps`FLlubq5MYuz z`mn}=WUm_ejaTsIJ?%R{8@HS3L50=&f1O{a@_A7|b)`sL)Qa9TJoIt&1uMSp(i?yb zy1}BalRBx}5igKq7Hg}&AQPl(5>2XnYmRoiYs16_;-E93v}KOcM2*Y}!%qxV{QE_5ej?aiyKFBz)STZEQEp1Rh100hih zY`{2m#(CgnWp#UGa~nW{<_=J>h(ddWT*Szy!#IzW zz-J0+LzK4dX|c&ipH>8~bPCw0VSms6v_&3ln~|u!|KSE~ThS#~#88!c;1xWd|w3TK`lB5;2sm^`) zgIE03?@t`7#^W^tJbDe`?Kjr( zy7c=gsrFf7nV!f}d3*=Z{&Bv6S~{>UV3dj-I6Kbqkk`ni6OfY!sLk_X7>mtQdZLdAOdihj=?-e-c2gLiwlozfed>zH#ypzda?7;e`yF!2=ptKGcE{8e(Le{ zXSXu3MR=D28ebOS&uf$l9@qdlK(ek!z=+9#dtI+b4J9i=YA{lOQfR}m(u)wn*geUX zcdz8zXf9j$T=drTZ^V#$i!FY7c>$*b-<=*R>g+$R&bY!^)o6N5b@M(fNHSo|cOp0$ zyp1V7NuCgy?G~Et9SnGM^*;SzeCwKjX0cwz6x;0B4;X_|tk(#8BW~MxN3!f*J2<=l z*kJFjehTXep>&0wpk=}_67qB_y~=ic;b3*MWAupe#+x#R0&o=6rT^I;{#TjK-$#Zk z?S05uBMVd0--WY%6SPY!2jZK(Zt9Gz%?SO*nKS4QMi}g#;}GnJ$H*g6CBO65ZH&AL z{FxnyOI2rXn{*|Q+xIBUm@4AGd}?(yrc<^MxS!93=Yj`;iy|!SjywePHEj%(mw#7W z{Cw(_HGF_4nJ3-J6Mi!9pEd))b>2$Fw);C}M1s6fc>h$RmB zvO#CFzccqs!?@=~VCJqXSC4)>j$aIwzNOl6z$*(fvRE6m_FM1<`d01KR@6Fhspc0= zcENMPIo?@W{sU_a|9b*N6f<9C?WYL<73}{w81U%D*O%IYmy2@)Vk&H#bUF-!zGT+9 z4R6f8XYIO$zU;&Vlq8bQUZ4Lm-K&=5)n;`bN;K0scE!S6)KmdP!UpE{xyow%6qzYr zq!OxL!kF|<`tgT}*uYfQZ z)o>y;+_K7_Y#T5J<(f(x^HQrLnq)NaYUiP6s|ym8Y(>q=t^kz4CIQ(3LvoPf_npZK zP4DSTx+z^luGd>9Wu?kePSl;+v|7WGFK^FF1b^DGNB;C1g)y)BZvTi5+GyBc9l+SI zhl1=v7R{v6z6#E3^ZTSRGsRsJBJsnLtG5m7s{qBAa)7q6DMyn94QO1W$0J1m!LuA~ z=iVGJ%QN+4sT7#VEhbNJ<@0RcuIIkMh;Ns<%_W3;iNrl53f`)d{K~>ET}p~qp7W1E z^SOzcVbE#B_(21JyK5|Yjb>!iFyv=6@fgYH<>oRnFY9%We3b8Zple^({JjF{p#cI0 zXy3XHf}Jue5h=uPYp*5qRvK2qz9~LzKvew6;tv>;_HSyqr0UVWl3pB>=%Vb9Xh(lY z-L#st@BnUJ8k7SVL|eVKOPebB5xyCKZc@_mER+_uH_l*7t1nf_ZprrZMwd5uF2gy@_*rVp_|-Uz3uhjJDDRAubxaV z1@S%()Y_0^D2*~mCalbrYZBHTD0)Ccs)~$H?a?y|L$s=h@COk(oK=9>tb-bEh8ZqnW}TJ^nud>u6&(vuHzBi74&b|CvP$U?@|cHp*G z0^2DhL1wh>TA^mZht~uWK2+vJ^&lD%qM84Jf)Dh-;v)`|FSDI^77wO1b?Od_&g)_% zmzVRN8X_(=00f&CGYK|>A(;ff4YUXS+?%Io)1>g2dD3{xJ`H8}pCz=1KTB#z;DKVk zog_EV^%}zr3QSdrcQE+!BQr8h^YS5+NKaXGmh{~KoCk*4p~LtyC)kysWtBOzLOE@> zjs%8;{Bg(6DqUDtdDDq6IjQyP$sMd;`aw#(d}Xq$_dETnm&>O~rGpFCWcCdf0kkF0 zZWkY$;z7v3lqTn->Rg(vM3d8RM#Z;rneUsK*Ck%(c(5cE7z2#+Ryv=G7k(SiWxxOA zq5an7VaEr6IvAbD(6452CLfZS*-DWGk9|2(L27%t6TH@LaWj%G1A^+ax=t*(!NfU> z_^wkfTH=dih}fYsuDBaeGFx{MUYMfgkmD zn{9{R(MaRm40o9qcUWVdxB>vBbzeS^at`yo)zpm^Tvw-jsvB{(aT?e^#?rsJypZpA*0*o95c9N`7Ie23oRNxR!zQ&c@&~0-8n6e9i~NuqX%mmupj$ z4Eau^?dtL0e6xW$$HRGuf+tkZ!h2KPq@<$Qt~Bj89lMs4;8n~7(Am!|`N_H@C|xL1 zuK#$@komi3iD#BMVWg(ht%i^~32wLhF%8pBN%bR?@fnS10cUHjp_F|@{_hq#fGo!O zFH+)pl0786uT+J#@B>Q7w`JE98qzhmZzV}DvV5rlu;+=#O4-FqZeS~F<{;0J`g$eK z?=^RAOa^%x-7_4m!?Kjgu9UUnVLP#yF?(|H!6$A?i*HZeWVMqmw6-7z9fFgcPpoxv zmJo(&>UT#e`QTr-FkL`OBPgAG2S7hJZO8*}$KTFN=s)NrT)(^^a^{axiM8ZwsJomx zaFhuhZE!~ZT7Hx)+15D>qNr5G!0`OI=9+I%e0bN8(O&Li)fqgeWI2TbTyC7R^|opX z@BKYbGAWn|WX`^Jv(t`uBVk)vvzI;E;eHsw-Am!`bZ2Jh#N*8-KHSAFF4+bBaB>|k z+HR?)6>HMFU(G#$s?e5>0NlLOMDVJ71%^YQNaDPmX+hb7bcV-(h9)$$p|R$K`VoX09Rbv3*k8AVVneBoVu2Wp~VYlCUo`^BXi}1&K zF8*YrE|6h*v1;T5LE(ZGfnxjCyz=6C^eXE}9qzdL&J_#$!OzFd2LOXi86B#7^7byP zj3;5T(<@!a#+~419XkFnNx$XCX-p-tzJbeq`3}3=xqGKiwfrdhniyyJD7(vJzu5OD z*_`WuRA}+W$m2}AA~P{Q@gmKTq|54}fty0pQq(3F=WgKohea6X9K2y!35tVYX`5|k z391b(LgL$FV6UM4f}Y-14M0c;-}Jem>#P+$aenM$a{chs%VXI{O2lnoEcp`esfvDc!8j;TN=WWe z?yNHJ>NVALTX~vZ2LN)+)R5?Da}tc*OFUH9x_;#+J8J@v*Ogw9;6yf;JvimXBQS<| zWi4AiI!ehc9g$6LRge7Rn0(&K^U*||!VPc;p$t`NRg|m*)k7wM`-XQVdP5c|t{)rk z`8r2UKc2X+k=-C}IsZzGzKmiZpUrKTo>yLJjFhM6URFR@5E<79Yr-wWF^=qmW}{pI zl7vt{Wf2o+du5%TTpyO=i7h3@w&Ty0d{$q(MAK7qVtG9t%W%Kq2IE$0)ZN%&$BL4Y zEB?9c+6FH3jJe2&w;zIm3EX$MCvLB20k^fB8yPuROs(p)Xcenkvsn$@&abIuGMtR{ zFDy1l%zi$)R|404RUS((R{W4V)iF^wF()i(TjuJ@kcnZ+bp!QV$5h_g4tS4$;w1Iu zy%R~g{6(^P$()ZWC*IjznY&HjS#zd_pPL((%jq6OjP^P7iAQKRg zpAQBX9w}*d`F^gNO$_#tsZ>`l?jfr?7)ee{VLf(*hC6YR?@);MAtM;#)Ct0SH@5P(S8BW2vxgc-W5}AFoRp;sSeUi!- z1F0qSR1Xa-P#6l)Ob$4^Qrv6+BpZ$6xui(+<1K{dUeE$yEajiLXup^U8S(Zy|-kZ$>JxL$M!bY@tK8V~k06$;#l;n?0DnD`!&&hMFv>bi~7qo=uwZx14Zis{|$REqd2M%}YmcZ0qaEY`sW*c(twgQOXLP#ucR-vYK#zbB| zkhSPwb*tB@?3hl%;!ZzLyUYn46FG^Y%Iy_ssqvPB7qTl^Oowa}Yx8L%0_ z@&mXP3Q3BY&*Dz2-3HGdaSQp7z#B?={}h_k@l`Hw1whpg0gAPLMk2`@^OX}&Y9)~X zJ%T!M1+8ZH)BQS_rnB~o;mlrjgjT^7!1xmP9H1d5w>mNCur+M{bqt7uxP{gguUb-!nE2___A+v> zUqDQEs6-e_l5Tun3r6&G8=v%Qo#Sqy-{4|P}`OiEG~FHU0D`haOSl>_a&3|)@d5IRy`%7 zYaBwK~k5`W2Jh zwOaY6};Y~pv6@_UAPa+SNIq!*}R;IZrYrVu)0%r#$CCM*`+hk53s&1q=@v zoG;*#)6uS9wVu5loQ!gN(0KS{2_c58zkj44VMQoWg=#q~cAEoS1>!KQLaZoBck(YE zsSj|OTDM?TVzKq4j? zfVMnNOFHPw%vvt9#eTB7w%*w~$8loJped$4l4d#ON4Zr=+a^8>4>})q z8z(oJdPr8Uyta5DW?rjHzDri#+Vq8x<* z?2k5Qc}ZKYa#}rio0xcPre~XMj|ySO!9stTOUcT$a2DRADq@7;CT7|pYidMRkhIC| z4Sht1jTgQ77W{gzg2>3uY_APJxYQ(1vbGCW$}&|qXuuaK)FkYv!@Mky4ILN%J(DVQ zh0d4d+a+?*tlJhAiH0k-PubXT<71drqUzC`@{Z|+sp1wmadWtyADC`q-sB~L5jbox zYbG?vNVN|L7jOP%Tt89v$xrFG5*og|+L0JWb%rGk#+z^to?_q0H+6u#I;O5Y`;qj$ zkT{rRsLDr9c`_wpnOAu3uxXp9$%Zm@); zh0ijj1bu>V-)l|LwW`|C$x2mPhVH))C4a}AHm?Xlp%UH4F4JXdv=9rjg>oY0Y0 zFsd+;clazk8>306#wj1<$4Oz|v|nV)Hm6aPM!#Q(-TB?Kkrjb$H&Od6L5`>*siDNMqm*!_zi0a~aT{ zw15oP+Wg9f(evfDm~2)E47w8a-HWLOpU*xqyf_d)##f@7dkYtt7-xD{N}#;5!S`+6 z;%gJVmmmvTa$7;K%7$$mV>;H-Wx2i!1};NOF;E5Dh?cRP5o#V2GdMNy+K?Mf?D4 zdYX@i>&pp4%GGt^S+?6-x84I(m>kQxEItXw9 zC=o@>srhsaRUQyqM*qubxZlXU_~@T%@1wu7_AIm3HPgNJ-lj73-AKyo&Wwx_J_A@X0xv1#+?vh@N+I9 zBr!?Ux$+8&(8RTV0B1-l7L^r>oXJYqY|55jjZ1URD1{S7!a=GF)W+>sH4heKM=T|1 znImI6(@bS+j-f)gXUA1#6viDGlsO5rx8;KTk_=kN_J?K%>LSdv4I=#_z3dVXDsc90 z;ccXSncy}MP;w!~Os}_0nE%g51guhRvFx6WrRIh;cz-VcyEAy?!V|b-VRDCg58gdb zavAm|zw`5qp-M8g>`X&9F*`TbY#k6PdGXzSu!ehKeNB0#Mc6=z@@?sw**hqq64tr1 z(aVRJ@CT_CT5%W2q(oovq;AO8OtEaF&duv~XR}8D1N>x6CM2vgW}2)CTrf zB(!ewV5ZBD{NTBCu_IyzinFgN=IEY9+EsdDu@qZiifDA|z|*Q@L-iz3xifZ2(Z({u?!E(F4}>AWLyrNe<`R?0aX4ftuts z(U&!Ymx|aTR{%BW@~L>D26jJ<$c@4=5a^uqpgJC&$}QT}o}$78)0fg=y~dWVs~5>K znXfDo^s+^Ef*Db%&NCthGO9KT>NP-Zune2CDP0(pIY%v!7-)`MO4+tLio{Qcmdts3 z2Wu+xE*~~fr7dmLFe4lzGfMH}!Sgwj3CfUAx5@}4*D+OkT*S*8Ba3%nV5!#a31bBh zYKCXd$464Ab+_P^q(t>ICVJAr6l86G3KpnMp9Yht_Ah8Tz~p}o(zb>dZ*Jqs8!a?~ z7_F3S-oZCccY(XZN*!D|ICv7d%CIgdtqWm^120*A(i0R_E@%6{ny$+j_h_|2^QGVU z^)P}=*FYQ{Dm;gw@-eEPm@w7(x%oUBJ@u~L-MFt&cGG`&7~_=O^a{-JX#z?{k1B!! zZ{>M@aWw3B5KYz{Z`ZqyJ_AGkz%OM%c9_+Gw1pg1(EnjTa?Xzi8|InoXaz?f9WK^W zl=lhB?tHZ6X6^9w?7$_s_RfaAR|?Jg$ZfMD!Sy^!qF%OcT;)aFVncG+kmuw&7w`Eq8wU0-n+RsOCiLqB0!vMo_Wu&`g3jrY??AFnM8W%PG!>txbsH!&X z6OV3?dQg6wA|XOx%M$u3*Ng77)y#5NUfM?P3X zKi}2NzL>aTUv)EWE-q06OA|VpDA6#X<{{JyCC8W;C`p1(!|F*`Pjp+Ow(hdZYKprU zE2JHNzr7yTL_wxin?l6Zt&a?WpxAhy4^gR3Ce@N`vnk?ib1|I@{q~<3?EKaY1Wtez zB2v+?QAK;rYU5#6tc%O!TG#80yWV5O2($?$T93CA0o6Kk!v4-gdZulYnwe|MPK>5i zAay*r-Rbmaarie|#Y+4Z8Zja0lBIZ+uX+||B#{r_X-<~YKaVh#s1JI}lz)qo3Vuv| zMyUSwB5uRsDbd6GNL(F(my8F#RPK67@gwxW@(2aHkF3hHE zm1J-Ru>;tKpOZ*(RUbteP z*;5JRenDlQAy^1Z2fcJhGofidM{GAuJ94O~$Kg^d=^);C-{Si=?S~H#bru{amyODF z`k;^^c_Fyeb~aZNS5u9B~bZX=YSaL?s*C0bj%+w-q(N%mf6x?h)>hV88V5d?JIW=P5_BJBLV3LY92 z^&?X2oo*Yp6&&f8r4SR>*1BcQ6JO?r^NLs|-B1^CPq|^dct$7!S?6UZB2{ma+)2^F zMP1@yx>ht!e=kd_3`5w!4QcfOKl6)I0H=JXVaqE}oIPhiZIRedna}Qb?;c@+RHGQx z3-ArQ(H*X*JIiu5uiL<4pWha~SOpi>nBH5?4xE%AVgPGwpYoO%UIgIu7zZxdzD1`X zMFVtAWqGsa{8XJjM>RKVqJ#&%+L-X8Ufop-KQ#A>x?@ zgOT{%gG}!N13iZpOV825ZcO{_`WF`9{DNs}1CY#KR{%-`Gd;>g2}v=8$+qK`nMDHE zZ5?eWE5sF@YR`}l7P1cX(iJ|Wg*pJ1q_Yu< z9W+!kty(ojE9GY9j)xTWw0M$DWBvis$#t&6_Ba@Q2FxvW{Sn@N@1PH6;@Y$ zqsqJ1xK_vflj3JyoAh=)12FuGA&jA$71qOs_C$5?mOJ4phepQ&ninaFsAh&7plx>iMIY*i=25F@1}pIDwyH#bd2Ee6AWf{c+v964u>y zWURmBl0tHuP*}hi+*VUc)uzV5Nf)7%E&UdEA*GF+CMY0$=}Z(L^G6wLP~3dzp@6=eAS>alh?i z?BU@0Hk)D2qyOVd{`D6To}zsotdJ%QyjM-=w0(#ZT*secS;m9-`CF_@a)9wv@p_5u zQ{$t@j;fIBEW_%}L=iDaKmxYDj&EknxV@o8$3o5Z<*o4Fnu!f26<9)Qutn^=DdiDO zAfOxYEy7X0qKT&UC1hmgL-L*BTEXzu9^aC3U(dfxLePT^zur_TI&d*jjYp(Uc5BF_ zUB$0gKsS{|y}Sx(eDv)4P5yw-HKRib2k-+QO@kMKBsA8B;j10qy{;J65f(5ZDMvxy zF3kJ-c9t0P4pj=|mL67zDI`x_~_0)kwT?ip8oqV~c4hk?R&*l+fmd z{JNW$L>>eQA+X_rl$_v;VaEf3YDal~PpGHv{H6eEZj5i5s?KN{4Gg7kLA7zLq_1UD z^dF5$wS_ZcMyYZrA|rbG$q^|r3r%tJc<^#FC^k%&m`$Y$D4!DyT77wEcxHu3@R-rl z)%-F^U|c2``mIPry}S%yc;}6dq2YF^aK(nQ2W5=iq%$MF*l4UCgG~$b5@SAd2NHyS z1W~O9GZ_Z=UVM6VNR{!~+O)2eOK%GGZ}@L+aCTm)S}sl0 zW-@GEe#lv@KhlYk7Qq>pUJs@^8u}USFE>;JL+mu~v znha@mBvi_Y1z;u^e*w&j;Bd8?N(~TnQUW)a{_7!a^FV~BP)YYmlYO&*8h1jXPQ)9o zcUBKyMgf4oxHnq(yJA#=8g-#y8~FC!9|%RA2QLBUcGwdvsu{Zg6j0)JBL=i$gFWYE z)RGc44i`=XIV-yjEu__PnPJu+I~WM<;BN6XOl z*}*ujH+PvlYG)O%Ij8;Ttm(UPM6P@iGlw2eTm340ab}#@7CY*aDO;4`Rwn11nEL}D zt%@^fxM~ML?c^&1otWFKw+%9Rw-Wh7sDqt&JW)uWSz!6-14X!utovq>_>&i9EB~pI z=W*uhI(8;OBuKG^%YZ?&uuo(F zlz8SOYBDIY>tNNOQf2VakuCif5=5qSOSI&mPOxEL_ zH82Hfg02~>P$RJ+4X83@qJ1da8-kj;f4e5uP!)amGy&f}^Nnco42 z*@fXfaA?PyO|oTSy%9La7wFhC{=@C+wuih7emyTZQozs|#KJUHcBiunJtMju9)!FZ?AZ!>{?Z#|=+e;+A0lc<$s2&cd z)ka%^`iw6Jwh#91NK6LL1Bsz?hHFQ~`p}zLaeh9px^VG#??Z7oR^;_x?!^2ZC)~JB zl$4+Bs{5m(qiDcTOHYmRQ{mSOtACkV-^_sn_>c+hxroDm|NdY8U3nJ)6BM`yf3^qn z{cE{HvL0)I5@}yluI_nR4*A~%w&9}N$e!Qhu}0#l6D0&6p>+1kztAE3zdtV`;n1NW z$W1iwultd|pSj=ztf%VA#f|sBUOxHzxb&R_&OkzmmDbV|%`42a!8i5*GN+;?`aD=5H~iI?q~0Keuhtwsgwc1; zEg|m(ZeBhZLA+!ntRgQR3Ta{8&r*Nr(8%zchsX8;pznV?r1wrE`vmqWMFShPFJeXN z+(Qgq{i5L>dVYuWvRGzRjfC&W`-J_x^UHQcg5=aGJ!lP zVvgk_1g&a&^53UO|Jyo{)_L75kgY99e_!7jKeQq=Rn;+&a}I);$6pKLJGoHAf|d0i z8SWh(ra=Z12OanHkjsr4#jFs{t*w63kfmqOsK?mwNT@<(vpVhov!n5Rgr{U5_T!`M z;GCX{qi914|U5jZv!riPC-9;p!F<>MXWE}^xtxZyBis8qvY{lh07 znN87-mO*|_3Rn$_KGxiWtpar?)B7##__oAz<7A&+p#^d$_*B}X18voP*3gyloTgJ~ z_L*CII-Z~_yL);{v`?;W<$4=w`C~8I{J^2Q^L=JN;8kPA@tx>r;3f+RKewh-#ecl@ zzxD(XLT@xu5909zK8Gqr7a^&H<-<+&E-OL7mYKhu>vLptJ6th*t@!%B`X&4BtR9uf z`aM15`Mo?{7D&9let(~lJ=JxoRs#giZ|vykc)kW-H2^$?V+7azavq2B5!@)o6^v`> zP=>+?dn)0a%KRUrGF}827RUQ$=XDm`=*b(lK*oLl#^E}yN8Pk_KbPFX%CIqB;u5`5 zcrSLPr}w8_kthqs9hJLwrNm!SZtiLjn;MywGR-#be;E@UnMfRUuup)GghlsY7-z{%k7x z!c|Qc$jrr?!cWOsl$a1h7OYktT(iDwOT;oYp^ITX*-$C#5s&db?zblsK2`8Oh;v9* zMkda2#P~#2ZS{IcmOk>XwqbCO=f_#;L;luz&Ft->xz+1R>?KRYJHyB>)%Dg5Kbskf zip$s=s+k)X?|Ho z-fMn-D3xfoq)V3&@IbqQTMAXT_U6@ZM;v3vtI^#}MQ|fr@tmCfecvrP28UfDkc#tZ zl~%WqGQ!NS`v)Q6rU|q3McXWkrRqX#dVT$p7Z8sDIO1}{Wq72BF>UG8T(~x!rDB@; zHkO{eUKu~@2To7wh3u)AsaL_04UoWee1oHq&!|Y_cU2-lvuEU+=<%-E4-H*@x@HUO zvbUB(K{bY%0FuSt%DYyQQYA(kfY1GC46O)~tP&xe#>^5k6X!9MCTo~lPEY+eksi$6 zK8*XW?}*>o+$iFT(dEYT!gU~9_i%k@N^gMhy^-GSFDCfBT22N|_-Lz;zB{f_3Duon zUS8BSTjsqiXF}W!?zQiMNk1NVj}llMkmjhF%K!sBXHVW(i3Ur#92U>uFA~|~9N1)e z3E6ds#};>|Npm42*>Bec{$2I@_g`E#|8qyrQmjP8FqPM+d6(z8yBB>x@i1j zcSI~6pce!?KsN1w_)ubXpHPWNxR|JN?Z`;sV;ezV-T5vf(3nhaQm@!#3E%*b3i4i< zYr?sNJ=Oiv(hdO5mT&EAu~nX=SqWH_o+^qS2FQr~@ZJodsoUird5|+E@|e<{OUUPo zHZ!0@Cl=~7%4`FB6z4w!5)eb;S5rTFN<`s}?d#9k)}X$7E}sWyW5xtK_T=AG_4AGZ zSgHRz*FAfC3##iCc04a1-^{n`y>a_l4{pkw>IF!}5r;2(FV%E*1uGgNmjM~ubTw0qKkhXs3}`V zEiJeP)*ar%4=8mxS0M3a{YJcgyPsKuz>=gdX9Wz|!fO`Z#NKu*&a;^{Y}2YyCzh+s z`-#$QkOqDNdjb?fF>Mkiz%29OzkYJn+XcVbmoa6o{4eY?@6GipeMc4m`h@tzpcq zym7rt41Nxzn~Y!Q`?;`BEBmX(o zJ}xHN+}hP)ZA}n(skHkny+Di5yihV~A|@F>!1{AP(qW$@v7Gc6Am2XR+{;l^H;pi0 z!)Ijh7UXli0Y7pVk6OfEFe_ zUq;{rcil;oeI#IHr*!h{QQ!wUs*rWb)!|}D)67V0cMk%U%LjV235#jmNh<*HDr-x;gJx&m!Pa+czWU0?nk?m zYEfd-jLBF7ZVw6MOU(`#69K$I)}4H$|IwyOnBMxVU(NRkM~7#Nm&MfQ`G}a#Vtaj| z>x_r7mJiSZwTyhN=njB6#J{)%820;Zo;1e<#p!yCUH3gI6Wu3$J1qdY^T^iw=xypUZB+_HJ#W zik?FPkPutmS{x9qAw3D0#f4&~MTJY5|@nOC-#PB@?WX zl0CzFi@!&APcSEQb*8ApI11^TSLLZEVu?|h1Sp;wf#V*C_9sUqElDuo0v*Rur&M%R zG$$VqKoEv*E{`Kj9w0+ER7~aFhDt1<%k_>6efg9ZyO<7XdyWm@CQ3#v#%Lm2vOUu} z#I$@VkZ?&gOWiO^(5&SwM6GuZL>9n_10Y$+$U@#(PexAmR+xy9d{LEJik;i@wYgUx z{S(!wkIY}LEZPtg5mk-q;nEv#M(J&5HuPK6&gWy~iY|m#S3!&m!6m?_GY0-5 z@B>D9Mu_F&?YJ*b{6&mXnQvd%O!g4dt75gK4_UYuD<)&wA;~iy=t^5c#-8F*(gCEn zk%a{rG&C$5hXAg4zC#|+m2!H3RNqpRH1|k@--fCJ`xcM#TT=+ zv^`FgdwrMRwc!OE3Z~ugZnqQf!NCRW&P0kuk?!(l68qx1U)zH}Kj~T*Ayj|OHp|5Q z^!%f}IMo9oNR46^2q!0JVV6I|DhjzKP{Jqk$Y^tMP`FBIX~>fH>1-JirDU(QGxwT4 zy#|&~Napb#bmd7S^F)d(h zv4fC}Vo=M2X0}kBxy&G^P$l1+#l&QQ11g@n`z{a}& z%>!eFlf=DYB+CQH-;FSR-_LAqIXZkxqgpyIUh0h1H!(430Tk5MK75e>Y&-bPa!c@{ zoZUHdY(PN}p=wgPx5C6U8}l*(6;@|mQ6J2-1jMs;EnHyqBftRYfNO9J3P7iuW>oK3 zPyo`ae4ahdAR4d6*q#yB175_~TapeKlCFCDe96&|+|{wm(-~a>YEl5!Xx`IF-F)~b z^gP43XX3~)kSsbhTns>ENTCJ@v^yULTB(`v?QYkVYUMg^A8xYq@Jn&!3aW1l+PUjt zUNgrEhl2&qhBDA!r&ELfceTO0jt`97KJtJ>6sDwdDW4 zva(Zuf17^8cR6!ryOQ)~yUWZQKSNLO-SQdWlteE8hsSGvKf*sdLFJ*vgm`WedG{?t zTgDX89=$tmw1qtt6a3|O<2tX7CXky@*91!l!{rt#05{Ete!jS!SBTkI_M;OQcCs8B zdb4HwJEUft3s#|2UBFs^a{EIOwsrq+`%CZ~yf`B9uJ3|0)_<@QT-_!!nHyM??(*Es z++K`_Hfk)5t{dzS7J_k+CxT7lwjXT=p%8p}p)9OYP0}<$0m$mgjH+HLq0k5`;$okJ zmBJ#fcWMiTy*2~pN*aJsB$Xo#v%~m-w%|O;`1$2&x@e^Lu7~UKsLY;205^Qo_6Di^ z*&__t@iBiQxlY|EQ)t~%pD8ZcePf#j@e)nnIBJ-h zbcX@sOI6c8lj*{r%d15!rMS?Ty3G4Ij(z=y|Coe7x+eW?p&G#&u0a6p2CB-M+F0h5w#kDLxw1%cd8V@$z_ zIv}!A_ZC+*^9Cc3NNFI2uaU;%J8p)BeG1wguv3zm%MGgvB0bifE;d1ryjkwP4&%9Nly*(Bak|La?47aqH8Zt|Kul%r38zY^ zS!U{!kW||+u-wkdJH*Ueb$;6%NuIJ?xmaG)FP!m?>DY=nm9OOJM+sRX%`{noa-x$K$_-z zHaVrP43O=-Kd{YY`Sm?`U$ml_G-qdVF{NO{i| z(ttBKaKZ_-eXAM*Z@X@wq%^sMQO}6Sgw%ZOQcr9p3E7wtyQOY--eNUOK;U*<^yIOL z)8*9+8-iSAk{vdbI(3Lf`vT6wF#)2-%&p6ZF>F?!h+3=qGwx+8gfV0KXLdSUY{VY2=3FImU!FJ++o9)&7R0HvYQk%( zTGE`iXbxXqoIh1}1AC91D43hT-=AFFKW8^+pbRR#G4gY5HnpHLecUVpxlCK)25(JX z9cNaJd&V_;(gqdCc=u=xkP91hlB#mZ;_RPmanAz%*Fww#=JHVY0dh0xiT9#XcC5N< z;*Jtd3WV@C?E$+Q=!UUCBuW?dlDUPH?UsfijvY67D!?U)(vEls%52KwZ?P(R$OT(wwM**QA@bWk!*aXv$yz*GZDswzhL1?9kSWmu2WY}z)4P|dS4APXFa zDxamh%|Aahb=|kAXOP-#>ch&m5P?hwpjtg#=m!kGjiJtj5bzqHS;lgh(8iuz2=;EC z$!;~0T5$tp!H$<3cZW9uIwBXM76Y2r&}qJ;TVpc1`?YwJWWHUSQv0;OA z86>?RJT~_h5tq#;6uM*8;GU!C{AUsg5VHlfqK|p>n#-b>0fz9ivo0|plFF54Lu#C) zV32R=llyc9GRQZb+o6?HzMHCkcI}=mZ0nX4v|)5U4o7S;90}k20CiZ1?R8%EXu!$N zr3Xf&1v1zisf#XOsA|+z`t}ao5KcO!B^WoK6RZM8kie)&T057Co)sh)V<*5%#`%F8 zZq>V#PQZ5kb9ZH<^+?!cdZ)|zUVrH}R>%>F7E5t^B=KXcq#(Rk(IRwX%VO>8ABi*7 zf!N=?TGy;+9p#!0dPl(7oQ~~g;eywDui22kG0&0$S}4`9&u~M|=heDUGr>&HCeY5q zm$}K`v^(;;dt)!9SgV=SZdF^>`sakMi%c&KCd3Egg3Cv1xxVdeIit{O%|g9b9pk7w z@E~Supu?&bxkH&54j-LJku1tw(XQz)8vlGDR^sG!w2W>XWo3MT`e5y&pP?DO#iRsW z&6*HbTAXv4p|(j0T3{$U_UB5T?XIq~CRLc|U)K-aX25Dy2gpTYiEbYn+~~`#fqz*{ zmj+0%sJl1#e$};`spMiB_c(=aVy{c51cB#!Dm*;w9rxr`4@>m@(7-~8$Gy6q_(LGf zaw9S}4S<49%JgHzmJI`7p5e(F!7n%N>zsA%9K9nhNQ{AG>huqr;dAKT!wdE8YgTD1 zm`-(meUn};T|M%>iK|m&t9m4mFgJH=L9!1IU3!<)(;{PhMnWJ_B`9!b5!nq7V2DLE z^)#(g)11d#;Z-s@bA`Yjjr^fXR#pMypz~-SngqsW87|q|L@6OGj%*yJDO)@}?j-4bhi$=46L7a9@Wa$03w0eK>=8vK^y%E|L^cJ<9sn*7K zT;KVD``ewnV^^x%)^CIwar9QA`sdJdKTiv_kUg_}cOK04iW7+oP1f%!tzl52iAOH5 z$5`0*>JMqFMVt#qO`)Ikom9kN&NAnaS(R(A-{GNp?QYvW)I;)=kN7uhV1XJamxX;8 zB+Hv#u=bIw8!_&gnT|_X#(-*c%Z9?%%(Oz~HZ*ItIr!Q^k@hi;UcpkyLmL76_DRaz zy{Tz>nbPk*>yj~>DL&7jc z9#beZ8uHOzwh#n*e7ecA#`SQng$&=W(ppM^Hq7prBX%uS-MrG$e6nRoVdd?HLySmq z1+sV0P~|uBgpWzX+c7v7S$FxcK*_jIDt-EN>xhK!Qsw6|VfhR4Q(4aB zySafJzO&pMgA-gU$`4Tj8D^T|2l21afF^&AN9G)mI4#_X_-I;qRXrzU=SRh~T{t!! zxEgua<4=~4sSQ)do0;rFp+?6B%nst$Ux3Eo*NjrB>%^Pk24U?5jYZ#a=E^uJb%ZQV zVK2>~yk-u61tW4US?!UVyL%j!2~=h*>`y}+@k*e4&%Qj(-RjKu)d7rS*IDLiy)y21 z54OvF$eO4>PDk7FZ47};o2 zfX_%bd7Zja4^nhbVbSkArXW9;?iJx4!l9TG^6|$mIv)k*w+v6Q3y!Gs*loIuZb6A{ zr&tq~Grh9IJVpA_gc8;Ky(U6GCC}0~7`xt_DmbZ*iUU_ENaY0kdYkKCgGeGimepvN zay$_9Z+q(zO9o`4nfhAa&fJ$PJ2MP%^|fQ!k^X=O=u=+!J=n|Kd;o>3BSO zMOyAXP&onCAo~Wy!q(rpWqW6E@!FBdLgKu2tNgdB!D?3WnB0;1WM!rAB|Ppxn|pHH zbi5ci?f+M6-yPLtx~)HoV4*n{u+Y>I3vK99gD}b{QUvJ)EI_~zkP?uVhzg7%AcHjN zA_Rm4A=FTUBA~PY0Rn{3iy=UyC6JKhew=geTIbA~-@S94AOFG13h(!Rdq3~q&wlr_ znLa=>SECVi+*?^9WiRC-A&IGoDUyKFaOeiI!*@n|l6!!XK=DacS)j}X#2-5(a7(h2 zA|s@x$VlHx7^?cp{1{$@7fpi#7w*qYhOFP*BiBkFYK9D75Vr%n3w0^51mSfpNI zIW&kR288ZWDI7$cU2swMCqqGnBh6959d$ZzMS%tVhjfbH%c7A25*U6bY<-g56=el4 z#wylm6l5+N+asM7mL|^Z{X|H%lcm+ssz5E^YRZro*zr`A!{Y~C8YO-=JM>|CCXE|F zlUWyj;$tuUDHiL7w zlP^t@Mnpij=lwn_xae-E5tH?+q3uUUO*V$yLJ+wm2So-_iTo7o&#^jde9(h|N zXI)%O4~WFwTA{^@HXhUruX<3owE8n8Iy?M?t={(S#lBEVDs;}iJX~Nr#Hn-io2$Gw zeFnYEZr6!jA#Ri^MpKu054vsUQ6KCZgU?8v7&-?OkB)`2xuvh|(ghvUEQI?Y#8@EI!hG9=(lt2ZNX~UI{O9cvio0(%@goV z=BN3YK)GYuhoI{WD9mdV+6eVamXF7+%!=o=*}H@_9%B?iqzRJBG$4MFD> zR+m4^eaq*D2U6Zi?2|X&R4#be}+u;g=_wHq<~Dza=iDhcK$i5v@xz0Bzd%s z^gwZ(YT!rZy{&Az@JSRNeb7m>poJZV?W)MIs$GYElS)3+yeC~*~}>gjP)53r0Xoy8y5I;#x^gNAnLw0ymp4M|$E zoUIK20%u~))KuBPW_jFm7rB&oL+F9f<`QNUR5A90=y-Z10Ioku3&$g(>EJTIMYpoM zgxQFiyOFqhB|YN00%ve+DRbqHL@{B821;;5BvjJD+e9qG&pO8ufaCQ*6vDFH*0r& z3`mMOhh$SOg=KEEf57dej$>ilpX@lOaaXJChtM&*plG?NC-I;d{d42i{;7(1f(Z&E zbwTJ7@rLRwI8z%iPGiaX&>faInwcK*+H<-@5c3RRWyme}#tv&+RR5EQ0G-B%Z)H68rY9LbHx~;2SxS1_K&(nmH2K61ee?GH zFv*3Z$y#m*_bn_4REWTJRgaz0*zU4XU$V^z;12Um(T%d>BN62u5(B)>DGSr3a{{1a zBtY<5qxx83XwVSZw@+Hc+c!SRmhHCKNXQ*dHK5qN*-JNz1wXQvKETbF> zahz5_Ukl&jwyY$xo==Z_S4y%h+p`3mWI$aXsBnHNC4{TUrbEBjG%Vn^RBX}~yX0>$ zn*<4Mkvj_!{C>>{M(dJA6+rf__rM3leB5+xXqP%^m1?C z1UOtgCU`z0zoqAz$r^cq2BcIt(tZ^9h<~@b`Bv3@X0TyBt6gxGb~o>zo-u_O7^z$& z4q|6Q&A$R4rf&;w{}ednHg0!2_sVLUM4*B> z-1^xZ%R@Kr;5bNzo7el1LkWQRQ`k3pY8cKF+RE|Xj4o^MC$=d&@)R8tFB0KuH%Mx8 z#m7Pzr8`_uLKa>w4kOf$E_0`U#gcb*Nzu|v@o`2B@~H(HEqwzO^Uw33b+{rj&Vk`c zvtNao>vE=2!@Fy-9h^Y2Z0n0HMQF9y;s}gxbT?^$)H#>=FG6vaTuIa2=qG+s=_r*j zQNS9?+q2RTtmEx8Ik{f&!`UwT{3d`dEu&)`Q|1Ro3eQ?p_sTl9xjS<7$*YrW`g2Iu z2`3^$8mXq+$eE+1hGuQ$@h;3mpqB7jT4`fp!A72OxYUL7sd0m&G3lnC0Y*2~H(pXx zLEo^BJisUd;N*j||Wo-*0ysr^7g z2L33m`|tsvF5*zur6t-Lf?xb;Z>TfRD zT+16OvjHuWuSbX+X4k{1$C5iF)H9&2T~weBGhKLRKmjtNlaMT=so2zY=8b{A0^Z6{ z6DcuX?+D3BS>uv*Sk}Lv&jdfYk`p`i5b{(}n{?delx)rJzzZ?~E7r&_hEARj4EHWv zl=c`tYV)jt2`b;#JtyIRyPh}p-pfJiHxqH--jb9-hX8alsnkb4(w;dI93y6X#OS^` zXysR@@Zl!0d21RV1z0roSkAjW3dHtul^6~p-M1=c2=-g&d-~@L0-M`4y9>9Sp_{0T5VHx{{$db2)5+_C=+Ccn>Alq zy#cxy53f*WBlTYh29D`fEd_;dV-b^qKG^Ygco{7j`j3J?06F)WtYonO>l|;M5%(aV zRdzQpW`~Qibq)*6@EseNeQ#@$G(2*+uyROE(`6zoHz!HifJhJz9m|83ODm%4>=TWWVH3K^R+QA~$tBc>7(-nHfLz{@Qw zbIExy3ng!tba7I$o-VQiNL#tnNy8yv=V5CtTD z^ucct!U~6jYmeH-01W0iE@S=P$}lSXRokA0_9IK)6-Nq9PSw_*21_Lu1HvSlo%2-z zYr0`6*^aNR(4`}P_gM6Q_W2K5H6EZ5Oncgps}*AB99 zKpN{=esX+cG?U<+a`ClfU{m*s+Xdaqv8(BAHbBvcCauR>yY%MP1$0@Na-A7|CQh@K81FbeuR!}r0rBayrj;PK7VX(^As?{naclzkcH%?Geskp<#vP+ApR(FAk zQA*4mk+W0Ana4ojFzO;gA#%#HrjYk#zRhW^Go?!_pO?GRjUVqE@h7Mv*Fm#L>s?9> z6YCEreaw@y_0*qpFC47qE#noC`jvprh*Y!$+>&}c<$BlVJhb#vlPb&Dh^k|uJ4m@r z915uemtzVF3Wgvl3LXB>#}n2wuURv$#)dyJ6 zVWPzUn_P1xs0a#?Wqx|B5|qYmB+wB` z1deZYS}5IMouirpK_ZxqpUxq}yPy2`m?)V)nH3^b(DaB8z9b0_Kk@PT2IG3U()oMJ z%;V&KyDEBVE-v3B<+_p4llt0nqXkjzrbw!TRJ}`8{QlED6CxP4$llqXO=pA9~3F7NzOYK;#};LhJGUthUGRYw0}bjL?P6TLLL1x#1^ zSo)U3u|Dp3#*ZbTML*2C+DQ&j??IG;p zpm5__uAeP58#kUPteTT5YH-}kIf|ye^aBw%L}J+=hqnG725FpkxLqpJKU|us4S&~} zrh0DQUg4B4YjfAP3k6PIbS$dwr>t+udTx&@dlRxjEAQ%S>Wyq*Mae_@a7*<7{EHxJ zSAdDPb{p{89UNRgJmx<>ov*PCTrUd+>xAEDiIv4TU|y-7%a~4Pc#WOc45OF7fW>)T zx{i2AGY4l!^?EmQFWQe&W=A4-!?mw9JHVq~1gF{F7P)7DP@2zaM2J?sfWA zj_e#FH`0@9bj7Ebi0X>~gr6#otImEZL)}-O&pTC7>+k->QEqGq)=er1bL`fh-=?rQ zaZK*FxKYkDGBDSgro@QS&O|nSn~-fA7Oi=Zi6+&~SH{w-i*70c*ua}@>iT0Y|gn^j-{R4x8?MF$Y=iByHXV|}Vhe7JL zJ>~+)jkmWpVw4h}xv-w6YlaTSu0|)}3AOGsh1#_jYm}GXpHXRk)$t^qGS`(UIeIsU zog=WY9+QRqpgFVXpB^Mw;%VRuwv7ff718DS5UcL-^&lk3zFWU^n6f!%-uGyvG^Ig? z$Nl^SQC-YDXMqx2SP)GzQEbqznWV4PEgg;7xK4{9v>)cJy!Y5tBIjxL0H=VO)<%VD zprG0U{T9zff7?L&vuEgHSA;e@u6I>uJmXdG1~xi~@-vRBDbV})sb=Q!Gp23f_GUiXO4HzuWQD|{4_(2~ z!ICduc@^sGN}ql-j_VDG3n-;^)|jFXiLu02zfFXfP0-0v8_=@}XZG1V3xbfXkVwwg z=9!nQX4mZS=r0RQoA%ZXTDfW02#S|G5U)Q=gE4cTCOt#2L*=Wf@ znY~hKeQ8vDvG50GKQAgKSj`~#>!h&X18_rnV=z&`zPc)Jiq{yk<=v|#_B2L-TmsS_ zADMkEO=)8&RaF>daw+d`gIN-YWQg(g2uA*&*AGwh|+&1%$_j4KK%+h5h|IH8*!p@vmxvN0xO zJ+-2;^2_GRbWpm{UclvocL{bUo$#X3l`fD%J0uH<p5^pyo0F>9Q zq$B6GEJ$_!s3Bo^62R_NRkgRVg%h)V$QD1wQOC zC8w4JmE`>S7X6h6Xu7@s6%d5}bm$OmX=6A1*+dks^?4W*INjUdUQ3+$n37fWncJn_ z?7F)7Ol6*`>bhAtl0hHZ49Rl}+Aw$f_;ml9Qy{552Z!qR$PZ~uuYM`N*T%TK<#)z- z;LB1FAu&F1@g-D|cl8?m1>lR9Y=NtCemQ3NR{~@5>+WvIMz37;$X526;@{ftgLe2k zRu3j`TE8R}CcT^BA1E4)0wdmPiST;spT=3EJ?V=kvWZW`3hRJtvok=&J^32`p@qJ` zM*}aj-4dTWY3IorEmPqkWoIZpZ8}IfqJwu*L4m9%6xyMaa(U0eV_^}}qnAwLI33e& zv%Cfc!8ytqy>v~RbrX-&WvG>6Qfs1F3Q)RsMEH?Ae;-Rxus}s)bRL@2H6a#) zEeE+&rK-1dQVBX~G5=H8^*=knE2{~DtOaRwRNf?6K7l5#@Nyu}IEiR5^#N^Zo`uZS zWiA*}rOIXI$Mk5RWTm)T7ocl`nENUt@wmYc5qhU{K2*t-*4~M)XJg0^oQ%r_CBo4{ zV$N%RS^yGF%j5JOOs_--9JWGk(zdyG7ls)z7&&*d0Abko4yOUk`Td^uLxr?N{oz`y z?V)EiFJSjehJswM?y*9{NKoy9rjp6h`#Wx-<|Pd#$ze3VTI5Q=FlrK=!3Jc)QakJY z5`dYh76oRRul=R?_Q|}5@T=Wow)l4kX%1Mk(!-AI@zc?<=^&aQ?EO;B@X$tsOy}eG zBh&?3sVDFlSo*zu#_&CVZ0vA`lUo_|d1eYtZ~e?)@r*xzNlAzH@xceC{7!r@d1n44Lp=dA3vm_T~0>AZol(sN)Wyb_&#XgG{5}QdP5V;Kw0!$Y3 zz*@2wd-ZA6eXR$QTDp}2opYJWaeuzZzXAuZ9GgV@2X5K&Ul!_udW^jpX}Ac#FDUq>v zTMqP|T-`@>Bj$?k+S7jac7(QG*hW)jyi`4v?~-+O(0x45F173W$u+VAldN&hWjK3_ zla@};{5w&^?2#UW%vp{5YVs-VK0`V{EPW8aZ&e(~HbWf2CDpb-!3G9vxh`DQl?@tS z0`;UX1Twr5@Z{b~I#OZ-9IL%e<8NLDtcxKQLBrIU z6_{r)KlTnW%9N@JJP7rS#!7x-HS9f6NYq;|>r+3l-J4xoHDE9}o;ljTh&BEYz-`i^{LCa3! zPl;sedQ+uErW7tvrjGBD2l*anu!?W=I*rsv$KsN>^-deWV)g!iEOsrT!_GstS)UQ- zVP-^TdFY>(EHsfld?N0OBTcwCEEFv{`43Cm|Fl6EIC$q zBsd{C8+==4B|A2%Z@n96GmLf$=)IzN3{~A{|H#Zl?*STpe)$J8{;!KUaSTUClh8N0 z8u%p=3{h1+6x>_M2NtJ9Yy1r;fA@%g;c;2F%%SI=^e|yhcPdq^*0~|dRo6C>CPJ2K4)WyAD z(`%?-T+lEe~(xdkBcMhFk+t$seE;y-u8R%xT7TnhN7n{W4hjnIJ(%BQKg zJ=Y1_cvMNIR(MC3C$Z`(LDMoKBiw1}DFl8H2Cm3Lqr-=#knvvAwJZUgA_?(#B1yiZ zfZz={>Mh$&)`*t;DwkY~DVK|*(UJ2N{Z-+MKZua8R?9g-^tie-tR-nKWHojR zh-p*jer!GUI3sd-!tG3nw6M}9S_jsi4ETLcKs3j*xm7AJUA`331!?Ql4Xf3 zlL~0juN^xsQF`KBcU>%cpl_kdfINAp#5kxXg@3MMob~2|7Fo_I8;3U2Gz}L&Sfb-?LFtL-o`wC8FisU{##2M*j(1e;wr_%%cpncTHZTCbNC-=$^)!?^Qz` zL{vyQ+qs5|JtYR3#>PeZgR{;!Wrz?xiGETJBx4fw9=qo1w`lVCPP!qKa>L`1qR>ar z2WEVJ&vKN6`XWEnKGanVA1S?~BmPFP4J@NrY4Zd|HE`(Z(Nn*Mn$$5Rcw&c8Apf^{;S^dmZSoP;~T9K z=J4h#ulYR>T|=&7UsWDI+56Y` z;txm`VIFC4EboEsaZeA!QZ2uH&O=b~ZB3$QHlhS}Tu=^f-Vso<6wq-ixp|y4=a`*d z9O^ULe|Tp0v4zvO_%TEA_;aHY!l{wfy`JwCg}MOnCr`oxFXN*Y9@mQfO62CK3ialX zx!)V<*HgPW4_Vmu%}n%8kuyc5y9cY_uO#meIQ7V2nBUUaWtiDDWMSSqu_8L)1=IYJ z4p~F@uYBza7!j9h4~g_hMO5)Quwk7GMWu(<>92i4ze?~{$W_&#WfG^hWu2ViMDwb* zuwP&qvQ@u7@yr(5B}j-|dDbZu$^CeL>At=?OODGPR} zKF0}n%IW5xl2<#YD33aVB3K?-U;K&J-NZU-+O) zN&&7=fNqL+KR}L1p9sXBwHdK1a?^fqyKuF{_=kw!_iQ&8zm2tw;ewRRVM{bgqFQoH`s$;!_U-r7q(rKK@{BfX_R06*8RnEiq=y#4sU01wI_ AApigX literal 0 HcmV?d00001 diff --git a/packages/cisco_meraki/img/cisco.svg b/packages/cisco_meraki/img/cisco.svg deleted file mode 100644 index 20ebebf1974..00000000000 --- a/packages/cisco_meraki/img/cisco.svg +++ /dev/null @@ -1 +0,0 @@ - \ No newline at end of file diff --git a/packages/cisco_meraki/img/sample-screenshot.png b/packages/cisco_meraki/img/sample-screenshot.png deleted file mode 100644 index d7a56a3ecc078c38636698cefba33f86291dd178..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 18849 zcmeEu^S~#!E#4Tq;}?6chqwB{?k=6jc5D4>l%v(rleJ2Y%tW zDj9g7px}|*e;{M?LDwiK3@FNS(lDRTd-MJYIyUJCN948~OJk1M(DrJyI#iV;P4k~& zFZo35IfQt0RwlUN`48^6(1dv_wm(y1xhEdMld=Y?!%u=fPT_*{3( zwBwz3#qR}_)t>C*jp5@U)Ti~B)Y;qq*TRxZJ7ZRN_^A3TDAEM*@7Ve%(Ro7=1%1B< zVj6GBUTxXev>_^SFA zgKZ=g4aTS}9>Ofj7cSB0WO?gQ)x=+!hs_)b$6#>ScFZ>XAoIX)%Bc|BDC~JFBk0f0 z0NY}6gb)&!qx^FWC(!ji+Kl$V$2|ocA=vN0TM0Y`U?tX+T)c*C zA!IL(T2Vm%MCLa85^if@J@Kkprx8QN5!6eCR@4Oa5S?4-4|ou?90mFCM8D!;n(5xz zO}-*t!TntN>|a$s(kGQg1P-U?hqvGF2_fGvd&~yZ_l3Qf&j~XWa=;>N3#-~#zjzcc z*m18L`A-K2o!d@J>a8SRbm4P&-q1(H>|JgIymDbnJF&@008`=X!P?4DGgZb>voUl^ zNJKgPR4S={)3vuk_{n@=M8q;;aJL>q+VLdTnO=}`&x;1DKjJA3*f*idS{jP5?+;!W zn-^7021Z4zv`Aq`hmX1aid997RNh3fa-@PG(W7TzKa1W&5^y3|lPeETP7j9qXpo4)7%(W0_2 z^Nmq;t@rb1eP3?%kOkH`P%!zTC7ZHjSfNN3*Sb#=3#jB*KpNGNfnRZ{N(6DrW(;B2Bwom<%m?VQP%K+ zsFeF1-(DY}oP@)w^Kw~gPg03q?N;)Ec6^|nikA34T~RynX*z}H>R~qgT$`Zbhn8wzZs$j2fsGN&rOK-mIBBvzD@a8FgbLpL!h5N^u&0wG} zq!#md3MHITv?3@$37J?lc_5*LWJTTjel;IiU-Yq;(g9I^D&KN_NKVS0O~GvB~FzPM6}=4d%fG4Nw4pZshcyLqK@`b8?RhD38haIyr@+8+0r5TC1*C7^WleJ zZN3_ngTD#RQvNL*;qD2H@cBWJbCC#d!}=oKfod5SE9a?!?j%DVt1z@inN}Iy$r+96 zM@P?AC+(`cM;z6J94BYGJ;+P-N#yj$?`G26ydS&OVH?~JY(N4l()Fh+x+DoJ@r<+i zhm^ck@QP`=fLApr62@KyOef~}zuG;(VbDQmw|Wb+oSHSw=%w9R)=et0cY*~ytX)#M zEXlK^p;zM@vTnXn+C1vwP)~TJv|TvDE2($;;EzC5_5IL#H;u z)#CO8)TSzbt8)wHB8$I8KcIojx&GoE)3QNu{CQ+_xBmQ&`mL5-u=BX(hs^hMY^ zae!!*Q;Tr$@(0~GoBJAohGw*d{l8~!aXop87aaSUb2jm)Tk>#$1*cdo5Sl+?oD!l4Og~yX+soottl4 zp4OartUuAN(dD~yLJ}`A1*!D4-|L^hM;`_DM^1KYs-VF(}h(BjRO``b+xV~%O=-)?p z7ciJH7Fnl?V&=ay_AB{oQoa2iR;6$^tiE|-eRCFy|3F@%j#6gUxkZX@?K`F$u#;T< z4IZORpUthmB?U`;zrOkp?P(Rvd5TFRWrBJmVg;KEZvJ+;Q}FRY%QZ?c^&$oPXW+C5 zdN#c>v%U?QuE+hMQdzxS1Q(BT90;29qu#^A?a^)Ui;{TJ;%`nLgm2ew$J4NvREjCJ z$`C7&?tH$CrVG@M3J1-KJw_*9BKeL*JX{ zN+Vg_TXb9^jJO$ZGkXO6BBFDjt~w5`w2TB*z$&1W5Il3IiDs=ZMDt|9iRtKET*wF6 z0Z+|N87p-5Fh)^(*l>OVr5^aY5LW(@PuM>Qo@&)yj6XRkPm1>eTF#Y_c*aRF^ZY5A z9FAU7lKEHG@i{wJMPg;n6z2|69d-)q9@<7t()d-zPy&X zdXG7{Uw{k23)CzzQAXw#iqj<1u~W@K_Ljc#?ukh;fRKHeJ2l~Z+52b2n^bGiDF2oX zm25FLx|4AP8>rAi@koY03lrtS#X?zK591c?2iZ_jjc>0y>q9>fU<08o6zG%z9WK+S zDwZMW4~28wu#ye#V*@#5t^S@NiAA`3{SF$xINmc_WW^u-C9M=H>RQ1>WM=|R!660{ z6E6%DwX`eu<3pkmz7Z=FCRd$(vhDkc3yMnSr)5C*aho)DZ<12$`$TXj<8Z70)|rK7 zXFD8QzksfWZU`qL2K8X{C~TcF{KVW`3Y{IMb&)T9%1V`tv(HY1 z+LXkLyM|3mtLD{x-#hOw-U?sr-iLeHFA|=-sGZ4#hX)atL!a91(tWJc+og&5W}VfZ zpgE7`{5D`~?yGR++y7~xA&eU0N*ZezDjF$> zUeK&1aTFQRg*?v^Z2e7u<`lk$czR6}b6Cl-qA9%A`#A6q0*zyTu)X`3rhjR86NK3= zLdw{+-F}+b2gxd-qF7>Rla}dFkj|L#c|pg5Ni+MRA|BZH(@ME*o<1ijKcoXb%PVfJ ztp_uf=G%kvU((pHcw90Xut=}atA!giM-5By)f40nKp zv7Wdb{;^<}VRvruH~rYr~wEuYY2ov-5Q|p@u3Da9+z7PeIpBAwi?RxnxN3Kt+N9L(LUS%wxY` z>e&1VV;{CYw8DNRlvBH)>!I49SU4R!t3I4=y;mCevPZh!-}~G+F>6hcL_Rli4r zC4(WN)`j$>^S=~GMGR=^)A6wrqi(-x{xK37&Vx!OS6t=KQ2JVZo#GrSODtTe=TVh%*qfF%91nqsMNLNL^Gp|_ zz%I*HUkMQGqb!1eh{{bp|0GSCDbkG_D_d)8<(0r<6-%Qi7qDa7xZjcdZ$?Rth9L!f z$erCcs3<~mtupywbaT8NWZF#v?iZkvqSz3@p`RiXs7P!GUa~-U9hEG(NgI#3BzO-# z!9JWf(;r!*A=@g$f}>wi|6Q@9z8AmYf~x8G%sp>C5cfuJY;hs1o3Ozu^{pH0AFbs%yU)Xy5>Cf?qXiHn*-PAfKDRiy`U0sFSKFsgEZ6_ z9#ma!<#Izr^}_z*>PRSt564u6We*XmZUx^jv*dK; z4zyFZ*ZFSE!00<6!|+#33&R)@RA8V9YRjp$HS9?CGq*xDSDRbX#i;}mateEF{fqTI zt?X}Efkq_Ap*_ETgaikOBbQ|;47}hwX44K`(DUI@C)QiG&6UJ1UmRn*Q@6%e`+x(gpQp74O{;yli8YLCV}qD z4gIyZd_(8ED~WWaeXOb0^r=9=AiDT}by~+$KVF~M{ywbQl zng-h?a_E;yX?DCr4|_h7JMc7>xgWf7Ek-VmH^hCYunVp3{(d{---&%-GZ=rK#V5Jo zJvP8b!2AA5?9)G8gwzB6ze3TU<5*Pqms^Q-?C9-CN~4hb-`U0D@kAkTWn23``cao^ z8IWAp8h7`%ZA+eI?w$sJktq5m>e&0@mQn>2BdpKAxbj1$m$8Z;`!iFvl9($Lb9Ff? zT^6cTZ~HgIeR6R*;G(rzpgsJP41Fx9Df;G6{;k6T(i}&8hX(jHSC@~#X@70h#)g(( z*9vUC+a*b%oAdf1$}Z3NR;|c5nY4^Z51pfqk(tmJbB;Q#ka#tf5eae;-kq$I{xO3<(TI$0lSe-JQzJ*es;il=Kn_?&?E zfLbs{qErPqm)-*ZfwbA*D-shgb|1;X;cH*yA|q8gS=HiosF=-kbdk6--SR+`F^H_` z0*i`J==@XSe=HT;_``G}ulE=H@*3GU*?gVd@h*`eT^GKjI;C@8+h~;(u3bA#b&bN{ zYw>dJ$(;RfHDLlndS`CWOE=g0jOocCc&;w(dOzrLf4-DK*MD@P_;u&CbfMw=#Q-B` zDq8hGwKN-O7(hQA_bP3f5XrZH+@*FGw~ppmDgNWcf|Lf*Pc%e5dw1DcJ1BWm!z7z3 zr^toEU*P(>G#;_1X}Rz(5lbDtCui%hY^d3lm)kw0vyk zX~K4$AG#7cG`6s2%9g9zsaQ9o?;3yzW4Pt!;NlS zzI#G7tiq&@eV&}qDtY(e$1JwscAfle%Al{3>Nr%``n?`Jac^CdOXUbFgI3;m{RkA~ zokl+lxuw9=%W&MmzA+G%ZdFMMP&N2^6BWjG2Lt|xKx)lMCR@b0n+xgw<)&Dwi?}>- z+$_e|@M;uW@3z6)q&L7bYitZ%huzGqH_qHOr&G5o!?(8TJv_MN1ka|&c6_!Q>#PgHSFoPWiLg|k_{ zQd#Zy&BPkU(0OE5S35!B5qb6%T3Wd#J(zBl8dw6I#xIDDF-LBPi-jXv1E?!gE|1OIdTejK)+U3ooC^otSIRsWZf-`&K}6}s!407Y58zH zK(oYx*7sN1O|Z_1YIJS_H$E@DH(hB4QKNCGQT3PTvwYoe2&8WKi5`5tU-r4!>_V3XUT}N)>8V;+z-!@-IGCKiD>E9RC(K`NMx=;Qp zf$2g^t?)zpU0L!BZi(oE#)^Z_biT*Svh>r#%1=O+Wo37G`Q)4@k#Pe?^mgBIugC)8 zyEICH=`{A~^x#X&%tr-$j|(nXrIrGQYNY+C3M+LO;yUU4-|v>a5#P)XYp>_|C0f0n{_p0mvwWmghfd%!Cm}$qBDxOqA3htLs~ghSA1>6^dVgd~ zVHHBBy6;Pp=El;dkTE=ttp~BoOJ$L@EB3Z37T1kTNG3tm4PY5O-7hP5DA$-k=vV&6 z?RiAm;W~*o)R7!x9>u$&@|&D4xMmJ*y+^-6t!F0u8G~78t&Bs#W>w_NbW>W9M3tXWXRf zI86FWVx%iXXh6MJ>dg#?lNu{K@S#nzMIG4PXQd%!Bvc*H0c7F_Y=adptJr*cHevMQ z%?Xu~q8CFw>^L*S_83kVhq=)hf0%_Lq}SE*g(Da_A{kXVZfAd*YCwp~bG32wi&SNM z#QZ7}Ug5-=+s^uqAh_|}gzya<(&E?XAZ%0ybd9nraj?|z1YfPr*{N?Q{ji}YG`T#| z=uwJZHIMlsmevnenT#-)t$L*=2wh|1EYXW?_36TR?L!sUItJVxaC0$Gb|gq4{|4gA z(v0ODFj!T)jc5>65ys)* z7$aBHfbKdz@QJq1b`NT`344*g()$>5*Ey`TPB7WI;|_8o8t9-_4ikFub|I{66>ge> zHA+6onzFKY*eaiA!77SD*^&LyumAR6gSvxY6Q?;!AvI{rZ##!G$%ZfIgce4F`aF;e z?jVh%+B-vj69ei~bh_zA9w}S4B4rzRKQ1~u$gwVu_x5PlRKDXX2(_2Mm7fs%6{SS7Qh1gWT8xaxc=f8`mW38ukIZxwU;lmHABwFSg50*o zrj%f%j~IKR?N5Dxwrq|sTa?!pd{b3sFM&~{4~_^YH4$bI^Fq2W4-y`))^|7fS?i0) zJ&Z9wY!8%l7@gAr`2{fqA;L;ptQR*X2|xUtrT47KK%XN+dydN$*M?65LuXTRabgERR{n>;E;(&vS0_@COY!p<%5LsRqGpER%~YjkSK zwBo9-2|-ZFiU3TT&S+@}3gDT35t0IXTzX@yHA(v>Y8;-mZNySQ&fE7RJ1^tzJfvdApX& z*!+tE)Y{oR%jk8A)3EiI3i*(TOwP!;B3hAOj?KQ6^h-q~1V^166uYS~mH*2Hh*0}r z`R3u1#^LG9IW|^QT^|61H(T1Jz?n;(Z>52lU0BO>Q6*zgpP*gTFk2Uw)!3zt>3F~_ ztil4!R*-j}wjh%&(kSB%}X=u4RbFRp@^l+$SmM@nW9B;yGbf@nasjFMEE{m9Oe

}qal5$moSACwfNXLXG5|3R0AtBcN` z?%yS)&>O>sqxU64U~C3&Q^>z-Zt}WuX4Wh3dKj9EO zfSbV!c3e;EOeKHQmWEw#NM4;*tw-2o@x&kKT?rsmy-F|$jw-F>WgA7?C@{O1qPg*J zf92|RTBMh&ptHADFc{T+cB?+mOj>h2HKgwkxq6w&XBxPc?>=JKvU2K9aU93@vp-R% z{5T=P$9U}AYZ5QU{3%7}YZ+ACWXw#-U zWyxU(OP#Q9-2AeGmCwcp`zWghf2hvsOjWjDQbU?U`v0&a--f1`v0Bd8HLiLmo)PKz5!A1|XVO+89 zm3h2~6yI~cpWor!_yt-?Lt>z`c0a7cJAW)#d8N8nNIf0H<+v;s4{0guDD(?T7Z<~$ zd`$vpZ_QQgFaMT0_d5&+(jwGU?M1FqUu6wjA-9z?mRM}(CmSdK;2e$Na}F-8jbhgN z9)@AIQeghf{xCC^{9P%VdYW1PP#}2BJwWt z0Hd8%st1NK5%h+)UB^mVwh{e#8TIm$xxgGo6I5;e{~VUeeMGRpM_Z%=eH5$X1}?Z5 z`|*_Vp~K&ziz45-Ih9y>EOr(Buy0&n$dbQ4$5eSr=Ti z#~7^n8dmem;$0D4+6eV7&G2D~d@ z+R#u8+nw_N%7_U_1e53P?~&10^m|ZUXrZhVp04lQLsGos%0fRDhS=@>8TOAAxK;Cy z9GZw_1pfSxD5~xoR!INI?tU0wrKDd6^Tv{jL>`Xb49kBaNPlhMaIfh_nq_)zB7NcX z05XeQKz`@BDUx7*i!V~%dc8XQ#ngBw0A2tSr(npSCrNy5Z7>48v&Zz?0{%FRElh_h zN2|?#EhJL5HQMIu6m1=ypTR?tVymHK)xQvS9ir7FzMp?CjlND39PK`od#GytVhZWp zQ1@>MTE1*Ip>hnXSWa?XbMH#708@j12yPbm`JfcqIgmJepn$5YgkJn_%5I)mr`Q(k z-a0yFR3A`houhvf&|wNpIsV{2p%MqhR@`@R(l6`}iufEgI*UxWq~26?WTpZCV{JtG zYL?&#I98fyf_;2S0?_V{=Aa4t^x%vy$pF$_Lh7W2f*~5uPvGYh;vZhMv|u+Z?2t0~ zcYPXdxbg6OS*LUjR_=jLDt)ab6;?g1IuySLG@UE;jLpt-wjLX&RlY>fnd@f&?0NyT zht5vhP^};k6`U76$%&I)iWPNxG6KPjdh`S6>g9GN@;KObQsLG zKyjfrPR0PU1B0a0=)3@9eCDl?mB9rFdlTMtTAeZv2}F*|@JWleq2+H1bt>>x!^wTk z+I)cgsZwzCMwoRpW_*!3IySTQu!`HWugAXe(Ai(a9Rsu;*0#o6torxwNMxPzEAjt` z>70Vw;HCQ?AnP`RKQ;2R8h%;LI#tx^(MO*lMWJe4_?)Q571P`kTmN#(ez21V!<6+S z@Uap+y%#8&cGgdf+E@y$dUx3g#)=#5k31Vqv0p!%L`*=-PiQAiSg-d9lKRZQDuJ-| zA96zwwomG+4}X$vR*IU=NC!vL<`rUTbf_uRJC4FS;k&HtV<=<)p(qymH)=MDV^aqK z#%sid7K|~!H`J!7hRr~Z!emxgWq6#GpQs%c#BM+scvNGz|Gi4G`;8Z~dP8)+51iB8 zw)0fazNz5(iK$LJeC_4e^8&@wT(DZ~~>SStz3P(>V8CLNlZqgv=2K-|Lu~si@XFwMN>QE^k zVS2U_A?Q$?M`NkU}^!M8m%O&T=kW>dG}1s2I~hxp9Y=a=1XX-(fB5) zej3`e5Et~R^r%?CZK0)UZsF_+tSOGIBMdrtMf#oJjGF9U`*P8t>i*TWed$Z2WNUZ* z_1Qw4Yr+Q0@bD?hD0P-^v}?FpPBg~zz5~g@J#J76C695|P>1l;OS8%~hZh5&-9Ji# z50%&56ZK4FC9}{jHL0!=qo9Yd(GGHCEX2|-F(f}q6@NMT4P3rQd{Q!=bz-8N(Z^!N;;ZzAWRf@C?X>mG=_NgyQX_?Jv$m(9$W>P;+e}O|&w&DjbsJPdWp0A2$yLr*!BY73Z z5d*BCaTI)w=sTlofc>n}@v_tSXIK?8(g`G_06u>SD*fOZJ~visq3lBVS2+cf-r$UQ zZ(8A0g&5M$IV7w5nqL(m$VS0X?=yy-e6>S>Ca3wZNT)b{GF39_gJdONflqc-j$b~o z2l@@h{$KVfC)V?#We*)@xYC;L^<@cHo>8axRMbSzw|eYTl|8pkabsQJ(3`z{>5H}c z`psz_Y6t)hvzL^=}P#++XUl6v`-j)SuXd6BynjNZ!&c2hnyE&4*K$nXn31Zk)cm+lx;> zya{T?{MRtSu?^3Y9bS&O$*mW^vRUpv!J3Tz12?3&Y62b_oiZ$24O(75Z)JWb+Rj)ACbK`f<&tSwtT$|Sy z$41kRPiM-jnPY9PKrLyI`pHm6LusMsrO*HpmE){Kp1^u2t%6nW^;GB|!4k!Ik8oav zjM?DBKh9G@W0gEwiU-M}0B)}olvoM71RccgiZBCs)L?q_GX&JDhegx4k2&cNatr5w zU)1#2USb8&`etO5Vk z?0}K+*2*@a5yt*X{qg0@8jEz~jcylVj>-042p1PBnabI#xUiCRD!ouw3?u-wwsqwF z8(@m8-Lk7q@v154g6yvx_tRDa>}oqpVda)wfI9(;ZVGt1v^{<|X?vC_(i@IJC+2I_lusrT=$h zF1lPc*Neb`;Xgrdf`p$w)~MzQW0M3_FYRKu{2$VU82J^B=X1#^<&P$_`=S$Ey04WU zTxG;hrFNLhWC*p+sH3x=JVcBJ9*7>eO20)n671SxQhZQlHMRP8FyO}yai~OTsbms0 zQ3b$C1Cn!>jMHDq{VX1ab^~_Q!z+f75+_AuwiN0*wA_#M#0|rU{+NlB%>Y+TNT0Gj z`3^LKMSJjz2(?lwg~ixDl_5%rzzZ}o_6Fj9e)T7gpH4=BgT1zmwJpC@g(f%&0`}8B z%7Y&qlP3aFmI#nmT`|R3+Lwzp+PLXt|5g%vlY_$fvse7zjus0D0fA##r+i4G4K-2Y zC#H95NGoYfWP#ZF_v$^Li{PZpm}fc&)aL?5doPcb835Cr6`T+EzzcEvLtmXcbAb<^ zw!_Zgk6Az7YA@*vb)(G{_W-B|zrf76z^`X%jOgqIIaqi~5nUup3vugzzg&rA^w(zR z+qCzvIV~nGR=47pDOcNTzuBw#5a=<=DMvGa)g zPw$^pmq9Fg&b#BZrPSoml(149rZS!fioV*Dy$z440U3MXDJmI?RZqLy0}IKSxN)o( z8+8wIZs#q(|KTg6y;Z(=96>xfpUsr@SP}I^v zN^R;ZVrDaWmNrM5-<X@k6JyjvA3;jHhma|Y|7!Vk& zgf(UK_6~cC;!|b!YTjke=nBiUqQdb#I9TY}!s5P)H+^c;9cW(QO8O%n5J^8Xfktd*qrn)+?-gP`m%B&q zi^}7jKm`yMW8ITFOMN#!QIB6$SWx*75tnCMaNg*_J*WuwBh~AT>0($nS8%&zmFQDp z$dL65niDtTV%!Kg1`6epWoQGNG`$`doy;Zjaa`keyL0F6iJMae6FIgnhAfzU%m@V+ zm5rQihLwS~b6{-bVR1ZSzBI7(Yj+V6T-8V*7I`ptWArGdy~8pnV>fALpi~NQLZ7;^ zpaj35=md<~-(tNmF69UX3?ua}A7UIn)q5i1iPYEGlhYSbkfeX`5epkxtzk3Qbu| zlgA`7ts%IvF4HJ}-98akyRnjCo{u-`A4&b+r?s|o`4wdYAHs-yh91p$7C_|+EdYH5 z10`!*=n+W9g>V&dfU1H!J}ASZi&-?`2IlDOAHnu306rD`y>jT)4^@S(X4XhN2{g9i zj-ym98+RT|d0ejIFJCM5>S{mT-8uGmRRqkJ3sMO_AQDrv77Q zv$t>zaVpVF6eBguE%9M2u?E-Oleft8z5+~W`G}KXD(Yc;7m4{Op>Le(k`g1UK7(1# zt6g}$n=Tdn{T4pu>v!c;xRCd_WI$Ali13x=U_0T!Ga-U~9W88q-lU+RLn2`N8Ouho z^0@SvC>$DguHWx)?^*ms-{PVq%dn(U3vrLj9zITDqQZ`H>Wsp@Gf%}SG=m)Vh}F$ztQAbwVGdDgd!28j&yX9wLW&s! zNR~6`nYg;ULAq8zi<;gUchAV5ib67Y##l2 zy+%gaD(|~G4@||{A;TYDSoS>q2o{t23t-^!NDSDEm8j3ao7Ei>KYLEpb$jz}7ciAM zD}trDN+AVVT_lXW<++~>8>Cj8fzJo@R;>%nGq)6+w?(#mNc#1J4W+!hA}?g$0Xqo? zn67qJmss)e%k(xO*&K@z6+}nHA(lCkb6n-|{pSztys$8HiOWTVR)tCO*Q9~if%3n7`uxGzE+OCu zwcVV|tgQdq60952$>85-GHk$lwM(uI+CU1?i{sVnKd0+UNq#eSSKjUKfDDgLnBG1y z^v?f#MRFkph~TgkoKBvM`L_~we8__xpLcjh`GwV|87q`vazJq?SX=mXhdvK>VqUf~ z4sYoTIpt5S)KrE-?>&=cRoBumD7;b5pq!Y07)#I$`)<@U+mo*dE*P~773p*u^6waO z2#thJahX_ySlYMpjx%h<)i43ao~Is`^Ya zMNZkuChEA7+ZJe6$>-C*dzTYf3#1SY82yFG?S&Q)5rTbKS-XLjckTLEc7>^sFcntQ zBeNXCSg&q1N3Bi^4zlQ%mcEBQ%2ab$?(;t-$HYd2%cnX$uuwU#I_6D3($m zR(>gHzM9ODf;r8b0l5LuEIQVZiQ0-|3Y_xzJkZc*CD=bPJ+&J+>>se%D4uTq?Ny{l z0Z5~og*Wa1O&anlcRWu_%o)(x?IZ0CfUNk_R-ik>GyvdFmpu1wHZaKTDGhL zqxsji)n<+)VKbV0_BRq9E;Kb`f=&vn(BK0Ba-gL?ZN;^^b3YFg6R=!q#zM;tcX0dM zdy5PPx@6pJPXHzH7$dGjM|6@6777nXPWV;CIQdNf(*Znv)sMy&Xcq> zhCq+6h6&v8<0}vd2(sKqU3j>fr7&#Xy%qZHcMU3m{wld^Nstkz8GagB?Y=SI&H z&{&BSA-|(i35$9(l6LpFyLm$0M0fK`Dz!~ezL?yEInsXAFR!bHe;ZL>Gd(#Hv?<$%`^b)oi?x%(jkylCPb=juPlF znMo&o961=NZ_$gd{xp1ZY2dNDOS!=XVj!M^A z+$z`EK4v=m{Bs{&I4W)({`&<5*^BV#z{IBAI_d+9Qx;~ zby?2zEjzUUeZWBDo5cz>%;z||z)<+6UtC)y60yD5J5`oo_zSM;l21@CY<0_|)NME5 zs)kHCMBa5YzB#N=W2aR?y9((~WuYwwf+HAc2mvU>NYlxOTvGf^Ye3za?*f-qUs^`a zT3>RPh9*Jf%3*bf|kqtnD_Buxv!<9N>BbuD#uYv-q^ z%RDnd7a3O4M9Y~TNISS@9K}JDkdg@>x8E6@n8jF=6qiDV+}{!V)(o?ykcr0sxBGEx zo!X;pc=r{H^vw6ztV5VZXBa4~(ujB$rZQ|AaGN@J7#q%2nU9gJ)g6dcj}zYB1& z@iFE0vMQVxa|v7tDHS$gwX$Ihc#M^DXRC>J@Zk?dC(3uB_s~*W&m-01DFMQGWjj5x z5po1@1gPl!v1Yra@qPG{D;$bYLM3qOwpl~7f~l)#n< zP+6`!NYe3EE~4RFR#_e=7YctPRBt6$He@`%e5m}f$M%yzC2S0<1}hRPjO>HJY~ z*dx(nbMbjv*;o&k{qzBdF|lS;UNVKziV=gbLq}UOCwr8GT5E9oRYQ}+>DhbQ1R=lj zgcNJN8|D)$Mx3#c+t@lhqcDUnHGVt0&EyQ{b5)=52B(VTzw=pQ^ba3`JB@BU^lS`_ zJEiLzgU#Acd_!}FMxCWC**FP^i#P}bYzNs78)#uSejEtYLbG>JJ7Igtho2oKQ;XW~ z4eMGO+t!_;G^V6c&R`5Tg+Pz2ToN(aybq4Q0ssie_{`t*DO%V7FaZ`{MBobFc9|pV z70o5ayHGJo9$$&Pgbs)pWNzduAcbh?~U?_P)(ve0S*3H%eNF&a5XR=!J#4c z;t992n7ZJr{*%`^dU1d-ALE8!3i#v;3r4r%j+JFCe=%3Vj=8{aXe zs)jrcUBZ=;LudcTUXj2ub>K5!{HHFHJ}Trx(PYugbQ8yK7&sqX;(;|UWjk3tGs3zuceeX)i4i_jA8Qz2Bc%DxN8 zXw!$+9jBtEHd1y90bYG4f8DcJM)Ab!M39tH5zz94*MAvnhA377@buNupSOUU3j8~> zd6&hk^ENRCp9T?_QUHk<=(&9Q^MJ^pi;nKOYNR@?L=RCSmKMJ5UQJQ`X!i~(gD*P! zs`RobzJG3Ra_Pg+WZUXUmMU$ilpwfcEti6)mw(~MZ0q!^sza>#jv!-+7B6F3QuMWg zVO!rXwD+lF1BBTito?ml-CV3vxuek~TKuOX^N6sol$v*{_%nAuD7i81eXm^Lz(Z~I z2Xj_Dts#G0&C;PV_Wkq*1QvB7+Post4={v;gk7b9u%#DC_bh(iJm$rqog^{JEx6NE zrs5^2SEL$|98#2WV#iG@L6cq|)SuTMSfGocPl65wUd^|5Lbpnb(;t>-Qu2jvANLgv zdte0vED-3C@^BdyHWLL(7{G$WA02z@JG!T-U^Q7HZ(7Bs&vchkh(p&}KvnS{MG^i6 z4r){gJp9p7WyWOEiKA2Cm6EXIn&&gk|Fc6^78OpPrX4ExCFE=SD$xcH;C2eB^{XTI zaxz_Cef*Yj==w_i_BTGXP;8C&f? z*QEM>={jFM8)lWAR870pG4XEWsl%%K|82S5b=9hVz7p_6i-d(Iyvq76&a#PV zR;VbQV|n?mg}&(ehClg%tK%IjgtnTR-u)lxH06XxXqH0soAZbB_Rm)XX=6Nge1uoG7 z9vQM_S~2h53n|W`y{{R9+=08rv~MohI_v4-BU^7fZ0-A}#b5{AOSTJm+(J;9yw%pD zX6u62GJ&@HKX5zQwq~j8T!Hrv-Mk^QSB5cu09L03{ToDO7jikM0WAcsjW>D}^jqCF zT0DEZ@K^KO_MD*%M!+V)lGVU6?LpX)eQVXEmq}R`NIJv;kBitJ!nW?0OxTVlu2ADf zE{A!*0g3%nwVcBD+AgT5bGx@WOnQk{zRpiZ4HhP`3BF%N|HdqPbbiV5)7x)kzC3ID zZ;27>0^mrMgWc7evsbQY`l`l})wr+e;=8U_!2&B77;1qL!N8y)eTJ2lf#CvhR~!Qa mc;sM|90DP5A*JW%f2r=u1xt!e4gwD_V(@hJb6Mw<&;$SznOm^{ diff --git a/packages/cisco_meraki/manifest.yml b/packages/cisco_meraki/manifest.yml index 982f3c5e9e2..82b34c4a6e3 100644 --- a/packages/cisco_meraki/manifest.yml +++ b/packages/cisco_meraki/manifest.yml @@ -12,8 +12,16 @@ release: experimental conditions: kibana.version: ^7.17.0 || ^8.0.0 screenshots: - - src: /img/sample-screenshot.png - title: Cisco Meraki + - src: /img/cisco-meraki-dashboard-1.png + title: Cisco Meraki Dashboard + size: 600x600 + type: image/png + - src: /img/cisco-meraki-dashboard-2.png + title: Cisco Meraki Dashboard + size: 600x600 + type: image/png + - src: /img/cisco-meraki-dashboard-3.png + title: Cisco Meraki Dashboard size: 600x600 type: image/png icons: From eec69f08344d2a4af2004093d4fe74d39b6062cb Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Fri, 1 Apr 2022 13:03:17 +1100 Subject: [PATCH 29/67] remove event.ingested --- .../events/_dev/test/pipeline/test-common-config.yml | 2 -- 1 file changed, 2 deletions(-) delete mode 100644 packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-common-config.yml diff --git a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-common-config.yml b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-common-config.yml deleted file mode 100644 index c39dc386179..00000000000 --- a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-common-config.yml +++ /dev/null @@ -1,2 +0,0 @@ -dynamic_fields: - event.ingested: ".*" From 38cd8e6162949163bfa2e0e3298ec45de8387b25 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Fri, 1 Apr 2022 17:21:47 +1100 Subject: [PATCH 30/67] use observer.mac to set wired_mac --- .../test-airmarshal-events.log-expected.json | 948 +++++++++--------- .../ingest_pipeline/airmarshal.yml | 2 +- .../data_stream/log/fields/ecs.yml | 2 + .../data_stream/log/fields/fields.yml | 2 - packages/cisco_meraki/docs/README.md | 2 +- 5 files changed, 478 insertions(+), 478 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index b0925845a12..547383a83be 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -7,8 +7,7 @@ "bssid": "92:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -36,7 +35,8 @@ } }, "observer": { - "hostname": "MX84_5" + "hostname": "MX84_5", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -53,8 +53,7 @@ "bssid": "AA:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -82,7 +81,8 @@ } }, "observer": { - "hostname": "MX84_2" + "hostname": "MX84_2", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -99,8 +99,7 @@ "bssid": "BE:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -128,7 +127,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "BE-17-C8-C7-DF-FD" @@ -187,8 +187,7 @@ "bssid": "92:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -216,7 +215,8 @@ } }, "observer": { - "hostname": "MX84_8" + "hostname": "MX84_8", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -234,8 +234,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -263,7 +262,8 @@ } }, "observer": { - "hostname": "MX84_5" + "hostname": "MX84_5", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -280,8 +280,7 @@ "bssid": "92:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -309,7 +308,8 @@ } }, "observer": { - "hostname": "MX84_8" + "hostname": "MX84_8", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -326,8 +326,7 @@ "bssid": "92:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -355,7 +354,8 @@ } }, "observer": { - "hostname": "MX84_8" + "hostname": "MX84_8", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -372,8 +372,7 @@ "bssid": "BE:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -401,7 +400,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "BE-17-D8-C7-E2-9D" @@ -460,8 +460,7 @@ "bssid": "BE:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -489,7 +488,8 @@ } }, "observer": { - "hostname": "MX84_5" + "hostname": "MX84_5", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-D8-C7-D8-51" @@ -506,8 +506,7 @@ "bssid": "92:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -535,7 +534,8 @@ } }, "observer": { - "hostname": "MX84_8" + "hostname": "MX84_8", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -553,8 +553,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -582,7 +581,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -599,8 +599,7 @@ "bssid": "AA:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -628,7 +627,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -645,8 +645,7 @@ "bssid": "AC:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -674,7 +673,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AC-17-C8-C7-E2-9D" @@ -691,8 +691,7 @@ "bssid": "BE:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -720,7 +719,8 @@ } }, "observer": { - "hostname": "MX84_8" + "hostname": "MX84_8", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "BE-17-D8-C7-E2-9D" @@ -737,8 +737,7 @@ "bssid": "BE:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -766,7 +765,8 @@ } }, "observer": { - "hostname": "MX84_5" + "hostname": "MX84_5", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -783,8 +783,7 @@ "bssid": "92:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -812,7 +811,8 @@ } }, "observer": { - "hostname": "MX84_8" + "hostname": "MX84_8", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -830,8 +830,7 @@ "channel": "11", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-DF-FD" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -859,7 +858,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "AC-17-C8-C7-DF-FD" @@ -918,8 +918,7 @@ "bssid": "92:17:D8:C7:DF:FD", "channel": "56", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -947,7 +946,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "92-17-D8-C7-DF-FD" @@ -965,8 +965,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -994,7 +993,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -1012,8 +1012,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1041,7 +1040,8 @@ } }, "observer": { - "hostname": "MX84_5" + "hostname": "MX84_5", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -1059,8 +1059,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1088,7 +1087,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -1105,8 +1105,7 @@ "bssid": "92:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1134,7 +1133,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -1152,8 +1152,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1181,7 +1180,8 @@ } }, "observer": { - "hostname": "MX84_1" + "hostname": "MX84_1", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -1198,8 +1198,7 @@ "bssid": "AA:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1227,7 +1226,8 @@ } }, "observer": { - "hostname": "MX84_3" + "hostname": "MX84_3", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "AA-17-C8-C7-E1-41" @@ -1245,8 +1245,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1274,7 +1273,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -1291,8 +1291,7 @@ "bssid": "92:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1320,7 +1319,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -1379,8 +1379,7 @@ "bssid": "BE:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1408,7 +1407,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "BE-17-C8-C7-E2-9D" @@ -1425,8 +1425,7 @@ "bssid": "AA:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1454,7 +1453,8 @@ } }, "observer": { - "hostname": "MX84_1" + "hostname": "MX84_1", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -1471,8 +1471,7 @@ "bssid": "92:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1500,7 +1499,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -1518,8 +1518,7 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-DF-FD" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1547,7 +1546,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "AA-17-D8-C7-DF-FD" @@ -1564,8 +1564,7 @@ "bssid": "92:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1593,7 +1592,8 @@ } }, "observer": { - "hostname": "MX84_2" + "hostname": "MX84_2", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -1652,8 +1652,7 @@ "bssid": "AC:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1681,7 +1680,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -1698,8 +1698,7 @@ "bssid": "AC:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1727,7 +1726,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AC-17-C8-C7-E2-9D" @@ -1744,8 +1744,7 @@ "bssid": "AA:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1773,7 +1772,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-C8-C7-E2-9D" @@ -1790,8 +1790,7 @@ "bssid": "BE:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1819,7 +1818,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -1836,8 +1836,7 @@ "bssid": "92:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1865,7 +1864,8 @@ } }, "observer": { - "hostname": "MX84_3" + "hostname": "MX84_3", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -1882,8 +1882,7 @@ "bssid": "92:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1911,7 +1910,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -1929,8 +1929,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -1958,7 +1957,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -1975,8 +1975,7 @@ "bssid": "BE:17:D8:C7:DF:FD", "channel": "56", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2004,7 +2003,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "BE-17-D8-C7-DF-FD" @@ -2021,8 +2021,7 @@ "bssid": "92:17:D8:C7:DF:FD", "channel": "56", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2050,7 +2049,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "92-17-D8-C7-DF-FD" @@ -2151,8 +2151,7 @@ "bssid": "BE:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2180,7 +2179,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "BE-17-D8-C7-E2-9D" @@ -2197,8 +2197,7 @@ "bssid": "92:17:D8:C7:E1:41", "channel": "36", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2226,7 +2225,8 @@ } }, "observer": { - "hostname": "MX84_3" + "hostname": "MX84_3", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-D8-C7-E1-41" @@ -2243,8 +2243,7 @@ "bssid": "BE:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2272,7 +2271,8 @@ } }, "observer": { - "hostname": "MX84_1" + "hostname": "MX84_1", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -2289,8 +2289,7 @@ "bssid": "92:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2318,7 +2317,8 @@ } }, "observer": { - "hostname": "MX84_4" + "hostname": "MX84_4", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -2335,8 +2335,7 @@ "bssid": "92:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2364,7 +2363,8 @@ } }, "observer": { - "hostname": "MX84_2" + "hostname": "MX84_2", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -2381,8 +2381,7 @@ "bssid": "AA:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2410,7 +2409,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -2469,8 +2469,7 @@ "bssid": "92:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2498,7 +2497,8 @@ } }, "observer": { - "hostname": "MX84_4" + "hostname": "MX84_4", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -2516,8 +2516,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2545,7 +2544,8 @@ } }, "observer": { - "hostname": "MX84_2" + "hostname": "MX84_2", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -2562,8 +2562,7 @@ "bssid": "92:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2591,7 +2590,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -2608,8 +2608,7 @@ "bssid": "92:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2637,7 +2636,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -2654,8 +2654,7 @@ "bssid": "BE:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2683,7 +2682,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "BE-17-C8-C7-DF-FD" @@ -2743,8 +2743,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-E1-41" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2772,7 +2771,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "AE-17-D8-C7-E1-41" @@ -2790,8 +2790,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2819,7 +2818,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -2837,8 +2837,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2866,7 +2865,8 @@ } }, "observer": { - "hostname": "MX84_2" + "hostname": "MX84_2", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -2883,8 +2883,7 @@ "bssid": "92:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2912,7 +2911,8 @@ } }, "observer": { - "hostname": "MX84_2" + "hostname": "MX84_2", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -2929,8 +2929,7 @@ "bssid": "92:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -2958,7 +2957,8 @@ } }, "observer": { - "hostname": "MX84_2" + "hostname": "MX84_2", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -2975,8 +2975,7 @@ "bssid": "BE:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3004,7 +3003,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "BE-17-C8-C7-E1-41" @@ -3022,8 +3022,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3051,7 +3050,8 @@ } }, "observer": { - "hostname": "MX84_3" + "hostname": "MX84_3", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -3068,8 +3068,7 @@ "bssid": "AC:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3097,7 +3096,8 @@ } }, "observer": { - "hostname": "MX84_1" + "hostname": "MX84_1", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -3114,8 +3114,7 @@ "bssid": "92:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3143,7 +3142,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -3160,8 +3160,7 @@ "bssid": "92:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3189,7 +3188,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -3248,8 +3248,7 @@ "bssid": "BE:17:D8:C7:E1:41", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3277,7 +3276,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "BE-17-D8-C7-E1-41" @@ -3294,8 +3294,7 @@ "bssid": "92:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3323,7 +3322,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -3341,8 +3341,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3370,7 +3369,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -3388,8 +3388,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3417,7 +3416,8 @@ } }, "observer": { - "hostname": "MX84_8" + "hostname": "MX84_8", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -3435,8 +3435,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3464,7 +3463,8 @@ } }, "observer": { - "hostname": "MX84_8" + "hostname": "MX84_8", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -3523,8 +3523,7 @@ "bssid": "92:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3552,7 +3551,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "92-17-C8-C7-DF-FD" @@ -3569,8 +3569,7 @@ "bssid": "92:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3598,7 +3597,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -3615,8 +3615,7 @@ "bssid": "BE:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3644,7 +3643,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -3661,8 +3661,7 @@ "bssid": "AA:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3690,7 +3689,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -3707,8 +3707,7 @@ "bssid": "92:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3736,7 +3735,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -3753,8 +3753,7 @@ "bssid": "AA:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3782,7 +3781,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -3800,8 +3800,7 @@ "channel": "6", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3829,7 +3828,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -3846,8 +3846,7 @@ "bssid": "92:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3875,7 +3874,8 @@ } }, "observer": { - "hostname": "MX84_3" + "hostname": "MX84_3", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -3892,8 +3892,7 @@ "bssid": "AC:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3921,7 +3920,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -3939,8 +3939,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-E1-41" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -3968,7 +3967,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "AA-17-D8-C7-E1-41" @@ -3986,8 +3986,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4015,7 +4014,8 @@ } }, "observer": { - "hostname": "MX84_3" + "hostname": "MX84_3", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -4033,8 +4033,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4062,7 +4061,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -4080,8 +4080,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4109,7 +4108,8 @@ } }, "observer": { - "hostname": "MX84_2" + "hostname": "MX84_2", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -4126,8 +4126,7 @@ "bssid": "92:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4155,7 +4154,8 @@ } }, "observer": { - "hostname": "MX84_3" + "hostname": "MX84_3", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -4172,8 +4172,7 @@ "bssid": "92:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4201,7 +4200,8 @@ } }, "observer": { - "hostname": "MX84_1" + "hostname": "MX84_1", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -4218,8 +4218,7 @@ "bssid": "AC:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4247,7 +4246,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "AC-17-C8-C7-DF-FD" @@ -4264,8 +4264,7 @@ "bssid": "BE:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4293,7 +4292,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "BE-17-D8-C7-E2-9D" @@ -4352,8 +4352,7 @@ "bssid": "BE:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4381,7 +4380,8 @@ } }, "observer": { - "hostname": "MX84_4" + "hostname": "MX84_4", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "BE-17-C8-C7-E1-41" @@ -4398,8 +4398,7 @@ "bssid": "AA:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4427,7 +4426,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-C8-C7-E2-9D" @@ -4486,8 +4486,7 @@ "bssid": "92:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4515,7 +4514,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -4533,8 +4533,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4562,7 +4561,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -4579,8 +4579,7 @@ "bssid": "BE:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4608,7 +4607,8 @@ } }, "observer": { - "hostname": "MX84_8" + "hostname": "MX84_8", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "BE-17-C8-C7-DF-FD" @@ -4667,8 +4667,7 @@ "bssid": "BE:17:D8:C7:DF:FD", "channel": "56", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4696,7 +4695,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "BE-17-D8-C7-DF-FD" @@ -4713,8 +4713,7 @@ "bssid": "BE:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4742,7 +4741,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "BE-17-C8-C7-E2-9D" @@ -4760,8 +4760,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4789,7 +4788,8 @@ } }, "observer": { - "hostname": "MX84_4" + "hostname": "MX84_4", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -4848,8 +4848,7 @@ "bssid": "BE:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4877,7 +4876,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-D8-C7-D8-51" @@ -4936,8 +4936,7 @@ "bssid": "BE:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -4965,7 +4964,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-D8-C7-D8-51" @@ -4982,8 +4982,7 @@ "bssid": "92:17:D8:C7:E1:41", "channel": "36", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5011,7 +5010,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-D8-C7-E1-41" @@ -5028,8 +5028,7 @@ "bssid": "BE:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5057,7 +5056,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "BE-17-C8-C7-E1-41" @@ -5074,8 +5074,7 @@ "bssid": "BE:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5103,7 +5102,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "BE-17-C8-C7-E2-9D" @@ -5120,8 +5120,7 @@ "bssid": "AC:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5149,7 +5148,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "AC-17-C8-C7-E1-41" @@ -5166,8 +5166,7 @@ "bssid": "92:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5195,7 +5194,8 @@ } }, "observer": { - "hostname": "MX84_4" + "hostname": "MX84_4", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -5212,8 +5212,7 @@ "bssid": "AC:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5241,7 +5240,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AC-17-C8-C7-E2-9D" @@ -5259,8 +5259,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5288,7 +5287,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -5305,8 +5305,7 @@ "bssid": "AA:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5334,7 +5333,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "AA-17-C8-C7-E1-41" @@ -5352,8 +5352,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5381,7 +5380,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -5398,8 +5398,7 @@ "bssid": "BE:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5427,7 +5426,8 @@ } }, "observer": { - "hostname": "MX84_8" + "hostname": "MX84_8", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "BE-17-C8-C7-E1-41" @@ -5444,8 +5444,7 @@ "bssid": "AA:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5473,7 +5472,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -5490,8 +5490,7 @@ "bssid": "BE:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5519,7 +5518,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "BE-17-C8-C7-E1-41" @@ -5536,8 +5536,7 @@ "bssid": "AC:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5565,7 +5564,8 @@ } }, "observer": { - "hostname": "MX84_3" + "hostname": "MX84_3", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -5582,8 +5582,7 @@ "bssid": "92:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5611,7 +5610,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -5628,8 +5628,7 @@ "bssid": "AC:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5657,7 +5656,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AC-17-C8-C7-E2-9D" @@ -5674,8 +5674,7 @@ "bssid": "AC:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5703,7 +5702,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -5720,8 +5720,7 @@ "bssid": "92:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5749,7 +5748,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -5766,8 +5766,7 @@ "bssid": "92:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5795,7 +5794,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -5812,8 +5812,7 @@ "bssid": "92:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5841,7 +5840,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -5900,8 +5900,7 @@ "bssid": "AA:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5929,7 +5928,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -5946,8 +5946,7 @@ "bssid": "92:17:D8:C7:DF:FD", "channel": "56", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -5975,7 +5974,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "92-17-D8-C7-DF-FD" @@ -5992,8 +5992,7 @@ "bssid": "92:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6021,7 +6020,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -6038,8 +6038,7 @@ "bssid": "BE:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6067,7 +6066,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -6084,8 +6084,7 @@ "bssid": "AA:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6113,7 +6112,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "AA-17-C8-C7-DF-FD" @@ -6130,8 +6130,7 @@ "bssid": "92:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6159,7 +6158,8 @@ } }, "observer": { - "hostname": "MX84_4" + "hostname": "MX84_4", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -6177,8 +6177,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6206,7 +6205,8 @@ } }, "observer": { - "hostname": "MX84_7" + "hostname": "MX84_7", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -6223,8 +6223,7 @@ "bssid": "92:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6252,7 +6251,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -6269,8 +6269,7 @@ "bssid": "92:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6298,7 +6297,8 @@ } }, "observer": { - "hostname": "MX84_6" + "hostname": "MX84_6", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -6315,8 +6315,7 @@ "bssid": "BE:17:D8:C7:E1:41", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6344,7 +6343,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "BE-17-D8-C7-E1-41" @@ -6361,8 +6361,7 @@ "bssid": "AA:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6390,7 +6389,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-C8-C7-E2-9D" @@ -6407,8 +6407,7 @@ "bssid": "92:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6436,7 +6435,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -6454,8 +6454,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6483,7 +6482,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -6500,8 +6500,7 @@ "bssid": "92:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6529,7 +6528,8 @@ } }, "observer": { - "hostname": "MX84_5" + "hostname": "MX84_5", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -6546,8 +6546,7 @@ "bssid": "92:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6575,7 +6574,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -6592,8 +6592,7 @@ "bssid": "92:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6621,7 +6620,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -6638,8 +6638,7 @@ "bssid": "92:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6667,7 +6666,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -6684,8 +6684,7 @@ "bssid": "BE:17:D8:C7:E1:41", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6713,7 +6712,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "BE-17-D8-C7-E1-41" @@ -6730,8 +6730,7 @@ "bssid": "BE:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6759,7 +6758,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-C8-C7-D8-51" @@ -6776,8 +6776,7 @@ "bssid": "AA:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6805,7 +6804,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-C8-C7-D8-51" @@ -6822,8 +6822,7 @@ "bssid": "AC:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6851,7 +6850,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AC-17-C8-C7-D8-51" @@ -6868,8 +6868,7 @@ "bssid": "BE:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6897,7 +6896,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-D8-C7-D8-51" @@ -6915,8 +6915,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6944,7 +6943,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -6962,8 +6962,7 @@ "channel": "149", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -6991,7 +6990,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -7009,8 +7009,7 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-DF-FD" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7038,7 +7037,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "AE-17-D8-C7-DF-FD" @@ -7056,8 +7056,7 @@ "channel": "56", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-DF-FD" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7085,7 +7084,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "AA-17-D8-C7-DF-FD" @@ -7102,8 +7102,7 @@ "bssid": "92:17:C8:C7:E1:41", "channel": "1", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7131,7 +7130,8 @@ } }, "observer": { - "hostname": "MX84_5" + "hostname": "MX84_5", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-C8-C7-E1-41" @@ -7148,8 +7148,7 @@ "bssid": "AC:17:C8:C7:DF:FD", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-DF-FD" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7177,7 +7176,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-DF-FD" }, "source": { "mac": "AC-17-C8-C7-DF-FD" @@ -7194,8 +7194,7 @@ "bssid": "BE:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7223,7 +7222,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "BE-17-D8-C7-E2-9D" @@ -7240,8 +7240,7 @@ "bssid": "92:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7269,7 +7268,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -7286,8 +7286,7 @@ "bssid": "BE:17:D8:C7:E1:41", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7315,7 +7314,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "BE-17-D8-C7-E1-41" @@ -7332,8 +7332,7 @@ "bssid": "92:17:D8:C7:E1:41", "channel": "36", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7361,7 +7360,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-D8-C7-E1-41" @@ -7379,8 +7379,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-E1-41" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7408,7 +7407,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "AE-17-D8-C7-E1-41" @@ -7426,8 +7426,7 @@ "channel": "36", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-E1-41" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7455,7 +7454,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "AA-17-D8-C7-E1-41" @@ -7472,8 +7472,7 @@ "bssid": "92:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7501,7 +7500,8 @@ } }, "observer": { - "hostname": "MX84_4" + "hostname": "MX84_4", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-C8-C7-E2-9D" @@ -7518,8 +7518,7 @@ "bssid": "92:17:C8:C7:D8:51", "channel": "6", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7547,7 +7546,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-C8-C7-D8-51" @@ -7564,8 +7564,7 @@ "bssid": "92:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7593,7 +7592,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "92-17-D8-C7-D8-51" @@ -7610,8 +7610,7 @@ "bssid": "BE:17:D8:C7:D8:51", "channel": "149", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-D8-51" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7639,7 +7638,8 @@ } }, "observer": { - "hostname": "MX84_3" + "hostname": "MX84_3", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "BE-17-D8-C7-D8-51" @@ -7657,8 +7657,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7686,7 +7685,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AA-17-D8-C7-D8-51" @@ -7704,8 +7704,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7733,7 +7732,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -7751,8 +7751,7 @@ "channel": "149", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-D8-51" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7780,7 +7779,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-D8-51" }, "source": { "mac": "AE-17-D8-C7-D8-51" @@ -7798,8 +7798,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi Guest" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7827,7 +7826,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AA-17-D8-C7-E2-9D" @@ -7844,8 +7844,7 @@ "bssid": "92:17:D8:C7:E2:9D", "channel": "36", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7873,7 +7872,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "92-17-D8-C7-E2-9D" @@ -7891,8 +7891,7 @@ "channel": "36", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", - "wired_mac": "AC-17-C8-C7-E2-9D" + "ssid": "AwesomeWifi" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7920,7 +7919,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AE-17-D8-C7-E2-9D" @@ -7937,8 +7937,7 @@ "bssid": "AC:17:C8:C7:E2:9D", "channel": "11", "fc_subtype": "8", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E2-9D" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -7966,7 +7965,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E2-9D" }, "source": { "mac": "AC-17-C8-C7-E2-9D" @@ -7983,8 +7983,7 @@ "bssid": "92:17:D8:C7:E1:41", "channel": "36", "fc_subtype": "5", - "fc_type": "0", - "wired_mac": "AC-17-C8-C7-E1-41" + "fc_type": "0" }, "device_type": "MR", "event_subtype": "rogue_ssid_detected", @@ -8012,7 +8011,8 @@ } }, "observer": { - "hostname": "MX84" + "hostname": "MX84", + "mac": "AC-17-C8-C7-E1-41" }, "source": { "mac": "92-17-D8-C7-E1-41" diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml index 655eb9db6d6..af8ad6ce22c 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml @@ -43,7 +43,7 @@ processors: replacement: '-' - gsub: field: wired_mac - target_field: cisco_meraki.airmarshal.wired_mac + target_field: observer.mac pattern: '[-:.]' replacement: '-' if: ctx?.cisco_meraki?.event_subtype == 'rogue_ssid_detected' diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index 7bd52db20ce..6643030c49c 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -146,6 +146,8 @@ name: observer.vendor - external: ecs name: observer.version +- external: ecs + name: observer.mac - external: ecs name: process.name - external: ecs diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index b385feffc28..309bf5dc347 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -16,8 +16,6 @@ type: keyword - name: vap type: keyword - - name: wired_mac - type: keyword - name: channel type: keyword - name: fc_type diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index cff9a4d9ce4..35982672f8b 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -67,7 +67,6 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | cisco_meraki.airmarshal.fc_type | | keyword | | cisco_meraki.airmarshal.ssid | | keyword | | cisco_meraki.airmarshal.vap | | keyword | -| cisco_meraki.airmarshal.wired_mac | | keyword | | cisco_meraki.association | | flattened | | cisco_meraki.device_packet_flood | | flattened | | cisco_meraki.device_type | | keyword | @@ -181,6 +180,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | observer.egress.interface.name | Interface name as reported by the system. | keyword | | observer.hostname | Hostname of the observer. | keyword | | observer.ingress.interface.name | Interface name as reported by the system. | keyword | +| observer.mac | MAC addresses of the observer. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | | observer.product | The product name of the observer. | keyword | | observer.type | The type of the observer the data is coming from. There is no predefined list of observer types. Some examples are `forwarder`, `firewall`, `ids`, `ips`, `proxy`, `poller`, `sensor`, `APM server`. | keyword | | observer.vendor | Vendor name of the observer. | keyword | From ec1c7c9e545ca042d37d60e70152f7f90606ca0b Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Fri, 1 Apr 2022 17:28:26 +1100 Subject: [PATCH 31/67] use threat.indicator.* instead of threat.enrichments.indicator.* --- .../test-security-events.log-expected.json | 30 ++++++++----------- .../ingest_pipeline/security.yml | 4 +-- .../data_stream/log/fields/ecs.yml | 4 +-- packages/cisco_meraki/docs/README.md | 4 +-- 4 files changed, 18 insertions(+), 24 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index b92cbcc8211..1cbd460dd1b 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -118,17 +118,13 @@ "preserve_original_event" ], "threat": { - "enrichments": { - "indicator": { - "file": { - "hash": { - "sha256": "275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f" - }, - "name": "EICAR:EICAR_Test_file_not_a_virus-tpd" - } - } - }, "indicator": { + "file": { + "hash": { + "sha256": "275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f" + }, + "name": "EICAR:EICAR_Test_file_not_a_virus-tpd" + }, "reference": "http://www.eicar.org/download/eicar.com.txt" }, "software": { @@ -169,14 +165,12 @@ "preserve_original_event" ], "threat": { - "enrichments": { - "indicator": { - "file": { - "hash": { - "sha256": "275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f" - }, - "name": "EICAR:EICAR_Test_file_not_a_virus-tpd" - } + "indicator": { + "file": { + "hash": { + "sha256": "275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f" + }, + "name": "EICAR:EICAR_Test_file_not_a_virus-tpd" } }, "software": { diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml index 43cba86792f..2454d08c879 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml @@ -87,11 +87,11 @@ processors: if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' - rename: field: name - target_field: threat.enrichments.indicator.file.name + target_field: threat.indicator.file.name if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.event_subtype == 'security_filtering_disposition_change' - rename: field: sha256 - target_field: threat.enrichments.indicator.file.hash.sha256 + target_field: threat.indicator.file.hash.sha256 if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.event_subtype == 'security_filtering_disposition_change' - rename: field: disposition diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index 6643030c49c..11420cf6b20 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -267,9 +267,9 @@ - external: ecs name: threat.indicator.reference - external: ecs - name: threat.enrichments.indicator.file.name + name: threat.indicator.file.name - external: ecs - name: threat.enrichments.indicator.file.hash.sha256 + name: threat.indicator.file.hash.sha256 - external: ecs name: network.direction - external: ecs diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 35982672f8b..5299ea128dc 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -222,9 +222,9 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | source.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | | source.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | | tags | List of keywords used to tag each event. | keyword | -| threat.enrichments.indicator.file.hash.sha256 | SHA256 hash. | keyword | -| threat.enrichments.indicator.file.name | Name of the file including the extension, without the directory. | keyword | | threat.indicator.description | Describes the type of action conducted by the threat. | keyword | +| threat.indicator.file.hash.sha256 | SHA256 hash. | keyword | +| threat.indicator.file.name | Name of the file including the extension, without the directory. | keyword | | threat.indicator.last_seen | The date and time when intelligence source last reported sighting this indicator. | date | | threat.indicator.reference | Reference URL linking to additional information about this indicator. | keyword | | threat.software.type | The type of software used by this threat to conduct behavior commonly modeled using MITRE ATT&CK®. Recommended values \* Malware \* Tool While not required, you can use a MITRE ATT&CK® software type. | keyword | From cde66fcd849b50a97b338837aac754be01059ab2 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Fri, 1 Apr 2022 17:52:08 +1100 Subject: [PATCH 32/67] refactor --- .../data_stream/log/elasticsearch/ingest_pipeline/events.yml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index 7fc58274fb9..a35e59f9232 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -94,7 +94,7 @@ processors: SYSLOGPRI: '<%{NONNEGINT:log.syslog.priority:long}>' SYSLOGVER: '\b(?:\d{1,2})\b' SYSLOGHDR: '%{SYSLOGPRI}%{SYSLOGVER}' - if: ctx.event.original.startsWith('<') && (ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' || ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change' || ctx?.cisco_meraki?.event_subtype == '8021x_eap_failure' || ctx?.cisco_meraki?.event_subtype == '8021x_deauth' || ctx?.cisco_meraki?.event_subtype == '8021x_eap_success' || ctx?.cisco_meraki?.event_subtype == 'splash_auth' || ctx?.cisco_meraki?.event_subtype == 'device_packet_flood') + if: ctx.event.original.startsWith('<') && ['dfs_event', 'association', 'disassociation', 'wpa_deauth', 'wpa_auth', 'vpn_connectivity_change', '8021x_eap_failure', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype) - kv: field: _temp.rest field_split: " " @@ -191,8 +191,7 @@ processors: - set: field: cisco_meraki.device_type value: MR - if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ctx?.cisco_meraki?.event_subtype == 'association' || ctx?.cisco_meraki?.event_subtype == 'disassociation' || ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' || ctx?.cisco_meraki?.event_subtype == 'wpa_auth' || ctx?.cisco_meraki?.event_subtype == '8021x_eap_failure' || ctx?.cisco_meraki?.event_subtype == '8021x_deauth' || ctx?.cisco_meraki?.event_subtype == '8021x_eap_success' || ctx?.cisco_meraki?.event_subtype == 'splash_auth' || ctx?.cisco_meraki?.event_subtype == 'device_packet_flood' - + if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ['association', 'disassociation', 'wpa_deauth', 'wpa_auth', '8021x_eap_failure', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype) #################################################### # IP Geolocation Lookup (source) #################################################### From ef185c078cf5c2c00afa2411eb97283162efba9c Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Fri, 1 Apr 2022 18:07:25 +1100 Subject: [PATCH 33/67] convert timestamp to date format in threat.indicator.last_seen --- .../_dev/test/pipeline/test-security-events.log-expected.json | 2 +- .../data_stream/log/elasticsearch/ingest_pipeline/default.yml | 1 + .../data_stream/log/elasticsearch/ingest_pipeline/security.yml | 3 ++- 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index 1cbd460dd1b..8d8337c25b3 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -60,7 +60,7 @@ "threat": { "indicator": { "description": " BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", - "last_seen": "1637691198.330873" + "last_seen": "2021-11-23T18:13:18.330Z" } } }, diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index ce5a4b954b4..3b43e8d886d 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -272,6 +272,7 @@ processors: - radio - sts - msgtype + - timestamp ignore_missing: true - script: lang: painless diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml index 2454d08c879..421bfb00375 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml @@ -35,9 +35,10 @@ processors: field: signature target_field: cisco_meraki.security.signature if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' -- rename: +- date: field: timestamp target_field: threat.indicator.last_seen + formats: ['UNIX'] if: ctx?.cisco_meraki?.event_subtype == 'ids_alerted' - gsub: field: dhost From 9ea18ea9d5c917f5541d7a529d181cb81ad5df99 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 2 Apr 2022 00:02:23 +1100 Subject: [PATCH 34/67] add missing processors to logfile input --- packages/cisco_meraki/data_stream/log/manifest.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/packages/cisco_meraki/data_stream/log/manifest.yml b/packages/cisco_meraki/data_stream/log/manifest.yml index 5872afe1e0a..bf78f78a809 100644 --- a/packages/cisco_meraki/data_stream/log/manifest.yml +++ b/packages/cisco_meraki/data_stream/log/manifest.yml @@ -164,3 +164,12 @@ streams: show_user: false default: UTC description: IANA time zone or time offset (e.g. `+0200`) to use when interpreting syslog timestamps without a time zone. + - name: processors + type: yaml + title: Processors + multi: false + required: false + show_user: false + description: > + Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. + From 7f7685f071eff31dc31c45f15fdf24bf285b9d94 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 4 Apr 2022 16:07:49 +1000 Subject: [PATCH 35/67] change dissect to grok for airmarshal events --- .../ingest_pipeline/airmarshal.yml | 40 ++++++++++--------- .../elasticsearch/ingest_pipeline/events.yml | 6 ++- packages/cisco_meraki/docs/README.md | 26 +++++++++++- 3 files changed, 50 insertions(+), 22 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml index af8ad6ce22c..04f6ac6e27b 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml @@ -11,52 +11,56 @@ processors: - set: field: cisco_meraki.device_type value: MR -- dissect: - description: When type is rogue_ssid_detected +- grok: field: event.original - pattern: "%{} airmarshal_events %{} %{*ssid}='%{&ssid}' %{*bssid}='%{&bssid}' %{*src}='%{&src}' %{*dst}='%{&dst}' %{*wmac}='%{&wmac}' %{*vlanid}='%{&vlanid}' %{*ch}='%{&ch}' %{*rssi}='%{&rssi}' %{*fc_type}='%{&fc_type}' %{*fc_subtype}='%{&fc_subtype}'" - if: ctx?.cisco_meraki?.event_subtype == 'rogue_ssid_detected' + patterns: + - '%{GREEDYDATA} ssid=%{QS:_temp.ssid}%{SPACE}%{GREEDYDATA:_temp.kvline}' - dissect: - description: When type is ssid_spoofing_detected - field: event.original - pattern: "%{} airmarshal_events %{} %{*ssid}='%{&ssid}' %{*vap}='%{&vap}' %{*bssid}='%{&bssid}' %{*src}='%{&src}' %{*dst}='%{&dst}' %{*ch}='%{&ch}' %{*rssi}='%{&rssi}' %{*fc_type}='%{&fc_type}' %{*fc_subtype}='%{&fc_subtype}'" - if: ctx?.cisco_meraki?.event_subtype == 'ssid_spoofing_detected' + field: _temp.ssid + pattern: "'%{_temp.kv.ssid}'" +- kv: + field: _temp.kvline + field_split: " " + value_split: "=" + target_field: _temp.kv + strip_brackets: true - rename: - field: ssid + field: _temp.kv.ssid target_field: cisco_meraki.airmarshal.ssid + if: ctx?._temp?.kv?.ssid != null - rename: - field: bssid + field: _temp.kv.bssid target_field: cisco_meraki.airmarshal.bssid - rename: - field: vap + field: _temp.kv.vap target_field: cisco_meraki.airmarshal.vap if: ctx?.cisco_meraki?.event_subtype == 'ssid_spoofing_detected' - gsub: - field: src + field: _temp.kv.src target_field: source.mac pattern: '[-:.]' replacement: '-' - gsub: - field: dst + field: _temp.kv.dst target_field: destination.mac pattern: '[-:.]' replacement: '-' - gsub: - field: wired_mac + field: _temp.kv.wired_mac target_field: observer.mac pattern: '[-:.]' replacement: '-' if: ctx?.cisco_meraki?.event_subtype == 'rogue_ssid_detected' - rename: - field: vlan_id + field: _temp.kv.vlan_id target_field: network.vlan.id if: ctx?.cisco_meraki?.event_subtype == 'rogue_ssid_detected' - rename: - field: channel + field: _temp.kv.channel target_field: cisco_meraki.airmarshal.channel - rename: - field: fc_type + field: _temp.kv.fc_type target_field: cisco_meraki.airmarshal.fc_type - rename: - field: fc_subtype + field: _temp.kv.fc_subtype target_field: cisco_meraki.airmarshal.fc_subtype diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index a35e59f9232..7b43cab2cf9 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -75,11 +75,12 @@ processors: description: Process Site-to-Site VPN messages field: event.original patterns: - - '%{SYSLOGHDR}%{SPACE}%{NUMBER}%{SPACE}%{WORD}%{SPACE}events%{SPACE}(?i)Site-to-Site VPN:%{GREEDYDATA:cisco_meraki.site_to_site_vpn.raw}' + - '%{SYSLOGHDR}%{SPACE}%{NUMBER}%{SPACE}%{WORDORHOST}%{SPACE}events%{SPACE}(?i)Site-to-Site VPN:%{GREEDYDATA:cisco_meraki.site_to_site_vpn.raw}' pattern_definitions: SYSLOGPRI: '<%{NONNEGINT:log.syslog.priority:long}>' SYSLOGVER: '\b(?:\d{1,2})\b' SYSLOGHDR: '%{SYSLOGPRI}%{SYSLOGVER}' + WORDORHOST: '(?:%{WORD}|%{HOSTNAME})' if: ctx.event.original.startsWith('<') && ctx?.cisco_meraki?.event_subtype == "Site-to-Site VPN" #################################################### @@ -89,11 +90,12 @@ processors: - grok: field: event.original patterns: - - '%{SYSLOGHDR}%{SPACE}%{NUMBER}%{SPACE}%{WORD}%{SPACE}events%{SPACE}%{GREEDYDATA:_temp.rest}' + - '%{SYSLOGHDR}%{SPACE}%{NUMBER}%{SPACE}%{WORDORHOST}%{SPACE}events%{SPACE}%{GREEDYDATA:_temp.rest}' pattern_definitions: SYSLOGPRI: '<%{NONNEGINT:log.syslog.priority:long}>' SYSLOGVER: '\b(?:\d{1,2})\b' SYSLOGHDR: '%{SYSLOGPRI}%{SYSLOGVER}' + WORDORHOST: '(?:%{WORD}|%{HOSTNAME})' if: ctx.event.original.startsWith('<') && ['dfs_event', 'association', 'disassociation', 'wpa_deauth', 'wpa_auth', 'vpn_connectivity_change', '8021x_eap_failure', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype) - kv: field: _temp.rest diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 5299ea128dc..1dd6ee71297 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -108,6 +108,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | destination.address | Some event destination addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword | | destination.as.number | Unique number allocated to the autonomous system. The autonomous system number (ASN) uniquely identifies each network on the Internet. | long | | destination.as.organization.name | Organization name. | keyword | +| destination.as.organization.name.text | Multi-field of `destination.as.organization.name`. | match_only_text | | destination.bytes | Bytes sent from the destination to the source. | long | | destination.domain | The domain name of the destination system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | | destination.geo.city_name | City name. | keyword | @@ -146,6 +147,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | file.extension | File extension, excluding the leading dot. Note that when the file name has multiple extensions (example.tar.gz), only the last one should be captured ("gz", not "tar.gz"). | keyword | | file.name | Name of the file including the extension, without the directory. | keyword | | file.path | Full path to the file, including the file name. It should include the drive letter, when appropriate. | keyword | +| file.path.text | Multi-field of `file.path`. | match_only_text | | file.size | File size in bytes. Only relevant when `file.type` is "file". | long | | file.type | File type (file, dir, or symlink). | keyword | | geo.city_name | City name. | keyword | @@ -160,7 +162,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | | http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | | http.request.referrer | Referrer for this HTTP request. | keyword | -| input.type | Input type. | keyword | +| input.type | Type of Filebeat input. | keyword | | log.file.path | Full path to the log file this event came from. | keyword | | log.flags | Flags for the log file. | keyword | | log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | @@ -186,11 +188,15 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | observer.vendor | Vendor name of the observer. | keyword | | observer.version | Observer version. | keyword | | process.name | Process name. Sometimes called program name or similar. | keyword | +| process.name.text | Multi-field of `process.name`. | match_only_text | | process.parent.name | Process name. Sometimes called program name or similar. | keyword | +| process.parent.name.text | Multi-field of `process.parent.name`. | match_only_text | | process.parent.pid | Process id. | long | | process.parent.title | Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | keyword | +| process.parent.title.text | Multi-field of `process.parent.title`. | match_only_text | | process.pid | Process id. | long | | process.title | Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | keyword | +| process.title.text | Multi-field of `process.title`. | match_only_text | | related.hosts | All hostnames or other host identifiers seen on your event. Example identifiers include FQDNs, domain names, workstation names, or aliases. | keyword | | related.ip | All of the IPs seen on your event. | ip | | related.user | All the user names or other user identifiers seen on the event. | keyword | @@ -204,6 +210,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | source.address | Some event source addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword | | source.as.number | Unique number allocated to the autonomous system. The autonomous system number (ASN) uniquely identifies each network on the Internet. | long | | source.as.organization.name | Organization name. | keyword | +| source.as.organization.name.text | Multi-field of `source.as.organization.name`. | match_only_text | | source.bytes | Bytes sent from the source to the destination. | long | | source.domain | The domain name of the source system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | | source.geo.city_name | City name. | keyword | @@ -230,15 +237,19 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | threat.software.type | The type of software used by this threat to conduct behavior commonly modeled using MITRE ATT&CK®. Recommended values \* Malware \* Tool While not required, you can use a MITRE ATT&CK® software type. | keyword | | url.domain | Domain of the url, such as "www.elastic.co". In some cases a URL may refer to an IP and/or port directly, without a domain name. In this case, the IP address would go to the `domain` field. If the URL contains a literal IPv6 address enclosed by `[` and `]` (IETF RFC 2732), the `[` and `]` characters should also be captured in the `domain` field. | keyword | | url.original | Unmodified original url as seen in the event source. Note that in network monitoring, the observed URL may be a full URL, whereas in access logs, the URL is often just represented as a path. This field is meant to represent the URL as it was observed, complete or not. | wildcard | +| url.original.text | Multi-field of `url.original`. | match_only_text | | url.path | Path of the request, such as "/search". | wildcard | | url.query | The query field describes the query string of the request, such as "q=elasticsearch". The `?` is excluded from the query string. If a URL contains no `?`, there is no query field. If there is a `?` but no query, the query field exists with an empty string. The `exists` query can be used to differentiate between the two cases. | keyword | | url.registered_domain | The highest registered url domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | | url.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | | user.domain | Name of the directory the user is a member of. For example, an LDAP or Active Directory domain name. | keyword | | user.full_name | User's full name, if available. | keyword | +| user.full_name.text | Multi-field of `user.full_name`. | match_only_text | | user.id | Unique identifier of the user. | keyword | | user.name | Short name or login of the user. | keyword | +| user.name.text | Multi-field of `user.name`. | match_only_text | | user_agent.original | Unparsed user_agent string. | keyword | +| user_agent.original.text | Multi-field of `user_agent.original`. | match_only_text | An example event for `log` looks as following: @@ -380,6 +391,7 @@ An example event for `log` looks as following: | destination.address | Some event destination addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword | | destination.as.number | Unique number allocated to the autonomous system. The autonomous system number (ASN) uniquely identifies each network on the Internet. | long | | destination.as.organization.name | Organization name. | keyword | +| destination.as.organization.name.text | Multi-field of `destination.as.organization.name`. | match_only_text | | destination.bytes | Bytes sent from the destination to the source. | long | | destination.domain | The domain name of the destination system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | | destination.geo.city_name | City name. | keyword | @@ -414,6 +426,7 @@ An example event for `log` looks as following: | file.extension | File extension, excluding the leading dot. Note that when the file name has multiple extensions (example.tar.gz), only the last one should be captured ("gz", not "tar.gz"). | keyword | | file.name | Name of the file including the extension, without the directory. | keyword | | file.path | Full path to the file, including the file name. It should include the drive letter, when appropriate. | keyword | +| file.path.text | Multi-field of `file.path`. | match_only_text | | file.size | File size in bytes. Only relevant when `file.type` is "file". | long | | file.type | File type (file, dir, or symlink). | keyword | | geo.city_name | City name. | keyword | @@ -428,7 +441,7 @@ An example event for `log` looks as following: | host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | | http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | | http.request.referrer | Referrer for this HTTP request. | keyword | -| input.type | Type of Filebeat input. | keyword | +| input.type | Input type. | keyword | | log.file.path | Full path to the log file this event came from. | keyword | | log.flags | Flags for the log file. | keyword | | log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | @@ -451,11 +464,15 @@ An example event for `log` looks as following: | observer.vendor | Vendor name of the observer. | keyword | | observer.version | Observer version. | keyword | | process.name | Process name. Sometimes called program name or similar. | keyword | +| process.name.text | Multi-field of `process.name`. | match_only_text | | process.parent.name | Process name. Sometimes called program name or similar. | keyword | +| process.parent.name.text | Multi-field of `process.parent.name`. | match_only_text | | process.parent.pid | Process id. | long | | process.parent.title | Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | keyword | +| process.parent.title.text | Multi-field of `process.parent.title`. | match_only_text | | process.pid | Process id. | long | | process.title | Process title. The proctitle, some times the same as process name. Can also be different: for example a browser setting its title to the web page currently opened. | keyword | +| process.title.text | Multi-field of `process.title`. | match_only_text | | related.hosts | All hostnames or other host identifiers seen on your event. Example identifiers include FQDNs, domain names, workstation names, or aliases. | keyword | | related.ip | All of the IPs seen on your event. | ip | | related.user | All the user names or other user identifiers seen on the event. | keyword | @@ -468,6 +485,7 @@ An example event for `log` looks as following: | source.address | Some event source addresses are defined ambiguously. The event will sometimes list an IP, a domain or a unix socket. You should always store the raw address in the `.address` field. Then it should be duplicated to `.ip` or `.domain`, depending on which one it is. | keyword | | source.as.number | Unique number allocated to the autonomous system. The autonomous system number (ASN) uniquely identifies each network on the Internet. | long | | source.as.organization.name | Organization name. | keyword | +| source.as.organization.name.text | Multi-field of `source.as.organization.name`. | match_only_text | | source.bytes | Bytes sent from the source to the destination. | long | | source.domain | The domain name of the source system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | | source.geo.city_name | City name. | keyword | @@ -484,15 +502,19 @@ An example event for `log` looks as following: | tags | List of keywords used to tag each event. | keyword | | url.domain | Domain of the url, such as "www.elastic.co". In some cases a URL may refer to an IP and/or port directly, without a domain name. In this case, the IP address would go to the `domain` field. If the URL contains a literal IPv6 address enclosed by `[` and `]` (IETF RFC 2732), the `[` and `]` characters should also be captured in the `domain` field. | keyword | | url.original | Unmodified original url as seen in the event source. Note that in network monitoring, the observed URL may be a full URL, whereas in access logs, the URL is often just represented as a path. This field is meant to represent the URL as it was observed, complete or not. | wildcard | +| url.original.text | Multi-field of `url.original`. | match_only_text | | url.path | Path of the request, such as "/search". | wildcard | | url.query | The query field describes the query string of the request, such as "q=elasticsearch". The `?` is excluded from the query string. If a URL contains no `?`, there is no query field. If there is a `?` but no query, the query field exists with an empty string. The `exists` query can be used to differentiate between the two cases. | keyword | | url.registered_domain | The highest registered url domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | | url.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | | user.domain | Name of the directory the user is a member of. For example, an LDAP or Active Directory domain name. | keyword | | user.full_name | User's full name, if available. | keyword | +| user.full_name.text | Multi-field of `user.full_name`. | match_only_text | | user.id | Unique identifier of the user. | keyword | | user.name | Short name or login of the user. | keyword | +| user.name.text | Multi-field of `user.name`. | match_only_text | | user_agent.original | Unparsed user_agent string. | keyword | +| user_agent.original.text | Multi-field of `user_agent.original`. | match_only_text | An example event for `events` looks as following: From 5748b24f0a363854be38ad4df8dd35d014ac786a Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 4 Apr 2022 16:16:41 +1000 Subject: [PATCH 36/67] convert last_seen to date --- .../_dev/test/pipeline/test-security-events.log-expected.json | 4 ++-- .../log/elasticsearch/ingest_pipeline/idsalerts.yml | 3 ++- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index 8d8337c25b3..e16ee2edd7e 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -231,7 +231,7 @@ ], "threat": { "indicator": { - "last_seen": "1637783891.512569" + "last_seen": "2021-11-24T19:58:11.512Z" } } }, @@ -276,7 +276,7 @@ ], "threat": { "indicator": { - "last_seen": "1637790201.238064" + "last_seen": "2021-11-24T21:43:21.238Z" } } } diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml index 043da6a9745..ddb4d99d6ac 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml @@ -17,9 +17,10 @@ processors: - rename: field: signature target_field: cisco_meraki.security.signature -- rename: +- date: field: timestamp target_field: threat.indicator.last_seen + formats: ['UNIX'] - rename: field: direction target_field: network.direction From 811ed78cb316e4fd3fd0a8ffd3dcbc6ed2613ae0 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Mon, 4 Apr 2022 16:21:21 +1000 Subject: [PATCH 37/67] add cloud and container field decls --- .../data_stream/log/fields/agent.yml | 207 ++++++++++++++++++ packages/cisco_meraki/docs/README.md | 27 ++- 2 files changed, 233 insertions(+), 1 deletion(-) diff --git a/packages/cisco_meraki/data_stream/log/fields/agent.yml b/packages/cisco_meraki/data_stream/log/fields/agent.yml index b4f84cf84a4..c2cceee2d3f 100644 --- a/packages/cisco_meraki/data_stream/log/fields/agent.yml +++ b/packages/cisco_meraki/data_stream/log/fields/agent.yml @@ -1,3 +1,210 @@ +- name: cloud + title: Cloud + group: 2 + description: Fields related to the cloud or infrastructure the events are coming from. + footnote: 'Examples: If Metricbeat is running on an EC2 host and fetches data from its host, the cloud info contains the data about this machine. If Metricbeat runs on a remote machine outside the cloud and fetches data from a service running in the cloud, the field contains cloud data from the machine the service is running on.' + type: group + fields: + - name: account.id + level: extended + type: keyword + ignore_above: 1024 + description: 'The cloud account or organization id used to identify different entities in a multi-tenant environment. + + Examples: AWS account id, Google Cloud ORG Id, or other unique identifier.' + example: 666777888999 + - name: availability_zone + level: extended + type: keyword + ignore_above: 1024 + description: Availability zone in which this host is running. + example: us-east-1c + - name: instance.id + level: extended + type: keyword + ignore_above: 1024 + description: Instance ID of the host machine. + example: i-1234567890abcdef0 + - name: instance.name + level: extended + type: keyword + ignore_above: 1024 + description: Instance name of the host machine. + - name: machine.type + level: extended + type: keyword + ignore_above: 1024 + description: Machine type of the host machine. + example: t2.medium + - name: provider + level: extended + type: keyword + ignore_above: 1024 + description: Name of the cloud provider. Example values are aws, azure, gcp, or digitalocean. + example: aws + - name: region + level: extended + type: keyword + ignore_above: 1024 + description: Region in which this host is running. + example: us-east-1 + - name: project.id + type: keyword + description: Name of the project in Google Cloud. + - name: image.id + type: keyword + description: Image ID for the cloud instance. +- name: container + title: Container + group: 2 + description: 'Container fields are used for meta information about the specific container that is the source of information. + + These fields help correlate data based containers from any runtime.' + type: group + fields: + - name: id + level: core + type: keyword + ignore_above: 1024 + description: Unique container id. + - name: image.name + level: extended + type: keyword + ignore_above: 1024 + description: Name of the image the container was built on. + - name: labels + level: extended + type: object + object_type: keyword + description: Image labels. + - name: name + level: extended + type: keyword + ignore_above: 1024 + description: Container name. +- name: host + title: Host + group: 2 + description: 'A host is defined as a general computing instance. + + ECS host.* fields should be populated with details about the host on which the event happened, or from which the measurement was taken. Host types include hardware, virtual machines, Docker containers, and Kubernetes nodes.' + type: group + fields: + - name: architecture + level: core + type: keyword + ignore_above: 1024 + description: Operating system architecture. + example: x86_64 + - name: domain + level: extended + type: keyword + ignore_above: 1024 + description: 'Name of the domain of which the host is a member. + + For example, on Windows this could be the host''s Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host''s LDAP provider.' + example: CONTOSO + default_field: false + - name: hostname + level: core + type: keyword + ignore_above: 1024 + description: 'Hostname of the host. + + It normally contains what the `hostname` command returns on the host machine.' + - name: id + level: core + type: keyword + ignore_above: 1024 + description: 'Unique host id. + + As hostname is not always unique, use values that are meaningful in your environment. + + Example: The current usage of `beat.name`.' + - name: ip + level: core + type: ip + description: Host ip addresses. + - name: mac + level: core + type: keyword + ignore_above: 1024 + description: Host mac addresses. + - name: name + level: core + type: keyword + ignore_above: 1024 + description: 'Name of the host. + + It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use.' + - name: os.family + level: extended + type: keyword + ignore_above: 1024 + description: OS family (such as redhat, debian, freebsd, windows). + example: debian + - name: os.kernel + level: extended + type: keyword + ignore_above: 1024 + description: Operating system kernel version as a raw string. + example: 4.4.0-112-generic + - name: os.name + level: extended + type: keyword + ignore_above: 1024 + multi_fields: + - name: text + type: text + norms: false + default_field: false + description: Operating system name, without the version. + example: Mac OS X + - name: os.platform + level: extended + type: keyword + ignore_above: 1024 + description: Operating system platform (such centos, ubuntu, windows). + example: darwin + - name: os.version + level: extended + type: keyword + ignore_above: 1024 + description: Operating system version as a raw string. + example: 10.14.1 + - name: type + level: core + type: keyword + ignore_above: 1024 + description: 'Type of host. + + For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment.' + - name: containerized + type: boolean + description: > + If the host is a container. + + - name: os.build + type: keyword + example: "18D109" + description: > + OS build information. + + - name: os.codename + type: keyword + example: "stretch" + description: > + OS codename, if any. + - name: input.type type: keyword description: Input type. +- name: log.offset + type: long + description: Offset of the entry in the log file. +- name: log.file.path + type: keyword + description: Path to the log file. +- name: log.source.address + type: keyword + description: Source address from which the log event was read / sent from. diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 1dd6ee71297..35bd14d1051 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -57,7 +57,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | Field | Description | Type | |---|---|---| -| @timestamp | Event timestamp. | date | +| @timestamp | Date/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. | date | | cisco_meraki.8021x_deauth | | flattened | | cisco_meraki.8021x_eap_failure | | flattened | | cisco_meraki.8021x_eap_success | | flattened | @@ -101,7 +101,19 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | client.registered_domain | The highest registered client domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | | client.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | | client.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| cloud.account.id | The cloud account or organization id used to identify different entities in a multi-tenant environment. Examples: AWS account id, Google Cloud ORG Id, or other unique identifier. | keyword | +| cloud.availability_zone | Availability zone in which this host is running. | keyword | +| cloud.image.id | Image ID for the cloud instance. | keyword | +| cloud.instance.id | Instance ID of the host machine. | keyword | +| cloud.instance.name | Instance name of the host machine. | keyword | +| cloud.machine.type | Machine type of the host machine. | keyword | +| cloud.project.id | Name of the project in Google Cloud. | keyword | +| cloud.provider | Name of the cloud provider. Example values are aws, azure, gcp, or digitalocean. | keyword | +| cloud.region | Region in which this host is running. | keyword | | container.id | Unique container id. | keyword | +| container.image.name | Name of the image the container was built on. | keyword | +| container.labels | Image labels. | object | +| container.name | Container name. | keyword | | data_stream.dataset | Data stream dataset. | constant_keyword | | data_stream.namespace | Data stream namespace. | constant_keyword | | data_stream.type | Data stream type. | constant_keyword | @@ -156,10 +168,23 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | geo.region_name | Region name. | keyword | | group.id | Unique identifier for the group on the system/platform. | keyword | | group.name | Name of the group. | keyword | +| host.architecture | Operating system architecture. | keyword | +| host.containerized | If the host is a container. | boolean | +| host.domain | Name of the domain of which the host is a member. For example, on Windows this could be the host's Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host's LDAP provider. | keyword | | host.hostname | Hostname of the host. It normally contains what the `hostname` command returns on the host machine. | keyword | +| host.id | Unique host id. As hostname is not always unique, use values that are meaningful in your environment. Example: The current usage of `beat.name`. | keyword | | host.ip | Host ip addresses. | ip | | host.mac | Host MAC addresses. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | | host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | +| host.os.build | OS build information. | keyword | +| host.os.codename | OS codename, if any. | keyword | +| host.os.family | OS family (such as redhat, debian, freebsd, windows). | keyword | +| host.os.kernel | Operating system kernel version as a raw string. | keyword | +| host.os.name | Operating system name, without the version. | keyword | +| host.os.name.text | Multi-field of `host.os.name`. | text | +| host.os.platform | Operating system platform (such centos, ubuntu, windows). | keyword | +| host.os.version | Operating system version as a raw string. | keyword | +| host.type | Type of host. For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment. | keyword | | http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | | http.request.referrer | Referrer for this HTTP request. | keyword | | input.type | Type of Filebeat input. | keyword | From de6aad3cec6169542ed35cf6375bd972730b6a74 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 5 Apr 2022 15:02:00 +1000 Subject: [PATCH 38/67] events: pipeline for top-level fields and event handling --- .../test-mx-events.json-expected.json | 34 ++- .../elasticsearch/ingest_pipeline/default.yml | 80 +++++++ .../data_stream/events/fields/agent.yml | 207 ++++++++++++++++++ .../data_stream/events/fields/ecs.yml | 74 +++++++ .../elasticsearch/ingest_pipeline/default.yml | 4 + packages/cisco_meraki/docs/README.md | 59 ++++- 6 files changed, 447 insertions(+), 11 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json index 99733ed7dca..3ada70d3c10 100644 --- a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json +++ b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json @@ -1,6 +1,7 @@ { "expected": [ { + "@timestamp": "2018-02-11T00:00:00.123Z", "cisco_meraki": { "event": { "alertData": { @@ -12,23 +13,14 @@ }, "alertId": "0000000000000000", "alertLevel": "informational", - "alertType": "Cellular came up", "alertTypeId": "cellular_up", - "deviceMac": "00:11:22:33:44:55", - "deviceModel": "MX", - "deviceName": "My appliance", - "deviceSerial": "Q234-ABCD-5678", "deviceTags": [ "tag1", "tag2" ], "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", "networkId": "N_24329156", - "networkName": "Main Office", "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", - "occurredAt": "2018-02-11T00:00:00.123450Z", - "organizationId": "2930418", - "organizationName": "My organization", "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", "sentAt": "2021-10-07T08:42:00.926325Z", "sharedSecret": "secret", @@ -37,6 +29,30 @@ }, "ecs": { "version": "8.0.0" + }, + "event": { + "action": "Cellular came up", + "category": [ + "network" + ], + "type": [ + "info", + "start" + ] + }, + "network": { + "name": "Main Office" + }, + "observer": { + "mac": "00-11-22-33-44-55", + "name": "My appliance", + "product": "MX", + "serial_number": "Q234-ABCD-5678", + "vendor": "Cisco" + }, + "organization": { + "id": "2930418", + "name": "My organization" } } ] diff --git a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml index a74736eaabe..5efb522f5ba 100644 --- a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml @@ -4,6 +4,77 @@ processors: - set: field: ecs.version value: '8.0.0' +- set: + field: observer.serial_number + copy_from: json.deviceSerial +- gsub: + field: json.deviceMac + target_field: observer.mac + pattern: '[-:.]' + replacement: '-' +- set: + field: observer.name + copy_from: json.deviceName +- set: + field: observer.vendor + value: Cisco +- set: + field: observer.product + copy_from: json.deviceModel +- set: + field: network.name + copy_from: json.networkName +- date: + field: json.occurredAt + formats: + - ISO8601 +- set: + field: organization.id + copy_from: json.organizationId +- set: + field: organization.name + copy_from: json.organizationName +- append: + field: event.category + value: network +- append: + field: event.type + value: info +- script: + lang: painless + description: The script sets event type, action and category based on type and sub-type fields + params: + eventmap: + "cellular_up": + type: + - start + source: |- + def alertTypeId = ctx.json.alertTypeId; + if (alertTypeId == null) { + return; + } + def eventMap = params.get('eventmap'); + def eventData = eventMap.get(alertTypeId); + if (eventData == null) { + ctx.event.action = 'unknown-' + alertTypeId; + return; + } + def eventCategory = eventData.get('category'); + if (eventCategory != null) { + for (def c : eventCategory) { + ctx.event.category.add(c); + } + } + + def eventType = eventData.get('type'); + if (eventType != null) { + for (def t : eventType) { + ctx.event.type.add(t); + } + } + ctx.event.action = ctx.json.alertType; + return; + - set: field: cisco_meraki.event copy_from: json @@ -13,6 +84,15 @@ processors: - remove: field: - json + - cisco_meraki.event.deviceSerial + - cisco_meraki.event.deviceMac + - cisco_meraki.event.deviceName + - cisco_meraki.event.deviceModel + - cisco_meraki.event.occurredAt + - cisco_meraki.event.networkName + - cisco_meraki.event.organizationId + - cisco_meraki.event.organizationName + - cisco_meraki.event.alertType ignore_missing: true - remove: field: event.original diff --git a/packages/cisco_meraki/data_stream/events/fields/agent.yml b/packages/cisco_meraki/data_stream/events/fields/agent.yml index b4f84cf84a4..c2cceee2d3f 100644 --- a/packages/cisco_meraki/data_stream/events/fields/agent.yml +++ b/packages/cisco_meraki/data_stream/events/fields/agent.yml @@ -1,3 +1,210 @@ +- name: cloud + title: Cloud + group: 2 + description: Fields related to the cloud or infrastructure the events are coming from. + footnote: 'Examples: If Metricbeat is running on an EC2 host and fetches data from its host, the cloud info contains the data about this machine. If Metricbeat runs on a remote machine outside the cloud and fetches data from a service running in the cloud, the field contains cloud data from the machine the service is running on.' + type: group + fields: + - name: account.id + level: extended + type: keyword + ignore_above: 1024 + description: 'The cloud account or organization id used to identify different entities in a multi-tenant environment. + + Examples: AWS account id, Google Cloud ORG Id, or other unique identifier.' + example: 666777888999 + - name: availability_zone + level: extended + type: keyword + ignore_above: 1024 + description: Availability zone in which this host is running. + example: us-east-1c + - name: instance.id + level: extended + type: keyword + ignore_above: 1024 + description: Instance ID of the host machine. + example: i-1234567890abcdef0 + - name: instance.name + level: extended + type: keyword + ignore_above: 1024 + description: Instance name of the host machine. + - name: machine.type + level: extended + type: keyword + ignore_above: 1024 + description: Machine type of the host machine. + example: t2.medium + - name: provider + level: extended + type: keyword + ignore_above: 1024 + description: Name of the cloud provider. Example values are aws, azure, gcp, or digitalocean. + example: aws + - name: region + level: extended + type: keyword + ignore_above: 1024 + description: Region in which this host is running. + example: us-east-1 + - name: project.id + type: keyword + description: Name of the project in Google Cloud. + - name: image.id + type: keyword + description: Image ID for the cloud instance. +- name: container + title: Container + group: 2 + description: 'Container fields are used for meta information about the specific container that is the source of information. + + These fields help correlate data based containers from any runtime.' + type: group + fields: + - name: id + level: core + type: keyword + ignore_above: 1024 + description: Unique container id. + - name: image.name + level: extended + type: keyword + ignore_above: 1024 + description: Name of the image the container was built on. + - name: labels + level: extended + type: object + object_type: keyword + description: Image labels. + - name: name + level: extended + type: keyword + ignore_above: 1024 + description: Container name. +- name: host + title: Host + group: 2 + description: 'A host is defined as a general computing instance. + + ECS host.* fields should be populated with details about the host on which the event happened, or from which the measurement was taken. Host types include hardware, virtual machines, Docker containers, and Kubernetes nodes.' + type: group + fields: + - name: architecture + level: core + type: keyword + ignore_above: 1024 + description: Operating system architecture. + example: x86_64 + - name: domain + level: extended + type: keyword + ignore_above: 1024 + description: 'Name of the domain of which the host is a member. + + For example, on Windows this could be the host''s Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host''s LDAP provider.' + example: CONTOSO + default_field: false + - name: hostname + level: core + type: keyword + ignore_above: 1024 + description: 'Hostname of the host. + + It normally contains what the `hostname` command returns on the host machine.' + - name: id + level: core + type: keyword + ignore_above: 1024 + description: 'Unique host id. + + As hostname is not always unique, use values that are meaningful in your environment. + + Example: The current usage of `beat.name`.' + - name: ip + level: core + type: ip + description: Host ip addresses. + - name: mac + level: core + type: keyword + ignore_above: 1024 + description: Host mac addresses. + - name: name + level: core + type: keyword + ignore_above: 1024 + description: 'Name of the host. + + It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use.' + - name: os.family + level: extended + type: keyword + ignore_above: 1024 + description: OS family (such as redhat, debian, freebsd, windows). + example: debian + - name: os.kernel + level: extended + type: keyword + ignore_above: 1024 + description: Operating system kernel version as a raw string. + example: 4.4.0-112-generic + - name: os.name + level: extended + type: keyword + ignore_above: 1024 + multi_fields: + - name: text + type: text + norms: false + default_field: false + description: Operating system name, without the version. + example: Mac OS X + - name: os.platform + level: extended + type: keyword + ignore_above: 1024 + description: Operating system platform (such centos, ubuntu, windows). + example: darwin + - name: os.version + level: extended + type: keyword + ignore_above: 1024 + description: Operating system version as a raw string. + example: 10.14.1 + - name: type + level: core + type: keyword + ignore_above: 1024 + description: 'Type of host. + + For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment.' + - name: containerized + type: boolean + description: > + If the host is a container. + + - name: os.build + type: keyword + example: "18D109" + description: > + OS build information. + + - name: os.codename + type: keyword + example: "stretch" + description: > + OS codename, if any. + - name: input.type type: keyword description: Input type. +- name: log.offset + type: long + description: Offset of the entry in the log file. +- name: log.file.path + type: keyword + description: Path to the log file. +- name: log.source.address + type: keyword + description: Source address from which the log event was read / sent from. diff --git a/packages/cisco_meraki/data_stream/events/fields/ecs.yml b/packages/cisco_meraki/data_stream/events/fields/ecs.yml index 1da8c39a341..957ea19f901 100644 --- a/packages/cisco_meraki/data_stream/events/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/events/fields/ecs.yml @@ -1,5 +1,9 @@ - external: ecs name: '@timestamp' +- external: ecs + name: client.ip +- external: ecs + name: client.mac - external: ecs name: client.domain - external: ecs @@ -70,6 +74,10 @@ name: event.outcome - external: ecs name: event.timezone +- external: ecs + name: event.type +- external: ecs + name: event.category - external: ecs name: file.attributes - external: ecs @@ -142,6 +150,12 @@ name: observer.vendor - external: ecs name: observer.version +- external: ecs + name: observer.mac +- external: ecs + name: observer.name +- external: ecs + name: observer.serial_number - external: ecs name: process.name - external: ecs @@ -162,6 +176,8 @@ name: related.user - external: ecs name: rule.name +- external: ecs + name: server.mac - external: ecs name: server.domain - external: ecs @@ -230,3 +246,61 @@ name: user.name - external: ecs name: user_agent.original +- external: ecs + name: observer.hostname +- external: ecs + name: destination.geo.continent_name +- external: ecs + name: destination.geo.country_iso_code +- external: ecs + name: destination.geo.region_iso_code +- external: ecs + name: destination.geo.region_name +- external: ecs + name: source.geo.continent_name +- external: ecs + name: source.geo.country_iso_code +- external: ecs + name: source.geo.region_iso_code +- external: ecs + name: source.geo.region_name +- external: ecs + name: network.vlan.id +- external: ecs + name: threat.software.type +- external: ecs + name: threat.indicator.last_seen +- external: ecs + name: threat.indicator.description +- external: ecs + name: threat.indicator.reference +- external: ecs + name: threat.indicator.file.name +- external: ecs + name: threat.indicator.file.hash.sha256 +- external: ecs + name: network.direction +- external: ecs + name: network.protocol +- external: ecs + name: client.geo.city_name +- external: ecs + name: client.geo.continent_name +- external: ecs + name: client.geo.country_iso_code +- external: ecs + name: client.geo.country_name +- external: ecs + name: client.geo.location.lat +- external: ecs + name: client.geo.location.lon +- external: ecs + name: client.geo.region_iso_code +- external: ecs + name: client.geo.region_name +- external: ecs + name: organization.id +- external: ecs + name: organization.name +- external: ecs + name: network.name diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 3b43e8d886d..fe32fd5fe57 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -224,6 +224,10 @@ processors: - indicator action: ssid-spoofing-detected source: |- + ctx.event.type = new ArrayList(); + ctx.event.category = new ArrayList(); + ctx.event.action = ''; + def eventSubtype = ctx.cisco_meraki.event_subtype; if (eventSubtype == null) { return; diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 35bd14d1051..1cc9847e546 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -406,10 +406,32 @@ An example event for `log` looks as following: | cisco_meraki.event.sharedSecret | User defined secret to be validated by the webhook receiver (optional) | keyword | | cisco_meraki.event.version | Current version of webhook format | keyword | | client.domain | The domain name of the client system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| client.geo.city_name | City name. | keyword | +| client.geo.continent_name | Name of the continent. | keyword | +| client.geo.country_iso_code | Country ISO code. | keyword | +| client.geo.country_name | Country name. | keyword | +| client.geo.location.lat | Longitude and latitude. | geo_point | +| client.geo.location.lon | Longitude and latitude. | geo_point | +| client.geo.region_iso_code | Region ISO code. | keyword | +| client.geo.region_name | Region name. | keyword | +| client.ip | IP address of the client (IPv4 or IPv6). | ip | +| client.mac | MAC address of the client. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | | client.registered_domain | The highest registered client domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | | client.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | | client.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | +| cloud.account.id | The cloud account or organization id used to identify different entities in a multi-tenant environment. Examples: AWS account id, Google Cloud ORG Id, or other unique identifier. | keyword | +| cloud.availability_zone | Availability zone in which this host is running. | keyword | +| cloud.image.id | Image ID for the cloud instance. | keyword | +| cloud.instance.id | Instance ID of the host machine. | keyword | +| cloud.instance.name | Instance name of the host machine. | keyword | +| cloud.machine.type | Machine type of the host machine. | keyword | +| cloud.project.id | Name of the project in Google Cloud. | keyword | +| cloud.provider | Name of the cloud provider. Example values are aws, azure, gcp, or digitalocean. | keyword | +| cloud.region | Region in which this host is running. | keyword | | container.id | Unique container id. | keyword | +| container.image.name | Name of the image the container was built on. | keyword | +| container.labels | Image labels. | object | +| container.name | Container name. | keyword | | data_stream.dataset | Data stream dataset. | constant_keyword | | data_stream.namespace | Data stream namespace. | constant_keyword | | data_stream.type | Data stream type. | constant_keyword | @@ -420,8 +442,12 @@ An example event for `log` looks as following: | destination.bytes | Bytes sent from the destination to the source. | long | | destination.domain | The domain name of the destination system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | | destination.geo.city_name | City name. | keyword | +| destination.geo.continent_name | Name of the continent. | keyword | +| destination.geo.country_iso_code | Country ISO code. | keyword | | destination.geo.country_name | Country name. | keyword | | destination.geo.location | Longitude and latitude. | geo_point | +| destination.geo.region_iso_code | Region ISO code. | keyword | +| destination.geo.region_name | Region name. | keyword | | destination.ip | IP address of the destination (IPv4 or IPv6). | ip | | destination.mac | MAC address of the destination. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | | destination.nat.ip | Translated ip of destination based NAT sessions (e.g. internet to private DMZ) Typically used with load balancers, firewalls, or routers. | ip | @@ -439,6 +465,7 @@ An example event for `log` looks as following: | ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword | | error.message | Error message. | match_only_text | | event.action | The action captured by the event. This describes the information in the event. It is more specific than `event.category`. Examples are `group-add`, `process-started`, `file-created`. The value is normally defined by the implementer. | keyword | +| event.category | This is one of four ECS Categorization Fields, and indicates the second level in the ECS category hierarchy. `event.category` represents the "big buckets" of ECS categories. For example, filtering on `event.category:process` yields all events relating to process activity. This field is closely related to `event.type`, which is used as a subcategory. This field is an array. This will allow proper categorization of some events that fall in multiple categories. | keyword | | event.code | Identification code for this event, if one exists. Some event sources use event codes to identify messages unambiguously, regardless of message language or wording adjustments over time. An example of this is the Windows Event ID. | keyword | | event.dataset | Event dataset | constant_keyword | | event.ingested | Timestamp when an event arrived in the central data store. This is different from `@timestamp`, which is when the event originally occurred. It's also different from `event.created`, which is meant to capture the first time an agent saw the event. In normal conditions, assuming no tampering, the timestamps should chronologically look like this: `@timestamp` \< `event.created` \< `event.ingested`. | date | @@ -446,6 +473,7 @@ An example event for `log` looks as following: | event.original | Raw text message of entire event. Used to demonstrate log integrity or where the full log message (before splitting it up in multiple parts) may be required, e.g. for reindex. This field is not indexed and doc_values are disabled. It cannot be searched, but it can be retrieved from `_source`. If users wish to override this and index this field, please see `Field data types` in the `Elasticsearch Reference`. | keyword | | event.outcome | This is one of four ECS Categorization Fields, and indicates the lowest level in the ECS category hierarchy. `event.outcome` simply denotes whether the event represents a success or a failure from the perspective of the entity that produced the event. Note that when a single transaction is described in multiple events, each event may populate different values of `event.outcome`, according to their perspective. Also note that in the case of a compound event (a single event that contains multiple logical events), this field should be populated with the value that best captures the overall success or failure from the perspective of the event producer. Further note that not all events will have an associated outcome. For example, this field is generally not populated for metric events, events with `event.type:info`, or any events for which an outcome does not make logical sense. | keyword | | event.timezone | This field should be populated when the event's timestamp does not include timezone information already (e.g. default Syslog timestamps). It's optional otherwise. Acceptable timezone formats are: a canonical ID (e.g. "Europe/Amsterdam"), abbreviated (e.g. "EST") or an HH:mm differential (e.g. "-05:00"). | keyword | +| event.type | This is one of four ECS Categorization Fields, and indicates the third level in the ECS category hierarchy. `event.type` represents a categorization "sub-bucket" that, when used along with the `event.category` field values, enables filtering events down to a level appropriate for single visualization. This field is an array. This will allow proper categorization of some events that fall in multiple event types. | keyword | | file.attributes | Array of file attributes. Attributes names will vary by platform. Here's a non-exhaustive list of values that are expected in this field: archive, compressed, directory, encrypted, execute, hidden, read, readonly, system, write. | keyword | | file.directory | Directory where the file is located. It should include the drive letter, when appropriate. | keyword | | file.extension | File extension, excluding the leading dot. Note that when the file name has multiple extensions (example.tar.gz), only the last one should be captured ("gz", not "tar.gz"). | keyword | @@ -460,14 +488,27 @@ An example event for `log` looks as following: | geo.region_name | Region name. | keyword | | group.id | Unique identifier for the group on the system/platform. | keyword | | group.name | Name of the group. | keyword | +| host.architecture | Operating system architecture. | keyword | +| host.containerized | If the host is a container. | boolean | +| host.domain | Name of the domain of which the host is a member. For example, on Windows this could be the host's Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host's LDAP provider. | keyword | | host.hostname | Hostname of the host. It normally contains what the `hostname` command returns on the host machine. | keyword | +| host.id | Unique host id. As hostname is not always unique, use values that are meaningful in your environment. Example: The current usage of `beat.name`. | keyword | | host.ip | Host ip addresses. | ip | | host.mac | Host MAC addresses. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | | host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | +| host.os.build | OS build information. | keyword | +| host.os.codename | OS codename, if any. | keyword | +| host.os.family | OS family (such as redhat, debian, freebsd, windows). | keyword | +| host.os.kernel | Operating system kernel version as a raw string. | keyword | +| host.os.name | Operating system name, without the version. | keyword | +| host.os.name.text | Multi-field of `host.os.name`. | text | +| host.os.platform | Operating system platform (such centos, ubuntu, windows). | keyword | +| host.os.version | Operating system version as a raw string. | keyword | +| host.type | Type of host. For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment. | keyword | | http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | | http.request.referrer | Referrer for this HTTP request. | keyword | -| input.type | Input type. | keyword | -| log.file.path | Full path to the log file this event came from. | keyword | +| input.type | Type of Filebeat input. | keyword | +| log.file.path | Path to the log file. | keyword | | log.flags | Flags for the log file. | keyword | | log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | | log.offset | Offset of the entry in the log file. | long | @@ -482,8 +523,11 @@ An example event for `log` looks as following: | network.forwarded_ip | Host IP address when the source IP address is the proxy. | ip | | network.packets | Total packets transferred in both directions. If `source.packets` and `destination.packets` are known, `network.packets` is their sum. | long | | network.protocol | In the OSI Model this would be the Application Layer protocol. For example, `http`, `dns`, or `ssh`. The field value must be normalized to lowercase for querying. | keyword | +| network.vlan.id | VLAN ID as reported by the observer. | keyword | | observer.egress.interface.name | Interface name as reported by the system. | keyword | +| observer.hostname | Hostname of the observer. | keyword | | observer.ingress.interface.name | Interface name as reported by the system. | keyword | +| observer.mac | MAC addresses of the observer. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | | observer.product | The product name of the observer. | keyword | | observer.type | The type of the observer the data is coming from. There is no predefined list of observer types. Some examples are `forwarder`, `firewall`, `ids`, `ips`, `proxy`, `poller`, `sensor`, `APM server`. | keyword | | observer.vendor | Vendor name of the observer. | keyword | @@ -503,6 +547,7 @@ An example event for `log` looks as following: | related.user | All the user names or other user identifiers seen on the event. | keyword | | rule.name | The name of the rule or signature generating the event. | keyword | | server.domain | The domain name of the server system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| server.mac | MAC address of the server. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | | server.registered_domain | The highest registered server domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | | server.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | | server.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | @@ -514,8 +559,12 @@ An example event for `log` looks as following: | source.bytes | Bytes sent from the source to the destination. | long | | source.domain | The domain name of the source system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | | source.geo.city_name | City name. | keyword | +| source.geo.continent_name | Name of the continent. | keyword | +| source.geo.country_iso_code | Country ISO code. | keyword | | source.geo.country_name | Country name. | keyword | | source.geo.location | Longitude and latitude. | geo_point | +| source.geo.region_iso_code | Region ISO code. | keyword | +| source.geo.region_name | Region name. | keyword | | source.ip | IP address of the source (IPv4 or IPv6). | ip | | source.mac | MAC address of the source. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | | source.nat.ip | Translated ip of source based NAT sessions (e.g. internal client to internet) Typically connections traversing load balancers, firewalls, or routers. | ip | @@ -525,6 +574,12 @@ An example event for `log` looks as following: | source.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | | source.top_level_domain | The effective top level domain (eTLD), also known as the domain suffix, is the last part of the domain name. For example, the top level domain for example.com is "com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last label will not work well for effective TLDs such as "co.uk". | keyword | | tags | List of keywords used to tag each event. | keyword | +| threat.indicator.description | Describes the type of action conducted by the threat. | keyword | +| threat.indicator.file.hash.sha256 | SHA256 hash. | keyword | +| threat.indicator.file.name | Name of the file including the extension, without the directory. | keyword | +| threat.indicator.last_seen | The date and time when intelligence source last reported sighting this indicator. | date | +| threat.indicator.reference | Reference URL linking to additional information about this indicator. | keyword | +| threat.software.type | The type of software used by this threat to conduct behavior commonly modeled using MITRE ATT&CK®. Recommended values \* Malware \* Tool While not required, you can use a MITRE ATT&CK® software type. | keyword | | url.domain | Domain of the url, such as "www.elastic.co". In some cases a URL may refer to an IP and/or port directly, without a domain name. In this case, the IP address would go to the `domain` field. If the URL contains a literal IPv6 address enclosed by `[` and `]` (IETF RFC 2732), the `[` and `]` characters should also be captured in the `domain` field. | keyword | | url.original | Unmodified original url as seen in the event source. Note that in network monitoring, the observed URL may be a full URL, whereas in access logs, the URL is often just represented as a path. This field is meant to represent the URL as it was observed, complete or not. | wildcard | | url.original.text | Multi-field of `url.original`. | match_only_text | From 1e1f157e724d500ab05269f49017aef21bcee041 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 5 Apr 2022 15:45:20 +1000 Subject: [PATCH 39/67] support for alert types --- .../test-mx-events.json-expected.json | 4 +- .../elasticsearch/ingest_pipeline/default.yml | 44 +++++++++++++++++++ 2 files changed, 47 insertions(+), 1 deletion(-) diff --git a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json index 3ada70d3c10..9c16e6c2ec0 100644 --- a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json +++ b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json @@ -12,7 +12,6 @@ "remote": "1.2.3.5" }, "alertId": "0000000000000000", - "alertLevel": "informational", "alertTypeId": "cellular_up", "deviceTags": [ "tag1", @@ -40,6 +39,9 @@ "start" ] }, + "log": { + "level": "informational" + }, "network": { "name": "Main Office" }, diff --git a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml index 5efb522f5ba..f1bc56a9340 100644 --- a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml @@ -34,6 +34,9 @@ processors: - set: field: organization.name copy_from: json.organizationName +- set: + field: log.level + copy_from: json.alertLevel - append: field: event.category value: network @@ -45,9 +48,49 @@ processors: description: The script sets event type, action and category based on type and sub-type fields params: eventmap: + "started_reporting": + type: + - start + "stopped_reporting": + type: + - end + "foreign_ap": + category: + - intrusion_detection + - threat + type: + - indicator + "bluetooth_in": + type: + - start + "bluetooth_out": + type: + - end + "port_cable_error": + type: + - connection + "node_hardware_failure": + category: + - host + type: + - end "cellular_up": type: - start + "cellular_down": + type: + - end + "umbrella_expiring": + category: + - configuration + "ip_conflict": + type: + - protocol + "rogue_ap_association": + category: + - threat + type: + - indicator source: |- def alertTypeId = ctx.json.alertTypeId; if (alertTypeId == null) { @@ -93,6 +136,7 @@ processors: - cisco_meraki.event.organizationId - cisco_meraki.event.organizationName - cisco_meraki.event.alertType + - cisco_meraki.event.alertLevel ignore_missing: true - remove: field: event.original From 02026bc10d8fc2d8bf6c4c467b5b0ad553298c70 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 5 Apr 2022 15:59:36 +1000 Subject: [PATCH 40/67] update readme --- packages/cisco_meraki/docs/README.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 1cc9847e546..75867ef49a6 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -507,7 +507,7 @@ An example event for `log` looks as following: | host.type | Type of host. For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment. | keyword | | http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | | http.request.referrer | Referrer for this HTTP request. | keyword | -| input.type | Type of Filebeat input. | keyword | +| input.type | Input type. | keyword | | log.file.path | Path to the log file. | keyword | | log.flags | Flags for the log file. | keyword | | log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | @@ -521,6 +521,7 @@ An example event for `log` looks as following: | network.bytes | Total bytes transferred in both directions. If `source.bytes` and `destination.bytes` are known, `network.bytes` is their sum. | long | | network.direction | Direction of the network traffic. Recommended values are: \* ingress \* egress \* inbound \* outbound \* internal \* external \* unknown When mapping events from a host-based monitoring context, populate this field from the host's point of view, using the values "ingress" or "egress". When mapping events from a network or perimeter-based monitoring context, populate this field from the point of view of the network perimeter, using the values "inbound", "outbound", "internal" or "external". Note that "internal" is not crossing perimeter boundaries, and is meant to describe communication between two hosts within the perimeter. Note also that "external" is meant to describe traffic between two hosts that are external to the perimeter. This could for example be useful for ISPs or VPN service providers. | keyword | | network.forwarded_ip | Host IP address when the source IP address is the proxy. | ip | +| network.name | Name given by operators to sections of their network. | keyword | | network.packets | Total packets transferred in both directions. If `source.packets` and `destination.packets` are known, `network.packets` is their sum. | long | | network.protocol | In the OSI Model this would be the Application Layer protocol. For example, `http`, `dns`, or `ssh`. The field value must be normalized to lowercase for querying. | keyword | | network.vlan.id | VLAN ID as reported by the observer. | keyword | @@ -528,10 +529,15 @@ An example event for `log` looks as following: | observer.hostname | Hostname of the observer. | keyword | | observer.ingress.interface.name | Interface name as reported by the system. | keyword | | observer.mac | MAC addresses of the observer. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | +| observer.name | Custom name of the observer. This is a name that can be given to an observer. This can be helpful for example if multiple firewalls of the same model are used in an organization. If no custom name is needed, the field can be left empty. | keyword | | observer.product | The product name of the observer. | keyword | +| observer.serial_number | Observer serial number. | keyword | | observer.type | The type of the observer the data is coming from. There is no predefined list of observer types. Some examples are `forwarder`, `firewall`, `ids`, `ips`, `proxy`, `poller`, `sensor`, `APM server`. | keyword | | observer.vendor | Vendor name of the observer. | keyword | | observer.version | Observer version. | keyword | +| organization.id | Unique identifier for the organization. | keyword | +| organization.name | Organization name. | keyword | +| organization.name.text | Multi-field of `organization.name`. | match_only_text | | process.name | Process name. Sometimes called program name or similar. | keyword | | process.name.text | Multi-field of `process.name`. | match_only_text | | process.parent.name | Process name. Sometimes called program name or similar. | keyword | From d819401e36e5bea2cf6d29ba7552a034477c1f62 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Wed, 6 Apr 2022 11:40:27 +1000 Subject: [PATCH 41/67] update readme heading --- packages/cisco_meraki/_dev/build/docs/README.md | 2 +- packages/cisco_meraki/docs/README.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/cisco_meraki/_dev/build/docs/README.md b/packages/cisco_meraki/_dev/build/docs/README.md index 52ca37b11c0..32ca5b87192 100644 --- a/packages/cisco_meraki/_dev/build/docs/README.md +++ b/packages/cisco_meraki/_dev/build/docs/README.md @@ -1,4 +1,4 @@ -# Cisco Meraki Syslog Integration +# Cisco Meraki Integration Cisco Meraki offers a centralized cloud management platform for all Meraki devices such as MX Security Appliances, MR Access Points and so on. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 75867ef49a6..c2483ffa63a 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -1,4 +1,4 @@ -# Cisco Meraki Syslog Integration +# Cisco Meraki Integration Cisco Meraki offers a centralized cloud management platform for all Meraki devices such as MX Security Appliances, MR Access Points and so on. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. From e0b1dd08e29c9838143160468151543ecc3c8961 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Wed, 6 Apr 2022 13:12:02 +1000 Subject: [PATCH 42/67] events: support for all documented event types --- .../docker/sample_events/meraki-mx-ndjson.log | 1 + .../_dev/test/pipeline/test-mx-events.json | 66 +++++++++ .../test-mx-events.json-expected.json | 107 ++++++++++++++ .../elasticsearch/ingest_pipeline/default.yml | 134 +++++++++++++++++- .../data_stream/events/sample_event.json | 47 +++--- .../data_stream/log/sample_event.json | 12 +- packages/cisco_meraki/docs/README.md | 59 +++++--- 7 files changed, 381 insertions(+), 45 deletions(-) diff --git a/packages/cisco_meraki/_dev/deploy/docker/sample_events/meraki-mx-ndjson.log b/packages/cisco_meraki/_dev/deploy/docker/sample_events/meraki-mx-ndjson.log index c1a186fc01b..efed345fcab 100644 --- a/packages/cisco_meraki/_dev/deploy/docker/sample_events/meraki-mx-ndjson.log +++ b/packages/cisco_meraki/_dev/deploy/docker/sample_events/meraki-mx-ndjson.log @@ -1 +1,2 @@ { "version": "0.1", "sharedSecret": "secret", "sentAt": "2021-10-07T08:42:00.926325Z", "organizationId": "2930418", "organizationName": "My organization", "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", "networkId": "N_24329156", "networkName": "Main Office", "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", "networkTags": [], "deviceSerial": "Q234-ABCD-5678", "deviceMac": "00:11:22:33:44:55", "deviceName": "My appliance", "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", "deviceTags": [ "tag1", "tag2" ], "deviceModel": "MX", "alertId": "0000000000000000", "alertType": "Cellular came up", "alertTypeId": "cellular_up", "alertLevel": "informational", "occurredAt": "2018-02-11T00:00:00.123450Z", "alertData": { "provider": "Purview Wireless", "model": "UML290VW", "local": "192.168.1.2", "remote": "1.2.3.5", "connection": "LTE" } } +{ "version": "0.1", "sharedSecret": "secret", "sentAt": "2021-10-07T08:42:00.927486Z", "organizationId": "2930418", "organizationName": "My organization", "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", "networkId": "N_24329156", "networkName": "Main Office", "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", "networkTags": [], "deviceSerial": "Q234-ABCD-5678", "deviceMac": "00:11:22:33:44:55", "deviceName": "", "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", "deviceTags": [ "tag1", "tag2" ], "deviceModel": "", "alertId": "0000000000000000", "alertType": "Insight Alert", "alertTypeId": "mi_alert", "alertLevel": "warning", "occurredAt": "2018-02-11T00:00:00.123450Z", "alertData": {} } diff --git a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json index 4364a40c0cc..9c0907b47e0 100644 --- a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json +++ b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json @@ -34,6 +34,72 @@ "connection": "LTE" } } + }, + { + "json": { + "version": "0.1", + "sharedSecret": "secret", + "sentAt": "2021-10-07T08:42:00.927486Z", + "organizationId": "2930418", + "organizationName": "My organization", + "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", + "networkId": "N_24329156", + "networkName": "Main Office", + "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", + "networkTags": [], + "deviceSerial": "Q234-ABCD-5678", + "deviceMac": "00:11:22:33:44:55", + "deviceName": "", + "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", + "deviceTags": [ + "tag1", + "tag2" + ], + "deviceModel": "", + "alertId": "0000000000000000", + "alertType": "Insight Alert", + "alertTypeId": "mi_alert", + "alertLevel": "warning", + "occurredAt": "2018-02-11T00:00:00.123450Z", + "alertData": {} + } + }, + { + "json": { + "version": "0.1", + "sharedSecret": "secret", + "sentAt": "2021-10-07T08:42:00.937240Z", + "organizationId": "2930418", + "organizationName": "My organization", + "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", + "networkId": "N_24329156", + "networkName": "Main Office", + "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", + "networkTags": [], + "deviceSerial": "Q234-ABCD-5678", + "deviceMac": "00:11:22:33:44:55", + "deviceName": "My switch", + "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", + "deviceTags": [ + "tag1", + "tag2" + ], + "deviceModel": "MS", + "alertId": "0000000000000000", + "alertType": "Failover event detected", + "alertTypeId": "vrrp", + "alertLevel": "critical", + "occurredAt": "2018-02-11T00:00:00.123450Z", + "alertData": { + "oldIfUp": "0", + "oldMode": "detect", + "oldPrio": "75", + "electorState": "master", + "mode": "detect", + "prio": "75", + "ifUp": "1" + } + } } ] } \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json index 9c16e6c2ec0..48303a383d9 100644 --- a/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json +++ b/packages/cisco_meraki/data_stream/events/_dev/test/pipeline/test-mx-events.json-expected.json @@ -56,6 +56,113 @@ "id": "2930418", "name": "My organization" } + }, + { + "@timestamp": "2018-02-11T00:00:00.123Z", + "cisco_meraki": { + "event": { + "alertId": "0000000000000000", + "alertTypeId": "mi_alert", + "deviceTags": [ + "tag1", + "tag2" + ], + "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", + "networkId": "N_24329156", + "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", + "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", + "sentAt": "2021-10-07T08:42:00.927486Z", + "sharedSecret": "secret", + "version": "0.1" + } + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "Insight Alert", + "category": [ + "network" + ], + "type": [ + "info" + ] + }, + "log": { + "level": "warning" + }, + "network": { + "name": "Main Office" + }, + "observer": { + "mac": "00-11-22-33-44-55", + "serial_number": "Q234-ABCD-5678", + "vendor": "Cisco" + }, + "organization": { + "id": "2930418", + "name": "My organization" + } + }, + { + "@timestamp": "2018-02-11T00:00:00.123Z", + "cisco_meraki": { + "event": { + "alertData": { + "electorState": "master", + "ifUp": "1", + "mode": "detect", + "oldIfUp": "0", + "oldMode": "detect", + "oldPrio": "75", + "prio": "75" + }, + "alertId": "0000000000000000", + "alertTypeId": "vrrp", + "deviceTags": [ + "tag1", + "tag2" + ], + "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", + "networkId": "N_24329156", + "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", + "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", + "sentAt": "2021-10-07T08:42:00.937240Z", + "sharedSecret": "secret", + "version": "0.1" + } + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "Failover event detected", + "category": [ + "network", + "configuration" + ], + "type": [ + "info", + "change" + ] + }, + "log": { + "level": "critical" + }, + "network": { + "name": "Main Office" + }, + "observer": { + "mac": "00-11-22-33-44-55", + "name": "My switch", + "product": "MS", + "serial_number": "Q234-ABCD-5678", + "vendor": "Cisco" + }, + "organization": { + "id": "2930418", + "name": "My organization" + } } ] } \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml index f1bc56a9340..4b1625428cb 100644 --- a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml @@ -91,6 +91,132 @@ processors: - threat type: - indicator + "client_connectivity": + category: + - session + type: + - connection + "pcc_security_compliance": + category: + - configuration + "pcc_security_violation": + category: + - configuration + - threat + type: + - change + - indicator + "pcc_outage_end": + category: + - host + type: + - connection + "pcc_enrollment": + category: + - session + type: + - connection + - start + "geofencing_out": + type: + - connection + "pcc_outage_begin": + category: + - host + type: + - connection + - end + "dhcp_no_leases": + type: + - connection + - denied + - protocol + "vrrp": + category: + - configuration + type: + - change + "pcc_expired_apns_cert": + category: + - authentication + "amp_malware_blocked": + category: + - threat + - intrusion_detection + type: + - indicator + - denied + "amp_malware_detected": + category: + - threat + - intrusion_detection + type: + - indicator + - allowed + "pcc_sw_found": + category: + - host + - configuration + type: + - change + "pcc_unmanaged": + category: + - configuration + - iam + type: + - change + - deletion + "dhcp_alerts": + type: + - protocol + "power_supply_up": + type: + - start + "power_supply_down": + category: + - host + type: + - end + "unreachable_radius_server": + category: + - authentication + type: + - end + - denied + "rogue_ap": + category: + - threat + type: + - indicator + "rogue_dhcp": + category: + - threat + type: + - indicator + "settings_changed": + category: + - configuration + type: + - change + "port_connected": + type: + - connection + "port_disconnected": + type: + - end + "port_speed_change": + category: + - configuration + type: + - change + - protocol + "udld_error": + type: + - connection + - end + "uplink_ip6_conflict": + type: + - protocol source: |- def alertTypeId = ctx.json.alertTypeId; if (alertTypeId == null) { @@ -99,7 +225,13 @@ processors: def eventMap = params.get('eventmap'); def eventData = eventMap.get(alertTypeId); if (eventData == null) { - ctx.event.action = 'unknown-' + alertTypeId; + // Unclassified events + // - geofencing_in, critical_temperature + // - gateway_to_repeater, mi_alert + // - motion_alert, usage_alert + // - new_splash_signup, rps_base_supply_up + // - rps_backup, vpn_connectivity_change + ctx.event.action = ctx.json.alertType; return; } def eventCategory = eventData.get('category'); diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index 9cb4dd33c23..aa03366e667 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { - "@timestamp": "2022-03-28T09:16:48.186Z", + "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "3517f8ad-5a73-4384-89d0-77800a1b623a", + "ephemeral_id": "381821d3-87da-4908-8e6b-ec637704e0c6", "hostname": "docker-fleet-agent", - "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", + "id": "52a33c0a-4448-4add-9acf-eecf177d768c", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -18,24 +18,14 @@ "remote": "1.2.3.5" }, "alertId": "0000000000000000", - "alertLevel": "informational", - "alertType": "Cellular came up", "alertTypeId": "cellular_up", - "deviceMac": "00:11:22:33:44:55", - "deviceModel": "MX", - "deviceName": "My appliance", - "deviceSerial": "Q234-ABCD-5678", "deviceTags": [ "tag1", "tag2" ], "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", "networkId": "N_24329156", - "networkName": "Main Office", "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", - "occurredAt": "2018-02-11T00:00:00.123450Z", - "organizationId": "2930418", - "organizationName": "My organization", "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", "sentAt": "2021-10-07T08:42:00.926325Z", "sharedSecret": "secret", @@ -51,19 +41,44 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", + "id": "52a33c0a-4448-4add-9acf-eecf177d768c", "snapshot": false, "version": "7.17.0" }, "event": { + "action": "Cellular came up", "agent_id_status": "verified", + "category": [ + "network" + ], "dataset": "cisco_meraki.events", - "ingested": "2022-03-28T09:16:49Z", - "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}" + "ingested": "2022-04-06T03:06:51Z", + "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", + "type": [ + "info", + "start" + ] }, "input": { "type": "http_endpoint" }, + "log": { + "level": "informational" + }, + "network": { + "name": "Main Office" + }, + "observer": { + "mac": "00-11-22-33-44-55", + "name": "My appliance", + "product": "MX", + "serial_number": "Q234-ABCD-5678", + "vendor": "Cisco" + }, + "organization": { + "id": "2930418", + "name": "My organization" + }, "tags": [ "preserve_original_event", "forwarded", diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index 3555cb4bce3..9bf00253019 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "ab911d64-36b6-4d9c-8671-b96040dfb2c0", + "ephemeral_id": "1c256d1d-7492-414a-aa98-8ff1d87b92f9", "hostname": "docker-fleet-agent", - "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", + "id": "52a33c0a-4448-4add-9acf-eecf177d768c", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -32,7 +32,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", + "id": "52a33c0a-4448-4add-9acf-eecf177d768c", "snapshot": false, "version": "7.17.0" }, @@ -43,7 +43,7 @@ "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-03-28T09:18:58Z", + "ingested": "2022-04-06T03:08:45Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "indicator" @@ -54,7 +54,7 @@ }, "log": { "source": { - "address": "192.168.96.4:47237" + "address": "172.29.0.4:37628" } }, "network": { @@ -88,7 +88,7 @@ "threat": { "indicator": { "description": " BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", - "last_seen": "1637691198.330873" + "last_seen": "2021-11-23T18:13:18.330Z" } } } \ No newline at end of file diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index c2483ffa63a..9417759533a 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -283,9 +283,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "ab911d64-36b6-4d9c-8671-b96040dfb2c0", + "ephemeral_id": "1c256d1d-7492-414a-aa98-8ff1d87b92f9", "hostname": "docker-fleet-agent", - "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", + "id": "52a33c0a-4448-4add-9acf-eecf177d768c", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -314,7 +314,7 @@ An example event for `log` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", + "id": "52a33c0a-4448-4add-9acf-eecf177d768c", "snapshot": false, "version": "7.17.0" }, @@ -325,7 +325,7 @@ An example event for `log` looks as following: "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-03-28T09:18:58Z", + "ingested": "2022-04-06T03:08:45Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "indicator" @@ -336,7 +336,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "192.168.96.4:47237" + "address": "172.29.0.4:37628" } }, "network": { @@ -370,7 +370,7 @@ An example event for `log` looks as following: "threat": { "indicator": { "description": " BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", - "last_seen": "1637691198.330873" + "last_seen": "2021-11-23T18:13:18.330Z" } } } @@ -607,11 +607,11 @@ An example event for `events` looks as following: ```json { - "@timestamp": "2022-03-28T09:16:48.186Z", + "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "3517f8ad-5a73-4384-89d0-77800a1b623a", + "ephemeral_id": "381821d3-87da-4908-8e6b-ec637704e0c6", "hostname": "docker-fleet-agent", - "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", + "id": "52a33c0a-4448-4add-9acf-eecf177d768c", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -626,24 +626,14 @@ An example event for `events` looks as following: "remote": "1.2.3.5" }, "alertId": "0000000000000000", - "alertLevel": "informational", - "alertType": "Cellular came up", "alertTypeId": "cellular_up", - "deviceMac": "00:11:22:33:44:55", - "deviceModel": "MX", - "deviceName": "My appliance", - "deviceSerial": "Q234-ABCD-5678", "deviceTags": [ "tag1", "tag2" ], "deviceUrl": "https://n1.meraki.com//n//manage/nodes/new_list/000000000000", "networkId": "N_24329156", - "networkName": "Main Office", "networkUrl": "https://n1.meraki.com//n//manage/nodes/list", - "occurredAt": "2018-02-11T00:00:00.123450Z", - "organizationId": "2930418", - "organizationName": "My organization", "organizationUrl": "https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview", "sentAt": "2021-10-07T08:42:00.926325Z", "sharedSecret": "secret", @@ -659,19 +649,44 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "c48d85d8-f68e-48cc-82d7-f0fa39b0c1c5", + "id": "52a33c0a-4448-4add-9acf-eecf177d768c", "snapshot": false, "version": "7.17.0" }, "event": { + "action": "Cellular came up", "agent_id_status": "verified", + "category": [ + "network" + ], "dataset": "cisco_meraki.events", - "ingested": "2022-03-28T09:16:49Z", - "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}" + "ingested": "2022-04-06T03:06:51Z", + "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", + "type": [ + "info", + "start" + ] }, "input": { "type": "http_endpoint" }, + "log": { + "level": "informational" + }, + "network": { + "name": "Main Office" + }, + "observer": { + "mac": "00-11-22-33-44-55", + "name": "My appliance", + "product": "MX", + "serial_number": "Q234-ABCD-5678", + "vendor": "Cisco" + }, + "organization": { + "id": "2930418", + "name": "My organization" + }, "tags": [ "preserve_original_event", "forwarded", From 4f57cfebce26139d7fea3f088cfc80bd7649669a Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 19 Apr 2022 18:07:59 +1000 Subject: [PATCH 43/67] Fixes, add support for subtypes - Fix - wrongly set fields under site-to-site-vpn. - Add support for dfs_event, 8021x_auth, multiple_dhcp_servers_detected - Place mulitple_dhcp_servers_detected into ECS fields. --- .../log/_dev/test/pipeline/test-events.log | 12 + .../pipeline/test-events.log-expected.json | 581 +++++++++++++++++- .../elasticsearch/ingest_pipeline/default.yml | 11 +- .../elasticsearch/ingest_pipeline/events.yml | 85 ++- .../data_stream/log/fields/ecs.yml | 2 + .../data_stream/log/fields/fields.yml | 6 + packages/cisco_meraki/docs/README.md | 4 +- 7 files changed, 672 insertions(+), 29 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log index 6122a3b1a11..1baeaa6cbba 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log @@ -9,3 +9,15 @@ <134>1 1647479420.148681168 MX84 events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1 <134>1 1647479961.535491111 MX84 events dhcp no offers for mac A4:83:E7:02:A2:F1 host = 192.168.10.1 <134>1 1647478092.669153546 MX_device_4 events client_vpn_connect user id 'jwick@wwvpn.net' local ip 172.16.0.145 connected from 81.2.69.193 +<134>1 1639132850.430422377 AP1 events type=disassociation radio='1' vap='1' client_mac='B0:A4:60:9B:3B:A6' channel='100' reason='1' instigator='2' duration='223.031691642' auth_neg_dur='0.005054229' last_auth_ago='223.020414600' is_wpa='1' full_conn='0.384002374' ip_resp='0.384002374' ip_src='10.197.39.50' http_resp='0.647356228' arp_resp='0.013562625' arp_src='10.197.39.50' dns_server='10.128.128.128' dns_req_rtt='0.023370084' dns_resp='0.263616104' dhcp_lease_completed='0.009196083' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:31:23:60' dhcp_resp='0.009196083' aid='977866432' +<134>1 1639132851.416656563 AP1 events type=aps_association_reject load='3' best_ap='192.168.128.38' best_ap_load='0' best_ap_rssi='37' +<134>1 1639132851.608053271 AP1 events type=association radio='1' vap='0' client_mac='B0:A4:60:9B:3B:A6' last_known_client_ip='0.0.0.0' channel='100' rssi='40' aid='125455944' +<134>1 1639132851.615363021 AP1 events type=wpa_auth radio='1' vap='0' client_mac='B0:A4:60:9B:3B:A6' last_known_client_ip='0.0.0.0' aid='125455944' +<134>1 1639132852.193892187 AP1 events type=multiple_dhcp_servers_detected vap='0' original_server_ip='192.168.130.2' original_server_mac='C8:E7:F0:C4:B0:B1' server_ip='192.168.130.3' server_mac='E8:B6:C2:57:C7:85' +<134>1 1639132852.718221083 AP1 events type=multiple_dhcp_servers_detected vap='0' original_server_ip='192.168.130.3' original_server_mac='E8:B6:C2:57:C7:85' server_ip='192.168.130.2' server_mac='C8:E7:F0:C4:B0:B1' +<134>1 1639132860.489500682 1_2_AP_1 events type=association radio='1' vap='3' client_mac='54:8D:5A:EA:30:E9' last_known_client_ip='0.0.0.0' channel='104' rssi='29' aid='1187092323' +<134>1 1639132861.230797660 1_2_AP_1 events type=8021x_eap_success radio='1' vap='3' client_mac='54:8D:5A:EA:30:E9' client_ip='0.0.0.0' identity='anonymous@gousto.co.uk' aid='1187092323' +<134>1 1639132861.280798139 1_2_AP_1 events type=8021x_auth radio='1' vap='3' client_mac='54:8D:5A:EA:30:E9' last_known_client_ip='0.0.0.0' identity='anonymous@gousto.co.uk' aid='1187092323' +<134>1 1639132875.360638431 1_2_AP_4 events type=disassociation radio='1' vap='1' client_mac='36:E7:E9:AE:04:3D' channel='132' reason='8' apple_da_reason='7' instigator='2' duration='40.260521941' auth_neg_dur='0.024206187' last_auth_ago='40.229666962' is_wpa='1' full_conn='0.477861916' ip_resp='1.005954707' ip_src='10.68.128.113' http_resp='0.477861916' arp_resp='0.179876562' arp_src='10.68.128.113' dns_server='10.128.128.128' dns_req_rtt='0.095675854' dns_resp='0.416596437' dhcp_lease_completed='0.182086020' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:49:F7:26' dhcp_resp='0.182086020' aid='1750957891' +<134>1 1639132903.129587239 LG2_AP_01 events type=disassociation radio='1' vap='1' client_mac='8E:2F:69:33:FA:6A' channel='36' reason='8' apple_da_reason='7' instigator='2' duration='27.641499140' auth_neg_dur='0.008153688' last_auth_ago='27.627178619' is_wpa='1' full_conn='0.395120958' ip_resp='0.520431812' ip_src='10.72.66.49' http_resp='0.395120958' arp_resp='0.132684875' arp_src='10.72.66.49' dns_server='10.128.128.128' dns_req_rtt='0.121687' dns_resp='0.335365542' dhcp_lease_completed='0.133589958' dhcp_server='10.128.128.128' dhcp_server_mac='F8:9E:28:70:1A:7C' dhcp_resp='0.133589958' aid='1899362895' +<134>1 1639132917.085087788 LG2_AP_01 events type=wpa_auth radio='1' vap='1' client_mac='8E:2F:69:33:FA:6A' aid='1546367691' diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json index 1648ad72238..a36809ab359 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json @@ -16,14 +16,8 @@ "version": "8.0.0" }, "event": { - "action": "unknown-dfs_event", - "category": [ - "network" - ], - "original": "\u003c134\u003e1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2'", - "type": [ - "info" - ] + "action": "dynamic-frequency-selection-detected", + "original": "\u003c134\u003e1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2'" }, "log": { "syslog": { @@ -46,12 +40,14 @@ "event_type": "events", "wpa_deauth": { "aid": "1034533358", - "client_mac": "E5:A4:98:71:9A:FE", "radio": "1", "type": "wpa_deauth", "vap": "1" } }, + "client": { + "mac": "E5:A4:98:71:9A:FE" + }, "ecs": { "version": "8.0.0" }, @@ -458,6 +454,573 @@ "user": { "name": "jwick@wwvpn.net" } + }, + { + "@timestamp": "2021-12-10T10:40:50.430Z", + "cisco_meraki": { + "device_type": "MR", + "disassociation": { + "aid": "977866432", + "arp_resp": "0.013562625", + "arp_src": "10.197.39.50", + "auth_neg_dur": "0.005054229", + "channel": "100", + "client_mac": "B0:A4:60:9B:3B:A6", + "dhcp_lease_completed": "0.009196083", + "dhcp_resp": "0.009196083", + "dhcp_server": "10.128.128.128", + "dhcp_server_mac": "E0:CB:BC:31:23:60", + "dns_req_rtt": "0.023370084", + "dns_resp": "0.263616104", + "dns_server": "10.128.128.128", + "duration": "223.031691642", + "full_conn": "0.384002374", + "http_resp": "0.647356228", + "instigator": "2", + "ip_resp": "0.384002374", + "ip_src": "10.197.39.50", + "is_wpa": "1", + "last_auth_ago": "223.020414600", + "radio": "1", + "reason": "1", + "type": "disassociation", + "vap": "1" + }, + "event_subtype": "disassociation", + "event_type": "events" + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "wifi-disassociation-request", + "category": [ + "network", + "session" + ], + "original": "\u003c134\u003e1 1639132850.430422377 AP1 events type=disassociation radio='1' vap='1' client_mac='B0:A4:60:9B:3B:A6' channel='100' reason='1' instigator='2' duration='223.031691642' auth_neg_dur='0.005054229' last_auth_ago='223.020414600' is_wpa='1' full_conn='0.384002374' ip_resp='0.384002374' ip_src='10.197.39.50' http_resp='0.647356228' arp_resp='0.013562625' arp_src='10.197.39.50' dns_server='10.128.128.128' dns_req_rtt='0.023370084' dns_resp='0.263616104' dhcp_lease_completed='0.009196083' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:31:23:60' dhcp_resp='0.009196083' aid='977866432'", + "type": [ + "access", + "end" + ] + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "AP1" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:40:51.416Z", + "cisco_meraki": { + "aps_association_reject": { + "best_ap": "192.168.128.38", + "best_ap_load": "0", + "best_ap_rssi": "37", + "load": "3", + "type": "aps_association_reject" + }, + "device_type": "MR", + "event_subtype": "aps_association_reject", + "event_type": "events" + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "association-rejected-for-load-balancing", + "original": "\u003c134\u003e1 1639132851.416656563 AP1 events type=aps_association_reject load='3' best_ap='192.168.128.38' best_ap_load='0' best_ap_rssi='37'" + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "AP1" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:40:51.608Z", + "cisco_meraki": { + "association": { + "aid": "125455944", + "channel": "100", + "client_mac": "B0:A4:60:9B:3B:A6", + "last_known_client_ip": "0.0.0.0", + "radio": "1", + "rssi": "40", + "type": "association", + "vap": "0" + }, + "device_type": "MR", + "event_subtype": "association", + "event_type": "events" + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "wifi-association-request", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1639132851.608053271 AP1 events type=association radio='1' vap='0' client_mac='B0:A4:60:9B:3B:A6' last_known_client_ip='0.0.0.0' channel='100' rssi='40' aid='125455944'", + "type": [ + "access", + "connection" + ] + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "AP1" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:40:51.615Z", + "cisco_meraki": { + "device_type": "MR", + "event_subtype": "wpa_auth", + "event_type": "events", + "wpa_auth": { + "aid": "125455944", + "client_mac": "B0:A4:60:9B:3B:A6", + "last_known_client_ip": "0.0.0.0", + "radio": "1", + "type": "wpa_auth", + "vap": "0" + } + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "wifi-wpa-authentication", + "category": [ + "authentication", + "network" + ], + "original": "\u003c134\u003e1 1639132851.615363021 AP1 events type=wpa_auth radio='1' vap='0' client_mac='B0:A4:60:9B:3B:A6' last_known_client_ip='0.0.0.0' aid='125455944'", + "type": [ + "start", + "access" + ] + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "AP1" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:40:52.193Z", + "cisco_meraki": { + "device_type": "MR", + "dhcp_clash": { + "server_ip": "192.168.130.3", + "server_mac": "E8:B6:C2:57:C7:85", + "type": "multiple_dhcp_servers_detected", + "vap": "0" + }, + "event_subtype": "multiple_dhcp_servers_detected", + "event_type": "events" + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1639132852.193892187 AP1 events type=multiple_dhcp_servers_detected vap='0' original_server_ip='192.168.130.2' original_server_mac='C8:E7:F0:C4:B0:B1' server_ip='192.168.130.3' server_mac='E8:B6:C2:57:C7:85'", + "type": [ + "protocol" + ] + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "network": { + "protocol": "dhcp" + }, + "observer": { + "hostname": "AP1" + }, + "related": { + "ip": [ + "192.168.130.2", + "192.168.130.3" + ] + }, + "server": { + "ip": "192.168.130.2", + "mac": "C8:E7:F0:C4:B0:B1" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:40:52.718Z", + "cisco_meraki": { + "device_type": "MR", + "dhcp_clash": { + "server_ip": "192.168.130.2", + "server_mac": "C8:E7:F0:C4:B0:B1", + "type": "multiple_dhcp_servers_detected", + "vap": "0" + }, + "event_subtype": "multiple_dhcp_servers_detected", + "event_type": "events" + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1639132852.718221083 AP1 events type=multiple_dhcp_servers_detected vap='0' original_server_ip='192.168.130.3' original_server_mac='E8:B6:C2:57:C7:85' server_ip='192.168.130.2' server_mac='C8:E7:F0:C4:B0:B1'", + "type": [ + "protocol" + ] + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "network": { + "protocol": "dhcp" + }, + "observer": { + "hostname": "AP1" + }, + "related": { + "ip": [ + "192.168.130.3", + "192.168.130.2" + ] + }, + "server": { + "ip": "192.168.130.3", + "mac": "E8:B6:C2:57:C7:85" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:41:00.489Z", + "cisco_meraki": { + "association": { + "aid": "1187092323", + "channel": "104", + "client_mac": "54:8D:5A:EA:30:E9", + "last_known_client_ip": "0.0.0.0", + "radio": "1", + "rssi": "29", + "type": "association", + "vap": "3" + }, + "device_type": "MR", + "event_subtype": "association", + "event_type": "events" + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "wifi-association-request", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1639132860.489500682 1_2_AP_1 events type=association radio='1' vap='3' client_mac='54:8D:5A:EA:30:E9' last_known_client_ip='0.0.0.0' channel='104' rssi='29' aid='1187092323'", + "type": [ + "access", + "connection" + ] + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "1_2_AP_1" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:41:01.230Z", + "cisco_meraki": { + "8021x_eap_success": { + "aid": "1187092323", + "client_ip": "0.0.0.0", + "client_mac": "54:8D:5A:EA:30:E9", + "identity": "anonymous@gousto.co.uk", + "radio": "1", + "type": "8021x_eap_success", + "vap": "3" + }, + "device_type": "MR", + "event_subtype": "8021x_eap_success", + "event_type": "events" + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "wifi-8021x-auth", + "category": [ + "network", + "authentication" + ], + "original": "\u003c134\u003e1 1639132861.230797660 1_2_AP_1 events type=8021x_eap_success radio='1' vap='3' client_mac='54:8D:5A:EA:30:E9' client_ip='0.0.0.0' identity='anonymous@gousto.co.uk' aid='1187092323'", + "type": [ + "start" + ] + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "1_2_AP_1" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:41:01.280Z", + "cisco_meraki": { + "event_subtype": "8021x_auth", + "event_type": "events" + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "8021x_auth", + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1639132861.280798139 1_2_AP_1 events type=8021x_auth radio='1' vap='3' client_mac='54:8D:5A:EA:30:E9' last_known_client_ip='0.0.0.0' identity='anonymous@gousto.co.uk' aid='1187092323'", + "type": [ + "info" + ] + }, + "observer": { + "hostname": "1_2_AP_1" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:41:15.360Z", + "cisco_meraki": { + "device_type": "MR", + "disassociation": { + "aid": "1750957891", + "apple_da_reason": "7", + "arp_resp": "0.179876562", + "arp_src": "10.68.128.113", + "auth_neg_dur": "0.024206187", + "channel": "132", + "client_mac": "36:E7:E9:AE:04:3D", + "dhcp_lease_completed": "0.182086020", + "dhcp_resp": "0.182086020", + "dhcp_server": "10.128.128.128", + "dhcp_server_mac": "E0:CB:BC:49:F7:26", + "dns_req_rtt": "0.095675854", + "dns_resp": "0.416596437", + "dns_server": "10.128.128.128", + "duration": "40.260521941", + "full_conn": "0.477861916", + "http_resp": "0.477861916", + "instigator": "2", + "ip_resp": "1.005954707", + "ip_src": "10.68.128.113", + "is_wpa": "1", + "last_auth_ago": "40.229666962", + "radio": "1", + "reason": "8", + "type": "disassociation", + "vap": "1" + }, + "event_subtype": "disassociation", + "event_type": "events" + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "wifi-disassociation-request", + "category": [ + "network", + "session" + ], + "original": "\u003c134\u003e1 1639132875.360638431 1_2_AP_4 events type=disassociation radio='1' vap='1' client_mac='36:E7:E9:AE:04:3D' channel='132' reason='8' apple_da_reason='7' instigator='2' duration='40.260521941' auth_neg_dur='0.024206187' last_auth_ago='40.229666962' is_wpa='1' full_conn='0.477861916' ip_resp='1.005954707' ip_src='10.68.128.113' http_resp='0.477861916' arp_resp='0.179876562' arp_src='10.68.128.113' dns_server='10.128.128.128' dns_req_rtt='0.095675854' dns_resp='0.416596437' dhcp_lease_completed='0.182086020' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:49:F7:26' dhcp_resp='0.182086020' aid='1750957891'", + "type": [ + "access", + "end" + ] + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "1_2_AP_4" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:41:43.129Z", + "cisco_meraki": { + "device_type": "MR", + "disassociation": { + "aid": "1899362895", + "apple_da_reason": "7", + "arp_resp": "0.132684875", + "arp_src": "10.72.66.49", + "auth_neg_dur": "0.008153688", + "channel": "36", + "client_mac": "8E:2F:69:33:FA:6A", + "dhcp_lease_completed": "0.133589958", + "dhcp_resp": "0.133589958", + "dhcp_server": "10.128.128.128", + "dhcp_server_mac": "F8:9E:28:70:1A:7C", + "dns_req_rtt": "0.121687", + "dns_resp": "0.335365542", + "dns_server": "10.128.128.128", + "duration": "27.641499140", + "full_conn": "0.395120958", + "http_resp": "0.395120958", + "instigator": "2", + "ip_resp": "0.520431812", + "ip_src": "10.72.66.49", + "is_wpa": "1", + "last_auth_ago": "27.627178619", + "radio": "1", + "reason": "8", + "type": "disassociation", + "vap": "1" + }, + "event_subtype": "disassociation", + "event_type": "events" + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "wifi-disassociation-request", + "category": [ + "network", + "session" + ], + "original": "\u003c134\u003e1 1639132903.129587239 LG2_AP_01 events type=disassociation radio='1' vap='1' client_mac='8E:2F:69:33:FA:6A' channel='36' reason='8' apple_da_reason='7' instigator='2' duration='27.641499140' auth_neg_dur='0.008153688' last_auth_ago='27.627178619' is_wpa='1' full_conn='0.395120958' ip_resp='0.520431812' ip_src='10.72.66.49' http_resp='0.395120958' arp_resp='0.132684875' arp_src='10.72.66.49' dns_server='10.128.128.128' dns_req_rtt='0.121687' dns_resp='0.335365542' dhcp_lease_completed='0.133589958' dhcp_server='10.128.128.128' dhcp_server_mac='F8:9E:28:70:1A:7C' dhcp_resp='0.133589958' aid='1899362895'", + "type": [ + "access", + "end" + ] + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "LG2_AP_01" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] + }, + { + "@timestamp": "2021-12-10T10:41:57.085Z", + "cisco_meraki": { + "device_type": "MR", + "event_subtype": "wpa_auth", + "event_type": "events", + "wpa_auth": { + "aid": "1546367691", + "client_mac": "8E:2F:69:33:FA:6A", + "radio": "1", + "type": "wpa_auth", + "vap": "1" + } + }, + "ecs": { + "version": "8.0.0" + }, + "event": { + "action": "wifi-wpa-authentication", + "category": [ + "authentication", + "network" + ], + "original": "\u003c134\u003e1 1639132917.085087788 LG2_AP_01 events type=wpa_auth radio='1' vap='1' client_mac='8E:2F:69:33:FA:6A' aid='1546367691'", + "type": [ + "start", + "access" + ] + }, + "log": { + "syslog": { + "priority": 134 + } + }, + "observer": { + "hostname": "LG2_AP_01" + }, + "tags": [ + "forwarded", + "preserve_original_event" + ] } ] } \ No newline at end of file diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index fe32fd5fe57..52a9b0d9575 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -223,6 +223,15 @@ processors: type: - indicator action: ssid-spoofing-detected + "multiple_dhcp_servers_detected": + category: + - network + type: + - protocol + "dfs_event": + action: dynamic-frequency-selection-detected + "aps_association_reject": + action: association-rejected-for-load-balancing source: |- ctx.event.type = new ArrayList(); ctx.event.category = new ArrayList(); @@ -235,7 +244,7 @@ processors: def eventMap = params.get('eventmap'); def eventData = eventMap.get(eventSubtype); if (eventData == null) { - ctx.event.action = 'unknown-' + eventSubtype; + ctx.event.action = eventSubtype; ctx.event.category = ['network']; ctx.event.type = ['info']; return; diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index 7b43cab2cf9..862389b369c 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -96,84 +96,133 @@ processors: SYSLOGVER: '\b(?:\d{1,2})\b' SYSLOGHDR: '%{SYSLOGPRI}%{SYSLOGVER}' WORDORHOST: '(?:%{WORD}|%{HOSTNAME})' - if: ctx.event.original.startsWith('<') && ['dfs_event', 'association', 'disassociation', 'wpa_deauth', 'wpa_auth', 'vpn_connectivity_change', '8021x_eap_failure', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype) + if: ctx.event.original.startsWith('<') && ['dfs_event', 'association', 'disassociation', 'aps_association_reject', 'multiple_dhcp_servers_detected', 'wpa_deauth', 'wpa_auth', 'vpn_connectivity_change', '8021x_eap_failure', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype) - kv: field: _temp.rest field_split: " " value_split: "=" target_field: cisco_meraki.association strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == 'association' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'association' - kv: field: _temp.rest field_split: " " value_split: "=" target_field: cisco_meraki.disassociation strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == 'disassociation' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'disassociation' - kv: field: _temp.rest field_split: " " value_split: "=" target_field: cisco_meraki.dfs_event strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'dfs_event' - kv: field: _temp.rest field_split: " " value_split: "=" target_field: cisco_meraki.wpa_auth strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == 'wpa_auth' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'wpa_auth' - kv: field: _temp.rest field_split: " " value_split: "=" target_field: cisco_meraki.wpa_deauth strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' - kv: field: _temp.rest field_split: " " value_split: "=" target_field: cisco_meraki.site_to_site_vpn.connectivity_change strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change' - kv: field: _temp.rest field_split: " " value_split: "=" - target_field: cisco_meraki.site_to_site_vpn.8021x_eap_failure + target_field: cisco_meraki.8021x_eap_failure strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == '8021x_eap_failure' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == '8021x_eap_failure' - kv: field: _temp.rest field_split: " " value_split: "=" - target_field: cisco_meraki.site_to_site_vpn.8021x_deauth + target_field: cisco_meraki.8021x_deauth strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == '8021x_deauth' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == '8021x_deauth' - kv: field: _temp.rest field_split: " " value_split: "=" - target_field: cisco_meraki.site_to_site_vpn.8021x_eap_success + target_field: cisco_meraki.8021x_eap_success strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == '8021x_eap_success' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == '8021x_eap_success' - kv: field: _temp.rest field_split: " " value_split: "=" - target_field: cisco_meraki.site_to_site_vpn.splash_auth + target_field: cisco_meraki.splash_auth strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == 'splash_auth' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'splash_auth' - kv: field: _temp.rest field_split: " " value_split: "=" - target_field: cisco_meraki.site_to_site_vpn.device_packet_flood + target_field: cisco_meraki.device_packet_flood strip_brackets: true - if: ctx?.cisco_meraki?.event_subtype == 'device_packet_flood' + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'device_packet_flood' +- kv: + field: _temp.rest + field_split: "[ \t]{1,}" + value_split: "=" + target_field: cisco_meraki.dhcp_clash + strip_brackets: true + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' +- kv: + field: _temp.rest + field_split: " " + value_split: "=" + target_field: cisco_meraki.aps_association_reject + strip_brackets: true + if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'aps_association_reject' + +#################################################### +# Move values from event subtypes to ECS fields +#################################################### + +#################################################### +# multiple_dhcp_servers_detected +#################################################### +- set: + field: network.protocol + value: dhcp + if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' +- rename: + field: cisco_meraki.dhcp_clash.original_server_ip + target_field: server.ip + if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' +- rename: + field: cisco_meraki.dhcp_clash.original_server_mac + target_field: server.mac + if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' +- append: + field: related.ip + value: "{{{server.ip}}}" + if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' +- append: + field: related.ip + value: "{{{cisco_meraki.dhcp_clash.server_ip}}}" + if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' +#################################################### +# wpa_deauth +#################################################### +- rename: + field: cisco_meraki.wpa_deauth.client_mac + target_field: client.mac + if: ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' #################################################### # Handle client_vpn_connect @@ -193,7 +242,7 @@ processors: - set: field: cisco_meraki.device_type value: MR - if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ['association', 'disassociation', 'wpa_deauth', 'wpa_auth', '8021x_eap_failure', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype) + if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ['association', 'disassociation', 'wpa_deauth', 'wpa_auth', '8021x_eap_failure', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood', 'aps_association_reject', 'multiple_dhcp_servers_detected'].contains(ctx.cisco_meraki.event_subtype) #################################################### # IP Geolocation Lookup (source) #################################################### diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index 11420cf6b20..e5a3d6c0362 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -170,6 +170,8 @@ name: rule.name - external: ecs name: server.mac +- external: ecs + name: server.ip - external: ecs name: server.domain - external: ecs diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index 309bf5dc347..58e12eb0a58 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -38,12 +38,18 @@ type: flattened - name: 8021x_deauth type: flattened + - name: 8021x_auth + type: flattened - name: 8021x_eap_success type: flattened - name: splash_auth type: flattened - name: device_packet_flood type: flattened + - name: dhcp_clash + type: flattened + - name: aps_association_reject + type: flattened - name: urls type: group fields: diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 9417759533a..98208de7627 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -57,7 +57,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | Field | Description | Type | |---|---|---| -| @timestamp | Date/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. | date | +| @timestamp | Event timestamp. | date | | cisco_meraki.8021x_deauth | | flattened | | cisco_meraki.8021x_eap_failure | | flattened | | cisco_meraki.8021x_eap_success | | flattened | @@ -67,10 +67,12 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | cisco_meraki.airmarshal.fc_type | | keyword | | cisco_meraki.airmarshal.ssid | | keyword | | cisco_meraki.airmarshal.vap | | keyword | +| cisco_meraki.aps_association_reject | | flattened | | cisco_meraki.association | | flattened | | cisco_meraki.device_packet_flood | | flattened | | cisco_meraki.device_type | | keyword | | cisco_meraki.dfs_event | | flattened | +| cisco_meraki.dhcp_clash | | flattened | | cisco_meraki.disassociation | | flattened | | cisco_meraki.event_subtype | | keyword | | cisco_meraki.event_type | | keyword | From efb5411cc1b665babbbe409f8926baf4d7ea2ecb Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 19 Apr 2022 18:27:27 +1000 Subject: [PATCH 44/67] use templating to avoid copying code --- .../pipeline/test-events.log-expected.json | 30 ++++-- .../elasticsearch/ingest_pipeline/events.yml | 97 ++----------------- .../data_stream/log/fields/fields.yml | 2 +- 3 files changed, 32 insertions(+), 97 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json index a36809ab359..8cccc2e1934 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json @@ -642,14 +642,14 @@ "@timestamp": "2021-12-10T10:40:52.193Z", "cisco_meraki": { "device_type": "MR", - "dhcp_clash": { + "event_subtype": "multiple_dhcp_servers_detected", + "event_type": "events", + "multiple_dhcp_servers_detected": { "server_ip": "192.168.130.3", "server_mac": "E8:B6:C2:57:C7:85", "type": "multiple_dhcp_servers_detected", "vap": "0" - }, - "event_subtype": "multiple_dhcp_servers_detected", - "event_type": "events" + } }, "ecs": { "version": "8.0.0" @@ -693,14 +693,14 @@ "@timestamp": "2021-12-10T10:40:52.718Z", "cisco_meraki": { "device_type": "MR", - "dhcp_clash": { + "event_subtype": "multiple_dhcp_servers_detected", + "event_type": "events", + "multiple_dhcp_servers_detected": { "server_ip": "192.168.130.2", "server_mac": "C8:E7:F0:C4:B0:B1", "type": "multiple_dhcp_servers_detected", "vap": "0" - }, - "event_subtype": "multiple_dhcp_servers_detected", - "event_type": "events" + } }, "ecs": { "version": "8.0.0" @@ -830,6 +830,15 @@ { "@timestamp": "2021-12-10T10:41:01.280Z", "cisco_meraki": { + "8021x_auth": { + "aid": "1187092323", + "client_mac": "54:8D:5A:EA:30:E9", + "identity": "anonymous@gousto.co.uk", + "last_known_client_ip": "0.0.0.0", + "radio": "1", + "type": "8021x_auth", + "vap": "3" + }, "event_subtype": "8021x_auth", "event_type": "events" }, @@ -846,6 +855,11 @@ "info" ] }, + "log": { + "syslog": { + "priority": 134 + } + }, "observer": { "hostname": "1_2_AP_1" }, diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index 862389b369c..1e4d09504ba 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -96,104 +96,25 @@ processors: SYSLOGVER: '\b(?:\d{1,2})\b' SYSLOGHDR: '%{SYSLOGPRI}%{SYSLOGVER}' WORDORHOST: '(?:%{WORD}|%{HOSTNAME})' - if: ctx.event.original.startsWith('<') && ['dfs_event', 'association', 'disassociation', 'aps_association_reject', 'multiple_dhcp_servers_detected', 'wpa_deauth', 'wpa_auth', 'vpn_connectivity_change', '8021x_eap_failure', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype) + if: ctx.event.original.startsWith('<') && ['dfs_event', 'association', 'disassociation', 'aps_association_reject', 'multiple_dhcp_servers_detected', 'wpa_deauth', 'wpa_auth', 'vpn_connectivity_change', '8021x_eap_failure', '8021x_auth', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype) - kv: field: _temp.rest - field_split: " " - value_split: "=" - target_field: cisco_meraki.association - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'association' -- kv: - field: _temp.rest - field_split: " " - value_split: "=" - target_field: cisco_meraki.disassociation - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'disassociation' -- kv: - field: _temp.rest - field_split: " " - value_split: "=" - target_field: cisco_meraki.dfs_event - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'dfs_event' -- kv: - field: _temp.rest - field_split: " " - value_split: "=" - target_field: cisco_meraki.wpa_auth - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'wpa_auth' -- kv: - field: _temp.rest - field_split: " " + field_split: "[ \t]{1,}" value_split: "=" - target_field: cisco_meraki.wpa_deauth + target_field: cisco_meraki.{{{cisco_meraki.event_subtype}}} strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'wpa_deauth' + if: ctx?._temp?.rest != null && ['dfs_event', 'association', 'disassociation', 'aps_association_reject', 'multiple_dhcp_servers_detected', 'wpa_deauth', 'wpa_auth', '8021x_eap_failure', '8021x_auth', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood'].contains(ctx.cisco_meraki.event_subtype) +# special case for site-to-site vpn - kv: field: _temp.rest - field_split: " " + field_split: "[ \t]{1,}" value_split: "=" target_field: cisco_meraki.site_to_site_vpn.connectivity_change strip_brackets: true if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'vpn_connectivity_change' -- kv: - field: _temp.rest - field_split: " " - value_split: "=" - target_field: cisco_meraki.8021x_eap_failure - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == '8021x_eap_failure' -- kv: - field: _temp.rest - field_split: " " - value_split: "=" - target_field: cisco_meraki.8021x_deauth - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == '8021x_deauth' -- kv: - field: _temp.rest - field_split: " " - value_split: "=" - target_field: cisco_meraki.8021x_eap_success - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == '8021x_eap_success' -- kv: - field: _temp.rest - field_split: " " - value_split: "=" - target_field: cisco_meraki.splash_auth - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'splash_auth' -- kv: - field: _temp.rest - field_split: " " - value_split: "=" - target_field: cisco_meraki.device_packet_flood - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'device_packet_flood' -- kv: - field: _temp.rest - field_split: "[ \t]{1,}" - value_split: "=" - target_field: cisco_meraki.dhcp_clash - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' -- kv: - field: _temp.rest - field_split: " " - value_split: "=" - target_field: cisco_meraki.aps_association_reject - strip_brackets: true - if: ctx?._temp?.rest != null && ctx?.cisco_meraki?.event_subtype == 'aps_association_reject' #################################################### # Move values from event subtypes to ECS fields -#################################################### - -#################################################### # multiple_dhcp_servers_detected #################################################### - set: @@ -201,11 +122,11 @@ processors: value: dhcp if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' - rename: - field: cisco_meraki.dhcp_clash.original_server_ip + field: cisco_meraki.multiple_dhcp_servers_detected.original_server_ip target_field: server.ip if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' - rename: - field: cisco_meraki.dhcp_clash.original_server_mac + field: cisco_meraki.multiple_dhcp_servers_detected.original_server_mac target_field: server.mac if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' - append: @@ -214,7 +135,7 @@ processors: if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' - append: field: related.ip - value: "{{{cisco_meraki.dhcp_clash.server_ip}}}" + value: "{{{cisco_meraki.multiple_dhcp_servers_detected.server_ip}}}" if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' #################################################### # wpa_deauth diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index 58e12eb0a58..b46b6d0e427 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -46,7 +46,7 @@ type: flattened - name: device_packet_flood type: flattened - - name: dhcp_clash + - name: multiple_dhcp_servers_detected type: flattened - name: aps_association_reject type: flattened From 63e4bc2038e1e57e875c39f0212a3b8d12e8ee08 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 19 Apr 2022 18:46:28 +1000 Subject: [PATCH 45/67] normalize mac address --- .../log/_dev/test/pipeline/test-events.log-expected.json | 4 ++-- .../data_stream/log/elasticsearch/ingest_pipeline/events.yml | 5 +++++ 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json index 8cccc2e1934..3f6facf03fe 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json @@ -682,7 +682,7 @@ }, "server": { "ip": "192.168.130.2", - "mac": "C8:E7:F0:C4:B0:B1" + "mac": "C8-E7-F0-C4-B0-B1" }, "tags": [ "forwarded", @@ -733,7 +733,7 @@ }, "server": { "ip": "192.168.130.3", - "mac": "E8:B6:C2:57:C7:85" + "mac": "E8-B6-C2-57-C7-85" }, "tags": [ "forwarded", diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index 1e4d09504ba..9578e79e723 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -129,6 +129,11 @@ processors: field: cisco_meraki.multiple_dhcp_servers_detected.original_server_mac target_field: server.mac if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' +- gsub: + field: server.mac + pattern: '[-:.]' + replacement: '-' + if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' - append: field: related.ip value: "{{{server.ip}}}" From 827104fa80eb0f793c6b2625c84aa932216684da Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 19 Apr 2022 18:48:12 +1000 Subject: [PATCH 46/67] update readme --- packages/cisco_meraki/docs/README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 98208de7627..29bbb44bc5b 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -58,6 +58,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | Field | Description | Type | |---|---|---| | @timestamp | Event timestamp. | date | +| cisco_meraki.8021x_auth | | flattened | | cisco_meraki.8021x_deauth | | flattened | | cisco_meraki.8021x_eap_failure | | flattened | | cisco_meraki.8021x_eap_success | | flattened | @@ -72,11 +73,11 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | cisco_meraki.device_packet_flood | | flattened | | cisco_meraki.device_type | | keyword | | cisco_meraki.dfs_event | | flattened | -| cisco_meraki.dhcp_clash | | flattened | | cisco_meraki.disassociation | | flattened | | cisco_meraki.event_subtype | | keyword | | cisco_meraki.event_type | | keyword | | cisco_meraki.flows | | flattened | +| cisco_meraki.multiple_dhcp_servers_detected | | flattened | | cisco_meraki.security.action | | keyword | | cisco_meraki.security.decision | | keyword | | cisco_meraki.security.dhost | | keyword | @@ -229,6 +230,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | related.user | All the user names or other user identifiers seen on the event. | keyword | | rule.name | The name of the rule or signature generating the event. | keyword | | server.domain | The domain name of the server system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | +| server.ip | IP address of the server (IPv4 or IPv6). | ip | | server.mac | MAC address of the server. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | | server.registered_domain | The highest registered server domain, stripped of the subdomain. For example, the registered domain for "foo.example.com" is "example.com". This value can be determined precisely with a list like the public suffix list (http://publicsuffix.org). Trying to approximate this by simply taking the last two labels will not work well for TLDs such as "co.uk". | keyword | | server.subdomain | The subdomain portion of a fully qualified domain name includes all of the names except the host name under the registered_domain. In a partially qualified domain, or if the the qualification level of the full name cannot be determined, subdomain contains all of the names below the registered domain. For example the subdomain portion of "www.east.mydomain.co.uk" is "east". If the domain has multiple levels of subdomain, such as "sub2.sub1.example.com", the subdomain field should contain "sub2.sub1", with no trailing period. | keyword | From 709ef5c32c417e88587ceb743eb7b08fb69bb387 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Thu, 21 Apr 2022 11:21:16 +1000 Subject: [PATCH 47/67] Update flow_allowed event.type to connection,start --- .../log/_dev/test/pipeline/test-flows.log-expected.json | 8 ++++---- .../log/elasticsearch/ingest_pipeline/default.yml | 4 ++-- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index 28513498f08..4a03369987b 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -24,8 +24,8 @@ ], "original": "\u003c134\u003e1 1647478988.289402144 MX84_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600", "type": [ - "access", - "allowed" + "connection", + "start" ] }, "network": { @@ -109,8 +109,8 @@ ], "original": "\u003c134\u003e1 1647478988.596151424 MX84_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500", "type": [ - "access", - "allowed" + "connection", + "start" ] }, "network": { diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 52a9b0d9575..9260a4178e6 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -100,8 +100,8 @@ processors: category: - network type: - - access - - allowed + - connection + - start action: layer3-firewall-allowed-flow "flow_denied": category: From 464427bf6f25cb29d4c0937cf50a71fed8378cd6 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Thu, 21 Apr 2022 11:23:03 +1000 Subject: [PATCH 48/67] Remove session from event.type for ip_session_initiated --- .../log/_dev/test/pipeline/test-flows.log-expected.json | 3 +-- .../data_stream/log/elasticsearch/ingest_pipeline/default.yml | 1 - 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index 4a03369987b..f8bfacb8c60 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -61,8 +61,7 @@ "event": { "action": "ip-session-initiated", "category": [ - "network", - "session" + "network" ], "original": "\u003c134\u003e1 1647478988.476061795 MX84 flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all", "type": [ diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 9260a4178e6..1ef362741f4 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -91,7 +91,6 @@ processors: "ip_session_initiated": category: - network - - session type: - access - start From 23b36f06e71f973b06e4d668af4e5b1225fce2eb Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Thu, 21 Apr 2022 12:17:15 +1000 Subject: [PATCH 49/67] Remove device type detection --- .../data_stream/events/sample_event.json | 8 +- .../test-airmarshal-events.log-expected.json | 175 ----------- .../pipeline/test-events.log-expected.json | 19 -- .../pipeline/test-flows.log-expected.json | 3 - .../test-security-events.log-expected.json | 5 - .../test/pipeline/test-urls.log-expected.json | 2 - .../ingest_pipeline/airmarshal.yml | 3 - .../elasticsearch/ingest_pipeline/events.yml | 11 - .../elasticsearch/ingest_pipeline/flows.yml | 8 - .../ingest_pipeline/idsalerts.yml | 3 - .../ingest_pipeline/security.yml | 3 - .../elasticsearch/ingest_pipeline/urls.yml | 3 - .../data_stream/log/fields/fields.yml | 2 - .../data_stream/log/sample_event.json | 11 +- packages/cisco_meraki/docs/README.md | 20 +- ...-4832a430-af22-11ec-a899-6f7e676e0fb4.json | 283 +++++------------- 16 files changed, 89 insertions(+), 470 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index aa03366e667..52bb1b02a75 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "381821d3-87da-4908-8e6b-ec637704e0c6", + "ephemeral_id": "0bb9773f-dfb3-4423-a7ea-f30733f5ba19", "hostname": "docker-fleet-agent", - "id": "52a33c0a-4448-4add-9acf-eecf177d768c", + "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -41,7 +41,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "52a33c0a-4448-4add-9acf-eecf177d768c", + "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", "snapshot": false, "version": "7.17.0" }, @@ -52,7 +52,7 @@ "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-06T03:06:51Z", + "ingested": "2022-04-21T02:06:01Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index 547383a83be..2358dd6526b 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -9,7 +9,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -55,7 +54,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -101,7 +99,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -149,7 +146,6 @@ "ssid": "AwesomeWifi Guest", "vap": "1" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -189,7 +185,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -236,7 +231,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -282,7 +276,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -328,7 +321,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -374,7 +366,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -422,7 +413,6 @@ "ssid": "AwesomeWifi Guest", "vap": "13" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -462,7 +452,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -508,7 +497,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -555,7 +543,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -601,7 +588,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -647,7 +633,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -693,7 +678,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -739,7 +723,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -785,7 +768,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -832,7 +814,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -880,7 +861,6 @@ "ssid": "AwesomeWifi", "vap": "13" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -920,7 +900,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -967,7 +946,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1014,7 +992,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1061,7 +1038,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1107,7 +1083,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1154,7 +1129,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1200,7 +1174,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1247,7 +1220,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1293,7 +1265,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1341,7 +1312,6 @@ "ssid": "AwesomeWifi Guest", "vap": "1" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -1381,7 +1351,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1427,7 +1396,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1473,7 +1441,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1520,7 +1487,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1566,7 +1532,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1614,7 +1579,6 @@ "ssid": "AwesomeWifi", "vap": "13" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -1654,7 +1618,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1700,7 +1663,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1746,7 +1708,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1792,7 +1753,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1838,7 +1798,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1884,7 +1843,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1931,7 +1889,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -1977,7 +1934,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2023,7 +1979,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2071,7 +2026,6 @@ "ssid": "AwesomeWifi Guest", "vap": "1" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -2113,7 +2067,6 @@ "ssid": "AwesomeWifi", "vap": "1" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -2153,7 +2106,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2199,7 +2151,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2245,7 +2196,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2291,7 +2241,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2337,7 +2286,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2383,7 +2331,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2431,7 +2378,6 @@ "ssid": "AwesomeWifi", "vap": "1" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -2471,7 +2417,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2518,7 +2463,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2564,7 +2508,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2610,7 +2553,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2656,7 +2598,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2704,7 +2645,6 @@ "ssid": "AwesomeWifi Guest", "vap": "13" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -2745,7 +2685,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2792,7 +2731,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2839,7 +2777,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2885,7 +2822,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2931,7 +2867,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -2977,7 +2912,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3024,7 +2958,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3070,7 +3003,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3116,7 +3048,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3162,7 +3093,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3210,7 +3140,6 @@ "ssid": "AwesomeWifi Guest", "vap": "13" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -3250,7 +3179,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3296,7 +3224,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3343,7 +3270,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3390,7 +3316,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3437,7 +3362,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3485,7 +3409,6 @@ "ssid": "AwesomeWifi Guest", "vap": "1" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -3525,7 +3448,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3571,7 +3493,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3617,7 +3538,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3663,7 +3583,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3709,7 +3628,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3755,7 +3673,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3802,7 +3719,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3848,7 +3764,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3894,7 +3809,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3941,7 +3855,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -3988,7 +3901,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4035,7 +3947,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4082,7 +3993,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4128,7 +4038,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4174,7 +4083,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4220,7 +4128,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4266,7 +4173,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4314,7 +4220,6 @@ "ssid": "AwesomeWifi", "vap": "13" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -4354,7 +4259,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4400,7 +4304,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4448,7 +4351,6 @@ "ssid": "AwesomeWifi Guest", "vap": "1" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -4488,7 +4390,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4535,7 +4436,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4581,7 +4481,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4629,7 +4528,6 @@ "ssid": "AwesomeWifi", "vap": "13" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -4669,7 +4567,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4715,7 +4612,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4762,7 +4658,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4810,7 +4705,6 @@ "ssid": "AwesomeWifi", "vap": "1" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -4850,7 +4744,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4898,7 +4791,6 @@ "ssid": "AwesomeWifi", "vap": "1" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -4938,7 +4830,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -4984,7 +4875,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5030,7 +4920,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5076,7 +4965,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5122,7 +5010,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5168,7 +5055,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5214,7 +5100,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5261,7 +5146,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5307,7 +5191,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5354,7 +5237,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5400,7 +5282,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5446,7 +5327,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5492,7 +5372,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5538,7 +5417,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5584,7 +5462,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5630,7 +5507,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5676,7 +5552,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5722,7 +5597,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5768,7 +5642,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5814,7 +5687,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5862,7 +5734,6 @@ "ssid": "AwesomeWifi Guest", "vap": "13" }, - "device_type": "MR", "event_subtype": "ssid_spoofing_detected", "event_type": "airmarshal_events" }, @@ -5902,7 +5773,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5948,7 +5818,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -5994,7 +5863,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6040,7 +5908,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6086,7 +5953,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6132,7 +5998,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6179,7 +6044,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6225,7 +6089,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6271,7 +6134,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6317,7 +6179,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6363,7 +6224,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6409,7 +6269,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6456,7 +6315,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6502,7 +6360,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6548,7 +6405,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6594,7 +6450,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6640,7 +6495,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6686,7 +6540,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6732,7 +6585,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6778,7 +6630,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6824,7 +6675,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6870,7 +6720,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6917,7 +6766,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -6964,7 +6812,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7011,7 +6858,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7058,7 +6904,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7104,7 +6949,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7150,7 +6994,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7196,7 +7039,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7242,7 +7084,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7288,7 +7129,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7334,7 +7174,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7381,7 +7220,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7428,7 +7266,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7474,7 +7311,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7520,7 +7356,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7566,7 +7401,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7612,7 +7446,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7659,7 +7492,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7706,7 +7538,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7753,7 +7584,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7800,7 +7630,6 @@ "fc_type": "0", "ssid": "AwesomeWifi Guest" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7846,7 +7675,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7893,7 +7721,6 @@ "fc_type": "0", "ssid": "AwesomeWifi" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7939,7 +7766,6 @@ "fc_subtype": "8", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, @@ -7985,7 +7811,6 @@ "fc_subtype": "5", "fc_type": "0" }, - "device_type": "MR", "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events" }, diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json index 3f6facf03fe..f6d14eecc2b 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json @@ -3,7 +3,6 @@ { "@timestamp": "2022-03-17T01:04:15.795Z", "cisco_meraki": { - "device_type": "MR", "dfs_event": { "channel": "136", "radio": "2", @@ -35,7 +34,6 @@ { "@timestamp": "2022-03-17T00:53:21.421Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "wpa_deauth", "event_type": "events", "wpa_deauth": { @@ -79,7 +77,6 @@ { "@timestamp": "2022-03-17T00:53:22.126Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "wpa_auth", "event_type": "events", "wpa_auth": { @@ -121,7 +118,6 @@ { "@timestamp": "2022-03-17T00:58:29.602Z", "cisco_meraki": { - "device_type": "MR", "disassociation": { "aid": "1478558813", "auth_neg_dur": "0.005547865", @@ -186,7 +182,6 @@ "type": "association", "vap": "1" }, - "device_type": "MR", "event_subtype": "association", "event_type": "events" }, @@ -220,7 +215,6 @@ { "@timestamp": "2022-03-17T00:48:13.022Z", "cisco_meraki": { - "device_type": "MX", "event_subtype": "Site-to-Site VPN", "event_type": "events", "site_to_site_vpn": { @@ -256,7 +250,6 @@ { "@timestamp": "2022-03-17T00:48:12.029Z", "cisco_meraki": { - "device_type": "MX", "event_subtype": "Site-to-Site VPN", "event_type": "events", "site_to_site_vpn": { @@ -292,7 +285,6 @@ { "@timestamp": "2022-03-17T00:50:22.583Z", "cisco_meraki": { - "device_type": "MX", "event_subtype": "vpn_connectivity_change", "event_type": "events", "site_to_site_vpn": { @@ -458,7 +450,6 @@ { "@timestamp": "2021-12-10T10:40:50.430Z", "cisco_meraki": { - "device_type": "MR", "disassociation": { "aid": "977866432", "arp_resp": "0.013562625", @@ -527,7 +518,6 @@ "load": "3", "type": "aps_association_reject" }, - "device_type": "MR", "event_subtype": "aps_association_reject", "event_type": "events" }, @@ -564,7 +554,6 @@ "type": "association", "vap": "0" }, - "device_type": "MR", "event_subtype": "association", "event_type": "events" }, @@ -598,7 +587,6 @@ { "@timestamp": "2021-12-10T10:40:51.615Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "wpa_auth", "event_type": "events", "wpa_auth": { @@ -641,7 +629,6 @@ { "@timestamp": "2021-12-10T10:40:52.193Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "multiple_dhcp_servers_detected", "event_type": "events", "multiple_dhcp_servers_detected": { @@ -692,7 +679,6 @@ { "@timestamp": "2021-12-10T10:40:52.718Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "multiple_dhcp_servers_detected", "event_type": "events", "multiple_dhcp_servers_detected": { @@ -753,7 +739,6 @@ "type": "association", "vap": "3" }, - "device_type": "MR", "event_subtype": "association", "event_type": "events" }, @@ -796,7 +781,6 @@ "type": "8021x_eap_success", "vap": "3" }, - "device_type": "MR", "event_subtype": "8021x_eap_success", "event_type": "events" }, @@ -871,7 +855,6 @@ { "@timestamp": "2021-12-10T10:41:15.360Z", "cisco_meraki": { - "device_type": "MR", "disassociation": { "aid": "1750957891", "apple_da_reason": "7", @@ -934,7 +917,6 @@ { "@timestamp": "2021-12-10T10:41:43.129Z", "cisco_meraki": { - "device_type": "MR", "disassociation": { "aid": "1899362895", "apple_da_reason": "7", @@ -997,7 +979,6 @@ { "@timestamp": "2021-12-10T10:41:57.085Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "wpa_auth", "event_type": "events", "wpa_auth": { diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index f8bfacb8c60..ecdda18f8b3 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -3,7 +3,6 @@ { "@timestamp": "2022-03-17T01:03:08.289Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "flow_allowed", "event_type": "flows", "flows": { @@ -47,7 +46,6 @@ { "@timestamp": "2022-03-17T01:03:08.476Z", "cisco_meraki": { - "device_type": "MX", "event_subtype": "ip_session_initiated", "event_type": "flows" }, @@ -87,7 +85,6 @@ { "@timestamp": "2022-03-17T01:03:08.596Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "flow_allowed", "event_type": "flows", "flows": { diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index e16ee2edd7e..c0ca2c685a4 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -3,7 +3,6 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "ids_alerted", "event_type": "security_event", "security": { @@ -67,7 +66,6 @@ { "@timestamp": "2021-11-23T18:14:58.984Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "security_filtering_file_scanned", "event_type": "security_event", "security": { @@ -135,7 +133,6 @@ { "@timestamp": "2021-11-24T19:50:35.239Z", "cisco_meraki": { - "device_type": "MR", "event_subtype": "security_filtering_disposition_change", "event_type": "security_event", "security": { @@ -181,7 +178,6 @@ { "@timestamp": "2021-11-24T19:58:11.345Z", "cisco_meraki": { - "device_type": "MX", "event_subtype": "ids_alerted", "event_type": "ids-alerts", "security": { @@ -238,7 +234,6 @@ { "@timestamp": "2021-11-24T21:43:21.246Z", "cisco_meraki": { - "device_type": "MX", "event_subtype": "ids_alerted", "event_type": "ids-alerts", "security": { diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json index 4414ebfacea..b34af0c3f35 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json @@ -3,7 +3,6 @@ { "@timestamp": "2022-03-17T01:11:43.348Z", "cisco_meraki": { - "device_type": "MX", "event_subtype": "http_access_error", "event_type": "urls", "urls": { @@ -68,7 +67,6 @@ { "@timestamp": "2022-03-17T01:11:43.676Z", "cisco_meraki": { - "device_type": "MX", "event_subtype": "http_access", "event_type": "urls", "urls": { diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml index 04f6ac6e27b..95ed050a5ca 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml @@ -8,9 +8,6 @@ processors: - rename: field: type target_field: cisco_meraki.event_subtype -- set: - field: cisco_meraki.device_type - value: MR - grok: field: event.original patterns: diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index 9578e79e723..183f95a44a6 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -159,17 +159,6 @@ processors: if: ctx?.cisco_meraki?.event_subtype == "client_vpn_connect" #################################################### -# Set device_type based on log message subtype -#################################################### -- set: - field: cisco_meraki.device_type - value: MX - if: ctx?.cisco_meraki?.event_subtype == "Site-to-Site VPN" || ctx?.cisco_meraki?.event_subtype == "vpn_connectivity_change" -- set: - field: cisco_meraki.device_type - value: MR - if: ctx?.cisco_meraki?.event_subtype == 'dfs_event' || ['association', 'disassociation', 'wpa_deauth', 'wpa_auth', '8021x_eap_failure', '8021x_deauth', '8021x_eap_success', 'splash_auth', 'device_packet_flood', 'aps_association_reject', 'multiple_dhcp_servers_detected'].contains(ctx.cisco_meraki.event_subtype) -#################################################### # IP Geolocation Lookup (source) #################################################### - geoip: diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml index 358bac1d523..db203a042b4 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml @@ -42,14 +42,6 @@ processors: pattern: '[-:.]' replacement: '-' if: ctx._temp.token.startsWith("src=") == false -- set: - field: cisco_meraki.device_type - value: MR - if: ctx._temp.token.startsWith("src=") == false -- set: - field: cisco_meraki.device_type - value: MX - if: ctx._temp.token.startsWith("src=") == true - set: field: cisco_meraki.event_subtype value: "ip_session_initiated" diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml index ddb4d99d6ac..c79a4098cac 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml @@ -8,9 +8,6 @@ processors: - set: field: cisco_meraki.event_subtype value: ids_alerted -- set: - field: cisco_meraki.device_type - value: MX - rename: field: priority target_field: cisco_meraki.security.priority diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml index 421bfb00375..52b2ffd0deb 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml @@ -8,9 +8,6 @@ processors: - rename: field: type target_field: cisco_meraki.event_subtype -- set: - field: cisco_meraki.device_type - value: MR # scan event based on event type - dissect: diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml index 5a500f2b258..18668dd117a 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml @@ -5,9 +5,6 @@ processors: description: Determine the security event type field: event.original pattern: "%{} urls %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} request: %{http.request.method} %{url.original}" -- set: - field: cisco_meraki.device_type - value: MX - dissect: field: src pattern: "%{source.ip}:%{sport}" diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index b46b6d0e427..1aed2a049ee 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -5,8 +5,6 @@ type: keyword - name: event_subtype type: keyword - - name: device_type - type: keyword - name: airmarshal type: group fields: diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index 9bf00253019..326ccbd8aac 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,15 +1,14 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "1c256d1d-7492-414a-aa98-8ff1d87b92f9", + "ephemeral_id": "328e7214-ad46-4700-99a7-3831292aa7b0", "hostname": "docker-fleet-agent", - "id": "52a33c0a-4448-4add-9acf-eecf177d768c", + "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" }, "cisco_meraki": { - "device_type": "MR", "event_subtype": "ids_alerted", "event_type": "security_event", "security": { @@ -32,7 +31,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "52a33c0a-4448-4add-9acf-eecf177d768c", + "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", "snapshot": false, "version": "7.17.0" }, @@ -43,7 +42,7 @@ "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-06T03:08:45Z", + "ingested": "2022-04-21T02:07:54Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "indicator" @@ -54,7 +53,7 @@ }, "log": { "source": { - "address": "172.29.0.4:37628" + "address": "172.22.0.4:35671" } }, "network": { diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 29bbb44bc5b..9ccca3808bc 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -71,7 +71,6 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | cisco_meraki.aps_association_reject | | flattened | | cisco_meraki.association | | flattened | | cisco_meraki.device_packet_flood | | flattened | -| cisco_meraki.device_type | | keyword | | cisco_meraki.dfs_event | | flattened | | cisco_meraki.disassociation | | flattened | | cisco_meraki.event_subtype | | keyword | @@ -287,15 +286,14 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "1c256d1d-7492-414a-aa98-8ff1d87b92f9", + "ephemeral_id": "328e7214-ad46-4700-99a7-3831292aa7b0", "hostname": "docker-fleet-agent", - "id": "52a33c0a-4448-4add-9acf-eecf177d768c", + "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" }, "cisco_meraki": { - "device_type": "MR", "event_subtype": "ids_alerted", "event_type": "security_event", "security": { @@ -318,7 +316,7 @@ An example event for `log` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "52a33c0a-4448-4add-9acf-eecf177d768c", + "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", "snapshot": false, "version": "7.17.0" }, @@ -329,7 +327,7 @@ An example event for `log` looks as following: "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-06T03:08:45Z", + "ingested": "2022-04-21T02:07:54Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "indicator" @@ -340,7 +338,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "172.29.0.4:37628" + "address": "172.22.0.4:35671" } }, "network": { @@ -613,9 +611,9 @@ An example event for `events` looks as following: { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "381821d3-87da-4908-8e6b-ec637704e0c6", + "ephemeral_id": "0bb9773f-dfb3-4423-a7ea-f30733f5ba19", "hostname": "docker-fleet-agent", - "id": "52a33c0a-4448-4add-9acf-eecf177d768c", + "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -653,7 +651,7 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "52a33c0a-4448-4add-9acf-eecf177d768c", + "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", "snapshot": false, "version": "7.17.0" }, @@ -664,7 +662,7 @@ An example event for `events` looks as following: "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-06T03:06:51Z", + "ingested": "2022-04-21T02:06:01Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/kibana/dashboard/cisco_meraki-4832a430-af22-11ec-a899-6f7e676e0fb4.json b/packages/cisco_meraki/kibana/dashboard/cisco_meraki-4832a430-af22-11ec-a899-6f7e676e0fb4.json index 34e854a18f1..041776b83e3 100644 --- a/packages/cisco_meraki/kibana/dashboard/cisco_meraki-4832a430-af22-11ec-a899-6f7e676e0fb4.json +++ b/packages/cisco_meraki/kibana/dashboard/cisco_meraki-4832a430-af22-11ec-a899-6f7e676e0fb4.json @@ -50,7 +50,7 @@ }, { "id": "logs-*", - "name": "indexpattern-datasource-layer-3a3dcc13-f41b-4ec8-bdee-41984ac44462", + "name": "indexpattern-datasource-layer-9f3c668f-fec6-4125-ae7b-fcb073df79c1", "type": "index-pattern" }, { @@ -63,37 +63,18 @@ "datasourceStates": { "indexpattern": { "layers": { - "3a3dcc13-f41b-4ec8-bdee-41984ac44462": { + "9f3c668f-fec6-4125-ae7b-fcb073df79c1": { "columnOrder": [ - "ddc600aa-3c7e-44b9-9105-f2d28bbb21e2", - "f5197da9-e7af-4f34-8a29-be682cb06517" + "c379da24-eba4-47a5-b9aa-213324504619" ], "columns": { - "ddc600aa-3c7e-44b9-9105-f2d28bbb21e2": { - "dataType": "string", - "isBucketed": true, - "label": "Top values of cisco_meraki.device_type", - "operationType": "terms", - "params": { - "missingBucket": false, - "orderBy": { - "columnId": "f5197da9-e7af-4f34-8a29-be682cb06517", - "type": "column" - }, - "orderDirection": "desc", - "otherBucket": true, - "size": 5 - }, - "scale": "ordinal", - "sourceField": "cisco_meraki.device_type" - }, - "f5197da9-e7af-4f34-8a29-be682cb06517": { + "c379da24-eba4-47a5-b9aa-213324504619": { "dataType": "number", "isBucketed": false, - "label": "Count of records", - "operationType": "count", + "label": "Unique count of source.mac", + "operationType": "unique_count", "scale": "ratio", - "sourceField": "Records" + "sourceField": "source.mac" } }, "incompleteColumns": {} @@ -129,39 +110,27 @@ "query": "" }, "visualization": { - "layers": [ - { - "categoryDisplay": "default", - "groups": [ - "ddc600aa-3c7e-44b9-9105-f2d28bbb21e2" - ], - "layerId": "3a3dcc13-f41b-4ec8-bdee-41984ac44462", - "layerType": "data", - "legendDisplay": "default", - "metric": "f5197da9-e7af-4f34-8a29-be682cb06517", - "nestedLegend": false, - "numberDisplay": "percent" - } - ], - "shape": "pie" + "accessor": "c379da24-eba4-47a5-b9aa-213324504619", + "layerId": "9f3c668f-fec6-4125-ae7b-fcb073df79c1", + "layerType": "data" } }, "title": "", "type": "lens", - "visualizationType": "lnsPie" + "visualizationType": "lnsMetric" }, "enhancements": {}, "hidePanelTitles": false }, "gridData": { - "h": 13, - "i": "b57a8af9-b342-44e6-8cf5-30fb80140cd7", + "h": 5, + "i": "372a6801-2e52-4c4c-a674-746eec7f7e09", "w": 9, "x": 0, "y": 0 }, - "panelIndex": "b57a8af9-b342-44e6-8cf5-30fb80140cd7", - "title": "Events by device type", + "panelIndex": "372a6801-2e52-4c4c-a674-746eec7f7e09", + "title": "Count of source MAC address", "type": "lens", "version": "7.17.0" }, @@ -324,7 +293,7 @@ "hidePanelTitles": false }, "gridData": { - "h": 13, + "h": 15, "i": "03bf41fe-673d-4f95-9d6e-510d8dc46ba6", "w": 13, "x": 9, @@ -451,7 +420,7 @@ "hidePanelTitles": false }, "gridData": { - "h": 13, + "h": 15, "i": "475cb47c-34d7-4c56-b57d-e27d25678fc8", "w": 13, "x": 22, @@ -550,7 +519,7 @@ "hidePanelTitles": false }, "gridData": { - "h": 13, + "h": 15, "i": "58bbda58-7c31-44e1-8568-d37c2c585e53", "w": 13, "x": 35, @@ -561,101 +530,6 @@ "type": "lens", "version": "7.17.0" }, - { - "embeddableConfig": { - "attributes": { - "references": [ - { - "id": "logs-*", - "name": "indexpattern-datasource-current-indexpattern", - "type": "index-pattern" - }, - { - "id": "logs-*", - "name": "indexpattern-datasource-layer-9f3c668f-fec6-4125-ae7b-fcb073df79c1", - "type": "index-pattern" - }, - { - "id": "logs-*", - "name": "filter-index-pattern-0", - "type": "index-pattern" - } - ], - "state": { - "datasourceStates": { - "indexpattern": { - "layers": { - "9f3c668f-fec6-4125-ae7b-fcb073df79c1": { - "columnOrder": [ - "c379da24-eba4-47a5-b9aa-213324504619" - ], - "columns": { - "c379da24-eba4-47a5-b9aa-213324504619": { - "dataType": "number", - "isBucketed": false, - "label": "Unique count of source.mac", - "operationType": "unique_count", - "scale": "ratio", - "sourceField": "source.mac" - } - }, - "incompleteColumns": {} - } - } - } - }, - "filters": [ - { - "$state": { - "store": "appState" - }, - "meta": { - "alias": null, - "disabled": false, - "indexRefName": "filter-index-pattern-0", - "key": "data_stream.dataset", - "negate": false, - "params": { - "query": "cisco_meraki.log" - }, - "type": "phrase" - }, - "query": { - "match_phrase": { - "data_stream.dataset": "cisco_meraki.log" - } - } - } - ], - "query": { - "language": "kuery", - "query": "" - }, - "visualization": { - "accessor": "c379da24-eba4-47a5-b9aa-213324504619", - "layerId": "9f3c668f-fec6-4125-ae7b-fcb073df79c1", - "layerType": "data" - } - }, - "title": "", - "type": "lens", - "visualizationType": "lnsMetric" - }, - "enhancements": {}, - "hidePanelTitles": false - }, - "gridData": { - "h": 5, - "i": "372a6801-2e52-4c4c-a674-746eec7f7e09", - "w": 9, - "x": 0, - "y": 13 - }, - "panelIndex": "372a6801-2e52-4c4c-a674-746eec7f7e09", - "title": "Count of source MAC address", - "type": "lens", - "version": "7.17.0" - }, { "embeddableConfig": { "attributes": { @@ -770,8 +644,8 @@ "h": 5, "i": "8baff03a-7860-4fcc-90ff-3d5534e70845", "w": 9, - "x": 9, - "y": 13 + "x": 0, + "y": 5 }, "panelIndex": "8baff03a-7860-4fcc-90ff-3d5534e70845", "title": "Number of rogue SSIDs detected", @@ -892,52 +766,14 @@ "h": 5, "i": "bcfe3eee-750d-476f-b7c1-afec41803720", "w": 9, - "x": 18, - "y": 13 + "x": 0, + "y": 10 }, "panelIndex": "bcfe3eee-750d-476f-b7c1-afec41803720", "title": "Number of SSID spoofing detected", "type": "lens", "version": "7.17.0" }, - { - "embeddableConfig": { - "attributes": { - "description": "", - "layerListJSON": "[{\"sourceDescriptor\":{\"type\":\"EMS_TMS\",\"isAutoSelect\":true},\"id\":\"09082ad3-0055-461d-bf69-2b69a5dfb298\",\"label\":null,\"minZoom\":0,\"maxZoom\":24,\"alpha\":1,\"visible\":true,\"style\":{\"type\":\"TILE\"},\"includeInFitToBounds\":true,\"type\":\"VECTOR_TILE\"},{\"sourceDescriptor\":{\"indexPatternId\":\"logs-*\",\"sourceGeoField\":\"source.geo.location\",\"destGeoField\":\"destination.geo.location\",\"id\":\"ce84cee6-da49-4261-beaa-628ca03abc52\",\"type\":\"ES_PEW_PEW\",\"applyGlobalQuery\":true,\"applyGlobalTime\":true,\"applyForceRefresh\":true,\"metrics\":[{\"type\":\"count\"}]},\"style\":{\"type\":\"VECTOR\",\"properties\":{\"icon\":{\"type\":\"STATIC\",\"options\":{\"value\":\"marker\"}},\"fillColor\":{\"type\":\"STATIC\",\"options\":{\"color\":\"#54B399\"}},\"lineColor\":{\"type\":\"DYNAMIC\",\"options\":{\"color\":\"Green to Red\",\"colorCategory\":\"palette_0\",\"field\":{\"name\":\"doc_count\",\"origin\":\"source\"},\"fieldMetaOptions\":{\"isEnabled\":true,\"sigma\":3},\"type\":\"ORDINAL\",\"useCustomColorRamp\":false}},\"lineWidth\":{\"type\":\"STATIC\",\"options\":{\"size\":3}},\"iconSize\":{\"type\":\"STATIC\",\"options\":{\"size\":6}},\"iconOrientation\":{\"type\":\"STATIC\",\"options\":{\"orientation\":0}},\"labelText\":{\"type\":\"DYNAMIC\",\"options\":{\"field\":{\"label\":\"count\",\"name\":\"doc_count\",\"origin\":\"source\",\"type\":\"number\",\"supportsAutoDomain\":true}}},\"labelColor\":{\"type\":\"STATIC\",\"options\":{\"color\":\"#000000\"}},\"labelSize\":{\"type\":\"STATIC\",\"options\":{\"size\":14}},\"labelBorderColor\":{\"type\":\"STATIC\",\"options\":{\"color\":\"#FFFFFF\"}},\"symbolizeAs\":{\"options\":{\"value\":\"circle\"}},\"labelBorderSize\":{\"options\":{\"size\":\"SMALL\"}}},\"isTimeAware\":true},\"id\":\"8dec8632-de8b-43df-9731-5c6c45ecb45f\",\"label\":\"src-dst-ip-p2p\",\"minZoom\":0,\"maxZoom\":24,\"alpha\":0.75,\"visible\":true,\"includeInFitToBounds\":true,\"type\":\"VECTOR\",\"joins\":[]}]", - "mapStateJSON": "{\"zoom\":1.61,\"center\":{\"lon\":0,\"lat\":19.94277},\"timeFilters\":{\"from\":\"now-2y\",\"to\":\"now\"},\"refreshConfig\":{\"isPaused\":true,\"interval\":0},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[{\"meta\":{\"index\":\"logs-*\",\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"data_stream.dataset\",\"params\":{\"query\":\"cisco_meraki.log\"}},\"query\":{\"match_phrase\":{\"data_stream.dataset\":\"cisco_meraki.log\"}},\"$state\":{\"store\":\"appState\"}}],\"settings\":{\"autoFitToDataBounds\":false,\"backgroundColor\":\"#ffffff\",\"disableInteractive\":false,\"disableTooltipControl\":false,\"hideToolbarOverlay\":false,\"hideLayerControl\":false,\"hideViewControl\":false,\"initialLocation\":\"LAST_SAVED_LOCATION\",\"fixedLocation\":{\"lat\":0,\"lon\":0,\"zoom\":2},\"browserLocation\":{\"zoom\":2},\"maxZoom\":24,\"minZoom\":0,\"showScaleControl\":false,\"showSpatialFilters\":true,\"showTimesliderToggleButton\":true,\"spatialFiltersAlpa\":0.3,\"spatialFiltersFillColor\":\"#DA8B45\",\"spatialFiltersLineColor\":\"#DA8B45\"}}", - "title": "", - "uiStateJSON": "{\"isLayerTOCOpen\":true,\"openTOCDetails\":[]}" - }, - "enhancements": {}, - "hiddenLayers": [], - "hidePanelTitles": false, - "isLayerTOCOpen": false, - "mapBuffer": { - "maxLat": 85.05113, - "maxLon": 180, - "minLat": -85.05113, - "minLon": -180 - }, - "mapCenter": { - "lat": 19.50912, - "lon": -10.59576, - "zoom": 0.61 - }, - "openTOCDetails": [] - }, - "gridData": { - "h": 12, - "i": "beacf090-799a-415a-bbad-302cd02d50be", - "w": 21, - "x": 27, - "y": 13 - }, - "panelIndex": "beacf090-799a-415a-bbad-302cd02d50be", - "title": "IP Flows", - "type": "map", - "version": "7.17.0" - }, { "embeddableConfig": { "attributes": { @@ -1073,17 +909,55 @@ "hidePanelTitles": false }, "gridData": { - "h": 19, + "h": 24, "i": "e359d544-a8d6-4019-9756-74519a9d3335", "w": 27, "x": 0, - "y": 18 + "y": 15 }, "panelIndex": "e359d544-a8d6-4019-9756-74519a9d3335", "title": "Events by category and action", "type": "lens", "version": "7.17.0" }, + { + "embeddableConfig": { + "attributes": { + "description": "", + "layerListJSON": "[{\"sourceDescriptor\":{\"type\":\"EMS_TMS\",\"isAutoSelect\":true},\"id\":\"09082ad3-0055-461d-bf69-2b69a5dfb298\",\"label\":null,\"minZoom\":0,\"maxZoom\":24,\"alpha\":1,\"visible\":true,\"style\":{\"type\":\"TILE\"},\"includeInFitToBounds\":true,\"type\":\"VECTOR_TILE\"},{\"sourceDescriptor\":{\"indexPatternId\":\"logs-*\",\"sourceGeoField\":\"source.geo.location\",\"destGeoField\":\"destination.geo.location\",\"id\":\"ce84cee6-da49-4261-beaa-628ca03abc52\",\"type\":\"ES_PEW_PEW\",\"applyGlobalQuery\":true,\"applyGlobalTime\":true,\"applyForceRefresh\":true,\"metrics\":[{\"type\":\"count\"}]},\"style\":{\"type\":\"VECTOR\",\"properties\":{\"icon\":{\"type\":\"STATIC\",\"options\":{\"value\":\"marker\"}},\"fillColor\":{\"type\":\"STATIC\",\"options\":{\"color\":\"#54B399\"}},\"lineColor\":{\"type\":\"DYNAMIC\",\"options\":{\"color\":\"Green to Red\",\"colorCategory\":\"palette_0\",\"field\":{\"name\":\"doc_count\",\"origin\":\"source\"},\"fieldMetaOptions\":{\"isEnabled\":true,\"sigma\":3},\"type\":\"ORDINAL\",\"useCustomColorRamp\":false}},\"lineWidth\":{\"type\":\"STATIC\",\"options\":{\"size\":3}},\"iconSize\":{\"type\":\"STATIC\",\"options\":{\"size\":6}},\"iconOrientation\":{\"type\":\"STATIC\",\"options\":{\"orientation\":0}},\"labelText\":{\"type\":\"DYNAMIC\",\"options\":{\"field\":{\"label\":\"count\",\"name\":\"doc_count\",\"origin\":\"source\",\"type\":\"number\",\"supportsAutoDomain\":true}}},\"labelColor\":{\"type\":\"STATIC\",\"options\":{\"color\":\"#000000\"}},\"labelSize\":{\"type\":\"STATIC\",\"options\":{\"size\":14}},\"labelBorderColor\":{\"type\":\"STATIC\",\"options\":{\"color\":\"#FFFFFF\"}},\"symbolizeAs\":{\"options\":{\"value\":\"circle\"}},\"labelBorderSize\":{\"options\":{\"size\":\"SMALL\"}}},\"isTimeAware\":true},\"id\":\"8dec8632-de8b-43df-9731-5c6c45ecb45f\",\"label\":\"src-dst-ip-p2p\",\"minZoom\":0,\"maxZoom\":24,\"alpha\":0.75,\"visible\":true,\"includeInFitToBounds\":true,\"type\":\"VECTOR\",\"joins\":[]}]", + "mapStateJSON": "{\"zoom\":1.61,\"center\":{\"lon\":0,\"lat\":19.94277},\"timeFilters\":{\"from\":\"now-2y\",\"to\":\"now\"},\"refreshConfig\":{\"isPaused\":true,\"interval\":0},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[{\"meta\":{\"index\":\"logs-*\",\"alias\":null,\"negate\":false,\"disabled\":false,\"type\":\"phrase\",\"key\":\"data_stream.dataset\",\"params\":{\"query\":\"cisco_meraki.log\"}},\"query\":{\"match_phrase\":{\"data_stream.dataset\":\"cisco_meraki.log\"}},\"$state\":{\"store\":\"appState\"}}],\"settings\":{\"autoFitToDataBounds\":false,\"backgroundColor\":\"#ffffff\",\"disableInteractive\":false,\"disableTooltipControl\":false,\"hideToolbarOverlay\":false,\"hideLayerControl\":false,\"hideViewControl\":false,\"initialLocation\":\"LAST_SAVED_LOCATION\",\"fixedLocation\":{\"lat\":0,\"lon\":0,\"zoom\":2},\"browserLocation\":{\"zoom\":2},\"maxZoom\":24,\"minZoom\":0,\"showScaleControl\":false,\"showSpatialFilters\":true,\"showTimesliderToggleButton\":true,\"spatialFiltersAlpa\":0.3,\"spatialFiltersFillColor\":\"#DA8B45\",\"spatialFiltersLineColor\":\"#DA8B45\"}}", + "title": "", + "uiStateJSON": "{\"isLayerTOCOpen\":true,\"openTOCDetails\":[]}" + }, + "enhancements": {}, + "hiddenLayers": [], + "hidePanelTitles": false, + "isLayerTOCOpen": false, + "mapBuffer": { + "maxLat": 85.05113, + "maxLon": 180, + "minLat": -85.05113, + "minLon": -180 + }, + "mapCenter": { + "lat": 19.50912, + "lon": -10.59576, + "zoom": 0.61 + }, + "openTOCDetails": [] + }, + "gridData": { + "h": 12, + "i": "beacf090-799a-415a-bbad-302cd02d50be", + "w": 21, + "x": 27, + "y": 15 + }, + "panelIndex": "beacf090-799a-415a-bbad-302cd02d50be", + "title": "IP Flows", + "type": "map", + "version": "7.17.0" + }, { "embeddableConfig": { "attributes": { @@ -1224,7 +1098,7 @@ "i": "58d65007-15fc-492f-a8db-f509b7d28aad", "w": 21, "x": 27, - "y": 25 + "y": 27 }, "panelIndex": "58d65007-15fc-492f-a8db-f509b7d28aad", "title": "Top URL access", @@ -1240,7 +1114,7 @@ "i": "a7fc4a8a-954f-4fc0-acfc-2d358c89b2c6", "w": 48, "x": 0, - "y": 37 + "y": 39 }, "panelIndex": "a7fc4a8a-954f-4fc0-acfc-2d358c89b2c6", "title": "Log stream", @@ -1265,17 +1139,17 @@ }, { "id": "logs-*", - "name": "b57a8af9-b342-44e6-8cf5-30fb80140cd7:indexpattern-datasource-current-indexpattern", + "name": "372a6801-2e52-4c4c-a674-746eec7f7e09:indexpattern-datasource-current-indexpattern", "type": "index-pattern" }, { "id": "logs-*", - "name": "b57a8af9-b342-44e6-8cf5-30fb80140cd7:indexpattern-datasource-layer-3a3dcc13-f41b-4ec8-bdee-41984ac44462", + "name": "372a6801-2e52-4c4c-a674-746eec7f7e09:indexpattern-datasource-layer-9f3c668f-fec6-4125-ae7b-fcb073df79c1", "type": "index-pattern" }, { "id": "logs-*", - "name": "b57a8af9-b342-44e6-8cf5-30fb80140cd7:filter-index-pattern-0", + "name": "372a6801-2e52-4c4c-a674-746eec7f7e09:filter-index-pattern-0", "type": "index-pattern" }, { @@ -1318,21 +1192,6 @@ "name": "58bbda58-7c31-44e1-8568-d37c2c585e53:indexpattern-datasource-layer-d8f74b4f-a83b-47bc-b862-2bc47ee790eb", "type": "index-pattern" }, - { - "id": "logs-*", - "name": "372a6801-2e52-4c4c-a674-746eec7f7e09:indexpattern-datasource-current-indexpattern", - "type": "index-pattern" - }, - { - "id": "logs-*", - "name": "372a6801-2e52-4c4c-a674-746eec7f7e09:indexpattern-datasource-layer-9f3c668f-fec6-4125-ae7b-fcb073df79c1", - "type": "index-pattern" - }, - { - "id": "logs-*", - "name": "372a6801-2e52-4c4c-a674-746eec7f7e09:filter-index-pattern-0", - "type": "index-pattern" - }, { "id": "logs-*", "name": "8baff03a-7860-4fcc-90ff-3d5534e70845:indexpattern-datasource-current-indexpattern", @@ -1375,22 +1234,22 @@ }, { "id": "logs-*", - "name": "beacf090-799a-415a-bbad-302cd02d50be:layer_1_source_index_pattern", + "name": "e359d544-a8d6-4019-9756-74519a9d3335:indexpattern-datasource-current-indexpattern", "type": "index-pattern" }, { "id": "logs-*", - "name": "e359d544-a8d6-4019-9756-74519a9d3335:indexpattern-datasource-current-indexpattern", + "name": "e359d544-a8d6-4019-9756-74519a9d3335:indexpattern-datasource-layer-9a165bef-572a-44fb-9285-70d75530b799", "type": "index-pattern" }, { "id": "logs-*", - "name": "e359d544-a8d6-4019-9756-74519a9d3335:indexpattern-datasource-layer-9a165bef-572a-44fb-9285-70d75530b799", + "name": "e359d544-a8d6-4019-9756-74519a9d3335:filter-index-pattern-0", "type": "index-pattern" }, { "id": "logs-*", - "name": "e359d544-a8d6-4019-9756-74519a9d3335:filter-index-pattern-0", + "name": "beacf090-799a-415a-bbad-302cd02d50be:layer_1_source_index_pattern", "type": "index-pattern" }, { From 4a4e6125640741a14bcaa2b3035e6a52bcc1cfe6 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 23 Apr 2022 13:52:10 +1000 Subject: [PATCH 50/67] Update packages/cisco_meraki/_dev/build/docs/README.md Co-authored-by: Andrew Kroh --- packages/cisco_meraki/_dev/build/docs/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/cisco_meraki/_dev/build/docs/README.md b/packages/cisco_meraki/_dev/build/docs/README.md index 32ca5b87192..40416801d21 100644 --- a/packages/cisco_meraki/_dev/build/docs/README.md +++ b/packages/cisco_meraki/_dev/build/docs/README.md @@ -2,7 +2,7 @@ Cisco Meraki offers a centralized cloud management platform for all Meraki devices such as MX Security Appliances, MR Access Points and so on. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. -Cisco Meraki offers [several methods for device reporting](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API). This integration supports gathering events via the Cisco Meraki Syslog events and API reporting (via Webhooks). The integration package allows you to search, observe and visualize the events through Elasticsearch. +Cisco Meraki offers [several methods for device reporting](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API). This integration supports gathering events via the Cisco Meraki syslog and via API reporting webhooks. The integration package allows you to search, observe, and visualize the events through Elasticsearch. ## Compatibility From 6218ec8c468b58ec4dbe140e90f5224d0363fbad Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 23 Apr 2022 14:16:53 +1000 Subject: [PATCH 51/67] remove duplicated log.file.path field --- packages/cisco_meraki/data_stream/log/fields/agent.yml | 3 --- packages/cisco_meraki/docs/README.md | 4 ++-- 2 files changed, 2 insertions(+), 5 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/fields/agent.yml b/packages/cisco_meraki/data_stream/log/fields/agent.yml index c2cceee2d3f..d38a70bd6b3 100644 --- a/packages/cisco_meraki/data_stream/log/fields/agent.yml +++ b/packages/cisco_meraki/data_stream/log/fields/agent.yml @@ -202,9 +202,6 @@ - name: log.offset type: long description: Offset of the entry in the log file. -- name: log.file.path - type: keyword - description: Path to the log file. - name: log.source.address type: keyword description: Source address from which the log event was read / sent from. diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 9ccca3808bc..f322530d144 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -2,7 +2,7 @@ Cisco Meraki offers a centralized cloud management platform for all Meraki devices such as MX Security Appliances, MR Access Points and so on. Its out-of-band cloud architecture creates secure, scalable and easy-to-deploy networks that can be managed from anywhere. This can be done from almost any device using web-based Meraki Dashboard and Meraki Mobile App. Each Meraki network generates its own events. -Cisco Meraki offers [several methods for device reporting](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API). This integration supports gathering events via the Cisco Meraki Syslog events and API reporting (via Webhooks). The integration package allows you to search, observe and visualize the events through Elasticsearch. +Cisco Meraki offers [several methods for device reporting](https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Meraki_Device_Reporting_-_Syslog%2C_SNMP%2C_and_API). This integration supports gathering events via the Cisco Meraki syslog and via API reporting webhooks. The integration package allows you to search, observe, and visualize the events through Elasticsearch. ## Compatibility @@ -189,7 +189,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | host.type | Type of host. For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment. | keyword | | http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | | http.request.referrer | Referrer for this HTTP request. | keyword | -| input.type | Type of Filebeat input. | keyword | +| input.type | Input type. | keyword | | log.file.path | Full path to the log file this event came from. | keyword | | log.flags | Flags for the log file. | keyword | | log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | From 9f5d58aa24482b0864c9eec450714c386887d578 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 23 Apr 2022 15:08:30 +1000 Subject: [PATCH 52/67] fix ecs field references --- .../data_stream/events/fields/agent.yml | 9 +++------ .../data_stream/events/fields/base-fields.yml | 14 -------------- .../data_stream/events/fields/ecs.yml | 6 ++++-- .../data_stream/log/fields/agent.yml | 6 +++--- .../data_stream/log/fields/base-fields.yml | 19 ------------------- .../data_stream/log/fields/ecs.yml | 10 ++++++++-- packages/cisco_meraki/docs/README.md | 16 ++++++++-------- 7 files changed, 26 insertions(+), 54 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/fields/agent.yml b/packages/cisco_meraki/data_stream/events/fields/agent.yml index c2cceee2d3f..162c9f3aa38 100644 --- a/packages/cisco_meraki/data_stream/events/fields/agent.yml +++ b/packages/cisco_meraki/data_stream/events/fields/agent.yml @@ -199,12 +199,9 @@ - name: input.type type: keyword description: Input type. -- name: log.offset - type: long - description: Offset of the entry in the log file. -- name: log.file.path - type: keyword - description: Path to the log file. - name: log.source.address type: keyword description: Source address from which the log event was read / sent from. +- name: log.offset + type: long + description: Offset of the entry in the log file. diff --git a/packages/cisco_meraki/data_stream/events/fields/base-fields.yml b/packages/cisco_meraki/data_stream/events/fields/base-fields.yml index d97bf03ed7e..ebba8d4244b 100644 --- a/packages/cisco_meraki/data_stream/events/fields/base-fields.yml +++ b/packages/cisco_meraki/data_stream/events/fields/base-fields.yml @@ -30,17 +30,3 @@ example: /var/log/fun-times.log ignore_above: 1024 type: keyword -- name: log.source.address - description: Source address from which the log event was read / sent from. - type: keyword -- name: log.flags - description: Flags for the log file. - type: keyword -- name: log.offset - description: Offset of the entry in the log file. - type: long -- name: tags - description: List of keywords used to tag each event. - example: '["production", "env2"]' - ignore_above: 1024 - type: keyword diff --git a/packages/cisco_meraki/data_stream/events/fields/ecs.yml b/packages/cisco_meraki/data_stream/events/fields/ecs.yml index 957ea19f901..1689c91fbc3 100644 --- a/packages/cisco_meraki/data_stream/events/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/events/fields/ecs.yml @@ -124,6 +124,10 @@ name: log.syslog.priority - external: ecs name: log.syslog.severity.code +- external: ecs + name: log.file.path +- external: ecs + name: tags - external: ecs name: message - external: ecs @@ -222,8 +226,6 @@ name: source.subdomain - external: ecs name: source.top_level_domain -- external: ecs - name: tags - external: ecs name: url.domain - external: ecs diff --git a/packages/cisco_meraki/data_stream/log/fields/agent.yml b/packages/cisco_meraki/data_stream/log/fields/agent.yml index d38a70bd6b3..162c9f3aa38 100644 --- a/packages/cisco_meraki/data_stream/log/fields/agent.yml +++ b/packages/cisco_meraki/data_stream/log/fields/agent.yml @@ -199,9 +199,9 @@ - name: input.type type: keyword description: Input type. -- name: log.offset - type: long - description: Offset of the entry in the log file. - name: log.source.address type: keyword description: Source address from which the log event was read / sent from. +- name: log.offset + type: long + description: Offset of the entry in the log file. diff --git a/packages/cisco_meraki/data_stream/log/fields/base-fields.yml b/packages/cisco_meraki/data_stream/log/fields/base-fields.yml index 21342c9845a..7691cacc73e 100644 --- a/packages/cisco_meraki/data_stream/log/fields/base-fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/base-fields.yml @@ -25,22 +25,3 @@ - name: input.type description: Type of Filebeat input. type: keyword -- name: log.file.path - description: Full path to the log file this event came from. - example: /var/log/cisco-meraki.log - ignore_above: 1024 - type: keyword -- name: log.source.address - description: Source address from which the log event was read / sent from. - type: keyword -- name: log.flags - description: Flags for the log file. - type: keyword -- name: log.offset - description: Offset of the entry in the log file. - type: long -- name: tags - description: List of keywords used to tag each event. - example: '["production", "env2"]' - ignore_above: 1024 - type: keyword diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index e5a3d6c0362..949e5bb3bc9 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -74,6 +74,10 @@ name: event.outcome - external: ecs name: event.timezone +- external: ecs + name: event.category +- external: ecs + name: event.type - external: ecs name: file.attributes - external: ecs @@ -120,6 +124,10 @@ name: log.syslog.priority - external: ecs name: log.syslog.severity.code +- external: ecs + name: log.file.path +- external: ecs + name: tags - external: ecs name: message - external: ecs @@ -216,8 +224,6 @@ name: source.subdomain - external: ecs name: source.top_level_domain -- external: ecs - name: tags - external: ecs name: url.domain - external: ecs diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index f322530d144..5480821c38e 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -57,7 +57,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | Field | Description | Type | |---|---|---| -| @timestamp | Event timestamp. | date | +| @timestamp | Date/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. | date | | cisco_meraki.8021x_auth | | flattened | | cisco_meraki.8021x_deauth | | flattened | | cisco_meraki.8021x_eap_failure | | flattened | @@ -149,6 +149,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | ecs.version | ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. | keyword | | error.message | Error message. | match_only_text | | event.action | The action captured by the event. This describes the information in the event. It is more specific than `event.category`. Examples are `group-add`, `process-started`, `file-created`. The value is normally defined by the implementer. | keyword | +| event.category | This is one of four ECS Categorization Fields, and indicates the second level in the ECS category hierarchy. `event.category` represents the "big buckets" of ECS categories. For example, filtering on `event.category:process` yields all events relating to process activity. This field is closely related to `event.type`, which is used as a subcategory. This field is an array. This will allow proper categorization of some events that fall in multiple categories. | keyword | | event.code | Identification code for this event, if one exists. Some event sources use event codes to identify messages unambiguously, regardless of message language or wording adjustments over time. An example of this is the Windows Event ID. | keyword | | event.dataset | Event dataset | constant_keyword | | event.ingested | Timestamp when an event arrived in the central data store. This is different from `@timestamp`, which is when the event originally occurred. It's also different from `event.created`, which is meant to capture the first time an agent saw the event. In normal conditions, assuming no tampering, the timestamps should chronologically look like this: `@timestamp` \< `event.created` \< `event.ingested`. | date | @@ -156,6 +157,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | event.original | Raw text message of entire event. Used to demonstrate log integrity or where the full log message (before splitting it up in multiple parts) may be required, e.g. for reindex. This field is not indexed and doc_values are disabled. It cannot be searched, but it can be retrieved from `_source`. If users wish to override this and index this field, please see `Field data types` in the `Elasticsearch Reference`. | keyword | | event.outcome | This is one of four ECS Categorization Fields, and indicates the lowest level in the ECS category hierarchy. `event.outcome` simply denotes whether the event represents a success or a failure from the perspective of the entity that produced the event. Note that when a single transaction is described in multiple events, each event may populate different values of `event.outcome`, according to their perspective. Also note that in the case of a compound event (a single event that contains multiple logical events), this field should be populated with the value that best captures the overall success or failure from the perspective of the event producer. Further note that not all events will have an associated outcome. For example, this field is generally not populated for metric events, events with `event.type:info`, or any events for which an outcome does not make logical sense. | keyword | | event.timezone | This field should be populated when the event's timestamp does not include timezone information already (e.g. default Syslog timestamps). It's optional otherwise. Acceptable timezone formats are: a canonical ID (e.g. "Europe/Amsterdam"), abbreviated (e.g. "EST") or an HH:mm differential (e.g. "-05:00"). | keyword | +| event.type | This is one of four ECS Categorization Fields, and indicates the third level in the ECS category hierarchy. `event.type` represents a categorization "sub-bucket" that, when used along with the `event.category` field values, enables filtering events down to a level appropriate for single visualization. This field is an array. This will allow proper categorization of some events that fall in multiple event types. | keyword | | file.attributes | Array of file attributes. Attributes names will vary by platform. Here's a non-exhaustive list of values that are expected in this field: archive, compressed, directory, encrypted, execute, hidden, read, readonly, system, write. | keyword | | file.directory | Directory where the file is located. It should include the drive letter, when appropriate. | keyword | | file.extension | File extension, excluding the leading dot. Note that when the file name has multiple extensions (example.tar.gz), only the last one should be captured ("gz", not "tar.gz"). | keyword | @@ -176,7 +178,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | host.hostname | Hostname of the host. It normally contains what the `hostname` command returns on the host machine. | keyword | | host.id | Unique host id. As hostname is not always unique, use values that are meaningful in your environment. Example: The current usage of `beat.name`. | keyword | | host.ip | Host ip addresses. | ip | -| host.mac | Host MAC addresses. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | +| host.mac | Host mac addresses. | keyword | | host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | | host.os.build | OS build information. | keyword | | host.os.codename | OS codename, if any. | keyword | @@ -190,8 +192,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | | http.request.referrer | Referrer for this HTTP request. | keyword | | input.type | Input type. | keyword | -| log.file.path | Full path to the log file this event came from. | keyword | -| log.flags | Flags for the log file. | keyword | +| log.file.path | Full path to the log file this event came from, including the file name. It should include the drive letter, when appropriate. If the event wasn't read from a log file, do not populate this field. | keyword | | log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | | log.offset | Offset of the entry in the log file. | long | | log.source.address | Source address from which the log event was read / sent from. | keyword | @@ -384,7 +385,7 @@ An example event for `log` looks as following: | Field | Description | Type | |---|---|---| -| @timestamp | Date/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. | date | +| @timestamp | Event timestamp. | date | | cisco_meraki.event.alertData | Additional alert data (differs based on alert type) | flattened | | cisco_meraki.event.alertId | ID for this alert message | keyword | | cisco_meraki.event.alertLevel | Alert level (informational, critical etc.) | keyword | @@ -509,9 +510,8 @@ An example event for `log` looks as following: | host.type | Type of host. For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment. | keyword | | http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | | http.request.referrer | Referrer for this HTTP request. | keyword | -| input.type | Input type. | keyword | -| log.file.path | Path to the log file. | keyword | -| log.flags | Flags for the log file. | keyword | +| input.type | Type of Filebeat input. | keyword | +| log.file.path | Full path to the log file this event came from, including the file name. It should include the drive letter, when appropriate. If the event wasn't read from a log file, do not populate this field. | keyword | | log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | | log.offset | Offset of the entry in the log file. | long | | log.source.address | Source address from which the log event was read / sent from. | keyword | From 65f30e9871e696aa25484f08631b0f1a776e44df Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 23 Apr 2022 15:19:46 +1000 Subject: [PATCH 53/67] set tag for painless script --- .../data_stream/log/elasticsearch/ingest_pipeline/default.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 1ef362741f4..be91169da2f 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -50,6 +50,7 @@ processors: - script: lang: painless description: The script sets event type, action and category based on type and sub-type fields + tag: set-event-type-for-meraki-events params: eventmap: "vpn_connectivity_change": From ed315c3588c489b718d39ebbd526c32ff8475e55 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 23 Apr 2022 15:53:40 +1000 Subject: [PATCH 54/67] replace set and remove with rename --- .../elasticsearch/ingest_pipeline/default.yml | 7 +++---- .../data_stream/events/sample_event.json | 8 ++++---- .../data_stream/log/sample_event.json | 10 +++++----- packages/cisco_meraki/docs/README.md | 18 +++++++++--------- 4 files changed, 21 insertions(+), 22 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml index 4b1625428cb..45c52b600b8 100644 --- a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml @@ -250,15 +250,14 @@ processors: ctx.event.action = ctx.json.alertType; return; -- set: - field: cisco_meraki.event - copy_from: json +- rename: + field: json + target_field: cisco_meraki.event ## # Clean up ## - remove: field: - - json - cisco_meraki.event.deviceSerial - cisco_meraki.event.deviceMac - cisco_meraki.event.deviceName diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index 52bb1b02a75..01110b4b482 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "0bb9773f-dfb3-4423-a7ea-f30733f5ba19", + "ephemeral_id": "7bdfa14f-b069-4224-bca7-f9d4d97a5e59", "hostname": "docker-fleet-agent", - "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", + "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -41,7 +41,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", + "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", "snapshot": false, "version": "7.17.0" }, @@ -52,7 +52,7 @@ "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-21T02:06:01Z", + "ingested": "2022-04-23T05:49:11Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index 326ccbd8aac..95363f10e47 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "328e7214-ad46-4700-99a7-3831292aa7b0", + "ephemeral_id": "fc123972-defb-488e-956b-27d3f6a10546", "hostname": "docker-fleet-agent", - "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", + "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -31,7 +31,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", + "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", "snapshot": false, "version": "7.17.0" }, @@ -42,7 +42,7 @@ "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-21T02:07:54Z", + "ingested": "2022-04-23T05:51:02Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "indicator" @@ -53,7 +53,7 @@ }, "log": { "source": { - "address": "172.22.0.4:35671" + "address": "172.22.0.4:35461" } }, "network": { diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 5480821c38e..553a9741130 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -287,9 +287,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "328e7214-ad46-4700-99a7-3831292aa7b0", + "ephemeral_id": "fc123972-defb-488e-956b-27d3f6a10546", "hostname": "docker-fleet-agent", - "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", + "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -317,7 +317,7 @@ An example event for `log` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", + "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", "snapshot": false, "version": "7.17.0" }, @@ -328,7 +328,7 @@ An example event for `log` looks as following: "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-21T02:07:54Z", + "ingested": "2022-04-23T05:51:02Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "indicator" @@ -339,7 +339,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "172.22.0.4:35671" + "address": "172.22.0.4:35461" } }, "network": { @@ -611,9 +611,9 @@ An example event for `events` looks as following: { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "0bb9773f-dfb3-4423-a7ea-f30733f5ba19", + "ephemeral_id": "7bdfa14f-b069-4224-bca7-f9d4d97a5e59", "hostname": "docker-fleet-agent", - "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", + "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -651,7 +651,7 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "7a70525e-a73c-49f8-b7ae-258fe141c9ec", + "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", "snapshot": false, "version": "7.17.0" }, @@ -662,7 +662,7 @@ An example event for `events` looks as following: "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-21T02:06:01Z", + "ingested": "2022-04-23T05:49:11Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", From 5a6b7c902a81c40c442f21d05a4cde4dde8b5d83 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 23 Apr 2022 15:58:10 +1000 Subject: [PATCH 55/67] set cisco_meraki.event_type directly instead of setting it into temp --- .../log/elasticsearch/ingest_pipeline/default.yml | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index be91169da2f..36511520844 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -10,10 +10,7 @@ processors: - dissect: description: Extract syslog words field: event.original - pattern: "%{} %{_temp.ts_nano} %{observer.hostname} %{_temp.event_type} %{}" -- rename: - field: _temp.event_type - target_field: cisco_meraki.event_type + pattern: "%{} %{_temp.ts_nano} %{observer.hostname} %{cisco_meraki.event_type} %{}" - grok: description: Reduce precision from nanos to millis and set timestamp field: _temp.ts_nano From f021c46986f07088ec91e686edf2daf56538f63a Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 23 Apr 2022 16:28:00 +1000 Subject: [PATCH 56/67] remove conversion from nanos to millis --- .../data_stream/events/sample_event.json | 8 ++++---- .../elasticsearch/ingest_pipeline/default.yml | 9 +-------- .../data_stream/log/sample_event.json | 10 +++++----- packages/cisco_meraki/docs/README.md | 18 +++++++++--------- 4 files changed, 19 insertions(+), 26 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index 01110b4b482..f226fe21eb7 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "7bdfa14f-b069-4224-bca7-f9d4d97a5e59", + "ephemeral_id": "36bc5728-13ef-42f1-8d43-a6321b4c2c69", "hostname": "docker-fleet-agent", - "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", + "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -41,7 +41,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", + "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", "snapshot": false, "version": "7.17.0" }, @@ -52,7 +52,7 @@ "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-23T05:49:11Z", + "ingested": "2022-04-23T06:14:34Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 36511520844..ccae7e5183d 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -11,15 +11,8 @@ processors: description: Extract syslog words field: event.original pattern: "%{} %{_temp.ts_nano} %{observer.hostname} %{cisco_meraki.event_type} %{}" -- grok: - description: Reduce precision from nanos to millis and set timestamp - field: _temp.ts_nano - patterns: - - '%{TSMILLIS}' - pattern_definitions: - TSMILLIS: (?<_temp.ts_millis>\d{1,10}\.\d{1,6})(?:\d{3}) - date: - field: _temp.ts_millis + field: _temp.ts_nano formats: - UNIX timezone: '{{{_conf.tz_offset}}}' diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index 95363f10e47..28497cea5e0 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "fc123972-defb-488e-956b-27d3f6a10546", + "ephemeral_id": "c2a36f08-db03-4645-9168-6f1f0ff7a343", "hostname": "docker-fleet-agent", - "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", + "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -31,7 +31,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", + "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", "snapshot": false, "version": "7.17.0" }, @@ -42,7 +42,7 @@ "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-23T05:51:02Z", + "ingested": "2022-04-23T06:16:19Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "indicator" @@ -53,7 +53,7 @@ }, "log": { "source": { - "address": "172.22.0.4:35461" + "address": "172.30.0.4:41452" } }, "network": { diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 553a9741130..9afb1afcb3f 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -287,9 +287,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "fc123972-defb-488e-956b-27d3f6a10546", + "ephemeral_id": "c2a36f08-db03-4645-9168-6f1f0ff7a343", "hostname": "docker-fleet-agent", - "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", + "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -317,7 +317,7 @@ An example event for `log` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", + "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", "snapshot": false, "version": "7.17.0" }, @@ -328,7 +328,7 @@ An example event for `log` looks as following: "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-23T05:51:02Z", + "ingested": "2022-04-23T06:16:19Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "indicator" @@ -339,7 +339,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "172.22.0.4:35461" + "address": "172.30.0.4:41452" } }, "network": { @@ -611,9 +611,9 @@ An example event for `events` looks as following: { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "7bdfa14f-b069-4224-bca7-f9d4d97a5e59", + "ephemeral_id": "36bc5728-13ef-42f1-8d43-a6321b4c2c69", "hostname": "docker-fleet-agent", - "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", + "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -651,7 +651,7 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "b7f22df2-e50d-4a37-88fa-9c368955f46a", + "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", "snapshot": false, "version": "7.17.0" }, @@ -662,7 +662,7 @@ An example event for `events` looks as following: "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-23T05:49:11Z", + "ingested": "2022-04-23T06:14:34Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", From 57865f3c13ea10070fbf92eabaa6e631817bbe43 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 23 Apr 2022 23:22:10 +1000 Subject: [PATCH 57/67] refactor painless script --- .../elasticsearch/ingest_pipeline/default.yml | 10 +- .../data_stream/events/sample_event.json | 8 +- .../test-airmarshal-events.log-expected.json | 350 ++++++++++++++++++ .../pipeline/test-events.log-expected.json | 52 ++- .../pipeline/test-flows.log-expected.json | 3 + .../pipeline/test-ip-flow.log-expected.json | 64 +++- .../test-security-events.log-expected.json | 10 + .../test/pipeline/test-urls.log-expected.json | 4 + .../elasticsearch/ingest_pipeline/default.yml | 55 +-- .../data_stream/log/sample_event.json | 12 +- packages/cisco_meraki/docs/README.md | 20 +- 11 files changed, 504 insertions(+), 84 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml index 45c52b600b8..dbd99aecc4c 100644 --- a/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/events/elasticsearch/ingest_pipeline/default.yml @@ -217,13 +217,12 @@ processors: "uplink_ip6_conflict": type: - protocol + if: ctx?.json?.alertTypeId != null source: |- def alertTypeId = ctx.json.alertTypeId; - if (alertTypeId == null) { - return; - } def eventMap = params.get('eventmap'); def eventData = eventMap.get(alertTypeId); + ctx.event.action = ctx.json.alertType; if (eventData == null) { // Unclassified events // - geofencing_in, critical_temperature @@ -231,7 +230,6 @@ processors: // - motion_alert, usage_alert // - new_splash_signup, rps_base_supply_up // - rps_backup, vpn_connectivity_change - ctx.event.action = ctx.json.alertType; return; } def eventCategory = eventData.get('category'); @@ -240,16 +238,12 @@ processors: ctx.event.category.add(c); } } - def eventType = eventData.get('type'); if (eventType != null) { for (def t : eventType) { ctx.event.type.add(t); } } - ctx.event.action = ctx.json.alertType; - return; - - rename: field: json target_field: cisco_meraki.event diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index f226fe21eb7..704e18af113 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "36bc5728-13ef-42f1-8d43-a6321b4c2c69", + "ephemeral_id": "532b4cd0-7b1b-452f-ac32-30f9fc019977", "hostname": "docker-fleet-agent", - "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", + "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -41,7 +41,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", + "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", "snapshot": false, "version": "7.17.0" }, @@ -52,7 +52,7 @@ "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-23T06:14:34Z", + "ingested": "2022-04-23T13:17:04Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index 2358dd6526b..464557419bc 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -21,10 +21,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479604.334549372 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='23' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -66,10 +68,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479580.487048774 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='35' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -111,10 +115,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479552.047395997 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -158,10 +164,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479537.315779167 MX84_1 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='E2:CB:9C:B5:DD:BE' channel='1' rssi='15' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -197,10 +205,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479528.067423267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='15' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -243,10 +253,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479493.484285651 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -288,10 +300,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479489.882680227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -333,10 +347,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479484.972992227 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -378,10 +394,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479466.965046920 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -425,10 +443,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479461.791503607 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='10' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -464,10 +484,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479459.181348678 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -509,10 +531,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479456.670048547 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='16' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -555,10 +579,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479445.786718001 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='6A:3A:3E:85:D9:F6' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='11' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -600,10 +626,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479442.047436097 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='20' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -645,10 +673,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479399.287689295 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='22' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -690,10 +720,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479376.407283267 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -735,10 +767,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479375.390251687 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='24' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -780,10 +814,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479371.594697827 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -826,10 +862,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479356.473299205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:55:CD:18:8F:76' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -873,10 +911,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479354.489175845 MX84_6 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='78:28:CA:AA:6A:4A' channel='11' rssi='12' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -912,10 +952,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479353.446408965 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='9' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -958,10 +1000,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479352.553639439 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1004,10 +1048,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479350.428006877 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='15' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1050,10 +1096,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479350.457045605 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1095,10 +1143,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479346.794313756 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='18' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -1141,10 +1191,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479345.577452767 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -1186,10 +1238,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479341.816936841 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='33' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1232,10 +1286,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479318.128184987 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -1277,10 +1333,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479313.473165785 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='25' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -1324,10 +1382,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479299.143407174 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='21' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -1363,10 +1423,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479299.115949027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='32' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1408,10 +1470,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479294.302067007 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='27' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1453,10 +1517,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479288.469042416 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='0E:8D:FB:70:0F:A8' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -1499,10 +1565,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479281.848397134 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='12' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1544,10 +1612,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479278.839671334 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='31' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1591,10 +1661,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479231.942342036 MX84_4 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' channel='36' rssi='9' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1630,10 +1702,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479227.438567311 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='54' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1675,10 +1749,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479222.927379747 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1720,10 +1796,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479222.927802947 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='30' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1765,10 +1843,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479222.728876109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='55' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1810,10 +1890,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479218.076400635 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='6' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -1855,10 +1937,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479203.375371107 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='49' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1901,10 +1985,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479199.622640025 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -1946,10 +2032,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479162.641725608 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -1991,10 +2079,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479162.670104087 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='18' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2038,10 +2128,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479161.182241827 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='9' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2079,10 +2171,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479158.314592227 MX84_8 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' channel='149' rssi='8' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2118,10 +2212,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479151.958073405 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='12' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2163,10 +2259,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479133.020606043 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='7' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -2208,10 +2306,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479127.384572447 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='28' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2253,10 +2353,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479122.570882475 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2298,10 +2400,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479122.592807847 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='36' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2343,10 +2447,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479122.578597672 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2390,10 +2496,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479120.544286631 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='90:AC:3F:02:31:59' channel='6' rssi='50' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -2429,10 +2537,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479091.258858944 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2475,10 +2585,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479060.425068327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -2520,10 +2632,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479037.677902643 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2565,10 +2679,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479036.783442760 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2610,10 +2726,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647479020.949227955 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2657,10 +2775,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478974.912056258 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='08:A7:C0:3B:5A:95' channel='11' rssi='27' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -2697,10 +2817,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478966.089203455 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='8' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2743,10 +2865,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478950.860971410 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='22' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -2789,10 +2913,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478940.142724327 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='AE:17:E8:C7:E2:9D' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -2834,10 +2960,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478936.678862087 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='7' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -2879,10 +3007,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478907.739529447 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -2924,10 +3054,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478855.303776534 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='39' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -2970,10 +3102,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478849.532951889 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='29' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3015,10 +3149,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478845.877942207 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='26' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3060,10 +3196,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478822.111692485 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='13' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3105,10 +3243,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478818.039157925 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3152,10 +3292,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478800.349145072 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='6E:DA:36:A2:39:71' channel='11' rssi='7' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -3191,10 +3333,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478799.177625347 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='14' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3236,10 +3380,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478788.838283552 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='17' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3282,10 +3428,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478782.939898885 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='4' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -3328,10 +3476,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478782.932299301 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -3374,10 +3524,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478782.930289746 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='13' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -3421,10 +3573,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478695.528431433 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='78:28:CA:AA:6A:4A' channel='6' rssi='52' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -3460,10 +3614,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478693.465185593 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:DF:FD' src='92:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3505,10 +3661,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478669.549413486 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='29' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3550,10 +3708,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478626.517046787 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3595,10 +3755,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478591.602996834 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3640,10 +3802,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478569.035635205 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='14' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -3685,10 +3849,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478567.751044590 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='27' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3731,10 +3897,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478559.571303907 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='5C:AA:FD:5D:76:0E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='49' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -3776,10 +3944,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478558.540066660 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='24' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -3821,10 +3991,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478554.934781027 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -3867,10 +4039,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478541.587558726 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -3913,10 +4087,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478534.671579931 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DA:7A' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -3959,10 +4135,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478508.007504325 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -4005,10 +4183,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478487.013169927 MX84_2 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='30' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4050,10 +4230,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478483.410677512 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='33' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4095,10 +4277,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478478.614722093 MX84_1 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='32' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4140,10 +4324,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478440.565782942 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='14' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4185,10 +4371,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478408.128821330 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='21' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4232,10 +4420,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478403.005811325 MX84_5 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='AE:17:E8:C7:DF:FD' channel='11' rssi='8' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -4271,10 +4461,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478383.070405853 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='44' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4316,10 +4508,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478373.816434235 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4363,10 +4557,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478339.127895652 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='1' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='78:28:CA:AA:6A:0A' channel='1' rssi='35' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -4402,10 +4598,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478298.296851316 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4448,10 +4646,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478293.380396754 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4493,10 +4693,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478268.953109023 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:DF:FD' src='BE:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='10' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4540,10 +4742,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478257.084985274 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='13' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='EE:CE:D5:6A:B6:22' channel='11' rssi='16' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -4579,10 +4783,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478256.341194724 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:DF:FD' src='BE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='19' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4624,10 +4830,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478221.255609741 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4670,10 +4878,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478145.758483684 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='6A:3A:3E:85:D7:D4' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='5' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -4717,10 +4927,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478121.589518727 MX84_2 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='AE:17:E8:C7:E1:41' channel='1' rssi='22' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -4756,10 +4968,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478119.868477795 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='7' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4803,10 +5017,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478114.277373007 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi' vap='1' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='78:28:CA:AA:69:96' channel='6' rssi='48' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -4842,10 +5058,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478105.395836204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='53' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4887,10 +5105,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478102.536782923 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:D7:80' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -4932,10 +5152,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478092.108472035 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -4977,10 +5199,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478087.649007204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E2:9D' src='BE:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='23' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5022,10 +5246,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478063.434847715 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E1:41' src='AC:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='30' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5067,10 +5293,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478054.846444450 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='3' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -5112,10 +5340,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478039.876640835 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='11' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5158,10 +5388,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478035.923601924 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5203,10 +5435,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478034.762765475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E1:41' src='AA:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='27' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5249,10 +5483,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478026.502834244 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='23' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5294,10 +5530,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478020.564810050 MX84_8 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='29' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5339,10 +5577,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478015.983013635 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='20' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5384,10 +5624,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478006.707247789 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:E1:41' src='BE:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='38' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5429,10 +5671,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647478001.603867573 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='34' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5474,10 +5718,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477963.236026884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='66' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5519,10 +5765,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477958.900449163 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='12' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5564,10 +5812,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477953.907583508 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='43' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5609,10 +5859,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477953.724449475 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='E2:CB:9C:B5:C5:68' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='35' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -5654,10 +5906,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477945.336342244 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='24' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -5699,10 +5953,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477944.121686758 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='67' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -5746,10 +6002,12 @@ "event": { "action": "ssid-spoofing-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477940.363429956 MX84 airmarshal_events type=ssid_spoofing_detected ssid='AwesomeWifi Guest' vap='13' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='34:8F:27:25:CC:48' channel='11' rssi='16' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -5785,10 +6043,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477930.038516204 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5830,10 +6090,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477927.225784460 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:DF:FD' src='92:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5875,10 +6137,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477920.683178115 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='15' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5920,10 +6184,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477920.510699794 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='40' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -5965,10 +6231,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477891.986568005 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:DF:FD' src='AA:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='8' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6010,10 +6278,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477881.304873506 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='12' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6056,10 +6326,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477873.769683395 MX84_7 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='11' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6101,10 +6373,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477872.782332783 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='52' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6146,10 +6420,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477871.675119845 MX84_6 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='E2:CB:9C:B5:DD:BE' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='14' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -6191,10 +6467,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477864.088023180 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='9' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6236,10 +6514,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477834.810489249 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:E2:9D' src='AA:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='26' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6281,10 +6561,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477828.886032606 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='52' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6327,10 +6609,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477828.885258686 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='50' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6372,10 +6656,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477828.799864712 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='16' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6417,10 +6703,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477825.209110701 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='38' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6462,10 +6750,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477825.021409913 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='6A:3A:3E:85:CA:4E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='63' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -6507,10 +6797,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477825.024707684 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='59' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -6552,10 +6844,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477821.364087032 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='29' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6597,10 +6891,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477796.382660565 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:C8:C7:D8:51' src='BE:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='62' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6642,10 +6938,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477796.382227661 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AA:17:C8:C7:D8:51' src='AA:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6687,10 +6985,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477796.381818586 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:D8:51' src='AC:17:C8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='61' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6732,10 +7032,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477795.407019364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='46' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6778,10 +7080,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477795.385494917 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6824,10 +7128,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477795.385835866 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='58' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6870,10 +7176,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477793.576467473 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:DF:FD' src='AE:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='33' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6916,10 +7224,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477793.576769233 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:DF:FD' src='AA:17:D8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='56' rssi='34' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -6961,10 +7271,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477786.805604872 MX84_5 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E1:41' src='92:17:C8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='1' rssi='24' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -7006,10 +7318,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477780.705460109 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:DF:FD' src='AC:17:C8:C7:DF:FD' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:DF:FD' vlan_id='0' channel='11' rssi='37' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -7051,10 +7365,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477778.398160444 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E2:9D' src='BE:17:D8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='40' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -7096,10 +7412,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477773.586461164 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='AE:17:E8:C7:D8:51' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='22' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -7141,10 +7459,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477764.149946084 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:E1:41' src='BE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='33' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -7186,10 +7506,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477764.145077176 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='31' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -7232,10 +7554,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477764.143985243 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E1:41' src='AE:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -7278,10 +7602,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477764.144283174 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E1:41' src='AA:17:D8:C7:E1:41' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='30' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -7323,10 +7649,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477763.225832662 MX84_4 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:E2:9D' src='92:17:C8:C7:E2:9D' dst='E2:CB:9C:B5:D4:1E' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='9' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -7368,10 +7696,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477744.039850991 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:C8:C7:D8:51' src='92:17:C8:C7:D8:51' dst='AE:17:E8:C7:DF:FD' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='6' rssi='50' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -7413,10 +7743,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477733.453967364 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:D8:51' src='92:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -7458,10 +7790,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477733.446493073 MX84_3 airmarshal_events type=rogue_ssid_detected ssid='' bssid='BE:17:D8:C7:D8:51' src='BE:17:D8:C7:D8:51' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='28' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -7504,10 +7838,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477733.420037284 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:D8:51' src='AA:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -7550,10 +7886,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477733.419042244 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='48' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -7596,10 +7934,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477733.411410011 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:D8:51' src='AE:17:D8:C7:D8:51' dst='38:BA:F8:CC:82:2E' wired_mac='AC:17:C8:C7:D8:51' vlan_id='0' channel='149' rssi='51' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -7642,10 +7982,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477716.431936901 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi Guest' bssid='AA:17:D8:C7:E2:9D' src='AA:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -7687,10 +8029,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477716.431151781 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E2:9D' src='92:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -7733,10 +8077,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477716.429168101 MX84 airmarshal_events type=rogue_ssid_detected ssid='AwesomeWifi' bssid='AE:17:D8:C7:E2:9D' src='AE:17:D8:C7:E2:9D' dst='E2:CB:9C:B5:D8:54' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='36' rssi='39' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, @@ -7778,10 +8124,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477715.612600884 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='AC:17:C8:C7:E2:9D' src='AC:17:C8:C7:E2:9D' dst='FF:FF:FF:FF:FF:FF' wired_mac='AC:17:C8:C7:E2:9D' vlan_id='0' channel='11' rssi='28' fc_type='0' fc_subtype='8'", "type": [ + "info", "indicator" ] }, @@ -7823,10 +8171,12 @@ "event": { "action": "rogue-ssid-detected", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1647477702.046252324 MX84 airmarshal_events type=rogue_ssid_detected ssid='' bssid='92:17:D8:C7:E1:41' src='92:17:D8:C7:E1:41' dst='E2:CB:9C:B5:DC:6E' wired_mac='AC:17:C8:C7:E1:41' vlan_id='0' channel='36' rssi='35' fc_type='0' fc_subtype='5'", "type": [ + "info", "indicator" ] }, diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json index f6d14eecc2b..9f104044c9a 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json @@ -16,7 +16,13 @@ }, "event": { "action": "dynamic-frequency-selection-detected", - "original": "\u003c134\u003e1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2'" + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479055.795119971 MR_device_2 events type=dfs_event channel='136' radio='2'", + "type": [ + "info" + ] }, "log": { "syslog": { @@ -57,6 +63,7 @@ ], "original": "\u003c134\u003e1 1647478401.421090826 MR_device_2 events type=wpa_deauth radio='1' vap='1' client_mac='E5:A4:98:71:9A:FE' aid='1034533358'", "type": [ + "info", "end", "denied" ] @@ -93,11 +100,12 @@ "event": { "action": "wifi-wpa-authentication", "category": [ - "authentication", - "network" + "network", + "authentication" ], "original": "\u003c134\u003e1 1647478402.126325721 MR_device_2 events type=wpa_auth radio='1' vap='1' client_mac='E4:F4:18:79:1F:E1' aid='910537108'", "type": [ + "info", "start", "access" ] @@ -153,6 +161,7 @@ ], "original": "\u003c134\u003e1 1647478709.602628785 MR_device_2 events type=disassociation radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='108' duration='309.163703632' auth_neg_dur='0.005547865' last_auth_ago='309.154547226' is_wpa='1' full_conn='0.121500990' ip_resp='0.121500990' ip_src='67.43.156.14' dns_req_rtt='0.018446771' dns_resp='0.190431042' dhcp_lease_completed='1.373967135' dhcp_server='8.8.8.8' dhcp_server_mac='18:3B:2E:5C:A7:F6' dhcp_resp='1.373967135' aid='1478558813'", "type": [ + "info", "access", "end" ] @@ -195,6 +204,7 @@ ], "original": "\u003c134\u003e1 1647478402.117726086 MR_device_2 events type=association radio='1' vap='1' client_mac='12:8D:1B:8A:D4:C8' channel='140' rssi='20' aid='910537108'", "type": [ + "info", "access", "connection" ] @@ -231,6 +241,7 @@ ], "original": "\u003c134\u003e1 1647478093.022430458 MX_device_1 events Site-to-Site VPN: \u003cl2tp-over-ipsec-1|241\u003e CHILD_SA net-1{272} established with SPIs c6abe8d0(inbound) 4f04c590(outbound) and TS 89.160.20.112/32[udp/l2f] === 81.2.69.144/32[udp/l2f]", "type": [ + "info", "access" ] }, @@ -266,6 +277,7 @@ ], "original": "\u003c134\u003e1 1647478092.029594666 MX_device_1 events Site-to-Site VPN: \u003cl2tp-over-ipsec-1|241\u003e IKE_SA l2tp-over-ipsec-1[241] established between 89.160.20.112[89.160.20.112]...81.2.69.144[192.168.1.201]", "type": [ + "info", "access" ] }, @@ -303,11 +315,12 @@ "event": { "action": "vpn-connectivity-change", "category": [ - "session", - "network" + "network", + "session" ], "original": "\u003c134\u003e1 1647478222.583851938 MX84 events type=vpn_connectivity_change vpn_type='site-to-site' peer_contact='216.160.83.61:51856' peer_ident='2814ee002c075181bb1b7478ee073860' connectivity='false'", "type": [ + "info", "connection" ] }, @@ -344,6 +357,7 @@ ], "original": "\u003c134\u003e1 1647479420.148681168 MX84 events dhcp lease of ip 10.0.2.213 from mx mac 68:3A:1E:42:60:59 for client mac E0:CB:BC:02:4F:80 from router 10.0.0.1 on subnet 255.255.252.0 with dns 10.0.0.1", "type": [ + "info", "access", "allowed" ] @@ -381,6 +395,7 @@ ], "original": "\u003c134\u003e1 1647479961.535491111 MX84 events dhcp no offers for mac A4:83:E7:02:A2:F1 host = 192.168.10.1", "type": [ + "info", "access", "denied" ] @@ -428,6 +443,7 @@ ], "original": "\u003c134\u003e1 1647478092.669153546 MX_device_4 events client_vpn_connect user id 'jwick@wwvpn.net' local ip 172.16.0.145 connected from 81.2.69.193", "type": [ + "info", "access", "allowed", "start" @@ -491,6 +507,7 @@ ], "original": "\u003c134\u003e1 1639132850.430422377 AP1 events type=disassociation radio='1' vap='1' client_mac='B0:A4:60:9B:3B:A6' channel='100' reason='1' instigator='2' duration='223.031691642' auth_neg_dur='0.005054229' last_auth_ago='223.020414600' is_wpa='1' full_conn='0.384002374' ip_resp='0.384002374' ip_src='10.197.39.50' http_resp='0.647356228' arp_resp='0.013562625' arp_src='10.197.39.50' dns_server='10.128.128.128' dns_req_rtt='0.023370084' dns_resp='0.263616104' dhcp_lease_completed='0.009196083' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:31:23:60' dhcp_resp='0.009196083' aid='977866432'", "type": [ + "info", "access", "end" ] @@ -526,7 +543,13 @@ }, "event": { "action": "association-rejected-for-load-balancing", - "original": "\u003c134\u003e1 1639132851.416656563 AP1 events type=aps_association_reject load='3' best_ap='192.168.128.38' best_ap_load='0' best_ap_rssi='37'" + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1639132851.416656563 AP1 events type=aps_association_reject load='3' best_ap='192.168.128.38' best_ap_load='0' best_ap_rssi='37'", + "type": [ + "info" + ] }, "log": { "syslog": { @@ -567,6 +590,7 @@ ], "original": "\u003c134\u003e1 1639132851.608053271 AP1 events type=association radio='1' vap='0' client_mac='B0:A4:60:9B:3B:A6' last_known_client_ip='0.0.0.0' channel='100' rssi='40' aid='125455944'", "type": [ + "info", "access", "connection" ] @@ -604,11 +628,12 @@ "event": { "action": "wifi-wpa-authentication", "category": [ - "authentication", - "network" + "network", + "authentication" ], "original": "\u003c134\u003e1 1639132851.615363021 AP1 events type=wpa_auth radio='1' vap='0' client_mac='B0:A4:60:9B:3B:A6' last_known_client_ip='0.0.0.0' aid='125455944'", "type": [ + "info", "start", "access" ] @@ -647,6 +672,7 @@ ], "original": "\u003c134\u003e1 1639132852.193892187 AP1 events type=multiple_dhcp_servers_detected vap='0' original_server_ip='192.168.130.2' original_server_mac='C8:E7:F0:C4:B0:B1' server_ip='192.168.130.3' server_mac='E8:B6:C2:57:C7:85'", "type": [ + "info", "protocol" ] }, @@ -697,6 +723,7 @@ ], "original": "\u003c134\u003e1 1639132852.718221083 AP1 events type=multiple_dhcp_servers_detected vap='0' original_server_ip='192.168.130.3' original_server_mac='E8:B6:C2:57:C7:85' server_ip='192.168.130.2' server_mac='C8:E7:F0:C4:B0:B1'", "type": [ + "info", "protocol" ] }, @@ -752,6 +779,7 @@ ], "original": "\u003c134\u003e1 1639132860.489500682 1_2_AP_1 events type=association radio='1' vap='3' client_mac='54:8D:5A:EA:30:E9' last_known_client_ip='0.0.0.0' channel='104' rssi='29' aid='1187092323'", "type": [ + "info", "access", "connection" ] @@ -795,6 +823,7 @@ ], "original": "\u003c134\u003e1 1639132861.230797660 1_2_AP_1 events type=8021x_eap_success radio='1' vap='3' client_mac='54:8D:5A:EA:30:E9' client_ip='0.0.0.0' identity='anonymous@gousto.co.uk' aid='1187092323'", "type": [ + "info", "start" ] }, @@ -897,6 +926,7 @@ ], "original": "\u003c134\u003e1 1639132875.360638431 1_2_AP_4 events type=disassociation radio='1' vap='1' client_mac='36:E7:E9:AE:04:3D' channel='132' reason='8' apple_da_reason='7' instigator='2' duration='40.260521941' auth_neg_dur='0.024206187' last_auth_ago='40.229666962' is_wpa='1' full_conn='0.477861916' ip_resp='1.005954707' ip_src='10.68.128.113' http_resp='0.477861916' arp_resp='0.179876562' arp_src='10.68.128.113' dns_server='10.128.128.128' dns_req_rtt='0.095675854' dns_resp='0.416596437' dhcp_lease_completed='0.182086020' dhcp_server='10.128.128.128' dhcp_server_mac='E0:CB:BC:49:F7:26' dhcp_resp='0.182086020' aid='1750957891'", "type": [ + "info", "access", "end" ] @@ -959,6 +989,7 @@ ], "original": "\u003c134\u003e1 1639132903.129587239 LG2_AP_01 events type=disassociation radio='1' vap='1' client_mac='8E:2F:69:33:FA:6A' channel='36' reason='8' apple_da_reason='7' instigator='2' duration='27.641499140' auth_neg_dur='0.008153688' last_auth_ago='27.627178619' is_wpa='1' full_conn='0.395120958' ip_resp='0.520431812' ip_src='10.72.66.49' http_resp='0.395120958' arp_resp='0.132684875' arp_src='10.72.66.49' dns_server='10.128.128.128' dns_req_rtt='0.121687' dns_resp='0.335365542' dhcp_lease_completed='0.133589958' dhcp_server='10.128.128.128' dhcp_server_mac='F8:9E:28:70:1A:7C' dhcp_resp='0.133589958' aid='1899362895'", "type": [ + "info", "access", "end" ] @@ -995,11 +1026,12 @@ "event": { "action": "wifi-wpa-authentication", "category": [ - "authentication", - "network" + "network", + "authentication" ], "original": "\u003c134\u003e1 1639132917.085087788 LG2_AP_01 events type=wpa_auth radio='1' vap='1' client_mac='8E:2F:69:33:FA:6A' aid='1546367691'", "type": [ + "info", "start", "access" ] diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index ecdda18f8b3..b3647192e75 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -23,6 +23,7 @@ ], "original": "\u003c134\u003e1 1647478988.289402144 MX84_4 flows allow src=10.0.2.170 dst=10.0.0.34 mac=00:7C:2D:BD:76:F2 protocol=udp sport=54841 dport=15600", "type": [ + "info", "connection", "start" ] @@ -63,6 +64,7 @@ ], "original": "\u003c134\u003e1 1647478988.476061795 MX84 flows src=216.160.83.57 dst=216.160.83.61 protocol=tcp sport=54445 dport=44210 pattern: 1 all", "type": [ + "info", "access", "start" ] @@ -105,6 +107,7 @@ ], "original": "\u003c134\u003e1 1647478988.596151424 MX84_7 flows allow src=10.0.0.34 dst=10.0.0.234 mac=64:1C:B0:BA:F0:EC protocol=tcp sport=49761 dport=15500", "type": [ + "info", "connection", "start" ] diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json index 4e8eee36b54..b595f093213 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json @@ -25,7 +25,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479278.997155282 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294" + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479278.997155282 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.145 protocol=tcp sport=34294 dport=80 translated_src_ip=1.128.3.4 translated_port=34294", + "type": [ + "info" + ] }, "network": { "protocol": "tcp" @@ -73,7 +79,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479278.995279215 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061" + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479278.995279215 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=45061 dport=53 translated_src_ip=1.128.3.4 translated_port=45061", + "type": [ + "info" + ] }, "network": { "protocol": "udp" @@ -121,7 +133,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479278.974067126 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401" + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479278.974067126 MX100 ip_flow_start src=10.0.0.234 dst=81.2.69.143 protocol=udp sport=37401 dport=53 translated_src_ip=1.128.3.4 translated_port=37401", + "type": [ + "info" + ] }, "network": { "protocol": "udp" @@ -175,7 +193,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479278.911594876 MX84 ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272" + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479278.911594876 MX84 ip_flow_start src=10.0.3.138 dst=89.160.20.156 protocol=tcp sport=61272 dport=443 translated_src_ip=216.160.83.61 translated_port=61272", + "type": [ + "info" + ] }, "network": { "protocol": "tcp" @@ -238,7 +262,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479325.891451682 MX84 ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479325.891451682 MX84 ip_flow_end src=10.0.2.249 dst=10.0.0.1 protocol=udp sport=7421 dport=53 translated_dst_ip=89.160.20.112 translated_port=53", + "type": [ + "info" + ] }, "network": { "protocol": "udp" @@ -280,7 +310,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479325.842384731 MX84 ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422" + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479325.842384731 MX84 ip_flow_end src=10.0.3.116 dst=67.43.156.14 protocol=udp sport=38422 dport=443 translated_src_ip=216.160.83.61 translated_port=38422", + "type": [ + "info" + ] }, "network": { "protocol": "udp" @@ -343,7 +379,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479325.842377481 MX84 ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53" + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479325.842377481 MX84 ip_flow_end src=10.0.2.99 dst=10.0.0.1 protocol=udp sport=29534 dport=53 translated_dst_ip=89.160.20.112 translated_port=53", + "type": [ + "info" + ] }, "network": { "protocol": "udp" @@ -385,7 +427,13 @@ "version": "8.0.0" }, "event": { - "original": "\u003c134\u003e1 1647479325.755292025 MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498" + "category": [ + "network" + ], + "original": "\u003c134\u003e1 1647479325.755292025 MX100 ip_flow_end src=10.0.0.234 dst=81.2.69.144 protocol=tcp sport=36498 dport=80 translated_src_ip=1.128.3.4 translated_port=36498", + "type": [ + "info" + ] }, "network": { "protocol": "tcp" diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index c0ca2c685a4..511631681b0 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -22,10 +22,12 @@ "event": { "action": "ids-signature-matched", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ + "info", "indicator" ] }, @@ -95,11 +97,13 @@ "event": { "action": "malicious-file-actioned", "category": [ + "network", "threat", "malware" ], "original": "\u003c134\u003e1 1637691298.984398273 MX84 security_event security_filtering_file_scanned url=http://www.eicar.org/download/eicar.com.txt src=192.168.128.2:53150 dst=67.43.156.15:80 mac=98:5A:EB:E1:81:2F name='EICAR:EICAR_Test_file_not_a_virus-tpd' sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=block", "type": [ + "info", "indicator", "info" ] @@ -145,11 +149,13 @@ "event": { "action": "issued-retrospective-malicious-disposition", "category": [ + "network", "threat", "malware" ], "original": "\u003c134\u003e1 1637783435.239819833 MX84 security_event security_filtering_disposition_change name=EICAR:EICAR_Test_file_not_a_virus-tpd sha256=275a021bbfb6489e54d471899f7db9d1663fc695ec2fe2a2c4538aabf651fd0f disposition=malicious action=allow", "type": [ + "info", "indicator", "info" ] @@ -191,10 +197,12 @@ "event": { "action": "ids-signature-matched", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1637783891.345984502 MX84 ids-alerts signature=129:4:1 priority=3 timestamp=1637783891.512569 direction=ingress protocol=tcp/ip src=67.43.156.15:80", "type": [ + "info", "indicator" ] }, @@ -247,10 +255,12 @@ "event": { "action": "ids-signature-matched", "category": [ + "network", "threat" ], "original": "\u003c134\u003e1 1637790201.246576346 MX84 ids-alerts signature=119:15:1 priority=2 timestamp=1637790201.238064 direction=egress protocol=tcp/ip src=192.168.111.254:56240", "type": [ + "info", "indicator" ] }, diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json index b34af0c3f35..8fb6afc5549 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json @@ -37,10 +37,12 @@ "event": { "action": "http-access-error", "category": [ + "network", "web" ], "original": "\u003c134\u003e1 1647479503.348215340 MX84 urls src=10.0.1.29:60336 dst=89.160.20.156:80 mac=78:7B:8A:CC:05:18 request: UNKNOWN https://bitbucket.org/...", "type": [ + "info", "error" ] }, @@ -101,10 +103,12 @@ "event": { "action": "http-access", "category": [ + "network", "web" ], "original": "\u003c134\u003e1 1647479503.676404537 MX84 urls src=10.0.0.234:56424 dst=89.160.20.112:443 mac=64:1C:AE:68:2A:01 request: GET https://lh3.googleusercontent.com/p/AFVnnY=w2048-h1024", "type": [ + "info", "access" ] }, diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index ccae7e5183d..573e9e84abf 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -37,6 +37,12 @@ processors: - pipeline: name: '{{ IngestPipeline "urls" }}' if: ctx.cisco_meraki.event_type == 'urls' +- append: + field: event.category + value: ["network"] +- append: + field: event.type + value: ["info"] - script: lang: painless description: The script sets event type, action and category based on type and sub-type fields @@ -46,33 +52,25 @@ processors: "vpn_connectivity_change": category: - session - - network type: - connection action: vpn-connectivity-change "dhcp_offer": - category: - - network type: - access - allowed action: dhcp-offer "dhcp_no_offer": - category: - - network type: - access - denied action: dhcp-no-offer "Site-to-Site VPN": - category: - - network type: - access action: site-to-site-vpn "client_vpn_connect": category: - - network - session type: - access @@ -80,22 +78,16 @@ processors: - start action: site-to-site-vpn "ip_session_initiated": - category: - - network type: - access - start action: ip-session-initiated "flow_allowed": - category: - - network type: - connection - start action: layer3-firewall-allowed-flow "flow_denied": - category: - - network type: - access - denied @@ -135,15 +127,12 @@ processors: - info action: issued-retrospective-malicious-disposition "association": - category: - - network type: - access - connection action: wifi-association-request "disassociation": category: - - network - session type: - access @@ -152,14 +141,12 @@ processors: "wpa_auth": category: - authentication - - network type: - start - access action: wifi-wpa-authentication "wpa_deauth": category: - - network - authentication type: - end @@ -167,7 +154,6 @@ processors: action: wifi-wpa-failed-auth-or-deauth "8021x_eap_failure": category: - - network - authentication type: - end @@ -175,7 +161,6 @@ processors: action: wifi-8021x-failed-authentication-attempt "8021x_deauth": category: - - network - authentication type: - end @@ -183,14 +168,12 @@ processors: action: wifi-8021x-failed-auth-or-deauth "8021x_eap_success": category: - - network - authentication type: - start action: wifi-8021x-auth "splash_auth": category: - - network - authentication type: - start @@ -214,44 +197,36 @@ processors: - indicator action: ssid-spoofing-detected "multiple_dhcp_servers_detected": - category: - - network type: - protocol "dfs_event": action: dynamic-frequency-selection-detected "aps_association_reject": action: association-rejected-for-load-balancing + if: ctx?.cisco_meraki?.event_subtype != null source: |- - ctx.event.type = new ArrayList(); - ctx.event.category = new ArrayList(); - ctx.event.action = ''; - - def eventSubtype = ctx.cisco_meraki.event_subtype; - if (eventSubtype == null) { - return; - } def eventMap = params.get('eventmap'); - def eventData = eventMap.get(eventSubtype); + def eventData = eventMap.get(ctx.cisco_meraki.event_subtype); if (eventData == null) { - ctx.event.action = eventSubtype; - ctx.event.category = ['network']; - ctx.event.type = ['info']; + ctx.event.action = ctx.cisco_meraki.event_subtype; return; } def eventCategory = eventData.get('category'); def eventType = eventData.get('type'); def eventAction = eventData.get('action'); if (eventType != null) { - ctx.event.type = new ArrayList(eventType); + for (def t : eventType) { + ctx.event.type.add(t); + } } if (eventCategory != null) { - ctx.event.category = new ArrayList(eventCategory); + for (def c : eventCategory) { + ctx.event.category.add(c); + } } if (eventAction != null) { ctx.event.action = eventAction; } - ## # Clean up ## diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index 28497cea5e0..df1f3a77a63 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "c2a36f08-db03-4645-9168-6f1f0ff7a343", + "ephemeral_id": "d6b6edbf-7f87-4199-83a3-b5f0820f8037", "hostname": "docker-fleet-agent", - "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", + "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -31,7 +31,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", + "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", "snapshot": false, "version": "7.17.0" }, @@ -39,12 +39,14 @@ "action": "ids-signature-matched", "agent_id_status": "verified", "category": [ + "network", "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-23T06:16:19Z", + "ingested": "2022-04-23T13:18:57Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ + "info", "indicator" ] }, @@ -53,7 +55,7 @@ }, "log": { "source": { - "address": "172.30.0.4:41452" + "address": "192.168.80.4:38785" } }, "network": { diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 9afb1afcb3f..42830fb6867 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -287,9 +287,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "c2a36f08-db03-4645-9168-6f1f0ff7a343", + "ephemeral_id": "d6b6edbf-7f87-4199-83a3-b5f0820f8037", "hostname": "docker-fleet-agent", - "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", + "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -317,7 +317,7 @@ An example event for `log` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", + "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", "snapshot": false, "version": "7.17.0" }, @@ -325,12 +325,14 @@ An example event for `log` looks as following: "action": "ids-signature-matched", "agent_id_status": "verified", "category": [ + "network", "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-23T06:16:19Z", + "ingested": "2022-04-23T13:18:57Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ + "info", "indicator" ] }, @@ -339,7 +341,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "172.30.0.4:41452" + "address": "192.168.80.4:38785" } }, "network": { @@ -611,9 +613,9 @@ An example event for `events` looks as following: { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "36bc5728-13ef-42f1-8d43-a6321b4c2c69", + "ephemeral_id": "532b4cd0-7b1b-452f-ac32-30f9fc019977", "hostname": "docker-fleet-agent", - "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", + "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -651,7 +653,7 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "c07c2fb3-f306-4a3f-a26b-45267ea94a92", + "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", "snapshot": false, "version": "7.17.0" }, @@ -662,7 +664,7 @@ An example event for `events` looks as following: "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-23T06:14:34Z", + "ingested": "2022-04-23T13:17:04Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", From 97af5282697d95da14b63a8fbc40ad891475240e Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sat, 23 Apr 2022 23:30:13 +1000 Subject: [PATCH 58/67] convert to ip and set to source/destination.ipinstead of rename --- .../log/elasticsearch/ingest_pipeline/flows.yml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml index db203a042b4..b168e4fe50f 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml @@ -15,12 +15,16 @@ processors: field: event.original pattern: "%{} flows %{cisco_meraki.flows.op} %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport}" if: ctx._temp.token.startsWith("src=") == false -- rename: +- convert: + type: ip field: src target_field: source.ip -- rename: + ignore_failure: true +- convert: + type: ip field: dst target_field: destination.ip + ignore_failure: true - rename: field: protocol target_field: network.protocol From 6b94eecf29047baa2003ac7079c7260c5f7c3edc Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sun, 24 Apr 2022 00:01:34 +1000 Subject: [PATCH 59/67] convert to ip type; not dissect directly to source.ip --- .../log/elasticsearch/ingest_pipeline/idsalerts.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml index c79a4098cac..bd525f4dd64 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml @@ -26,7 +26,12 @@ processors: target_field: network.protocol - dissect: field: src - pattern: "%{source.ip}:%{sport}" + pattern: "%{_temp.src_ip}:%{sport}" +- convert: + type: ip + field: _temp.src_ip + target_field: source.ip + ignore_failure: true - convert: field: sport target_field: source.port From d1dd45c973c0e03214e4a2c50b01325157b48550 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sun, 24 Apr 2022 00:24:26 +1000 Subject: [PATCH 60/67] consolidate geoip to main pipeline; convert to ip type --- .../data_stream/events/sample_event.json | 8 +-- .../pipeline/test-flows.log-expected.json | 30 +++++++++ .../elasticsearch/ingest_pipeline/default.yml | 49 +++++++++++++++ .../ingest_pipeline/idsalerts.yml | 24 ------- .../elasticsearch/ingest_pipeline/ipflows.yml | 49 +-------------- .../elasticsearch/ingest_pipeline/urls.yml | 62 ++++--------------- .../data_stream/log/sample_event.json | 10 +-- packages/cisco_meraki/docs/README.md | 18 +++--- 8 files changed, 110 insertions(+), 140 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index 704e18af113..d0c550d2953 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "532b4cd0-7b1b-452f-ac32-30f9fc019977", + "ephemeral_id": "a971030f-3eb4-4657-b1ea-413fdf8e02a6", "hostname": "docker-fleet-agent", - "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", + "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -41,7 +41,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", + "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", "snapshot": false, "version": "7.17.0" }, @@ -52,7 +52,7 @@ "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-23T13:17:04Z", + "ingested": "2022-04-23T14:20:58Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index b3647192e75..b39beecc297 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -51,6 +51,21 @@ "event_type": "flows" }, "destination": { + "as": { + "number": 209 + }, + "geo": { + "city_name": "Milton", + "continent_name": "North America", + "country_iso_code": "US", + "country_name": "United States", + "location": { + "lat": 47.2513, + "lon": -122.3149 + }, + "region_iso_code": "US-WA", + "region_name": "Washington" + }, "ip": "216.160.83.61", "port": 44210 }, @@ -76,6 +91,21 @@ "hostname": "MX84" }, "source": { + "as": { + "number": 209 + }, + "geo": { + "city_name": "Milton", + "continent_name": "North America", + "country_iso_code": "US", + "country_name": "United States", + "location": { + "lat": 47.2513, + "lon": -122.3149 + }, + "region_iso_code": "US-WA", + "region_name": "Washington" + }, "ip": "216.160.83.57", "port": 54445 }, diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 573e9e84abf..529db6b58e8 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -227,6 +227,55 @@ processors: if (eventAction != null) { ctx.event.action = eventAction; } + +# IP Geolocation Lookup (source) +- geoip: + field: source.ip + target_field: source.geo + ignore_missing: true + if: ctx.source?.geo == null && ctx?.source?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: source.ip + target_field: source.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.source?.ip != null +- rename: + field: source.as.asn + target_field: source.as.number + ignore_missing: true +- rename: + field: source.as.organization_name + target_field: source.as.organization.name + ignore_missing: true +# IP Geolocation Lookup (destination) +- geoip: + field: destination.ip + target_field: destination.geo + ignore_missing: true + if: ctx.destination?.geo == null && ctx?.destination?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: destination.ip + target_field: destination.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.destination?.ip != null +- rename: + field: destination.as.asn + target_field: destination.as.number + ignore_missing: true +- rename: + field: destination.as.organization_name + target_field: destination.as.organization.name + ignore_missing: true ## # Clean up ## diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml index bd525f4dd64..27381dff063 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml @@ -37,27 +37,3 @@ processors: target_field: source.port type: long ignore_failure: true -# IP Geolocation Lookup (source) -- geoip: - field: source.ip - target_field: source.geo - ignore_missing: true - if: ctx.source?.geo == null && ctx?.source?.ip != null -# IP Autonomous System (AS) Lookup -- geoip: - database_file: GeoLite2-ASN.mmdb - field: source.ip - target_field: source.as - properties: - - asn - - organization_name - ignore_missing: true - if: ctx?.source?.ip != null -- rename: - field: source.as.asn - target_field: source.as.number - ignore_missing: true -- rename: - field: source.as.organization_name - target_field: source.as.organization.name - ignore_missing: true diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml index c3a79e3c5ce..9509dd9feea 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml @@ -56,51 +56,4 @@ processors: - rename: field: protocol target_field: network.protocol -# IP Geolocation Lookup (source) -- geoip: - field: source.ip - target_field: source.geo - ignore_missing: true - if: ctx.source?.geo == null && ctx?.source?.ip != null -# IP Autonomous System (AS) Lookup -- geoip: - database_file: GeoLite2-ASN.mmdb - field: source.ip - target_field: source.as - properties: - - asn - - organization_name - ignore_missing: true - if: ctx?.source?.ip != null -- rename: - field: source.as.asn - target_field: source.as.number - ignore_missing: true -- rename: - field: source.as.organization_name - target_field: source.as.organization.name - ignore_missing: true -# IP Geolocation Lookup (destination) -- geoip: - field: destination.ip - target_field: destination.geo - ignore_missing: true - if: ctx.destination?.geo == null && ctx?.destination?.ip != null -# IP Autonomous System (AS) Lookup -- geoip: - database_file: GeoLite2-ASN.mmdb - field: destination.ip - target_field: destination.as - properties: - - asn - - organization_name - ignore_missing: true - if: ctx?.destination?.ip != null -- rename: - field: destination.as.asn - target_field: destination.as.number - ignore_missing: true -- rename: - field: destination.as.organization_name - target_field: destination.as.organization.name - ignore_missing: true + diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml index 18668dd117a..4d450ddf3ea 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml @@ -7,10 +7,20 @@ processors: pattern: "%{} urls %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} request: %{http.request.method} %{url.original}" - dissect: field: src - pattern: "%{source.ip}:%{sport}" + pattern: "%{_temp.src_ip}:%{sport}" - dissect: field: dst - pattern: "%{destination.ip}:%{dport}" + pattern: "%{_temp.dst_ip}:%{dport}" +- convert: + type: ip + field: _temp.src_ip + target_field: source.ip + ignore_failure: true +- convert: + type: ip + field: _temp.dst_ip + target_field: destination.ip + ignore_failure: true - convert: field: sport target_field: source.port @@ -28,54 +38,6 @@ processors: target_field: cisco_meraki.urls.mac pattern: '[-:.]' replacement: '-' -# IP Geolocation Lookup (source) -- geoip: - field: source.ip - target_field: source.geo - ignore_missing: true - if: ctx.source?.geo == null && ctx?.source?.ip != null -# IP Autonomous System (AS) Lookup -- geoip: - database_file: GeoLite2-ASN.mmdb - field: source.ip - target_field: source.as - properties: - - asn - - organization_name - ignore_missing: true - if: ctx?.source?.ip != null -- rename: - field: source.as.asn - target_field: source.as.number - ignore_missing: true -- rename: - field: source.as.organization_name - target_field: source.as.organization.name - ignore_missing: true -# IP Geolocation Lookup (destination) -- geoip: - field: destination.ip - target_field: destination.geo - ignore_missing: true - if: ctx.destination?.geo == null && ctx?.destination?.ip != null -# IP Autonomous System (AS) Lookup -- geoip: - database_file: GeoLite2-ASN.mmdb - field: destination.ip - target_field: destination.as - properties: - - asn - - organization_name - ignore_missing: true - if: ctx?.destination?.ip != null -- rename: - field: destination.as.asn - target_field: destination.as.number - ignore_missing: true -- rename: - field: destination.as.organization_name - target_field: destination.as.organization.name - ignore_missing: true - set: field: cisco_meraki.event_subtype value: 'http_access' diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index df1f3a77a63..7c516f149f6 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "d6b6edbf-7f87-4199-83a3-b5f0820f8037", + "ephemeral_id": "c5885a51-304c-4c36-8e06-bdbd0bed6622", "hostname": "docker-fleet-agent", - "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", + "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -31,7 +31,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", + "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", "snapshot": false, "version": "7.17.0" }, @@ -43,7 +43,7 @@ "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-23T13:18:57Z", + "ingested": "2022-04-23T14:22:44Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -55,7 +55,7 @@ }, "log": { "source": { - "address": "192.168.80.4:38785" + "address": "192.168.176.4:57142" } }, "network": { diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 42830fb6867..d9f930b4b93 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -287,9 +287,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "d6b6edbf-7f87-4199-83a3-b5f0820f8037", + "ephemeral_id": "c5885a51-304c-4c36-8e06-bdbd0bed6622", "hostname": "docker-fleet-agent", - "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", + "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -317,7 +317,7 @@ An example event for `log` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", + "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", "snapshot": false, "version": "7.17.0" }, @@ -329,7 +329,7 @@ An example event for `log` looks as following: "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-23T13:18:57Z", + "ingested": "2022-04-23T14:22:44Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -341,7 +341,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "192.168.80.4:38785" + "address": "192.168.176.4:57142" } }, "network": { @@ -613,9 +613,9 @@ An example event for `events` looks as following: { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "532b4cd0-7b1b-452f-ac32-30f9fc019977", + "ephemeral_id": "a971030f-3eb4-4657-b1ea-413fdf8e02a6", "hostname": "docker-fleet-agent", - "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", + "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -653,7 +653,7 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "1c98e458-7b43-4ab1-ac5b-00143824cca4", + "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", "snapshot": false, "version": "7.17.0" }, @@ -664,7 +664,7 @@ An example event for `events` looks as following: "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-23T13:17:04Z", + "ingested": "2022-04-23T14:20:58Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", From 4ef708a17f2c17f70d09a0315efb0454921749a3 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sun, 24 Apr 2022 12:37:54 +1000 Subject: [PATCH 61/67] move fields one level up from airmarshal to cisco_meraki group --- .../data_stream/events/sample_event.json | 8 +- .../test-airmarshal-events.log-expected.json | 2248 +++++++---------- .../ingest_pipeline/airmarshal.yml | 12 +- .../data_stream/log/fields/fields.yml | 27 +- .../data_stream/log/sample_event.json | 10 +- packages/cisco_meraki/docs/README.md | 12 +- 6 files changed, 982 insertions(+), 1335 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index d0c550d2953..82e1a63eaa5 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "a971030f-3eb4-4657-b1ea-413fdf8e02a6", + "ephemeral_id": "dc0b19ae-b0ed-4b5e-97af-e1e79b157364", "hostname": "docker-fleet-agent", - "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", + "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -41,7 +41,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", + "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", "snapshot": false, "version": "7.17.0" }, @@ -52,7 +52,7 @@ "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-23T14:20:58Z", + "ingested": "2022-04-24T02:32:20Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index 464557419bc..dc4a80e52ec 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -3,14 +3,12 @@ { "@timestamp": "2022-03-17T01:13:24.334Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "6A-3A-3E-85-D9-F6" @@ -50,14 +48,12 @@ { "@timestamp": "2022-03-17T01:13:00.487Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -97,14 +93,12 @@ { "@timestamp": "2022-03-17T01:12:32.047Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -144,16 +138,14 @@ { "@timestamp": "2022-03-17T01:12:17.315Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "vap": "1" - }, + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest", + "vap": "1" }, "destination": { "mac": "E2-CB-9C-B5-DD-BE" @@ -187,14 +179,12 @@ { "@timestamp": "2022-03-17T01:12:08.067Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -234,15 +224,13 @@ { "@timestamp": "2022-03-17T01:11:33.484Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -282,14 +270,12 @@ { "@timestamp": "2022-03-17T01:11:29.882Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -329,14 +315,12 @@ { "@timestamp": "2022-03-17T01:11:24.972Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -376,14 +360,12 @@ { "@timestamp": "2022-03-17T01:11:06.965Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -423,16 +405,14 @@ { "@timestamp": "2022-03-17T01:11:01.791Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "vap": "13" - }, + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest", + "vap": "13" }, "destination": { "mac": "AE-17-E8-C7-DF-FD" @@ -466,14 +446,12 @@ { "@timestamp": "2022-03-17T01:10:59.181Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -513,14 +491,12 @@ { "@timestamp": "2022-03-17T01:10:56.670Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -560,15 +536,13 @@ { "@timestamp": "2022-03-17T01:10:45.786Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "6A-3A-3E-85-D9-F6" @@ -608,14 +582,12 @@ { "@timestamp": "2022-03-17T01:10:42.047Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -655,14 +627,12 @@ { "@timestamp": "2022-03-17T01:09:59.287Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -702,14 +672,12 @@ { "@timestamp": "2022-03-17T01:09:36.407Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -749,14 +717,12 @@ { "@timestamp": "2022-03-17T01:09:35.390Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -796,14 +762,12 @@ { "@timestamp": "2022-03-17T01:09:31.594Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -843,15 +807,13 @@ { "@timestamp": "2022-03-17T01:09:16.473Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "78-55-CD-18-8F-76" @@ -891,16 +853,14 @@ { "@timestamp": "2022-03-17T01:09:14.489Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi", - "vap": "13" - }, + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi", + "vap": "13" }, "destination": { "mac": "78-28-CA-AA-6A-4A" @@ -934,14 +894,12 @@ { "@timestamp": "2022-03-17T01:09:13.446Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:DF:FD", + "channel": "56", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -981,15 +939,13 @@ { "@timestamp": "2022-03-17T01:09:12.553Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1029,15 +985,13 @@ { "@timestamp": "2022-03-17T01:09:10.428Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1077,15 +1031,13 @@ { "@timestamp": "2022-03-17T01:09:10.457Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1125,14 +1077,12 @@ { "@timestamp": "2022-03-17T01:09:06.794Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "AE-17-E8-C7-D8-51" @@ -1172,15 +1122,13 @@ { "@timestamp": "2022-03-17T01:09:05.577Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "E2-CB-9C-B5-D4-1E" @@ -1220,14 +1168,12 @@ { "@timestamp": "2022-03-17T01:09:01.816Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1267,15 +1213,13 @@ { "@timestamp": "2022-03-17T01:08:38.128Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "5C-AA-FD-5D-76-0E" @@ -1315,14 +1259,12 @@ { "@timestamp": "2022-03-17T01:08:33.473Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -1362,16 +1304,14 @@ { "@timestamp": "2022-03-17T01:08:19.143Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "vap": "1" - }, + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest", + "vap": "1" }, "destination": { "mac": "78-28-CA-AA-6A-0A" @@ -1405,14 +1345,12 @@ { "@timestamp": "2022-03-17T01:08:19.115Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1452,14 +1390,12 @@ { "@timestamp": "2022-03-17T01:08:14.302Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1499,14 +1435,12 @@ { "@timestamp": "2022-03-17T01:08:08.469Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "0E-8D-FB-70-0F-A8" @@ -1546,15 +1480,13 @@ { "@timestamp": "2022-03-17T01:08:01.848Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:DF:FD", + "channel": "56", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1594,14 +1526,12 @@ { "@timestamp": "2022-03-17T01:07:58.839Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1641,16 +1571,14 @@ { "@timestamp": "2022-03-17T01:07:11.942Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi", - "vap": "13" - }, + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi", + "vap": "13" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1684,14 +1612,12 @@ { "@timestamp": "2022-03-17T01:07:07.438Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1731,14 +1657,12 @@ { "@timestamp": "2022-03-17T01:07:02.927Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1778,14 +1702,12 @@ { "@timestamp": "2022-03-17T01:07:02.927Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1825,14 +1747,12 @@ { "@timestamp": "2022-03-17T01:07:02.728Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1872,14 +1792,12 @@ { "@timestamp": "2022-03-17T01:06:58.076Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-DC-6E" @@ -1919,14 +1837,12 @@ { "@timestamp": "2022-03-17T01:06:43.375Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1966,15 +1882,13 @@ { "@timestamp": "2022-03-17T01:06:39.622Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "6A-3A-3E-85-CA-4E" @@ -2014,14 +1928,12 @@ { "@timestamp": "2022-03-17T01:06:02.641Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:DF:FD", + "channel": "56", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2061,14 +1973,12 @@ { "@timestamp": "2022-03-17T01:06:02.670Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:DF:FD", + "channel": "56", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2108,16 +2018,14 @@ { "@timestamp": "2022-03-17T01:06:01.182Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "vap": "1" - }, + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest", + "vap": "1" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2151,16 +2059,14 @@ { "@timestamp": "2022-03-17T01:05:58.314Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi", - "vap": "1" - }, + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi", + "vap": "1" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2194,14 +2100,12 @@ { "@timestamp": "2022-03-17T01:05:51.958Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2241,14 +2145,12 @@ { "@timestamp": "2022-03-17T01:05:33.020Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "6A-3A-3E-85-D7-D4" @@ -2288,14 +2190,12 @@ { "@timestamp": "2022-03-17T01:05:27.384Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2335,14 +2235,12 @@ { "@timestamp": "2022-03-17T01:05:22.570Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2382,14 +2280,12 @@ { "@timestamp": "2022-03-17T01:05:22.592Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2429,14 +2325,12 @@ { "@timestamp": "2022-03-17T01:05:22.578Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2476,16 +2370,14 @@ { "@timestamp": "2022-03-17T01:05:20.544Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi", - "vap": "1" - }, + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi", + "vap": "1" }, "destination": { "mac": "90-AC-3F-02-31-59" @@ -2519,14 +2411,12 @@ { "@timestamp": "2022-03-17T01:04:51.258Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2566,15 +2456,13 @@ { "@timestamp": "2022-03-17T01:04:20.425Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "78-28-CA-AA-6A-4A" @@ -2614,14 +2502,12 @@ { "@timestamp": "2022-03-17T01:03:57.677Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2661,14 +2547,12 @@ { "@timestamp": "2022-03-17T01:03:56.783Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2708,14 +2592,12 @@ { "@timestamp": "2022-03-17T01:03:40.949Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2755,16 +2637,14 @@ { "@timestamp": "2022-03-17T01:02:54.912Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "vap": "13" - }, + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest", + "vap": "13" }, "destination": { "mac": "08-A7-C0-3B-5A-95" @@ -2798,15 +2678,13 @@ { "@timestamp": "2022-03-17T01:02:46.089Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2846,15 +2724,13 @@ { "@timestamp": "2022-03-17T01:02:30.860Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "78-28-CA-AA-69-96" @@ -2894,15 +2770,13 @@ { "@timestamp": "2022-03-17T01:02:20.142Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "AE-17-E8-C7-E2-9D" @@ -2942,14 +2816,12 @@ { "@timestamp": "2022-03-17T01:02:16.678Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-DC-6E" @@ -2989,14 +2861,12 @@ { "@timestamp": "2022-03-17T01:01:47.739Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "AE-17-E8-C7-DF-FD" @@ -3036,14 +2906,12 @@ { "@timestamp": "2022-03-17T01:00:55.303Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3083,15 +2951,13 @@ { "@timestamp": "2022-03-17T01:00:49.532Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3131,14 +2997,12 @@ { "@timestamp": "2022-03-17T01:00:45.877Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3178,14 +3042,12 @@ { "@timestamp": "2022-03-17T01:00:22.111Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3225,14 +3087,12 @@ { "@timestamp": "2022-03-17T01:00:18.039Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3272,16 +3132,14 @@ { "@timestamp": "2022-03-17T01:00:00.349Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "vap": "13" - }, + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest", + "vap": "13" }, "destination": { "mac": "6E-DA-36-A2-39-71" @@ -3315,14 +3173,12 @@ { "@timestamp": "2022-03-17T00:59:59.177Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3362,14 +3218,12 @@ { "@timestamp": "2022-03-17T00:59:48.838Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3409,15 +3263,13 @@ { "@timestamp": "2022-03-17T00:59:42.939Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -3457,15 +3309,13 @@ { "@timestamp": "2022-03-17T00:59:42.932Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -3505,15 +3355,13 @@ { "@timestamp": "2022-03-17T00:59:42.930Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -3553,16 +3401,14 @@ { "@timestamp": "2022-03-17T00:58:15.528Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "vap": "1" - }, + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest", + "vap": "1" }, "destination": { "mac": "78-28-CA-AA-6A-4A" @@ -3596,14 +3442,12 @@ { "@timestamp": "2022-03-17T00:58:13.465Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3643,14 +3487,12 @@ { "@timestamp": "2022-03-17T00:57:49.549Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3690,14 +3532,12 @@ { "@timestamp": "2022-03-17T00:57:06.517Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3737,14 +3577,12 @@ { "@timestamp": "2022-03-17T00:56:31.602Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3784,14 +3622,12 @@ { "@timestamp": "2022-03-17T00:56:09.035Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -3831,14 +3667,12 @@ { "@timestamp": "2022-03-17T00:56:07.751Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -3878,15 +3712,13 @@ { "@timestamp": "2022-03-17T00:55:59.571Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "5C-AA-FD-5D-76-0E" @@ -3926,14 +3758,12 @@ { "@timestamp": "2022-03-17T00:55:58.540Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-DC-6E" @@ -3973,14 +3803,12 @@ { "@timestamp": "2022-03-17T00:55:54.934Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4020,15 +3848,13 @@ { "@timestamp": "2022-03-17T00:55:41.587Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "E2-CB-9C-B5-DA-7A" @@ -4068,15 +3894,13 @@ { "@timestamp": "2022-03-17T00:55:34.671Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "E2-CB-9C-B5-DA-7A" @@ -4116,15 +3940,13 @@ { "@timestamp": "2022-03-17T00:55:08.007Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "6A-3A-3E-85-D7-D4" @@ -4164,15 +3986,13 @@ { "@timestamp": "2022-03-17T00:54:47.013Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4212,14 +4032,12 @@ { "@timestamp": "2022-03-17T00:54:43.410Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4259,14 +4077,12 @@ { "@timestamp": "2022-03-17T00:54:38.614Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4306,14 +4122,12 @@ { "@timestamp": "2022-03-17T00:54:00.565Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4353,14 +4167,12 @@ { "@timestamp": "2022-03-17T00:53:28.128Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4400,16 +4212,14 @@ { "@timestamp": "2022-03-17T00:53:23.005Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi", - "vap": "13" - }, + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi", + "vap": "13" }, "destination": { "mac": "AE-17-E8-C7-DF-FD" @@ -4443,14 +4253,12 @@ { "@timestamp": "2022-03-17T00:53:03.070Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4490,14 +4298,12 @@ { "@timestamp": "2022-03-17T00:52:53.816Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4537,16 +4343,14 @@ { "@timestamp": "2022-03-17T00:52:19.127Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "vap": "1" - }, + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest", + "vap": "1" }, "destination": { "mac": "78-28-CA-AA-6A-0A" @@ -4580,14 +4384,12 @@ { "@timestamp": "2022-03-17T00:51:38.296Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4627,15 +4429,13 @@ { "@timestamp": "2022-03-17T00:51:33.380Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4675,14 +4475,12 @@ { "@timestamp": "2022-03-17T00:51:08.953Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4722,16 +4520,14 @@ { "@timestamp": "2022-03-17T00:50:57.084Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi", - "vap": "13" - }, + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi", + "vap": "13" }, "destination": { "mac": "EE-CE-D5-6A-B6-22" @@ -4765,14 +4561,12 @@ { "@timestamp": "2022-03-17T00:50:56.341Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:DF:FD", + "channel": "56", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4812,14 +4606,12 @@ { "@timestamp": "2022-03-17T00:50:21.255Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4859,15 +4651,13 @@ { "@timestamp": "2022-03-17T00:49:05.758Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "6A-3A-3E-85-D7-D4" @@ -4907,16 +4697,14 @@ { "@timestamp": "2022-03-17T00:48:41.589Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi", - "vap": "1" - }, + "bssid": "AC:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi", + "vap": "1" }, "destination": { "mac": "AE-17-E8-C7-E1-41" @@ -4950,14 +4738,12 @@ { "@timestamp": "2022-03-17T00:48:39.868Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4997,16 +4783,14 @@ { "@timestamp": "2022-03-17T00:48:34.277Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi", - "vap": "1" - }, + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi", + "vap": "1" }, "destination": { "mac": "78-28-CA-AA-69-96" @@ -5040,14 +4824,12 @@ { "@timestamp": "2022-03-17T00:48:25.395Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5087,14 +4869,12 @@ { "@timestamp": "2022-03-17T00:48:22.536Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-D7-80" @@ -5134,14 +4914,12 @@ { "@timestamp": "2022-03-17T00:48:12.108Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5181,14 +4959,12 @@ { "@timestamp": "2022-03-17T00:48:07.649Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5228,14 +5004,12 @@ { "@timestamp": "2022-03-17T00:47:43.434Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5275,14 +5049,12 @@ { "@timestamp": "2022-03-17T00:47:34.846Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-DD-BE" @@ -5322,14 +5094,12 @@ { "@timestamp": "2022-03-17T00:47:19.876Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5369,15 +5139,13 @@ { "@timestamp": "2022-03-17T00:47:15.923Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5417,14 +5185,12 @@ { "@timestamp": "2022-03-17T00:47:14.762Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5464,15 +5230,13 @@ { "@timestamp": "2022-03-17T00:47:06.502Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5512,14 +5276,12 @@ { "@timestamp": "2022-03-17T00:47:00.564Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5559,14 +5321,12 @@ { "@timestamp": "2022-03-17T00:46:55.983Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5606,14 +5366,12 @@ { "@timestamp": "2022-03-17T00:46:46.707Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5653,14 +5411,12 @@ { "@timestamp": "2022-03-17T00:46:41.603Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5700,14 +5456,12 @@ { "@timestamp": "2022-03-17T00:46:03.236Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5747,14 +5501,12 @@ { "@timestamp": "2022-03-17T00:45:58.900Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5794,14 +5546,12 @@ { "@timestamp": "2022-03-17T00:45:53.907Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5841,14 +5591,12 @@ { "@timestamp": "2022-03-17T00:45:53.724Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -5888,14 +5636,12 @@ { "@timestamp": "2022-03-17T00:45:45.336Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-D8-54" @@ -5935,14 +5681,12 @@ { "@timestamp": "2022-03-17T00:45:44.121Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "6A-3A-3E-85-CA-4E" @@ -5982,16 +5726,14 @@ { "@timestamp": "2022-03-17T00:45:40.363Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest", - "vap": "13" - }, + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "ssid_spoofing_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest", + "vap": "13" }, "destination": { "mac": "34-8F-27-25-CC-48" @@ -6025,14 +5767,12 @@ { "@timestamp": "2022-03-17T00:45:30.038Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6072,14 +5812,12 @@ { "@timestamp": "2022-03-17T00:45:27.225Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:DF:FD", + "channel": "56", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6119,14 +5857,12 @@ { "@timestamp": "2022-03-17T00:45:20.683Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6166,14 +5902,12 @@ { "@timestamp": "2022-03-17T00:45:20.510Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6213,14 +5947,12 @@ { "@timestamp": "2022-03-17T00:44:51.986Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6260,14 +5992,12 @@ { "@timestamp": "2022-03-17T00:44:41.304Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6307,15 +6037,13 @@ { "@timestamp": "2022-03-17T00:44:33.769Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6355,14 +6083,12 @@ { "@timestamp": "2022-03-17T00:44:32.782Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6402,14 +6128,12 @@ { "@timestamp": "2022-03-17T00:44:31.675Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-DD-BE" @@ -6449,14 +6173,12 @@ { "@timestamp": "2022-03-17T00:44:24.088Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6496,14 +6218,12 @@ { "@timestamp": "2022-03-17T00:43:54.810Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6543,14 +6263,12 @@ { "@timestamp": "2022-03-17T00:43:48.886Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6590,15 +6308,13 @@ { "@timestamp": "2022-03-17T00:43:48.885Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6638,14 +6354,12 @@ { "@timestamp": "2022-03-17T00:43:48.799Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6685,14 +6399,12 @@ { "@timestamp": "2022-03-17T00:43:45.209Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6732,14 +6444,12 @@ { "@timestamp": "2022-03-17T00:43:45.021Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "6A-3A-3E-85-CA-4E" @@ -6779,14 +6489,12 @@ { "@timestamp": "2022-03-17T00:43:45.024Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "AE-17-E8-C7-DF-FD" @@ -6826,14 +6534,12 @@ { "@timestamp": "2022-03-17T00:43:41.364Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6873,14 +6579,12 @@ { "@timestamp": "2022-03-17T00:43:16.382Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6920,14 +6624,12 @@ { "@timestamp": "2022-03-17T00:43:16.382Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AA:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6967,14 +6669,12 @@ { "@timestamp": "2022-03-17T00:43:16.381Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7014,14 +6714,12 @@ { "@timestamp": "2022-03-17T00:43:15.407Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7061,15 +6759,13 @@ { "@timestamp": "2022-03-17T00:43:15.385Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7109,15 +6805,13 @@ { "@timestamp": "2022-03-17T00:43:15.385Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7157,15 +6851,13 @@ { "@timestamp": "2022-03-17T00:43:13.576Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:DF:FD", + "channel": "56", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7205,15 +6897,13 @@ { "@timestamp": "2022-03-17T00:43:13.576Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:DF:FD", - "channel": "56", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:DF:FD", + "channel": "56", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7253,14 +6943,12 @@ { "@timestamp": "2022-03-17T00:43:06.805Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E1:41", - "channel": "1", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E1:41", + "channel": "1", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7300,14 +6988,12 @@ { "@timestamp": "2022-03-17T00:43:00.705Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:DF:FD", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:DF:FD", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7347,14 +7033,12 @@ { "@timestamp": "2022-03-17T00:42:58.398Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7394,14 +7078,12 @@ { "@timestamp": "2022-03-17T00:42:53.586Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "AE-17-E8-C7-D8-51" @@ -7441,14 +7123,12 @@ { "@timestamp": "2022-03-17T00:42:44.149Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7488,14 +7168,12 @@ { "@timestamp": "2022-03-17T00:42:44.145Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7535,15 +7213,13 @@ { "@timestamp": "2022-03-17T00:42:44.143Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7583,15 +7259,13 @@ { "@timestamp": "2022-03-17T00:42:44.144Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7631,14 +7305,12 @@ { "@timestamp": "2022-03-17T00:42:43.225Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-D4-1E" @@ -7678,14 +7350,12 @@ { "@timestamp": "2022-03-17T00:42:24.039Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:C8:C7:D8:51", - "channel": "6", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:C8:C7:D8:51", + "channel": "6", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "AE-17-E8-C7-DF-FD" @@ -7725,14 +7395,12 @@ { "@timestamp": "2022-03-17T00:42:13.453Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7772,14 +7440,12 @@ { "@timestamp": "2022-03-17T00:42:13.446Z", "cisco_meraki": { - "airmarshal": { - "bssid": "BE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "BE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7819,15 +7485,13 @@ { "@timestamp": "2022-03-17T00:42:13.420Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "38-BA-F8-CC-82-2E" @@ -7867,15 +7531,13 @@ { "@timestamp": "2022-03-17T00:42:13.419Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "38-BA-F8-CC-82-2E" @@ -7915,15 +7577,13 @@ { "@timestamp": "2022-03-17T00:42:13.411Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:D8:51", - "channel": "149", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:D8:51", + "channel": "149", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "38-BA-F8-CC-82-2E" @@ -7963,15 +7623,13 @@ { "@timestamp": "2022-03-17T00:41:56.431Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AA:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" - }, + "bssid": "AA:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi Guest" }, "destination": { "mac": "E2-CB-9C-B5-D8-54" @@ -8011,14 +7669,12 @@ { "@timestamp": "2022-03-17T00:41:56.431Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-D8-54" @@ -8058,15 +7714,13 @@ { "@timestamp": "2022-03-17T00:41:56.429Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AE:17:D8:C7:E2:9D", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" - }, + "bssid": "AE:17:D8:C7:E2:9D", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0", + "ssid": "AwesomeWifi" }, "destination": { "mac": "E2-CB-9C-B5-D8-54" @@ -8106,14 +7760,12 @@ { "@timestamp": "2022-03-17T00:41:55.612Z", "cisco_meraki": { - "airmarshal": { - "bssid": "AC:17:C8:C7:E2:9D", - "channel": "11", - "fc_subtype": "8", - "fc_type": "0" - }, + "bssid": "AC:17:C8:C7:E2:9D", + "channel": "11", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "8", + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -8153,14 +7805,12 @@ { "@timestamp": "2022-03-17T00:41:42.046Z", "cisco_meraki": { - "airmarshal": { - "bssid": "92:17:D8:C7:E1:41", - "channel": "36", - "fc_subtype": "5", - "fc_type": "0" - }, + "bssid": "92:17:D8:C7:E1:41", + "channel": "36", "event_subtype": "rogue_ssid_detected", - "event_type": "airmarshal_events" + "event_type": "airmarshal_events", + "fc_subtype": "5", + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-DC-6E" diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml index 95ed050a5ca..f0597736f38 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml @@ -23,14 +23,14 @@ processors: strip_brackets: true - rename: field: _temp.kv.ssid - target_field: cisco_meraki.airmarshal.ssid + target_field: cisco_meraki.ssid if: ctx?._temp?.kv?.ssid != null - rename: field: _temp.kv.bssid - target_field: cisco_meraki.airmarshal.bssid + target_field: cisco_meraki.bssid - rename: field: _temp.kv.vap - target_field: cisco_meraki.airmarshal.vap + target_field: cisco_meraki.vap if: ctx?.cisco_meraki?.event_subtype == 'ssid_spoofing_detected' - gsub: field: _temp.kv.src @@ -54,10 +54,10 @@ processors: if: ctx?.cisco_meraki?.event_subtype == 'rogue_ssid_detected' - rename: field: _temp.kv.channel - target_field: cisco_meraki.airmarshal.channel + target_field: cisco_meraki.channel - rename: field: _temp.kv.fc_type - target_field: cisco_meraki.airmarshal.fc_type + target_field: cisco_meraki.fc_type - rename: field: _temp.kv.fc_subtype - target_field: cisco_meraki.airmarshal.fc_subtype + target_field: cisco_meraki.fc_subtype diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index 1aed2a049ee..94ec1947d1f 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -5,21 +5,18 @@ type: keyword - name: event_subtype type: keyword - - name: airmarshal - type: group - fields: - - name: ssid - type: keyword - - name: bssid - type: keyword - - name: vap - type: keyword - - name: channel - type: keyword - - name: fc_type - type: keyword - - name: fc_subtype - type: keyword + - name: ssid + type: keyword + - name: bssid + type: keyword + - name: vap + type: keyword + - name: channel + type: keyword + - name: fc_type + type: keyword + - name: fc_subtype + type: keyword - name: flows type: flattened - name: dfs_event diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index 7c516f149f6..7bb4f7463d9 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "c5885a51-304c-4c36-8e06-bdbd0bed6622", + "ephemeral_id": "047739ae-235e-41e1-bdb6-1a79d8ed2033", "hostname": "docker-fleet-agent", - "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", + "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -31,7 +31,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", + "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", "snapshot": false, "version": "7.17.0" }, @@ -43,7 +43,7 @@ "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-23T14:22:44Z", + "ingested": "2022-04-24T02:34:09Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -55,7 +55,7 @@ }, "log": { "source": { - "address": "192.168.176.4:57142" + "address": "172.20.0.4:58487" } }, "network": { diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index d9f930b4b93..34ea9045d63 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -62,19 +62,17 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | cisco_meraki.8021x_deauth | | flattened | | cisco_meraki.8021x_eap_failure | | flattened | | cisco_meraki.8021x_eap_success | | flattened | -| cisco_meraki.airmarshal.bssid | | keyword | -| cisco_meraki.airmarshal.channel | | keyword | -| cisco_meraki.airmarshal.fc_subtype | | keyword | -| cisco_meraki.airmarshal.fc_type | | keyword | -| cisco_meraki.airmarshal.ssid | | keyword | -| cisco_meraki.airmarshal.vap | | keyword | | cisco_meraki.aps_association_reject | | flattened | | cisco_meraki.association | | flattened | +| cisco_meraki.bssid | | keyword | +| cisco_meraki.channel | | keyword | | cisco_meraki.device_packet_flood | | flattened | | cisco_meraki.dfs_event | | flattened | | cisco_meraki.disassociation | | flattened | | cisco_meraki.event_subtype | | keyword | | cisco_meraki.event_type | | keyword | +| cisco_meraki.fc_subtype | | keyword | +| cisco_meraki.fc_type | | keyword | | cisco_meraki.flows | | flattened | | cisco_meraki.multiple_dhcp_servers_detected | | flattened | | cisco_meraki.security.action | | keyword | @@ -86,7 +84,9 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | cisco_meraki.site_to_site_vpn.connectivity_change | | flattened | | cisco_meraki.site_to_site_vpn.raw | | text | | cisco_meraki.splash_auth | | flattened | +| cisco_meraki.ssid | | keyword | | cisco_meraki.urls.mac | | keyword | +| cisco_meraki.vap | | keyword | | cisco_meraki.wpa_auth | | flattened | | cisco_meraki.wpa_deauth | | flattened | | client.domain | The domain name of the client system. This value may be a host name, a fully qualified domain name, or another host naming format. The value may derive from the original event or be added from enrichment. | keyword | From 5bc8efea690a389cf5c4e14b29e13b2d5ba12ff4 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sun, 24 Apr 2022 12:53:29 +1000 Subject: [PATCH 62/67] update readme --- packages/cisco_meraki/docs/README.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 34ea9045d63..562a2694e48 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -287,9 +287,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "c5885a51-304c-4c36-8e06-bdbd0bed6622", + "ephemeral_id": "047739ae-235e-41e1-bdb6-1a79d8ed2033", "hostname": "docker-fleet-agent", - "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", + "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -317,7 +317,7 @@ An example event for `log` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", + "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", "snapshot": false, "version": "7.17.0" }, @@ -329,7 +329,7 @@ An example event for `log` looks as following: "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-23T14:22:44Z", + "ingested": "2022-04-24T02:34:09Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -341,7 +341,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "192.168.176.4:57142" + "address": "172.20.0.4:58487" } }, "network": { @@ -613,9 +613,9 @@ An example event for `events` looks as following: { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "a971030f-3eb4-4657-b1ea-413fdf8e02a6", + "ephemeral_id": "dc0b19ae-b0ed-4b5e-97af-e1e79b157364", "hostname": "docker-fleet-agent", - "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", + "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -653,7 +653,7 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "9ecdf652-81fa-4ad1-9414-f1eee419bfb6", + "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", "snapshot": false, "version": "7.17.0" }, @@ -664,7 +664,7 @@ An example event for `events` looks as following: "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-23T14:20:58Z", + "ingested": "2022-04-24T02:32:20Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", From 2c2a03687e2169a25760b99cbd2689474a40b880 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sun, 24 Apr 2022 13:29:12 +1000 Subject: [PATCH 63/67] move airmarshal.ssid to ecs field network.name --- .../data_stream/events/sample_event.json | 8 +- .../test-airmarshal-events.log-expected.json | 228 ++++++++++-------- .../ingest_pipeline/airmarshal.yml | 2 +- .../data_stream/log/fields/ecs.yml | 2 + .../data_stream/log/fields/fields.yml | 2 - .../data_stream/log/sample_event.json | 10 +- packages/cisco_meraki/docs/README.md | 26 +- 7 files changed, 156 insertions(+), 122 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index 82e1a63eaa5..7a197fd2ae8 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "dc0b19ae-b0ed-4b5e-97af-e1e79b157364", + "ephemeral_id": "6108fd89-575b-4d34-aa13-8f49149421c1", "hostname": "docker-fleet-agent", - "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", + "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -41,7 +41,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", + "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", "snapshot": false, "version": "7.17.0" }, @@ -52,7 +52,7 @@ "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-24T02:32:20Z", + "ingested": "2022-04-24T03:20:26Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index dc4a80e52ec..4af1846c068 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -144,7 +144,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", "vap": "1" }, "destination": { @@ -165,6 +164,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi Guest" + }, "observer": { "hostname": "MX84_1" }, @@ -229,8 +231,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -251,6 +252,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -411,7 +413,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", "vap": "13" }, "destination": { @@ -432,6 +433,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi Guest" + }, "observer": { "hostname": "MX84_6" }, @@ -541,8 +545,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "6A-3A-3E-85-D9-F6" @@ -563,6 +566,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -812,8 +816,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "78-55-CD-18-8F-76" @@ -834,6 +837,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -859,7 +863,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", "vap": "13" }, "destination": { @@ -880,6 +883,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi" + }, "observer": { "hostname": "MX84_6" }, @@ -944,8 +950,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -966,6 +971,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -990,8 +996,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1012,6 +1017,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -1036,8 +1042,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1058,6 +1063,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -1127,8 +1133,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-D4-1E" @@ -1149,6 +1154,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -1218,8 +1224,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "5C-AA-FD-5D-76-0E" @@ -1240,6 +1245,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -1310,7 +1316,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", "vap": "1" }, "destination": { @@ -1331,6 +1336,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi Guest" + }, "observer": { "hostname": "MX84_2" }, @@ -1485,8 +1493,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -1507,6 +1514,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -1577,7 +1585,6 @@ "event_type": "airmarshal_events", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", "vap": "13" }, "destination": { @@ -1598,6 +1605,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi" + }, "observer": { "hostname": "MX84_4" }, @@ -1887,8 +1897,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "6A-3A-3E-85-CA-4E" @@ -1909,6 +1918,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -2024,7 +2034,6 @@ "event_type": "airmarshal_events", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi Guest", "vap": "1" }, "destination": { @@ -2045,6 +2054,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi Guest" + }, "observer": { "hostname": "MX84_8" }, @@ -2065,7 +2077,6 @@ "event_type": "airmarshal_events", "fc_subtype": "8", "fc_type": "0", - "ssid": "AwesomeWifi", "vap": "1" }, "destination": { @@ -2086,6 +2097,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi" + }, "observer": { "hostname": "MX84_8" }, @@ -2376,7 +2390,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", "vap": "1" }, "destination": { @@ -2397,6 +2410,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi" + }, "observer": { "hostname": "MX84" }, @@ -2461,8 +2477,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "78-28-CA-AA-6A-4A" @@ -2483,6 +2498,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -2643,7 +2659,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", "vap": "13" }, "destination": { @@ -2664,6 +2679,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi Guest" + }, "observer": { "hostname": "MX84" }, @@ -2683,8 +2701,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2705,6 +2722,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -2729,8 +2747,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "78-28-CA-AA-69-96" @@ -2751,6 +2768,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -2775,8 +2793,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "AE-17-E8-C7-E2-9D" @@ -2797,6 +2814,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -2956,8 +2974,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -2978,6 +2995,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -3138,7 +3156,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", "vap": "13" }, "destination": { @@ -3159,6 +3176,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi Guest" + }, "observer": { "hostname": "MX84_5" }, @@ -3268,8 +3288,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -3290,6 +3309,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -3314,8 +3334,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -3336,6 +3355,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -3360,8 +3380,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-C5-68" @@ -3382,6 +3401,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -3407,7 +3427,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", "vap": "1" }, "destination": { @@ -3428,6 +3447,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi Guest" + }, "observer": { "hostname": "MX84" }, @@ -3717,8 +3739,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "5C-AA-FD-5D-76-0E" @@ -3739,6 +3760,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -3853,8 +3875,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-DA-7A" @@ -3875,6 +3896,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -3899,8 +3921,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-DA-7A" @@ -3921,6 +3942,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -3945,8 +3967,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "6A-3A-3E-85-D7-D4" @@ -3967,6 +3988,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -3991,8 +4013,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4013,6 +4034,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -4218,7 +4240,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", "vap": "13" }, "destination": { @@ -4239,6 +4260,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi" + }, "observer": { "hostname": "MX84_5" }, @@ -4349,7 +4373,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", "vap": "1" }, "destination": { @@ -4370,6 +4393,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi Guest" + }, "observer": { "hostname": "MX84" }, @@ -4434,8 +4460,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -4456,6 +4481,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -4526,7 +4552,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", "vap": "13" }, "destination": { @@ -4547,6 +4572,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi" + }, "observer": { "hostname": "MX84" }, @@ -4656,8 +4684,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "6A-3A-3E-85-D7-D4" @@ -4678,6 +4705,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -4703,7 +4731,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", "vap": "1" }, "destination": { @@ -4724,6 +4751,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi" + }, "observer": { "hostname": "MX84_2" }, @@ -4789,7 +4819,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi", "vap": "1" }, "destination": { @@ -4810,6 +4839,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi" + }, "observer": { "hostname": "MX84" }, @@ -5144,8 +5176,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5166,6 +5197,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -5235,8 +5267,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -5257,6 +5288,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -5732,7 +5764,6 @@ "event_type": "airmarshal_events", "fc_subtype": "5", "fc_type": "0", - "ssid": "AwesomeWifi Guest", "vap": "13" }, "destination": { @@ -5753,6 +5784,9 @@ "indicator" ] }, + "network": { + "name": "AwesomeWifi Guest" + }, "observer": { "hostname": "MX84" }, @@ -6042,8 +6076,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6064,6 +6097,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -6313,8 +6347,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6335,6 +6368,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -6764,8 +6798,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6786,6 +6819,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -6810,8 +6844,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6832,6 +6865,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -6856,8 +6890,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6878,6 +6911,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -6902,8 +6936,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -6924,6 +6957,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -7218,8 +7252,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7240,6 +7273,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -7264,8 +7298,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "8", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "FF-FF-FF-FF-FF-FF" @@ -7286,6 +7319,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -7490,8 +7524,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "38-BA-F8-CC-82-2E" @@ -7512,6 +7545,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -7536,8 +7570,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "38-BA-F8-CC-82-2E" @@ -7558,6 +7591,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -7582,8 +7616,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "38-BA-F8-CC-82-2E" @@ -7604,6 +7637,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } @@ -7628,8 +7662,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi Guest" + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-D8-54" @@ -7650,6 +7683,7 @@ ] }, "network": { + "name": "AwesomeWifi Guest", "vlan": { "id": "0" } @@ -7719,8 +7753,7 @@ "event_subtype": "rogue_ssid_detected", "event_type": "airmarshal_events", "fc_subtype": "5", - "fc_type": "0", - "ssid": "AwesomeWifi" + "fc_type": "0" }, "destination": { "mac": "E2-CB-9C-B5-D8-54" @@ -7741,6 +7774,7 @@ ] }, "network": { + "name": "AwesomeWifi", "vlan": { "id": "0" } diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml index f0597736f38..2a7b399e941 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/airmarshal.yml @@ -23,7 +23,7 @@ processors: strip_brackets: true - rename: field: _temp.kv.ssid - target_field: cisco_meraki.ssid + target_field: network.name if: ctx?._temp?.kv?.ssid != null - rename: field: _temp.kv.bssid diff --git a/packages/cisco_meraki/data_stream/log/fields/ecs.yml b/packages/cisco_meraki/data_stream/log/fields/ecs.yml index 949e5bb3bc9..d0f1e65d677 100644 --- a/packages/cisco_meraki/data_stream/log/fields/ecs.yml +++ b/packages/cisco_meraki/data_stream/log/fields/ecs.yml @@ -138,6 +138,8 @@ name: network.direction - external: ecs name: network.forwarded_ip +- external: ecs + name: network.name - external: ecs name: network.packets - external: ecs diff --git a/packages/cisco_meraki/data_stream/log/fields/fields.yml b/packages/cisco_meraki/data_stream/log/fields/fields.yml index 94ec1947d1f..373013e01f4 100644 --- a/packages/cisco_meraki/data_stream/log/fields/fields.yml +++ b/packages/cisco_meraki/data_stream/log/fields/fields.yml @@ -5,8 +5,6 @@ type: keyword - name: event_subtype type: keyword - - name: ssid - type: keyword - name: bssid type: keyword - name: vap diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index 7bb4f7463d9..a564658de9b 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "047739ae-235e-41e1-bdb6-1a79d8ed2033", + "ephemeral_id": "de18c264-ebb7-484d-a8d4-d654f4eb110a", "hostname": "docker-fleet-agent", - "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", + "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -31,7 +31,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", + "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", "snapshot": false, "version": "7.17.0" }, @@ -43,7 +43,7 @@ "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-24T02:34:09Z", + "ingested": "2022-04-24T03:22:17Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -55,7 +55,7 @@ }, "log": { "source": { - "address": "172.20.0.4:58487" + "address": "172.26.0.4:44596" } }, "network": { diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 562a2694e48..3c84b161330 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -57,7 +57,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | Field | Description | Type | |---|---|---| -| @timestamp | Date/time when the event originated. This is the date/time extracted from the event, typically representing when the event was generated by the source. If the event source has no original timestamp, this value is typically populated by the first time the event was received by the pipeline. Required field for all events. | date | +| @timestamp | Event timestamp. | date | | cisco_meraki.8021x_auth | | flattened | | cisco_meraki.8021x_deauth | | flattened | | cisco_meraki.8021x_eap_failure | | flattened | @@ -84,7 +84,6 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | cisco_meraki.site_to_site_vpn.connectivity_change | | flattened | | cisco_meraki.site_to_site_vpn.raw | | text | | cisco_meraki.splash_auth | | flattened | -| cisco_meraki.ssid | | keyword | | cisco_meraki.urls.mac | | keyword | | cisco_meraki.vap | | keyword | | cisco_meraki.wpa_auth | | flattened | @@ -178,7 +177,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | host.hostname | Hostname of the host. It normally contains what the `hostname` command returns on the host machine. | keyword | | host.id | Unique host id. As hostname is not always unique, use values that are meaningful in your environment. Example: The current usage of `beat.name`. | keyword | | host.ip | Host ip addresses. | ip | -| host.mac | Host mac addresses. | keyword | +| host.mac | Host MAC addresses. The notation format from RFC 7042 is suggested: Each octet (that is, 8-bit byte) is represented by two [uppercase] hexadecimal digits giving the value of the octet as an unsigned integer. Successive octets are separated by a hyphen. | keyword | | host.name | Name of the host. It can contain what `hostname` returns on Unix systems, the fully qualified domain name, or a name specified by the user. The sender decides which value to use. | keyword | | host.os.build | OS build information. | keyword | | host.os.codename | OS codename, if any. | keyword | @@ -191,7 +190,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | host.type | Type of host. For Cloud providers this can be the machine type like `t2.medium`. If vm, this could be the container, for example, or other information meaningful in your environment. | keyword | | http.request.method | HTTP request method. The value should retain its casing from the original event. For example, `GET`, `get`, and `GeT` are all considered valid values for this field. | keyword | | http.request.referrer | Referrer for this HTTP request. | keyword | -| input.type | Input type. | keyword | +| input.type | Type of Filebeat input. | keyword | | log.file.path | Full path to the log file this event came from, including the file name. It should include the drive letter, when appropriate. If the event wasn't read from a log file, do not populate this field. | keyword | | log.level | Original log level of the log event. If the source of the event provides a log level or textual severity, this is the one that goes in `log.level`. If your source doesn't specify one, you may put your event transport's severity here (e.g. Syslog severity). Some examples are `warn`, `err`, `i`, `informational`. | keyword | | log.offset | Offset of the entry in the log file. | long | @@ -204,6 +203,7 @@ The `cisco_meraki.log` dataset provides events from the configured syslog server | network.bytes | Total bytes transferred in both directions. If `source.bytes` and `destination.bytes` are known, `network.bytes` is their sum. | long | | network.direction | Direction of the network traffic. Recommended values are: \* ingress \* egress \* inbound \* outbound \* internal \* external \* unknown When mapping events from a host-based monitoring context, populate this field from the host's point of view, using the values "ingress" or "egress". When mapping events from a network or perimeter-based monitoring context, populate this field from the point of view of the network perimeter, using the values "inbound", "outbound", "internal" or "external". Note that "internal" is not crossing perimeter boundaries, and is meant to describe communication between two hosts within the perimeter. Note also that "external" is meant to describe traffic between two hosts that are external to the perimeter. This could for example be useful for ISPs or VPN service providers. | keyword | | network.forwarded_ip | Host IP address when the source IP address is the proxy. | ip | +| network.name | Name given by operators to sections of their network. | keyword | | network.packets | Total packets transferred in both directions. If `source.packets` and `destination.packets` are known, `network.packets` is their sum. | long | | network.protocol | In the OSI Model this would be the Application Layer protocol. For example, `http`, `dns`, or `ssh`. The field value must be normalized to lowercase for querying. | keyword | | network.vlan.id | VLAN ID as reported by the observer. | keyword | @@ -287,9 +287,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "047739ae-235e-41e1-bdb6-1a79d8ed2033", + "ephemeral_id": "de18c264-ebb7-484d-a8d4-d654f4eb110a", "hostname": "docker-fleet-agent", - "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", + "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -317,7 +317,7 @@ An example event for `log` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", + "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", "snapshot": false, "version": "7.17.0" }, @@ -329,7 +329,7 @@ An example event for `log` looks as following: "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-24T02:34:09Z", + "ingested": "2022-04-24T03:22:17Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -341,7 +341,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "172.20.0.4:58487" + "address": "172.26.0.4:44596" } }, "network": { @@ -613,9 +613,9 @@ An example event for `events` looks as following: { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "dc0b19ae-b0ed-4b5e-97af-e1e79b157364", + "ephemeral_id": "6108fd89-575b-4d34-aa13-8f49149421c1", "hostname": "docker-fleet-agent", - "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", + "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -653,7 +653,7 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "2622bbbd-01b6-461e-bb3d-c046d697b92d", + "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", "snapshot": false, "version": "7.17.0" }, @@ -664,7 +664,7 @@ An example event for `events` looks as following: "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-24T02:32:20Z", + "ingested": "2022-04-24T03:20:26Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", From 567ee082d371eb69067d65d69750e1d8b5962ba0 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Sun, 24 Apr 2022 16:01:06 +1000 Subject: [PATCH 64/67] consolidate more instances of geoip processing to default --- .../data_stream/events/sample_event.json | 8 ++-- .../elasticsearch/ingest_pipeline/default.yml | 24 ++++++++++ .../elasticsearch/ingest_pipeline/events.yml | 27 ----------- .../ingest_pipeline/security.yml | 48 ------------------- .../data_stream/log/sample_event.json | 10 ++-- packages/cisco_meraki/docs/README.md | 18 +++---- 6 files changed, 42 insertions(+), 93 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index 7a197fd2ae8..65409b2bb13 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "6108fd89-575b-4d34-aa13-8f49149421c1", + "ephemeral_id": "e02de7b6-7f33-429d-966b-07590ffb1c2d", "hostname": "docker-fleet-agent", - "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", + "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -41,7 +41,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", + "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", "snapshot": false, "version": "7.17.0" }, @@ -52,7 +52,7 @@ "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-24T03:20:26Z", + "ingested": "2022-04-24T05:06:19Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml index 529db6b58e8..25db77e90f3 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/default.yml @@ -276,6 +276,30 @@ processors: field: destination.as.organization_name target_field: destination.as.organization.name ignore_missing: true +# IP Geolocation Lookup (client) +- geoip: + field: client.ip + target_field: client.geo + ignore_missing: true + if: ctx.client?.geo == null && ctx?.client?.ip != null +# IP Autonomous System (AS) Lookup +- geoip: + database_file: GeoLite2-ASN.mmdb + field: client.ip + target_field: client.as + properties: + - asn + - organization_name + ignore_missing: true + if: ctx?.client?.ip != null +- rename: + field: client.as.asn + target_field: client.as.number + ignore_missing: true +- rename: + field: client.as.organization_name + target_field: client.as.organization.name + ignore_missing: true ## # Clean up ## diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index 183f95a44a6..3ca1bebd644 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -157,30 +157,3 @@ processors: field: event.original pattern: "%{} events client_vpn_connect user id '%{user.name}' local ip %{network.forwarded_ip} connected from %{client.ip}" if: ctx?.cisco_meraki?.event_subtype == "client_vpn_connect" - -#################################################### -# IP Geolocation Lookup (source) -#################################################### -- geoip: - field: client.ip - target_field: client.geo - ignore_missing: true - if: ctx.client?.geo == null && ctx?.client?.ip != null -# IP Autonomous System (AS) Lookup -- geoip: - database_file: GeoLite2-ASN.mmdb - field: client.ip - target_field: client.as - properties: - - asn - - organization_name - ignore_missing: true - if: ctx?.client?.ip != null -- rename: - field: client.as.asn - target_field: client.as.number - ignore_missing: true -- rename: - field: client.as.organization_name - target_field: client.as.organization.name - ignore_missing: true diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml index 52b2ffd0deb..055750bfd00 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml @@ -121,51 +121,3 @@ processors: type: long if: ctx?.dport != "0" && ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' ignore_failure: true -# IP Geolocation Lookup (source) -- geoip: - field: source.ip - target_field: source.geo - ignore_missing: true - if: ctx.source?.geo == null && ctx?.source?.ip != null -# IP Autonomous System (AS) Lookup -- geoip: - database_file: GeoLite2-ASN.mmdb - field: source.ip - target_field: source.as - properties: - - asn - - organization_name - ignore_missing: true - if: ctx?.source?.ip != null -- rename: - field: source.as.asn - target_field: source.as.number - ignore_missing: true -- rename: - field: source.as.organization_name - target_field: source.as.organization.name - ignore_missing: true -# IP Geolocation Lookup (destination) -- geoip: - field: destination.ip - target_field: destination.geo - ignore_missing: true - if: ctx.destination?.geo == null && ctx?.destination?.ip != null -# IP Autonomous System (AS) Lookup -- geoip: - database_file: GeoLite2-ASN.mmdb - field: destination.ip - target_field: destination.as - properties: - - asn - - organization_name - ignore_missing: true - if: ctx?.destination?.ip != null -- rename: - field: destination.as.asn - target_field: destination.as.number - ignore_missing: true -- rename: - field: destination.as.organization_name - target_field: destination.as.organization.name - ignore_missing: true diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index a564658de9b..5785e5f4acc 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "de18c264-ebb7-484d-a8d4-d654f4eb110a", + "ephemeral_id": "18583664-b6a2-4581-aba5-a47a9cec3fab", "hostname": "docker-fleet-agent", - "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", + "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -31,7 +31,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", + "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", "snapshot": false, "version": "7.17.0" }, @@ -43,7 +43,7 @@ "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-24T03:22:17Z", + "ingested": "2022-04-24T05:08:12Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -55,7 +55,7 @@ }, "log": { "source": { - "address": "172.26.0.4:44596" + "address": "192.168.0.4:35390" } }, "network": { diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 3c84b161330..73c7e2ca69f 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -287,9 +287,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "de18c264-ebb7-484d-a8d4-d654f4eb110a", + "ephemeral_id": "18583664-b6a2-4581-aba5-a47a9cec3fab", "hostname": "docker-fleet-agent", - "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", + "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -317,7 +317,7 @@ An example event for `log` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", + "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", "snapshot": false, "version": "7.17.0" }, @@ -329,7 +329,7 @@ An example event for `log` looks as following: "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-24T03:22:17Z", + "ingested": "2022-04-24T05:08:12Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -341,7 +341,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "172.26.0.4:44596" + "address": "192.168.0.4:35390" } }, "network": { @@ -613,9 +613,9 @@ An example event for `events` looks as following: { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "6108fd89-575b-4d34-aa13-8f49149421c1", + "ephemeral_id": "e02de7b6-7f33-429d-966b-07590ffb1c2d", "hostname": "docker-fleet-agent", - "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", + "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -653,7 +653,7 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "7782c2aa-cc27-4864-b192-b76f7a26449d", + "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", "snapshot": false, "version": "7.17.0" }, @@ -664,7 +664,7 @@ An example event for `events` looks as following: "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-24T03:20:26Z", + "ingested": "2022-04-24T05:06:19Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", From 9857c5b6986d561541c716e677ad6ff8a3994b50 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 26 Apr 2022 11:21:51 +1000 Subject: [PATCH 65/67] fix conflict; update to ecs 8.2 --- .../data_stream/events/sample_event.json | 8 +- .../test-airmarshal-events.log-expected.json | 350 +++++++++--------- .../pipeline/test-events.log-expected.json | 46 +-- .../pipeline/test-flows.log-expected.json | 6 +- .../pipeline/test-ip-flow.log-expected.json | 16 +- .../test-security-events.log-expected.json | 10 +- .../test/pipeline/test-urls.log-expected.json | 4 +- .../data_stream/log/sample_event.json | 12 +- packages/cisco_meraki/docs/README.md | 20 +- 9 files changed, 236 insertions(+), 236 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index 65409b2bb13..dc94f6bfba2 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "e02de7b6-7f33-429d-966b-07590ffb1c2d", + "ephemeral_id": "544eddd0-ff4d-4a7c-915e-30c3f097b42a", "hostname": "docker-fleet-agent", - "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", + "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -41,7 +41,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", + "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", "snapshot": false, "version": "7.17.0" }, @@ -52,7 +52,7 @@ "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-24T05:06:19Z", + "ingested": "2022-04-26T01:19:17Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json index 4af1846c068..ab3bf32c484 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-airmarshal-events.log-expected.json @@ -14,7 +14,7 @@ "mac": "6A-3A-3E-85-D9-F6" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -59,7 +59,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -104,7 +104,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -150,7 +150,7 @@ "mac": "E2-CB-9C-B5-DD-BE" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -192,7 +192,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -237,7 +237,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -283,7 +283,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -328,7 +328,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -373,7 +373,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -419,7 +419,7 @@ "mac": "AE-17-E8-C7-DF-FD" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -461,7 +461,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -506,7 +506,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -551,7 +551,7 @@ "mac": "6A-3A-3E-85-D9-F6" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -597,7 +597,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -642,7 +642,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -687,7 +687,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -732,7 +732,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -777,7 +777,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -822,7 +822,7 @@ "mac": "78-55-CD-18-8F-76" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -869,7 +869,7 @@ "mac": "78-28-CA-AA-6A-4A" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -911,7 +911,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -956,7 +956,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1002,7 +1002,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1048,7 +1048,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1094,7 +1094,7 @@ "mac": "AE-17-E8-C7-D8-51" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1139,7 +1139,7 @@ "mac": "E2-CB-9C-B5-D4-1E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1185,7 +1185,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1230,7 +1230,7 @@ "mac": "5C-AA-FD-5D-76-0E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1276,7 +1276,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1322,7 +1322,7 @@ "mac": "78-28-CA-AA-6A-0A" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -1364,7 +1364,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1409,7 +1409,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1454,7 +1454,7 @@ "mac": "0E-8D-FB-70-0F-A8" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1499,7 +1499,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1545,7 +1545,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1591,7 +1591,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -1633,7 +1633,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1678,7 +1678,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1723,7 +1723,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1768,7 +1768,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1813,7 +1813,7 @@ "mac": "E2-CB-9C-B5-DC-6E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1858,7 +1858,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1903,7 +1903,7 @@ "mac": "6A-3A-3E-85-CA-4E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1949,7 +1949,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -1994,7 +1994,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2040,7 +2040,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -2083,7 +2083,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -2125,7 +2125,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2170,7 +2170,7 @@ "mac": "6A-3A-3E-85-D7-D4" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2215,7 +2215,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2260,7 +2260,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2305,7 +2305,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2350,7 +2350,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2396,7 +2396,7 @@ "mac": "90-AC-3F-02-31-59" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -2438,7 +2438,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2483,7 +2483,7 @@ "mac": "78-28-CA-AA-6A-4A" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2529,7 +2529,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2574,7 +2574,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2619,7 +2619,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2665,7 +2665,7 @@ "mac": "08-A7-C0-3B-5A-95" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -2707,7 +2707,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2753,7 +2753,7 @@ "mac": "78-28-CA-AA-69-96" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2799,7 +2799,7 @@ "mac": "AE-17-E8-C7-E2-9D" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2845,7 +2845,7 @@ "mac": "E2-CB-9C-B5-DC-6E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2890,7 +2890,7 @@ "mac": "AE-17-E8-C7-DF-FD" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2935,7 +2935,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -2980,7 +2980,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3026,7 +3026,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3071,7 +3071,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3116,7 +3116,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3162,7 +3162,7 @@ "mac": "6E-DA-36-A2-39-71" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -3204,7 +3204,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3249,7 +3249,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3294,7 +3294,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3340,7 +3340,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3386,7 +3386,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3433,7 +3433,7 @@ "mac": "78-28-CA-AA-6A-4A" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -3475,7 +3475,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3520,7 +3520,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3565,7 +3565,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3610,7 +3610,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3655,7 +3655,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3700,7 +3700,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3745,7 +3745,7 @@ "mac": "5C-AA-FD-5D-76-0E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3791,7 +3791,7 @@ "mac": "E2-CB-9C-B5-DC-6E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3836,7 +3836,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3881,7 +3881,7 @@ "mac": "E2-CB-9C-B5-DA-7A" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3927,7 +3927,7 @@ "mac": "E2-CB-9C-B5-DA-7A" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -3973,7 +3973,7 @@ "mac": "6A-3A-3E-85-D7-D4" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4019,7 +4019,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4065,7 +4065,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4110,7 +4110,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4155,7 +4155,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4200,7 +4200,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4246,7 +4246,7 @@ "mac": "AE-17-E8-C7-DF-FD" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -4288,7 +4288,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4333,7 +4333,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4379,7 +4379,7 @@ "mac": "78-28-CA-AA-6A-0A" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -4421,7 +4421,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4466,7 +4466,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4512,7 +4512,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4558,7 +4558,7 @@ "mac": "EE-CE-D5-6A-B6-22" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -4600,7 +4600,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4645,7 +4645,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4690,7 +4690,7 @@ "mac": "6A-3A-3E-85-D7-D4" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4737,7 +4737,7 @@ "mac": "AE-17-E8-C7-E1-41" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -4779,7 +4779,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4825,7 +4825,7 @@ "mac": "78-28-CA-AA-69-96" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -4867,7 +4867,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4912,7 +4912,7 @@ "mac": "E2-CB-9C-B5-D7-80" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -4957,7 +4957,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5002,7 +5002,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5047,7 +5047,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5092,7 +5092,7 @@ "mac": "E2-CB-9C-B5-DD-BE" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5137,7 +5137,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5182,7 +5182,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5228,7 +5228,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5273,7 +5273,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5319,7 +5319,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5364,7 +5364,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5409,7 +5409,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5454,7 +5454,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5499,7 +5499,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5544,7 +5544,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5589,7 +5589,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5634,7 +5634,7 @@ "mac": "E2-CB-9C-B5-C5-68" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5679,7 +5679,7 @@ "mac": "E2-CB-9C-B5-D8-54" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5724,7 +5724,7 @@ "mac": "6A-3A-3E-85-CA-4E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5770,7 +5770,7 @@ "mac": "34-8F-27-25-CC-48" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ssid-spoofing-detected", @@ -5812,7 +5812,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5857,7 +5857,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5902,7 +5902,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5947,7 +5947,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -5992,7 +5992,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6037,7 +6037,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6082,7 +6082,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6128,7 +6128,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6173,7 +6173,7 @@ "mac": "E2-CB-9C-B5-DD-BE" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6218,7 +6218,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6263,7 +6263,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6308,7 +6308,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6353,7 +6353,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6399,7 +6399,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6444,7 +6444,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6489,7 +6489,7 @@ "mac": "6A-3A-3E-85-CA-4E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6534,7 +6534,7 @@ "mac": "AE-17-E8-C7-DF-FD" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6579,7 +6579,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6624,7 +6624,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6669,7 +6669,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6714,7 +6714,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6759,7 +6759,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6804,7 +6804,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6850,7 +6850,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6896,7 +6896,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6942,7 +6942,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -6988,7 +6988,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7033,7 +7033,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7078,7 +7078,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7123,7 +7123,7 @@ "mac": "AE-17-E8-C7-D8-51" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7168,7 +7168,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7213,7 +7213,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7258,7 +7258,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7304,7 +7304,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7350,7 +7350,7 @@ "mac": "E2-CB-9C-B5-D4-1E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7395,7 +7395,7 @@ "mac": "AE-17-E8-C7-DF-FD" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7440,7 +7440,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7485,7 +7485,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7530,7 +7530,7 @@ "mac": "38-BA-F8-CC-82-2E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7576,7 +7576,7 @@ "mac": "38-BA-F8-CC-82-2E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7622,7 +7622,7 @@ "mac": "38-BA-F8-CC-82-2E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7668,7 +7668,7 @@ "mac": "E2-CB-9C-B5-D8-54" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7714,7 +7714,7 @@ "mac": "E2-CB-9C-B5-D8-54" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7759,7 +7759,7 @@ "mac": "E2-CB-9C-B5-D8-54" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7805,7 +7805,7 @@ "mac": "FF-FF-FF-FF-FF-FF" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", @@ -7850,7 +7850,7 @@ "mac": "E2-CB-9C-B5-DC-6E" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "rogue-ssid-detected", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json index 9f104044c9a..83285a4e714 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-events.log-expected.json @@ -12,7 +12,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "dynamic-frequency-selection-detected", @@ -53,7 +53,7 @@ "mac": "E5:A4:98:71:9A:FE" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-wpa-failed-auth-or-deauth", @@ -95,7 +95,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-wpa-authentication", @@ -151,7 +151,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-disassociation-request", @@ -195,7 +195,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-association-request", @@ -232,7 +232,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "site-to-site-vpn", @@ -268,7 +268,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "site-to-site-vpn", @@ -310,7 +310,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "vpn-connectivity-change", @@ -348,7 +348,7 @@ "mac": "E0-CB-BC-02-4F-80" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "dhcp-offer", @@ -386,7 +386,7 @@ "mac": "A4-83-E7-02-A2-F1" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "dhcp-no-offer", @@ -433,7 +433,7 @@ "ip": "81.2.69.193" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "site-to-site-vpn", @@ -497,7 +497,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-disassociation-request", @@ -539,7 +539,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "association-rejected-for-load-balancing", @@ -581,7 +581,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-association-request", @@ -623,7 +623,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-wpa-authentication", @@ -664,7 +664,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "category": [ @@ -715,7 +715,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "category": [ @@ -770,7 +770,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-association-request", @@ -813,7 +813,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-8021x-auth", @@ -856,7 +856,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "8021x_auth", @@ -916,7 +916,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-disassociation-request", @@ -979,7 +979,7 @@ "event_type": "events" }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-disassociation-request", @@ -1021,7 +1021,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "wifi-wpa-authentication", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json index b39beecc297..2e5498a7fff 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-flows.log-expected.json @@ -14,7 +14,7 @@ "port": 15600 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "layer3-firewall-allowed-flow", @@ -70,7 +70,7 @@ "port": 44210 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ip-session-initiated", @@ -128,7 +128,7 @@ "port": 15500 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "layer3-firewall-allowed-flow", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json index b595f093213..e60dc6a8d8c 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-ip-flow.log-expected.json @@ -22,7 +22,7 @@ "port": 80 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "category": [ @@ -76,7 +76,7 @@ "port": 53 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "category": [ @@ -130,7 +130,7 @@ "port": 53 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "category": [ @@ -190,7 +190,7 @@ "port": 443 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "category": [ @@ -259,7 +259,7 @@ "port": 53 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "category": [ @@ -307,7 +307,7 @@ "port": 443 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "category": [ @@ -376,7 +376,7 @@ "port": 53 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "category": [ @@ -424,7 +424,7 @@ "port": 80 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "category": [ diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json index 511631681b0..a05c6438aa0 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-security-events.log-expected.json @@ -17,7 +17,7 @@ "port": 56391 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ids-signature-matched", @@ -92,7 +92,7 @@ "port": 80 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "malicious-file-actioned", @@ -144,7 +144,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "issued-retrospective-malicious-disposition", @@ -192,7 +192,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ids-signature-matched", @@ -250,7 +250,7 @@ } }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "ids-signature-matched", diff --git a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json index 8fb6afc5549..3b28ec4f96c 100644 --- a/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json +++ b/packages/cisco_meraki/data_stream/log/_dev/test/pipeline/test-urls.log-expected.json @@ -32,7 +32,7 @@ "port": 80 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "http-access-error", @@ -98,7 +98,7 @@ "port": 443 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "event": { "action": "http-access", diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index 5785e5f4acc..e8fa0b66f40 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "18583664-b6a2-4581-aba5-a47a9cec3fab", + "ephemeral_id": "8941b327-0c81-4402-856a-24a44c3fee68", "hostname": "docker-fleet-agent", - "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", + "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -28,10 +28,10 @@ "port": 56391 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "elastic_agent": { - "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", + "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", "snapshot": false, "version": "7.17.0" }, @@ -43,7 +43,7 @@ "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-24T05:08:12Z", + "ingested": "2022-04-26T01:21:08Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -55,7 +55,7 @@ }, "log": { "source": { - "address": "192.168.0.4:35390" + "address": "192.168.112.4:47856" } }, "network": { diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index 73c7e2ca69f..e492558ed40 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -287,9 +287,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "18583664-b6a2-4581-aba5-a47a9cec3fab", + "ephemeral_id": "8941b327-0c81-4402-856a-24a44c3fee68", "hostname": "docker-fleet-agent", - "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", + "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -314,10 +314,10 @@ An example event for `log` looks as following: "port": 56391 }, "ecs": { - "version": "8.0.0" + "version": "8.2.0" }, "elastic_agent": { - "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", + "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", "snapshot": false, "version": "7.17.0" }, @@ -329,7 +329,7 @@ An example event for `log` looks as following: "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-24T05:08:12Z", + "ingested": "2022-04-26T01:21:08Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -341,7 +341,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "192.168.0.4:35390" + "address": "192.168.112.4:47856" } }, "network": { @@ -613,9 +613,9 @@ An example event for `events` looks as following: { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "e02de7b6-7f33-429d-966b-07590ffb1c2d", + "ephemeral_id": "544eddd0-ff4d-4a7c-915e-30c3f097b42a", "hostname": "docker-fleet-agent", - "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", + "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -653,7 +653,7 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "90ca4542-4abf-4469-8a5a-939dd250cb94", + "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", "snapshot": false, "version": "7.17.0" }, @@ -664,7 +664,7 @@ An example event for `events` looks as following: "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-24T05:06:19Z", + "ingested": "2022-04-26T01:19:17Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", From ad2a76ff293580fe69c020638747a347cf0022c6 Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 26 Apr 2022 14:03:51 +1000 Subject: [PATCH 66/67] handle ipv4 and ipv6 data; add convert to all places --- .../data_stream/events/sample_event.json | 8 +-- .../elasticsearch/ingest_pipeline/events.yml | 64 +++++++++++++++++-- .../elasticsearch/ingest_pipeline/flows.yml | 18 ++++++ .../ingest_pipeline/idsalerts.yml | 13 +++- .../elasticsearch/ingest_pipeline/ipflows.yml | 29 +++++---- .../ingest_pipeline/security.yml | 42 ++++++++++-- .../elasticsearch/ingest_pipeline/urls.yml | 40 ++++++++---- .../data_stream/log/sample_event.json | 10 +-- packages/cisco_meraki/docs/README.md | 18 +++--- 9 files changed, 184 insertions(+), 58 deletions(-) diff --git a/packages/cisco_meraki/data_stream/events/sample_event.json b/packages/cisco_meraki/data_stream/events/sample_event.json index dc94f6bfba2..198d32bfbe5 100644 --- a/packages/cisco_meraki/data_stream/events/sample_event.json +++ b/packages/cisco_meraki/data_stream/events/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "544eddd0-ff4d-4a7c-915e-30c3f097b42a", + "ephemeral_id": "4dfea986-5bfd-4b6a-a1b0-00b3043870bd", "hostname": "docker-fleet-agent", - "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", + "id": "9e1c0aac-8d48-4c33-a9f5-98e770f2028e", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -41,7 +41,7 @@ "version": "8.0.0" }, "elastic_agent": { - "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", + "id": "9e1c0aac-8d48-4c33-a9f5-98e770f2028e", "snapshot": false, "version": "7.17.0" }, @@ -52,7 +52,7 @@ "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-26T01:19:17Z", + "ingested": "2022-04-26T04:00:40Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index 3ca1bebd644..f6d689ec217 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -44,7 +44,7 @@ processors: if: ctx?.msgtype.toLowerCase() == "dhcp" - dissect: field: event.original - pattern: "%{} events dhcp lease of ip %{client.ip} from %{} mac %{server.mac} for client mac %{client.mac} %{}" + pattern: "%{} events dhcp lease of ip %{_temp.client_ip} from %{} mac %{server.mac} for client mac %{client.mac} %{}" if: ctx?.msgtype.toLowerCase() == "dhcp" && ctx?._temp?.dhcp_op.toLowerCase() == 'lease' - dissect: field: event.original @@ -121,10 +121,6 @@ processors: field: network.protocol value: dhcp if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' -- rename: - field: cisco_meraki.multiple_dhcp_servers_detected.original_server_ip - target_field: server.ip - if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' - rename: field: cisco_meraki.multiple_dhcp_servers_detected.original_server_mac target_field: server.mac @@ -134,10 +130,45 @@ processors: pattern: '[-:.]' replacement: '-' if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' +# process original_server_ip +- grok: + field: cisco_meraki.multiple_dhcp_servers_detected.original_server_ip + patterns: + - "^%{IPV4:cisco_meraki.multiple_dhcp_servers_detected.original_server_ip}$" + - "^%{IPV6NOCOMPRESS:cisco_meraki.multiple_dhcp_servers_detected.original_server_ip}$" + - "^%{IPV6:cisco_meraki.multiple_dhcp_servers_detected.original_server_ip}$" + pattern_definitions: + IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' + if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' + ignore_failure: true +- convert: + type: ip + field: cisco_meraki.multiple_dhcp_servers_detected.original_server_ip + target_field: server.ip + if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' + ignore_failure: true +# cleanup only if the conversion was successful +- remove: + field: cisco_meraki.multiple_dhcp_servers_detected.original_server_ip + if: ctx?.server?.ip != null - append: field: related.ip value: "{{{server.ip}}}" if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' +# process server_ip (the other dhcp server ip) +- grok: + field: cisco_meraki.multiple_dhcp_servers_detected.server_ip + patterns: + - "^%{IPV4:cisco_meraki.multiple_dhcp_servers_detected.server_ip}$" + - "^%{IPV6NOCOMPRESS:cisco_meraki.multiple_dhcp_servers_detected.server_ip}$" + - "^%{IPV6:cisco_meraki.multiple_dhcp_servers_detected.server_ip}$" + pattern_definitions: + IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' + if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' +- convert: + type: ip + field: cisco_meraki.multiple_dhcp_servers_detected.server_ip + if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' - append: field: related.ip value: "{{{cisco_meraki.multiple_dhcp_servers_detected.server_ip}}}" @@ -155,5 +186,26 @@ processors: #################################################### - dissect: field: event.original - pattern: "%{} events client_vpn_connect user id '%{user.name}' local ip %{network.forwarded_ip} connected from %{client.ip}" + pattern: "%{} events client_vpn_connect user id '%{user.name}' local ip %{network.forwarded_ip} connected from %{_temp.client_ip}" if: ctx?.cisco_meraki?.event_subtype == "client_vpn_connect" + +#################################################### +# parse dissected IP values and convert to IP type +# common case for DHCP lease and client_vpn_connect +#################################################### +- grok: + field: _temp.client_ip + patterns: + - "^%{IPV4:_temp.client_ip}$" + - "^%{IPV6NOCOMPRESS:_temp.client_ip}$" + - "^%{IPV6:_temp.client_ip}$" + pattern_definitions: + IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' + if: ctx?._temp?.client_ip != null + ignore_failure: true +- convert: + type: ip + field: _temp.client_ip + target_field: client.ip + if: ctx?._temp?.client_ip != null + ignore_failure: true diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml index b168e4fe50f..1bdbcb8bf04 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml @@ -15,11 +15,29 @@ processors: field: event.original pattern: "%{} flows %{cisco_meraki.flows.op} %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport}" if: ctx._temp.token.startsWith("src=") == false +- grok: + field: src + patterns: + - "^%{IPV4:src}$" + - "^%{IPV6NOCOMPRESS:src}$" + - "^%{IPV6:src}$" + pattern_definitions: + IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' + if: ctx?.src != null - convert: type: ip field: src target_field: source.ip ignore_failure: true +- grok: + field: dst + patterns: + - "^%{IPV4:dst}$" + - "^%{IPV6NOCOMPRESS:dst}$" + - "^%{IPV6:dst}$" + pattern_definitions: + IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' + if: ctx?.dst != null - convert: type: ip field: dst diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml index 27381dff063..a1684a5e306 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/idsalerts.yml @@ -24,9 +24,18 @@ processors: - lowercase: field: protocol target_field: network.protocol -- dissect: +- grok: field: src - pattern: "%{_temp.src_ip}:%{sport}" + patterns: + - "^%{IPV4:_temp.src_ip}:%{PORT:sport}$" + - "^\\[%{IPV6:_temp.src_ip}\\]:%{PORT:sport}$" + - "^%{IPV6NOCOMPRESS:_temp.src_ip}:%{PORT:sport}$" + - "^%{IPV6:_temp.src_ip}%{IPV6PORTSEP}%{PORT:sport}$" + pattern_definitions: + IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' + IPV6PORTSEP: '(?: port |[p#.])' + PORT: '[0-9]+' + if: ctx?.src != null - convert: type: ip field: _temp.src_ip diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml index 9509dd9feea..eb6667d991b 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/ipflows.yml @@ -16,13 +16,15 @@ processors: pattern: "%{} ip_flow_end %{*src}=%{&src} %{*dst}=%{&dst} %{*prot}=%{&prot} %{*sport}=%{&sport} %{*dport}=%{&dport} %{*tsi_or_tdi}=%{&tsi_or_tdi} %{*tp}=%{&tp}" if: ctx._temp.event_type == 'ip_flow_end' && ctx._temp.token.startsWith("src=") == true # source field IP:port handling -- set: - field: source.ip - copy_from: translated_src_ip +- convert: + type: ip + field: translated_src_ip + target_field: source.ip if: ctx?.translated_src_ip != null -- set: - field: source.ip - copy_from: src +- convert: + type: ip + field: src + target_field: source.ip if: ctx?.translated_src_ip == null && ctx?.src != null - convert: field: translated_port @@ -35,13 +37,15 @@ processors: type: long if: ctx?.translated_src_ip == null && ctx?.sport != null # destination field IP:port handling -- set: - field: destination.ip - copy_from: translated_dst_ip +- convert: + type: ip + field: translated_dst_ip + target_field: destination.ip if: ctx?.translated_dst_ip != null -- set: - field: destination.ip - copy_from: dst +- convert: + type: ip + field: dst + target_field: destination.ip if: ctx?.translated_dst_ip == null && ctx?.dst != null - convert: field: translated_port @@ -56,4 +60,3 @@ processors: - rename: field: protocol target_field: network.protocol - diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml index 055750bfd00..38cd9373523 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/security.yml @@ -99,15 +99,24 @@ processors: field: action target_field: cisco_meraki.security.action if: ctx?.cisco_meraki?.event_subtype == 'security_filtering_file_scanned' || ctx?.cisco_meraki?.event_subtype == 'security_filtering_disposition_change' - # fields common to more than one event type -- dissect: +# src processing +- grok: field: src - pattern: "%{source.ip}:%{sport}" - if: ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' -- dissect: - field: dst - pattern: "%{destination.ip}:%{dport}" + patterns: + - "^%{IPV4:_temp.src_ip}:%{PORT:sport}$" + - "^\\[%{IPV6:_temp.src_ip}\\]:%{PORT:sport}$" + - "^%{IPV6NOCOMPRESS:_temp.src_ip}:%{PORT:sport}$" + - "^%{IPV6:_temp.src_ip}%{IPV6PORTSEP}%{PORT:sport}$" + pattern_definitions: + IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' + IPV6PORTSEP: '(?: port |[p#.])' + PORT: '[0-9]+' + if: ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' && ctx?.src != null +- convert: + type: ip + field: _temp.src_ip + target_field: source.ip if: ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' - convert: field: sport @@ -115,6 +124,25 @@ processors: type: long if: ctx?.sport != "0" && ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' ignore_failure: true +# dst processing +- grok: + field: dst + patterns: + - "^%{IPV4:_temp.dst_ip}:%{PORT:dport}$" + - "^\\[%{IPV6:_temp.dst_ip}\\]:%{PORT:dport}$" + - "^%{IPV6NOCOMPRESS:_temp.dst_ip}:%{PORT:dport}$" + - "^%{IPV6:_temp.dst_ip}%{IPV6PORTSEP}%{PORT:dport}$" + pattern_definitions: + IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' + IPV6PORTSEP: '(?: port |[p#.])' + PORT: '[0-9]+' + if: ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' && ctx?.dst != null +- convert: + type: ip + field: _temp.dst_ip + target_field: destination.ip + ignore_failure: true + if: ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' - convert: field: dport target_field: destination.port diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml index 4d450ddf3ea..68bcddb288a 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/urls.yml @@ -5,33 +5,49 @@ processors: description: Determine the security event type field: event.original pattern: "%{} urls %{*src}=%{&src} %{*dst}=%{&dst} %{*mac}=%{&mac} request: %{http.request.method} %{url.original}" -- dissect: +# src processing +- grok: field: src - pattern: "%{_temp.src_ip}:%{sport}" -- dissect: - field: dst - pattern: "%{_temp.dst_ip}:%{dport}" + patterns: + - "^%{IPV4:_temp.src_ip}:%{PORT:sport}$" + - "^\\[%{IPV6:_temp.src_ip}\\]:%{PORT:sport}$" + - "^%{IPV6NOCOMPRESS:_temp.src_ip}:%{PORT:sport}$" + - "^%{IPV6:_temp.src_ip}%{IPV6PORTSEP}%{PORT:sport}$" + pattern_definitions: + IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' + IPV6PORTSEP: '(?: port |[p#.])' + PORT: '[0-9]+' - convert: type: ip field: _temp.src_ip target_field: source.ip +- convert: + type: long + field: sport + target_field: source.port ignore_failure: true +# dst processing +- grok: + field: dst + patterns: + - "^%{IPV4:_temp.dst_ip}:%{PORT:dport}$" + - "^\\[%{IPV6:_temp.dst_ip}\\]:%{PORT:dport}$" + - "^%{IPV6NOCOMPRESS:_temp.dst_ip}:%{PORT:dport}$" + - "^%{IPV6:_temp.dst_ip}%{IPV6PORTSEP}%{PORT:dport}$" + pattern_definitions: + IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' + IPV6PORTSEP: '(?: port |[p#.])' + PORT: '[0-9]+' - convert: type: ip field: _temp.dst_ip target_field: destination.ip ignore_failure: true - convert: - field: sport - target_field: source.port type: long - if: ctx?.sport != "0" - ignore_failure: true -- convert: field: dport target_field: destination.port - type: long - if: ctx?.dport != "0" + if: ctx?.dport != "0" && ctx?.cisco_meraki?.event_subtype != 'security_filtering_disposition_change' ignore_failure: true - gsub: field: mac diff --git a/packages/cisco_meraki/data_stream/log/sample_event.json b/packages/cisco_meraki/data_stream/log/sample_event.json index e8fa0b66f40..28606304bee 100644 --- a/packages/cisco_meraki/data_stream/log/sample_event.json +++ b/packages/cisco_meraki/data_stream/log/sample_event.json @@ -1,9 +1,9 @@ { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "8941b327-0c81-4402-856a-24a44c3fee68", + "ephemeral_id": "b81987d6-cf2e-4101-af0b-0415b1576f88", "hostname": "docker-fleet-agent", - "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", + "id": "9e1c0aac-8d48-4c33-a9f5-98e770f2028e", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -31,7 +31,7 @@ "version": "8.2.0" }, "elastic_agent": { - "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", + "id": "9e1c0aac-8d48-4c33-a9f5-98e770f2028e", "snapshot": false, "version": "7.17.0" }, @@ -43,7 +43,7 @@ "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-26T01:21:08Z", + "ingested": "2022-04-26T04:02:28Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -55,7 +55,7 @@ }, "log": { "source": { - "address": "192.168.112.4:47856" + "address": "192.168.208.4:40317" } }, "network": { diff --git a/packages/cisco_meraki/docs/README.md b/packages/cisco_meraki/docs/README.md index e492558ed40..baea4f77535 100644 --- a/packages/cisco_meraki/docs/README.md +++ b/packages/cisco_meraki/docs/README.md @@ -287,9 +287,9 @@ An example event for `log` looks as following: { "@timestamp": "2021-11-23T18:13:18.348Z", "agent": { - "ephemeral_id": "8941b327-0c81-4402-856a-24a44c3fee68", + "ephemeral_id": "b81987d6-cf2e-4101-af0b-0415b1576f88", "hostname": "docker-fleet-agent", - "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", + "id": "9e1c0aac-8d48-4c33-a9f5-98e770f2028e", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -317,7 +317,7 @@ An example event for `log` looks as following: "version": "8.2.0" }, "elastic_agent": { - "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", + "id": "9e1c0aac-8d48-4c33-a9f5-98e770f2028e", "snapshot": false, "version": "7.17.0" }, @@ -329,7 +329,7 @@ An example event for `log` looks as following: "threat" ], "dataset": "cisco_meraki.log", - "ingested": "2022-04-26T01:21:08Z", + "ingested": "2022-04-26T04:02:28Z", "original": "\u003c134\u003e1 1637691198.348361125 MX84 security_event ids_alerted signature=1:29708:4 priority=1 timestamp=1637691198.330873 dhost=D0:AB:D5:7B:43:73 direction=ingress protocol=tcp/ip src=67.43.156.12:80 dst=10.0.3.162:56391 decision=allowed message: BROWSER-IE Microsoft Internet Explorer CSS uninitialized object access attempt detected", "type": [ "info", @@ -341,7 +341,7 @@ An example event for `log` looks as following: }, "log": { "source": { - "address": "192.168.112.4:47856" + "address": "192.168.208.4:40317" } }, "network": { @@ -613,9 +613,9 @@ An example event for `events` looks as following: { "@timestamp": "2018-02-11T00:00:00.123Z", "agent": { - "ephemeral_id": "544eddd0-ff4d-4a7c-915e-30c3f097b42a", + "ephemeral_id": "4dfea986-5bfd-4b6a-a1b0-00b3043870bd", "hostname": "docker-fleet-agent", - "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", + "id": "9e1c0aac-8d48-4c33-a9f5-98e770f2028e", "name": "docker-fleet-agent", "type": "filebeat", "version": "7.17.0" @@ -653,7 +653,7 @@ An example event for `events` looks as following: "version": "8.0.0" }, "elastic_agent": { - "id": "56b5e3d8-5235-46ed-8ada-5b81c2b238cd", + "id": "9e1c0aac-8d48-4c33-a9f5-98e770f2028e", "snapshot": false, "version": "7.17.0" }, @@ -664,7 +664,7 @@ An example event for `events` looks as following: "network" ], "dataset": "cisco_meraki.events", - "ingested": "2022-04-26T01:19:17Z", + "ingested": "2022-04-26T04:00:40Z", "original": "{\"alertData\":{\"connection\":\"LTE\",\"local\":\"192.168.1.2\",\"model\":\"UML290VW\",\"provider\":\"Purview Wireless\",\"remote\":\"1.2.3.5\"},\"alertId\":\"0000000000000000\",\"alertLevel\":\"informational\",\"alertType\":\"Cellular came up\",\"alertTypeId\":\"cellular_up\",\"deviceMac\":\"00:11:22:33:44:55\",\"deviceModel\":\"MX\",\"deviceName\":\"My appliance\",\"deviceSerial\":\"Q234-ABCD-5678\",\"deviceTags\":[\"tag1\",\"tag2\"],\"deviceUrl\":\"https://n1.meraki.com//n//manage/nodes/new_list/000000000000\",\"networkId\":\"N_24329156\",\"networkName\":\"Main Office\",\"networkTags\":[],\"networkUrl\":\"https://n1.meraki.com//n//manage/nodes/list\",\"occurredAt\":\"2018-02-11T00:00:00.123450Z\",\"organizationId\":\"2930418\",\"organizationName\":\"My organization\",\"organizationUrl\":\"https://dashboard.meraki.com/o/VjjsAd/manage/organization/overview\",\"sentAt\":\"2021-10-07T08:42:00.926325Z\",\"sharedSecret\":\"secret\",\"version\":\"0.1\"}", "type": [ "info", From 62aaa6950e461a1a7f738bf67f6bab756b2828fe Mon Sep 17 00:00:00 2001 From: Sai Kiran <85323324+r00tu53r@users.noreply.github.com> Date: Tue, 26 Apr 2022 18:01:09 +1000 Subject: [PATCH 67/67] remove IPV6NOCOMPRESS grok pattern for ip with no port values --- .../log/elasticsearch/ingest_pipeline/events.yml | 9 --------- .../log/elasticsearch/ingest_pipeline/flows.yml | 6 ------ 2 files changed, 15 deletions(-) diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml index f6d689ec217..8f778d2d344 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/events.yml @@ -135,10 +135,7 @@ processors: field: cisco_meraki.multiple_dhcp_servers_detected.original_server_ip patterns: - "^%{IPV4:cisco_meraki.multiple_dhcp_servers_detected.original_server_ip}$" - - "^%{IPV6NOCOMPRESS:cisco_meraki.multiple_dhcp_servers_detected.original_server_ip}$" - "^%{IPV6:cisco_meraki.multiple_dhcp_servers_detected.original_server_ip}$" - pattern_definitions: - IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' ignore_failure: true - convert: @@ -160,10 +157,7 @@ processors: field: cisco_meraki.multiple_dhcp_servers_detected.server_ip patterns: - "^%{IPV4:cisco_meraki.multiple_dhcp_servers_detected.server_ip}$" - - "^%{IPV6NOCOMPRESS:cisco_meraki.multiple_dhcp_servers_detected.server_ip}$" - "^%{IPV6:cisco_meraki.multiple_dhcp_servers_detected.server_ip}$" - pattern_definitions: - IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' if: ctx?.cisco_meraki?.event_subtype == 'multiple_dhcp_servers_detected' - convert: type: ip @@ -197,10 +191,7 @@ processors: field: _temp.client_ip patterns: - "^%{IPV4:_temp.client_ip}$" - - "^%{IPV6NOCOMPRESS:_temp.client_ip}$" - "^%{IPV6:_temp.client_ip}$" - pattern_definitions: - IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' if: ctx?._temp?.client_ip != null ignore_failure: true - convert: diff --git a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml index 1bdbcb8bf04..7f47b9f6cc7 100644 --- a/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml +++ b/packages/cisco_meraki/data_stream/log/elasticsearch/ingest_pipeline/flows.yml @@ -19,10 +19,7 @@ processors: field: src patterns: - "^%{IPV4:src}$" - - "^%{IPV6NOCOMPRESS:src}$" - "^%{IPV6:src}$" - pattern_definitions: - IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' if: ctx?.src != null - convert: type: ip @@ -33,10 +30,7 @@ processors: field: dst patterns: - "^%{IPV4:dst}$" - - "^%{IPV6NOCOMPRESS:dst}$" - "^%{IPV6:dst}$" - pattern_definitions: - IPV6NOCOMPRESS: '([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}' if: ctx?.dst != null - convert: type: ip