diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 00000000..5008ddfc
Binary files /dev/null and b/.DS_Store differ
diff --git a/m4/libtool.m4 b/m4/libtool.m4
new file mode 100644
index 00000000..973ab2aa
--- /dev/null
+++ b/m4/libtool.m4
@@ -0,0 +1,8415 @@
+# libtool.m4 - Configure libtool for the host system. -*-Autoconf-*-
+#
+# Copyright (C) 1996-2001, 2003-2019, 2021-2022 Free Software
+# Foundation, Inc.
+# Written by Gordon Matzigkeit, 1996
+#
+# This file is free software; the Free Software Foundation gives
+# unlimited permission to copy and/or distribute it, with or without
+# modifications, as long as this notice is preserved.
+
+m4_define([_LT_COPYING], [dnl
+# Copyright (C) 2014 Free Software Foundation, Inc.
+# This is free software; see the source for copying conditions. There is NO
+# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+
+# GNU Libtool is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of of the License, or
+# (at your option) any later version.
+#
+# As a special exception to the GNU General Public License, if you
+# distribute this file as part of a program or library that is built
+# using GNU Libtool, you may include this file under the same
+# distribution terms that you use for the rest of that program.
+#
+# GNU Libtool is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see .
+])
+
+# serial 59 LT_INIT
+
+
+# LT_PREREQ(VERSION)
+# ------------------
+# Complain and exit if this libtool version is less that VERSION.
+m4_defun([LT_PREREQ],
+[m4_if(m4_version_compare(m4_defn([LT_PACKAGE_VERSION]), [$1]), -1,
+ [m4_default([$3],
+ [m4_fatal([Libtool version $1 or higher is required],
+ 63)])],
+ [$2])])
+
+
+# _LT_CHECK_BUILDDIR
+# ------------------
+# Complain if the absolute build directory name contains unusual characters
+m4_defun([_LT_CHECK_BUILDDIR],
+[case `pwd` in
+ *\ * | *\ *)
+ AC_MSG_WARN([Libtool does not cope well with whitespace in `pwd`]) ;;
+esac
+])
+
+
+# LT_INIT([OPTIONS])
+# ------------------
+AC_DEFUN([LT_INIT],
+[AC_PREREQ([2.62])dnl We use AC_PATH_PROGS_FEATURE_CHECK
+AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl
+AC_BEFORE([$0], [LT_LANG])dnl
+AC_BEFORE([$0], [LT_OUTPUT])dnl
+AC_BEFORE([$0], [LTDL_INIT])dnl
+m4_require([_LT_CHECK_BUILDDIR])dnl
+
+dnl Autoconf doesn't catch unexpanded LT_ macros by default:
+m4_pattern_forbid([^_?LT_[A-Z_]+$])dnl
+m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])dnl
+dnl aclocal doesn't pull ltoptions.m4, ltsugar.m4, or ltversion.m4
+dnl unless we require an AC_DEFUNed macro:
+AC_REQUIRE([LTOPTIONS_VERSION])dnl
+AC_REQUIRE([LTSUGAR_VERSION])dnl
+AC_REQUIRE([LTVERSION_VERSION])dnl
+AC_REQUIRE([LTOBSOLETE_VERSION])dnl
+m4_require([_LT_PROG_LTMAIN])dnl
+
+_LT_SHELL_INIT([SHELL=${CONFIG_SHELL-/bin/sh}])
+
+dnl Parse OPTIONS
+_LT_SET_OPTIONS([$0], [$1])
+
+# This can be used to rebuild libtool when needed
+LIBTOOL_DEPS=$ltmain
+
+# Always use our own libtool.
+LIBTOOL='$(SHELL) $(top_builddir)/libtool'
+AC_SUBST(LIBTOOL)dnl
+
+_LT_SETUP
+
+# Only expand once:
+m4_define([LT_INIT])
+])# LT_INIT
+
+# Old names:
+AU_ALIAS([AC_PROG_LIBTOOL], [LT_INIT])
+AU_ALIAS([AM_PROG_LIBTOOL], [LT_INIT])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_PROG_LIBTOOL], [])
+dnl AC_DEFUN([AM_PROG_LIBTOOL], [])
+
+
+# _LT_PREPARE_CC_BASENAME
+# -----------------------
+m4_defun([_LT_PREPARE_CC_BASENAME], [
+# Calculate cc_basename. Skip known compiler wrappers and cross-prefix.
+func_cc_basename ()
+{
+ for cc_temp in @S|@*""; do
+ case $cc_temp in
+ compile | *[[\\/]]compile | ccache | *[[\\/]]ccache ) ;;
+ distcc | *[[\\/]]distcc | purify | *[[\\/]]purify ) ;;
+ \-*) ;;
+ *) break;;
+ esac
+ done
+ func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
+}
+])# _LT_PREPARE_CC_BASENAME
+
+
+# _LT_CC_BASENAME(CC)
+# -------------------
+# It would be clearer to call AC_REQUIREs from _LT_PREPARE_CC_BASENAME,
+# but that macro is also expanded into generated libtool script, which
+# arranges for $SED and $ECHO to be set by different means.
+m4_defun([_LT_CC_BASENAME],
+[m4_require([_LT_PREPARE_CC_BASENAME])dnl
+AC_REQUIRE([_LT_DECL_SED])dnl
+AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl
+func_cc_basename $1
+cc_basename=$func_cc_basename_result
+])
+
+
+# _LT_FILEUTILS_DEFAULTS
+# ----------------------
+# It is okay to use these file commands and assume they have been set
+# sensibly after 'm4_require([_LT_FILEUTILS_DEFAULTS])'.
+m4_defun([_LT_FILEUTILS_DEFAULTS],
+[: ${CP="cp -f"}
+: ${MV="mv -f"}
+: ${RM="rm -f"}
+])# _LT_FILEUTILS_DEFAULTS
+
+
+# _LT_SETUP
+# ---------
+m4_defun([_LT_SETUP],
+[AC_REQUIRE([AC_CANONICAL_HOST])dnl
+AC_REQUIRE([AC_CANONICAL_BUILD])dnl
+AC_REQUIRE([_LT_PREPARE_SED_QUOTE_VARS])dnl
+AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl
+
+_LT_DECL([], [PATH_SEPARATOR], [1], [The PATH separator for the build system])dnl
+dnl
+_LT_DECL([], [host_alias], [0], [The host system])dnl
+_LT_DECL([], [host], [0])dnl
+_LT_DECL([], [host_os], [0])dnl
+dnl
+_LT_DECL([], [build_alias], [0], [The build system])dnl
+_LT_DECL([], [build], [0])dnl
+_LT_DECL([], [build_os], [0])dnl
+dnl
+AC_REQUIRE([AC_PROG_CC])dnl
+AC_REQUIRE([LT_PATH_LD])dnl
+AC_REQUIRE([LT_PATH_NM])dnl
+dnl
+AC_REQUIRE([AC_PROG_LN_S])dnl
+test -z "$LN_S" && LN_S="ln -s"
+_LT_DECL([], [LN_S], [1], [Whether we need soft or hard links])dnl
+dnl
+AC_REQUIRE([LT_CMD_MAX_LEN])dnl
+_LT_DECL([objext], [ac_objext], [0], [Object file suffix (normally "o")])dnl
+_LT_DECL([], [exeext], [0], [Executable file suffix (normally "")])dnl
+dnl
+m4_require([_LT_FILEUTILS_DEFAULTS])dnl
+m4_require([_LT_CHECK_SHELL_FEATURES])dnl
+m4_require([_LT_PATH_CONVERSION_FUNCTIONS])dnl
+m4_require([_LT_CMD_RELOAD])dnl
+m4_require([_LT_DECL_FILECMD])dnl
+m4_require([_LT_CHECK_MAGIC_METHOD])dnl
+m4_require([_LT_CHECK_SHAREDLIB_FROM_LINKLIB])dnl
+m4_require([_LT_CMD_OLD_ARCHIVE])dnl
+m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl
+m4_require([_LT_WITH_SYSROOT])dnl
+m4_require([_LT_CMD_TRUNCATE])dnl
+
+_LT_CONFIG_LIBTOOL_INIT([
+# See if we are running on zsh, and set the options that allow our
+# commands through without removal of \ escapes INIT.
+if test -n "\${ZSH_VERSION+set}"; then
+ setopt NO_GLOB_SUBST
+fi
+])
+if test -n "${ZSH_VERSION+set}"; then
+ setopt NO_GLOB_SUBST
+fi
+
+_LT_CHECK_OBJDIR
+
+m4_require([_LT_TAG_COMPILER])dnl
+
+case $host_os in
+aix3*)
+ # AIX sometimes has problems with the GCC collect2 program. For some
+ # reason, if we set the COLLECT_NAMES environment variable, the problems
+ # vanish in a puff of smoke.
+ if test set != "${COLLECT_NAMES+set}"; then
+ COLLECT_NAMES=
+ export COLLECT_NAMES
+ fi
+ ;;
+esac
+
+# Global variables:
+ofile=libtool
+can_build_shared=yes
+
+# All known linkers require a '.a' archive for static linking (except MSVC and
+# ICC, which need '.lib').
+libext=a
+
+with_gnu_ld=$lt_cv_prog_gnu_ld
+
+old_CC=$CC
+old_CFLAGS=$CFLAGS
+
+# Set sane defaults for various variables
+test -z "$CC" && CC=cc
+test -z "$LTCC" && LTCC=$CC
+test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS
+test -z "$LD" && LD=ld
+test -z "$ac_objext" && ac_objext=o
+
+_LT_CC_BASENAME([$compiler])
+
+# Only perform the check for file, if the check method requires it
+test -z "$MAGIC_CMD" && MAGIC_CMD=file
+case $deplibs_check_method in
+file_magic*)
+ if test "$file_magic_cmd" = '$MAGIC_CMD'; then
+ _LT_PATH_MAGIC
+ fi
+ ;;
+esac
+
+# Use C for the default configuration in the libtool script
+LT_SUPPORTED_TAG([CC])
+_LT_LANG_C_CONFIG
+_LT_LANG_DEFAULT_CONFIG
+_LT_CONFIG_COMMANDS
+])# _LT_SETUP
+
+
+# _LT_PREPARE_SED_QUOTE_VARS
+# --------------------------
+# Define a few sed substitution that help us do robust quoting.
+m4_defun([_LT_PREPARE_SED_QUOTE_VARS],
+[# Backslashify metacharacters that are still active within
+# double-quoted strings.
+sed_quote_subst='s/\([["`$\\]]\)/\\\1/g'
+
+# Same as above, but do not quote variable references.
+double_quote_subst='s/\([["`\\]]\)/\\\1/g'
+
+# Sed substitution to delay expansion of an escaped shell variable in a
+# double_quote_subst'ed string.
+delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
+
+# Sed substitution to delay expansion of an escaped single quote.
+delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g'
+
+# Sed substitution to avoid accidental globbing in evaled expressions
+no_glob_subst='s/\*/\\\*/g'
+])
+
+# _LT_PROG_LTMAIN
+# ---------------
+# Note that this code is called both from 'configure', and 'config.status'
+# now that we use AC_CONFIG_COMMANDS to generate libtool. Notably,
+# 'config.status' has no value for ac_aux_dir unless we are using Automake,
+# so we pass a copy along to make sure it has a sensible value anyway.
+m4_defun([_LT_PROG_LTMAIN],
+[m4_ifdef([AC_REQUIRE_AUX_FILE], [AC_REQUIRE_AUX_FILE([ltmain.sh])])dnl
+_LT_CONFIG_LIBTOOL_INIT([ac_aux_dir='$ac_aux_dir'])
+ltmain=$ac_aux_dir/ltmain.sh
+])# _LT_PROG_LTMAIN
+
+
+## ------------------------------------- ##
+## Accumulate code for creating libtool. ##
+## ------------------------------------- ##
+
+# So that we can recreate a full libtool script including additional
+# tags, we accumulate the chunks of code to send to AC_CONFIG_COMMANDS
+# in macros and then make a single call at the end using the 'libtool'
+# label.
+
+
+# _LT_CONFIG_LIBTOOL_INIT([INIT-COMMANDS])
+# ----------------------------------------
+# Register INIT-COMMANDS to be passed to AC_CONFIG_COMMANDS later.
+m4_define([_LT_CONFIG_LIBTOOL_INIT],
+[m4_ifval([$1],
+ [m4_append([_LT_OUTPUT_LIBTOOL_INIT],
+ [$1
+])])])
+
+# Initialize.
+m4_define([_LT_OUTPUT_LIBTOOL_INIT])
+
+
+# _LT_CONFIG_LIBTOOL([COMMANDS])
+# ------------------------------
+# Register COMMANDS to be passed to AC_CONFIG_COMMANDS later.
+m4_define([_LT_CONFIG_LIBTOOL],
+[m4_ifval([$1],
+ [m4_append([_LT_OUTPUT_LIBTOOL_COMMANDS],
+ [$1
+])])])
+
+# Initialize.
+m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS])
+
+
+# _LT_CONFIG_SAVE_COMMANDS([COMMANDS], [INIT_COMMANDS])
+# -----------------------------------------------------
+m4_defun([_LT_CONFIG_SAVE_COMMANDS],
+[_LT_CONFIG_LIBTOOL([$1])
+_LT_CONFIG_LIBTOOL_INIT([$2])
+])
+
+
+# _LT_FORMAT_COMMENT([COMMENT])
+# -----------------------------
+# Add leading comment marks to the start of each line, and a trailing
+# full-stop to the whole comment if one is not present already.
+m4_define([_LT_FORMAT_COMMENT],
+[m4_ifval([$1], [
+m4_bpatsubst([m4_bpatsubst([$1], [^ *], [# ])],
+ [['`$\]], [\\\&])]m4_bmatch([$1], [[!?.]$], [], [.])
+)])
+
+
+
+## ------------------------ ##
+## FIXME: Eliminate VARNAME ##
+## ------------------------ ##
+
+
+# _LT_DECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION], [IS-TAGGED?])
+# -------------------------------------------------------------------
+# CONFIGNAME is the name given to the value in the libtool script.
+# VARNAME is the (base) name used in the configure script.
+# VALUE may be 0, 1 or 2 for a computed quote escaped value based on
+# VARNAME. Any other value will be used directly.
+m4_define([_LT_DECL],
+[lt_if_append_uniq([lt_decl_varnames], [$2], [, ],
+ [lt_dict_add_subkey([lt_decl_dict], [$2], [libtool_name],
+ [m4_ifval([$1], [$1], [$2])])
+ lt_dict_add_subkey([lt_decl_dict], [$2], [value], [$3])
+ m4_ifval([$4],
+ [lt_dict_add_subkey([lt_decl_dict], [$2], [description], [$4])])
+ lt_dict_add_subkey([lt_decl_dict], [$2],
+ [tagged?], [m4_ifval([$5], [yes], [no])])])
+])
+
+
+# _LT_TAGDECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION])
+# --------------------------------------------------------
+m4_define([_LT_TAGDECL], [_LT_DECL([$1], [$2], [$3], [$4], [yes])])
+
+
+# lt_decl_tag_varnames([SEPARATOR], [VARNAME1...])
+# ------------------------------------------------
+m4_define([lt_decl_tag_varnames],
+[_lt_decl_filter([tagged?], [yes], $@)])
+
+
+# _lt_decl_filter(SUBKEY, VALUE, [SEPARATOR], [VARNAME1..])
+# ---------------------------------------------------------
+m4_define([_lt_decl_filter],
+[m4_case([$#],
+ [0], [m4_fatal([$0: too few arguments: $#])],
+ [1], [m4_fatal([$0: too few arguments: $#: $1])],
+ [2], [lt_dict_filter([lt_decl_dict], [$1], [$2], [], lt_decl_varnames)],
+ [3], [lt_dict_filter([lt_decl_dict], [$1], [$2], [$3], lt_decl_varnames)],
+ [lt_dict_filter([lt_decl_dict], $@)])[]dnl
+])
+
+
+# lt_decl_quote_varnames([SEPARATOR], [VARNAME1...])
+# --------------------------------------------------
+m4_define([lt_decl_quote_varnames],
+[_lt_decl_filter([value], [1], $@)])
+
+
+# lt_decl_dquote_varnames([SEPARATOR], [VARNAME1...])
+# ---------------------------------------------------
+m4_define([lt_decl_dquote_varnames],
+[_lt_decl_filter([value], [2], $@)])
+
+
+# lt_decl_varnames_tagged([SEPARATOR], [VARNAME1...])
+# ---------------------------------------------------
+m4_define([lt_decl_varnames_tagged],
+[m4_assert([$# <= 2])dnl
+_$0(m4_quote(m4_default([$1], [[, ]])),
+ m4_ifval([$2], [[$2]], [m4_dquote(lt_decl_tag_varnames)]),
+ m4_split(m4_normalize(m4_quote(_LT_TAGS)), [ ]))])
+m4_define([_lt_decl_varnames_tagged],
+[m4_ifval([$3], [lt_combine([$1], [$2], [_], $3)])])
+
+
+# lt_decl_all_varnames([SEPARATOR], [VARNAME1...])
+# ------------------------------------------------
+m4_define([lt_decl_all_varnames],
+[_$0(m4_quote(m4_default([$1], [[, ]])),
+ m4_if([$2], [],
+ m4_quote(lt_decl_varnames),
+ m4_quote(m4_shift($@))))[]dnl
+])
+m4_define([_lt_decl_all_varnames],
+[lt_join($@, lt_decl_varnames_tagged([$1],
+ lt_decl_tag_varnames([[, ]], m4_shift($@))))dnl
+])
+
+
+# _LT_CONFIG_STATUS_DECLARE([VARNAME])
+# ------------------------------------
+# Quote a variable value, and forward it to 'config.status' so that its
+# declaration there will have the same value as in 'configure'. VARNAME
+# must have a single quote delimited value for this to work.
+m4_define([_LT_CONFIG_STATUS_DECLARE],
+[$1='`$ECHO "$][$1" | $SED "$delay_single_quote_subst"`'])
+
+
+# _LT_CONFIG_STATUS_DECLARATIONS
+# ------------------------------
+# We delimit libtool config variables with single quotes, so when
+# we write them to config.status, we have to be sure to quote all
+# embedded single quotes properly. In configure, this macro expands
+# each variable declared with _LT_DECL (and _LT_TAGDECL) into:
+#
+# ='`$ECHO "$" | $SED "$delay_single_quote_subst"`'
+m4_defun([_LT_CONFIG_STATUS_DECLARATIONS],
+[m4_foreach([_lt_var], m4_quote(lt_decl_all_varnames),
+ [m4_n([_LT_CONFIG_STATUS_DECLARE(_lt_var)])])])
+
+
+# _LT_LIBTOOL_TAGS
+# ----------------
+# Output comment and list of tags supported by the script
+m4_defun([_LT_LIBTOOL_TAGS],
+[_LT_FORMAT_COMMENT([The names of the tagged configurations supported by this script])dnl
+available_tags='_LT_TAGS'dnl
+])
+
+
+# _LT_LIBTOOL_DECLARE(VARNAME, [TAG])
+# -----------------------------------
+# Extract the dictionary values for VARNAME (optionally with TAG) and
+# expand to a commented shell variable setting:
+#
+# # Some comment about what VAR is for.
+# visible_name=$lt_internal_name
+m4_define([_LT_LIBTOOL_DECLARE],
+[_LT_FORMAT_COMMENT(m4_quote(lt_dict_fetch([lt_decl_dict], [$1],
+ [description])))[]dnl
+m4_pushdef([_libtool_name],
+ m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [libtool_name])))[]dnl
+m4_case(m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [value])),
+ [0], [_libtool_name=[$]$1],
+ [1], [_libtool_name=$lt_[]$1],
+ [2], [_libtool_name=$lt_[]$1],
+ [_libtool_name=lt_dict_fetch([lt_decl_dict], [$1], [value])])[]dnl
+m4_ifval([$2], [_$2])[]m4_popdef([_libtool_name])[]dnl
+])
+
+
+# _LT_LIBTOOL_CONFIG_VARS
+# -----------------------
+# Produce commented declarations of non-tagged libtool config variables
+# suitable for insertion in the LIBTOOL CONFIG section of the 'libtool'
+# script. Tagged libtool config variables (even for the LIBTOOL CONFIG
+# section) are produced by _LT_LIBTOOL_TAG_VARS.
+m4_defun([_LT_LIBTOOL_CONFIG_VARS],
+[m4_foreach([_lt_var],
+ m4_quote(_lt_decl_filter([tagged?], [no], [], lt_decl_varnames)),
+ [m4_n([_LT_LIBTOOL_DECLARE(_lt_var)])])])
+
+
+# _LT_LIBTOOL_TAG_VARS(TAG)
+# -------------------------
+m4_define([_LT_LIBTOOL_TAG_VARS],
+[m4_foreach([_lt_var], m4_quote(lt_decl_tag_varnames),
+ [m4_n([_LT_LIBTOOL_DECLARE(_lt_var, [$1])])])])
+
+
+# _LT_TAGVAR(VARNAME, [TAGNAME])
+# ------------------------------
+m4_define([_LT_TAGVAR], [m4_ifval([$2], [$1_$2], [$1])])
+
+
+# _LT_CONFIG_COMMANDS
+# -------------------
+# Send accumulated output to $CONFIG_STATUS. Thanks to the lists of
+# variables for single and double quote escaping we saved from calls
+# to _LT_DECL, we can put quote escaped variables declarations
+# into 'config.status', and then the shell code to quote escape them in
+# for loops in 'config.status'. Finally, any additional code accumulated
+# from calls to _LT_CONFIG_LIBTOOL_INIT is expanded.
+m4_defun([_LT_CONFIG_COMMANDS],
+[AC_PROVIDE_IFELSE([LT_OUTPUT],
+ dnl If the libtool generation code has been placed in $CONFIG_LT,
+ dnl instead of duplicating it all over again into config.status,
+ dnl then we will have config.status run $CONFIG_LT later, so it
+ dnl needs to know what name is stored there:
+ [AC_CONFIG_COMMANDS([libtool],
+ [$SHELL $CONFIG_LT || AS_EXIT(1)], [CONFIG_LT='$CONFIG_LT'])],
+ dnl If the libtool generation code is destined for config.status,
+ dnl expand the accumulated commands and init code now:
+ [AC_CONFIG_COMMANDS([libtool],
+ [_LT_OUTPUT_LIBTOOL_COMMANDS], [_LT_OUTPUT_LIBTOOL_COMMANDS_INIT])])
+])#_LT_CONFIG_COMMANDS
+
+
+# Initialize.
+m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS_INIT],
+[
+
+# The HP-UX ksh and POSIX shell print the target directory to stdout
+# if CDPATH is set.
+(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
+
+sed_quote_subst='$sed_quote_subst'
+double_quote_subst='$double_quote_subst'
+delay_variable_subst='$delay_variable_subst'
+_LT_CONFIG_STATUS_DECLARATIONS
+LTCC='$LTCC'
+LTCFLAGS='$LTCFLAGS'
+compiler='$compiler_DEFAULT'
+
+# A function that is used when there is no print builtin or printf.
+func_fallback_echo ()
+{
+ eval 'cat <<_LTECHO_EOF
+\$[]1
+_LTECHO_EOF'
+}
+
+# Quote evaled strings.
+for var in lt_decl_all_varnames([[ \
+]], lt_decl_quote_varnames); do
+ case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
+ *[[\\\\\\\`\\"\\\$]]*)
+ eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
+ ;;
+ *)
+ eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
+ ;;
+ esac
+done
+
+# Double-quote double-evaled strings.
+for var in lt_decl_all_varnames([[ \
+]], lt_decl_dquote_varnames); do
+ case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
+ *[[\\\\\\\`\\"\\\$]]*)
+ eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
+ ;;
+ *)
+ eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
+ ;;
+ esac
+done
+
+_LT_OUTPUT_LIBTOOL_INIT
+])
+
+# _LT_GENERATED_FILE_INIT(FILE, [COMMENT])
+# ------------------------------------
+# Generate a child script FILE with all initialization necessary to
+# reuse the environment learned by the parent script, and make the
+# file executable. If COMMENT is supplied, it is inserted after the
+# '#!' sequence but before initialization text begins. After this
+# macro, additional text can be appended to FILE to form the body of
+# the child script. The macro ends with non-zero status if the
+# file could not be fully written (such as if the disk is full).
+m4_ifdef([AS_INIT_GENERATED],
+[m4_defun([_LT_GENERATED_FILE_INIT],[AS_INIT_GENERATED($@)])],
+[m4_defun([_LT_GENERATED_FILE_INIT],
+[m4_require([AS_PREPARE])]dnl
+[m4_pushdef([AS_MESSAGE_LOG_FD])]dnl
+[lt_write_fail=0
+cat >$1 <<_ASEOF || lt_write_fail=1
+#! $SHELL
+# Generated by $as_me.
+$2
+SHELL=\${CONFIG_SHELL-$SHELL}
+export SHELL
+_ASEOF
+cat >>$1 <<\_ASEOF || lt_write_fail=1
+AS_SHELL_SANITIZE
+_AS_PREPARE
+exec AS_MESSAGE_FD>&1
+_ASEOF
+test 0 = "$lt_write_fail" && chmod +x $1[]dnl
+m4_popdef([AS_MESSAGE_LOG_FD])])])# _LT_GENERATED_FILE_INIT
+
+# LT_OUTPUT
+# ---------
+# This macro allows early generation of the libtool script (before
+# AC_OUTPUT is called), incase it is used in configure for compilation
+# tests.
+AC_DEFUN([LT_OUTPUT],
+[: ${CONFIG_LT=./config.lt}
+AC_MSG_NOTICE([creating $CONFIG_LT])
+_LT_GENERATED_FILE_INIT(["$CONFIG_LT"],
+[# Run this file to recreate a libtool stub with the current configuration.])
+
+cat >>"$CONFIG_LT" <<\_LTEOF
+lt_cl_silent=false
+exec AS_MESSAGE_LOG_FD>>config.log
+{
+ echo
+ AS_BOX([Running $as_me.])
+} >&AS_MESSAGE_LOG_FD
+
+lt_cl_help="\
+'$as_me' creates a local libtool stub from the current configuration,
+for use in further configure time tests before the real libtool is
+generated.
+
+Usage: $[0] [[OPTIONS]]
+
+ -h, --help print this help, then exit
+ -V, --version print version number, then exit
+ -q, --quiet do not print progress messages
+ -d, --debug don't remove temporary files
+
+Report bugs to ."
+
+lt_cl_version="\
+m4_ifset([AC_PACKAGE_NAME], [AC_PACKAGE_NAME ])config.lt[]dnl
+m4_ifset([AC_PACKAGE_VERSION], [ AC_PACKAGE_VERSION])
+configured by $[0], generated by m4_PACKAGE_STRING.
+
+Copyright (C) 2011 Free Software Foundation, Inc.
+This config.lt script is free software; the Free Software Foundation
+gives unlimited permision to copy, distribute and modify it."
+
+while test 0 != $[#]
+do
+ case $[1] in
+ --version | --v* | -V )
+ echo "$lt_cl_version"; exit 0 ;;
+ --help | --h* | -h )
+ echo "$lt_cl_help"; exit 0 ;;
+ --debug | --d* | -d )
+ debug=: ;;
+ --quiet | --q* | --silent | --s* | -q )
+ lt_cl_silent=: ;;
+
+ -*) AC_MSG_ERROR([unrecognized option: $[1]
+Try '$[0] --help' for more information.]) ;;
+
+ *) AC_MSG_ERROR([unrecognized argument: $[1]
+Try '$[0] --help' for more information.]) ;;
+ esac
+ shift
+done
+
+if $lt_cl_silent; then
+ exec AS_MESSAGE_FD>/dev/null
+fi
+_LTEOF
+
+cat >>"$CONFIG_LT" <<_LTEOF
+_LT_OUTPUT_LIBTOOL_COMMANDS_INIT
+_LTEOF
+
+cat >>"$CONFIG_LT" <<\_LTEOF
+AC_MSG_NOTICE([creating $ofile])
+_LT_OUTPUT_LIBTOOL_COMMANDS
+AS_EXIT(0)
+_LTEOF
+chmod +x "$CONFIG_LT"
+
+# configure is writing to config.log, but config.lt does its own redirection,
+# appending to config.log, which fails on DOS, as config.log is still kept
+# open by configure. Here we exec the FD to /dev/null, effectively closing
+# config.log, so it can be properly (re)opened and appended to by config.lt.
+lt_cl_success=:
+test yes = "$silent" &&
+ lt_config_lt_args="$lt_config_lt_args --quiet"
+exec AS_MESSAGE_LOG_FD>/dev/null
+$SHELL "$CONFIG_LT" $lt_config_lt_args || lt_cl_success=false
+exec AS_MESSAGE_LOG_FD>>config.log
+$lt_cl_success || AS_EXIT(1)
+])# LT_OUTPUT
+
+
+# _LT_CONFIG(TAG)
+# ---------------
+# If TAG is the built-in tag, create an initial libtool script with a
+# default configuration from the untagged config vars. Otherwise add code
+# to config.status for appending the configuration named by TAG from the
+# matching tagged config vars.
+m4_defun([_LT_CONFIG],
+[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
+_LT_CONFIG_SAVE_COMMANDS([
+ m4_define([_LT_TAG], m4_if([$1], [], [C], [$1]))dnl
+ m4_if(_LT_TAG, [C], [
+ # See if we are running on zsh, and set the options that allow our
+ # commands through without removal of \ escapes.
+ if test -n "${ZSH_VERSION+set}"; then
+ setopt NO_GLOB_SUBST
+ fi
+
+ cfgfile=${ofile}T
+ trap "$RM \"$cfgfile\"; exit 1" 1 2 15
+ $RM "$cfgfile"
+
+ cat <<_LT_EOF >> "$cfgfile"
+#! $SHELL
+# Generated automatically by $as_me ($PACKAGE) $VERSION
+# Libtool was configured on host `(hostname || uname -n) 2>/dev/null | sed 1q`:
+# NOTE: Changes made to this file will be lost: look at ltmain.sh.
+
+# Provide generalized library-building support services.
+# Written by Gordon Matzigkeit, 1996
+
+_LT_COPYING
+_LT_LIBTOOL_TAGS
+
+# Configured defaults for sys_lib_dlsearch_path munging.
+: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"}
+
+# ### BEGIN LIBTOOL CONFIG
+_LT_LIBTOOL_CONFIG_VARS
+_LT_LIBTOOL_TAG_VARS
+# ### END LIBTOOL CONFIG
+
+_LT_EOF
+
+ cat <<'_LT_EOF' >> "$cfgfile"
+
+# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
+
+_LT_PREPARE_MUNGE_PATH_LIST
+_LT_PREPARE_CC_BASENAME
+
+# ### END FUNCTIONS SHARED WITH CONFIGURE
+
+_LT_EOF
+
+ case $host_os in
+ aix3*)
+ cat <<\_LT_EOF >> "$cfgfile"
+# AIX sometimes has problems with the GCC collect2 program. For some
+# reason, if we set the COLLECT_NAMES environment variable, the problems
+# vanish in a puff of smoke.
+if test set != "${COLLECT_NAMES+set}"; then
+ COLLECT_NAMES=
+ export COLLECT_NAMES
+fi
+_LT_EOF
+ ;;
+ esac
+
+ _LT_PROG_LTMAIN
+
+ # We use sed instead of cat because bash on DJGPP gets confused if
+ # if finds mixed CR/LF and LF-only lines. Since sed operates in
+ # text mode, it properly converts lines to CR/LF. This bash problem
+ # is reportedly fixed, but why not run on old versions too?
+ $SED '$q' "$ltmain" >> "$cfgfile" \
+ || (rm -f "$cfgfile"; exit 1)
+
+ mv -f "$cfgfile" "$ofile" ||
+ (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile")
+ chmod +x "$ofile"
+],
+[cat <<_LT_EOF >> "$ofile"
+
+dnl Unfortunately we have to use $1 here, since _LT_TAG is not expanded
+dnl in a comment (ie after a #).
+# ### BEGIN LIBTOOL TAG CONFIG: $1
+_LT_LIBTOOL_TAG_VARS(_LT_TAG)
+# ### END LIBTOOL TAG CONFIG: $1
+_LT_EOF
+])dnl /m4_if
+],
+[m4_if([$1], [], [
+ PACKAGE='$PACKAGE'
+ VERSION='$VERSION'
+ RM='$RM'
+ ofile='$ofile'], [])
+])dnl /_LT_CONFIG_SAVE_COMMANDS
+])# _LT_CONFIG
+
+
+# LT_SUPPORTED_TAG(TAG)
+# ---------------------
+# Trace this macro to discover what tags are supported by the libtool
+# --tag option, using:
+# autoconf --trace 'LT_SUPPORTED_TAG:$1'
+AC_DEFUN([LT_SUPPORTED_TAG], [])
+
+
+# C support is built-in for now
+m4_define([_LT_LANG_C_enabled], [])
+m4_define([_LT_TAGS], [])
+
+
+# LT_LANG(LANG)
+# -------------
+# Enable libtool support for the given language if not already enabled.
+AC_DEFUN([LT_LANG],
+[AC_BEFORE([$0], [LT_OUTPUT])dnl
+m4_case([$1],
+ [C], [_LT_LANG(C)],
+ [C++], [_LT_LANG(CXX)],
+ [Go], [_LT_LANG(GO)],
+ [Java], [_LT_LANG(GCJ)],
+ [Fortran 77], [_LT_LANG(F77)],
+ [Fortran], [_LT_LANG(FC)],
+ [Windows Resource], [_LT_LANG(RC)],
+ [m4_ifdef([_LT_LANG_]$1[_CONFIG],
+ [_LT_LANG($1)],
+ [m4_fatal([$0: unsupported language: "$1"])])])dnl
+])# LT_LANG
+
+
+# _LT_LANG(LANGNAME)
+# ------------------
+m4_defun([_LT_LANG],
+[m4_ifdef([_LT_LANG_]$1[_enabled], [],
+ [LT_SUPPORTED_TAG([$1])dnl
+ m4_append([_LT_TAGS], [$1 ])dnl
+ m4_define([_LT_LANG_]$1[_enabled], [])dnl
+ _LT_LANG_$1_CONFIG($1)])dnl
+])# _LT_LANG
+
+
+m4_ifndef([AC_PROG_GO], [
+############################################################
+# NOTE: This macro has been submitted for inclusion into #
+# GNU Autoconf as AC_PROG_GO. When it is available in #
+# a released version of Autoconf we should remove this #
+# macro and use it instead. #
+############################################################
+m4_defun([AC_PROG_GO],
+[AC_LANG_PUSH(Go)dnl
+AC_ARG_VAR([GOC], [Go compiler command])dnl
+AC_ARG_VAR([GOFLAGS], [Go compiler flags])dnl
+_AC_ARG_VAR_LDFLAGS()dnl
+AC_CHECK_TOOL(GOC, gccgo)
+if test -z "$GOC"; then
+ if test -n "$ac_tool_prefix"; then
+ AC_CHECK_PROG(GOC, [${ac_tool_prefix}gccgo], [${ac_tool_prefix}gccgo])
+ fi
+fi
+if test -z "$GOC"; then
+ AC_CHECK_PROG(GOC, gccgo, gccgo, false)
+fi
+])#m4_defun
+])#m4_ifndef
+
+
+# _LT_LANG_DEFAULT_CONFIG
+# -----------------------
+m4_defun([_LT_LANG_DEFAULT_CONFIG],
+[AC_PROVIDE_IFELSE([AC_PROG_CXX],
+ [LT_LANG(CXX)],
+ [m4_define([AC_PROG_CXX], defn([AC_PROG_CXX])[LT_LANG(CXX)])])
+
+AC_PROVIDE_IFELSE([AC_PROG_F77],
+ [LT_LANG(F77)],
+ [m4_define([AC_PROG_F77], defn([AC_PROG_F77])[LT_LANG(F77)])])
+
+AC_PROVIDE_IFELSE([AC_PROG_FC],
+ [LT_LANG(FC)],
+ [m4_define([AC_PROG_FC], defn([AC_PROG_FC])[LT_LANG(FC)])])
+
+dnl The call to [A][M_PROG_GCJ] is quoted like that to stop aclocal
+dnl pulling things in needlessly.
+AC_PROVIDE_IFELSE([AC_PROG_GCJ],
+ [LT_LANG(GCJ)],
+ [AC_PROVIDE_IFELSE([A][M_PROG_GCJ],
+ [LT_LANG(GCJ)],
+ [AC_PROVIDE_IFELSE([LT_PROG_GCJ],
+ [LT_LANG(GCJ)],
+ [m4_ifdef([AC_PROG_GCJ],
+ [m4_define([AC_PROG_GCJ], defn([AC_PROG_GCJ])[LT_LANG(GCJ)])])
+ m4_ifdef([A][M_PROG_GCJ],
+ [m4_define([A][M_PROG_GCJ], defn([A][M_PROG_GCJ])[LT_LANG(GCJ)])])
+ m4_ifdef([LT_PROG_GCJ],
+ [m4_define([LT_PROG_GCJ], defn([LT_PROG_GCJ])[LT_LANG(GCJ)])])])])])
+
+AC_PROVIDE_IFELSE([AC_PROG_GO],
+ [LT_LANG(GO)],
+ [m4_define([AC_PROG_GO], defn([AC_PROG_GO])[LT_LANG(GO)])])
+
+AC_PROVIDE_IFELSE([LT_PROG_RC],
+ [LT_LANG(RC)],
+ [m4_define([LT_PROG_RC], defn([LT_PROG_RC])[LT_LANG(RC)])])
+])# _LT_LANG_DEFAULT_CONFIG
+
+# Obsolete macros:
+AU_DEFUN([AC_LIBTOOL_CXX], [LT_LANG(C++)])
+AU_DEFUN([AC_LIBTOOL_F77], [LT_LANG(Fortran 77)])
+AU_DEFUN([AC_LIBTOOL_FC], [LT_LANG(Fortran)])
+AU_DEFUN([AC_LIBTOOL_GCJ], [LT_LANG(Java)])
+AU_DEFUN([AC_LIBTOOL_RC], [LT_LANG(Windows Resource)])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_LIBTOOL_CXX], [])
+dnl AC_DEFUN([AC_LIBTOOL_F77], [])
+dnl AC_DEFUN([AC_LIBTOOL_FC], [])
+dnl AC_DEFUN([AC_LIBTOOL_GCJ], [])
+dnl AC_DEFUN([AC_LIBTOOL_RC], [])
+
+
+# _LT_TAG_COMPILER
+# ----------------
+m4_defun([_LT_TAG_COMPILER],
+[AC_REQUIRE([AC_PROG_CC])dnl
+
+_LT_DECL([LTCC], [CC], [1], [A C compiler])dnl
+_LT_DECL([LTCFLAGS], [CFLAGS], [1], [LTCC compiler flags])dnl
+_LT_TAGDECL([CC], [compiler], [1], [A language specific compiler])dnl
+_LT_TAGDECL([with_gcc], [GCC], [0], [Is the compiler the GNU compiler?])dnl
+
+# If no C compiler was specified, use CC.
+LTCC=${LTCC-"$CC"}
+
+# If no C compiler flags were specified, use CFLAGS.
+LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
+
+# Allow CC to be a program name with arguments.
+compiler=$CC
+])# _LT_TAG_COMPILER
+
+
+# _LT_COMPILER_BOILERPLATE
+# ------------------------
+# Check for compiler boilerplate output or warnings with
+# the simple compiler test code.
+m4_defun([_LT_COMPILER_BOILERPLATE],
+[m4_require([_LT_DECL_SED])dnl
+ac_outfile=conftest.$ac_objext
+echo "$lt_simple_compile_test_code" >conftest.$ac_ext
+eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
+_lt_compiler_boilerplate=`cat conftest.err`
+$RM conftest*
+])# _LT_COMPILER_BOILERPLATE
+
+
+# _LT_LINKER_BOILERPLATE
+# ----------------------
+# Check for linker boilerplate output or warnings with
+# the simple link test code.
+m4_defun([_LT_LINKER_BOILERPLATE],
+[m4_require([_LT_DECL_SED])dnl
+ac_outfile=conftest.$ac_objext
+echo "$lt_simple_link_test_code" >conftest.$ac_ext
+eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
+_lt_linker_boilerplate=`cat conftest.err`
+$RM -r conftest*
+])# _LT_LINKER_BOILERPLATE
+
+# _LT_REQUIRED_DARWIN_CHECKS
+# -------------------------
+m4_defun_once([_LT_REQUIRED_DARWIN_CHECKS],[
+ case $host_os in
+ rhapsody* | darwin*)
+ AC_CHECK_TOOL([DSYMUTIL], [dsymutil], [:])
+ AC_CHECK_TOOL([NMEDIT], [nmedit], [:])
+ AC_CHECK_TOOL([LIPO], [lipo], [:])
+ AC_CHECK_TOOL([OTOOL], [otool], [:])
+ AC_CHECK_TOOL([OTOOL64], [otool64], [:])
+ _LT_DECL([], [DSYMUTIL], [1],
+ [Tool to manipulate archived DWARF debug symbol files on Mac OS X])
+ _LT_DECL([], [NMEDIT], [1],
+ [Tool to change global to local symbols on Mac OS X])
+ _LT_DECL([], [LIPO], [1],
+ [Tool to manipulate fat objects and archives on Mac OS X])
+ _LT_DECL([], [OTOOL], [1],
+ [ldd/readelf like tool for Mach-O binaries on Mac OS X])
+ _LT_DECL([], [OTOOL64], [1],
+ [ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4])
+
+ AC_CACHE_CHECK([for -single_module linker flag],[lt_cv_apple_cc_single_mod],
+ [lt_cv_apple_cc_single_mod=no
+ if test -z "$LT_MULTI_MODULE"; then
+ # By default we will add the -single_module flag. You can override
+ # by either setting the environment variable LT_MULTI_MODULE
+ # non-empty at configure time, or by adding -multi_module to the
+ # link flags.
+ rm -rf libconftest.dylib*
+ echo "int foo(void){return 1;}" > conftest.c
+ echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
+-dynamiclib -Wl,-single_module conftest.c" >&AS_MESSAGE_LOG_FD
+ $LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
+ -dynamiclib -Wl,-single_module conftest.c 2>conftest.err
+ _lt_result=$?
+ # If there is a non-empty error log, and "single_module"
+ # appears in it, assume the flag caused a linker warning
+ if test -s conftest.err && $GREP single_module conftest.err; then
+ cat conftest.err >&AS_MESSAGE_LOG_FD
+ # Otherwise, if the output was created with a 0 exit code from
+ # the compiler, it worked.
+ elif test -f libconftest.dylib && test 0 = "$_lt_result"; then
+ lt_cv_apple_cc_single_mod=yes
+ else
+ cat conftest.err >&AS_MESSAGE_LOG_FD
+ fi
+ rm -rf libconftest.dylib*
+ rm -f conftest.*
+ fi])
+
+ AC_CACHE_CHECK([for -exported_symbols_list linker flag],
+ [lt_cv_ld_exported_symbols_list],
+ [lt_cv_ld_exported_symbols_list=no
+ save_LDFLAGS=$LDFLAGS
+ echo "_main" > conftest.sym
+ LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym"
+ AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])],
+ [lt_cv_ld_exported_symbols_list=yes],
+ [lt_cv_ld_exported_symbols_list=no])
+ LDFLAGS=$save_LDFLAGS
+ ])
+
+ AC_CACHE_CHECK([for -force_load linker flag],[lt_cv_ld_force_load],
+ [lt_cv_ld_force_load=no
+ cat > conftest.c << _LT_EOF
+int forced_loaded() { return 2;}
+_LT_EOF
+ echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&AS_MESSAGE_LOG_FD
+ $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&AS_MESSAGE_LOG_FD
+ echo "$AR $AR_FLAGS libconftest.a conftest.o" >&AS_MESSAGE_LOG_FD
+ $AR $AR_FLAGS libconftest.a conftest.o 2>&AS_MESSAGE_LOG_FD
+ echo "$RANLIB libconftest.a" >&AS_MESSAGE_LOG_FD
+ $RANLIB libconftest.a 2>&AS_MESSAGE_LOG_FD
+ cat > conftest.c << _LT_EOF
+int main() { return 0;}
+_LT_EOF
+ echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&AS_MESSAGE_LOG_FD
+ $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err
+ _lt_result=$?
+ if test -s conftest.err && $GREP force_load conftest.err; then
+ cat conftest.err >&AS_MESSAGE_LOG_FD
+ elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then
+ lt_cv_ld_force_load=yes
+ else
+ cat conftest.err >&AS_MESSAGE_LOG_FD
+ fi
+ rm -f conftest.err libconftest.a conftest conftest.c
+ rm -rf conftest.dSYM
+ ])
+ case $host_os in
+ rhapsody* | darwin1.[[012]])
+ _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;;
+ darwin1.*)
+ _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
+ darwin*)
+ case $MACOSX_DEPLOYMENT_TARGET,$host in
+ 10.[[012]],*|,*powerpc*-darwin[[5-8]]*)
+ _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
+ *)
+ _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup' ;;
+ esac
+ ;;
+ esac
+ if test yes = "$lt_cv_apple_cc_single_mod"; then
+ _lt_dar_single_mod='$single_module'
+ fi
+ _lt_dar_needs_single_mod=no
+ case $host_os in
+ rhapsody* | darwin1.*)
+ _lt_dar_needs_single_mod=yes ;;
+ darwin*)
+ # When targeting Mac OS X 10.4 (darwin 8) or later,
+ # -single_module is the default and -multi_module is unsupported.
+ # The toolchain on macOS 10.14 (darwin 18) and later cannot
+ # target any OS version that needs -single_module.
+ case ${MACOSX_DEPLOYMENT_TARGET-10.0},$host in
+ 10.0,*-darwin[[567]].*|10.[[0-3]],*-darwin[[5-9]].*|10.[[0-3]],*-darwin1[[0-7]].*)
+ _lt_dar_needs_single_mod=yes ;;
+ esac
+ ;;
+ esac
+ if test yes = "$lt_cv_ld_exported_symbols_list"; then
+ _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym'
+ else
+ _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib'
+ fi
+ if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then
+ _lt_dsymutil='~$DSYMUTIL $lib || :'
+ else
+ _lt_dsymutil=
+ fi
+ ;;
+ esac
+])
+
+
+# _LT_DARWIN_LINKER_FEATURES([TAG])
+# ---------------------------------
+# Checks for linker and compiler features on darwin
+m4_defun([_LT_DARWIN_LINKER_FEATURES],
+[
+ m4_require([_LT_REQUIRED_DARWIN_CHECKS])
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=no
+ _LT_TAGVAR(hardcode_direct, $1)=no
+ _LT_TAGVAR(hardcode_automatic, $1)=yes
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported
+ if test yes = "$lt_cv_ld_force_load"; then
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`'
+ m4_case([$1], [F77], [_LT_TAGVAR(compiler_needs_object, $1)=yes],
+ [FC], [_LT_TAGVAR(compiler_needs_object, $1)=yes])
+ else
+ _LT_TAGVAR(whole_archive_flag_spec, $1)=''
+ fi
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+ _LT_TAGVAR(allow_undefined_flag, $1)=$_lt_dar_allow_undefined
+ case $cc_basename in
+ ifort*|nagfor*) _lt_dar_can_shared=yes ;;
+ *) _lt_dar_can_shared=$GCC ;;
+ esac
+ if test yes = "$_lt_dar_can_shared"; then
+ output_verbose_link_cmd=func_echo_all
+ _LT_TAGVAR(archive_cmds, $1)="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil"
+ _LT_TAGVAR(module_cmds, $1)="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil"
+ _LT_TAGVAR(archive_expsym_cmds, $1)="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil"
+ _LT_TAGVAR(module_expsym_cmds, $1)="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil"
+ m4_if([$1], [CXX],
+[ if test yes = "$_lt_dar_needs_single_mod" -a yes != "$lt_cv_apple_cc_single_mod"; then
+ _LT_TAGVAR(archive_cmds, $1)="\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dsymutil"
+ _LT_TAGVAR(archive_expsym_cmds, $1)="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dar_export_syms$_lt_dsymutil"
+ fi
+],[])
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+])
+
+# _LT_SYS_MODULE_PATH_AIX([TAGNAME])
+# ----------------------------------
+# Links a minimal program and checks the executable
+# for the system default hardcoded library path. In most cases,
+# this is /usr/lib:/lib, but when the MPI compilers are used
+# the location of the communication and MPI libs are included too.
+# If we don't find anything, use the default library path according
+# to the aix ld manual.
+# Store the results from the different compilers for each TAGNAME.
+# Allow to override them for all tags through lt_cv_aix_libpath.
+m4_defun([_LT_SYS_MODULE_PATH_AIX],
+[m4_require([_LT_DECL_SED])dnl
+if test set = "${lt_cv_aix_libpath+set}"; then
+ aix_libpath=$lt_cv_aix_libpath
+else
+ AC_CACHE_VAL([_LT_TAGVAR([lt_cv_aix_libpath_], [$1])],
+ [AC_LINK_IFELSE([AC_LANG_PROGRAM],[
+ lt_aix_libpath_sed='[
+ /Import File Strings/,/^$/ {
+ /^0/ {
+ s/^0 *\([^ ]*\) *$/\1/
+ p
+ }
+ }]'
+ _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
+ # Check for a 64-bit object if we didn't find anything.
+ if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then
+ _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
+ fi],[])
+ if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then
+ _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=/usr/lib:/lib
+ fi
+ ])
+ aix_libpath=$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])
+fi
+])# _LT_SYS_MODULE_PATH_AIX
+
+
+# _LT_SHELL_INIT(ARG)
+# -------------------
+m4_define([_LT_SHELL_INIT],
+[m4_divert_text([M4SH-INIT], [$1
+])])# _LT_SHELL_INIT
+
+
+
+# _LT_PROG_ECHO_BACKSLASH
+# -----------------------
+# Find how we can fake an echo command that does not interpret backslash.
+# In particular, with Autoconf 2.60 or later we add some code to the start
+# of the generated configure script that will find a shell with a builtin
+# printf (that we can use as an echo command).
+m4_defun([_LT_PROG_ECHO_BACKSLASH],
+[ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
+ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
+ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
+
+AC_MSG_CHECKING([how to print strings])
+# Test print first, because it will be a builtin if present.
+if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \
+ test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then
+ ECHO='print -r --'
+elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then
+ ECHO='printf %s\n'
+else
+ # Use this function as a fallback that always works.
+ func_fallback_echo ()
+ {
+ eval 'cat <<_LTECHO_EOF
+$[]1
+_LTECHO_EOF'
+ }
+ ECHO='func_fallback_echo'
+fi
+
+# func_echo_all arg...
+# Invoke $ECHO with all args, space-separated.
+func_echo_all ()
+{
+ $ECHO "$*"
+}
+
+case $ECHO in
+ printf*) AC_MSG_RESULT([printf]) ;;
+ print*) AC_MSG_RESULT([print -r]) ;;
+ *) AC_MSG_RESULT([cat]) ;;
+esac
+
+m4_ifdef([_AS_DETECT_SUGGESTED],
+[_AS_DETECT_SUGGESTED([
+ test -n "${ZSH_VERSION+set}${BASH_VERSION+set}" || (
+ ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
+ ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
+ ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
+ PATH=/empty FPATH=/empty; export PATH FPATH
+ test "X`printf %s $ECHO`" = "X$ECHO" \
+ || test "X`print -r -- $ECHO`" = "X$ECHO" )])])
+
+_LT_DECL([], [SHELL], [1], [Shell to use when invoking shell scripts])
+_LT_DECL([], [ECHO], [1], [An echo program that protects backslashes])
+])# _LT_PROG_ECHO_BACKSLASH
+
+
+# _LT_WITH_SYSROOT
+# ----------------
+AC_DEFUN([_LT_WITH_SYSROOT],
+[m4_require([_LT_DECL_SED])dnl
+AC_MSG_CHECKING([for sysroot])
+AC_ARG_WITH([sysroot],
+[AS_HELP_STRING([--with-sysroot@<:@=DIR@:>@],
+ [Search for dependent libraries within DIR (or the compiler's sysroot
+ if not specified).])],
+[], [with_sysroot=no])
+
+dnl lt_sysroot will always be passed unquoted. We quote it here
+dnl in case the user passed a directory name.
+lt_sysroot=
+case $with_sysroot in #(
+ yes)
+ if test yes = "$GCC"; then
+ lt_sysroot=`$CC --print-sysroot 2>/dev/null`
+ fi
+ ;; #(
+ /*)
+ lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
+ ;; #(
+ no|'')
+ ;; #(
+ *)
+ AC_MSG_RESULT([$with_sysroot])
+ AC_MSG_ERROR([The sysroot must be an absolute path.])
+ ;;
+esac
+
+ AC_MSG_RESULT([${lt_sysroot:-no}])
+_LT_DECL([], [lt_sysroot], [0], [The root where to search for ]dnl
+[dependent libraries, and where our libraries should be installed.])])
+
+# _LT_ENABLE_LOCK
+# ---------------
+m4_defun([_LT_ENABLE_LOCK],
+[AC_ARG_ENABLE([libtool-lock],
+ [AS_HELP_STRING([--disable-libtool-lock],
+ [avoid locking (might break parallel builds)])])
+test no = "$enable_libtool_lock" || enable_libtool_lock=yes
+
+# Some flags need to be propagated to the compiler or linker for good
+# libtool support.
+case $host in
+ia64-*-hpux*)
+ # Find out what ABI is being produced by ac_compile, and set mode
+ # options accordingly.
+ echo 'int i;' > conftest.$ac_ext
+ if AC_TRY_EVAL(ac_compile); then
+ case `$FILECMD conftest.$ac_objext` in
+ *ELF-32*)
+ HPUX_IA64_MODE=32
+ ;;
+ *ELF-64*)
+ HPUX_IA64_MODE=64
+ ;;
+ esac
+ fi
+ rm -rf conftest*
+ ;;
+*-*-irix6*)
+ # Find out what ABI is being produced by ac_compile, and set linker
+ # options accordingly.
+ echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext
+ if AC_TRY_EVAL(ac_compile); then
+ if test yes = "$lt_cv_prog_gnu_ld"; then
+ case `$FILECMD conftest.$ac_objext` in
+ *32-bit*)
+ LD="${LD-ld} -melf32bsmip"
+ ;;
+ *N32*)
+ LD="${LD-ld} -melf32bmipn32"
+ ;;
+ *64-bit*)
+ LD="${LD-ld} -melf64bmip"
+ ;;
+ esac
+ else
+ case `$FILECMD conftest.$ac_objext` in
+ *32-bit*)
+ LD="${LD-ld} -32"
+ ;;
+ *N32*)
+ LD="${LD-ld} -n32"
+ ;;
+ *64-bit*)
+ LD="${LD-ld} -64"
+ ;;
+ esac
+ fi
+ fi
+ rm -rf conftest*
+ ;;
+
+mips64*-*linux*)
+ # Find out what ABI is being produced by ac_compile, and set linker
+ # options accordingly.
+ echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext
+ if AC_TRY_EVAL(ac_compile); then
+ emul=elf
+ case `$FILECMD conftest.$ac_objext` in
+ *32-bit*)
+ emul="${emul}32"
+ ;;
+ *64-bit*)
+ emul="${emul}64"
+ ;;
+ esac
+ case `$FILECMD conftest.$ac_objext` in
+ *MSB*)
+ emul="${emul}btsmip"
+ ;;
+ *LSB*)
+ emul="${emul}ltsmip"
+ ;;
+ esac
+ case `$FILECMD conftest.$ac_objext` in
+ *N32*)
+ emul="${emul}n32"
+ ;;
+ esac
+ LD="${LD-ld} -m $emul"
+ fi
+ rm -rf conftest*
+ ;;
+
+x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \
+s390*-*linux*|s390*-*tpf*|sparc*-*linux*)
+ # Find out what ABI is being produced by ac_compile, and set linker
+ # options accordingly. Note that the listed cases only cover the
+ # situations where additional linker options are needed (such as when
+ # doing 32-bit compilation for a host where ld defaults to 64-bit, or
+ # vice versa); the common cases where no linker options are needed do
+ # not appear in the list.
+ echo 'int i;' > conftest.$ac_ext
+ if AC_TRY_EVAL(ac_compile); then
+ case `$FILECMD conftest.o` in
+ *32-bit*)
+ case $host in
+ x86_64-*kfreebsd*-gnu)
+ LD="${LD-ld} -m elf_i386_fbsd"
+ ;;
+ x86_64-*linux*)
+ case `$FILECMD conftest.o` in
+ *x86-64*)
+ LD="${LD-ld} -m elf32_x86_64"
+ ;;
+ *)
+ LD="${LD-ld} -m elf_i386"
+ ;;
+ esac
+ ;;
+ powerpc64le-*linux*)
+ LD="${LD-ld} -m elf32lppclinux"
+ ;;
+ powerpc64-*linux*)
+ LD="${LD-ld} -m elf32ppclinux"
+ ;;
+ s390x-*linux*)
+ LD="${LD-ld} -m elf_s390"
+ ;;
+ sparc64-*linux*)
+ LD="${LD-ld} -m elf32_sparc"
+ ;;
+ esac
+ ;;
+ *64-bit*)
+ case $host in
+ x86_64-*kfreebsd*-gnu)
+ LD="${LD-ld} -m elf_x86_64_fbsd"
+ ;;
+ x86_64-*linux*)
+ LD="${LD-ld} -m elf_x86_64"
+ ;;
+ powerpcle-*linux*)
+ LD="${LD-ld} -m elf64lppc"
+ ;;
+ powerpc-*linux*)
+ LD="${LD-ld} -m elf64ppc"
+ ;;
+ s390*-*linux*|s390*-*tpf*)
+ LD="${LD-ld} -m elf64_s390"
+ ;;
+ sparc*-*linux*)
+ LD="${LD-ld} -m elf64_sparc"
+ ;;
+ esac
+ ;;
+ esac
+ fi
+ rm -rf conftest*
+ ;;
+
+*-*-sco3.2v5*)
+ # On SCO OpenServer 5, we need -belf to get full-featured binaries.
+ SAVE_CFLAGS=$CFLAGS
+ CFLAGS="$CFLAGS -belf"
+ AC_CACHE_CHECK([whether the C compiler needs -belf], lt_cv_cc_needs_belf,
+ [AC_LANG_PUSH(C)
+ AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],[[]])],[lt_cv_cc_needs_belf=yes],[lt_cv_cc_needs_belf=no])
+ AC_LANG_POP])
+ if test yes != "$lt_cv_cc_needs_belf"; then
+ # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf
+ CFLAGS=$SAVE_CFLAGS
+ fi
+ ;;
+*-*solaris*)
+ # Find out what ABI is being produced by ac_compile, and set linker
+ # options accordingly.
+ echo 'int i;' > conftest.$ac_ext
+ if AC_TRY_EVAL(ac_compile); then
+ case `$FILECMD conftest.o` in
+ *64-bit*)
+ case $lt_cv_prog_gnu_ld in
+ yes*)
+ case $host in
+ i?86-*-solaris*|x86_64-*-solaris*)
+ LD="${LD-ld} -m elf_x86_64"
+ ;;
+ sparc*-*-solaris*)
+ LD="${LD-ld} -m elf64_sparc"
+ ;;
+ esac
+ # GNU ld 2.21 introduced _sol2 emulations. Use them if available.
+ if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then
+ LD=${LD-ld}_sol2
+ fi
+ ;;
+ *)
+ if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then
+ LD="${LD-ld} -64"
+ fi
+ ;;
+ esac
+ ;;
+ esac
+ fi
+ rm -rf conftest*
+ ;;
+esac
+
+need_locks=$enable_libtool_lock
+])# _LT_ENABLE_LOCK
+
+
+# _LT_PROG_AR
+# -----------
+m4_defun([_LT_PROG_AR],
+[AC_CHECK_TOOLS(AR, [ar], false)
+: ${AR=ar}
+_LT_DECL([], [AR], [1], [The archiver])
+
+# Use ARFLAGS variable as AR's operation code to sync the variable naming with
+# Automake. If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have
+# higher priority because thats what people were doing historically (setting
+# ARFLAGS for automake and AR_FLAGS for libtool). FIXME: Make the AR_FLAGS
+# variable obsoleted/removed.
+
+test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr}
+lt_ar_flags=$AR_FLAGS
+_LT_DECL([], [lt_ar_flags], [0], [Flags to create an archive (by configure)])
+
+# Make AR_FLAGS overridable by 'make ARFLAGS='. Don't try to run-time override
+# by AR_FLAGS because that was never working and AR_FLAGS is about to die.
+_LT_DECL([], [AR_FLAGS], [\@S|@{ARFLAGS-"\@S|@lt_ar_flags"}],
+ [Flags to create an archive])
+
+AC_CACHE_CHECK([for archiver @FILE support], [lt_cv_ar_at_file],
+ [lt_cv_ar_at_file=no
+ AC_COMPILE_IFELSE([AC_LANG_PROGRAM],
+ [echo conftest.$ac_objext > conftest.lst
+ lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&AS_MESSAGE_LOG_FD'
+ AC_TRY_EVAL([lt_ar_try])
+ if test 0 -eq "$ac_status"; then
+ # Ensure the archiver fails upon bogus file names.
+ rm -f conftest.$ac_objext libconftest.a
+ AC_TRY_EVAL([lt_ar_try])
+ if test 0 -ne "$ac_status"; then
+ lt_cv_ar_at_file=@
+ fi
+ fi
+ rm -f conftest.* libconftest.a
+ ])
+ ])
+
+if test no = "$lt_cv_ar_at_file"; then
+ archiver_list_spec=
+else
+ archiver_list_spec=$lt_cv_ar_at_file
+fi
+_LT_DECL([], [archiver_list_spec], [1],
+ [How to feed a file listing to the archiver])
+])# _LT_PROG_AR
+
+
+# _LT_CMD_OLD_ARCHIVE
+# -------------------
+m4_defun([_LT_CMD_OLD_ARCHIVE],
+[_LT_PROG_AR
+
+AC_CHECK_TOOL(STRIP, strip, :)
+test -z "$STRIP" && STRIP=:
+_LT_DECL([], [STRIP], [1], [A symbol stripping program])
+
+AC_CHECK_TOOL(RANLIB, ranlib, :)
+test -z "$RANLIB" && RANLIB=:
+_LT_DECL([], [RANLIB], [1],
+ [Commands used to install an old-style archive])
+
+# Determine commands to create old-style static archives.
+old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs'
+old_postinstall_cmds='chmod 644 $oldlib'
+old_postuninstall_cmds=
+
+if test -n "$RANLIB"; then
+ case $host_os in
+ bitrig* | openbsd*)
+ old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB -t \$tool_oldlib"
+ ;;
+ *)
+ old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib"
+ ;;
+ esac
+ old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib"
+fi
+
+case $host_os in
+ darwin*)
+ lock_old_archive_extraction=yes ;;
+ *)
+ lock_old_archive_extraction=no ;;
+esac
+_LT_DECL([], [old_postinstall_cmds], [2])
+_LT_DECL([], [old_postuninstall_cmds], [2])
+_LT_TAGDECL([], [old_archive_cmds], [2],
+ [Commands used to build an old-style archive])
+_LT_DECL([], [lock_old_archive_extraction], [0],
+ [Whether to use a lock for old archive extraction])
+])# _LT_CMD_OLD_ARCHIVE
+
+
+# _LT_COMPILER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS,
+# [OUTPUT-FILE], [ACTION-SUCCESS], [ACTION-FAILURE])
+# ----------------------------------------------------------------
+# Check whether the given compiler option works
+AC_DEFUN([_LT_COMPILER_OPTION],
+[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
+m4_require([_LT_DECL_SED])dnl
+AC_CACHE_CHECK([$1], [$2],
+ [$2=no
+ m4_if([$4], , [ac_outfile=conftest.$ac_objext], [ac_outfile=$4])
+ echo "$lt_simple_compile_test_code" > conftest.$ac_ext
+ lt_compiler_flag="$3" ## exclude from sc_useless_quotes_in_assignment
+ # Insert the option either (1) after the last *FLAGS variable, or
+ # (2) before a word containing "conftest.", or (3) at the end.
+ # Note that $ac_compile itself does not contain backslashes and begins
+ # with a dollar sign (not a hyphen), so the echo should work correctly.
+ # The option is referenced via a variable to avoid confusing sed.
+ lt_compile=`echo "$ac_compile" | $SED \
+ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
+ -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \
+ -e 's:$: $lt_compiler_flag:'`
+ (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD)
+ (eval "$lt_compile" 2>conftest.err)
+ ac_status=$?
+ cat conftest.err >&AS_MESSAGE_LOG_FD
+ echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
+ if (exit $ac_status) && test -s "$ac_outfile"; then
+ # The compiler can only warn and ignore the option if not recognized
+ # So say no if there are warnings other than the usual output.
+ $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
+ $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
+ if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
+ $2=yes
+ fi
+ fi
+ $RM conftest*
+])
+
+if test yes = "[$]$2"; then
+ m4_if([$5], , :, [$5])
+else
+ m4_if([$6], , :, [$6])
+fi
+])# _LT_COMPILER_OPTION
+
+# Old name:
+AU_ALIAS([AC_LIBTOOL_COMPILER_OPTION], [_LT_COMPILER_OPTION])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_LIBTOOL_COMPILER_OPTION], [])
+
+
+# _LT_LINKER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS,
+# [ACTION-SUCCESS], [ACTION-FAILURE])
+# ----------------------------------------------------
+# Check whether the given linker option works
+AC_DEFUN([_LT_LINKER_OPTION],
+[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
+m4_require([_LT_DECL_SED])dnl
+AC_CACHE_CHECK([$1], [$2],
+ [$2=no
+ save_LDFLAGS=$LDFLAGS
+ LDFLAGS="$LDFLAGS $3"
+ echo "$lt_simple_link_test_code" > conftest.$ac_ext
+ if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
+ # The linker can only warn and ignore the option if not recognized
+ # So say no if there are warnings
+ if test -s conftest.err; then
+ # Append any errors to the config.log.
+ cat conftest.err 1>&AS_MESSAGE_LOG_FD
+ $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
+ $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
+ if diff conftest.exp conftest.er2 >/dev/null; then
+ $2=yes
+ fi
+ else
+ $2=yes
+ fi
+ fi
+ $RM -r conftest*
+ LDFLAGS=$save_LDFLAGS
+])
+
+if test yes = "[$]$2"; then
+ m4_if([$4], , :, [$4])
+else
+ m4_if([$5], , :, [$5])
+fi
+])# _LT_LINKER_OPTION
+
+# Old name:
+AU_ALIAS([AC_LIBTOOL_LINKER_OPTION], [_LT_LINKER_OPTION])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_LIBTOOL_LINKER_OPTION], [])
+
+
+# LT_CMD_MAX_LEN
+#---------------
+AC_DEFUN([LT_CMD_MAX_LEN],
+[AC_REQUIRE([AC_CANONICAL_HOST])dnl
+# find the maximum length of command line arguments
+AC_MSG_CHECKING([the maximum length of command line arguments])
+AC_CACHE_VAL([lt_cv_sys_max_cmd_len], [dnl
+ i=0
+ teststring=ABCD
+
+ case $build_os in
+ msdosdjgpp*)
+ # On DJGPP, this test can blow up pretty badly due to problems in libc
+ # (any single argument exceeding 2000 bytes causes a buffer overrun
+ # during glob expansion). Even if it were fixed, the result of this
+ # check would be larger than it should be.
+ lt_cv_sys_max_cmd_len=12288; # 12K is about right
+ ;;
+
+ gnu*)
+ # Under GNU Hurd, this test is not required because there is
+ # no limit to the length of command line arguments.
+ # Libtool will interpret -1 as no limit whatsoever
+ lt_cv_sys_max_cmd_len=-1;
+ ;;
+
+ cygwin* | mingw* | cegcc*)
+ # On Win9x/ME, this test blows up -- it succeeds, but takes
+ # about 5 minutes as the teststring grows exponentially.
+ # Worse, since 9x/ME are not pre-emptively multitasking,
+ # you end up with a "frozen" computer, even though with patience
+ # the test eventually succeeds (with a max line length of 256k).
+ # Instead, let's just punt: use the minimum linelength reported by
+ # all of the supported platforms: 8192 (on NT/2K/XP).
+ lt_cv_sys_max_cmd_len=8192;
+ ;;
+
+ mint*)
+ # On MiNT this can take a long time and run out of memory.
+ lt_cv_sys_max_cmd_len=8192;
+ ;;
+
+ amigaos*)
+ # On AmigaOS with pdksh, this test takes hours, literally.
+ # So we just punt and use a minimum line length of 8192.
+ lt_cv_sys_max_cmd_len=8192;
+ ;;
+
+ bitrig* | darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
+ # This has been around since 386BSD, at least. Likely further.
+ if test -x /sbin/sysctl; then
+ lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
+ elif test -x /usr/sbin/sysctl; then
+ lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
+ else
+ lt_cv_sys_max_cmd_len=65536 # usable default for all BSDs
+ fi
+ # And add a safety zone
+ lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
+ lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
+ ;;
+
+ interix*)
+ # We know the value 262144 and hardcode it with a safety zone (like BSD)
+ lt_cv_sys_max_cmd_len=196608
+ ;;
+
+ os2*)
+ # The test takes a long time on OS/2.
+ lt_cv_sys_max_cmd_len=8192
+ ;;
+
+ osf*)
+ # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
+ # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
+ # nice to cause kernel panics so lets avoid the loop below.
+ # First set a reasonable default.
+ lt_cv_sys_max_cmd_len=16384
+ #
+ if test -x /sbin/sysconfig; then
+ case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
+ *1*) lt_cv_sys_max_cmd_len=-1 ;;
+ esac
+ fi
+ ;;
+ sco3.2v5*)
+ lt_cv_sys_max_cmd_len=102400
+ ;;
+ sysv5* | sco5v6* | sysv4.2uw2*)
+ kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
+ if test -n "$kargmax"; then
+ lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[[ ]]//'`
+ else
+ lt_cv_sys_max_cmd_len=32768
+ fi
+ ;;
+ *)
+ lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
+ if test -n "$lt_cv_sys_max_cmd_len" && \
+ test undefined != "$lt_cv_sys_max_cmd_len"; then
+ lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
+ lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
+ else
+ # Make teststring a little bigger before we do anything with it.
+ # a 1K string should be a reasonable start.
+ for i in 1 2 3 4 5 6 7 8; do
+ teststring=$teststring$teststring
+ done
+ SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
+ # If test is not a shell built-in, we'll probably end up computing a
+ # maximum length that is only half of the actual maximum length, but
+ # we can't tell.
+ while { test X`env echo "$teststring$teststring" 2>/dev/null` \
+ = "X$teststring$teststring"; } >/dev/null 2>&1 &&
+ test 17 != "$i" # 1/2 MB should be enough
+ do
+ i=`expr $i + 1`
+ teststring=$teststring$teststring
+ done
+ # Only check the string length outside the loop.
+ lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
+ teststring=
+ # Add a significant safety factor because C++ compilers can tack on
+ # massive amounts of additional arguments before passing them to the
+ # linker. It appears as though 1/2 is a usable value.
+ lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
+ fi
+ ;;
+ esac
+])
+if test -n "$lt_cv_sys_max_cmd_len"; then
+ AC_MSG_RESULT($lt_cv_sys_max_cmd_len)
+else
+ AC_MSG_RESULT(none)
+fi
+max_cmd_len=$lt_cv_sys_max_cmd_len
+_LT_DECL([], [max_cmd_len], [0],
+ [What is the maximum length of a command?])
+])# LT_CMD_MAX_LEN
+
+# Old name:
+AU_ALIAS([AC_LIBTOOL_SYS_MAX_CMD_LEN], [LT_CMD_MAX_LEN])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], [])
+
+
+# _LT_HEADER_DLFCN
+# ----------------
+m4_defun([_LT_HEADER_DLFCN],
+[AC_CHECK_HEADERS([dlfcn.h], [], [], [AC_INCLUDES_DEFAULT])dnl
+])# _LT_HEADER_DLFCN
+
+
+# _LT_TRY_DLOPEN_SELF (ACTION-IF-TRUE, ACTION-IF-TRUE-W-USCORE,
+# ACTION-IF-FALSE, ACTION-IF-CROSS-COMPILING)
+# ----------------------------------------------------------------
+m4_defun([_LT_TRY_DLOPEN_SELF],
+[m4_require([_LT_HEADER_DLFCN])dnl
+if test yes = "$cross_compiling"; then :
+ [$4]
+else
+ lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
+ lt_status=$lt_dlunknown
+ cat > conftest.$ac_ext <<_LT_EOF
+[#line $LINENO "configure"
+#include "confdefs.h"
+
+#if HAVE_DLFCN_H
+#include
+#endif
+
+#include
+
+#ifdef RTLD_GLOBAL
+# define LT_DLGLOBAL RTLD_GLOBAL
+#else
+# ifdef DL_GLOBAL
+# define LT_DLGLOBAL DL_GLOBAL
+# else
+# define LT_DLGLOBAL 0
+# endif
+#endif
+
+/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
+ find out it does not work in some platform. */
+#ifndef LT_DLLAZY_OR_NOW
+# ifdef RTLD_LAZY
+# define LT_DLLAZY_OR_NOW RTLD_LAZY
+# else
+# ifdef DL_LAZY
+# define LT_DLLAZY_OR_NOW DL_LAZY
+# else
+# ifdef RTLD_NOW
+# define LT_DLLAZY_OR_NOW RTLD_NOW
+# else
+# ifdef DL_NOW
+# define LT_DLLAZY_OR_NOW DL_NOW
+# else
+# define LT_DLLAZY_OR_NOW 0
+# endif
+# endif
+# endif
+# endif
+#endif
+
+/* When -fvisibility=hidden is used, assume the code has been annotated
+ correspondingly for the symbols needed. */
+#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
+int fnord () __attribute__((visibility("default")));
+#endif
+
+int fnord () { return 42; }
+int main ()
+{
+ void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
+ int status = $lt_dlunknown;
+
+ if (self)
+ {
+ if (dlsym (self,"fnord")) status = $lt_dlno_uscore;
+ else
+ {
+ if (dlsym( self,"_fnord")) status = $lt_dlneed_uscore;
+ else puts (dlerror ());
+ }
+ /* dlclose (self); */
+ }
+ else
+ puts (dlerror ());
+
+ return status;
+}]
+_LT_EOF
+ if AC_TRY_EVAL(ac_link) && test -s "conftest$ac_exeext" 2>/dev/null; then
+ (./conftest; exit; ) >&AS_MESSAGE_LOG_FD 2>/dev/null
+ lt_status=$?
+ case x$lt_status in
+ x$lt_dlno_uscore) $1 ;;
+ x$lt_dlneed_uscore) $2 ;;
+ x$lt_dlunknown|x*) $3 ;;
+ esac
+ else :
+ # compilation failed
+ $3
+ fi
+fi
+rm -fr conftest*
+])# _LT_TRY_DLOPEN_SELF
+
+
+# LT_SYS_DLOPEN_SELF
+# ------------------
+AC_DEFUN([LT_SYS_DLOPEN_SELF],
+[m4_require([_LT_HEADER_DLFCN])dnl
+if test yes != "$enable_dlopen"; then
+ enable_dlopen=unknown
+ enable_dlopen_self=unknown
+ enable_dlopen_self_static=unknown
+else
+ lt_cv_dlopen=no
+ lt_cv_dlopen_libs=
+
+ case $host_os in
+ beos*)
+ lt_cv_dlopen=load_add_on
+ lt_cv_dlopen_libs=
+ lt_cv_dlopen_self=yes
+ ;;
+
+ mingw* | pw32* | cegcc*)
+ lt_cv_dlopen=LoadLibrary
+ lt_cv_dlopen_libs=
+ ;;
+
+ cygwin*)
+ lt_cv_dlopen=dlopen
+ lt_cv_dlopen_libs=
+ ;;
+
+ darwin*)
+ # if libdl is installed we need to link against it
+ AC_CHECK_LIB([dl], [dlopen],
+ [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],[
+ lt_cv_dlopen=dyld
+ lt_cv_dlopen_libs=
+ lt_cv_dlopen_self=yes
+ ])
+ ;;
+
+ tpf*)
+ # Don't try to run any link tests for TPF. We know it's impossible
+ # because TPF is a cross-compiler, and we know how we open DSOs.
+ lt_cv_dlopen=dlopen
+ lt_cv_dlopen_libs=
+ lt_cv_dlopen_self=no
+ ;;
+
+ *)
+ AC_CHECK_FUNC([shl_load],
+ [lt_cv_dlopen=shl_load],
+ [AC_CHECK_LIB([dld], [shl_load],
+ [lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld],
+ [AC_CHECK_FUNC([dlopen],
+ [lt_cv_dlopen=dlopen],
+ [AC_CHECK_LIB([dl], [dlopen],
+ [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],
+ [AC_CHECK_LIB([svld], [dlopen],
+ [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld],
+ [AC_CHECK_LIB([dld], [dld_link],
+ [lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld])
+ ])
+ ])
+ ])
+ ])
+ ])
+ ;;
+ esac
+
+ if test no = "$lt_cv_dlopen"; then
+ enable_dlopen=no
+ else
+ enable_dlopen=yes
+ fi
+
+ case $lt_cv_dlopen in
+ dlopen)
+ save_CPPFLAGS=$CPPFLAGS
+ test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
+
+ save_LDFLAGS=$LDFLAGS
+ wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
+
+ save_LIBS=$LIBS
+ LIBS="$lt_cv_dlopen_libs $LIBS"
+
+ AC_CACHE_CHECK([whether a program can dlopen itself],
+ lt_cv_dlopen_self, [dnl
+ _LT_TRY_DLOPEN_SELF(
+ lt_cv_dlopen_self=yes, lt_cv_dlopen_self=yes,
+ lt_cv_dlopen_self=no, lt_cv_dlopen_self=cross)
+ ])
+
+ if test yes = "$lt_cv_dlopen_self"; then
+ wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
+ AC_CACHE_CHECK([whether a statically linked program can dlopen itself],
+ lt_cv_dlopen_self_static, [dnl
+ _LT_TRY_DLOPEN_SELF(
+ lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=yes,
+ lt_cv_dlopen_self_static=no, lt_cv_dlopen_self_static=cross)
+ ])
+ fi
+
+ CPPFLAGS=$save_CPPFLAGS
+ LDFLAGS=$save_LDFLAGS
+ LIBS=$save_LIBS
+ ;;
+ esac
+
+ case $lt_cv_dlopen_self in
+ yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
+ *) enable_dlopen_self=unknown ;;
+ esac
+
+ case $lt_cv_dlopen_self_static in
+ yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
+ *) enable_dlopen_self_static=unknown ;;
+ esac
+fi
+_LT_DECL([dlopen_support], [enable_dlopen], [0],
+ [Whether dlopen is supported])
+_LT_DECL([dlopen_self], [enable_dlopen_self], [0],
+ [Whether dlopen of programs is supported])
+_LT_DECL([dlopen_self_static], [enable_dlopen_self_static], [0],
+ [Whether dlopen of statically linked programs is supported])
+])# LT_SYS_DLOPEN_SELF
+
+# Old name:
+AU_ALIAS([AC_LIBTOOL_DLOPEN_SELF], [LT_SYS_DLOPEN_SELF])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_LIBTOOL_DLOPEN_SELF], [])
+
+
+# _LT_COMPILER_C_O([TAGNAME])
+# ---------------------------
+# Check to see if options -c and -o are simultaneously supported by compiler.
+# This macro does not hard code the compiler like AC_PROG_CC_C_O.
+m4_defun([_LT_COMPILER_C_O],
+[m4_require([_LT_DECL_SED])dnl
+m4_require([_LT_FILEUTILS_DEFAULTS])dnl
+m4_require([_LT_TAG_COMPILER])dnl
+AC_CACHE_CHECK([if $compiler supports -c -o file.$ac_objext],
+ [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)],
+ [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=no
+ $RM -r conftest 2>/dev/null
+ mkdir conftest
+ cd conftest
+ mkdir out
+ echo "$lt_simple_compile_test_code" > conftest.$ac_ext
+
+ lt_compiler_flag="-o out/conftest2.$ac_objext"
+ # Insert the option either (1) after the last *FLAGS variable, or
+ # (2) before a word containing "conftest.", or (3) at the end.
+ # Note that $ac_compile itself does not contain backslashes and begins
+ # with a dollar sign (not a hyphen), so the echo should work correctly.
+ lt_compile=`echo "$ac_compile" | $SED \
+ -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
+ -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \
+ -e 's:$: $lt_compiler_flag:'`
+ (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD)
+ (eval "$lt_compile" 2>out/conftest.err)
+ ac_status=$?
+ cat out/conftest.err >&AS_MESSAGE_LOG_FD
+ echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
+ if (exit $ac_status) && test -s out/conftest2.$ac_objext
+ then
+ # The compiler can only warn and ignore the option if not recognized
+ # So say no if there are warnings
+ $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
+ $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
+ if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
+ _LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes
+ fi
+ fi
+ chmod u+w . 2>&AS_MESSAGE_LOG_FD
+ $RM conftest*
+ # SGI C++ compiler will create directory out/ii_files/ for
+ # template instantiation
+ test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
+ $RM out/* && rmdir out
+ cd ..
+ $RM -r conftest
+ $RM conftest*
+])
+_LT_TAGDECL([compiler_c_o], [lt_cv_prog_compiler_c_o], [1],
+ [Does compiler simultaneously support -c and -o options?])
+])# _LT_COMPILER_C_O
+
+
+# _LT_COMPILER_FILE_LOCKS([TAGNAME])
+# ----------------------------------
+# Check to see if we can do hard links to lock some files if needed
+m4_defun([_LT_COMPILER_FILE_LOCKS],
+[m4_require([_LT_ENABLE_LOCK])dnl
+m4_require([_LT_FILEUTILS_DEFAULTS])dnl
+_LT_COMPILER_C_O([$1])
+
+hard_links=nottested
+if test no = "$_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)" && test no != "$need_locks"; then
+ # do not overwrite the value of need_locks provided by the user
+ AC_MSG_CHECKING([if we can lock with hard links])
+ hard_links=yes
+ $RM conftest*
+ ln conftest.a conftest.b 2>/dev/null && hard_links=no
+ touch conftest.a
+ ln conftest.a conftest.b 2>&5 || hard_links=no
+ ln conftest.a conftest.b 2>/dev/null && hard_links=no
+ AC_MSG_RESULT([$hard_links])
+ if test no = "$hard_links"; then
+ AC_MSG_WARN(['$CC' does not support '-c -o', so 'make -j' may be unsafe])
+ need_locks=warn
+ fi
+else
+ need_locks=no
+fi
+_LT_DECL([], [need_locks], [1], [Must we lock files when doing compilation?])
+])# _LT_COMPILER_FILE_LOCKS
+
+
+# _LT_CHECK_OBJDIR
+# ----------------
+m4_defun([_LT_CHECK_OBJDIR],
+[AC_CACHE_CHECK([for objdir], [lt_cv_objdir],
+[rm -f .libs 2>/dev/null
+mkdir .libs 2>/dev/null
+if test -d .libs; then
+ lt_cv_objdir=.libs
+else
+ # MS-DOS does not allow filenames that begin with a dot.
+ lt_cv_objdir=_libs
+fi
+rmdir .libs 2>/dev/null])
+objdir=$lt_cv_objdir
+_LT_DECL([], [objdir], [0],
+ [The name of the directory that contains temporary libtool files])dnl
+m4_pattern_allow([LT_OBJDIR])dnl
+AC_DEFINE_UNQUOTED([LT_OBJDIR], "$lt_cv_objdir/",
+ [Define to the sub-directory where libtool stores uninstalled libraries.])
+])# _LT_CHECK_OBJDIR
+
+
+# _LT_LINKER_HARDCODE_LIBPATH([TAGNAME])
+# --------------------------------------
+# Check hardcoding attributes.
+m4_defun([_LT_LINKER_HARDCODE_LIBPATH],
+[AC_MSG_CHECKING([how to hardcode library paths into programs])
+_LT_TAGVAR(hardcode_action, $1)=
+if test -n "$_LT_TAGVAR(hardcode_libdir_flag_spec, $1)" ||
+ test -n "$_LT_TAGVAR(runpath_var, $1)" ||
+ test yes = "$_LT_TAGVAR(hardcode_automatic, $1)"; then
+
+ # We can hardcode non-existent directories.
+ if test no != "$_LT_TAGVAR(hardcode_direct, $1)" &&
+ # If the only mechanism to avoid hardcoding is shlibpath_var, we
+ # have to relink, otherwise we might link with an installed library
+ # when we should be linking with a yet-to-be-installed one
+ ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, $1)" &&
+ test no != "$_LT_TAGVAR(hardcode_minus_L, $1)"; then
+ # Linking always hardcodes the temporary library directory.
+ _LT_TAGVAR(hardcode_action, $1)=relink
+ else
+ # We can link without hardcoding, and we can hardcode nonexisting dirs.
+ _LT_TAGVAR(hardcode_action, $1)=immediate
+ fi
+else
+ # We cannot hardcode anything, or else we can only hardcode existing
+ # directories.
+ _LT_TAGVAR(hardcode_action, $1)=unsupported
+fi
+AC_MSG_RESULT([$_LT_TAGVAR(hardcode_action, $1)])
+
+if test relink = "$_LT_TAGVAR(hardcode_action, $1)" ||
+ test yes = "$_LT_TAGVAR(inherit_rpath, $1)"; then
+ # Fast installation is not supported
+ enable_fast_install=no
+elif test yes = "$shlibpath_overrides_runpath" ||
+ test no = "$enable_shared"; then
+ # Fast installation is not necessary
+ enable_fast_install=needless
+fi
+_LT_TAGDECL([], [hardcode_action], [0],
+ [How to hardcode a shared library path into an executable])
+])# _LT_LINKER_HARDCODE_LIBPATH
+
+
+# _LT_CMD_STRIPLIB
+# ----------------
+m4_defun([_LT_CMD_STRIPLIB],
+[m4_require([_LT_DECL_EGREP])
+striplib=
+old_striplib=
+AC_MSG_CHECKING([whether stripping libraries is possible])
+if test -z "$STRIP"; then
+ AC_MSG_RESULT([no])
+else
+ if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then
+ old_striplib="$STRIP --strip-debug"
+ striplib="$STRIP --strip-unneeded"
+ AC_MSG_RESULT([yes])
+ else
+ case $host_os in
+ darwin*)
+ # FIXME - insert some real tests, host_os isn't really good enough
+ striplib="$STRIP -x"
+ old_striplib="$STRIP -S"
+ AC_MSG_RESULT([yes])
+ ;;
+ freebsd*)
+ if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then
+ old_striplib="$STRIP --strip-debug"
+ striplib="$STRIP --strip-unneeded"
+ AC_MSG_RESULT([yes])
+ else
+ AC_MSG_RESULT([no])
+ fi
+ ;;
+ *)
+ AC_MSG_RESULT([no])
+ ;;
+ esac
+ fi
+fi
+_LT_DECL([], [old_striplib], [1], [Commands to strip libraries])
+_LT_DECL([], [striplib], [1])
+])# _LT_CMD_STRIPLIB
+
+
+# _LT_PREPARE_MUNGE_PATH_LIST
+# ---------------------------
+# Make sure func_munge_path_list() is defined correctly.
+m4_defun([_LT_PREPARE_MUNGE_PATH_LIST],
+[[# func_munge_path_list VARIABLE PATH
+# -----------------------------------
+# VARIABLE is name of variable containing _space_ separated list of
+# directories to be munged by the contents of PATH, which is string
+# having a format:
+# "DIR[:DIR]:"
+# string "DIR[ DIR]" will be prepended to VARIABLE
+# ":DIR[:DIR]"
+# string "DIR[ DIR]" will be appended to VARIABLE
+# "DIRP[:DIRP]::[DIRA:]DIRA"
+# string "DIRP[ DIRP]" will be prepended to VARIABLE and string
+# "DIRA[ DIRA]" will be appended to VARIABLE
+# "DIR[:DIR]"
+# VARIABLE will be replaced by "DIR[ DIR]"
+func_munge_path_list ()
+{
+ case x@S|@2 in
+ x)
+ ;;
+ *:)
+ eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
+ ;;
+ x:*)
+ eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
+ ;;
+ *::*)
+ eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
+ eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
+ ;;
+ *)
+ eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
+ ;;
+ esac
+}
+]])# _LT_PREPARE_PATH_LIST
+
+
+# _LT_SYS_DYNAMIC_LINKER([TAG])
+# -----------------------------
+# PORTME Fill in your ld.so characteristics
+m4_defun([_LT_SYS_DYNAMIC_LINKER],
+[AC_REQUIRE([AC_CANONICAL_HOST])dnl
+m4_require([_LT_DECL_EGREP])dnl
+m4_require([_LT_FILEUTILS_DEFAULTS])dnl
+m4_require([_LT_DECL_OBJDUMP])dnl
+m4_require([_LT_DECL_SED])dnl
+m4_require([_LT_CHECK_SHELL_FEATURES])dnl
+m4_require([_LT_PREPARE_MUNGE_PATH_LIST])dnl
+AC_MSG_CHECKING([dynamic linker characteristics])
+m4_if([$1],
+ [], [
+if test yes = "$GCC"; then
+ case $host_os in
+ darwin*) lt_awk_arg='/^libraries:/,/LR/' ;;
+ *) lt_awk_arg='/^libraries:/' ;;
+ esac
+ case $host_os in
+ mingw* | cegcc*) lt_sed_strip_eq='s|=\([[A-Za-z]]:\)|\1|g' ;;
+ *) lt_sed_strip_eq='s|=/|/|g' ;;
+ esac
+ lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq`
+ case $lt_search_path_spec in
+ *\;*)
+ # if the path contains ";" then we assume it to be the separator
+ # otherwise default to the standard path separator (i.e. ":") - it is
+ # assumed that no part of a normal pathname contains ";" but that should
+ # okay in the real world where ";" in dirpaths is itself problematic.
+ lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'`
+ ;;
+ *)
+ lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"`
+ ;;
+ esac
+ # Ok, now we have the path, separated by spaces, we can step through it
+ # and add multilib dir if necessary...
+ lt_tmp_lt_search_path_spec=
+ lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null`
+ # ...but if some path component already ends with the multilib dir we assume
+ # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer).
+ case "$lt_multi_os_dir; $lt_search_path_spec " in
+ "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*)
+ lt_multi_os_dir=
+ ;;
+ esac
+ for lt_sys_path in $lt_search_path_spec; do
+ if test -d "$lt_sys_path$lt_multi_os_dir"; then
+ lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir"
+ elif test -n "$lt_multi_os_dir"; then
+ test -d "$lt_sys_path" && \
+ lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path"
+ fi
+ done
+ lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk '
+BEGIN {RS = " "; FS = "/|\n";} {
+ lt_foo = "";
+ lt_count = 0;
+ for (lt_i = NF; lt_i > 0; lt_i--) {
+ if ($lt_i != "" && $lt_i != ".") {
+ if ($lt_i == "..") {
+ lt_count++;
+ } else {
+ if (lt_count == 0) {
+ lt_foo = "/" $lt_i lt_foo;
+ } else {
+ lt_count--;
+ }
+ }
+ }
+ }
+ if (lt_foo != "") { lt_freq[[lt_foo]]++; }
+ if (lt_freq[[lt_foo]] == 1) { print lt_foo; }
+}'`
+ # AWK program above erroneously prepends '/' to C:/dos/paths
+ # for these hosts.
+ case $host_os in
+ mingw* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\
+ $SED 's|/\([[A-Za-z]]:\)|\1|g'` ;;
+ esac
+ sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP`
+else
+ sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
+fi])
+library_names_spec=
+libname_spec='lib$name'
+soname_spec=
+shrext_cmds=.so
+postinstall_cmds=
+postuninstall_cmds=
+finish_cmds=
+finish_eval=
+shlibpath_var=
+shlibpath_overrides_runpath=unknown
+version_type=none
+dynamic_linker="$host_os ld.so"
+sys_lib_dlsearch_path_spec="/lib /usr/lib"
+need_lib_prefix=unknown
+hardcode_into_libs=no
+
+# when you set need_version to no, make sure it does not cause -set_version
+# flags to be left without arguments
+need_version=unknown
+
+AC_ARG_VAR([LT_SYS_LIBRARY_PATH],
+[User-defined run-time library search path.])
+
+case $host_os in
+aix3*)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ library_names_spec='$libname$release$shared_ext$versuffix $libname.a'
+ shlibpath_var=LIBPATH
+
+ # AIX 3 has no versioning support, so we append a major version to the name.
+ soname_spec='$libname$release$shared_ext$major'
+ ;;
+
+aix[[4-9]]*)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ need_lib_prefix=no
+ need_version=no
+ hardcode_into_libs=yes
+ if test ia64 = "$host_cpu"; then
+ # AIX 5 supports IA64
+ library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext'
+ shlibpath_var=LD_LIBRARY_PATH
+ else
+ # With GCC up to 2.95.x, collect2 would create an import file
+ # for dependence libraries. The import file would start with
+ # the line '#! .'. This would cause the generated library to
+ # depend on '.', always an invalid library. This was fixed in
+ # development snapshots of GCC prior to 3.0.
+ case $host_os in
+ aix4 | aix4.[[01]] | aix4.[[01]].*)
+ if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)'
+ echo ' yes '
+ echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then
+ :
+ else
+ can_build_shared=no
+ fi
+ ;;
+ esac
+ # Using Import Files as archive members, it is possible to support
+ # filename-based versioning of shared library archives on AIX. While
+ # this would work for both with and without runtime linking, it will
+ # prevent static linking of such archives. So we do filename-based
+ # shared library versioning with .so extension only, which is used
+ # when both runtime linking and shared linking is enabled.
+ # Unfortunately, runtime linking may impact performance, so we do
+ # not want this to be the default eventually. Also, we use the
+ # versioned .so libs for executables only if there is the -brtl
+ # linker flag in LDFLAGS as well, or --with-aix-soname=svr4 only.
+ # To allow for filename-based versioning support, we need to create
+ # libNAME.so.V as an archive file, containing:
+ # *) an Import File, referring to the versioned filename of the
+ # archive as well as the shared archive member, telling the
+ # bitwidth (32 or 64) of that shared object, and providing the
+ # list of exported symbols of that shared object, eventually
+ # decorated with the 'weak' keyword
+ # *) the shared object with the F_LOADONLY flag set, to really avoid
+ # it being seen by the linker.
+ # At run time we better use the real file rather than another symlink,
+ # but for link time we create the symlink libNAME.so -> libNAME.so.V
+
+ case $with_aix_soname,$aix_use_runtimelinking in
+ # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct
+ # soname into executable. Probably we can add versioning support to
+ # collect2, so additional links can be useful in future.
+ aix,yes) # traditional libtool
+ dynamic_linker='AIX unversionable lib.so'
+ # If using run time linking (on AIX 4.2 or later) use lib.so
+ # instead of lib.a to let people know that these are not
+ # typical AIX shared libraries.
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ ;;
+ aix,no) # traditional AIX only
+ dynamic_linker='AIX lib.a[(]lib.so.V[)]'
+ # We preserve .a as extension for shared libraries through AIX4.2
+ # and later when we are not doing run time linking.
+ library_names_spec='$libname$release.a $libname.a'
+ soname_spec='$libname$release$shared_ext$major'
+ ;;
+ svr4,*) # full svr4 only
+ dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)]"
+ library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
+ # We do not specify a path in Import Files, so LIBPATH fires.
+ shlibpath_overrides_runpath=yes
+ ;;
+ *,yes) # both, prefer svr4
+ dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)], lib.a[(]lib.so.V[)]"
+ library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
+ # unpreferred sharedlib libNAME.a needs extra handling
+ postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"'
+ postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"'
+ # We do not specify a path in Import Files, so LIBPATH fires.
+ shlibpath_overrides_runpath=yes
+ ;;
+ *,no) # both, prefer aix
+ dynamic_linker="AIX lib.a[(]lib.so.V[)], lib.so.V[(]$shared_archive_member_spec.o[)]"
+ library_names_spec='$libname$release.a $libname.a'
+ soname_spec='$libname$release$shared_ext$major'
+ # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling
+ postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)'
+ postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"'
+ ;;
+ esac
+ shlibpath_var=LIBPATH
+ fi
+ ;;
+
+amigaos*)
+ case $host_cpu in
+ powerpc)
+ # Since July 2007 AmigaOS4 officially supports .so libraries.
+ # When compiling the executable, add -use-dynld -Lsobjs: to the compileline.
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ ;;
+ m68k)
+ library_names_spec='$libname.ixlibrary $libname.a'
+ # Create ${libname}_ixlibrary.a entries in /sys/libs.
+ finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([[^/]]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done'
+ ;;
+ esac
+ ;;
+
+beos*)
+ library_names_spec='$libname$shared_ext'
+ dynamic_linker="$host_os ld.so"
+ shlibpath_var=LIBRARY_PATH
+ ;;
+
+bsdi[[45]]*)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ need_version=no
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir'
+ shlibpath_var=LD_LIBRARY_PATH
+ sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib"
+ sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib"
+ # the default ld.so.conf also contains /usr/contrib/lib and
+ # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow
+ # libtool to hard-code these into programs
+ ;;
+
+cygwin* | mingw* | pw32* | cegcc*)
+ version_type=windows
+ shrext_cmds=.dll
+ need_version=no
+ need_lib_prefix=no
+
+ case $GCC,$cc_basename in
+ yes,*)
+ # gcc
+ library_names_spec='$libname.dll.a'
+ # DLL is installed to $(libdir)/../bin by postinstall_cmds
+ postinstall_cmds='base_file=`basename \$file`~
+ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
+ dldir=$destdir/`dirname \$dlpath`~
+ test -d \$dldir || mkdir -p \$dldir~
+ $install_prog $dir/$dlname \$dldir/$dlname~
+ chmod a+x \$dldir/$dlname~
+ if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
+ eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
+ fi'
+ postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
+ dlpath=$dir/\$dldll~
+ $RM \$dlpath'
+ shlibpath_overrides_runpath=yes
+
+ case $host_os in
+ cygwin*)
+ # Cygwin DLLs use 'cyg' prefix rather than 'lib'
+ soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
+m4_if([$1], [],[
+ sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"])
+ ;;
+ mingw* | cegcc*)
+ # MinGW DLLs use traditional 'lib' prefix
+ soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
+ ;;
+ pw32*)
+ # pw32 DLLs use 'pw' prefix rather than 'lib'
+ library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
+ ;;
+ esac
+ dynamic_linker='Win32 ld.exe'
+ ;;
+
+ *,cl* | *,icl*)
+ # Native MSVC or ICC
+ libname_spec='$name'
+ soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
+ library_names_spec='$libname.dll.lib'
+
+ case $build_os in
+ mingw*)
+ sys_lib_search_path_spec=
+ lt_save_ifs=$IFS
+ IFS=';'
+ for lt_path in $LIB
+ do
+ IFS=$lt_save_ifs
+ # Let DOS variable expansion print the short 8.3 style file name.
+ lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"`
+ sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path"
+ done
+ IFS=$lt_save_ifs
+ # Convert to MSYS style.
+ sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([[a-zA-Z]]\\):| /\\1|g' -e 's|^ ||'`
+ ;;
+ cygwin*)
+ # Convert to unix form, then to dos form, then back to unix form
+ # but this time dos style (no spaces!) so that the unix form looks
+ # like /cygdrive/c/PROGRA~1:/cygdr...
+ sys_lib_search_path_spec=`cygpath --path --unix "$LIB"`
+ sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null`
+ sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
+ ;;
+ *)
+ sys_lib_search_path_spec=$LIB
+ if $ECHO "$sys_lib_search_path_spec" | [$GREP ';[c-zC-Z]:/' >/dev/null]; then
+ # It is most probably a Windows format PATH.
+ sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
+ else
+ sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
+ fi
+ # FIXME: find the short name or the path components, as spaces are
+ # common. (e.g. "Program Files" -> "PROGRA~1")
+ ;;
+ esac
+
+ # DLL is installed to $(libdir)/../bin by postinstall_cmds
+ postinstall_cmds='base_file=`basename \$file`~
+ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
+ dldir=$destdir/`dirname \$dlpath`~
+ test -d \$dldir || mkdir -p \$dldir~
+ $install_prog $dir/$dlname \$dldir/$dlname'
+ postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
+ dlpath=$dir/\$dldll~
+ $RM \$dlpath'
+ shlibpath_overrides_runpath=yes
+ dynamic_linker='Win32 link.exe'
+ ;;
+
+ *)
+ # Assume MSVC and ICC wrapper
+ library_names_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext $libname.lib'
+ dynamic_linker='Win32 ld.exe'
+ ;;
+ esac
+ # FIXME: first we should search . and the directory the executable is in
+ shlibpath_var=PATH
+ ;;
+
+darwin* | rhapsody*)
+ dynamic_linker="$host_os dyld"
+ version_type=darwin
+ need_lib_prefix=no
+ need_version=no
+ library_names_spec='$libname$release$major$shared_ext $libname$shared_ext'
+ soname_spec='$libname$release$major$shared_ext'
+ shlibpath_overrides_runpath=yes
+ shlibpath_var=DYLD_LIBRARY_PATH
+ shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`'
+m4_if([$1], [],[
+ sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"])
+ sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib'
+ ;;
+
+dgux*)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ need_lib_prefix=no
+ need_version=no
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ shlibpath_var=LD_LIBRARY_PATH
+ ;;
+
+freebsd* | dragonfly* | midnightbsd*)
+ # DragonFly does not have aout. When/if they implement a new
+ # versioning mechanism, adjust this.
+ if test -x /usr/bin/objformat; then
+ objformat=`/usr/bin/objformat`
+ else
+ case $host_os in
+ freebsd[[23]].*) objformat=aout ;;
+ *) objformat=elf ;;
+ esac
+ fi
+ version_type=freebsd-$objformat
+ case $version_type in
+ freebsd-elf*)
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ need_version=no
+ need_lib_prefix=no
+ ;;
+ freebsd-*)
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
+ need_version=yes
+ ;;
+ esac
+ shlibpath_var=LD_LIBRARY_PATH
+ case $host_os in
+ freebsd2.*)
+ shlibpath_overrides_runpath=yes
+ ;;
+ freebsd3.[[01]]* | freebsdelf3.[[01]]*)
+ shlibpath_overrides_runpath=yes
+ hardcode_into_libs=yes
+ ;;
+ freebsd3.[[2-9]]* | freebsdelf3.[[2-9]]* | \
+ freebsd4.[[0-5]] | freebsdelf4.[[0-5]] | freebsd4.1.1 | freebsdelf4.1.1)
+ shlibpath_overrides_runpath=no
+ hardcode_into_libs=yes
+ ;;
+ *) # from 4.6 on, and DragonFly
+ shlibpath_overrides_runpath=yes
+ hardcode_into_libs=yes
+ ;;
+ esac
+ ;;
+
+haiku*)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ need_lib_prefix=no
+ need_version=no
+ dynamic_linker="$host_os runtime_loader"
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ shlibpath_var=LIBRARY_PATH
+ shlibpath_overrides_runpath=no
+ sys_lib_dlsearch_path_spec='/boot/home/config/lib /boot/common/lib /boot/system/lib'
+ hardcode_into_libs=yes
+ ;;
+
+hpux9* | hpux10* | hpux11*)
+ # Give a soname corresponding to the major version so that dld.sl refuses to
+ # link against other versions.
+ version_type=sunos
+ need_lib_prefix=no
+ need_version=no
+ case $host_cpu in
+ ia64*)
+ shrext_cmds='.so'
+ hardcode_into_libs=yes
+ dynamic_linker="$host_os dld.so"
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ if test 32 = "$HPUX_IA64_MODE"; then
+ sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib"
+ sys_lib_dlsearch_path_spec=/usr/lib/hpux32
+ else
+ sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64"
+ sys_lib_dlsearch_path_spec=/usr/lib/hpux64
+ fi
+ ;;
+ hppa*64*)
+ shrext_cmds='.sl'
+ hardcode_into_libs=yes
+ dynamic_linker="$host_os dld.sl"
+ shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH
+ shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64"
+ sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
+ ;;
+ *)
+ shrext_cmds='.sl'
+ dynamic_linker="$host_os dld.sl"
+ shlibpath_var=SHLIB_PATH
+ shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ ;;
+ esac
+ # HP-UX runs *really* slowly unless shared libraries are mode 555, ...
+ postinstall_cmds='chmod 555 $lib'
+ # or fails outright, so override atomically:
+ install_override_mode=555
+ ;;
+
+interix[[3-9]]*)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ need_lib_prefix=no
+ need_version=no
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)'
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=no
+ hardcode_into_libs=yes
+ ;;
+
+irix5* | irix6* | nonstopux*)
+ case $host_os in
+ nonstopux*) version_type=nonstopux ;;
+ *)
+ if test yes = "$lt_cv_prog_gnu_ld"; then
+ version_type=linux # correct to gnu/linux during the next big refactor
+ else
+ version_type=irix
+ fi ;;
+ esac
+ need_lib_prefix=no
+ need_version=no
+ soname_spec='$libname$release$shared_ext$major'
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext'
+ case $host_os in
+ irix5* | nonstopux*)
+ libsuff= shlibsuff=
+ ;;
+ *)
+ case $LD in # libtool.m4 will add one of these switches to LD
+ *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ")
+ libsuff= shlibsuff= libmagic=32-bit;;
+ *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ")
+ libsuff=32 shlibsuff=N32 libmagic=N32;;
+ *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ")
+ libsuff=64 shlibsuff=64 libmagic=64-bit;;
+ *) libsuff= shlibsuff= libmagic=never-match;;
+ esac
+ ;;
+ esac
+ shlibpath_var=LD_LIBRARY${shlibsuff}_PATH
+ shlibpath_overrides_runpath=no
+ sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff"
+ sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff"
+ hardcode_into_libs=yes
+ ;;
+
+# No shared lib support for Linux oldld, aout, or coff.
+linux*oldld* | linux*aout* | linux*coff*)
+ dynamic_linker=no
+ ;;
+
+linux*android*)
+ version_type=none # Android doesn't support versioned libraries.
+ need_lib_prefix=no
+ need_version=no
+ library_names_spec='$libname$release$shared_ext'
+ soname_spec='$libname$release$shared_ext'
+ finish_cmds=
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=yes
+
+ # This implies no fast_install, which is unacceptable.
+ # Some rework will be needed to allow for fast_install
+ # before this can be enabled.
+ hardcode_into_libs=yes
+
+ dynamic_linker='Android linker'
+ # Don't embed -rpath directories since the linker doesn't support them.
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ ;;
+
+# This must be glibc/ELF.
+linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ need_lib_prefix=no
+ need_version=no
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir'
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=no
+
+ # Some binutils ld are patched to set DT_RUNPATH
+ AC_CACHE_VAL([lt_cv_shlibpath_overrides_runpath],
+ [lt_cv_shlibpath_overrides_runpath=no
+ save_LDFLAGS=$LDFLAGS
+ save_libdir=$libdir
+ eval "libdir=/foo; wl=\"$_LT_TAGVAR(lt_prog_compiler_wl, $1)\"; \
+ LDFLAGS=\"\$LDFLAGS $_LT_TAGVAR(hardcode_libdir_flag_spec, $1)\""
+ AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])],
+ [AS_IF([ ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null],
+ [lt_cv_shlibpath_overrides_runpath=yes])])
+ LDFLAGS=$save_LDFLAGS
+ libdir=$save_libdir
+ ])
+ shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath
+
+ # This implies no fast_install, which is unacceptable.
+ # Some rework will be needed to allow for fast_install
+ # before this can be enabled.
+ hardcode_into_libs=yes
+
+ # Ideally, we could use ldconfig to report *all* directores which are
+ # searched for libraries, however this is still not possible. Aside from not
+ # being certain /sbin/ldconfig is available, command
+ # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64,
+ # even though it is searched at run-time. Try to do the best guess by
+ # appending ld.so.conf contents (and includes) to the search path.
+ if test -f /etc/ld.so.conf; then
+ lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \[$]2)); skip = 1; } { if (!skip) print \[$]0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[ ]*hwcap[ ]/d;s/[:, ]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '`
+ sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra"
+ fi
+
+ # We used to test for /lib/ld.so.1 and disable shared libraries on
+ # powerpc, because MkLinux only supported shared libraries with the
+ # GNU dynamic linker. Since this was broken with cross compilers,
+ # most powerpc-linux boxes support dynamic linking these days and
+ # people can always --disable-shared, the test was removed, and we
+ # assume the GNU/Linux dynamic linker is in use.
+ dynamic_linker='GNU/Linux ld.so'
+ ;;
+
+netbsd*)
+ version_type=sunos
+ need_lib_prefix=no
+ need_version=no
+ if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
+ finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
+ dynamic_linker='NetBSD (a.out) ld.so'
+ else
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ dynamic_linker='NetBSD ld.elf_so'
+ fi
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=yes
+ hardcode_into_libs=yes
+ ;;
+
+newsos6)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=yes
+ ;;
+
+*nto* | *qnx*)
+ version_type=qnx
+ need_lib_prefix=no
+ need_version=no
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=no
+ hardcode_into_libs=yes
+ dynamic_linker='ldqnx.so'
+ ;;
+
+openbsd* | bitrig*)
+ version_type=sunos
+ sys_lib_dlsearch_path_spec=/usr/lib
+ need_lib_prefix=no
+ if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
+ need_version=no
+ else
+ need_version=yes
+ fi
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
+ finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=yes
+ ;;
+
+os2*)
+ libname_spec='$name'
+ version_type=windows
+ shrext_cmds=.dll
+ need_version=no
+ need_lib_prefix=no
+ # OS/2 can only load a DLL with a base name of 8 characters or less.
+ soname_spec='`test -n "$os2dllname" && libname="$os2dllname";
+ v=$($ECHO $release$versuffix | tr -d .-);
+ n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _);
+ $ECHO $n$v`$shared_ext'
+ library_names_spec='${libname}_dll.$libext'
+ dynamic_linker='OS/2 ld.exe'
+ shlibpath_var=BEGINLIBPATH
+ sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
+ sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
+ postinstall_cmds='base_file=`basename \$file`~
+ dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~
+ dldir=$destdir/`dirname \$dlpath`~
+ test -d \$dldir || mkdir -p \$dldir~
+ $install_prog $dir/$dlname \$dldir/$dlname~
+ chmod a+x \$dldir/$dlname~
+ if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
+ eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
+ fi'
+ postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~
+ dlpath=$dir/\$dldll~
+ $RM \$dlpath'
+ ;;
+
+osf3* | osf4* | osf5*)
+ version_type=osf
+ need_lib_prefix=no
+ need_version=no
+ soname_spec='$libname$release$shared_ext$major'
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ shlibpath_var=LD_LIBRARY_PATH
+ sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib"
+ sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
+ ;;
+
+rdos*)
+ dynamic_linker=no
+ ;;
+
+solaris*)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ need_lib_prefix=no
+ need_version=no
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=yes
+ hardcode_into_libs=yes
+ # ldd complains unless libraries are executable
+ postinstall_cmds='chmod +x $lib'
+ ;;
+
+sunos4*)
+ version_type=sunos
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
+ finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir'
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=yes
+ if test yes = "$with_gnu_ld"; then
+ need_lib_prefix=no
+ fi
+ need_version=yes
+ ;;
+
+sysv4 | sysv4.3*)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ shlibpath_var=LD_LIBRARY_PATH
+ case $host_vendor in
+ sni)
+ shlibpath_overrides_runpath=no
+ need_lib_prefix=no
+ runpath_var=LD_RUN_PATH
+ ;;
+ siemens)
+ need_lib_prefix=no
+ ;;
+ motorola)
+ need_lib_prefix=no
+ need_version=no
+ shlibpath_overrides_runpath=no
+ sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib'
+ ;;
+ esac
+ ;;
+
+sysv4*MP*)
+ if test -d /usr/nec; then
+ version_type=linux # correct to gnu/linux during the next big refactor
+ library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext'
+ soname_spec='$libname$shared_ext.$major'
+ shlibpath_var=LD_LIBRARY_PATH
+ fi
+ ;;
+
+sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
+ version_type=sco
+ need_lib_prefix=no
+ need_version=no
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=yes
+ hardcode_into_libs=yes
+ if test yes = "$with_gnu_ld"; then
+ sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib'
+ else
+ sys_lib_search_path_spec='/usr/ccs/lib /usr/lib'
+ case $host_os in
+ sco3.2v5*)
+ sys_lib_search_path_spec="$sys_lib_search_path_spec /lib"
+ ;;
+ esac
+ fi
+ sys_lib_dlsearch_path_spec='/usr/lib'
+ ;;
+
+tpf*)
+ # TPF is a cross-target only. Preferred cross-host = GNU/Linux.
+ version_type=linux # correct to gnu/linux during the next big refactor
+ need_lib_prefix=no
+ need_version=no
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ shlibpath_var=LD_LIBRARY_PATH
+ shlibpath_overrides_runpath=no
+ hardcode_into_libs=yes
+ ;;
+
+uts4*)
+ version_type=linux # correct to gnu/linux during the next big refactor
+ library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
+ soname_spec='$libname$release$shared_ext$major'
+ shlibpath_var=LD_LIBRARY_PATH
+ ;;
+
+*)
+ dynamic_linker=no
+ ;;
+esac
+AC_MSG_RESULT([$dynamic_linker])
+test no = "$dynamic_linker" && can_build_shared=no
+
+variables_saved_for_relink="PATH $shlibpath_var $runpath_var"
+if test yes = "$GCC"; then
+ variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH"
+fi
+
+if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then
+ sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec
+fi
+
+if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then
+ sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec
+fi
+
+# remember unaugmented sys_lib_dlsearch_path content for libtool script decls...
+configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec
+
+# ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code
+func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH"
+
+# to be used as default LT_SYS_LIBRARY_PATH value in generated libtool
+configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH
+
+_LT_DECL([], [variables_saved_for_relink], [1],
+ [Variables whose values should be saved in libtool wrapper scripts and
+ restored at link time])
+_LT_DECL([], [need_lib_prefix], [0],
+ [Do we need the "lib" prefix for modules?])
+_LT_DECL([], [need_version], [0], [Do we need a version for libraries?])
+_LT_DECL([], [version_type], [0], [Library versioning type])
+_LT_DECL([], [runpath_var], [0], [Shared library runtime path variable])
+_LT_DECL([], [shlibpath_var], [0],[Shared library path variable])
+_LT_DECL([], [shlibpath_overrides_runpath], [0],
+ [Is shlibpath searched before the hard-coded library search path?])
+_LT_DECL([], [libname_spec], [1], [Format of library name prefix])
+_LT_DECL([], [library_names_spec], [1],
+ [[List of archive names. First name is the real one, the rest are links.
+ The last name is the one that the linker finds with -lNAME]])
+_LT_DECL([], [soname_spec], [1],
+ [[The coded name of the library, if different from the real name]])
+_LT_DECL([], [install_override_mode], [1],
+ [Permission mode override for installation of shared libraries])
+_LT_DECL([], [postinstall_cmds], [2],
+ [Command to use after installation of a shared archive])
+_LT_DECL([], [postuninstall_cmds], [2],
+ [Command to use after uninstallation of a shared archive])
+_LT_DECL([], [finish_cmds], [2],
+ [Commands used to finish a libtool library installation in a directory])
+_LT_DECL([], [finish_eval], [1],
+ [[As "finish_cmds", except a single script fragment to be evaled but
+ not shown]])
+_LT_DECL([], [hardcode_into_libs], [0],
+ [Whether we should hardcode library paths into libraries])
+_LT_DECL([], [sys_lib_search_path_spec], [2],
+ [Compile-time system search path for libraries])
+_LT_DECL([sys_lib_dlsearch_path_spec], [configure_time_dlsearch_path], [2],
+ [Detected run-time system search path for libraries])
+_LT_DECL([], [configure_time_lt_sys_library_path], [2],
+ [Explicit LT_SYS_LIBRARY_PATH set during ./configure time])
+])# _LT_SYS_DYNAMIC_LINKER
+
+
+# _LT_PATH_TOOL_PREFIX(TOOL)
+# --------------------------
+# find a file program that can recognize shared library
+AC_DEFUN([_LT_PATH_TOOL_PREFIX],
+[m4_require([_LT_DECL_EGREP])dnl
+AC_MSG_CHECKING([for $1])
+AC_CACHE_VAL(lt_cv_path_MAGIC_CMD,
+[case $MAGIC_CMD in
+[[\\/*] | ?:[\\/]*])
+ lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
+ ;;
+*)
+ lt_save_MAGIC_CMD=$MAGIC_CMD
+ lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
+dnl $ac_dummy forces splitting on constant user-supplied paths.
+dnl POSIX.2 word splitting is done only on the output of word expansions,
+dnl not every word. This closes a longstanding sh security hole.
+ ac_dummy="m4_if([$2], , $PATH, [$2])"
+ for ac_dir in $ac_dummy; do
+ IFS=$lt_save_ifs
+ test -z "$ac_dir" && ac_dir=.
+ if test -f "$ac_dir/$1"; then
+ lt_cv_path_MAGIC_CMD=$ac_dir/"$1"
+ if test -n "$file_magic_test_file"; then
+ case $deplibs_check_method in
+ "file_magic "*)
+ file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
+ MAGIC_CMD=$lt_cv_path_MAGIC_CMD
+ if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
+ $EGREP "$file_magic_regex" > /dev/null; then
+ :
+ else
+ cat <<_LT_EOF 1>&2
+
+*** Warning: the command libtool uses to detect shared libraries,
+*** $file_magic_cmd, produces output that libtool cannot recognize.
+*** The result is that libtool may fail to recognize shared libraries
+*** as such. This will affect the creation of libtool libraries that
+*** depend on shared libraries, but programs linked with such libtool
+*** libraries will work regardless of this problem. Nevertheless, you
+*** may want to report the problem to your system manager and/or to
+*** bug-libtool@gnu.org
+
+_LT_EOF
+ fi ;;
+ esac
+ fi
+ break
+ fi
+ done
+ IFS=$lt_save_ifs
+ MAGIC_CMD=$lt_save_MAGIC_CMD
+ ;;
+esac])
+MAGIC_CMD=$lt_cv_path_MAGIC_CMD
+if test -n "$MAGIC_CMD"; then
+ AC_MSG_RESULT($MAGIC_CMD)
+else
+ AC_MSG_RESULT(no)
+fi
+_LT_DECL([], [MAGIC_CMD], [0],
+ [Used to examine libraries when file_magic_cmd begins with "file"])dnl
+])# _LT_PATH_TOOL_PREFIX
+
+# Old name:
+AU_ALIAS([AC_PATH_TOOL_PREFIX], [_LT_PATH_TOOL_PREFIX])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_PATH_TOOL_PREFIX], [])
+
+
+# _LT_PATH_MAGIC
+# --------------
+# find a file program that can recognize a shared library
+m4_defun([_LT_PATH_MAGIC],
+[_LT_PATH_TOOL_PREFIX(${ac_tool_prefix}file, /usr/bin$PATH_SEPARATOR$PATH)
+if test -z "$lt_cv_path_MAGIC_CMD"; then
+ if test -n "$ac_tool_prefix"; then
+ _LT_PATH_TOOL_PREFIX(file, /usr/bin$PATH_SEPARATOR$PATH)
+ else
+ MAGIC_CMD=:
+ fi
+fi
+])# _LT_PATH_MAGIC
+
+
+# LT_PATH_LD
+# ----------
+# find the pathname to the GNU or non-GNU linker
+AC_DEFUN([LT_PATH_LD],
+[AC_REQUIRE([AC_PROG_CC])dnl
+AC_REQUIRE([AC_CANONICAL_HOST])dnl
+AC_REQUIRE([AC_CANONICAL_BUILD])dnl
+m4_require([_LT_DECL_SED])dnl
+m4_require([_LT_DECL_EGREP])dnl
+m4_require([_LT_PROG_ECHO_BACKSLASH])dnl
+
+AC_ARG_WITH([gnu-ld],
+ [AS_HELP_STRING([--with-gnu-ld],
+ [assume the C compiler uses GNU ld @<:@default=no@:>@])],
+ [test no = "$withval" || with_gnu_ld=yes],
+ [with_gnu_ld=no])dnl
+
+ac_prog=ld
+if test yes = "$GCC"; then
+ # Check if gcc -print-prog-name=ld gives a path.
+ AC_MSG_CHECKING([for ld used by $CC])
+ case $host in
+ *-*-mingw*)
+ # gcc leaves a trailing carriage return, which upsets mingw
+ ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
+ *)
+ ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
+ esac
+ case $ac_prog in
+ # Accept absolute paths.
+ [[\\/]]* | ?:[[\\/]]*)
+ re_direlt='/[[^/]][[^/]]*/\.\./'
+ # Canonicalize the pathname of ld
+ ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
+ while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
+ ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
+ done
+ test -z "$LD" && LD=$ac_prog
+ ;;
+ "")
+ # If it fails, then pretend we aren't using GCC.
+ ac_prog=ld
+ ;;
+ *)
+ # If it is relative, then search for the first ld in PATH.
+ with_gnu_ld=unknown
+ ;;
+ esac
+elif test yes = "$with_gnu_ld"; then
+ AC_MSG_CHECKING([for GNU ld])
+else
+ AC_MSG_CHECKING([for non-GNU ld])
+fi
+AC_CACHE_VAL(lt_cv_path_LD,
+[if test -z "$LD"; then
+ lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
+ for ac_dir in $PATH; do
+ IFS=$lt_save_ifs
+ test -z "$ac_dir" && ac_dir=.
+ if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
+ lt_cv_path_LD=$ac_dir/$ac_prog
+ # Check to see if the program is GNU ld. I'd rather use --version,
+ # but apparently some variants of GNU ld only accept -v.
+ # Break only if it was the GNU/non-GNU ld that we prefer.
+ case `"$lt_cv_path_LD" -v 2>&1 &1 conftest.i
+cat conftest.i conftest.i >conftest2.i
+: ${lt_DD:=$DD}
+AC_PATH_PROGS_FEATURE_CHECK([lt_DD], [dd],
+[if "$ac_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then
+ cmp -s conftest.i conftest.out \
+ && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=:
+fi])
+rm -f conftest.i conftest2.i conftest.out])
+])# _LT_PATH_DD
+
+
+# _LT_CMD_TRUNCATE
+# ----------------
+# find command to truncate a binary pipe
+m4_defun([_LT_CMD_TRUNCATE],
+[m4_require([_LT_PATH_DD])
+AC_CACHE_CHECK([how to truncate binary pipes], [lt_cv_truncate_bin],
+[printf 0123456789abcdef0123456789abcdef >conftest.i
+cat conftest.i conftest.i >conftest2.i
+lt_cv_truncate_bin=
+if "$ac_cv_path_lt_DD" bs=32 count=1 conftest.out 2>/dev/null; then
+ cmp -s conftest.i conftest.out \
+ && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1"
+fi
+rm -f conftest.i conftest2.i conftest.out
+test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q"])
+_LT_DECL([lt_truncate_bin], [lt_cv_truncate_bin], [1],
+ [Command to truncate a binary pipe])
+])# _LT_CMD_TRUNCATE
+
+
+# _LT_CHECK_MAGIC_METHOD
+# ----------------------
+# how to check for library dependencies
+# -- PORTME fill in with the dynamic library characteristics
+m4_defun([_LT_CHECK_MAGIC_METHOD],
+[m4_require([_LT_DECL_EGREP])
+m4_require([_LT_DECL_OBJDUMP])
+AC_CACHE_CHECK([how to recognize dependent libraries],
+lt_cv_deplibs_check_method,
+[lt_cv_file_magic_cmd='$MAGIC_CMD'
+lt_cv_file_magic_test_file=
+lt_cv_deplibs_check_method='unknown'
+# Need to set the preceding variable on all platforms that support
+# interlibrary dependencies.
+# 'none' -- dependencies not supported.
+# 'unknown' -- same as none, but documents that we really don't know.
+# 'pass_all' -- all dependencies passed with no checks.
+# 'test_compile' -- check by making test program.
+# 'file_magic [[regex]]' -- check by looking for files in library path
+# that responds to the $file_magic_cmd with a given extended regex.
+# If you have 'file' or equivalent on your system and you're not sure
+# whether 'pass_all' will *always* work, you probably want this one.
+
+case $host_os in
+aix[[4-9]]*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+beos*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+bsdi[[45]]*)
+ lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib)'
+ lt_cv_file_magic_cmd='$FILECMD -L'
+ lt_cv_file_magic_test_file=/shlib/libc.so
+ ;;
+
+cygwin*)
+ # func_win32_libid is a shell function defined in ltmain.sh
+ lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
+ lt_cv_file_magic_cmd='func_win32_libid'
+ ;;
+
+mingw* | pw32*)
+ # Base MSYS/MinGW do not provide the 'file' command needed by
+ # func_win32_libid shell function, so use a weaker test based on 'objdump',
+ # unless we find 'file', for example because we are cross-compiling.
+ if ( file / ) >/dev/null 2>&1; then
+ lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
+ lt_cv_file_magic_cmd='func_win32_libid'
+ else
+ # Keep this pattern in sync with the one in func_win32_libid.
+ lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)'
+ lt_cv_file_magic_cmd='$OBJDUMP -f'
+ fi
+ ;;
+
+cegcc*)
+ # use the weaker test based on 'objdump'. See mingw*.
+ lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?'
+ lt_cv_file_magic_cmd='$OBJDUMP -f'
+ ;;
+
+darwin* | rhapsody*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+freebsd* | dragonfly* | midnightbsd*)
+ if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
+ case $host_cpu in
+ i*86 )
+ # Not sure whether the presence of OpenBSD here was a mistake.
+ # Let's accept both of them until this is cleared up.
+ lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[[3-9]]86 (compact )?demand paged shared library'
+ lt_cv_file_magic_cmd=$FILECMD
+ lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*`
+ ;;
+ esac
+ else
+ lt_cv_deplibs_check_method=pass_all
+ fi
+ ;;
+
+haiku*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+hpux10.20* | hpux11*)
+ lt_cv_file_magic_cmd=$FILECMD
+ case $host_cpu in
+ ia64*)
+ lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|ELF-[[0-9]][[0-9]]) shared object file - IA64'
+ lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so
+ ;;
+ hppa*64*)
+ [lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]']
+ lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl
+ ;;
+ *)
+ lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|PA-RISC[[0-9]]\.[[0-9]]) shared library'
+ lt_cv_file_magic_test_file=/usr/lib/libc.sl
+ ;;
+ esac
+ ;;
+
+interix[[3-9]]*)
+ # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here
+ lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|\.a)$'
+ ;;
+
+irix5* | irix6* | nonstopux*)
+ case $LD in
+ *-32|*"-32 ") libmagic=32-bit;;
+ *-n32|*"-n32 ") libmagic=N32;;
+ *-64|*"-64 ") libmagic=64-bit;;
+ *) libmagic=never-match;;
+ esac
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+# This must be glibc/ELF.
+linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+netbsd*)
+ if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
+ lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$'
+ else
+ lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|_pic\.a)$'
+ fi
+ ;;
+
+newos6*)
+ lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (executable|dynamic lib)'
+ lt_cv_file_magic_cmd=$FILECMD
+ lt_cv_file_magic_test_file=/usr/lib/libnls.so
+ ;;
+
+*nto* | *qnx*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+openbsd* | bitrig*)
+ if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
+ lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|\.so|_pic\.a)$'
+ else
+ lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$'
+ fi
+ ;;
+
+osf3* | osf4* | osf5*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+rdos*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+solaris*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+sysv4 | sysv4.3*)
+ case $host_vendor in
+ motorola)
+ lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib) M[[0-9]][[0-9]]* Version [[0-9]]'
+ lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*`
+ ;;
+ ncr)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+ sequent)
+ lt_cv_file_magic_cmd='/bin/file'
+ lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB (shared object|dynamic lib )'
+ ;;
+ sni)
+ lt_cv_file_magic_cmd='/bin/file'
+ lt_cv_deplibs_check_method="file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB dynamic lib"
+ lt_cv_file_magic_test_file=/lib/libc.so
+ ;;
+ siemens)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+ pc)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+ esac
+ ;;
+
+tpf*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+os2*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+esac
+])
+
+file_magic_glob=
+want_nocaseglob=no
+if test "$build" = "$host"; then
+ case $host_os in
+ mingw* | pw32*)
+ if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then
+ want_nocaseglob=yes
+ else
+ file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[[\1]]\/[[\1]]\/g;/g"`
+ fi
+ ;;
+ esac
+fi
+
+file_magic_cmd=$lt_cv_file_magic_cmd
+deplibs_check_method=$lt_cv_deplibs_check_method
+test -z "$deplibs_check_method" && deplibs_check_method=unknown
+
+_LT_DECL([], [deplibs_check_method], [1],
+ [Method to check whether dependent libraries are shared objects])
+_LT_DECL([], [file_magic_cmd], [1],
+ [Command to use when deplibs_check_method = "file_magic"])
+_LT_DECL([], [file_magic_glob], [1],
+ [How to find potential files when deplibs_check_method = "file_magic"])
+_LT_DECL([], [want_nocaseglob], [1],
+ [Find potential files using nocaseglob when deplibs_check_method = "file_magic"])
+])# _LT_CHECK_MAGIC_METHOD
+
+
+# LT_PATH_NM
+# ----------
+# find the pathname to a BSD- or MS-compatible name lister
+AC_DEFUN([LT_PATH_NM],
+[AC_REQUIRE([AC_PROG_CC])dnl
+AC_CACHE_CHECK([for BSD- or MS-compatible name lister (nm)], lt_cv_path_NM,
+[if test -n "$NM"; then
+ # Let the user override the test.
+ lt_cv_path_NM=$NM
+else
+ lt_nm_to_check=${ac_tool_prefix}nm
+ if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
+ lt_nm_to_check="$lt_nm_to_check nm"
+ fi
+ for lt_tmp_nm in $lt_nm_to_check; do
+ lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
+ for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
+ IFS=$lt_save_ifs
+ test -z "$ac_dir" && ac_dir=.
+ tmp_nm=$ac_dir/$lt_tmp_nm
+ if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
+ # Check to see if the nm accepts a BSD-compat flag.
+ # Adding the 'sed 1q' prevents false positives on HP-UX, which says:
+ # nm: unknown option "B" ignored
+ # Tru64's nm complains that /dev/null is an invalid object file
+ # MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
+ case $build_os in
+ mingw*) lt_bad_file=conftest.nm/nofile ;;
+ *) lt_bad_file=/dev/null ;;
+ esac
+ case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
+ *$lt_bad_file* | *'Invalid file or object type'*)
+ lt_cv_path_NM="$tmp_nm -B"
+ break 2
+ ;;
+ *)
+ case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
+ */dev/null*)
+ lt_cv_path_NM="$tmp_nm -p"
+ break 2
+ ;;
+ *)
+ lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
+ continue # so that we can try to find one that supports BSD flags
+ ;;
+ esac
+ ;;
+ esac
+ fi
+ done
+ IFS=$lt_save_ifs
+ done
+ : ${lt_cv_path_NM=no}
+fi])
+if test no != "$lt_cv_path_NM"; then
+ NM=$lt_cv_path_NM
+else
+ # Didn't find any BSD compatible name lister, look for dumpbin.
+ if test -n "$DUMPBIN"; then :
+ # Let the user override the test.
+ else
+ AC_CHECK_TOOLS(DUMPBIN, [dumpbin "link -dump"], :)
+ case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
+ *COFF*)
+ DUMPBIN="$DUMPBIN -symbols -headers"
+ ;;
+ *)
+ DUMPBIN=:
+ ;;
+ esac
+ fi
+ AC_SUBST([DUMPBIN])
+ if test : != "$DUMPBIN"; then
+ NM=$DUMPBIN
+ fi
+fi
+test -z "$NM" && NM=nm
+AC_SUBST([NM])
+_LT_DECL([], [NM], [1], [A BSD- or MS-compatible name lister])dnl
+
+AC_CACHE_CHECK([the name lister ($NM) interface], [lt_cv_nm_interface],
+ [lt_cv_nm_interface="BSD nm"
+ echo "int some_variable = 0;" > conftest.$ac_ext
+ (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&AS_MESSAGE_LOG_FD)
+ (eval "$ac_compile" 2>conftest.err)
+ cat conftest.err >&AS_MESSAGE_LOG_FD
+ (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&AS_MESSAGE_LOG_FD)
+ (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
+ cat conftest.err >&AS_MESSAGE_LOG_FD
+ (eval echo "\"\$as_me:$LINENO: output\"" >&AS_MESSAGE_LOG_FD)
+ cat conftest.out >&AS_MESSAGE_LOG_FD
+ if $GREP 'External.*some_variable' conftest.out > /dev/null; then
+ lt_cv_nm_interface="MS dumpbin"
+ fi
+ rm -f conftest*])
+])# LT_PATH_NM
+
+# Old names:
+AU_ALIAS([AM_PROG_NM], [LT_PATH_NM])
+AU_ALIAS([AC_PROG_NM], [LT_PATH_NM])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AM_PROG_NM], [])
+dnl AC_DEFUN([AC_PROG_NM], [])
+
+# _LT_CHECK_SHAREDLIB_FROM_LINKLIB
+# --------------------------------
+# how to determine the name of the shared library
+# associated with a specific link library.
+# -- PORTME fill in with the dynamic library characteristics
+m4_defun([_LT_CHECK_SHAREDLIB_FROM_LINKLIB],
+[m4_require([_LT_DECL_EGREP])
+m4_require([_LT_DECL_OBJDUMP])
+m4_require([_LT_DECL_DLLTOOL])
+AC_CACHE_CHECK([how to associate runtime and link libraries],
+lt_cv_sharedlib_from_linklib_cmd,
+[lt_cv_sharedlib_from_linklib_cmd='unknown'
+
+case $host_os in
+cygwin* | mingw* | pw32* | cegcc*)
+ # two different shell functions defined in ltmain.sh;
+ # decide which one to use based on capabilities of $DLLTOOL
+ case `$DLLTOOL --help 2>&1` in
+ *--identify-strict*)
+ lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib
+ ;;
+ *)
+ lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback
+ ;;
+ esac
+ ;;
+*)
+ # fallback: assume linklib IS sharedlib
+ lt_cv_sharedlib_from_linklib_cmd=$ECHO
+ ;;
+esac
+])
+sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd
+test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO
+
+_LT_DECL([], [sharedlib_from_linklib_cmd], [1],
+ [Command to associate shared and link libraries])
+])# _LT_CHECK_SHAREDLIB_FROM_LINKLIB
+
+
+# _LT_PATH_MANIFEST_TOOL
+# ----------------------
+# locate the manifest tool
+m4_defun([_LT_PATH_MANIFEST_TOOL],
+[AC_CHECK_TOOL(MANIFEST_TOOL, mt, :)
+test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt
+AC_CACHE_CHECK([if $MANIFEST_TOOL is a manifest tool], [lt_cv_path_mainfest_tool],
+ [lt_cv_path_mainfest_tool=no
+ echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&AS_MESSAGE_LOG_FD
+ $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out
+ cat conftest.err >&AS_MESSAGE_LOG_FD
+ if $GREP 'Manifest Tool' conftest.out > /dev/null; then
+ lt_cv_path_mainfest_tool=yes
+ fi
+ rm -f conftest*])
+if test yes != "$lt_cv_path_mainfest_tool"; then
+ MANIFEST_TOOL=:
+fi
+_LT_DECL([], [MANIFEST_TOOL], [1], [Manifest tool])dnl
+])# _LT_PATH_MANIFEST_TOOL
+
+
+# _LT_DLL_DEF_P([FILE])
+# ---------------------
+# True iff FILE is a Windows DLL '.def' file.
+# Keep in sync with func_dll_def_p in the libtool script
+AC_DEFUN([_LT_DLL_DEF_P],
+[dnl
+ test DEF = "`$SED -n dnl
+ -e '\''s/^[[ ]]*//'\'' dnl Strip leading whitespace
+ -e '\''/^\(;.*\)*$/d'\'' dnl Delete empty lines and comments
+ -e '\''s/^\(EXPORTS\|LIBRARY\)\([[ ]].*\)*$/DEF/p'\'' dnl
+ -e q dnl Only consider the first "real" line
+ $1`" dnl
+])# _LT_DLL_DEF_P
+
+
+# LT_LIB_M
+# --------
+# check for math library
+AC_DEFUN([LT_LIB_M],
+[AC_REQUIRE([AC_CANONICAL_HOST])dnl
+LIBM=
+case $host in
+*-*-beos* | *-*-cegcc* | *-*-cygwin* | *-*-haiku* | *-*-pw32* | *-*-darwin*)
+ # These system don't have libm, or don't need it
+ ;;
+*-ncr-sysv4.3*)
+ AC_CHECK_LIB(mw, _mwvalidcheckl, LIBM=-lmw)
+ AC_CHECK_LIB(m, cos, LIBM="$LIBM -lm")
+ ;;
+*)
+ AC_CHECK_LIB(m, cos, LIBM=-lm)
+ ;;
+esac
+AC_SUBST([LIBM])
+])# LT_LIB_M
+
+# Old name:
+AU_ALIAS([AC_CHECK_LIBM], [LT_LIB_M])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_CHECK_LIBM], [])
+
+
+# _LT_COMPILER_NO_RTTI([TAGNAME])
+# -------------------------------
+m4_defun([_LT_COMPILER_NO_RTTI],
+[m4_require([_LT_TAG_COMPILER])dnl
+
+_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=
+
+if test yes = "$GCC"; then
+ case $cc_basename in
+ nvcc*)
+ _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -Xcompiler -fno-builtin' ;;
+ *)
+ _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' ;;
+ esac
+
+ _LT_COMPILER_OPTION([if $compiler supports -fno-rtti -fno-exceptions],
+ lt_cv_prog_compiler_rtti_exceptions,
+ [-fno-rtti -fno-exceptions], [],
+ [_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)="$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1) -fno-rtti -fno-exceptions"])
+fi
+_LT_TAGDECL([no_builtin_flag], [lt_prog_compiler_no_builtin_flag], [1],
+ [Compiler flag to turn off builtin functions])
+])# _LT_COMPILER_NO_RTTI
+
+
+# _LT_CMD_GLOBAL_SYMBOLS
+# ----------------------
+m4_defun([_LT_CMD_GLOBAL_SYMBOLS],
+[AC_REQUIRE([AC_CANONICAL_HOST])dnl
+AC_REQUIRE([AC_PROG_CC])dnl
+AC_REQUIRE([AC_PROG_AWK])dnl
+AC_REQUIRE([LT_PATH_NM])dnl
+AC_REQUIRE([LT_PATH_LD])dnl
+m4_require([_LT_DECL_SED])dnl
+m4_require([_LT_DECL_EGREP])dnl
+m4_require([_LT_TAG_COMPILER])dnl
+
+# Check for command to grab the raw symbol name followed by C symbol from nm.
+AC_MSG_CHECKING([command to parse $NM output from $compiler object])
+AC_CACHE_VAL([lt_cv_sys_global_symbol_pipe],
+[
+# These are sane defaults that work on at least a few old systems.
+# [They come from Ultrix. What could be older than Ultrix?!! ;)]
+
+# Character class describing NM global symbol codes.
+symcode='[[BCDEGRST]]'
+
+# Regexp to match symbols that can be accessed directly from C.
+sympat='\([[_A-Za-z]][[_A-Za-z0-9]]*\)'
+
+# Define system-specific variables.
+case $host_os in
+aix*)
+ symcode='[[BCDT]]'
+ ;;
+cygwin* | mingw* | pw32* | cegcc*)
+ symcode='[[ABCDGISTW]]'
+ ;;
+hpux*)
+ if test ia64 = "$host_cpu"; then
+ symcode='[[ABCDEGRST]]'
+ fi
+ ;;
+irix* | nonstopux*)
+ symcode='[[BCDEGRST]]'
+ ;;
+osf*)
+ symcode='[[BCDEGQRST]]'
+ ;;
+solaris*)
+ symcode='[[BDRT]]'
+ ;;
+sco3.2v5*)
+ symcode='[[DT]]'
+ ;;
+sysv4.2uw2*)
+ symcode='[[DT]]'
+ ;;
+sysv5* | sco5v6* | unixware* | OpenUNIX*)
+ symcode='[[ABDT]]'
+ ;;
+sysv4)
+ symcode='[[DFNSTU]]'
+ ;;
+esac
+
+# If we're using GNU nm, then use its standard symbol codes.
+case `$NM -V 2>&1` in
+*GNU* | *'with BFD'*)
+ symcode='[[ABCDGIRSTW]]' ;;
+esac
+
+if test "$lt_cv_nm_interface" = "MS dumpbin"; then
+ # Gets list of data symbols to import.
+ lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'"
+ # Adjust the below global symbol transforms to fixup imported variables.
+ lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'"
+ lt_c_name_hook=" -e 's/^I .* \(.*\)$/ {\"\1\", (void *) 0},/p'"
+ lt_c_name_lib_hook="\
+ -e 's/^I .* \(lib.*\)$/ {\"\1\", (void *) 0},/p'\
+ -e 's/^I .* \(.*\)$/ {\"lib\1\", (void *) 0},/p'"
+else
+ # Disable hooks by default.
+ lt_cv_sys_global_symbol_to_import=
+ lt_cdecl_hook=
+ lt_c_name_hook=
+ lt_c_name_lib_hook=
+fi
+
+# Transform an extracted symbol line into a proper C declaration.
+# Some systems (esp. on ia64) link data and code symbols differently,
+# so use this general approach.
+lt_cv_sys_global_symbol_to_cdecl="$SED -n"\
+$lt_cdecl_hook\
+" -e 's/^T .* \(.*\)$/extern int \1();/p'"\
+" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'"
+
+# Transform an extracted symbol line into symbol name and symbol address
+lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\
+$lt_c_name_hook\
+" -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\
+" -e 's/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/p'"
+
+# Transform an extracted symbol line into symbol name with lib prefix and
+# symbol address.
+lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\
+$lt_c_name_lib_hook\
+" -e 's/^: \(.*\) .*$/ {\"\1\", (void *) 0},/p'"\
+" -e 's/^$symcode$symcode* .* \(lib.*\)$/ {\"\1\", (void *) \&\1},/p'"\
+" -e 's/^$symcode$symcode* .* \(.*\)$/ {\"lib\1\", (void *) \&\1},/p'"
+
+# Handle CRLF in mingw tool chain
+opt_cr=
+case $build_os in
+mingw*)
+ opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp
+ ;;
+esac
+
+# Try without a prefix underscore, then with it.
+for ac_symprfx in "" "_"; do
+
+ # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol.
+ symxfrm="\\1 $ac_symprfx\\2 \\2"
+
+ # Write the raw and C identifiers.
+ if test "$lt_cv_nm_interface" = "MS dumpbin"; then
+ # Fake it for dumpbin and say T for any non-static function,
+ # D for any global variable and I for any imported variable.
+ # Also find C++ and __fastcall symbols from MSVC++ or ICC,
+ # which start with @ or ?.
+ lt_cv_sys_global_symbol_pipe="$AWK ['"\
+" {last_section=section; section=\$ 3};"\
+" /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\
+" /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\
+" /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\
+" /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\
+" /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\
+" \$ 0!~/External *\|/{next};"\
+" / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\
+" {if(hide[section]) next};"\
+" {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\
+" {split(\$ 0,a,/\||\r/); split(a[2],s)};"\
+" s[1]~/^[@?]/{print f,s[1],s[1]; next};"\
+" s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\
+" ' prfx=^$ac_symprfx]"
+ else
+ lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[[ ]]\($symcode$symcode*\)[[ ]][[ ]]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'"
+ fi
+ lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'"
+
+ # Check to see that the pipe works correctly.
+ pipe_works=no
+
+ rm -f conftest*
+ cat > conftest.$ac_ext <<_LT_EOF
+#ifdef __cplusplus
+extern "C" {
+#endif
+char nm_test_var;
+void nm_test_func(void);
+void nm_test_func(void){}
+#ifdef __cplusplus
+}
+#endif
+int main(){nm_test_var='a';nm_test_func();return(0);}
+_LT_EOF
+
+ if AC_TRY_EVAL(ac_compile); then
+ # Now try to grab the symbols.
+ nlist=conftest.nm
+ if AC_TRY_EVAL(NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist) && test -s "$nlist"; then
+ # Try sorting and uniquifying the output.
+ if sort "$nlist" | uniq > "$nlist"T; then
+ mv -f "$nlist"T "$nlist"
+ else
+ rm -f "$nlist"T
+ fi
+
+ # Make sure that we snagged all the symbols we need.
+ if $GREP ' nm_test_var$' "$nlist" >/dev/null; then
+ if $GREP ' nm_test_func$' "$nlist" >/dev/null; then
+ cat <<_LT_EOF > conftest.$ac_ext
+/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests. */
+#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
+/* DATA imports from DLLs on WIN32 can't be const, because runtime
+ relocations are performed -- see ld's documentation on pseudo-relocs. */
+# define LT@&t@_DLSYM_CONST
+#elif defined __osf__
+/* This system does not cope well with relocations in const data. */
+# define LT@&t@_DLSYM_CONST
+#else
+# define LT@&t@_DLSYM_CONST const
+#endif
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+_LT_EOF
+ # Now generate the symbol file.
+ eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext'
+
+ cat <<_LT_EOF >> conftest.$ac_ext
+
+/* The mapping between symbol names and symbols. */
+LT@&t@_DLSYM_CONST struct {
+ const char *name;
+ void *address;
+}
+lt__PROGRAM__LTX_preloaded_symbols[[]] =
+{
+ { "@PROGRAM@", (void *) 0 },
+_LT_EOF
+ $SED "s/^$symcode$symcode* .* \(.*\)$/ {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext
+ cat <<\_LT_EOF >> conftest.$ac_ext
+ {0, (void *) 0}
+};
+
+/* This works around a problem in FreeBSD linker */
+#ifdef FREEBSD_WORKAROUND
+static const void *lt_preloaded_setup() {
+ return lt__PROGRAM__LTX_preloaded_symbols;
+}
+#endif
+
+#ifdef __cplusplus
+}
+#endif
+_LT_EOF
+ # Now try linking the two files.
+ mv conftest.$ac_objext conftstm.$ac_objext
+ lt_globsym_save_LIBS=$LIBS
+ lt_globsym_save_CFLAGS=$CFLAGS
+ LIBS=conftstm.$ac_objext
+ CFLAGS="$CFLAGS$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)"
+ if AC_TRY_EVAL(ac_link) && test -s conftest$ac_exeext; then
+ pipe_works=yes
+ fi
+ LIBS=$lt_globsym_save_LIBS
+ CFLAGS=$lt_globsym_save_CFLAGS
+ else
+ echo "cannot find nm_test_func in $nlist" >&AS_MESSAGE_LOG_FD
+ fi
+ else
+ echo "cannot find nm_test_var in $nlist" >&AS_MESSAGE_LOG_FD
+ fi
+ else
+ echo "cannot run $lt_cv_sys_global_symbol_pipe" >&AS_MESSAGE_LOG_FD
+ fi
+ else
+ echo "$progname: failed program was:" >&AS_MESSAGE_LOG_FD
+ cat conftest.$ac_ext >&5
+ fi
+ rm -rf conftest* conftst*
+
+ # Do not use the global_symbol_pipe unless it works.
+ if test yes = "$pipe_works"; then
+ break
+ else
+ lt_cv_sys_global_symbol_pipe=
+ fi
+done
+])
+if test -z "$lt_cv_sys_global_symbol_pipe"; then
+ lt_cv_sys_global_symbol_to_cdecl=
+fi
+if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then
+ AC_MSG_RESULT(failed)
+else
+ AC_MSG_RESULT(ok)
+fi
+
+# Response file support.
+if test "$lt_cv_nm_interface" = "MS dumpbin"; then
+ nm_file_list_spec='@'
+elif $NM --help 2>/dev/null | grep '[[@]]FILE' >/dev/null; then
+ nm_file_list_spec='@'
+fi
+
+_LT_DECL([global_symbol_pipe], [lt_cv_sys_global_symbol_pipe], [1],
+ [Take the output of nm and produce a listing of raw symbols and C names])
+_LT_DECL([global_symbol_to_cdecl], [lt_cv_sys_global_symbol_to_cdecl], [1],
+ [Transform the output of nm in a proper C declaration])
+_LT_DECL([global_symbol_to_import], [lt_cv_sys_global_symbol_to_import], [1],
+ [Transform the output of nm into a list of symbols to manually relocate])
+_LT_DECL([global_symbol_to_c_name_address],
+ [lt_cv_sys_global_symbol_to_c_name_address], [1],
+ [Transform the output of nm in a C name address pair])
+_LT_DECL([global_symbol_to_c_name_address_lib_prefix],
+ [lt_cv_sys_global_symbol_to_c_name_address_lib_prefix], [1],
+ [Transform the output of nm in a C name address pair when lib prefix is needed])
+_LT_DECL([nm_interface], [lt_cv_nm_interface], [1],
+ [The name lister interface])
+_LT_DECL([], [nm_file_list_spec], [1],
+ [Specify filename containing input files for $NM])
+]) # _LT_CMD_GLOBAL_SYMBOLS
+
+
+# _LT_COMPILER_PIC([TAGNAME])
+# ---------------------------
+m4_defun([_LT_COMPILER_PIC],
+[m4_require([_LT_TAG_COMPILER])dnl
+_LT_TAGVAR(lt_prog_compiler_wl, $1)=
+_LT_TAGVAR(lt_prog_compiler_pic, $1)=
+_LT_TAGVAR(lt_prog_compiler_static, $1)=
+
+m4_if([$1], [CXX], [
+ # C++ specific cases for pic, static, wl, etc.
+ if test yes = "$GXX"; then
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
+
+ case $host_os in
+ aix*)
+ # All AIX code is PIC.
+ if test ia64 = "$host_cpu"; then
+ # AIX 5 now supports IA64 processor
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ fi
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ ;;
+
+ amigaos*)
+ case $host_cpu in
+ powerpc)
+ # see comment about AmigaOS4 .so support
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ ;;
+ m68k)
+ # FIXME: we need at least 68020 code to build shared libraries, but
+ # adding the '-m68020' flag to GCC prevents building anything better,
+ # like '-m68040'.
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4'
+ ;;
+ esac
+ ;;
+
+ beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
+ # PIC is the default for these OSes.
+ ;;
+ mingw* | cygwin* | os2* | pw32* | cegcc*)
+ # This hack is so that the source file can tell whether it is being
+ # built for inclusion in a dll (and should export symbols for example).
+ # Although the cygwin gcc ignores -fPIC, still need this for old-style
+ # (--disable-auto-import) libraries
+ m4_if([$1], [GCJ], [],
+ [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
+ case $host_os in
+ os2*)
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static'
+ ;;
+ esac
+ ;;
+ darwin* | rhapsody*)
+ # PIC is the default on this platform
+ # Common symbols not allowed in MH_DYLIB files
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common'
+ ;;
+ *djgpp*)
+ # DJGPP does not support shared libraries at all
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)=
+ ;;
+ haiku*)
+ # PIC is the default for Haiku.
+ # The "-static" flag exists, but is broken.
+ _LT_TAGVAR(lt_prog_compiler_static, $1)=
+ ;;
+ interix[[3-9]]*)
+ # Interix 3.x gcc -fpic/-fPIC options generate broken code.
+ # Instead, we relocate shared libraries at runtime.
+ ;;
+ sysv4*MP*)
+ if test -d /usr/nec; then
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic
+ fi
+ ;;
+ hpux*)
+ # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
+ # PA HP-UX. On IA64 HP-UX, PIC is the default but the pic flag
+ # sets the default TLS model and affects inlining.
+ case $host_cpu in
+ hppa*64*)
+ ;;
+ *)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ ;;
+ esac
+ ;;
+ *qnx* | *nto*)
+ # QNX uses GNU C++, but need to define -shared option too, otherwise
+ # it will coredump.
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
+ ;;
+ *)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ ;;
+ esac
+ else
+ case $host_os in
+ aix[[4-9]]*)
+ # All AIX code is PIC.
+ if test ia64 = "$host_cpu"; then
+ # AIX 5 now supports IA64 processor
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ else
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp'
+ fi
+ ;;
+ chorus*)
+ case $cc_basename in
+ cxch68*)
+ # Green Hills C++ Compiler
+ # _LT_TAGVAR(lt_prog_compiler_static, $1)="--no_auto_instantiation -u __main -u __premain -u _abort -r $COOL_DIR/lib/libOrb.a $MVME_DIR/lib/CC/libC.a $MVME_DIR/lib/classix/libcx.s.a"
+ ;;
+ esac
+ ;;
+ mingw* | cygwin* | os2* | pw32* | cegcc*)
+ # This hack is so that the source file can tell whether it is being
+ # built for inclusion in a dll (and should export symbols for example).
+ m4_if([$1], [GCJ], [],
+ [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
+ ;;
+ dgux*)
+ case $cc_basename in
+ ec++*)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ ;;
+ ghcx*)
+ # Green Hills C++ Compiler
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
+ ;;
+ *)
+ ;;
+ esac
+ ;;
+ freebsd* | dragonfly* | midnightbsd*)
+ # FreeBSD uses GNU C++
+ ;;
+ hpux9* | hpux10* | hpux11*)
+ case $cc_basename in
+ CC*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive'
+ if test ia64 != "$host_cpu"; then
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z'
+ fi
+ ;;
+ aCC*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive'
+ case $host_cpu in
+ hppa*64*|ia64*)
+ # +Z the default
+ ;;
+ *)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z'
+ ;;
+ esac
+ ;;
+ *)
+ ;;
+ esac
+ ;;
+ interix*)
+ # This is c89, which is MS Visual C++ (no shared libs)
+ # Anyone wants to do a port?
+ ;;
+ irix5* | irix6* | nonstopux*)
+ case $cc_basename in
+ CC*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
+ # CC pic flag -KPIC is the default.
+ ;;
+ *)
+ ;;
+ esac
+ ;;
+ linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
+ case $cc_basename in
+ KCC*)
+ # KAI C++ Compiler
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ ;;
+ ecpc* )
+ # old Intel C++ for x86_64, which still supported -KPIC.
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
+ ;;
+ icpc* )
+ # Intel C++, used to be incompatible with GCC.
+ # ICC 10 doesn't accept -KPIC any more.
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
+ ;;
+ pgCC* | pgcpp*)
+ # Portland Group C++ compiler
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+ cxx*)
+ # Compaq C++
+ # Make sure the PIC flag is empty. It appears that all Alpha
+ # Linux and Compaq Tru64 Unix objects are PIC.
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)=
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
+ ;;
+ xlc* | xlC* | bgxl[[cC]]* | mpixl[[cC]]*)
+ # IBM XL 8.0, 9.0 on PPC and BlueGene
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink'
+ ;;
+ *)
+ case `$CC -V 2>&1 | $SED 5q` in
+ *Sun\ C*)
+ # Sun C++ 5.9
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
+ ;;
+ esac
+ ;;
+ esac
+ ;;
+ lynxos*)
+ ;;
+ m88k*)
+ ;;
+ mvs*)
+ case $cc_basename in
+ cxx*)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-W c,exportall'
+ ;;
+ *)
+ ;;
+ esac
+ ;;
+ netbsd*)
+ ;;
+ *qnx* | *nto*)
+ # QNX uses GNU C++, but need to define -shared option too, otherwise
+ # it will coredump.
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
+ ;;
+ osf3* | osf4* | osf5*)
+ case $cc_basename in
+ KCC*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,'
+ ;;
+ RCC*)
+ # Rational C++ 2.4.1
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
+ ;;
+ cxx*)
+ # Digital/Compaq C++
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ # Make sure the PIC flag is empty. It appears that all Alpha
+ # Linux and Compaq Tru64 Unix objects are PIC.
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)=
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
+ ;;
+ *)
+ ;;
+ esac
+ ;;
+ psos*)
+ ;;
+ solaris*)
+ case $cc_basename in
+ CC* | sunCC*)
+ # Sun C++ 4.2, 5.x and Centerline C++
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
+ ;;
+ gcx*)
+ # Green Hills C++ Compiler
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
+ ;;
+ *)
+ ;;
+ esac
+ ;;
+ sunos4*)
+ case $cc_basename in
+ CC*)
+ # Sun C++ 4.x
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+ lcc*)
+ # Lucid
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
+ ;;
+ *)
+ ;;
+ esac
+ ;;
+ sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
+ case $cc_basename in
+ CC*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+ esac
+ ;;
+ tandem*)
+ case $cc_basename in
+ NCC*)
+ # NonStop-UX NCC 3.20
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ ;;
+ *)
+ ;;
+ esac
+ ;;
+ vxworks*)
+ ;;
+ *)
+ _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
+ ;;
+ esac
+ fi
+],
+[
+ if test yes = "$GCC"; then
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
+
+ case $host_os in
+ aix*)
+ # All AIX code is PIC.
+ if test ia64 = "$host_cpu"; then
+ # AIX 5 now supports IA64 processor
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ fi
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ ;;
+
+ amigaos*)
+ case $host_cpu in
+ powerpc)
+ # see comment about AmigaOS4 .so support
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ ;;
+ m68k)
+ # FIXME: we need at least 68020 code to build shared libraries, but
+ # adding the '-m68020' flag to GCC prevents building anything better,
+ # like '-m68040'.
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4'
+ ;;
+ esac
+ ;;
+
+ beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
+ # PIC is the default for these OSes.
+ ;;
+
+ mingw* | cygwin* | pw32* | os2* | cegcc*)
+ # This hack is so that the source file can tell whether it is being
+ # built for inclusion in a dll (and should export symbols for example).
+ # Although the cygwin gcc ignores -fPIC, still need this for old-style
+ # (--disable-auto-import) libraries
+ m4_if([$1], [GCJ], [],
+ [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
+ case $host_os in
+ os2*)
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static'
+ ;;
+ esac
+ ;;
+
+ darwin* | rhapsody*)
+ # PIC is the default on this platform
+ # Common symbols not allowed in MH_DYLIB files
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common'
+ ;;
+
+ haiku*)
+ # PIC is the default for Haiku.
+ # The "-static" flag exists, but is broken.
+ _LT_TAGVAR(lt_prog_compiler_static, $1)=
+ ;;
+
+ hpux*)
+ # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
+ # PA HP-UX. On IA64 HP-UX, PIC is the default but the pic flag
+ # sets the default TLS model and affects inlining.
+ case $host_cpu in
+ hppa*64*)
+ # +Z the default
+ ;;
+ *)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ ;;
+ esac
+ ;;
+
+ interix[[3-9]]*)
+ # Interix 3.x gcc -fpic/-fPIC options generate broken code.
+ # Instead, we relocate shared libraries at runtime.
+ ;;
+
+ msdosdjgpp*)
+ # Just because we use GCC doesn't mean we suddenly get shared libraries
+ # on systems that don't support them.
+ _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
+ enable_shared=no
+ ;;
+
+ *nto* | *qnx*)
+ # QNX uses GNU C++, but need to define -shared option too, otherwise
+ # it will coredump.
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
+ ;;
+
+ sysv4*MP*)
+ if test -d /usr/nec; then
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic
+ fi
+ ;;
+
+ *)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ ;;
+ esac
+
+ case $cc_basename in
+ nvcc*) # Cuda Compiler Driver 2.2
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Xlinker '
+ if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)="-Xcompiler $_LT_TAGVAR(lt_prog_compiler_pic, $1)"
+ fi
+ ;;
+ esac
+ else
+ # PORTME Check for flag to pass linker flags through the system compiler.
+ case $host_os in
+ aix*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ if test ia64 = "$host_cpu"; then
+ # AIX 5 now supports IA64 processor
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ else
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp'
+ fi
+ ;;
+
+ darwin* | rhapsody*)
+ # PIC is the default on this platform
+ # Common symbols not allowed in MH_DYLIB files
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common'
+ case $cc_basename in
+ nagfor*)
+ # NAG Fortran compiler
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+ esac
+ ;;
+
+ mingw* | cygwin* | pw32* | os2* | cegcc*)
+ # This hack is so that the source file can tell whether it is being
+ # built for inclusion in a dll (and should export symbols for example).
+ m4_if([$1], [GCJ], [],
+ [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
+ case $host_os in
+ os2*)
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static'
+ ;;
+ esac
+ ;;
+
+ hpux9* | hpux10* | hpux11*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
+ # not for PA HP-UX.
+ case $host_cpu in
+ hppa*64*|ia64*)
+ # +Z the default
+ ;;
+ *)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z'
+ ;;
+ esac
+ # Is there a better lt_prog_compiler_static that works with the bundled CC?
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive'
+ ;;
+
+ irix5* | irix6* | nonstopux*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ # PIC (with -KPIC) is the default.
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
+ ;;
+
+ linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
+ case $cc_basename in
+ # old Intel for x86_64, which still supported -KPIC.
+ ecc*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
+ ;;
+ # icc used to be incompatible with GCC.
+ # ICC 10 doesn't accept -KPIC any more.
+ icc* | ifort*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
+ ;;
+ # Lahey Fortran 8.1.
+ lf95*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='--shared'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='--static'
+ ;;
+ nagfor*)
+ # NAG Fortran compiler
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+ tcc*)
+ # Fabrice Bellard et al's Tiny C Compiler
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
+ ;;
+ pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
+ # Portland Group compilers (*not* the Pentium gcc compiler,
+ # which looks to be a dead project)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+ ccc*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ # All Alpha code is PIC.
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
+ ;;
+ xl* | bgxl* | bgf* | mpixl*)
+ # IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink'
+ ;;
+ *)
+ case `$CC -V 2>&1 | $SED 5q` in
+ *Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [[1-7]].* | *Sun*Fortran*\ 8.[[0-3]]*)
+ # Sun Fortran 8.3 passes all unrecognized flags to the linker
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)=''
+ ;;
+ *Sun\ F* | *Sun*Fortran*)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
+ ;;
+ *Sun\ C*)
+ # Sun C 5.9
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ ;;
+ *Intel*\ [[CF]]*Compiler*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
+ ;;
+ *Portland\ Group*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+ esac
+ ;;
+ esac
+ ;;
+
+ newsos6)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+
+ *nto* | *qnx*)
+ # QNX uses GNU C++, but need to define -shared option too, otherwise
+ # it will coredump.
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
+ ;;
+
+ osf3* | osf4* | osf5*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ # All OSF/1 code is PIC.
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
+ ;;
+
+ rdos*)
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
+ ;;
+
+ solaris*)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ case $cc_basename in
+ f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ';;
+ *)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,';;
+ esac
+ ;;
+
+ sunos4*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+
+ sysv4 | sysv4.2uw2* | sysv4.3*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+
+ sysv4*MP*)
+ if test -d /usr/nec; then
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-Kconform_pic'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ fi
+ ;;
+
+ sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+
+ unicos*)
+ _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
+ _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
+ ;;
+
+ uts4*)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
+ _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
+ ;;
+
+ *)
+ _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
+ ;;
+ esac
+ fi
+])
+case $host_os in
+ # For platforms that do not support PIC, -DPIC is meaningless:
+ *djgpp*)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)=
+ ;;
+ *)
+ _LT_TAGVAR(lt_prog_compiler_pic, $1)="$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])"
+ ;;
+esac
+
+AC_CACHE_CHECK([for $compiler option to produce PIC],
+ [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)],
+ [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_prog_compiler_pic, $1)])
+_LT_TAGVAR(lt_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)
+
+#
+# Check to make sure the PIC flag actually works.
+#
+if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then
+ _LT_COMPILER_OPTION([if $compiler PIC flag $_LT_TAGVAR(lt_prog_compiler_pic, $1) works],
+ [_LT_TAGVAR(lt_cv_prog_compiler_pic_works, $1)],
+ [$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])], [],
+ [case $_LT_TAGVAR(lt_prog_compiler_pic, $1) in
+ "" | " "*) ;;
+ *) _LT_TAGVAR(lt_prog_compiler_pic, $1)=" $_LT_TAGVAR(lt_prog_compiler_pic, $1)" ;;
+ esac],
+ [_LT_TAGVAR(lt_prog_compiler_pic, $1)=
+ _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no])
+fi
+_LT_TAGDECL([pic_flag], [lt_prog_compiler_pic], [1],
+ [Additional compiler flags for building library objects])
+
+_LT_TAGDECL([wl], [lt_prog_compiler_wl], [1],
+ [How to pass a linker flag through the compiler])
+#
+# Check to make sure the static flag actually works.
+#
+wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1) eval lt_tmp_static_flag=\"$_LT_TAGVAR(lt_prog_compiler_static, $1)\"
+_LT_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works],
+ _LT_TAGVAR(lt_cv_prog_compiler_static_works, $1),
+ $lt_tmp_static_flag,
+ [],
+ [_LT_TAGVAR(lt_prog_compiler_static, $1)=])
+_LT_TAGDECL([link_static_flag], [lt_prog_compiler_static], [1],
+ [Compiler flag to prevent dynamic linking])
+])# _LT_COMPILER_PIC
+
+
+# _LT_LINKER_SHLIBS([TAGNAME])
+# ----------------------------
+# See if the linker supports building shared libraries.
+m4_defun([_LT_LINKER_SHLIBS],
+[AC_REQUIRE([LT_PATH_LD])dnl
+AC_REQUIRE([LT_PATH_NM])dnl
+m4_require([_LT_PATH_MANIFEST_TOOL])dnl
+m4_require([_LT_FILEUTILS_DEFAULTS])dnl
+m4_require([_LT_DECL_EGREP])dnl
+m4_require([_LT_DECL_SED])dnl
+m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl
+m4_require([_LT_TAG_COMPILER])dnl
+AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries])
+m4_if([$1], [CXX], [
+ _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
+ _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*']
+ case $host_os in
+ aix[[4-9]]*)
+ # If we're using GNU nm, then we don't want the "-C" option.
+ # -C means demangle to GNU nm, but means don't demangle to AIX nm.
+ # Without the "-l" option, or with the "-B" option, AIX nm treats
+ # weak defined symbols like other global defined symbols, whereas
+ # GNU nm marks them as "W".
+ # While the 'weak' keyword is ignored in the Export File, we need
+ # it in the Import File for the 'aix-soname' feature, so we have
+ # to replace the "-B" option with "-P" for AIX nm.
+ if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
+ _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
+ else
+ _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
+ fi
+ ;;
+ pw32*)
+ _LT_TAGVAR(export_symbols_cmds, $1)=$ltdll_cmds
+ ;;
+ cygwin* | mingw* | cegcc*)
+ case $cc_basename in
+ cl* | icl*)
+ _LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
+ ;;
+ *)
+ _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols'
+ _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname']
+ ;;
+ esac
+ ;;
+ *)
+ _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
+ ;;
+ esac
+], [
+ runpath_var=
+ _LT_TAGVAR(allow_undefined_flag, $1)=
+ _LT_TAGVAR(always_export_symbols, $1)=no
+ _LT_TAGVAR(archive_cmds, $1)=
+ _LT_TAGVAR(archive_expsym_cmds, $1)=
+ _LT_TAGVAR(compiler_needs_object, $1)=no
+ _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)=
+ _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
+ _LT_TAGVAR(hardcode_automatic, $1)=no
+ _LT_TAGVAR(hardcode_direct, $1)=no
+ _LT_TAGVAR(hardcode_direct_absolute, $1)=no
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=
+ _LT_TAGVAR(hardcode_minus_L, $1)=no
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported
+ _LT_TAGVAR(inherit_rpath, $1)=no
+ _LT_TAGVAR(link_all_deplibs, $1)=unknown
+ _LT_TAGVAR(module_cmds, $1)=
+ _LT_TAGVAR(module_expsym_cmds, $1)=
+ _LT_TAGVAR(old_archive_from_new_cmds, $1)=
+ _LT_TAGVAR(old_archive_from_expsyms_cmds, $1)=
+ _LT_TAGVAR(thread_safe_flag_spec, $1)=
+ _LT_TAGVAR(whole_archive_flag_spec, $1)=
+ # include_expsyms should be a list of space-separated symbols to be *always*
+ # included in the symbol list
+ _LT_TAGVAR(include_expsyms, $1)=
+ # exclude_expsyms can be an extended regexp of symbols to exclude
+ # it will be wrapped by ' (' and ')$', so one must not match beginning or
+ # end of line. Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc',
+ # as well as any symbol that contains 'd'.
+ _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*']
+ # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out
+ # platforms (ab)use it in PIC code, but their linkers get confused if
+ # the symbol is explicitly referenced. Since portable code cannot
+ # rely on this symbol name, it's probably fine to never include it in
+ # preloaded symbol tables.
+ # Exclude shared library initialization/finalization symbols.
+dnl Note also adjust exclude_expsyms for C++ above.
+ extract_expsyms_cmds=
+
+ case $host_os in
+ cygwin* | mingw* | pw32* | cegcc*)
+ # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time
+ # When not using gcc, we currently assume that we are using
+ # Microsoft Visual C++ or Intel C++ Compiler.
+ if test yes != "$GCC"; then
+ with_gnu_ld=no
+ fi
+ ;;
+ interix*)
+ # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC)
+ with_gnu_ld=yes
+ ;;
+ openbsd* | bitrig*)
+ with_gnu_ld=no
+ ;;
+ esac
+
+ _LT_TAGVAR(ld_shlibs, $1)=yes
+
+ # On some targets, GNU ld is compatible enough with the native linker
+ # that we're better off using the native interface for both.
+ lt_use_gnu_ld_interface=no
+ if test yes = "$with_gnu_ld"; then
+ case $host_os in
+ aix*)
+ # The AIX port of GNU ld has always aspired to compatibility
+ # with the native linker. However, as the warning in the GNU ld
+ # block says, versions before 2.19.5* couldn't really create working
+ # shared libraries, regardless of the interface used.
+ case `$LD -v 2>&1` in
+ *\ \(GNU\ Binutils\)\ 2.19.5*) ;;
+ *\ \(GNU\ Binutils\)\ 2.[[2-9]]*) ;;
+ *\ \(GNU\ Binutils\)\ [[3-9]]*) ;;
+ *)
+ lt_use_gnu_ld_interface=yes
+ ;;
+ esac
+ ;;
+ *)
+ lt_use_gnu_ld_interface=yes
+ ;;
+ esac
+ fi
+
+ if test yes = "$lt_use_gnu_ld_interface"; then
+ # If archive_cmds runs LD, not CC, wlarc should be empty
+ wlarc='$wl'
+
+ # Set some defaults for GNU ld with shared library support. These
+ # are reset later if shared libraries are not supported. Putting them
+ # here allows them to be overridden if necessary.
+ runpath_var=LD_RUN_PATH
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
+ # ancient GNU ld didn't support --whole-archive et. al.
+ if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then
+ _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
+ else
+ _LT_TAGVAR(whole_archive_flag_spec, $1)=
+ fi
+ supports_anon_versioning=no
+ case `$LD -v | $SED -e 's/([[^)]]\+)\s\+//' 2>&1` in
+ *GNU\ gold*) supports_anon_versioning=yes ;;
+ *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.10.*) ;; # catch versions < 2.11
+ *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ...
+ *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ...
+ *\ 2.11.*) ;; # other 2.11 versions
+ *) supports_anon_versioning=yes ;;
+ esac
+
+ # See if GNU ld supports shared libraries.
+ case $host_os in
+ aix[[3-9]]*)
+ # On AIX/PPC, the GNU linker is very broken
+ if test ia64 != "$host_cpu"; then
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ cat <<_LT_EOF 1>&2
+
+*** Warning: the GNU linker, at least up to release 2.19, is reported
+*** to be unable to reliably create shared libraries on AIX.
+*** Therefore, libtool is disabling shared libraries support. If you
+*** really care for shared libraries, you may want to install binutils
+*** 2.20 or above, or modify your PATH so that a non-GNU linker is found.
+*** You will then need to restart the configuration process.
+
+_LT_EOF
+ fi
+ ;;
+
+ amigaos*)
+ case $host_cpu in
+ powerpc)
+ # see comment about AmigaOS4 .so support
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)=''
+ ;;
+ m68k)
+ _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ ;;
+ esac
+ ;;
+
+ beos*)
+ if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ # Joseph Beckenbach says some releases of gcc
+ # support --undefined. This deserves some investigation. FIXME
+ _LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+
+ cygwin* | mingw* | pw32* | cegcc*)
+ # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless,
+ # as there is no search path for DLLs.
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols'
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ _LT_TAGVAR(always_export_symbols, $1)=no
+ _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
+ _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols'
+ _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname']
+
+ if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
+ # If the export-symbols file already is a .def file, use it as
+ # is; otherwise, prepend EXPORTS...
+ _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
+ cp $export_symbols $output_objdir/$soname.def;
+ else
+ echo EXPORTS > $output_objdir/$soname.def;
+ cat $export_symbols >> $output_objdir/$soname.def;
+ fi~
+ $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+
+ haiku*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+ ;;
+
+ os2*)
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ shrext_cmds=.dll
+ _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
+ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
+ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
+ $ECHO EXPORTS >> $output_objdir/$libname.def~
+ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
+ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
+ emximp -o $lib $output_objdir/$libname.def'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
+ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
+ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
+ $ECHO EXPORTS >> $output_objdir/$libname.def~
+ prefix_cmds="$SED"~
+ if test EXPORTS = "`$SED 1q $export_symbols`"; then
+ prefix_cmds="$prefix_cmds -e 1d";
+ fi~
+ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
+ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
+ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
+ emximp -o $lib $output_objdir/$libname.def'
+ _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
+ _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
+ _LT_TAGVAR(file_list_spec, $1)='@'
+ ;;
+
+ interix[[3-9]]*)
+ _LT_TAGVAR(hardcode_direct, $1)=no
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
+ # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
+ # Instead, shared libraries are loaded at an image base (0x10000000 by
+ # default) and relocated if they conflict, which is a slow very memory
+ # consuming and fragmenting process. To avoid this, we pick a random,
+ # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
+ # time. Moving up from 0x10000000 also allows more sbrk(2) space.
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
+ ;;
+
+ gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu)
+ tmp_diet=no
+ if test linux-dietlibc = "$host_os"; then
+ case $cc_basename in
+ diet\ *) tmp_diet=yes;; # linux-dietlibc with static linking (!diet-dyn)
+ esac
+ fi
+ if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \
+ && test no = "$tmp_diet"
+ then
+ tmp_addflag=' $pic_flag'
+ tmp_sharedflag='-shared'
+ case $cc_basename,$host_cpu in
+ pgcc*) # Portland Group C compiler
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
+ tmp_addflag=' $pic_flag'
+ ;;
+ pgf77* | pgf90* | pgf95* | pgfortran*)
+ # Portland Group f77 and f90 compilers
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
+ tmp_addflag=' $pic_flag -Mnomain' ;;
+ ecc*,ia64* | icc*,ia64*) # Intel C compiler on ia64
+ tmp_addflag=' -i_dynamic' ;;
+ efc*,ia64* | ifort*,ia64*) # Intel Fortran compiler on ia64
+ tmp_addflag=' -i_dynamic -nofor_main' ;;
+ ifc* | ifort*) # Intel Fortran compiler
+ tmp_addflag=' -nofor_main' ;;
+ lf95*) # Lahey Fortran 8.1
+ _LT_TAGVAR(whole_archive_flag_spec, $1)=
+ tmp_sharedflag='--shared' ;;
+ nagfor*) # NAGFOR 5.3
+ tmp_sharedflag='-Wl,-shared' ;;
+ xl[[cC]]* | bgxl[[cC]]* | mpixl[[cC]]*) # IBM XL C 8.0 on PPC (deal with xlf below)
+ tmp_sharedflag='-qmkshrobj'
+ tmp_addflag= ;;
+ nvcc*) # Cuda Compiler Driver 2.2
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
+ _LT_TAGVAR(compiler_needs_object, $1)=yes
+ ;;
+ esac
+ case `$CC -V 2>&1 | $SED 5q` in
+ *Sun\ C*) # Sun C 5.9
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
+ _LT_TAGVAR(compiler_needs_object, $1)=yes
+ tmp_sharedflag='-G' ;;
+ *Sun\ F*) # Sun Fortran 8.3
+ tmp_sharedflag='-G' ;;
+ esac
+ _LT_TAGVAR(archive_cmds, $1)='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+
+ if test yes = "$supports_anon_versioning"; then
+ _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~
+ cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
+ echo "local: *; };" >> $output_objdir/$libname.ver~
+ $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
+ fi
+
+ case $cc_basename in
+ tcc*)
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='-rdynamic'
+ ;;
+ xlf* | bgf* | bgxlf* | mpixlf*)
+ # IBM XL Fortran 10.1 on PPC cannot create shared libs itself
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='--whole-archive$convenience --no-whole-archive'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ _LT_TAGVAR(archive_cmds, $1)='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib'
+ if test yes = "$supports_anon_versioning"; then
+ _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~
+ cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
+ echo "local: *; };" >> $output_objdir/$libname.ver~
+ $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib'
+ fi
+ ;;
+ esac
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+
+ netbsd*)
+ if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
+ _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
+ wlarc=
+ else
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
+ fi
+ ;;
+
+ solaris*)
+ if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ cat <<_LT_EOF 1>&2
+
+*** Warning: The releases 2.8.* of the GNU linker cannot reliably
+*** create shared libraries on Solaris systems. Therefore, libtool
+*** is disabling shared libraries support. We urge you to upgrade GNU
+*** binutils to release 2.9.1 or newer. Another option is to modify
+*** your PATH or compiler configuration so that the native linker is
+*** used, and then restart.
+
+_LT_EOF
+ elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+
+ sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*)
+ case `$LD -v 2>&1` in
+ *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.1[[0-5]].*)
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ cat <<_LT_EOF 1>&2
+
+*** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot
+*** reliably create shared libraries on SCO systems. Therefore, libtool
+*** is disabling shared libraries support. We urge you to upgrade GNU
+*** binutils to release 2.16.91.0.3 or newer. Another option is to modify
+*** your PATH or compiler configuration so that the native linker is
+*** used, and then restart.
+
+_LT_EOF
+ ;;
+ *)
+ # For security reasons, it is highly recommended that you always
+ # use absolute paths for naming shared libraries, and exclude the
+ # DT_RUNPATH tag from executables and libraries. But doing so
+ # requires that you compile everything twice, which is a pain.
+ if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+ esac
+ ;;
+
+ sunos4*)
+ _LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags'
+ wlarc=
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+
+ *)
+ if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+ esac
+
+ if test no = "$_LT_TAGVAR(ld_shlibs, $1)"; then
+ runpath_var=
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)=
+ _LT_TAGVAR(whole_archive_flag_spec, $1)=
+ fi
+ else
+ # PORTME fill in a description of your system's linker (not GNU ld)
+ case $host_os in
+ aix3*)
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ _LT_TAGVAR(always_export_symbols, $1)=yes
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname'
+ # Note: this linker hardcodes the directories in LIBPATH if there
+ # are no directories specified by -L.
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then
+ # Neither direct hardcoding nor static linking is supported with a
+ # broken collect2.
+ _LT_TAGVAR(hardcode_direct, $1)=unsupported
+ fi
+ ;;
+
+ aix[[4-9]]*)
+ if test ia64 = "$host_cpu"; then
+ # On IA64, the linker does run time linking by default, so we don't
+ # have to do anything special.
+ aix_use_runtimelinking=no
+ exp_sym_flag='-Bexport'
+ no_entry_flag=
+ else
+ # If we're using GNU nm, then we don't want the "-C" option.
+ # -C means demangle to GNU nm, but means don't demangle to AIX nm.
+ # Without the "-l" option, or with the "-B" option, AIX nm treats
+ # weak defined symbols like other global defined symbols, whereas
+ # GNU nm marks them as "W".
+ # While the 'weak' keyword is ignored in the Export File, we need
+ # it in the Import File for the 'aix-soname' feature, so we have
+ # to replace the "-B" option with "-P" for AIX nm.
+ if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
+ _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
+ else
+ _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
+ fi
+ aix_use_runtimelinking=no
+
+ # Test if we are trying to use run time linking or normal
+ # AIX style linking. If -brtl is somewhere in LDFLAGS, we
+ # have runtime linking enabled, and use it for executables.
+ # For shared libraries, we enable/disable runtime linking
+ # depending on the kind of the shared library created -
+ # when "with_aix_soname,aix_use_runtimelinking" is:
+ # "aix,no" lib.a(lib.so.V) shared, rtl:no, for executables
+ # "aix,yes" lib.so shared, rtl:yes, for executables
+ # lib.a static archive
+ # "both,no" lib.so.V(shr.o) shared, rtl:yes
+ # lib.a(lib.so.V) shared, rtl:no, for executables
+ # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
+ # lib.a(lib.so.V) shared, rtl:no
+ # "svr4,*" lib.so.V(shr.o) shared, rtl:yes, for executables
+ # lib.a static archive
+ case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*)
+ for ld_flag in $LDFLAGS; do
+ if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then
+ aix_use_runtimelinking=yes
+ break
+ fi
+ done
+ if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
+ # With aix-soname=svr4, we create the lib.so.V shared archives only,
+ # so we don't have lib.a shared libs to link our executables.
+ # We have to force runtime linking in this case.
+ aix_use_runtimelinking=yes
+ LDFLAGS="$LDFLAGS -Wl,-brtl"
+ fi
+ ;;
+ esac
+
+ exp_sym_flag='-bexport'
+ no_entry_flag='-bnoentry'
+ fi
+
+ # When large executables or shared objects are built, AIX ld can
+ # have problems creating the table of contents. If linking a library
+ # or program results in "error TOC overflow" add -mminimal-toc to
+ # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not
+ # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
+
+ _LT_TAGVAR(archive_cmds, $1)=''
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=':'
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+ _LT_TAGVAR(file_list_spec, $1)='$wl-f,'
+ case $with_aix_soname,$aix_use_runtimelinking in
+ aix,*) ;; # traditional, no import file
+ svr4,* | *,yes) # use import file
+ # The Import File defines what to hardcode.
+ _LT_TAGVAR(hardcode_direct, $1)=no
+ _LT_TAGVAR(hardcode_direct_absolute, $1)=no
+ ;;
+ esac
+
+ if test yes = "$GCC"; then
+ case $host_os in aix4.[[012]]|aix4.[[012]].*)
+ # We only want to do this on AIX 4.2 and lower, the check
+ # below for broken collect2 doesn't work under 4.3+
+ collect2name=`$CC -print-prog-name=collect2`
+ if test -f "$collect2name" &&
+ strings "$collect2name" | $GREP resolve_lib_name >/dev/null
+ then
+ # We have reworked collect2
+ :
+ else
+ # We have old collect2
+ _LT_TAGVAR(hardcode_direct, $1)=unsupported
+ # It fails to find uninstalled libraries when the uninstalled
+ # path is not listed in the libpath. Setting hardcode_minus_L
+ # to unsupported forces relinking
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=
+ fi
+ ;;
+ esac
+ shared_flag='-shared'
+ if test yes = "$aix_use_runtimelinking"; then
+ shared_flag="$shared_flag "'$wl-G'
+ fi
+ # Need to ensure runtime linking is disabled for the traditional
+ # shared library, or the linker may eventually find shared libraries
+ # /with/ Import File - we do not want to mix them.
+ shared_flag_aix='-shared'
+ shared_flag_svr4='-shared $wl-G'
+ else
+ # not using gcc
+ if test ia64 = "$host_cpu"; then
+ # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
+ # chokes on -Wl,-G. The following line is correct:
+ shared_flag='-G'
+ else
+ if test yes = "$aix_use_runtimelinking"; then
+ shared_flag='$wl-G'
+ else
+ shared_flag='$wl-bM:SRE'
+ fi
+ shared_flag_aix='$wl-bM:SRE'
+ shared_flag_svr4='$wl-G'
+ fi
+ fi
+
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall'
+ # It seems that -bexpall does not export symbols beginning with
+ # underscore (_), so it is better to generate a list of symbols to export.
+ _LT_TAGVAR(always_export_symbols, $1)=yes
+ if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
+ # Warning - without using the other runtime loading flags (-brtl),
+ # -berok will link without error, but may produce a broken library.
+ _LT_TAGVAR(allow_undefined_flag, $1)='-berok'
+ # Determine the default libpath from the value encoded in an
+ # empty executable.
+ _LT_SYS_MODULE_PATH_AIX([$1])
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
+ else
+ if test ia64 = "$host_cpu"; then
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib'
+ _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs"
+ _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
+ else
+ # Determine the default libpath from the value encoded in an
+ # empty executable.
+ _LT_SYS_MODULE_PATH_AIX([$1])
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
+ # Warning - without using the other run time loading flags,
+ # -berok will link without error, but may produce a broken library.
+ _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok'
+ _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok'
+ if test yes = "$with_gnu_ld"; then
+ # We only use this code for GNU lds that support --whole-archive.
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive'
+ else
+ # Exported symbols can be pulled into shared objects from archives
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience'
+ fi
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=yes
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
+ # -brtl affects multiple linker settings, -berok does not and is overridden later
+ compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`'
+ if test svr4 != "$with_aix_soname"; then
+ # This is similar to how AIX traditionally builds its shared libraries.
+ _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
+ fi
+ if test aix != "$with_aix_soname"; then
+ _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
+ else
+ # used by -dlpreopen to get the symbols
+ _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV $output_objdir/$realname.d/$soname $output_objdir'
+ fi
+ _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d'
+ fi
+ fi
+ ;;
+
+ amigaos*)
+ case $host_cpu in
+ powerpc)
+ # see comment about AmigaOS4 .so support
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)=''
+ ;;
+ m68k)
+ _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ ;;
+ esac
+ ;;
+
+ bsdi[[45]]*)
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)=-rdynamic
+ ;;
+
+ cygwin* | mingw* | pw32* | cegcc*)
+ # When not using gcc, we currently assume that we are using
+ # Microsoft Visual C++ or Intel C++ Compiler.
+ # hardcode_libdir_flag_spec is actually meaningless, as there is
+ # no search path for DLLs.
+ case $cc_basename in
+ cl* | icl*)
+ # Native MSVC or ICC
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' '
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ _LT_TAGVAR(always_export_symbols, $1)=yes
+ _LT_TAGVAR(file_list_spec, $1)='@'
+ # Tell ltmain to make .lib files, not .a files.
+ libext=lib
+ # Tell ltmain to make .dll files, not .so files.
+ shrext_cmds=.dll
+ # FIXME: Setting linknames here is a bad hack.
+ _LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
+ _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
+ cp "$export_symbols" "$output_objdir/$soname.def";
+ echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
+ else
+ $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
+ fi~
+ $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
+ linknames='
+ # The linker will not automatically build a static lib if we build a DLL.
+ # _LT_TAGVAR(old_archive_from_new_cmds, $1)='true'
+ _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
+ _LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
+ _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1,DATA/'\'' | $SED -e '\''/^[[AITW]][[ ]]/s/.*[[ ]]//'\'' | sort | uniq > $export_symbols'
+ # Don't use ranlib
+ _LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib'
+ _LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~
+ lt_tool_outputfile="@TOOL_OUTPUT@"~
+ case $lt_outputfile in
+ *.exe|*.EXE) ;;
+ *)
+ lt_outputfile=$lt_outputfile.exe
+ lt_tool_outputfile=$lt_tool_outputfile.exe
+ ;;
+ esac~
+ if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
+ $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
+ $RM "$lt_outputfile.manifest";
+ fi'
+ ;;
+ *)
+ # Assume MSVC and ICC wrapper
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' '
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ # Tell ltmain to make .lib files, not .a files.
+ libext=lib
+ # Tell ltmain to make .dll files, not .so files.
+ shrext_cmds=.dll
+ # FIXME: Setting linknames here is a bad hack.
+ _LT_TAGVAR(archive_cmds, $1)='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames='
+ # The linker will automatically build a .lib file if we build a DLL.
+ _LT_TAGVAR(old_archive_from_new_cmds, $1)='true'
+ # FIXME: Should let the user specify the lib program.
+ _LT_TAGVAR(old_archive_cmds, $1)='lib -OUT:$oldlib$oldobjs$old_deplibs'
+ _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
+ ;;
+ esac
+ ;;
+
+ darwin* | rhapsody*)
+ _LT_DARWIN_LINKER_FEATURES($1)
+ ;;
+
+ dgux*)
+ _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+
+ # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor
+ # support. Future versions do this automatically, but an explicit c++rt0.o
+ # does not break anything, and helps significantly (at the cost of a little
+ # extra space).
+ freebsd2.2*)
+ _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+
+ # Unfortunately, older versions of FreeBSD 2 do not have this feature.
+ freebsd2.*)
+ _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+
+ # FreeBSD 3 and greater uses gcc -shared to do shared libraries.
+ freebsd* | dragonfly* | midnightbsd*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+
+ hpux9*)
+ if test yes = "$GCC"; then
+ _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
+ else
+ _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
+ fi
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+
+ # hardcode_minus_L: Not really in the search PATH,
+ # but as the default location of the library.
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
+ ;;
+
+ hpux10*)
+ if test yes,no = "$GCC,$with_gnu_ld"; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
+ else
+ _LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
+ fi
+ if test no = "$with_gnu_ld"; then
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
+ # hardcode_minus_L: Not really in the search PATH,
+ # but as the default location of the library.
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ fi
+ ;;
+
+ hpux11*)
+ if test yes,no = "$GCC,$with_gnu_ld"; then
+ case $host_cpu in
+ hppa*64*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
+ ;;
+ ia64*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
+ ;;
+ *)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
+ ;;
+ esac
+ else
+ case $host_cpu in
+ hppa*64*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
+ ;;
+ ia64*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
+ ;;
+ *)
+ m4_if($1, [], [
+ # Older versions of the 11.00 compiler do not understand -b yet
+ # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does)
+ _LT_LINKER_OPTION([if $CC understands -b],
+ _LT_TAGVAR(lt_cv_prog_compiler__b, $1), [-b],
+ [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'],
+ [_LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'])],
+ [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'])
+ ;;
+ esac
+ fi
+ if test no = "$with_gnu_ld"; then
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+
+ case $host_cpu in
+ hppa*64*|ia64*)
+ _LT_TAGVAR(hardcode_direct, $1)=no
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+ *)
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
+
+ # hardcode_minus_L: Not really in the search PATH,
+ # but as the default location of the library.
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ ;;
+ esac
+ fi
+ ;;
+
+ irix5* | irix6* | nonstopux*)
+ if test yes = "$GCC"; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
+ # Try to use the -exported_symbol ld option, if it does not
+ # work, assume that -exports_file does not work either and
+ # implicitly export all symbols.
+ # This should be the same for all languages, so no per-tag cache variable.
+ AC_CACHE_CHECK([whether the $host_os linker accepts -exported_symbol],
+ [lt_cv_irix_exported_symbol],
+ [save_LDFLAGS=$LDFLAGS
+ LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null"
+ AC_LINK_IFELSE(
+ [AC_LANG_SOURCE(
+ [AC_LANG_CASE([C], [[int foo (void) { return 0; }]],
+ [C++], [[int foo (void) { return 0; }]],
+ [Fortran 77], [[
+ subroutine foo
+ end]],
+ [Fortran], [[
+ subroutine foo
+ end]])])],
+ [lt_cv_irix_exported_symbol=yes],
+ [lt_cv_irix_exported_symbol=no])
+ LDFLAGS=$save_LDFLAGS])
+ if test yes = "$lt_cv_irix_exported_symbol"; then
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
+ fi
+ else
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
+ fi
+ _LT_TAGVAR(archive_cmds_need_lc, $1)='no'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+ _LT_TAGVAR(inherit_rpath, $1)=yes
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+ ;;
+
+ linux*)
+ case $cc_basename in
+ tcc*)
+ # Fabrice Bellard et al's Tiny C Compiler
+ _LT_TAGVAR(ld_shlibs, $1)=yes
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
+ ;;
+ esac
+ ;;
+
+ netbsd*)
+ if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
+ _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' # a.out
+ else
+ _LT_TAGVAR(archive_cmds, $1)='$LD -shared -o $lib $libobjs $deplibs $linker_flags' # ELF
+ fi
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+
+ newsos6)
+ _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+
+ *nto* | *qnx*)
+ ;;
+
+ openbsd* | bitrig*)
+ if test -f /usr/libexec/ld.so; then
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
+ if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
+ else
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
+ fi
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+
+ os2*)
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ shrext_cmds=.dll
+ _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
+ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
+ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
+ $ECHO EXPORTS >> $output_objdir/$libname.def~
+ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
+ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
+ emximp -o $lib $output_objdir/$libname.def'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
+ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
+ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
+ $ECHO EXPORTS >> $output_objdir/$libname.def~
+ prefix_cmds="$SED"~
+ if test EXPORTS = "`$SED 1q $export_symbols`"; then
+ prefix_cmds="$prefix_cmds -e 1d";
+ fi~
+ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
+ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
+ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
+ emximp -o $lib $output_objdir/$libname.def'
+ _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
+ _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
+ _LT_TAGVAR(file_list_spec, $1)='@'
+ ;;
+
+ osf3*)
+ if test yes = "$GCC"; then
+ _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
+ else
+ _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
+ fi
+ _LT_TAGVAR(archive_cmds_need_lc, $1)='no'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+ ;;
+
+ osf4* | osf5*) # as osf3* with the addition of -msym flag
+ if test yes = "$GCC"; then
+ _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ else
+ _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~
+ $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp'
+
+ # Both c and cxx compiler support -rpath directly
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir'
+ fi
+ _LT_TAGVAR(archive_cmds_need_lc, $1)='no'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+ ;;
+
+ solaris*)
+ _LT_TAGVAR(no_undefined_flag, $1)=' -z defs'
+ if test yes = "$GCC"; then
+ wlarc='$wl'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
+ $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
+ else
+ case `$CC -V 2>&1` in
+ *"Compilers 5.0"*)
+ wlarc=''
+ _LT_TAGVAR(archive_cmds, $1)='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
+ $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp'
+ ;;
+ *)
+ wlarc='$wl'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
+ $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
+ ;;
+ esac
+ fi
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ case $host_os in
+ solaris2.[[0-5]] | solaris2.[[0-5]].*) ;;
+ *)
+ # The compiler driver will combine and reorder linker options,
+ # but understands '-z linker_flag'. GCC discards it without '$wl',
+ # but is careful enough not to reorder.
+ # Supported since Solaris 2.6 (maybe 2.5.1?)
+ if test yes = "$GCC"; then
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
+ else
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract'
+ fi
+ ;;
+ esac
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+ ;;
+
+ sunos4*)
+ if test sequent = "$host_vendor"; then
+ # Use $CC to link under sequent, because it throws in some extra .o
+ # files that make .init and .fini sections work.
+ _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags'
+ else
+ _LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags'
+ fi
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+
+ sysv4)
+ case $host_vendor in
+ sni)
+ _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
+ _LT_TAGVAR(hardcode_direct, $1)=yes # is this really true???
+ ;;
+ siemens)
+ ## LD is ld it makes a PLAMLIB
+ ## CC just makes a GrossModule.
+ _LT_TAGVAR(archive_cmds, $1)='$LD -G -o $lib $libobjs $deplibs $linker_flags'
+ _LT_TAGVAR(reload_cmds, $1)='$CC -r -o $output$reload_objs'
+ _LT_TAGVAR(hardcode_direct, $1)=no
+ ;;
+ motorola)
+ _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
+ _LT_TAGVAR(hardcode_direct, $1)=no #Motorola manual says yes, but my tests say they lie
+ ;;
+ esac
+ runpath_var='LD_RUN_PATH'
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+
+ sysv4.3*)
+ _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='-Bexport'
+ ;;
+
+ sysv4*MP*)
+ if test -d /usr/nec; then
+ _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ runpath_var=LD_RUN_PATH
+ hardcode_runpath_var=yes
+ _LT_TAGVAR(ld_shlibs, $1)=yes
+ fi
+ ;;
+
+ sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*)
+ _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=no
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ runpath_var='LD_RUN_PATH'
+
+ if test yes = "$GCC"; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ else
+ _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ fi
+ ;;
+
+ sysv5* | sco3.2v5* | sco5v6*)
+ # Note: We CANNOT use -z defs as we might desire, because we do not
+ # link with -lc, and that would cause any symbols used from libc to
+ # always be unresolved, which means just about no library would
+ # ever link correctly. If we're not using GNU ld we use -z text
+ # though, which does catch some bad symbols but isn't as heavy-handed
+ # as -z defs.
+ _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
+ _LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs'
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=no
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=':'
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport'
+ runpath_var='LD_RUN_PATH'
+
+ if test yes = "$GCC"; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ else
+ _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ fi
+ ;;
+
+ uts4*)
+ _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+
+ *)
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ esac
+
+ if test sni = "$host_vendor"; then
+ case $host in
+ sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*)
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Blargedynsym'
+ ;;
+ esac
+ fi
+ fi
+])
+AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)])
+test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no
+
+_LT_TAGVAR(with_gnu_ld, $1)=$with_gnu_ld
+
+_LT_DECL([], [libext], [0], [Old archive suffix (normally "a")])dnl
+_LT_DECL([], [shrext_cmds], [1], [Shared library suffix (normally ".so")])dnl
+_LT_DECL([], [extract_expsyms_cmds], [2],
+ [The commands to extract the exported symbol list from a shared archive])
+
+#
+# Do we need to explicitly link libc?
+#
+case "x$_LT_TAGVAR(archive_cmds_need_lc, $1)" in
+x|xyes)
+ # Assume -lc should be added
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=yes
+
+ if test yes,yes = "$GCC,$enable_shared"; then
+ case $_LT_TAGVAR(archive_cmds, $1) in
+ *'~'*)
+ # FIXME: we may have to deal with multi-command sequences.
+ ;;
+ '$CC '*)
+ # Test whether the compiler implicitly links with -lc since on some
+ # systems, -lgcc has to come before -lc. If gcc already passes -lc
+ # to ld, don't add -lc before -lgcc.
+ AC_CACHE_CHECK([whether -lc should be explicitly linked in],
+ [lt_cv_]_LT_TAGVAR(archive_cmds_need_lc, $1),
+ [$RM conftest*
+ echo "$lt_simple_compile_test_code" > conftest.$ac_ext
+
+ if AC_TRY_EVAL(ac_compile) 2>conftest.err; then
+ soname=conftest
+ lib=conftest
+ libobjs=conftest.$ac_objext
+ deplibs=
+ wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1)
+ pic_flag=$_LT_TAGVAR(lt_prog_compiler_pic, $1)
+ compiler_flags=-v
+ linker_flags=-v
+ verstring=
+ output_objdir=.
+ libname=conftest
+ lt_save_allow_undefined_flag=$_LT_TAGVAR(allow_undefined_flag, $1)
+ _LT_TAGVAR(allow_undefined_flag, $1)=
+ if AC_TRY_EVAL(_LT_TAGVAR(archive_cmds, $1) 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1)
+ then
+ lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=no
+ else
+ lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=yes
+ fi
+ _LT_TAGVAR(allow_undefined_flag, $1)=$lt_save_allow_undefined_flag
+ else
+ cat conftest.err 1>&5
+ fi
+ $RM conftest*
+ ])
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=$lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)
+ ;;
+ esac
+ fi
+ ;;
+esac
+
+_LT_TAGDECL([build_libtool_need_lc], [archive_cmds_need_lc], [0],
+ [Whether or not to add -lc for building shared libraries])
+_LT_TAGDECL([allow_libtool_libs_with_static_runtimes],
+ [enable_shared_with_static_runtimes], [0],
+ [Whether or not to disallow shared libs when runtime libs are static])
+_LT_TAGDECL([], [export_dynamic_flag_spec], [1],
+ [Compiler flag to allow reflexive dlopens])
+_LT_TAGDECL([], [whole_archive_flag_spec], [1],
+ [Compiler flag to generate shared objects directly from archives])
+_LT_TAGDECL([], [compiler_needs_object], [1],
+ [Whether the compiler copes with passing no objects directly])
+_LT_TAGDECL([], [old_archive_from_new_cmds], [2],
+ [Create an old-style archive from a shared archive])
+_LT_TAGDECL([], [old_archive_from_expsyms_cmds], [2],
+ [Create a temporary old-style archive to link instead of a shared archive])
+_LT_TAGDECL([], [archive_cmds], [2], [Commands used to build a shared archive])
+_LT_TAGDECL([], [archive_expsym_cmds], [2])
+_LT_TAGDECL([], [module_cmds], [2],
+ [Commands used to build a loadable module if different from building
+ a shared archive.])
+_LT_TAGDECL([], [module_expsym_cmds], [2])
+_LT_TAGDECL([], [with_gnu_ld], [1],
+ [Whether we are building with GNU ld or not])
+_LT_TAGDECL([], [allow_undefined_flag], [1],
+ [Flag that allows shared libraries with undefined symbols to be built])
+_LT_TAGDECL([], [no_undefined_flag], [1],
+ [Flag that enforces no undefined symbols])
+_LT_TAGDECL([], [hardcode_libdir_flag_spec], [1],
+ [Flag to hardcode $libdir into a binary during linking.
+ This must work even if $libdir does not exist])
+_LT_TAGDECL([], [hardcode_libdir_separator], [1],
+ [Whether we need a single "-rpath" flag with a separated argument])
+_LT_TAGDECL([], [hardcode_direct], [0],
+ [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes
+ DIR into the resulting binary])
+_LT_TAGDECL([], [hardcode_direct_absolute], [0],
+ [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes
+ DIR into the resulting binary and the resulting library dependency is
+ "absolute", i.e impossible to change by setting $shlibpath_var if the
+ library is relocated])
+_LT_TAGDECL([], [hardcode_minus_L], [0],
+ [Set to "yes" if using the -LDIR flag during linking hardcodes DIR
+ into the resulting binary])
+_LT_TAGDECL([], [hardcode_shlibpath_var], [0],
+ [Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
+ into the resulting binary])
+_LT_TAGDECL([], [hardcode_automatic], [0],
+ [Set to "yes" if building a shared library automatically hardcodes DIR
+ into the library and all subsequent libraries and executables linked
+ against it])
+_LT_TAGDECL([], [inherit_rpath], [0],
+ [Set to yes if linker adds runtime paths of dependent libraries
+ to runtime path list])
+_LT_TAGDECL([], [link_all_deplibs], [0],
+ [Whether libtool must link a program against all its dependency libraries])
+_LT_TAGDECL([], [always_export_symbols], [0],
+ [Set to "yes" if exported symbols are required])
+_LT_TAGDECL([], [export_symbols_cmds], [2],
+ [The commands to list exported symbols])
+_LT_TAGDECL([], [exclude_expsyms], [1],
+ [Symbols that should not be listed in the preloaded symbols])
+_LT_TAGDECL([], [include_expsyms], [1],
+ [Symbols that must always be exported])
+_LT_TAGDECL([], [prelink_cmds], [2],
+ [Commands necessary for linking programs (against libraries) with templates])
+_LT_TAGDECL([], [postlink_cmds], [2],
+ [Commands necessary for finishing linking programs])
+_LT_TAGDECL([], [file_list_spec], [1],
+ [Specify filename containing input files])
+dnl FIXME: Not yet implemented
+dnl _LT_TAGDECL([], [thread_safe_flag_spec], [1],
+dnl [Compiler flag to generate thread safe objects])
+])# _LT_LINKER_SHLIBS
+
+
+# _LT_LANG_C_CONFIG([TAG])
+# ------------------------
+# Ensure that the configuration variables for a C compiler are suitably
+# defined. These variables are subsequently used by _LT_CONFIG to write
+# the compiler configuration to 'libtool'.
+m4_defun([_LT_LANG_C_CONFIG],
+[m4_require([_LT_DECL_EGREP])dnl
+lt_save_CC=$CC
+AC_LANG_PUSH(C)
+
+# Source file extension for C test sources.
+ac_ext=c
+
+# Object file extension for compiled C test sources.
+objext=o
+_LT_TAGVAR(objext, $1)=$objext
+
+# Code to be used in simple compile tests
+lt_simple_compile_test_code="int some_variable = 0;"
+
+# Code to be used in simple link tests
+lt_simple_link_test_code='int main(){return(0);}'
+
+_LT_TAG_COMPILER
+# Save the default compiler, since it gets overwritten when the other
+# tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP.
+compiler_DEFAULT=$CC
+
+# save warnings/boilerplate of simple test code
+_LT_COMPILER_BOILERPLATE
+_LT_LINKER_BOILERPLATE
+
+## CAVEAT EMPTOR:
+## There is no encapsulation within the following macros, do not change
+## the running order or otherwise move them around unless you know exactly
+## what you are doing...
+if test -n "$compiler"; then
+ _LT_COMPILER_NO_RTTI($1)
+ _LT_COMPILER_PIC($1)
+ _LT_COMPILER_C_O($1)
+ _LT_COMPILER_FILE_LOCKS($1)
+ _LT_LINKER_SHLIBS($1)
+ _LT_SYS_DYNAMIC_LINKER($1)
+ _LT_LINKER_HARDCODE_LIBPATH($1)
+ LT_SYS_DLOPEN_SELF
+ _LT_CMD_STRIPLIB
+
+ # Report what library types will actually be built
+ AC_MSG_CHECKING([if libtool supports shared libraries])
+ AC_MSG_RESULT([$can_build_shared])
+
+ AC_MSG_CHECKING([whether to build shared libraries])
+ test no = "$can_build_shared" && enable_shared=no
+
+ # On AIX, shared libraries and static libraries use the same namespace, and
+ # are all built from PIC.
+ case $host_os in
+ aix3*)
+ test yes = "$enable_shared" && enable_static=no
+ if test -n "$RANLIB"; then
+ archive_cmds="$archive_cmds~\$RANLIB \$lib"
+ postinstall_cmds='$RANLIB $lib'
+ fi
+ ;;
+
+ aix[[4-9]]*)
+ if test ia64 != "$host_cpu"; then
+ case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
+ yes,aix,yes) ;; # shared object as lib.so file only
+ yes,svr4,*) ;; # shared object as lib.so archive member only
+ yes,*) enable_static=no ;; # shared object in lib.a archive as well
+ esac
+ fi
+ ;;
+ esac
+ AC_MSG_RESULT([$enable_shared])
+
+ AC_MSG_CHECKING([whether to build static libraries])
+ # Make sure either enable_shared or enable_static is yes.
+ test yes = "$enable_shared" || enable_static=yes
+ AC_MSG_RESULT([$enable_static])
+
+ _LT_CONFIG($1)
+fi
+AC_LANG_POP
+CC=$lt_save_CC
+])# _LT_LANG_C_CONFIG
+
+
+# _LT_LANG_CXX_CONFIG([TAG])
+# --------------------------
+# Ensure that the configuration variables for a C++ compiler are suitably
+# defined. These variables are subsequently used by _LT_CONFIG to write
+# the compiler configuration to 'libtool'.
+m4_defun([_LT_LANG_CXX_CONFIG],
+[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
+m4_require([_LT_DECL_EGREP])dnl
+m4_require([_LT_PATH_MANIFEST_TOOL])dnl
+if test -n "$CXX" && ( test no != "$CXX" &&
+ ( (test g++ = "$CXX" && `g++ -v >/dev/null 2>&1` ) ||
+ (test g++ != "$CXX"))); then
+ AC_PROG_CXXCPP
+else
+ _lt_caught_CXX_error=yes
+fi
+
+AC_LANG_PUSH(C++)
+_LT_TAGVAR(archive_cmds_need_lc, $1)=no
+_LT_TAGVAR(allow_undefined_flag, $1)=
+_LT_TAGVAR(always_export_symbols, $1)=no
+_LT_TAGVAR(archive_expsym_cmds, $1)=
+_LT_TAGVAR(compiler_needs_object, $1)=no
+_LT_TAGVAR(export_dynamic_flag_spec, $1)=
+_LT_TAGVAR(hardcode_direct, $1)=no
+_LT_TAGVAR(hardcode_direct_absolute, $1)=no
+_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
+_LT_TAGVAR(hardcode_libdir_separator, $1)=
+_LT_TAGVAR(hardcode_minus_L, $1)=no
+_LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported
+_LT_TAGVAR(hardcode_automatic, $1)=no
+_LT_TAGVAR(inherit_rpath, $1)=no
+_LT_TAGVAR(module_cmds, $1)=
+_LT_TAGVAR(module_expsym_cmds, $1)=
+_LT_TAGVAR(link_all_deplibs, $1)=unknown
+_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
+_LT_TAGVAR(reload_flag, $1)=$reload_flag
+_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
+_LT_TAGVAR(no_undefined_flag, $1)=
+_LT_TAGVAR(whole_archive_flag_spec, $1)=
+_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
+
+# Source file extension for C++ test sources.
+ac_ext=cpp
+
+# Object file extension for compiled C++ test sources.
+objext=o
+_LT_TAGVAR(objext, $1)=$objext
+
+# No sense in running all these tests if we already determined that
+# the CXX compiler isn't working. Some variables (like enable_shared)
+# are currently assumed to apply to all compilers on this platform,
+# and will be corrupted by setting them based on a non-working compiler.
+if test yes != "$_lt_caught_CXX_error"; then
+ # Code to be used in simple compile tests
+ lt_simple_compile_test_code="int some_variable = 0;"
+
+ # Code to be used in simple link tests
+ lt_simple_link_test_code='int main(int, char *[[]]) { return(0); }'
+
+ # ltmain only uses $CC for tagged configurations so make sure $CC is set.
+ _LT_TAG_COMPILER
+
+ # save warnings/boilerplate of simple test code
+ _LT_COMPILER_BOILERPLATE
+ _LT_LINKER_BOILERPLATE
+
+ # Allow CC to be a program name with arguments.
+ lt_save_CC=$CC
+ lt_save_CFLAGS=$CFLAGS
+ lt_save_LD=$LD
+ lt_save_GCC=$GCC
+ GCC=$GXX
+ lt_save_with_gnu_ld=$with_gnu_ld
+ lt_save_path_LD=$lt_cv_path_LD
+ if test -n "${lt_cv_prog_gnu_ldcxx+set}"; then
+ lt_cv_prog_gnu_ld=$lt_cv_prog_gnu_ldcxx
+ else
+ $as_unset lt_cv_prog_gnu_ld
+ fi
+ if test -n "${lt_cv_path_LDCXX+set}"; then
+ lt_cv_path_LD=$lt_cv_path_LDCXX
+ else
+ $as_unset lt_cv_path_LD
+ fi
+ test -z "${LDCXX+set}" || LD=$LDCXX
+ CC=${CXX-"c++"}
+ CFLAGS=$CXXFLAGS
+ compiler=$CC
+ _LT_TAGVAR(compiler, $1)=$CC
+ _LT_CC_BASENAME([$compiler])
+
+ if test -n "$compiler"; then
+ # We don't want -fno-exception when compiling C++ code, so set the
+ # no_builtin_flag separately
+ if test yes = "$GXX"; then
+ _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin'
+ else
+ _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=
+ fi
+
+ if test yes = "$GXX"; then
+ # Set up default GNU C++ configuration
+
+ LT_PATH_LD
+
+ # Check if GNU C++ uses GNU ld as the underlying linker, since the
+ # archiving commands below assume that GNU ld is being used.
+ if test yes = "$with_gnu_ld"; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
+
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
+
+ # If archive_cmds runs LD, not CC, wlarc should be empty
+ # XXX I think wlarc can be eliminated in ltcf-cxx, but I need to
+ # investigate it a little bit more. (MM)
+ wlarc='$wl'
+
+ # ancient GNU ld didn't support --whole-archive et. al.
+ if eval "`$CC -print-prog-name=ld` --help 2>&1" |
+ $GREP 'no-whole-archive' > /dev/null; then
+ _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
+ else
+ _LT_TAGVAR(whole_archive_flag_spec, $1)=
+ fi
+ else
+ with_gnu_ld=no
+ wlarc=
+
+ # A generic and very simple default shared library creation
+ # command for GNU C++ for the case where it uses the native
+ # linker, instead of GNU ld. If possible, this setting should
+ # overridden to take advantage of the native linker features on
+ # the platform it is being used on.
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib'
+ fi
+
+ # Commands to make compiler produce verbose output that lists
+ # what "hidden" libraries, object files and flags are used when
+ # linking a shared library.
+ output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"'
+
+ else
+ GXX=no
+ with_gnu_ld=no
+ wlarc=
+ fi
+
+ # PORTME: fill in a description of your system's C++ link characteristics
+ AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries])
+ _LT_TAGVAR(ld_shlibs, $1)=yes
+ case $host_os in
+ aix3*)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ aix[[4-9]]*)
+ if test ia64 = "$host_cpu"; then
+ # On IA64, the linker does run time linking by default, so we don't
+ # have to do anything special.
+ aix_use_runtimelinking=no
+ exp_sym_flag='-Bexport'
+ no_entry_flag=
+ else
+ aix_use_runtimelinking=no
+
+ # Test if we are trying to use run time linking or normal
+ # AIX style linking. If -brtl is somewhere in LDFLAGS, we
+ # have runtime linking enabled, and use it for executables.
+ # For shared libraries, we enable/disable runtime linking
+ # depending on the kind of the shared library created -
+ # when "with_aix_soname,aix_use_runtimelinking" is:
+ # "aix,no" lib.a(lib.so.V) shared, rtl:no, for executables
+ # "aix,yes" lib.so shared, rtl:yes, for executables
+ # lib.a static archive
+ # "both,no" lib.so.V(shr.o) shared, rtl:yes
+ # lib.a(lib.so.V) shared, rtl:no, for executables
+ # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
+ # lib.a(lib.so.V) shared, rtl:no
+ # "svr4,*" lib.so.V(shr.o) shared, rtl:yes, for executables
+ # lib.a static archive
+ case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*)
+ for ld_flag in $LDFLAGS; do
+ case $ld_flag in
+ *-brtl*)
+ aix_use_runtimelinking=yes
+ break
+ ;;
+ esac
+ done
+ if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
+ # With aix-soname=svr4, we create the lib.so.V shared archives only,
+ # so we don't have lib.a shared libs to link our executables.
+ # We have to force runtime linking in this case.
+ aix_use_runtimelinking=yes
+ LDFLAGS="$LDFLAGS -Wl,-brtl"
+ fi
+ ;;
+ esac
+
+ exp_sym_flag='-bexport'
+ no_entry_flag='-bnoentry'
+ fi
+
+ # When large executables or shared objects are built, AIX ld can
+ # have problems creating the table of contents. If linking a library
+ # or program results in "error TOC overflow" add -mminimal-toc to
+ # CXXFLAGS/CFLAGS for g++/gcc. In the cases where that is not
+ # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
+
+ _LT_TAGVAR(archive_cmds, $1)=''
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=':'
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+ _LT_TAGVAR(file_list_spec, $1)='$wl-f,'
+ case $with_aix_soname,$aix_use_runtimelinking in
+ aix,*) ;; # no import file
+ svr4,* | *,yes) # use import file
+ # The Import File defines what to hardcode.
+ _LT_TAGVAR(hardcode_direct, $1)=no
+ _LT_TAGVAR(hardcode_direct_absolute, $1)=no
+ ;;
+ esac
+
+ if test yes = "$GXX"; then
+ case $host_os in aix4.[[012]]|aix4.[[012]].*)
+ # We only want to do this on AIX 4.2 and lower, the check
+ # below for broken collect2 doesn't work under 4.3+
+ collect2name=`$CC -print-prog-name=collect2`
+ if test -f "$collect2name" &&
+ strings "$collect2name" | $GREP resolve_lib_name >/dev/null
+ then
+ # We have reworked collect2
+ :
+ else
+ # We have old collect2
+ _LT_TAGVAR(hardcode_direct, $1)=unsupported
+ # It fails to find uninstalled libraries when the uninstalled
+ # path is not listed in the libpath. Setting hardcode_minus_L
+ # to unsupported forces relinking
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=
+ fi
+ esac
+ shared_flag='-shared'
+ if test yes = "$aix_use_runtimelinking"; then
+ shared_flag=$shared_flag' $wl-G'
+ fi
+ # Need to ensure runtime linking is disabled for the traditional
+ # shared library, or the linker may eventually find shared libraries
+ # /with/ Import File - we do not want to mix them.
+ shared_flag_aix='-shared'
+ shared_flag_svr4='-shared $wl-G'
+ else
+ # not using gcc
+ if test ia64 = "$host_cpu"; then
+ # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
+ # chokes on -Wl,-G. The following line is correct:
+ shared_flag='-G'
+ else
+ if test yes = "$aix_use_runtimelinking"; then
+ shared_flag='$wl-G'
+ else
+ shared_flag='$wl-bM:SRE'
+ fi
+ shared_flag_aix='$wl-bM:SRE'
+ shared_flag_svr4='$wl-G'
+ fi
+ fi
+
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall'
+ # It seems that -bexpall does not export symbols beginning with
+ # underscore (_), so it is better to generate a list of symbols to
+ # export.
+ _LT_TAGVAR(always_export_symbols, $1)=yes
+ if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
+ # Warning - without using the other runtime loading flags (-brtl),
+ # -berok will link without error, but may produce a broken library.
+ # The "-G" linker flag allows undefined symbols.
+ _LT_TAGVAR(no_undefined_flag, $1)='-bernotok'
+ # Determine the default libpath from the value encoded in an empty
+ # executable.
+ _LT_SYS_MODULE_PATH_AIX([$1])
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
+
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
+ else
+ if test ia64 = "$host_cpu"; then
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib'
+ _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs"
+ _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
+ else
+ # Determine the default libpath from the value encoded in an
+ # empty executable.
+ _LT_SYS_MODULE_PATH_AIX([$1])
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
+ # Warning - without using the other run time loading flags,
+ # -berok will link without error, but may produce a broken library.
+ _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok'
+ _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok'
+ if test yes = "$with_gnu_ld"; then
+ # We only use this code for GNU lds that support --whole-archive.
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive'
+ else
+ # Exported symbols can be pulled into shared objects from archives
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience'
+ fi
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=yes
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
+ # -brtl affects multiple linker settings, -berok does not and is overridden later
+ compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`'
+ if test svr4 != "$with_aix_soname"; then
+ # This is similar to how AIX traditionally builds its shared
+ # libraries. Need -bnortl late, we may have -brtl in LDFLAGS.
+ _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
+ fi
+ if test aix != "$with_aix_soname"; then
+ _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
+ else
+ # used by -dlpreopen to get the symbols
+ _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV $output_objdir/$realname.d/$soname $output_objdir'
+ fi
+ _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d'
+ fi
+ fi
+ ;;
+
+ beos*)
+ if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ # Joseph Beckenbach says some releases of gcc
+ # support --undefined. This deserves some investigation. FIXME
+ _LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+
+ chorus*)
+ case $cc_basename in
+ *)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ esac
+ ;;
+
+ cygwin* | mingw* | pw32* | cegcc*)
+ case $GXX,$cc_basename in
+ ,cl* | no,cl* | ,icl* | no,icl*)
+ # Native MSVC or ICC
+ # hardcode_libdir_flag_spec is actually meaningless, as there is
+ # no search path for DLLs.
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' '
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ _LT_TAGVAR(always_export_symbols, $1)=yes
+ _LT_TAGVAR(file_list_spec, $1)='@'
+ # Tell ltmain to make .lib files, not .a files.
+ libext=lib
+ # Tell ltmain to make .dll files, not .so files.
+ shrext_cmds=.dll
+ # FIXME: Setting linknames here is a bad hack.
+ _LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
+ _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
+ cp "$export_symbols" "$output_objdir/$soname.def";
+ echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
+ else
+ $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
+ fi~
+ $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
+ linknames='
+ # The linker will not automatically build a static lib if we build a DLL.
+ # _LT_TAGVAR(old_archive_from_new_cmds, $1)='true'
+ _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
+ # Don't use ranlib
+ _LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib'
+ _LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~
+ lt_tool_outputfile="@TOOL_OUTPUT@"~
+ case $lt_outputfile in
+ *.exe|*.EXE) ;;
+ *)
+ lt_outputfile=$lt_outputfile.exe
+ lt_tool_outputfile=$lt_tool_outputfile.exe
+ ;;
+ esac~
+ func_to_tool_file "$lt_outputfile"~
+ if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
+ $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
+ $RM "$lt_outputfile.manifest";
+ fi'
+ ;;
+ *)
+ # g++
+ # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless,
+ # as there is no search path for DLLs.
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols'
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ _LT_TAGVAR(always_export_symbols, $1)=no
+ _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
+
+ if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
+ # If the export-symbols file already is a .def file, use it as
+ # is; otherwise, prepend EXPORTS...
+ _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
+ cp $export_symbols $output_objdir/$soname.def;
+ else
+ echo EXPORTS > $output_objdir/$soname.def;
+ cat $export_symbols >> $output_objdir/$soname.def;
+ fi~
+ $CC -shared -nostdlib $output_objdir/$soname.def $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+ esac
+ ;;
+ darwin* | rhapsody*)
+ _LT_DARWIN_LINKER_FEATURES($1)
+ ;;
+
+ os2*)
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes
+ _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
+ shrext_cmds=.dll
+ _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
+ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
+ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
+ $ECHO EXPORTS >> $output_objdir/$libname.def~
+ emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
+ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
+ emximp -o $lib $output_objdir/$libname.def'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
+ $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
+ $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
+ $ECHO EXPORTS >> $output_objdir/$libname.def~
+ prefix_cmds="$SED"~
+ if test EXPORTS = "`$SED 1q $export_symbols`"; then
+ prefix_cmds="$prefix_cmds -e 1d";
+ fi~
+ prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
+ cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
+ $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
+ emximp -o $lib $output_objdir/$libname.def'
+ _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
+ _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
+ _LT_TAGVAR(file_list_spec, $1)='@'
+ ;;
+
+ dgux*)
+ case $cc_basename in
+ ec++*)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ ghcx*)
+ # Green Hills C++ Compiler
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ *)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ esac
+ ;;
+
+ freebsd2.*)
+ # C++ shared libraries reported to be fairly broken before
+ # switch to ELF
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+
+ freebsd-elf*)
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=no
+ ;;
+
+ freebsd* | dragonfly* | midnightbsd*)
+ # FreeBSD 3 and later use GNU C++ and GNU ld with standard ELF
+ # conventions
+ _LT_TAGVAR(ld_shlibs, $1)=yes
+ ;;
+
+ haiku*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+ ;;
+
+ hpux9*)
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH,
+ # but as the default
+ # location of the library.
+
+ case $cc_basename in
+ CC*)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ aCC*)
+ _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -b $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
+ # Commands to make compiler produce verbose output that lists
+ # what "hidden" libraries, object files and flags are used when
+ # linking a shared library.
+ #
+ # There doesn't appear to be a way to prevent this compiler from
+ # explicitly linking system object files so we need to strip them
+ # from the output so that they don't get included in the library
+ # dependencies.
+ output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $EGREP "\-L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
+ ;;
+ *)
+ if test yes = "$GXX"; then
+ _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared -nostdlib $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
+ else
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+ esac
+ ;;
+
+ hpux10*|hpux11*)
+ if test no = "$with_gnu_ld"; then
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+
+ case $host_cpu in
+ hppa*64*|ia64*)
+ ;;
+ *)
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
+ ;;
+ esac
+ fi
+ case $host_cpu in
+ hppa*64*|ia64*)
+ _LT_TAGVAR(hardcode_direct, $1)=no
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ ;;
+ *)
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
+ _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH,
+ # but as the default
+ # location of the library.
+ ;;
+ esac
+
+ case $cc_basename in
+ CC*)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ aCC*)
+ case $host_cpu in
+ hppa*64*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
+ ;;
+ ia64*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
+ ;;
+ *)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
+ ;;
+ esac
+ # Commands to make compiler produce verbose output that lists
+ # what "hidden" libraries, object files and flags are used when
+ # linking a shared library.
+ #
+ # There doesn't appear to be a way to prevent this compiler from
+ # explicitly linking system object files so we need to strip them
+ # from the output so that they don't get included in the library
+ # dependencies.
+ output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $GREP "\-L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
+ ;;
+ *)
+ if test yes = "$GXX"; then
+ if test no = "$with_gnu_ld"; then
+ case $host_cpu in
+ hppa*64*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib -fPIC $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
+ ;;
+ ia64*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
+ ;;
+ *)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
+ ;;
+ esac
+ fi
+ else
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+ esac
+ ;;
+
+ interix[[3-9]]*)
+ _LT_TAGVAR(hardcode_direct, $1)=no
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
+ # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
+ # Instead, shared libraries are loaded at an image base (0x10000000 by
+ # default) and relocated if they conflict, which is a slow very memory
+ # consuming and fragmenting process. To avoid this, we pick a random,
+ # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
+ # time. Moving up from 0x10000000 also allows more sbrk(2) space.
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
+ ;;
+ irix5* | irix6*)
+ case $cc_basename in
+ CC*)
+ # SGI C++
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared -all -multigot $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
+
+ # Archives containing C++ object files must be created using
+ # "CC -ar", where "CC" is the IRIX C++ compiler. This is
+ # necessary to make sure instantiated templates are included
+ # in the archive.
+ _LT_TAGVAR(old_archive_cmds, $1)='$CC -ar -WR,-u -o $oldlib $oldobjs'
+ ;;
+ *)
+ if test yes = "$GXX"; then
+ if test no = "$with_gnu_ld"; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
+ else
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` -o $lib'
+ fi
+ fi
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+ ;;
+ esac
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+ _LT_TAGVAR(inherit_rpath, $1)=yes
+ ;;
+
+ linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
+ case $cc_basename in
+ KCC*)
+ # Kuck and Associates, Inc. (KAI) C++ Compiler
+
+ # KCC will only create a shared library if the output file
+ # ends with ".so" (or ".sl" for HP-UX), so rename the library
+ # to its proper name (with version) after linking.
+ _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib $wl-retain-symbols-file,$export_symbols; mv \$templib $lib'
+ # Commands to make compiler produce verbose output that lists
+ # what "hidden" libraries, object files and flags are used when
+ # linking a shared library.
+ #
+ # There doesn't appear to be a way to prevent this compiler from
+ # explicitly linking system object files so we need to strip them
+ # from the output so that they don't get included in the library
+ # dependencies.
+ output_verbose_link_cmd='templist=`$CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1 | $GREP "ld"`; rm -f libconftest$shared_ext; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
+
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
+
+ # Archives containing C++ object files must be created using
+ # "CC -Bstatic", where "CC" is the KAI C++ compiler.
+ _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs'
+ ;;
+ icpc* | ecpc* )
+ # Intel C++
+ with_gnu_ld=yes
+ # version 8.0 and above of icpc choke on multiply defined symbols
+ # if we add $predep_objects and $postdep_objects, however 7.1 and
+ # earlier do not add the objects themselves.
+ case `$CC -V 2>&1` in
+ *"Version 7."*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
+ ;;
+ *) # Version 8.0 or newer
+ tmp_idyn=
+ case $host_cpu in
+ ia64*) tmp_idyn=' -i_dynamic';;
+ esac
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
+ ;;
+ esac
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=no
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive'
+ ;;
+ pgCC* | pgcpp*)
+ # Portland Group C++ compiler
+ case `$CC -V` in
+ *pgCC\ [[1-5]].* | *pgcpp\ [[1-5]].*)
+ _LT_TAGVAR(prelink_cmds, $1)='tpldir=Template.dir~
+ rm -rf $tpldir~
+ $CC --prelink_objects --instantiation_dir $tpldir $objs $libobjs $compile_deplibs~
+ compile_command="$compile_command `find $tpldir -name \*.o | sort | $NL2SP`"'
+ _LT_TAGVAR(old_archive_cmds, $1)='tpldir=Template.dir~
+ rm -rf $tpldir~
+ $CC --prelink_objects --instantiation_dir $tpldir $oldobjs$old_deplibs~
+ $AR $AR_FLAGS $oldlib$oldobjs$old_deplibs `find $tpldir -name \*.o | sort | $NL2SP`~
+ $RANLIB $oldlib'
+ _LT_TAGVAR(archive_cmds, $1)='tpldir=Template.dir~
+ rm -rf $tpldir~
+ $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~
+ $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='tpldir=Template.dir~
+ rm -rf $tpldir~
+ $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~
+ $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
+ ;;
+ *) # Version 6 and above use weak symbols
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
+ ;;
+ esac
+
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl--rpath $wl$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
+ ;;
+ cxx*)
+ # Compaq C++
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib $wl-retain-symbols-file $wl$export_symbols'
+
+ runpath_var=LD_RUN_PATH
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+
+ # Commands to make compiler produce verbose output that lists
+ # what "hidden" libraries, object files and flags are used when
+ # linking a shared library.
+ #
+ # There doesn't appear to be a way to prevent this compiler from
+ # explicitly linking system object files so we need to strip them
+ # from the output so that they don't get included in the library
+ # dependencies.
+ output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld .*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "X$list" | $Xsed'
+ ;;
+ xl* | mpixl* | bgxl*)
+ # IBM XL 8.0 on PPC, with GNU ld
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
+ if test yes = "$supports_anon_versioning"; then
+ _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~
+ cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
+ echo "local: *; };" >> $output_objdir/$libname.ver~
+ $CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
+ fi
+ ;;
+ *)
+ case `$CC -V 2>&1 | $SED 5q` in
+ *Sun\ C*)
+ # Sun C++ 5.9
+ _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file $wl$export_symbols'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
+ _LT_TAGVAR(compiler_needs_object, $1)=yes
+
+ # Not sure whether something based on
+ # $CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1
+ # would be better.
+ output_verbose_link_cmd='func_echo_all'
+
+ # Archives containing C++ object files must be created using
+ # "CC -xar", where "CC" is the Sun C++ compiler. This is
+ # necessary to make sure instantiated templates are included
+ # in the archive.
+ _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs'
+ ;;
+ esac
+ ;;
+ esac
+ ;;
+
+ lynxos*)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+
+ m88k*)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+
+ mvs*)
+ case $cc_basename in
+ cxx*)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ *)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ esac
+ ;;
+
+ netbsd*)
+ if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
+ _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $predep_objects $libobjs $deplibs $postdep_objects $linker_flags'
+ wlarc=
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ fi
+ # Workaround some broken pre-1.5 toolchains
+ output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP conftest.$objext | $SED -e "s:-lgcc -lc -lgcc::"'
+ ;;
+
+ *nto* | *qnx*)
+ _LT_TAGVAR(ld_shlibs, $1)=yes
+ ;;
+
+ openbsd* | bitrig*)
+ if test -f /usr/libexec/ld.so; then
+ _LT_TAGVAR(hardcode_direct, $1)=yes
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
+ if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`"; then
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file,$export_symbols -o $lib'
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
+ _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
+ fi
+ output_verbose_link_cmd=func_echo_all
+ else
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+
+ osf3* | osf4* | osf5*)
+ case $cc_basename in
+ KCC*)
+ # Kuck and Associates, Inc. (KAI) C++ Compiler
+
+ # KCC will only create a shared library if the output file
+ # ends with ".so" (or ".sl" for HP-UX), so rename the library
+ # to its proper name (with version) after linking.
+ _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo "$lib" | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib'
+
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+
+ # Archives containing C++ object files must be created using
+ # the KAI C++ compiler.
+ case $host in
+ osf3*) _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' ;;
+ *) _LT_TAGVAR(old_archive_cmds, $1)='$CC -o $oldlib $oldobjs' ;;
+ esac
+ ;;
+ RCC*)
+ # Rational C++ 2.4.1
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ cxx*)
+ case $host in
+ osf3*)
+ _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $soname `test -n "$verstring" && func_echo_all "$wl-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ ;;
+ *)
+ _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done~
+ echo "-hidden">> $lib.exp~
+ $CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname $wl-input $wl$lib.exp `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~
+ $RM $lib.exp'
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir'
+ ;;
+ esac
+
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+
+ # Commands to make compiler produce verbose output that lists
+ # what "hidden" libraries, object files and flags are used when
+ # linking a shared library.
+ #
+ # There doesn't appear to be a way to prevent this compiler from
+ # explicitly linking system object files so we need to strip them
+ # from the output so that they don't get included in the library
+ # dependencies.
+ output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld" | $GREP -v "ld:"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld.*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
+ ;;
+ *)
+ if test yes,no = "$GXX,$with_gnu_ld"; then
+ _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
+ case $host in
+ osf3*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
+ ;;
+ *)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
+ ;;
+ esac
+
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=:
+
+ # Commands to make compiler produce verbose output that lists
+ # what "hidden" libraries, object files and flags are used when
+ # linking a shared library.
+ output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"'
+
+ else
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ fi
+ ;;
+ esac
+ ;;
+
+ psos*)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+
+ sunos4*)
+ case $cc_basename in
+ CC*)
+ # Sun C++ 4.x
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ lcc*)
+ # Lucid
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ *)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ esac
+ ;;
+
+ solaris*)
+ case $cc_basename in
+ CC* | sunCC*)
+ # Sun C++ 4.2, 5.x and Centerline C++
+ _LT_TAGVAR(archive_cmds_need_lc,$1)=yes
+ _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs'
+ _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
+ $CC -G$allow_undefined_flag $wl-M $wl$lib.exp -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp'
+
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ case $host_os in
+ solaris2.[[0-5]] | solaris2.[[0-5]].*) ;;
+ *)
+ # The compiler driver will combine and reorder linker options,
+ # but understands '-z linker_flag'.
+ # Supported since Solaris 2.6 (maybe 2.5.1?)
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract'
+ ;;
+ esac
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+
+ output_verbose_link_cmd='func_echo_all'
+
+ # Archives containing C++ object files must be created using
+ # "CC -xar", where "CC" is the Sun C++ compiler. This is
+ # necessary to make sure instantiated templates are included
+ # in the archive.
+ _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs'
+ ;;
+ gcx*)
+ # Green Hills C++ Compiler
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib'
+
+ # The C++ compiler must be used to create the archive.
+ _LT_TAGVAR(old_archive_cmds, $1)='$CC $LDFLAGS -archive -o $oldlib $oldobjs'
+ ;;
+ *)
+ # GNU C++ compiler with Solaris linker
+ if test yes,no = "$GXX,$with_gnu_ld"; then
+ _LT_TAGVAR(no_undefined_flag, $1)=' $wl-z ${wl}defs'
+ if $CC --version | $GREP -v '^2\.7' > /dev/null; then
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
+ $CC -shared $pic_flag -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp'
+
+ # Commands to make compiler produce verbose output that lists
+ # what "hidden" libraries, object files and flags are used when
+ # linking a shared library.
+ output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"'
+ else
+ # g++ 2.7 appears to require '-G' NOT '-shared' on this
+ # platform.
+ _LT_TAGVAR(archive_cmds, $1)='$CC -G -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
+ $CC -G -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp'
+
+ # Commands to make compiler produce verbose output that lists
+ # what "hidden" libraries, object files and flags are used when
+ # linking a shared library.
+ output_verbose_link_cmd='$CC -G $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"'
+ fi
+
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $wl$libdir'
+ case $host_os in
+ solaris2.[[0-5]] | solaris2.[[0-5]].*) ;;
+ *)
+ _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
+ ;;
+ esac
+ fi
+ ;;
+ esac
+ ;;
+
+ sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*)
+ _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=no
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ runpath_var='LD_RUN_PATH'
+
+ case $cc_basename in
+ CC*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ ;;
+ *)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ ;;
+ esac
+ ;;
+
+ sysv5* | sco3.2v5* | sco5v6*)
+ # Note: We CANNOT use -z defs as we might desire, because we do not
+ # link with -lc, and that would cause any symbols used from libc to
+ # always be unresolved, which means just about no library would
+ # ever link correctly. If we're not using GNU ld we use -z text
+ # though, which does catch some bad symbols but isn't as heavy-handed
+ # as -z defs.
+ _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
+ _LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs'
+ _LT_TAGVAR(archive_cmds_need_lc, $1)=no
+ _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
+ _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir'
+ _LT_TAGVAR(hardcode_libdir_separator, $1)=':'
+ _LT_TAGVAR(link_all_deplibs, $1)=yes
+ _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport'
+ runpath_var='LD_RUN_PATH'
+
+ case $cc_basename in
+ CC*)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(old_archive_cmds, $1)='$CC -Tprelink_objects $oldobjs~
+ '"$_LT_TAGVAR(old_archive_cmds, $1)"
+ _LT_TAGVAR(reload_cmds, $1)='$CC -Tprelink_objects $reload_objs~
+ '"$_LT_TAGVAR(reload_cmds, $1)"
+ ;;
+ *)
+ _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
+ ;;
+ esac
+ ;;
+
+ tandem*)
+ case $cc_basename in
+ NCC*)
+ # NonStop-UX NCC 3.20
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ *)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ esac
+ ;;
+
+ vxworks*)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+
+ *)
+ # FIXME: insert proper C++ library support
+ _LT_TAGVAR(ld_shlibs, $1)=no
+ ;;
+ esac
+
+ AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)])
+ test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no
+
+ _LT_TAGVAR(GCC, $1)=$GXX
+ _LT_TAGVAR(LD, $1)=$LD
+
+ ## CAVEAT EMPTOR:
+ ## There is no encapsulation within the following macros, do not change
+ ## the running order or otherwise move them around unless you know exactly
+ ## what you are doing...
+ _LT_SYS_HIDDEN_LIBDEPS($1)
+ _LT_COMPILER_PIC($1)
+ _LT_COMPILER_C_O($1)
+ _LT_COMPILER_FILE_LOCKS($1)
+ _LT_LINKER_SHLIBS($1)
+ _LT_SYS_DYNAMIC_LINKER($1)
+ _LT_LINKER_HARDCODE_LIBPATH($1)
+
+ _LT_CONFIG($1)
+ fi # test -n "$compiler"
+
+ CC=$lt_save_CC
+ CFLAGS=$lt_save_CFLAGS
+ LDCXX=$LD
+ LD=$lt_save_LD
+ GCC=$lt_save_GCC
+ with_gnu_ld=$lt_save_with_gnu_ld
+ lt_cv_path_LDCXX=$lt_cv_path_LD
+ lt_cv_path_LD=$lt_save_path_LD
+ lt_cv_prog_gnu_ldcxx=$lt_cv_prog_gnu_ld
+ lt_cv_prog_gnu_ld=$lt_save_with_gnu_ld
+fi # test yes != "$_lt_caught_CXX_error"
+
+AC_LANG_POP
+])# _LT_LANG_CXX_CONFIG
+
+
+# _LT_FUNC_STRIPNAME_CNF
+# ----------------------
+# func_stripname_cnf prefix suffix name
+# strip PREFIX and SUFFIX off of NAME.
+# PREFIX and SUFFIX must not contain globbing or regex special
+# characters, hashes, percent signs, but SUFFIX may contain a leading
+# dot (in which case that matches only a dot).
+#
+# This function is identical to the (non-XSI) version of func_stripname,
+# except this one can be used by m4 code that may be executed by configure,
+# rather than the libtool script.
+m4_defun([_LT_FUNC_STRIPNAME_CNF],[dnl
+AC_REQUIRE([_LT_DECL_SED])
+AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])
+func_stripname_cnf ()
+{
+ case @S|@2 in
+ .*) func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%\\\\@S|@2\$%%"`;;
+ *) func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%@S|@2\$%%"`;;
+ esac
+} # func_stripname_cnf
+])# _LT_FUNC_STRIPNAME_CNF
+
+
+# _LT_SYS_HIDDEN_LIBDEPS([TAGNAME])
+# ---------------------------------
+# Figure out "hidden" library dependencies from verbose
+# compiler output when linking a shared library.
+# Parse the compiler output and extract the necessary
+# objects, libraries and library flags.
+m4_defun([_LT_SYS_HIDDEN_LIBDEPS],
+[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
+AC_REQUIRE([_LT_FUNC_STRIPNAME_CNF])dnl
+# Dependencies to place before and after the object being linked:
+_LT_TAGVAR(predep_objects, $1)=
+_LT_TAGVAR(postdep_objects, $1)=
+_LT_TAGVAR(predeps, $1)=
+_LT_TAGVAR(postdeps, $1)=
+_LT_TAGVAR(compiler_lib_search_path, $1)=
+
+dnl we can't use the lt_simple_compile_test_code here,
+dnl because it contains code intended for an executable,
+dnl not a library. It's possible we should let each
+dnl tag define a new lt_????_link_test_code variable,
+dnl but it's only used here...
+m4_if([$1], [], [cat > conftest.$ac_ext <<_LT_EOF
+int a;
+void foo (void) { a = 0; }
+_LT_EOF
+], [$1], [CXX], [cat > conftest.$ac_ext <<_LT_EOF
+class Foo
+{
+public:
+ Foo (void) { a = 0; }
+private:
+ int a;
+};
+_LT_EOF
+], [$1], [F77], [cat > conftest.$ac_ext <<_LT_EOF
+ subroutine foo
+ implicit none
+ integer*4 a
+ a=0
+ return
+ end
+_LT_EOF
+], [$1], [FC], [cat > conftest.$ac_ext <<_LT_EOF
+ subroutine foo
+ implicit none
+ integer a
+ a=0
+ return
+ end
+_LT_EOF
+], [$1], [GCJ], [cat > conftest.$ac_ext <<_LT_EOF
+public class foo {
+ private int a;
+ public void bar (void) {
+ a = 0;
+ }
+};
+_LT_EOF
+], [$1], [GO], [cat > conftest.$ac_ext <<_LT_EOF
+package foo
+func foo() {
+}
+_LT_EOF
+])
+
+_lt_libdeps_save_CFLAGS=$CFLAGS
+case "$CC $CFLAGS " in #(
+*\ -flto*\ *) CFLAGS="$CFLAGS -fno-lto" ;;
+*\ -fwhopr*\ *) CFLAGS="$CFLAGS -fno-whopr" ;;
+*\ -fuse-linker-plugin*\ *) CFLAGS="$CFLAGS -fno-use-linker-plugin" ;;
+esac
+
+dnl Parse the compiler output and extract the necessary
+dnl objects, libraries and library flags.
+if AC_TRY_EVAL(ac_compile); then
+ # Parse the compiler output and extract the necessary
+ # objects, libraries and library flags.
+
+ # Sentinel used to keep track of whether or not we are before
+ # the conftest object file.
+ pre_test_object_deps_done=no
+
+ for p in `eval "$output_verbose_link_cmd"`; do
+ case $prev$p in
+
+ -L* | -R* | -l*)
+ # Some compilers place space between "-{L,R}" and the path.
+ # Remove the space.
+ if test x-L = "$p" ||
+ test x-R = "$p"; then
+ prev=$p
+ continue
+ fi
+
+ # Expand the sysroot to ease extracting the directories later.
+ if test -z "$prev"; then
+ case $p in
+ -L*) func_stripname_cnf '-L' '' "$p"; prev=-L; p=$func_stripname_result ;;
+ -R*) func_stripname_cnf '-R' '' "$p"; prev=-R; p=$func_stripname_result ;;
+ -l*) func_stripname_cnf '-l' '' "$p"; prev=-l; p=$func_stripname_result ;;
+ esac
+ fi
+ case $p in
+ =*) func_stripname_cnf '=' '' "$p"; p=$lt_sysroot$func_stripname_result ;;
+ esac
+ if test no = "$pre_test_object_deps_done"; then
+ case $prev in
+ -L | -R)
+ # Internal compiler library paths should come after those
+ # provided the user. The postdeps already come after the
+ # user supplied libs so there is no need to process them.
+ if test -z "$_LT_TAGVAR(compiler_lib_search_path, $1)"; then
+ _LT_TAGVAR(compiler_lib_search_path, $1)=$prev$p
+ else
+ _LT_TAGVAR(compiler_lib_search_path, $1)="${_LT_TAGVAR(compiler_lib_search_path, $1)} $prev$p"
+ fi
+ ;;
+ # The "-l" case would never come before the object being
+ # linked, so don't bother handling this case.
+ esac
+ else
+ if test -z "$_LT_TAGVAR(postdeps, $1)"; then
+ _LT_TAGVAR(postdeps, $1)=$prev$p
+ else
+ _LT_TAGVAR(postdeps, $1)="${_LT_TAGVAR(postdeps, $1)} $prev$p"
+ fi
+ fi
+ prev=
+ ;;
+
+ *.lto.$objext) ;; # Ignore GCC LTO objects
+ *.$objext)
+ # This assumes that the test object file only shows up
+ # once in the compiler output.
+ if test "$p" = "conftest.$objext"; then
+ pre_test_object_deps_done=yes
+ continue
+ fi
+
+ if test no = "$pre_test_object_deps_done"; then
+ if test -z "$_LT_TAGVAR(predep_objects, $1)"; then
+ _LT_TAGVAR(predep_objects, $1)=$p
+ else
+ _LT_TAGVAR(predep_objects, $1)="$_LT_TAGVAR(predep_objects, $1) $p"
+ fi
+ else
+ if test -z "$_LT_TAGVAR(postdep_objects, $1)"; then
+ _LT_TAGVAR(postdep_objects, $1)=$p
+ else
+ _LT_TAGVAR(postdep_objects, $1)="$_LT_TAGVAR(postdep_objects, $1) $p"
+ fi
+ fi
+ ;;
+
+ *) ;; # Ignore the rest.
+
+ esac
+ done
+
+ # Clean up.
+ rm -f a.out a.exe
+else
+ echo "libtool.m4: error: problem compiling $1 test program"
+fi
+
+$RM -f confest.$objext
+CFLAGS=$_lt_libdeps_save_CFLAGS
+
+# PORTME: override above test on systems where it is broken
+m4_if([$1], [CXX],
+[case $host_os in
+interix[[3-9]]*)
+ # Interix 3.5 installs completely hosed .la files for C++, so rather than
+ # hack all around it, let's just trust "g++" to DTRT.
+ _LT_TAGVAR(predep_objects,$1)=
+ _LT_TAGVAR(postdep_objects,$1)=
+ _LT_TAGVAR(postdeps,$1)=
+ ;;
+esac
+])
+
+case " $_LT_TAGVAR(postdeps, $1) " in
+*" -lc "*) _LT_TAGVAR(archive_cmds_need_lc, $1)=no ;;
+esac
+ _LT_TAGVAR(compiler_lib_search_dirs, $1)=
+if test -n "${_LT_TAGVAR(compiler_lib_search_path, $1)}"; then
+ _LT_TAGVAR(compiler_lib_search_dirs, $1)=`echo " ${_LT_TAGVAR(compiler_lib_search_path, $1)}" | $SED -e 's! -L! !g' -e 's!^ !!'`
+fi
+_LT_TAGDECL([], [compiler_lib_search_dirs], [1],
+ [The directories searched by this compiler when creating a shared library])
+_LT_TAGDECL([], [predep_objects], [1],
+ [Dependencies to place before and after the objects being linked to
+ create a shared library])
+_LT_TAGDECL([], [postdep_objects], [1])
+_LT_TAGDECL([], [predeps], [1])
+_LT_TAGDECL([], [postdeps], [1])
+_LT_TAGDECL([], [compiler_lib_search_path], [1],
+ [The library search path used internally by the compiler when linking
+ a shared library])
+])# _LT_SYS_HIDDEN_LIBDEPS
+
+
+# _LT_LANG_F77_CONFIG([TAG])
+# --------------------------
+# Ensure that the configuration variables for a Fortran 77 compiler are
+# suitably defined. These variables are subsequently used by _LT_CONFIG
+# to write the compiler configuration to 'libtool'.
+m4_defun([_LT_LANG_F77_CONFIG],
+[AC_LANG_PUSH(Fortran 77)
+if test -z "$F77" || test no = "$F77"; then
+ _lt_disable_F77=yes
+fi
+
+_LT_TAGVAR(archive_cmds_need_lc, $1)=no
+_LT_TAGVAR(allow_undefined_flag, $1)=
+_LT_TAGVAR(always_export_symbols, $1)=no
+_LT_TAGVAR(archive_expsym_cmds, $1)=
+_LT_TAGVAR(export_dynamic_flag_spec, $1)=
+_LT_TAGVAR(hardcode_direct, $1)=no
+_LT_TAGVAR(hardcode_direct_absolute, $1)=no
+_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
+_LT_TAGVAR(hardcode_libdir_separator, $1)=
+_LT_TAGVAR(hardcode_minus_L, $1)=no
+_LT_TAGVAR(hardcode_automatic, $1)=no
+_LT_TAGVAR(inherit_rpath, $1)=no
+_LT_TAGVAR(module_cmds, $1)=
+_LT_TAGVAR(module_expsym_cmds, $1)=
+_LT_TAGVAR(link_all_deplibs, $1)=unknown
+_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
+_LT_TAGVAR(reload_flag, $1)=$reload_flag
+_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
+_LT_TAGVAR(no_undefined_flag, $1)=
+_LT_TAGVAR(whole_archive_flag_spec, $1)=
+_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
+
+# Source file extension for f77 test sources.
+ac_ext=f
+
+# Object file extension for compiled f77 test sources.
+objext=o
+_LT_TAGVAR(objext, $1)=$objext
+
+# No sense in running all these tests if we already determined that
+# the F77 compiler isn't working. Some variables (like enable_shared)
+# are currently assumed to apply to all compilers on this platform,
+# and will be corrupted by setting them based on a non-working compiler.
+if test yes != "$_lt_disable_F77"; then
+ # Code to be used in simple compile tests
+ lt_simple_compile_test_code="\
+ subroutine t
+ return
+ end
+"
+
+ # Code to be used in simple link tests
+ lt_simple_link_test_code="\
+ program t
+ end
+"
+
+ # ltmain only uses $CC for tagged configurations so make sure $CC is set.
+ _LT_TAG_COMPILER
+
+ # save warnings/boilerplate of simple test code
+ _LT_COMPILER_BOILERPLATE
+ _LT_LINKER_BOILERPLATE
+
+ # Allow CC to be a program name with arguments.
+ lt_save_CC=$CC
+ lt_save_GCC=$GCC
+ lt_save_CFLAGS=$CFLAGS
+ CC=${F77-"f77"}
+ CFLAGS=$FFLAGS
+ compiler=$CC
+ _LT_TAGVAR(compiler, $1)=$CC
+ _LT_CC_BASENAME([$compiler])
+ GCC=$G77
+ if test -n "$compiler"; then
+ AC_MSG_CHECKING([if libtool supports shared libraries])
+ AC_MSG_RESULT([$can_build_shared])
+
+ AC_MSG_CHECKING([whether to build shared libraries])
+ test no = "$can_build_shared" && enable_shared=no
+
+ # On AIX, shared libraries and static libraries use the same namespace, and
+ # are all built from PIC.
+ case $host_os in
+ aix3*)
+ test yes = "$enable_shared" && enable_static=no
+ if test -n "$RANLIB"; then
+ archive_cmds="$archive_cmds~\$RANLIB \$lib"
+ postinstall_cmds='$RANLIB $lib'
+ fi
+ ;;
+ aix[[4-9]]*)
+ if test ia64 != "$host_cpu"; then
+ case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
+ yes,aix,yes) ;; # shared object as lib.so file only
+ yes,svr4,*) ;; # shared object as lib.so archive member only
+ yes,*) enable_static=no ;; # shared object in lib.a archive as well
+ esac
+ fi
+ ;;
+ esac
+ AC_MSG_RESULT([$enable_shared])
+
+ AC_MSG_CHECKING([whether to build static libraries])
+ # Make sure either enable_shared or enable_static is yes.
+ test yes = "$enable_shared" || enable_static=yes
+ AC_MSG_RESULT([$enable_static])
+
+ _LT_TAGVAR(GCC, $1)=$G77
+ _LT_TAGVAR(LD, $1)=$LD
+
+ ## CAVEAT EMPTOR:
+ ## There is no encapsulation within the following macros, do not change
+ ## the running order or otherwise move them around unless you know exactly
+ ## what you are doing...
+ _LT_COMPILER_PIC($1)
+ _LT_COMPILER_C_O($1)
+ _LT_COMPILER_FILE_LOCKS($1)
+ _LT_LINKER_SHLIBS($1)
+ _LT_SYS_DYNAMIC_LINKER($1)
+ _LT_LINKER_HARDCODE_LIBPATH($1)
+
+ _LT_CONFIG($1)
+ fi # test -n "$compiler"
+
+ GCC=$lt_save_GCC
+ CC=$lt_save_CC
+ CFLAGS=$lt_save_CFLAGS
+fi # test yes != "$_lt_disable_F77"
+
+AC_LANG_POP
+])# _LT_LANG_F77_CONFIG
+
+
+# _LT_LANG_FC_CONFIG([TAG])
+# -------------------------
+# Ensure that the configuration variables for a Fortran compiler are
+# suitably defined. These variables are subsequently used by _LT_CONFIG
+# to write the compiler configuration to 'libtool'.
+m4_defun([_LT_LANG_FC_CONFIG],
+[AC_LANG_PUSH(Fortran)
+
+if test -z "$FC" || test no = "$FC"; then
+ _lt_disable_FC=yes
+fi
+
+_LT_TAGVAR(archive_cmds_need_lc, $1)=no
+_LT_TAGVAR(allow_undefined_flag, $1)=
+_LT_TAGVAR(always_export_symbols, $1)=no
+_LT_TAGVAR(archive_expsym_cmds, $1)=
+_LT_TAGVAR(export_dynamic_flag_spec, $1)=
+_LT_TAGVAR(hardcode_direct, $1)=no
+_LT_TAGVAR(hardcode_direct_absolute, $1)=no
+_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
+_LT_TAGVAR(hardcode_libdir_separator, $1)=
+_LT_TAGVAR(hardcode_minus_L, $1)=no
+_LT_TAGVAR(hardcode_automatic, $1)=no
+_LT_TAGVAR(inherit_rpath, $1)=no
+_LT_TAGVAR(module_cmds, $1)=
+_LT_TAGVAR(module_expsym_cmds, $1)=
+_LT_TAGVAR(link_all_deplibs, $1)=unknown
+_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
+_LT_TAGVAR(reload_flag, $1)=$reload_flag
+_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
+_LT_TAGVAR(no_undefined_flag, $1)=
+_LT_TAGVAR(whole_archive_flag_spec, $1)=
+_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
+
+# Source file extension for fc test sources.
+ac_ext=${ac_fc_srcext-f}
+
+# Object file extension for compiled fc test sources.
+objext=o
+_LT_TAGVAR(objext, $1)=$objext
+
+# No sense in running all these tests if we already determined that
+# the FC compiler isn't working. Some variables (like enable_shared)
+# are currently assumed to apply to all compilers on this platform,
+# and will be corrupted by setting them based on a non-working compiler.
+if test yes != "$_lt_disable_FC"; then
+ # Code to be used in simple compile tests
+ lt_simple_compile_test_code="\
+ subroutine t
+ return
+ end
+"
+
+ # Code to be used in simple link tests
+ lt_simple_link_test_code="\
+ program t
+ end
+"
+
+ # ltmain only uses $CC for tagged configurations so make sure $CC is set.
+ _LT_TAG_COMPILER
+
+ # save warnings/boilerplate of simple test code
+ _LT_COMPILER_BOILERPLATE
+ _LT_LINKER_BOILERPLATE
+
+ # Allow CC to be a program name with arguments.
+ lt_save_CC=$CC
+ lt_save_GCC=$GCC
+ lt_save_CFLAGS=$CFLAGS
+ CC=${FC-"f95"}
+ CFLAGS=$FCFLAGS
+ compiler=$CC
+ GCC=$ac_cv_fc_compiler_gnu
+
+ _LT_TAGVAR(compiler, $1)=$CC
+ _LT_CC_BASENAME([$compiler])
+
+ if test -n "$compiler"; then
+ AC_MSG_CHECKING([if libtool supports shared libraries])
+ AC_MSG_RESULT([$can_build_shared])
+
+ AC_MSG_CHECKING([whether to build shared libraries])
+ test no = "$can_build_shared" && enable_shared=no
+
+ # On AIX, shared libraries and static libraries use the same namespace, and
+ # are all built from PIC.
+ case $host_os in
+ aix3*)
+ test yes = "$enable_shared" && enable_static=no
+ if test -n "$RANLIB"; then
+ archive_cmds="$archive_cmds~\$RANLIB \$lib"
+ postinstall_cmds='$RANLIB $lib'
+ fi
+ ;;
+ aix[[4-9]]*)
+ if test ia64 != "$host_cpu"; then
+ case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
+ yes,aix,yes) ;; # shared object as lib.so file only
+ yes,svr4,*) ;; # shared object as lib.so archive member only
+ yes,*) enable_static=no ;; # shared object in lib.a archive as well
+ esac
+ fi
+ ;;
+ esac
+ AC_MSG_RESULT([$enable_shared])
+
+ AC_MSG_CHECKING([whether to build static libraries])
+ # Make sure either enable_shared or enable_static is yes.
+ test yes = "$enable_shared" || enable_static=yes
+ AC_MSG_RESULT([$enable_static])
+
+ _LT_TAGVAR(GCC, $1)=$ac_cv_fc_compiler_gnu
+ _LT_TAGVAR(LD, $1)=$LD
+
+ ## CAVEAT EMPTOR:
+ ## There is no encapsulation within the following macros, do not change
+ ## the running order or otherwise move them around unless you know exactly
+ ## what you are doing...
+ _LT_SYS_HIDDEN_LIBDEPS($1)
+ _LT_COMPILER_PIC($1)
+ _LT_COMPILER_C_O($1)
+ _LT_COMPILER_FILE_LOCKS($1)
+ _LT_LINKER_SHLIBS($1)
+ _LT_SYS_DYNAMIC_LINKER($1)
+ _LT_LINKER_HARDCODE_LIBPATH($1)
+
+ _LT_CONFIG($1)
+ fi # test -n "$compiler"
+
+ GCC=$lt_save_GCC
+ CC=$lt_save_CC
+ CFLAGS=$lt_save_CFLAGS
+fi # test yes != "$_lt_disable_FC"
+
+AC_LANG_POP
+])# _LT_LANG_FC_CONFIG
+
+
+# _LT_LANG_GCJ_CONFIG([TAG])
+# --------------------------
+# Ensure that the configuration variables for the GNU Java Compiler compiler
+# are suitably defined. These variables are subsequently used by _LT_CONFIG
+# to write the compiler configuration to 'libtool'.
+m4_defun([_LT_LANG_GCJ_CONFIG],
+[AC_REQUIRE([LT_PROG_GCJ])dnl
+AC_LANG_SAVE
+
+# Source file extension for Java test sources.
+ac_ext=java
+
+# Object file extension for compiled Java test sources.
+objext=o
+_LT_TAGVAR(objext, $1)=$objext
+
+# Code to be used in simple compile tests
+lt_simple_compile_test_code="class foo {}"
+
+# Code to be used in simple link tests
+lt_simple_link_test_code='public class conftest { public static void main(String[[]] argv) {}; }'
+
+# ltmain only uses $CC for tagged configurations so make sure $CC is set.
+_LT_TAG_COMPILER
+
+# save warnings/boilerplate of simple test code
+_LT_COMPILER_BOILERPLATE
+_LT_LINKER_BOILERPLATE
+
+# Allow CC to be a program name with arguments.
+lt_save_CC=$CC
+lt_save_CFLAGS=$CFLAGS
+lt_save_GCC=$GCC
+GCC=yes
+CC=${GCJ-"gcj"}
+CFLAGS=$GCJFLAGS
+compiler=$CC
+_LT_TAGVAR(compiler, $1)=$CC
+_LT_TAGVAR(LD, $1)=$LD
+_LT_CC_BASENAME([$compiler])
+
+# GCJ did not exist at the time GCC didn't implicitly link libc in.
+_LT_TAGVAR(archive_cmds_need_lc, $1)=no
+
+_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
+_LT_TAGVAR(reload_flag, $1)=$reload_flag
+_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
+
+## CAVEAT EMPTOR:
+## There is no encapsulation within the following macros, do not change
+## the running order or otherwise move them around unless you know exactly
+## what you are doing...
+if test -n "$compiler"; then
+ _LT_COMPILER_NO_RTTI($1)
+ _LT_COMPILER_PIC($1)
+ _LT_COMPILER_C_O($1)
+ _LT_COMPILER_FILE_LOCKS($1)
+ _LT_LINKER_SHLIBS($1)
+ _LT_LINKER_HARDCODE_LIBPATH($1)
+
+ _LT_CONFIG($1)
+fi
+
+AC_LANG_RESTORE
+
+GCC=$lt_save_GCC
+CC=$lt_save_CC
+CFLAGS=$lt_save_CFLAGS
+])# _LT_LANG_GCJ_CONFIG
+
+
+# _LT_LANG_GO_CONFIG([TAG])
+# --------------------------
+# Ensure that the configuration variables for the GNU Go compiler
+# are suitably defined. These variables are subsequently used by _LT_CONFIG
+# to write the compiler configuration to 'libtool'.
+m4_defun([_LT_LANG_GO_CONFIG],
+[AC_REQUIRE([LT_PROG_GO])dnl
+AC_LANG_SAVE
+
+# Source file extension for Go test sources.
+ac_ext=go
+
+# Object file extension for compiled Go test sources.
+objext=o
+_LT_TAGVAR(objext, $1)=$objext
+
+# Code to be used in simple compile tests
+lt_simple_compile_test_code="package main; func main() { }"
+
+# Code to be used in simple link tests
+lt_simple_link_test_code='package main; func main() { }'
+
+# ltmain only uses $CC for tagged configurations so make sure $CC is set.
+_LT_TAG_COMPILER
+
+# save warnings/boilerplate of simple test code
+_LT_COMPILER_BOILERPLATE
+_LT_LINKER_BOILERPLATE
+
+# Allow CC to be a program name with arguments.
+lt_save_CC=$CC
+lt_save_CFLAGS=$CFLAGS
+lt_save_GCC=$GCC
+GCC=yes
+CC=${GOC-"gccgo"}
+CFLAGS=$GOFLAGS
+compiler=$CC
+_LT_TAGVAR(compiler, $1)=$CC
+_LT_TAGVAR(LD, $1)=$LD
+_LT_CC_BASENAME([$compiler])
+
+# Go did not exist at the time GCC didn't implicitly link libc in.
+_LT_TAGVAR(archive_cmds_need_lc, $1)=no
+
+_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
+_LT_TAGVAR(reload_flag, $1)=$reload_flag
+_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
+
+## CAVEAT EMPTOR:
+## There is no encapsulation within the following macros, do not change
+## the running order or otherwise move them around unless you know exactly
+## what you are doing...
+if test -n "$compiler"; then
+ _LT_COMPILER_NO_RTTI($1)
+ _LT_COMPILER_PIC($1)
+ _LT_COMPILER_C_O($1)
+ _LT_COMPILER_FILE_LOCKS($1)
+ _LT_LINKER_SHLIBS($1)
+ _LT_LINKER_HARDCODE_LIBPATH($1)
+
+ _LT_CONFIG($1)
+fi
+
+AC_LANG_RESTORE
+
+GCC=$lt_save_GCC
+CC=$lt_save_CC
+CFLAGS=$lt_save_CFLAGS
+])# _LT_LANG_GO_CONFIG
+
+
+# _LT_LANG_RC_CONFIG([TAG])
+# -------------------------
+# Ensure that the configuration variables for the Windows resource compiler
+# are suitably defined. These variables are subsequently used by _LT_CONFIG
+# to write the compiler configuration to 'libtool'.
+m4_defun([_LT_LANG_RC_CONFIG],
+[AC_REQUIRE([LT_PROG_RC])dnl
+AC_LANG_SAVE
+
+# Source file extension for RC test sources.
+ac_ext=rc
+
+# Object file extension for compiled RC test sources.
+objext=o
+_LT_TAGVAR(objext, $1)=$objext
+
+# Code to be used in simple compile tests
+lt_simple_compile_test_code='sample MENU { MENUITEM "&Soup", 100, CHECKED }'
+
+# Code to be used in simple link tests
+lt_simple_link_test_code=$lt_simple_compile_test_code
+
+# ltmain only uses $CC for tagged configurations so make sure $CC is set.
+_LT_TAG_COMPILER
+
+# save warnings/boilerplate of simple test code
+_LT_COMPILER_BOILERPLATE
+_LT_LINKER_BOILERPLATE
+
+# Allow CC to be a program name with arguments.
+lt_save_CC=$CC
+lt_save_CFLAGS=$CFLAGS
+lt_save_GCC=$GCC
+GCC=
+CC=${RC-"windres"}
+CFLAGS=
+compiler=$CC
+_LT_TAGVAR(compiler, $1)=$CC
+_LT_CC_BASENAME([$compiler])
+_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes
+
+if test -n "$compiler"; then
+ :
+ _LT_CONFIG($1)
+fi
+
+GCC=$lt_save_GCC
+AC_LANG_RESTORE
+CC=$lt_save_CC
+CFLAGS=$lt_save_CFLAGS
+])# _LT_LANG_RC_CONFIG
+
+
+# LT_PROG_GCJ
+# -----------
+AC_DEFUN([LT_PROG_GCJ],
+[m4_ifdef([AC_PROG_GCJ], [AC_PROG_GCJ],
+ [m4_ifdef([A][M_PROG_GCJ], [A][M_PROG_GCJ],
+ [AC_CHECK_TOOL(GCJ, gcj,)
+ test set = "${GCJFLAGS+set}" || GCJFLAGS="-g -O2"
+ AC_SUBST(GCJFLAGS)])])[]dnl
+])
+
+# Old name:
+AU_ALIAS([LT_AC_PROG_GCJ], [LT_PROG_GCJ])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([LT_AC_PROG_GCJ], [])
+
+
+# LT_PROG_GO
+# ----------
+AC_DEFUN([LT_PROG_GO],
+[AC_CHECK_TOOL(GOC, gccgo,)
+])
+
+
+# LT_PROG_RC
+# ----------
+AC_DEFUN([LT_PROG_RC],
+[AC_CHECK_TOOL(RC, windres,)
+])
+
+# Old name:
+AU_ALIAS([LT_AC_PROG_RC], [LT_PROG_RC])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([LT_AC_PROG_RC], [])
+
+
+# _LT_DECL_EGREP
+# --------------
+# If we don't have a new enough Autoconf to choose the best grep
+# available, choose the one first in the user's PATH.
+m4_defun([_LT_DECL_EGREP],
+[AC_REQUIRE([AC_PROG_EGREP])dnl
+AC_REQUIRE([AC_PROG_FGREP])dnl
+test -z "$GREP" && GREP=grep
+_LT_DECL([], [GREP], [1], [A grep program that handles long lines])
+_LT_DECL([], [EGREP], [1], [An ERE matcher])
+_LT_DECL([], [FGREP], [1], [A literal string matcher])
+dnl Non-bleeding-edge autoconf doesn't subst GREP, so do it here too
+AC_SUBST([GREP])
+])
+
+
+# _LT_DECL_OBJDUMP
+# --------------
+# If we don't have a new enough Autoconf to choose the best objdump
+# available, choose the one first in the user's PATH.
+m4_defun([_LT_DECL_OBJDUMP],
+[AC_CHECK_TOOL(OBJDUMP, objdump, false)
+test -z "$OBJDUMP" && OBJDUMP=objdump
+_LT_DECL([], [OBJDUMP], [1], [An object symbol dumper])
+AC_SUBST([OBJDUMP])
+])
+
+# _LT_DECL_DLLTOOL
+# ----------------
+# Ensure DLLTOOL variable is set.
+m4_defun([_LT_DECL_DLLTOOL],
+[AC_CHECK_TOOL(DLLTOOL, dlltool, false)
+test -z "$DLLTOOL" && DLLTOOL=dlltool
+_LT_DECL([], [DLLTOOL], [1], [DLL creation program])
+AC_SUBST([DLLTOOL])
+])
+
+# _LT_DECL_FILECMD
+# ----------------
+# Check for a file(cmd) program that can be used to detect file type and magic
+m4_defun([_LT_DECL_FILECMD],
+[AC_CHECK_TOOL([FILECMD], [file], [:])
+_LT_DECL([], [FILECMD], [1], [A file(cmd) program that detects file types])
+])# _LD_DECL_FILECMD
+
+# _LT_DECL_SED
+# ------------
+# Check for a fully-functional sed program, that truncates
+# as few characters as possible. Prefer GNU sed if found.
+m4_defun([_LT_DECL_SED],
+[AC_PROG_SED
+test -z "$SED" && SED=sed
+Xsed="$SED -e 1s/^X//"
+_LT_DECL([], [SED], [1], [A sed program that does not truncate output])
+_LT_DECL([], [Xsed], ["\$SED -e 1s/^X//"],
+ [Sed that helps us avoid accidentally triggering echo(1) options like -n])
+])# _LT_DECL_SED
+
+m4_ifndef([AC_PROG_SED], [
+############################################################
+# NOTE: This macro has been submitted for inclusion into #
+# GNU Autoconf as AC_PROG_SED. When it is available in #
+# a released version of Autoconf we should remove this #
+# macro and use it instead. #
+############################################################
+
+m4_defun([AC_PROG_SED],
+[AC_MSG_CHECKING([for a sed that does not truncate output])
+AC_CACHE_VAL(lt_cv_path_SED,
+[# Loop through the user's path and test for sed and gsed.
+# Then use that list of sed's as ones to test for truncation.
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+ IFS=$as_save_IFS
+ test -z "$as_dir" && as_dir=.
+ for lt_ac_prog in sed gsed; do
+ for ac_exec_ext in '' $ac_executable_extensions; do
+ if $as_executable_p "$as_dir/$lt_ac_prog$ac_exec_ext"; then
+ lt_ac_sed_list="$lt_ac_sed_list $as_dir/$lt_ac_prog$ac_exec_ext"
+ fi
+ done
+ done
+done
+IFS=$as_save_IFS
+lt_ac_max=0
+lt_ac_count=0
+# Add /usr/xpg4/bin/sed as it is typically found on Solaris
+# along with /bin/sed that truncates output.
+for lt_ac_sed in $lt_ac_sed_list /usr/xpg4/bin/sed; do
+ test ! -f "$lt_ac_sed" && continue
+ cat /dev/null > conftest.in
+ lt_ac_count=0
+ echo $ECHO_N "0123456789$ECHO_C" >conftest.in
+ # Check for GNU sed and select it if it is found.
+ if "$lt_ac_sed" --version 2>&1 < /dev/null | grep 'GNU' > /dev/null; then
+ lt_cv_path_SED=$lt_ac_sed
+ break
+ fi
+ while true; do
+ cat conftest.in conftest.in >conftest.tmp
+ mv conftest.tmp conftest.in
+ cp conftest.in conftest.nl
+ echo >>conftest.nl
+ $lt_ac_sed -e 's/a$//' < conftest.nl >conftest.out || break
+ cmp -s conftest.out conftest.nl || break
+ # 10000 chars as input seems more than enough
+ test 10 -lt "$lt_ac_count" && break
+ lt_ac_count=`expr $lt_ac_count + 1`
+ if test "$lt_ac_count" -gt "$lt_ac_max"; then
+ lt_ac_max=$lt_ac_count
+ lt_cv_path_SED=$lt_ac_sed
+ fi
+ done
+done
+])
+SED=$lt_cv_path_SED
+AC_SUBST([SED])
+AC_MSG_RESULT([$SED])
+])#AC_PROG_SED
+])#m4_ifndef
+
+# Old name:
+AU_ALIAS([LT_AC_PROG_SED], [AC_PROG_SED])
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([LT_AC_PROG_SED], [])
+
+
+# _LT_CHECK_SHELL_FEATURES
+# ------------------------
+# Find out whether the shell is Bourne or XSI compatible,
+# or has some other useful features.
+m4_defun([_LT_CHECK_SHELL_FEATURES],
+[if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
+ lt_unset=unset
+else
+ lt_unset=false
+fi
+_LT_DECL([], [lt_unset], [0], [whether the shell understands "unset"])dnl
+
+# test EBCDIC or ASCII
+case `echo X|tr X '\101'` in
+ A) # ASCII based system
+ # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr
+ lt_SP2NL='tr \040 \012'
+ lt_NL2SP='tr \015\012 \040\040'
+ ;;
+ *) # EBCDIC based system
+ lt_SP2NL='tr \100 \n'
+ lt_NL2SP='tr \r\n \100\100'
+ ;;
+esac
+_LT_DECL([SP2NL], [lt_SP2NL], [1], [turn spaces into newlines])dnl
+_LT_DECL([NL2SP], [lt_NL2SP], [1], [turn newlines into spaces])dnl
+])# _LT_CHECK_SHELL_FEATURES
+
+
+# _LT_PATH_CONVERSION_FUNCTIONS
+# -----------------------------
+# Determine what file name conversion functions should be used by
+# func_to_host_file (and, implicitly, by func_to_host_path). These are needed
+# for certain cross-compile configurations and native mingw.
+m4_defun([_LT_PATH_CONVERSION_FUNCTIONS],
+[AC_REQUIRE([AC_CANONICAL_HOST])dnl
+AC_REQUIRE([AC_CANONICAL_BUILD])dnl
+AC_MSG_CHECKING([how to convert $build file names to $host format])
+AC_CACHE_VAL(lt_cv_to_host_file_cmd,
+[case $host in
+ *-*-mingw* )
+ case $build in
+ *-*-mingw* ) # actually msys
+ lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32
+ ;;
+ *-*-cygwin* )
+ lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32
+ ;;
+ * ) # otherwise, assume *nix
+ lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32
+ ;;
+ esac
+ ;;
+ *-*-cygwin* )
+ case $build in
+ *-*-mingw* ) # actually msys
+ lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin
+ ;;
+ *-*-cygwin* )
+ lt_cv_to_host_file_cmd=func_convert_file_noop
+ ;;
+ * ) # otherwise, assume *nix
+ lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin
+ ;;
+ esac
+ ;;
+ * ) # unhandled hosts (and "normal" native builds)
+ lt_cv_to_host_file_cmd=func_convert_file_noop
+ ;;
+esac
+])
+to_host_file_cmd=$lt_cv_to_host_file_cmd
+AC_MSG_RESULT([$lt_cv_to_host_file_cmd])
+_LT_DECL([to_host_file_cmd], [lt_cv_to_host_file_cmd],
+ [0], [convert $build file names to $host format])dnl
+
+AC_MSG_CHECKING([how to convert $build file names to toolchain format])
+AC_CACHE_VAL(lt_cv_to_tool_file_cmd,
+[#assume ordinary cross tools, or native build.
+lt_cv_to_tool_file_cmd=func_convert_file_noop
+case $host in
+ *-*-mingw* )
+ case $build in
+ *-*-mingw* ) # actually msys
+ lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32
+ ;;
+ esac
+ ;;
+esac
+])
+to_tool_file_cmd=$lt_cv_to_tool_file_cmd
+AC_MSG_RESULT([$lt_cv_to_tool_file_cmd])
+_LT_DECL([to_tool_file_cmd], [lt_cv_to_tool_file_cmd],
+ [0], [convert $build files to toolchain format])dnl
+])# _LT_PATH_CONVERSION_FUNCTIONS
diff --git a/m4/ltoptions.m4 b/m4/ltoptions.m4
new file mode 100644
index 00000000..b0b5e9c2
--- /dev/null
+++ b/m4/ltoptions.m4
@@ -0,0 +1,437 @@
+# Helper functions for option handling. -*- Autoconf -*-
+#
+# Copyright (C) 2004-2005, 2007-2009, 2011-2019, 2021-2022 Free
+# Software Foundation, Inc.
+# Written by Gary V. Vaughan, 2004
+#
+# This file is free software; the Free Software Foundation gives
+# unlimited permission to copy and/or distribute it, with or without
+# modifications, as long as this notice is preserved.
+
+# serial 8 ltoptions.m4
+
+# This is to help aclocal find these macros, as it can't see m4_define.
+AC_DEFUN([LTOPTIONS_VERSION], [m4_if([1])])
+
+
+# _LT_MANGLE_OPTION(MACRO-NAME, OPTION-NAME)
+# ------------------------------------------
+m4_define([_LT_MANGLE_OPTION],
+[[_LT_OPTION_]m4_bpatsubst($1__$2, [[^a-zA-Z0-9_]], [_])])
+
+
+# _LT_SET_OPTION(MACRO-NAME, OPTION-NAME)
+# ---------------------------------------
+# Set option OPTION-NAME for macro MACRO-NAME, and if there is a
+# matching handler defined, dispatch to it. Other OPTION-NAMEs are
+# saved as a flag.
+m4_define([_LT_SET_OPTION],
+[m4_define(_LT_MANGLE_OPTION([$1], [$2]))dnl
+m4_ifdef(_LT_MANGLE_DEFUN([$1], [$2]),
+ _LT_MANGLE_DEFUN([$1], [$2]),
+ [m4_warning([Unknown $1 option '$2'])])[]dnl
+])
+
+
+# _LT_IF_OPTION(MACRO-NAME, OPTION-NAME, IF-SET, [IF-NOT-SET])
+# ------------------------------------------------------------
+# Execute IF-SET if OPTION is set, IF-NOT-SET otherwise.
+m4_define([_LT_IF_OPTION],
+[m4_ifdef(_LT_MANGLE_OPTION([$1], [$2]), [$3], [$4])])
+
+
+# _LT_UNLESS_OPTIONS(MACRO-NAME, OPTION-LIST, IF-NOT-SET)
+# -------------------------------------------------------
+# Execute IF-NOT-SET unless all options in OPTION-LIST for MACRO-NAME
+# are set.
+m4_define([_LT_UNLESS_OPTIONS],
+[m4_foreach([_LT_Option], m4_split(m4_normalize([$2])),
+ [m4_ifdef(_LT_MANGLE_OPTION([$1], _LT_Option),
+ [m4_define([$0_found])])])[]dnl
+m4_ifdef([$0_found], [m4_undefine([$0_found])], [$3
+])[]dnl
+])
+
+
+# _LT_SET_OPTIONS(MACRO-NAME, OPTION-LIST)
+# ----------------------------------------
+# OPTION-LIST is a space-separated list of Libtool options associated
+# with MACRO-NAME. If any OPTION has a matching handler declared with
+# LT_OPTION_DEFINE, dispatch to that macro; otherwise complain about
+# the unknown option and exit.
+m4_defun([_LT_SET_OPTIONS],
+[# Set options
+m4_foreach([_LT_Option], m4_split(m4_normalize([$2])),
+ [_LT_SET_OPTION([$1], _LT_Option)])
+
+m4_if([$1],[LT_INIT],[
+ dnl
+ dnl Simply set some default values (i.e off) if boolean options were not
+ dnl specified:
+ _LT_UNLESS_OPTIONS([LT_INIT], [dlopen], [enable_dlopen=no
+ ])
+ _LT_UNLESS_OPTIONS([LT_INIT], [win32-dll], [enable_win32_dll=no
+ ])
+ dnl
+ dnl If no reference was made to various pairs of opposing options, then
+ dnl we run the default mode handler for the pair. For example, if neither
+ dnl 'shared' nor 'disable-shared' was passed, we enable building of shared
+ dnl archives by default:
+ _LT_UNLESS_OPTIONS([LT_INIT], [shared disable-shared], [_LT_ENABLE_SHARED])
+ _LT_UNLESS_OPTIONS([LT_INIT], [static disable-static], [_LT_ENABLE_STATIC])
+ _LT_UNLESS_OPTIONS([LT_INIT], [pic-only no-pic], [_LT_WITH_PIC])
+ _LT_UNLESS_OPTIONS([LT_INIT], [fast-install disable-fast-install],
+ [_LT_ENABLE_FAST_INSTALL])
+ _LT_UNLESS_OPTIONS([LT_INIT], [aix-soname=aix aix-soname=both aix-soname=svr4],
+ [_LT_WITH_AIX_SONAME([aix])])
+ ])
+])# _LT_SET_OPTIONS
+
+
+## --------------------------------- ##
+## Macros to handle LT_INIT options. ##
+## --------------------------------- ##
+
+# _LT_MANGLE_DEFUN(MACRO-NAME, OPTION-NAME)
+# -----------------------------------------
+m4_define([_LT_MANGLE_DEFUN],
+[[_LT_OPTION_DEFUN_]m4_bpatsubst(m4_toupper([$1__$2]), [[^A-Z0-9_]], [_])])
+
+
+# LT_OPTION_DEFINE(MACRO-NAME, OPTION-NAME, CODE)
+# -----------------------------------------------
+m4_define([LT_OPTION_DEFINE],
+[m4_define(_LT_MANGLE_DEFUN([$1], [$2]), [$3])[]dnl
+])# LT_OPTION_DEFINE
+
+
+# dlopen
+# ------
+LT_OPTION_DEFINE([LT_INIT], [dlopen], [enable_dlopen=yes
+])
+
+AU_DEFUN([AC_LIBTOOL_DLOPEN],
+[_LT_SET_OPTION([LT_INIT], [dlopen])
+AC_DIAGNOSE([obsolete],
+[$0: Remove this warning and the call to _LT_SET_OPTION when you
+put the 'dlopen' option into LT_INIT's first parameter.])
+])
+
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_LIBTOOL_DLOPEN], [])
+
+
+# win32-dll
+# ---------
+# Declare package support for building win32 dll's.
+LT_OPTION_DEFINE([LT_INIT], [win32-dll],
+[enable_win32_dll=yes
+
+case $host in
+*-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-cegcc*)
+ AC_CHECK_TOOL(AS, as, false)
+ AC_CHECK_TOOL(DLLTOOL, dlltool, false)
+ AC_CHECK_TOOL(OBJDUMP, objdump, false)
+ ;;
+esac
+
+test -z "$AS" && AS=as
+_LT_DECL([], [AS], [1], [Assembler program])dnl
+
+test -z "$DLLTOOL" && DLLTOOL=dlltool
+_LT_DECL([], [DLLTOOL], [1], [DLL creation program])dnl
+
+test -z "$OBJDUMP" && OBJDUMP=objdump
+_LT_DECL([], [OBJDUMP], [1], [Object dumper program])dnl
+])# win32-dll
+
+AU_DEFUN([AC_LIBTOOL_WIN32_DLL],
+[AC_REQUIRE([AC_CANONICAL_HOST])dnl
+_LT_SET_OPTION([LT_INIT], [win32-dll])
+AC_DIAGNOSE([obsolete],
+[$0: Remove this warning and the call to _LT_SET_OPTION when you
+put the 'win32-dll' option into LT_INIT's first parameter.])
+])
+
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_LIBTOOL_WIN32_DLL], [])
+
+
+# _LT_ENABLE_SHARED([DEFAULT])
+# ----------------------------
+# implement the --enable-shared flag, and supports the 'shared' and
+# 'disable-shared' LT_INIT options.
+# DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'.
+m4_define([_LT_ENABLE_SHARED],
+[m4_define([_LT_ENABLE_SHARED_DEFAULT], [m4_if($1, no, no, yes)])dnl
+AC_ARG_ENABLE([shared],
+ [AS_HELP_STRING([--enable-shared@<:@=PKGS@:>@],
+ [build shared libraries @<:@default=]_LT_ENABLE_SHARED_DEFAULT[@:>@])],
+ [p=${PACKAGE-default}
+ case $enableval in
+ yes) enable_shared=yes ;;
+ no) enable_shared=no ;;
+ *)
+ enable_shared=no
+ # Look at the argument we got. We use all the common list separators.
+ lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
+ for pkg in $enableval; do
+ IFS=$lt_save_ifs
+ if test "X$pkg" = "X$p"; then
+ enable_shared=yes
+ fi
+ done
+ IFS=$lt_save_ifs
+ ;;
+ esac],
+ [enable_shared=]_LT_ENABLE_SHARED_DEFAULT)
+
+ _LT_DECL([build_libtool_libs], [enable_shared], [0],
+ [Whether or not to build shared libraries])
+])# _LT_ENABLE_SHARED
+
+LT_OPTION_DEFINE([LT_INIT], [shared], [_LT_ENABLE_SHARED([yes])])
+LT_OPTION_DEFINE([LT_INIT], [disable-shared], [_LT_ENABLE_SHARED([no])])
+
+# Old names:
+AC_DEFUN([AC_ENABLE_SHARED],
+[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[shared])
+])
+
+AC_DEFUN([AC_DISABLE_SHARED],
+[_LT_SET_OPTION([LT_INIT], [disable-shared])
+])
+
+AU_DEFUN([AM_ENABLE_SHARED], [AC_ENABLE_SHARED($@)])
+AU_DEFUN([AM_DISABLE_SHARED], [AC_DISABLE_SHARED($@)])
+
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AM_ENABLE_SHARED], [])
+dnl AC_DEFUN([AM_DISABLE_SHARED], [])
+
+
+
+# _LT_ENABLE_STATIC([DEFAULT])
+# ----------------------------
+# implement the --enable-static flag, and support the 'static' and
+# 'disable-static' LT_INIT options.
+# DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'.
+m4_define([_LT_ENABLE_STATIC],
+[m4_define([_LT_ENABLE_STATIC_DEFAULT], [m4_if($1, no, no, yes)])dnl
+AC_ARG_ENABLE([static],
+ [AS_HELP_STRING([--enable-static@<:@=PKGS@:>@],
+ [build static libraries @<:@default=]_LT_ENABLE_STATIC_DEFAULT[@:>@])],
+ [p=${PACKAGE-default}
+ case $enableval in
+ yes) enable_static=yes ;;
+ no) enable_static=no ;;
+ *)
+ enable_static=no
+ # Look at the argument we got. We use all the common list separators.
+ lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
+ for pkg in $enableval; do
+ IFS=$lt_save_ifs
+ if test "X$pkg" = "X$p"; then
+ enable_static=yes
+ fi
+ done
+ IFS=$lt_save_ifs
+ ;;
+ esac],
+ [enable_static=]_LT_ENABLE_STATIC_DEFAULT)
+
+ _LT_DECL([build_old_libs], [enable_static], [0],
+ [Whether or not to build static libraries])
+])# _LT_ENABLE_STATIC
+
+LT_OPTION_DEFINE([LT_INIT], [static], [_LT_ENABLE_STATIC([yes])])
+LT_OPTION_DEFINE([LT_INIT], [disable-static], [_LT_ENABLE_STATIC([no])])
+
+# Old names:
+AC_DEFUN([AC_ENABLE_STATIC],
+[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[static])
+])
+
+AC_DEFUN([AC_DISABLE_STATIC],
+[_LT_SET_OPTION([LT_INIT], [disable-static])
+])
+
+AU_DEFUN([AM_ENABLE_STATIC], [AC_ENABLE_STATIC($@)])
+AU_DEFUN([AM_DISABLE_STATIC], [AC_DISABLE_STATIC($@)])
+
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AM_ENABLE_STATIC], [])
+dnl AC_DEFUN([AM_DISABLE_STATIC], [])
+
+
+
+# _LT_ENABLE_FAST_INSTALL([DEFAULT])
+# ----------------------------------
+# implement the --enable-fast-install flag, and support the 'fast-install'
+# and 'disable-fast-install' LT_INIT options.
+# DEFAULT is either 'yes' or 'no'. If omitted, it defaults to 'yes'.
+m4_define([_LT_ENABLE_FAST_INSTALL],
+[m4_define([_LT_ENABLE_FAST_INSTALL_DEFAULT], [m4_if($1, no, no, yes)])dnl
+AC_ARG_ENABLE([fast-install],
+ [AS_HELP_STRING([--enable-fast-install@<:@=PKGS@:>@],
+ [optimize for fast installation @<:@default=]_LT_ENABLE_FAST_INSTALL_DEFAULT[@:>@])],
+ [p=${PACKAGE-default}
+ case $enableval in
+ yes) enable_fast_install=yes ;;
+ no) enable_fast_install=no ;;
+ *)
+ enable_fast_install=no
+ # Look at the argument we got. We use all the common list separators.
+ lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
+ for pkg in $enableval; do
+ IFS=$lt_save_ifs
+ if test "X$pkg" = "X$p"; then
+ enable_fast_install=yes
+ fi
+ done
+ IFS=$lt_save_ifs
+ ;;
+ esac],
+ [enable_fast_install=]_LT_ENABLE_FAST_INSTALL_DEFAULT)
+
+_LT_DECL([fast_install], [enable_fast_install], [0],
+ [Whether or not to optimize for fast installation])dnl
+])# _LT_ENABLE_FAST_INSTALL
+
+LT_OPTION_DEFINE([LT_INIT], [fast-install], [_LT_ENABLE_FAST_INSTALL([yes])])
+LT_OPTION_DEFINE([LT_INIT], [disable-fast-install], [_LT_ENABLE_FAST_INSTALL([no])])
+
+# Old names:
+AU_DEFUN([AC_ENABLE_FAST_INSTALL],
+[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[fast-install])
+AC_DIAGNOSE([obsolete],
+[$0: Remove this warning and the call to _LT_SET_OPTION when you put
+the 'fast-install' option into LT_INIT's first parameter.])
+])
+
+AU_DEFUN([AC_DISABLE_FAST_INSTALL],
+[_LT_SET_OPTION([LT_INIT], [disable-fast-install])
+AC_DIAGNOSE([obsolete],
+[$0: Remove this warning and the call to _LT_SET_OPTION when you put
+the 'disable-fast-install' option into LT_INIT's first parameter.])
+])
+
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_ENABLE_FAST_INSTALL], [])
+dnl AC_DEFUN([AM_DISABLE_FAST_INSTALL], [])
+
+
+# _LT_WITH_AIX_SONAME([DEFAULT])
+# ----------------------------------
+# implement the --with-aix-soname flag, and support the `aix-soname=aix'
+# and `aix-soname=both' and `aix-soname=svr4' LT_INIT options. DEFAULT
+# is either `aix', `both' or `svr4'. If omitted, it defaults to `aix'.
+m4_define([_LT_WITH_AIX_SONAME],
+[m4_define([_LT_WITH_AIX_SONAME_DEFAULT], [m4_if($1, svr4, svr4, m4_if($1, both, both, aix))])dnl
+shared_archive_member_spec=
+case $host,$enable_shared in
+power*-*-aix[[5-9]]*,yes)
+ AC_MSG_CHECKING([which variant of shared library versioning to provide])
+ AC_ARG_WITH([aix-soname],
+ [AS_HELP_STRING([--with-aix-soname=aix|svr4|both],
+ [shared library versioning (aka "SONAME") variant to provide on AIX, @<:@default=]_LT_WITH_AIX_SONAME_DEFAULT[@:>@.])],
+ [case $withval in
+ aix|svr4|both)
+ ;;
+ *)
+ AC_MSG_ERROR([Unknown argument to --with-aix-soname])
+ ;;
+ esac
+ lt_cv_with_aix_soname=$with_aix_soname],
+ [AC_CACHE_VAL([lt_cv_with_aix_soname],
+ [lt_cv_with_aix_soname=]_LT_WITH_AIX_SONAME_DEFAULT)
+ with_aix_soname=$lt_cv_with_aix_soname])
+ AC_MSG_RESULT([$with_aix_soname])
+ if test aix != "$with_aix_soname"; then
+ # For the AIX way of multilib, we name the shared archive member
+ # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o',
+ # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File.
+ # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag,
+ # the AIX toolchain works better with OBJECT_MODE set (default 32).
+ if test 64 = "${OBJECT_MODE-32}"; then
+ shared_archive_member_spec=shr_64
+ else
+ shared_archive_member_spec=shr
+ fi
+ fi
+ ;;
+*)
+ with_aix_soname=aix
+ ;;
+esac
+
+_LT_DECL([], [shared_archive_member_spec], [0],
+ [Shared archive member basename, for filename based shared library versioning on AIX])dnl
+])# _LT_WITH_AIX_SONAME
+
+LT_OPTION_DEFINE([LT_INIT], [aix-soname=aix], [_LT_WITH_AIX_SONAME([aix])])
+LT_OPTION_DEFINE([LT_INIT], [aix-soname=both], [_LT_WITH_AIX_SONAME([both])])
+LT_OPTION_DEFINE([LT_INIT], [aix-soname=svr4], [_LT_WITH_AIX_SONAME([svr4])])
+
+
+# _LT_WITH_PIC([MODE])
+# --------------------
+# implement the --with-pic flag, and support the 'pic-only' and 'no-pic'
+# LT_INIT options.
+# MODE is either 'yes' or 'no'. If omitted, it defaults to 'both'.
+m4_define([_LT_WITH_PIC],
+[AC_ARG_WITH([pic],
+ [AS_HELP_STRING([--with-pic@<:@=PKGS@:>@],
+ [try to use only PIC/non-PIC objects @<:@default=use both@:>@])],
+ [lt_p=${PACKAGE-default}
+ case $withval in
+ yes|no) pic_mode=$withval ;;
+ *)
+ pic_mode=default
+ # Look at the argument we got. We use all the common list separators.
+ lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
+ for lt_pkg in $withval; do
+ IFS=$lt_save_ifs
+ if test "X$lt_pkg" = "X$lt_p"; then
+ pic_mode=yes
+ fi
+ done
+ IFS=$lt_save_ifs
+ ;;
+ esac],
+ [pic_mode=m4_default([$1], [default])])
+
+_LT_DECL([], [pic_mode], [0], [What type of objects to build])dnl
+])# _LT_WITH_PIC
+
+LT_OPTION_DEFINE([LT_INIT], [pic-only], [_LT_WITH_PIC([yes])])
+LT_OPTION_DEFINE([LT_INIT], [no-pic], [_LT_WITH_PIC([no])])
+
+# Old name:
+AU_DEFUN([AC_LIBTOOL_PICMODE],
+[_LT_SET_OPTION([LT_INIT], [pic-only])
+AC_DIAGNOSE([obsolete],
+[$0: Remove this warning and the call to _LT_SET_OPTION when you
+put the 'pic-only' option into LT_INIT's first parameter.])
+])
+
+dnl aclocal-1.4 backwards compatibility:
+dnl AC_DEFUN([AC_LIBTOOL_PICMODE], [])
+
+## ----------------- ##
+## LTDL_INIT Options ##
+## ----------------- ##
+
+m4_define([_LTDL_MODE], [])
+LT_OPTION_DEFINE([LTDL_INIT], [nonrecursive],
+ [m4_define([_LTDL_MODE], [nonrecursive])])
+LT_OPTION_DEFINE([LTDL_INIT], [recursive],
+ [m4_define([_LTDL_MODE], [recursive])])
+LT_OPTION_DEFINE([LTDL_INIT], [subproject],
+ [m4_define([_LTDL_MODE], [subproject])])
+
+m4_define([_LTDL_TYPE], [])
+LT_OPTION_DEFINE([LTDL_INIT], [installable],
+ [m4_define([_LTDL_TYPE], [installable])])
+LT_OPTION_DEFINE([LTDL_INIT], [convenience],
+ [m4_define([_LTDL_TYPE], [convenience])])
diff --git a/m4/ltsugar.m4 b/m4/ltsugar.m4
new file mode 100644
index 00000000..902508bd
--- /dev/null
+++ b/m4/ltsugar.m4
@@ -0,0 +1,124 @@
+# ltsugar.m4 -- libtool m4 base layer. -*-Autoconf-*-
+#
+# Copyright (C) 2004-2005, 2007-2008, 2011-2019, 2021-2022 Free Software
+# Foundation, Inc.
+# Written by Gary V. Vaughan, 2004
+#
+# This file is free software; the Free Software Foundation gives
+# unlimited permission to copy and/or distribute it, with or without
+# modifications, as long as this notice is preserved.
+
+# serial 6 ltsugar.m4
+
+# This is to help aclocal find these macros, as it can't see m4_define.
+AC_DEFUN([LTSUGAR_VERSION], [m4_if([0.1])])
+
+
+# lt_join(SEP, ARG1, [ARG2...])
+# -----------------------------
+# Produce ARG1SEPARG2...SEPARGn, omitting [] arguments and their
+# associated separator.
+# Needed until we can rely on m4_join from Autoconf 2.62, since all earlier
+# versions in m4sugar had bugs.
+m4_define([lt_join],
+[m4_if([$#], [1], [],
+ [$#], [2], [[$2]],
+ [m4_if([$2], [], [], [[$2]_])$0([$1], m4_shift(m4_shift($@)))])])
+m4_define([_lt_join],
+[m4_if([$#$2], [2], [],
+ [m4_if([$2], [], [], [[$1$2]])$0([$1], m4_shift(m4_shift($@)))])])
+
+
+# lt_car(LIST)
+# lt_cdr(LIST)
+# ------------
+# Manipulate m4 lists.
+# These macros are necessary as long as will still need to support
+# Autoconf-2.59, which quotes differently.
+m4_define([lt_car], [[$1]])
+m4_define([lt_cdr],
+[m4_if([$#], 0, [m4_fatal([$0: cannot be called without arguments])],
+ [$#], 1, [],
+ [m4_dquote(m4_shift($@))])])
+m4_define([lt_unquote], $1)
+
+
+# lt_append(MACRO-NAME, STRING, [SEPARATOR])
+# ------------------------------------------
+# Redefine MACRO-NAME to hold its former content plus 'SEPARATOR''STRING'.
+# Note that neither SEPARATOR nor STRING are expanded; they are appended
+# to MACRO-NAME as is (leaving the expansion for when MACRO-NAME is invoked).
+# No SEPARATOR is output if MACRO-NAME was previously undefined (different
+# than defined and empty).
+#
+# This macro is needed until we can rely on Autoconf 2.62, since earlier
+# versions of m4sugar mistakenly expanded SEPARATOR but not STRING.
+m4_define([lt_append],
+[m4_define([$1],
+ m4_ifdef([$1], [m4_defn([$1])[$3]])[$2])])
+
+
+
+# lt_combine(SEP, PREFIX-LIST, INFIX, SUFFIX1, [SUFFIX2...])
+# ----------------------------------------------------------
+# Produce a SEP delimited list of all paired combinations of elements of
+# PREFIX-LIST with SUFFIX1 through SUFFIXn. Each element of the list
+# has the form PREFIXmINFIXSUFFIXn.
+# Needed until we can rely on m4_combine added in Autoconf 2.62.
+m4_define([lt_combine],
+[m4_if(m4_eval([$# > 3]), [1],
+ [m4_pushdef([_Lt_sep], [m4_define([_Lt_sep], m4_defn([lt_car]))])]]dnl
+[[m4_foreach([_Lt_prefix], [$2],
+ [m4_foreach([_Lt_suffix],
+ ]m4_dquote(m4_dquote(m4_shift(m4_shift(m4_shift($@)))))[,
+ [_Lt_sep([$1])[]m4_defn([_Lt_prefix])[$3]m4_defn([_Lt_suffix])])])])])
+
+
+# lt_if_append_uniq(MACRO-NAME, VARNAME, [SEPARATOR], [UNIQ], [NOT-UNIQ])
+# -----------------------------------------------------------------------
+# Iff MACRO-NAME does not yet contain VARNAME, then append it (delimited
+# by SEPARATOR if supplied) and expand UNIQ, else NOT-UNIQ.
+m4_define([lt_if_append_uniq],
+[m4_ifdef([$1],
+ [m4_if(m4_index([$3]m4_defn([$1])[$3], [$3$2$3]), [-1],
+ [lt_append([$1], [$2], [$3])$4],
+ [$5])],
+ [lt_append([$1], [$2], [$3])$4])])
+
+
+# lt_dict_add(DICT, KEY, VALUE)
+# -----------------------------
+m4_define([lt_dict_add],
+[m4_define([$1($2)], [$3])])
+
+
+# lt_dict_add_subkey(DICT, KEY, SUBKEY, VALUE)
+# --------------------------------------------
+m4_define([lt_dict_add_subkey],
+[m4_define([$1($2:$3)], [$4])])
+
+
+# lt_dict_fetch(DICT, KEY, [SUBKEY])
+# ----------------------------------
+m4_define([lt_dict_fetch],
+[m4_ifval([$3],
+ m4_ifdef([$1($2:$3)], [m4_defn([$1($2:$3)])]),
+ m4_ifdef([$1($2)], [m4_defn([$1($2)])]))])
+
+
+# lt_if_dict_fetch(DICT, KEY, [SUBKEY], VALUE, IF-TRUE, [IF-FALSE])
+# -----------------------------------------------------------------
+m4_define([lt_if_dict_fetch],
+[m4_if(lt_dict_fetch([$1], [$2], [$3]), [$4],
+ [$5],
+ [$6])])
+
+
+# lt_dict_filter(DICT, [SUBKEY], VALUE, [SEPARATOR], KEY, [...])
+# --------------------------------------------------------------
+m4_define([lt_dict_filter],
+[m4_if([$5], [], [],
+ [lt_join(m4_quote(m4_default([$4], [[, ]])),
+ lt_unquote(m4_split(m4_normalize(m4_foreach(_Lt_key, lt_car([m4_shiftn(4, $@)]),
+ [lt_if_dict_fetch([$1], _Lt_key, [$2], [$3], [_Lt_key ])])))))])[]dnl
+])
diff --git a/m4/ltversion.m4 b/m4/ltversion.m4
new file mode 100644
index 00000000..b155d0ac
--- /dev/null
+++ b/m4/ltversion.m4
@@ -0,0 +1,24 @@
+# ltversion.m4 -- version numbers -*- Autoconf -*-
+#
+# Copyright (C) 2004, 2011-2019, 2021-2022 Free Software Foundation,
+# Inc.
+# Written by Scott James Remnant, 2004
+#
+# This file is free software; the Free Software Foundation gives
+# unlimited permission to copy and/or distribute it, with or without
+# modifications, as long as this notice is preserved.
+
+# @configure_input@
+
+# serial 4245 ltversion.m4
+# This file is part of GNU Libtool
+
+m4_define([LT_PACKAGE_VERSION], [2.4.7])
+m4_define([LT_PACKAGE_REVISION], [2.4.7])
+
+AC_DEFUN([LTVERSION_VERSION],
+[macro_version='2.4.7'
+macro_revision='2.4.7'
+_LT_DECL(, macro_version, 0, [Which release of libtool.m4 was used?])
+_LT_DECL(, macro_revision, 0)
+])
diff --git a/m4/lt~obsolete.m4 b/m4/lt~obsolete.m4
new file mode 100644
index 00000000..0f7a8759
--- /dev/null
+++ b/m4/lt~obsolete.m4
@@ -0,0 +1,99 @@
+# lt~obsolete.m4 -- aclocal satisfying obsolete definitions. -*-Autoconf-*-
+#
+# Copyright (C) 2004-2005, 2007, 2009, 2011-2019, 2021-2022 Free
+# Software Foundation, Inc.
+# Written by Scott James Remnant, 2004.
+#
+# This file is free software; the Free Software Foundation gives
+# unlimited permission to copy and/or distribute it, with or without
+# modifications, as long as this notice is preserved.
+
+# serial 5 lt~obsolete.m4
+
+# These exist entirely to fool aclocal when bootstrapping libtool.
+#
+# In the past libtool.m4 has provided macros via AC_DEFUN (or AU_DEFUN),
+# which have later been changed to m4_define as they aren't part of the
+# exported API, or moved to Autoconf or Automake where they belong.
+#
+# The trouble is, aclocal is a bit thick. It'll see the old AC_DEFUN
+# in /usr/share/aclocal/libtool.m4 and remember it, then when it sees us
+# using a macro with the same name in our local m4/libtool.m4 it'll
+# pull the old libtool.m4 in (it doesn't see our shiny new m4_define
+# and doesn't know about Autoconf macros at all.)
+#
+# So we provide this file, which has a silly filename so it's always
+# included after everything else. This provides aclocal with the
+# AC_DEFUNs it wants, but when m4 processes it, it doesn't do anything
+# because those macros already exist, or will be overwritten later.
+# We use AC_DEFUN over AU_DEFUN for compatibility with aclocal-1.6.
+#
+# Anytime we withdraw an AC_DEFUN or AU_DEFUN, remember to add it here.
+# Yes, that means every name once taken will need to remain here until
+# we give up compatibility with versions before 1.7, at which point
+# we need to keep only those names which we still refer to.
+
+# This is to help aclocal find these macros, as it can't see m4_define.
+AC_DEFUN([LTOBSOLETE_VERSION], [m4_if([1])])
+
+m4_ifndef([AC_LIBTOOL_LINKER_OPTION], [AC_DEFUN([AC_LIBTOOL_LINKER_OPTION])])
+m4_ifndef([AC_PROG_EGREP], [AC_DEFUN([AC_PROG_EGREP])])
+m4_ifndef([_LT_AC_PROG_ECHO_BACKSLASH], [AC_DEFUN([_LT_AC_PROG_ECHO_BACKSLASH])])
+m4_ifndef([_LT_AC_SHELL_INIT], [AC_DEFUN([_LT_AC_SHELL_INIT])])
+m4_ifndef([_LT_AC_SYS_LIBPATH_AIX], [AC_DEFUN([_LT_AC_SYS_LIBPATH_AIX])])
+m4_ifndef([_LT_PROG_LTMAIN], [AC_DEFUN([_LT_PROG_LTMAIN])])
+m4_ifndef([_LT_AC_TAGVAR], [AC_DEFUN([_LT_AC_TAGVAR])])
+m4_ifndef([AC_LTDL_ENABLE_INSTALL], [AC_DEFUN([AC_LTDL_ENABLE_INSTALL])])
+m4_ifndef([AC_LTDL_PREOPEN], [AC_DEFUN([AC_LTDL_PREOPEN])])
+m4_ifndef([_LT_AC_SYS_COMPILER], [AC_DEFUN([_LT_AC_SYS_COMPILER])])
+m4_ifndef([_LT_AC_LOCK], [AC_DEFUN([_LT_AC_LOCK])])
+m4_ifndef([AC_LIBTOOL_SYS_OLD_ARCHIVE], [AC_DEFUN([AC_LIBTOOL_SYS_OLD_ARCHIVE])])
+m4_ifndef([_LT_AC_TRY_DLOPEN_SELF], [AC_DEFUN([_LT_AC_TRY_DLOPEN_SELF])])
+m4_ifndef([AC_LIBTOOL_PROG_CC_C_O], [AC_DEFUN([AC_LIBTOOL_PROG_CC_C_O])])
+m4_ifndef([AC_LIBTOOL_SYS_HARD_LINK_LOCKS], [AC_DEFUN([AC_LIBTOOL_SYS_HARD_LINK_LOCKS])])
+m4_ifndef([AC_LIBTOOL_OBJDIR], [AC_DEFUN([AC_LIBTOOL_OBJDIR])])
+m4_ifndef([AC_LTDL_OBJDIR], [AC_DEFUN([AC_LTDL_OBJDIR])])
+m4_ifndef([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH], [AC_DEFUN([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH])])
+m4_ifndef([AC_LIBTOOL_SYS_LIB_STRIP], [AC_DEFUN([AC_LIBTOOL_SYS_LIB_STRIP])])
+m4_ifndef([AC_PATH_MAGIC], [AC_DEFUN([AC_PATH_MAGIC])])
+m4_ifndef([AC_PROG_LD_GNU], [AC_DEFUN([AC_PROG_LD_GNU])])
+m4_ifndef([AC_PROG_LD_RELOAD_FLAG], [AC_DEFUN([AC_PROG_LD_RELOAD_FLAG])])
+m4_ifndef([AC_DEPLIBS_CHECK_METHOD], [AC_DEFUN([AC_DEPLIBS_CHECK_METHOD])])
+m4_ifndef([AC_LIBTOOL_PROG_COMPILER_NO_RTTI], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_NO_RTTI])])
+m4_ifndef([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE], [AC_DEFUN([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE])])
+m4_ifndef([AC_LIBTOOL_PROG_COMPILER_PIC], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_PIC])])
+m4_ifndef([AC_LIBTOOL_PROG_LD_SHLIBS], [AC_DEFUN([AC_LIBTOOL_PROG_LD_SHLIBS])])
+m4_ifndef([AC_LIBTOOL_POSTDEP_PREDEP], [AC_DEFUN([AC_LIBTOOL_POSTDEP_PREDEP])])
+m4_ifndef([LT_AC_PROG_EGREP], [AC_DEFUN([LT_AC_PROG_EGREP])])
+m4_ifndef([LT_AC_PROG_SED], [AC_DEFUN([LT_AC_PROG_SED])])
+m4_ifndef([_LT_CC_BASENAME], [AC_DEFUN([_LT_CC_BASENAME])])
+m4_ifndef([_LT_COMPILER_BOILERPLATE], [AC_DEFUN([_LT_COMPILER_BOILERPLATE])])
+m4_ifndef([_LT_LINKER_BOILERPLATE], [AC_DEFUN([_LT_LINKER_BOILERPLATE])])
+m4_ifndef([_AC_PROG_LIBTOOL], [AC_DEFUN([_AC_PROG_LIBTOOL])])
+m4_ifndef([AC_LIBTOOL_SETUP], [AC_DEFUN([AC_LIBTOOL_SETUP])])
+m4_ifndef([_LT_AC_CHECK_DLFCN], [AC_DEFUN([_LT_AC_CHECK_DLFCN])])
+m4_ifndef([AC_LIBTOOL_SYS_DYNAMIC_LINKER], [AC_DEFUN([AC_LIBTOOL_SYS_DYNAMIC_LINKER])])
+m4_ifndef([_LT_AC_TAGCONFIG], [AC_DEFUN([_LT_AC_TAGCONFIG])])
+m4_ifndef([AC_DISABLE_FAST_INSTALL], [AC_DEFUN([AC_DISABLE_FAST_INSTALL])])
+m4_ifndef([_LT_AC_LANG_CXX], [AC_DEFUN([_LT_AC_LANG_CXX])])
+m4_ifndef([_LT_AC_LANG_F77], [AC_DEFUN([_LT_AC_LANG_F77])])
+m4_ifndef([_LT_AC_LANG_GCJ], [AC_DEFUN([_LT_AC_LANG_GCJ])])
+m4_ifndef([AC_LIBTOOL_LANG_C_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_C_CONFIG])])
+m4_ifndef([_LT_AC_LANG_C_CONFIG], [AC_DEFUN([_LT_AC_LANG_C_CONFIG])])
+m4_ifndef([AC_LIBTOOL_LANG_CXX_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_CXX_CONFIG])])
+m4_ifndef([_LT_AC_LANG_CXX_CONFIG], [AC_DEFUN([_LT_AC_LANG_CXX_CONFIG])])
+m4_ifndef([AC_LIBTOOL_LANG_F77_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_F77_CONFIG])])
+m4_ifndef([_LT_AC_LANG_F77_CONFIG], [AC_DEFUN([_LT_AC_LANG_F77_CONFIG])])
+m4_ifndef([AC_LIBTOOL_LANG_GCJ_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_GCJ_CONFIG])])
+m4_ifndef([_LT_AC_LANG_GCJ_CONFIG], [AC_DEFUN([_LT_AC_LANG_GCJ_CONFIG])])
+m4_ifndef([AC_LIBTOOL_LANG_RC_CONFIG], [AC_DEFUN([AC_LIBTOOL_LANG_RC_CONFIG])])
+m4_ifndef([_LT_AC_LANG_RC_CONFIG], [AC_DEFUN([_LT_AC_LANG_RC_CONFIG])])
+m4_ifndef([AC_LIBTOOL_CONFIG], [AC_DEFUN([AC_LIBTOOL_CONFIG])])
+m4_ifndef([_LT_AC_FILE_LTDLL_C], [AC_DEFUN([_LT_AC_FILE_LTDLL_C])])
+m4_ifndef([_LT_REQUIRED_DARWIN_CHECKS], [AC_DEFUN([_LT_REQUIRED_DARWIN_CHECKS])])
+m4_ifndef([_LT_AC_PROG_CXXCPP], [AC_DEFUN([_LT_AC_PROG_CXXCPP])])
+m4_ifndef([_LT_PREPARE_SED_QUOTE_VARS], [AC_DEFUN([_LT_PREPARE_SED_QUOTE_VARS])])
+m4_ifndef([_LT_PROG_ECHO_BACKSLASH], [AC_DEFUN([_LT_PROG_ECHO_BACKSLASH])])
+m4_ifndef([_LT_PROG_F77], [AC_DEFUN([_LT_PROG_F77])])
+m4_ifndef([_LT_PROG_FC], [AC_DEFUN([_LT_PROG_FC])])
+m4_ifndef([_LT_PROG_CXX], [AC_DEFUN([_LT_PROG_CXX])])
diff --git a/out1 b/out1
new file mode 100644
index 00000000..ddb5344a
--- /dev/null
+++ b/out1
@@ -0,0 +1,5975 @@
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 29 18600 2
+2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 4 304 4
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 1 40 1
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 12 2107 2
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 1 40 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 10 840 2
+2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 1 76 2
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 1 32 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 1 76 2
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 10 1155 2
+2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 13 6591 2
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 11 4264 2
+2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 1 76 2
+2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 1 44 1
+2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 13 4154 2
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 77363 4.4 M 2
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 5 895 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 11 653 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 1 76 2
+2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 1 40 1
+2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 29 18602 2
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 1 44 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 1 99 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 1 76 2
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 1 44 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 1 75 2
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 1 44 1
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 4 304 4
+2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 1 187 1
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 ...AP.SF 0 29 18600 2
+2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 ........ 0 4 304 4
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 ......S. 0 1 40 1
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 CE.APRSF 0 12 2107 2
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 ......S. 0 1 40 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 ...AP... 0 10 840 2
+2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 ........ 0 1 76 2
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 ........ 0 1 32 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 ........ 0 1 76 2
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 ...AP... 0 10 1155 2
+2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 ...AP.S. 0 13 6591 2
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 ...AP.SF 0 11 4264 2
+2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 ........ 0 1 76 2
+2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 ......S. 0 1 44 1
+2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 ........ 0 13 4154 2
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 ...AP..F 0 77363 4.4 M 2
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 ...AP... 0 5 895 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 ...AP... 0 11 653 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 ........ 0 1 76 2
+2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 ......S. 0 1 40 1
+2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 ...AP.SF 0 29 18602 2
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 ......S. 0 1 44 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 ........ 0 1 99 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 ........ 0 1 76 2
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 ......S. 0 1 44 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 ........ 0 1 75 2
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 ......S. 0 1 44 1
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 ........ 0 4 304 4
+2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 ........ 0 1 187 1
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 ...AP.SF 0 29 18600 0 4804 641 2
+2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 ........ 0 4 304 0 40 76 4
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 ......S. 0 1 40 0 0 40 1
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 CE.APRSF 0 12 2107 23 32793 175 2
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 ......S. 0 1 40 0 0 40 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 ...AP... 0 10 840 0 27 84 2
+2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 ........ 0 1 76 50 30400 76 2
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 ........ 0 1 32 0 0 32 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 ........ 0 1 76 100 60800 76 2
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 ...AP... 0 10 1155 0 36 115 2
+2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 ...AP.S. 0 13 6591 90 368727 507 2
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 ...AP.SF 0 11 4264 4 14552 387 2
+2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 ........ 0 1 76 90 55272 76 2
+2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 ......S. 0 1 44 0 0 44 1
+2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 ........ 0 13 4154 114 291508 319 2
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 ...AP..F 0 77363 4.4 M 408 183950 56 2
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 ...AP... 0 5 895 0 29 179 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 ...AP... 0 11 653 0 19 59 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 ........ 0 1 76 100 60800 76 2
+2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 ......S. 0 1 40 0 0 40 1
+2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 ...AP.SF 0 29 18602 0 4803 641 2
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 ......S. 0 1 44 0 0 44 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 ........ 0 1 99 0 0 99 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 ........ 0 1 76 50 30400 76 2
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 ......S. 0 1 44 0 0 44 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 ........ 0 1 75 47 28571 75 2
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 ......S. 0 1 44 0 0 44 1
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 ........ 0 4 304 0 40 76 4
+2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 ........ 0 1 187 0 0 187 1
+2024-04-15 00:03:25.950 00:00:00.235 TCP 157.143.34.100:56142 <-> 54.78.190.126:443 12 12 6732 1369 2
+2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 <-> 157.143.34.100:62096 31 29 6893 18600 2
+2024-04-15 00:03:01.359 00:00:00.235 TCP 104.22.15.70:443 <-> 157.143.34.100:58020 12 10 2982 5716 2
+2024-04-15 00:06:22.130 00:00:00.104 UDP 172.217.168.42:443 <-> 157.143.34.100:59255 11 11 4134 4142 2
+2024-04-15 00:05:44.685 00:00:30.997 TCP 17.248.209.68:443 <-> 157.143.34.100:58880 32 29 6945 18601 2
+2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 <-> 2.21.22.179:443 14 12 11839 2107 2
+2024-04-15 00:03:25.444 00:00:00.461 TCP 104.22.15.70:443 <-> 157.143.34.100:61719 12 14 1547 8683 2
+2024-04-15 00:06:24.093 00:00:00.150 TCP 172.217.168.42:443 <-> 157.143.34.100:51654 0 16 0 8224 1
+2024-04-15 00:05:43.067 00:00:31.027 TCP 13.224.103.88:443 <-> 157.143.34.100:60765 13 11 1562 7425 2
+2024-04-15 00:02:30.187 00:00:31.035 TCP 17.248.209.70:443 <-> 157.143.34.100:50515 35 31 7113 18713 2
+2024-04-15 00:06:22.740 00:00:00.127 TCP 172.217.168.42:443 <-> 157.143.34.100:54951 0 9 0 6256 1
+2024-04-15 00:06:21.134 00:00:00.091 TCP 172.217.168.42:443 <-> 157.143.34.100:65089 8 7 1069 6187 2
+2024-04-15 00:04:40.006 00:00:31.014 TCP 17.248.209.68:443 <-> 157.143.34.100:53757 34 30 7061 18660 2
+2024-04-15 00:03:37.356 00:00:00.180 TCP 13.224.103.47:443 <-> 157.143.34.100:63066 13 12 1676 7012 2
+2024-04-15 00:06:23.422 00:00:00.260 TCP 172.217.168.3:443 <-> 157.143.34.100:51203 0 10 0 5830 1
+2024-04-15 00:06:21.097 00:00:00.494 UDP 172.217.168.42:443 <-> 157.143.34.100:53011 32 29 10776 9134 2
+2024-04-14 23:59:33.733 00:05:00.280 TCP 157.143.34.100:58186 <-> 172.217.218.188:5228 18 12 1098 1008 2
+2024-04-15 00:06:23.212 00:00:00.043 TCP 172.217.168.42:443 <-> 157.143.34.100:59891 0 7 0 6183 1
+2024-04-14 23:59:48.800 00:00:30.957 TCP 17.248.209.66:443 <-> 157.143.34.100:56527 32 29 6945 18599 2
+2024-04-15 00:01:10.411 00:04:00.118 TCP 172.217.168.46:443 <-> 157.143.34.100:61354 22 20 6831 2568 2
+2024-04-15 00:06:22.291 00:00:00.082 UDP 172.217.168.42:443 <-> 157.143.34.100:61593 0 12 0 4310 1
+2024-04-15 00:04:21.362 00:00:01.427 TCP 157.143.34.100:61426 <-> 2.21.22.179:443 14 12 11736 2093 2
+2024-04-15 00:06:13.946 00:00:00.163 TCP 172.217.168.46:443 <-> 157.143.34.100:62402 14 13 2093 9207 2
+2024-04-14 23:54:27.599 00:10:00.268 TCP 172.217.168.3:80 <-> 157.143.34.100:59696 31 21 4672 2362 4
+2024-04-15 00:03:02.757 00:00:31.032 TCP 17.248.209.70:443 <-> 157.143.34.100:56357 32 29 6945 18599 2
+2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 <-> 157.143.34.100:62151 11 11 1934 4264 2
+2024-04-15 00:06:23.300 00:00:00.068 UDP 172.217.168.46:443 <-> 157.143.34.100:65143 0 10 0 4065 1
+2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 <-> 157.143.34.100:51638 10 13 2112 6591 2
+2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 <-> 157.143.34.100:59739 13 13 4781 4154 2
+2024-04-15 00:04:37.438 00:00:30.643 TCP 17.171.47.23:443 <-> 157.143.34.100:61655 15 20 3579 16585 2
+2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 <-> 213.144.148.130:28919 114757 77363 160.9 M 4.4 M 2
+2024-04-15 00:06:22.149 00:00:00.101 UDP 172.217.168.42:443 <-> 157.143.34.100:51648 0 13 0 7924 1
+2024-04-15 00:06:22.156 00:00:00.080 UDP 172.217.168.42:443 <-> 157.143.34.100:62094 0 11 0 4235 1
+2024-04-15 00:03:35.178 00:00:30.994 TCP 17.248.209.70:443 <-> 157.143.34.100:58109 32 31 7510 18717 2
+2024-04-15 00:04:07.739 00:00:30.996 TCP 17.248.209.68:443 <-> 157.143.34.100:54177 33 29 6997 18600 2
+2024-04-14 23:54:46.461 00:09:00.639 TCP 157.143.34.100:57657 <-> 172.217.168.3:80 0 20 0 4330 2
+2024-04-15 00:03:37.183 00:00:00.181 TCP 13.224.103.47:443 <-> 157.143.34.100:62379 12 12 1574 7405 2
+2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 <-> 157.143.34.100:59352 33 29 7661 18602 2
+2024-04-15 00:00:21.008 00:00:31.018 TCP 17.248.209.66:443 <-> 157.143.34.100:62570 31 29 6893 18601 2
+2024-04-15 00:01:25.509 00:00:30.947 TCP 17.248.209.70:443 <-> 157.143.34.100:50258 33 29 6997 18599 2
+2024-04-15 00:04:37.481 00:00:01.097 TCP 157.143.34.100:58134 <-> 17.253.15.204:443 13 12 6168 1668 2
+2024-04-15 00:06:21.236 00:00:00.995 UDP 172.217.168.42:443 <-> 157.143.34.100:61866 0 20 0 5794 1
+2024-04-15 00:01:09.800 00:00:00.348 TCP 157.143.34.100:61318 <-> 142.250.203.115:443 11 12 5919 1657 2
+2024-04-15 00:00:53.217 00:00:30.938 TCP 17.248.209.66:443 <-> 157.143.34.100:57665 31 28 6893 18476 2
+2024-04-15 00:01:57.818 00:00:30.998 TCP 17.248.209.70:443 <-> 157.143.34.100:53916 33 29 7009 18601 2
+2024-04-15 00:02:44.996 00:00:06.716 TCP 52.48.41.28:443 <-> 157.143.34.100:59373 20 18 2131 4295 2
+2024-04-14 23:59:16.526 00:00:31.011 TCP 17.248.209.66:443 <-> 157.143.34.100:62179 32 29 6945 18600 2
+2024-04-15 00:03:26.152 00:00:00.227 TCP 157.143.34.100:53018 <-> 54.78.190.126:443 11 12 7222 1355 2
+2024-04-15 00:06:21.700 00:00:00.521 UDP 172.217.168.42:443 <-> 157.143.34.100:59480 21 26 5602 14779 2
+2024-04-15 00:03:37.356 00:00:00.173 TCP 13.224.103.47:443 <-> 157.143.34.100:60460 12 12 1634 7012 2
+2024-04-15 00:05:12.425 00:00:30.973 TCP 17.248.209.68:443 <-> 157.143.34.100:53730 32 29 6945 18529 2
+2024-04-15 00:03:26.344 00:00:00.233 TCP 157.143.34.100:54916 <-> 54.78.190.126:443 12 13 6786 1409 2
+2024-04-15 00:06:23.187 00:00:00.447 UDP 172.217.168.42:443 <-> 157.143.34.100:63665 0 20 0 7353 1
+2024-04-15 00:03:10.588 00:00:37.586 TCP 157.143.34.100:51573 <-> 35.231.208.158:443 8 10 3814 1602 2
+2024-04-15 00:03:25.950 00:00:00.235 TCP 157.143.34.100:56142 <-> 54.78.190.126:443 ...AP.SF 0 12 12 6732 1369 2
+2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 <-> 157.143.34.100:62096 ...AP.SF 0 31 29 6893 18600 2
+2024-04-15 00:03:01.359 00:00:00.235 TCP 104.22.15.70:443 <-> 157.143.34.100:58020 ...AP.SF 0 12 10 2982 5716 2
+2024-04-15 00:06:22.130 00:00:00.104 UDP 172.217.168.42:443 <-> 157.143.34.100:59255 ........ 0 11 11 4134 4142 2
+2024-04-15 00:05:44.685 00:00:30.997 TCP 17.248.209.68:443 <-> 157.143.34.100:58880 ...AP.SF 0 32 29 6945 18601 2
+2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 <-> 2.21.22.179:443 CE.APRSF 0 14 12 11839 2107 2
+2024-04-15 00:03:25.444 00:00:00.461 TCP 104.22.15.70:443 <-> 157.143.34.100:61719 ...AP.SF 0 12 14 1547 8683 2
+2024-04-15 00:06:24.093 00:00:00.150 TCP 172.217.168.42:443 <-> 157.143.34.100:51654 ...AP.S. 0 0 16 0 8224 1
+2024-04-15 00:05:43.067 00:00:31.027 TCP 13.224.103.88:443 <-> 157.143.34.100:60765 ...AP.SF 0 13 11 1562 7425 2
+2024-04-15 00:02:30.187 00:00:31.035 TCP 17.248.209.70:443 <-> 157.143.34.100:50515 ...AP.SF 0 35 31 7113 18713 2
+2024-04-15 00:06:22.740 00:00:00.127 TCP 172.217.168.42:443 <-> 157.143.34.100:54951 ...AP.S. 0 0 9 0 6256 1
+2024-04-15 00:06:21.134 00:00:00.091 TCP 172.217.168.42:443 <-> 157.143.34.100:65089 ...AP.S. 0 8 7 1069 6187 2
+2024-04-15 00:04:40.006 00:00:31.014 TCP 17.248.209.68:443 <-> 157.143.34.100:53757 ...AP.SF 0 34 30 7061 18660 2
+2024-04-15 00:03:37.356 00:00:00.180 TCP 13.224.103.47:443 <-> 157.143.34.100:63066 ...AP.SF 0 13 12 1676 7012 2
+2024-04-15 00:06:23.422 00:00:00.260 TCP 172.217.168.3:443 <-> 157.143.34.100:51203 ...AP.S. 0 0 10 0 5830 1
+2024-04-15 00:06:21.097 00:00:00.494 UDP 172.217.168.42:443 <-> 157.143.34.100:53011 ........ 0 32 29 10776 9134 2
+2024-04-14 23:59:33.733 00:05:00.280 TCP 157.143.34.100:58186 <-> 172.217.218.188:5228 ...AP... 0 18 12 1098 1008 2
+2024-04-15 00:06:23.212 00:00:00.043 TCP 172.217.168.42:443 <-> 157.143.34.100:59891 ...AP.S. 0 0 7 0 6183 1
+2024-04-14 23:59:48.800 00:00:30.957 TCP 17.248.209.66:443 <-> 157.143.34.100:56527 ...AP.SF 0 32 29 6945 18599 2
+2024-04-15 00:01:10.411 00:04:00.118 TCP 172.217.168.46:443 <-> 157.143.34.100:61354 ...AP.SF 0 22 20 6831 2568 2
+2024-04-15 00:06:22.291 00:00:00.082 UDP 172.217.168.42:443 <-> 157.143.34.100:61593 ........ 0 0 12 0 4310 1
+2024-04-15 00:04:21.362 00:00:01.427 TCP 157.143.34.100:61426 <-> 2.21.22.179:443 CE.APRSF 0 14 12 11736 2093 2
+2024-04-15 00:06:13.946 00:00:00.163 TCP 172.217.168.46:443 <-> 157.143.34.100:62402 ...AP.SF 0 14 13 2093 9207 2
+2024-04-14 23:54:27.599 00:10:00.268 TCP 172.217.168.3:80 <-> 157.143.34.100:59696 ...AP... 0 31 21 4672 2362 4
+2024-04-15 00:03:02.757 00:00:31.032 TCP 17.248.209.70:443 <-> 157.143.34.100:56357 ...AP.SF 0 32 29 6945 18599 2
+2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 <-> 157.143.34.100:62151 ...AP.SF 0 11 11 1934 4264 2
+2024-04-15 00:06:23.300 00:00:00.068 UDP 172.217.168.46:443 <-> 157.143.34.100:65143 ........ 0 0 10 0 4065 1
+2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 <-> 157.143.34.100:51638 ...AP.S. 0 10 13 2112 6591 2
+2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 <-> 157.143.34.100:59739 ........ 0 13 13 4781 4154 2
+2024-04-15 00:04:37.438 00:00:30.643 TCP 17.171.47.23:443 <-> 157.143.34.100:61655 .E.APRSF 0 15 20 3579 16585 2
+2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 <-> 213.144.148.130:28919 ...AP..F 0 114757 77363 160.9 M 4.4 M 2
+2024-04-15 00:06:22.149 00:00:00.101 UDP 172.217.168.42:443 <-> 157.143.34.100:51648 ........ 0 0 13 0 7924 1
+2024-04-15 00:06:22.156 00:00:00.080 UDP 172.217.168.42:443 <-> 157.143.34.100:62094 ........ 0 0 11 0 4235 1
+2024-04-15 00:03:35.178 00:00:30.994 TCP 17.248.209.70:443 <-> 157.143.34.100:58109 ...AP.SF 0 32 31 7510 18717 2
+2024-04-15 00:04:07.739 00:00:30.996 TCP 17.248.209.68:443 <-> 157.143.34.100:54177 ...AP.SF 0 33 29 6997 18600 2
+2024-04-14 23:54:46.461 00:09:00.639 TCP 157.143.34.100:57657 <-> 172.217.168.3:80 ...AP... 0 0 20 0 4330 2
+2024-04-15 00:03:37.183 00:00:00.181 TCP 13.224.103.47:443 <-> 157.143.34.100:62379 ...AP.SF 0 12 12 1574 7405 2
+2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 <-> 157.143.34.100:59352 ...AP.SF 0 33 29 7661 18602 2
+2024-04-15 00:00:21.008 00:00:31.018 TCP 17.248.209.66:443 <-> 157.143.34.100:62570 ...AP.SF 0 31 29 6893 18601 2
+2024-04-15 00:01:25.509 00:00:30.947 TCP 17.248.209.70:443 <-> 157.143.34.100:50258 ...AP.SF 0 33 29 6997 18599 2
+2024-04-15 00:04:37.481 00:00:01.097 TCP 157.143.34.100:58134 <-> 17.253.15.204:443 CE.APRSF 0 13 12 6168 1668 2
+2024-04-15 00:06:21.236 00:00:00.995 UDP 172.217.168.42:443 <-> 157.143.34.100:61866 ........ 0 0 20 0 5794 1
+2024-04-15 00:01:09.800 00:00:00.348 TCP 157.143.34.100:61318 <-> 142.250.203.115:443 ...AP.SF 0 11 12 5919 1657 2
+2024-04-15 00:00:53.217 00:00:30.938 TCP 17.248.209.66:443 <-> 157.143.34.100:57665 ...AP.SF 0 31 28 6893 18476 2
+2024-04-15 00:01:57.818 00:00:30.998 TCP 17.248.209.70:443 <-> 157.143.34.100:53916 ...AP.SF 0 33 29 7009 18601 2
+2024-04-15 00:02:44.996 00:00:06.716 TCP 52.48.41.28:443 <-> 157.143.34.100:59373 ...AP.SF 0 20 18 2131 4295 2
+2024-04-14 23:59:16.526 00:00:31.011 TCP 17.248.209.66:443 <-> 157.143.34.100:62179 ...AP.SF 0 32 29 6945 18600 2
+2024-04-15 00:03:26.152 00:00:00.227 TCP 157.143.34.100:53018 <-> 54.78.190.126:443 ...AP.SF 0 11 12 7222 1355 2
+2024-04-15 00:06:21.700 00:00:00.521 UDP 172.217.168.42:443 <-> 157.143.34.100:59480 ........ 0 21 26 5602 14779 2
+2024-04-15 00:03:37.356 00:00:00.173 TCP 13.224.103.47:443 <-> 157.143.34.100:60460 ...AP.SF 0 12 12 1634 7012 2
+2024-04-15 00:05:12.425 00:00:30.973 TCP 17.248.209.68:443 <-> 157.143.34.100:53730 ...AP.SF 0 32 29 6945 18529 2
+2024-04-15 00:03:26.344 00:00:00.233 TCP 157.143.34.100:54916 <-> 54.78.190.126:443 ...AP.SF 0 12 13 6786 1409 2
+2024-04-15 00:06:23.187 00:00:00.447 UDP 172.217.168.42:443 <-> 157.143.34.100:63665 ........ 0 0 20 0 7353 1
+2024-04-15 00:03:10.588 00:00:37.586 TCP 157.143.34.100:51573 <-> 35.231.208.158:443 ...AP.SF 0 8 10 3814 1602 2
+
+Flow Record:
+ RecordCount = 1
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 353
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132205950 [2024-04-15 00:03:25.950]
+ last = 1713132206185 [2024-04-15 00:03:26.185]
+ received at = 1713132277673 [2024-04-15 00:04:37.673]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 56142
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 1369
+ src addr = 157.143.34.100
+ dst addr = 54.78.190.126
+ out packets = 12
+ out bytes = 6732
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 33.772 ms
+ srv latency = 0.000 ms
+ app latency = 0.192 ms
+ in payload = 173
+ TLS version = TLS 1.2
+ sni name = www.qobuz.com
+ ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a
+ ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043
+16 03 03 00 A8 01 00 00 A4 03 03 66 1C 52 AD 5A | ...........f.R.Z
+BC 09 1D B4 3F 77 22 C0 76 9B 66 08 AC 30 E0 84 | ....?w".v.f..0..
+8D FA D9 E8 DE 46 3E 36 85 38 C2 00 00 2C 00 FF | .....F>6.8...,..
+C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0
+C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'..........
+00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O..
+00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz
+2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............
+00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................
+05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................
+01 00 00 00 00 00 12 00 00 00 17 00 00 | .............
+
+Flow Record:
+ RecordCount = 2
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131924315 [2024-04-14 23:58:44.315]
+ last = 1713131955289 [2024-04-14 23:59:15.289]
+ received at = 1713132056973 [2024-04-15 00:00:56.973]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 62096
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18600
+ src addr = 17.248.209.71
+ dst addr = 157.143.34.100
+ out packets = 31
+ out bytes = 6893
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.436 ms
+ srv latency = 0.000 ms
+ app latency = 0.511 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 49 BA 87 66 52 | ....z...v..I..fR
+4C C5 4D 23 B4 8F 17 EC 17 67 CE 2D 85 2A 3C 0B | L.M#.....g.-.*<.
+74 6A FF D8 6B 20 CD DD 52 17 08 20 09 40 D6 50 | tj..k ..R.. .@.P
+CA B4 ED E7 95 E3 79 7A A7 F5 8D 69 87 C5 D1 2F | ......yz...i.../
+DE F0 4E 7D 59 4B B2 E2 25 00 7A 7C 13 02 00 00 | ..N}YK..%.z|....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 31 | ..+.....3.$... 1
+AA E8 62 9E AD 02 D2 0C 46 E2 E1 07 4B 5F DA 99 | ..b.....F...K_..
+72 42 F3 E1 89 E0 A4 C9 06 CA D4 D9 5D 19 3C 14 | rB..........].<.
+03 03 00 01 01 17 03 03 00 2A 6F 9E 45 C3 4E 87 | .........*o.E.N.
+6C 98 B1 8D 44 F1 9F 33 EF 92 F6 EA 08 48 96 FE | l...D..3.....H..
+30 81 44 12 6E 90 45 67 86 02 E7 FD 35 A4 B8 B5 | 0.D.n.Eg....5...
+91 28 7A 46 17 03 03 11 25 82 A9 6B DB 38 8B DB | .(zF....%..k.8..
+00 69 94 CC 41 FC FA 18 FD 43 DC D5 93 27 47 13 | .i..A....C...'G.
+7E 9A 79 16 26 19 2F CE 51 CD 31 FB C2 56 9C 15 | ~.y.&./.Q.1..V..
+F8 8C 06 8E D5 A2 2D 03 89 6E C2 4F 55 A2 70 0D | ......-..n.OU.p.
+A1 B6 3D 8A 82 49 15 57 54 A2 67 64 FB 13 A8 9A | ..=..I.WT.gd....
+AE A8 89 E4 66 87 16 05 C7 A3 10 5B DC 26 1B B2 | ....f......[.&..
+6F 01 72 7F 4D 19 BE 21 E0 43 C5 DA 23 35 E0 EB | o.r.M..!.C..#5..
+3E 70 C7 66 7E C3 B4 D4 34 F6 F1 FE 26 5F B6 D5 | >p.f~...4...&_..
+E6 26 B9 0E 16 00 B2 1C 42 41 F3 4E 8C E1 64 8D | .&......BA.N..d.
+9A 2D 47 52 B9 11 17 8E 36 9B 78 EF 55 91 BB 3D | .-GR....6.x.U..=
+B7 58 5D F0 BB FA 24 53 94 C3 A1 ED C1 C8 ED 72 | .X]...$S.......r
+C0 85 ED F3 C9 35 C1 D4 56 7D 0A 91 B0 41 5E 21 | .....5..V}...A^!
+19 BE 80 04 BF E7 D7 AB 14 D7 CD 83 56 3A BE 9B | ............V:..
+F7 29 69 15 92 30 25 46 6C 9B FF 0B 15 16 E5 8E | .)i..0%Fl.......
+22 F9 AC 33 AA BD 8A BA 1D E3 BB 4A 9D E5 31 5B | "..3.......J..1[
+57 5A 6A E2 86 3F 24 91 D0 0B DD 76 7A 7B 69 33 | WZj..?$....vz{i3
+74 48 81 07 65 AD 07 EB 74 00 2E 58 D2 7B A6 FA | tH..e...t..X.{..
+04 DD D6 7A F4 EE 41 06 A5 9C CF 89 B1 36 A5 0C | ...z..A......6..
+C1 A6 91 D5 DE 3B 0C A3 A5 27 11 66 0C A5 D8 FB | .....;...'.f....
+E4 D0 52 28 4A 20 84 AB 4E 85 D4 3B A1 71 36 92 | ..R(J ..N..;.q6.
+3D A0 C1 71 F8 A5 E1 73 66 BE 42 76 57 D5 89 48 | =..q...sf.BvW..H
+76 EB 09 3C 24 ED F4 23 93 38 CF 2B BE F1 54 6E | v..<$..#.8.+..Tn
+11 39 6E 51 7B 86 B8 9D 7A E4 61 58 FF F7 0D 9A | .9nQ{...z.aX....
+90 BA A0 E2 E8 99 1E 5E 2C 34 56 C5 37 A4 8F E5 | .......^,4V.7...
+B6 05 76 E3 E0 F3 2A 3E FD FF D2 C2 04 5B 63 10 | ..v...*>.....[c.
+A5 1B C7 9A D5 07 A2 CB 0E C2 34 D3 C1 F3 BB 4F | ..........4....O
+45 AB C0 98 AF A0 23 34 46 47 29 DD D4 87 91 04 | E.....#4FG).....
+24 EB 44 CD 86 EB 1F D5 6F D1 28 37 03 B1 58 ED | $.D.....o.(7..X.
+C4 2D 34 0A 2F A3 28 B3 68 B5 CB 0F 54 F3 9A 75 | .-4./.(.h...T..u
+BB C3 D3 E6 CA A4 D0 73 D0 8B F1 78 EC CB BE F7 | .......s...x....
+97 44 5C B1 30 03 22 4C CF 0D E1 26 35 ED 95 15 | .D\.0."L...&5...
+46 9D FF 9C AB CD 32 6E 51 A2 F5 51 C6 C0 E3 D5 | F.....2nQ..Q....
+8D F8 65 B8 10 BA F7 3A 9A 3A 62 1D F1 6C C5 80 | ..e....:.:b..l..
+44 C7 02 47 70 65 FA 38 2C 7F AB FF 7A 51 A2 73 | D..Gpe.8,...zQ.s
+A2 B0 32 CA BF 14 18 AA 51 71 43 4A 1E 36 D4 9A | ..2.....QqCJ.6..
+DD 52 E8 F0 D1 1D 03 14 F5 CA EC F1 05 92 25 78 | .R............%x
+79 9D 90 F3 EC 7E A4 12 9C 04 29 05 55 D7 9B C5 | y....~....).U...
+60 CA 3D 82 C5 D4 CF C5 89 F6 F0 22 60 BE A9 BB | `.=........"`...
+56 47 1D 32 90 B3 31 D3 49 17 4C DC 55 DB 74 31 | VG.2..1.I.L.U.t1
+D6 88 CA 28 D6 CB 87 F0 95 C8 C9 D6 B4 F7 FC 8D | ...(............
+0B 49 1E 2E 44 1E 04 FC 07 82 30 49 AB 75 8E 22 | .I..D.....0I.u."
+AF C8 1F B8 D4 2B 1A ED 28 07 B5 F7 24 1F 41 9F | .....+..(...$.A.
+A1 B2 A5 32 4A D5 42 5C A4 52 6A 52 D7 7B 07 CA | ...2J.B\.RjR.{..
+4A 06 11 7C 32 3F 54 06 9C C5 8B B5 3E 9A AE 3E | J..|2?T.....>..>
+BD A4 17 22 15 68 69 29 F6 46 B1 B1 92 70 35 88 | ...".hi).F...p5.
+1F FE E9 2D 58 13 AA 84 0B C3 53 39 17 C8 52 38 | ...-X.....S9..R8
+7F 42 EF 10 20 09 98 B5 A1 0A 50 CF C4 0B 0D E0 | .B.. .....P.....
+9A F6 2E 5C 18 C2 9D F8 CB 30 BD 35 28 76 A5 F8 | ...\.....0.5(v..
+93 2C A0 F9 5A E5 1F 2C 37 42 BF D3 42 72 61 E9 | .,..Z..,7B..Bra.
+06 26 71 61 07 BE 99 78 58 CB 30 9A 0B 78 81 71 | .&qa...xX.0..x.q
+74 EF 2C 03 34 CD 1F E3 A1 55 45 38 70 5F 0B F9 | t.,.4....UE8p_..
+B6 9E 20 4A 13 21 DD 50 91 2B 57 16 96 7A 50 62 | .. J.!.P.+W..zPb
+9E 55 58 54 18 24 82 9E 0D D7 DE 91 C8 22 B5 DD | .UXT.$......."..
+20 8B 36 47 DF D2 7C 50 3C CF ED 97 08 50 31 A4 | .6G..|P<....P1.
+76 F2 BD ED 34 26 32 70 A2 A3 F4 EC C9 1C C7 55 | v...4&2p.......U
+9C 17 99 35 90 B5 36 27 76 B9 01 31 D5 35 69 B0 | ...5..6'v..1.5i.
+C6 4D 5A FC 90 A4 52 2E 67 F9 7A 06 6C B7 3E A8 | .MZ...R.g.z.l.>.
+99 A3 43 1A FF C1 77 16 0B 42 B7 87 CC C7 67 A0 | ..C...w..B....g.
+A9 80 83 DB 2C 7C 57 79 DE 2F FC ED FC F0 C5 AB | ....,|Wy./......
+6D 61 DE 5F 1B FB 5E C8 FC C0 26 14 1B 0B 98 42 | ma._..^...&....B
+22 66 61 04 3A 8C E7 93 61 27 34 D8 2E 37 CB F5 | "fa.:...a'4..7..
+F4 5A D7 75 9E C1 DE 3E CD 7C 36 31 1D 69 27 D8 | .Z.u...>.|61.i'.
+38 0A A0 B0 C5 72 26 8C 6E 9A D5 21 5F EE 18 10 | 8....r&.n..!_...
+4E B3 BE EC 75 74 B8 17 EE 92 D9 C0 F0 4D 82 10 | N...ut.......M..
+49 D4 54 25 C3 BE 6D F9 21 A6 19 3A 3F 22 88 97 | I.T%..m.!..:?"..
+AF 5C B9 23 88 C6 06 DA F7 63 38 D3 75 D8 39 E9 | .\.#.....c8.u.9.
+C2 DA 1A B2 AC 86 87 82 84 0C 5C 12 F0 F4 96 55 | ..........\....U
+A6 22 49 61 23 79 2C B1 41 5F A3 A6 9D C5 72 5E | ."Ia#y,.A_....r^
+CA 3B A3 87 EB 51 50 59 EF 9E C7 2E FD 8E C6 E5 | .;...QPY........
+E4 28 78 F8 BC 57 23 EC 68 C8 36 BF A7 74 A2 8D | .(x..W#.h.6..t..
+4D 08 18 7C 0B EE 94 FF 3A AD 08 1E 1A B9 51 3E | M..|....:.....Q>
+A5 1F C9 69 60 09 6D 30 33 0E A1 97 1D 74 68 EC | ...i`.m03....th.
+4B 8D 3D 75 54 65 55 98 A7 56 A2 7F C4 74 AD 82 | K.=uTeU..V...t..
+65 14 01 AE 2C F1 C0 28 30 D7 E1 52 EA 9E 85 3C | e...,..(0..R...<
+E7 9B 4C CC 2F 06 32 ED 39 44 ED 98 7B 42 30 BA | ..L./.2.9D..{B0.
+43 97 3F D2 21 FC 23 68 F0 DA DB 54 A8 AB B1 2A | C.?.!.#h...T...*
+B4 55 D4 46 61 63 F2 84 53 F0 8E 48 37 CF B4 42 | .U.Fac..S..H7..B
+AB 71 22 4A B0 3B 85 52 52 65 1F 54 3F FF DB D9 | .q"J.;.RRe.T?...
+6F A0 AB 75 52 5E B5 69 0B A6 0B 83 3E 43 E6 49 | o..uR^.i....>C.I
+A2 5F 22 40 57 2A 7B A3 | ._"@W*{.
+
+Flow Record:
+ RecordCount = 3
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132181359 [2024-04-15 00:03:01.359]
+ last = 1713132181594 [2024-04-15 00:03:01.594]
+ received at = 1713132277671 [2024-04-15 00:04:37.671]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 58020
+ src tos = 0
+ fwd status = 0
+ in packets = 10
+ in bytes = 5716
+ src addr = 104.22.15.70
+ dst addr = 157.143.34.100
+ out packets = 12
+ out bytes = 2982
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.021 ms
+ srv latency = 0.000 ms
+ app latency = 2.690 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 22a29273c84f24c87ea605eb553e276c
+ ja4s hash = t130500_c02b_926e7c93a85d
+16 03 03 00 63 02 00 00 5F 03 03 66 1C 52 95 D7 | ....c..._..f.R..
+7D 9A A6 14 66 72 15 EE D8 CD 5A B5 8C C2 59 A9 | }...fr....Z...Y.
+C1 BE 8B 44 4F 57 4E 47 52 44 01 20 41 EB 3F 41 | ...DOWNGRD. A.?A
+3F 9A 01 89 2E FB 2E 77 FA 6C CF 71 72 88 C9 77 | ?......w.l.qr..w
+62 18 07 A8 8F 8F 63 B2 FF E6 E6 FC C0 2B 00 00 | b.....c......+..
+17 00 00 00 00 00 17 00 00 FF 01 00 01 00 00 0B | ................
+00 02 01 00 00 05 00 00 16 03 03 10 2A 0B 00 10 | ............*...
+26 00 10 23 00 03 85 30 82 03 81 30 82 03 07 A0 | &..#...0...0....
+03 02 01 02 02 12 04 83 EA 68 06 B1 AD EA 76 77 | .........h....vw
+39 76 37 6B A8 36 09 DB 30 0A 06 08 2A 86 48 CE | 9v7k.6..0...*.H.
+3D 04 03 03 30 32 31 0B 30 09 06 03 55 04 06 13 | =...021.0...U...
+02 55 53 31 16 30 14 06 03 55 04 0A 13 0D 4C 65 | .US1.0...U....Le
+74 27 73 20 45 6E 63 72 79 70 74 31 0B 30 09 06 | t's Encrypt1.0..
+03 55 04 03 13 02 45 31 30 1E 17 0D 32 34 30 34 | .U....E10...2404
+31 34 30 30 31 39 31 30 5A 17 0D 32 34 30 37 31 | 14001910Z..24071
+33 30 30 31 39 30 39 5A 30 1B 31 19 30 17 06 03 | 3001909Z0.1.0...
+55 04 03 13 10 61 70 69 2E 72 6F 6F 6E 6C 61 62 | U....api.roonlab
+73 2E 6E 65 74 30 59 30 13 06 07 2A 86 48 CE 3D | s.net0Y0...*.H.=
+02 01 06 08 2A 86 48 CE 3D 03 01 07 03 42 00 04 | ....*.H.=....B..
+03 24 E9 47 62 77 D9 B4 96 C5 B3 C4 89 CE 0C 90 | .$.Gbw..........
+20 5F E8 D8 AB 0E E0 42 26 48 8D DE A1 16 8F 3A | _.....B&H.....:
+B9 59 C4 D4 ED 39 D3 C0 2A B0 86 2A 97 25 0F 1F | .Y...9..*..*.%..
+35 B4 B8 23 8B 28 0F 27 D2 A2 7E 6A 39 C5 C4 AB | 5..#.(.'..~j9...
+A3 82 02 12 30 82 02 0E 30 0E 06 03 55 1D 0F 01 | ....0...0...U...
+01 FF 04 04 03 02 07 80 30 1D 06 03 55 1D 25 04 | ........0...U.%.
+16 30 14 06 08 2B 06 01 05 05 07 03 01 06 08 2B | .0...+.........+
+06 01 05 05 07 03 02 30 0C 06 03 55 1D 13 01 01 | .......0...U....
+FF 04 02 30 00 30 1D 06 03 55 1D 0E 04 16 04 14 | ...0.0...U......
+0A A2 9D 1D D2 00 85 F6 3D 30 A7 DD 5E 2F 7E 5E | ........=0..^/~^
+78 20 ED 2D 30 1F 06 03 55 1D 23 04 18 30 16 80 | x .-0...U.#..0..
+14 5A F3 ED 2B FC 36 C2 37 79 B9 52 30 EA 54 6F | .Z..+.6.7y.R0.To
+CF 55 CB 2E AC 30 55 06 08 2B 06 01 05 05 07 01 | .U...0U..+......
+01 04 49 30 47 30 21 06 08 2B 06 01 05 05 07 30 | ..I0G0!..+.....0
+01 86 15 68 74 74 70 3A 2F 2F 65 31 2E 6F 2E 6C | ...http://e1.o.l
+65 6E 63 72 2E 6F 72 67 30 22 06 08 2B 06 01 05 | encr.org0"..+...
+05 07 30 02 86 16 68 74 74 70 3A 2F 2F 65 31 2E | ..0...http://e1.
+69 2E 6C 65 6E 63 72 2E 6F 72 67 2F 30 1B 06 03 | i.lencr.org/0...
+55 1D 11 04 14 30 12 82 10 61 70 69 2E 72 6F 6F | U....0...api.roo
+6E 6C 61 62 73 2E 6E 65 74 30 13 06 03 55 1D 20 | nlabs.net0...U.
+04 0C 30 0A 30 08 06 06 67 81 0C 01 02 01 30 82 | ..0.0...g.....0.
+01 04 06 0A 2B 06 01 04 01 D6 79 02 04 02 04 81 | ....+.....y.....
+F5 04 81 F2 00 F0 00 76 00 3B 53 77 75 3E 2D B9 | .......v.;Swu>-.
+80 4E 8B 30 5B 06 FE 40 3B 67 D8 4F C3 F4 C7 BD | .N.0[..@;g.O....
+00 0D 2D 72 6F E1 FA D4 17 00 00 01 8E DA 2F D2 | ..-ro........./.
+59 00 00 04 03 00 47 30 45 02 20 6F E8 1F A9 FF | Y.....G0E. o....
+36 DA 08 EC F7 36 0B 23 53 C5 A7 03 8F 7D F4 7E | 6....6.#S....}.~
+4C 36 EE 8F C2 18 C1 A1 29 3C 0C 02 21 00 BD 20 | L6......)<..!..
+9B F4 BF 57 40 FD C9 4C BB 99 C3 97 10 4A D1 A0 | ...W@..L.....J..
+BF 15 0F F8 F7 09 29 4B 92 1B 26 71 DE 38 00 76 | ......)K..&q.8.v
+00 76 FF 88 3F 0A B6 FB 95 51 C2 61 CC F5 87 BA | .v..?....Q.a....
+34 B4 A4 CD BB 29 DC 68 42 0A 9F E6 67 4C 5A 3A | 4....).hB...gLZ:
+74 00 00 01 8E DA 2F D2 86 00 00 04 03 00 47 30 | t...../.......G0
+45 02 20 16 94 7C D4 B6 9E B1 48 6C C9 1A DF 74 | E. ..|....Hl...t
+FB D1 68 4B F2 63 29 C5 38 28 41 55 9B 68 55 A7 | ..hK.c).8(AU.hU.
+02 B0 44 02 21 00 F5 3D C0 DA B0 F4 EC 78 14 3B | ..D.!..=.....x.;
+9B F5 60 22 AC 71 CD CD E4 8F E7 DB 33 68 9C 38 | ..`".q......3h.8
+E0 76 22 EE CF 94 30 0A 06 08 2A 86 48 CE 3D 04 | .v"...0...*.H.=.
+03 03 03 68 00 30 65 02 31 00 99 37 0F 43 15 73 | ...h.0e.1..7.C.s
+E5 F6 E2 32 68 10 DC 15 4D 34 F2 B9 28 B3 77 CA | ...2h...M4..(.w.
+D5 77 0C 98 08 7A 2C 62 FC 9D E7 DE 6A 46 00 52 | .w...z,b....jF.R
+6E 92 0D 49 D2 67 BE CD C0 72 02 30 0D 29 D9 D1 | n..I.g...r.0.)..
+E4 F5 CF FF 43 83 D1 25 7A 79 9B 4E 7D 53 EE 37 | ....C..%zy.N}S.7
+8C 33 00 6E DE F6 25 2A 68 49 B0 C1 7E FE 82 06 | .3.n..%*hI..~...
+53 0B C0 FD 4A EA 99 1F A9 D1 D4 44 00 02 CA 30 | S...J......D...0
+82 02 C6 30 82 02 4D A0 03 02 01 02 02 11 00 B3 | ...0..M.........
+BD DF F8 A7 84 5B BC E9 03 A0 41 35 B3 4A 45 30 | .....[....A5.JE0
+0A 06 08 2A 86 48 CE 3D 04 03 03 30 4F 31 0B 30 | ...*.H.=...0O1.0
+09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 | ...U....US1)0'..
+55 04 0A 13 20 49 6E 74 65 72 6E 65 74 20 53 65 | U... Internet Se
+63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 | curity Research
+47 72 6F 75 70 31 15 30 13 06 03 55 04 03 13 0C | Group1.0...U....
+49 53 52 47 20 52 6F 6F 74 20 58 32 30 1E 17 0D | ISRG Root X20...
+32 30 30 39 30 34 30 30 30 30 30 30 5A 17 0D 32 | 200904000000Z..2
+35 30 39 31 35 31 36 30 30 30 30 5A 30 32 31 0B | 50915160000Z021.
+30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 06 | 0...U....US1.0..
+03 55 04 0A 13 0D 4C 65 74 27 73 20 45 6E 63 72 | .U....Let's Encr
+79 70 74 31 0B 30 09 06 03 55 04 03 13 02 45 31 | ypt1.0...U....E1
+30 76 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B | 0v0...*.H.=....+
+81 04 00 22 03 62 00 04 24 5C 2D A2 2A FD 1C 4B | ...".b..$\-.*..K
+A6 5D 97 73 27 31 AC B2 A0 69 62 EF 65 E8 A6 B0 | .].s'1...ib.e...
+F0 AC 4B 9F FF 1C 0B 70 0F D3 98 2F 4D FC 0F 00 | ..K....p.../M...
+9B 37 F0 74 05 57 32 97 2E 05 EF 2A 43 25 A3 FB | .7.t.W2....*C%..
+6E 34 27 13 F6 4F 7E 69 D3 02 99 5E EB 24 47 92 | n4'..O~i...^.$G.
+C1 24 9B E6 B1 21 8F C1 24 81 FC 68 CC 1F 69 BA | .$...!..$..h..i.
+58 F5 19 22 F7 74 C6 16 A3 82 01 08 30 82 01 04 | X..".t......0...
+30 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 01 86 | 0...U...........
+30 1D 06 03 55 1D 25 04 16 30 14 06 08 2B 06 01 | 0...U.%..0...+..
+05 05 07 03 02 06 08 2B 06 01 05 05 07 03 01 30 | .......+.......0
+12 06 03 55 1D 13 01 01 FF 04 08 30 06 01 01 FF | ...U.......0....
+02 01 00 30 1D 06 03 55 1D 0E 04 16 04 14 5A F3 | ...0...U......Z.
+ED 2B FC 36 C2 37 79 B9 | .+.6.7y.
+
+Flow Record:
+ RecordCount = 4
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 5 12 15 29
+ size = 1402
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132382130 [2024-04-15 00:06:22.130]
+ last = 1713132382234 [2024-04-15 00:06:22.234]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 59255
+ src tos = 0
+ fwd status = 0
+ in packets = 11
+ in bytes = 4142
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ out packets = 11
+ out bytes = 4134
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+CA 00 00 00 01 00 08 E5 8A 24 A1 F6 A1 CD 6B 00 | .........$....k.
+43 9E DA A3 8B B8 17 5B 5D AA C2 B6 EA 30 50 6F | C......[]....0Po
+60 A3 30 DC 21 98 BB DE 84 13 45 CA AE E6 39 DF | `.0.!.....E...9.
+5D 8F 92 B6 D0 06 A3 96 D9 CC 00 A8 2C F5 AE E5 | ]...........,...
+29 4C 8B 6C 98 E1 45 8F C0 1E 82 14 FC 59 2D 4F | )L.l..E......Y-O
+FA F2 14 8C D8 D7 41 8F DB 1D 97 B9 60 EE 3A A6 | ......A.....`.:.
+D9 6A EB 92 5A 86 01 5C 49 76 24 52 8C 12 00 B6 | .j..Z..\Iv$R....
+F0 07 C6 8D 6A 4C BA 2B CC 75 1E 6F 5B D7 B9 FA | ....jL.+.u.o[...
+78 E5 28 06 96 50 34 07 23 94 9B FA 83 CB 4C AC | x.(..P4.#.....L.
+1C 17 2F C1 31 55 33 D8 3B DA 3D F3 2D 6A 01 44 | ../.1U3.;.=.-j.D
+A9 D7 5E 34 19 43 E3 3C 61 81 F0 07 82 27 48 16 | ..^4.C.M.M......+
+2C 7F 7B FA E1 41 43 1A 55 C6 F9 6E 83 4B 86 35 | ,.{..AC.U..n.K.5
+ED 84 B9 B4 4F 79 2B 90 6B 3F AA C7 DD CF 56 7E | ....Oy+.k?....V~
+DD DC E7 FE 95 A0 2D EA DB 89 5F 6A E5 0F D1 40 | ......-..._j...@
+8D 5F 4F 67 A5 AC EA 1D 01 2C 4B E4 01 4F 76 CE | ._Og.....,K..Ov.
+DA 78 68 CF 00 F3 83 D0 24 88 88 35 94 BF E3 44 | .xh.....$..5...D
+FF E3 CB 5B 47 F9 89 91 2A 69 15 E2 48 B2 35 2A | ...[G...*i..H.5*
+3E 47 E6 FD 10 FE D2 14 00 19 9A D9 21 A2 7C 7E | >G..........!.|~
+BA 21 A1 A4 34 5C 58 C4 BF 5C 0E 05 B8 34 8C 75 | .!..4\X..\...4.u
+5B 38 2A 82 3C 8B EF 3D 09 40 D1 9C E5 1B 99 64 | [8*.<..=.@.....d
+A7 2F 66 7C 8C AF 51 61 AD F4 74 EF 4A 15 7E 76 | ./f|..Qa..t.J.~v
+0C 14 11 68 E5 5A 09 E3 98 A2 E1 2B 79 38 2E 84 | ...h.Z.....+y8..
+FD D0 F9 62 4F A5 04 A8 78 B3 9E 56 28 48 3B C9 | ...bO...x..V(H;.
+B3 41 DB 89 FA 88 86 29 56 3C F0 95 F0 A0 1D 0A | .A.....)V<......
+DC C1 62 31 AC 3A 3C 7A 02 A3 7C 0E CF 62 9C 67 | ..b1.:w.F..o]..o:.
+C4 CF 59 19 AE 88 FE 6A 64 9B B3 18 78 43 7D C7 | ..Y....jd...xC}.
+3F 36 20 50 B8 2C BE AE 10 28 2E A8 76 65 B4 07 | ?6 P.,...(..ve..
+13 E1 81 E9 A1 58 52 1B 32 4B 31 23 D7 94 F5 B1 | .....XR.2K1#....
+7E 71 5F DF 5B 0A A8 27 D3 44 7C 22 19 98 DC 30 | ~q_.[..'.D|"...0
+7C 1A 49 CF 45 C9 36 85 79 0E 97 22 FF 21 99 0E | |.I.E.6.y..".!..
+CE 2A 62 70 69 9A 9E 23 52 A9 A0 CB 28 EF CC A5 | .*bpi..#R...(...
+E5 00 00 00 01 00 08 E5 8A 24 A1 F6 A1 CD 6B 40 | .........$....k@
+DD 9D B6 50 9A 8F FC 48 7E 97 F2 8C B0 EA 2C E2 | ...P...H~.....,.
+3C 2D 1B E3 18 B7 D8 90 75 C3 56 18 3F 2C 49 3F | <-......u.V.?,I?
+ED FA FE 35 16 20 E0 6D B2 2E F8 64 75 2E F0 F7 | ...5. .m...du...
+CF 4A 3B 7D C3 CF 52 3A 85 88 CA 19 83 03 B7 EA | .J;}..R:........
+70 00 5A EC C1 ED 9C 99 B9 AB 1F B2 61 40 48 10 | p.Z.........a@H.
+57 2B 2B 50 2A B9 D0 79 81 07 86 9F AE 8C 52 A1 | W++P*..y......R.
+4F 82 03 4D 70 59 65 01 BB 95 34 77 56 53 24 B4 | O..MpYe...4wVS$.
+6B 28 B2 9E 0F 34 96 F7 36 1B 5F F4 D3 65 C2 A6 | k(...4..6._..e..
+17 16 74 58 2E 1A 44 88 A8 75 90 BE 70 FB 70 DD | ..tX..D..u..p.p.
+29 B9 4D 7F 71 33 18 94 5F D6 50 11 60 A9 00 D5 | ).M.q3.._.P.`...
+C8 07 59 60 7D 89 45 6A 45 AF 64 19 F9 02 99 99 | ..Y`}.EjE.d.....
+81 36 50 D7 D4 05 4D 94 7F 7C 98 62 59 D7 31 FE | .6P...M..|.bY.1.
+FF D9 A5 D2 DE C4 3B A1 95 51 F7 95 4E 54 9E 1A | ......;..Q..NT..
+C8 E0 2D 47 BF E8 BA 4E 5D 55 30 BD 00 1F 40 FB | ..-G...N]U0...@.
+E0 5F F6 76 52 1A C0 5B 2B F1 E1 87 27 DC 6F A8 | ._.vR..[+...'.o.
+CD B7 FE CD 27 36 B3 38 83 E9 F4 D0 BE A0 CE 5F | ....'6.8......._
+33 FF 43 66 EC FD 9A 37 8F F6 31 35 2B A3 6B 13 | 3.Cf...7..15+.k.
+49 9A 7E 67 5B 39 8B 2E 50 5F 49 62 C2 98 22 2E | I.~g[9..P_Ib..".
+C5 60 | .`
+
+Flow Record:
+ RecordCount = 5
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132344685 [2024-04-15 00:05:44.685]
+ last = 1713132375682 [2024-04-15 00:06:15.682]
+ received at = 1713132441667 [2024-04-15 00:07:21.667]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 58880
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18601
+ src addr = 17.248.209.68
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 6945
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 15.901 ms
+ srv latency = 0.000 ms
+ app latency = 0.477 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 06 5F 5B 5F C9 | ....z...v..._[_.
+89 D3 54 BD 52 AF D1 91 4D 77 E2 33 02 79 79 80 | ..T.R...Mw.3.yy.
+8A E6 A6 74 F8 2E 54 EB 99 7B 22 20 B3 98 93 D3 | ...t..T..{" ....
+FD EB 7B 82 1C 6D CE 5F 4D FC 85 2E 08 13 D8 57 | ..{..m._M......W
+7A D0 B5 AA 1D A0 FB B9 06 38 CF 1B 13 02 00 00 | z........8......
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 5A | ..+.....3.$... Z
+4D 34 B9 06 BA C1 3B 67 FD 4A 78 18 7A 0E 7F DE | M4....;g.Jx.z...
+FA F0 75 D1 54 99 D5 BE FC CA 58 52 B2 B8 06 14 | ..u.T.....XR....
+03 03 00 01 01 17 03 03 00 2A 1C FE 79 61 CA BB | .........*..ya..
+00 74 16 64 A1 C4 A8 89 A4 71 4D 5B 6E 4B C8 F8 | .t.d.....qM[nK..
+D5 5A 79 CA FA 80 F6 59 DE 71 61 E3 97 A9 B3 24 | .Zy....Y.qa....$
+7E AA 09 E7 17 03 03 11 25 98 E8 13 7E 0E C0 6F | ~.......%...~..o
+F4 D7 20 62 54 8F AE C2 BA 65 DB 64 8F 9C FB 9A | .. bT....e.d....
+61 11 BB EE 1E B3 40 3F 69 13 F3 DD D3 87 AB 54 | a.....@?i......T
+7A E2 63 0A 58 D2 80 85 A3 9D 28 8C A4 EA C3 7C | z.c.X.....(....|
+81 5B 05 76 B5 B5 7F 8F 81 CA 1A F4 85 65 CD 0E | .[.v.........e..
+B1 C0 11 66 38 58 79 E9 0E E4 9D 49 2A 23 B8 92 | ...f8Xy....I*#..
+BA 65 8D 86 C9 56 A8 D5 5D 62 52 B0 08 2E F1 B8 | .e...V..]bR.....
+CB 37 82 FE 9E FD 25 AF 4C B5 E5 70 D6 61 98 1D | .7....%.L..p.a..
+26 D0 B9 02 9A 59 0A 92 AB 17 3E 30 3D E2 5B BD | &....Y....>0=.[.
+62 BF E7 3D 5C 74 D6 CE A2 5D CE 99 0C 3F 19 42 | b..=\t...]...?.B
+DC 0C E6 2F 5F 32 59 F2 3C 8A DF 4F E2 14 8E 7B | .../_2Y.<..O...{
+84 6D 19 4B E3 05 EE 17 D7 0B DB AF D3 AA 92 B4 | .m.K............
+6A AF DC DE 5A A1 D2 50 34 C9 9C D6 9E 7E D4 37 | j...Z..P4....~.7
+EA DF C5 2B 13 B9 E4 3C 57 97 45 78 31 7A 1C CF | ...+...
+20 F3 65 C5 1B 03 68 7E 0A 13 DB EB BB 37 A3 E6 | .e...h~.....7..
+2C 7B 2E E6 9B 2C BD 73 EC A1 D2 7F 56 02 B2 A2 | ,{...,.s....V...
+EE 48 A1 FE 4F 6D A8 EF 09 0C FA F0 C1 C7 39 68 | .H..Om........9h
+D2 EE 4B 3B 3C 32 36 85 35 F3 91 51 0A 24 86 73 | ..K;<26.5..Q.$.s
+65 20 D7 3F 6B 8D E4 29 EA FD 7F 19 17 42 4D 53 | e .?k..).....BMS
+BB 98 1B EB C8 29 A2 BB 4B DA 22 C8 EA 25 0A 52 | .....)..K."..%.R
+BA 1E D9 DC AF 82 67 7A FE FD 78 7D 59 A0 8D 47 | ......gz..x}Y..G
+9D B2 36 71 23 DA 5B 3E 8E 8E 6B FC D2 E2 E2 4E | ..6q#.[>..k....N
+A2 18 DB AF B8 77 C8 A9 4B D9 D9 7A 49 D8 73 56 | .....w..K..zI.sV
+4B CE DA 4B 56 22 FE CE DB 4E B7 51 BF 71 1E CF | K..KV"...N.Q.q..
+45 EB 36 AC 25 8D CE 55 61 7A C4 51 15 29 FC 52 | E.6.%..Uaz.Q.).R
+4B 51 BA 03 B5 FB AD 24 C3 56 72 19 2A 07 51 1B | KQ.....$.Vr.*.Q.
+62 9C 45 19 31 AC F2 9E 6C 44 A6 C9 35 EA 0B 67 | b.E.1...lD..5..g
+13 25 1A 88 FC E4 35 D2 87 58 E5 3B AF 0D 4C 56 | .%....5..X.;..LV
+C8 F5 B3 22 D6 D9 34 1D CE 76 15 FB BF 79 47 7A | ..."..4..v...yGz
+80 E1 0E B5 E4 BA 92 DC 35 35 99 AD 55 4A 25 F0 | ........55..UJ%.
+5F 04 B3 A5 70 F5 EE 6E 67 D2 7C E6 3C 14 ED AB | _...p..ng.|.<...
+00 BF 33 5E AE F3 6D 61 84 40 48 51 CD B1 71 B4 | ..3^..ma.@HQ..q.
+20 5C A2 B2 18 26 9D A6 38 3D 44 FB 55 44 AD CA | \...&..8=D.UD..
+88 71 AE 7B 3D 02 11 B6 DA 49 AF DC 7E 32 32 2E | .q.{=....I..~22.
+5A CD C2 FD 5E 07 69 AC 48 33 86 2F EE CE E9 8A | Z...^.i.H3./....
+5E 0D C1 25 52 4A 8A 85 5B E8 4B 70 D9 18 75 D8 | ^..%RJ..[.Kp..u.
+EF 27 46 3D 5E 61 F6 E6 64 EA 72 6B 18 B2 EE 65 | .'F=^a..d.rk...e
+F9 BB 47 0D 7E 6C 60 29 A8 C4 EA 68 99 16 98 7C | ..G.~l`)...h...|
+86 B2 40 92 36 E7 22 54 40 F7 46 91 CD FD 22 99 | ..@.6."T@.F...".
+53 9E 83 64 2E CE C7 D4 90 93 A4 22 CE 2F 40 91 | S..d......."./@.
+90 62 A7 2C 7C 09 FD F7 38 6D BB 33 AC F3 D7 2B | .b.,|...8m.3...+
+7A 48 A7 18 9B F1 FC F8 19 DF B8 05 B7 C2 B1 10 | zH..............
+CD 5A 92 F5 D6 C9 01 5B 5B A0 4C 98 96 30 0D 55 | .Z.....[[.L..0.U
+C8 5D BE B1 CA 5D 26 CF 54 4E 3A 0C 47 33 DB 23 | .]...]&.TN:.G3.#
+84 09 60 39 8F EB A9 49 58 87 D5 C2 B6 63 94 72 | ..`9...IX....c.r
+AF A7 8D A2 AE B6 C8 B7 CA 4C 20 14 B5 54 F6 0E | .........L ..T..
+86 98 53 62 04 FA D5 FC 3E F2 3C 36 77 C6 0A 55 | ..Sb....>.<6w..U
+4E 17 7C F7 09 F1 0D 9D 5E 27 5D 9B 6F 89 75 B0 | N.|.....^'].o.u.
+54 28 C0 0E 30 38 6B 54 7B 6F BB 6C BF B4 98 D3 | T(..08kT{o.l....
+4D 9E 8D 5D 67 2E E2 32 17 BC AC 35 65 61 52 34 | M..]g..2...5eaR4
+D9 40 5C 63 CD F0 09 47 BF 47 EB 78 03 1E 12 C4 | .@\c...G.G.x....
+12 D8 24 35 EC 23 B8 CD 14 FC 43 17 C0 FE 79 21 | ..$5.#....C...y!
+82 03 DB CF B7 E8 09 8B B4 41 95 D5 82 7D AE 20 | .........A...}.
+09 83 EE F4 03 E7 1E 30 | .......0
+
+Flow Record:
+ RecordCount = 6
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 697
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131941133 [2024-04-14 23:59:01.133]
+ last = 1713131941647 [2024-04-14 23:59:01.647]
+ received at = 1713132015760 [2024-04-15 00:00:15.760]
+ proto = 6 TCP
+ tcp flags = 0xdf CE.APRSF
+ src port = 57373
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 2107
+ src addr = 157.143.34.100
+ dst addr = 2.21.22.179
+ out packets = 14
+ out bytes = 11839
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.922 ms
+ srv latency = 0.000 ms
+ app latency = 0.281 ms
+ in payload = 517
+ TLS version = TLS 1.2
+ sni name = weather-data.apple.com
+ ja3 hash = e252913a211e4a33817d5ac1775d8e55
+ ja4 hash = t12d2014h1_a09f3c656075_14788d8d241b
+16 03 01 02 00 01 00 01 FC 03 03 32 C8 C9 9C F0 | ...........2....
+AD CA 63 94 02 3F 00 86 B2 D3 DF 74 42 A5 8D 6F | ..c..?.....tB..o
+C3 17 5F C5 80 FC 3A 60 37 73 8C 20 0E 6F 59 04 | .._...:`7s. .oY.
+DD D8 EB A3 7F 07 F1 ED 5D A9 36 CB BE 5D AF A6 | ........].6..]..
+D3 48 65 9E 23 C8 C1 26 35 74 43 CA 00 2A 4A 4A | .He.#..&5tC..*JJ
+13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./
+CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5
+00 2F C0 08 C0 12 00 0A 01 00 01 89 7A 7A 00 00 | ./..........zz..
+00 00 00 1B 00 19 00 00 16 77 65 61 74 68 65 72 | .........weather
+2D 64 61 74 61 2E 61 70 70 6C 65 2E 63 6F 6D 00 | -data.apple.com.
+17 00 00 FF 01 00 01 00 00 0A 00 0C 00 0A 0A 0A | ................
+00 1D 00 17 00 18 00 19 00 0B 00 02 01 00 00 10 | ................
+00 0B 00 09 08 68 74 74 70 2F 31 2E 31 00 05 00 | .....http/1.1...
+05 01 00 00 00 00 00 0D 00 18 00 16 04 03 08 04 | ................
+04 01 05 03 02 03 08 05 08 05 05 01 08 06 06 01 | ................
+02 01 00 12 00 00 00 33 00 2B 00 29 0A 0A 00 01 | .......3.+.)....
+00 00 1D 00 20 CD D6 86 28 3D 9D 85 AA E0 F6 AD | .... ...(=......
+E1 77 C0 9F A7 4C 94 5F EE A2 51 21 50 F6 24 77 | .w...L._..Q!P.$w
+1A B9 3A 7A 05 00 2D 00 02 01 01 00 2B 00 0B 0A | ..:z..-.....+...
+3A 3A 03 04 03 03 03 02 03 01 00 1B 00 03 02 00 | ::..............
+01 4A 4A 00 01 00 00 15 00 BB 00 00 00 00 00 00 | .JJ.............
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 | .....
+
+Flow Record:
+ RecordCount = 7
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132205444 [2024-04-15 00:03:25.444]
+ last = 1713132205905 [2024-04-15 00:03:25.905]
+ received at = 1713132277672 [2024-04-15 00:04:37.672]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 61719
+ src tos = 0
+ fwd status = 0
+ in packets = 14
+ in bytes = 8683
+ src addr = 104.22.15.70
+ dst addr = 157.143.34.100
+ out packets = 12
+ out bytes = 1547
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.237 ms
+ srv latency = 0.000 ms
+ app latency = 0.872 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 22a29273c84f24c87ea605eb553e276c
+ ja4s hash = t130500_c02b_926e7c93a85d
+16 03 03 00 63 02 00 00 5F 03 03 66 1C 52 AD 8D | ....c..._..f.R..
+9B 43 7C 13 66 ED 60 9B C2 29 29 7C C7 4E BE F9 | .C|.f.`..))|.N..
+F6 C0 F8 44 4F 57 4E 47 52 44 01 20 2F A0 46 C8 | ...DOWNGRD. /.F.
+DA 94 A0 79 8B 05 C1 B8 C1 C2 5F C5 CF 34 CB 03 | ...y......_..4..
+42 12 2B 03 3B 48 BF 23 C5 A2 E2 32 C0 2B 00 00 | B.+.;H.#...2.+..
+17 00 00 00 00 00 17 00 00 FF 01 00 01 00 00 0B | ................
+00 02 01 00 00 05 00 00 16 03 03 10 2A 0B 00 10 | ............*...
+26 00 10 23 00 03 85 30 82 03 81 30 82 03 07 A0 | &..#...0...0....
+03 02 01 02 02 12 04 83 EA 68 06 B1 AD EA 76 77 | .........h....vw
+39 76 37 6B A8 36 09 DB 30 0A 06 08 2A 86 48 CE | 9v7k.6..0...*.H.
+3D 04 03 03 30 32 31 0B 30 09 06 03 55 04 06 13 | =...021.0...U...
+02 55 53 31 16 30 14 06 03 55 04 0A 13 0D 4C 65 | .US1.0...U....Le
+74 27 73 20 45 6E 63 72 79 70 74 31 0B 30 09 06 | t's Encrypt1.0..
+03 55 04 03 13 02 45 31 30 1E 17 0D 32 34 30 34 | .U....E10...2404
+31 34 30 30 31 39 31 30 5A 17 0D 32 34 30 37 31 | 14001910Z..24071
+33 30 30 31 39 30 39 5A 30 1B 31 19 30 17 06 03 | 3001909Z0.1.0...
+55 04 03 13 10 61 70 69 2E 72 6F 6F 6E 6C 61 62 | U....api.roonlab
+73 2E 6E 65 74 30 59 30 13 06 07 2A 86 48 CE 3D | s.net0Y0...*.H.=
+02 01 06 08 2A 86 48 CE 3D 03 01 07 03 42 00 04 | ....*.H.=....B..
+03 24 E9 47 62 77 D9 B4 96 C5 B3 C4 89 CE 0C 90 | .$.Gbw..........
+20 5F E8 D8 AB 0E E0 42 26 48 8D DE A1 16 8F 3A | _.....B&H.....:
+B9 59 C4 D4 ED 39 D3 C0 2A B0 86 2A 97 25 0F 1F | .Y...9..*..*.%..
+35 B4 B8 23 8B 28 0F 27 D2 A2 7E 6A 39 C5 C4 AB | 5..#.(.'..~j9...
+A3 82 02 12 30 82 02 0E 30 0E 06 03 55 1D 0F 01 | ....0...0...U...
+01 FF 04 04 03 02 07 80 30 1D 06 03 55 1D 25 04 | ........0...U.%.
+16 30 14 06 08 2B 06 01 05 05 07 03 01 06 08 2B | .0...+.........+
+06 01 05 05 07 03 02 30 0C 06 03 55 1D 13 01 01 | .......0...U....
+FF 04 02 30 00 30 1D 06 03 55 1D 0E 04 16 04 14 | ...0.0...U......
+0A A2 9D 1D D2 00 85 F6 3D 30 A7 DD 5E 2F 7E 5E | ........=0..^/~^
+78 20 ED 2D 30 1F 06 03 55 1D 23 04 18 30 16 80 | x .-0...U.#..0..
+14 5A F3 ED 2B FC 36 C2 37 79 B9 52 30 EA 54 6F | .Z..+.6.7y.R0.To
+CF 55 CB 2E AC 30 55 06 08 2B 06 01 05 05 07 01 | .U...0U..+......
+01 04 49 30 47 30 21 06 08 2B 06 01 05 05 07 30 | ..I0G0!..+.....0
+01 86 15 68 74 74 70 3A 2F 2F 65 31 2E 6F 2E 6C | ...http://e1.o.l
+65 6E 63 72 2E 6F 72 67 30 22 06 08 2B 06 01 05 | encr.org0"..+...
+05 07 30 02 86 16 68 74 74 70 3A 2F 2F 65 31 2E | ..0...http://e1.
+69 2E 6C 65 6E 63 72 2E 6F 72 67 2F 30 1B 06 03 | i.lencr.org/0...
+55 1D 11 04 14 30 12 82 10 61 70 69 2E 72 6F 6F | U....0...api.roo
+6E 6C 61 62 73 2E 6E 65 74 30 13 06 03 55 1D 20 | nlabs.net0...U.
+04 0C 30 0A 30 08 06 06 67 81 0C 01 02 01 30 82 | ..0.0...g.....0.
+01 04 06 0A 2B 06 01 04 01 D6 79 02 04 02 04 81 | ....+.....y.....
+F5 04 81 F2 00 F0 00 76 00 3B 53 77 75 3E 2D B9 | .......v.;Swu>-.
+80 4E 8B 30 5B 06 FE 40 3B 67 D8 4F C3 F4 C7 BD | .N.0[..@;g.O....
+00 0D 2D 72 6F E1 FA D4 17 00 00 01 8E DA 2F D2 | ..-ro........./.
+59 00 00 04 03 00 47 30 45 02 20 6F E8 1F A9 FF | Y.....G0E. o....
+36 DA 08 EC F7 36 0B 23 53 C5 A7 03 8F 7D F4 7E | 6....6.#S....}.~
+4C 36 EE 8F C2 18 C1 A1 29 3C 0C 02 21 00 BD 20 | L6......)<..!..
+9B F4 BF 57 40 FD C9 4C BB 99 C3 97 10 4A D1 A0 | ...W@..L.....J..
+BF 15 0F F8 F7 09 29 4B 92 1B 26 71 DE 38 00 76 | ......)K..&q.8.v
+00 76 FF 88 3F 0A B6 FB 95 51 C2 61 CC F5 87 BA | .v..?....Q.a....
+34 B4 A4 CD BB 29 DC 68 42 0A 9F E6 67 4C 5A 3A | 4....).hB...gLZ:
+74 00 00 01 8E DA 2F D2 86 00 00 04 03 00 47 30 | t...../.......G0
+45 02 20 16 94 7C D4 B6 9E B1 48 6C C9 1A DF 74 | E. ..|....Hl...t
+FB D1 68 4B F2 63 29 C5 38 28 41 55 9B 68 55 A7 | ..hK.c).8(AU.hU.
+02 B0 44 02 21 00 F5 3D C0 DA B0 F4 EC 78 14 3B | ..D.!..=.....x.;
+9B F5 60 22 AC 71 CD CD E4 8F E7 DB 33 68 9C 38 | ..`".q......3h.8
+E0 76 22 EE CF 94 30 0A 06 08 2A 86 48 CE 3D 04 | .v"...0...*.H.=.
+03 03 03 68 00 30 65 02 31 00 99 37 0F 43 15 73 | ...h.0e.1..7.C.s
+E5 F6 E2 32 68 10 DC 15 4D 34 F2 B9 28 B3 77 CA | ...2h...M4..(.w.
+D5 77 0C 98 08 7A 2C 62 FC 9D E7 DE 6A 46 00 52 | .w...z,b....jF.R
+6E 92 0D 49 D2 67 BE CD C0 72 02 30 0D 29 D9 D1 | n..I.g...r.0.)..
+E4 F5 CF FF 43 83 D1 25 7A 79 9B 4E 7D 53 EE 37 | ....C..%zy.N}S.7
+8C 33 00 6E DE F6 25 2A 68 49 B0 C1 7E FE 82 06 | .3.n..%*hI..~...
+53 0B C0 FD 4A EA 99 1F A9 D1 D4 44 00 02 CA 30 | S...J......D...0
+82 02 C6 30 82 02 4D A0 03 02 01 02 02 11 00 B3 | ...0..M.........
+BD DF F8 A7 84 5B BC E9 03 A0 41 35 B3 4A 45 30 | .....[....A5.JE0
+0A 06 08 2A 86 48 CE 3D 04 03 03 30 4F 31 0B 30 | ...*.H.=...0O1.0
+09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 | ...U....US1)0'..
+55 04 0A 13 20 49 6E 74 65 72 6E 65 74 20 53 65 | U... Internet Se
+63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 | curity Research
+47 72 6F 75 70 31 15 30 13 06 03 55 04 03 13 0C | Group1.0...U....
+49 53 52 47 20 52 6F 6F 74 20 58 32 30 1E 17 0D | ISRG Root X20...
+32 30 30 39 30 34 30 30 30 30 30 30 5A 17 0D 32 | 200904000000Z..2
+35 30 39 31 35 31 36 30 30 30 30 5A 30 32 31 0B | 50915160000Z021.
+30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 06 | 0...U....US1.0..
+03 55 04 0A 13 0D 4C 65 74 27 73 20 45 6E 63 72 | .U....Let's Encr
+79 70 74 31 0B 30 09 06 03 55 04 03 13 02 45 31 | ypt1.0...U....E1
+30 76 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B | 0v0...*.H.=....+
+81 04 00 22 03 62 00 04 24 5C 2D A2 2A FD 1C 4B | ...".b..$\-.*..K
+A6 5D 97 73 27 31 AC B2 A0 69 62 EF 65 E8 A6 B0 | .].s'1...ib.e...
+F0 AC 4B 9F FF 1C 0B 70 0F D3 98 2F 4D FC 0F 00 | ..K....p.../M...
+9B 37 F0 74 05 57 32 97 2E 05 EF 2A 43 25 A3 FB | .7.t.W2....*C%..
+6E 34 27 13 F6 4F 7E 69 D3 02 99 5E EB 24 47 92 | n4'..O~i...^.$G.
+C1 24 9B E6 B1 21 8F C1 24 81 FC 68 CC 1F 69 BA | .$...!..$..h..i.
+58 F5 19 22 F7 74 C6 16 A3 82 01 08 30 82 01 04 | X..".t......0...
+30 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 01 86 | 0...U...........
+30 1D 06 03 55 1D 25 04 16 30 14 06 08 2B 06 01 | 0...U.%..0...+..
+05 05 07 03 02 06 08 2B 06 01 05 05 07 03 01 30 | .......+.......0
+12 06 03 55 1D 13 01 01 FF 04 08 30 06 01 01 FF | ...U.......0....
+02 01 00 30 1D 06 03 55 1D 0E 04 16 04 14 5A F3 | ...0...U......Z.
+ED 2B FC 36 C2 37 79 B9 | .+.6.7y.
+
+Flow Record:
+ RecordCount = 8
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 12 15 17 29
+ size = 1552
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132384093 [2024-04-15 00:06:24.093]
+ last = 1713132384243 [2024-04-15 00:06:24.243]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 51654
+ src tos = 0
+ fwd status = 0
+ in packets = 16
+ in bytes = 8224
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 17.256 ms
+ srv latency = 0.000 ms
+ app latency = 12.277 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 F7 31 6E 76 5D | ....z...v...1nv]
+50 18 9E C7 FF A0 81 7E 43 7E 54 B2 83 88 37 32 | P......~C~T...72
+B0 9C 34 D8 FE 71 30 8A 5E 1C C0 20 19 5E C2 96 | ..4..q0.^.. .^..
+F9 4D 3C 3C FB B9 52 E5 8C D5 FB BE 2E 7B BF 04 | .M<<..R......{..
+D4 08 5A F9 AC 46 9C AA 9E 96 2C D8 13 01 00 00 | ..Z..F....,.....
+2E 00 33 00 24 00 1D 00 20 64 27 97 8D 8E EF 2D | ..3.$... d'....-
+72 2F 70 A2 DE 5A 25 3D DF 40 6D 9B D8 29 58 9D | r/p..Z%=.@m..)X.
+1B 72 87 40 73 31 C4 B1 28 00 2B 00 02 03 04 14 | .r.@s1..(.+.....
+03 03 00 01 01 17 03 03 11 C6 BF EE 88 59 20 60 | .............Y `
+98 65 7A 6A 1C 1A 96 58 6F CC 5A B0 8A 54 5D B7 | .ezj...Xo.Z..T].
+64 B5 39 FE 09 53 AF F9 77 F4 A7 BF AD CF 95 1D | d.9..S..w.......
+68 90 C6 38 68 25 4A A3 A4 AE 4E D5 EF C1 37 15 | h..8h%J...N...7.
+67 49 B6 04 42 83 78 59 23 8F 2C 64 B8 6E B4 0A | gI..B.xY#.,d.n..
+E4 14 0C DC DB 15 19 BD A4 61 C6 12 D7 B7 20 7A | .........a.... z
+24 C8 FF 63 0D FA FF 6B E2 C0 D3 B0 C8 1E 69 62 | $..c...k......ib
+43 F7 05 72 64 AE 5A 82 F4 BE 80 8E A0 BE 70 75 | C..rd.Z.......pu
+F0 E3 04 91 4E 76 9A 10 BB 4D CA D4 CB 1D D0 08 | ....Nv...M......
+3E 30 AB 2D 83 EE 59 97 AF 3A 91 4D 49 B3 64 1A | >0.-..Y..:.MI.d.
+F9 16 FC 27 A2 67 61 23 B5 40 BA D8 89 78 92 6C | ...'.ga#.@...x.l
+6D 77 0C 44 F4 F0 23 0E F9 F0 ED 65 60 0E 19 36 | mw.D..#....e`..6
+3A 96 29 3F 0C BB AD 76 92 34 8C 99 7E 20 4D 57 | :.)?...v.4..~ MW
+78 F1 81 17 17 B5 F7 8F 8A 04 E7 95 7B 2E 51 29 | x...........{.Q)
+00 66 D8 8D 40 CD A5 3A 8B 1B 55 99 7C 1E 56 6B | .f..@..:..U.|.Vk
+B8 BC BE BA 30 87 EE 31 25 2D 63 9F F2 62 45 21 | ....0..1%-c..bE!
+11 DE BD 34 3D DC E7 6F 53 4C 85 E3 C4 40 CB 48 | ...4=..oSL...@.H
+64 6A E9 01 B5 CA AF 39 41 32 E5 A7 B1 F0 D3 36 | dj.....9A2.....6
+F2 9F FB 9E 87 6C 56 FA 67 AA 72 74 E7 D4 83 D3 | .....lV.g.rt....
+12 EF 6A 98 44 79 42 E6 21 85 AE 83 F3 7F 86 04 | ..j.DyB.!.......
+A3 11 53 51 88 7D C2 04 C5 19 97 B1 EC 06 DD 3D | ..SQ.}.........=
+70 B9 D9 37 29 A2 DA 81 1A AC 0E 63 5D C4 98 9E | p..7)......c]...
+6A 85 FB 6E 94 98 F1 62 9D 02 8C F9 27 4D 61 DB | j..n...b....'Ma.
+AB 7B 5D EE 4A 37 72 85 D8 62 8B 8C 57 C9 03 44 | .{].J7r..b..W..D
+4F 90 B5 C8 3A ED 2A E5 39 08 E3 65 9C 5E 9D 20 | O...:.*.9..e.^.
+74 02 ED EF C8 1F 34 87 28 58 4D DB B6 CD 9D 94 | t.....4.(XM.....
+FE 9C 19 13 79 1F 65 00 EB DC BE 01 00 FE 8A 33 | ....y.e........3
+00 FA AB BC FE D3 81 E1 1F D0 EE 3B 51 67 B3 27 | ...........;Qg.'
+48 BA 17 48 5D 92 B8 6F 09 25 36 E4 63 42 B6 84 | H..H]..o.%6.cB..
+F3 B8 09 16 1C 20 F2 04 0D 29 03 3B 40 C6 FF 80 | ..... ...).;@...
+BB BA B6 D3 1A 9B 72 E6 16 C8 B6 48 C1 63 93 29 | ......r....H.c.)
+5F 2F B5 8D 40 23 44 82 C1 40 57 B0 9C 2E 2A E2 | _/..@#D..@W...*.
+83 C7 88 DE 6E 66 1A FF 68 3B 17 C8 20 AC 36 45 | ....nf..h;.. .6E
+CD 10 FD 11 C6 0F 4A D1 E3 24 A2 16 0F 29 B4 96 | ......J..$...)..
+CE 9F 85 D3 0C 8D 61 FD 66 74 27 8E 96 F4 A3 CD | ......a.ft'.....
+E0 A6 69 BB 36 3F F6 F5 6D D8 B4 33 E8 44 AA F4 | ..i.6?..m..3.D..
+DF 1B 80 A6 C0 3D 1D 33 EF C2 44 EB F6 8C 1E 7E | .....=.3..D....~
+25 DE B4 83 52 37 5F 04 6D F9 C3 8B 43 8A 52 B3 | %...R7_.m...C.R.
+75 0E B3 5F A0 EE 93 CC 2F 64 C7 13 02 94 CE FD | u.._..../d......
+FA 9B CE 80 8F C8 11 DC FB 20 77 90 2C 87 F7 B9 | ......... w.,...
+4C 99 8B A9 2C 06 02 FE A6 D5 E3 A7 D6 A6 08 8A | L...,...........
+C3 73 47 14 97 DB 20 2D 95 08 9D 05 5A E5 15 52 | .sG... -....Z..R
+C3 F3 EF 92 DD 98 A9 D6 4D 50 2C 20 97 4A DE A2 | ........MP, .J..
+44 68 7F 6C 77 0C 18 2C 31 99 7C 59 0B 9D A4 25 | Dh.lw..,1.|Y...%
+45 A0 D1 B1 3A 4A 7F F0 3B EB 59 C3 AC FC E4 ED | E...:J..;.Y.....
+98 07 5C 70 A1 67 D2 B2 E2 32 F0 A0 B9 5A 12 D6 | ..\p.g...2...Z..
+AD 71 51 CE B1 5B 55 8D B5 26 99 77 32 BC 22 0E | .qQ..[U..&.w2.".
+1D F1 8E 34 4F B1 B8 44 69 4D 86 CF 52 1F 8E 69 | ...4O..DiM..R..i
+FB 7A 25 C9 53 45 B1 EA A3 E2 29 D3 8A B6 90 EB | .z%.SE....).....
+D5 B8 E6 86 AC EF 44 1E 10 E2 D5 73 A3 89 EA C4 | ......D....s....
+A7 BE 05 CC 27 07 6A 40 38 5A A2 E9 A4 C8 8C 01 | ....'.j@8Z......
+04 CD 16 C8 75 F8 D8 EC A3 CC F1 85 8B 9A 51 49 | ....u.........QI
+53 9A 77 40 C2 B9 71 0D 75 CF A8 33 E8 41 4F 28 | S.w@..q.u..3.AO(
+07 F2 F7 27 7B 56 05 54 C1 3C 0F 64 F1 CB 19 CA | ...'{V.T.<.d....
+2F 0C BE AD 1C 1B 37 AD 44 7C 67 03 0A 52 82 1A | /.....7.D|g..R..
+CA 8B C7 16 B1 45 F4 D4 E0 BB F2 17 1A 0B 73 57 | .....E........sW
+67 F9 90 99 DE BD CD 0D 1F F6 67 B5 47 9D A5 2F | g.........g.G../
+E8 07 88 19 5A 93 76 AE D1 6A 8A 6A 43 B5 50 02 | ....Z.v..j.jC.P.
+6F 7D E8 86 75 5E 7C 27 13 58 BD FA EA 5D 3B 73 | o}..u^|'.X...];s
+62 C6 F0 8A 48 59 1B 28 C5 19 8D 27 65 06 79 A6 | b...HY.(...'e.y.
+06 A3 A5 A2 A9 8B 31 C5 50 13 68 F8 0E 74 2A CA | ......1.P.h..t*.
+B8 CE 16 D3 72 C2 65 6B 84 02 5B 04 5E 99 BE CC | ....r.ek..[.^...
+96 55 D7 28 F0 1D 30 13 69 0C 8E 22 11 7D C7 A9 | .U.(..0.i..".}..
+38 3D A1 70 63 BF E9 62 86 A6 3E 7C A2 F5 04 A3 | 8=.pc..b..>|....
+51 81 C2 84 52 70 0C C3 DC 7B D5 94 C1 FB A9 EA | Q...Rp...{......
+86 94 77 DC 3C 7D 02 21 E2 74 CE D5 D2 0C 24 EE | ..w.<}.!.t....$.
+5E FF 2F 0F 59 C8 E6 17 1A 4B 28 E3 81 74 EE 15 | ^./.Y....K(..t..
+F7 20 32 94 5B 83 89 E4 4D DF 97 22 E2 2E 38 C8 | . 2.[...M.."..8.
+82 90 DD D1 57 8A 1F 67 23 55 13 69 D8 58 89 A3 | ....W..g#U.i.X..
+9D CE 9D BE 36 7C 60 42 CC FE B2 FE A5 6B B5 04 | ....6|`B.....k..
+A7 9E 4B 65 EB FE BF 8B 53 28 EA 91 F8 84 30 38 | ..Ke....S(....08
+A5 ED 04 34 D0 80 B2 2A 29 98 66 11 DF 7A E0 80 | ...4...*).f..z..
+67 99 51 95 10 2D 19 0E BB E6 65 1C B8 2C E1 82 | g.Q..-....e..,..
+20 7D B7 62 0D 43 10 16 3A 86 A4 09 86 FB 8D B8 | }.b.C..:.......
+8C BE 35 E4 C1 81 11 67 F5 71 74 27 51 83 5F 1C | ..5....g.qt'Q._.
+E7 30 A0 01 A4 BA 7A D0 5A C0 A9 EB A7 27 E0 3D | .0....z.Z....'.=
+EC 32 5C 42 70 5E BC 8E 3B 80 38 6D 50 01 3E FF | .2\Bp^..;.8mP.>.
+62 66 10 DA CC 15 8A 58 51 D7 F4 12 A9 96 6A 73 | bf.....XQ.....js
+B6 7B ED 7A 5B 47 4C D6 B2 98 EB C2 1B A4 34 0C | .{.z[GL.......4.
+80 7D A0 C3 0A D5 E6 BD | .}......
+
+Flow Record:
+ RecordCount = 9
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1608
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132343067 [2024-04-15 00:05:43.067]
+ last = 1713132374094 [2024-04-15 00:06:14.094]
+ received at = 1713132441667 [2024-04-15 00:07:21.667]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 60765
+ src tos = 0
+ fwd status = 0
+ in packets = 11
+ in bytes = 7425
+ src addr = 13.224.103.88
+ dst addr = 157.143.34.100
+ out packets = 13
+ out bytes = 1562
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 9.079 ms
+ srv latency = 0.000 ms
+ app latency = 0.953 ms
+ in payload = 1428
+ TLS version = TLS 1.3
+ ja3s hash = f4febc55ea12b31ae17cfb7e614afda8
+ ja4s hash = t130200_1301_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 4E 99 6A 88 F4 | ....z...v..N.j..
+23 FB 72 E0 A5 0D 5B 9A 68 F9 7F C4 41 FF DA 79 | #.r...[.h...A..y
+A1 1F 14 D3 13 17 D7 20 5C DF 00 20 CB 27 55 C5 | ....... \.. .'U.
+74 05 0D 63 D6 AD 4C 2D 37 FE EB 9E 6D 5E 91 48 | t..c..L-7...m^.H
+4D 54 F4 AF BB D6 4A FF AA 7D 28 29 13 01 00 00 | MT....J..}()....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 7B | ..+.....3.$... {
+61 25 DF 97 AE 9F F0 8D C4 09 5D 24 B6 6E CA 47 | a%........]$.n.G
+98 28 27 FD 62 02 F2 D2 00 50 B5 6B DB 70 04 14 | .('.b....P.k.p..
+03 03 00 01 01 17 03 03 00 1B 24 CA D3 A8 2F 54 | ..........$.../T
+E9 82 40 F6 D7 93 C8 9C 28 2E CC E3 7F 1F CA 9C | ..@.....(.......
+F1 6C 24 76 C6 17 03 03 15 4E 60 B7 D9 3D 86 7E | .l$v.....N`..=.~
+1B A9 15 76 E6 36 69 AB 13 B6 69 84 A7 E1 2C 79 | ...v.6i...i...,y
+06 76 FC 38 4E D7 B4 E0 E7 C1 1A 63 A4 53 88 44 | .v.8N......c.S.D
+9A 97 5E A8 96 CD 6D EA E2 B1 C2 06 14 E4 55 81 | ..^...m.......U.
+95 70 0C 1E 9D 68 77 23 44 90 92 D8 B3 5F C7 E4 | .p...hw#D...._..
+9D 3C 27 F5 7D 4F 16 7F 10 2D B4 36 A4 4E FB 1D | .<'.}O...-.6.N..
+73 42 03 2B 20 23 24 26 D5 5D 60 4A 02 58 7B F7 | sB.+ #$&.]`J.X{.
+63 16 8C 6C A5 DF 5C B9 C2 74 43 88 F9 8B BF 71 | c..l..\..tC....q
+26 B6 36 67 8C 72 44 66 4B 09 B1 DA 66 0F 7D D0 | &.6g.rDfK...f.}.
+99 E1 4F 55 6A 11 E0 96 0F 91 15 BC 3B 27 F5 BF | ..OUj.......;'..
+54 30 F5 D6 AB ED B0 F9 92 14 53 CE 4C 42 97 AF | T0........S.LB..
+AE 0A BA 6A 37 18 A0 06 81 91 97 0E 34 F9 A9 F8 | ...j7.......4...
+F9 77 F5 79 4C 54 29 05 7A 0A B2 84 3E CA 98 D2 | .w.yLT).z...>...
+EA 87 6C E1 1F 65 E0 0B D8 91 CF 29 C0 FB D4 0C | ..l..e.....)....
+CE 79 DB 29 B9 FF F8 66 50 A5 AD C3 EB 35 14 B6 | .y.)...fP....5..
+55 E6 99 C2 4C C0 15 4E 1E 67 FA 67 31 25 6A EA | U...L..N.g.g1%j.
+E5 78 F0 19 6D 7B D8 5C D6 86 81 81 CC F9 2B FA | .x..m{.\......+.
+C1 A2 CF F7 07 84 FE D4 51 A8 4F 00 8E 1C 26 53 | ........Q.O...&S
+74 55 46 F4 22 DC 90 D8 83 16 5B C1 DC B7 17 01 | tUF.".....[.....
+CD 20 84 8E 01 79 03 A6 B5 49 75 91 90 44 B4 DC | . ...y...Iu..D..
+47 99 F3 83 3A 41 1B AD 2A AA 93 A8 92 23 97 F1 | G...:A..*....#..
+F8 7B CB 35 58 74 81 75 FC 16 14 0F E4 EE FB 89 | .{.5Xt.u........
+26 EE 25 B0 DD D4 87 B0 C6 B7 D8 EE 80 C9 0E E2 | &.%.............
+06 02 61 86 6F AB F8 82 7B A1 C5 C7 B8 A5 D6 4C | ..a.o...{......L
+B7 BE F9 2E 6E 12 33 96 F1 DB D4 61 A9 B4 ED FE | ....n.3....a....
+47 8B 30 62 C6 DB 0F 1C 59 86 4C BB ED 1A 67 63 | G.0b....Y.L...gc
+55 F9 BD 4C 1B 6F 65 B8 B3 BF 02 7A 72 55 83 3B | U..L.oe....zrU.;
+CA B7 16 DE 8C 0E 89 EC FC E7 D2 19 9B 6C D6 91 | .............l..
+BA 97 77 3C 0C BF 06 58 6B 8E 2A AC 1C 95 E0 99 | ..w<...Xk.*.....
+23 28 C5 0A 66 B9 0E 69 51 9E 47 ED 02 52 14 DA | #(..f..iQ.G..R..
+34 F3 8B 98 A7 A3 36 07 F1 94 7E EE 81 6A BF 55 | 4.....6...~..j.U
+94 F7 E4 0A 07 CC C9 EA 40 F9 52 AB 79 C1 DC A6 | ........@.R.y...
+9A 63 C8 4C 95 70 40 D4 89 6F 73 6C 11 8D 06 34 | .c.L.p@..osl...4
+99 B0 FF 96 B0 26 DF D6 96 B3 BF 92 15 00 FB C7 | .....&..........
+8D 26 7F 72 9B 1F 84 C9 A5 3D AD 10 ED E8 75 6C | .&.r.....=....ul
+E7 67 EB B3 50 26 6A F8 08 02 0E 0E 0A 83 CC 84 | .g..P&j.........
+50 D6 25 DD B4 BE 87 07 B1 7D 77 D1 98 27 D9 30 | P.%......}w..'.0
+71 22 51 BF C8 FB 14 0D A7 AA DC 3C 2B 46 13 64 | q"Q........<+F.d
+51 B7 FD 8E F8 59 0C 47 91 52 9A 43 9B 29 6D 2B | Q....Y.G.R.C.)m+
+17 23 F7 30 AF 7C C7 7D 02 B6 A4 74 A6 8E 45 07 | .#.0.|.}...t..E.
+6F EA 3C EE 59 2F 22 26 7C DC 03 AB 9F BD 94 38 | o.<.Y/"&|......8
+30 A5 DC B5 E9 16 A4 59 DB 41 19 99 02 7A B9 47 | 0......Y.A...z.G
+DA F6 90 EA 19 C0 A8 10 F9 AC 9D 92 17 71 52 F7 | .............qR.
+AB E2 20 09 F3 AA 8A 34 6D 46 66 86 33 10 0F D7 | .. ....4mFf.3...
+9B 0B 7E 65 C2 EA 96 31 07 79 D0 40 EC A2 F7 69 | ..~e...1.y.@...i
+AE 39 B9 7B 25 1D BE 77 8E 8D F5 A6 4C 84 CD 65 | .9.{%..w....L..e
+BD 10 9D 35 5A 4D FF DA 45 C7 D5 A0 51 5B B8 34 | ...5ZM..E...Q[.4
+60 D9 98 67 AC 5A F1 A9 AF F5 69 B8 AA A3 4B FC | `..g.Z....i...K.
+C5 F3 BC C5 5A F8 2C 1B 11 C5 89 CE 1A F9 12 BC | ....Z.,.........
+BC A4 84 65 72 12 B5 F1 55 92 E1 70 82 8E C8 D2 | ...er...U..p....
+16 EA 23 FF A5 3E 2B ED A9 9D 53 60 68 98 7A 22 | ..#..>+...S`h.z"
+17 30 B2 B8 BB 46 5A 9D 9F F5 15 8E D3 E7 4D 0F | .0...FZ.......M.
+8F DF 63 D2 63 03 AF D0 47 76 03 FF A2 6A 2C D0 | ..c.c...Gv...j,.
+C3 22 9B 42 C3 D1 4E FD 7C F1 15 23 67 0D EF 22 | .".B..N.|..#g.."
+D7 AF 36 91 38 17 09 4F B4 CE 23 DB 04 5B 1D 63 | ..6.8..O..#..[.c
+A4 64 71 5E 94 68 3D D6 6B 6A 8A 37 36 D4 58 5C | .dq^.h=.kj.76.X\
+7F B5 EE 97 00 D7 99 B1 4B F9 06 60 7E 16 9F B8 | ........K..`~...
+9B D2 A9 10 1D CB E6 52 7A 09 04 D2 A3 2E 02 83 | .......Rz.......
+87 08 24 C0 5F 7D C7 78 9C 3E 9C CD A0 E9 A5 F7 | ..$._}.x.>......
+8C D7 E6 5E C8 55 73 36 54 EF AA A7 82 D5 B9 C3 | ...^.Us6T.......
+14 64 9C 79 4C EF 76 0F C1 30 85 50 F6 71 8C A7 | .d.yL.v..0.P.q..
+22 1E AD 9B 64 FA 40 DC 55 60 28 F3 0E D1 FA 4F | "...d.@.U`(....O
+DE 43 EB 62 20 E5 97 5C 3E 9C A9 F4 7B 25 31 4B | .C.b ..\>...{%1K
+22 C5 CC 46 A6 1C 41 FC 6D 4C DD 0F 34 8B 07 59 | "..F..A.mL..4..Y
+50 C5 5B A9 77 15 02 E3 3E C1 EE 26 74 0F 7C 62 | P.[.w...>..&t.|b
+D9 41 09 E8 FD B5 18 CD 51 1B 29 D5 FD C8 8F 22 | .A......Q.)...."
+DF 34 90 FB 75 5F F9 16 EF 73 FC 27 E7 69 BB 06 | .4..u_...s.'.i..
+DB 02 F0 C5 1B F5 DE FD 05 23 8D 72 64 8A 5D EF | .........#.rd.].
+F6 AF DE 70 0C 5C FF 78 46 FD E3 79 ED 62 50 16 | ...p.\.xF..y.bP.
+AD F6 47 EF BD 0B A6 9B 0A 63 39 91 F3 AB 33 09 | ..G......c9...3.
+BE 9B CC E5 3F 1F 0C 12 C6 13 D8 D7 31 B1 AB 30 | ....?.......1..0
+2B 84 6B A3 FC D6 A2 D3 2A 7F B6 A5 B6 B1 0A 0C | +.k.....*.......
+32 50 5F 96 9A 16 45 89 B9 EB 65 26 D9 75 31 17 | 2P_...E...e&.u1.
+73 4C E9 54 15 A3 6B 15 01 1D 04 AA D4 4B 96 D6 | sL.T..k......K..
+27 60 B0 ED 32 DB 02 40 00 CA 3D 38 88 D3 73 32 | '`..2..@..=8..s2
+D4 BA 08 FE 9E 48 1A C2 E5 64 99 94 1D A0 48 57 | .....H...d....HW
+C3 F2 CB 10 BD 8F ED B9 28 7F BE BC 7C AD C0 E4 | ........(...|...
+2A D4 96 26 04 34 DD 4F 7E D6 A5 A3 46 3C 02 56 | *..&.4.O~...F<.V
+2D 47 EC 83 26 59 F2 8C 38 1C 6F DD C7 10 D4 17 | -G..&Y..8.o.....
+89 70 D9 36 | .p.6
+
+Flow Record:
+ RecordCount = 10
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132150187 [2024-04-15 00:02:30.187]
+ last = 1713132181222 [2024-04-15 00:03:01.222]
+ received at = 1713132277671 [2024-04-15 00:04:37.671]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 50515
+ src tos = 0
+ fwd status = 0
+ in packets = 31
+ in bytes = 18713
+ src addr = 17.248.209.70
+ dst addr = 157.143.34.100
+ out packets = 35
+ out bytes = 7113
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 37.394 ms
+ srv latency = 0.000 ms
+ app latency = 1.532 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 39 14 3D 1E 9C | ....z...v..9.=..
+45 09 BE 33 D6 49 D4 17 64 7E 84 8F ED 84 60 36 | E..3.I..d~....`6
+EB 28 62 14 5D D0 C8 7E A5 C8 A0 20 98 24 EA 27 | .(b.]..~... .$.'
+E5 C5 CD 5C 65 13 BD 0B 19 25 70 91 8B 00 9D 34 | ...\e....%p....4
+A0 10 A4 DE 86 D9 75 65 83 14 39 97 13 02 00 00 | ......ue..9.....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 89 | ..+.....3.$... .
+42 59 93 D8 D4 39 F1 F1 21 30 F1 89 54 21 60 F6 | BY...9..!0..T!`.
+E7 D2 E0 55 12 1A 1C D4 08 4A 88 30 44 43 72 14 | ...U.....J.0DCr.
+03 03 00 01 01 17 03 03 00 2A 22 E0 87 DF 32 A3 | .........*"...2.
+FF B9 44 76 82 95 5A 33 E3 47 77 5D A5 80 02 29 | ..Dv..Z3.Gw]...)
+09 3E 60 15 B9 02 BA 2A 11 D2 26 77 34 BD 33 45 | .>`....*..&w4.3E
+7F 01 1C 39 17 03 03 11 25 1B 4A 8E DB E3 E9 C4 | ...9....%.J.....
+AF F7 DC 8F 08 65 BA 45 EA 47 6E DB 0E DD E0 EB | .....e.E.Gn.....
+42 43 DF AF 11 BB FB BE 07 EC 90 E8 56 04 D0 C5 | BC..........V...
+98 04 42 67 EF 03 D3 33 08 55 75 09 1B 8D D0 D8 | ..Bg...3.Uu.....
+B3 83 80 3F 1A A7 27 93 BD 10 B9 2E 98 80 03 E2 | ...?..'.........
+7D 14 3E 35 0E 24 22 04 3E 88 19 25 D6 5A 99 FF | }.>5.$".>..%.Z..
+33 ED DB 46 16 AD 41 43 38 46 79 05 8C 91 14 01 | 3..F..AC8Fy.....
+1C 89 BB 1F 79 FB 8D 82 CA 48 90 AE 56 AC 6B 38 | ....y....H..V.k8
+63 67 4E 4C B5 B1 CD 3B 48 60 EA 11 7C 94 FB BC | cgNL...;H`..|...
+E3 3F B5 19 D3 AE F5 9C 80 EB 29 37 40 65 8E 8B | .?........)7@e..
+51 1B FA 63 62 F0 CE 8E E8 35 CB B0 CC D0 6E C8 | Q..cb....5....n.
+0F 66 68 05 1A 6A 96 AE 73 5C 19 1A CC 95 1B 41 | .fh..j..s\.....A
+BB BC C0 4A 6E CD CD 97 D3 DD F0 67 E7 B6 D3 40 | ...Jn......g...@
+9E 6A 19 73 FF B8 2F 52 7D 3A 35 14 CF 4C 1A F4 | .j.s../R}:5..L..
+7E 73 57 7C B3 0F 8C EC B2 2F 27 CC 7C A8 90 1C | ~sW|...../'.|...
+52 D9 3F 6A E3 F3 EC 50 70 E7 CB 7A 82 A9 9E BD | R.?j...Pp..z....
+6C 5F 52 51 AE 58 D5 50 BF AF 3B 92 55 98 30 4D | l_RQ.X.P..;.U.0M
+50 AA 04 BF 42 13 3F 39 C0 FB 56 74 E4 17 58 6B | P...B.?9..Vt..Xk
+55 5A AC ED AB 6A 2A D1 FA E5 DA 1B 96 4E 8A B0 | UZ...j*......N..
+49 30 9B D8 6C 72 F3 31 13 2D 32 C7 6B FB F5 56 | I0..lr.1.-2.k..V
+39 B7 C9 6D 02 03 69 54 32 04 15 78 C0 4E B1 E2 | 9..m..iT2..x.N..
+07 13 42 3F 09 E1 1C AE 29 5A CE 37 96 18 EA 12 | ..B?....)Z.7....
+64 A1 ED 71 AB 08 34 DD 46 11 F7 FB 93 F9 E1 AE | d..q..4.F.......
+B7 91 7B D4 CD 89 B5 72 5E 32 85 B9 61 DA 39 31 | ..{....r^2..a.91
+00 5E FF 56 0D F5 84 7D C9 A7 94 39 8F 80 3A 7C | .^.V...}...9..:|
+02 8E 43 F2 88 C7 E1 D8 81 84 26 8C 47 0D 31 F5 | ..C.......&.G.1.
+4F B5 A3 C9 90 26 87 3D 0C 39 A8 6D A8 11 A3 E7 | O....&.=.9.m....
+1E F6 A5 E6 27 C8 16 25 73 F9 63 9E A9 03 C4 EF | ....'..%s.c.....
+7E 48 8E F0 B0 C9 F6 89 D1 7B 2F 3B C7 D7 DB 52 | ~H.......{/;...R
+27 7A A8 E4 41 95 51 72 31 9F 59 7F B4 9B AD 7E | 'z..A.Qr1.Y....~
+CA 03 A9 DA DE 07 FA 3B CF E1 73 86 B5 06 16 86 | .......;..s.....
+CF C1 9F D6 BE 47 9C 2C AB F1 31 ED 1D 60 20 28 | .....G.,..1..` (
+B5 5A B3 BE BF D1 4D AA E0 05 02 54 97 6C 90 14 | .Z....M....T.l..
+7B 43 B5 C8 80 7A DE 53 1C D2 EC 32 72 61 7C E1 | {C...z.S...2ra|.
+F9 6D EA F6 54 28 6A 58 D8 1C B8 C1 5B 24 CD 3A | .m..T(jX....[$.:
+3C 85 6C 93 79 87 7C 48 D8 4B C0 51 26 8F 04 7B | <.l.y.|H.K.Q&..{
+54 1D BD F9 E8 DA C8 D8 1E 3F 35 1D FF EE 81 4E | T........?5....N
+40 26 5D 54 5F B0 51 16 22 4A FD CB 8E DD 91 F3 | @&]T_.Q."J......
+E2 37 75 5D EE 95 72 3A 54 C1 21 05 0F 65 13 E4 | .7u]..r:T.!..e..
+CC 4F F9 1B 05 CE 5F 24 A8 51 4E 48 AF 71 0A 2C | .O...._$.QNH.q.,
+18 03 BF 29 36 2F 93 5E 92 CB 46 B3 FE 59 4B 69 | ...)6/.^..F..YKi
+D8 F2 5B 2E 16 CA 3A 2C 1A 20 76 E3 60 06 97 2D | ..[...:,. v.`..-
+FC 3D 52 3D 9C 52 65 F5 C7 65 1F A2 87 68 79 1D | .=R=.Re..e...hy.
+DB BF C0 CA A2 A2 2C 59 EE 7E D1 C6 6E 52 84 2D | ......,Y.~..nR.-
+F1 9A 67 EB 9C D7 AB D4 B8 A9 23 60 58 B5 2D 00 | ..g.......#`X.-.
+50 B5 12 34 46 55 3E E5 F6 69 1A B5 59 0C 83 E2 | P..4FU>..i..Y...
+68 FE 0D 6A E2 75 7E A6 0F 52 81 C0 0B DB B2 0E | h..j.u~..R......
+0D 24 D7 17 7D 6E BC 78 5E 4A 36 4E D2 85 CD 97 | .$..}n.x^J6N....
+84 7F CE 64 21 76 7C B2 66 28 E7 12 87 96 6D 80 | ...d!v|.f(....m.
+15 BB 79 36 F7 D8 75 D4 59 3A 72 67 66 30 9F A4 | ..y6..u.Y:rgf0..
+39 A0 7C 36 A5 1D 80 E5 9C B9 B2 E7 04 9A 04 42 | 9.|6...........B
+71 81 46 63 E7 5E 4D E8 6B 51 E9 D3 FE 98 FA A0 | q.Fc.^M.kQ......
+9D 03 D8 6A 8E B8 A6 CB 34 25 10 9D C3 BF B2 1F | ...j....4%......
+E9 1A FB 08 E6 97 B5 3F 47 75 5B 0B 2F F8 FF 3A | .......?Gu[./..:
+2C E6 72 F2 34 BC 4F 22 99 C8 35 B9 95 25 89 4C | ,.r.4.O"..5..%.L
+11 1D 67 E1 04 4A 21 7D A7 CA 00 FC 10 9E 37 A2 | ..g..J!}......7.
+13 63 F6 E2 30 E7 6E 35 DD 76 B0 05 3E 15 F6 0C | .c..0.n5.v..>...
+0B C1 65 74 41 C4 1E 16 12 C8 D5 4D 0E 76 1C 24 | ..etA......M.v.$
+DF 52 3A AF 18 E8 01 CC 93 58 D9 01 72 7C 23 8F | .R:......X..r|#.
+74 8F 4F 3F EE F9 04 E7 8F DC 0C 73 A6 BF 8E C0 | t.O?.......s....
+F2 4F 7B 9D 8C FF 19 FD A9 A4 6C D9 DB 60 F6 D0 | .O{.......l..`..
+D2 B2 0C 50 1A D7 8E CA C9 CA FC AC EC 6E 64 8B | ...P.........nd.
+98 DA 0F 52 3D CC C3 8A 67 63 96 0F AB 6A 4C 52 | ...R=...gc...jLR
+CF AA F3 5B D3 75 1E D7 1A 22 F3 78 4D 9D 1F E8 | ...[.u...".xM...
+2A D0 08 56 DA 56 F2 F8 B0 37 5C F2 74 56 90 55 | *..V.V...7\.tV.U
+77 5D 3F 4A B2 6D 1C A7 C7 5D 26 66 8A F2 D1 A6 | w]?J.m...]&f....
+AB 51 57 A9 61 55 05 D7 74 BA 25 C5 FF 1A F8 48 | .QW.aU..t.%....H
+C6 31 08 AC 29 77 23 A2 AE DB E7 F2 A0 62 45 65 | .1..)w#......bEe
+DC AC 22 CE 75 B1 7B 16 1D 07 A4 F2 D9 02 6E 7E | ..".u.{.......n~
+D2 54 A5 07 3C 82 FF C0 43 CD 2C 7E A4 26 B9 40 | .T..<...C.,~.&.@
+D1 4E 74 9A 8A 9D DA C1 3C 62 1D D2 E1 FB 37 89 | .Nt......
+0E 69 60 DA 0E CB 66 D3 5B 3F A5 43 4F F1 17 D0 | .i`...f.[?.CO...
+0D B7 CC 67 6D 66 0C 99 13 CE E1 0F 89 44 76 E1 | ...gmf.......Dv.
+A5 B7 BC 4C 16 F3 28 26 10 05 E6 FD 19 A5 52 DC | ...L..(&......R.
+74 CA 69 B8 65 D2 0D 6E | t.i.e..n
+
+Flow Record:
+ RecordCount = 11
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 12 15 17 29
+ size = 1552
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132382740 [2024-04-15 00:06:22.740]
+ last = 1713132382867 [2024-04-15 00:06:22.867]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 54951
+ src tos = 0
+ fwd status = 0
+ in packets = 9
+ in bytes = 6256
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 14.387 ms
+ srv latency = 0.000 ms
+ app latency = 12.303 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 A4 CC 9F 4C 12 | ....z...v.....L.
+9C 28 15 46 13 5D 29 86 5C 70 66 AC 5C C8 6E FF | .(.F.]).\pf.\.n.
+C6 D4 3C 2B E3 29 50 4C DB A9 81 20 FB 70 A6 90 | ..<+.)PL... .p..
+D9 69 76 6A 45 CC 1C 07 0D CA E7 09 68 5D 45 7A | .ivjE.......h]Ez
+AD 08 D7 4E DF 65 71 4E 9C 42 A1 E5 13 01 00 00 | ...N.eqN.B......
+2E 00 33 00 24 00 1D 00 20 71 C1 B8 99 D6 4F C0 | ..3.$... q....O.
+0F 91 75 29 DC C6 0D B9 0C 09 02 FD B4 4B E0 F8 | ..u).........K..
+8A C2 3E DD 40 2F C2 4A 10 00 2B 00 02 03 04 14 | ..>.@/.J..+.....
+03 03 00 01 01 17 03 03 11 B7 51 EC AC 23 28 01 | ..........Q..#(.
+F1 04 0B 82 DD 8B 76 FC D8 10 E6 70 50 C1 58 10 | ......v....pP.X.
+D9 7E 69 4F A9 CC 47 3C BB AF 74 00 E6 9D 3C EE | .~iO..G<..t...<.
+3A 29 D5 98 EC A7 DF 57 F1 50 57 C1 BA A3 42 17 | :).....W.PW...B.
+EC 74 34 DC 44 27 C8 14 64 38 AC AA E4 E8 95 FD | .t4.D'..d8......
+77 39 E6 DF 84 6B 49 21 06 E1 22 99 1C 47 64 F0 | w9...kI!.."..Gd.
+10 CC 3F 63 A8 1C 0C 31 C2 51 31 14 D4 58 D5 E8 | ..?c...1.Q1..X..
+6C 68 17 98 D4 03 F9 F7 A8 27 3B E4 8F 34 24 5F | lh.......';..4$_
+ED 68 7E 1F 5E C2 18 87 33 12 D6 CE A4 23 88 8D | .h~.^...3....#..
+45 EB 8A C1 1B 47 C1 A9 35 DF 44 0D F6 62 66 9B | E....G..5.D..bf.
+56 83 1A 34 2A 74 34 56 49 CF 09 3E 8E 5A 39 AF | V..4*t4VI..>.Z9.
+97 CE 76 1F FC 8E CE 05 96 7C 96 89 A4 A6 4C 90 | ..v......|....L.
+2E D4 79 9E 6A 4D 5E 27 BD CB 99 87 A6 95 3A F2 | ..y.jM^'......:.
+B7 89 8E 40 B7 E2 E2 B8 41 08 8B 57 B5 AB E3 4D | ...@....A..W...M
+EE 1A 69 AC DC 3B 5D E3 95 0D A2 75 CA 4A 7F 6E | ..i..;]....u.J.n
+61 8A 03 68 D2 CF DB C3 52 30 8E D5 30 F4 90 1B | a..h....R0..0...
+BA F9 A3 FF B4 7F 50 3B 22 37 C4 4C D6 9E 21 1B | ......P;"7.L..!.
+B4 A5 EB 0E 1E 83 2B BE 99 B0 98 6F 3B 73 12 28 | ......+....o;s.(
+8E 71 68 29 F8 4F BE 31 B7 4C FB 39 CB 47 9D BC | .qh).O.1.L.9.G..
+0D 8C 21 FA 4F DB A9 11 6B 74 F2 A2 54 D9 18 04 | ..!.O...kt..T...
+3A 0E E5 DA 0D D8 8B 88 83 41 37 C6 66 88 FB 36 | :........A7.f..6
+7C A7 C5 3B AA 99 64 8F E3 83 CC AE CF 68 20 39 | |..;..d......h 9
+33 79 B1 9A F4 C9 EE 91 03 40 0C 18 C7 90 A4 7F | 3y.......@......
+68 92 66 E5 55 01 A7 3F 0A 12 62 33 D6 D5 A1 D0 | h.f.U..?..b3....
+9B E8 08 03 3F 57 1B 34 01 C8 B5 32 F9 58 FE B9 | ....?W.4...2.X..
+90 7F 44 4F 34 1D F4 10 49 DC 6E C5 7E 06 0A 89 | ..DO4...I.n.~...
+DA 1C C7 73 D8 30 58 F0 FD 75 F2 09 61 AE 65 51 | ...s.0X..u..a.eQ
+70 F1 63 18 1A FC 0C 64 71 36 D0 2F 8D F4 9E 8D | p.c....dq6./....
+49 9A 59 9A 03 5F 90 FC B9 E3 72 90 D2 14 E7 90 | I.Y.._....r.....
+27 45 40 65 05 11 1D DF 3C 76 8C C5 24 D3 ED D0 | 'E@e......%.y.
+3D D4 E0 E3 25 89 AF 1E 7C 8B 14 3E 8A 28 AC CC | =...%...|..>.(..
+98 74 58 76 5C FE 1B 3B 58 22 E1 C5 35 46 FF DE | .tXv\..;X"..5F..
+47 17 C1 7C 57 90 8A 30 20 56 66 59 A2 D0 C7 82 | G..|W..0 VfY....
+3B 40 B9 4D 1E 00 2A 5C 0D 85 FE 06 40 01 1D C6 | ;@.M..*\....@...
+44 98 62 84 99 21 ED FF 53 CB 6F 4C F2 D6 55 8E | D.b..!..S.oL..U.
+9C 4D 5B F7 57 DA 03 60 50 B6 EE 7C A0 32 6D 3D | .M[.W..`P..|.2m=
+76 F1 8E BE 90 A5 59 18 53 BD FC 4D 20 FB 81 C5 | v.....Y.S..M ...
+40 FC 1E D5 6C 74 3D 4B F7 19 05 53 27 A5 98 BF | @...lt=K...S'...
+47 1A B9 70 12 C0 19 15 48 3B FB 45 67 37 75 87 | G..p....H;.Eg7u.
+04 5C 80 FC B4 4E EA 98 79 EB 88 A1 33 BC C8 40 | .\...N..y...3..@
+2B 70 C4 3B 60 69 DD D9 | +p.;`i..
+
+Flow Record:
+ RecordCount = 12
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1580
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132381134 [2024-04-15 00:06:21.134]
+ last = 1713132381225 [2024-04-15 00:06:21.225]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 65089
+ src tos = 0
+ fwd status = 0
+ in packets = 7
+ in bytes = 6187
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ out packets = 8
+ out bytes = 1069
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 12.155 ms
+ srv latency = 0.000 ms
+ app latency = 12.660 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 2F 41 00 E8 EC | ....z...v../A...
+7C 12 29 B4 6C 17 29 76 2E AD 84 68 C3 91 E2 37 | |.).l.)v...h...7
+90 B3 83 B7 B3 E4 92 1D BE BA 40 20 AB 9A 15 7A | ..........@ ...z
+9C 5B 06 39 E0 F6 E6 8C 85 2D 1D 8F 2B A8 D3 B0 | .[.9.....-..+...
+5F B5 53 E4 FC 17 74 D2 AD 29 9A 40 13 01 00 00 | _.S...t..).@....
+2E 00 33 00 24 00 1D 00 20 8E 52 6C 3A FC F0 C2 | ..3.$... .Rl:...
+1E B0 9C EC 44 84 24 9B 07 E5 C2 DE 37 E3 C0 7D | ....D.$.....7..}
+1D D8 54 FD 0C 05 B4 55 63 00 2B 00 02 03 04 14 | ..T....Uc.+.....
+03 03 00 01 01 17 03 03 12 67 0B 5D 1F 1B C8 36 | .........g.]...6
+12 84 0A A5 4C AD B7 03 79 09 29 46 82 B1 7C 59 | ....L...y.)F..|Y
+CB FD CF 33 64 44 D9 A8 EC E0 85 15 C6 3C BE 8C | ...3dD.......<..
+B8 9D B2 EF 8E 90 FD A5 BC 69 0A 67 03 C9 18 FF | .........i.g....
+08 08 BC 84 0B 26 5B 8B D2 EE 9E 0E 07 E4 AC 1B | .....&[.........
+E0 F5 4B BE 26 DC 09 C9 88 C2 DF A3 A0 84 42 7D | ..K.&.........B}
+E1 25 34 EB DC 4F CC BE DA 2F 01 A2 6A B9 CC 5F | .%4..O.../..j.._
+E2 38 1F A5 1B 19 E7 23 01 D8 93 D9 54 D8 72 EA | .8.....#....T.r.
+06 4C 4E 54 A3 BB F6 3E 7F 37 AD D7 FD 3B 21 F9 | .LNT...>.7...;!.
+1F DB 7F B7 28 5C CA 7A C6 01 55 9F 10 66 58 53 | ....(\.z..U..fXS
+B7 D2 C1 9F 66 25 7D FB 21 D2 DA 6C D5 0F 1F 17 | ....f%}.!..l....
+A2 31 CF F1 A3 17 62 B4 67 3C 34 0B C2 46 E4 80 | .1....b.g<4..F..
+B5 39 D2 5D 45 84 5B 23 F2 A8 89 39 D0 E7 B4 C9 | .9.]E.[#...9....
+9C 70 36 29 9C 8E 86 C8 0D DF C9 10 F3 FE 25 04 | .p6)..........%.
+35 BB 6B FC 01 57 3F 99 A6 6B 16 B2 CB 75 2C 73 | 5.k..W?..k...u,s
+E8 5C 6C A5 18 3B 2D 0C E9 E6 E5 C1 79 81 FC 32 | .\l..;-.....y..2
+E4 17 A4 6A D3 89 6E 4A 81 4E DB 6F 42 34 22 E3 | ...j..nJ.N.oB4".
+11 3C 40 76 E2 6B 24 08 65 9E EA A0 43 55 AA 40 | .<@v.k$.e...CU.@
+B4 F9 37 4E 51 1B 7A 30 87 B6 61 84 A8 C8 BC 78 | ..7NQ.z0..a....x
+71 C9 DB 30 4A 01 F4 F5 62 53 38 B3 A7 8D 29 5B | q..0J...bS8...)[
+68 5C 7F 30 F2 A7 5C 20 4F 64 33 83 D1 7F 3D 81 | h\.0..\ Od3...=.
+0F AE 1E 0E ED B1 A9 48 33 21 78 31 39 4B AF A1 | .......H3!x19K..
+00 30 B6 22 D1 DF 35 C4 E0 05 D7 4F CA 9B 94 66 | .0."..5....O...f
+05 4B F7 4C F5 F2 90 AE 61 E6 B8 7B 60 C3 9D 2C | .K.L....a..{`..,
+32 ED 55 DB DB 9D 92 0F 13 9C 5A 9B 78 D9 22 A5 | 2.U.......Z.x.".
+D5 F5 79 B5 57 07 8A 5B 5C 01 97 30 89 44 A5 C5 | ..y.W..[\..0.D..
+68 52 86 60 4A 85 C7 11 18 DF 3D 0D 37 32 D1 5B | hR.`J.....=.72.[
+C7 0A 83 F7 CD 9E E1 7B D2 D1 81 3C F3 4C 3E C6 | .......{...<.L>.
+FC 6D 6A 75 10 88 4C 78 54 DC 1C 59 83 31 D9 1E | .mju..LxT..Y.1..
+A9 4D 85 92 EF AF 2A 85 DA 05 88 F6 59 20 DE 5D | .M....*.....Y .]
+1B 92 0D D7 32 79 1C B0 0D 4A BA 8D E4 04 59 5C | ....2y...J....Y\
+CE B3 EB 76 74 38 A1 2B F0 51 27 AE E4 80 CE 6E | ...vt8.+.Q'....n
+94 65 06 07 77 97 71 A5 22 42 EF E5 BD 82 62 9C | .e..w.q."B....b.
+55 86 DF 8C 76 9A 19 9A AB 75 BD E5 77 74 D2 2D | U...v....u..wt.-
+4B A1 45 1E F3 38 48 51 80 CD BD A1 75 D5 5E FC | K.E..8HQ....u.^.
+97 D2 70 DB 63 79 57 21 15 1A 9A 8D 46 CB EA 92 | ..p.cyW!....F...
+AC 67 9A 41 13 A8 A5 EA 02 79 B4 16 CE 38 58 95 | .g.A.....y...8X.
+71 D6 62 3A D9 10 FE 09 F8 4D 70 C3 F4 3A 95 F1 | q.b:.....Mp..:..
+03 5D E4 B8 F4 87 CE 7E 40 CD 1A E1 37 EE 7E F3 | .].....~@...7.~.
+53 09 32 12 8D C9 7B 4C 57 30 91 E2 6C B5 53 3D | S.2...{LW0..l.S=
+96 B7 D5 4E 09 0F 54 05 83 06 6D EF 54 A9 50 A4 | ...N..T...m.T.P.
+9D FF F5 AF FE 86 64 5B 55 84 59 4B 5B C1 1D FD | ......d[U.YK[...
+8A 3E 91 C1 32 4A A9 A4 05 F5 D7 61 55 CA 42 9D | .>..2J.....aU.B.
+45 31 A4 1F F5 79 00 94 AB 94 21 DE 1D 59 AF 06 | E1...y....!..Y..
+B4 5F EA AA 2D D3 FE 8E 1E F9 3C 91 C9 77 08 16 | ._..-.....<..w..
+E8 89 12 21 76 A0 70 A6 EA 44 FB D7 C1 B2 31 BF | ...!v.p..D....1.
+5B 6E 47 EF 93 C2 09 03 77 50 0C C6 BC 62 BD CC | [nG.....wP...b..
+0E 7B 83 08 C4 07 1B 12 28 88 DF 5B 1F BE 14 CC | .{......(..[....
+CE B6 3C 0A FA 6A 22 1D EC 90 62 B2 17 E9 04 FB | ..<..j"...b.....
+BC 52 AD 31 BC 04 59 37 39 E8 D2 22 6C 9A 41 F9 | .R.1..Y79.."l.A.
+FB 5F 60 71 92 03 A6 2E C1 37 F7 02 BE 19 F8 52 | ._`q.....7.....R
+F8 13 DD DD B3 AC 36 8B C3 D3 FA 90 C7 4A E8 23 | ......6......J.#
+63 17 C6 1B D6 57 65 3C 5D 1D 69 7B 71 09 DC 00 | c....We<].i{q...
+4B EA 33 62 9D FE B5 A3 D9 00 5C 74 D4 93 1A B7 | K.3b......\t....
+F1 B3 2C DC 4D 98 04 C3 0B 84 1D D5 44 FA 35 4E | ..,.M.......D.5N
+79 A7 13 7A 74 5C E5 5B C7 5B D9 32 10 84 85 F1 | y..zt\.[.[.2....
+7D 9B 84 B1 A1 BB 30 F6 CB 53 B4 72 1C 44 D5 E1 | }.....0..S.r.D..
+A3 55 5F F3 6F F0 E4 7F 25 E8 F2 70 75 C7 93 18 | .U_.o...%..pu...
+49 D4 79 38 30 00 9F 03 A2 53 A7 46 74 AD C1 A3 | I.y80....S.Ft...
+CE 18 00 78 4C BE 9D 45 42 AB 65 92 19 C5 3B 23 | ...xL..EB.e...;#
+60 58 88 5A B9 BF C0 4E 02 9F 06 98 41 93 37 98 | `X.Z...N....A.7.
+CA D4 FA F9 92 9D BA A6 C3 25 C9 CF 41 DA FD 1A | .........%..A...
+80 BA D8 A5 5B AF 71 F0 B9 6A 2C 8F 90 86 16 A5 | ....[.q..j,.....
+37 05 5A C0 FE D3 60 E5 6F 51 70 2D 1D 43 15 43 | 7.Z...`.oQp-.C.C
+98 24 19 92 4B 1D 3B 13 79 65 D9 95 BE 1B 89 A7 | .$..K.;.ye......
+BE 0D 07 D8 16 2A 36 78 03 FD AF FE 84 20 FD 88 | .....*6x..... ..
+AF 01 EA 54 36 97 A0 A4 12 99 F6 15 67 E6 49 6D | ...T6.......g.Im
+F9 3E DB 2D 03 A8 CB CE FC C5 CA F9 AD 35 61 A8 | .>.-.........5a.
+79 E8 2C A3 BF 8A 6A 8F AB 04 0E CE 21 05 53 67 | y.,...j.....!.Sg
+2B 80 49 F7 EB 1F 56 8C F5 5E 61 94 57 00 D3 48 | +.I...V..^a.W..H
+84 0F 36 64 24 DB 93 C0 B3 71 26 7E B6 D5 F5 C0 | ..6d$....q&~....
+50 C5 C8 D3 85 48 20 9F 27 E6 AF 68 B7 95 8C 9A | P....H .'..h....
+56 8E 1F AD 54 36 89 3E 88 B1 61 68 82 1F 7D FD | V...T6.>..ah..}.
+18 56 01 02 9C 7E 5D E1 23 EB 62 AC 6C 84 43 E6 | .V...~].#.b.l.C.
+35 8B 5A 87 59 48 CC 48 95 35 C6 96 65 6F 40 C2 | 5.Z.YH.H.5..eo@.
+B9 D5 15 5F 8E B5 59 42 05 6D F3 3F F5 19 DE 8F | ..._..YB.m.?....
+43 69 12 00 E1 6A 17 6E 2C F8 CB FA F2 2F 3C 3C | Ci...j.n,..../<<
+18 E0 68 5F 04 3A CD 49 E7 4D 49 B8 0A 21 F7 41 | ..h_.:.I.MI..!.A
+16 C5 2A 80 7A C2 3E 3E DD EB C7 28 BA B2 2A C0 | ..*.z.>>...(..*.
+19 FD 20 FA D6 86 C5 08 | .. .....
+
+Flow Record:
+ RecordCount = 13
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132280006 [2024-04-15 00:04:40.006]
+ last = 1713132311020 [2024-04-15 00:05:11.020]
+ received at = 1713132377066 [2024-04-15 00:06:17.066]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 53757
+ src tos = 0
+ fwd status = 0
+ in packets = 30
+ in bytes = 18660
+ src addr = 17.248.209.68
+ dst addr = 157.143.34.100
+ out packets = 34
+ out bytes = 7061
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 37.432 ms
+ srv latency = 0.000 ms
+ app latency = 5.568 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 D8 57 62 FC 39 | ....z...v...Wb.9
+3D 06 8F DF CA 43 25 60 4F 32 6C 2A E1 06 C5 C6 | =....C%`O2l*....
+FC 5C F8 B3 F6 41 57 FE 6A 46 02 20 7B 77 E2 C0 | .\...AW.jF. {w..
+38 A7 17 3F E3 40 C1 CA 68 76 BA 94 9F 1C D4 93 | 8..?.@..hv......
+8C 47 94 8E 87 54 5A DE C2 F4 3B F8 13 02 00 00 | .G...TZ...;.....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 69 | ..+.....3.$... i
+23 3D 95 74 AC 97 89 95 95 B2 E2 93 CD 2D C9 B0 | #=.t.........-..
+90 98 6C A5 7C 8D 95 07 8E 4F 2E 88 D8 2C 50 14 | ..l.|....O...,P.
+03 03 00 01 01 17 03 03 00 2A 87 9D AE BC 0A EE | .........*......
+FF 8E F6 3D 66 AD B9 7F 8C 96 8E 6F 59 BC 24 E4 | ...=f......oY.$.
+DF 2D 4B 94 57 AE DF E7 7F 03 C1 E4 AC E2 04 02 | .-K.W...........
+7E AB FA AE 17 03 03 11 25 D3 31 8F EB 4A EC 7D | ~.......%.1..J.}
+A2 6A C9 AB C2 BA 4F 24 62 F8 18 96 62 E1 6D C5 | .j....O$b...b.m.
+4A 2F D3 1E 73 B3 5C C1 99 68 8B 02 85 DE 0E 97 | J/..s.\..h......
+20 10 E2 1B C9 DF 47 39 DA DB 9F 93 DE F8 03 6D | .....G9.......m
+6C 96 56 7D 48 1E 76 6E 56 90 3C 38 58 A8 31 00 | l.V}H.vnV.<8X.1.
+2F 7E 06 84 D8 FF E0 79 6F 94 67 F2 AD 87 F3 83 | /~.....yo.g.....
+49 0B FE D8 33 2C 87 8A 92 FC A7 E4 10 68 AC 31 | I...3,.......h.1
+B9 2E ED E2 48 D8 95 D8 5B 40 79 F7 94 28 D6 A9 | ....H...[@y..(..
+CD A8 9A 9B BD E5 7A 56 9D 55 0D 21 C1 C7 67 53 | ......zV.U.!..gS
+4B 3C 77 9C 04 C6 8F 16 01 64 B7 93 C5 FC AD 67 | K...\B...:e
+F3 4C B1 4E D2 F5 9F 3B D6 A9 47 86 FE E0 FA 45 | .L.N...;..G....E
+72 B1 BA 9A 87 64 F7 48 06 DA 45 35 AD 87 68 94 | r....d.H..E5..h.
+DB 9E FA F8 28 45 50 E5 67 91 53 A1 50 35 CF 31 | ....(EP.g.S.P5.1
+DD B4 5E 04 71 53 23 13 5F F4 AF 69 F3 DE 8B 16 | ..^.qS#._..i....
+99 DD DD 17 6D 1A E7 90 82 AB C9 E6 1A ED 39 00 | ....m.........9.
+64 51 97 82 C3 24 DD 5F 91 B4 15 27 F5 30 5F 79 | dQ...$._...'.0_y
+7B 46 E3 8A 8C 6D E6 0A 8A 7E EF 8B 32 90 4C BB | {F...m...~..2.L.
+AE 71 7F 22 69 C4 40 68 98 B1 D9 C3 21 4C CC FE | .q."i.@h....!L..
+A9 0F FB 9A 93 06 95 ED D1 36 52 A8 A0 D0 E7 ED | .........6R.....
+77 6A E1 E8 71 1E BD E6 C3 04 F0 D0 85 51 B0 D5 | wj..q........Q..
+36 9F 39 19 58 9F 6B 68 77 61 4B 6A 48 F0 DA 92 | 6.9.X.khwaKjH...
+02 8F FA 10 2F 56 9A 29 00 E1 77 2A 79 2C FE 76 | ..../V.)..w*y,.v
+C9 29 E8 74 A0 95 10 02 B9 59 0E 3C 9F 12 D2 27 | .).t.....Y.<...'
+0A BE CB 8D D4 E2 25 CD EE EF E6 80 67 B9 07 A2 | ......%.....g...
+64 9E 36 C8 8F D3 A8 A7 32 93 19 33 CF 8D AD CC | d.6.....2..3....
+CE C9 7A 9F 27 AB F5 95 68 8A 32 E6 BE D7 DA AE | ..z.'...h.2.....
+88 65 5D 12 B1 FD E5 DB 0D F9 D2 BA D7 B3 E0 76 | .e]............v
+34 BB 2A 5D 4C 24 80 F1 4E A7 57 99 33 14 66 2F | 4.*]L$..N.W.3.f/
+9B 55 AB 0E 70 E9 24 7B 7E 32 E8 C6 75 50 F3 9A | .U..p.${~2..uP..
+CB B9 40 CC A1 D4 77 4E 24 23 61 EB 64 7E 5B 08 | ..@...wN$#a.d~[.
+0D 4C 9B 2D 1E 15 75 91 4D 65 AF 80 8E 5B 2F A5 | .L.-..u.Me...[/.
+1A C8 11 72 14 7D A3 F7 62 77 24 1B 87 AD 01 8B | ...r.}..bw$.....
+2C 67 09 1C 0B AC 83 C9 ED A3 31 17 D3 8C 5C FC | ,g........1...\.
+7A 39 E5 48 A1 F0 51 51 44 73 F7 35 63 04 4A FA | z9.H..QQDs.5c.J.
+C2 D4 09 8D 5E 08 6C 75 B6 11 CF 5D 06 B1 2C 03 | ....^.lu...]..,.
+BD 6F 6E F8 8D 0E 47 AF FE 56 B7 A6 C2 D0 81 F9 | .on...G..V......
+F9 80 A6 C2 3C D4 BA DA 2B 9D FB DA 69 A4 B8 C5 | ....<...+...i...
+0C 52 5B 25 26 E8 2D EA 26 08 80 52 1F 6B CF E3 | .R[%&.-.&..R.k..
+97 79 E7 EF 31 37 A4 D8 48 14 50 43 65 E1 AF 77 | .y..17..H.PCe..w
+87 0F 0A 20 AF E8 B8 48 F5 78 E2 FB B4 71 C6 62 | ... ...H.x...q.b
+43 EA C9 74 CE 3E D2 27 73 80 81 03 CE 21 F5 DA | C..t.>.'s....!..
+34 6E E2 C4 88 4E CE 73 41 23 CD 32 9A A4 90 43 | 4n...N.sA#.2...C
+2C 6B FE 5E B1 40 B2 B0 87 30 12 EE 09 21 4D 04 | ,k.^.@...0...!M.
+F2 52 C7 A8 7E D2 AE 84 A1 7D D6 7B 11 88 38 5C | .R..~....}.{..8\
+E8 55 1D 51 C3 D7 EA E4 DA DE C6 97 E8 69 AF 77 | .U.Q.........i.w
+AB 45 5B 18 3B 14 1E A9 C7 98 96 44 7A 0A EC 29 | .E[.;......Dz..)
+C2 F9 D5 3C 74 10 BC A3 5A 0A 87 93 E4 51 8F 86 | .....Xf|........
+F3 67 1B 86 4C 51 06 7D 6D DA 45 18 2B FC 1E 44 | .g..LQ.}m.E.+..D
+A6 B9 5C C0 59 A4 6D 05 36 8A B2 E3 3A 80 EA 02 | ..\.Y.m.6...:...
+8D 62 DF 56 FD 38 02 ED 2F B8 D0 8B 9B 9A F2 61 | .b.V.8../......a
+64 65 35 53 96 7A F0 6C 31 C7 7E 5E A1 54 E7 C3 | de5S.z.l1.~^.T..
+BA 43 70 41 B1 3E C3 3A 52 4E 1F 60 76 A2 B0 C2 | .CpA.>.:RN.`v...
+D1 4C 9A F6 77 EC F1 27 91 26 A9 CD 2A DE 32 44 | .L..w..'.&..*.2D
+3F 36 E0 CD C1 D7 44 35 97 09 08 C6 2D 7F 77 08 | ?6....D5....-.w.
+DF B3 74 CB 2F 40 8D 19 2D 22 3D F6 34 B8 AF 4C | ..t./@..-"=.4..L
+C0 9A CF 57 74 80 70 DA 8E 5F 31 EB BB 33 1E BA | ...Wt.p.._1..3..
+B3 6C CA FD 79 23 35 7F 6A B8 45 7C 99 B4 51 F9 | .l..y#5.j.E|..Q.
+09 59 21 FC EA B0 63 7B DB B7 0A 72 A2 B5 2D DD | .Y!...c{...r..-.
+AF F4 46 63 D1 AE 3A 9F | ..Fc..:.
+
+Flow Record:
+ RecordCount = 14
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1608
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132217356 [2024-04-15 00:03:37.356]
+ last = 1713132217536 [2024-04-15 00:03:37.536]
+ received at = 1713132302717 [2024-04-15 00:05:02.717]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 63066
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 7012
+ src addr = 13.224.103.47
+ dst addr = 157.143.34.100
+ out packets = 13
+ out bytes = 1676
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.294 ms
+ srv latency = 0.000 ms
+ app latency = 0.126 ms
+ in payload = 1428
+ TLS version = TLS 1.3
+ ja3s hash = 16a232c6047ab4c7f493b826d419a8be
+ ja4s hash = t130500_c02f_a241d087c239
+16 03 03 00 63 02 00 00 5F 03 03 B6 34 33 F2 88 | ....c..._...43..
+78 52 42 1B 23 B5 25 06 E1 C5 F1 43 8E EA 02 12 | xRB.#.%....C....
+E8 BD 2C 44 4F 57 4E 47 52 44 01 20 A8 D8 47 33 | ..,DOWNGRD. ..G3
+1B CD 04 21 EC 56 BD B4 92 B7 03 50 6D 06 8A 40 | ...!.V.....Pm..@
+19 F1 9D 9C 44 0A 13 97 69 C2 4A 8A C0 2F 00 00 | ....D...i.J../..
+17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................
+00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................
+8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0....
+03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g..
+C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H...
+01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U..
+13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A
+6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U....
+41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048
+4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000
+30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359
+35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U....
+74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0..
+09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............
+00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(..
+62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N
+E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b%
+4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?.
+47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. .
+49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_...
+CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3
+91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P.
+82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+
+B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X..
+B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._.
+C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X.
+E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^
+60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9.
+51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E
+16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L
+0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<.......
+82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#..
+30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;;
+50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U...
+16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k.
+04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z
+30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..*
+2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com..
+77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t
+69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*.
+74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid
+61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U.
+0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U.
+25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........
+08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U..
+04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http
+3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama
+7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m
+30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0
+0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+
+06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+
+06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http://
+6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo
+6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+.
+01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c
+72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont
+72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c
+65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0.
+30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y...
+04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v....
+64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F
+7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq......
+89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!.
+C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..'
+CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*...
+02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux..
+7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$..
+63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j
+02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,....
+AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w....
+03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%.
+2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g...
+46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../...
+EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{...
+4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v....
+6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql
+BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H......
+89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!.
+86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV.......
+DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7
+02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......}
+0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:.
+59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H.......
+00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]]
+D3 9D AC B4 | ....
+
+Flow Record:
+ RecordCount = 15
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 12 15 17 29
+ size = 1552
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132383422 [2024-04-15 00:06:23.422]
+ last = 1713132383682 [2024-04-15 00:06:23.682]
+ received at = 1713132487351 [2024-04-15 00:08:07.351]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 51203
+ src tos = 0
+ fwd status = 0
+ in packets = 10
+ in bytes = 5830
+ src addr = 172.217.168.3
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 11.892 ms
+ srv latency = 0.000 ms
+ app latency = 12.273 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 8B 6A FF 3D D8 | ....z...v...j.=.
+80 07 13 E3 58 50 71 3F 59 82 6D E4 84 79 91 A6 | ....XPq?Y.m..y..
+4F 49 70 98 49 76 7F 09 6B 17 B9 20 82 74 02 0F | OIp.Iv..k.. .t..
+67 B4 15 96 F5 76 60 19 36 1A 59 CC 40 18 6C 70 | g....v`.6.Y.@.lp
+CF D5 A6 5F CE 26 99 60 E0 00 F9 3F 13 01 00 00 | ..._.&.`...?....
+2E 00 33 00 24 00 1D 00 20 30 B0 9E DB 3B 2C BE | ..3.$... 0...;,.
+E9 EB C1 01 12 54 BD 2D 6D 7C DC 91 C8 10 3E 50 | .....T.-m|....>P
+21 38 B3 BF 0D 17 B3 23 2E 00 2B 00 02 03 04 14 | !8.....#..+.....
+03 03 00 01 01 17 03 03 10 5C 1B 1C E6 64 5E F0 | .........\...d^.
+BC 23 4E CE 2F 95 23 32 32 F0 D1 C5 ED 6F 22 B2 | .#N./.#22....o".
+61 F3 E0 FD 3D 9A B1 EB 4E 0C 84 31 67 3D 12 24 | a...=...N..1g=.$
+3A 60 85 48 30 FF 7C 88 15 33 F6 4E F7 61 69 8E | :`.H0.|..3.N.ai.
+3B 30 A8 13 DE 16 39 58 16 2E E0 3B 83 1F 8B D6 | ;0....9X...;....
+D8 4E 0A 3C 51 EF D5 AB 44 CE 79 0D 9D 24 FB 9C | .N.
+AD D5 BB E6 86 80 3A 13 19 AB EA 8B E0 C3 9F 56 | ......:........V
+EC 27 56 2B 98 40 10 71 D1 5E C9 59 11 B4 93 53 | .'V+.@.q.^.Y...S
+A5 F5 CE A3 65 77 54 07 35 AC 0D 66 04 DF 75 7E | ....ewT.5..f..u~
+4B 98 BD 6A 8E AB 02 C7 EB AA 0C 07 5B 13 B7 7D | K..j........[..}
+25 7B 62 D2 BD 07 09 D2 7C 7B 25 23 7D 46 BE 4E | %{b.....|{%#}F.N
+3C A0 DE 29 29 00 4A 09 68 A8 01 C9 DF 8C ED 0E | <..)).J.h.......
+AE 80 6E 39 37 D2 B0 30 97 72 A0 3F 1F 69 E6 03 | ..n97..0.r.?.i..
+DA F7 C4 2F 9F 38 1E 1F 26 63 7B EE E5 A0 48 30 | .../.8..&c{...H0
+AF 8B E5 53 69 49 6D 6C 25 B6 67 43 56 8F 6A 97 | ...SiIml%.gCV.j.
+03 33 68 7A 3C 2C 00 7E 0C 3D 85 20 76 FC E0 9D | .3hz<,.~.=. v...
+4E 64 1B 0F 78 31 F7 B5 81 C7 FB 29 0E F2 A5 24 | Nd..x1.....)...$
+37 FD BF A2 3D 53 A7 BE 23 4A 38 3F 55 97 E3 27 | 7...=S..#J8?U..'
+90 0D 67 84 F7 26 7D 50 9F E6 4B 28 0D 5F BE 65 | ..g..&}P..K(._.e
+70 3E 32 3B C0 E9 CB 56 DD 0D 3D E9 C0 AA F8 0F | p>2;...V..=.....
+6E CF 57 A6 40 CE D9 D8 1C D9 2D 03 E1 C9 E0 C0 | n.W.@.....-.....
+9E 9F 70 14 07 19 5C 94 7B CF 57 48 7C C0 53 C7 | ..p...\.{.WH|.S.
+93 C3 F3 CE BE 95 1E 8C 91 DF 20 4E E8 EE 9F 0B | .......... N....
+CC 5A 8D F0 73 88 64 E6 8F E1 3F E9 A8 F1 90 7E | .Z..s.d...?....~
+FB C0 2D 64 70 63 9B 1C 79 3F 48 00 8D B5 9B 40 | ..-dpc..y?H....@
+5F 56 6B 6F C0 15 B9 6C 70 22 3E C8 8C DB BC D5 | _Vko...lp">.....
+AC 93 7D 61 26 2E C4 7F 84 2F F1 91 9D 19 64 17 | ..}a&..../....d.
+6E 63 E0 3B 31 E7 09 B2 5F E2 B8 12 E1 0E DC DF | nc.;1..._.......
+D8 39 E7 42 5F FD E7 DE BC C3 12 B3 40 C3 47 C2 | .9.B_.......@.G.
+8D 56 57 98 A0 E1 F3 80 23 C5 40 F2 0C A7 12 94 | .VW.....#.@.....
+F1 2E EF B0 CD 47 60 FF 0E C0 F4 0E 1E 0C E4 BD | .....G`.........
+BF C5 4F 95 D9 5C 57 C0 42 C1 2F 5D 92 BB 89 BF | ..O..\W.B./]....
+68 13 46 27 E3 C1 2F 79 AB F4 77 F0 DF 42 9B 38 | h.F'../y..w..B.8
+28 6D 5B FE 17 BC AB F8 36 44 75 73 CF 54 2A E2 | (m[.....6Dus.T*.
+F3 00 A0 57 7C 80 2F D7 6A 45 D1 C0 80 D4 B9 86 | ...W|./.jE......
+09 EF D7 50 06 EB 3C 04 E3 B1 02 53 9F 7E ED 82 | ...P..<....S.~..
+32 87 23 39 5A C3 06 58 33 F4 DB E3 4C EE 32 0B | 2.#9Z..X3...L.2.
+9A 30 DC D5 E3 E3 50 1B 41 76 2C E3 CD 95 97 1F | .0....P.Av,.....
+5E BA 6F 14 72 BB 07 1A B0 A2 DA B7 EC C2 0A 97 | ^.o.r...........
+44 51 D1 19 BB A4 77 29 8C D2 2B AD 68 DA C5 D9 | DQ....w)..+.h...
+7B 07 A8 09 8D FA A7 CC E0 1C F9 13 6D 56 EC 88 | {...........mV..
+AD 45 C7 76 0E 5D 19 44 74 82 CD B3 23 68 96 71 | .E.v.].Dt...#h.q
+2C 89 02 CA C1 0C 3C 81 70 51 A3 97 94 76 42 29 | ,.....<.pQ...vB)
+58 54 9D 04 C3 41 7C FC A5 0B 5D 50 2E EF 1C 3B | XT...A|...]P...;
+AD 61 1A 9C 0B 84 D2 01 D1 DC 79 E8 98 94 9C 81 | .a........y.....
+F2 81 DA FC 31 A7 62 21 E9 06 EA 95 01 A9 32 A2 | ....1.b!......2.
+71 F9 0A CF C4 20 AA 27 15 BA 63 9C DE 77 00 C9 | q.... .'..c..w..
+46 F6 FC 6D E0 DE 8F 80 DD FC 52 90 5B FD F4 72 | F..m......R.[..r
+8C 8F DE EF 9F 9F FD 9B 16 1D B3 01 CD 7E D6 5B | .............~.[
+D0 1A 56 B1 6D 05 B1 B3 7A FE 16 F8 CB A6 2B 7B | ..V.m...z.....+{
+12 89 93 A9 FF 8A 6B CF 0B 93 F3 6F 18 CE C7 EF | ......k....o....
+8F AF 96 8F DA F0 4F DC 07 35 F3 83 F8 C6 04 57 | ......O..5.....W
+A2 05 74 9C C0 AD 12 9D 7C 84 84 E5 84 52 33 0C | ..t.....|....R3.
+52 DB 74 C2 3E E8 5A A8 40 73 D4 26 C2 F4 67 5E | R.t.>.Z.@s.&..g^
+42 F4 F9 11 73 DD B8 47 18 06 B9 C5 10 A7 1F BE | B...s..G........
+DD 6E BF 9B 0F 1A 25 1C 97 37 6D 8B FD 34 C4 1C | .n....%..7m..4..
+1D D8 EA A2 B0 CE B1 EA 19 A1 CC 80 B8 54 4C B3 | .............TL.
+3A 61 DD CC 71 A5 19 56 D2 19 5C 31 03 5F 45 70 | :a..q..V..\1._Ep
+4D 19 E0 F6 10 AA F4 62 07 CB F4 23 13 09 4C 8E | M......b...#..L.
+00 02 00 3E A0 E5 01 07 1D 85 C9 2B 14 18 C7 34 | ...>.......+...4
+24 3F 76 2E 45 0A 49 3F BC 0C 3C 5D 95 9F FE F7 | $?v.E.I?..<]....
+61 25 43 C9 83 25 BB 6B D8 C3 EF AE 0C 44 0F F4 | a%C..%.k.....D..
+40 0C F5 0C 5F CE 4D DF 07 95 DE B9 C3 BC 51 A8 | @..._.M.......Q.
+C7 0F 55 50 46 41 64 FB 6B 8D 48 3F 49 75 1B DE | ..UPFAd.k.H?Iu..
+37 0F F5 86 6F 90 48 4D 46 B6 30 D2 9F 0F 24 76 | 7...o.HMF.0...$v
+93 A8 93 62 0E A0 F1 7A CC 5F 3D 10 DB B9 C6 EA | ...b...z._=.....
+F4 29 82 A5 9B 97 9C AC 3B 9D 90 4E 4A 64 1B 06 | .)......;..NJd..
+E4 F0 C0 E7 A0 E4 5B B2 FF 40 DA A4 4E 95 80 43 | ......[..@..N..C
+5C E7 F7 37 32 6B F7 AB ED 11 CE 49 21 B8 F0 F4 | \..72k.....I!...
+40 21 57 19 F1 CF 88 A2 A9 A5 13 C4 5D A7 4B 88 | @!W.........].K.
+80 C7 A6 85 52 A4 F6 1F 39 50 DB 40 E2 E4 E4 DF | ....R...9P.@....
+22 5F 0F B8 66 D5 6A 43 D3 27 E6 D3 CA A0 4A A6 | "_..f.jC.'....J.
+25 38 34 4F CC C6 7D 67 03 24 0C 40 3D 5C C6 24 | %84O..}g.$.@=\.$
+FC 9B 32 35 C3 C5 6C 02 | ..25..l.
+
+Flow Record:
+ RecordCount = 16
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 5 12 15 29
+ size = 1402
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132381097 [2024-04-15 00:06:21.097]
+ last = 1713132381591 [2024-04-15 00:06:21.591]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 53011
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 9134
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 10776
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+C3 00 00 00 01 00 08 E7 13 B0 C5 BD EF F7 C0 00 | ................
+44 D0 75 F6 A3 03 41 C8 A0 F9 02 4C E7 10 86 9D | D.u...A....L....
+67 D6 F8 F6 AA E1 21 76 FD 84 3B 22 B6 F3 FE 11 | g.....!v..;"....
+76 6F D5 9C 0B EA 10 C1 5F EC D6 60 D0 BD 73 EE | vo......_..`..s.
+7F 77 0F D6 82 1A 86 91 15 BC 80 A7 71 05 D6 9D | .w..........q...
+7C 24 CD E6 F4 3B 7D 09 7F C2 EE 8F 6D 7C 3D 83 | |$...;}.....m|=.
+B6 57 6E 02 94 7B AF 1C 00 A2 00 90 24 03 10 BB | .Wn..{......$...
+3C 02 4F BF 36 CE 45 1E 48 D3 8E 42 5D 17 53 C9 | <.O.6.E.H..B].S.
+FB 54 B9 FD AF 01 0D 9D 6D 94 7A B7 7B 6E 32 22 | .T......m.z.{n2"
+C6 FB 4F C3 0F AC F0 8F 74 6C B3 FF E8 FB 19 B9 | ..O.....tl......
+8D C3 44 F9 A3 76 37 DD C0 BB 17 C2 24 34 A8 3E | ..D..v7.....$4.>
+70 27 1B CC 83 3A F0 18 77 70 A5 03 BB 0B 2F 11 | p'...:..wp..../.
+1A E1 D0 F8 7B A7 AF 78 AF DC 4F 92 31 B7 13 38 | ....{..x..O.1..8
+CB A7 87 6C F5 00 39 43 2F 44 AC BB 06 50 0E EA | ...l..9C/D...P..
+1E D2 0C 96 C8 08 76 C5 7C D9 78 94 AB 24 AA 13 | ......v.|.x..$..
+23 4C A3 10 F4 2C FB 27 46 A1 7F 07 F7 54 72 36 | #L...,.'F....Tr6
+4F 09 9E A2 5F 78 78 91 83 F0 4D 43 B9 48 AB 43 | O..._xx...MC.H.C
+0B EA C0 F8 74 49 BA C3 ED 78 EC 99 EC C3 22 F7 | ....tI...x....".
+DF FD 57 09 D2 3D ED D8 A6 A5 51 7F B2 2D 1F 56 | ..W..=....Q..-.V
+7A 43 38 9A 97 7F C2 66 D3 D3 EA 67 1A 4D 19 52 | zC8....f...g.M.R
+98 69 0D 86 D1 93 6F 70 45 15 44 6A 73 64 96 59 | .i....opE.Djsd.Y
+91 31 6A 4E 2A EB F8 ED 51 3B 73 31 31 77 97 2B | .1jN*...Q;s11w.+
+C5 D4 C3 CA 8D C0 FC E4 6B 13 FC 22 8F 65 A6 FC | ........k..".e..
+B1 C1 F7 87 8E 88 FB D2 F8 65 BA 7F 9D 30 D1 4D | .........e...0.M
+0A CE FD 0A A4 A4 88 D1 2C 2A 05 FF 9C 5B 9E 20 | ........,*...[.
+4F D4 6F 56 DA D5 3C AA C9 A7 B2 CE B5 B3 27 43 | O.oV..<.......'C
+EF BB BF 8F 1A 2E A5 71 1D 08 AA A2 53 2A D8 41 | .......q....S*.A
+E0 6D 43 49 47 09 07 D3 64 EE 29 60 24 63 6A B3 | .mCIG...d.)`$cj.
+39 87 10 DC 5E AA E7 5A 50 8B 4F 96 AE 14 35 8D | 9...^..ZP.O...5.
+4A 30 88 03 DE 99 86 A4 FE B4 07 CC C8 9C 4A 3D | J0............J=
+96 54 33 36 61 12 C8 87 3B A4 D3 72 75 E0 5F 4E | .T36a...;..ru._N
+A9 8A 22 C8 C9 04 5A 64 73 3B 90 96 8D BA 66 3C | .."...Zds;....f<
+C9 B0 86 43 3B A2 F9 FF BF 2B 79 12 65 36 6C 3B | ...C;....+y.e6l;
+95 00 C6 9C 8D B8 5F 9D 5B FE BF 5F C6 92 C4 A5 | ......_.[.._....
+19 A7 DB 60 F7 DE 55 51 95 90 26 84 BD 2B 98 D9 | ...`..UQ..&..+..
+6E 1C 83 BC 12 DC 11 30 88 E5 64 F5 E4 D5 A2 0E | n......0..d.....
+62 54 2E 53 4C DC 36 7F 83 8C A9 F7 BA 31 3B F4 | bT.SL.6......1;.
+DD 39 E4 55 C4 32 AD D0 6C F9 91 55 52 B4 0D DF | .9.U.2..l..UR...
+12 3A 38 1B B4 E5 76 80 FB 6D 54 89 00 63 D0 9E | .:8...v..mT..c..
+0C 39 E4 95 E3 31 82 3F 8D CF 52 C6 58 D3 B0 8E | .9...1.?..R.X...
+65 57 EE C9 A6 54 8A E9 D3 66 4F 44 3F 10 3F 09 | eW...T...fOD?.?.
+84 3A 69 91 3C D5 6B 7F 71 E5 3E AC AE 7D 1A 27 | .:i.<.k.q.>..}.'
+D5 06 72 CC 7D 8B 1C E1 2F 57 56 FD 17 62 27 E2 | ..r.}.../WV..b'.
+B5 9D AB 2B C1 ED 19 2A CF A3 76 C3 D5 0A 45 F0 | ...+...*..v...E.
+89 2C 96 E0 57 20 09 37 4F ED 4E 86 EE 5B 16 9B | .,..W .7O.N..[..
+34 DB 86 27 1A 5B 94 EE 46 1C BA AF 84 61 87 79 | 4..'.[..F....a.y
+AB BC 1B 99 25 ED 02 EF F1 A7 D4 EB F9 DC C0 BC | ....%...........
+6D 2B 9B D0 E3 19 31 67 CD 25 C9 A9 87 36 A5 1C | m+....1g.%...6..
+23 43 29 72 3E 5D 54 3C 06 CF 0D 7E 9C 9E 36 5C | #C)r>]T<...~..6\
+9A 7E 0A 3B 7C CC 87 A2 B7 0D 62 D1 B3 AB B3 38 | .~.;|.....b....8
+7A 2B 3F 9C 06 DB 58 90 9B F2 B9 B1 24 3F 50 B2 | z+?...X.....$?P.
+09 AA CA 7D C2 6C B1 66 A2 C8 9C 2A 8A 87 3C 61 | ...}.l.f...*..
+69 2D 2D D5 A9 EC 6B 78 F4 A6 1C 9D 2E 6D 48 A5 | i--...kx.....mH.
+7F F3 70 E0 3F 0E 63 CA 43 FD FE B4 62 DD BD 0A | ..p.?.c.C...b...
+18 F9 A0 F4 AD A5 8B 2A 68 ED 80 BE 9D 5C 8A 57 | .......*h....\.W
+CB 97 FD D6 F7 57 D1 FE BF 73 2D 9B FC CF 29 3E | .....W...s-...)>
+E7 07 03 8F D2 BD 77 40 F7 BE CA 13 C7 9F 78 A2 | ......w@......x.
+95 87 5C 8F 98 F0 40 47 88 F7 2E 82 C1 2C 73 5A | ..\...@G.....,sZ
+A5 4D B8 3F A9 4A 02 F6 F7 AB A8 A8 92 0B 39 67 | .M.?.J........9g
+5B CE 54 72 E3 B6 95 F8 9E 9F EC 13 5D B4 54 1D | [.Tr........].T.
+87 05 0E DC D2 68 2D 1D 61 6B FD 4E 71 1E 54 98 | .....h-.ak.Nq.T.
+13 1E C1 3C 60 13 B0 56 7F 83 65 84 BA D8 EE 25 | ...<`..V..e....%
+71 87 91 AD FC 3E BB 5A 17 DA BD C9 2A 4A 88 D4 | q....>.Z....*J..
+0B 7E 5F 07 F1 E1 B3 B1 C2 34 93 A0 2F 36 8D BF | .~_......4../6..
+5E 52 D5 C0 A9 F3 04 97 96 43 53 28 0B 0F 99 6D | ^R.......CS(...m
+AC F7 | ..
+
+Flow Record:
+ RecordCount = 17
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 207
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131973733 [2024-04-14 23:59:33.733]
+ last = 1713132274013 [2024-04-15 00:04:34.013]
+ received at = 1713132302717 [2024-04-15 00:05:02.717]
+ proto = 6 TCP
+ tcp flags = 0x18 ...AP...
+ src port = 58186
+ dst port = 5228
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 1008
+ src addr = 157.143.34.100
+ dst addr = 172.217.218.188
+ out packets = 18
+ out bytes = 1098
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 22.592 ms
+ srv latency = 0.000 ms
+ app latency = 60021.633 ms
+ in payload = 27
+17 03 03 00 16 9B DC 11 55 10 BF F9 A3 22 CC 05 | ........U...."..
+48 4B 8D F8 CE 75 87 33 C8 94 5A | HK...u.3..Z
+
+Flow Record:
+ RecordCount = 18
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 12 15 17 29
+ size = 1552
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132383212 [2024-04-15 00:06:23.212]
+ last = 1713132383255 [2024-04-15 00:06:23.255]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 59891
+ src tos = 0
+ fwd status = 0
+ in packets = 7
+ in bytes = 6183
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 14.087 ms
+ srv latency = 0.000 ms
+ app latency = 12.190 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 13 E1 DC 7D B5 | ....z...v.....}.
+69 92 B1 0C A0 2C 7C C4 38 37 56 94 C6 C2 3B 83 | i....,|.87V...;.
+45 89 8F EA BD C8 39 28 08 49 68 20 30 9B C6 11 | E.....9(.Ih 0...
+6E 0B CF DF 1C 95 F8 BC F5 22 4D 40 FF 75 57 F7 | n........"M@.uW.
+07 93 99 A5 47 45 E0 7D 8D 54 B7 EE 13 01 00 00 | ....GE.}.T......
+2E 00 33 00 24 00 1D 00 20 97 D6 73 BB 08 FC B3 | ..3.$... ..s....
+28 4B 73 E5 F1 82 7D A0 71 92 4F 55 EE 63 2C 20 | (Ks...}.q.OU.c,
+22 F2 2B 12 10 DA 4F D0 43 00 2B 00 02 03 04 14 | ".+...O.C.+.....
+03 03 00 01 01 17 03 03 12 65 79 4A E7 22 BA 6E | .........eyJ.".n
+28 C0 53 AB 67 D1 8C 12 DA 7B 3F 13 4A 0A C6 BC | (.S.g....{?.J...
+B7 47 EC E7 9F 83 D9 90 65 80 BD C9 6C B7 C9 DF | .G......e...l...
+2B BF 9F 34 52 0F 61 28 79 A7 BF 68 D0 47 27 24 | +..4R.a(y..h.G'$
+3A 87 A9 F4 85 ED 88 A5 65 D8 2D E6 D6 59 F9 41 | :.......e.-..Y.A
+91 3D 23 E9 21 DC 44 04 61 39 72 2B 39 B5 55 89 | .=#.!.D.a9r+9.U.
+4C A6 C8 A8 F9 D0 06 E8 CC A5 FD A6 80 40 77 0D | L............@w.
+27 24 BD 8C C3 6D 1E 57 FC 63 3C 79 9D 39 A2 56 | '$...m.W.c
+91 25 C1 3E 20 6F 8F 6D 87 FA CF BE C4 3F 3F B1 | .%.> o.m.....??.
+B9 11 BC F1 3E 74 67 CD 3A F3 F2 B5 68 6D 0A E9 | ....>tg.:...hm..
+45 1A 96 FA B7 82 CC 26 88 42 40 F3 05 DB 81 89 | E......&.B@.....
+2C 63 41 E4 D7 F4 58 9C 29 CF D6 D1 78 0B 59 63 | ,cA...X.)...x.Yc
+EA CD DB AA 45 0D BE 18 14 40 39 12 BE B1 A5 BE | ....E....@9.....
+80 FD 87 14 C5 10 40 8D 72 D1 9D E0 DE 69 1E 28 | ......@.r....i.(
+4D 0C 7C 89 65 44 F3 D3 C8 1F 68 07 A8 DF EF 63 | M.|.eD....h....c
+14 6E 9C 54 5C 53 F4 FF B4 03 14 F6 72 C6 8F A9 | .n.T\S......r...
+89 08 1F 58 44 E2 CA EB 26 CA 1C 57 C6 CB 3C 4E | ...XD...&..W........w#...A...
+20 68 86 2D 02 DA 28 3B CF 4D 62 12 5F 2D 6C 6A | h.-..(;.Mb._-lj
+AB 1C DA 4D 8F 98 AD 10 B5 02 45 64 94 AC 2A 99 | ...M......Ed..*.
+66 12 AC DB B2 8F 14 D1 FB 0B 43 1D BF 07 AA 84 | f.........C.....
+27 93 B2 B0 10 B0 39 06 07 EA 73 CE 1F E8 84 8C | '.....9...s.....
+7C A1 26 B8 B2 43 11 BA C9 19 2F 9C 52 9A DF 17 | |.&..C..../.R...
+2C 37 28 37 8B 3E 73 04 84 76 25 8F E2 A9 56 58 | ,7(7.>s..v%...VX
+31 9E 77 27 2E 17 21 55 EA 58 52 05 FC C9 CB 18 | 1.w'..!U.XR.....
+58 46 07 0E DA CA 4B 62 FA D1 78 F2 DA 07 77 84 | XF....Kb..x...w.
+FE 75 84 85 17 09 E9 E5 B2 26 D8 73 26 36 FA F0 | .u.......&.s&6..
+C5 DF 91 49 9B F9 E2 74 25 40 B8 A1 15 41 00 F6 | ...I...t%@...A..
+FD B1 F1 CE 40 3F 2A 3A | ....@?*:
+
+Flow Record:
+ RecordCount = 19
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131988800 [2024-04-14 23:59:48.800]
+ last = 1713132019757 [2024-04-15 00:00:19.757]
+ received at = 1713132148815 [2024-04-15 00:02:28.815]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 56527
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18599
+ src addr = 17.248.209.66
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 6945
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.998 ms
+ srv latency = 0.000 ms
+ app latency = 0.754 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 1C 7E C7 0C FC | ....z...v...~...
+6D A3 32 54 9E A2 B0 09 49 4D 8A F1 75 55 F9 72 | m.2T....IM..uU.r
+68 5B 28 B5 1D 19 4B 5B F7 A7 85 20 07 EB D9 DB | h[(...K[... ....
+4D D5 2E 83 B5 12 E1 49 AA 70 13 F8 1B 5D 10 87 | M......I.p...]..
+43 3F 20 B8 CA 28 6E 56 CD C8 C0 91 13 02 00 00 | C? ..(nV........
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 E6 | ..+.....3.$... .
+08 A1 60 FE 02 68 AA 96 43 AD 3A 49 56 70 BF DC | ..`..h..C.:IVp..
+66 F1 43 D2 84 9F 34 2D 6C 4F 9D EE DD 96 32 14 | f.C...4-lO....2.
+03 03 00 01 01 17 03 03 00 2A 11 82 49 70 11 B5 | .........*..Ip..
+13 81 E2 1A 42 4B 6C 40 BB 91 D7 86 47 34 A2 1B | ....BKl@....G4..
+A6 46 C9 2A AE 5C 5F E5 BC 66 F7 AE 03 13 DA 0F | .F.*.\_..f......
+A6 F6 24 78 17 03 03 11 25 06 2E 11 AB 37 AD AA | ..$x....%....7..
+E1 B7 13 26 29 8F AB 4E A7 42 2C 8C F2 F2 6E E3 | ...&)..N.B,...n.
+8B 40 E0 F5 6F 18 58 52 64 B4 FF 7A 41 D0 81 11 | .@..o.XRd..zA...
+35 2C 6E 8A 4B 9F DC 71 A7 0B E8 5F EC C2 9D BD | 5,n.K..q..._....
+90 75 AA 44 F5 7C 56 68 60 A9 D8 66 20 1C DD 1D | .u.D.|Vh`..f ...
+01 81 6C CC 7B A9 E3 0A FE 71 85 4C 83 43 06 4D | ..l.{....q.L.C.M
+AF DA 96 03 F2 EF E4 78 49 7B 13 37 5F 8B 77 89 | .......xI{.7_.w.
+6E B8 D5 80 85 8A C2 12 EE C2 E5 93 5C 22 EC 42 | n...........\".B
+E6 FA EC 39 EA 33 9F 94 7F 82 C6 D1 EB 77 22 4B | ...9.3.......w"K
+EA FF 80 1B 75 73 84 34 63 EF FD 9F 8C 65 14 61 | ....us.4c....e.a
+6C 54 59 54 44 78 8B 0B C1 2F 7B E7 EB 89 E4 5D | lTYTDx.../{....]
+B6 4A 1B FF E0 97 03 2E DC F9 01 F4 89 D7 4A B8 | .J............J.
+8A 52 11 DB B7 07 8A 18 A1 B6 7C 52 30 55 14 9A | .R........|R0U..
+1F DF 4C E8 E6 A5 C4 CB F8 DE 13 67 E2 59 9E 93 | ..L........g.Y..
+35 62 46 F0 D4 E2 8A 29 07 65 96 FB 8E E1 F9 27 | 5bF....).e.....'
+C6 CE 8E F3 01 57 79 A5 E5 88 C2 05 7F 64 55 74 | .....Wy......dUt
+BB F6 9D 0F F7 3D F2 3C 7E 80 F9 03 B4 FB 4D D1 | .....=.<~.....M.
+5E 09 FB 55 F9 0D 98 35 24 0E 4C 09 CD C3 02 A8 | ^..U...5$.L.....
+B4 10 51 F3 29 24 68 F6 C0 53 EC 4D 83 BD 29 BE | ..Q.)$h..S.M..).
+E5 F6 21 3C D1 96 91 6C D5 A9 56 42 F5 2B 2D F1 | ..!<...l..VB.+-.
+AF 20 B5 E1 9E 3A 15 BA 44 55 BC 3F 99 72 72 EB | . ...:..DU.?.rr.
+9B 5A 9B 84 CC 57 FE 3A 34 73 2D F7 F3 2E FD 3E | .Z...W.:4s-....>
+46 92 39 71 B6 3A FC 55 BF B2 25 1C E6 3E BE 1B | F.9q.:.U..%..>..
+08 0F 08 FD 8D E8 85 D2 71 6F E0 19 7D 31 28 BF | ........qo..}1(.
+8C 2A 5D 7F 20 94 E5 00 86 7D 3F 0B AA 44 27 81 | .*]. ....}?..D'.
+78 A7 29 FC FA 5D F1 AD B6 25 D1 1D DF 01 BA 83 | x.)..]...%......
+7D A7 1E 23 E2 56 0F 25 51 97 AE 33 ED A3 FD A0 | }..#.V.%Q..3....
+02 C0 EA CD 07 AE 6A F1 B5 43 AC E7 FE A5 54 01 | ......j..C....T.
+BD 1E BA A9 C7 A5 61 43 0B 3B 4A B8 00 CA 26 EB | ......aC.;J...&.
+5D 91 F2 CD 55 91 E3 10 30 54 FD 51 C5 7F 5D 73 | ]...U...0T.Q..]s
+93 32 7A A7 8E 6E B7 A9 24 AB DD D8 33 8D F0 E3 | .2z..n..$...3...
+83 48 FB 94 30 25 27 73 A5 F2 C0 A1 5C 34 9F 03 | .H..0%'s....\4..
+8B 9E C4 DB D2 D9 C0 AA 50 41 27 06 A6 C8 C1 64 | ........PA'....d
+E7 CF 05 FB FB A9 30 09 4A 19 8C 0D 80 81 59 15 | ......0.J.....Y.
+98 CD 44 33 95 9B E8 48 FA F2 BD 2F 98 B5 79 6A | ..D3...H.../..yj
+D7 61 FD 0A 4E 68 CE 5C CA FC 14 D0 C5 84 FD 06 | .a..Nh.\........
+B7 85 E8 1A 76 92 27 9F C7 F7 68 F8 78 BC 59 E6 | ....v.'...h.x.Y.
+DE 27 99 D4 7D F8 42 5D 29 52 FA 61 34 3E DE C0 | .'..}.B])R.a4>..
+08 F5 D2 D1 B6 70 6B A7 04 F9 44 F2 54 AB F0 47 | .....pk...D.T..G
+44 41 26 29 B4 8C 32 6F C4 2F 21 82 1D B4 D1 0B | DA&)..2o./!.....
+BB DE 69 66 BD D8 8C 60 8D C6 19 35 1E 26 C1 DD | ..if...`...5.&..
+28 48 12 38 1E 60 B8 17 84 94 B2 76 26 37 52 CE | (H.8.`.....v&7R.
+EB FD 05 EF 53 9F 3E 12 2B 8A 18 AF 2A AC B2 5D | ....S.>.+...*..]
+C8 E1 07 3C 46 14 72 F1 B6 99 CF 4D 33 5D DD 1C | ......
+2A 86 4C 35 C1 FD 02 FD 46 F5 AD F5 D5 84 E5 AF | *.L5....F.......
+04 9A 33 96 A7 39 5D B9 B5 CB 2C 3D A2 73 FB 82 | ..3..9]...,=.s..
+CA 69 71 3A 4C 37 64 EF E6 43 2E AE F9 94 8A 99 | .iq:L7d..C......
+0C 7B C9 B1 AF 72 FB 35 70 44 5F 68 F9 AA 27 1C | .{...r.5pD_h..'.
+66 26 3C 6E 66 08 2B D9 87 4C CF 0E 60 EE 38 D2 | f&].. .(.....
+CD EC 83 28 8D 6D 05 2A 1F 7E 80 80 35 EA 6E 48 | ...(.m.*.~..5.nH
+5B A2 02 32 8C 1D 40 1F 31 9C 13 35 9E 2E 8B 97 | [..2..@.1..5....
+CC 2C F3 5B C9 70 0B FE C7 AE B7 8D FE D2 A5 A7 | .,.[.p..........
+33 2D 28 54 C3 CE 3D 3F 7B E3 93 51 E2 30 4F CC | 3-(T..=?{..Q.0O.
+07 08 14 C0 CE 87 BA A8 02 46 57 73 D7 5A D7 E4 | .........FWs.Z..
+04 F7 5D 21 7A F9 01 D5 36 B2 5F 74 4F 59 BE 6E | ..]!z...6._tOY.n
+71 F3 2D E2 FA AD 66 8B A5 AA 5F 3B DE 92 24 5A | q.-...f..._;..$Z
+DB 80 39 86 E3 05 24 A5 FA D4 65 F6 B2 A2 05 47 | ..9...$...e....G
+F9 0F 44 07 E8 5F 93 2D 8F EB CE 4E AF 41 34 7E | ..D.._.-...N.A4~
+07 66 4E 08 E6 EE C0 11 E9 84 3F 8C 0D A1 44 39 | .fN.......?...D9
+47 2D 06 A8 FC 56 44 DB FE C1 CE 7A BB F2 D4 6B | G-...VD....z...k
+D4 59 47 1B 9F B4 A3 D1 2B 20 80 7C DD 53 03 13 | .YG.....+ .|.S..
+CE 45 03 E8 BF 27 4F 4E 19 2B 1E 6B 77 86 43 B1 | .E...'ON.+.kw.C.
+CE E3 04 8F 7D 39 B9 1E 07 38 43 FE 97 97 89 D9 | ....}9...8C.....
+F2 B0 C2 0B 63 B3 3E 72 62 B3 39 07 77 88 30 BF | ....c.>rb.9.w.0.
+A9 15 FF C8 45 2D 85 39 35 0A 92 8F 7B 36 70 7F | ....E-.95...{6p.
+D4 90 1D 48 19 9A 94 9D F1 D0 84 90 DF A5 23 7A | ...H..........#z
+51 53 B2 A6 9C D7 FB 39 C0 17 CC 2D 7D 91 1E 14 | QS.....9...-}...
+A1 6F 07 5C 99 86 97 8C 48 5B 79 55 10 2D 60 3C | .o.\....H[yU.-`<
+F9 20 83 DD 67 5D 55 E7 55 59 59 C3 DC E1 B0 D0 | . ..g]U.UYY.....
+B5 A2 43 E2 72 D0 CC 69 20 92 D3 5C 03 DA AF 3D | ..C.r..i ..\...=
+DF 60 BC 86 10 F3 A4 0F 63 7F B4 52 2F FE 7C 76 | .`......c..R/.|v
+3A 3D 75 65 F3 9B 07 8F C4 AF B2 95 AA 72 F0 15 | :=ue.........r..
+CE A8 85 D6 B3 16 10 A4 22 77 54 61 13 BB A8 A1 | ........"wTa....
+57 4C DE 92 81 E9 39 2C DF 97 78 F5 DB AB C6 26 | WL....9,..x....&
+7C FB 02 49 A4 91 16 9B 40 83 10 E5 C5 BA 48 D5 | |..I....@.....H.
+C3 83 90 65 EE 34 1B AD 85 6C E8 9B 95 4D 7C 6E | ...e.4...l...M|n
+46 1C E9 B3 C5 FA B3 80 AF DB 46 81 95 91 B9 7F | F.........F.....
+85 01 00 96 A9 8D AF 79 82 82 F3 4E B3 F9 16 C0 | .......y...N....
+64 CF 15 B4 80 A1 5F AF 7F 13 76 20 A2 25 B8 F8 | d....._...v .%..
+89 9C 8C 6B 54 53 9C E0 41 47 AA FC 58 20 E7 6F | ...kTS..AG..X .o
+77 47 A0 E0 00 00 00 01 00 08 F5 2F 5E B8 7A 96 | wG........./^.z.
+2F 0C 40 DC A5 62 B8 43 14 9B 03 D9 9D AC FD 15 | /.@..b.C........
+18 C8 37 F8 36 48 2B 23 95 87 69 A0 EF C0 FB F7 | ..7.6H+#..i.....
+72 F4 5A BD 20 92 D4 A5 7D 71 5F 2E 94 4B FA 82 | r.Z. ...}q_..K..
+50 F2 9A C4 E2 4B 8D E0 B7 3E E1 21 34 EF 5F 83 | P....K...>.!4._.
+DF 78 BF 09 8F 55 FC 0F 00 EB 2E 5F D8 6C 07 79 | .x...U....._.l.y
+88 53 1D FC DE F9 4A BE 7A E3 3F 2B 75 01 97 78 | .S....J.z.?+u..x
+66 8E E6 C0 30 D7 8F 53 0C 9D 2F 39 3A 27 56 20 | f...0..S../9:'V
+56 A6 1B E4 87 DE F8 AC 1B 32 5D 85 7A B5 AA 35 | V........2].z..5
+89 39 8B C0 40 60 D2 00 58 69 AE ED 16 52 23 E3 | .9..@`..Xi...R#.
+D2 4E 0B EE 1C 4C FE 8B A1 55 2D 41 E7 9E 0B 89 | .N...L...U-A....
+C6 D2 86 68 E7 D9 24 8A B3 C4 BD 15 82 56 8B F0 | ...h..$......V..
+2D 6D 9C 35 CC 4A 2C 10 EB 76 94 A5 10 FB 59 68 | -m.5.J,..v....Yh
+C4 A4 7D 5B 0D FC 1E E3 BE 64 A9 AF D6 DA DE 81 | ..}[.....d......
+EA 99 92 3F 4E BE 74 61 0F FC 9D 85 46 01 05 8F | ...?N.ta....F...
+45 25 EF 18 E8 76 47 39 48 99 AA 13 A0 7E 7D B7 | E%...vG9H....~}.
+E3 FF AE F4 17 45 8D 26 8A D2 AC 6D C7 3B 7D 97 | .....E.&...m.;}.
+39 6F 8A 28 C8 BB 6D 2B CD 74 4B 14 CD 2B C7 B1 | 9o.(..m+.tK..+..
+B1 78 8E C5 6C A7 2D 98 88 BD 08 9D 2D 74 58 F8 | .x..l.-.....-tX.
+6F C0 | o.
+
+Flow Record:
+ RecordCount = 22
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 697
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132261362 [2024-04-15 00:04:21.362]
+ last = 1713132262789 [2024-04-15 00:04:22.789]
+ received at = 1713132344717 [2024-04-15 00:05:44.717]
+ proto = 6 TCP
+ tcp flags = 0xdf CE.APRSF
+ src port = 61426
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 2093
+ src addr = 157.143.34.100
+ dst addr = 2.21.22.179
+ out packets = 14
+ out bytes = 11736
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.926 ms
+ srv latency = 0.000 ms
+ app latency = 0.376 ms
+ in payload = 517
+ TLS version = TLS 1.2
+ sni name = weather-data.apple.com
+ ja3 hash = 5d5dfdf4aa8c9df35f686abcc6af682b
+ ja4 hash = t12d2014h1_a09f3c656075_14788d8d241b
+16 03 01 02 00 01 00 01 FC 03 03 7D 64 24 23 B0 | ...........}d$#.
+E7 C4 36 01 A0 3D 33 4A BC FE 74 FD 4E B6 7A 8E | ..6..=3J..t.N.z.
+8E B3 5F 1F B3 D9 FD 8F 20 B6 D0 20 07 D2 65 9F | .._..... .. ..e.
+8D 6D 56 BB 2D 2D 89 D1 22 8F 59 6F B1 25 1D 5D | .mV.--..".Yo.%.]
+1F 68 C6 AF 0F 78 8D F1 52 58 85 C6 00 2A DA DA | .h...x..RX...*..
+13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./
+CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5
+00 2F C0 08 C0 12 00 0A 01 00 01 89 7A 7A 00 00 | ./..........zz..
+00 00 00 1B 00 19 00 00 16 77 65 61 74 68 65 72 | .........weather
+2D 64 61 74 61 2E 61 70 70 6C 65 2E 63 6F 6D 00 | -data.apple.com.
+17 00 00 FF 01 00 01 00 00 0A 00 0C 00 0A BA BA | ................
+00 1D 00 17 00 18 00 19 00 0B 00 02 01 00 00 10 | ................
+00 0B 00 09 08 68 74 74 70 2F 31 2E 31 00 05 00 | .....http/1.1...
+05 01 00 00 00 00 00 0D 00 18 00 16 04 03 08 04 | ................
+04 01 05 03 02 03 08 05 08 05 05 01 08 06 06 01 | ................
+02 01 00 12 00 00 00 33 00 2B 00 29 BA BA 00 01 | .......3.+.)....
+00 00 1D 00 20 4C F5 50 53 0E 60 45 CA 05 46 91 | .... L.PS.`E..F.
+5F 2E 88 C2 12 9D B0 26 0B 41 D6 42 64 14 74 8E | _......&.A.Bd.t.
+0C 5D 1E 7D 53 00 2D 00 02 01 01 00 2B 00 0B 0A | .].}S.-.....+...
+9A 9A 03 04 03 03 03 02 03 01 00 1B 00 03 02 00 | ................
+01 1A 1A 00 01 00 00 15 00 BB 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 | .....
+
+Flow Record:
+ RecordCount = 23
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1580
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132373946 [2024-04-15 00:06:13.946]
+ last = 1713132374109 [2024-04-15 00:06:14.109]
+ received at = 1713132441667 [2024-04-15 00:07:21.667]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 62402
+ src tos = 0
+ fwd status = 0
+ in packets = 13
+ in bytes = 9207
+ src addr = 172.217.168.46
+ dst addr = 157.143.34.100
+ out packets = 14
+ out bytes = 2093
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 77.332 ms
+ srv latency = 0.000 ms
+ app latency = 12.450 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = 907bf3ecef1c987c889946b737b43de8
+ ja4s hash = t130200_1302_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 D5 71 BB B1 1A | ....z...v...q...
+95 66 F2 88 85 6C F4 36 A9 82 04 93 1B 8F B1 9A | .f...l.6........
+0A 0D BA 3A BA 0F A7 24 71 07 5F 20 66 D7 B6 F8 | ...:...$q._ f...
+AA AB 07 E8 E6 60 09 15 05 4D D8 2B 5B B8 7E 1F | .....`...M.+[.~.
+1F 55 20 C5 CF B6 48 CF 77 B4 DD 8A 13 02 00 00 | .U ...H.w.......
+2E 00 33 00 24 00 1D 00 20 61 8D 3B 33 BC 4C C7 | ..3.$... a.;3.L.
+6C D4 C0 38 D7 48 73 09 48 FB F9 5E BE E9 FD BB | l..8.Hs.H..^....
+56 71 77 42 70 3F 63 38 21 00 2B 00 02 03 04 14 | VqwBp?c8!.+.....
+03 03 00 01 01 17 03 03 1A 22 F1 BA 35 AF F6 99 | ........."..5...
+A6 19 1C 08 09 BD EC 85 39 91 44 9A 56 06 02 10 | ........9.D.V...
+A7 8E 6A 7E 06 03 7C 50 F7 DB 4D 49 F8 3B 9C 74 | ..j~..|P..MI.;.t
+62 0C EA B7 24 C3 F5 11 09 B0 7B D6 BB 2D 88 BC | b...$.....{..-..
+3E 63 42 58 2A 33 DA 1F 90 C9 35 C4 A5 61 C6 92 | >cBX*3....5..a..
+FA 88 A4 C6 FF A5 FB AB 7D E5 C1 DC 1B 73 EA F8 | ........}....s..
+DF 10 21 D8 E6 B3 64 7B 6B B9 E1 77 6F AF 31 1A | ..!...d{k..wo.1.
+87 AF 31 EA D7 8B 2B 67 CF 87 C3 C8 A1 43 D9 DA | ..1...+g.....C..
+39 7C 24 0E 29 87 92 4B ED D0 3F 74 DC 21 44 15 | 9|$.)..K..?t.!D.
+47 9C 30 8A 22 33 6A 21 69 8B 7C 24 6E 49 3D D2 | G.0."3j!i.|$nI=.
+E3 42 CF A8 3F AC F1 A3 97 B0 82 78 19 56 5E 3E | .B..?......x.V^>
+17 91 A1 30 3A E9 4C 4D 5A 05 B0 51 E8 48 58 77 | ...0:.LMZ..Q.HXw
+9C CF 0D 10 43 8E B6 22 C2 9A 95 10 F1 14 8C B0 | ....C.."........
+E3 DA 29 F0 91 41 A7 59 CD 45 A5 FB B9 73 9E 4A | ..)..A.Y.E...s.J
+D3 DB D6 5C 32 C5 D9 EC 71 AF 67 CE FD C6 3A 0E | ...\2...q.g...:.
+17 B6 FE E8 98 22 F3 73 81 47 32 05 39 3B FF BD | .....".s.G2.9;..
+00 3B F3 93 00 D8 45 C3 7F 7E C5 BE CD 96 58 08 | .;....E..~....X.
+43 C9 30 86 91 22 03 8F F8 8A 6D 54 62 C9 59 74 | C.0.."....mTb.Yt
+F4 DF 0C 7D D7 FE 9A 51 85 AB D8 EA 59 DF ED DD | ...}...Q....Y...
+17 C8 B0 F7 6C 53 AB 80 BC 1C 3A CB E7 DE 9E D5 | ....lS....:.....
+4C E1 0A F5 30 D5 31 0F 87 C5 C5 5B 7F 90 81 D7 | L...0.1....[....
+03 7F 35 39 F6 B1 15 A2 09 F3 11 34 F8 69 35 A3 | ..59.......4.i5.
+E7 BB 74 48 6C A6 97 38 65 0A AB 65 A3 AC 6F 03 | ..tHl..8e..e..o.
+D8 11 2C 54 7E 2B D8 17 90 1A 1A 44 FC FA C7 1D | ..,T~+.....D....
+0C 15 C5 89 1E EB C5 B1 8A 4B 68 A4 E5 DD 17 DB | .........Kh.....
+9D 04 01 66 4E 91 8D 7E FD FE 2D 8A 7D 29 CB 85 | ...fN..~..-.})..
+38 81 40 85 AB 0D 7F 90 65 C0 EF 06 98 F0 23 8D | 8.@.....e.....#.
+5E 0E DB 56 4A E7 67 5A 5A 09 4C 91 94 6A 55 01 | ^..VJ.gZZ.L..jU.
+6D 39 72 3E F4 47 E6 3E 7C F7 BC C4 47 5D 53 9A | m9r>.G.>|...G]S.
+8B 37 58 F8 BC 6A B6 41 42 85 86 FE 48 B7 38 3B | .7X..j.AB...H.8;
+D2 90 A8 C0 74 5A 83 FF 20 4C 89 AD DE 53 DC 7E | ....tZ.. L...S.~
+63 2F 6B 4A 00 A8 F8 28 87 26 03 52 4F A9 2D 28 | c/kJ...(.&.RO.-(
+C8 20 89 D5 65 A7 E7 1E D8 09 EB FF 5F AB E7 B7 | . ..e......._...
+DD 79 5D 16 84 EC FC 9C 70 8C DE 53 CD CA 2C 11 | .y].....p..S..,.
+05 EC 60 65 2B F4 91 D0 87 DA 61 F2 D5 E3 4C FF | ..`e+.....a...L.
+1D 9B C2 FB C8 B6 1C 43 05 3F 88 48 74 FE 46 4B | .......C.?.Ht.FK
+A9 6F A1 43 0E F7 09 4C 73 A5 2D 38 7F DF E6 79 | .o.C...Ls.-8...y
+8E 4B 07 10 58 6F E9 16 C0 57 25 B9 D6 8A 0E 18 | .K..Xo...W%.....
+85 F6 FE A8 DB 38 9A 86 D2 73 36 40 B4 49 D5 61 | .....8...s6@.I.a
+CC F8 B3 FB E1 B1 A8 A9 E1 2A 23 E2 6D C8 30 7B | .........*#.m.0{
+96 94 55 E5 5D 04 88 B9 E6 53 AC C3 66 45 F5 E2 | ..U.]....S..fE..
+0F 6A 79 8F A6 2A EA 7D 2D 07 A2 AA 18 C3 C3 DC | .jy..*.}-.......
+12 16 32 DA 36 27 00 DD F5 18 9C C1 2D CA C6 D2 | ..2.6'......-...
+9D 7F D8 1B 2F 48 67 53 43 F2 51 D2 2C 6E 02 C6 | ..../HgSC.Q.,n..
+B5 C0 3C 13 59 FE 1F 23 D5 99 50 73 20 54 F8 D1 | ..<.Y..#..Ps T..
+8D 84 91 A3 1D 9B 9E 57 74 5A 62 9E B4 46 7D 1B | .......WtZb..F}.
+E7 15 11 A1 96 BE B8 34 A2 7F F2 03 10 FF BB 5F | .......4......._
+49 11 C7 C9 63 A7 1B C6 92 D6 2D 02 8A 75 B5 85 | I...c.....-..u..
+57 01 3C 56 9E 35 D2 44 7F B1 A7 86 55 24 21 6B | W.
+61 BB 7E CF 0E F3 C9 6F FE BD 4F 22 A6 C9 7D 78 | a.~....o..O"..}x
+8A 0D 31 94 04 83 A5 15 89 B1 5C A9 B8 A4 59 CF | ..1.......\...Y.
+F0 B0 C1 B9 3C 45 CC D1 A9 59 2B 32 88 EE 3E 79 | ....y
+38 35 B6 D7 E8 00 F8 84 A6 47 64 0E 8B B3 F0 31 | 85.......Gd....1
+FD 27 C5 33 11 4C D0 F6 57 28 BA DF 1D 4C BA 36 | .'.3.L..W(...L.6
+4C C0 72 B5 B1 3A 18 04 93 69 4D 53 63 84 36 78 | L.r..:...iMSc.6x
+27 C9 C0 CB 0D 1E DD 71 28 86 DA 24 79 83 73 21 | '......q(..$y.s!
+5B 7B 4C 0B 80 C1 33 CA 7D 70 B8 C8 BC 41 3A CD | [{L...3.}p...A:.
+29 3C BB 9C 90 64 54 6A F5 3F 3C 24 72 81 64 88 | )<...dTj.?<$r.d.
+9A D9 A0 60 9C 7E 27 D3 DC 60 F9 96 AC 39 1F F4 | ...`.~'..`...9..
+69 C6 4B 8B 64 64 DD B7 1B FD 6C 8F BB 86 AF 3A | i.K.dd....l....:
+4A ED 3F 08 1C 5D 54 F0 1F DE 50 B3 CE 0E 51 AD | J.?..]T...P...Q.
+56 3D 0F DE 4D 7B 21 39 FA 38 8A C1 3A D0 B3 B6 | V=..M{!9.8..:...
+19 CE F8 73 FD 4E 02 1D 23 46 67 C7 51 C9 97 21 | ...s.N..#Fg.Q..!
+97 74 C1 26 33 6D 6A 58 4C 90 C1 0D 88 B1 91 78 | .t.&3mjXL......x
+C8 DD 9A 54 CE 62 66 AD 28 36 3D 00 2A 5A A7 0B | ...T.bf.(6=.*Z..
+F8 46 FD E6 E7 6B ED A1 67 64 D8 F6 C0 C9 D6 22 | .F...k..gd....."
+07 90 FD 2C 1B FB 4D E9 F6 FE 8D 2C A0 67 86 A7 | ...,..M....,.g..
+08 01 00 1A 7E 80 7D AB 37 01 D1 3C BA DD E0 15 | ....~.}.7..<....
+3B F9 F4 FF 9E 08 08 5F 46 4A 38 29 B8 DC 0C 36 | ;......_FJ8)...6
+5F EA 76 F9 BB 94 27 A4 C3 E6 BA 36 5F 1B 7C AC | _.v...'....6_.|.
+51 0B BB 41 CD 16 D2 32 3C 1C E7 1F 4A D6 79 77 | Q..A...2<...J.yw
+4E E3 51 E6 04 D5 32 A2 06 DD 33 6B 35 0B AF 28 | N.Q...2...3k5..(
+0E 39 CC CE 66 0D 37 BD C7 19 43 A3 39 85 68 55 | .9..f.7...C.9.hU
+71 58 9F 07 C3 B7 90 38 BD D8 D5 C7 D5 D8 C5 AA | qX.....8........
+C1 9E DD ED B9 A6 91 50 C8 21 60 46 B8 31 0D AA | .......P.!`F.1..
+98 FE B4 B9 85 6D 97 4A | .....m.J
+
+Flow Record:
+ RecordCount = 24
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 307
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131667599 [2024-04-14 23:54:27.599]
+ last = 1713132267867 [2024-04-15 00:04:27.867]
+ received at = 1713132000886 [2024-04-15 00:00:00.886]
+ proto = 6 TCP
+ tcp flags = 0x18 ...AP...
+ src port = 80
+ dst port = 59696
+ src tos = 0
+ fwd status = 0
+ in packets = 21
+ in bytes = 2362
+ src addr = 172.217.168.3
+ dst addr = 157.143.34.100
+ out packets = 31
+ out bytes = 4672
+ aggr flows = 4
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 14994.852 ms
+ srv latency = 0.000 ms
+ app latency = 45038.849 ms
+ in payload = 127
+HTTP/1.1 204 No Content
+Content-Length: 0
+Cross-Origin-Resource-Policy: cross-origin
+Date: Sun, 14 Apr 2024 21:54:42 GMT
+
+
+48 54 54 50 2F 31 2E 31 20 32 30 34 20 4E 6F 20 | HTTP/1.1 204 No
+43 6F 6E 74 65 6E 74 0D 0A 43 6F 6E 74 65 6E 74 | Content..Content
+2D 4C 65 6E 67 74 68 3A 20 30 0D 0A 43 72 6F 73 | -Length: 0..Cros
+73 2D 4F 72 69 67 69 6E 2D 52 65 73 6F 75 72 63 | s-Origin-Resourc
+65 2D 50 6F 6C 69 63 79 3A 20 63 72 6F 73 73 2D | e-Policy: cross-
+6F 72 69 67 69 6E 0D 0A 44 61 74 65 3A 20 53 75 | origin..Date: Su
+6E 2C 20 31 34 20 41 70 72 20 32 30 32 34 20 32 | n, 14 Apr 2024 2
+31 3A 35 34 3A 34 32 20 47 4D 54 0D 0A 0D 0A | 1:54:42 GMT....
+
+Flow Record:
+ RecordCount = 25
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132182757 [2024-04-15 00:03:02.757]
+ last = 1713132213789 [2024-04-15 00:03:33.789]
+ received at = 1713132302717 [2024-04-15 00:05:02.717]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 56357
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18599
+ src addr = 17.248.209.70
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 6945
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 45.236 ms
+ srv latency = 0.000 ms
+ app latency = 0.455 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 11 32 B9 C4 F1 | ....z...v...2...
+D7 F2 4F 62 6E FE 1E F7 E4 80 EC DC EA BC 41 49 | ..Obn.........AI
+D8 0D 60 9B 98 44 09 BB FE 4F 38 20 22 C8 0F F6 | ..`..D...O8 "...
+0D 5B AA 86 CB B7 69 10 A3 6D EC 3B 66 85 AE 3E | .[....i..m.;f..>
+22 D2 50 50 5B 44 74 C8 84 04 96 59 13 02 00 00 | ".PP[Dt....Y....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 8E | ..+.....3.$... .
+DD 42 50 BD EF C9 5B D0 70 F8 4A 24 25 30 70 F8 | .BP...[.p.J$%0p.
+D1 D7 98 38 30 EC D4 6B 15 8D AE AC 87 EC 3C 14 | ...80..k......<.
+03 03 00 01 01 17 03 03 00 2A 18 A2 9F E9 8F 57 | .........*.....W
+DF 8D 59 A0 DF 8D F4 FA E3 95 30 2C 59 40 EB 4F | ..Y.......0,Y@.O
+48 1F 56 C6 AA 07 7C 83 55 02 5A 21 10 37 76 E4 | H.V...|.U.Z!.7v.
+BF D0 21 E0 17 03 03 11 25 08 0F D1 EF 46 ED 7C | ..!.....%....F.|
+EB 37 35 57 15 B6 51 AA D2 3D F0 07 EF 2D F1 06 | .75W..Q..=...-..
+41 17 F1 14 A4 E0 07 F5 02 97 F4 C9 1E 66 F9 13 | A............f..
+B6 BD 54 D3 E8 9C 85 C3 4E 64 4E 53 B9 F6 17 8B | ..T.....NdNS....
+70 13 DD A8 C2 C7 82 B0 2C FE D1 FA 76 6A 4F C7 | p.......,...vjO.
+49 C9 AF 23 55 8C F4 54 F7 A0 94 6B BA DF 36 C0 | I..#U..T...k..6.
+EA 5F 43 73 4A 68 C2 16 55 AA EC 10 87 05 23 9F | ._CsJh..U.....#.
+FA 9C 70 69 22 8D 7A 8A FA AD 67 32 AC 7B ED B1 | ..pi".z...g2.{..
+13 8F E4 31 17 BD 00 0B 82 A2 AB E3 97 79 78 AB | ...1.........yx.
+8A 63 AB EC 10 FA F4 0F AF 54 F0 88 60 4C C7 91 | .c.......T..`L..
+8E 3D 0C 08 4F 8D 76 15 54 85 6D FD 0F FF CF A8 | .=..O.v.T.m.....
+C6 77 F2 A1 4C 27 80 F0 0F 1C D6 53 5A E0 01 38 | .w..L'.....SZ..8
+DE 34 98 4E 78 E1 4B F0 40 74 1F FA 58 79 A6 EA | .4.Nx.K.@t..Xy..
+AE 76 84 26 EE C1 F2 03 64 EB 61 62 9E 16 76 25 | .v.&....d.ab..v%
+30 2A 7D 0B CB 0D 8A 1E C4 09 38 28 3E F3 4F FF | 0*}.......8(>.O.
+00 72 9E 80 95 6B F3 8B 72 CF 47 DD FA 70 04 AF | .r...k..r.G..p..
+BD 87 2C 6D DD E5 36 00 B4 6F 98 04 BE F6 00 DA | ..,m..6..o......
+D1 D9 49 16 69 CE E8 7F F9 F2 EE 4F C9 4A EC F8 | ..I.i......O.J..
+65 87 6E 96 F9 70 87 78 31 64 18 B1 BB F3 E5 C3 | e.n..p.x1d......
+01 C1 E3 93 41 DF 33 CC 77 8E 81 F1 50 24 07 F1 | ....A.3.w...P$..
+3D D8 22 42 E5 C0 C5 6A C5 8B 67 D9 0A F3 B6 F5 | =."B...j..g.....
+DC A9 CF 23 FB D9 8B 60 37 FF 88 3C 0A 0F F5 EE | ...#...`7..<....
+D6 15 0D 3A 45 99 8A FA 30 D5 1F E2 54 52 5F 58 | ...:E...0...TR_X
+55 D8 A0 C3 F6 11 9B 56 6F 14 F4 24 38 9F 75 9E | U......Vo..$8.u.
+68 9E 16 36 B2 C0 C5 C1 2E D9 36 9A D6 84 AC 0C | h..6......6.....
+A4 76 BC 3E 1B A5 A1 0E 0F 59 96 4A D6 95 85 AF | .v.>.....Y.J....
+BE B5 BB 01 E2 A6 14 5B 5C 60 78 FB E0 41 3B 70 | .......[\`x..A;p
+8D B4 38 17 9F C2 1C 49 FB 49 3A 12 D2 BE D6 9A | ..8....I.I:.....
+CB A8 82 70 49 69 26 01 D6 9A F1 DF 61 5C E4 E5 | ...pIi&.....a\..
+6D 2B 1C E7 22 16 E2 FD D8 9B E6 E9 81 37 EA 87 | m+.."........7..
+72 1C 2D 55 3C E9 69 DB 4A D6 1E 41 27 6B 02 51 | r.-U<.i.J..A'k.Q
+46 05 30 1D 4E AD 54 49 40 5E 88 5E E9 70 2A 33 | F.0.N.TI@^.^.p*3
+69 D8 1D A9 56 EB B9 E4 75 15 DC CF B5 DE 94 0B | i...V...u.......
+99 6D 59 7F 74 D3 19 B1 0B 59 EF 56 9B 31 C5 1C | .mY.t....Y.V.1..
+E9 CB 09 08 49 CC 24 AA 85 46 A5 B6 75 15 1F 62 | ....I.$..F..u..b
+12 1E 33 37 BB 90 3A EC 92 66 67 AC B6 2D 20 FC | ..37..:..fg..- .
+E8 74 0B D8 ED 4B FF B1 D5 F8 F1 38 A4 36 C6 33 | .t...K.....8.6.3
+2E 7E 48 59 BB BF 42 CE 66 02 DB E1 EB 95 62 3A | .~HY..B.f.....b:
+17 2B D5 76 2D 50 01 73 27 17 61 DF DA DE 20 A4 | .+.v-P.s'.a... .
+5F 7B BA 2C E6 16 8C 47 68 EF C1 01 7D 08 9C BD | _{.,...Gh...}...
+7A 15 C7 D9 18 E9 D5 CD EF 6F 43 9B 76 58 6B E4 | z........oC.vXk.
+AD 19 33 13 C5 59 B0 CE 8D CA E7 D1 90 9D 77 78 | ..3..Y........wx
+E2 5C 46 3D 89 19 BC 45 07 8E 15 DB FE DF 7E 6D | .\F=...E......~m
+1C 35 79 FD 29 E3 B0 E4 7F AC 5D 82 0D B6 C8 2C | .5y.).....]....,
+4A 83 41 BA 4A 72 E6 89 5D 8F B7 04 28 9F 87 4A | J.A.Jr..]...(..J
+C6 76 AB F9 76 87 3E 58 51 BA F6 1A 67 8A 61 11 | .v..v.>XQ...g.a.
+BD A1 35 F5 54 21 D0 61 28 B9 29 BF FE 2E CA 22 | ..5.T!.a(.)...."
+26 53 9E 4C DF A8 88 96 04 67 FF DF BF 2C 89 27 | &S.L.....g...,.'
+F0 BD A8 D3 C6 FA 6F 67 16 18 78 EE EE 9A 0C 4F | ......og..x....O
+BA C6 F3 E7 C2 DD 6F 64 21 1C 28 0C 62 5A 54 96 | ......od!.(.bZT.
+94 56 4B 4E 44 EF C2 E3 51 8E 1A 8A 08 54 90 FE | .VKND...Q....T..
+58 72 87 18 97 C7 A3 74 D4 52 EE CF 15 A8 4E 77 | Xr.....t.R....Nw
+96 4D 5F 0B 7D 77 1A 1D 4B 45 7B B6 84 91 C7 3F | .M_.}w..KE{....?
+C4 1D F0 D1 F9 46 45 BC 6A 32 AF 42 15 4A 1C 39 | .....FE.j2.B.J.9
+DE 99 81 98 F4 66 26 E1 1F 2A 76 FB D1 C8 26 1A | .....f&..*v...&.
+EF 99 30 AF 36 EC 7E 1D 81 8E 1D 07 3D D2 44 A5 | ..0.6.~.....=.D.
+09 AF 5D E2 F0 D6 AA 3E 74 54 F4 8D 72 96 04 DF | ..]....>tT..r...
+FB B2 E9 E9 61 7F DA 74 BE E6 48 8D A7 37 2C D0 | ....a..t..H..7,.
+A1 DB 2F AE 5B 52 C9 A9 F5 26 7C 30 53 71 38 62 | ../.[R...&|0Sq8b
+C7 44 11 79 AC B5 87 84 C0 43 67 0D 38 2B F6 C1 | .D.y.....Cg.8+..
+1C 46 B1 C9 E7 08 CC 3B D3 35 99 F3 A9 AA 84 13 | .F.....;.5......
+13 B2 E7 86 91 69 DE 46 0E D6 35 B0 EB 65 FE DA | .....i.F..5..e..
+4E 0C C7 DF BC B1 EA F4 C8 2B 3D 6C DB DC 4B BD | N........+=l..K.
+F9 AB 98 7F 7D 1A 69 B6 91 75 70 BE 69 93 72 7E | ....}.i..up.i.r~
+1C E9 F9 DF BB 6D 77 3E 1B F4 E9 41 AE F9 90 B6 | .....mw>...A....
+5C 6E 1B 84 BC 10 6A 07 E2 29 95 6C BE 52 9C 1E | \n....j..).l.R..
+E6 DB 05 B4 B0 5D 92 6E 57 97 BF 7D 43 47 1C FE | .....].nW..}CG..
+A8 86 C5 8E C0 D1 F8 02 A9 61 8F EA 3D E8 6A B7 | .........a..=.j.
+AB 1E 64 45 7D 2B 12 23 8F 6B 3E F6 33 D9 B2 DB | ..dE}+.#.k>.3...
+B2 E3 78 91 93 42 00 F2 CD 56 3E 95 BC E9 75 E4 | ..x..B...V>...u.
+1C F4 E6 F9 68 22 1F 55 37 FA 42 60 F2 E9 44 89 | ....h".U7.B`..D.
+DE B8 28 2C 3C DB 2D BF ED 23 08 9C 41 09 44 04 | ..(,<.-..#..A.D.
+98 16 DF 29 44 67 8D 82 2B B7 E9 B2 C2 24 57 51 | ...)Dg..+....$WQ
+B3 25 3E F0 CD 4F 04 4A 00 0A 0D BE ED 08 D8 C5 | .%>..O.J........
+15 30 EF 48 DA ED 7E 8B 8B 96 8E 3B DE 21 A6 4A | .0.H..~....;.!.J
+DF A9 87 CC 7B 2D AF 50 4D A5 8D 0C 1E 76 97 54 | ....{-.PM....v.T
+AE 4D 0A 93 70 9A 64 F2 B2 25 09 9D 05 92 37 83 | .M..p.d..%....7.
+53 7D CA 07 D3 0F 91 BC C7 5E FA 13 2A AF C3 A2 | S}.......^..*...
+72 DC B7 8C E4 BD 68 CA 7A F8 64 30 17 B7 57 80 | r.....h.z.d0..W.
+F7 05 FE 0C 20 CE 2E 0E | .... ...
+
+Flow Record:
+ RecordCount = 26
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131929021 [2024-04-14 23:58:49.021]
+ last = 1713131931365 [2024-04-14 23:58:51.365]
+ received at = 1713132000887 [2024-04-15 00:00:00.887]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 62151
+ src tos = 0
+ fwd status = 0
+ in packets = 11
+ in bytes = 4264
+ src addr = 17.167.200.72
+ dst addr = 157.143.34.100
+ out packets = 11
+ out bytes = 1934
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 115.449 ms
+ srv latency = 0.000 ms
+ app latency = 0.451 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 00 51 45 C8 28 | ....z...v...QE.(
+61 9C 48 BB 3E 53 E2 C9 1B 3B C0 74 4D 6F 75 75 | a.H.>S...;.tMouu
+0B 03 44 2F 32 4C 1D FF DB 66 F6 20 A7 31 2D EC | ..D/2L...f. .1-.
+54 26 7F DA FF BF 48 CC CF 4A AE 02 62 C5 9D AE | T&....H..J..b...
+8A EF C1 51 C1 76 A6 9C B2 EF E1 2A 13 02 00 00 | ...Q.v.....*....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 0C | ..+.....3.$... .
+78 79 B7 37 F8 07 9A 3A E0 21 6F 50 A6 A9 7F 38 | xy.7...:.!oP...8
+8A CE E4 17 AC 80 6E 19 44 47 5E 19 49 5E 26 14 | ......n.DG^.I^&.
+03 03 00 01 01 17 03 03 00 2A 6E 3C 9E 92 4F AB | .........*n<..O.
+98 A8 DF E3 DF C8 69 0B 9F E2 0B 6F 60 4B 5A F1 | ......i....o`KZ.
+F6 7D 6A E7 CC 50 FF 9B 6F A2 36 EE EF DD 58 08 | .}j..P..o.6...X.
+5D 3A 17 AA 17 03 03 09 7C 13 9F FF 12 8E 31 58 | ]:......|.....1X
+73 C1 79 47 C9 38 1C 01 2A 52 22 46 8F BC 8D 65 | s.yG.8..*R"F...e
+30 31 E4 F6 E2 74 39 55 8D E0 79 46 F6 51 4D 7D | 01...t9U..yF.QM}
+05 E5 2C 02 56 6A 5B 69 55 1F 7A 67 70 AA 98 B1 | ..,.Vj[iU.zgp...
+F9 34 DF 56 EB 99 C4 3C EA 32 48 37 5B 26 A7 15 | .4.V...<.2H7[&..
+3B 82 8B 56 4C D6 CB 3A DF 36 7B E0 46 03 52 13 | ;..VL..:.6{.F.R.
+5B ED 15 6E 77 D1 CC AD 99 D4 51 15 61 89 A7 43 | [..nw.....Q.a..C
+63 26 08 BD BA 68 E1 C0 9B 77 CC 36 B5 78 AF B1 | c&...h...w.6.x..
+A1 1D 7C 29 1A 5C 21 CD E2 9A D5 2D 01 38 B0 18 | ..|).\!....-.8..
+F6 FD D5 85 E3 EF 2A A4 4B F5 AF 57 5A 2D E1 57 | ......*.K..WZ-.W
+B2 9D D2 86 77 3A 04 8F 49 B1 30 DB ED ED 6B 4D | ....w:..I.0...kM
+34 46 30 33 6C 3F 1C 05 8F 82 E3 50 04 06 15 A5 | 4F03l?.....P....
+37 67 A5 B5 BF A9 D6 43 85 81 18 8E CB 4B CC F2 | 7g.....C.....K..
+85 89 B4 75 39 72 8A 25 5E 14 23 9B C9 3E 66 08 | ...u9r.%^.#..>f.
+DC 23 53 F9 E1 77 E0 94 94 86 19 A9 C1 09 CD 34 | .#S..w.........4
+AF 86 2C 84 18 DB F8 3A C9 96 B4 42 03 0C B0 56 | ..,....:...B...V
+26 BC 76 8D 09 2C 86 B8 D0 6A B0 5C BF 8B 61 25 | &.v..,...j.\..a%
+7B 26 77 BA CD D0 52 8A E6 25 5B 70 4A 2F 88 C0 | {&w...R..%[pJ/..
+45 E0 39 20 1A 19 73 B0 F4 3F 6B B2 34 1F C0 FA | E.9 ..s..?k.4...
+26 55 5D 5E 8C 3D F1 5A D7 A1 21 B7 8C 3E 63 54 | &U]^.=.Z..!..>cT
+89 8B 69 10 8A 7D E4 2E C4 83 90 28 63 9B B2 3E | ..i..}.....(c..>
+74 FA BA 23 BD 38 38 7E 39 14 B2 88 9F 9E 47 71 | t..#.88~9.....Gq
+4D 8D C2 A6 51 17 A2 4E 39 78 BC 8D BF 5F 99 8E | M...Q..N9x..._..
+82 D5 20 5A 3E FF D2 35 67 3A 07 24 47 75 9F 9E | .. Z>..5g:.$Gu..
+AC BC EE 16 AF C5 29 28 BA ED C8 7B 8B A3 00 D7 | ......)(...{....
+96 61 FA 23 8D 3D 85 8D 50 A1 E7 BD 73 11 8D ED | .a.#.=..P...s...
+2C 4B 5E A7 0B FC 92 7B B8 3B 9A BC 62 51 D5 60 | ,K^....{.;..bQ.`
+1C CD EA 0F 9A 32 86 E0 87 C4 C8 57 1D 3B 05 13 | .....2.....W.;..
+61 F1 D8 96 70 44 05 17 7B 18 2F DA 26 6C AB 67 | a...pD..{./.&l.g
+23 C8 EE 3F C1 CC CA 23 39 9D FA A4 B2 46 34 30 | #..?...#9....F40
+F9 3E D3 AD 7C AE 68 97 28 A0 BF 50 9F 42 12 E2 | .>..|.h.(..P.B..
+A1 40 66 2C DF C8 6E E5 9D D5 57 71 AE 7C A5 27 | .@f,..n...Wq.|.'
+69 74 DE 65 0E DF 18 35 D6 1A 59 AB 11 86 1D 88 | it.e...5..Y.....
+DB DB 64 3F 40 AE 40 10 47 83 7C 4B A1 47 B7 AD | ..d?@.@.G.|K.G..
+6F BE 62 BB 54 5C 53 2E 44 BB 12 23 D1 83 77 F3 | o.b.T\S.D..#..w.
+7B BF D8 A8 7F 5F 75 16 E7 E0 FB CC 0F E8 70 75 | {...._u.......pu
+36 29 C4 95 98 15 D5 C6 E6 32 3E EB 24 BA 14 C5 | 6).......2>.$...
+A8 A4 01 90 33 D4 66 93 92 6A DB C9 9E 2A 61 3B | ....3.f..j...*a;
+9B 36 4E 37 D3 5B 0C 3D D9 F0 1E 10 84 50 80 9A | .6N7.[.=.....P..
+66 AA 3D F5 1B B7 5E FD 1B ED 24 E3 DE 5E 65 C6 | f.=...^...$..^e.
+AA A5 AB 78 A4 D4 94 EB 2D DC 03 0B 95 D6 D4 F9 | ...x....-.......
+A9 AE 43 A8 69 70 77 47 E4 55 1D BE EC 88 D0 32 | ..C.ipwG.U.....2
+EB F5 AC 41 D4 FD E4 EE 49 F4 3A 33 9F 32 BE 02 | ...A....I.:3.2..
+FC 54 C8 34 40 C7 9B 96 6C 58 0E EA 05 6A 96 8F | .T.4@...lX...j..
+04 87 A5 C4 F2 6C C6 1C 30 91 E4 EA 80 91 7A 2E | .....l..0.....z.
+DE 5F 5F B7 DC 2C 59 EA 51 E8 95 E1 16 1A 7C F2 | .__..,Y.Q.....|.
+F8 A5 CE 60 8B 19 BF 7F BE 32 56 CD 0E 7C 64 FF | ...`.....2V..|d.
+70 D4 B6 A0 91 E4 F5 E6 18 72 70 63 10 27 2A 7B | p........rpc.'*{
+45 17 C4 AA DB 24 45 13 2A 20 85 E3 20 F3 42 AC | E....$E.* .. .B.
+E7 11 11 B6 21 78 72 35 CB 41 F0 02 26 38 52 85 | ....!xr5.A..&8R.
+78 B2 09 5F C9 C4 EC F0 CD B9 58 9F 59 20 03 31 | x.._......X.Y .1
+DF C2 C3 B8 B5 20 1B 5D 7A B6 0A A0 7C E3 A5 25 | ..... .]z...|..%
+EA 10 DC 8F 09 E6 02 DD 1B C9 0A 25 F2 03 3A 4C | ...........%..:L
+E8 06 EB 47 7D 9C 02 6E 20 C0 E5 72 0B 94 07 77 | ...G}..n ..r...w
+D4 55 4A DC 6A 96 4F 97 0C 1E 6E 53 01 76 B0 D2 | .UJ.j.O...nS.v..
+3F 1B 40 14 8A 2E 43 C3 B8 CC 72 BB F8 ED 16 2F | ?.@...C...r..../
+EB BD 18 BA 1F 46 BA 57 70 A5 6A 59 5D 79 58 FE | .....F.Wp.jY]yX.
+BA 44 67 E9 38 B1 77 15 21 B7 0A 8D 26 7D 19 DB | .Dg.8.w.!...&}..
+5B D4 F6 E7 8E C3 5E 91 AF F1 2A A3 E6 8C FA 2B | [.....^...*....+
+55 3F B7 30 F4 29 48 2C D0 3B 82 6A E0 3D 28 07 | U?.0.)H,.;.j.=(.
+29 9E 64 BE B4 20 DC A2 B4 E2 E1 5E 15 CC 28 51 | ).d.. .....^..(Q
+FC 0C 19 A1 54 9E BD A5 88 5A C8 61 66 02 5F 73 | ....T....Z.af._s
+CF EC D9 35 4D 75 2B 93 B1 14 C4 A1 C7 24 15 66 | ...5Mu+......$.f
+EB 69 5B 87 B4 92 AA DD 8A 61 FE 88 B2 EF 75 14 | .i[......a....u.
+4F 45 A7 DE AC BF 81 63 2E 60 17 A2 22 26 10 0D | OE.....c.`.."&..
+5A 50 D1 BA 0B 96 13 A1 5D 8B 5E 93 14 8B 11 68 | ZP......].^....h
+A6 0F C0 EC B7 AE 12 49 1C CE 79 14 33 D1 D7 BE | .......I..y.3...
+E2 7C C5 B2 72 3F 22 02 E7 E6 B3 88 8C A9 99 1A | .|..r?".........
+A8 65 03 E9 7B 37 61 12 94 40 89 DF A1 D9 10 48 | .e..{7a..@.....H
+14 98 BA 18 04 54 C3 8C AC E9 1A 5F 01 A2 7D 57 | .....T....._..}W
+21 7A 7E F5 B6 CB 4E D4 8B DF 4E 3F C6 FA FA 4A | !z~...N...N?...J
+C5 E9 7E 5F A5 3B 9A 9D EC F1 88 D0 DE 90 AE F0 | ..~_.;..........
+95 25 10 16 D0 8E A9 0C 0D 32 7A 43 D7 BF BA 8D | .%.......2zC....
+DD 60 66 10 4D 69 94 C9 F2 CF AD EE D8 5B DA FE | .`f.Mi.......[..
+6C 7C A2 5B 5E 9B CC 24 ED 03 14 7D 42 DD F5 1E | l|.[^..$...}B...
+94 A1 47 8E A2 A6 52 B1 29 49 71 4B 22 94 10 FE | ..G...R.)IqK"...
+42 5A F5 78 58 58 A1 DD 2E E6 BA 16 1D DD 75 61 | BZ.xXX........ua
+B4 CB DF A6 31 1F F0 0D 9C 8A AE 5B 9D 51 A8 4E | ....1......[.Q.N
+C8 32 49 C6 AC DB 83 4B 21 23 89 C7 FE 05 70 F7 | .2I....K!#....p.
+CD F5 09 64 03 D4 1E 0D | ...d....
+
+Flow Record:
+ RecordCount = 27
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 5: 1 2 12 15 29
+ size = 1374
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132383300 [2024-04-15 00:06:23.300]
+ last = 1713132383368 [2024-04-15 00:06:23.368]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 65143
+ src tos = 0
+ fwd status = 0
+ in packets = 10
+ in bytes = 4065
+ src addr = 172.217.168.46
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+C8 00 00 00 01 00 08 FB 35 76 79 08 37 B0 41 00 | ........5vy.7.A.
+43 9F E3 60 AA A3 C7 E4 66 E3 57 8A 01 2A F2 C9 | C..`....f.W..*..
+CE DA C1 45 56 47 08 C3 98 0A C2 3C AC DC EF F7 | ...EVG.....<....
+09 09 1A E5 20 F5 7E 1A F2 17 3C BA 59 9C 3D BE | .... .~...<.Y.=.
+B9 A6 65 84 82 F1 7E F0 05 49 04 C1 A6 B9 F9 51 | ..e...~..I.....Q
+24 A1 1B 3C B9 A8 8B A6 FF AD 99 CE CC D0 FF D1 | $..<............
+30 7A 1C 63 45 8D A1 92 C3 53 1C C2 E7 66 8C D1 | 0z.cE....S...f..
+7B 5B 30 5E 8E E7 2F 5E F9 7F 0A 04 7D 72 C2 2A | {[0^../^....}r.*
+7D 15 0A 3B CA E5 5E 28 DC 37 47 43 59 A7 52 C3 | }..;..^(.7GCY.R.
+20 D2 C3 F7 B5 81 98 1E 99 57 EC 67 C1 47 FC 4F | ........W.g.G.O
+D5 53 5C 7A 9C 5D 02 0C B6 AC D1 12 EC FB CD 85 | .S\z.]..........
+BE 23 65 B3 35 4E 1F 19 B4 58 23 EA 8D 73 A5 71 | .#e.5N...X#..s.q
+72 92 41 80 D9 BA CA 53 F4 C5 01 EC CA 3F 08 26 | r.A....S.....?.&
+87 1E 5D 3A E4 FB F1 33 78 6A 2A 54 2D 29 E1 27 | ..]:...3xj*T-).'
+E2 43 11 59 2A 67 63 8C 7B 10 58 CC 47 56 D0 43 | .C.Y*gc.{.X.GV.C
+46 CC 97 84 7A 1E 71 EC 7C 12 3D 2B 59 44 AC C3 | F...z.q.|.=+YD..
+FA D2 F6 73 F9 78 62 5A C8 6C 5A ED 82 BA 54 32 | ...s.xbZ.lZ...T2
+71 F7 A6 04 6E 93 B2 A5 EE 73 D4 CF 79 E9 D2 00 | q...n....s..y...
+16 AB 26 85 AA F8 92 C4 33 3C 8A 21 96 AF A4 84 | ..&.....3<.!....
+10 CE 27 6D 67 DD D5 73 72 71 9A 51 1B 82 59 BF | ..'mg..srq.Q..Y.
+98 D1 D9 D6 ED 43 4C 7E 88 4A A8 31 75 1F BC 10 | .....CL~.J.1u...
+9A 12 1C 47 30 24 94 A7 9D 3A 08 E7 28 E9 55 C2 | ...G0$...:..(.U.
+B7 77 DE 1D 3D 55 66 CF 87 06 6D 6C CF 12 81 C3 | .w..=Uf...ml....
+D1 B2 71 75 A8 08 79 4D AA 0F 57 8E 9F 2E 75 A5 | ..qu..yM..W...u.
+45 DE B2 B3 83 C2 43 46 94 4D 9C 60 DB 1B 77 00 | E.....CF.M.`..w.
+90 18 2B 1C 79 6D 23 EC 3D C5 6A E8 C1 4A 18 FC | ..+.ym#.=.j..J..
+3E 32 FC 81 53 95 5E 2E A7 B0 13 04 37 B2 70 20 | >2..S.^.....7.p
+A5 B4 25 BA 50 B1 96 07 05 2F 73 F9 C1 77 56 9C | ..%.P..../s..wV.
+E0 79 88 5A FB E0 6B D8 4D C3 32 7B CE 67 68 7B | .y.Z..k.M.2{.gh{
+BC 70 D4 78 E4 76 3A 84 16 7C 91 0A A8 67 40 7B | .p.x.v:..|...g@{
+32 F5 D1 4E 26 C8 EA 8E C8 7C 96 36 5A 7A 98 2C | 2..N&....|.6Zz.,
+7A 9C 34 34 BB 7F 9A 87 51 D6 57 4F 57 B4 FB 23 | z.44....Q.WOW..#
+AF FF E7 15 DF 36 EC 0C A5 0E CF 89 1B 27 81 0A | .....6.......'..
+29 48 BA 6A 78 80 B3 8D D6 60 96 BB EB 97 15 A6 | )H.jx....`......
+3F A1 D8 D2 0A 00 11 75 99 6A 97 F5 35 61 E1 48 | ?......u.j..5a.H
+06 73 33 17 AE FE 3E A1 09 9E 6B E0 4B EF 83 21 | .s3...>...k.K..!
+CE 8A 54 7B E7 B2 F8 33 C2 90 4B B2 42 64 B5 F7 | ..T{...3..K.Bd..
+AE B8 88 8C 73 04 EF 56 69 5D 12 50 D1 D3 C5 D2 | ....s..Vi].P....
+14 97 80 6B CD 0B EA B5 10 81 29 DB 51 FA 1B 7F | ...k......).Q...
+04 07 95 8F 01 05 E0 29 DB 3B F4 9E 6C EF D6 4E | .......).;..l..N
+60 2D 5D 47 AF 94 65 DA 16 63 F4 48 04 AF F3 9B | `-]G..e..c.H....
+89 A8 71 5D 5A 46 20 8F 48 BE 83 A1 9C C0 88 A2 | ..q]ZF .H.......
+7E 9A 85 4C 2F 74 DA 2E C1 4D 09 72 A1 FE 97 E1 | ~..L/t...M.r....
+77 9E C9 8C 91 37 AF 1A 62 65 1B 49 71 52 A1 63 | w....7..be.IqR.c
+81 25 46 E1 AF EF 91 9A EE 9C 0F 2D 3D F6 90 CA | .%F........-=...
+E8 64 20 A9 9F F6 AE 19 CD 0D 71 1F 72 9A B1 11 | .d .......q.r...
+1D 2F 59 E3 48 11 7D 33 31 68 75 C4 42 1C 97 BF | ./Y.H.}31hu.B...
+0B C2 FF 43 D1 BE 65 94 EC CD 83 01 97 15 19 73 | ...C..e........s
+40 96 25 AD D9 1E 01 AE 65 FE AB FE 97 94 7B 77 | @.%.....e.....{w
+10 73 66 B8 28 32 D8 CC 23 6E 2A 78 F6 B5 3D F1 | .sf.(2..#n*x..=.
+DF 24 86 52 1C 8C 3F EA 27 67 EA 18 94 A0 25 29 | .$.R..?.'g....%)
+67 84 C4 65 72 4B E6 92 E3 D7 38 59 61 53 80 1F | g..erK....8YaS..
+92 4E A7 5F C5 CF 46 87 5C BC 20 F9 09 75 20 08 | .N._..F.\. ..u .
+39 35 D4 27 3E 39 87 88 6D 99 98 B0 31 7C C7 14 | 95.'>9..m...1|..
+AD 27 83 7A 48 DF 46 96 30 AB B0 0A 59 31 15 58 | .'.zH.F.0...Y1.X
+1A F3 00 3F 31 39 DE 49 AD F8 1F 0F D2 7E 87 12 | ...?19.I.....~..
+65 C1 2A 1A F6 A4 D7 5A 62 FB 7F D8 81 1A CC 35 | e.*....Zb......5
+D9 7E BA DF 94 36 13 E9 E7 4F C6 DF EE B4 97 BA | .~...6...O......
+04 9A 40 A2 CF FF 51 BE D4 5C 2A F6 44 5B 4D 10 | ..@...Q..\*.D[M.
+17 E9 00 00 00 01 00 08 FB 35 76 79 08 37 B0 41 | .........5vy.7.A
+40 E1 A9 5F DA BA 7F D0 47 13 03 C1 B6 A1 EE 7C | @.._....G......|
+67 E1 9E 9C 3B CF 26 9F E0 33 8E 8B DA 54 B5 00 | g...;.&..3...T..
+15 F5 EC 3D A7 1C D5 7D 14 46 3E BD A7 B8 75 27 | ...=...}.F>...u'
+44 51 95 5E A9 AA 7B AC CE 17 F2 14 EC 9D 7C FA | DQ.^..{.......|.
+3F BE A6 2A CC 8E 79 0B CF E9 D8 16 DB D4 5F 28 | ?..*..y......._(
+63 B6 9D 6F 1C B3 3D 05 CB 7B DB 57 63 81 CB 4E | c..o..=..{.Wc..N
+F1 6B D9 F3 52 81 FC 78 1C FB 78 6D 9E 66 2E 7F | .k..R..x..xm.f..
+4C 31 82 19 7E F1 20 51 B2 E7 71 E1 A0 28 6A 12 | L1..~. Q..q..(j.
+CE E9 85 DB 10 F0 27 38 A1 AD FC 71 35 DC 57 B0 | ......'8...q5.W.
+FD 1B 52 F9 F1 60 17 BB AF 85 D0 86 F3 F3 C3 8C | ..R..`..........
+8D C8 C8 91 1D 39 07 4C 96 4A 0D 4E 0C 41 46 9B | .....9.L.J.N.AF.
+26 E2 D2 F3 B9 D4 E9 CD 7F F7 B4 64 B6 A6 A3 4E | &..........d...N
+73 BA 34 07 EC 27 D4 15 D7 4E 00 25 38 5E 77 B9 | s.4..'...N.%8^w.
+0B 8F 34 AB 21 B3 1F 6B 55 9D A4 53 14 04 23 84 | ..4.!..kU..S..#.
+A1 DB BB 5F D1 C7 80 FB 5E 17 80 A1 25 53 DA 83 | ..._....^...%S..
+33 85 65 18 9D BF 6E 56 14 A9 91 92 6B 98 2B 89 | 3.e...nV....k.+.
+40 2A 5D B7 21 64 5B 16 0C 24 36 98 30 2B 71 BA | @*].!d[..$6.0+q.
+75 F6 B5 F9 5D 08 B4 43 05 9F B7 B9 B5 AC 84 78 | u...]..C.......x
+89 F9 | ..
+
+Flow Record:
+ RecordCount = 28
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1580
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131960775 [2024-04-14 23:59:20.775]
+ last = 1713131960918 [2024-04-14 23:59:20.918]
+ received at = 1713132056973 [2024-04-15 00:00:56.973]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 51638
+ src tos = 0
+ fwd status = 0
+ in packets = 13
+ in bytes = 6591
+ src addr = 216.239.38.57
+ dst addr = 157.143.34.100
+ out packets = 10
+ out bytes = 2112
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 10.664 ms
+ srv latency = 0.000 ms
+ app latency = 12.179 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 A7 FE FC 65 C2 | ....z...v.....e.
+D4 EC A5 5B 0F 3B D6 ED 7B EA 1B B6 69 00 01 87 | ...[.;..{...i...
+EF 46 59 9E 49 03 98 31 D1 6E 29 20 66 A7 15 FB | .FY.I..1.n) f...
+32 59 A6 6A D1 EA 6A 52 2E 78 D8 6D 5B 5D 1C 54 | 2Y.j..jR.x.m[].T
+66 0D 9A 23 BF CF 20 31 90 CC E4 72 13 01 00 00 | f..#.. 1...r....
+2E 00 33 00 24 00 1D 00 20 A6 15 46 AA B9 60 60 | ..3.$... ..F..``
+0D A7 6B 67 87 07 E5 73 0F 5B 52 EB 29 EE B8 63 | ..kg...s.[R.)..c
+3B B8 18 4D 4E CE 3E E0 05 00 2B 00 02 03 04 14 | ;..MN.>...+.....
+03 03 00 01 01 17 03 03 12 08 17 C6 B3 4B BE 36 | .............K.6
+8E 05 AB 3D CA B2 CD 38 98 09 F4 9C 5B 5D FF 98 | ...=...8....[]..
+CE 16 BD A2 84 FC 66 75 7B F2 21 39 0D B5 FF 9C | ......fu{.!9....
+C7 99 3A C5 7A 5B D5 CD D3 42 79 DF 00 E7 7B 05 | ..:.z[...By...{.
+6F B7 82 86 00 76 8B DF 2B 8A 60 5D E2 C4 4B C6 | o....v..+.`]..K.
+68 18 B4 B2 E5 8A 88 75 5C 77 21 EB 0E 14 A2 1F | h......u\w!.....
+83 AC 2F 7F F4 90 E3 B6 B3 5F 8D 01 CD BE 5D F9 | ../......_....].
+39 C0 78 2A A5 36 8B B1 72 AF 29 DD E1 DE 4F AB | 9.x*.6..r.)...O.
+F3 BC 9D 1B 3F F8 05 83 D6 DF 6C 45 2A 88 99 68 | ....?.....lE*..h
+62 D6 8C C2 4F 23 C3 36 42 AC 2F 5A 54 B3 0C 19 | b...O#.6B./ZT...
+F6 EB AB FE 7B D6 37 F5 FE FD 05 D2 73 29 5A CC | ....{.7.....s)Z.
+0D F9 14 64 9A 6E 10 37 64 84 87 8B C9 34 26 0A | ...d.n.7d....4&.
+A2 DE AF 6E CB 25 EC 79 63 77 38 F3 1A E7 90 23 | ...n.%.ycw8....#
+4A 9C 00 5C 8C F6 91 68 9A 0F E9 65 92 FB A6 F7 | J..\...h...e....
+95 48 1C F7 78 F6 2B 7C FB 5C 70 72 FD 18 58 97 | .H..x.+|.\pr..X.
+D8 92 21 39 A3 53 AB 43 B2 ED E5 96 20 47 5A 88 | ..!9.S.C.... GZ.
+4B 32 BF 77 FA 10 00 66 06 DA 01 9F DB 4E B4 E3 | K2.w...f.....N..
+2C 0A 27 D3 40 1A 52 25 CC B2 AA E4 43 4F 2D D2 | ,.'.@.R%....CO-.
+EF 1A D1 5E 8B D9 27 A0 D8 76 CD 3C 19 7F 6F BA | ...^..'..v.<..o.
+53 58 91 8A DB 99 8B 72 56 1A 18 1E BF 57 A3 5C | SX.....rV....W.\
+44 EC 18 46 32 17 C5 45 6F DB EA ED 4A 4F E3 10 | D..F2..Eo...JO..
+49 9D 92 5B 6E 93 7A 48 14 91 11 10 B3 17 FD 97 | I..[n.zH........
+40 59 35 59 AA 99 EC 3A 2E BD A9 73 36 C1 F3 89 | @Y5Y...:...s6...
+CF 46 1E 9E F4 80 BA 51 11 A3 12 1C 07 9D 7E 4D | .F.....Q......~M
+D1 A4 C3 96 37 72 D9 1B AE 16 19 C1 3F FC 9A 57 | ....7r......?..W
+3A CA 0B B5 C9 6C 42 87 41 3D 83 A4 A7 32 E4 A7 | :....lB.A=...2..
+33 18 41 4F C3 C7 94 BC 9A 92 85 CF 03 EE 55 07 | 3.AO..........U.
+81 69 6E B7 18 5B 68 77 05 51 C9 C6 EB BF 44 5E | .in..[hw.Q....D^
+8D D2 A9 D9 82 97 EB C5 78 F5 55 82 0F 68 1B A3 | ........x.U..h..
+C9 3B 72 44 43 EE 60 30 C3 6D A4 77 0A 53 53 A6 | .;rDC.`0.m.w.SS.
+84 2C 6A 48 D0 D4 D1 33 5B 4A 1B 43 7F 1F 50 5B | .,jH...3[J.C..P[
+81 75 92 C6 2B 72 BE 24 43 43 8E D8 3E 00 98 4C | .u..+r.$CC..>..L
+30 46 BD 5C 78 E3 EC 2E DB 25 8F 12 BA 24 90 DB | 0F.\x....%...$..
+9D 1C 25 07 AC 40 0A 6A DE E2 49 95 69 5E 2C 3B | ..%..@.j..I.i^,;
+C3 A3 C1 94 44 6C 7C 2B F0 1A 2B E1 DE 45 EE 91 | ....Dl|+..+..E..
+43 FB ED 60 3C 20 FD 25 84 11 74 A5 D7 3C 8D C3 | C..`< .%..t..<..
+58 48 A8 40 DE 4A 31 A0 D3 18 57 75 0E 75 5D E7 | XH.@.J1...Wu.u].
+2C BC FF 78 34 9C A6 EB 21 ED BB B1 AE BB E1 C6 | ,..x4...!.......
+4A AC 6D 3E 31 F4 C8 AA ED 92 A0 86 CE DE 0A 9A | J.m>1...........
+F6 DF 07 18 CF 47 7A 26 49 92 D9 80 8C 5C EB 4C | .....Gz&I....\.L
+05 D2 93 43 39 29 29 C8 03 A0 2B 7C 5B 13 B8 50 | ...C9))...+|[..P
+33 82 C0 D5 17 59 5D 6D 0B 39 30 73 2E 9B 05 F2 | 3....Y]m.90s....
+0F B4 FE 2F 2D B8 AA 0F 13 57 11 14 26 10 72 B6 | .../-....W..&.r.
+F4 83 3D E8 54 FB BF 14 69 A6 06 69 5A A9 49 CB | ..=.T...i..iZ.I.
+86 92 A3 30 DB BF D9 6F 87 19 24 2D AF CB 07 58 | ...0...o..$-...X
+1E 69 3B 35 D1 F4 6B C7 70 F1 57 4D 86 A8 BD 01 | .i;5..k.p.WM....
+DA 47 55 F9 0F 27 B6 CE 7C FA C9 D4 C5 C8 A8 12 | .GU..'..|.......
+27 8C EE 4A CE 63 1E DA 62 35 A5 8F 5E DC 88 F1 | '..J.c..b5..^...
+EC 3D 76 8A 20 CA 7A B9 88 DC E9 D1 66 2C 01 1E | .=v. .z.....f,..
+AC 95 79 96 90 E5 83 10 F9 07 35 87 5E 4E 2F B6 | ..y.......5.^N/.
+7F 90 99 53 1C A2 42 FF 32 5C 9B FF DC 2F DA FA | ...S..B.2\.../..
+7E 32 38 2F 29 2B 78 B2 FF A1 E8 1C A1 5C 71 10 | ~28/)+x......\q.
+C5 E5 1E 6B 2A 47 60 9C 0A 4F 0A 3F 21 43 B4 8C | ...k*G`..O.?!C..
+E4 DF 9C 75 FA 7E 5A 8D 39 81 DE 8D 79 B4 41 B6 | ...u.~Z.9...y.A.
+2A 67 F8 01 E4 C8 AC 3A 1C 44 1B B9 1E E0 55 E0 | *g.....:.D....U.
+0C D3 90 55 40 DA 08 1F 3C 14 B7 F1 C9 E7 2C BA | ...U@...<.....,.
+15 5F 9A AD EC 1B 76 CB A0 E2 74 13 38 13 60 76 | ._....v...t.8.`v
+80 47 59 09 12 22 30 B8 B1 78 3B 1F A8 B9 EB AD | .GY.."0..x;.....
+5D 19 C2 6D 8C 41 DB 7C 4F 68 CE BC E3 65 4E 15 | ]..m.A.|Oh...eN.
+16 57 D1 52 55 0F 5D A1 A9 5E 4D 23 92 DF FB 8C | .W.RU.]..^M#....
+15 2F 36 8A 69 41 3D 7D 92 EF AB 0C 30 63 6E 7C | ./6.iA=}....0cn|
+1F 2E 74 70 F7 13 95 0D 8D 24 2E 13 3D 8C 63 E5 | ..tp.....$..=.c.
+30 36 9F 9F 71 B5 1D 83 58 C4 8F A8 9E 21 98 12 | 06..q...X....!..
+98 C3 78 AF 5D B6 C2 B9 16 5A 0D 3C D6 9D E6 97 | ..x.]....Z.<....
+35 A7 B4 79 03 49 EA 91 A4 5C 13 B2 B6 DC 72 B4 | 5..y.I...\....r.
+F9 9F 55 60 7C 46 51 7E 9A 79 85 F3 45 E4 96 5B | ..U`|FQ~.y..E..[
+3B D5 25 FD 52 15 1A 2A C7 A5 95 45 83 19 75 23 | ;.%.R..*...E..u#
+03 E3 66 C0 24 50 3D CA 74 1D C0 92 8F 62 56 06 | ..f.$P=.t....bV.
+99 B8 C3 53 FA 2B 20 98 D0 0D 97 E7 82 EC 60 EA | ...S.+ .......`.
+A9 59 C5 50 A1 ED 81 CD CF 2D E5 A8 E5 EB D2 55 | .Y.P.....-.....U
+B1 DF 7F AD FB 65 A2 55 AC 50 93 38 A4 99 7C 5D | .....e.U.P.8..|]
+DC 7F F1 0C 85 BF 2D 8E C9 CF 4B 8B 35 D7 75 16 | ......-...K.5.u.
+51 BB 39 B2 55 7A 7F 33 28 57 16 0C 59 06 47 31 | Q.9.Uz.3(W..Y.G1
+84 22 69 38 CD 46 32 77 EB 14 C3 7E BE AE 5B 23 | ."i8.F2w...~..[#
+73 E3 CC 2D CB 4E F7 26 6A 66 AA 52 58 96 20 25 | s..-.N.&jf.RX. %
+D1 5F 83 7B EE A4 95 9E 41 78 99 23 17 7C C2 73 | ._.{....Ax.#.|.s
+EE 49 D7 EB 7B FA B2 4F B5 54 13 0D 89 23 3B EB | .I..{..O.T...#;.
+DB 56 A8 10 4B B4 80 0C 74 43 F5 C8 52 47 8A 7E | .V..K...tC..RG.~
+CD 8E F0 00 59 0C 06 C1 D3 C0 C3 22 49 79 46 FB | ....Y......"IyF.
+0D 86 FA F3 67 12 C0 B5 | ....g...
+
+Flow Record:
+ RecordCount = 29
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 5 12 15 29
+ size = 1402
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131960512 [2024-04-14 23:59:20.512]
+ last = 1713131960626 [2024-04-14 23:59:20.626]
+ received at = 1713132056972 [2024-04-15 00:00:56.972]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 59739
+ src tos = 0
+ fwd status = 0
+ in packets = 13
+ in bytes = 4154
+ src addr = 172.217.168.10
+ dst addr = 157.143.34.100
+ out packets = 13
+ out bytes = 4781
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+C1 00 00 00 01 00 08 E2 4A D5 5D 68 47 4A 30 00 | ........J.]hGJ0.
+43 A1 6D B0 33 2E 3F EC 20 2F 13 6E 05 3A 95 A3 | C.m.3.?. /.n.:..
+68 80 F2 D3 25 F7 D2 32 EA 33 9F 90 04 EF 48 54 | h...%..2.3....HT
+54 19 1F 4E E7 DB C9 E6 D2 49 97 EB 76 4C 4C 38 | T..N.....I..vLL8
+56 35 8F 44 B2 E8 6F 76 6D 71 2B F6 12 EE 0B 14 | V5.D..ovmq+.....
+B3 54 8E E7 08 79 0F E5 C5 8A 26 C2 36 95 34 48 | .T...y....&.6.4H
+F3 77 95 DD AF B5 65 E5 0C 1E 39 FA 2B 66 E7 FA | .w....e...9.+f..
+41 D1 F7 1B E0 DE 51 46 63 3B 82 0C 19 69 16 6F | A.....QFc;...i.o
+C1 37 56 B8 FB 9B EB BF 94 18 96 DD AB AA EC CE | .7V.............
+0E D3 5C 4F 1B EB F7 EA 7C 2E 7D CF C2 CE 05 A7 | ..\O....|.}.....
+5B 21 86 12 80 2E A7 01 04 55 F5 9A B3 81 65 61 | [!.......U....ea
+10 86 F6 4F 23 9B 77 F7 CB 7A 50 80 7A 45 64 6A | ...O#.w..zP.zEdj
+D9 40 3E AB 93 69 66 C3 E6 44 3F 36 15 DC 1A 98 | .@>..if..D?6....
+03 86 BF 71 15 96 D4 74 16 87 AC 60 B5 58 69 3B | ...q...t...`.Xi;
+FE 77 E1 F3 CE 68 CF E1 AB 87 8C 7D 1C 21 E9 CF | .w...h.....}.!..
+16 4B 6A B3 1F 50 94 6B 26 3B C2 66 23 82 AD 8D | .Kj..P.k&;.f#...
+0B 47 60 20 8A BD 91 F5 3C F0 65 57 F6 A4 B8 48 | .G` ....<.eW...H
+57 DD 93 2D A1 73 4A A3 64 C5 B9 A6 4E 41 BC 8C | W..-.sJ.d...NA..
+98 47 9D 17 DA 43 DF 47 28 FF B8 FF 8C 05 44 CB | .G...C.G(.....D.
+46 7F 86 BD 64 8C 65 65 96 DA 72 DF 1A E9 61 A4 | F...d.ee..r...a.
+38 26 F2 F4 E5 CE 24 83 B6 3B 4E F6 27 DC C3 96 | 8&....$..;N.'...
+37 4F 3D 06 C5 0E 13 1E A0 FE C2 83 CC A8 C3 D1 | 7O=.............
+7D 18 A6 69 61 BC E4 18 E8 E7 92 96 36 09 2A B1 | }..ia.......6.*.
+B6 BB F3 F1 67 A7 D2 41 2A 29 8E B9 39 54 AA 89 | ....g..A*)..9T..
+01 BF 20 DB 36 A3 7A CB AE 68 BE 14 21 69 AD 3C | .. .6.z..h..!i.<
+6D 73 E9 82 A1 15 B8 FF DF F4 52 BA 30 40 65 3D | ms........R.0@e=
+AF 37 CD 60 5B 4D 49 2E 23 7D 7F 6A FD EF 7A 46 | .7.`[MI.#}.j..zF
+E3 5A 53 66 D7 6E B0 36 68 97 72 3D E1 D9 A6 D5 | .ZSf.n.6h.r=....
+93 E3 A1 D2 2F 9F 74 90 74 EB 30 F7 A2 C2 7B DA | ..../.t.t.0...{.
+30 8A BD FE 95 58 40 98 E8 D8 00 3F 58 53 D9 FE | 0....X@....?XS..
+68 44 F7 9A C8 CB 2A 8C AE 2D 7B E6 0E FD E4 E4 | hD....*..-{.....
+F2 3D 4E 89 61 99 2A D7 B8 B0 79 22 16 A1 6C 75 | .=N.a.*...y"..lu
+07 36 9C DE 9A 3D 8C 3C EB 6D F1 C7 93 C5 F4 BD | .6...=.<.m......
+0E C0 B0 5D 57 CB 41 E4 E9 EA 95 08 4A 47 AA 9F | ...]W.A.....JG..
+22 3E B1 22 7F 0A DD 4E EE 73 93 25 BD 5A BE 2F | ">."...N.s.%.Z./
+94 0A DE 15 C4 62 F1 11 93 50 84 A3 ED 98 FF 06 | .....b...P......
+A3 4F 3D 6D 34 FA 46 46 9A 71 5D 56 16 F2 FE EA | .O=m4.FF.q]V....
+A0 6B 72 C4 94 89 B5 C3 AC 25 86 E9 BC F1 00 B3 | .kr......%......
+71 7E 45 43 11 A3 E7 6B C9 2B A9 14 D1 62 97 0F | q~EC...k.+...b..
+9F FB F2 B6 64 F0 A1 11 FA 02 7D 13 CD D1 75 D0 | ....d.....}...u.
+76 59 CB E5 F5 80 2D 29 C4 79 58 B0 BA BD 27 BB | vY....-).yX...'.
+82 8F E3 F5 2F 4B EC 3E D7 F1 9B B7 A9 5F 4D 89 | ..../K.>....._M.
+90 30 30 F8 2C 86 AF C9 47 D0 D7 8F 88 55 52 79 | .00.,...G....URy
+DB B1 10 B5 62 D4 BC A0 71 6F DD A2 74 A2 C1 5F | ....b...qo..t.._
+AB 37 F3 5F 36 E1 1D CB 0E 54 44 B9 30 69 AA B2 | .7._6....TD.0i..
+32 DF 01 CA 77 24 1A 27 67 C6 E0 69 B5 7F 3D 56 | 2...w$.'g..i..=V
+9A 9C 3D 71 74 AF 18 8E 1C 2E BD 41 4C 70 33 FC | ..=qt......ALp3.
+B6 B3 2A D2 6D 91 02 EA D1 CE 40 D7 C0 44 A4 45 | ..*.m.....@..D.E
+0F FB 14 9D AF DD CD 64 AE 3B A2 28 BD A8 62 AF | .......d.;.(..b.
+F1 C7 31 5E 86 32 D4 D3 F8 4E 41 A9 5D 24 85 69 | ..1^.2...NA.]$.i
+E9 E5 A0 F6 06 49 DD 60 7B F9 D6 2A 2E 55 C6 83 | .....I.`{..*.U..
+C1 D7 70 CF EF 9D 9B 73 F4 50 0F 72 64 3B C5 E2 | ..p....s.P.rd;..
+4A 76 03 37 EF 82 B2 4D E2 02 50 30 61 1F E2 63 | Jv.7...M..P0a..c
+97 E3 7E 7D 86 C8 0C 44 73 32 F7 D3 2E 6D 09 A5 | ..~}...Ds2...m..
+86 AF 04 52 8B 0A CB B5 6E 6F 0B EB C8 C9 5F 36 | ...R....no...._6
+0C EE 1C CE BB 10 E7 DE F6 6B 7B E2 B4 2C BA 5A | .........k{..,.Z
+A8 B7 34 04 E5 BF 77 EE 63 15 D8 5B 90 18 BC 20 | ..4...w.c..[...
+4B 9D 9F 0A 4B C6 AE 77 10 8B 8D DC 01 91 38 A4 | K...K..w......8.
+67 96 82 0E BE 11 34 AB 22 44 96 C2 1C 36 FE 65 | g.....4."D...6.e
+9E B0 BA E4 00 00 00 01 00 08 E2 4A D5 5D 68 47 | ...........J.]hG
+4A 30 40 DA FA C4 3A 2A 2F 11 32 67 87 91 9A 31 | J0@...:*/.2g...1
+E3 DF 1B 5A 37 DF CA 72 49 B2 24 1C 17 DB 86 0C | ...Z7..rI.$.....
+0B B1 90 D3 EE 70 37 BC 2D 40 5A 82 74 F0 B6 B1 | .....p7.-@Z.t...
+5C BD F6 DF 0E 8B FA 08 14 F3 EA 7C EA CA 98 87 | \..........|....
+2B 5B 72 61 84 B8 7D A7 05 14 20 AE A3 80 D4 2F | +[ra..}... ..../
+58 C6 1C FA ED A9 25 08 C0 97 78 EB C6 A3 A0 34 | X.....%...x....4
+D5 4D FF FD F7 81 6B 40 44 7F 22 14 84 3D D0 C3 | .M....k@D."..=..
+35 D8 62 CF 20 1C E0 5F 69 1D 68 ED 01 95 1B 71 | 5.b. .._i.h....q
+79 72 AC 76 BD 86 D6 1A 4B 3A 9C 61 69 51 20 04 | yr.v....K:.aiQ .
+B6 2B 74 B0 C5 16 E8 77 A9 F9 C9 FF 0C AF 03 2F | .+t....w......./
+54 99 A7 E6 88 3D A5 BC 39 E1 A4 30 3E 82 06 69 | T....=..9..0>..i
+D1 8A 5D 82 72 8D 1D 86 DD CF 28 E2 3A D0 C1 1D | ..].r.....(.:...
+6E 3E 88 C1 B4 7F 58 F7 C9 BA 27 BC 10 9D 0E 5F | n>....X...'...._
+BF FD E8 34 E2 96 D5 E1 2D AB FB 04 A3 C3 4A 29 | ...4....-.....J)
+92 CD 7E 65 E0 EF A4 59 B7 E6 F5 94 98 FD 13 D2 | ..~e...Y........
+7E 36 57 73 5A C1 67 8B D1 AB 3B B9 94 4B 23 BC | ~6WsZ.g...;..K#.
+F2 A4 3C 2D 46 F2 E5 F0 97 4D 3A 65 43 61 71 57 | ..<-F....M:eCaqW
+1B 9E FA 84 DE 77 9B 89 72 55 05 3B 60 6B 32 D1 | .....w..rU.;`k2.
+88 DA | ..
+
+Flow Record:
+ RecordCount = 30
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132277438 [2024-04-15 00:04:37.438]
+ last = 1713132308081 [2024-04-15 00:05:08.081]
+ received at = 1713132377066 [2024-04-15 00:06:17.066]
+ proto = 6 TCP
+ tcp flags = 0x5f .E.APRSF
+ src port = 443
+ dst port = 61655
+ src tos = 0
+ fwd status = 0
+ in packets = 20
+ in bytes = 16585
+ src addr = 17.171.47.23
+ dst addr = 157.143.34.100
+ out packets = 15
+ out bytes = 3579
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 115.517 ms
+ srv latency = 0.000 ms
+ app latency = 2.904 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 5d79edf64e03689ff559a54e9d9487bc
+ ja4s hash = t130500_c02f_8763c20bf469
+16 03 03 00 70 02 00 00 6C 03 03 2B 8C B3 98 F0 | ....p...l..+....
+55 62 49 37 D3 80 56 50 51 6D E9 6B DF B1 58 8A | UbI7..VPQm.k..X.
+B3 11 BC 56 2F 13 25 77 71 FD 72 20 DC 64 15 78 | ...V/.%wq.r .d.x
+F4 1F A0 B9 B4 CB A6 01 29 4D 0A AB A7 00 00 F7 | ........)M......
+23 F9 D1 BE A4 14 72 D7 5E 4D A2 63 C0 2F 00 00 | #.....r.^M.c./..
+24 FF 01 00 01 00 00 00 00 00 00 0B 00 04 03 00 | $...............
+01 02 00 10 00 0B 00 09 08 68 74 74 70 2F 31 2E | .........http/1.
+31 00 17 00 00 16 03 03 0D 46 0B 00 0D 42 00 0D | 1........F...B..
+3F 00 04 7B 30 82 04 77 30 82 03 5F A0 03 02 01 | ?..{0..w0.._....
+02 02 10 1F 8A 57 19 C7 FB 1A 8B 00 EC 11 F7 D8 | .....W..........
+4E 86 86 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B | N..0...*.H......
+05 00 30 6D 31 27 30 25 06 03 55 04 03 0C 1E 41 | ..0m1'0%..U....A
+70 70 6C 65 20 53 65 72 76 65 72 20 41 75 74 68 | pple Server Auth
+65 6E 74 69 63 61 74 69 6F 6E 20 43 41 31 20 30 | entication CA1 0
+1E 06 03 55 04 0B 0C 17 43 65 72 74 69 66 69 63 | ...U....Certific
+61 74 69 6F 6E 20 41 75 74 68 6F 72 69 74 79 31 | ation Authority1
+13 30 11 06 03 55 04 0A 0C 0A 41 70 70 6C 65 20 | .0...U....Apple
+49 6E 63 2E 31 0B 30 09 06 03 55 04 06 13 02 55 | Inc.1.0...U....U
+53 30 1E 17 0D 32 33 30 39 31 34 32 32 35 30 34 | S0...23091422504
+35 5A 17 0D 32 34 31 30 31 33 32 32 35 30 34 34 | 5Z..241013225044
+5A 30 50 31 17 30 15 06 03 55 04 03 0C 0E 67 64 | Z0P1.0...U....gd
+6D 66 2E 61 70 70 6C 65 2E 63 6F 6D 31 13 30 11 | mf.apple.com1.0.
+06 03 55 04 0A 0C 0A 41 70 70 6C 65 20 49 6E 63 | ..U....Apple Inc
+2E 31 13 30 11 06 03 55 04 08 0C 0A 43 61 6C 69 | .1.0...U....Cali
+66 6F 72 6E 69 61 31 0B 30 09 06 03 55 04 06 13 | fornia1.0...U...
+02 55 53 30 82 01 22 30 0D 06 09 2A 86 48 86 F7 | .US0.."0...*.H..
+0D 01 01 01 05 00 03 82 01 0F 00 30 82 01 0A 02 | ...........0....
+82 01 01 00 D6 1D EE 94 DD 1F BD A5 B9 50 0B C1 | .............P..
+7D 65 07 B0 65 A8 46 3D 20 5D DB 39 BE F8 4F 23 | }e..e.F= ].9..O#
+30 C9 15 55 DD BA 4B 21 53 BD 58 65 ED BF 57 00 | 0..U..K!S.Xe..W.
+D6 06 99 86 AC 7A 6A 7B F3 73 25 BC B0 86 2B A2 | .....zj{.s%...+.
+C7 9D D0 18 72 50 9D 79 77 82 D6 E1 12 04 54 3E | ....rP.yw.....T>
+06 57 EE 60 2C AC 13 D0 8E A6 A5 4E CC 44 B1 6D | .W.`,......N.D.m
+9F 59 43 57 C4 75 3B 1A 32 4C 17 1D A2 DD 65 3A | .YCW.u;.2L....e:
+3E 69 E3 F8 9E E6 D7 57 9E 75 8F 0B 98 84 C3 F6 | >i.....W.u......
+71 6F 63 5C AE 7E 21 5A 6E 87 B1 69 AE 8F E9 5D | qoc\.~!Zn..i...]
+E8 10 4E E2 81 0D 8E 30 33 E1 FD 27 BC BA 11 1B | ..N....03..'....
+F4 2E 19 94 01 E6 41 34 AD 82 42 8D 8E 0C 34 11 | ......A4..B...4.
+49 62 67 4B A9 03 49 B1 EA 36 FA A3 84 C0 E7 9F | IbgK..I..6......
+E2 04 59 17 9F 81 2A 6A D7 88 23 02 0D C4 A3 7A | ..Y...*j..#....z
+50 6C 69 D2 5A 7E 5C 80 51 63 A8 EF 5B C4 8D C4 | Pli.Z~\.Qc..[...
+27 5A 79 F7 60 61 80 6E BA 6A 67 1D D5 6F 3B D1 | 'Zy.`a.n.jg..o;.
+89 6E 5A DB 30 89 8F CB 57 B5 87 5E F3 11 DC E0 | .nZ.0...W..^....
+56 70 A2 B7 02 03 01 00 01 A3 82 01 2E 30 82 01 | Vp...........0..
+2A 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 30 | *0...U.......0.0
+1F 06 03 55 1D 23 04 18 30 16 80 14 2C C5 6D 52 | ...U.#..0...,.mR
+DD 31 EF 8C EC 08 81 ED DF DC CA 43 00 45 01 D0 | .1.........C.E..
+30 4A 06 08 2B 06 01 05 05 07 01 01 04 3E 30 3C | 0J..+........>0<
+30 3A 06 08 2B 06 01 05 05 07 30 01 86 2E 68 74 | 0:..+.....0...ht
+74 70 3A 2F 2F 6F 63 73 70 2E 61 70 70 6C 65 2E | tp://ocsp.apple.
+63 6F 6D 2F 6F 63 73 70 30 33 2D 61 70 70 6C 65 | com/ocsp03-apple
+73 65 72 76 65 72 61 75 74 68 31 32 30 19 06 03 | serverauth120...
+55 1D 11 04 12 30 10 82 0E 67 64 6D 66 2E 61 70 | U....0...gdmf.ap
+70 6C 65 2E 63 6F 6D 30 13 06 03 55 1D 25 04 0C | ple.com0...U.%..
+30 0A 06 08 2B 06 01 05 05 07 03 01 30 3C 06 03 | 0...+.......0<..
+55 1D 1F 04 35 30 33 30 31 A0 2F A0 2D 86 2B 68 | U...50301./.-.+h
+74 74 70 3A 2F 2F 63 72 6C 2E 61 70 70 6C 65 2E | ttp://crl.apple.
+63 6F 6D 2F 61 70 70 6C 65 73 65 72 76 65 72 61 | com/appleservera
+75 74 68 63 61 31 2E 63 72 6C 30 1D 06 03 55 1D | uthca1.crl0...U.
+0E 04 16 04 14 20 4F CC B0 7C 3F 01 EE 1B 7F 56 | ..... O..|?....V
+F1 56 D1 59 87 9B EF 49 F6 30 0E 06 03 55 1D 0F | .V.Y...I.0...U..
+01 01 FF 04 04 03 02 05 A0 30 10 06 0A 2A 86 48 | .........0...*.H
+86 F7 63 64 06 1B 10 04 02 05 00 30 0D 06 09 2A | ..cd.......0...*
+86 48 86 F7 0D 01 01 0B 05 00 03 82 01 01 00 28 | .H.............(
+B1 4E E7 5B 95 BC 2A F1 18 22 AA 80 2E B7 B7 B4 | .N.[..*.."......
+18 44 F5 8C 37 7D 5D 04 D5 C8 8C 77 C6 17 1E 00 | .D..7}]....w....
+95 DE 8D D5 8F 6B EB E2 58 39 93 8A B9 EC F7 20 | .....k..X9.....
+91 99 C9 F6 84 36 1C 13 2B C7 DB 1B 1A EB 75 D2 | .....6..+.....u.
+CF A2 3C 28 43 71 41 1F 53 38 30 96 54 E0 89 C5 | ..<(CqA.S80.T...
+0D D4 D0 7D B3 37 DC 09 2E 9A 47 1F 1C B5 51 F4 | ...}.7....G...Q.
+BB F5 A4 1A 1F 3B 09 07 FB 5E B6 CB 18 78 0D 8E | .....;...^...x..
+5E EE 9E 24 9B 94 4A DE C7 D8 59 0A 24 B2 2E 06 | ^..$..J...Y.$...
+FF DB 26 A3 EF AE 56 FC 32 54 60 6A 0B F5 EC 5A | ..&...V.2T`j...Z
+58 44 65 3B 05 F6 9C B2 0B 62 82 4B 09 A7 CC 1B | XDe;.....b.K....
+EA 1B 9B 6F 55 0A 30 CE B6 D4 68 02 78 33 05 3C | ...oU.0...h.x3.<
+FB 47 88 96 E8 0D 87 D1 73 78 B0 4E 40 B5 0F 0C | .G......sx.N@...
+B1 D4 51 B9 25 1D 55 3C D3 71 73 72 F5 FB 81 D4 | ..Q.%.U<.qsr....
+20 AA C0 6F 91 07 9C 67 22 57 FB 2A FD F7 A5 F4 | ..o...g"W.*....
+C2 C9 8D FF 02 8B 45 EA 3E AD 4F EC 83 A5 F2 F4 | ......E.>.O.....
+F7 18 3D 3E 27 5C 6B 9C B7 3E 90 7E 2D F1 1D 00 | ..=>'\k..>.~-...
+03 FC 30 82 03 F8 30 82 02 E0 A0 03 02 01 02 02 | ..0...0.........
+08 23 69 74 04 AD CB 83 14 30 0D 06 09 2A 86 48 | .#it.....0...*.H
+86 F7 0D 01 01 0B 05 00 30 62 31 0B 30 09 06 03 | ........0b1.0...
+55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 0A | U....US1.0...U..
+13 0A 41 70 70 6C 65 20 49 6E 63 2E 31 26 30 24 | ..Apple Inc.1&0$
+06 03 55 04 0B 13 1D 41 70 70 6C 65 20 43 65 72 | ..U....Apple Cer
+74 69 66 69 63 61 74 69 6F 6E 20 41 75 74 68 6F | tification Autho
+72 69 74 79 31 16 30 14 06 03 55 04 03 13 0D 41 | rity1.0...U....A
+70 70 6C 65 20 52 6F 6F 74 20 43 41 30 1E 17 0D | pple Root CA0...
+31 34 30 33 30 38 30 31 35 33 30 34 5A 17 0D 32 | 140308015304Z..2
+39 30 33 30 38 30 31 35 | 90308015
+
+Flow Record:
+ RecordCount = 31
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 215
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131712553 [2024-04-14 23:55:12.553]
+ last = 1713131901997 [2024-04-14 23:58:21.997]
+ received at = 1713132000887 [2024-04-15 00:00:00.887]
+ proto = 6 TCP
+ tcp flags = 0x19 ...AP..F
+ src port = 8822
+ dst port = 28919
+ src tos = 0
+ fwd status = 0
+ in packets = 77363
+ in bytes = 4356041
+ src addr = 157.143.34.100
+ dst addr = 213.144.148.130
+ out packets = 114757
+ out bytes = 160882567
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.939 ms
+ srv latency = 0.000 ms
+ app latency = 6.125 ms
+ in payload = 35
+17 03 03 00 1E 26 63 BD 98 5C E1 DD 35 E9 83 17 | .....&c..\..5...
+5A A1 96 8E 7D 2D 03 A5 84 00 67 16 BF A6 85 D3 | Z...}-....g.....
+B5 F7 3F | ..?
+
+Flow Record:
+ RecordCount = 32
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 5: 1 2 12 15 29
+ size = 1374
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132382149 [2024-04-15 00:06:22.149]
+ last = 1713132382250 [2024-04-15 00:06:22.250]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 51648
+ src tos = 0
+ fwd status = 0
+ in packets = 13
+ in bytes = 7924
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+CD 00 00 00 01 00 08 F8 66 9D D0 4F F4 18 10 00 | ........f..O....
+44 D0 54 94 A0 D1 83 4F 1A DE 52 00 F1 E6 1A 7E | D.T....O..R....~
+69 D7 B5 FE 82 DA 34 17 90 B4 FD 85 43 19 97 A1 | i.....4.....C...
+B3 B6 F7 77 44 FF A4 AA F8 5A 45 5D C4 B3 EE 4B | ...wD....ZE]...K
+78 6B 76 7E 29 62 C3 33 26 6D E6 52 A7 78 2B 92 | xkv~)b.3&m.R.x+.
+B9 17 97 8A A0 B4 C5 04 8E E7 B1 CB A7 20 E3 82 | ............. ..
+9C 9B 67 6D B8 CC DA F5 C4 C9 D5 91 8E 12 AE 55 | ..gm...........U
+B0 ED 73 AA 14 A1 5D 4A CB 7B A2 06 3D 1A 33 80 | ..s...]J.{..=.3.
+A0 30 7C 08 DA 21 25 E4 21 54 D7 9F 00 FD 19 2F | .0|..!%.!T...../
+C6 71 C3 6F 50 B4 0E 02 64 11 A6 67 E7 71 94 01 | .q.oP...d..g.q..
+A9 41 96 D7 F0 F1 D2 EA D5 6B 68 A2 99 BC BD 7C | .A.......kh....|
+4B 24 C2 A8 0B 81 B6 99 6F 41 D7 78 16 AE 46 F3 | K$......oA.x..F.
+AC 6D 73 07 DD 49 CF 01 DB C7 DD CE 6E 2F 74 81 | .ms..I......n/t.
+83 08 69 D1 06 3E B4 05 6B E0 65 15 30 C9 5B F1 | ..i..>..k.e.0.[.
+92 40 45 E1 79 3D 00 46 60 67 41 1E D6 6F AC D5 | .@E.y=.F`gA..o..
+99 24 C5 9A F0 C9 26 ED 40 D4 8A 2C 9C 9B 21 A7 | .$....&.@..,..!.
+DA 49 EB 31 80 3D 5D F8 B0 1B AA 47 4A 41 D6 EC | .I.1.=]....GJA..
+F4 7F D6 C4 D5 BD BB 12 68 BA C3 54 04 56 8B 3A | ........h..T.V.:
+8B 40 B1 7F DA C2 78 CE 4E 35 FE C3 F5 F8 A0 C4 | .@....x.N5......
+23 55 4C 05 6C 66 A1 27 10 32 A0 A1 66 2C BF B2 | #UL.lf.'.2..f,..
+C8 46 3D 76 0F 28 1D B1 77 E9 8E C9 46 33 3C 9B | .F=v.(..w...F3<.
+16 F3 85 0F 87 21 05 55 05 2C E4 EA 47 6D 73 81 | .....!.U.,..Gms.
+5D F1 F3 59 DF 48 49 CE 5F 14 89 D7 9F A2 11 93 | ]..Y.HI._.......
+49 8C 62 F4 FB F0 42 10 A4 79 C4 0D DC 65 F4 0A | I.b...B..y...e..
+BC 2F B0 5F 51 1E D1 02 C2 43 54 87 E2 AB F1 E0 | ./._Q....CT.....
+84 E2 78 2C 5C 1A 50 5A 93 50 B2 F2 1C 78 92 E4 | ..x,\.PZ.P...x..
+59 C2 63 64 BA E8 BD 93 2D 16 C3 62 BB 77 E5 C4 | Y.cd....-..b.w..
+88 5F B1 77 8C DE 7E 98 F0 48 D0 ED 01 D3 52 90 | ._.w..~..H....R.
+2E 5E DA AD 6F 4A 4E EB 99 9B DB 7B AB BB C0 EF | .^..oJN....{....
+A6 66 6A D7 C9 7C 44 D3 8D 6F 94 87 38 11 FA 0A | .fj..|D..o..8...
+46 69 05 3F 25 C1 D8 4F 55 BA 32 8C B0 B2 D2 EB | Fi.?%..OU.2.....
+E6 A6 7D 94 3A 10 96 8A EB 5B 5A 05 3E 04 C0 F5 | ..}.:....[Z.>...
+72 75 74 BD D1 A3 68 2C 0C 65 A9 39 2E 8A 18 D5 | rut...h,.e.9....
+30 B1 9E F0 25 AB 4F C1 B3 75 1A 0B DE 7C 2B 0F | 0...%.O..u...|+.
+66 66 4A 59 B1 4C 84 1D 56 B2 82 42 37 4B B5 33 | ffJY.L..V..B7K.3
+76 44 62 86 3D 3D 9C 6B 48 A8 0B 2E BB 72 DB 53 | vDb.==.kH....r.S
+09 1D DB 34 21 5A 47 51 5F 65 94 3E E3 A3 BB 84 | ...4!ZGQ_e.>....
+57 23 67 EF 87 49 CD 3B 64 92 51 D1 04 68 CD AF | W#g..I.;d.Q..h..
+A8 85 D2 10 A9 24 52 AE 00 1E F8 AD BF DD 38 2C | .....$R.......8,
+56 F1 6A A3 AA 33 0F AA 09 8D 51 56 7A 43 E1 F3 | V.j..3....QVzC..
+E5 BA 57 46 D6 50 A0 E1 71 E2 9A EE EF B7 A4 BD | ..WF.P..q.......
+93 DD FE 49 F2 DE BF AE A4 B1 FD F8 20 B7 B6 67 | ...I........ ..g
+24 27 DB 0E FD 20 6A 2E 9A CA E9 C4 C1 50 DE D8 | $'... j......P..
+96 72 5A AF 9A D3 B4 A3 D5 BF 3E 99 E0 19 96 B4 | .rZ.......>.....
+A2 CA BB 67 ED B6 B5 E7 32 F2 FD F8 1A 69 F3 24 | ...g....2....i.$
+60 45 E3 D0 0F 40 AC E7 6A 9D EE AF 4D C0 92 85 | `E...@..j...M...
+10 76 44 EC 0F 61 B9 8A C6 65 C3 AA 13 64 B9 B4 | .vD..a...e...d..
+80 63 67 A8 AD 00 81 60 2F 85 63 75 BD 4F 93 23 | .cg....`/.cu.O.#
+8A EC B5 CD 0D BB 0B 1D 46 D2 A0 44 DF 5D 0F C7 | ........F..D.]..
+59 A1 D8 A6 5C B9 AB 1E FC F9 C3 5A 20 47 C9 1D | Y...\......Z G..
+7C 25 25 9D FF 00 9A 50 55 B0 A6 13 2C EF 13 DF | |%%....PU...,...
+13 1F 19 9F B6 22 DB 51 CB 35 7F D9 FA 61 55 B3 | .....".Q.5...aU.
+60 88 F1 47 00 91 80 5F E1 50 43 4A 97 0B 5B E4 | `..G..._.PCJ..[.
+F0 73 2D 48 B9 49 3D C6 BF 7D A1 49 8F F7 C1 7E | .s-H.I=..}.I...~
+4C 2E B8 D1 0D 5C 3F B5 FD CD AA 70 55 22 9B AA | L....\?....pU"..
+43 C5 3C DB 82 DB D1 61 90 CD 15 7C AE 99 00 9A | C.<....a...|....
+E7 33 91 D0 22 92 DB 97 FE 12 86 78 4A E3 6E B9 | .3.."......xJ.n.
+4C 11 33 CD 3C EC 22 4A AB 4E A3 01 F6 8F 6A 6D | L.3.<."J.N....jm
+B6 25 62 7D E5 56 0A 60 F3 E6 F2 74 CC E3 32 13 | .%b}.V.`...t..2.
+31 85 51 4E E8 4E 56 91 34 D6 EA 8B 89 32 16 1E | 1.QN.NV.4....2..
+21 5E DA FC 8E F0 CF 60 7E CA 3C 90 93 32 32 C9 | !^.....`~.<..22.
+94 61 3F B4 F5 15 9B C2 50 23 FB 7C AD 61 E3 C7 | .a?.....P#.|.a..
+CA 7C 39 AC 41 8B 3D 40 44 8B F6 74 21 C3 76 61 | .|9.A.=@D..t!.va
+83 2C 0A F0 45 E7 65 A9 35 D2 C2 1E 4C A9 3E 04 | .,..E.e.5...L.>.
+D1 DE A1 55 EE 84 9A 95 F7 27 54 FB D6 33 F7 09 | ...U.....'T..3..
+7C F4 78 83 BE 33 B2 0D F8 DE EA 91 5A A7 F4 0B | |.x..3......Z...
+EB FD 26 7B 4F A8 8D 08 AA 47 B6 94 F7 A3 13 EA | ..&{O....G......
+51 4F 84 66 68 9A F8 A4 F2 84 2B A8 94 25 CC B9 | QO.fh.....+..%..
+DA 8E 1E B2 7A 96 B5 3F EC 20 6C 97 55 C9 12 9C | ....z..?. l.U...
+8A D4 10 9B 12 6B 50 AD 84 5E 0F A8 D9 0D 6A C1 | .....kP..^....j.
+8A 59 22 AB BB 89 88 0D 4B EC 06 80 2A CA 96 8A | .Y".....K...*...
+B8 28 3D 68 34 9E 44 EA 8D 03 FA 17 A4 77 4F 5A | .(=h4.D......wOZ
+C0 2B 03 40 43 58 4D 25 E5 07 6D 11 37 42 9A 67 | .+.@CXM%..m.7B.g
+5F AF 09 6D 6A 7B 26 10 53 91 54 EF 75 E5 C6 CE | _..mj{&.S.T.u...
+57 9F 2D 77 87 17 21 12 76 45 26 4A ED 9A D6 46 | W.-w..!.vE&J...F
+96 8F 4E DB 8D A3 91 53 AA DD 42 10 B2 32 5F 30 | ..N....S..B..2_0
+A6 7A 8B 3E 89 F7 99 21 53 D3 B1 C4 89 51 A8 21 | .z.>...!S....Q.!
+2D 4C 4E B9 DF 25 41 F0 28 AD 18 C2 67 82 84 A4 | -LN..%A.(...g...
+7F 91 | ..
+
+Flow Record:
+ RecordCount = 33
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 5: 1 2 12 15 29
+ size = 1374
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132382156 [2024-04-15 00:06:22.156]
+ last = 1713132382236 [2024-04-15 00:06:22.236]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 62094
+ src tos = 0
+ fwd status = 0
+ in packets = 11
+ in bytes = 4235
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+CF 00 00 00 01 00 08 F7 3F ED 54 B4 25 50 4F 00 | ........?.T.%PO.
+43 9E B2 C8 9C D7 1F 54 E4 35 8A 0A 3F 98 2C 17 | C......T.5..?.,.
+86 05 50 C3 82 14 9B 6C 75 F3 F8 CC 32 7B BB 2C | ..P....lu...2{.,
+0F 78 72 56 AA E1 9C FC 99 04 50 2D 06 B6 21 32 | .xrV......P-..!2
+44 C4 23 8E A0 C6 35 CB C8 EB AC E8 99 DB 60 FE | D.#...5.......`.
+A1 43 B5 61 DD 52 F9 C5 2C C5 74 8F CA 04 34 B6 | .C.a.R..,.t...4.
+41 82 F9 5E 47 FF DB 57 C2 D4 AC 00 76 26 02 7E | A..^G..W....v&.~
+C6 56 40 67 35 CD 46 27 0C 37 A0 A3 D6 E7 20 A9 | .V@g5.F'.7.... .
+22 82 0E 15 49 C5 D6 1D A2 1E D5 FC B9 07 F6 DF | "...I...........
+25 9A 41 7B 36 CE 7A EC D1 82 E1 61 17 16 63 7C | %.A{6.z....a..c|
+6F 37 11 7A 7C A1 C9 FC 80 DC 70 60 E7 90 36 E6 | o7.z|.....p`..6.
+CF 0A 1D 46 BF 2E 7B 78 4F 35 7D 8E CC 6C 09 71 | ...F..{xO5}..l.q
+93 0D F7 E4 C0 89 24 FF 6E 29 02 D5 89 45 E5 42 | ......$.n)...E.B
+F2 E5 18 8D 27 42 75 7A BD C2 D2 AF F4 F4 79 B2 | ....'Buz......y.
+43 1F 6C F0 B6 0A 88 6F 96 93 1D 4E F1 6A 42 04 | C.l....o...N.jB.
+63 F6 FF 69 73 03 75 15 44 26 98 CD 75 8F 99 89 | c..is.u.D&..u...
+78 85 06 F4 70 78 B8 24 A9 A8 D7 6D 06 63 E5 BC | x...px.$...m.c..
+CA 39 E9 F9 DB 5C 30 DC E6 A4 C3 60 18 4B 1F 4A | .9...\0....`.K.J
+C6 A8 02 DD 46 90 CB 6C A9 28 A4 ED 25 15 56 81 | ....F..l.(..%.V.
+65 C3 F6 64 84 E9 FA 36 1E F3 72 25 99 BD 27 92 | e..d...6..r%..'.
+AF 9C 3B 1F 26 F3 5F 3A 48 CE D5 8A 9E 54 91 B0 | ..;.&._:H....T..
+88 1F 74 08 F9 EA 0D 67 58 D5 1F B1 FD 1B 55 2D | ..t....gX.....U-
+35 5B 40 A4 8E C5 9D B3 1E 6D BA 15 77 71 8B 50 | 5[@......m..wq.P
+72 82 56 67 26 7E 38 72 21 DF F9 C4 AF BC 84 DC | r.Vg&~8r!.......
+61 88 84 6F 21 37 4A 23 86 48 C6 E5 85 5D C8 90 | a..o!7J#.H...]..
+FD 9B E1 98 8E A8 0B A6 73 C2 BF 5A 2B 60 B7 DF | ........s..Z+`..
+29 01 F8 3B 7A 11 A6 AE 89 D1 F7 9B 35 27 D3 2E | )..;z.......5'..
+DD 18 13 7E 57 FF CC 5F 0D 8D B5 70 BB AF E5 24 | ...~W.._...p...$
+81 69 72 9B 4A 64 1E 48 CE F1 62 7A F1 9B 9D 80 | .ir.Jd.H..bz....
+10 1F 50 FE 23 1B 56 0F 78 E4 7F 21 9D 82 55 94 | ..P.#.V.x..!..U.
+35 CF CA 72 39 31 69 CA 79 71 3E 32 7E B1 6A 89 | 5..r91i.yq>2~.j.
+EC 90 3D 04 1D 14 D8 6F 7B 6B DB 91 00 7C A3 64 | ..=....o{k...|.d
+7C 63 12 15 9D 54 6F B4 F3 7F 7E C2 0E 9D 13 16 | |c...To...~.....
+58 B9 D2 6C 2D 24 92 0C FC 4A 86 AA 4F 10 D1 3E | X..l-$...J..O..>
+2E 59 A0 C7 51 9A 13 78 02 80 06 7F E1 C4 ED 7A | .Y..Q..x.......z
+F7 21 27 A8 97 67 A6 B3 83 51 04 8D 59 15 76 D4 | .!'..g...Q..Y.v.
+38 A8 A2 60 B6 A1 5A F1 D9 80 93 B9 C6 AE 67 F1 | 8..`..Z.......g.
+B1 FC 81 DC A8 65 9A D3 62 D9 8F A9 F7 9C 3D 38 | .....e..b.....=8
+F0 B4 A2 4E 2E 89 26 A6 9F D9 13 E7 7E 6D 27 DD | ...N..&.....~m'.
+D5 F0 07 2C B6 E2 90 27 14 D8 CC 95 74 75 20 A0 | ...,...'....tu .
+77 AD 92 9B A1 9B DF 1C 00 E1 C1 2C EF F0 13 CB | w..........,....
+C0 92 F5 2E 35 8E 59 23 7F 6C B0 53 9C 50 FB DA | ....5.Y#.l.S.P..
+0F 4B 69 B7 43 D6 9D 8A ED 03 25 3C E1 23 E1 3E | .Ki.C.....%<.#.>
+97 AD AD 23 68 37 94 BB 76 54 63 55 B2 D9 A2 59 | ...#h7..vTcU...Y
+A6 FC 1E 40 4A C9 38 B5 ED 04 F8 CC 72 15 6D A9 | ...@J.8.....r.m.
+6B ED D3 87 6C 19 5C 81 D1 6F DB 9A 3E 11 FF F8 | k...l.\..o..>...
+B3 B1 D7 E5 0B 83 76 EA 2C 7E 17 51 0F 72 0A 60 | ......v.,~.Q.r.`
+D2 61 F8 A1 32 48 7F 9F F0 2B E2 5C 7B 92 87 64 | .a..2H...+.\{..d
+A2 10 CA 14 A9 B1 DE 11 F2 ED A1 7F E1 61 A9 DF | .............a..
+55 1A 7B 14 6D EC A3 96 85 02 CE 9F 7D EA 4C B5 | U.{.m.......}.L.
+75 F4 88 AA AA 1A 1D 05 93 73 44 4B C9 32 53 23 | u........sDK.2S#
+F3 2D F6 C8 91 74 AF 75 EB 25 97 3B 73 30 FC 0F | .-...t.u.%.;s0..
+8D CE EB 59 0E CB E5 9D BC 2E 96 56 13 8F 23 9C | ...Y.......V..#.
+F7 5D 99 61 13 8C 3A FE CD F7 61 F7 AC 8B 03 03 | .].a..:...a.....
+A1 F8 37 D3 7A 4B 31 43 A8 0C 30 B3 0F 8B 38 5C | ..7.zK1C..0...8\
+54 4E 0D C1 5C 90 FA B0 61 51 76 B2 61 2B F2 8C | TN..\...aQv.a+..
+FB 35 FE FA D0 E4 6D 6C 2B B5 ED 29 A8 4B 94 87 | .5....ml+..).K..
+CE B4 AB 95 A4 5F 4D 66 68 96 0B 4F AD D7 B8 78 | ....._Mfh..O...x
+E8 9F B9 A2 33 E1 28 66 90 B9 6D AD CD CA 13 EB | ....3.(f..m.....
+EA 00 00 00 01 00 08 F7 3F ED 54 B4 25 50 4F 40 | ........?.T.%PO@
+DD 7C 19 06 61 91 7B 50 62 B3 63 73 49 A5 C5 11 | .|..a.{Pb.csI...
+BB CC C1 EA 7F 4A 68 1D E1 75 D8 8E 7E CF E8 77 | .....Jh..u..~..w
+67 B3 48 7E B3 5B 69 A9 B4 96 1C BD 48 8E 97 47 | g.H~.[i.....H..G
+69 9D AF ED CD 27 58 97 A9 61 A0 C7 1A 03 D9 D6 | i....'X..a......
+37 61 86 09 0A 1B 09 45 10 2C DF 51 4C BA E5 26 | 7a.....E.,.QL..&
+6C BD 4A BF 98 DF F3 88 F7 B6 45 C3 28 A3 77 E3 | l.J.......E.(.w.
+CB 35 89 A2 8A 80 B0 F8 58 60 B4 87 E5 74 47 61 | .5......X`...tGa
+18 5B A5 69 C3 EA FE 9C 59 58 65 BB 91 D8 7A 14 | .[.i....YXe...z.
+64 FC 91 60 16 A4 B7 8B 01 65 0C 83 77 19 CB EC | d..`.....e..w...
+DB AC 74 0B 33 82 BA 24 E4 F2 CC 5C B0 F1 5A 6B | ..t.3..$...\..Zk
+7B 75 9D BE C2 09 0B 2D C1 29 47 36 42 30 FD 5D | {u.....-.)G6B0.]
+BA 86 8F AF 06 DD C1 5A E5 04 03 CF 2A 86 33 BE | .......Z....*.3.
+34 50 59 BA F1 2C A0 56 AC 48 8F 8B 35 38 56 8B | 4PY..,.V.H..58V.
+A7 9D 1E E8 05 FB E9 7B EF 23 0F A4 C3 46 4E 86 | .......{.#...FN.
+8E FF 56 9F B2 EF F0 03 02 D9 F3 57 F6 46 84 00 | ..V........W.F..
+7B CB F6 CC 91 FA B8 E6 89 B6 3B E0 E6 73 23 02 | {.........;..s#.
+92 90 75 B4 AA 4B 87 EC 06 03 6A D5 BC 19 3B 5B | ..u..K....j...;[
+9A 8F FC 66 28 BE 44 3B 9C 27 45 A5 4D 21 23 41 | ...f(.D;.'E.M!#A
+D9 A8 | ..
+
+Flow Record:
+ RecordCount = 34
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132215178 [2024-04-15 00:03:35.178]
+ last = 1713132246172 [2024-04-15 00:04:06.172]
+ received at = 1713132344716 [2024-04-15 00:05:44.716]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 58109
+ src tos = 0
+ fwd status = 0
+ in packets = 31
+ in bytes = 18717
+ src addr = 17.248.209.70
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 7510
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 35.872 ms
+ srv latency = 0.000 ms
+ app latency = 0.137 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 5F 95 36 4B 3B | ....z...v.._.6K;
+A8 68 F4 A5 B1 0D F8 D4 1C 96 CF 01 51 38 5B F5 | .h..........Q8[.
+2E B9 47 59 3B AC 5C E4 04 2F BC 20 AC D5 26 82 | ..GY;.\../. ..&.
+E0 3C 9C 98 F0 83 B9 FE 54 75 7C 9A EC AC 91 B0 | .<......Tu|.....
+0F 42 99 B1 52 A0 25 B4 79 E6 84 DE 13 02 00 00 | .B..R.%.y.......
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 25 | ..+.....3.$... %
+D5 67 AD 8A 9D AA 38 7C C2 B5 85 5F A4 BE B6 FC | .g....8|..._....
+2C 1A 8F 28 87 93 EC 18 25 ED 62 CC CC FE 01 14 | ,..(....%.b.....
+03 03 00 01 01 17 03 03 00 2A 06 20 73 A3 20 EB | .........*. s. .
+41 9C EC B4 9C 12 6D FA 16 9E 91 E4 FD 79 3E 1A | A.....m......y>.
+AD 53 38 A8 90 90 98 21 EB 04 31 7A 07 E8 7D 0C | .S8....!..1z..}.
+E1 3D E1 8C 17 03 03 11 25 C5 1C 21 48 1D A3 6E | .=......%..!H..n
+31 E9 DF 43 7B 3B DC 7A AF 65 D3 92 CF 45 20 07 | 1..C{;.z.e...E .
+57 16 EF 76 9C FB 5C 9E 07 8F 18 CC 60 79 33 EB | W..v..\.....`y3.
+8E 10 A1 EF B9 3A 14 86 57 8B 89 76 2C E4 EC 33 | .....:..W..v,..3
+62 18 6C D2 08 6D 1F 9C 0B AE 26 CF B8 08 16 9E | b.l..m....&.....
+B2 C2 3C F5 13 A4 CF 61 DC 8D 68 66 23 0D DD B6 | ..<....a..hf#...
+AE CF A6 23 4D 90 D2 46 47 D1 40 81 7B 74 14 A6 | ...#M..FG.@.{t..
+9C B9 45 A5 8A 3A 4C 06 52 57 8F 5C 1D AD B0 55 | ..E..:L.RW.\...U
+DA 8A AA 09 6C AB E5 5A 0F 05 FB 6C 7B 4A F1 2F | ....l..Z...l{J./
+36 A1 69 21 C7 DE D1 E6 36 46 EF C9 09 8A 90 81 | 6.i!....6F......
+9A C0 F7 46 F5 11 C5 89 15 04 0E 84 38 1C 3A D2 | ...F........8.:.
+07 62 E9 D2 6D 8A 7E 1B 13 A3 73 47 1E 78 B8 F8 | .b..m.~...sG.x..
+8C 29 93 D3 F5 B9 82 D2 05 08 DD 0D 3D 35 4C 00 | .)..........=5L.
+41 BD 26 31 AB 75 91 63 A8 22 81 1A 56 01 87 4B | A.&1.u.c."..V..K
+F8 4C FB A2 22 A3 DF E9 FD B0 E6 89 EA D8 41 9A | .L..".........A.
+80 8C F0 00 AD 23 F6 BC B3 26 34 D0 BE 37 02 11 | .....#...&4..7..
+95 FD DF F7 C2 09 F7 58 6E 40 11 B2 52 CD DC 4E | .......Xn@..R..N
+6C DE BB 83 AE F3 25 BF 92 6A 32 FD 64 5C E4 23 | l.....%..j2.d\.#
+89 9F 34 C1 24 14 40 4C 1D 18 78 86 A5 A6 D9 8C | ..4.$.@L..x.....
+E4 CD C2 FB BB 27 8C 89 E6 A5 C3 8D 5E F2 4D DC | .....'......^.M.
+E3 CB 67 A0 6B 18 98 56 1B 53 2D 15 BF FC CD 01 | ..g.k..V.S-.....
+8F A3 6F 33 36 55 16 B2 AF 04 14 4A 1D B4 8C F1 | ..o36U.....J....
+89 3E 79 08 17 30 CE 6A BF 2F 56 71 3E 6B 07 27 | .>y..0.j./Vq>k.'
+13 99 F2 2C C8 84 16 36 2F CC 01 CB C2 D1 D0 EF | ...,...6/.......
+31 F3 BF 9A 24 85 7D CD 52 F0 66 D0 86 B1 A4 C0 | 1...$.}.R.f.....
+11 6E 96 D2 DF 47 FF F5 63 D6 D6 DB F5 D3 BA CB | .n...G..c.......
+69 BF A2 74 D4 22 41 AD B6 81 28 05 3C 2C 33 C5 | i..t."A...(.<,3.
+C7 93 50 84 55 77 E8 22 09 31 20 82 58 7E C5 F5 | ..P.Uw.".1 .X~..
+C8 C2 78 E7 27 D9 4C 3B 71 6C 5C 34 65 25 EE 63 | ..x.'.L;ql\4e%.c
+4D 8C 85 00 5F 70 B9 9C D2 EB D9 3C 86 F3 A4 A8 | M..._p.....<....
+02 7C FC A8 55 C7 54 42 03 56 2C 49 99 77 80 E5 | .|..U.TB.V,I.w..
+AB B3 C9 98 2E 71 32 2A D0 A9 1B 25 BD 7C 65 30 | .....q2*...%.|e0
+4B C0 3E 0B C3 F5 E2 6F 5F E9 86 AE 61 09 38 8E | K.>....o_...a.8.
+B6 CD FF 35 31 78 42 F6 3A 84 CF 32 3E 10 A6 12 | ...51xB.:..2>...
+70 BD D3 72 3D 2F 0A A9 64 B1 04 9E 98 1F D5 3E | p..r=/..d......>
+8B 8A FB 79 E8 36 93 FC DB E2 56 74 9C 5E DB FF | ...y.6....Vt.^..
+A1 A2 46 BC 2C 70 8C D3 E7 27 2C 43 C7 A3 31 FA | ..F.,p...',C..1.
+C6 9C B8 02 78 82 F2 F7 BE 27 1B 9B A8 8D B0 DA | ....x....'......
+79 62 3A 61 83 29 E9 C4 E5 5E 4D EC 0F 2E C7 72 | yb:a.)...^M....r
+5A FF F0 03 AC D6 3C FC 50 83 10 91 7B E3 43 81 | Z.....<.P...{.C.
+58 C8 0B 96 73 8B F8 CC 81 8C F0 1F 7B 23 F5 11 | X...s.......{#..
+BE 63 88 84 DF F6 51 9E B6 E7 89 48 BA C2 65 A8 | .c....Q....H..e.
+07 4D 58 45 6B 9F 45 7F F5 D1 0E BE 2F 30 3F E7 | .MXEk.E...../0?.
+60 32 5E 46 23 8C 8F F6 3D 54 54 82 C2 41 D5 30 | `2^F#...=TT..A.0
+BD 2C 7F 45 EE 29 EC EC ED CB 98 7C 3D DD 4D C7 | .,.E.).....|=.M.
+B9 B0 E8 5A 7F 41 0D 76 0A 7F 1F 16 42 34 1C BF | ...Z.A.v....B4..
+32 D7 CF 8D 73 D9 31 AD 52 5F 47 C3 9F 08 CE 40 | 2...s.1.R_G....@
+5B 7A D8 37 7B 22 A4 0C 5B 7F 4B 6C 82 5C B7 F8 | [z.7{"..[.Kl.\..
+9B 84 AF 00 13 9D 35 D9 0E 44 16 41 0B 55 06 BF | ......5..D.A.U..
+60 BD 6A 28 31 44 23 E8 78 72 3C 56 06 07 BD C0 | `.j(1D#.xr..xO.yM...
+9E 34 F3 4C 95 8A 35 86 0E 46 CA 56 5A B8 78 97 | .4.L..5..F.VZ.x.
+A9 19 16 1A 39 50 97 98 7F EF CE 50 E5 03 2D 8B | ....9P.....P..-.
+41 7C FC 44 E3 B2 A7 2E 61 53 AD 4B A5 82 A8 32 | A|.D....aS.K...2
+7D 0D 94 CA 8B 94 56 3E D7 F1 42 3C DE BC 0A 6B | }.....V>..B<...k
+6A DC E4 49 6E 75 50 09 23 CE B1 7F 36 19 AE 4B | j..InuP.#...6..K
+18 87 09 6C 7B 75 A8 9C 32 72 4D 66 FE 0B 17 B5 | ...l{u..2rMf....
+AD 4B 21 5E A1 FD 7E 50 E8 EB 38 86 6E F1 29 37 | .K!^..~P..8.n.)7
+FC D7 99 B5 E6 A8 EA 25 8F 02 C0 A4 90 55 0E 59 | .......%.....U.Y
+04 05 D7 E0 39 F0 B0 AA 19 43 E0 FC 2B FB BC 94 | ....9....C..+...
+4C 21 64 27 A7 E8 BA 99 8A F0 4F 9F A0 A3 70 24 | L!d'......O...p$
+5B FC 09 A4 FE AF 75 57 29 16 D7 B7 B3 9E AD 04 | [.....uW).......
+A4 E3 FF 53 7A D9 3C 80 25 2E D3 2D 21 C9 99 E4 | ...Sz.<.%..-!...
+03 FF C8 4D 59 E3 1B 29 40 5D D1 8E 3F 6A B3 FC | ...MY..)@]..?j..
+EC 12 DB 9A 89 8F 64 D3 | ......d.
+
+Flow Record:
+ RecordCount = 35
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132247739 [2024-04-15 00:04:07.739]
+ last = 1713132278735 [2024-04-15 00:04:38.735]
+ received at = 1713132344717 [2024-04-15 00:05:44.717]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 54177
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18600
+ src addr = 17.248.209.68
+ dst addr = 157.143.34.100
+ out packets = 33
+ out bytes = 6997
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.248 ms
+ srv latency = 0.000 ms
+ app latency = 0.646 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 DE 4B 54 CE 60 | ....z...v...KT.`
+EA F7 8D F7 0E A1 04 9C BE 26 AA 77 72 7B 8A 3D | .........&.wr{.=
+53 88 D2 A2 AD 13 6D FA 01 70 8F 20 5D 8D 40 36 | S.....m..p. ].@6
+E1 AD 53 AA 9B 5F AF AA 31 57 AC F2 BA 2E C1 30 | ..S.._..1W.....0
+B1 1D CE 76 08 77 04 66 CA 51 BC E9 13 02 00 00 | ...v.w.f.Q......
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 E3 | ..+.....3.$... .
+AE 33 17 B0 0F 6F 0E 59 D0 FE D4 65 F4 FA 4E 5B | .3...o.Y...e..N[
+9E 9E FE 48 66 B8 93 9A F8 4A 3F 41 11 41 0C 14 | ...Hf....J?A.A..
+03 03 00 01 01 17 03 03 00 2A F4 6E 08 19 4A EF | .........*.n..J.
+73 ED D6 F3 5F BC F8 18 07 AA 67 52 1E 2D 2B A3 | s..._.....gR.-+.
+2A E4 C3 31 C1 7D 48 85 CE 38 71 36 A9 B6 1E 8B | *..1.}H..8q6....
+D9 D5 30 19 17 03 03 11 25 56 DA 20 19 6E 15 CF | ..0.....%V. .n..
+D5 C3 2E FA 2A 91 88 E0 0E 9A 55 F7 55 FD 2C F4 | ....*.....U.U.,.
+1F 6B C0 BE 70 EA D0 31 43 74 C3 9F 8D A7 D5 8E | .k..p..1Ct......
+E7 4D 1A 8D 17 31 38 AB BD C3 A5 B6 1E E1 B8 69 | .M...18........i
+0F 70 B5 C7 B8 2E 48 33 19 38 09 EC 16 10 5E B6 | .p....H3.8....^.
+21 49 44 89 4E BA 21 B8 61 F4 B2 0A E1 5A C6 45 | !ID.N.!.a....Z.E
+19 9A C1 9F 6E D4 C7 1D 8F 13 A5 CC 57 22 75 BB | ....n.......W"u.
+AE F1 F6 98 B1 AB 36 1A 03 25 C4 2D 99 29 4C 0F | ......6..%.-.)L.
+90 09 7F FE 2D 8D 1E E8 0A EB E5 FE 77 CB 57 0C | ....-.......w.W.
+FF 71 D2 B7 8E AD 7D 7C 5A 6C 3A B8 C7 89 BE 6A | .q....}|Zl:....j
+41 C9 C9 5B 40 C3 74 22 26 83 CE A0 02 6E 3F 1C | A..[@.t"&....n?.
+22 9F CB 30 07 24 A3 A2 EB 6F 2C 51 E1 38 4C 67 | "..0.$...o,Q.8Lg
+D9 1C BB F3 F2 5E 7A 0D 1B D3 E8 D2 00 F0 25 BA | .....^z.......%.
+CE 18 64 95 51 D3 2A 48 08 F7 57 96 20 5C 82 81 | ..d.Q.*H..W. \..
+86 A8 D0 E9 B5 01 BD 99 2D F3 31 E6 65 06 F2 09 | ........-.1.e...
+17 58 F1 E5 42 DA AB A5 4B 99 49 08 41 91 C7 9E | .X..B...K.I.A...
+D6 EA C0 66 6D C8 F7 E1 DE B0 9E D1 A0 B8 A8 B7 | ...fm...........
+5C 2B F3 A4 76 D0 E8 13 35 5C 12 31 9C F2 05 20 | \+..v...5\.1...
+2F 99 F8 18 DA C3 AA A4 C0 76 7D E8 E0 65 E3 6F | /........v}..e.o
+6D E2 8F B2 85 2B A1 41 7D 42 AB 0F 01 8A F2 46 | m....+.A}B.....F
+E3 90 B0 FE 62 81 9B DA BD F7 DD FC 3C F4 2D E2 | ....b.......<.-.
+FC 51 B8 81 13 1F 63 67 56 FC 23 C4 32 FF DF 50 | .Q....cgV.#.2..P
+40 88 8B C8 02 B1 61 7B 93 19 79 47 DB 82 56 34 | @.....a{..yG..V4
+7E CB 87 2D 60 33 37 53 79 22 EE 84 20 0D 58 2F | ~..-`37Sy".. .X/
+7C B5 54 E9 97 C3 C6 EA EE 0F 2A BC 0D 46 B2 73 | |.T.......*..F.s
+82 C5 E5 24 80 5B 92 3A DF E2 EE A0 07 30 72 D7 | ...$.[.:.....0r.
+F7 E6 19 49 74 3F 24 04 72 69 61 D4 19 37 A7 1C | ...It?$.ria..7..
+D4 3A CB D2 69 83 2A 29 C0 0D 56 E3 9B 9F 18 43 | .:..i.*)..V....C
+07 A6 EF 37 65 87 B6 E2 5D 05 FC 27 44 46 EE 04 | ...7e...]..'DF..
+9D FF BD 1C 95 2D D2 AA 3F E0 D7 A7 BF 56 41 1E | .....-..?....VA.
+F2 01 94 B2 81 39 6E 10 63 68 7A B0 51 F1 94 C0 | .....9n.chz.Q...
+D5 08 7C 85 D2 20 43 3C 0B F1 87 00 C5 27 B1 F0 | ..|.. C<.....'..
+39 A0 E4 AD B0 FD 9A 69 8F 34 56 4B 74 C0 B3 07 | 9......i.4VKt...
+82 89 13 E4 14 CC 0A D7 CC 0D DE 11 61 7C D3 30 | ............a|.0
+4E 08 25 4A A4 69 1C 51 30 A2 37 17 8C DE 13 B8 | N.%J.i.Q0.7.....
+CC F6 6B 46 88 B8 DD 87 70 DC 70 AD 5B C5 4C 3C | ..kF....p.p.[.L<
+04 4F F6 DB EA 18 98 A6 70 61 EC 1D 2E 11 C2 70 | .O......pa.....p
+F3 25 81 79 B1 C1 64 6A B2 27 07 1E 93 8C 5E 4A | .%.y..dj.'....^J
+03 4F 55 49 32 87 20 90 5D 6A CE A1 2B 6C 9E AF | .OUI2. .]j..+l..
+8C 32 24 2E 85 06 EB C9 C4 E5 05 D1 E0 D9 9F 93 | .2$.............
+F0 E4 FF 54 CA 20 56 1E DC 01 CA 2D 84 54 22 4C | ...T. V....-.T"L
+59 DB B0 FF AF 26 5F 1F 08 EB 19 01 A2 A2 F5 37 | Y....&_........7
+CD 99 AA AF 30 7B 0A 33 1E 33 A7 C0 63 35 0A 3F | ....0{.3.3..c5.?
+43 CE 09 BC F1 63 A3 89 9C A1 63 D0 F2 50 D0 FE | C....c....c..P..
+E3 D1 EC 0E 91 E0 F2 0E 2A 23 B7 39 30 C7 C6 8B | ........*#.90...
+44 12 9A 10 69 C6 40 93 8B F3 E8 FB 83 7B 2E DB | D...i.@......{..
+61 30 D8 97 8E 5E 47 AA A9 BB 49 2F DE 9D 1F 63 | a0...^G...I/...c
+A2 4D 31 CC 8C 7B 39 13 A9 82 CE 25 2A 7E 42 26 | .M1..{9....%*~B&
+3F D9 F0 85 80 EC D7 B9 97 75 A2 3C E2 03 B8 31 | ?........u.<...1
+7C 7C 96 B6 CA 90 7D 40 DD 2A EE 71 A2 C5 9A 0A | ||....}@.*.q....
+1A 3B DC 98 F5 7B 3B 1F 46 8E 5D 7C AE 6F 99 EA | .;...{;.F.]|.o..
+EF A2 D4 2B 7F 32 10 05 88 20 57 46 EF 00 ED E8 | ...+.2... WF....
+7E 4C B2 F4 55 58 89 1D 27 74 98 D6 BA 0C 13 15 | ~L..UX..'t......
+71 AD 2F 27 DF 79 8A 80 44 39 32 87 CF 0F 51 D7 | q./'.y..D92...Q.
+EA 4B AE A1 AF FD 0C B6 23 B3 D2 5C F3 A4 02 98 | .K......#..\....
+95 6A 0C 5E CE 61 AD 79 46 A3 CF 0B 5F 11 C1 FF | .j.^.a.yF..._...
+F8 B6 AD 92 98 CE AA F4 90 B8 C4 B6 53 0C 3C 46 | ............S..0X..5..6...
+9B 9E BA 4D 0F 3E E7 18 50 17 14 4C 9F B1 78 01 | ...M.>..P..L..x.
+AF 3B F4 BC 43 EE 9F 47 E0 B6 02 3A 93 4A 61 D4 | .;..C..G...:.Ja.
+14 FF D0 D8 B3 69 9F 48 F3 EE 6F D2 4C CB 51 D3 | .....i.H..o.L.Q.
+85 07 7D 1F 92 94 81 95 09 BB D7 5A AB 59 5A DF | ..}........Z.YZ.
+51 69 CB 73 0B 2B 6A FA 3E CF 5A 87 6A F0 5B 3A | Qi.s.+j.>.Z.j.[:
+CC C6 A2 5C FC EE 80 65 30 D1 B5 EE 09 6E 6E C3 | ...\...e0....nn.
+6A 02 90 7A 99 F0 06 6B 76 10 C8 3D 34 33 DA D6 | j..z...kv..=43..
+C5 8B 6E F2 06 AD 65 4D 6C 50 0E 20 8D BD 1C 0A | ..n...eMlP. ....
+2C 8C 32 E6 B3 7D C7 30 F5 6E 21 FD 95 B9 8C 11 | ,.2..}.0.n!.....
+81 FB 67 23 78 50 B5 F9 54 24 21 D6 A3 1C 6E 9E | ..g#xP..T$!...n.
+65 5D D0 23 15 AA 08 AA 6A CF 6A 34 D1 C4 3B 5C | e].#....j.j4..;\
+2D 21 FD E8 53 4D 43 1A 1C 69 EC 2B 17 F4 00 54 | -!..SMC..i.+...T
+A4 E3 D0 24 49 F6 7E 55 1C 74 1F AE B5 A0 FB D5 | ...$I.~U.t......
+85 D7 CA E8 69 6E 38 63 0F 3D 69 C3 CF C7 52 5D | ....in8c.=i...R]
+C1 2C 8F CF DF 5E 10 24 | .,...^.$
+
+Flow Record:
+ RecordCount = 36
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 509
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131686461 [2024-04-14 23:54:46.461]
+ last = 1713132227100 [2024-04-15 00:03:47.100]
+ received at = 1713132000887 [2024-04-15 00:00:00.887]
+ proto = 6 TCP
+ tcp flags = 0x18 ...AP...
+ src port = 57657
+ dst port = 80
+ src tos = 0
+ fwd status = 0
+ in packets = 20
+ in bytes = 4330
+ src addr = 157.143.34.100
+ dst addr = 172.217.168.3
+ out packets = 0
+ out bytes = 0
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 9.655 ms
+ srv latency = 0.000 ms
+ app latency = 60041.739 ms
+ in payload = 329
+HEAD /generate_204 HTTP/1.1
+Host: connectivitycheck.gstatic.com
+Connection: keep-alive
+User-Agent: Mozilla/5.0 (Linux; Android 12.0; Build/STTC.220815.001) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.0 Safari/537.36 CrKey/1.56.500000 DeviceType/AndroidTV
+Accept-Encoding: gzip, deflate
+Accept-Language: de-DE
+
+
+48 45 41 44 20 2F 67 65 6E 65 72 61 74 65 5F 32 | HEAD /generate_2
+30 34 20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F 73 | 04 HTTP/1.1..Hos
+74 3A 20 63 6F 6E 6E 65 63 74 69 76 69 74 79 63 | t: connectivityc
+68 65 63 6B 2E 67 73 74 61 74 69 63 2E 63 6F 6D | heck.gstatic.com
+0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 6B 65 | ..Connection: ke
+65 70 2D 61 6C 69 76 65 0D 0A 55 73 65 72 2D 41 | ep-alive..User-A
+67 65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 35 2E | gent: Mozilla/5.
+30 20 28 4C 69 6E 75 78 3B 20 41 6E 64 72 6F 69 | 0 (Linux; Androi
+64 20 31 32 2E 30 3B 20 42 75 69 6C 64 2F 53 54 | d 12.0; Build/ST
+54 43 2E 32 32 30 38 31 35 2E 30 30 31 29 20 41 | TC.220815.001) A
+70 70 6C 65 57 65 62 4B 69 74 2F 35 33 37 2E 33 | ppleWebKit/537.3
+36 20 28 4B 48 54 4D 4C 2C 20 6C 69 6B 65 20 47 | 6 (KHTML, like G
+65 63 6B 6F 29 20 43 68 72 6F 6D 65 2F 39 32 2E | ecko) Chrome/92.
+30 2E 34 35 31 35 2E 30 20 53 61 66 61 72 69 2F | 0.4515.0 Safari/
+35 33 37 2E 33 36 20 43 72 4B 65 79 2F 31 2E 35 | 537.36 CrKey/1.5
+36 2E 35 30 30 30 30 30 20 44 65 76 69 63 65 54 | 6.500000 DeviceT
+79 70 65 2F 41 6E 64 72 6F 69 64 54 56 0D 0A 41 | ype/AndroidTV..A
+63 63 65 70 74 2D 45 6E 63 6F 64 69 6E 67 3A 20 | ccept-Encoding:
+67 7A 69 70 2C 20 64 65 66 6C 61 74 65 0D 0A 41 | gzip, deflate..A
+63 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A 20 | ccept-Language:
+64 65 2D 44 45 0D 0A 0D 0A | de-DE....
+
+Flow Record:
+ RecordCount = 37
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1608
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132217183 [2024-04-15 00:03:37.183]
+ last = 1713132217364 [2024-04-15 00:03:37.364]
+ received at = 1713132302717 [2024-04-15 00:05:02.717]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 62379
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 7405
+ src addr = 13.224.103.47
+ dst addr = 157.143.34.100
+ out packets = 12
+ out bytes = 1574
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.987 ms
+ srv latency = 0.000 ms
+ app latency = 0.175 ms
+ in payload = 1428
+ TLS version = TLS 1.3
+ ja3s hash = 16a232c6047ab4c7f493b826d419a8be
+ ja4s hash = t130500_c02f_a241d087c239
+16 03 03 00 63 02 00 00 5F 03 03 9D AE A3 BB B0 | ....c..._.......
+31 98 E2 AA 7E 8E 4C CE 03 2E CA 4B A9 52 EB 7F | 1...~.L....K.R..
+50 A6 22 44 4F 57 4E 47 52 44 01 20 C0 BA F8 8A | P."DOWNGRD. ....
+F5 3D C6 35 94 30 22 CF B9 46 BE 54 0B FF 9B 16 | .=.5.0"..F.T....
+2A CB E5 DF CB E4 81 97 6A 2B A6 4F C0 2F 00 00 | *.......j+.O./..
+17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................
+00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................
+8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0....
+03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g..
+C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H...
+01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U..
+13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A
+6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U....
+41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048
+4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000
+30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359
+35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U....
+74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0..
+09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............
+00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(..
+62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N
+E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b%
+4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?.
+47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. .
+49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_...
+CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3
+91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P.
+82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+
+B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X..
+B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._.
+C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X.
+E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^
+60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9.
+51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E
+16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L
+0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<.......
+82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#..
+30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;;
+50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U...
+16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k.
+04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z
+30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..*
+2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com..
+77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t
+69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*.
+74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid
+61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U.
+0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U.
+25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........
+08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U..
+04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http
+3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama
+7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m
+30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0
+0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+
+06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+
+06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http://
+6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo
+6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+.
+01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c
+72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont
+72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c
+65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0.
+30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y...
+04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v....
+64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F
+7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq......
+89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!.
+C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..'
+CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*...
+02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux..
+7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$..
+63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j
+02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,....
+AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w....
+03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%.
+2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g...
+46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../...
+EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{...
+4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v....
+6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql
+BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H......
+89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!.
+86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV.......
+DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7
+02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......}
+0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:.
+59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H.......
+00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]]
+D3 9D AC B4 | ....
+
+Flow Record:
+ RecordCount = 38
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131891886 [2024-04-14 23:58:11.886]
+ last = 1713131922866 [2024-04-14 23:58:42.866]
+ received at = 1713132000887 [2024-04-15 00:00:00.887]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 59352
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18602
+ src addr = 17.248.209.64
+ dst addr = 157.143.34.100
+ out packets = 33
+ out bytes = 7661
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 37.772 ms
+ srv latency = 0.000 ms
+ app latency = 0.399 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 D1 32 AE 40 32 | ....z...v...2.@2
+FA 5A 43 DA E8 35 18 BF CE 43 38 C1 21 28 49 E1 | .ZC..5...C8.!(I.
+0E 8F 79 82 7E 79 B4 D2 71 FF 62 20 A4 9E D2 77 | ..y.~y..q.b ...w
+03 38 6A 7C 91 64 F0 89 B5 94 14 43 21 F7 CF 0C | .8j|.d.....C!...
+5B F1 28 E3 AC 7B BC 69 6A 5A 91 D5 13 02 00 00 | [.(..{.ijZ......
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 34 | ..+.....3.$... 4
+0A C4 F7 9C 16 6A D7 3B C7 B1 74 BA 2A 8E 29 19 | .....j.;..t.*.).
+37 5D 26 C4 17 39 18 16 4C 90 72 3F 4C 01 32 14 | 7]&..9..L.r?L.2.
+03 03 00 01 01 17 03 03 00 2A 2C FA B6 58 12 8F | .........*,..X..
+60 B6 9E CB CD 16 B9 C2 5C 65 9E 8B E9 2C B7 04 | `.......\e...,..
+C2 B6 05 4B 63 A3 31 A1 35 61 1C F1 38 7F CB 6F | ...Kc.1.5a..8..o
+6D 96 75 11 17 03 03 11 25 FF 5A D2 A9 86 4A 2A | m.u.....%.Z...J*
+DB F3 B1 D0 02 0A E2 B7 10 B1 8B E8 E3 03 CE E2 | ................
+7D BE 31 25 8B 0F F2 4A 10 58 E4 2F 47 C4 8D F8 | }.1%...J.X./G...
+AA 48 88 87 A7 4F 56 DD ED CA 48 96 F6 3E 82 63 | .H...OV...H..>.c
+00 56 78 6A 45 B6 A7 BB E7 66 AB D9 4D 32 9F 53 | .VxjE....f..M2.S
+57 40 5D 22 8D 68 71 58 40 45 62 1A 88 4A 76 81 | W@]".hqX@Eb..Jv.
+C0 50 93 2E 2E 68 BA E9 0D D0 18 FB BF FE D8 61 | .P...h.........a
+E7 A0 63 3A 0B 05 A1 BC 3C 61 EC 01 3D 05 47 EE | ..c:....U..&!.;.a.{.
+DF 3F F4 AE 09 78 1A AB 1A 8F 30 01 7E 7E 56 E4 | .?...x....0.~~V.
+29 04 7D DA BC A1 B7 FC 5A 29 04 94 66 16 BC 11 | ).}.....Z)..f...
+5F DB D3 1B 31 45 13 14 FB 79 AE 13 C6 46 B2 35 | _...1E...y...F.5
+D8 19 DF D3 4E 39 0F D5 80 8D CB 38 85 84 1B 5E | ....N9.....8...^
+06 8A AD 3F 60 AA DE B9 7F 37 D4 AA F9 95 DD 13 | ...?`....7......
+4F B8 AA 9F 72 85 30 B1 1D ED 39 3A 9F 6D 3F 3A | O...r.0...9:.m?:
+8E CA 5B 74 50 45 CC 8D 31 62 EE 26 67 0E B3 61 | ..[tPE..1b.&g..a
+40 9B 38 35 AA EF F9 A0 15 0F F9 CF F5 06 EE 4F | @.85...........O
+FE F6 D4 8F 56 30 81 FF 7C F7 B3 F0 6C 08 5B FB | ....V0..|...l.[.
+18 D5 9D 7B 25 11 CF 42 B1 38 5C 80 25 E1 E2 5D | ...{%..B.8\.%..]
+92 91 B3 28 9C 56 52 DC B7 2E 53 E7 B3 D0 0D 5A | ...(.VR...S....Z
+B1 5A 07 B8 4B 19 6D 3D 81 B8 8F 11 8D 44 0B 52 | .Z..K.m=.....D.R
+00 44 FE 96 DE A0 F9 44 CA E2 9F 7C 86 A5 F3 A2 | .D.....D...|....
+E3 51 42 95 A3 A2 37 9D 46 37 6C 5A E6 91 E2 E0 | .QB...7.F7lZ....
+D7 F2 03 4A 7B 7F 19 E4 54 2A D1 0B 2D 99 61 A4 | ...J{...T*..-.a.
+A7 69 86 0B 65 63 FE AE 8E 07 CF 80 4D 81 A9 42 | .i..ec......M..B
+2F 4C B2 2A 3F 06 20 B1 4F E8 10 7F 49 4B 07 49 | /L.*?. .O...IK.I
+05 77 5D FA 80 24 DD 39 F8 29 F2 B5 8F 24 85 E3 | .w]..$.9.)...$..
+2C FA 87 5C 96 02 DF C6 EA A4 36 FD 94 D2 4F 42 | ,..\......6...OB
+E0 79 FD 26 B1 02 77 F0 9B 32 BC 8A 80 EE 41 E4 | .y.&..w..2....A.
+36 3E A5 0B 14 CF 03 AB 00 14 F2 A6 9D 9F F9 65 | 6>.............e
+A7 27 E3 4A F5 D6 1F E4 7E 37 7D 6A 90 DE 7C 09 | .'.J....~7}j..|.
+78 DF 98 59 59 15 E7 20 FF 71 86 D5 F0 E3 1D D0 | x..YY.. .q......
+61 4D 83 CF 2A C7 29 2D 4E 72 09 12 11 DE 49 8B | aM..*.)-Nr....I.
+C3 88 6B D1 5B 0F 58 DD 9A A3 8C 84 A0 B4 87 06 | ..k.[.X.........
+1E C7 E8 9A AE FA BF 7E 02 D8 40 37 75 81 9B 6B | .......~..@7u..k
+81 B7 25 6A 95 4B C1 9A 22 04 D9 73 BA F1 E4 64 | ..%j.K.."..s...d
+CE 1C 97 A2 B5 92 01 AB D9 E0 82 66 37 1E 40 06 | ...........f7.@.
+68 39 2B BA FB 95 8B D5 49 8E 37 FA BE 8C 17 9F | h9+.....I.7.....
+59 32 B6 59 20 02 36 B3 BB 7E 79 A9 F5 4D 51 21 | Y2.Y .6..~y..MQ!
+34 36 1D 6C D4 A7 FB BF A5 F0 12 CA E0 DE EB F8 | 46.l............
+D1 7B 56 16 FD 74 6C 3D 71 03 4F C3 7B C6 3C 12 | .{V..tl=q.O.{.<.
+AA CF E3 B6 61 75 97 3B B0 AE 8A 9B C5 69 C7 BC | ....au.;.....i..
+D8 30 E7 D8 AB 42 CD 55 66 1F DB 1A 20 99 82 36 | .0...B.Uf... ..6
+88 70 02 43 B7 48 AA 15 03 D8 32 1A 6D 39 38 55 | .p.C.H....2.m98U
+A8 81 C1 7A B9 7D C9 55 C8 D1 34 C3 1E 3A 9C FE | ...z.}.U..4..:..
+81 FA 8F 5D AB 29 71 C7 9A 71 24 23 8A 77 C8 C3 | ...].)q..q$#.w..
+EC 32 F2 B7 78 86 28 8C 23 53 EF 7E AE 77 B1 D3 | .2..x.(.#S.~.w..
+3C D9 BB 6D BA C0 B1 D8 9C CC C0 BD E3 64 69 CF | <..m.........di.
+06 BA E3 F2 8F 07 84 CB 96 CB 92 B2 BD B5 13 DE | ................
+C8 FA 78 B1 3E C7 F5 6B 1E EC 85 75 55 AD 29 DE | ..x.>..k...uU.).
+9D 50 4E D3 10 7A C2 2F 96 E5 66 92 4D 7D 6B 0C | .PN..z./..f.M}k.
+06 12 5C D6 F7 27 F9 66 16 4D 50 9B BF B1 11 8C | ..\..'.f.MP.....
+5E A3 3C C5 89 FA 64 3B 90 24 0F 02 09 86 E3 83 | ^.<...d;.$......
+A7 92 D3 C1 6D 78 69 A2 69 6B 0A EC 6E 5E 9D 21 | ....mxi.ik..n^.!
+A0 B7 94 9F 80 27 43 7E 79 D3 4B BC B2 41 32 D8 | .....'C~y.K..A2.
+45 74 8B 48 D8 0F D3 C4 B2 54 B7 98 5E A7 4E 10 | Et.H.....T..^.N.
+57 37 08 29 32 12 D4 56 52 E4 66 80 CA AE B4 D6 | W7.)2..VR.f.....
+82 51 85 FE AB 9D 5C D7 19 04 7A B5 79 84 30 DB | .Q....\...z.y.0.
+9C 13 48 EA 7B 0B 27 4A 41 26 AB 3C D1 87 CA 22 | ..H.{.'JA&.<..."
+B1 EE 36 4E B9 B5 EF D7 24 E1 00 68 73 66 CB D8 | ..6N....$..hsf..
+65 20 98 D6 9E 14 FA 1D C2 5B 38 3C DD 98 1A B1 | e .......[8<....
+DA 6D 2D B9 D9 98 57 A9 E3 1E D3 92 AD AA 95 1B | .m-...W.........
+AD 7F F3 C5 42 A1 C0 28 5D EB 97 82 DC 81 BA 7D | ....B..(]......}
+C1 1D D3 5C B9 9F 48 C1 38 06 EC 7C 2D 0C AD 4E | ...\..H.8..|-..N
+B7 BE 45 BF 87 A8 F3 E8 47 5D 15 1F B7 83 1D DA | ..E.....G]......
+D3 5A E3 74 2D A2 24 3B B2 DE 7B 91 AA AD 57 65 | .Z.t-.$;..{...We
+C2 4F 36 2E 5F 7D 2F E3 C3 56 36 72 00 1A B6 56 | .O6._}/..V6r...V
+12 F7 B3 E9 53 7D 03 AD | ....S}..
+
+Flow Record:
+ RecordCount = 39
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132021008 [2024-04-15 00:00:21.008]
+ last = 1713132052026 [2024-04-15 00:00:52.026]
+ received at = 1713132148816 [2024-04-15 00:02:28.816]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 62570
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18601
+ src addr = 17.248.209.66
+ dst addr = 157.143.34.100
+ out packets = 31
+ out bytes = 6893
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.982 ms
+ srv latency = 0.000 ms
+ app latency = 0.659 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 97 31 ED 4A FD | ....z...v...1.J.
+10 DC 67 8C 63 98 B6 DF BE 8B 69 CD 83 50 56 63 | ..g.c.....i..PVc
+9E DB B6 30 5E C8 08 61 17 94 80 20 57 AD A0 84 | ...0^..a... W...
+F0 8D 06 FE 36 3D 5B FE AD 33 AF 7C 19 B6 25 11 | ....6=[..3.|..%.
+D0 C1 3C AD 56 A5 0C D2 3E EE B5 4F 13 02 00 00 | ..<.V...>..O....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 D2 | ..+.....3.$... .
+28 C3 36 14 8A FE 72 74 14 8D 77 23 60 0E 5A AF | (.6...rt..w#`.Z.
+42 96 24 81 12 F4 41 55 85 38 D0 2F CB 1C 38 14 | B.$...AU.8./..8.
+03 03 00 01 01 17 03 03 00 2A C0 0C 2C 4D D1 4C | .........*..,M.L
+6B B6 74 A0 CD B3 CD A1 D6 8B E4 90 80 C2 D2 FD | k.t.............
+2F 33 1C 77 4F 97 27 5E 46 1A 2B C4 C3 0C 6C 9A | /3.wO.'^F.+...l.
+E9 04 BA 1E 17 03 03 11 25 FC 09 88 6D 62 A8 7C | ........%...mb.|
+81 C3 54 13 F5 28 77 49 B2 E0 E1 33 91 EB 17 C7 | ..T..(wI...3....
+DE 18 4E 45 EC CB 31 A1 2E 95 48 CD 01 B5 0A 8F | ..NE..1...H.....
+F2 D1 57 67 51 CC F1 A2 41 E5 3A DD CE 8F 2C 75 | ..WgQ...A.:...,u
+D2 D1 5D 56 F4 97 C2 90 90 CD C2 3D EE A6 E2 19 | ..]V.......=....
+84 EA EB D1 3C 7B F2 71 70 0E C1 F2 61 E4 01 81 | ....<{.qp...a...
+F2 4F 71 73 8C 59 CE D5 9B C7 E7 B3 7E 23 04 3E | .Oqs.Y......~#.>
+DF 05 9A 31 8F 82 C2 EA 66 0F 67 4A 41 CA 97 C3 | ...1....f.gJA...
+28 B4 03 DE 4A B4 A9 4E 30 C0 F2 FE 5A 87 D2 FA | (...J..N0...Z...
+E9 C2 84 2D 77 26 3B CC EB BC CB 05 27 F6 84 42 | ...-w&;.....'..B
+68 A0 95 B4 66 01 A6 0F EC 76 23 13 4E DD AE BF | h...f....v#.N...
+A9 6F EF 6D 30 C7 D7 AF 39 36 54 FC B8 EF 96 BB | .o.m0...96T.....
+44 D8 55 8E 33 9B B2 C1 D3 98 68 1A 6B 52 F3 70 | D.U.3.....h.kR.p
+F5 30 23 76 DD 63 61 28 A4 96 D1 BA 63 95 E4 83 | .0#v.ca(....c...
+AC 51 7F 72 1F A6 77 7F C6 2C 14 3C E5 1D C2 31 | .Q.r..w..,.<...1
+C3 54 4D 8C 7F 85 19 3B AA 72 C4 3F F2 59 A0 EC | .TM....;.r.?.Y..
+65 18 08 CE 78 24 0B 51 54 89 6D 3C E5 69 07 06 | e...x$.QT.m<.i..
+20 A7 89 CA 0A 0B D6 44 A4 8B D7 B6 07 DC AF CE | ......D........
+BD 72 59 EA 17 D0 38 9C BD 05 24 13 7D 10 BF F8 | .rY...8...$.}...
+BF 9A 8D 97 51 1F 16 6E 55 9F 71 9B 9D 77 53 2E | ....Q..nU.q..wS.
+D3 F6 01 C8 4E 99 98 90 20 C0 79 98 A0 4D D7 95 | ....N... .y..M..
+1D 16 9D 5F F3 A7 DC DF 97 90 37 F2 AD AA 94 88 | ..._......7.....
+C1 51 68 6F 58 80 CD EB 94 DB 22 E5 83 A0 23 1B | .QhoX....."...#.
+03 88 89 31 4A 92 17 0B BD 08 CD C9 49 CB AB 5C | ...1J.......I..\
+86 94 09 81 5E 23 DE D8 95 CA A5 EE A6 EA 84 AF | ....^#..........
+1C E6 82 AD 01 56 B2 F7 24 48 1D D2 16 D3 28 0A | .....V..$H....(.
+FB E0 69 79 78 89 AA B0 7A 9D 07 50 81 F2 01 2E | ..iyx...z..P....
+ED 4B D2 65 DA F6 72 4F 00 DB A3 D6 9B 51 67 40 | .K.e..rO.....Qg@
+D3 EA F8 D7 95 03 D6 85 B7 3D 60 DA EB A1 35 57 | .........=`...5W
+C3 2C A2 FC B3 DC FE 46 0F B9 DC F5 30 4B DE 09 | .,.....F....0K..
+B4 7A AF CB FE 1E 1C AC 48 DE B3 5C DE 92 89 EE | .z......H..\....
+24 7A 9A 95 05 3B B4 5C 56 68 1D CE 7F B3 EC 77 | $z...;.\Vh.....w
+4F 07 61 2E 97 4C 5A EF 90 98 CB DB 44 11 82 B5 | O.a..LZ.....D...
+AA 85 C0 46 DC 6A 24 33 2F B2 7F C1 BB 4A BA 98 | ...F.j$3/....J..
+0E E2 4C AF C6 DF 3C A2 A7 0B 4D AF B1 9C 25 B2 | ..L...<...M...%.
+81 DC E1 66 D6 1D 92 F5 60 7E 4D 82 13 A9 81 13 | ...f....`~M.....
+A2 EA 64 0A 6E 33 27 A1 40 26 16 5A E2 16 F8 C9 | ..d.n3'.@&.Z....
+0C DE C1 5F B0 1B 9E AF 3E 10 B4 9E 7F BA CC F9 | ..._....>.......
+7D EA DB 2E 76 F2 82 53 D9 F8 D3 4F 23 D9 C5 5D | }...v..S...O#..]
+B7 5F 1A 02 FA A9 D6 99 0F 48 67 98 C1 A3 BF 51 | ._.......Hg....Q
+83 45 F4 97 AA 73 7A 8B 0E 70 35 F9 C7 94 74 7B | .E...sz..p5...t{
+08 15 83 93 AD 20 4E C0 14 A4 93 66 CD B5 68 BF | ..... N....f..h.
+14 E9 13 35 27 56 A3 5A BA C1 95 99 E8 74 8A 3C | ...5'V.Z.....t.<
+D5 14 11 BC 77 D2 1A 24 C3 12 79 1E CA F0 56 A9 | ....w..$..y...V.
+A7 2D E1 DD E7 F4 7E 53 4E 9A 51 D0 97 51 F0 D1 | .-....~SN.Q..Q..
+44 14 9E 4C 34 FE 04 9A 48 6E BD 2E FC 46 E5 7A | D..L4...Hn...F.z
+F4 E5 F7 9A 34 AE C5 D9 98 DC BF 7C C6 0B 50 64 | ....4......|..Pd
+45 FC 1F B4 72 2C 25 90 B1 49 34 22 EB 38 A8 FE | E...r,%..I4".8..
+4B A6 15 7F 07 2B 33 11 D4 C6 D6 EB 22 7C 32 C2 | K....+3....."|2.
+F8 0A 55 AF 96 BC 5E 37 CA D0 D8 B4 3A A8 29 A6 | ..U...^7....:.).
+0A FF F7 BA 9C 5A 30 CB 7E 34 FB 08 9B E6 E5 55 | .....Z0.~4.....U
+92 A3 5A 2C 1B C4 66 A8 12 89 4C 18 BD 7D 78 E8 | ..Z,..f...L..}x.
+42 75 4F F3 3E F9 81 52 F3 8C A6 62 E4 BB EA 61 | BuO.>..R...b...a
+D1 48 8A 17 73 E3 8F 3A 5B F8 C3 FA 6B B5 3E 9A | .H..s..:[...k.>.
+91 05 CD CF 72 3F DB E4 D0 A7 E9 F8 EA AB 91 FB | ....r?..........
+50 6A 1A D0 9F 96 6A 7C 60 C6 24 6F E1 BF 85 0A | Pj....j|`.$o....
+8E B5 1F 0B 7E 07 DD DE 4F 83 6E AB B7 CF DC D0 | ....~...O.n.....
+48 31 E1 3E 8B 26 85 81 79 D1 59 61 09 5F A1 DC | H1.>.&..y.Ya._..
+88 68 FA 36 74 61 CB FC D9 E7 A5 BB 93 10 54 D1 | .h.6ta........T.
+FC 9D 31 ED D3 09 BC 1C CD 45 95 3F 80 AE E5 6E | ..1......E.?...n
+2C 00 A9 CB BB 3A 3E 5B A0 64 25 86 B2 AD 1D 19 | ,....:>[.d%.....
+38 A5 85 A8 92 E2 AB AB 63 44 E0 62 9F A1 41 41 | 8.......cD.b..AA
+78 D9 B9 9C FE 5B AE 83 F1 29 DB 18 15 04 87 C2 | x....[...)......
+7D 40 BD 7F 5E 98 CE 28 1A 73 E7 1E 4B 09 8C AF | }@..^..(.s..K...
+39 51 51 3B D7 4C 55 0D A8 A5 FB 7F 9F 64 FB E7 | 9QQ;.LU......d..
+BA C7 35 BB 4B BD 4C 4E C7 0E 07 E5 AC CE CF FC | ..5.K.LN........
+EF AF 36 10 8A F1 B5 4A 07 7B 52 F3 D0 A3 5E BE | ..6....J.{R...^.
+25 43 1B BF 2A 11 2B B2 6F 3D F3 AB 2B 17 1C EB | %C..*.+.o=..+...
+AA 32 7A EB E3 D7 57 04 FA 5C E2 F2 3E 44 1D A4 | .2z...W..\..>D..
+99 55 C5 31 AC 44 9D CF 36 AD C6 D1 B4 BF 48 06 | .U.1.D..6.....H.
+57 DF 7E 05 08 D0 F9 B3 9B F9 B2 EA 79 AB A4 58 | W.~.........y..X
+38 1B BB EE 0A D4 50 20 E3 6A 8D A3 F7 39 29 70 | 8.....P .j...9)p
+46 4F 90 1E E2 A4 90 41 A0 71 64 D0 E2 9B 4F 92 | FO.....A.qd...O.
+CC 75 26 00 48 A1 3C 21 8A 40 95 26 12 42 7C E4 | .u&.H..+..i.
+66 74 FE F3 13 98 7D C3 0F 85 E2 E4 86 E0 C5 50 | ft....}........P
+6D EC 88 46 39 9A 29 D2 | m..F9.).
+
+Flow Record:
+ RecordCount = 40
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132085509 [2024-04-15 00:01:25.509]
+ last = 1713132116456 [2024-04-15 00:01:56.456]
+ received at = 1713132206017 [2024-04-15 00:03:26.017]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 50258
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18599
+ src addr = 17.248.209.70
+ dst addr = 157.143.34.100
+ out packets = 33
+ out bytes = 6997
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 15.118 ms
+ srv latency = 0.000 ms
+ app latency = 0.281 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 51 F7 9E 89 EF | ....z...v..Q....
+56 2A 52 60 11 28 0E E9 55 AC 50 3E 74 23 8E 82 | V*R`.(..U.P>t#..
+22 DA 63 D3 27 E6 36 EE 88 21 56 20 B5 BD 9E 75 | ".c.'.6..!V ...u
+60 02 71 70 F8 90 BD A9 94 99 18 BE 11 DF BB F9 | `.qp............
+B1 46 8A F7 44 97 BA C2 99 86 22 0C 13 02 00 00 | .F..D.....".....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 DD | ..+.....3.$... .
+A7 C8 04 22 21 A7 CE DE 72 00 81 C8 A2 FB 0F 17 | ..."!...r.......
+F0 D9 12 06 3F 9A FE 05 2E 4E A2 AA 59 FD 0D 14 | ....?....N..Y...
+03 03 00 01 01 17 03 03 00 2A 58 A5 07 0E C9 D3 | .........*X.....
+1D 28 9C 41 CC 67 47 F9 EE 99 5B 1C 9C 1E B1 C8 | .(.A.gG...[.....
+FD 0A 30 C1 33 85 AF 15 21 A0 FE 4D A1 CC 20 39 | ..0.3...!..M.. 9
+0F E9 3F 52 17 03 03 11 25 BE 48 BC 30 5C 88 13 | ..?R....%.H.0\..
+E1 4F DD CB 5F 00 67 93 02 C0 53 9D 77 A1 E7 D6 | .O.._.g...S.w...
+A1 82 11 47 ED 9E 38 E4 82 29 64 57 8C 62 F2 5A | ...G..8..)dW.b.Z
+A8 BC 72 09 55 22 FF 99 D4 C4 1F 22 2E 38 35 04 | ..r.U".....".85.
+51 C1 7B FB ED A0 DF 6F F2 9A 9B 5A 15 A4 D9 22 | Q.{....o...Z..."
+A3 F5 62 68 A3 CD 1B DB A7 0C D6 0C BC 8C 5C 57 | ..bh..........\W
+1A B4 49 47 F1 FE 80 AA AE 99 BA 7F 54 2D 05 A5 | ..IG........T-..
+07 2F 55 F9 7E 95 8E 67 44 A0 FD 63 AA E5 B0 A1 | ./U.~..gD..c....
+A5 53 3E 2D 49 6E D2 61 CE 45 2A A3 94 55 48 37 | .S>-In.a.E*..UH7
+86 14 34 F1 63 F2 44 4F 64 D9 0B E2 FB 1B 5B 00 | ..4.c.DOd.....[.
+47 2E F2 09 91 20 98 98 D7 2D F9 36 7A 3D 59 03 | G.... ...-.6z=Y.
+8C EE FD B5 C5 B1 A9 D1 7C 2E A9 66 1B E3 1B EA | ........|..f....
+D6 69 8A 51 F2 8C 05 70 F3 AA 8B C5 BE 12 D8 35 | .i.Q...p.......5
+8E E8 DF 4F 13 51 BE 05 E5 93 0A 74 42 EB CB 83 | ...O.Q.....tB...
+13 8C 16 0B BF AF C8 E5 4C 38 92 29 7E 89 91 6D | ........L8.)~..m
+FB 40 F8 AE 93 A9 44 1E 01 D6 A9 06 4F E8 E1 C5 | .@....D.....O...
+9C 1F 95 A0 07 AE 17 1C E3 17 1F C6 67 AD 0A 42 | ............g..B
+AD 5F AB 3F 34 14 DD DE DA 4D 94 08 D7 7F E1 17 | ._.?4....M......
+1D 7F B4 87 08 EA 39 D8 B8 4B ED BA 74 D6 3C 84 | ......9..K..t.<.
+33 76 0A 1A EA 51 D8 0C D0 68 65 D0 EB E8 6A F8 | 3v...Q...he...j.
+1F B6 D2 69 45 1D 0D 60 0D 2C 77 1F 26 AB FD 39 | ...iE..`.,w.&..9
+7C 05 57 5F 33 31 81 F6 77 06 87 AC B5 0A 2D 9A | |.W_31..w.....-.
+B5 60 1A 0D F0 14 77 78 1E BB 8E 35 52 81 86 C4 | .`....wx...5R...
+09 A5 A1 AE D7 D0 C4 1F 1E AA 3E 86 59 E4 75 EC | ..........>.Y.u.
+E3 A9 94 F4 EC AF 24 49 01 74 58 B2 3D 47 D8 5A | ......$I.tX.=G.Z
+15 6E 1C 00 9F AB 87 79 ED 52 E7 53 7B 5B C5 A6 | .n.....y.R.S{[..
+CF BA 99 DA 87 9D B9 F5 D1 E0 3E 58 3C 48 26 DD | ..........>XD....6i..=.
+1F B4 5B 61 31 2E 01 97 E5 98 B3 7E 4B 7B 47 A1 | ..[a1......~K{G.
+1D 97 F6 59 62 C5 96 07 2F C3 23 B7 92 A2 79 48 | ...Yb.../.#...yH
+8E AF B3 33 40 0F 64 55 96 A6 26 84 D8 C8 47 B4 | ...3@.dU..&...G.
+BE 37 1C A5 7C A5 6F 49 64 ED C3 5E 08 08 1E 0D | .7..|.oId..^....
+4F A4 B3 6E DD E8 B5 41 3F BA C5 2A DD 23 C7 BF | O..n...A?..*.#..
+FF 94 16 D7 FB B5 46 BF 4B 72 E6 59 CF 08 27 D0 | ......F.Kr.Y..'.
+1F 01 E2 80 E0 B9 88 88 D2 57 07 2E 92 7D 0B FF | .........W...}..
+E4 C3 F9 6D 3E D3 9E 0E BF CC D4 32 60 05 65 7C | ...m>......2`.e|
+5A 3C 2B 35 04 37 02 91 9B A4 E0 1E 2D 0F 70 DF | Z<+5.7......-.p.
+8E 7A 69 43 EB 84 3E 72 09 72 2D DA 1A 47 47 41 | .ziC..>r.r-..GGA
+81 FE F2 7F E6 DC 56 F8 6F 95 9B F8 5B 74 EF 38 | ......V.o...[t.8
+88 DC BD 50 18 B2 0E A6 88 81 C3 42 46 DA EA 65 | ...P.......BF..e
+7B 4E 18 86 EB 64 0C 3A F7 25 0E 00 6C 5E BB 55 | {N...d.:.%..l^.U
+DA 1D 85 FC 2A BB 1C 9A 9B B8 FC C6 94 D7 3B 28 | ....*.........;(
+F2 55 83 B5 E9 D3 F3 60 1E A9 47 BD 10 84 AD 2D | .U.....`..G....-
+0C E7 DF 27 E4 E5 9D 4B 5E E5 45 6A 6F 88 A4 C3 | ...'...K^.Ejo...
+EC 53 AC E0 2C 0A 20 22 C0 5A B1 37 69 99 31 E1 | .S..,. ".Z.7i.1.
+C2 D5 6B 16 3A 18 B6 A5 A6 5D 6C F7 31 CA 3F EB | ..k.:....]l.1.?.
+1B 41 9B EF 33 F3 53 F6 0D 76 8D AC CE 0A 31 95 | .A..3.S..v....1.
+6B 45 26 A4 8E 6B 22 84 68 69 60 F5 19 55 EC 4D | kE&..k".hi`..U.M
+82 97 A5 38 15 4E E8 69 2B CC B8 23 8E 64 D1 C5 | ...8.N.i+..#.d..
+25 78 BB D5 59 27 58 D3 C7 E9 9C 4D 85 C7 6C E7 | %x..Y'X....M..l.
+4E 2C 92 63 8E A1 28 77 B1 30 B6 74 92 98 0C 0E | N,.c..(w.0.t....
+2F 12 E3 97 64 B6 05 A0 AA 3B 78 A5 DA 89 1F 30 | /...d....;x....0
+25 44 4F 8F FE 61 49 67 BD 83 58 C5 6D A9 48 A1 | %DO..aIg..X.m.H.
+6A CE 33 C6 79 6C 80 2C B9 63 44 98 A3 40 1D 99 | j.3.yl.,.cD..@..
+6E 09 7C AC EA 03 01 2E 81 A7 57 70 33 A2 2D CD | n.|.......Wp3.-.
+17 C2 B9 0E 85 89 97 12 85 2A A2 FF 61 E6 87 43 | .........*..a..C
+87 F8 FF 65 DA 46 EF 9D 1D 7F 87 58 E7 64 C9 24 | ...e.F.....X.d.$
+F7 FD E2 EC 0E 5B 70 D2 D6 61 73 C4 A3 95 2C 86 | .....[p..as...,.
+D3 6D 3F BA A0 86 12 C2 F8 67 26 E0 8B 31 3A 79 | .m?......g&..1:y
+C6 DF 14 21 68 F3 87 C8 72 10 90 C2 1B 74 D2 E7 | ...!h...r....t..
+01 07 AF 74 34 D6 BC 06 CD 47 7D 27 D4 9B C8 B5 | ...t4....G}'....
+17 FB 30 B6 C9 D5 28 2F 6D DC AB 28 75 AB B0 96 | ..0...(/m..(u...
+6A 15 B0 14 DF 2B 3E 7D 60 72 5A 78 90 83 E5 E2 | j....+>}`rZx....
+70 92 E9 66 5D D8 47 15 46 5D 93 C0 B7 22 6B 1E | p..f].G.F]..."k.
+74 56 19 73 D4 23 A5 55 33 98 9B D7 9D C9 F3 62 | tV.s.#.U3......b
+C5 46 1D DA 36 55 8F 3D D5 CE 8C 68 6A CE 5C 6F | .F..6U.=...hj.\o
+3A 06 15 F4 70 19 5E 39 D1 B8 A8 99 85 71 0F 05 | :...p.^9.....q..
+52 FC 2E FF AD AF 32 69 BF D4 5D 45 5B 7E 58 7E | R.....2i..]E[~X~
+87 14 38 0E E7 4F 27 97 64 2B B3 8F F4 61 C8 68 | ..8..O'.d+...a.h
+BA E1 73 08 D5 C7 CF 03 AD 29 AF 10 2E 22 E0 44 | ..s......)...".D
+3B D9 B9 2B 31 E3 99 00 39 19 2A 10 C1 BC 33 C6 | ;..+1...9.*...3.
+1F 18 AE 7B 2C 92 DE A9 40 B4 3D 2B 9D B1 35 BC | ...{,...@.=+..5.
+81 DB 35 46 7D 06 1D B8 95 6B 1D 6D A2 5C 91 A3 | ..5F}....k.m.\..
+79 A3 D1 78 82 13 7F 06 | y..x....
+
+Flow Record:
+ RecordCount = 41
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 697
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132277481 [2024-04-15 00:04:37.481]
+ last = 1713132278578 [2024-04-15 00:04:38.578]
+ received at = 1713132344717 [2024-04-15 00:05:44.717]
+ proto = 6 TCP
+ tcp flags = 0xdf CE.APRSF
+ src port = 58134
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 1668
+ src addr = 157.143.34.100
+ dst addr = 17.253.15.204
+ out packets = 13
+ out bytes = 6168
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 14.757 ms
+ srv latency = 0.000 ms
+ app latency = 1.106 ms
+ in payload = 517
+ TLS version = TLS 1.2
+ sni name = mesu.apple.com
+ ja3 hash = 201976c7f7ca335fd8e2b45260f666fa
+ ja4 hash = t12d2014h2_a09f3c656075_14788d8d241b
+16 03 01 02 00 01 00 01 FC 03 03 34 28 A0 76 84 | ...........4(.v.
+84 5D EC BC 34 9C AD 77 F6 AB A1 D7 53 04 E9 E6 | .]..4..w....S...
+7E F8 C4 49 9E 3A 36 17 F5 94 FE 20 9D CA 84 52 | ~..I.:6.... ...R
+7B 00 CE 4D 73 F3 1F 26 60 C9 CC 91 F3 97 DE F4 | {..Ms..&`.......
+69 A1 01 EC 83 B7 9A C5 CA B5 94 A5 00 2A 2A 2A | i............***
+13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./
+CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5
+00 2F C0 08 C0 12 00 0A 01 00 01 89 0A 0A 00 00 | ./..............
+00 00 00 13 00 11 00 00 0E 6D 65 73 75 2E 61 70 | .........mesu.ap
+70 6C 65 2E 63 6F 6D 00 17 00 00 FF 01 00 01 00 | ple.com.........
+00 0A 00 0C 00 0A EA EA 00 1D 00 17 00 18 00 19 | ................
+00 0B 00 02 01 00 00 10 00 0E 00 0C 02 68 32 08 | .............h2.
+68 74 74 70 2F 31 2E 31 00 05 00 05 01 00 00 00 | http/1.1........
+00 00 0D 00 18 00 16 04 03 08 04 04 01 05 03 02 | ................
+03 08 05 08 05 05 01 08 06 06 01 02 01 00 12 00 | ................
+00 00 33 00 2B 00 29 EA EA 00 01 00 00 1D 00 20 | ..3.+.)........
+A7 C9 F3 1D 0F 6A A2 EF 2D 13 2B F6 09 3A 40 26 | .....j..-.+..:@&
+62 46 1E 85 9D 70 D4 57 64 83 8B 36 29 F7 98 12 | bF...p.Wd..6)...
+00 2D 00 02 01 01 00 2B 00 0B 0A 1A 1A 03 04 03 | .-.....+........
+03 03 02 03 01 00 1B 00 03 02 00 01 6A 6A 00 01 | ............jj..
+00 00 15 00 C0 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 | .....
+
+Flow Record:
+ RecordCount = 42
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 5: 1 2 12 15 29
+ size = 1374
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132381236 [2024-04-15 00:06:21.236]
+ last = 1713132382231 [2024-04-15 00:06:22.231]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 61866
+ src tos = 0
+ fwd status = 0
+ in packets = 20
+ in bytes = 5794
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+CD 00 00 00 01 00 08 F4 50 1D 41 A2 D1 A7 84 00 | ........P.A.....
+43 9F C7 1F ED 58 42 AF D3 1F D6 9C F4 15 5B B0 | C....XB.......[.
+2A F5 23 EE 4E CE 8A 44 AC DD 3E 54 01 24 C9 C4 | *.#.N..D..>T.$..
+2C DD 15 8B 73 78 5E 2E 69 4D E9 F6 7F B1 36 32 | ,...sx^.iM....62
+2E E3 BF D7 A6 CF A2 F3 A1 8B 6F 1A F9 75 73 3F | ..........o..us?
+2E 56 02 9F 30 62 80 F9 1E E5 58 3D 9A 26 6F 65 | .V..0b....X=.&oe
+46 8D 2A 77 D2 6A B1 E6 03 C4 D5 30 38 08 1E AE | F.*w.j.....08...
+5B F8 4F 77 17 92 98 3F 34 79 96 6C 29 46 10 AD | [.Ow...?4y.l)F..
+E3 16 31 36 4D 15 FC DE 8B F9 C3 27 BE 8F 8B EA | ..16M......'....
+C8 E2 7C C4 D6 EF 31 18 26 E7 AD 5E 8A 8A C9 BB | ..|...1.&..^....
+E3 A4 0D F1 94 59 34 E9 8C C4 BD F7 75 EA 04 6F | .....Y4.....u..o
+71 FA D7 7F 56 9E 04 43 78 2B 00 DF 84 33 BF 16 | q...V..Cx+...3..
+69 77 E8 B9 1E 1B 91 9C 98 A7 39 6D 82 E6 8E 18 | iw........9m....
+64 0C 4B 25 3F 42 F4 65 FA 53 D1 99 C6 66 01 AE | d.K%?B.e.S...f..
+B4 49 4C 11 38 20 08 5B 48 73 26 BC 6F 0D 24 98 | .IL.8 .[Hs&.o.$.
+3A CD 38 DF E1 1C 62 40 81 C9 22 B5 61 73 FB 0B | :.8...b@..".as..
+1A 50 B1 FA 1B 41 C5 A5 DF 41 FC 7F CB 8C BC 01 | .P...A...A......
+7A 73 8D BB 9B 8B 4D 48 6F CD 42 FA 87 A4 2C E0 | zs....MHo.B...,.
+AC 30 DA D6 CC DE C3 99 A2 2A BD DE 29 C7 98 A4 | .0.......*..)...
+D4 DE CD 4D 4B 5E 68 56 AB 6C CC 39 12 7A 38 14 | ...MK^hV.l.9.z8.
+35 89 27 9C 11 63 24 72 3C B9 AC 1B 39 E3 C2 D2 | 5.'..c$r<...9...
+E0 4F 74 9B C8 C9 B2 AA 39 13 D8 C7 E1 43 64 59 | .Ot.....9....CdY
+17 F5 BB DB 01 CD 8F 3C 23 25 65 03 48 9C 6E 85 | .......<#%e.H.n.
+7F 90 68 F9 9A C5 B0 9E 7E F2 85 15 29 CC 1B 36 | ..h.....~...)..6
+1D 9B 4B 6C 76 2E 83 ED 94 5D 8B FC AD 0C 3B B3 | ..Klv....]....;.
+5F 71 C8 F4 F5 82 72 84 5C 62 F9 8E 04 98 6E EE | _q....r.\b....n.
+28 D8 A6 A7 DA 09 92 9F C9 7C C4 BA DD 52 84 59 | (........|...R.Y
+EA F8 18 DB 18 D7 9B 68 AC F9 0C C8 B1 3B 9F 18 | .......h.....;..
+15 75 09 FC 60 1D 25 DD 66 54 11 98 3E 1D C8 35 | .u..`.%.fT..>..5
+67 40 84 ED 2B EB 00 5B 6C C6 96 B4 B3 9D 52 45 | g@..+..[l.....RE
+EF 30 DD 9E 27 F9 88 7B 20 8C 70 2E FB 4E C9 7E | .0..'..{ .p..N.~
+AE D1 F3 A6 A3 31 FA 8C 9A DA 39 2B 6C 90 D5 3F | .....1....9+l..?
+BC BA FE 25 EF 46 4C 9A 46 A4 42 D3 AA 8E A8 1B | ...%.FL.F.B.....
+06 4F DB 38 91 9D 44 C8 4C 1D 29 CB 70 34 36 EE | .O.8..D.L.).p46.
+42 51 6F 50 91 02 CB F2 04 33 DF BC 45 2F 52 24 | BQoP.....3..E/R$
+D0 8B 76 F3 D4 C3 77 32 19 41 E5 49 D0 2F 7E 81 | ..v...w2.A.I./~.
+59 F0 B1 61 68 4A 69 CC 8B D0 98 B9 2A 22 67 22 | Y..ahJi.....*"g"
+5D D2 73 6E 28 02 6A D1 70 C9 07 01 C5 96 DC BD | ].sn(.j.p.......
+4A 49 7B 5D 47 59 3D 13 3F FE CE 0B CA E2 16 24 | JI{]GY=.?......$
+FE 2E 5B B1 FF 76 97 5B A2 93 37 23 37 8B 5C 6A | ..[..v.[..7#7.\j
+D5 EA 1D BA 4D 4E D7 74 27 3B 82 C5 F5 9E BB D4 | ....MN.t';......
+C0 69 C9 EC 3C 20 92 32 61 1A 59 42 56 DC CB AE | .i..< .2a.YBV...
+51 AC 88 CD 9B D2 42 2A 56 CF 89 9C FF A0 97 AD | Q.....B*V.......
+45 90 B3 AC F1 3C 5E EB 45 18 90 D5 7C 7F BD 90 | E....<^.E...|...
+17 C8 B8 61 F9 2B E3 75 F4 60 45 DB 51 41 7F 16 | ...a.+.u.`E.QA..
+61 8C 7C 02 C5 A3 FC 66 61 5F 5E 3A 36 9A 94 79 | a.|....fa_^:6..y
+37 37 9F 5B 78 A6 A2 B9 14 2C 3F BC A0 10 58 19 | 77.[x....,?...X.
+1A 15 9F 76 71 D2 41 0C 07 90 49 6C 39 65 CA DA | ...vq.A...Il9e..
+17 65 1B 7D FF 76 53 70 6E AF 10 1F B4 00 4A 51 | .e.}.vSpn.....JQ
+AF DA 1B 4A 8A 4D 15 E5 EC 59 A5 0D F8 C6 B2 FA | ...J.M...Y......
+85 4E C1 E3 EA BE AE CC EC BC 69 BD 53 D1 D6 52 | .N........i.S..R
+AA B3 57 21 47 7F 99 19 7A D4 97 66 FF 69 38 8E | ..W!G...z..f.i8.
+2A 2D BD 99 EE 0C E8 86 CD 48 77 DA A9 61 9A 90 | *-.......Hw..a..
+66 0D E0 78 CF AE B0 06 DF 84 F7 C7 8F B0 B8 B0 | f..x............
+6E 57 99 49 17 91 F9 E0 21 15 92 D0 E8 EE 36 65 | nW.I....!.....6e
+7B 5D 2E 46 A6 0F E9 FE 3C AF 19 82 C8 50 BE D4 | {].F....<....P..
+10 E8 9E EE D6 07 10 D2 41 43 70 8F B1 F5 BA DE | ........ACp.....
+1C 1A 7A F8 B8 6B 3F 0F C4 39 59 71 93 86 A2 0E | ..z..k?..9Yq....
+9E 79 75 B4 FC 17 D9 50 38 14 27 AC B0 ED 6A 19 | .yu....P8.'...j.
+AD EC 00 00 00 01 00 08 F4 50 1D 41 A2 D1 A7 84 | .........P.A....
+40 E0 8B 6C 3D FC 69 FB B5 56 28 68 AD 17 D5 B4 | @..l=.i..V(h....
+A0 2B EE 4F 19 E2 BD FB 8A A9 A9 25 B5 9E 0E F7 | .+.O.......%....
+2D 38 13 4C 20 02 4F 51 9A B3 D9 36 D7 03 A7 F6 | -8.L .OQ...6....
+E7 7F 76 E3 CF 78 46 9F 2A F0 A8 B7 3F 87 33 A5 | ..v..xF.*...?.3.
+E7 F2 55 E6 8D CA 9C 75 8B 3B 78 4C DE BF ED 50 | ..U....u.;xL...P
+AF 43 37 34 10 F6 9D 84 EA 67 AB 9D 6B C0 28 5B | .C74.....g..k.([
+9A 31 07 B4 AF ED 89 B2 28 BD E6 68 8E 97 99 D7 | .1......(..h....
+73 90 0B 1A E8 62 8E 2D BB F9 E9 2F F1 31 E6 D1 | s....b.-.../.1..
+C0 44 0E EA 02 39 AF EE 68 D0 2F 6B 0C AB 0E D4 | .D...9..h./k....
+CF E6 44 23 AE 85 0E BD 60 A7 44 82 4D D7 1C BB | ..D#....`.D.M...
+0A 53 68 64 EA E2 24 BF 95 90 6E 1A B8 FA 24 79 | .Shd..$...n...$y
+67 48 9C 35 F3 BE 78 08 6C B6 91 AB CF 66 A6 78 | gH.5..x.l....f.x
+5B E1 BF 9F 0C 45 ED 54 FB 27 C8 6C 01 3A 22 2A | [....E.T.'.l.:"*
+EB E7 50 A9 17 B9 8C C5 C7 93 D6 3F DE E6 AD C0 | ..P........?....
+AD 52 5C AD 91 03 AD C0 96 3A 3E 42 6F A4 1D 2A | .R\......:>Bo..*
+FF 8B 51 59 A9 07 A1 9D 34 D1 6B B6 00 ED 04 FD | ..QY....4.k.....
+39 44 F6 F2 4D CF 9A 92 16 A1 4E BE 0C 97 9A 22 | 9D..M.....N...."
+D5 30 6B 1D B4 E0 E4 9C 78 C9 40 99 84 69 DD 01 | .0k.....x.@..i..
+CA BB | ..
+
+Flow Record:
+ RecordCount = 43
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 697
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132069800 [2024-04-15 00:01:09.800]
+ last = 1713132070148 [2024-04-15 00:01:10.148]
+ received at = 1713132148817 [2024-04-15 00:02:28.817]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 61318
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 1657
+ src addr = 157.143.34.100
+ dst addr = 142.250.203.115
+ out packets = 11
+ out bytes = 5919
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 10.143 ms
+ srv latency = 0.000 ms
+ app latency = 64.929 ms
+ in payload = 517
+ TLS version = TLS 1.2
+ sni name = live.cast4.audio
+ ja3 hash = f436b9416f37d134cadd04886327d3e8
+ ja4 hash = t12d3113h1_e8f1e7e78f70_1b3407e2c936
+16 03 01 02 00 01 00 01 FC 03 03 8D E4 2D FF D2 | .............-..
+3F DE 98 1E 84 D7 12 88 63 72 80 E6 02 63 8A BD | ?.......cr...c..
+02 09 D5 8D C4 1C 9B 09 F8 72 11 20 55 71 3A DB | .........r. Uq:.
+A1 BF C9 6A C2 65 7A B4 4C 1D 02 EA 5D 1C AD CE | ...j.ez.L...]...
+86 3C E9 B0 BA B1 99 FD 0E 42 88 8B 00 3E 13 02 | .<.......B...>..
+13 03 13 01 C0 2C C0 30 00 9F CC A9 CC A8 CC AA | .....,.0........
+C0 2B C0 2F 00 9E C0 24 C0 28 00 6B C0 23 C0 27 | .+./...$.(.k.#.'
+00 67 C0 0A C0 14 00 39 C0 09 C0 13 00 33 00 9D | .g.....9.....3..
+00 9C 00 3D 00 3C 00 35 00 2F 00 FF 01 00 01 75 | ...=.<.5./.....u
+00 00 00 15 00 13 00 00 10 6C 69 76 65 2E 63 61 | .........live.ca
+73 74 34 2E 61 75 64 69 6F 00 0B 00 04 03 00 01 | st4.audio.......
+02 00 0A 00 0C 00 0A 00 1D 00 17 00 1E 00 19 00 | ................
+18 33 74 00 00 00 10 00 0B 00 09 08 68 74 74 70 | .3t.........http
+2F 31 2E 31 00 16 00 00 00 17 00 00 00 31 00 00 | /1.1.........1..
+00 0D 00 30 00 2E 04 03 05 03 06 03 08 07 08 08 | ...0............
+08 09 08 0A 08 0B 08 04 08 05 08 06 04 01 05 01 | ................
+06 01 03 03 02 03 03 01 02 01 03 02 02 02 04 02 | ................
+05 02 06 02 00 2B 00 09 08 03 04 03 03 03 02 03 | .....+..........
+01 00 2D 00 02 01 01 00 33 00 26 00 24 00 1D 00 | ..-.....3.&.$...
+20 54 05 CF AA 99 70 B9 66 FE B1 28 85 C3 FD D7 | T....p.f..(....
+F5 D8 D5 53 E4 A9 64 5E 10 2E 11 03 4D 0E AF 01 | ...S..d^....M...
+01 00 15 00 B0 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 | .....
+
+Flow Record:
+ RecordCount = 44
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132053217 [2024-04-15 00:00:53.217]
+ last = 1713132084155 [2024-04-15 00:01:24.155]
+ received at = 1713132148817 [2024-04-15 00:02:28.817]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 57665
+ src tos = 0
+ fwd status = 0
+ in packets = 28
+ in bytes = 18476
+ src addr = 17.248.209.66
+ dst addr = 157.143.34.100
+ out packets = 31
+ out bytes = 6893
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 15.616 ms
+ srv latency = 0.000 ms
+ app latency = 0.366 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 BE AC 7B A5 70 | ....z...v....{.p
+C6 14 FB 55 57 7D F7 9B 3B 21 E6 64 85 38 E0 78 | ...UW}..;!.d.8.x
+7F B7 57 27 54 1A 89 25 FB 92 4E 20 A9 E1 BF 80 | ..W'T..%..N ....
+95 64 A5 A3 2B BA 8A C8 8D 92 32 AC 36 EE 42 E2 | .d..+.....2.6.B.
+34 75 9D 32 A3 8A 42 72 72 5B BA ED 13 02 00 00 | 4u.2..Brr[......
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 C0 | ..+.....3.$... .
+73 73 29 17 46 C8 24 A0 88 CF 00 65 82 DB 99 81 | ss).F.$....e....
+A1 97 45 7A 95 AA 5D 59 67 25 D9 C7 39 CD 0B 14 | ..Ez..]Yg%..9...
+03 03 00 01 01 17 03 03 00 2A 32 DB E1 2B 9D AD | .........*2..+..
+1E CE 8B 06 31 09 35 0D 51 43 78 10 6C CB DF A9 | ....1.5.QCx.l...
+0C 95 84 D7 11 13 E9 D3 D1 C4 29 65 5B 1D C9 CD | ..........)e[...
+A3 54 CB 46 17 03 03 11 25 D3 26 96 3C ED CF 17 | .T.F....%.&.<...
+37 91 37 69 42 79 4D B4 3C B1 E2 D3 E3 AA 46 4C | 7.7iByM.<.....FL
+6D 17 C5 60 34 51 79 BB 88 11 3A B5 E9 44 4A 55 | m..`4Qy...:..DJU
+47 C7 AD 22 B2 12 4D C0 B1 4B 7F 15 BD 5E CD 6C | G.."..M..K...^.l
+05 76 4A BF 1A 6F 31 4F 09 69 39 F6 C8 F2 E0 F8 | .vJ..o1O.i9.....
+F8 3C 15 26 5A 15 03 B4 C1 2A DF AF 7B 22 1B A1 | .<.&Z....*..{"..
+EB 78 0C 5C 7B B2 51 2A 29 A5 8B 93 17 C1 23 D4 | .x.\{.Q*).....#.
+67 D5 EF 12 8E CB 77 1F 27 89 37 5B 76 AB 1F A4 | g.....w.'.7[v...
+A2 8E 4E FD 8F 04 16 B9 DB FB DB C1 32 3F D0 53 | ..N.........2?.S
+E8 41 CE 29 AA 6E 83 31 FC BB 16 4D 0F 63 06 75 | .A.).n.1...M.c.u
+52 CC 84 49 AD 0D 3A 84 1E B2 2B 43 AF 3B 23 74 | R..I..:...+C.;#t
+ED 31 FF E8 45 6E AC D6 65 C3 74 30 87 0A 7D 77 | .1..En..e.t0..}w
+CE FA 34 FB 4D FC 94 74 54 9E 89 56 D7 B7 66 17 | ..4.M..tT..V..f.
+39 45 F6 E7 13 4A FA D5 9C 13 83 5B 74 3C 5F FE | 9E...J.....[t<_.
+B2 6B 81 27 2E 7F 7D 06 A7 CC DA 2A 35 55 11 AE | .k.'..}....*5U..
+C2 F4 E4 95 DE 37 CD 4C 8C 0A C4 43 57 7F C1 F6 | .....7.L...CW...
+DD 92 66 05 C1 41 26 E8 14 B7 EB AF 86 0F C3 B7 | ..f..A&.........
+37 F3 44 16 7C BB D7 86 8A DA 89 8C 86 0B A1 6A | 7.D.|..........j
+8A 24 25 A6 D1 71 23 62 02 FD 79 9F 00 37 97 AA | .$%..q#b..y..7..
+0E 9F FE C8 7E FB 3A 59 AC E1 69 2A F5 A4 C3 B8 | ....~.:Y..i*....
+68 BA 4C D4 45 E7 7A B9 FD 46 1B 55 CE FF C5 45 | h.L.E.z..F.U...E
+18 AD C3 9B 84 C7 FE A7 C6 92 9D BF 4B C3 E6 4A | ............K..J
+05 34 7C 21 5C 83 7C 96 C7 5A D7 6E A1 69 45 2F | .4|!\.|..Z.n.iE/
+3C 46 EA 00 30 A5 D5 35 F7 92 38 4F A3 5B 03 09 | ..OJ....
+8C 46 BF 90 96 3E 36 BF 12 FA 1E B5 FD 3D 51 CA | .F...>6......=Q.
+1D A0 B2 95 A7 44 97 3D 85 7A 7F 26 AC 61 C6 CA | .....D.=.z.&.a..
+11 93 C3 2F B9 5E 05 79 A9 96 14 8F 50 33 A2 63 | .../.^.y....P3.c
+DA 89 2A D1 FE 8A 40 AA F3 24 15 BD EB 63 F7 2A | ..*...@..$...c.*
+79 5E 1A 4D 56 14 13 48 F6 B7 8C 52 3F 10 BC 07 | y^.MV..H...R?...
+6F E8 53 5D 2B 5F 24 EB E1 79 E6 02 43 A8 89 93 | o.S]+_$..y..C...
+AA 06 A7 5A 87 2E 8E 01 A0 06 95 EB 7D DD CF BB | ...Z........}...
+6A 6F 70 0D 89 AE CB 14 2A 7D 0F 61 1C 5E C0 B9 | jop.....*}.a.^..
+20 C2 4E 4E 53 87 10 7B 50 D2 BA 8D 37 CD D7 27 | .NNS..{P...7..'
+9D 7A 62 2A 23 45 96 7C EF D5 FA 8B CA 04 4F C6 | .zb*#E.|......O.
+9F 6E EC 3A 8B 10 FA 63 34 22 CC FE 09 0B 1B 23 | .n.:...c4".....#
+9B 29 52 08 13 E8 84 72 8F EE AA A1 34 CD EA F5 | .)R....r....4...
+48 3E 57 5F 3C 78 8C A3 C6 82 41 9F 2D CF 19 C3 | H>W_.k(..
+75 11 D0 B8 FD B1 20 B0 99 8B 3E B9 54 DB EF C4 | u..... ...>.T...
+DD C0 8E B8 1D EF 91 AB E2 91 19 C1 D1 B7 B6 AD | ................
+EA 98 8F 67 FD 7F 52 89 21 01 51 04 9C 05 35 35 | ...g..R.!.Q...55
+4C 66 66 0A 72 A8 50 46 34 D1 D6 FE 11 90 F5 CA | Lff.r.PF4.......
+9E 3E B7 71 89 96 AA DC 6F E5 1C 48 52 9A ED 99 | .>.q....o..HR...
+E1 B1 6A 30 F0 3F 88 60 46 2E 91 ED E3 8F 40 9C | ..j0.?.`F.....@.
+45 A1 DB 7B E1 99 19 C9 40 3C 6B 7C 25 F5 EC 93 | E..{....@S.
+93 F8 0E 25 27 F9 C8 51 75 54 38 B6 04 6A 9C 4C | ...%'..QuT8..j.L
+EE 7C E8 05 D6 5B 15 60 FD 85 40 C3 92 F8 8E B4 | .|...[.`..@.....
+15 6C 25 6E 50 13 CE 68 70 EC 5A 94 7E 72 2D F4 | .l%nP..hp.Z.~r-.
+4F FA 5E B0 61 20 63 55 00 DA F6 16 DB 56 41 81 | O.^.a cU.....VA.
+B4 1E 2F B8 4F 6F 51 FA E7 E6 44 98 31 DA 2C D4 | ../.OoQ...D.1.,.
+46 68 AE 04 AC E8 CB 78 DC 70 84 6D 03 66 82 F1 | Fh.....x.p.m.f..
+22 6C 78 8B 15 90 19 A6 C6 3B 9D D2 EE 85 75 06 | "lx......;....u.
+E6 84 E4 E8 65 09 2F C8 4E A8 14 D1 4D 63 C4 F2 | ....e./.N...Mc..
+5D 34 6B ED 6E 13 AD 12 0F 50 2B D4 AA D2 AE D9 | ]4k.n....P+.....
+13 BE 1F 91 9E 3F 55 E2 61 21 D5 D2 BE 45 FE 89 | .....?U.a!...E..
+4F E4 41 AE F2 5F 6F 29 82 BB EE AA 9C 12 08 72 | O.A.._o).......r
+75 F2 86 C0 B8 3E D2 BC 89 51 35 DE 0E 29 80 37 | u....>...Q5..).7
+04 0B 03 4A B4 28 6D 29 C6 13 1F 53 EE B5 D5 4E | ...J.(m)...S...N
+5C 3C 9C 0E 97 F4 7D 3C 63 69 69 0D 61 8C D7 CD | \<....}........{..@.
+CA AF 56 EE 75 0D DC 54 8F 95 07 21 EB 00 8E E9 | ..V.u..T...!....
+C0 F6 A2 09 17 03 03 11 25 0B 3C 28 76 22 1E 2F | ........%.<(v"./
+7E 43 BF E5 18 1F C4 28 04 1D 02 29 85 E3 7E 6F | ~C.....(...)..~o
+4B 6C 32 FF 65 13 6C C2 2A B2 62 C6 6E 76 FB 96 | Kl2.e.l.*.b.nv..
+1D A3 BB A5 02 B4 F9 D1 C0 53 AF CA 89 99 44 ED | .........S....D.
+38 20 5B B8 D3 0F EC FF 4A FA 58 91 7D 05 5F A8 | 8 [.....J.X.}._.
+E6 71 1D F4 BD 27 CC 90 EB 99 8B 05 09 91 92 84 | .q...'..........
+2A D2 3F D9 16 68 2A EC 42 E6 BE 1C 6E 9A D3 0E | *.?..h*.B...n...
+13 4A 1D 1F EB 30 A0 86 39 4D 7E 60 6A 3F 66 71 | .J...0..9M~`j?fq
+95 9A F0 7C D4 72 3F 64 4F 86 60 55 C4 15 D4 29 | ...|.r?dO.`U...)
+B0 16 33 19 39 47 66 94 3F 16 61 7C CC D2 5A A3 | ..3.9Gf.?.a|..Z.
+F2 27 0D 9E 35 51 B3 89 0A 85 1E 41 6F BA 1A 77 | .'..5Q.....Ao..w
+26 81 01 97 CF 54 F9 2C 78 77 05 D3 31 30 B0 E7 | &....T.,xw..10..
+24 FB E3 30 7D DB DD 93 19 F6 D4 24 22 E3 DA 41 | $..0}......$"..A
+9D 59 7D 86 42 D6 0D 05 8B D8 16 C3 DA FB 38 0C | .Y}.B.........8.
+13 71 BC 74 3E F1 BB 16 7C 89 FA E6 B8 8C 5E 28 | .q.t>...|.....^(
+C1 BD C2 EE C4 D4 91 D6 D7 8B 70 57 B1 ED 47 72 | ..........pW..Gr
+57 2F CC B2 62 E8 2E F4 8C 9D 45 E3 F2 7A C7 75 | W/..b.....E..z.u
+89 34 B2 5C 20 0E FA 3D 2B 0D AD E9 B7 B2 7C D3 | .4.\ ..=+.....|.
+B9 0F 12 F1 88 19 0F 1A 89 4A 1A 12 E5 42 3D 61 | .........J...B=a
+F5 01 6B 56 5D 45 CB 3C 11 D9 F7 E3 02 3B F2 5A | ..kV]E.<.....;.Z
+72 A1 88 F1 5A C1 39 96 94 90 14 03 7C 9E A5 2E | r...Z.9.....|...
+73 04 DB AD D7 22 17 13 82 51 EE 78 77 63 F9 26 | s...."...Q.xwc.&
+78 1A DC 80 D7 C3 23 94 5C 15 D8 0F E2 9D FC 20 | x.....#.\......
+40 49 53 36 3B F7 5A 48 3C D2 3B 5F F1 87 87 0F | @IS6;.ZH<.;_....
+00 DB A9 E8 27 FF 3B A1 05 93 EC A6 CC 8A 64 62 | ....'.;.......db
+A3 E3 6E 52 02 84 EC A1 12 97 E6 F2 C0 54 E1 9C | ..nR.........T..
+74 EF 0B 93 D0 82 C2 6F 33 BD D1 F1 EB 48 6F BA | t......o3....Ho.
+74 31 E0 98 23 11 CF 8C 0E C1 27 11 4E 91 65 E6 | t1..#.....'.N.e.
+5C DF 7B 6E 5D 92 B3 3E C9 9F 1C 84 13 1E 5B E2 | \.{n]..>......[.
+1D 14 F4 03 A3 5B 7D BC 30 F3 6C 00 F1 25 5B F0 | .....[}.0.l..%[.
+94 80 11 B5 75 A3 16 59 C6 70 D1 53 6E 62 96 77 | ....u..Y.p.Snb.w
+01 1D B1 3F 12 41 F5 93 F1 7D 58 E8 2A 60 43 1C | ...?.A...}X.*`C.
+8E 9D 60 3F 1D 1E CC 58 EE 61 B7 1B D1 5B 4C 0E | ..`?...X.a...[L.
+39 40 C0 50 2C 8A 2E 28 D8 BA AD FF 29 64 F1 6D | 9@.P,..(....)d.m
+94 E4 E4 3E E9 19 1F 9E 0D 02 39 68 A7 EE 58 5A | ...>......9h..XZ
+B8 24 F5 80 D3 70 2A 7A DB E0 62 8A C4 47 8A E6 | .$...p*z..b..G..
+67 D0 28 1D 31 32 5D 23 61 0D 64 04 69 75 3D 08 | g.(.12]#a.d.iu=.
+DA 01 FC 1C 93 CF 16 24 4E AA 68 D6 8E 52 4F 91 | .......$N.h..RO.
+A0 C5 6C 5F 71 1D D1 FE 4C F3 88 FA 3E 74 E9 90 | ..l_q...L...>t..
+B6 BD 9D AE DC 47 1C 4B 63 39 A3 6E D8 5E 76 72 | .....G.Kc9.n.^vr
+9B B0 DC FB 6E 09 F7 EB 13 A2 DE B6 D1 06 3E 8B | ....n.........>.
+0F 03 E0 2C 4E B9 03 94 5B E2 1F 56 0B DA CF 3B | ...,N...[..V...;
+42 B9 69 8E 51 90 8D 88 D5 13 6E B9 F7 A3 8F DD | B.i.Q.....n.....
+2D 23 D5 89 07 3C FA 01 40 D0 D6 99 B6 17 1B 58 | -#...<..@......X
+33 76 D4 5B 9F A0 BC C1 4D 5A 1D AF 38 23 1C F7 | 3v.[....MZ..8#..
+A1 AC 63 AA 65 8E FB 64 62 CD 22 5C 0D 44 4A 34 | ..c.e..db."\.DJ4
+A3 6F 94 16 6A 4F 3A 90 1B 75 C6 56 AC C8 90 D8 | .o..jO:..u.V....
+2F EF 0F E9 30 94 43 57 F5 D8 F3 16 F1 56 EF 1F | /...0.CW.....V..
+06 00 00 40 28 C4 02 4C F7 2F 69 ED BE 9B 06 A1 | ...@(..L./i.....
+7F C0 6B D9 BF 68 3B 7B 0E 63 3B 58 88 A8 DD A4 | ..k..h;{.c;X....
+E0 BB 3D D1 5B 8E 55 BC AD E4 E8 71 55 A4 E3 38 | ..=.[.U....qU..8
+D1 8A 53 9A 00 7B 23 63 A6 F7 0F BF FA AF E1 E4 | ..S..{#c........
+97 65 9F 3D BF 90 E2 72 48 8A A3 15 BF 74 91 79 | .e.=...rH....t.y
+E1 34 53 6D 16 FD 83 04 C8 F9 68 20 31 B1 CA 81 | .4Sm......h 1...
+9B BC 06 66 B3 7B B3 00 95 63 36 4F 5F 54 62 55 | ...f.{...c6O_TbU
+40 7C 05 F6 62 A3 E1 80 0B F0 12 38 30 AE 91 1C | @|..b......80...
+8B D8 75 82 D7 F7 6C 64 5F EB FD 6A 4E EC 77 F6 | ..u...ld_..jN.w.
+70 04 F6 7D 97 31 6D 9D BB AA 8B F7 84 ED 63 78 | p..}.1m.......cx
+EE EA CD F5 69 E1 16 5D 5B 57 F4 EF 7B C1 36 A6 | ....i..][W..{.6.
+E4 44 DE B1 E8 82 C1 B3 25 B1 3E 9A 2D 8E 20 0E | .D......%.>.-. .
+C9 2F 9E 79 7B FA 16 3D 2E AB 96 96 84 F4 0D B9 | ./.y{..=........
+76 86 E5 28 1C 41 45 F6 33 B0 B4 1E 74 C0 63 C0 | v..(.AE.3...t.c.
+10 15 FD B9 99 F3 F0 C8 84 33 28 B9 2F 81 99 A8 | .........3(./...
+F2 A3 40 6F 7E BE B1 8A A7 87 BE A2 4B 47 42 37 | ..@o~.......KGB7
+7D 48 F9 36 20 04 D7 1E BA 0E 74 7B 16 83 92 45 | }H.6 .....t{...E
+FF 02 C9 68 09 8B 1C AF 29 29 84 19 EC 62 0E 4E | ...h....))...b.N
+B3 A2 3E D1 52 50 CF 52 63 AB 04 20 49 6E A4 D4 | ..>.RP.Rc.. In..
+02 DB D2 6D 3C F1 2E 14 9F 70 D4 CE F7 19 36 74 | ...m<....p....6t
+6A F5 7B 0D 16 BC 0B F3 F0 05 5A B2 7C EC 05 FD | j.{.......Z.|...
+A4 39 D2 8A AB 04 C3 04 56 1C ED A8 3F 1A 29 1A | .9......V...?.).
+55 2B BB CA C2 2B 66 38 61 DE 95 3F 1E 58 3B 59 | U+...+f8a..?.X;Y
+98 1F 77 60 A8 6C 12 DA 80 01 7E 99 D6 AB 44 02 | ..w`.l....~...D.
+36 14 35 E9 29 9D E0 BB 65 26 79 2F 3C 47 6C 7B | 6.5.)...e&y/.xj#M.. N..P
+F9 84 7F E6 5B 99 A3 72 D1 8C CC 00 00 2C 00 FF | ....[..r.....,..
+C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0
+C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'..........
+00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O..
+00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz
+2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............
+00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................
+05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................
+01 00 00 00 00 00 12 00 00 00 17 00 00 | .............
+
+Flow Record:
+ RecordCount = 49
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 5 12 15 29
+ size = 1402
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132381700 [2024-04-15 00:06:21.700]
+ last = 1713132382221 [2024-04-15 00:06:22.221]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 59480
+ src tos = 0
+ fwd status = 0
+ in packets = 26
+ in bytes = 14779
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ out packets = 21
+ out bytes = 5602
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+C5 00 00 00 01 00 08 E4 11 02 B6 A6 93 80 E0 00 | ................
+43 A5 76 A7 10 E4 E7 8E 3B DC 64 72 07 2D A6 F0 | C.v.....;.dr.-..
+D7 5C 9B 5E A7 74 1B D8 A0 BA A7 B8 5B 65 77 39 | .\.^.t......[ew9
+4B 94 62 37 9A A6 50 4A F0 EE 2C 95 D7 97 82 7B | K.b7..PJ..,....{
+95 06 6D FC 1A 5F B0 DD 21 72 49 74 12 B2 99 D5 | ..m.._..!rIt....
+6F 39 CD A8 10 25 42 8E BB 06 0F 28 93 43 57 E7 | o9...%B....(.CW.
+23 FC 1B E7 77 83 05 8D 59 E7 6F 82 1B A1 0B 62 | #...w...Y.o....b
+89 63 84 04 38 FB D2 B7 1F 57 37 D8 07 A2 79 C1 | .c..8....W7...y.
+90 38 BC DF 3F A8 0A 64 23 19 ED C1 C4 AD FB D9 | .8..?..d#.......
+69 E0 E9 16 0F 2E 03 C0 F7 F5 16 A2 E9 1B DF 00 | i...............
+D7 7E 87 96 8A CC 83 2F EE 38 18 39 CC D9 FC 46 | .~...../.8.9...F
+0A 94 F9 70 E4 0D 3B A3 73 41 CD 0D C1 88 88 1F | ...p..;.sA......
+88 2E 1F BB B7 97 33 93 B5 66 E0 61 5B 00 21 4A | ......3..f.a[.!J
+40 2F 4D 8D 37 82 13 30 9A 5C 8F 54 98 38 8D 9D | @/M.7..0.\.T.8..
+3E B0 F4 53 6F 51 81 0B DD 5C 79 5A 33 7E 95 99 | >..SoQ...\yZ3~..
+9E 11 6A 7B B9 8F AA E5 39 86 FF EA 45 8E 6D 85 | ..j{....9...E.m.
+C3 50 B9 E7 04 7D 66 18 4F 5E 2A 99 AA 90 92 AC | .P...}f.O^*.....
+08 00 A8 68 1D 39 25 A3 75 03 B6 FB 5A 3C D8 5D | ...h.9%.u...Z<.]
+63 FA 55 56 5B CB 90 05 3D 33 27 6C AD 9F 83 A0 | c.UV[...=3'l....
+B1 2F 57 48 29 D8 73 28 F3 01 EF 9D 78 54 9D 4A | ./WH).s(....xT.J
+83 3E FF BB 80 FC EA 03 40 2F 51 75 7A 46 BA E2 | .>......@/QuzF..
+20 DB 71 9A A9 A1 66 27 EA 5C 21 B8 FF 43 52 16 | .q...f'.\!..CR.
+B1 DF 2F 1F E2 83 95 F6 2D 99 3B 3E DF 12 FE 15 | ../.....-.;>....
+26 EB 90 B9 1C A8 AC 10 6D 64 CC 16 54 0F 2F 79 | &.......md..T./y
+9D 4F DA 66 B2 C4 E9 0A FF 65 06 28 5C 94 4E 00 | .O.f.....e.(\.N.
+01 07 48 4F 2B 47 91 C1 8C 50 01 FD B5 1D 71 81 | ..HO+G...P....q.
+A2 82 10 F4 27 9C A5 19 32 35 4E 8A 6C 37 55 5E | ....'...25N.l7U^
+68 DA E2 9A 72 86 09 17 3F 29 38 7C 4C D4 2E 81 | h...r...?)8|L...
+E2 39 4B 54 6F 89 ED 25 1B 11 22 9B 35 42 81 C5 | .9KTo..%..".5B..
+C1 14 73 C0 05 44 64 50 12 AD 28 5F 7D 4F 6D 87 | ..s..DdP..(_}Om.
+B9 96 DF 78 DA D3 1B 73 31 81 02 A6 98 51 A6 9E | ...x...s1....Q..
+F1 27 23 D1 03 DE 4A D0 5E 21 FE 90 C5 33 0D F2 | .'#...J.^!...3..
+83 67 68 AA A0 84 F7 06 FD B1 28 53 0A E6 D1 DF | .gh.......(S....
+67 0B 56 12 6E D0 B1 2D E3 08 13 F3 B6 AF 42 A3 | g.V.n..-......B.
+78 74 B3 2F 8D 8B 8A 81 B8 32 54 95 BD 13 42 48 | xt./.....2T...BH
+9D 29 2F AA 44 9B 02 0F FE 6C F6 93 F6 AF AB C0 | .)/.D....l......
+A3 94 9C 8F C0 80 86 C5 8A 07 D5 CC 50 9A 88 53 | ............P..S
+DF 18 EC CF 06 F6 F7 B6 A8 E4 AE 42 97 A1 A4 66 | ...........B...f
+41 CA CE E4 90 FD 46 BD 29 BC C7 35 89 C7 3E FA | A.....F.)..5..>.
+55 A6 45 32 49 8C 46 F6 E3 1A 71 83 CA D1 6F CE | U.E2I.F...q...o.
+84 C2 8D DD E4 97 D1 C4 72 41 86 52 C9 46 9F DA | ........rA.R.F..
+22 C9 A4 34 F7 C5 47 19 CA 6A 8E B4 BB 98 88 26 | "..4..G..j.....&
+07 D7 9E EE AD 2C 52 6A 94 79 02 B2 43 60 A5 9F | .....,Rj.y..C`..
+7E A7 EC 07 8C E8 70 2C 0B 53 BF 90 D2 54 A8 06 | ~.....p,.S...T..
+81 5E ED 6D BA 02 AD B2 33 35 BB FF 8D E1 EF FB | .^.m....35......
+A0 74 40 1F 69 B3 1C 7B FB 80 99 CF 1C 5D 06 9B | .t@.i..{.....]..
+71 F5 59 CE 6B C5 6E 2A C8 4A 31 9D 1E 33 28 65 | q.Y.k.n*.J1..3(e
+76 8B 03 06 47 75 24 83 1B FD 50 5C 2C 8E 4B 1C | v...Gu$...P\,.K.
+3D 1D DA 81 8B 9E 5A 29 92 0E 4C 63 1F 8C 3B DF | =.....Z)..Lc..;.
+33 83 A5 79 75 BC 39 AA 3A 33 A8 3C 8E FA F0 39 | 3..yu.9.:3.<...9
+E3 9A 90 BE A7 09 4D BE 58 08 89 03 45 AE 64 52 | ......M.X...E.dR
+63 14 01 DC A4 32 15 63 4A 0E B0 EC 38 F5 1E 1F | c....2.cJ...8...
+86 B9 5D 93 71 55 A6 C7 C0 1E 1A D4 10 1B 9A CF | ..].qU..........
+FF 9D FC D2 64 EB 09 B3 5B 29 53 90 40 09 E7 5F | ....d...[)S.@.._
+59 89 8E 1C 45 2E A2 A5 A1 6C 60 88 EC D7 DE 3D | Y...E....l`....=
+47 D6 D1 69 49 16 E7 AA 40 A2 2E 9F 46 55 38 D0 | G..iI...@...FU8.
+C4 40 EA 11 76 E9 79 0C 27 B1 79 0C A2 45 EE B5 | .@..v.y.'.y..E..
+A5 F9 E0 A2 D9 60 C1 FC 9E 9D 5F 73 75 77 A1 C3 | .....`...._suw..
+89 D8 B1 4A 69 8D FC 32 F1 B4 50 31 57 B2 0D A7 | ...Ji..2..P1W...
+26 D7 2E F9 A8 71 C1 EB 00 00 00 01 00 08 E4 11 | &....q..........
+02 B6 A6 93 80 E0 40 DB 3A AC 96 84 01 55 A5 34 | ......@.:....U.4
+23 AF 67 E4 1B 7C 94 59 B1 DB 49 DA 5B AA 48 A0 | #.g..|.Y..I.[.H.
+7B 37 EC 84 44 BF AB C4 68 1E BB 91 50 44 CA 8E | {7..D...h...PD..
+88 BA 2B 8F F1 C6 7F A3 19 39 4E 74 3C 64 92 BE | ..+......9Nt.....1M...../U.
+C1 52 63 49 50 11 2D CE 3A 7A 83 2D 4F 83 75 18 | .RcIP.-.:z.-O.u.
+21 3C 12 D2 59 47 1D 4C BE 21 24 A0 C6 C4 30 58 | !<..YG.L.!$...0X
+39 5A AD 30 A8 FE ED 4B 33 13 C9 30 E9 9A 47 E3 | 9Z.0...K3..0..G.
+FB 19 52 41 AB A4 F6 4E 9A 50 BB 8C A8 BD 67 F8 | ..RA...N.P....g.
+13 49 | .I
+
+Flow Record:
+ RecordCount = 50
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1608
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132217356 [2024-04-15 00:03:37.356]
+ last = 1713132217529 [2024-04-15 00:03:37.529]
+ received at = 1713132302716 [2024-04-15 00:05:02.716]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 60460
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 7012
+ src addr = 13.224.103.47
+ dst addr = 157.143.34.100
+ out packets = 12
+ out bytes = 1634
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.405 ms
+ srv latency = 0.000 ms
+ app latency = 0.262 ms
+ in payload = 1428
+ TLS version = TLS 1.3
+ ja3s hash = 16a232c6047ab4c7f493b826d419a8be
+ ja4s hash = t130500_c02f_a241d087c239
+16 03 03 00 63 02 00 00 5F 03 03 26 A5 A3 FF 2E | ....c..._..&....
+BB 06 A5 05 5B 55 50 AB DA F5 FE 10 52 07 5F 75 | ....[UP.....R._u
+F6 5D A5 44 4F 57 4E 47 52 44 01 20 34 AB F1 B6 | .].DOWNGRD. 4...
+B8 5E 91 27 7C F7 F7 51 A4 EC 3B 5C BD 90 7E 88 | .^.'|..Q..;\..~.
+B7 B2 71 2B 3D F6 53 9F 31 E6 FF E5 C0 2F 00 00 | ..q+=.S.1..../..
+17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................
+00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................
+8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0....
+03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g..
+C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H...
+01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U..
+13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A
+6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U....
+41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048
+4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000
+30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359
+35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U....
+74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0..
+09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............
+00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(..
+62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N
+E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b%
+4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?.
+47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. .
+49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_...
+CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3
+91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P.
+82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+
+B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X..
+B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._.
+C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X.
+E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^
+60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9.
+51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E
+16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L
+0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<.......
+82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#..
+30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;;
+50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U...
+16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k.
+04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z
+30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..*
+2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com..
+77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t
+69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*.
+74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid
+61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U.
+0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U.
+25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........
+08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U..
+04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http
+3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama
+7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m
+30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0
+0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+
+06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+
+06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http://
+6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo
+6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+.
+01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c
+72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont
+72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c
+65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0.
+30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y...
+04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v....
+64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F
+7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq......
+89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!.
+C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..'
+CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*...
+02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux..
+7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$..
+63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j
+02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,....
+AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w....
+03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%.
+2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g...
+46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../...
+EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{...
+4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v....
+6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql
+BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H......
+89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!.
+86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV.......
+DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7
+02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......}
+0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:.
+59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H.......
+00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]]
+D3 9D AC B4 | ....
+
+Flow Record:
+ RecordCount = 51
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132312425 [2024-04-15 00:05:12.425]
+ last = 1713132343398 [2024-04-15 00:05:43.398]
+ received at = 1713132441666 [2024-04-15 00:07:21.666]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 53730
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18529
+ src addr = 17.248.209.68
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 6945
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 14.995 ms
+ srv latency = 0.000 ms
+ app latency = 0.552 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 BA 07 CE 30 B6 | ....z...v.....0.
+38 80 A7 FA BB F3 72 03 0E D3 3A DB A0 09 A2 32 | 8.....r...:....2
+3F 62 21 32 7F 97 D2 60 4E 8A 14 20 C4 DD 6E AC | ?b!2...`N.. ..n.
+FE 8D B5 9A 86 C2 18 8B E6 AD 1D 0E 16 6F 29 59 | .............o)Y
+BE 9F 65 72 F1 40 A4 36 30 40 75 00 13 02 00 00 | ..er.@.60@u.....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 D4 | ..+.....3.$... .
+B1 07 2D 73 84 95 82 57 76 60 00 7C A0 69 FE 16 | ..-s...Wv`.|.i..
+09 86 B8 7F D3 AD 8D 4C 0D 2D 80 81 9E 4A 64 14 | .......L.-...Jd.
+03 03 00 01 01 17 03 03 00 2A 68 7C DD 01 66 6A | .........*h|..fj
+65 00 01 CD 30 FB E6 6D 04 1F BA BD 7C 0F A2 66 | e...0..m....|..f
+3B 4F 36 DD 98 A6 08 4C 1B 59 B5 5C A9 61 D3 36 | ;O6....L.Y.\.a.6
+D9 2D 3E 84 17 03 03 11 25 7A F3 01 9C 4C C3 2F | .->.....%z...L./
+38 70 C5 24 22 E9 B0 2A B7 42 59 52 FE E1 9E ED | 8p.$"..*.BYR....
+E4 C7 D7 D5 D7 A1 77 5B 9B 56 CF 4A 6F 91 53 5E | ......w[.V.Jo.S^
+BA E9 58 20 6E 2E A1 D6 CA 4E D3 53 FB E9 0D 91 | ..X n....N.S....
+6B 2C FC B4 89 8A D0 C6 F1 1D 0E 0F 7E E4 74 16 | k,..........~.t.
+AA B0 58 62 71 50 39 54 89 FA E6 BB 13 48 A4 AC | ..XbqP9T.....H..
+D4 71 D8 EC C0 3C 9F 7B E3 7E C8 38 5C 52 BE 8E | .q...<.{.~.8\R..
+79 29 F8 9B 62 1D 96 5B 90 FC D9 2D A3 35 BE 0A | y)..b..[...-.5..
+E7 4F 06 E2 1C 43 7C CD 25 C1 E7 8B EF 89 78 D3 | .O...C|.%.....x.
+89 D6 1C 47 1D 61 1B DB 15 EC 78 D0 A8 C8 34 23 | ...G.a....x...4#
+42 7D 5E EE FC 93 55 50 FB 85 07 40 1B DC 5A 59 | B}^...UP...@..ZY
+5F 63 E9 E1 23 60 BA 38 85 52 55 AB 2D B0 41 AA | _c..#`.8.RU.-.A.
+70 E0 B5 EB 50 1A 21 E5 FC C2 3D AE 9F 13 1A 96 | p...P.!...=.....
+B5 D0 E8 0F A8 C9 A6 FB CC 29 0C 85 29 8D 3A 83 | .........)..).:.
+F8 77 6B 04 E5 67 A9 CE EB DF A6 F0 2B 2E EB 33 | .wk..g......+..3
+AD B7 CC F6 26 D0 A6 DF 5B 28 68 49 32 59 20 D5 | ....&...[(hI2Y .
+CF 0D 35 61 90 4D 42 D0 79 2B 73 B0 A3 3D 6C C2 | ..5a.MB.y+s..=l.
+08 00 3C 98 3A CB 76 DB C7 04 1B C7 22 15 BF 5B | ..<.:.v....."..[
+43 CE 13 BC C5 7C EE 4D 68 BB 4F 93 08 8C E9 D0 | C....|.Mh.O.....
+5F 55 A1 E0 54 6D 6A 2C 1C 0A C0 90 59 12 17 6F | _U..Tmj,....Y..o
+55 5A 6E A8 28 3B 2C 39 49 5F 8E 65 B9 8E 89 40 | UZn.(;,9I_.e...@
+63 91 F0 03 E0 1B A3 E2 A6 4F 21 F0 5E EB E4 28 | c........O!.^..(
+A8 B5 B2 5E 72 36 08 66 E9 55 A7 E6 4A 5F 69 CF | ...^r6.f.U..J_i.
+8C 2F 5D 7B EF BB 53 9B A7 AC F2 92 EE 83 1B BA | ./]{..S.........
+F0 55 E6 AC 49 9E 05 77 3D E9 DA 03 82 74 E0 E1 | .U..I..w=....t..
+AE F7 F1 D5 B8 C1 5B ED 61 9C 90 F2 F9 1C 44 0D | ......[.a.....D.
+1A BD A5 5D 45 A5 D1 45 5E 00 52 EC A3 93 5B D2 | ...]E..E^.R...[.
+CF 84 56 D8 6C 34 62 BA CB 11 85 13 11 4B CF 97 | ..V.l4b......K..
+00 F4 4E C0 22 8C F1 72 EB B3 9E EF C9 B9 AC 24 | ..N."..r.......$
+C6 77 DB 5F 12 8D FE D2 D3 AA DB 87 6F 98 F8 06 | .w._........o...
+C3 31 CE C2 D4 9D 36 54 F4 4D 75 C4 A0 17 99 DF | .1....6T.Mu.....
+DB 59 A8 75 4D FD F3 A8 FC 0F EF E1 A5 32 CC 2B | .Y.uM........2.+
+E2 3B 9F 5C 9C 25 F5 A0 B4 CA 20 90 CE 78 49 34 | .;.\.%.... ..xI4
+33 DB AF F8 17 FF 79 42 36 DE 0B F0 97 0F 5E A1 | 3.....yB6.....^.
+41 62 3F 6D 86 77 77 E9 E9 92 1C 27 24 8A 74 D1 | Ab?m.ww....'$.t.
+B5 1E 7D 1D 52 2F F9 C5 36 81 F2 77 63 71 B4 90 | ..}.R/..6..wcq..
+98 28 5C E8 15 EB B2 DD 05 C8 44 13 AA 8A 57 1A | .(\.......D...W.
+97 38 61 D1 C4 5C 30 37 B0 43 D5 50 05 9F 68 9E | .8a..\07.C.P..h.
+6C E2 79 D0 74 F4 CD EA 7C C9 84 10 9D 82 68 6C | l.y.t...|.....hl
+FC 52 C8 A7 03 77 B0 8D 30 BB BF 95 9A B9 B2 D2 | .R...w..0.......
+21 A4 78 FA DB BE 89 54 BF F0 FF 9D 40 75 5F 3A | !.x....T....@u_:
+CA EF 49 9A 91 48 41 42 01 15 CF 02 1F 0F BD 47 | ..I..HAB.......G
+17 7A 5D 5D 3F 77 37 0F EF 75 BD B9 E3 37 73 5B | .z]]?w7..u...7s[
+75 1B 6B 2F 05 6F BF 38 DB 27 D0 B5 BD 04 47 BD | u.k/.o.8.'....G.
+15 E0 8B 3A 2B 2A 15 10 55 9D 7F B6 21 2F C9 75 | ...:+*..U...!/.u
+65 03 28 C2 DE 2A 7A 95 9B 84 F0 39 B2 FF FE 73 | e.(..*z....9...s
+6E B7 4A AF 25 07 D8 C0 B4 37 7E C7 8A 49 AA A3 | n.J.%....7~..I..
+44 F1 D9 4B 15 4C 1A 3D 44 05 75 4A 48 C0 CA 5F | D..K.L.=D.uJH.._
+EC 35 1C 59 10 52 51 D4 F6 F2 92 A2 F0 42 51 0D | .5.Y.RQ......BQ.
+E0 EE E1 A2 3C 34 21 E1 BA A9 39 0F 63 74 74 E7 | ....<4!...9.ctt.
+C7 72 FF 52 C6 23 39 B0 FA 31 9D 7C 45 EF C7 2E | .r.R.#9..1.|E...
+D5 F5 CD 87 0A CE 6D 9B 8A E9 CE FF E5 24 C9 A2 | ......m......$..
+C0 B8 63 E8 CC 8B 10 6F FE 3C 03 94 C4 DC 28 50 | ..c....o.<....(P
+54 00 2D F2 FB BF 8B 15 B8 83 A6 67 0B 18 1A 47 | T.-........g...G
+60 C3 4E B2 2E 3D 75 B8 C9 B8 3A 5F B1 61 2B A8 | `.N..=u...:_.a+.
+05 A0 B1 28 D5 EF D0 CC E6 5C A8 BB 36 28 12 EF | ...(.....\..6(..
+51 E5 2D 22 AF FF 04 04 2E 64 D0 0F 53 62 37 E2 | Q.-".....d..Sb7.
+25 A0 52 27 D4 AC 8F 7E FB 20 77 36 DC 3A 9C 9A | %.R'...~. w6.:..
+81 98 EA 1B 77 86 7A 45 67 95 2C F4 B5 5A F6 6F | ....w.zEg.,..Z.o
+43 96 79 6C 57 FA 38 D7 5B AB C2 DE 12 CE D6 CA | C.ylW.8.[.......
+54 E0 04 2F 2D 73 55 09 78 88 52 C3 61 68 F5 EB | T../-sU.x.R.ah..
+13 9C AF DE 0B 08 9C F0 67 54 FD AF FF 29 8E 23 | ........gT...).#
+83 C7 F5 20 6A 1A 63 EB E8 AD 7C 10 CF 55 2F 8B | ... j.c...|..U/.
+1B 0F 79 19 DD EA 4B BD 80 30 09 13 D8 FF D9 2A | ..y...K..0.....*
+5C 7C 28 A5 8A 2C 4B 3C 98 7F F8 58 71 7C E8 44 | \|(..,K<...Xq|.D
+19 6D 2A 29 71 CD 91 53 FF 0C BF 15 5D 44 35 DE | .m*)q..S....]D5.
+3C 96 81 28 48 BD 59 7B A1 CD 38 4D D3 B0 F7 E6 | <..(H.Y{..8M....
+AC F2 03 2D 30 14 93 3B E9 47 69 8B 8E 61 09 93 | ...-0..;.Gi..a..
+E3 5D DD 70 42 38 08 39 B9 86 81 CD 91 AA BC 49 | .].pB8.9.......I
+70 B0 38 04 5F 4D 9F 8E 4A 26 A6 72 2B 49 B7 00 | p.8._M..J&.r+I..
+9A 70 F3 65 DB 91 9D 6C 27 FB B2 E3 AB 03 80 2C | .p.e...l'......,
+79 05 2F FA A0 C3 B3 0B 06 93 1E 56 EB 7E FB D7 | y./........V.~..
+27 20 DD B8 43 59 91 9D 35 0C C3 69 70 96 E4 66 | ' ..CY..5..ip..f
+A5 FE 26 46 84 B8 3C AE 7C 72 D1 A1 CB C5 DC 2A | ..&F..<.|r.....*
+B8 D3 2A 89 FC C9 19 00 8F 3F 9D 57 B1 D1 B9 35 | ..*......?.W...5
+B0 ED C3 5D 8A A6 D4 6D 5D FB 5D 6B 26 59 27 F4 | ...]...m].]k&Y'.
+9C 87 FB A3 47 E6 91 B1 FF 51 5E 3E 1E 69 7F CD | ....G....Q^>.i..
+CC D2 F5 C8 8D 83 32 B3 B3 5E 66 61 1E F4 7D 58 | ......2..^fa..}X
+E9 06 30 86 26 1E B6 73 55 E1 C8 6A B7 FA 9C A4 | ..0.&..sU..j....
+B1 4A A4 7A E9 C5 6F C8 | .J.z..o.
+
+Flow Record:
+ RecordCount = 52
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 353
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132206344 [2024-04-15 00:03:26.344]
+ last = 1713132206577 [2024-04-15 00:03:26.577]
+ received at = 1713132277673 [2024-04-15 00:04:37.673]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 54916
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 13
+ in bytes = 1409
+ src addr = 157.143.34.100
+ dst addr = 54.78.190.126
+ out packets = 12
+ out bytes = 6786
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 35.198 ms
+ srv latency = 0.000 ms
+ app latency = 0.237 ms
+ in payload = 173
+ TLS version = TLS 1.2
+ sni name = www.qobuz.com
+ ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a
+ ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043
+16 03 03 00 A8 01 00 00 A4 03 03 66 1C 52 AE 75 | ...........f.R.u
+E6 5A 53 F3 ED F5 7B 78 DC B6 C7 28 DF DD 89 AC | .ZS...{x...(....
+C7 3D 97 1B 21 70 B8 32 FD 81 65 00 00 2C 00 FF | .=..!p.2..e..,..
+C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0
+C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'..........
+00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O..
+00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz
+2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............
+00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................
+05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................
+01 00 00 00 00 00 12 00 00 00 17 00 00 | .............
+
+Flow Record:
+ RecordCount = 53
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 5: 1 2 12 15 29
+ size = 1374
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132383187 [2024-04-15 00:06:23.187]
+ last = 1713132383634 [2024-04-15 00:06:23.634]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 63665
+ src tos = 0
+ fwd status = 0
+ in packets = 20
+ in bytes = 7353
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+C2 00 00 00 01 00 08 FC 08 64 CD 41 6A C8 CC 00 | .........d.Aj...
+44 D0 D9 63 FA BA 01 0A C7 9D 2B BE A1 36 63 8F | D..c......+..6c.
+77 1F 0A DA BE 57 45 8B D4 11 4F 3A CA AD F6 26 | w....WE...O:...&
+41 33 91 C2 56 64 8E 78 0A F7 DB 8A 1D 6B B8 61 | A3..Vd.x.....k.a
+31 09 EE D2 C7 56 FB 76 D8 E6 B0 6E AA 66 FB DF | 1....V.v...n.f..
+47 83 C3 BD 63 28 CC 57 66 AF 03 40 42 9E 26 5B | G...c(.Wf..@B.&[
+6A B3 1F F4 CC 23 BF DC 3A 77 D7 17 1B 60 FC 84 | j....#..:w...`..
+F8 52 30 A7 02 0E 34 F8 D0 DE 3C 1D 29 07 82 1B | .R0...4...<.)...
+89 37 33 8A A2 AD 64 A9 10 10 ED 28 B1 F8 7C 53 | .73...d....(..|S
+61 CA 61 E4 90 85 A3 EC 44 A1 B9 F7 B9 06 62 A3 | a.a.....D.....b.
+5E 8A 13 1D D5 46 C7 4F E8 98 50 96 D1 9B 3C 8F | ^....F.O..P...<.
+36 F2 02 B5 8B CC 75 3C 24 F5 BC 08 F7 20 EF 55 | 6.....u<$.... .U
+28 BE 32 6B 4E 6F 12 4C F5 F7 41 E8 36 C9 11 85 | (.2kNo.L..A.6...
+F9 19 F6 9D 04 3D 53 E4 44 8A 69 CD 40 4B 70 0F | .....=S.D.i.@Kp.
+F3 78 AB 37 56 09 F2 0C 25 8A 83 E4 36 1B F8 97 | .x.7V...%...6...
+5A 70 8F 6F D0 F6 29 EA 85 3B 02 BE 88 C8 F3 31 | Zp.o..)..;.....1
+B8 A6 24 84 08 41 1D 79 2D 69 B9 AB 1C C6 41 F1 | ..$..A.y-i....A.
+0C 57 A3 92 93 A2 1C E8 01 25 68 E9 DF 06 CB 88 | .W.......%h.....
+7B 29 B1 D7 FD 0E CB A5 23 06 F3 59 64 7E 08 2B | {)......#..Yd~.+
+AD F8 08 83 0C E0 19 0C C6 C4 46 E9 F9 BC F7 1A | ..........F.....
+52 DC 1C 0F DB E5 A2 11 61 A9 4A 6F E6 EA 6D A0 | R.......a.Jo..m.
+E7 A8 E3 7D 02 62 DB 79 A1 FD A3 99 54 09 00 0A | ...}.b.y....T...
+03 C5 83 2B 5C 3B E8 79 1A 2A C9 F8 C6 A1 33 CA | ...+\;.y.*....3.
+0D 1C E9 BC 22 D6 18 26 92 C7 C2 50 51 A8 AE 72 | ...."..&...PQ..r
+BB 1D 81 0A 02 C5 29 7E 82 C3 D3 1F 8B 7B 5D 45 | ......)~.....{]E
+72 DB A8 C7 B7 E5 FA A7 8D 31 18 0A FF D9 2D C7 | r........1....-.
+6E 27 97 FC 3B B6 2D CE D5 DD C3 A3 5F C7 92 67 | n'..;.-....._..g
+84 EF C1 D4 E1 11 5B 71 57 98 47 F0 A8 B5 4F 4C | ......[qW.G...OL
+75 89 3D 1D 3C 0A 15 C1 65 FE 6B 02 78 02 45 79 | u.=.<...e.k.x.Ey
+59 FB 7C FA FA 5A 9F 83 2A AF 3B A8 59 3B 27 24 | Y.|..Z..*.;.Y;'$
+57 AA 60 63 F7 E5 DF 4E 98 82 5B E1 E7 65 D5 FF | W.`c...N..[..e..
+6F 0D 45 25 02 74 08 23 D3 89 DE EC 15 17 5C 4D | o.E%.t.#......\M
+3C 8F BA D0 4B 02 C0 8B B7 41 82 F9 B0 03 D5 3C | <...K....A.....<
+10 1D 2B 5E FE C4 C0 88 88 D0 81 22 F8 75 2F D0 | ..+^.......".u/.
+EE 03 83 CC 62 FF 31 5A 33 1B 1E B7 22 FD AD AF | ....b.1Z3..."...
+CC 32 4B 0F A7 4A AE 41 B2 AE 5A 7A 37 61 46 5B | .2K..J.A..Zz7aF[
+91 9B D6 D4 26 72 8C 05 B5 7E 52 40 3C 76 CA C1 | ....&r...~R@.8....Y.S...
+2A F9 D3 DD 5D 1B 14 69 0E A0 76 E4 52 60 31 B1 | *...]..i..v.R`1.
+B2 3C 74 85 59 4D 02 6F 93 92 D1 8A F0 71 C8 3C | .Z....}3.....
+6F 5A 57 8A 52 DE 42 36 A8 52 DA 25 8D 27 72 99 | oZW.R.B6.R.%.'r.
+6C 1A 5C 5C 30 04 80 FA 8E 38 4E 4F 78 1C 20 7E | l.\\0....8NOx. ~
+FB 77 1C 89 8F 9B 75 0F DE 26 D4 B7 95 4E D9 25 | .w....u..&...N.%
+AB F1 25 07 9C 6E 43 80 70 16 27 C3 28 15 0F 06 | ..%..nC.p.'.(...
+1E D1 82 46 CA 68 2A E7 E8 75 BA C2 23 B6 58 7A | ...F.h*..u..#.Xz
+8A 2B 6E 82 C1 3F 62 BF 27 AE D9 66 8C 48 76 C2 | .+n..?b.'..f.Hv.
+A4 B7 12 AD 41 51 D8 1C 02 C2 6C 12 43 31 3E 7F | ....AQ....l.C1>.
+88 8A 8B AE BC 93 95 94 C9 66 08 5E 90 98 C6 2D | .........f.^...-
+B1 C3 66 EF BF AC FF 2C 79 6D 3E 9E 5F 6D 63 DC | ..f....,ym>._mc.
+28 69 C2 2B 8B A3 85 77 03 AD E7 22 11 F5 2F AB | (i.+...w..."../.
+F4 E9 2F 20 11 BF CE AD 0C AE D9 AF 91 5F C4 8A | ../ ........._..
+97 72 E7 A4 CC F3 B3 49 CB F8 34 F0 81 16 C2 BE | .r.....I..4.....
+35 33 61 62 F5 E6 D0 2A 95 AA 45 38 B8 27 8D 42 | 53ab...*..E8.'.B
+FA 0C 26 81 6A 14 6C 9D 29 8F 8B E8 C1 32 8B 3F | ..&.j.l.)....2.?
+4A C6 4F 78 56 B2 F5 79 45 89 55 CF A1 B9 E8 CD | J.OxV..yE.U.....
+EB 64 1C 19 9D 3C B1 7D 35 7D 61 49 60 42 FC 7E | .d...<.}5}aI`B.~
+3D 5F | =_
+
+Flow Record:
+ RecordCount = 54
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 362
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132190588 [2024-04-15 00:03:10.588]
+ last = 1713132228174 [2024-04-15 00:03:48.174]
+ received at = 1713132302717 [2024-04-15 00:05:02.717]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 51573
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 10
+ in bytes = 1602
+ src addr = 157.143.34.100
+ dst addr = 35.231.208.158
+ out packets = 8
+ out bytes = 3814
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 112.082 ms
+ srv latency = 0.000 ms
+ app latency = 0.006 ms
+ in payload = 182
+ TLS version = TLS 1.2
+ sni name = discovery.roonlabs.net
+ ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a
+ ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043
+16 03 01 00 B1 01 00 00 AD 03 03 66 1C 52 9E 01 | ...........f.R..
+F0 56 F8 48 43 57 15 76 7B BF E9 B7 80 0C 89 2E | .V.HCW.v{.......
+FB 77 A8 F2 0C 2C 46 7A CB 4D 02 00 00 2C 00 FF | .w...,Fz.M...,..
+C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0
+C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'..........
+00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 58 00 00 | .=.<.5./.....X..
+00 1B 00 19 00 00 16 64 69 73 63 6F 76 65 72 79 | .......discovery
+2E 72 6F 6F 6E 6C 61 62 73 2E 6E 65 74 00 0A 00 | .roonlabs.net...
+08 00 06 00 17 00 18 00 19 00 0B 00 02 01 00 00 | ................
+0D 00 12 00 10 04 01 02 01 05 01 06 01 04 03 02 | ................
+03 05 03 06 03 00 05 00 05 01 00 00 00 00 00 12 | ................
+00 00 00 17 00 00 | ......
diff --git a/src/libnfdump/filter/grammar.c b/src/libnfdump/filter/grammar.c
new file mode 100644
index 00000000..24ba47be
--- /dev/null
+++ b/src/libnfdump/filter/grammar.c
@@ -0,0 +1,4225 @@
+/* A Bison parser, made by GNU Bison 2.3. */
+
+/* Skeleton implementation for Bison's Yacc-like parsers in C
+
+ Copyright (C) 1984, 1989, 1990, 2000, 2001, 2002, 2003, 2004, 2005, 2006
+ Free Software Foundation, Inc.
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 2, or (at your option)
+ any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program; if not, write to the Free Software
+ Foundation, Inc., 51 Franklin Street, Fifth Floor,
+ Boston, MA 02110-1301, USA. */
+
+/* As a special exception, you may create a larger work that contains
+ part or all of the Bison parser skeleton and distribute that work
+ under terms of your choice, so long as that work isn't itself a
+ parser generator using the skeleton or a modified version thereof
+ as a parser skeleton. Alternatively, if you modify or redistribute
+ the parser skeleton itself, you may (at your option) remove this
+ special exception, which will cause the skeleton and the resulting
+ Bison output files to be licensed under the GNU General Public
+ License without this special exception.
+
+ This special exception was added by the Free Software Foundation in
+ version 2.2 of Bison. */
+
+/* C LALR(1) parser skeleton written by Richard Stallman, by
+ simplifying the original so-called "semantic" parser. */
+
+/* All symbols defined below should begin with yy or YY, to avoid
+ infringing on user name space. This should be done even for local
+ variables, as they might otherwise be expanded by user macros.
+ There are some unavoidable exceptions within include files to
+ define necessary library symbols; they are noted "INFRINGES ON
+ USER NAME SPACE" below. */
+
+/* Identify Bison output. */
+#define YYBISON 1
+
+/* Bison version. */
+#define YYBISON_VERSION "2.3"
+
+/* Skeleton name. */
+#define YYSKELETON_NAME "yacc.c"
+
+/* Pure parsers. */
+#define YYPURE 0
+
+/* Using locations. */
+#define YYLSP_NEEDED 0
+
+
+
+/* Tokens. */
+#ifndef YYTOKENTYPE
+# define YYTOKENTYPE
+ /* Put the tokens into the symbol table, so that GDB and other debuggers
+ know about them. */
+ enum yytokentype {
+ EQ = 258,
+ LT = 259,
+ GT = 260,
+ LE = 261,
+ GE = 262,
+ ANY = 263,
+ NOT = 264,
+ IDENT = 265,
+ COUNT = 266,
+ IP = 267,
+ IPV4 = 268,
+ IPV6 = 269,
+ NET = 270,
+ SRC = 271,
+ DST = 272,
+ IN = 273,
+ OUT = 274,
+ PREV = 275,
+ NEXT = 276,
+ BGP = 277,
+ ROUTER = 278,
+ INGRESS = 279,
+ EGRESS = 280,
+ NAT = 281,
+ XLATE = 282,
+ TUN = 283,
+ ENGINE = 284,
+ ENGINETYPE = 285,
+ ENGINEID = 286,
+ EXPORTER = 287,
+ DURATION = 288,
+ PPS = 289,
+ BPS = 290,
+ BPP = 291,
+ FLAGS = 292,
+ PROTO = 293,
+ PORT = 294,
+ AS = 295,
+ IF = 296,
+ VLAN = 297,
+ MPLS = 298,
+ MAC = 299,
+ ICMP = 300,
+ ICMPTYPE = 301,
+ ICMPCODE = 302,
+ PACKETS = 303,
+ BYTES = 304,
+ FLOWS = 305,
+ ETHERTYPE = 306,
+ MASK = 307,
+ FLOWDIR = 308,
+ TOS = 309,
+ FWDSTAT = 310,
+ LATENCY = 311,
+ ASA = 312,
+ ACL = 313,
+ PAYLOAD = 314,
+ GEO = 315,
+ VRF = 316,
+ OBSERVATION = 317,
+ PF = 318,
+ STRING = 319,
+ NUMBER = 320,
+ OR = 321,
+ AND = 322,
+ NEGATE = 323
+ };
+#endif
+/* Tokens. */
+#define EQ 258
+#define LT 259
+#define GT 260
+#define LE 261
+#define GE 262
+#define ANY 263
+#define NOT 264
+#define IDENT 265
+#define COUNT 266
+#define IP 267
+#define IPV4 268
+#define IPV6 269
+#define NET 270
+#define SRC 271
+#define DST 272
+#define IN 273
+#define OUT 274
+#define PREV 275
+#define NEXT 276
+#define BGP 277
+#define ROUTER 278
+#define INGRESS 279
+#define EGRESS 280
+#define NAT 281
+#define XLATE 282
+#define TUN 283
+#define ENGINE 284
+#define ENGINETYPE 285
+#define ENGINEID 286
+#define EXPORTER 287
+#define DURATION 288
+#define PPS 289
+#define BPS 290
+#define BPP 291
+#define FLAGS 292
+#define PROTO 293
+#define PORT 294
+#define AS 295
+#define IF 296
+#define VLAN 297
+#define MPLS 298
+#define MAC 299
+#define ICMP 300
+#define ICMPTYPE 301
+#define ICMPCODE 302
+#define PACKETS 303
+#define BYTES 304
+#define FLOWS 305
+#define ETHERTYPE 306
+#define MASK 307
+#define FLOWDIR 308
+#define TOS 309
+#define FWDSTAT 310
+#define LATENCY 311
+#define ASA 312
+#define ACL 313
+#define PAYLOAD 314
+#define GEO 315
+#define VRF 316
+#define OBSERVATION 317
+#define PF 318
+#define STRING 319
+#define NUMBER 320
+#define OR 321
+#define AND 322
+#define NEGATE 323
+
+
+
+
+/* Copy the first part of user declarations. */
+#line 31 "filter/grammar.y"
+
+
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+
+#include "filter.h"
+#include "userio.h"
+#include "nfxV3.h"
+#include "ipconv.h"
+#include "sgregex.h"
+#include "ja3/ja3.h"
+#include "ja4/ja4.h"
+#include "nfdump.h"
+
+#define AnyMask 0xffffffffffffffffLL
+
+const data_t NULLPtr = {NULL};
+
+/*
+ * function prototypes
+ */
+static void yyerror(char *msg, ...);
+
+/* var defs */
+extern int lineno;
+extern char *yytext;
+extern uint32_t StartNode;
+extern char *FilterFilename;
+
+static ipStack_t ipStack[MAXHOSTS];
+
+static uint32_t ChainHosts(ipStack_t *ipStack, int numIP, int direction);
+
+static int AddIdent(char *ident);
+
+static int AddEngineNum(char *type, uint16_t comp, uint64_t num);
+
+static int AddExporterNum(char *type, uint16_t comp, uint64_t num);
+
+static int AddProto(direction_t direction, char *protoStr, uint64_t protoNum);
+
+static int AddPortNumber(direction_t direction, uint16_t comp, uint64_t port);
+
+static int AddICMP(char *type, uint16_t comp, uint64_t number);
+
+static int AddAsNumber(direction_t direction, uint16_t comp, uint64_t as);
+
+static int AddFlagsNumber(direction_t direction, uint16_t comp, uint64_t flags);
+
+static int AddFlagsString(direction_t direction, char *flags);
+
+static int AddTosNumber(direction_t direction, uint16_t comp, uint64_t tos);
+
+static int AddPackets(direction_t direction, uint16_t comp, uint64_t packets);
+
+static int AddBytes(direction_t direction, uint16_t comp, uint64_t bytes);
+
+static int AddFwdStatNum(uint16_t comp, uint64_t num);
+
+static int AddFwdStatString(char *string);
+
+static int AddIP(direction_t direction, char *IPstr);
+
+static int AddIPlist(direction_t direction, void *IPstr);
+
+static int AddNet(direction_t direction, char *IPstr, char *maskStr);
+
+static int AddNetPrefix(direction_t direction, char *IPstr, uint64_t mask);
+
+static int AddInterfaceNumber(direction_t direction, uint64_t num);
+
+static int AddVlanNumber(direction_t direction, uint64_t num);
+
+static int AddMaskNumber(direction_t direction, uint64_t num);
+
+static int AddFlowDir(direction_t direction, int64_t dirNum);
+
+static int AddMPLS(char *type, uint16_t comp, uint64_t value);
+
+static int AddMAC(direction_t direction, char *macString);
+
+static int AddEthertype(uint64_t etherType);
+
+static int AddLatency(char *type, uint16_t comp, uint64_t number);
+
+static int AddASAString(char *event, char *asaStr);
+
+static int AddASA(char *event, uint16_t comp, uint64_t number);
+
+static int AddASApblock(direction_t direction, char *arg);
+
+static int AddNATString(char *event, char *asaStr);
+
+static int AddNAT(char *event, uint16_t comp, uint64_t number);
+
+static int AddNatPortBlocks(char *type, char *subtype, uint16_t comp, uint64_t number);
+
+static int AddACL(direction_t direction, uint16_t comp, uint64_t number);
+
+static int AddPayload(char *type, char *arg, char *opt);
+
+static int AddGeo(direction_t direction, char *geo);
+
+static int AddObservation(char *type, char *subType, uint16_t comp, uint64_t number);
+
+static int AddVRF(direction_t direction, uint16_t comp, uint64_t number);
+
+static int AddPFString(char *type, char *arg);
+
+static int AddPFNumber(char *type, uint16_t comp, uint64_t number);
+
+static void *NewIplist(char *IPstr, int prefix);
+
+static void *NewU64list(uint64_t num);
+
+static int InsertIPlist(void *IPlist, char *IPstr, int64_t prefix);
+
+static int InsertU64list(void *U64list, uint64_t num);
+
+static int AddPortList(direction_t direction, void *U64List);
+
+static int AddASList(direction_t direction, void *U64List);
+
+
+
+/* Enabling traces. */
+#ifndef YYDEBUG
+# define YYDEBUG 0
+#endif
+
+/* Enabling verbose error messages. */
+#ifdef YYERROR_VERBOSE
+# undef YYERROR_VERBOSE
+# define YYERROR_VERBOSE 1
+#else
+# define YYERROR_VERBOSE 0
+#endif
+
+/* Enabling the token table. */
+#ifndef YYTOKEN_TABLE
+# define YYTOKEN_TABLE 0
+#endif
+
+#if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED
+typedef union YYSTYPE
+#line 166 "filter/grammar.y"
+{
+ uint64_t value;
+ char *s;
+ FilterParam_t param;
+ void *list;
+}
+/* Line 193 of yacc.c. */
+#line 374 "filter/grammar.c"
+ YYSTYPE;
+# define yystype YYSTYPE /* obsolescent; will be withdrawn */
+# define YYSTYPE_IS_DECLARED 1
+# define YYSTYPE_IS_TRIVIAL 1
+#endif
+
+
+
+/* Copy the second part of user declarations. */
+
+
+/* Line 216 of yacc.c. */
+#line 387 "filter/grammar.c"
+
+#ifdef short
+# undef short
+#endif
+
+#ifdef YYTYPE_UINT8
+typedef YYTYPE_UINT8 yytype_uint8;
+#else
+typedef unsigned char yytype_uint8;
+#endif
+
+#ifdef YYTYPE_INT8
+typedef YYTYPE_INT8 yytype_int8;
+#elif (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+typedef signed char yytype_int8;
+#else
+typedef short int yytype_int8;
+#endif
+
+#ifdef YYTYPE_UINT16
+typedef YYTYPE_UINT16 yytype_uint16;
+#else
+typedef unsigned short int yytype_uint16;
+#endif
+
+#ifdef YYTYPE_INT16
+typedef YYTYPE_INT16 yytype_int16;
+#else
+typedef short int yytype_int16;
+#endif
+
+#ifndef YYSIZE_T
+# ifdef __SIZE_TYPE__
+# define YYSIZE_T __SIZE_TYPE__
+# elif defined size_t
+# define YYSIZE_T size_t
+# elif ! defined YYSIZE_T && (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+# include /* INFRINGES ON USER NAME SPACE */
+# define YYSIZE_T size_t
+# else
+# define YYSIZE_T unsigned int
+# endif
+#endif
+
+#define YYSIZE_MAXIMUM ((YYSIZE_T) -1)
+
+#ifndef YY_
+# if defined YYENABLE_NLS && YYENABLE_NLS
+# if ENABLE_NLS
+# include /* INFRINGES ON USER NAME SPACE */
+# define YY_(msgid) dgettext ("bison-runtime", msgid)
+# endif
+# endif
+# ifndef YY_
+# define YY_(msgid) msgid
+# endif
+#endif
+
+/* Suppress unused-variable warnings by "using" E. */
+#if ! defined lint || defined __GNUC__
+# define YYUSE(e) ((void) (e))
+#else
+# define YYUSE(e) /* empty */
+#endif
+
+/* Identity function, used to suppress warnings about constant conditions. */
+#ifndef lint
+# define YYID(n) (n)
+#else
+#if (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+static int
+YYID (int i)
+#else
+static int
+YYID (i)
+ int i;
+#endif
+{
+ return i;
+}
+#endif
+
+#if ! defined yyoverflow || YYERROR_VERBOSE
+
+/* The parser invokes alloca or malloc; define the necessary symbols. */
+
+# ifdef YYSTACK_USE_ALLOCA
+# if YYSTACK_USE_ALLOCA
+# ifdef __GNUC__
+# define YYSTACK_ALLOC __builtin_alloca
+# elif defined __BUILTIN_VA_ARG_INCR
+# include /* INFRINGES ON USER NAME SPACE */
+# elif defined _AIX
+# define YYSTACK_ALLOC __alloca
+# elif defined _MSC_VER
+# include /* INFRINGES ON USER NAME SPACE */
+# define alloca _alloca
+# else
+# define YYSTACK_ALLOC alloca
+# if ! defined _ALLOCA_H && ! defined _STDLIB_H && (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+# include /* INFRINGES ON USER NAME SPACE */
+# ifndef _STDLIB_H
+# define _STDLIB_H 1
+# endif
+# endif
+# endif
+# endif
+# endif
+
+# ifdef YYSTACK_ALLOC
+ /* Pacify GCC's `empty if-body' warning. */
+# define YYSTACK_FREE(Ptr) do { /* empty */; } while (YYID (0))
+# ifndef YYSTACK_ALLOC_MAXIMUM
+ /* The OS might guarantee only one guard page at the bottom of the stack,
+ and a page size can be as small as 4096 bytes. So we cannot safely
+ invoke alloca (N) if N exceeds 4096. Use a slightly smaller number
+ to allow for a few compiler-allocated temporary stack slots. */
+# define YYSTACK_ALLOC_MAXIMUM 4032 /* reasonable circa 2006 */
+# endif
+# else
+# define YYSTACK_ALLOC YYMALLOC
+# define YYSTACK_FREE YYFREE
+# ifndef YYSTACK_ALLOC_MAXIMUM
+# define YYSTACK_ALLOC_MAXIMUM YYSIZE_MAXIMUM
+# endif
+# if (defined __cplusplus && ! defined _STDLIB_H \
+ && ! ((defined YYMALLOC || defined malloc) \
+ && (defined YYFREE || defined free)))
+# include /* INFRINGES ON USER NAME SPACE */
+# ifndef _STDLIB_H
+# define _STDLIB_H 1
+# endif
+# endif
+# ifndef YYMALLOC
+# define YYMALLOC malloc
+# if ! defined malloc && ! defined _STDLIB_H && (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+void *malloc (YYSIZE_T); /* INFRINGES ON USER NAME SPACE */
+# endif
+# endif
+# ifndef YYFREE
+# define YYFREE free
+# if ! defined free && ! defined _STDLIB_H && (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+void free (void *); /* INFRINGES ON USER NAME SPACE */
+# endif
+# endif
+# endif
+#endif /* ! defined yyoverflow || YYERROR_VERBOSE */
+
+
+#if (! defined yyoverflow \
+ && (! defined __cplusplus \
+ || (defined YYSTYPE_IS_TRIVIAL && YYSTYPE_IS_TRIVIAL)))
+
+/* A type that is properly aligned for any stack member. */
+union yyalloc
+{
+ yytype_int16 yyss;
+ YYSTYPE yyvs;
+ };
+
+/* The size of the maximum gap between one aligned stack and the next. */
+# define YYSTACK_GAP_MAXIMUM (sizeof (union yyalloc) - 1)
+
+/* The size of an array large to enough to hold all stacks, each with
+ N elements. */
+# define YYSTACK_BYTES(N) \
+ ((N) * (sizeof (yytype_int16) + sizeof (YYSTYPE)) \
+ + YYSTACK_GAP_MAXIMUM)
+
+/* Copy COUNT objects from FROM to TO. The source and destination do
+ not overlap. */
+# ifndef YYCOPY
+# if defined __GNUC__ && 1 < __GNUC__
+# define YYCOPY(To, From, Count) \
+ __builtin_memcpy (To, From, (Count) * sizeof (*(From)))
+# else
+# define YYCOPY(To, From, Count) \
+ do \
+ { \
+ YYSIZE_T yyi; \
+ for (yyi = 0; yyi < (Count); yyi++) \
+ (To)[yyi] = (From)[yyi]; \
+ } \
+ while (YYID (0))
+# endif
+# endif
+
+/* Relocate STACK from its old location to the new one. The
+ local variables YYSIZE and YYSTACKSIZE give the old and new number of
+ elements in the stack, and YYPTR gives the new location of the
+ stack. Advance YYPTR to a properly aligned location for the next
+ stack. */
+# define YYSTACK_RELOCATE(Stack) \
+ do \
+ { \
+ YYSIZE_T yynewbytes; \
+ YYCOPY (&yyptr->Stack, Stack, yysize); \
+ Stack = &yyptr->Stack; \
+ yynewbytes = yystacksize * sizeof (*Stack) + YYSTACK_GAP_MAXIMUM; \
+ yyptr += yynewbytes / sizeof (*yyptr); \
+ } \
+ while (YYID (0))
+
+#endif
+
+/* YYFINAL -- State number of the termination state. */
+#define YYFINAL 90
+/* YYLAST -- Last index in YYTABLE. */
+#define YYLAST 341
+
+/* YYNTOKENS -- Number of terminals. */
+#define YYNTOKENS 77
+/* YYNNTS -- Number of nonterminals. */
+#define YYNNTS 8
+/* YYNRULES -- Number of rules. */
+#define YYNRULES 105
+/* YYNRULES -- Number of states. */
+#define YYNSTATES 209
+
+/* YYTRANSLATE(YYLEX) -- Bison symbol number corresponding to YYLEX. */
+#define YYUNDEFTOK 2
+#define YYMAXUTOK 323
+
+#define YYTRANSLATE(YYX) \
+ ((unsigned int) (YYX) <= YYMAXUTOK ? yytranslate[YYX] : YYUNDEFTOK)
+
+/* YYTRANSLATE[YYLEX] -- Bison symbol number corresponding to YYLEX. */
+static const yytype_uint8 yytranslate[] =
+{
+ 0, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 75, 76, 68, 66, 74, 2, 2, 71, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 72, 2, 73, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+ 2, 2, 2, 2, 2, 2, 1, 2, 3, 4,
+ 5, 6, 7, 8, 9, 10, 11, 12, 13, 14,
+ 15, 16, 17, 18, 19, 20, 21, 22, 23, 24,
+ 25, 26, 27, 28, 29, 30, 31, 32, 33, 34,
+ 35, 36, 37, 38, 39, 40, 41, 42, 43, 44,
+ 45, 46, 47, 48, 49, 50, 51, 52, 53, 54,
+ 55, 56, 57, 58, 59, 60, 61, 62, 63, 64,
+ 65, 67, 69, 70
+};
+
+#if YYDEBUG
+/* YYPRHS[YYN] -- Index of the first RHS symbol of rule number YYN in
+ YYRHS. */
+static const yytype_uint16 yyprhs[] =
+{
+ 0, 0, 3, 4, 6, 8, 10, 12, 15, 19,
+ 23, 27, 32, 37, 41, 45, 49, 54, 58, 62,
+ 67, 72, 76, 81, 85, 88, 92, 96, 100, 104,
+ 109, 113, 118, 122, 127, 133, 137, 141, 146, 150,
+ 153, 156, 159, 164, 169, 173, 178, 182, 186, 191,
+ 197, 202, 206, 212, 217, 221, 226, 230, 236, 241,
+ 245, 250, 254, 261, 268, 275, 277, 281, 284, 288,
+ 293, 295, 298, 302, 303, 305, 307, 309, 311, 313,
+ 314, 316, 318, 321, 324, 327, 330, 332, 334, 336,
+ 338, 341, 344, 347, 350, 352, 354, 356, 358, 361,
+ 363, 365, 367, 371, 375, 378
+};
+
+/* YYRHS -- A `-1'-separated list of the rules' RHS. */
+static const yytype_int8 yyrhs[] =
+{
+ 78, 0, -1, -1, 84, -1, 8, -1, 13, -1,
+ 14, -1, 10, 64, -1, 11, 82, 65, -1, 30,
+ 82, 65, -1, 31, 82, 65, -1, 29, 64, 82,
+ 65, -1, 32, 64, 82, 65, -1, 83, 38, 65,
+ -1, 83, 38, 64, -1, 83, 38, 45, -1, 83,
+ 39, 82, 65, -1, 46, 82, 65, -1, 47, 82,
+ 65, -1, 45, 64, 82, 65, -1, 83, 37, 82,
+ 65, -1, 83, 37, 64, -1, 83, 54, 82, 65,
+ -1, 55, 82, 65, -1, 55, 64, -1, 33, 82,
+ 65, -1, 34, 82, 65, -1, 35, 82, 65, -1,
+ 36, 82, 65, -1, 83, 48, 82, 65, -1, 50,
+ 82, 65, -1, 83, 49, 82, 65, -1, 83, 12,
+ 64, -1, 83, 15, 64, 64, -1, 83, 15, 64,
+ 71, 65, -1, 83, 41, 65, -1, 83, 42, 65,
+ -1, 83, 40, 82, 65, -1, 83, 52, 65, -1,
+ 51, 65, -1, 53, 65, -1, 53, 83, -1, 43,
+ 64, 82, 65, -1, 43, 8, 82, 65, -1, 83,
+ 44, 64, -1, 64, 56, 82, 65, -1, 57, 64,
+ 64, -1, 57, 64, 83, -1, 57, 64, 82, 65,
+ -1, 83, 39, 18, 26, 64, -1, 83, 58, 82,
+ 65, -1, 26, 64, 64, -1, 26, 64, 64, 82,
+ 65, -1, 26, 64, 82, 65, -1, 59, 64, 64,
+ -1, 59, 64, 64, 64, -1, 83, 60, 64, -1,
+ 62, 64, 64, 82, 65, -1, 83, 61, 82, 65,
+ -1, 63, 64, 64, -1, 63, 64, 82, 65, -1,
+ 63, 64, 83, -1, 83, 12, 18, 72, 80, 73,
+ -1, 83, 39, 18, 72, 81, 73, -1, 83, 40,
+ 18, 72, 81, 73, -1, 64, -1, 64, 71, 65,
+ -1, 80, 64, -1, 80, 74, 64, -1, 80, 64,
+ 71, 65, -1, 65, -1, 81, 65, -1, 81, 74,
+ 65, -1, -1, 3, -1, 4, -1, 5, -1, 6,
+ -1, 7, -1, -1, 16, -1, 17, -1, 16, 26,
+ -1, 17, 26, -1, 16, 28, -1, 17, 28, -1,
+ 26, -1, 28, -1, 18, -1, 19, -1, 18, 16,
+ -1, 18, 17, -1, 19, 16, -1, 19, 17, -1,
+ 24, -1, 25, -1, 20, -1, 21, -1, 22, 21,
+ -1, 23, -1, 32, -1, 79, -1, 84, 67, 84,
+ -1, 84, 69, 84, -1, 9, 84, -1, 75, 84,
+ 76, -1
+};
+
+/* YYRLINE[YYN] -- source line where rule number YYN was defined. */
+static const yytype_uint16 yyrline[] =
+{
+ 0, 195, 195, 196, 201, 206, 210, 214, 218, 222,
+ 226, 230, 234, 238, 242, 246, 250, 254, 258, 262,
+ 266, 270, 274, 278, 282, 286, 290, 294, 298, 302,
+ 306, 310, 314, 318, 322, 326, 330, 334, 338, 342,
+ 346, 350, 354, 358, 362, 366, 370, 374, 389, 393,
+ 397, 401, 405, 409, 413, 417, 421, 425, 429, 433,
+ 437, 441, 459, 463, 467, 473, 477, 481, 485, 489,
+ 494, 498, 502, 508, 509, 510, 511, 512, 513, 517,
+ 518, 519, 520, 521, 522, 523, 524, 525, 526, 527,
+ 528, 529, 530, 531, 532, 533, 534, 535, 536, 537,
+ 538, 541, 542, 543, 544, 545
+};
+#endif
+
+#if YYDEBUG || YYERROR_VERBOSE || YYTOKEN_TABLE
+/* YYTNAME[SYMBOL-NUM] -- String name of the symbol SYMBOL-NUM.
+ First, the terminals, then, starting at YYNTOKENS, nonterminals. */
+static const char *const yytname[] =
+{
+ "$end", "error", "$undefined", "EQ", "LT", "GT", "LE", "GE", "ANY",
+ "NOT", "IDENT", "COUNT", "IP", "IPV4", "IPV6", "NET", "SRC", "DST", "IN",
+ "OUT", "PREV", "NEXT", "BGP", "ROUTER", "INGRESS", "EGRESS", "NAT",
+ "XLATE", "TUN", "ENGINE", "ENGINETYPE", "ENGINEID", "EXPORTER",
+ "DURATION", "PPS", "BPS", "BPP", "FLAGS", "PROTO", "PORT", "AS", "IF",
+ "VLAN", "MPLS", "MAC", "ICMP", "ICMPTYPE", "ICMPCODE", "PACKETS",
+ "BYTES", "FLOWS", "ETHERTYPE", "MASK", "FLOWDIR", "TOS", "FWDSTAT",
+ "LATENCY", "ASA", "ACL", "PAYLOAD", "GEO", "VRF", "OBSERVATION", "PF",
+ "STRING", "NUMBER", "'+'", "OR", "'*'", "AND", "NEGATE", "'/'", "'['",
+ "']'", "','", "'('", "')'", "$accept", "prog", "term", "iplist",
+ "u64list", "comp", "dqual", "expr", 0
+};
+#endif
+
+# ifdef YYPRINT
+/* YYTOKNUM[YYLEX-NUM] -- Internal token number corresponding to
+ token YYLEX-NUM. */
+static const yytype_uint16 yytoknum[] =
+{
+ 0, 256, 257, 258, 259, 260, 261, 262, 263, 264,
+ 265, 266, 267, 268, 269, 270, 271, 272, 273, 274,
+ 275, 276, 277, 278, 279, 280, 281, 282, 283, 284,
+ 285, 286, 287, 288, 289, 290, 291, 292, 293, 294,
+ 295, 296, 297, 298, 299, 300, 301, 302, 303, 304,
+ 305, 306, 307, 308, 309, 310, 311, 312, 313, 314,
+ 315, 316, 317, 318, 319, 320, 43, 321, 42, 322,
+ 323, 47, 91, 93, 44, 40, 41
+};
+# endif
+
+/* YYR1[YYN] -- Symbol number of symbol that rule YYN derives. */
+static const yytype_uint8 yyr1[] =
+{
+ 0, 77, 78, 78, 79, 79, 79, 79, 79, 79,
+ 79, 79, 79, 79, 79, 79, 79, 79, 79, 79,
+ 79, 79, 79, 79, 79, 79, 79, 79, 79, 79,
+ 79, 79, 79, 79, 79, 79, 79, 79, 79, 79,
+ 79, 79, 79, 79, 79, 79, 79, 79, 79, 79,
+ 79, 79, 79, 79, 79, 79, 79, 79, 79, 79,
+ 79, 79, 79, 79, 79, 80, 80, 80, 80, 80,
+ 81, 81, 81, 82, 82, 82, 82, 82, 82, 83,
+ 83, 83, 83, 83, 83, 83, 83, 83, 83, 83,
+ 83, 83, 83, 83, 83, 83, 83, 83, 83, 83,
+ 83, 84, 84, 84, 84, 84
+};
+
+/* YYR2[YYN] -- Number of symbols composing right hand side of rule YYN. */
+static const yytype_uint8 yyr2[] =
+{
+ 0, 2, 0, 1, 1, 1, 1, 2, 3, 3,
+ 3, 4, 4, 3, 3, 3, 4, 3, 3, 4,
+ 4, 3, 4, 3, 2, 3, 3, 3, 3, 4,
+ 3, 4, 3, 4, 5, 3, 3, 4, 3, 2,
+ 2, 2, 4, 4, 3, 4, 3, 3, 4, 5,
+ 4, 3, 5, 4, 3, 4, 3, 5, 4, 3,
+ 4, 3, 6, 6, 6, 1, 3, 2, 3, 4,
+ 1, 2, 3, 0, 1, 1, 1, 1, 1, 0,
+ 1, 1, 2, 2, 2, 2, 1, 1, 1, 1,
+ 2, 2, 2, 2, 1, 1, 1, 1, 2, 1,
+ 1, 1, 3, 3, 2, 3
+};
+
+/* YYDEFACT[STATE-NAME] -- Default rule to reduce with in state
+ STATE-NUM when YYTABLE doesn't specify something else to do. Zero
+ means the default is an error. */
+static const yytype_uint8 yydefact[] =
+{
+ 79, 4, 79, 0, 73, 5, 6, 80, 81, 88,
+ 89, 96, 97, 0, 99, 94, 95, 86, 87, 0,
+ 73, 73, 100, 73, 73, 73, 73, 0, 0, 73,
+ 73, 73, 0, 79, 73, 0, 0, 0, 0, 0,
+ 79, 0, 101, 0, 3, 104, 7, 74, 75, 76,
+ 77, 78, 0, 82, 84, 83, 85, 90, 91, 92,
+ 93, 98, 73, 73, 0, 0, 73, 0, 0, 0,
+ 0, 73, 73, 73, 0, 0, 0, 39, 86, 100,
+ 40, 41, 24, 0, 79, 0, 0, 79, 73, 0,
+ 1, 0, 0, 73, 0, 73, 73, 0, 0, 0,
+ 73, 73, 0, 73, 73, 0, 73, 79, 79, 8,
+ 51, 0, 0, 9, 10, 0, 25, 26, 27, 28,
+ 0, 0, 0, 17, 18, 30, 23, 46, 0, 47,
+ 54, 73, 59, 0, 61, 0, 105, 0, 32, 0,
+ 21, 0, 15, 14, 13, 0, 0, 0, 0, 35,
+ 36, 44, 0, 0, 38, 0, 0, 56, 0, 102,
+ 103, 0, 53, 11, 12, 43, 42, 19, 48, 55,
+ 0, 60, 45, 0, 33, 0, 20, 0, 0, 16,
+ 0, 37, 29, 31, 22, 50, 58, 52, 57, 65,
+ 0, 34, 49, 70, 0, 0, 0, 67, 62, 0,
+ 71, 63, 0, 64, 66, 0, 68, 72, 69
+};
+
+/* YYDEFGOTO[NTERM-NUM]. */
+static const yytype_int16 yydefgoto[] =
+{
+ -1, 41, 42, 190, 194, 52, 43, 44
+};
+
+/* YYPACT[STATE-NUM] -- Index in YYTABLE of the portion describing
+ STATE-NUM. */
+#define YYPACT_NINF -53
+static const yytype_int16 yypact[] =
+{
+ 104, -53, 164, -51, 281, -53, -53, 21, 22, 71,
+ 86, -53, -53, 23, -53, -53, -53, -3, -53, 1,
+ 281, 281, 7, 281, 281, 281, 281, -1, 32, 281,
+ 281, 281, 40, 276, 52, 42, 45, 46, 55, 75,
+ 164, 141, -53, 222, -7, -53, -53, -53, -53, -53,
+ -53, -53, 77, -53, -53, -53, -53, -53, -53, -53,
+ -53, -53, 88, 281, 78, 79, 281, 81, 83, 91,
+ 95, 281, 281, 281, 111, 126, 143, -53, -53, -53,
+ -53, -53, -53, 147, 13, 89, 105, 226, 281, 3,
+ -53, -10, 142, 94, 100, 198, 306, 148, 153, 156,
+ 281, 281, 157, 281, 281, 160, 281, 164, 164, -53,
+ 20, 170, 171, -53, -53, 173, -53, -53, -53, -53,
+ 175, 176, 188, -53, -53, -53, -53, -53, 190, -53,
+ 161, 281, -53, 191, -53, 192, -53, 193, -53, 18,
+ -53, 202, -53, -53, -53, 2, 203, 200, 208, -53,
+ -53, -53, 210, 214, -53, 216, 224, -53, 238, 236,
+ -53, 241, -53, -53, -53, -53, -53, -53, -53, -53,
+ 242, -53, -53, 250, -53, 251, -53, 253, 254, -53,
+ 254, -53, -53, -53, -53, -53, -53, -53, -53, 244,
+ -52, -53, -53, -53, 97, 204, 255, 247, -53, 257,
+ -53, -53, 258, -53, -53, 260, -53, -53, -53
+};
+
+/* YYPGOTO[NTERM-NUM]. */
+static const yytype_int16 yypgoto[] =
+{
+ -53, -53, -53, -53, 146, -20, -18, 0
+};
+
+/* YYTABLE[YYPACT[STATE-NUM]]. What to do in state STATE-NUM. If
+ positive, shift that token. If negative, reduce the rule which
+ number is the opposite. If zero, do what YYDEFACT says.
+ If YYTABLE_NINF, syntax error. */
+#define YYTABLE_NINF -74
+static const yytype_int16 yytable[] =
+{
+ 64, 65, 45, 67, 68, 69, 70, 71, 137, 74,
+ 75, 76, 197, 46, 83, 81, 47, 48, 49, 50,
+ 51, 198, 199, 47, 48, 49, 50, 51, 177, 7,
+ 8, 9, 10, 11, 12, 13, 14, 15, 16, 78,
+ 89, 18, 111, 112, 61, 79, 115, 53, 55, 54,
+ 56, 120, 121, 122, 138, 47, 48, 49, 50, 51,
+ 107, 62, 108, 72, 128, 63, 129, 133, 135, 134,
+ 107, 66, 108, 141, 178, 146, 148, 127, -73, 136,
+ 152, 153, 174, 155, 156, -73, 158, 57, 58, 175,
+ 161, 47, 48, 49, 50, 51, 73, 47, 48, 49,
+ 50, 51, 59, 60, -2, 77, 84, 159, 160, 85,
+ 86, 170, 1, 2, 3, 4, 82, 5, 6, 87,
+ 7, 8, 9, 10, 11, 12, 13, 14, 15, 16,
+ 17, 88, 18, 19, 20, 21, 22, 23, 24, 25,
+ 26, 90, 109, 113, 114, 142, 116, 27, 117, 28,
+ 29, 30, 110, 130, 31, 32, 118, 33, 140, 34,
+ 119, 35, 200, 36, 143, 144, 37, 38, 39, 131,
+ 201, 202, 1, 2, 3, 4, 123, 5, 6, 40,
+ 7, 8, 9, 10, 11, 12, 13, 14, 15, 16,
+ 17, 124, 18, 19, 20, 21, 22, 23, 24, 25,
+ 26, 47, 48, 49, 50, 51, 139, 27, 125, 28,
+ 29, 30, 126, 149, 31, 32, 145, 33, 150, 34,
+ 151, 35, 154, 36, 157, 169, 37, 38, 39, 47,
+ 48, 49, 50, 51, 91, 162, 163, 92, 164, 40,
+ 165, 166, 7, 8, 9, 10, 11, 12, 13, 14,
+ 15, 16, 78, 167, 18, 168, 171, 172, 79, 93,
+ 94, 95, 96, 97, 98, 173, 99, 176, 179, 200,
+ 100, 101, 180, 181, 102, 182, 103, 203, 202, 183,
+ 104, 184, 105, 106, 47, 48, 49, 50, 51, 185,
+ 132, -73, 7, 8, 9, 10, 11, 12, 13, 14,
+ 15, 16, 78, 186, 18, 108, 187, 188, 79, 47,
+ 48, 49, 50, 51, 189, 196, 191, 192, 205, 193,
+ 204, 206, 0, 207, 147, 208, 195, 0, 0, 0,
+ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+ 0, 80
+};
+
+static const yytype_int16 yycheck[] =
+{
+ 20, 21, 2, 23, 24, 25, 26, 8, 18, 29,
+ 30, 31, 64, 64, 34, 33, 3, 4, 5, 6,
+ 7, 73, 74, 3, 4, 5, 6, 7, 26, 16,
+ 17, 18, 19, 20, 21, 22, 23, 24, 25, 26,
+ 40, 28, 62, 63, 21, 32, 66, 26, 26, 28,
+ 28, 71, 72, 73, 64, 3, 4, 5, 6, 7,
+ 67, 64, 69, 64, 84, 64, 84, 87, 88, 87,
+ 67, 64, 69, 93, 72, 95, 96, 64, 65, 76,
+ 100, 101, 64, 103, 104, 65, 106, 16, 17, 71,
+ 110, 3, 4, 5, 6, 7, 64, 3, 4, 5,
+ 6, 7, 16, 17, 0, 65, 64, 107, 108, 64,
+ 64, 131, 8, 9, 10, 11, 64, 13, 14, 64,
+ 16, 17, 18, 19, 20, 21, 22, 23, 24, 25,
+ 26, 56, 28, 29, 30, 31, 32, 33, 34, 35,
+ 36, 0, 65, 65, 65, 45, 65, 43, 65, 45,
+ 46, 47, 64, 64, 50, 51, 65, 53, 64, 55,
+ 65, 57, 65, 59, 64, 65, 62, 63, 64, 64,
+ 73, 74, 8, 9, 10, 11, 65, 13, 14, 75,
+ 16, 17, 18, 19, 20, 21, 22, 23, 24, 25,
+ 26, 65, 28, 29, 30, 31, 32, 33, 34, 35,
+ 36, 3, 4, 5, 6, 7, 64, 43, 65, 45,
+ 46, 47, 65, 65, 50, 51, 18, 53, 65, 55,
+ 64, 57, 65, 59, 64, 64, 62, 63, 64, 3,
+ 4, 5, 6, 7, 12, 65, 65, 15, 65, 75,
+ 65, 65, 16, 17, 18, 19, 20, 21, 22, 23,
+ 24, 25, 26, 65, 28, 65, 65, 65, 32, 37,
+ 38, 39, 40, 41, 42, 72, 44, 65, 65, 65,
+ 48, 49, 72, 65, 52, 65, 54, 73, 74, 65,
+ 58, 65, 60, 61, 3, 4, 5, 6, 7, 65,
+ 64, 65, 16, 17, 18, 19, 20, 21, 22, 23,
+ 24, 25, 26, 65, 28, 69, 65, 65, 32, 3,
+ 4, 5, 6, 7, 64, 71, 65, 64, 71, 65,
+ 65, 64, -1, 65, 18, 65, 180, -1, -1, -1,
+ -1, -1, -1, -1, -1, -1, -1, -1, -1, -1,
+ -1, 65
+};
+
+/* YYSTOS[STATE-NUM] -- The (internal number of the) accessing
+ symbol of state STATE-NUM. */
+static const yytype_uint8 yystos[] =
+{
+ 0, 8, 9, 10, 11, 13, 14, 16, 17, 18,
+ 19, 20, 21, 22, 23, 24, 25, 26, 28, 29,
+ 30, 31, 32, 33, 34, 35, 36, 43, 45, 46,
+ 47, 50, 51, 53, 55, 57, 59, 62, 63, 64,
+ 75, 78, 79, 83, 84, 84, 64, 3, 4, 5,
+ 6, 7, 82, 26, 28, 26, 28, 16, 17, 16,
+ 17, 21, 64, 64, 82, 82, 64, 82, 82, 82,
+ 82, 8, 64, 64, 82, 82, 82, 65, 26, 32,
+ 65, 83, 64, 82, 64, 64, 64, 64, 56, 84,
+ 0, 12, 15, 37, 38, 39, 40, 41, 42, 44,
+ 48, 49, 52, 54, 58, 60, 61, 67, 69, 65,
+ 64, 82, 82, 65, 65, 82, 65, 65, 65, 65,
+ 82, 82, 82, 65, 65, 65, 65, 64, 82, 83,
+ 64, 64, 64, 82, 83, 82, 76, 18, 64, 64,
+ 64, 82, 45, 64, 65, 18, 82, 18, 82, 65,
+ 65, 64, 82, 82, 65, 82, 82, 64, 82, 84,
+ 84, 82, 65, 65, 65, 65, 65, 65, 65, 64,
+ 82, 65, 65, 72, 64, 71, 65, 26, 72, 65,
+ 72, 65, 65, 65, 65, 65, 65, 65, 65, 64,
+ 80, 65, 64, 65, 81, 81, 71, 64, 73, 74,
+ 65, 73, 74, 73, 65, 71, 64, 65, 65
+};
+
+#define yyerrok (yyerrstatus = 0)
+#define yyclearin (yychar = YYEMPTY)
+#define YYEMPTY (-2)
+#define YYEOF 0
+
+#define YYACCEPT goto yyacceptlab
+#define YYABORT goto yyabortlab
+#define YYERROR goto yyerrorlab
+
+
+/* Like YYERROR except do call yyerror. This remains here temporarily
+ to ease the transition to the new meaning of YYERROR, for GCC.
+ Once GCC version 2 has supplanted version 1, this can go. */
+
+#define YYFAIL goto yyerrlab
+
+#define YYRECOVERING() (!!yyerrstatus)
+
+#define YYBACKUP(Token, Value) \
+do \
+ if (yychar == YYEMPTY && yylen == 1) \
+ { \
+ yychar = (Token); \
+ yylval = (Value); \
+ yytoken = YYTRANSLATE (yychar); \
+ YYPOPSTACK (1); \
+ goto yybackup; \
+ } \
+ else \
+ { \
+ yyerror (YY_("syntax error: cannot back up")); \
+ YYERROR; \
+ } \
+while (YYID (0))
+
+
+#define YYTERROR 1
+#define YYERRCODE 256
+
+
+/* YYLLOC_DEFAULT -- Set CURRENT to span from RHS[1] to RHS[N].
+ If N is 0, then set CURRENT to the empty location which ends
+ the previous symbol: RHS[0] (always defined). */
+
+#define YYRHSLOC(Rhs, K) ((Rhs)[K])
+#ifndef YYLLOC_DEFAULT
+# define YYLLOC_DEFAULT(Current, Rhs, N) \
+ do \
+ if (YYID (N)) \
+ { \
+ (Current).first_line = YYRHSLOC (Rhs, 1).first_line; \
+ (Current).first_column = YYRHSLOC (Rhs, 1).first_column; \
+ (Current).last_line = YYRHSLOC (Rhs, N).last_line; \
+ (Current).last_column = YYRHSLOC (Rhs, N).last_column; \
+ } \
+ else \
+ { \
+ (Current).first_line = (Current).last_line = \
+ YYRHSLOC (Rhs, 0).last_line; \
+ (Current).first_column = (Current).last_column = \
+ YYRHSLOC (Rhs, 0).last_column; \
+ } \
+ while (YYID (0))
+#endif
+
+
+/* YY_LOCATION_PRINT -- Print the location on the stream.
+ This macro was not mandated originally: define only if we know
+ we won't break user code: when these are the locations we know. */
+
+#ifndef YY_LOCATION_PRINT
+# if defined YYLTYPE_IS_TRIVIAL && YYLTYPE_IS_TRIVIAL
+# define YY_LOCATION_PRINT(File, Loc) \
+ fprintf (File, "%d.%d-%d.%d", \
+ (Loc).first_line, (Loc).first_column, \
+ (Loc).last_line, (Loc).last_column)
+# else
+# define YY_LOCATION_PRINT(File, Loc) ((void) 0)
+# endif
+#endif
+
+
+/* YYLEX -- calling `yylex' with the right arguments. */
+
+#ifdef YYLEX_PARAM
+# define YYLEX yylex (YYLEX_PARAM)
+#else
+# define YYLEX yylex ()
+#endif
+
+/* Enable debugging if requested. */
+#if YYDEBUG
+
+# ifndef YYFPRINTF
+# include /* INFRINGES ON USER NAME SPACE */
+# define YYFPRINTF fprintf
+# endif
+
+# define YYDPRINTF(Args) \
+do { \
+ if (yydebug) \
+ YYFPRINTF Args; \
+} while (YYID (0))
+
+# define YY_SYMBOL_PRINT(Title, Type, Value, Location) \
+do { \
+ if (yydebug) \
+ { \
+ YYFPRINTF (stderr, "%s ", Title); \
+ yy_symbol_print (stderr, \
+ Type, Value); \
+ YYFPRINTF (stderr, "\n"); \
+ } \
+} while (YYID (0))
+
+
+/*--------------------------------.
+| Print this symbol on YYOUTPUT. |
+`--------------------------------*/
+
+/*ARGSUSED*/
+#if (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+static void
+yy_symbol_value_print (FILE *yyoutput, int yytype, YYSTYPE const * const yyvaluep)
+#else
+static void
+yy_symbol_value_print (yyoutput, yytype, yyvaluep)
+ FILE *yyoutput;
+ int yytype;
+ YYSTYPE const * const yyvaluep;
+#endif
+{
+ if (!yyvaluep)
+ return;
+# ifdef YYPRINT
+ if (yytype < YYNTOKENS)
+ YYPRINT (yyoutput, yytoknum[yytype], *yyvaluep);
+# else
+ YYUSE (yyoutput);
+# endif
+ switch (yytype)
+ {
+ default:
+ break;
+ }
+}
+
+
+/*--------------------------------.
+| Print this symbol on YYOUTPUT. |
+`--------------------------------*/
+
+#if (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+static void
+yy_symbol_print (FILE *yyoutput, int yytype, YYSTYPE const * const yyvaluep)
+#else
+static void
+yy_symbol_print (yyoutput, yytype, yyvaluep)
+ FILE *yyoutput;
+ int yytype;
+ YYSTYPE const * const yyvaluep;
+#endif
+{
+ if (yytype < YYNTOKENS)
+ YYFPRINTF (yyoutput, "token %s (", yytname[yytype]);
+ else
+ YYFPRINTF (yyoutput, "nterm %s (", yytname[yytype]);
+
+ yy_symbol_value_print (yyoutput, yytype, yyvaluep);
+ YYFPRINTF (yyoutput, ")");
+}
+
+/*------------------------------------------------------------------.
+| yy_stack_print -- Print the state stack from its BOTTOM up to its |
+| TOP (included). |
+`------------------------------------------------------------------*/
+
+#if (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+static void
+yy_stack_print (yytype_int16 *bottom, yytype_int16 *top)
+#else
+static void
+yy_stack_print (bottom, top)
+ yytype_int16 *bottom;
+ yytype_int16 *top;
+#endif
+{
+ YYFPRINTF (stderr, "Stack now");
+ for (; bottom <= top; ++bottom)
+ YYFPRINTF (stderr, " %d", *bottom);
+ YYFPRINTF (stderr, "\n");
+}
+
+# define YY_STACK_PRINT(Bottom, Top) \
+do { \
+ if (yydebug) \
+ yy_stack_print ((Bottom), (Top)); \
+} while (YYID (0))
+
+
+/*------------------------------------------------.
+| Report that the YYRULE is going to be reduced. |
+`------------------------------------------------*/
+
+#if (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+static void
+yy_reduce_print (YYSTYPE *yyvsp, int yyrule)
+#else
+static void
+yy_reduce_print (yyvsp, yyrule)
+ YYSTYPE *yyvsp;
+ int yyrule;
+#endif
+{
+ int yynrhs = yyr2[yyrule];
+ int yyi;
+ unsigned long int yylno = yyrline[yyrule];
+ YYFPRINTF (stderr, "Reducing stack by rule %d (line %lu):\n",
+ yyrule - 1, yylno);
+ /* The symbols being reduced. */
+ for (yyi = 0; yyi < yynrhs; yyi++)
+ {
+ fprintf (stderr, " $%d = ", yyi + 1);
+ yy_symbol_print (stderr, yyrhs[yyprhs[yyrule] + yyi],
+ &(yyvsp[(yyi + 1) - (yynrhs)])
+ );
+ fprintf (stderr, "\n");
+ }
+}
+
+# define YY_REDUCE_PRINT(Rule) \
+do { \
+ if (yydebug) \
+ yy_reduce_print (yyvsp, Rule); \
+} while (YYID (0))
+
+/* Nonzero means print parse trace. It is left uninitialized so that
+ multiple parsers can coexist. */
+int yydebug;
+#else /* !YYDEBUG */
+# define YYDPRINTF(Args)
+# define YY_SYMBOL_PRINT(Title, Type, Value, Location)
+# define YY_STACK_PRINT(Bottom, Top)
+# define YY_REDUCE_PRINT(Rule)
+#endif /* !YYDEBUG */
+
+
+/* YYINITDEPTH -- initial size of the parser's stacks. */
+#ifndef YYINITDEPTH
+# define YYINITDEPTH 200
+#endif
+
+/* YYMAXDEPTH -- maximum size the stacks can grow to (effective only
+ if the built-in stack extension method is used).
+
+ Do not make this value too large; the results are undefined if
+ YYSTACK_ALLOC_MAXIMUM < YYSTACK_BYTES (YYMAXDEPTH)
+ evaluated with infinite-precision integer arithmetic. */
+
+#ifndef YYMAXDEPTH
+# define YYMAXDEPTH 10000
+#endif
+
+
+
+#if YYERROR_VERBOSE
+
+# ifndef yystrlen
+# if defined __GLIBC__ && defined _STRING_H
+# define yystrlen strlen
+# else
+/* Return the length of YYSTR. */
+#if (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+static YYSIZE_T
+yystrlen (const char *yystr)
+#else
+static YYSIZE_T
+yystrlen (yystr)
+ const char *yystr;
+#endif
+{
+ YYSIZE_T yylen;
+ for (yylen = 0; yystr[yylen]; yylen++)
+ continue;
+ return yylen;
+}
+# endif
+# endif
+
+# ifndef yystpcpy
+# if defined __GLIBC__ && defined _STRING_H && defined _GNU_SOURCE
+# define yystpcpy stpcpy
+# else
+/* Copy YYSRC to YYDEST, returning the address of the terminating '\0' in
+ YYDEST. */
+#if (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+static char *
+yystpcpy (char *yydest, const char *yysrc)
+#else
+static char *
+yystpcpy (yydest, yysrc)
+ char *yydest;
+ const char *yysrc;
+#endif
+{
+ char *yyd = yydest;
+ const char *yys = yysrc;
+
+ while ((*yyd++ = *yys++) != '\0')
+ continue;
+
+ return yyd - 1;
+}
+# endif
+# endif
+
+# ifndef yytnamerr
+/* Copy to YYRES the contents of YYSTR after stripping away unnecessary
+ quotes and backslashes, so that it's suitable for yyerror. The
+ heuristic is that double-quoting is unnecessary unless the string
+ contains an apostrophe, a comma, or backslash (other than
+ backslash-backslash). YYSTR is taken from yytname. If YYRES is
+ null, do not copy; instead, return the length of what the result
+ would have been. */
+static YYSIZE_T
+yytnamerr (char *yyres, const char *yystr)
+{
+ if (*yystr == '"')
+ {
+ YYSIZE_T yyn = 0;
+ char const *yyp = yystr;
+
+ for (;;)
+ switch (*++yyp)
+ {
+ case '\'':
+ case ',':
+ goto do_not_strip_quotes;
+
+ case '\\':
+ if (*++yyp != '\\')
+ goto do_not_strip_quotes;
+ /* Fall through. */
+ default:
+ if (yyres)
+ yyres[yyn] = *yyp;
+ yyn++;
+ break;
+
+ case '"':
+ if (yyres)
+ yyres[yyn] = '\0';
+ return yyn;
+ }
+ do_not_strip_quotes: ;
+ }
+
+ if (! yyres)
+ return yystrlen (yystr);
+
+ return yystpcpy (yyres, yystr) - yyres;
+}
+# endif
+
+/* Copy into YYRESULT an error message about the unexpected token
+ YYCHAR while in state YYSTATE. Return the number of bytes copied,
+ including the terminating null byte. If YYRESULT is null, do not
+ copy anything; just return the number of bytes that would be
+ copied. As a special case, return 0 if an ordinary "syntax error"
+ message will do. Return YYSIZE_MAXIMUM if overflow occurs during
+ size calculation. */
+static YYSIZE_T
+yysyntax_error (char *yyresult, int yystate, int yychar)
+{
+ int yyn = yypact[yystate];
+
+ if (! (YYPACT_NINF < yyn && yyn <= YYLAST))
+ return 0;
+ else
+ {
+ int yytype = YYTRANSLATE (yychar);
+ YYSIZE_T yysize0 = yytnamerr (0, yytname[yytype]);
+ YYSIZE_T yysize = yysize0;
+ YYSIZE_T yysize1;
+ int yysize_overflow = 0;
+ enum { YYERROR_VERBOSE_ARGS_MAXIMUM = 5 };
+ char const *yyarg[YYERROR_VERBOSE_ARGS_MAXIMUM];
+ int yyx;
+
+# if 0
+ /* This is so xgettext sees the translatable formats that are
+ constructed on the fly. */
+ YY_("syntax error, unexpected %s");
+ YY_("syntax error, unexpected %s, expecting %s");
+ YY_("syntax error, unexpected %s, expecting %s or %s");
+ YY_("syntax error, unexpected %s, expecting %s or %s or %s");
+ YY_("syntax error, unexpected %s, expecting %s or %s or %s or %s");
+# endif
+ char *yyfmt;
+ char const *yyf;
+ static char const yyunexpected[] = "syntax error, unexpected %s";
+ static char const yyexpecting[] = ", expecting %s";
+ static char const yyor[] = " or %s";
+ char yyformat[sizeof yyunexpected
+ + sizeof yyexpecting - 1
+ + ((YYERROR_VERBOSE_ARGS_MAXIMUM - 2)
+ * (sizeof yyor - 1))];
+ char const *yyprefix = yyexpecting;
+
+ /* Start YYX at -YYN if negative to avoid negative indexes in
+ YYCHECK. */
+ int yyxbegin = yyn < 0 ? -yyn : 0;
+
+ /* Stay within bounds of both yycheck and yytname. */
+ int yychecklim = YYLAST - yyn + 1;
+ int yyxend = yychecklim < YYNTOKENS ? yychecklim : YYNTOKENS;
+ int yycount = 1;
+
+ yyarg[0] = yytname[yytype];
+ yyfmt = yystpcpy (yyformat, yyunexpected);
+
+ for (yyx = yyxbegin; yyx < yyxend; ++yyx)
+ if (yycheck[yyx + yyn] == yyx && yyx != YYTERROR)
+ {
+ if (yycount == YYERROR_VERBOSE_ARGS_MAXIMUM)
+ {
+ yycount = 1;
+ yysize = yysize0;
+ yyformat[sizeof yyunexpected - 1] = '\0';
+ break;
+ }
+ yyarg[yycount++] = yytname[yyx];
+ yysize1 = yysize + yytnamerr (0, yytname[yyx]);
+ yysize_overflow |= (yysize1 < yysize);
+ yysize = yysize1;
+ yyfmt = yystpcpy (yyfmt, yyprefix);
+ yyprefix = yyor;
+ }
+
+ yyf = YY_(yyformat);
+ yysize1 = yysize + yystrlen (yyf);
+ yysize_overflow |= (yysize1 < yysize);
+ yysize = yysize1;
+
+ if (yysize_overflow)
+ return YYSIZE_MAXIMUM;
+
+ if (yyresult)
+ {
+ /* Avoid sprintf, as that infringes on the user's name space.
+ Don't have undefined behavior even if the translation
+ produced a string with the wrong number of "%s"s. */
+ char *yyp = yyresult;
+ int yyi = 0;
+ while ((*yyp = *yyf) != '\0')
+ {
+ if (*yyp == '%' && yyf[1] == 's' && yyi < yycount)
+ {
+ yyp += yytnamerr (yyp, yyarg[yyi++]);
+ yyf += 2;
+ }
+ else
+ {
+ yyp++;
+ yyf++;
+ }
+ }
+ }
+ return yysize;
+ }
+}
+#endif /* YYERROR_VERBOSE */
+
+
+/*-----------------------------------------------.
+| Release the memory associated to this symbol. |
+`-----------------------------------------------*/
+
+/*ARGSUSED*/
+#if (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+static void
+yydestruct (const char *yymsg, int yytype, YYSTYPE *yyvaluep)
+#else
+static void
+yydestruct (yymsg, yytype, yyvaluep)
+ const char *yymsg;
+ int yytype;
+ YYSTYPE *yyvaluep;
+#endif
+{
+ YYUSE (yyvaluep);
+
+ if (!yymsg)
+ yymsg = "Deleting";
+ YY_SYMBOL_PRINT (yymsg, yytype, yyvaluep, yylocationp);
+
+ switch (yytype)
+ {
+
+ default:
+ break;
+ }
+}
+
+
+/* Prevent warnings from -Wmissing-prototypes. */
+
+#ifdef YYPARSE_PARAM
+#if defined __STDC__ || defined __cplusplus
+int yyparse (void *YYPARSE_PARAM);
+#else
+int yyparse ();
+#endif
+#else /* ! YYPARSE_PARAM */
+#if defined __STDC__ || defined __cplusplus
+int yyparse (void);
+#else
+int yyparse ();
+#endif
+#endif /* ! YYPARSE_PARAM */
+
+
+
+/* The look-ahead symbol. */
+int yychar;
+
+/* The semantic value of the look-ahead symbol. */
+YYSTYPE yylval;
+
+/* Number of syntax errors so far. */
+int yynerrs;
+
+
+
+/*----------.
+| yyparse. |
+`----------*/
+
+#ifdef YYPARSE_PARAM
+#if (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+int
+yyparse (void *YYPARSE_PARAM)
+#else
+int
+yyparse (YYPARSE_PARAM)
+ void *YYPARSE_PARAM;
+#endif
+#else /* ! YYPARSE_PARAM */
+#if (defined __STDC__ || defined __C99__FUNC__ \
+ || defined __cplusplus || defined _MSC_VER)
+int
+yyparse (void)
+#else
+int
+yyparse ()
+
+#endif
+#endif
+{
+
+ int yystate;
+ int yyn;
+ int yyresult;
+ /* Number of tokens to shift before error messages enabled. */
+ int yyerrstatus;
+ /* Look-ahead token as an internal (translated) token number. */
+ int yytoken = 0;
+#if YYERROR_VERBOSE
+ /* Buffer for error messages, and its allocated size. */
+ char yymsgbuf[128];
+ char *yymsg = yymsgbuf;
+ YYSIZE_T yymsg_alloc = sizeof yymsgbuf;
+#endif
+
+ /* Three stacks and their tools:
+ `yyss': related to states,
+ `yyvs': related to semantic values,
+ `yyls': related to locations.
+
+ Refer to the stacks thru separate pointers, to allow yyoverflow
+ to reallocate them elsewhere. */
+
+ /* The state stack. */
+ yytype_int16 yyssa[YYINITDEPTH];
+ yytype_int16 *yyss = yyssa;
+ yytype_int16 *yyssp;
+
+ /* The semantic value stack. */
+ YYSTYPE yyvsa[YYINITDEPTH];
+ YYSTYPE *yyvs = yyvsa;
+ YYSTYPE *yyvsp;
+
+
+
+#define YYPOPSTACK(N) (yyvsp -= (N), yyssp -= (N))
+
+ YYSIZE_T yystacksize = YYINITDEPTH;
+
+ /* The variables used to return semantic value and location from the
+ action routines. */
+ YYSTYPE yyval;
+
+
+ /* The number of symbols on the RHS of the reduced rule.
+ Keep to zero when no symbol should be popped. */
+ int yylen = 0;
+
+ YYDPRINTF ((stderr, "Starting parse\n"));
+
+ yystate = 0;
+ yyerrstatus = 0;
+ yynerrs = 0;
+ yychar = YYEMPTY; /* Cause a token to be read. */
+
+ /* Initialize stack pointers.
+ Waste one element of value and location stack
+ so that they stay on the same level as the state stack.
+ The wasted elements are never initialized. */
+
+ yyssp = yyss;
+ yyvsp = yyvs;
+
+ goto yysetstate;
+
+/*------------------------------------------------------------.
+| yynewstate -- Push a new state, which is found in yystate. |
+`------------------------------------------------------------*/
+ yynewstate:
+ /* In all cases, when you get here, the value and location stacks
+ have just been pushed. So pushing a state here evens the stacks. */
+ yyssp++;
+
+ yysetstate:
+ *yyssp = yystate;
+
+ if (yyss + yystacksize - 1 <= yyssp)
+ {
+ /* Get the current used size of the three stacks, in elements. */
+ YYSIZE_T yysize = yyssp - yyss + 1;
+
+#ifdef yyoverflow
+ {
+ /* Give user a chance to reallocate the stack. Use copies of
+ these so that the &'s don't force the real ones into
+ memory. */
+ YYSTYPE *yyvs1 = yyvs;
+ yytype_int16 *yyss1 = yyss;
+
+
+ /* Each stack pointer address is followed by the size of the
+ data in use in that stack, in bytes. This used to be a
+ conditional around just the two extra args, but that might
+ be undefined if yyoverflow is a macro. */
+ yyoverflow (YY_("memory exhausted"),
+ &yyss1, yysize * sizeof (*yyssp),
+ &yyvs1, yysize * sizeof (*yyvsp),
+
+ &yystacksize);
+
+ yyss = yyss1;
+ yyvs = yyvs1;
+ }
+#else /* no yyoverflow */
+# ifndef YYSTACK_RELOCATE
+ goto yyexhaustedlab;
+# else
+ /* Extend the stack our own way. */
+ if (YYMAXDEPTH <= yystacksize)
+ goto yyexhaustedlab;
+ yystacksize *= 2;
+ if (YYMAXDEPTH < yystacksize)
+ yystacksize = YYMAXDEPTH;
+
+ {
+ yytype_int16 *yyss1 = yyss;
+ union yyalloc *yyptr =
+ (union yyalloc *) YYSTACK_ALLOC (YYSTACK_BYTES (yystacksize));
+ if (! yyptr)
+ goto yyexhaustedlab;
+ YYSTACK_RELOCATE (yyss);
+ YYSTACK_RELOCATE (yyvs);
+
+# undef YYSTACK_RELOCATE
+ if (yyss1 != yyssa)
+ YYSTACK_FREE (yyss1);
+ }
+# endif
+#endif /* no yyoverflow */
+
+ yyssp = yyss + yysize - 1;
+ yyvsp = yyvs + yysize - 1;
+
+
+ YYDPRINTF ((stderr, "Stack size increased to %lu\n",
+ (unsigned long int) yystacksize));
+
+ if (yyss + yystacksize - 1 <= yyssp)
+ YYABORT;
+ }
+
+ YYDPRINTF ((stderr, "Entering state %d\n", yystate));
+
+ goto yybackup;
+
+/*-----------.
+| yybackup. |
+`-----------*/
+yybackup:
+
+ /* Do appropriate processing given the current state. Read a
+ look-ahead token if we need one and don't already have one. */
+
+ /* First try to decide what to do without reference to look-ahead token. */
+ yyn = yypact[yystate];
+ if (yyn == YYPACT_NINF)
+ goto yydefault;
+
+ /* Not known => get a look-ahead token if don't already have one. */
+
+ /* YYCHAR is either YYEMPTY or YYEOF or a valid look-ahead symbol. */
+ if (yychar == YYEMPTY)
+ {
+ YYDPRINTF ((stderr, "Reading a token: "));
+ yychar = YYLEX;
+ }
+
+ if (yychar <= YYEOF)
+ {
+ yychar = yytoken = YYEOF;
+ YYDPRINTF ((stderr, "Now at end of input.\n"));
+ }
+ else
+ {
+ yytoken = YYTRANSLATE (yychar);
+ YY_SYMBOL_PRINT ("Next token is", yytoken, &yylval, &yylloc);
+ }
+
+ /* If the proper action on seeing token YYTOKEN is to reduce or to
+ detect an error, take that action. */
+ yyn += yytoken;
+ if (yyn < 0 || YYLAST < yyn || yycheck[yyn] != yytoken)
+ goto yydefault;
+ yyn = yytable[yyn];
+ if (yyn <= 0)
+ {
+ if (yyn == 0 || yyn == YYTABLE_NINF)
+ goto yyerrlab;
+ yyn = -yyn;
+ goto yyreduce;
+ }
+
+ if (yyn == YYFINAL)
+ YYACCEPT;
+
+ /* Count tokens shifted since error; after three, turn off error
+ status. */
+ if (yyerrstatus)
+ yyerrstatus--;
+
+ /* Shift the look-ahead token. */
+ YY_SYMBOL_PRINT ("Shifting", yytoken, &yylval, &yylloc);
+
+ /* Discard the shifted token unless it is eof. */
+ if (yychar != YYEOF)
+ yychar = YYEMPTY;
+
+ yystate = yyn;
+ *++yyvsp = yylval;
+
+ goto yynewstate;
+
+
+/*-----------------------------------------------------------.
+| yydefault -- do the default action for the current state. |
+`-----------------------------------------------------------*/
+yydefault:
+ yyn = yydefact[yystate];
+ if (yyn == 0)
+ goto yyerrlab;
+ goto yyreduce;
+
+
+/*-----------------------------.
+| yyreduce -- Do a reduction. |
+`-----------------------------*/
+yyreduce:
+ /* yyn is the number of a rule to reduce with. */
+ yylen = yyr2[yyn];
+
+ /* If YYLEN is nonzero, implement the default value of the action:
+ `$$ = $1'.
+
+ Otherwise, the following line sets YYVAL to garbage.
+ This behavior is undocumented and Bison
+ users should not rely upon it. Assigning to YYVAL
+ unconditionally makes the parser a bit smaller, and it avoids a
+ GCC warning that YYVAL may be used uninitialized. */
+ yyval = yyvsp[1-yylen];
+
+
+ YY_REDUCE_PRINT (yyn);
+ switch (yyn)
+ {
+ case 3:
+#line 196 "filter/grammar.y"
+ {
+ StartNode = (yyvsp[(1) - (1)].value);
+ }
+ break;
+
+ case 4:
+#line 201 "filter/grammar.y"
+ { /* this is an unconditionally true expression, as a filter applies in any case */
+ data_t data = {.dataVal=1};
+ (yyval.param).self = NewElement(EXnull, 0, 0, 0, CMP_EQ, FUNC_NONE, data);
+ }
+ break;
+
+ case 5:
+#line 206 "filter/grammar.y"
+ {
+ (yyval.param).self = NewElement(EXipv4FlowID, OFFsrc4Addr, 0, 0, CMP_EQ, FUNC_NONE, NULLPtr);
+ }
+ break;
+
+ case 6:
+#line 210 "filter/grammar.y"
+ {
+ (yyval.param).self = NewElement(EXipv6FlowID, OFFsrc6Addr, 0, 0, CMP_EQ, FUNC_NONE, NULLPtr);
+ }
+ break;
+
+ case 7:
+#line 214 "filter/grammar.y"
+ {
+ (yyval.param).self = AddIdent((yyvsp[(2) - (2)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 8:
+#line 218 "filter/grammar.y"
+ {
+ (yyval.param).self = NewElement(EXlocal, OFFflowCount, SIZEflowCount, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_NONE, NULLPtr);
+ }
+ break;
+
+ case 9:
+#line 222 "filter/grammar.y"
+ {
+ (yyval.param).self = AddEngineNum("type", (yyvsp[(2) - (3)].param).comp, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 10:
+#line 226 "filter/grammar.y"
+ {
+ (yyval.param).self = AddEngineNum("id", (yyvsp[(2) - (3)].param).comp, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 11:
+#line 230 "filter/grammar.y"
+ {
+ (yyval.param).self = AddEngineNum((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 12:
+#line 234 "filter/grammar.y"
+ {
+ (yyval.param).self = AddExporterNum((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 13:
+#line 238 "filter/grammar.y"
+ {
+ (yyval.param).self = AddProto((yyvsp[(1) - (3)].param).direction, NULL, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 14:
+#line 242 "filter/grammar.y"
+ {
+ (yyval.param).self = AddProto((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].s), 0); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 15:
+#line 246 "filter/grammar.y"
+ {
+ (yyval.param).self = AddProto((yyvsp[(1) - (3)].param).direction, "icmp", 0); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 16:
+#line 250 "filter/grammar.y"
+ {
+ (yyval.param).self = AddPortNumber((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 17:
+#line 254 "filter/grammar.y"
+ {
+ (yyval.param).self = AddICMP("type", (yyvsp[(2) - (3)].param).comp, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 18:
+#line 258 "filter/grammar.y"
+ {
+ (yyval.param).self = AddICMP("code", (yyvsp[(2) - (3)].param).comp, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 19:
+#line 262 "filter/grammar.y"
+ {
+ (yyval.param).self = AddICMP((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 20:
+#line 266 "filter/grammar.y"
+ {
+ (yyval.param).self = AddFlagsNumber((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 21:
+#line 270 "filter/grammar.y"
+ {
+ (yyval.param).self = AddFlagsString((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 22:
+#line 274 "filter/grammar.y"
+ {
+ (yyval.param).self = AddTosNumber((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 23:
+#line 278 "filter/grammar.y"
+ {
+ (yyval.param).self = AddFwdStatNum((yyvsp[(2) - (3)].param).comp, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 24:
+#line 282 "filter/grammar.y"
+ {
+ (yyval.param).self = AddFwdStatString((yyvsp[(2) - (2)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 25:
+#line 286 "filter/grammar.y"
+ {
+ (yyval.param).self = NewElement(EXgenericFlowID, 0, SIZEmsecLast, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_DURATION, NULLPtr);
+ }
+ break;
+
+ case 26:
+#line 290 "filter/grammar.y"
+ {
+ (yyval.param).self = NewElement(EXgenericFlowID, 0, SIZEmsecLast, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_PPS, NULLPtr);
+ }
+ break;
+
+ case 27:
+#line 294 "filter/grammar.y"
+ {
+ (yyval.param).self = NewElement(EXgenericFlowID, 0, SIZEmsecLast, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_BPS, NULLPtr);
+ }
+ break;
+
+ case 28:
+#line 298 "filter/grammar.y"
+ {
+ (yyval.param).self = NewElement(EXgenericFlowID, 0, SIZEmsecLast, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_BPP, NULLPtr);
+ }
+ break;
+
+ case 29:
+#line 302 "filter/grammar.y"
+ {
+ (yyval.param).self = AddPackets((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 30:
+#line 306 "filter/grammar.y"
+ {
+ (yyval.param).self = NewElement(EXcntFlowID, OFFflows, SIZEflows, (yyvsp[(3) - (3)].value), (yyvsp[(2) - (3)].param).comp, FUNC_NONE, NULLPtr);
+ }
+ break;
+
+ case 31:
+#line 310 "filter/grammar.y"
+ {
+ (yyval.param).self = AddBytes((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 32:
+#line 314 "filter/grammar.y"
+ {
+ (yyval.param).self = AddIP((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 33:
+#line 318 "filter/grammar.y"
+ {
+ (yyval.param).self = AddNet((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].s), (yyvsp[(4) - (4)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 34:
+#line 322 "filter/grammar.y"
+ {
+ (yyval.param).self = AddNetPrefix((yyvsp[(1) - (5)].param).direction, (yyvsp[(3) - (5)].s), (yyvsp[(5) - (5)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 35:
+#line 326 "filter/grammar.y"
+ {
+ (yyval.param).self = AddInterfaceNumber((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 36:
+#line 330 "filter/grammar.y"
+ {
+ (yyval.param).self = AddVlanNumber((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 37:
+#line 334 "filter/grammar.y"
+ {
+ (yyval.param).self = AddAsNumber((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 38:
+#line 338 "filter/grammar.y"
+ {
+ (yyval.param).self = AddMaskNumber((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 39:
+#line 342 "filter/grammar.y"
+ {
+ (yyval.param).self = AddEthertype((yyvsp[(2) - (2)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 40:
+#line 346 "filter/grammar.y"
+ {
+ (yyval.param).self = AddFlowDir(DIR_UNSPEC, (yyvsp[(2) - (2)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 41:
+#line 350 "filter/grammar.y"
+ {
+ (yyval.param).self = AddFlowDir((yyvsp[(2) - (2)].param).direction, -1); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 42:
+#line 354 "filter/grammar.y"
+ {
+ (yyval.param).self = AddMPLS((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 43:
+#line 358 "filter/grammar.y"
+ {
+ (yyval.param).self = AddMPLS("any", (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 44:
+#line 362 "filter/grammar.y"
+ {
+ (yyval.param).self = AddMAC((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 45:
+#line 366 "filter/grammar.y"
+ {
+ (yyval.param).self = AddLatency((yyvsp[(1) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 46:
+#line 370 "filter/grammar.y"
+ {
+ (yyval.param).self = AddASAString((yyvsp[(2) - (3)].s), (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 47:
+#line 374 "filter/grammar.y"
+ {
+ switch ((yyvsp[(3) - (3)].param).direction) {
+ case DIR_INGRESS:
+ (yyval.param).self = AddASAString((yyvsp[(2) - (3)].s), "ingress");
+ break;
+ case DIR_EGRESS:
+ (yyval.param).self = AddASAString((yyvsp[(2) - (3)].s), "egress");
+ break;
+ default:
+ (yyval.param).self = -1;
+ yyerror("Unknown direction specifier");
+ }
+ if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 48:
+#line 389 "filter/grammar.y"
+ {
+ (yyval.param).self = AddASA((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 49:
+#line 393 "filter/grammar.y"
+ {
+ (yyval.param).self = AddASApblock((yyvsp[(1) - (5)].param).direction, (yyvsp[(5) - (5)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 50:
+#line 397 "filter/grammar.y"
+ {
+ (yyval.param).self = AddACL((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 51:
+#line 401 "filter/grammar.y"
+ {
+ (yyval.param).self = AddNATString((yyvsp[(2) - (3)].s), (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 52:
+#line 405 "filter/grammar.y"
+ {
+ (yyval.param).self = AddNatPortBlocks((yyvsp[(2) - (5)].s), (yyvsp[(3) - (5)].s), (yyvsp[(4) - (5)].param).comp, (yyvsp[(5) - (5)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 53:
+#line 409 "filter/grammar.y"
+ {
+ (yyval.param).self = AddNAT((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 54:
+#line 413 "filter/grammar.y"
+ {
+ (yyval.param).self = AddPayload((yyvsp[(2) - (3)].s), (yyvsp[(3) - (3)].s), NULL); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 55:
+#line 417 "filter/grammar.y"
+ {
+ (yyval.param).self = AddPayload((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].s), (yyvsp[(4) - (4)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 56:
+#line 421 "filter/grammar.y"
+ {
+ (yyval.param).self = AddGeo((yyvsp[(1) - (3)].param).direction, (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 57:
+#line 425 "filter/grammar.y"
+ {
+ (yyval.param).self = AddObservation((yyvsp[(2) - (5)].s), (yyvsp[(3) - (5)].s), (yyvsp[(4) - (5)].param).comp, (yyvsp[(5) - (5)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 58:
+#line 429 "filter/grammar.y"
+ {
+ (yyval.param).self = AddVRF((yyvsp[(1) - (4)].param).direction, (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 59:
+#line 433 "filter/grammar.y"
+ {
+ (yyval.param).self = AddPFString((yyvsp[(2) - (3)].s), (yyvsp[(3) - (3)].s)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 60:
+#line 437 "filter/grammar.y"
+ {
+ (yyval.param).self = AddPFNumber((yyvsp[(2) - (4)].s), (yyvsp[(3) - (4)].param).comp, (yyvsp[(4) - (4)].value)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 61:
+#line 441 "filter/grammar.y"
+ {
+ switch ((yyvsp[(3) - (3)].param).direction) {
+ case DIR_IN:
+ (yyval.param).self = AddPFString((yyvsp[(2) - (3)].s), "in");
+ break;
+ case DIR_OUT:
+ (yyval.param).self = AddPFString((yyvsp[(2) - (3)].s), "out");
+ break;
+ case DIR_UNSPEC_NAT:
+ (yyval.param).self = AddPFString((yyvsp[(2) - (3)].s), "nat");
+ break;
+ default:
+ (yyval.param).self = -1;
+ yyerror("Unknown direction specifier");
+ }
+ if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 62:
+#line 459 "filter/grammar.y"
+ {
+ (yyval.param).self = AddIPlist((yyvsp[(1) - (6)].param).direction, (yyvsp[(5) - (6)].list)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 63:
+#line 463 "filter/grammar.y"
+ {
+ (yyval.param).self = AddPortList((yyvsp[(1) - (6)].param).direction, (yyvsp[(5) - (6)].list)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 64:
+#line 467 "filter/grammar.y"
+ {
+ (yyval.param).self = AddASList((yyvsp[(1) - (6)].param).direction, (yyvsp[(5) - (6)].list)); if ( (yyval.param).self < 0 ) YYABORT;
+ }
+ break;
+
+ case 65:
+#line 473 "filter/grammar.y"
+ {
+ (yyval.list) = NewIplist((yyvsp[(1) - (1)].s), -1); if ( (yyval.list) == NULL ) YYABORT;
+ }
+ break;
+
+ case 66:
+#line 477 "filter/grammar.y"
+ {
+ (yyval.list) = NewIplist((yyvsp[(1) - (3)].s), (yyvsp[(3) - (3)].value)); if ( (yyval.list) == NULL ) YYABORT;
+ }
+ break;
+
+ case 67:
+#line 481 "filter/grammar.y"
+ {
+ if (InsertIPlist((yyvsp[(1) - (2)].list), (yyvsp[(2) - (2)].s), -1) == 0 ) YYABORT;
+ }
+ break;
+
+ case 68:
+#line 485 "filter/grammar.y"
+ {
+ if (InsertIPlist((yyvsp[(1) - (3)].list), (yyvsp[(3) - (3)].s), -1) == 0 ) YYABORT;
+ }
+ break;
+
+ case 69:
+#line 489 "filter/grammar.y"
+ {
+ if (InsertIPlist((yyvsp[(1) - (4)].list), (yyvsp[(2) - (4)].s), (yyvsp[(4) - (4)].value)) == 0 ) YYABORT;
+ }
+ break;
+
+ case 70:
+#line 494 "filter/grammar.y"
+ {
+ (yyval.list) = NewU64list((yyvsp[(1) - (1)].value)); if ( (yyval.list) == NULL ) YYABORT;
+ }
+ break;
+
+ case 71:
+#line 498 "filter/grammar.y"
+ {
+ if (InsertU64list((yyvsp[(1) - (2)].list), (yyvsp[(2) - (2)].value)) == 0 ) YYABORT;
+ }
+ break;
+
+ case 72:
+#line 502 "filter/grammar.y"
+ {
+ if (InsertU64list((yyvsp[(1) - (3)].list), (yyvsp[(3) - (3)].value)) == 0 ) YYABORT;
+ }
+ break;
+
+ case 73:
+#line 508 "filter/grammar.y"
+ { (yyval.param).comp = CMP_EQ; }
+ break;
+
+ case 74:
+#line 509 "filter/grammar.y"
+ { (yyval.param).comp = CMP_EQ; }
+ break;
+
+ case 75:
+#line 510 "filter/grammar.y"
+ { (yyval.param).comp = CMP_LT; }
+ break;
+
+ case 76:
+#line 511 "filter/grammar.y"
+ { (yyval.param).comp = CMP_GT; }
+ break;
+
+ case 77:
+#line 512 "filter/grammar.y"
+ { (yyval.param).comp = CMP_LE; }
+ break;
+
+ case 78:
+#line 513 "filter/grammar.y"
+ { (yyval.param).comp = CMP_GE; }
+ break;
+
+ case 79:
+#line 517 "filter/grammar.y"
+ { (yyval.param).direction = DIR_UNSPEC; }
+ break;
+
+ case 80:
+#line 518 "filter/grammar.y"
+ { (yyval.param).direction = DIR_SRC; }
+ break;
+
+ case 81:
+#line 519 "filter/grammar.y"
+ { (yyval.param).direction = DIR_DST; }
+ break;
+
+ case 82:
+#line 520 "filter/grammar.y"
+ { (yyval.param).direction = DIR_SRC_NAT; }
+ break;
+
+ case 83:
+#line 521 "filter/grammar.y"
+ { (yyval.param).direction = DIR_DST_NAT; }
+ break;
+
+ case 84:
+#line 522 "filter/grammar.y"
+ { (yyval.param).direction = DIR_SRC_TUN; }
+ break;
+
+ case 85:
+#line 523 "filter/grammar.y"
+ { (yyval.param).direction = DIR_DST_TUN; }
+ break;
+
+ case 86:
+#line 524 "filter/grammar.y"
+ { (yyval.param).direction = DIR_UNSPEC_NAT; }
+ break;
+
+ case 87:
+#line 525 "filter/grammar.y"
+ { (yyval.param).direction = DIR_UNSPEC_TUN; }
+ break;
+
+ case 88:
+#line 526 "filter/grammar.y"
+ { (yyval.param).direction = DIR_IN; }
+ break;
+
+ case 89:
+#line 527 "filter/grammar.y"
+ { (yyval.param).direction = DIR_OUT; }
+ break;
+
+ case 90:
+#line 528 "filter/grammar.y"
+ { (yyval.param).direction = DIR_IN_SRC; }
+ break;
+
+ case 91:
+#line 529 "filter/grammar.y"
+ { (yyval.param).direction = DIR_IN_DST; }
+ break;
+
+ case 92:
+#line 530 "filter/grammar.y"
+ { (yyval.param).direction = DIR_OUT_SRC; }
+ break;
+
+ case 93:
+#line 531 "filter/grammar.y"
+ { (yyval.param).direction = DIR_OUT_DST; }
+ break;
+
+ case 94:
+#line 532 "filter/grammar.y"
+ { (yyval.param).direction = DIR_INGRESS; }
+ break;
+
+ case 95:
+#line 533 "filter/grammar.y"
+ { (yyval.param).direction = DIR_EGRESS; }
+ break;
+
+ case 96:
+#line 534 "filter/grammar.y"
+ { (yyval.param).direction = DIR_PREV; }
+ break;
+
+ case 97:
+#line 535 "filter/grammar.y"
+ { (yyval.param).direction = DIR_NEXT; }
+ break;
+
+ case 98:
+#line 536 "filter/grammar.y"
+ { (yyval.param).direction = BGP_NEXT; }
+ break;
+
+ case 99:
+#line 537 "filter/grammar.y"
+ { (yyval.param).direction = SRC_ROUTER; }
+ break;
+
+ case 100:
+#line 538 "filter/grammar.y"
+ { (yyval.param).direction = SRC_ROUTER; }
+ break;
+
+ case 101:
+#line 541 "filter/grammar.y"
+ { (yyval.value) = (yyvsp[(1) - (1)].param).self; }
+ break;
+
+ case 102:
+#line 542 "filter/grammar.y"
+ { (yyval.value) = Connect_OR((yyvsp[(1) - (3)].value), (yyvsp[(3) - (3)].value)); }
+ break;
+
+ case 103:
+#line 543 "filter/grammar.y"
+ { (yyval.value) = Connect_AND((yyvsp[(1) - (3)].value), (yyvsp[(3) - (3)].value)); }
+ break;
+
+ case 104:
+#line 544 "filter/grammar.y"
+ { (yyval.value) = Invert((yyvsp[(2) - (2)].value)); }
+ break;
+
+ case 105:
+#line 545 "filter/grammar.y"
+ { (yyval.value) = (yyvsp[(2) - (3)].value); }
+ break;
+
+
+/* Line 1267 of yacc.c. */
+#line 2476 "filter/grammar.c"
+ default: break;
+ }
+ YY_SYMBOL_PRINT ("-> $$ =", yyr1[yyn], &yyval, &yyloc);
+
+ YYPOPSTACK (yylen);
+ yylen = 0;
+ YY_STACK_PRINT (yyss, yyssp);
+
+ *++yyvsp = yyval;
+
+
+ /* Now `shift' the result of the reduction. Determine what state
+ that goes to, based on the state we popped back to and the rule
+ number reduced by. */
+
+ yyn = yyr1[yyn];
+
+ yystate = yypgoto[yyn - YYNTOKENS] + *yyssp;
+ if (0 <= yystate && yystate <= YYLAST && yycheck[yystate] == *yyssp)
+ yystate = yytable[yystate];
+ else
+ yystate = yydefgoto[yyn - YYNTOKENS];
+
+ goto yynewstate;
+
+
+/*------------------------------------.
+| yyerrlab -- here on detecting error |
+`------------------------------------*/
+yyerrlab:
+ /* If not already recovering from an error, report this error. */
+ if (!yyerrstatus)
+ {
+ ++yynerrs;
+#if ! YYERROR_VERBOSE
+ yyerror (YY_("syntax error"));
+#else
+ {
+ YYSIZE_T yysize = yysyntax_error (0, yystate, yychar);
+ if (yymsg_alloc < yysize && yymsg_alloc < YYSTACK_ALLOC_MAXIMUM)
+ {
+ YYSIZE_T yyalloc = 2 * yysize;
+ if (! (yysize <= yyalloc && yyalloc <= YYSTACK_ALLOC_MAXIMUM))
+ yyalloc = YYSTACK_ALLOC_MAXIMUM;
+ if (yymsg != yymsgbuf)
+ YYSTACK_FREE (yymsg);
+ yymsg = (char *) YYSTACK_ALLOC (yyalloc);
+ if (yymsg)
+ yymsg_alloc = yyalloc;
+ else
+ {
+ yymsg = yymsgbuf;
+ yymsg_alloc = sizeof yymsgbuf;
+ }
+ }
+
+ if (0 < yysize && yysize <= yymsg_alloc)
+ {
+ (void) yysyntax_error (yymsg, yystate, yychar);
+ yyerror (yymsg);
+ }
+ else
+ {
+ yyerror (YY_("syntax error"));
+ if (yysize != 0)
+ goto yyexhaustedlab;
+ }
+ }
+#endif
+ }
+
+
+
+ if (yyerrstatus == 3)
+ {
+ /* If just tried and failed to reuse look-ahead token after an
+ error, discard it. */
+
+ if (yychar <= YYEOF)
+ {
+ /* Return failure if at end of input. */
+ if (yychar == YYEOF)
+ YYABORT;
+ }
+ else
+ {
+ yydestruct ("Error: discarding",
+ yytoken, &yylval);
+ yychar = YYEMPTY;
+ }
+ }
+
+ /* Else will try to reuse look-ahead token after shifting the error
+ token. */
+ goto yyerrlab1;
+
+
+/*---------------------------------------------------.
+| yyerrorlab -- error raised explicitly by YYERROR. |
+`---------------------------------------------------*/
+yyerrorlab:
+
+ /* Pacify compilers like GCC when the user code never invokes
+ YYERROR and the label yyerrorlab therefore never appears in user
+ code. */
+ if (/*CONSTCOND*/ 0)
+ goto yyerrorlab;
+
+ /* Do not reclaim the symbols of the rule which action triggered
+ this YYERROR. */
+ YYPOPSTACK (yylen);
+ yylen = 0;
+ YY_STACK_PRINT (yyss, yyssp);
+ yystate = *yyssp;
+ goto yyerrlab1;
+
+
+/*-------------------------------------------------------------.
+| yyerrlab1 -- common code for both syntax error and YYERROR. |
+`-------------------------------------------------------------*/
+yyerrlab1:
+ yyerrstatus = 3; /* Each real token shifted decrements this. */
+
+ for (;;)
+ {
+ yyn = yypact[yystate];
+ if (yyn != YYPACT_NINF)
+ {
+ yyn += YYTERROR;
+ if (0 <= yyn && yyn <= YYLAST && yycheck[yyn] == YYTERROR)
+ {
+ yyn = yytable[yyn];
+ if (0 < yyn)
+ break;
+ }
+ }
+
+ /* Pop the current state because it cannot handle the error token. */
+ if (yyssp == yyss)
+ YYABORT;
+
+
+ yydestruct ("Error: popping",
+ yystos[yystate], yyvsp);
+ YYPOPSTACK (1);
+ yystate = *yyssp;
+ YY_STACK_PRINT (yyss, yyssp);
+ }
+
+ if (yyn == YYFINAL)
+ YYACCEPT;
+
+ *++yyvsp = yylval;
+
+
+ /* Shift the error token. */
+ YY_SYMBOL_PRINT ("Shifting", yystos[yyn], yyvsp, yylsp);
+
+ yystate = yyn;
+ goto yynewstate;
+
+
+/*-------------------------------------.
+| yyacceptlab -- YYACCEPT comes here. |
+`-------------------------------------*/
+yyacceptlab:
+ yyresult = 0;
+ goto yyreturn;
+
+/*-----------------------------------.
+| yyabortlab -- YYABORT comes here. |
+`-----------------------------------*/
+yyabortlab:
+ yyresult = 1;
+ goto yyreturn;
+
+#ifndef yyoverflow
+/*-------------------------------------------------.
+| yyexhaustedlab -- memory exhaustion comes here. |
+`-------------------------------------------------*/
+yyexhaustedlab:
+ yyerror (YY_("memory exhausted"));
+ yyresult = 2;
+ /* Fall through. */
+#endif
+
+yyreturn:
+ if (yychar != YYEOF && yychar != YYEMPTY)
+ yydestruct ("Cleanup: discarding lookahead",
+ yytoken, &yylval);
+ /* Do not reclaim the symbols of the rule which action triggered
+ this YYABORT or YYACCEPT. */
+ YYPOPSTACK (yylen);
+ YY_STACK_PRINT (yyss, yyssp);
+ while (yyssp != yyss)
+ {
+ yydestruct ("Cleanup: popping",
+ yystos[*yyssp], yyvsp);
+ YYPOPSTACK (1);
+ }
+#ifndef yyoverflow
+ if (yyss != yyssa)
+ YYSTACK_FREE (yyss);
+#endif
+#if YYERROR_VERBOSE
+ if (yymsg != yymsgbuf)
+ YYSTACK_FREE (yymsg);
+#endif
+ /* Make sure YYID is used. */
+ return YYID (yyresult);
+}
+
+
+#line 548 "filter/grammar.y"
+
+
+static void yyerror(char *msg, ...) {
+ char msgStr[128];
+
+ va_list var_args;
+ va_start(var_args, msg);
+ vsnprintf(msgStr, 127, msg, var_args);
+ va_end(var_args);
+ msgStr[127] = '\0';
+
+ if ( FilterFilename ) {
+ printf("File '%s' line %d: %s at '%s'\n", FilterFilename, lineno, msgStr, yytext);
+ } else {
+ printf("Line %d: %s at '%s'\n", lineno, msgStr, yytext);
+ }
+} /* End of yyerror */
+
+static uint32_t NewIPElement(ipStack_t *ipStack, int direction, int comp, data_t *data) {
+
+ int block = -1;
+
+ if ( ipStack->af == PF_INET ) {
+ // handle IPv4 addr element
+ switch ( direction ) {
+ case DIR_SRC:
+ block = NewElement(EXipv4FlowID, OFFsrc4Addr, SIZEsrc4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]);
+ break;
+ case DIR_DST:
+ block = NewElement(EXipv4FlowID, OFFdst4Addr, SIZEdst4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]);
+ break;
+ case DIR_SRC_NAT:
+ block = NewElement(EXnatXlateIPv4ID, OFFxlateSrc4Addr, SIZExlateSrc4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]);
+ break;
+ case DIR_DST_NAT:
+ block = NewElement(EXnatXlateIPv4ID, OFFxlateDst4Addr, SIZExlateDst4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]);
+ break;
+ case DIR_SRC_TUN:
+ block = NewElement(EXtunIPv4ID, OFFtunSrc4Addr, SIZEtunSrc4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]);
+ break;
+ case DIR_DST_TUN:
+ block = NewElement(EXtunIPv4ID, OFFtunDst4Addr, SIZEtunDst4Addr, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]);
+ break;
+ case DIR_NEXT:
+ block = NewElement(EXipNextHopV4ID, OFFNextHopV4IP, SIZENextHopV4IP, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]);
+ break;
+ case BGP_NEXT:
+ block = NewElement(EXbgpNextHopV4ID, OFFbgp4NextIP, SIZEbgp4NextIP, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]);
+ break;
+ case SRC_ROUTER:
+ block = NewElement(EXipReceivedV4ID, OFFReceived4IP, SIZEReceived4IP, ipStack->ipaddr[1], comp, FUNC_NONE, data[0]);
+ break;
+ } // End of switch
+
+ } else {
+ // handle IPv6 addr element
+ int v6_1, v6_2 = 0;
+ switch ( direction ) {
+ case DIR_SRC:
+ v6_1 = NewElement(EXipv6FlowID, OFFsrc6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]);
+ v6_2 = NewElement(EXipv6FlowID, OFFsrc6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]);
+ break;
+ case DIR_DST:
+ v6_1 = NewElement(EXipv6FlowID, OFFdst6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]);
+ v6_2 = NewElement(EXipv6FlowID, OFFdst6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]);
+ break;
+ case DIR_SRC_NAT:
+ v6_1 = NewElement(EXnatXlateIPv6ID, OFFxlateSrc6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]);
+ v6_2 = NewElement(EXnatXlateIPv6ID, OFFxlateSrc6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]);
+ break;
+ case DIR_DST_NAT:
+ v6_1 = NewElement(EXnatXlateIPv6ID, OFFxlateDst6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]);
+ v6_2 = NewElement(EXnatXlateIPv6ID, OFFxlateDst6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]);
+ break;
+ case DIR_SRC_TUN:
+ v6_1 = NewElement(EXtunIPv6ID, OFFtunSrc6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]);
+ v6_2 = NewElement(EXtunIPv6ID, OFFtunSrc6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]);
+ break;
+ case DIR_DST_TUN:
+ v6_1 = NewElement(EXtunIPv6ID, OFFtunDst6Addr, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]);
+ v6_2 = NewElement(EXtunIPv6ID, OFFtunDst6Addr + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]);
+ break;
+ case DIR_NEXT:
+ v6_1 = NewElement(EXipNextHopV6ID, OFFNextHopV6IP, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]);
+ v6_2 = NewElement(EXipNextHopV6ID, OFFNextHopV6IP + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]);
+ break;
+ case BGP_NEXT:
+ v6_1 = NewElement(EXbgpNextHopV6ID, OFFbgp6NextIP, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]);
+ v6_2 = NewElement(EXbgpNextHopV6ID, OFFbgp6NextIP + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]);
+ break;
+ case SRC_ROUTER:
+ v6_1 = NewElement(EXipReceivedV6ID, OFFReceived6IP, sizeof(uint64_t), ipStack->ipaddr[0], comp, FUNC_NONE, data[0]);
+ v6_2 = NewElement(EXipReceivedV6ID, OFFReceived6IP + sizeof(uint64_t), sizeof(uint64_t), ipStack->ipaddr[1], comp, FUNC_NONE, data[1]);
+ break;
+ } // End of switch
+
+ // IPv6
+ if ( v6_1 && v6_2 )
+ block = Connect_AND(v6_1, v6_2);
+
+ }
+
+ return block;
+} // NewIPElement
+
+static uint32_t ChainHosts(ipStack_t *ipStack, int numIP, int direction) {
+
+ data_t data[2] = { NULLPtr, NULLPtr };
+
+ uint32_t final = 0;
+ int i = 0;
+ do {
+ // chain multiple IPs
+ int block = NewIPElement(&ipStack[i], direction, CMP_EQ, data);
+ final = final == 0 ? block : Connect_OR(final, block);
+
+ } while (++i < numIP);
+
+ return final;
+} // End of ChainHosts
+
+static int AddIdent(char *ident) {
+ char *c;
+
+ // ident[a-zA-Z0-9_\-]+ {
+ size_t len = strlen(ident);
+ if ( len == 0 || len > 255 ) {
+ yyerror("Invalid ident string: %s", ident);
+ return -1;
+ }
+
+ c = &ident[0];
+ while ( *c ) {
+ if ( *c != '_' && *c != '-' && !isalnum(*c) ) {
+ yyerror("Invalid char in ident string: %s: %c", ident, *c);
+ return 0;
+ }
+ c++;
+ }
+
+ data_t data = {.dataPtr = strdup(ident)};
+ return NewElement(EXnull, 0, 0, 0, CMP_IDENT, FUNC_NONE, data);
+
+} // End of AddIdent
+
+static int AddProto(direction_t direction, char *protoStr, uint64_t protoNum) {
+
+ if ( protoNum > 255 ) {
+ yyerror("Protocol %d out of range", protoNum);
+ return -1;
+ }
+
+ if ( protoStr != NULL ) {
+ protoNum = ProtoNum(protoStr);
+ if ( protoNum == -1 ) {
+ yyerror("Unknown protocol: %s", protoStr);
+ Protoinfo(protoStr);
+ return -1;
+ }
+ }
+
+ if ( direction == DIR_UNSPEC ) {
+ return NewElement(EXgenericFlowID, OFFproto, SIZEproto, protoNum, CMP_EQ, FUNC_NONE, NULLPtr);
+ } else if ( direction == DIR_UNSPEC_TUN ) {
+ return Connect_OR(
+ NewElement(EXtunIPv4ID, OFFtunProtoV4, SIZEtunProtoV4, protoNum, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXtunIPv6ID, OFFtunProtoV6, SIZEtunProtoV6, protoNum, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ } else {
+ yyerror("Unknown protocol specifier");
+ return -1;
+ }
+} // End of AddProtoString
+
+static int AddEngineNum(char *type, uint16_t comp, uint64_t num) {
+ if ( num > 255 ) {
+ yyerror("Engine argument %d of range 0..255", num);
+ return -1;
+ }
+
+ int ret = -1;
+ if ( strcasecmp(type, "type") == 0 ) {
+ ret = NewElement(EXnull, OFFengineType, SIZEengineType, num, comp, FUNC_NONE, NULLPtr);
+ } else if ( strcasecmp(type, "id") == 0 ) {
+ ret = NewElement(EXnull, OFFengineID, SIZEengineID, num, comp, FUNC_NONE, NULLPtr);
+ }
+
+ return ret;
+} // End of AddEngineNum
+
+static int AddExporterNum(char *type, uint16_t comp, uint64_t num) {
+ if ( num > 65535 ) {
+ yyerror("Exporter argument %d of range 0..65535", num);
+ return -1;
+ }
+
+ int ret = -1;
+ if ((strcasecmp(type, "id") == 0 ) || (strcasecmp(type, "sysid") == 0)) {
+ ret = NewElement(EXnull, OFFexporterID, SIZEexporterID, num, comp, FUNC_NONE, NULLPtr);
+ } else {
+ yyerror("Unknown exporter argument: %s", type);
+ }
+
+ return ret;
+} // End of AddExporterNum
+
+static int AddPortNumber(direction_t direction, uint16_t comp, uint64_t port) {
+ if ( port > 65535 ) {
+ yyerror("Port number: %d out of range", port);
+ return -1;
+ }
+
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_SRC:
+ ret = NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, port, comp, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_DST:
+ ret = NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, port, comp, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_SRC_NAT:
+ ret = NewElement(EXnatXlatePortID, OFFxlateSrcPort, SIZExlateSrcPort, port, comp, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_DST_NAT:
+ ret = NewElement(EXnatXlatePortID, OFFxlateDstPort, SIZExlateDstPort, port, comp, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_UNSPEC:
+ ret = Connect_OR(
+ NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, port, comp, FUNC_NONE, NULLPtr),
+ NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, port, comp, FUNC_NONE, NULLPtr)
+ );
+ break;
+ case DIR_UNSPEC_NAT:
+ ret = Connect_OR(
+ NewElement(EXnatXlatePortID, OFFxlateSrcPort, SIZExlateSrcPort, port, comp, FUNC_NONE, NULLPtr),
+ NewElement(EXnatXlatePortID, OFFxlateDstPort, SIZExlateDstPort, port, comp, FUNC_NONE, NULLPtr)
+ );
+ break;
+ default:
+ yyerror("Unknown direction");
+ } // End switch
+
+ return ret;
+} // End of AddPortNumber
+
+static int AddICMP(char *type, uint16_t comp, uint64_t number) {
+ if ( number > 255 ) {
+ yyerror("ICMP argument of range 0..255");
+ return -1;
+ }
+
+ int ret = -1;
+ // imply ICMP-TYPE with a proto ICMP block
+ int protoICMP = Connect_OR (
+ NewElement(EXgenericFlowID, OFFproto, SIZEproto, IPPROTO_ICMP, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXgenericFlowID, OFFproto, SIZEproto, IPPROTO_ICMPV6, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ if ( strcasecmp(type, "type") == 0 ) {
+ ret = Connect_AND(
+ protoICMP,
+ NewElement(EXgenericFlowID, OFFicmpType, SIZEicmpType, number, comp, FUNC_NONE, NULLPtr)
+ );
+ } else if ( strcasecmp(type, "code") == 0 ) {
+ ret = Connect_AND(
+ protoICMP,
+ NewElement(EXgenericFlowID, OFFicmpCode, SIZEicmpCode, number, comp, FUNC_NONE, NULLPtr)
+ );
+ }
+
+ return ret;
+} // End of AddICMP
+
+static int AddFlagsNumber(direction_t direction, uint16_t comp, uint64_t flags) {
+ if ( flags > 255 ) {
+ yyerror("flags number > 255");
+ return -1;
+ }
+
+ // direction ignored
+
+ return Connect_AND(
+ // imply flags with proto TCP
+ NewElement(EXgenericFlowID, OFFproto, SIZEproto, IPPROTO_TCP, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXgenericFlowID, OFFtcpFlags, SIZEtcpFlags, flags, comp, FUNC_NONE, NULLPtr)
+ );
+} // End of AddFlagsNumber
+
+static int AddFlagsString(direction_t direction, char *flags) {
+ size_t len = strlen(flags);
+ if ( len > 10 ) {
+ yyerror("Flags string error");
+ return -1;
+ }
+
+ int strict = 0;
+ if ( flags[0] == '=') {
+ strict = 1;
+ len--;
+ }
+
+ int cnt = 0;
+ uint64_t fl = 0;
+ if ( strchr(flags, 'F') ) { fl |= 1; cnt++; }
+ if ( strchr(flags, 'S') ) { fl |= 2; cnt++; }
+ if ( strchr(flags, 'R') ) { fl |= 4; cnt++; }
+ if ( strchr(flags, 'P') ) { fl |= 8; cnt++; }
+ if ( strchr(flags, 'A') ) { fl |= 16; cnt++; }
+ if ( strchr(flags, 'U') ) { fl |= 32; cnt++; }
+ if ( strchr(flags, 'E') ) { fl |= 64; cnt++; }
+ if ( strchr(flags, 'C') ) { fl |= 128; cnt++; }
+ if ( strchr(flags, 'X') ) { fl = 63; cnt++; }
+
+ if ( cnt != len ) {
+ yyerror("Unknown flags");
+ return -1;
+ }
+
+ if (strict) {
+ return AddFlagsNumber(direction, CMP_EQ, fl);
+ } else {
+ return AddFlagsNumber(direction, CMP_FLAGS, fl);
+ }
+
+ // unreached
+} // End of AddFlagsString
+
+static int AddTosNumber(direction_t direction, uint16_t comp, uint64_t tos) {
+ if ( tos > 255 ) {
+ yyerror("Tos number out of range");
+ return -1;
+ }
+
+ int ret = -1;
+ switch (direction) {
+ case DIR_UNSPEC:
+ case DIR_SRC:
+ ret = NewElement(EXgenericFlowID, OFFsrcTos, SIZEsrcTos, tos, comp, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_DST:
+ ret = NewElement(EXflowMiscID, OFFdstTos, SIZEdstTos, tos, comp, FUNC_NONE, NULLPtr);
+ break;
+ default:
+ yyerror("syntax error");
+ } // End of switch
+
+ return ret;
+} // End of AddTosNumber
+
+static int AddPackets(direction_t direction, uint16_t comp, uint64_t packets) {
+
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_UNSPEC:
+ case DIR_IN:
+ ret = NewElement(EXgenericFlowID, OFFinPackets, SIZEinPackets, packets, comp, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_OUT:
+ ret = NewElement(EXgenericFlowID, OFFoutPackets, SIZEoutPackets, packets, comp, FUNC_NONE, NULLPtr);
+ break;
+ default:
+ yyerror("Invalid direction for packets");
+ } // End of switch
+ return ret;
+} // End of AddPackets
+
+static int AddBytes(direction_t direction, uint16_t comp, uint64_t bytes) {
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_UNSPEC:
+ case DIR_IN:
+ ret = NewElement(EXgenericFlowID, OFFinBytes, SIZEinBytes, bytes, comp, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_OUT:
+ ret = NewElement(EXgenericFlowID, OFFoutBytes, SIZEoutBytes, bytes, comp, FUNC_NONE, NULLPtr);
+ break;
+ default:
+ yyerror("Invalid direction for bytes");
+ } // End of switch
+ return ret;
+} // End of AddBytes
+
+static int AddFwdStatNum(uint16_t comp, uint64_t num) {
+ if ( num > 255 ) {
+ yyerror("Forwarding status: %d our of range", num);
+ return -1;
+ }
+
+ return NewElement(EXgenericFlowID, OFFfwdStatus, SIZEfwdStatus, num, comp, FUNC_NONE, NULLPtr);
+} // End of AddFwdStatNum
+
+static int AddFwdStatString(char *string) {
+ int fwdStatus = fwdStatusNum(string);
+ if ( fwdStatus < 0 ) {
+ fwdStatusInfo();
+ yyerror("Unkown forwarding status: %s", string);
+ return -1;
+ }
+
+ return NewElement(EXgenericFlowID, OFFfwdStatus, SIZEfwdStatus, fwdStatus, CMP_EQ, FUNC_NONE, NULLPtr);
+} // End of AddFwdStatString
+
+static int AddMPLS(char *type, uint16_t comp, uint64_t value) {
+ if ( strncasecmp(type, "label", 5) == 0 ) {
+ char *s = type + 5;
+ if ( *s == '\0' ) {
+ yyerror("Missing mpls stack number for label");
+ return -1;
+ }
+ int lnum = (int)strtol(s, (char **)NULL, 10);
+ data_t labelIndex = { .dataVal = lnum};
+ return NewElement(EXmplsLabelID, 0, 0, value, comp, FUNC_MPLS_LABEL, labelIndex);
+ } else if ( strcasecmp(type, "any") == 0 ) {
+ data_t labelValue = { .dataVal = value};
+ return NewElement(EXmplsLabelID, 0, 0, value, comp, FUNC_MPLS_ANY, labelValue);
+ } else if ( strcasecmp(type, "eos") == 0 ) {
+ // match End of Stack label
+ return NewElement(EXmplsLabelID, 0, 0, value, comp, FUNC_MPLS_EOS, NULLPtr);
+ } else if ( strncasecmp(type, "exp", 3) == 0 ) {
+ char *s = type + 3;
+ if ( *s == '\0' ) {
+ yyerror("Missing mpls stack number for exp value");
+ return -1;
+ }
+ int lnum = (int)strtol(s, (char **)NULL, 10);
+ data_t data = {.dataVal = lnum};
+ return NewElement(EXmplsLabelID, 0, 0, value, comp, FUNC_MPLS_EXP, data);
+ } else {
+ yyerror("Unknown mpls argument: %s", type);
+ return -1;
+ }
+
+ // unreached
+ return -1;
+} // End of AddMPLS
+
+static int AddEthertype(uint64_t etherType) {
+ return NewElement(EXlayer2ID, OFFetherType, SIZEetherType, etherType, CMP_EQ, FUNC_NONE, NULLPtr);
+} // End of AddMAC
+
+static int AddMAC(direction_t direction, char *macString) {
+
+ uint64_t macVal = Str2Mac(macString);
+ if ( macVal == 0 ) return -1;
+
+ switch (direction) {
+ case DIR_IN_SRC:
+ return NewElement(EXmacAddrID, OFFinSrcMac, SIZEinSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_IN_DST:
+ return NewElement(EXmacAddrID, OFFinDstMac, SIZEinDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_OUT_SRC:
+ return NewElement(EXmacAddrID, OFFoutSrcMac, SIZEoutSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_OUT_DST:
+ return NewElement(EXmacAddrID, OFFoutDstMac, SIZEoutDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_SRC:
+ return Connect_OR (
+ NewElement(EXmacAddrID, OFFinSrcMac, SIZEinSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXmacAddrID, OFFoutSrcMac, SIZEoutSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ break;
+ case DIR_DST:
+ return Connect_OR (
+ NewElement(EXmacAddrID, OFFinDstMac, SIZEinDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXmacAddrID, OFFoutDstMac, SIZEoutDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ break;
+ case DIR_IN:
+ return Connect_OR (
+ NewElement(EXmacAddrID, OFFinSrcMac, SIZEinSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXmacAddrID, OFFinDstMac, SIZEinDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ break;
+ case DIR_OUT:
+ return Connect_OR (
+ NewElement(EXmacAddrID, OFFoutSrcMac, SIZEoutSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXmacAddrID, OFFoutDstMac, SIZEoutDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ break;
+ case DIR_UNSPEC: {
+ int in = Connect_OR (
+ NewElement(EXmacAddrID, OFFinSrcMac, SIZEinSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXmacAddrID, OFFinDstMac, SIZEinDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ int out = Connect_OR (
+ NewElement(EXmacAddrID, OFFoutSrcMac, SIZEoutSrcMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXmacAddrID, OFFoutDstMac, SIZEoutDstMac, macVal, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ return Connect_OR(in, out);
+ } break;
+ default:
+ yyerror("Unknown mac argument");
+ return -1;
+ }
+
+ // unreached
+ return -1;
+} // End of AddMAC
+
+static int AddLatency(char *type, uint16_t comp, uint64_t number) {
+
+ int ret = -1;
+ if ( strcasecmp(type, "client") == 0 ) {
+ ret = NewElement(EXlatencyID, OFFusecClientNwDelay, SIZEusecClientNwDelay, number, comp, FUNC_NONE, NULLPtr);
+ } if ( strcasecmp(type, "server") == 0 ) {
+ ret = NewElement(EXlatencyID, OFFusecServerNwDelay, SIZEusecServerNwDelay, number, comp, FUNC_NONE, NULLPtr);
+ } if ( strcasecmp(type, "app") == 0 ) {
+ ret = NewElement(EXlatencyID, OFFusecApplLatency, SIZEusecApplLatency, number, comp, FUNC_NONE, NULLPtr);
+ }
+
+ return ret;
+} // End of AddLatency
+
+static int AddASAString(char *event, char *asaStr) {
+
+ if (strcasecmp(event, "event") == 0) {
+ int eventNum = fwEventID(asaStr);
+ if ( eventNum < 0 ) {
+ yyerror("Invalid ASA event type: %s", asaStr);
+ return -1;
+ }
+ return NewElement(EXnselCommonID, OFFfwEvent, SIZEfwEvent, eventNum, CMP_EQ, FUNC_NONE, NULLPtr);
+ } else if (strcasecmp(event, "denied") == 0) {
+ int eventNum = fwXEventID(asaStr);
+ if ( eventNum < 0 ) {
+ yyerror("Invalid ASA Xevent type: %s", asaStr);
+ return -1;
+ }
+ return NewElement(EXnselCommonID, OFFfwXevent, SIZEfwXevent, eventNum, CMP_EQ, FUNC_NONE, NULLPtr);
+ } else if (strcasecmp(event, "user") == 0) {
+ if ( strlen(asaStr) > 65 ) {
+ yyerror("Length of ASA user name: %s > 65 chars", asaStr);
+ return -1;
+ }
+ data_t data = {.dataPtr = strdup(asaStr)};
+ return NewElement(EXnselUserID, OFFusername, 0, 0, CMP_STRING, FUNC_NONE, data);
+ }
+
+ yyerror("Invalid ASA type: %s", event);
+ return -1;
+
+} // End of AddASAString
+
+static int AddASA(char *event, uint16_t comp, uint64_t number) {
+
+ if ( strcasecmp(event, "event") == 0 ) {
+ if ( number > 5 ) {
+ yyerror("Invalid event number %llu. Expected 0..5", number);
+ return -1;
+ }
+ return NewElement(EXnselCommonID, OFFfwEvent, SIZEfwEvent, number, comp, FUNC_NONE, NULLPtr);
+ } else if ( strcasecmp(event, "xevent") == 0 ) {
+ return NewElement(EXnselCommonID, OFFfwXevent, SIZEfwXevent, number, comp, FUNC_NONE, NULLPtr);
+ }
+
+ yyerror("Invalid ASA type: %s", event);
+ return -1;
+
+} // End of AddASA
+
+static int AddACL(direction_t direction, uint16_t comp, uint64_t number) {
+
+ uint32_t offset = 0;
+ switch (direction) {
+ case DIR_INGRESS:
+ offset = OFFingressAcl;
+ break;
+ case DIR_EGRESS:
+ offset = OFFegressAcl;
+ break;
+ default:
+ yyerror("Invalid ACL direction");
+ return -1;
+ }
+
+ uint32_t acl[3];
+ acl[0] = NewElement(EXnselAclID, offset, sizeof(uint32_t), number, comp, FUNC_NONE, NULLPtr);
+ acl[1] = NewElement(EXnselAclID, offset + sizeof(uint32_t), sizeof(uint32_t), number, comp, FUNC_NONE, NULLPtr);
+ acl[2] = NewElement(EXnselAclID, offset + 2*sizeof(uint32_t), sizeof(uint32_t), number, comp, FUNC_NONE, NULLPtr);
+ return Connect_OR (
+ Connect_OR(acl[0], acl[1]), acl[2]
+ );
+ return -1;
+
+} // End of AddASA
+
+static int AddASApblock(direction_t direction, char *arg) {
+
+ if (strcasecmp(arg, "pblock") != 0) {
+ yyerror("Invalid port block: %s", arg);
+ return -1;
+ }
+
+ int ret = -1;
+ switch (direction) {
+ case DIR_SRC:
+ ret = NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, 1, CMP_EQ, FUNC_PBLOCK, NULLPtr);
+ break;
+ case DIR_DST:
+ ret = NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, 1, CMP_EQ, FUNC_PBLOCK, NULLPtr);
+ break;
+ case DIR_UNSPEC:
+ ret = Connect_OR(
+ NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, 1, CMP_EQ, FUNC_PBLOCK, NULLPtr),
+ NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, 1, CMP_EQ, FUNC_PBLOCK, NULLPtr)
+ );
+ break;
+ default:
+ yyerror("Invalid port direction");
+ }
+
+ return ret;
+} // End of AddASApblock
+
+static int AddNATString(char *event, char *natStr) {
+
+ if (strcasecmp(event, "event") == 0) {
+ int eventNum = natEventNum(natStr);
+ if ( eventNum < 0 ) {
+ yyerror("Invalid NAT event type: %s", natStr);
+ natEventInfo();
+ return -1;
+ }
+ return NewElement(EXnelCommonID, OFFnatEvent, SIZEnatEvent, eventNum, CMP_EQ, FUNC_NONE, NULLPtr);
+ }
+
+ yyerror("Invalid NAT type: %s", event);
+ return -1;
+
+} // End of AddNATString
+
+static int AddNAT(char *event, uint16_t comp, uint64_t number) {
+
+ if (strcasecmp(event, "event") == 0) {
+ if ( number > MAX_NAT_EVENTS ) {
+ yyerror("NAT event: %llu out of range\n", number);
+ return -1;
+ }
+ return NewElement(EXnelCommonID, OFFnatEvent, SIZEnatEvent, number, comp, FUNC_NONE, NULLPtr);
+ }
+
+ return -1;
+} // End of AddNAT
+
+static int AddNatPortBlocks(char *type, char *subtype, uint16_t comp, uint64_t number) {
+
+ uint32_t offset = 0;
+ if (strcasecmp(type, "pblock") == 0) {
+ if (strcasecmp(subtype, "start") == 0) {
+ offset = OFFnelblockStart;
+ } else if (strcasecmp(subtype, "end") == 0) {
+ offset = OFFnelblockEnd;
+ } else if (strcasecmp(subtype, "step") == 0) {
+ offset = OFFnelblockStep;
+ } else if (strcasecmp(subtype, "size") == 0) {
+ offset = OFFnelblockSize;
+ } else {
+ yyerror("Unknown port block argument: %s\n", subtype);
+ return -1;
+ }
+ } else {
+ yyerror("Unknown NAT argument: %s\n", type);
+ return -1;
+ }
+
+ return NewElement(EXnatPortBlockID, offset, SIZEnelblockStart, number, comp, FUNC_NONE, NULLPtr);
+ return -1;
+} // End of AddNatPortBlocks
+
+static int AddPayloadSSL(char *type, char *arg, char *opt) {
+ if (strcasecmp(arg, "defined") == 0) {
+ return NewElement(SSLindex, 0, 0, 0, CMP_EQ, FUNC_NONE, NULLPtr);
+ } else if (strcasecmp(arg, "version") == 0) {
+ if ( opt == NULL ){
+ yyerror("String %s is not a valid SSL/TLS version", arg);
+ return -1;
+ }
+ unsigned int major, minor;
+ if (sscanf(opt, "%1u.%1u", &major, &minor) != 2 || major > 3 || minor > 3 ) {
+ yyerror("String %s is not a valid SSL/TLS version", opt);
+ return -1;
+ }
+ // if old SSL 1.0, 2.0 or 3.0
+ if (major > 1 && minor > 0){
+ yyerror("String %s is not a valid SSL/TLS version", opt);
+ return -1;
+ }
+ uint16_t version = 0;
+ if ( strcasecmp(type, "tls") == 0 ) {
+ if (major > 1){
+ yyerror("String %s is not a valid TLS version", opt);
+ return -1;
+ }
+ // TLS
+ version = (0x03 << 8) | (minor + 1);
+ } else {
+ if (minor > 0){
+ yyerror("String %s is not a valid SSL version", opt);
+ return -1;
+ }
+ // SSL
+ version = major << 8;
+ }
+ return NewElement(SSLindex, OFFsslVersion, SIZEsslVersion, version, CMP_EQ, FUNC_NONE, NULLPtr);
+ } else if (strcasecmp(arg, "sni") == 0) {
+ if ( opt == NULL || strlen(opt) > 64 ) {
+ yyerror("Invalid string %s for SSL/TLS sni name", opt != NULL ? opt : "");
+ return -1;
+ }
+ data_t data = {.dataPtr=strdup(opt)};
+ return NewElement(SSLindex, OFFsslSNI, SIZEsslSNI, 0, CMP_SUBSTRING, FUNC_NONE, data);
+ }
+ yyerror("String %s is not a valid SSL/TLS filter", arg);
+ return -1;
+} // End of AddPayloadSSL
+
+static int AddPayloadJA3(char *type, char *arg, char *opt) {
+ if (strcasecmp(arg, "defined") == 0) {
+ return NewElement(JA3index, OFFja3String, SIZEja3String, 0, CMP_EQ, FUNC_NONE, NULLPtr);
+ } else if (IsMD5(arg) == 0) {
+ yyerror("String %s is not a valid ja3 string", arg);
+ return -1;
+ }
+ data_t data = {.dataPtr=strdup(arg)};
+ return NewElement(JA3index, OFFja3String, SIZEja3String, 0, CMP_STRING, FUNC_NONE, data);
+} // End of AddPayloadJA3
+
+static int AddPayloadJA4(char *type, char *arg, char *opt) {
+ if (strcasecmp(arg, "defined") == 0) {
+ return NewElement(JA4index, OFFja4String, SIZEja3String, 0, CMP_EQ, FUNC_NONE, NULLPtr);
+ } else if ( ja4Check(arg) == 0 ){
+ yyerror("String %s is not a valid ja4 string", arg);
+ return -1;
+ }
+ data_t data = {.dataPtr=strdup(arg)};
+ return NewElement(JA4index, OFFja4String, SIZEja4String, 0, CMP_STRING, FUNC_NONE, data);
+} // End of AddPayloadJA4
+
+static int AddPayload(char *type, char *arg, char *opt) {
+
+ if (strcasecmp(type, "content") == 0) {
+ data_t data = {.dataPtr = arg};
+ return NewElement(EXinPayloadID, 0, 0, 0, CMP_PAYLOAD, FUNC_NONE, data);
+ } else if (strcasecmp(type, "regex") == 0) {
+ int err[2];
+ char *regexArg = opt ? opt : "";
+ srx_Context *program = srx_CreateExt(arg, strlen(arg), regexArg, err, NULL, NULL);
+ if ( !program ) {
+ yyerror("failed to compile regex: %s", arg);
+ return -1;
+ }
+ data_t data = {.dataPtr = program};
+ return NewElement(EXinPayloadID, 0, 0, 0, CMP_REGEX, FUNC_NONE, data);
+ } else if (strcasecmp(type, "ssl") == 0 || strcasecmp(type, "tls") == 0) {
+ return AddPayloadSSL(type, arg, opt);
+ } else if (strcasecmp(type, "ja3") == 0) {
+ return AddPayloadJA3(type, arg, opt);
+ } else if (strcasecmp(type, "ja4") == 0) {
+ return AddPayloadJA4(type, arg, opt);
+ } else if (strcasecmp(type, "ja4s") == 0) {
+#ifdef BUILDJA4
+ if ( ja4sCheck(arg) == 0 ){
+ yyerror("String %s is not a valid ja4s string", arg);
+ return -1;
+ }
+ data_t data = {.dataPtr=strdup(arg)};
+ return NewElement(JA4index, OFFja4String, SIZEja4sString, 0, CMP_STRING, FUNC_NONE, data);
+#else
+ yyerror("ja4s code not enabled", arg);
+ return -1;
+#endif
+ } else {
+ yyerror("Unknown PAYLOAD argument: %s\n", type);
+ return -1;
+ }
+
+ return -1;
+} // End of AddPayload
+
+static int AddGeo(direction_t direction, char *geo) {
+
+ if ( strlen(geo) != 2 ) {
+ yyerror("Unknown Geo country: %s. Need a two letter country code.", geo);
+ return -1;
+ }
+
+ data_t data = {.dataVal = direction};
+ int ret = -1;
+ uint64_t geoVal = toupper(geo[0]) + (toupper(geo[1]) << 8);
+ switch (direction) {
+ case DIR_SRC:
+ ret = NewElement(EXlocal, OFFgeoSrcIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data);
+ break;
+ case DIR_DST:
+ ret = NewElement(EXlocal, OFFgeoDstIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data);
+ break;
+ case DIR_SRC_NAT:
+ ret = NewElement(EXlocal, OFFgeoSrcNatIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data);
+ break;
+ case DIR_DST_NAT:
+ ret = NewElement(EXlocal, OFFgeoDstNatIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data);
+ break;
+ case DIR_SRC_TUN:
+ ret = NewElement(EXlocal, OFFgeoSrcTunIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data);
+ break;
+ case DIR_DST_TUN:
+ ret = NewElement(EXlocal, OFFgeoDstTunIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, data);
+ break;
+ case DIR_UNSPEC: {
+ data_t srcData = {.dataVal = DIR_SRC};
+ data_t dstData = {.dataVal = DIR_DST};
+ ret = Connect_OR(
+ NewElement(EXlocal, OFFgeoSrcIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, srcData),
+ NewElement(EXlocal, OFFgeoDstIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, dstData)
+ );
+ } break;
+ case DIR_UNSPEC_NAT: {
+ data_t srcData = {.dataVal = DIR_SRC_NAT};
+ data_t dstData = {.dataVal = DIR_DST_NAT};
+ ret = Connect_OR(
+ NewElement(EXlocal, OFFgeoSrcNatIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, srcData),
+ NewElement(EXlocal, OFFgeoDstNatIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, dstData)
+ );
+ } break;
+ case DIR_UNSPEC_TUN: {
+ data_t srcData = {.dataVal = DIR_SRC_TUN};
+ data_t dstData = {.dataVal = DIR_DST_TUN};
+ ret = Connect_OR(
+ NewElement(EXlocal, OFFgeoSrcTunIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, srcData),
+ NewElement(EXlocal, OFFgeoDstTunIP, SizeGEOloc, geoVal, CMP_GEO, FUNC_NONE, dstData)
+ );
+ } break;
+ default:
+ yyerror("Unknown Geo specifier");
+ }
+
+ return ret;
+} // End of AddGeo
+
+static int AddObservation(char *type, char *subType, uint16_t comp, uint64_t number) {
+
+ if (strcasecmp(subType, "id") != 0) {
+ yyerror("Unknown observation specifier: %s", subType);
+ return -1;
+ }
+ int ret = -1;
+ if (strcasecmp(type, "domain") == 0) {
+ ret = NewElement(EXobservationID, OFFdomainID, SIZEdomainID, number, comp, FUNC_NONE, NULLPtr);
+ } else if (strcasecmp(type, "point") == 0) {
+ ret = NewElement(EXobservationID, OFFpointID, SIZEpointID, number, comp, FUNC_NONE, NULLPtr);
+ } else {
+ yyerror("Unknown observation specifier: %s", type);
+ }
+
+ return ret;
+} // End of AddObservation
+
+static int AddVRF(direction_t direction, uint16_t comp, uint64_t number) {
+
+ int ret = -1;
+ switch(direction) {
+ case DIR_INGRESS:
+ ret = NewElement(EXvrfID, OFFingressVrf, SIZEingressVrf, number, comp, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_EGRESS:
+ ret = NewElement(EXvrfID, OFFegressVrf, SIZEegressVrf, number, comp, FUNC_NONE, NULLPtr);
+ break;
+ default:
+ yyerror("Unknown vrf specifier");
+ }
+
+ return ret;
+} // End of AddVRF
+
+static int AddPFString(char *type, char *arg) {
+
+ int ret = -1;
+ if (strcasecmp(type, "action") == 0) {
+ int pfAction = pfActionNr(arg);
+ if ( pfAction < 0 ) {
+ yyerror("Invalid pf action: %s", arg);
+ printf("Possible pf action values: ");
+ pfListActions();
+ } else {
+ ret = NewElement(EXpfinfoID, OFFpfAction, SIZEpfAction, pfAction, CMP_EQ, FUNC_NONE, NULLPtr);
+ }
+ } else if (strcasecmp(type, "reason") == 0) {
+ int pfReason = pfReasonNr(arg);
+ if ( pfReason < 0 ) {
+ yyerror("Invalid pf reason: %s", arg);
+ printf("Possible pf reason values: ");
+ pfListReasons();
+ } else {
+ ret = NewElement(EXpfinfoID, OFFpfReason, SIZEpfReason, pfReason, CMP_EQ, FUNC_NONE, NULLPtr);
+ }
+ } else if (strcasecmp(type, "dir") == 0) {
+ int pfDir = strcasecmp(arg, "in") == 0 ? 1: 0;
+ ret = NewElement(EXpfinfoID, OFFpfDir, SIZEpfDir, pfDir, CMP_EQ, FUNC_NONE, NULLPtr);
+ } else if (strcasecmp(type, "interface") == 0) {
+ data_t data = {.dataPtr=strdup(arg)};
+ ret = NewElement(EXpfinfoID, OFFpfIfName, SIZEpfIfName, 0, CMP_STRING, FUNC_NONE, data);
+ } else {
+ yyerror("Invalid pf argument: %s", type);
+ }
+ return ret;
+} // End of AddPFString
+
+static int AddPFNumber(char *type, uint16_t comp, uint64_t number) {
+
+ int ret = -1;
+ if (strcasecmp(type, "rule") == 0) {
+ ret = NewElement(EXpfinfoID, OFFpfRuleNr, SIZEpfRuleNr, number, comp, FUNC_NONE, NULLPtr);
+ } else {
+ yyerror("Invalid pf argument: %s", type);
+ }
+
+ return ret;
+} // End of AddPFNumber
+
+static int AddIP(direction_t direction, char *IPstr) {
+
+ int lookupMode = STRICT_IP;
+ switch ( direction ) {
+ case DIR_SRC:
+ case DIR_DST:
+ case DIR_UNSPEC:
+ lookupMode = ALLOW_LOOKUP;
+ break;
+ default:
+ lookupMode = STRICT_IP;
+ } // End of switch
+
+ int numIP = parseIP(IPstr, ipStack, lookupMode);
+ if ( numIP <= 0) {
+ yyerror("Can not parse/lookup %s to an IP address", IPstr);
+ return -1;
+ }
+
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_SRC:
+ case DIR_DST:
+ case DIR_SRC_NAT:
+ case DIR_DST_NAT:
+ case DIR_SRC_TUN:
+ case DIR_DST_TUN:
+ case DIR_NEXT:
+ case BGP_NEXT:
+ case SRC_ROUTER:
+ ret = ChainHosts(ipStack, numIP, direction);
+ break;
+ case DIR_UNSPEC: {
+ uint32_t src = ChainHosts(ipStack, numIP, DIR_SRC);
+ uint32_t dst = ChainHosts(ipStack, numIP, DIR_DST);
+ ret = Connect_OR(src, dst);
+ } break;
+ case DIR_UNSPEC_NAT: {
+ uint32_t src = ChainHosts(ipStack, numIP, DIR_SRC_NAT);
+ uint32_t dst = ChainHosts(ipStack, numIP, DIR_DST_NAT);
+ ret = Connect_OR(src, dst);
+ } break;
+ case DIR_UNSPEC_TUN: {
+ uint32_t src = ChainHosts(ipStack, numIP, DIR_SRC_TUN);
+ uint32_t dst = ChainHosts(ipStack, numIP, DIR_DST_TUN);
+ ret = Connect_OR(src, dst);
+ } break;
+ default:
+ yyerror("Unknown direction for IP address");
+ } // End of switch
+
+ return ret;
+} // End of AddIP
+
+static int AddNet(direction_t direction, char *IPstr, char *maskStr) {
+
+ int numIP = parseIP(IPstr, ipStack, STRICT_IP);
+ if (numIP <= 0) {
+ yyerror("Can not parse/lookup %s to an IP address", IPstr);
+ return -1;
+ }
+
+ ipStack_t mask;
+ numIP = parseIP(maskStr, &mask, STRICT_IP);
+ if (numIP <= 0) {
+ yyerror("Can not parse %s as IP mask", maskStr);
+ return -1;
+ }
+
+ if (ipStack[0].af != PF_INET || mask.af != PF_INET) {
+ yyerror("Net address %s and netmask: %s must be IPv4", IPstr, maskStr);
+ return -1;
+ }
+
+ data_t data = {.dataVal = mask.ipaddr[1]};
+
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_SRC:
+ case DIR_DST:
+ case DIR_SRC_NAT:
+ case DIR_DST_NAT:
+ case DIR_SRC_TUN:
+ case DIR_DST_TUN:
+ case DIR_NEXT:
+ case BGP_NEXT:
+ case SRC_ROUTER:
+ ret = NewIPElement(&ipStack[0], direction, CMP_NET, &data);
+ break;
+ case DIR_UNSPEC: {
+ uint32_t src = NewIPElement(&ipStack[0], DIR_SRC, CMP_NET, &data);
+ uint32_t dst = NewIPElement(&ipStack[0], DIR_DST, CMP_NET, &data);
+ ret = Connect_OR(src, dst);
+ } break;
+ case DIR_UNSPEC_NAT: {
+ uint32_t src = NewIPElement(&ipStack[0], DIR_SRC_NAT, CMP_NET, &data);
+ uint32_t dst = NewIPElement(&ipStack[0], DIR_DST_NAT, CMP_NET, &data);
+ ret = Connect_OR(src, dst);
+ } break;
+ case DIR_UNSPEC_TUN: {
+ uint32_t src = NewIPElement(&ipStack[0], DIR_SRC_TUN, CMP_NET, &data);
+ uint32_t dst = NewIPElement(&ipStack[0], DIR_DST_TUN, CMP_NET, &data);
+ ret = Connect_OR(src, dst);
+ } break;
+ default:
+ yyerror("Unknown direction for IP address");
+ } // End of switch
+
+ return ret;
+} // End of AddNet
+
+static int AddNetPrefix(direction_t direction, char *IPstr, uint64_t prefix) {
+ int numIP = parseIP(IPstr, ipStack, STRICT_IP);
+ if (numIP <= 0) {
+ yyerror("Can not parse/lookup %s to an IP address", IPstr);
+ return -1;
+ }
+
+ data_t data[2];
+ if (ipStack[0].af == PF_INET) {
+ // IPv4
+ if (prefix >32 ) {
+ yyerror("Prefix %llu out of range for IPv4 address", prefix);
+ return -1;
+ }
+ data[0].dataVal = 0xffffffffffffffffLL << (32 - prefix);
+ } else {
+ // IPv6
+ if (prefix >128 ) {
+ yyerror("Prefix %llu out of range for IPv6 address", prefix);
+ return -1;
+ }
+ if ( prefix > 64 ) {
+ data[0].dataVal = 0xffffffffffffffffLL;
+ data[1].dataVal = 0xffffffffffffffffLL << (128 - prefix);
+ } else {
+ data[0].dataVal = 0xffffffffffffffffLL << (64 - prefix);
+ data[1].dataVal = 0;
+ }
+ }
+
+ int ret = -1;
+ switch (direction) {
+ case DIR_SRC:
+ case DIR_DST:
+ case DIR_SRC_NAT:
+ case DIR_DST_NAT:
+ case DIR_SRC_TUN:
+ case DIR_DST_TUN:
+ case DIR_NEXT:
+ case BGP_NEXT:
+ case SRC_ROUTER:
+ ret = NewIPElement(&ipStack[0], direction, CMP_NET, data);
+ break;
+ case DIR_UNSPEC: {
+ uint32_t src = NewIPElement(&ipStack[0], DIR_SRC, CMP_NET, data);
+ uint32_t dst = NewIPElement(&ipStack[0], DIR_DST, CMP_NET, data);
+ ret = Connect_OR(src, dst);
+ } break;
+ case DIR_UNSPEC_NAT: {
+ uint32_t src = NewIPElement(&ipStack[0], DIR_SRC_NAT, CMP_NET, data);
+ uint32_t dst = NewIPElement(&ipStack[0], DIR_DST_NAT, CMP_NET, data);
+ ret = Connect_OR(src, dst);
+ } break;
+ case DIR_UNSPEC_TUN: {
+ uint32_t src = NewIPElement(&ipStack[0], DIR_SRC_TUN, CMP_NET, data);
+ uint32_t dst = NewIPElement(&ipStack[0], DIR_DST_TUN, CMP_NET, data);
+ ret = Connect_OR(src, dst);
+ } break;
+ default:
+ yyerror("Unknown direction for IP address");
+ } // End of switch
+
+ return ret;
+} // End of AddNetPrefix
+
+static int AddIPlist(direction_t direction, void *IPlist) {
+ int ret = -1;
+ data_t IPlistData = {IPlist};
+ switch ( direction ) {
+ case DIR_SRC:
+ ret = Connect_OR(
+ NewElement(EXipv4FlowID, OFFsrc4Addr, SIZEsrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXipv6FlowID, OFFsrc6Addr, SIZEsrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ break;
+ case DIR_DST:
+ ret = Connect_OR(
+ NewElement(EXipv4FlowID, OFFdst4Addr, SIZEdst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXipv6FlowID, OFFdst6Addr, SIZEdst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ break;
+ case DIR_SRC_NAT:
+ ret = Connect_OR(
+ NewElement(EXnatXlateIPv4ID, OFFxlateSrc4Addr, SIZExlateSrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXnatXlateIPv6ID, OFFxlateSrc6Addr, SIZExlateSrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ break;
+ case DIR_DST_NAT:
+ ret = Connect_OR(
+ NewElement(EXnatXlateIPv4ID, OFFxlateDst4Addr, SIZExlateDst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXnatXlateIPv6ID, OFFxlateDst6Addr, SIZExlateDst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ break;
+ case DIR_SRC_TUN:
+ ret = Connect_OR(
+ NewElement(EXtunIPv4ID, OFFtunSrc4Addr, SIZEtunSrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXtunIPv6ID, OFFtunSrc6Addr, SIZEtunSrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ break;
+ case DIR_DST_TUN:
+ ret = Connect_OR(
+ NewElement(EXtunIPv4ID, OFFtunDst4Addr, SIZEtunDst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXtunIPv6ID, OFFtunDst6Addr, SIZEtunDst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ break;
+ case DIR_NEXT:
+ ret = Connect_OR(
+ NewElement(EXipNextHopV4ID, OFFNextHopV4IP, SIZENextHopV4IP, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXipNextHopV6ID, OFFNextHopV6IP, SIZENextHopV6IP, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ break;
+ case DIR_UNSPEC: {
+ int v4 = Connect_OR(
+ NewElement(EXipv4FlowID, OFFsrc4Addr, SIZEsrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXipv4FlowID, OFFdst4Addr, SIZEdst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ int v6 = Connect_OR(
+ NewElement(EXipv6FlowID, OFFsrc6Addr, SIZEsrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXipv6FlowID, OFFdst6Addr, SIZEdst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ ret = Connect_OR(v4, v6);
+ } break;
+ case DIR_UNSPEC_NAT: {
+ int v4 = Connect_OR(
+ NewElement(EXnatXlateIPv4ID, OFFxlateSrc4Addr, SIZExlateSrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXnatXlateIPv4ID, OFFxlateDst4Addr, SIZExlateDst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ int v6 = Connect_OR(
+ NewElement(EXnatXlateIPv6ID, OFFxlateSrc6Addr, SIZExlateSrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXnatXlateIPv6ID, OFFxlateDst6Addr, SIZExlateDst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ ret = Connect_OR(v4, v6);
+ } break;
+ case DIR_UNSPEC_TUN: {
+ int v4 = Connect_OR(
+ NewElement(EXtunIPv4ID, OFFtunSrc4Addr, SIZEtunSrc4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXtunIPv4ID, OFFtunDst4Addr, SIZEtunDst4Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ int v6 = Connect_OR(
+ NewElement(EXtunIPv6ID, OFFtunSrc6Addr, SIZEtunSrc6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData),
+ NewElement(EXtunIPv6ID, OFFtunDst6Addr, SIZEtunDst6Addr, 0, CMP_IPLIST, FUNC_NONE, IPlistData)
+ );
+ ret = Connect_OR(v4, v6);
+ } break;
+ default:
+ yyerror("Unknown direction for IP list");
+ }
+
+ return ret;
+} // AddIPlist
+
+static struct IPListNode *mkNode(ipStack_t ipStack, int64_t prefix) {
+
+ struct IPListNode *node = malloc(sizeof(struct IPListNode));
+ if (node == NULL) {
+ yyerror("malloc() error in %s line %d: %s", __FILE__, __LINE__, strerror(errno));
+ return NULL;
+ }
+
+ node->ip[0] = ipStack.ipaddr[0];
+ node->ip[1] = ipStack.ipaddr[1];
+ node->mask[0] = 0xffffffffffffffffLL;
+ node->mask[1] = 0xffffffffffffffffLL;
+
+ if ( prefix > 0 ) {
+ if (ipStack.af == PF_INET) {
+ // IPv4
+ if (prefix >32 ) {
+ yyerror("Prefix %llu out of range for IPv4 address", prefix);
+ return NULL;
+ }
+ node->mask[0] = 0;
+ node->mask[1] = 0xffffffffffffffffLL << (32 - prefix);
+ } else {
+ // IPv6
+ if (prefix >128 ) {
+ yyerror("Prefix %llu out of range for IPv6 address", prefix);
+ return NULL;
+ }
+ if ( prefix > 64 ) {
+ node->mask[0] = 0xffffffffffffffffLL;
+ node->mask[1] = 0xffffffffffffffffLL << (128 - prefix);
+ } else {
+ node->mask[0] = 0xffffffffffffffffLL << (64 - prefix);
+ node->mask[1] = 0;
+ }
+ }
+ }
+ return node;
+}
+
+static void *NewIplist(char *IPstr, int prefix) {
+ IPlist_t *root = malloc(sizeof(IPlist_t));
+ if (root == NULL) {
+ yyerror("malloc() error in %s line %d: %s", __FILE__, __LINE__, strerror(errno));
+ return NULL;
+ }
+ RB_INIT(root);
+
+ int numIP = parseIP(IPstr, ipStack, ALLOW_LOOKUP);
+ if ( numIP <= 0 ) {
+ yyerror("Can not parse/resolve %s to an IP address", IPstr);
+ free(root);
+ return NULL;
+ }
+
+ for (int i=0; ivalue = num;
+ RB_INSERT(U64tree, root, node);
+
+ return root;
+} // End of NewU64list
+
+static int InsertU64list(void *U64list, uint64_t num) {
+
+ struct U64ListNode *node;
+ if ((node = malloc(sizeof(struct U64ListNode))) == NULL) {
+ yyerror("malloc() error in %s line %d: %s", __FILE__, __LINE__, strerror(errno));
+ return 0;
+ }
+ node->value = num;
+ RB_INSERT(U64tree, U64list, node);
+
+ return 1;
+} // End of InsertU64list
+
+static int AddPortList(direction_t direction, void *U64List) {
+
+ // check, that each element is a valid port number
+ struct U64ListNode *node;
+ RB_FOREACH(node, U64tree, (U64List_t *)U64List) {
+ if ( node->value > 65535 ) {
+ yyerror("Port: %llu outside of range 0..65535", node->value);
+ return -1;
+ }
+ }
+
+ data_t U64ListPtr = {U64List};
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_SRC:
+ ret = NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr);
+ break;
+ case DIR_DST:
+ ret = NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr);
+ break;
+ case DIR_UNSPEC:
+ ret = Connect_OR(
+ NewElement(EXgenericFlowID, OFFsrcPort, SIZEsrcPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr),
+ NewElement(EXgenericFlowID, OFFdstPort, SIZEdstPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr)
+ );
+ break;
+ case DIR_SRC_NAT:
+ ret = NewElement(EXnatXlatePortID, OFFxlateSrcPort, SIZExlateSrcPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr);
+ break;
+ case DIR_DST_NAT:
+ ret = NewElement(EXnatXlatePortID, OFFxlateDstPort, SIZExlateDstPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr);
+ break;
+ case DIR_UNSPEC_NAT:
+ ret = Connect_OR(
+ NewElement(EXnatXlatePortID, OFFxlateSrcPort, SIZExlateSrcPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr),
+ NewElement(EXnatXlatePortID, OFFxlateDstPort, SIZExlateDstPort, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr )
+ );
+ break;
+ default:
+ yyerror("Unknown direction");
+ } // End switch
+
+ return ret;
+} // AddPortList
+
+static int AddASList(direction_t direction, void *U64List) {
+
+ // check, that each element is a valid AS number
+ struct U64ListNode *node;
+ RB_FOREACH(node, U64tree, (U64List_t *)U64List) {
+ if ( node->value > 0xFFFFFFFFLL ) {
+ yyerror("AS: %llu outside of range 32bit", node->value);
+ return -1;
+ }
+ }
+
+ data_t U64ListPtr = {U64List};
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_SRC:
+ ret = NewElement(EXasRoutingID, OFFsrcAS, SIZEsrcAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr);
+ break;
+ case DIR_DST:
+ ret = NewElement(EXasRoutingID, OFFdstAS, SIZEdstAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr);
+ break;
+ case DIR_UNSPEC:
+ ret = Connect_OR(
+ NewElement(EXasRoutingID, OFFsrcAS, SIZEsrcAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr),
+ NewElement(EXasRoutingID, OFFdstAS, SIZEdstAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr)
+ );
+ break;
+ case DIR_NEXT:
+ ret = NewElement(EXasAdjacentID, OFFnextAdjacentAS, SIZEnextAdjacentAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr);
+ break;
+ case DIR_PREV:
+ ret = NewElement(EXasAdjacentID, OFFprevAdjacentAS, SIZEprevAdjacentAS, 0, CMP_U64LIST, FUNC_NONE, U64ListPtr);
+ break;
+ default:
+ yyerror("Unknown direction");
+ } // End of switch
+
+ return ret;
+} // AddASList
+
+static int AddInterfaceNumber(direction_t direction, uint64_t num) {
+ if ( num > 0xffffffffLL ) {
+ yyerror("Interface number out of range 0..2^32");
+ return -1;
+ }
+
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_UNSPEC:
+ ret = Connect_OR(
+ NewElement(EXflowMiscID, OFFinput, SIZEinput, num, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXflowMiscID, OFFoutput, SIZEoutput, num, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ break;
+ case DIR_IN:
+ ret = NewElement(EXflowMiscID, OFFinput, SIZEinput, num, CMP_EQ, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_OUT:
+ ret = NewElement(EXflowMiscID, OFFoutput, SIZEoutput, num, CMP_EQ, FUNC_NONE, NULLPtr);
+ break;
+ default:
+ yyerror("Unknown interface direction");
+ } // End of switch
+
+ return ret;
+} // End of AddInterfaceNumber
+
+static int AddVlanNumber(direction_t direction, uint64_t num) {
+ if ( num > 0xffffffffLL ) {
+ yyerror("Vlan number out of range 32bit");
+ return -1;
+ }
+
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_UNSPEC: {
+ int src = Connect_OR(
+ NewElement(EXvLanID, OFFsrcVlan, SIZEsrcVlan, num, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXlayer2ID, OFFvlanID, SIZEvlanID, num, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ int dst = Connect_OR(
+ NewElement(EXvLanID, OFFdstVlan, SIZEdstVlan, num, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXlayer2ID, OFFpostVlanID, SIZEpostVlanID, num, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ ret = Connect_OR(src,dst);
+ } break;
+ case DIR_SRC:
+ ret = Connect_OR(
+ NewElement(EXvLanID, OFFsrcVlan, SIZEsrcVlan, num, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXlayer2ID, OFFvlanID, SIZEvlanID, num, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ break;
+ case DIR_DST:
+ ret = Connect_OR(
+ NewElement(EXvLanID, OFFdstVlan, SIZEdstVlan, num, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXlayer2ID, OFFpostVlanID, SIZEpostVlanID, num, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ break;
+ default:
+ yyerror("Unknown vlan direction");
+ } // End of switch
+
+ return ret;
+} // End of AddVlanNumber
+
+static int AddAsNumber(direction_t direction, uint16_t comp, uint64_t as) {
+ if (as > UINT32_MAX ) {
+ yyerror("AS number of range");
+ return -1;
+ }
+
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_SRC:
+ ret = NewElement(EXasRoutingID, OFFsrcAS, SIZEsrcAS, as, comp, FUNC_MMAS_LOOKUP, (data_t){.dataVal = OFFsrcAS});
+ break;
+ case DIR_DST:
+ ret = NewElement(EXasRoutingID, OFFdstAS, SIZEdstAS, as, comp, FUNC_MMAS_LOOKUP , (data_t){.dataVal = OFFdstAS});
+ break;
+ case DIR_UNSPEC:
+ ret = Connect_OR(
+ NewElement(EXasRoutingID, OFFsrcAS, SIZEsrcAS, as, comp, FUNC_MMAS_LOOKUP, (data_t){.dataVal = OFFsrcAS}),
+ NewElement(EXasRoutingID, OFFdstAS, SIZEdstAS, as, comp, FUNC_MMAS_LOOKUP ,(data_t){.dataVal = OFFdstAS} )
+ );
+ break;
+ case DIR_NEXT:
+ ret = NewElement(EXasAdjacentID, OFFnextAdjacentAS, SIZEnextAdjacentAS, as, comp, FUNC_MMAS_LOOKUP, NULLPtr);
+ break;
+ case DIR_PREV:
+ ret = NewElement(EXasAdjacentID, OFFprevAdjacentAS, SIZEprevAdjacentAS, as, comp, FUNC_MMAS_LOOKUP, NULLPtr);
+ break;
+ default:
+ yyerror("Unknown direction");
+ } // End of switch
+
+ return ret;
+} // End of AddAsNumber
+
+static int AddMaskNumber(direction_t direction, uint64_t num) {
+ if ( num > 255 ) {
+ yyerror("Mas %d out of range 0..255", num);
+ return -1;
+ }
+
+ int ret = -1;
+ switch ( direction ) {
+ case DIR_UNSPEC:
+ ret = Connect_OR(
+ NewElement(EXflowMiscID, OFFsrcMask, SIZEsrcMask, num, CMP_EQ, FUNC_NONE, NULLPtr),
+ NewElement(EXflowMiscID, OFFdstMask, SIZEdstMask, num, CMP_EQ, FUNC_NONE, NULLPtr)
+ );
+ break;
+ case DIR_SRC:
+ ret = NewElement(EXflowMiscID, OFFsrcMask, SIZEsrcMask, num, CMP_EQ, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_DST:
+ ret = NewElement(EXflowMiscID, OFFdstMask, SIZEdstMask, num, CMP_EQ, FUNC_NONE, NULLPtr);
+ break;
+ default:
+ yyerror("Invalid direction for mask");
+ } // End of switch
+
+ return ret;
+} // End of AddMaskNumber
+
+static int AddFlowDir(direction_t direction, int64_t dirNum) {
+
+ int ret = -1;
+ switch (direction) {
+ case DIR_INGRESS:
+ ret = NewElement(EXflowMiscID, OFFdir, SIZEdir, 0, CMP_EQ, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_EGRESS:
+ ret = NewElement(EXflowMiscID, OFFdir, SIZEdir, 1, CMP_EQ, FUNC_NONE, NULLPtr);
+ break;
+ case DIR_UNSPEC:
+ if (dirNum != 0 && dirNum != 1) {
+ yyerror("Unknown flowdir: %d", dirNum);
+ } else {
+ ret = NewElement(EXflowMiscID, OFFdir, SIZEdir, dirNum, CMP_EQ, FUNC_NONE, NULLPtr);
+ }
+ break;
+ default:
+ yyerror("Unknown flowdir");
+ }
+
+ return ret;
+} // End of AddFlowDirString
+
diff --git a/src/libnfdump/filter/grammar.h b/src/libnfdump/filter/grammar.h
new file mode 100644
index 00000000..2e86bfd8
--- /dev/null
+++ b/src/libnfdump/filter/grammar.h
@@ -0,0 +1,199 @@
+/* A Bison parser, made by GNU Bison 2.3. */
+
+/* Skeleton interface for Bison's Yacc-like parsers in C
+
+ Copyright (C) 1984, 1989, 1990, 2000, 2001, 2002, 2003, 2004, 2005, 2006
+ Free Software Foundation, Inc.
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 2, or (at your option)
+ any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program; if not, write to the Free Software
+ Foundation, Inc., 51 Franklin Street, Fifth Floor,
+ Boston, MA 02110-1301, USA. */
+
+/* As a special exception, you may create a larger work that contains
+ part or all of the Bison parser skeleton and distribute that work
+ under terms of your choice, so long as that work isn't itself a
+ parser generator using the skeleton or a modified version thereof
+ as a parser skeleton. Alternatively, if you modify or redistribute
+ the parser skeleton itself, you may (at your option) remove this
+ special exception, which will cause the skeleton and the resulting
+ Bison output files to be licensed under the GNU General Public
+ License without this special exception.
+
+ This special exception was added by the Free Software Foundation in
+ version 2.2 of Bison. */
+
+/* Tokens. */
+#ifndef YYTOKENTYPE
+# define YYTOKENTYPE
+ /* Put the tokens into the symbol table, so that GDB and other debuggers
+ know about them. */
+ enum yytokentype {
+ EQ = 258,
+ LT = 259,
+ GT = 260,
+ LE = 261,
+ GE = 262,
+ ANY = 263,
+ NOT = 264,
+ IDENT = 265,
+ COUNT = 266,
+ IP = 267,
+ IPV4 = 268,
+ IPV6 = 269,
+ NET = 270,
+ SRC = 271,
+ DST = 272,
+ IN = 273,
+ OUT = 274,
+ PREV = 275,
+ NEXT = 276,
+ BGP = 277,
+ ROUTER = 278,
+ INGRESS = 279,
+ EGRESS = 280,
+ NAT = 281,
+ XLATE = 282,
+ TUN = 283,
+ ENGINE = 284,
+ ENGINETYPE = 285,
+ ENGINEID = 286,
+ EXPORTER = 287,
+ DURATION = 288,
+ PPS = 289,
+ BPS = 290,
+ BPP = 291,
+ FLAGS = 292,
+ PROTO = 293,
+ PORT = 294,
+ AS = 295,
+ IF = 296,
+ VLAN = 297,
+ MPLS = 298,
+ MAC = 299,
+ ICMP = 300,
+ ICMPTYPE = 301,
+ ICMPCODE = 302,
+ PACKETS = 303,
+ BYTES = 304,
+ FLOWS = 305,
+ ETHERTYPE = 306,
+ MASK = 307,
+ FLOWDIR = 308,
+ TOS = 309,
+ FWDSTAT = 310,
+ LATENCY = 311,
+ ASA = 312,
+ ACL = 313,
+ PAYLOAD = 314,
+ GEO = 315,
+ VRF = 316,
+ OBSERVATION = 317,
+ PF = 318,
+ STRING = 319,
+ NUMBER = 320,
+ OR = 321,
+ AND = 322,
+ NEGATE = 323
+ };
+#endif
+/* Tokens. */
+#define EQ 258
+#define LT 259
+#define GT 260
+#define LE 261
+#define GE 262
+#define ANY 263
+#define NOT 264
+#define IDENT 265
+#define COUNT 266
+#define IP 267
+#define IPV4 268
+#define IPV6 269
+#define NET 270
+#define SRC 271
+#define DST 272
+#define IN 273
+#define OUT 274
+#define PREV 275
+#define NEXT 276
+#define BGP 277
+#define ROUTER 278
+#define INGRESS 279
+#define EGRESS 280
+#define NAT 281
+#define XLATE 282
+#define TUN 283
+#define ENGINE 284
+#define ENGINETYPE 285
+#define ENGINEID 286
+#define EXPORTER 287
+#define DURATION 288
+#define PPS 289
+#define BPS 290
+#define BPP 291
+#define FLAGS 292
+#define PROTO 293
+#define PORT 294
+#define AS 295
+#define IF 296
+#define VLAN 297
+#define MPLS 298
+#define MAC 299
+#define ICMP 300
+#define ICMPTYPE 301
+#define ICMPCODE 302
+#define PACKETS 303
+#define BYTES 304
+#define FLOWS 305
+#define ETHERTYPE 306
+#define MASK 307
+#define FLOWDIR 308
+#define TOS 309
+#define FWDSTAT 310
+#define LATENCY 311
+#define ASA 312
+#define ACL 313
+#define PAYLOAD 314
+#define GEO 315
+#define VRF 316
+#define OBSERVATION 317
+#define PF 318
+#define STRING 319
+#define NUMBER 320
+#define OR 321
+#define AND 322
+#define NEGATE 323
+
+
+
+
+#if ! defined YYSTYPE && ! defined YYSTYPE_IS_DECLARED
+typedef union YYSTYPE
+#line 166 "filter/grammar.y"
+{
+ uint64_t value;
+ char *s;
+ FilterParam_t param;
+ void *list;
+}
+/* Line 1529 of yacc.c. */
+#line 192 "filter/grammar.h"
+ YYSTYPE;
+# define yystype YYSTYPE /* obsolescent; will be withdrawn */
+# define YYSTYPE_IS_DECLARED 1
+# define YYSTYPE_IS_TRIVIAL 1
+#endif
+
+extern YYSTYPE yylval;
+
diff --git a/src/libnfdump/filter/scanner.c b/src/libnfdump/filter/scanner.c
new file mode 100644
index 00000000..8f251f06
--- /dev/null
+++ b/src/libnfdump/filter/scanner.c
@@ -0,0 +1,2553 @@
+
+#line 2 "filter/scanner.c"
+
+#define YY_INT_ALIGNED short int
+
+/* A lexical scanner generated by flex */
+
+#define FLEX_SCANNER
+#define YY_FLEX_MAJOR_VERSION 2
+#define YY_FLEX_MINOR_VERSION 6
+#define YY_FLEX_SUBMINOR_VERSION 4
+#if YY_FLEX_SUBMINOR_VERSION > 0
+#define FLEX_BETA
+#endif
+
+/* First, we deal with platform-specific or compiler-specific issues. */
+
+/* begin standard C headers. */
+#include
+#include
+#include
+#include
+
+/* end standard C headers. */
+
+/* flex integer type definitions */
+
+#ifndef FLEXINT_H
+#define FLEXINT_H
+
+/* C99 systems have . Non-C99 systems may or may not. */
+
+#if defined (__STDC_VERSION__) && __STDC_VERSION__ >= 199901L
+
+/* C99 says to define __STDC_LIMIT_MACROS before including stdint.h,
+ * if you want the limit (max/min) macros for int types.
+ */
+#ifndef __STDC_LIMIT_MACROS
+#define __STDC_LIMIT_MACROS 1
+#endif
+
+#include
+typedef int8_t flex_int8_t;
+typedef uint8_t flex_uint8_t;
+typedef int16_t flex_int16_t;
+typedef uint16_t flex_uint16_t;
+typedef int32_t flex_int32_t;
+typedef uint32_t flex_uint32_t;
+typedef uint64_t flex_uint64_t;
+#else
+typedef signed char flex_int8_t;
+typedef short int flex_int16_t;
+typedef int flex_int32_t;
+typedef unsigned char flex_uint8_t;
+typedef unsigned short int flex_uint16_t;
+typedef unsigned int flex_uint32_t;
+
+/* Limits of integral types. */
+#ifndef INT8_MIN
+#define INT8_MIN (-128)
+#endif
+#ifndef INT16_MIN
+#define INT16_MIN (-32767-1)
+#endif
+#ifndef INT32_MIN
+#define INT32_MIN (-2147483647-1)
+#endif
+#ifndef INT8_MAX
+#define INT8_MAX (127)
+#endif
+#ifndef INT16_MAX
+#define INT16_MAX (32767)
+#endif
+#ifndef INT32_MAX
+#define INT32_MAX (2147483647)
+#endif
+#ifndef UINT8_MAX
+#define UINT8_MAX (255U)
+#endif
+#ifndef UINT16_MAX
+#define UINT16_MAX (65535U)
+#endif
+#ifndef UINT32_MAX
+#define UINT32_MAX (4294967295U)
+#endif
+
+#ifndef SIZE_MAX
+#define SIZE_MAX (~(size_t)0)
+#endif
+
+#endif /* ! C99 */
+
+#endif /* ! FLEXINT_H */
+
+/* begin standard C++ headers. */
+
+/* TODO: this is always defined, so inline it */
+#define yyconst const
+
+#if defined(__GNUC__) && __GNUC__ >= 3
+#define yynoreturn __attribute__((__noreturn__))
+#else
+#define yynoreturn
+#endif
+
+/* Returned upon end-of-file. */
+#define YY_NULL 0
+
+/* Promotes a possibly negative, possibly signed char to an
+ * integer in range [0..255] for use as an array index.
+ */
+#define YY_SC_TO_UI(c) ((YY_CHAR) (c))
+
+/* Enter a start condition. This macro really ought to take a parameter,
+ * but we do it the disgusting crufty way forced on us by the ()-less
+ * definition of BEGIN.
+ */
+#define BEGIN (yy_start) = 1 + 2 *
+/* Translate the current start state into a value that can be later handed
+ * to BEGIN to return to the state. The YYSTATE alias is for lex
+ * compatibility.
+ */
+#define YY_START (((yy_start) - 1) / 2)
+#define YYSTATE YY_START
+/* Action number for EOF rule of a given start state. */
+#define YY_STATE_EOF(state) (YY_END_OF_BUFFER + state + 1)
+/* Special action meaning "start processing a new file". */
+#define YY_NEW_FILE yyrestart( yyin )
+#define YY_END_OF_BUFFER_CHAR 0
+
+/* Size of default input buffer. */
+#ifndef YY_BUF_SIZE
+#ifdef __ia64__
+/* On IA-64, the buffer size is 16k, not 8k.
+ * Moreover, YY_BUF_SIZE is 2*YY_READ_BUF_SIZE in the general case.
+ * Ditto for the __ia64__ case accordingly.
+ */
+#define YY_BUF_SIZE 32768
+#else
+#define YY_BUF_SIZE 16384
+#endif /* __ia64__ */
+#endif
+
+/* The state buf must be large enough to hold one state per character in the main buffer.
+ */
+#define YY_STATE_BUF_SIZE ((YY_BUF_SIZE + 2) * sizeof(yy_state_type))
+
+#ifndef YY_TYPEDEF_YY_BUFFER_STATE
+#define YY_TYPEDEF_YY_BUFFER_STATE
+typedef struct yy_buffer_state *YY_BUFFER_STATE;
+#endif
+
+#ifndef YY_TYPEDEF_YY_SIZE_T
+#define YY_TYPEDEF_YY_SIZE_T
+typedef size_t yy_size_t;
+#endif
+
+extern yy_size_t yyleng;
+
+extern FILE *yyin, *yyout;
+
+#define EOB_ACT_CONTINUE_SCAN 0
+#define EOB_ACT_END_OF_FILE 1
+#define EOB_ACT_LAST_MATCH 2
+
+ #define YY_LESS_LINENO(n)
+ #define YY_LINENO_REWIND_TO(ptr)
+
+/* Return all but the first "n" matched characters back to the input stream. */
+#define yyless(n) \
+ do \
+ { \
+ /* Undo effects of setting up yytext. */ \
+ int yyless_macro_arg = (n); \
+ YY_LESS_LINENO(yyless_macro_arg);\
+ *yy_cp = (yy_hold_char); \
+ YY_RESTORE_YY_MORE_OFFSET \
+ (yy_c_buf_p) = yy_cp = yy_bp + yyless_macro_arg - YY_MORE_ADJ; \
+ YY_DO_BEFORE_ACTION; /* set up yytext again */ \
+ } \
+ while ( 0 )
+#define unput(c) yyunput( c, (yytext_ptr) )
+
+#ifndef YY_STRUCT_YY_BUFFER_STATE
+#define YY_STRUCT_YY_BUFFER_STATE
+struct yy_buffer_state
+ {
+ FILE *yy_input_file;
+
+ char *yy_ch_buf; /* input buffer */
+ char *yy_buf_pos; /* current position in input buffer */
+
+ /* Size of input buffer in bytes, not including room for EOB
+ * characters.
+ */
+ int yy_buf_size;
+
+ /* Number of characters read into yy_ch_buf, not including EOB
+ * characters.
+ */
+ yy_size_t yy_n_chars;
+
+ /* Whether we "own" the buffer - i.e., we know we created it,
+ * and can realloc() it to grow it, and should free() it to
+ * delete it.
+ */
+ int yy_is_our_buffer;
+
+ /* Whether this is an "interactive" input source; if so, and
+ * if we're using stdio for input, then we want to use getc()
+ * instead of fread(), to make sure we stop fetching input after
+ * each newline.
+ */
+ int yy_is_interactive;
+
+ /* Whether we're considered to be at the beginning of a line.
+ * If so, '^' rules will be active on the next match, otherwise
+ * not.
+ */
+ int yy_at_bol;
+
+ int yy_bs_lineno; /**< The line count. */
+ int yy_bs_column; /**< The column count. */
+
+ /* Whether to try to fill the input buffer when we reach the
+ * end of it.
+ */
+ int yy_fill_buffer;
+
+ int yy_buffer_status;
+
+#define YY_BUFFER_NEW 0
+#define YY_BUFFER_NORMAL 1
+ /* When an EOF's been seen but there's still some text to process
+ * then we mark the buffer as YY_EOF_PENDING, to indicate that we
+ * shouldn't try reading from the input source any more. We might
+ * still have a bunch of tokens to match, though, because of
+ * possible backing-up.
+ *
+ * When we actually see the EOF, we change the status to "new"
+ * (via yyrestart()), so that the user can continue scanning by
+ * just pointing yyin at a new input file.
+ */
+#define YY_BUFFER_EOF_PENDING 2
+
+ };
+#endif /* !YY_STRUCT_YY_BUFFER_STATE */
+
+/* Stack of input buffers. */
+static size_t yy_buffer_stack_top = 0; /**< index of top of stack. */
+static size_t yy_buffer_stack_max = 0; /**< capacity of stack. */
+static YY_BUFFER_STATE * yy_buffer_stack = NULL; /**< Stack as an array. */
+
+/* We provide macros for accessing buffer states in case in the
+ * future we want to put the buffer states in a more general
+ * "scanner state".
+ *
+ * Returns the top of the stack, or NULL.
+ */
+#define YY_CURRENT_BUFFER ( (yy_buffer_stack) \
+ ? (yy_buffer_stack)[(yy_buffer_stack_top)] \
+ : NULL)
+/* Same as previous macro, but useful when we know that the buffer stack is not
+ * NULL or when we need an lvalue. For internal use only.
+ */
+#define YY_CURRENT_BUFFER_LVALUE (yy_buffer_stack)[(yy_buffer_stack_top)]
+
+/* yy_hold_char holds the character lost when yytext is formed. */
+static char yy_hold_char;
+static yy_size_t yy_n_chars; /* number of characters read into yy_ch_buf */
+yy_size_t yyleng;
+
+/* Points to current character in buffer. */
+static char *yy_c_buf_p = NULL;
+static int yy_init = 0; /* whether we need to initialize */
+static int yy_start = 0; /* start state number */
+
+/* Flag which is used to allow yywrap()'s to do buffer switches
+ * instead of setting up a fresh yyin. A bit of a hack ...
+ */
+static int yy_did_buffer_switch_on_eof;
+
+void yyrestart ( FILE *input_file );
+void yy_switch_to_buffer ( YY_BUFFER_STATE new_buffer );
+YY_BUFFER_STATE yy_create_buffer ( FILE *file, int size );
+void yy_delete_buffer ( YY_BUFFER_STATE b );
+void yy_flush_buffer ( YY_BUFFER_STATE b );
+void yypush_buffer_state ( YY_BUFFER_STATE new_buffer );
+void yypop_buffer_state ( void );
+
+static void yyensure_buffer_stack ( void );
+static void yy_load_buffer_state ( void );
+static void yy_init_buffer ( YY_BUFFER_STATE b, FILE *file );
+#define YY_FLUSH_BUFFER yy_flush_buffer( YY_CURRENT_BUFFER )
+
+YY_BUFFER_STATE yy_scan_buffer ( char *base, yy_size_t size );
+YY_BUFFER_STATE yy_scan_string ( const char *yy_str );
+YY_BUFFER_STATE yy_scan_bytes ( const char *bytes, yy_size_t len );
+
+void *yyalloc ( yy_size_t );
+void *yyrealloc ( void *, yy_size_t );
+void yyfree ( void * );
+
+#define yy_new_buffer yy_create_buffer
+#define yy_set_interactive(is_interactive) \
+ { \
+ if ( ! YY_CURRENT_BUFFER ){ \
+ yyensure_buffer_stack (); \
+ YY_CURRENT_BUFFER_LVALUE = \
+ yy_create_buffer( yyin, YY_BUF_SIZE ); \
+ } \
+ YY_CURRENT_BUFFER_LVALUE->yy_is_interactive = is_interactive; \
+ }
+#define yy_set_bol(at_bol) \
+ { \
+ if ( ! YY_CURRENT_BUFFER ){\
+ yyensure_buffer_stack (); \
+ YY_CURRENT_BUFFER_LVALUE = \
+ yy_create_buffer( yyin, YY_BUF_SIZE ); \
+ } \
+ YY_CURRENT_BUFFER_LVALUE->yy_at_bol = at_bol; \
+ }
+#define YY_AT_BOL() (YY_CURRENT_BUFFER_LVALUE->yy_at_bol)
+
+/* Begin user sect3 */
+typedef flex_uint8_t YY_CHAR;
+
+FILE *yyin = NULL, *yyout = NULL;
+
+typedef int yy_state_type;
+
+extern int yylineno;
+int yylineno = 1;
+
+extern char *yytext;
+#ifdef yytext_ptr
+#undef yytext_ptr
+#endif
+#define yytext_ptr yytext
+
+static yy_state_type yy_get_previous_state ( void );
+static yy_state_type yy_try_NUL_trans ( yy_state_type current_state );
+static int yy_get_next_buffer ( void );
+static void yynoreturn yy_fatal_error ( const char* msg );
+
+/* Done after the current pattern has been matched and before the
+ * corresponding action - sets up yytext.
+ */
+#define YY_DO_BEFORE_ACTION \
+ (yytext_ptr) = yy_bp; \
+ yyleng = (yy_size_t) (yy_cp - yy_bp); \
+ (yy_hold_char) = *yy_cp; \
+ *yy_cp = '\0'; \
+ (yy_c_buf_p) = yy_cp;
+#define YY_NUM_RULES 83
+#define YY_END_OF_BUFFER 84
+/* This struct is not used in this scanner,
+ but its presence is necessary. */
+struct yy_trans_info
+ {
+ flex_int32_t yy_verify;
+ flex_int32_t yy_nxt;
+ };
+static const flex_int16_t yy_accept[257] =
+ { 0,
+ 0, 0, 81, 81, 84, 80, 75, 79, 28, 80,
+ 74, 80, 76, 2, 2, 31, 29, 30, 80, 76,
+ 76, 76, 76, 76, 76, 76, 76, 76, 76, 76,
+ 76, 76, 76, 76, 76, 76, 76, 76, 82, 81,
+ 83, 0, 78, 74, 0, 77, 76, 2, 4, 76,
+ 33, 29, 32, 0, 76, 76, 52, 76, 76, 76,
+ 76, 76, 76, 76, 76, 76, 34, 76, 76, 76,
+ 76, 37, 35, 76, 76, 76, 61, 15, 11, 76,
+ 38, 36, 76, 76, 76, 76, 76, 76, 27, 76,
+ 76, 70, 76, 76, 76, 76, 76, 76, 76, 76,
+
+ 76, 76, 82, 81, 3, 0, 66, 26, 5, 65,
+ 19, 49, 48, 76, 10, 76, 14, 76, 76, 76,
+ 76, 76, 76, 76, 76, 68, 76, 76, 76, 76,
+ 76, 76, 56, 76, 76, 21, 12, 76, 28, 76,
+ 16, 76, 76, 76, 47, 76, 76, 76, 13, 72,
+ 23, 76, 69, 76, 0, 76, 76, 76, 76, 76,
+ 76, 76, 76, 76, 76, 11, 58, 76, 76, 6,
+ 7, 76, 62, 54, 17, 76, 76, 76, 51, 18,
+ 76, 76, 53, 76, 0, 44, 9, 76, 76, 76,
+ 76, 76, 57, 76, 45, 76, 76, 8, 76, 76,
+
+ 76, 76, 76, 50, 76, 22, 0, 76, 25, 39,
+ 76, 76, 76, 76, 76, 76, 76, 76, 76, 76,
+ 76, 20, 0, 76, 76, 76, 76, 63, 73, 76,
+ 76, 24, 64, 76, 43, 67, 1, 46, 76, 76,
+ 76, 42, 76, 76, 76, 41, 76, 55, 60, 59,
+ 76, 76, 76, 40, 71, 0
+ } ;
+
+static const YY_CHAR yy_ec[256] =
+ { 0,
+ 1, 1, 1, 1, 1, 1, 1, 1, 2, 3,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 4, 5, 6, 7, 8, 8, 8, 9, 8,
+ 8, 8, 8, 8, 10, 11, 8, 12, 13, 13,
+ 13, 14, 13, 15, 13, 13, 13, 11, 8, 16,
+ 17, 18, 8, 19, 20, 21, 22, 23, 24, 25,
+ 26, 27, 28, 11, 29, 30, 31, 32, 33, 34,
+ 35, 36, 37, 38, 39, 40, 41, 42, 43, 11,
+ 8, 8, 8, 8, 11, 8, 44, 45, 46, 47,
+
+ 48, 49, 50, 51, 52, 11, 53, 54, 55, 56,
+ 57, 58, 59, 60, 61, 62, 63, 64, 65, 66,
+ 67, 11, 8, 8, 8, 8, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1
+ } ;
+
+static const YY_CHAR yy_meta[68] =
+ { 0,
+ 1, 2, 3, 4, 5, 5, 5, 5, 5, 6,
+ 6, 6, 6, 6, 6, 5, 6, 5, 5, 6,
+ 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,
+ 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,
+ 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,
+ 6, 6, 6, 6, 6, 6, 6, 6, 6, 6,
+ 6, 6, 6, 6, 6, 6, 6
+ } ;
+
+static const flex_int16_t yy_base[263] =
+ { 0,
+ 0, 0, 66, 69, 280, 556, 556, 556, 556, 198,
+ 0, 188, 0, 62, 36, 179, 151, 150, 51, 60,
+ 55, 51, 48, 88, 88, 95, 53, 114, 107, 115,
+ 132, 143, 158, 68, 98, 138, 145, 132, 0, 92,
+ 556, 126, 556, 0, 90, 556, 0, 124, 0, 207,
+ 556, 0, 556, 142, 154, 170, 165, 153, 189, 162,
+ 172, 173, 176, 189, 197, 209, 0, 212, 206, 225,
+ 218, 209, 0, 206, 213, 222, 0, 222, 220, 223,
+ 0, 0, 240, 241, 235, 236, 237, 239, 0, 241,
+ 261, 0, 245, 250, 282, 249, 267, 253, 260, 273,
+
+ 269, 276, 0, 306, 0, 287, 0, 0, 0, 0,
+ 0, 0, 0, 295, 0, 289, 0, 302, 299, 296,
+ 301, 293, 301, 288, 294, 0, 294, 300, 303, 300,
+ 126, 313, 0, 309, 303, 0, 0, 303, 0, 318,
+ 0, 315, 322, 316, 0, 317, 325, 329, 0, 0,
+ 0, 337, 0, 332, 341, 335, 335, 336, 338, 345,
+ 343, 344, 345, 363, 345, 0, 85, 346, 361, 0,
+ 0, 356, 0, 0, 0, 353, 366, 359, 0, 0,
+ 369, 381, 0, 387, 376, 0, 0, 389, 381, 395,
+ 382, 383, 0, 394, 0, 403, 410, 0, 388, 405,
+
+ 388, 392, 411, 0, 397, 0, 411, 403, 0, 80,
+ 394, 414, 404, 412, 420, 416, 426, 422, 446, 430,
+ 445, 0, 445, 438, 443, 439, 439, 0, 0, 453,
+ 444, 0, 0, 441, 0, 0, 556, 0, 457, 439,
+ 460, 0, 461, 462, 460, 0, 462, 0, 0, 0,
+ 465, 477, 475, 0, 0, 556, 531, 534, 540, 543,
+ 74, 549
+ } ;
+
+static const flex_int16_t yy_def[263] =
+ { 0,
+ 256, 1, 257, 257, 256, 256, 256, 256, 256, 258,
+ 259, 260, 261, 261, 14, 256, 261, 256, 256, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 262, 256,
+ 256, 258, 256, 259, 260, 256, 261, 14, 261, 261,
+ 256, 261, 256, 256, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+
+ 261, 261, 262, 256, 50, 256, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 256, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 256, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+
+ 261, 261, 261, 261, 261, 261, 256, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 256, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 256, 261, 261, 261,
+ 261, 261, 261, 261, 261, 261, 261, 261, 261, 261,
+ 261, 261, 261, 261, 261, 0, 256, 256, 256, 256,
+ 256, 256
+ } ;
+
+static const flex_int16_t yy_nxt[624] =
+ { 0,
+ 6, 7, 8, 7, 9, 10, 11, 6, 12, 13,
+ 13, 14, 15, 15, 15, 16, 17, 18, 19, 20,
+ 21, 22, 23, 24, 25, 26, 27, 28, 13, 29,
+ 30, 31, 32, 33, 13, 34, 35, 36, 13, 37,
+ 13, 38, 13, 20, 21, 22, 23, 24, 25, 26,
+ 27, 28, 13, 29, 30, 31, 32, 33, 13, 34,
+ 35, 36, 13, 37, 13, 38, 13, 40, 41, 40,
+ 40, 41, 40, 48, 48, 48, 48, 47, 54, 47,
+ 58, 55, 61, 62, 63, 74, 64, 49, 59, 225,
+ 49, 56, 49, 104, 197, 104, 57, 60, 46, 49,
+
+ 96, 47, 54, 50, 58, 55, 61, 62, 63, 74,
+ 64, 49, 59, 65, 49, 56, 49, 70, 72, 66,
+ 57, 60, 67, 49, 96, 68, 80, 50, 71, 69,
+ 81, 43, 73, 97, 83, 75, 76, 65, 77, 170,
+ 171, 70, 72, 66, 82, 78, 67, 79, 84, 68,
+ 80, 85, 71, 69, 81, 86, 73, 97, 83, 75,
+ 76, 102, 77, 88, 87, 47, 53, 52, 82, 78,
+ 98, 79, 84, 106, 100, 85, 99, 91, 89, 86,
+ 101, 90, 92, 107, 110, 102, 111, 88, 87, 47,
+ 93, 94, 108, 95, 98, 51, 46, 106, 100, 114,
+
+ 99, 91, 89, 43, 101, 90, 92, 107, 110, 115,
+ 111, 116, 109, 117, 93, 94, 108, 95, 105, 105,
+ 105, 105, 112, 114, 118, 113, 105, 105, 105, 105,
+ 105, 105, 119, 115, 120, 116, 109, 117, 121, 122,
+ 125, 126, 127, 128, 123, 129, 112, 130, 118, 113,
+ 105, 105, 105, 105, 105, 105, 119, 124, 120, 131,
+ 132, 133, 121, 122, 125, 126, 127, 128, 123, 129,
+ 135, 130, 136, 137, 139, 140, 134, 138, 141, 256,
+ 144, 124, 142, 131, 132, 133, 145, 148, 149, 150,
+ 256, 151, 152, 153, 135, 154, 136, 137, 139, 140,
+
+ 134, 138, 141, 143, 144, 146, 142, 104, 155, 104,
+ 145, 148, 149, 150, 147, 151, 152, 153, 156, 154,
+ 157, 158, 159, 160, 161, 162, 163, 143, 164, 146,
+ 165, 166, 155, 167, 168, 169, 172, 173, 147, 174,
+ 175, 176, 156, 177, 157, 158, 159, 160, 161, 162,
+ 163, 178, 164, 179, 165, 166, 180, 167, 168, 169,
+ 172, 173, 181, 174, 175, 176, 182, 177, 183, 184,
+ 185, 186, 187, 188, 189, 178, 190, 179, 191, 192,
+ 180, 193, 196, 198, 199, 194, 181, 200, 201, 202,
+ 182, 203, 183, 184, 185, 186, 187, 188, 189, 195,
+
+ 190, 204, 191, 192, 205, 193, 196, 198, 199, 194,
+ 206, 200, 201, 202, 207, 203, 208, 209, 210, 211,
+ 212, 213, 214, 195, 217, 204, 218, 219, 205, 220,
+ 221, 215, 222, 223, 206, 224, 226, 227, 207, 228,
+ 208, 209, 210, 211, 212, 213, 214, 216, 217, 229,
+ 218, 219, 230, 220, 221, 215, 222, 223, 231, 224,
+ 226, 227, 232, 228, 233, 234, 235, 236, 237, 238,
+ 239, 216, 241, 229, 242, 243, 230, 244, 245, 246,
+ 240, 247, 231, 248, 249, 250, 232, 251, 233, 234,
+ 235, 236, 237, 238, 239, 252, 241, 253, 242, 243,
+
+ 254, 244, 245, 246, 240, 247, 255, 248, 249, 250,
+ 256, 251, 256, 256, 256, 256, 256, 256, 256, 252,
+ 256, 253, 256, 256, 254, 256, 256, 256, 256, 256,
+ 255, 39, 39, 39, 39, 39, 39, 42, 42, 42,
+ 44, 44, 256, 44, 44, 44, 45, 45, 45, 103,
+ 256, 256, 256, 103, 103, 5, 256, 256, 256, 256,
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+ 256, 256, 256
+ } ;
+
+static const flex_int16_t yy_chk[624] =
+ { 0,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+ 1, 1, 1, 1, 1, 1, 1, 3, 3, 3,
+ 4, 4, 4, 14, 14, 14, 14, 15, 19, 261,
+ 21, 20, 22, 22, 23, 27, 23, 14, 21, 210,
+ 14, 20, 14, 40, 167, 40, 20, 21, 45, 14,
+
+ 34, 15, 19, 14, 21, 20, 22, 22, 23, 27,
+ 23, 14, 21, 24, 14, 20, 14, 25, 26, 24,
+ 20, 21, 24, 14, 34, 24, 29, 14, 25, 24,
+ 29, 42, 26, 35, 30, 28, 28, 24, 28, 131,
+ 131, 25, 26, 24, 29, 28, 24, 28, 30, 24,
+ 29, 31, 25, 24, 29, 31, 26, 35, 30, 28,
+ 28, 38, 28, 32, 31, 48, 18, 17, 29, 28,
+ 36, 28, 30, 54, 37, 31, 36, 33, 32, 31,
+ 37, 32, 33, 55, 57, 38, 58, 32, 31, 48,
+ 33, 33, 56, 33, 36, 16, 12, 54, 37, 60,
+
+ 36, 33, 32, 10, 37, 32, 33, 55, 57, 61,
+ 58, 62, 56, 63, 33, 33, 56, 33, 50, 50,
+ 50, 50, 59, 60, 64, 59, 50, 50, 50, 50,
+ 50, 50, 65, 61, 66, 62, 56, 63, 68, 69,
+ 71, 72, 74, 75, 70, 76, 59, 78, 64, 59,
+ 50, 50, 50, 50, 50, 50, 65, 70, 66, 79,
+ 80, 83, 68, 69, 71, 72, 74, 75, 70, 76,
+ 84, 78, 85, 86, 87, 88, 83, 86, 90, 5,
+ 93, 70, 91, 79, 80, 83, 94, 96, 97, 98,
+ 0, 99, 100, 101, 84, 102, 85, 86, 87, 88,
+
+ 83, 86, 90, 91, 93, 95, 91, 104, 106, 104,
+ 94, 96, 97, 98, 95, 99, 100, 101, 114, 102,
+ 116, 118, 119, 120, 121, 122, 123, 91, 124, 95,
+ 125, 127, 106, 128, 129, 130, 132, 134, 95, 135,
+ 138, 140, 114, 142, 116, 118, 119, 120, 121, 122,
+ 123, 143, 124, 144, 125, 127, 146, 128, 129, 130,
+ 132, 134, 147, 135, 138, 140, 148, 142, 152, 154,
+ 155, 156, 157, 158, 159, 143, 160, 144, 161, 162,
+ 146, 163, 165, 168, 169, 164, 147, 172, 176, 177,
+ 148, 178, 152, 154, 155, 156, 157, 158, 159, 164,
+
+ 160, 181, 161, 162, 182, 163, 165, 168, 169, 164,
+ 184, 172, 176, 177, 185, 178, 188, 189, 190, 191,
+ 192, 194, 196, 164, 199, 181, 200, 201, 182, 202,
+ 203, 197, 205, 207, 184, 208, 211, 212, 185, 213,
+ 188, 189, 190, 191, 192, 194, 196, 197, 199, 214,
+ 200, 201, 215, 202, 203, 197, 205, 207, 216, 208,
+ 211, 212, 217, 213, 218, 219, 220, 221, 223, 224,
+ 225, 197, 226, 214, 227, 230, 215, 231, 234, 239,
+ 225, 240, 216, 241, 243, 244, 217, 245, 218, 219,
+ 220, 221, 223, 224, 225, 247, 226, 251, 227, 230,
+
+ 252, 231, 234, 239, 225, 240, 253, 241, 243, 244,
+ 0, 245, 0, 0, 0, 0, 0, 0, 0, 247,
+ 0, 251, 0, 0, 252, 0, 0, 0, 0, 0,
+ 253, 257, 257, 257, 257, 257, 257, 258, 258, 258,
+ 259, 259, 0, 259, 259, 259, 260, 260, 260, 262,
+ 0, 0, 0, 262, 262, 256, 256, 256, 256, 256,
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+ 256, 256, 256, 256, 256, 256, 256, 256, 256, 256,
+ 256, 256, 256
+ } ;
+
+static yy_state_type yy_last_accepting_state;
+static char *yy_last_accepting_cpos;
+
+extern int yy_flex_debug;
+int yy_flex_debug = 0;
+
+/* The intent behind this definition is that it'll catch
+ * any uses of REJECT which flex missed.
+ */
+#define REJECT reject_used_but_not_detected
+#define yymore() yymore_used_but_not_detected
+#define YY_MORE_ADJ 0
+#define YY_RESTORE_YY_MORE_OFFSET
+char *yytext;
+#line 1 "filter/scanner.l"
+/*
+ * Copyright (c) 2023, Peter Haag
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * * Redistributions of source code must retain the above copyright notice,
+ * this list of conditions and the following disclaimer.
+ * * Redistributions in binary form must reproduce the above copyright notice,
+ * this list of conditions and the following disclaimer in the documentation
+ * and/or other materials provided with the distribution.
+ * * Neither the name of SWITCH nor the names of its contributors may be
+ * used to endorse or promote products derived from this software without
+ * specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
+ * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+ * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+
+#line 34 "filter/scanner.l"
+
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+
+#include "filter.h"
+#include "grammar.h"
+
+int lineno = 1;
+
+
+#ifdef FLEX_SCANNER
+#define YY_NO_UNPUT
+static YY_BUFFER_STATE in_buffer;
+#else
+static char *in_buffer;
+
+#undef getc
+#define getc(fp) (*in_buffer == 0 ? EOF : *in_buffer++)
+#endif
+
+#define MAX_INCLUDE_DEPTH 10
+YY_BUFFER_STATE include_stack[MAX_INCLUDE_DEPTH];
+
+struct buffer_info {
+ char *name;
+ int lineno;
+} include_stack_info[MAX_INCLUDE_DEPTH];
+
+int include_stack_ptr = 0;
+
+char *FilterFilename = NULL;;
+
+static char *stripQuotes(char *word);
+
+static void __attribute__((noreturn)) yy_fatal_error (yyconst char msg[]);
+
+// static void __attribute__((unused))yyunput (int c, char * yy_bp);
+
+#line 741 "filter/scanner.c"
+#line 742 "filter/scanner.c"
+
+#define INITIAL 0
+#define incl 1
+
+#ifndef YY_NO_UNISTD_H
+/* Special case for "unistd.h", since it is non-ANSI. We include it way
+ * down here because we want the user's section 1 to have been scanned first.
+ * The user has a chance to override it with an option.
+ */
+#include
+#endif
+
+#ifndef YY_EXTRA_TYPE
+#define YY_EXTRA_TYPE void *
+#endif
+
+static int yy_init_globals ( void );
+
+/* Accessor methods to globals.
+ These are made visible to non-reentrant scanners for convenience. */
+
+int yylex_destroy ( void );
+
+int yyget_debug ( void );
+
+void yyset_debug ( int debug_flag );
+
+YY_EXTRA_TYPE yyget_extra ( void );
+
+void yyset_extra ( YY_EXTRA_TYPE user_defined );
+
+FILE *yyget_in ( void );
+
+void yyset_in ( FILE * _in_str );
+
+FILE *yyget_out ( void );
+
+void yyset_out ( FILE * _out_str );
+
+ yy_size_t yyget_leng ( void );
+
+char *yyget_text ( void );
+
+int yyget_lineno ( void );
+
+void yyset_lineno ( int _line_number );
+
+/* Macros after this point can all be overridden by user definitions in
+ * section 1.
+ */
+
+#ifndef YY_SKIP_YYWRAP
+#ifdef __cplusplus
+extern "C" int yywrap ( void );
+#else
+extern int yywrap ( void );
+#endif
+#endif
+
+#ifndef YY_NO_UNPUT
+
+ static void yyunput ( int c, char *buf_ptr );
+
+#endif
+
+#ifndef yytext_ptr
+static void yy_flex_strncpy ( char *, const char *, int );
+#endif
+
+#ifdef YY_NEED_STRLEN
+static int yy_flex_strlen ( const char * );
+#endif
+
+#ifndef YY_NO_INPUT
+#ifdef __cplusplus
+static int yyinput ( void );
+#else
+static int input ( void );
+#endif
+
+#endif
+
+/* Amount of stuff to slurp up with each read. */
+#ifndef YY_READ_BUF_SIZE
+#ifdef __ia64__
+/* On IA-64, the buffer size is 16k, not 8k */
+#define YY_READ_BUF_SIZE 16384
+#else
+#define YY_READ_BUF_SIZE 8192
+#endif /* __ia64__ */
+#endif
+
+/* Copy whatever the last rule matched to the standard output. */
+#ifndef ECHO
+/* This used to be an fputs(), but since the string might contain NUL's,
+ * we now use fwrite().
+ */
+#define ECHO do { if (fwrite( yytext, (size_t) yyleng, 1, yyout )) {} } while (0)
+#endif
+
+/* Gets input and stuffs it into "buf". number of characters read, or YY_NULL,
+ * is returned in "result".
+ */
+#ifndef YY_INPUT
+#define YY_INPUT(buf,result,max_size) \
+ if ( YY_CURRENT_BUFFER_LVALUE->yy_is_interactive ) \
+ { \
+ int c = '*'; \
+ yy_size_t n; \
+ for ( n = 0; n < max_size && \
+ (c = getc( yyin )) != EOF && c != '\n'; ++n ) \
+ buf[n] = (char) c; \
+ if ( c == '\n' ) \
+ buf[n++] = (char) c; \
+ if ( c == EOF && ferror( yyin ) ) \
+ YY_FATAL_ERROR( "input in flex scanner failed" ); \
+ result = n; \
+ } \
+ else \
+ { \
+ errno=0; \
+ while ( (result = (int) fread(buf, 1, (yy_size_t) max_size, yyin)) == 0 && ferror(yyin)) \
+ { \
+ if( errno != EINTR) \
+ { \
+ YY_FATAL_ERROR( "input in flex scanner failed" ); \
+ break; \
+ } \
+ errno=0; \
+ clearerr(yyin); \
+ } \
+ }\
+\
+
+#endif
+
+/* No semi-colon after return; correct usage is to write "yyterminate();" -
+ * we don't want an extra ';' after the "return" because that will cause
+ * some compilers to complain about unreachable statements.
+ */
+#ifndef yyterminate
+#define yyterminate() return YY_NULL
+#endif
+
+/* Number of entries by which start-condition stack grows. */
+#ifndef YY_START_STACK_INCR
+#define YY_START_STACK_INCR 25
+#endif
+
+/* Report a fatal error. */
+#ifndef YY_FATAL_ERROR
+#define YY_FATAL_ERROR(msg) yy_fatal_error( msg )
+#endif
+
+/* end tables serialization structures and prototypes */
+
+/* Default declaration of generated scanner - a define so the user can
+ * easily add parameters.
+ */
+#ifndef YY_DECL
+#define YY_DECL_IS_OURS 1
+
+extern int yylex (void);
+
+#define YY_DECL int yylex (void)
+#endif /* !YY_DECL */
+
+/* Code executed at the beginning of each rule, after yytext and yyleng
+ * have been set up.
+ */
+#ifndef YY_USER_ACTION
+#define YY_USER_ACTION
+#endif
+
+/* Code executed at the end of each rule. */
+#ifndef YY_BREAK
+#define YY_BREAK /*LINTED*/break;
+#endif
+
+#define YY_RULE_SETUP \
+ YY_USER_ACTION
+
+/** The main scanner function which does all the work.
+ */
+YY_DECL
+{
+ yy_state_type yy_current_state;
+ char *yy_cp, *yy_bp;
+ int yy_act;
+
+ if ( !(yy_init) )
+ {
+ (yy_init) = 1;
+
+#ifdef YY_USER_INIT
+ YY_USER_INIT;
+#endif
+
+ if ( ! (yy_start) )
+ (yy_start) = 1; /* first start state */
+
+ if ( ! yyin )
+ yyin = stdin;
+
+ if ( ! yyout )
+ yyout = stdout;
+
+ if ( ! YY_CURRENT_BUFFER ) {
+ yyensure_buffer_stack ();
+ YY_CURRENT_BUFFER_LVALUE =
+ yy_create_buffer( yyin, YY_BUF_SIZE );
+ }
+
+ yy_load_buffer_state( );
+ }
+
+ {
+#line 83 "filter/scanner.l"
+
+#line 962 "filter/scanner.c"
+
+ while ( /*CONSTCOND*/1 ) /* loops until end-of-file is reached */
+ {
+ yy_cp = (yy_c_buf_p);
+
+ /* Support of yytext. */
+ *yy_cp = (yy_hold_char);
+
+ /* yy_bp points to the position in yy_ch_buf of the start of
+ * the current run.
+ */
+ yy_bp = yy_cp;
+
+ yy_current_state = (yy_start);
+yy_match:
+ do
+ {
+ YY_CHAR yy_c = yy_ec[YY_SC_TO_UI(*yy_cp)] ;
+ if ( yy_accept[yy_current_state] )
+ {
+ (yy_last_accepting_state) = yy_current_state;
+ (yy_last_accepting_cpos) = yy_cp;
+ }
+ while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state )
+ {
+ yy_current_state = (int) yy_def[yy_current_state];
+ if ( yy_current_state >= 257 )
+ yy_c = yy_meta[yy_c];
+ }
+ yy_current_state = yy_nxt[yy_base[yy_current_state] + yy_c];
+ ++yy_cp;
+ }
+ while ( yy_base[yy_current_state] != 556 );
+
+yy_find_action:
+ yy_act = yy_accept[yy_current_state];
+ if ( yy_act == 0 )
+ { /* have to back up */
+ yy_cp = (yy_last_accepting_cpos);
+ yy_current_state = (yy_last_accepting_state);
+ yy_act = yy_accept[yy_current_state];
+ }
+
+ YY_DO_BEFORE_ACTION;
+
+do_action: /* This label is used only to access EOF actions. */
+
+ switch ( yy_act )
+ { /* beginning of action switch */
+ case 0: /* must back up */
+ /* undo the effects of YY_DO_BEFORE_ACTION */
+ *yy_cp = (yy_hold_char);
+ yy_cp = (yy_last_accepting_cpos);
+ yy_current_state = (yy_last_accepting_state);
+ goto yy_find_action;
+
+case 1:
+YY_RULE_SETUP
+#line 84 "filter/scanner.l"
+BEGIN(incl);
+ YY_BREAK
+case 2:
+YY_RULE_SETUP
+#line 86 "filter/scanner.l"
+{
+ yylval.value = (uint64_t) strtoull(yytext,NULL,10);
+ return NUMBER;
+ }
+ YY_BREAK
+case 3:
+YY_RULE_SETUP
+#line 91 "filter/scanner.l"
+{
+ yylval.value = (uint64_t) strtoull(yytext,NULL,16);
+ return NUMBER;
+ }
+ YY_BREAK
+case 4:
+YY_RULE_SETUP
+#line 96 "filter/scanner.l"
+{
+ size_t len = strlen(yytext);
+ switch (yytext[len-1]) {
+ case 'k':
+ case 'K':
+ yylval.value = 1000LL * (uint64_t) strtoull(yytext,NULL,10);
+ break;
+ case 'm':
+ case 'M':
+ yylval.value = 1000LL * 1000LL * (uint64_t) strtoull(yytext,NULL,10);
+ break;
+ case 'g':
+ case 'G':
+ yylval.value = 1000LL * 1000LL * 1000LL * (uint64_t) strtoull(yytext,NULL,10);
+ break;
+ case 't':
+ case 'T':
+ yylval.value = 1000LL * 1000LL * 1000LL * 1000LL * (uint64_t) strtoull(yytext,NULL,10);
+ break;
+ default:
+ yylval.value = (uint64_t) strtoull(yytext,NULL,10);
+ }
+ return NUMBER;
+ }
+ YY_BREAK
+case 5:
+YY_RULE_SETUP
+#line 121 "filter/scanner.l"
+{ return ANY; }
+ YY_BREAK
+case 6:
+YY_RULE_SETUP
+#line 122 "filter/scanner.l"
+{ return IPV4; }
+ YY_BREAK
+case 7:
+YY_RULE_SETUP
+#line 123 "filter/scanner.l"
+{ return IPV6; }
+ YY_BREAK
+case 8:
+YY_RULE_SETUP
+#line 124 "filter/scanner.l"
+{ return IDENT; }
+ YY_BREAK
+case 9:
+YY_RULE_SETUP
+#line 125 "filter/scanner.l"
+{ return COUNT; }
+ YY_BREAK
+case 10:
+YY_RULE_SETUP
+#line 126 "filter/scanner.l"
+{ return COUNT; }
+ YY_BREAK
+case 11:
+YY_RULE_SETUP
+#line 127 "filter/scanner.l"
+{ return IP; }
+ YY_BREAK
+case 12:
+YY_RULE_SETUP
+#line 128 "filter/scanner.l"
+{ return NET; }
+ YY_BREAK
+case 13:
+YY_RULE_SETUP
+#line 130 "filter/scanner.l"
+{ return SRC; }
+ YY_BREAK
+case 14:
+YY_RULE_SETUP
+#line 131 "filter/scanner.l"
+{ return DST; }
+ YY_BREAK
+case 15:
+YY_RULE_SETUP
+#line 132 "filter/scanner.l"
+{ return IN; }
+ YY_BREAK
+case 16:
+YY_RULE_SETUP
+#line 133 "filter/scanner.l"
+{ return OUT; }
+ YY_BREAK
+case 17:
+YY_RULE_SETUP
+#line 134 "filter/scanner.l"
+{ return NEXT; }
+ YY_BREAK
+case 18:
+YY_RULE_SETUP
+#line 135 "filter/scanner.l"
+{ return PREV; }
+ YY_BREAK
+case 19:
+YY_RULE_SETUP
+#line 136 "filter/scanner.l"
+{ return BGP; }
+ YY_BREAK
+case 20:
+YY_RULE_SETUP
+#line 137 "filter/scanner.l"
+{ return ROUTER; }
+ YY_BREAK
+case 21:
+YY_RULE_SETUP
+#line 138 "filter/scanner.l"
+{ return NAT; }
+ YY_BREAK
+case 22:
+YY_RULE_SETUP
+#line 139 "filter/scanner.l"
+{ return NAT; }
+ YY_BREAK
+case 23:
+YY_RULE_SETUP
+#line 140 "filter/scanner.l"
+{ return TUN; }
+ YY_BREAK
+case 24:
+YY_RULE_SETUP
+#line 141 "filter/scanner.l"
+{ return INGRESS;}
+ YY_BREAK
+case 25:
+YY_RULE_SETUP
+#line 142 "filter/scanner.l"
+{ return EGRESS; }
+ YY_BREAK
+case 26:
+YY_RULE_SETUP
+#line 144 "filter/scanner.l"
+{ return AND; }
+ YY_BREAK
+case 27:
+YY_RULE_SETUP
+#line 145 "filter/scanner.l"
+{ return OR; }
+ YY_BREAK
+case 28:
+YY_RULE_SETUP
+#line 146 "filter/scanner.l"
+{ return NOT; }
+ YY_BREAK
+case 29:
+YY_RULE_SETUP
+#line 147 "filter/scanner.l"
+{ return EQ; }
+ YY_BREAK
+case 30:
+YY_RULE_SETUP
+#line 148 "filter/scanner.l"
+{ return GT; }
+ YY_BREAK
+case 31:
+YY_RULE_SETUP
+#line 149 "filter/scanner.l"
+{ return LT; }
+ YY_BREAK
+case 32:
+YY_RULE_SETUP
+#line 150 "filter/scanner.l"
+{ return GE; }
+ YY_BREAK
+case 33:
+YY_RULE_SETUP
+#line 151 "filter/scanner.l"
+{ return LE; }
+ YY_BREAK
+case 34:
+YY_RULE_SETUP
+#line 152 "filter/scanner.l"
+{ return EQ; }
+ YY_BREAK
+case 35:
+YY_RULE_SETUP
+#line 153 "filter/scanner.l"
+{ return GT; }
+ YY_BREAK
+case 36:
+YY_RULE_SETUP
+#line 154 "filter/scanner.l"
+{ return LT; }
+ YY_BREAK
+case 37:
+YY_RULE_SETUP
+#line 155 "filter/scanner.l"
+{ return GE; }
+ YY_BREAK
+case 38:
+YY_RULE_SETUP
+#line 156 "filter/scanner.l"
+{ return LE; }
+ YY_BREAK
+case 39:
+YY_RULE_SETUP
+#line 158 "filter/scanner.l"
+{ return ENGINE; }
+ YY_BREAK
+case 40:
+YY_RULE_SETUP
+#line 159 "filter/scanner.l"
+{ return ENGINETYPE; }
+ YY_BREAK
+case 41:
+YY_RULE_SETUP
+#line 160 "filter/scanner.l"
+{ return ENGINEID; }
+ YY_BREAK
+case 42:
+YY_RULE_SETUP
+#line 161 "filter/scanner.l"
+{ return EXPORTER; }
+ YY_BREAK
+case 43:
+YY_RULE_SETUP
+#line 163 "filter/scanner.l"
+{ return PACKETS; }
+ YY_BREAK
+case 44:
+YY_RULE_SETUP
+#line 164 "filter/scanner.l"
+{ return BYTES; }
+ YY_BREAK
+case 45:
+YY_RULE_SETUP
+#line 165 "filter/scanner.l"
+{ return FLOWS; }
+ YY_BREAK
+case 46:
+YY_RULE_SETUP
+#line 166 "filter/scanner.l"
+{ return DURATION; }
+ YY_BREAK
+case 47:
+YY_RULE_SETUP
+#line 167 "filter/scanner.l"
+{ return PPS; }
+ YY_BREAK
+case 48:
+YY_RULE_SETUP
+#line 168 "filter/scanner.l"
+{ return BPS; }
+ YY_BREAK
+case 49:
+YY_RULE_SETUP
+#line 169 "filter/scanner.l"
+{ return BPP; }
+ YY_BREAK
+case 50:
+YY_RULE_SETUP
+#line 171 "filter/scanner.l"
+{ return PROTO; }
+ YY_BREAK
+case 51:
+YY_RULE_SETUP
+#line 172 "filter/scanner.l"
+{ return PORT; }
+ YY_BREAK
+case 52:
+YY_RULE_SETUP
+#line 173 "filter/scanner.l"
+{ return AS; }
+ YY_BREAK
+case 53:
+YY_RULE_SETUP
+#line 174 "filter/scanner.l"
+{ return VLAN; }
+ YY_BREAK
+case 54:
+YY_RULE_SETUP
+#line 175 "filter/scanner.l"
+{ return MPLS; }
+ YY_BREAK
+case 55:
+YY_RULE_SETUP
+#line 176 "filter/scanner.l"
+{ return ETHERTYPE;}
+ YY_BREAK
+case 56:
+YY_RULE_SETUP
+#line 177 "filter/scanner.l"
+{ return MAC; }
+ YY_BREAK
+case 57:
+YY_RULE_SETUP
+#line 178 "filter/scanner.l"
+{ return FLAGS; }
+ YY_BREAK
+case 58:
+YY_RULE_SETUP
+#line 179 "filter/scanner.l"
+{ return ICMP; }
+ YY_BREAK
+case 59:
+YY_RULE_SETUP
+#line 180 "filter/scanner.l"
+{ return ICMPTYPE; }
+ YY_BREAK
+case 60:
+YY_RULE_SETUP
+#line 181 "filter/scanner.l"
+{ return ICMPCODE; }
+ YY_BREAK
+case 61:
+YY_RULE_SETUP
+#line 183 "filter/scanner.l"
+{ return IF; }
+ YY_BREAK
+case 62:
+YY_RULE_SETUP
+#line 184 "filter/scanner.l"
+{ return MASK; }
+ YY_BREAK
+case 63:
+YY_RULE_SETUP
+#line 185 "filter/scanner.l"
+{ return FLOWDIR; }
+ YY_BREAK
+case 64:
+YY_RULE_SETUP
+#line 186 "filter/scanner.l"
+{ return LATENCY; }
+ YY_BREAK
+case 65:
+YY_RULE_SETUP
+#line 187 "filter/scanner.l"
+{ return ASA; }
+ YY_BREAK
+case 66:
+YY_RULE_SETUP
+#line 188 "filter/scanner.l"
+{ return ACL; }
+ YY_BREAK
+case 67:
+YY_RULE_SETUP
+#line 189 "filter/scanner.l"
+{ return PAYLOAD; }
+ YY_BREAK
+case 68:
+YY_RULE_SETUP
+#line 190 "filter/scanner.l"
+{ return GEO; }
+ YY_BREAK
+case 69:
+YY_RULE_SETUP
+#line 191 "filter/scanner.l"
+{ return VRF; }
+ YY_BREAK
+case 70:
+YY_RULE_SETUP
+#line 192 "filter/scanner.l"
+{ return PF; }
+ YY_BREAK
+case 71:
+YY_RULE_SETUP
+#line 194 "filter/scanner.l"
+{ return OBSERVATION; }
+ YY_BREAK
+case 72:
+YY_RULE_SETUP
+#line 196 "filter/scanner.l"
+{ return TOS; }
+ YY_BREAK
+case 73:
+YY_RULE_SETUP
+#line 197 "filter/scanner.l"
+{ return FWDSTAT; }
+ YY_BREAK
+case 74:
+YY_RULE_SETUP
+#line 199 "filter/scanner.l"
+{ ; }
+ YY_BREAK
+case 75:
+YY_RULE_SETUP
+#line 200 "filter/scanner.l"
+{ ; }
+ YY_BREAK
+case 76:
+YY_RULE_SETUP
+#line 202 "filter/scanner.l"
+{
+ yylval.s = stripQuotes(yytext);
+ return STRING;
+ }
+ YY_BREAK
+case 77:
+YY_RULE_SETUP
+#line 206 "filter/scanner.l"
+{
+ yylval.s = stripQuotes(yytext);
+ return STRING;
+ }
+ YY_BREAK
+case 78:
+YY_RULE_SETUP
+#line 210 "filter/scanner.l"
+{
+ yylval.s = stripQuotes(yytext);
+ return STRING;
+ }
+ YY_BREAK
+case 79:
+/* rule 79 can match eol */
+YY_RULE_SETUP
+#line 215 "filter/scanner.l"
+{ lineno++; }
+ YY_BREAK
+case 80:
+YY_RULE_SETUP
+#line 216 "filter/scanner.l"
+{ return yytext[0]; }
+ YY_BREAK
+case 81:
+YY_RULE_SETUP
+#line 219 "filter/scanner.l"
+/* eat the whitespace */
+ YY_BREAK
+case 82:
+YY_RULE_SETUP
+#line 220 "filter/scanner.l"
+{ /* got the include file name */
+ if ( include_stack_ptr >= MAX_INCLUDE_DEPTH ) {
+ fprintf( stderr, "Includes nested too deeply" );
+ exit(255);
+ }
+
+ include_stack[include_stack_ptr] = YY_CURRENT_BUFFER;
+ include_stack_info[include_stack_ptr].name = FilterFilename;
+ include_stack_info[include_stack_ptr].lineno = lineno;
+ include_stack_ptr++;
+
+ lineno = 1;
+ yyin = fopen( yytext, "r" );
+
+ if ( ! yyin ) {
+ fprintf(stderr, "Failed to open include file '%s': %s\n", yytext, strerror(errno));
+ exit(255);
+ }
+
+ FilterFilename = strdup(yytext);
+ yy_switch_to_buffer( yy_create_buffer( yyin, YY_BUF_SIZE ) );
+
+ BEGIN(INITIAL);
+ }
+ YY_BREAK
+case YY_STATE_EOF(INITIAL):
+case YY_STATE_EOF(incl):
+#line 245 "filter/scanner.l"
+{
+ if ( include_stack_ptr == 0 ) {
+ yyterminate();
+ } else {
+ if ( include_stack_info[include_stack_ptr].name )
+ free(include_stack_info[include_stack_ptr].name);
+ include_stack_ptr--;
+ yy_delete_buffer( YY_CURRENT_BUFFER );
+ yy_switch_to_buffer( include_stack[include_stack_ptr] );
+ lineno = include_stack_info[include_stack_ptr].lineno;
+ FilterFilename = include_stack_info[include_stack_ptr].name;
+ }
+ }
+ YY_BREAK
+case 83:
+YY_RULE_SETUP
+#line 259 "filter/scanner.l"
+ECHO;
+ YY_BREAK
+#line 1513 "filter/scanner.c"
+
+ case YY_END_OF_BUFFER:
+ {
+ /* Amount of text matched not including the EOB char. */
+ int yy_amount_of_matched_text = (int) (yy_cp - (yytext_ptr)) - 1;
+
+ /* Undo the effects of YY_DO_BEFORE_ACTION. */
+ *yy_cp = (yy_hold_char);
+ YY_RESTORE_YY_MORE_OFFSET
+
+ if ( YY_CURRENT_BUFFER_LVALUE->yy_buffer_status == YY_BUFFER_NEW )
+ {
+ /* We're scanning a new file or input source. It's
+ * possible that this happened because the user
+ * just pointed yyin at a new source and called
+ * yylex(). If so, then we have to assure
+ * consistency between YY_CURRENT_BUFFER and our
+ * globals. Here is the right place to do so, because
+ * this is the first action (other than possibly a
+ * back-up) that will match for the new input source.
+ */
+ (yy_n_chars) = YY_CURRENT_BUFFER_LVALUE->yy_n_chars;
+ YY_CURRENT_BUFFER_LVALUE->yy_input_file = yyin;
+ YY_CURRENT_BUFFER_LVALUE->yy_buffer_status = YY_BUFFER_NORMAL;
+ }
+
+ /* Note that here we test for yy_c_buf_p "<=" to the position
+ * of the first EOB in the buffer, since yy_c_buf_p will
+ * already have been incremented past the NUL character
+ * (since all states make transitions on EOB to the
+ * end-of-buffer state). Contrast this with the test
+ * in input().
+ */
+ if ( (yy_c_buf_p) <= &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars)] )
+ { /* This was really a NUL. */
+ yy_state_type yy_next_state;
+
+ (yy_c_buf_p) = (yytext_ptr) + yy_amount_of_matched_text;
+
+ yy_current_state = yy_get_previous_state( );
+
+ /* Okay, we're now positioned to make the NUL
+ * transition. We couldn't have
+ * yy_get_previous_state() go ahead and do it
+ * for us because it doesn't know how to deal
+ * with the possibility of jamming (and we don't
+ * want to build jamming into it because then it
+ * will run more slowly).
+ */
+
+ yy_next_state = yy_try_NUL_trans( yy_current_state );
+
+ yy_bp = (yytext_ptr) + YY_MORE_ADJ;
+
+ if ( yy_next_state )
+ {
+ /* Consume the NUL. */
+ yy_cp = ++(yy_c_buf_p);
+ yy_current_state = yy_next_state;
+ goto yy_match;
+ }
+
+ else
+ {
+ yy_cp = (yy_c_buf_p);
+ goto yy_find_action;
+ }
+ }
+
+ else switch ( yy_get_next_buffer( ) )
+ {
+ case EOB_ACT_END_OF_FILE:
+ {
+ (yy_did_buffer_switch_on_eof) = 0;
+
+ if ( yywrap( ) )
+ {
+ /* Note: because we've taken care in
+ * yy_get_next_buffer() to have set up
+ * yytext, we can now set up
+ * yy_c_buf_p so that if some total
+ * hoser (like flex itself) wants to
+ * call the scanner after we return the
+ * YY_NULL, it'll still work - another
+ * YY_NULL will get returned.
+ */
+ (yy_c_buf_p) = (yytext_ptr) + YY_MORE_ADJ;
+
+ yy_act = YY_STATE_EOF(YY_START);
+ goto do_action;
+ }
+
+ else
+ {
+ if ( ! (yy_did_buffer_switch_on_eof) )
+ YY_NEW_FILE;
+ }
+ break;
+ }
+
+ case EOB_ACT_CONTINUE_SCAN:
+ (yy_c_buf_p) =
+ (yytext_ptr) + yy_amount_of_matched_text;
+
+ yy_current_state = yy_get_previous_state( );
+
+ yy_cp = (yy_c_buf_p);
+ yy_bp = (yytext_ptr) + YY_MORE_ADJ;
+ goto yy_match;
+
+ case EOB_ACT_LAST_MATCH:
+ (yy_c_buf_p) =
+ &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars)];
+
+ yy_current_state = yy_get_previous_state( );
+
+ yy_cp = (yy_c_buf_p);
+ yy_bp = (yytext_ptr) + YY_MORE_ADJ;
+ goto yy_find_action;
+ }
+ break;
+ }
+
+ default:
+ YY_FATAL_ERROR(
+ "fatal flex scanner internal error--no action found" );
+ } /* end of action switch */
+ } /* end of scanning one token */
+ } /* end of user's declarations */
+} /* end of yylex */
+
+/* yy_get_next_buffer - try to read in a new buffer
+ *
+ * Returns a code representing an action:
+ * EOB_ACT_LAST_MATCH -
+ * EOB_ACT_CONTINUE_SCAN - continue scanning from current position
+ * EOB_ACT_END_OF_FILE - end of file
+ */
+static int yy_get_next_buffer (void)
+{
+ char *dest = YY_CURRENT_BUFFER_LVALUE->yy_ch_buf;
+ char *source = (yytext_ptr);
+ int number_to_move, i;
+ int ret_val;
+
+ if ( (yy_c_buf_p) > &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars) + 1] )
+ YY_FATAL_ERROR(
+ "fatal flex scanner internal error--end of buffer missed" );
+
+ if ( YY_CURRENT_BUFFER_LVALUE->yy_fill_buffer == 0 )
+ { /* Don't try to fill the buffer, so this is an EOF. */
+ if ( (yy_c_buf_p) - (yytext_ptr) - YY_MORE_ADJ == 1 )
+ {
+ /* We matched a single character, the EOB, so
+ * treat this as a final EOF.
+ */
+ return EOB_ACT_END_OF_FILE;
+ }
+
+ else
+ {
+ /* We matched some text prior to the EOB, first
+ * process it.
+ */
+ return EOB_ACT_LAST_MATCH;
+ }
+ }
+
+ /* Try to read more data. */
+
+ /* First move last chars to start of buffer. */
+ number_to_move = (int) ((yy_c_buf_p) - (yytext_ptr) - 1);
+
+ for ( i = 0; i < number_to_move; ++i )
+ *(dest++) = *(source++);
+
+ if ( YY_CURRENT_BUFFER_LVALUE->yy_buffer_status == YY_BUFFER_EOF_PENDING )
+ /* don't do the read, it's not guaranteed to return an EOF,
+ * just force an EOF
+ */
+ YY_CURRENT_BUFFER_LVALUE->yy_n_chars = (yy_n_chars) = 0;
+
+ else
+ {
+ yy_size_t num_to_read =
+ YY_CURRENT_BUFFER_LVALUE->yy_buf_size - number_to_move - 1;
+
+ while ( num_to_read <= 0 )
+ { /* Not enough room in the buffer - grow it. */
+
+ /* just a shorter name for the current buffer */
+ YY_BUFFER_STATE b = YY_CURRENT_BUFFER_LVALUE;
+
+ int yy_c_buf_p_offset =
+ (int) ((yy_c_buf_p) - b->yy_ch_buf);
+
+ if ( b->yy_is_our_buffer )
+ {
+ yy_size_t new_size = b->yy_buf_size * 2;
+
+ if ( new_size <= 0 )
+ b->yy_buf_size += b->yy_buf_size / 8;
+ else
+ b->yy_buf_size *= 2;
+
+ b->yy_ch_buf = (char *)
+ /* Include room in for 2 EOB chars. */
+ yyrealloc( (void *) b->yy_ch_buf,
+ (yy_size_t) (b->yy_buf_size + 2) );
+ }
+ else
+ /* Can't grow it, we don't own it. */
+ b->yy_ch_buf = NULL;
+
+ if ( ! b->yy_ch_buf )
+ YY_FATAL_ERROR(
+ "fatal error - scanner input buffer overflow" );
+
+ (yy_c_buf_p) = &b->yy_ch_buf[yy_c_buf_p_offset];
+
+ num_to_read = YY_CURRENT_BUFFER_LVALUE->yy_buf_size -
+ number_to_move - 1;
+
+ }
+
+ if ( num_to_read > YY_READ_BUF_SIZE )
+ num_to_read = YY_READ_BUF_SIZE;
+
+ /* Read in more data. */
+ YY_INPUT( (&YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[number_to_move]),
+ (yy_n_chars), num_to_read );
+
+ YY_CURRENT_BUFFER_LVALUE->yy_n_chars = (yy_n_chars);
+ }
+
+ if ( (yy_n_chars) == 0 )
+ {
+ if ( number_to_move == YY_MORE_ADJ )
+ {
+ ret_val = EOB_ACT_END_OF_FILE;
+ yyrestart( yyin );
+ }
+
+ else
+ {
+ ret_val = EOB_ACT_LAST_MATCH;
+ YY_CURRENT_BUFFER_LVALUE->yy_buffer_status =
+ YY_BUFFER_EOF_PENDING;
+ }
+ }
+
+ else
+ ret_val = EOB_ACT_CONTINUE_SCAN;
+
+ if (((yy_n_chars) + number_to_move) > YY_CURRENT_BUFFER_LVALUE->yy_buf_size) {
+ /* Extend the array by 50%, plus the number we really need. */
+ yy_size_t new_size = (yy_n_chars) + number_to_move + ((yy_n_chars) >> 1);
+ YY_CURRENT_BUFFER_LVALUE->yy_ch_buf = (char *) yyrealloc(
+ (void *) YY_CURRENT_BUFFER_LVALUE->yy_ch_buf, (yy_size_t) new_size );
+ if ( ! YY_CURRENT_BUFFER_LVALUE->yy_ch_buf )
+ YY_FATAL_ERROR( "out of dynamic memory in yy_get_next_buffer()" );
+ /* "- 2" to take care of EOB's */
+ YY_CURRENT_BUFFER_LVALUE->yy_buf_size = (int) (new_size - 2);
+ }
+
+ (yy_n_chars) += number_to_move;
+ YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars)] = YY_END_OF_BUFFER_CHAR;
+ YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars) + 1] = YY_END_OF_BUFFER_CHAR;
+
+ (yytext_ptr) = &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[0];
+
+ return ret_val;
+}
+
+/* yy_get_previous_state - get the state just before the EOB char was reached */
+
+ static yy_state_type yy_get_previous_state (void)
+{
+ yy_state_type yy_current_state;
+ char *yy_cp;
+
+ yy_current_state = (yy_start);
+
+ for ( yy_cp = (yytext_ptr) + YY_MORE_ADJ; yy_cp < (yy_c_buf_p); ++yy_cp )
+ {
+ YY_CHAR yy_c = (*yy_cp ? yy_ec[YY_SC_TO_UI(*yy_cp)] : 1);
+ if ( yy_accept[yy_current_state] )
+ {
+ (yy_last_accepting_state) = yy_current_state;
+ (yy_last_accepting_cpos) = yy_cp;
+ }
+ while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state )
+ {
+ yy_current_state = (int) yy_def[yy_current_state];
+ if ( yy_current_state >= 257 )
+ yy_c = yy_meta[yy_c];
+ }
+ yy_current_state = yy_nxt[yy_base[yy_current_state] + yy_c];
+ }
+
+ return yy_current_state;
+}
+
+/* yy_try_NUL_trans - try to make a transition on the NUL character
+ *
+ * synopsis
+ * next_state = yy_try_NUL_trans( current_state );
+ */
+ static yy_state_type yy_try_NUL_trans (yy_state_type yy_current_state )
+{
+ int yy_is_jam;
+ char *yy_cp = (yy_c_buf_p);
+
+ YY_CHAR yy_c = 1;
+ if ( yy_accept[yy_current_state] )
+ {
+ (yy_last_accepting_state) = yy_current_state;
+ (yy_last_accepting_cpos) = yy_cp;
+ }
+ while ( yy_chk[yy_base[yy_current_state] + yy_c] != yy_current_state )
+ {
+ yy_current_state = (int) yy_def[yy_current_state];
+ if ( yy_current_state >= 257 )
+ yy_c = yy_meta[yy_c];
+ }
+ yy_current_state = yy_nxt[yy_base[yy_current_state] + yy_c];
+ yy_is_jam = (yy_current_state == 256);
+
+ return yy_is_jam ? 0 : yy_current_state;
+}
+
+#ifndef YY_NO_UNPUT
+
+ static void yyunput (int c, char * yy_bp )
+{
+ char *yy_cp;
+
+ yy_cp = (yy_c_buf_p);
+
+ /* undo effects of setting up yytext */
+ *yy_cp = (yy_hold_char);
+
+ if ( yy_cp < YY_CURRENT_BUFFER_LVALUE->yy_ch_buf + 2 )
+ { /* need to shift things up to make room */
+ /* +2 for EOB chars. */
+ yy_size_t number_to_move = (yy_n_chars) + 2;
+ char *dest = &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[
+ YY_CURRENT_BUFFER_LVALUE->yy_buf_size + 2];
+ char *source =
+ &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[number_to_move];
+
+ while ( source > YY_CURRENT_BUFFER_LVALUE->yy_ch_buf )
+ *--dest = *--source;
+
+ yy_cp += (int) (dest - source);
+ yy_bp += (int) (dest - source);
+ YY_CURRENT_BUFFER_LVALUE->yy_n_chars =
+ (yy_n_chars) = (int) YY_CURRENT_BUFFER_LVALUE->yy_buf_size;
+
+ if ( yy_cp < YY_CURRENT_BUFFER_LVALUE->yy_ch_buf + 2 )
+ YY_FATAL_ERROR( "flex scanner push-back overflow" );
+ }
+
+ *--yy_cp = (char) c;
+
+ (yytext_ptr) = yy_bp;
+ (yy_hold_char) = *yy_cp;
+ (yy_c_buf_p) = yy_cp;
+}
+
+#endif
+
+#ifndef YY_NO_INPUT
+#ifdef __cplusplus
+ static int yyinput (void)
+#else
+ static int input (void)
+#endif
+
+{
+ int c;
+
+ *(yy_c_buf_p) = (yy_hold_char);
+
+ if ( *(yy_c_buf_p) == YY_END_OF_BUFFER_CHAR )
+ {
+ /* yy_c_buf_p now points to the character we want to return.
+ * If this occurs *before* the EOB characters, then it's a
+ * valid NUL; if not, then we've hit the end of the buffer.
+ */
+ if ( (yy_c_buf_p) < &YY_CURRENT_BUFFER_LVALUE->yy_ch_buf[(yy_n_chars)] )
+ /* This was really a NUL. */
+ *(yy_c_buf_p) = '\0';
+
+ else
+ { /* need more input */
+ yy_size_t offset = (yy_c_buf_p) - (yytext_ptr);
+ ++(yy_c_buf_p);
+
+ switch ( yy_get_next_buffer( ) )
+ {
+ case EOB_ACT_LAST_MATCH:
+ /* This happens because yy_g_n_b()
+ * sees that we've accumulated a
+ * token and flags that we need to
+ * try matching the token before
+ * proceeding. But for input(),
+ * there's no matching to consider.
+ * So convert the EOB_ACT_LAST_MATCH
+ * to EOB_ACT_END_OF_FILE.
+ */
+
+ /* Reset buffer status. */
+ yyrestart( yyin );
+
+ /*FALLTHROUGH*/
+
+ case EOB_ACT_END_OF_FILE:
+ {
+ if ( yywrap( ) )
+ return 0;
+
+ if ( ! (yy_did_buffer_switch_on_eof) )
+ YY_NEW_FILE;
+#ifdef __cplusplus
+ return yyinput();
+#else
+ return input();
+#endif
+ }
+
+ case EOB_ACT_CONTINUE_SCAN:
+ (yy_c_buf_p) = (yytext_ptr) + offset;
+ break;
+ }
+ }
+ }
+
+ c = *(unsigned char *) (yy_c_buf_p); /* cast for 8-bit char's */
+ *(yy_c_buf_p) = '\0'; /* preserve yytext */
+ (yy_hold_char) = *++(yy_c_buf_p);
+
+ return c;
+}
+#endif /* ifndef YY_NO_INPUT */
+
+/** Immediately switch to a different input stream.
+ * @param input_file A readable stream.
+ *
+ * @note This function does not reset the start condition to @c INITIAL .
+ */
+ void yyrestart (FILE * input_file )
+{
+
+ if ( ! YY_CURRENT_BUFFER ){
+ yyensure_buffer_stack ();
+ YY_CURRENT_BUFFER_LVALUE =
+ yy_create_buffer( yyin, YY_BUF_SIZE );
+ }
+
+ yy_init_buffer( YY_CURRENT_BUFFER, input_file );
+ yy_load_buffer_state( );
+}
+
+/** Switch to a different input buffer.
+ * @param new_buffer The new input buffer.
+ *
+ */
+ void yy_switch_to_buffer (YY_BUFFER_STATE new_buffer )
+{
+
+ /* TODO. We should be able to replace this entire function body
+ * with
+ * yypop_buffer_state();
+ * yypush_buffer_state(new_buffer);
+ */
+ yyensure_buffer_stack ();
+ if ( YY_CURRENT_BUFFER == new_buffer )
+ return;
+
+ if ( YY_CURRENT_BUFFER )
+ {
+ /* Flush out information for old buffer. */
+ *(yy_c_buf_p) = (yy_hold_char);
+ YY_CURRENT_BUFFER_LVALUE->yy_buf_pos = (yy_c_buf_p);
+ YY_CURRENT_BUFFER_LVALUE->yy_n_chars = (yy_n_chars);
+ }
+
+ YY_CURRENT_BUFFER_LVALUE = new_buffer;
+ yy_load_buffer_state( );
+
+ /* We don't actually know whether we did this switch during
+ * EOF (yywrap()) processing, but the only time this flag
+ * is looked at is after yywrap() is called, so it's safe
+ * to go ahead and always set it.
+ */
+ (yy_did_buffer_switch_on_eof) = 1;
+}
+
+static void yy_load_buffer_state (void)
+{
+ (yy_n_chars) = YY_CURRENT_BUFFER_LVALUE->yy_n_chars;
+ (yytext_ptr) = (yy_c_buf_p) = YY_CURRENT_BUFFER_LVALUE->yy_buf_pos;
+ yyin = YY_CURRENT_BUFFER_LVALUE->yy_input_file;
+ (yy_hold_char) = *(yy_c_buf_p);
+}
+
+/** Allocate and initialize an input buffer state.
+ * @param file A readable stream.
+ * @param size The character buffer size in bytes. When in doubt, use @c YY_BUF_SIZE.
+ *
+ * @return the allocated buffer state.
+ */
+ YY_BUFFER_STATE yy_create_buffer (FILE * file, int size )
+{
+ YY_BUFFER_STATE b;
+
+ b = (YY_BUFFER_STATE) yyalloc( sizeof( struct yy_buffer_state ) );
+ if ( ! b )
+ YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );
+
+ b->yy_buf_size = size;
+
+ /* yy_ch_buf has to be 2 characters longer than the size given because
+ * we need to put in 2 end-of-buffer characters.
+ */
+ b->yy_ch_buf = (char *) yyalloc( (yy_size_t) (b->yy_buf_size + 2) );
+ if ( ! b->yy_ch_buf )
+ YY_FATAL_ERROR( "out of dynamic memory in yy_create_buffer()" );
+
+ b->yy_is_our_buffer = 1;
+
+ yy_init_buffer( b, file );
+
+ return b;
+}
+
+/** Destroy the buffer.
+ * @param b a buffer created with yy_create_buffer()
+ *
+ */
+ void yy_delete_buffer (YY_BUFFER_STATE b )
+{
+
+ if ( ! b )
+ return;
+
+ if ( b == YY_CURRENT_BUFFER ) /* Not sure if we should pop here. */
+ YY_CURRENT_BUFFER_LVALUE = (YY_BUFFER_STATE) 0;
+
+ if ( b->yy_is_our_buffer )
+ yyfree( (void *) b->yy_ch_buf );
+
+ yyfree( (void *) b );
+}
+
+/* Initializes or reinitializes a buffer.
+ * This function is sometimes called more than once on the same buffer,
+ * such as during a yyrestart() or at EOF.
+ */
+ static void yy_init_buffer (YY_BUFFER_STATE b, FILE * file )
+
+{
+ int oerrno = errno;
+
+ yy_flush_buffer( b );
+
+ b->yy_input_file = file;
+ b->yy_fill_buffer = 1;
+
+ /* If b is the current buffer, then yy_init_buffer was _probably_
+ * called from yyrestart() or through yy_get_next_buffer.
+ * In that case, we don't want to reset the lineno or column.
+ */
+ if (b != YY_CURRENT_BUFFER){
+ b->yy_bs_lineno = 1;
+ b->yy_bs_column = 0;
+ }
+
+ b->yy_is_interactive = file ? (isatty( fileno(file) ) > 0) : 0;
+
+ errno = oerrno;
+}
+
+/** Discard all buffered characters. On the next scan, YY_INPUT will be called.
+ * @param b the buffer state to be flushed, usually @c YY_CURRENT_BUFFER.
+ *
+ */
+ void yy_flush_buffer (YY_BUFFER_STATE b )
+{
+ if ( ! b )
+ return;
+
+ b->yy_n_chars = 0;
+
+ /* We always need two end-of-buffer characters. The first causes
+ * a transition to the end-of-buffer state. The second causes
+ * a jam in that state.
+ */
+ b->yy_ch_buf[0] = YY_END_OF_BUFFER_CHAR;
+ b->yy_ch_buf[1] = YY_END_OF_BUFFER_CHAR;
+
+ b->yy_buf_pos = &b->yy_ch_buf[0];
+
+ b->yy_at_bol = 1;
+ b->yy_buffer_status = YY_BUFFER_NEW;
+
+ if ( b == YY_CURRENT_BUFFER )
+ yy_load_buffer_state( );
+}
+
+/** Pushes the new state onto the stack. The new state becomes
+ * the current state. This function will allocate the stack
+ * if necessary.
+ * @param new_buffer The new state.
+ *
+ */
+void yypush_buffer_state (YY_BUFFER_STATE new_buffer )
+{
+ if (new_buffer == NULL)
+ return;
+
+ yyensure_buffer_stack();
+
+ /* This block is copied from yy_switch_to_buffer. */
+ if ( YY_CURRENT_BUFFER )
+ {
+ /* Flush out information for old buffer. */
+ *(yy_c_buf_p) = (yy_hold_char);
+ YY_CURRENT_BUFFER_LVALUE->yy_buf_pos = (yy_c_buf_p);
+ YY_CURRENT_BUFFER_LVALUE->yy_n_chars = (yy_n_chars);
+ }
+
+ /* Only push if top exists. Otherwise, replace top. */
+ if (YY_CURRENT_BUFFER)
+ (yy_buffer_stack_top)++;
+ YY_CURRENT_BUFFER_LVALUE = new_buffer;
+
+ /* copied from yy_switch_to_buffer. */
+ yy_load_buffer_state( );
+ (yy_did_buffer_switch_on_eof) = 1;
+}
+
+/** Removes and deletes the top of the stack, if present.
+ * The next element becomes the new top.
+ *
+ */
+void yypop_buffer_state (void)
+{
+ if (!YY_CURRENT_BUFFER)
+ return;
+
+ yy_delete_buffer(YY_CURRENT_BUFFER );
+ YY_CURRENT_BUFFER_LVALUE = NULL;
+ if ((yy_buffer_stack_top) > 0)
+ --(yy_buffer_stack_top);
+
+ if (YY_CURRENT_BUFFER) {
+ yy_load_buffer_state( );
+ (yy_did_buffer_switch_on_eof) = 1;
+ }
+}
+
+/* Allocates the stack if it does not exist.
+ * Guarantees space for at least one push.
+ */
+static void yyensure_buffer_stack (void)
+{
+ yy_size_t num_to_alloc;
+
+ if (!(yy_buffer_stack)) {
+
+ /* First allocation is just for 2 elements, since we don't know if this
+ * scanner will even need a stack. We use 2 instead of 1 to avoid an
+ * immediate realloc on the next call.
+ */
+ num_to_alloc = 1; /* After all that talk, this was set to 1 anyways... */
+ (yy_buffer_stack) = (struct yy_buffer_state**)yyalloc
+ (num_to_alloc * sizeof(struct yy_buffer_state*)
+ );
+ if ( ! (yy_buffer_stack) )
+ YY_FATAL_ERROR( "out of dynamic memory in yyensure_buffer_stack()" );
+
+ memset((yy_buffer_stack), 0, num_to_alloc * sizeof(struct yy_buffer_state*));
+
+ (yy_buffer_stack_max) = num_to_alloc;
+ (yy_buffer_stack_top) = 0;
+ return;
+ }
+
+ if ((yy_buffer_stack_top) >= ((yy_buffer_stack_max)) - 1){
+
+ /* Increase the buffer to prepare for a possible push. */
+ yy_size_t grow_size = 8 /* arbitrary grow size */;
+
+ num_to_alloc = (yy_buffer_stack_max) + grow_size;
+ (yy_buffer_stack) = (struct yy_buffer_state**)yyrealloc
+ ((yy_buffer_stack),
+ num_to_alloc * sizeof(struct yy_buffer_state*)
+ );
+ if ( ! (yy_buffer_stack) )
+ YY_FATAL_ERROR( "out of dynamic memory in yyensure_buffer_stack()" );
+
+ /* zero only the new slots.*/
+ memset((yy_buffer_stack) + (yy_buffer_stack_max), 0, grow_size * sizeof(struct yy_buffer_state*));
+ (yy_buffer_stack_max) = num_to_alloc;
+ }
+}
+
+/** Setup the input buffer state to scan directly from a user-specified character buffer.
+ * @param base the character buffer
+ * @param size the size in bytes of the character buffer
+ *
+ * @return the newly allocated buffer state object.
+ */
+YY_BUFFER_STATE yy_scan_buffer (char * base, yy_size_t size )
+{
+ YY_BUFFER_STATE b;
+
+ if ( size < 2 ||
+ base[size-2] != YY_END_OF_BUFFER_CHAR ||
+ base[size-1] != YY_END_OF_BUFFER_CHAR )
+ /* They forgot to leave room for the EOB's. */
+ return NULL;
+
+ b = (YY_BUFFER_STATE) yyalloc( sizeof( struct yy_buffer_state ) );
+ if ( ! b )
+ YY_FATAL_ERROR( "out of dynamic memory in yy_scan_buffer()" );
+
+ b->yy_buf_size = (int) (size - 2); /* "- 2" to take care of EOB's */
+ b->yy_buf_pos = b->yy_ch_buf = base;
+ b->yy_is_our_buffer = 0;
+ b->yy_input_file = NULL;
+ b->yy_n_chars = b->yy_buf_size;
+ b->yy_is_interactive = 0;
+ b->yy_at_bol = 1;
+ b->yy_fill_buffer = 0;
+ b->yy_buffer_status = YY_BUFFER_NEW;
+
+ yy_switch_to_buffer( b );
+
+ return b;
+}
+
+/** Setup the input buffer state to scan a string. The next call to yylex() will
+ * scan from a @e copy of @a str.
+ * @param yystr a NUL-terminated string to scan
+ *
+ * @return the newly allocated buffer state object.
+ * @note If you want to scan bytes that may contain NUL values, then use
+ * yy_scan_bytes() instead.
+ */
+YY_BUFFER_STATE yy_scan_string (const char * yystr )
+{
+
+ return yy_scan_bytes( yystr, (int) strlen(yystr) );
+}
+
+/** Setup the input buffer state to scan the given bytes. The next call to yylex() will
+ * scan from a @e copy of @a bytes.
+ * @param yybytes the byte buffer to scan
+ * @param _yybytes_len the number of bytes in the buffer pointed to by @a bytes.
+ *
+ * @return the newly allocated buffer state object.
+ */
+YY_BUFFER_STATE yy_scan_bytes (const char * yybytes, yy_size_t _yybytes_len )
+{
+ YY_BUFFER_STATE b;
+ char *buf;
+ yy_size_t n;
+ yy_size_t i;
+
+ /* Get memory for full buffer, including space for trailing EOB's. */
+ n = (yy_size_t) (_yybytes_len + 2);
+ buf = (char *) yyalloc( n );
+ if ( ! buf )
+ YY_FATAL_ERROR( "out of dynamic memory in yy_scan_bytes()" );
+
+ for ( i = 0; i < _yybytes_len; ++i )
+ buf[i] = yybytes[i];
+
+ buf[_yybytes_len] = buf[_yybytes_len+1] = YY_END_OF_BUFFER_CHAR;
+
+ b = yy_scan_buffer( buf, n );
+ if ( ! b )
+ YY_FATAL_ERROR( "bad buffer in yy_scan_bytes()" );
+
+ /* It's okay to grow etc. this buffer, and we should throw it
+ * away when we're done.
+ */
+ b->yy_is_our_buffer = 1;
+
+ return b;
+}
+
+#ifndef YY_EXIT_FAILURE
+#define YY_EXIT_FAILURE 2
+#endif
+
+static void yynoreturn yy_fatal_error (const char* msg )
+{
+ fprintf( stderr, "%s\n", msg );
+ exit( YY_EXIT_FAILURE );
+}
+
+/* Redefine yyless() so it works in section 3 code. */
+
+#undef yyless
+#define yyless(n) \
+ do \
+ { \
+ /* Undo effects of setting up yytext. */ \
+ yy_size_t yyless_macro_arg = (n); \
+ YY_LESS_LINENO(yyless_macro_arg);\
+ yytext[yyleng] = (yy_hold_char); \
+ (yy_c_buf_p) = yytext + yyless_macro_arg; \
+ (yy_hold_char) = *(yy_c_buf_p); \
+ *(yy_c_buf_p) = '\0'; \
+ yyleng = yyless_macro_arg; \
+ } \
+ while ( 0 )
+
+/* Accessor methods (get/set functions) to struct members. */
+
+/** Get the current line number.
+ *
+ */
+int yyget_lineno (void)
+{
+
+ return yylineno;
+}
+
+/** Get the input stream.
+ *
+ */
+FILE *yyget_in (void)
+{
+ return yyin;
+}
+
+/** Get the output stream.
+ *
+ */
+FILE *yyget_out (void)
+{
+ return yyout;
+}
+
+/** Get the length of the current token.
+ *
+ */
+yy_size_t yyget_leng (void)
+{
+ return yyleng;
+}
+
+/** Get the current token.
+ *
+ */
+
+char *yyget_text (void)
+{
+ return yytext;
+}
+
+/** Set the current line number.
+ * @param _line_number line number
+ *
+ */
+void yyset_lineno (int _line_number )
+{
+
+ yylineno = _line_number;
+}
+
+/** Set the input stream. This does not discard the current
+ * input buffer.
+ * @param _in_str A readable stream.
+ *
+ * @see yy_switch_to_buffer
+ */
+void yyset_in (FILE * _in_str )
+{
+ yyin = _in_str ;
+}
+
+void yyset_out (FILE * _out_str )
+{
+ yyout = _out_str ;
+}
+
+int yyget_debug (void)
+{
+ return yy_flex_debug;
+}
+
+void yyset_debug (int _bdebug )
+{
+ yy_flex_debug = _bdebug ;
+}
+
+static int yy_init_globals (void)
+{
+ /* Initialization is the same as for the non-reentrant scanner.
+ * This function is called from yylex_destroy(), so don't allocate here.
+ */
+
+ (yy_buffer_stack) = NULL;
+ (yy_buffer_stack_top) = 0;
+ (yy_buffer_stack_max) = 0;
+ (yy_c_buf_p) = NULL;
+ (yy_init) = 0;
+ (yy_start) = 0;
+
+/* Defined in main.c */
+#ifdef YY_STDINIT
+ yyin = stdin;
+ yyout = stdout;
+#else
+ yyin = NULL;
+ yyout = NULL;
+#endif
+
+ /* For future reference: Set errno on error, since we are called by
+ * yylex_init()
+ */
+ return 0;
+}
+
+/* yylex_destroy is for both reentrant and non-reentrant scanners. */
+int yylex_destroy (void)
+{
+
+ /* Pop the buffer stack, destroying each element. */
+ while(YY_CURRENT_BUFFER){
+ yy_delete_buffer( YY_CURRENT_BUFFER );
+ YY_CURRENT_BUFFER_LVALUE = NULL;
+ yypop_buffer_state();
+ }
+
+ /* Destroy the stack itself. */
+ yyfree((yy_buffer_stack) );
+ (yy_buffer_stack) = NULL;
+
+ /* Reset the globals. This is important in a non-reentrant scanner so the next time
+ * yylex() is called, initialization will occur. */
+ yy_init_globals( );
+
+ return 0;
+}
+
+/*
+ * Internal utility routines.
+ */
+
+#ifndef yytext_ptr
+static void yy_flex_strncpy (char* s1, const char * s2, int n )
+{
+
+ int i;
+ for ( i = 0; i < n; ++i )
+ s1[i] = s2[i];
+}
+#endif
+
+#ifdef YY_NEED_STRLEN
+static int yy_flex_strlen (const char * s )
+{
+ int n;
+ for ( n = 0; s[n]; ++n )
+ ;
+
+ return n;
+}
+#endif
+
+void *yyalloc (yy_size_t size )
+{
+ return malloc(size);
+}
+
+void *yyrealloc (void * ptr, yy_size_t size )
+{
+
+ /* The cast to (char *) in the following accommodates both
+ * implementations that use char* generic pointers, and those
+ * that use void* generic pointers. It works with the latter
+ * because both ANSI C and C++ allow castless assignment from
+ * any pointer type to void*, and deal with argument conversions
+ * as though doing an assignment.
+ */
+ return realloc(ptr, size);
+}
+
+void yyfree (void * ptr )
+{
+ free( (char *) ptr ); /* see yyrealloc() for (char *) cast */
+}
+
+#define YYTABLES_NAME "yytables"
+
+#line 259 "filter/scanner.l"
+
+
+void lex_init(char *buf) {
+#ifdef FLEX_SCANNER
+ in_buffer = yy_scan_string(buf);
+#else
+ in_buffer = buf;
+#endif
+ lineno = 1;
+}
+
+/*
+ * Do any cleanup necessary after parsing.
+ */
+void lex_cleanup(void) {
+#ifdef FLEX_SCANNER
+ if (in_buffer != NULL)
+ yy_delete_buffer(in_buffer);
+ in_buffer = NULL;
+#endif
+}
+
+int yywrap(void) {
+ return 1;
+}
+
+static char *stripQuotes(char *string) {
+ char *w = strdup(string);
+
+ // strip ", ' and /' from begin/end of string
+ if ( w[0] == 0x27 || w[0] == 0x22 || w[0] == 0x2f ) w++;
+ size_t last = strlen(w) -1;
+
+ if ( w[last] == 0x27 || w[last] == 0x22 || w[last] == 0x2f ) w[last] = '\0';
+
+ return w;
+} // End of stripQuotes
diff --git a/src/libnffile/vcs_track.h b/src/libnffile/vcs_track.h
new file mode 100644
index 00000000..b3c62a1e
--- /dev/null
+++ b/src/libnffile/vcs_track.h
@@ -0,0 +1,7 @@
+#ifndef __VCS_TRACK_H__
+#define __VCS_TRACK_H__
+//THIS FILE IS AUTO GENERATED
+//DO NOT TRACK THIS FILE WITH THE VCS
+#define VCS_TRACK_DATE "2024-05-31 17:28:54 +0200"
+#define VCS_TRACK_HASH "3810acf"
+#endif
diff --git a/src/tor/torlookup b/src/tor/torlookup
new file mode 100755
index 00000000..a3d4758e
Binary files /dev/null and b/src/tor/torlookup differ
diff --git a/test.sh b/test.sh
new file mode 100644
index 00000000..d21e6c15
--- /dev/null
+++ b/test.sh
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+NFDUMP=nfdump
+
+rm -f out1
+$NFDUMP -Gnone -q -r ../flow-archive/single.nf -o line > out1
+$NFDUMP -Gnone -q -r ../flow-archive/single.nf -o long >> out1
+$NFDUMP -Gnone -q -r ../flow-archive/single.nf -o extended >> out1
+$NFDUMP -Gnone -q -r ../flow-archive/bidir.nf -o biline >> out1
+$NFDUMP -Gnone -q -r ../flow-archive/bidir.nf -o bilong >> out1
+$NFDUMP -Gnone -q -r ../flow-archive/bidir.nf -o raw >> out1
+
+diff -ru test1.txt out1
diff --git a/test1.txt b/test1.txt
new file mode 100644
index 00000000..ddb5344a
--- /dev/null
+++ b/test1.txt
@@ -0,0 +1,5975 @@
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 29 18600 2
+2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 4 304 4
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 1 40 1
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 12 2107 2
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 1 40 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 10 840 2
+2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 1 76 2
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 1 32 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 1 76 2
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 10 1155 2
+2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 13 6591 2
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 11 4264 2
+2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 1 76 2
+2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 1 44 1
+2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 13 4154 2
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 77363 4.4 M 2
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 5 895 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 11 653 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 1 76 2
+2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 1 40 1
+2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 29 18602 2
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 1 44 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 1 99 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 1 76 2
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 1 44 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 1 75 2
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 1 44 1
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 1 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 1 48 1
+2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 10 640 1
+2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 10 640 1
+2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 4 304 4
+2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 1 187 1
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 ...AP.SF 0 29 18600 2
+2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 ........ 0 4 304 4
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 ......S. 0 1 40 1
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 CE.APRSF 0 12 2107 2
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 ......S. 0 1 40 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 ...AP... 0 10 840 2
+2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 ........ 0 1 76 2
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 ........ 0 1 32 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 ........ 0 1 76 2
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 ...AP... 0 10 1155 2
+2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 ...AP.S. 0 13 6591 2
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 ...AP.SF 0 11 4264 2
+2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 ........ 0 1 76 2
+2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 ......S. 0 1 44 1
+2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 ........ 0 13 4154 2
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 ...AP..F 0 77363 4.4 M 2
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 ...AP... 0 5 895 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 ...AP... 0 11 653 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 ........ 0 1 76 2
+2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 ......S. 0 1 40 1
+2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 ...AP.SF 0 29 18602 2
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 ......S. 0 1 44 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 ........ 0 1 99 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 ........ 0 1 76 2
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 ......S. 0 1 44 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 ........ 0 1 75 2
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 ......S. 0 1 44 1
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 ......S. 0 1 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 ......S. 0 1 48 1
+2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 ......S. 0 10 640 1
+2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 ......S. 0 10 640 1
+2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 ........ 0 4 304 4
+2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 ........ 0 1 187 1
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:53384 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 -> 157.143.34.100:62096 ...AP.SF 0 29 18600 0 4804 641 2
+2024-04-14 23:59:28.123 00:01:00.032 ICMP 8.8.8.8:0 -> 157.143.34.100:0.0 ........ 0 4 304 0 40 76 4
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:59579 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:29.049 00:00:00.000 TCP 79.110.62.11:44573 -> 157.143.34.100:6190 ......S. 0 1 40 0 0 40 1
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:61842 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 -> 2.21.22.179:443 CE.APRSF 0 12 2107 23 32793 175 2
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61828 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:16.238 00:00:00.000 TCP 193.3.53.7:59081 -> 157.143.34.100:789 ......S. 0 1 40 0 0 40 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:56791 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:56069 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:55209 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:57:57.204 00:00:35.020 TCP 157.143.34.100:59650 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:57.901 00:00:35.008 TCP 157.143.34.100:63413 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:54:33.630 00:04:00.115 TCP 157.143.34.100:58186 -> 172.217.218.188:5228 ...AP... 0 10 840 0 27 84 2
+2024-04-14 23:58:14.287 00:00:00.020 UDP 216.239.35.4:123 -> 157.143.34.100:59726 ........ 0 1 76 50 30400 76 2
+2024-04-14 23:57:56.899 00:00:35.020 TCP 157.143.34.100:54526 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:30.701 00:00:00.000 ICMP 129.82.138.31:0 -> 157.143.34.100:8.0 ........ 0 1 32 0 0 32 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:64041 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:65304 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:03.671 00:00:00.000 TCP 157.143.34.100:57459 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:58:41.598 00:00:00.010 UDP 83.150.25.25:123 -> 157.143.34.100:59868 ........ 0 1 76 100 60800 76 2
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:64775 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:54:27.599 00:04:15.118 TCP 172.217.168.3:80 -> 157.143.34.100:59696 ...AP... 0 10 1155 0 36 115 2
+2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 -> 157.143.34.100:51638 ...AP.S. 0 13 6591 90 368727 507 2
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:56896 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 -> 157.143.34.100:62151 ...AP.SF 0 11 4264 4 14552 387 2
+2024-04-14 23:59:14.576 00:00:00.011 UDP 193.33.30.39:123 -> 157.143.34.100:46408 ........ 0 1 76 90 55272 76 2
+2024-04-14 23:59:03.154 00:00:00.000 TCP 157.143.34.100:51943 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:08.059 00:00:00.000 TCP 185.165.191.27:26312 -> 157.143.34.100:1433 ......S. 0 1 44 0 0 44 1
+2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 -> 157.143.34.100:59739 ........ 0 13 4154 114 291508 319 2
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:64043 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 -> 213.144.148.130:28919 ...AP..F 0 77363 4.4 M 408 183950 56 2
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:53717 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:54:46.461 00:04:00.298 TCP 172.217.168.3:80 -> 157.143.34.100:57657 ...AP... 0 5 895 0 29 179 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:56559 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:57:57.270 00:00:35.017 TCP 157.143.34.100:61573 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:54:38.798 00:04:29.864 TCP 157.143.34.100:51134 -> 142.251.31.188:5228 ...AP... 0 11 653 0 19 59 2
+2024-04-14 23:59:03.923 00:00:00.000 TCP 157.143.34.100:55160 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:22.598 00:00:00.010 UDP 77.109.132.50:123 -> 157.143.34.100:64169 ........ 0 1 76 100 60800 76 2
+2024-04-14 23:59:34.639 00:00:00.000 TCP 79.110.62.75:56012 -> 157.143.34.100:5293 ......S. 0 1 40 0 0 40 1
+2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 -> 157.143.34.100:59352 ...AP.SF 0 29 18602 0 4803 641 2
+2024-04-14 23:59:04.228 00:00:00.000 TCP 157.143.34.100:54666 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:03.423 00:00:00.000 TCP 157.143.34.100:50809 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:58:41.389 00:00:00.000 TCP 162.216.149.113:51980 -> 157.143.34.100:9581 ......S. 0 1 44 0 0 44 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:52026 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:57:56.653 00:00:35.015 TCP 157.143.34.100:62900 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:56.606 00:00:35.017 TCP 157.143.34.100:63078 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:14.683 00:00:00.000 UDP 43.163.240.155:59998 -> 157.143.34.100:11211 ........ 0 1 99 0 0 99 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:55135 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:28.871 00:00:00.020 UDP 216.239.35.0:123 -> 157.143.34.100:55198 ........ 0 1 76 50 30400 76 2
+2024-04-14 23:57:56.314 00:00:35.019 TCP 157.143.34.100:64298 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:56.403 00:00:35.019 TCP 157.143.34.100:51720 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:14.065 00:00:00.000 TCP 95.214.27.8:48358 -> 157.143.34.100:8767 ......S. 0 1 44 0 0 44 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:60801 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:57319 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:64995 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:61063 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:57:57.205 00:00:35.019 TCP 157.143.34.100:56945 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:20.746 00:00:00.021 UDP 157.143.34.100:2711 -> 216.239.32.10:53 ........ 0 1 75 47 28571 75 2
+2024-04-14 23:58:57.497 00:00:35.012 TCP 157.143.34.100:51080 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:03.626 00:00:00.000 TCP 157.143.34.100:65294 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:03.042 00:00:00.000 TCP 157.143.34.100:53859 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:04.290 00:00:00.000 TCP 157.143.34.100:64330 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:57:55.828 00:00:35.019 TCP 157.143.34.100:59653 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:56.129 00:00:35.021 TCP 157.143.34.100:64367 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:48.803 00:00:00.000 TCP 35.203.210.92:51820 -> 157.143.34.100:17547 ......S. 0 1 44 0 0 44 1
+2024-04-14 23:59:03.337 00:00:00.000 TCP 157.143.34.100:60616 -> 172.16.10.1:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:59:02.849 00:00:00.000 TCP 157.143.34.100:57366 -> 172.16.10.2:5000 ......S. 0 1 48 0 0 48 1
+2024-04-14 23:58:57.900 00:00:35.009 TCP 157.143.34.100:52333 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:55.835 00:00:35.019 TCP 157.143.34.100:59307 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:57.035 00:00:35.021 TCP 157.143.34.100:54845 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:56.812 00:00:35.018 TCP 157.143.34.100:58369 -> 172.16.10.2:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:57:56.026 00:00:35.013 TCP 157.143.34.100:59696 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:58:55.834 00:00:35.020 TCP 157.143.34.100:51823 -> 172.16.10.1:5000 ......S. 0 10 640 0 146 64 1
+2024-04-14 23:59:28.116 00:01:00.031 ICMP 157.143.34.100:0 -> 8.8.8.8:8.0 ........ 0 4 304 0 40 76 4
+2024-04-14 23:59:20.765 00:00:00.000 UDP 216.239.36.10:53 -> 157.143.34.100:43966 ........ 0 1 187 0 0 187 1
+2024-04-15 00:03:25.950 00:00:00.235 TCP 157.143.34.100:56142 <-> 54.78.190.126:443 12 12 6732 1369 2
+2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 <-> 157.143.34.100:62096 31 29 6893 18600 2
+2024-04-15 00:03:01.359 00:00:00.235 TCP 104.22.15.70:443 <-> 157.143.34.100:58020 12 10 2982 5716 2
+2024-04-15 00:06:22.130 00:00:00.104 UDP 172.217.168.42:443 <-> 157.143.34.100:59255 11 11 4134 4142 2
+2024-04-15 00:05:44.685 00:00:30.997 TCP 17.248.209.68:443 <-> 157.143.34.100:58880 32 29 6945 18601 2
+2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 <-> 2.21.22.179:443 14 12 11839 2107 2
+2024-04-15 00:03:25.444 00:00:00.461 TCP 104.22.15.70:443 <-> 157.143.34.100:61719 12 14 1547 8683 2
+2024-04-15 00:06:24.093 00:00:00.150 TCP 172.217.168.42:443 <-> 157.143.34.100:51654 0 16 0 8224 1
+2024-04-15 00:05:43.067 00:00:31.027 TCP 13.224.103.88:443 <-> 157.143.34.100:60765 13 11 1562 7425 2
+2024-04-15 00:02:30.187 00:00:31.035 TCP 17.248.209.70:443 <-> 157.143.34.100:50515 35 31 7113 18713 2
+2024-04-15 00:06:22.740 00:00:00.127 TCP 172.217.168.42:443 <-> 157.143.34.100:54951 0 9 0 6256 1
+2024-04-15 00:06:21.134 00:00:00.091 TCP 172.217.168.42:443 <-> 157.143.34.100:65089 8 7 1069 6187 2
+2024-04-15 00:04:40.006 00:00:31.014 TCP 17.248.209.68:443 <-> 157.143.34.100:53757 34 30 7061 18660 2
+2024-04-15 00:03:37.356 00:00:00.180 TCP 13.224.103.47:443 <-> 157.143.34.100:63066 13 12 1676 7012 2
+2024-04-15 00:06:23.422 00:00:00.260 TCP 172.217.168.3:443 <-> 157.143.34.100:51203 0 10 0 5830 1
+2024-04-15 00:06:21.097 00:00:00.494 UDP 172.217.168.42:443 <-> 157.143.34.100:53011 32 29 10776 9134 2
+2024-04-14 23:59:33.733 00:05:00.280 TCP 157.143.34.100:58186 <-> 172.217.218.188:5228 18 12 1098 1008 2
+2024-04-15 00:06:23.212 00:00:00.043 TCP 172.217.168.42:443 <-> 157.143.34.100:59891 0 7 0 6183 1
+2024-04-14 23:59:48.800 00:00:30.957 TCP 17.248.209.66:443 <-> 157.143.34.100:56527 32 29 6945 18599 2
+2024-04-15 00:01:10.411 00:04:00.118 TCP 172.217.168.46:443 <-> 157.143.34.100:61354 22 20 6831 2568 2
+2024-04-15 00:06:22.291 00:00:00.082 UDP 172.217.168.42:443 <-> 157.143.34.100:61593 0 12 0 4310 1
+2024-04-15 00:04:21.362 00:00:01.427 TCP 157.143.34.100:61426 <-> 2.21.22.179:443 14 12 11736 2093 2
+2024-04-15 00:06:13.946 00:00:00.163 TCP 172.217.168.46:443 <-> 157.143.34.100:62402 14 13 2093 9207 2
+2024-04-14 23:54:27.599 00:10:00.268 TCP 172.217.168.3:80 <-> 157.143.34.100:59696 31 21 4672 2362 4
+2024-04-15 00:03:02.757 00:00:31.032 TCP 17.248.209.70:443 <-> 157.143.34.100:56357 32 29 6945 18599 2
+2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 <-> 157.143.34.100:62151 11 11 1934 4264 2
+2024-04-15 00:06:23.300 00:00:00.068 UDP 172.217.168.46:443 <-> 157.143.34.100:65143 0 10 0 4065 1
+2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 <-> 157.143.34.100:51638 10 13 2112 6591 2
+2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 <-> 157.143.34.100:59739 13 13 4781 4154 2
+2024-04-15 00:04:37.438 00:00:30.643 TCP 17.171.47.23:443 <-> 157.143.34.100:61655 15 20 3579 16585 2
+2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 <-> 213.144.148.130:28919 114757 77363 160.9 M 4.4 M 2
+2024-04-15 00:06:22.149 00:00:00.101 UDP 172.217.168.42:443 <-> 157.143.34.100:51648 0 13 0 7924 1
+2024-04-15 00:06:22.156 00:00:00.080 UDP 172.217.168.42:443 <-> 157.143.34.100:62094 0 11 0 4235 1
+2024-04-15 00:03:35.178 00:00:30.994 TCP 17.248.209.70:443 <-> 157.143.34.100:58109 32 31 7510 18717 2
+2024-04-15 00:04:07.739 00:00:30.996 TCP 17.248.209.68:443 <-> 157.143.34.100:54177 33 29 6997 18600 2
+2024-04-14 23:54:46.461 00:09:00.639 TCP 157.143.34.100:57657 <-> 172.217.168.3:80 0 20 0 4330 2
+2024-04-15 00:03:37.183 00:00:00.181 TCP 13.224.103.47:443 <-> 157.143.34.100:62379 12 12 1574 7405 2
+2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 <-> 157.143.34.100:59352 33 29 7661 18602 2
+2024-04-15 00:00:21.008 00:00:31.018 TCP 17.248.209.66:443 <-> 157.143.34.100:62570 31 29 6893 18601 2
+2024-04-15 00:01:25.509 00:00:30.947 TCP 17.248.209.70:443 <-> 157.143.34.100:50258 33 29 6997 18599 2
+2024-04-15 00:04:37.481 00:00:01.097 TCP 157.143.34.100:58134 <-> 17.253.15.204:443 13 12 6168 1668 2
+2024-04-15 00:06:21.236 00:00:00.995 UDP 172.217.168.42:443 <-> 157.143.34.100:61866 0 20 0 5794 1
+2024-04-15 00:01:09.800 00:00:00.348 TCP 157.143.34.100:61318 <-> 142.250.203.115:443 11 12 5919 1657 2
+2024-04-15 00:00:53.217 00:00:30.938 TCP 17.248.209.66:443 <-> 157.143.34.100:57665 31 28 6893 18476 2
+2024-04-15 00:01:57.818 00:00:30.998 TCP 17.248.209.70:443 <-> 157.143.34.100:53916 33 29 7009 18601 2
+2024-04-15 00:02:44.996 00:00:06.716 TCP 52.48.41.28:443 <-> 157.143.34.100:59373 20 18 2131 4295 2
+2024-04-14 23:59:16.526 00:00:31.011 TCP 17.248.209.66:443 <-> 157.143.34.100:62179 32 29 6945 18600 2
+2024-04-15 00:03:26.152 00:00:00.227 TCP 157.143.34.100:53018 <-> 54.78.190.126:443 11 12 7222 1355 2
+2024-04-15 00:06:21.700 00:00:00.521 UDP 172.217.168.42:443 <-> 157.143.34.100:59480 21 26 5602 14779 2
+2024-04-15 00:03:37.356 00:00:00.173 TCP 13.224.103.47:443 <-> 157.143.34.100:60460 12 12 1634 7012 2
+2024-04-15 00:05:12.425 00:00:30.973 TCP 17.248.209.68:443 <-> 157.143.34.100:53730 32 29 6945 18529 2
+2024-04-15 00:03:26.344 00:00:00.233 TCP 157.143.34.100:54916 <-> 54.78.190.126:443 12 13 6786 1409 2
+2024-04-15 00:06:23.187 00:00:00.447 UDP 172.217.168.42:443 <-> 157.143.34.100:63665 0 20 0 7353 1
+2024-04-15 00:03:10.588 00:00:37.586 TCP 157.143.34.100:51573 <-> 35.231.208.158:443 8 10 3814 1602 2
+2024-04-15 00:03:25.950 00:00:00.235 TCP 157.143.34.100:56142 <-> 54.78.190.126:443 ...AP.SF 0 12 12 6732 1369 2
+2024-04-14 23:58:44.315 00:00:30.974 TCP 17.248.209.71:443 <-> 157.143.34.100:62096 ...AP.SF 0 31 29 6893 18600 2
+2024-04-15 00:03:01.359 00:00:00.235 TCP 104.22.15.70:443 <-> 157.143.34.100:58020 ...AP.SF 0 12 10 2982 5716 2
+2024-04-15 00:06:22.130 00:00:00.104 UDP 172.217.168.42:443 <-> 157.143.34.100:59255 ........ 0 11 11 4134 4142 2
+2024-04-15 00:05:44.685 00:00:30.997 TCP 17.248.209.68:443 <-> 157.143.34.100:58880 ...AP.SF 0 32 29 6945 18601 2
+2024-04-14 23:59:01.133 00:00:00.514 TCP 157.143.34.100:57373 <-> 2.21.22.179:443 CE.APRSF 0 14 12 11839 2107 2
+2024-04-15 00:03:25.444 00:00:00.461 TCP 104.22.15.70:443 <-> 157.143.34.100:61719 ...AP.SF 0 12 14 1547 8683 2
+2024-04-15 00:06:24.093 00:00:00.150 TCP 172.217.168.42:443 <-> 157.143.34.100:51654 ...AP.S. 0 0 16 0 8224 1
+2024-04-15 00:05:43.067 00:00:31.027 TCP 13.224.103.88:443 <-> 157.143.34.100:60765 ...AP.SF 0 13 11 1562 7425 2
+2024-04-15 00:02:30.187 00:00:31.035 TCP 17.248.209.70:443 <-> 157.143.34.100:50515 ...AP.SF 0 35 31 7113 18713 2
+2024-04-15 00:06:22.740 00:00:00.127 TCP 172.217.168.42:443 <-> 157.143.34.100:54951 ...AP.S. 0 0 9 0 6256 1
+2024-04-15 00:06:21.134 00:00:00.091 TCP 172.217.168.42:443 <-> 157.143.34.100:65089 ...AP.S. 0 8 7 1069 6187 2
+2024-04-15 00:04:40.006 00:00:31.014 TCP 17.248.209.68:443 <-> 157.143.34.100:53757 ...AP.SF 0 34 30 7061 18660 2
+2024-04-15 00:03:37.356 00:00:00.180 TCP 13.224.103.47:443 <-> 157.143.34.100:63066 ...AP.SF 0 13 12 1676 7012 2
+2024-04-15 00:06:23.422 00:00:00.260 TCP 172.217.168.3:443 <-> 157.143.34.100:51203 ...AP.S. 0 0 10 0 5830 1
+2024-04-15 00:06:21.097 00:00:00.494 UDP 172.217.168.42:443 <-> 157.143.34.100:53011 ........ 0 32 29 10776 9134 2
+2024-04-14 23:59:33.733 00:05:00.280 TCP 157.143.34.100:58186 <-> 172.217.218.188:5228 ...AP... 0 18 12 1098 1008 2
+2024-04-15 00:06:23.212 00:00:00.043 TCP 172.217.168.42:443 <-> 157.143.34.100:59891 ...AP.S. 0 0 7 0 6183 1
+2024-04-14 23:59:48.800 00:00:30.957 TCP 17.248.209.66:443 <-> 157.143.34.100:56527 ...AP.SF 0 32 29 6945 18599 2
+2024-04-15 00:01:10.411 00:04:00.118 TCP 172.217.168.46:443 <-> 157.143.34.100:61354 ...AP.SF 0 22 20 6831 2568 2
+2024-04-15 00:06:22.291 00:00:00.082 UDP 172.217.168.42:443 <-> 157.143.34.100:61593 ........ 0 0 12 0 4310 1
+2024-04-15 00:04:21.362 00:00:01.427 TCP 157.143.34.100:61426 <-> 2.21.22.179:443 CE.APRSF 0 14 12 11736 2093 2
+2024-04-15 00:06:13.946 00:00:00.163 TCP 172.217.168.46:443 <-> 157.143.34.100:62402 ...AP.SF 0 14 13 2093 9207 2
+2024-04-14 23:54:27.599 00:10:00.268 TCP 172.217.168.3:80 <-> 157.143.34.100:59696 ...AP... 0 31 21 4672 2362 4
+2024-04-15 00:03:02.757 00:00:31.032 TCP 17.248.209.70:443 <-> 157.143.34.100:56357 ...AP.SF 0 32 29 6945 18599 2
+2024-04-14 23:58:49.021 00:00:02.344 TCP 17.167.200.72:443 <-> 157.143.34.100:62151 ...AP.SF 0 11 11 1934 4264 2
+2024-04-15 00:06:23.300 00:00:00.068 UDP 172.217.168.46:443 <-> 157.143.34.100:65143 ........ 0 0 10 0 4065 1
+2024-04-14 23:59:20.775 00:00:00.143 TCP 216.239.38.57:443 <-> 157.143.34.100:51638 ...AP.S. 0 10 13 2112 6591 2
+2024-04-14 23:59:20.512 00:00:00.114 UDP 172.217.168.10:443 <-> 157.143.34.100:59739 ........ 0 13 13 4781 4154 2
+2024-04-15 00:04:37.438 00:00:30.643 TCP 17.171.47.23:443 <-> 157.143.34.100:61655 .E.APRSF 0 15 20 3579 16585 2
+2024-04-14 23:55:12.553 00:03:09.444 TCP 157.143.34.100:8822 <-> 213.144.148.130:28919 ...AP..F 0 114757 77363 160.9 M 4.4 M 2
+2024-04-15 00:06:22.149 00:00:00.101 UDP 172.217.168.42:443 <-> 157.143.34.100:51648 ........ 0 0 13 0 7924 1
+2024-04-15 00:06:22.156 00:00:00.080 UDP 172.217.168.42:443 <-> 157.143.34.100:62094 ........ 0 0 11 0 4235 1
+2024-04-15 00:03:35.178 00:00:30.994 TCP 17.248.209.70:443 <-> 157.143.34.100:58109 ...AP.SF 0 32 31 7510 18717 2
+2024-04-15 00:04:07.739 00:00:30.996 TCP 17.248.209.68:443 <-> 157.143.34.100:54177 ...AP.SF 0 33 29 6997 18600 2
+2024-04-14 23:54:46.461 00:09:00.639 TCP 157.143.34.100:57657 <-> 172.217.168.3:80 ...AP... 0 0 20 0 4330 2
+2024-04-15 00:03:37.183 00:00:00.181 TCP 13.224.103.47:443 <-> 157.143.34.100:62379 ...AP.SF 0 12 12 1574 7405 2
+2024-04-14 23:58:11.886 00:00:30.980 TCP 17.248.209.64:443 <-> 157.143.34.100:59352 ...AP.SF 0 33 29 7661 18602 2
+2024-04-15 00:00:21.008 00:00:31.018 TCP 17.248.209.66:443 <-> 157.143.34.100:62570 ...AP.SF 0 31 29 6893 18601 2
+2024-04-15 00:01:25.509 00:00:30.947 TCP 17.248.209.70:443 <-> 157.143.34.100:50258 ...AP.SF 0 33 29 6997 18599 2
+2024-04-15 00:04:37.481 00:00:01.097 TCP 157.143.34.100:58134 <-> 17.253.15.204:443 CE.APRSF 0 13 12 6168 1668 2
+2024-04-15 00:06:21.236 00:00:00.995 UDP 172.217.168.42:443 <-> 157.143.34.100:61866 ........ 0 0 20 0 5794 1
+2024-04-15 00:01:09.800 00:00:00.348 TCP 157.143.34.100:61318 <-> 142.250.203.115:443 ...AP.SF 0 11 12 5919 1657 2
+2024-04-15 00:00:53.217 00:00:30.938 TCP 17.248.209.66:443 <-> 157.143.34.100:57665 ...AP.SF 0 31 28 6893 18476 2
+2024-04-15 00:01:57.818 00:00:30.998 TCP 17.248.209.70:443 <-> 157.143.34.100:53916 ...AP.SF 0 33 29 7009 18601 2
+2024-04-15 00:02:44.996 00:00:06.716 TCP 52.48.41.28:443 <-> 157.143.34.100:59373 ...AP.SF 0 20 18 2131 4295 2
+2024-04-14 23:59:16.526 00:00:31.011 TCP 17.248.209.66:443 <-> 157.143.34.100:62179 ...AP.SF 0 32 29 6945 18600 2
+2024-04-15 00:03:26.152 00:00:00.227 TCP 157.143.34.100:53018 <-> 54.78.190.126:443 ...AP.SF 0 11 12 7222 1355 2
+2024-04-15 00:06:21.700 00:00:00.521 UDP 172.217.168.42:443 <-> 157.143.34.100:59480 ........ 0 21 26 5602 14779 2
+2024-04-15 00:03:37.356 00:00:00.173 TCP 13.224.103.47:443 <-> 157.143.34.100:60460 ...AP.SF 0 12 12 1634 7012 2
+2024-04-15 00:05:12.425 00:00:30.973 TCP 17.248.209.68:443 <-> 157.143.34.100:53730 ...AP.SF 0 32 29 6945 18529 2
+2024-04-15 00:03:26.344 00:00:00.233 TCP 157.143.34.100:54916 <-> 54.78.190.126:443 ...AP.SF 0 12 13 6786 1409 2
+2024-04-15 00:06:23.187 00:00:00.447 UDP 172.217.168.42:443 <-> 157.143.34.100:63665 ........ 0 0 20 0 7353 1
+2024-04-15 00:03:10.588 00:00:37.586 TCP 157.143.34.100:51573 <-> 35.231.208.158:443 ...AP.SF 0 8 10 3814 1602 2
+
+Flow Record:
+ RecordCount = 1
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 353
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132205950 [2024-04-15 00:03:25.950]
+ last = 1713132206185 [2024-04-15 00:03:26.185]
+ received at = 1713132277673 [2024-04-15 00:04:37.673]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 56142
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 1369
+ src addr = 157.143.34.100
+ dst addr = 54.78.190.126
+ out packets = 12
+ out bytes = 6732
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 33.772 ms
+ srv latency = 0.000 ms
+ app latency = 0.192 ms
+ in payload = 173
+ TLS version = TLS 1.2
+ sni name = www.qobuz.com
+ ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a
+ ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043
+16 03 03 00 A8 01 00 00 A4 03 03 66 1C 52 AD 5A | ...........f.R.Z
+BC 09 1D B4 3F 77 22 C0 76 9B 66 08 AC 30 E0 84 | ....?w".v.f..0..
+8D FA D9 E8 DE 46 3E 36 85 38 C2 00 00 2C 00 FF | .....F>6.8...,..
+C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0
+C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'..........
+00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O..
+00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz
+2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............
+00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................
+05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................
+01 00 00 00 00 00 12 00 00 00 17 00 00 | .............
+
+Flow Record:
+ RecordCount = 2
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131924315 [2024-04-14 23:58:44.315]
+ last = 1713131955289 [2024-04-14 23:59:15.289]
+ received at = 1713132056973 [2024-04-15 00:00:56.973]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 62096
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18600
+ src addr = 17.248.209.71
+ dst addr = 157.143.34.100
+ out packets = 31
+ out bytes = 6893
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.436 ms
+ srv latency = 0.000 ms
+ app latency = 0.511 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 49 BA 87 66 52 | ....z...v..I..fR
+4C C5 4D 23 B4 8F 17 EC 17 67 CE 2D 85 2A 3C 0B | L.M#.....g.-.*<.
+74 6A FF D8 6B 20 CD DD 52 17 08 20 09 40 D6 50 | tj..k ..R.. .@.P
+CA B4 ED E7 95 E3 79 7A A7 F5 8D 69 87 C5 D1 2F | ......yz...i.../
+DE F0 4E 7D 59 4B B2 E2 25 00 7A 7C 13 02 00 00 | ..N}YK..%.z|....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 31 | ..+.....3.$... 1
+AA E8 62 9E AD 02 D2 0C 46 E2 E1 07 4B 5F DA 99 | ..b.....F...K_..
+72 42 F3 E1 89 E0 A4 C9 06 CA D4 D9 5D 19 3C 14 | rB..........].<.
+03 03 00 01 01 17 03 03 00 2A 6F 9E 45 C3 4E 87 | .........*o.E.N.
+6C 98 B1 8D 44 F1 9F 33 EF 92 F6 EA 08 48 96 FE | l...D..3.....H..
+30 81 44 12 6E 90 45 67 86 02 E7 FD 35 A4 B8 B5 | 0.D.n.Eg....5...
+91 28 7A 46 17 03 03 11 25 82 A9 6B DB 38 8B DB | .(zF....%..k.8..
+00 69 94 CC 41 FC FA 18 FD 43 DC D5 93 27 47 13 | .i..A....C...'G.
+7E 9A 79 16 26 19 2F CE 51 CD 31 FB C2 56 9C 15 | ~.y.&./.Q.1..V..
+F8 8C 06 8E D5 A2 2D 03 89 6E C2 4F 55 A2 70 0D | ......-..n.OU.p.
+A1 B6 3D 8A 82 49 15 57 54 A2 67 64 FB 13 A8 9A | ..=..I.WT.gd....
+AE A8 89 E4 66 87 16 05 C7 A3 10 5B DC 26 1B B2 | ....f......[.&..
+6F 01 72 7F 4D 19 BE 21 E0 43 C5 DA 23 35 E0 EB | o.r.M..!.C..#5..
+3E 70 C7 66 7E C3 B4 D4 34 F6 F1 FE 26 5F B6 D5 | >p.f~...4...&_..
+E6 26 B9 0E 16 00 B2 1C 42 41 F3 4E 8C E1 64 8D | .&......BA.N..d.
+9A 2D 47 52 B9 11 17 8E 36 9B 78 EF 55 91 BB 3D | .-GR....6.x.U..=
+B7 58 5D F0 BB FA 24 53 94 C3 A1 ED C1 C8 ED 72 | .X]...$S.......r
+C0 85 ED F3 C9 35 C1 D4 56 7D 0A 91 B0 41 5E 21 | .....5..V}...A^!
+19 BE 80 04 BF E7 D7 AB 14 D7 CD 83 56 3A BE 9B | ............V:..
+F7 29 69 15 92 30 25 46 6C 9B FF 0B 15 16 E5 8E | .)i..0%Fl.......
+22 F9 AC 33 AA BD 8A BA 1D E3 BB 4A 9D E5 31 5B | "..3.......J..1[
+57 5A 6A E2 86 3F 24 91 D0 0B DD 76 7A 7B 69 33 | WZj..?$....vz{i3
+74 48 81 07 65 AD 07 EB 74 00 2E 58 D2 7B A6 FA | tH..e...t..X.{..
+04 DD D6 7A F4 EE 41 06 A5 9C CF 89 B1 36 A5 0C | ...z..A......6..
+C1 A6 91 D5 DE 3B 0C A3 A5 27 11 66 0C A5 D8 FB | .....;...'.f....
+E4 D0 52 28 4A 20 84 AB 4E 85 D4 3B A1 71 36 92 | ..R(J ..N..;.q6.
+3D A0 C1 71 F8 A5 E1 73 66 BE 42 76 57 D5 89 48 | =..q...sf.BvW..H
+76 EB 09 3C 24 ED F4 23 93 38 CF 2B BE F1 54 6E | v..<$..#.8.+..Tn
+11 39 6E 51 7B 86 B8 9D 7A E4 61 58 FF F7 0D 9A | .9nQ{...z.aX....
+90 BA A0 E2 E8 99 1E 5E 2C 34 56 C5 37 A4 8F E5 | .......^,4V.7...
+B6 05 76 E3 E0 F3 2A 3E FD FF D2 C2 04 5B 63 10 | ..v...*>.....[c.
+A5 1B C7 9A D5 07 A2 CB 0E C2 34 D3 C1 F3 BB 4F | ..........4....O
+45 AB C0 98 AF A0 23 34 46 47 29 DD D4 87 91 04 | E.....#4FG).....
+24 EB 44 CD 86 EB 1F D5 6F D1 28 37 03 B1 58 ED | $.D.....o.(7..X.
+C4 2D 34 0A 2F A3 28 B3 68 B5 CB 0F 54 F3 9A 75 | .-4./.(.h...T..u
+BB C3 D3 E6 CA A4 D0 73 D0 8B F1 78 EC CB BE F7 | .......s...x....
+97 44 5C B1 30 03 22 4C CF 0D E1 26 35 ED 95 15 | .D\.0."L...&5...
+46 9D FF 9C AB CD 32 6E 51 A2 F5 51 C6 C0 E3 D5 | F.....2nQ..Q....
+8D F8 65 B8 10 BA F7 3A 9A 3A 62 1D F1 6C C5 80 | ..e....:.:b..l..
+44 C7 02 47 70 65 FA 38 2C 7F AB FF 7A 51 A2 73 | D..Gpe.8,...zQ.s
+A2 B0 32 CA BF 14 18 AA 51 71 43 4A 1E 36 D4 9A | ..2.....QqCJ.6..
+DD 52 E8 F0 D1 1D 03 14 F5 CA EC F1 05 92 25 78 | .R............%x
+79 9D 90 F3 EC 7E A4 12 9C 04 29 05 55 D7 9B C5 | y....~....).U...
+60 CA 3D 82 C5 D4 CF C5 89 F6 F0 22 60 BE A9 BB | `.=........"`...
+56 47 1D 32 90 B3 31 D3 49 17 4C DC 55 DB 74 31 | VG.2..1.I.L.U.t1
+D6 88 CA 28 D6 CB 87 F0 95 C8 C9 D6 B4 F7 FC 8D | ...(............
+0B 49 1E 2E 44 1E 04 FC 07 82 30 49 AB 75 8E 22 | .I..D.....0I.u."
+AF C8 1F B8 D4 2B 1A ED 28 07 B5 F7 24 1F 41 9F | .....+..(...$.A.
+A1 B2 A5 32 4A D5 42 5C A4 52 6A 52 D7 7B 07 CA | ...2J.B\.RjR.{..
+4A 06 11 7C 32 3F 54 06 9C C5 8B B5 3E 9A AE 3E | J..|2?T.....>..>
+BD A4 17 22 15 68 69 29 F6 46 B1 B1 92 70 35 88 | ...".hi).F...p5.
+1F FE E9 2D 58 13 AA 84 0B C3 53 39 17 C8 52 38 | ...-X.....S9..R8
+7F 42 EF 10 20 09 98 B5 A1 0A 50 CF C4 0B 0D E0 | .B.. .....P.....
+9A F6 2E 5C 18 C2 9D F8 CB 30 BD 35 28 76 A5 F8 | ...\.....0.5(v..
+93 2C A0 F9 5A E5 1F 2C 37 42 BF D3 42 72 61 E9 | .,..Z..,7B..Bra.
+06 26 71 61 07 BE 99 78 58 CB 30 9A 0B 78 81 71 | .&qa...xX.0..x.q
+74 EF 2C 03 34 CD 1F E3 A1 55 45 38 70 5F 0B F9 | t.,.4....UE8p_..
+B6 9E 20 4A 13 21 DD 50 91 2B 57 16 96 7A 50 62 | .. J.!.P.+W..zPb
+9E 55 58 54 18 24 82 9E 0D D7 DE 91 C8 22 B5 DD | .UXT.$......."..
+20 8B 36 47 DF D2 7C 50 3C CF ED 97 08 50 31 A4 | .6G..|P<....P1.
+76 F2 BD ED 34 26 32 70 A2 A3 F4 EC C9 1C C7 55 | v...4&2p.......U
+9C 17 99 35 90 B5 36 27 76 B9 01 31 D5 35 69 B0 | ...5..6'v..1.5i.
+C6 4D 5A FC 90 A4 52 2E 67 F9 7A 06 6C B7 3E A8 | .MZ...R.g.z.l.>.
+99 A3 43 1A FF C1 77 16 0B 42 B7 87 CC C7 67 A0 | ..C...w..B....g.
+A9 80 83 DB 2C 7C 57 79 DE 2F FC ED FC F0 C5 AB | ....,|Wy./......
+6D 61 DE 5F 1B FB 5E C8 FC C0 26 14 1B 0B 98 42 | ma._..^...&....B
+22 66 61 04 3A 8C E7 93 61 27 34 D8 2E 37 CB F5 | "fa.:...a'4..7..
+F4 5A D7 75 9E C1 DE 3E CD 7C 36 31 1D 69 27 D8 | .Z.u...>.|61.i'.
+38 0A A0 B0 C5 72 26 8C 6E 9A D5 21 5F EE 18 10 | 8....r&.n..!_...
+4E B3 BE EC 75 74 B8 17 EE 92 D9 C0 F0 4D 82 10 | N...ut.......M..
+49 D4 54 25 C3 BE 6D F9 21 A6 19 3A 3F 22 88 97 | I.T%..m.!..:?"..
+AF 5C B9 23 88 C6 06 DA F7 63 38 D3 75 D8 39 E9 | .\.#.....c8.u.9.
+C2 DA 1A B2 AC 86 87 82 84 0C 5C 12 F0 F4 96 55 | ..........\....U
+A6 22 49 61 23 79 2C B1 41 5F A3 A6 9D C5 72 5E | ."Ia#y,.A_....r^
+CA 3B A3 87 EB 51 50 59 EF 9E C7 2E FD 8E C6 E5 | .;...QPY........
+E4 28 78 F8 BC 57 23 EC 68 C8 36 BF A7 74 A2 8D | .(x..W#.h.6..t..
+4D 08 18 7C 0B EE 94 FF 3A AD 08 1E 1A B9 51 3E | M..|....:.....Q>
+A5 1F C9 69 60 09 6D 30 33 0E A1 97 1D 74 68 EC | ...i`.m03....th.
+4B 8D 3D 75 54 65 55 98 A7 56 A2 7F C4 74 AD 82 | K.=uTeU..V...t..
+65 14 01 AE 2C F1 C0 28 30 D7 E1 52 EA 9E 85 3C | e...,..(0..R...<
+E7 9B 4C CC 2F 06 32 ED 39 44 ED 98 7B 42 30 BA | ..L./.2.9D..{B0.
+43 97 3F D2 21 FC 23 68 F0 DA DB 54 A8 AB B1 2A | C.?.!.#h...T...*
+B4 55 D4 46 61 63 F2 84 53 F0 8E 48 37 CF B4 42 | .U.Fac..S..H7..B
+AB 71 22 4A B0 3B 85 52 52 65 1F 54 3F FF DB D9 | .q"J.;.RRe.T?...
+6F A0 AB 75 52 5E B5 69 0B A6 0B 83 3E 43 E6 49 | o..uR^.i....>C.I
+A2 5F 22 40 57 2A 7B A3 | ._"@W*{.
+
+Flow Record:
+ RecordCount = 3
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132181359 [2024-04-15 00:03:01.359]
+ last = 1713132181594 [2024-04-15 00:03:01.594]
+ received at = 1713132277671 [2024-04-15 00:04:37.671]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 58020
+ src tos = 0
+ fwd status = 0
+ in packets = 10
+ in bytes = 5716
+ src addr = 104.22.15.70
+ dst addr = 157.143.34.100
+ out packets = 12
+ out bytes = 2982
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.021 ms
+ srv latency = 0.000 ms
+ app latency = 2.690 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 22a29273c84f24c87ea605eb553e276c
+ ja4s hash = t130500_c02b_926e7c93a85d
+16 03 03 00 63 02 00 00 5F 03 03 66 1C 52 95 D7 | ....c..._..f.R..
+7D 9A A6 14 66 72 15 EE D8 CD 5A B5 8C C2 59 A9 | }...fr....Z...Y.
+C1 BE 8B 44 4F 57 4E 47 52 44 01 20 41 EB 3F 41 | ...DOWNGRD. A.?A
+3F 9A 01 89 2E FB 2E 77 FA 6C CF 71 72 88 C9 77 | ?......w.l.qr..w
+62 18 07 A8 8F 8F 63 B2 FF E6 E6 FC C0 2B 00 00 | b.....c......+..
+17 00 00 00 00 00 17 00 00 FF 01 00 01 00 00 0B | ................
+00 02 01 00 00 05 00 00 16 03 03 10 2A 0B 00 10 | ............*...
+26 00 10 23 00 03 85 30 82 03 81 30 82 03 07 A0 | &..#...0...0....
+03 02 01 02 02 12 04 83 EA 68 06 B1 AD EA 76 77 | .........h....vw
+39 76 37 6B A8 36 09 DB 30 0A 06 08 2A 86 48 CE | 9v7k.6..0...*.H.
+3D 04 03 03 30 32 31 0B 30 09 06 03 55 04 06 13 | =...021.0...U...
+02 55 53 31 16 30 14 06 03 55 04 0A 13 0D 4C 65 | .US1.0...U....Le
+74 27 73 20 45 6E 63 72 79 70 74 31 0B 30 09 06 | t's Encrypt1.0..
+03 55 04 03 13 02 45 31 30 1E 17 0D 32 34 30 34 | .U....E10...2404
+31 34 30 30 31 39 31 30 5A 17 0D 32 34 30 37 31 | 14001910Z..24071
+33 30 30 31 39 30 39 5A 30 1B 31 19 30 17 06 03 | 3001909Z0.1.0...
+55 04 03 13 10 61 70 69 2E 72 6F 6F 6E 6C 61 62 | U....api.roonlab
+73 2E 6E 65 74 30 59 30 13 06 07 2A 86 48 CE 3D | s.net0Y0...*.H.=
+02 01 06 08 2A 86 48 CE 3D 03 01 07 03 42 00 04 | ....*.H.=....B..
+03 24 E9 47 62 77 D9 B4 96 C5 B3 C4 89 CE 0C 90 | .$.Gbw..........
+20 5F E8 D8 AB 0E E0 42 26 48 8D DE A1 16 8F 3A | _.....B&H.....:
+B9 59 C4 D4 ED 39 D3 C0 2A B0 86 2A 97 25 0F 1F | .Y...9..*..*.%..
+35 B4 B8 23 8B 28 0F 27 D2 A2 7E 6A 39 C5 C4 AB | 5..#.(.'..~j9...
+A3 82 02 12 30 82 02 0E 30 0E 06 03 55 1D 0F 01 | ....0...0...U...
+01 FF 04 04 03 02 07 80 30 1D 06 03 55 1D 25 04 | ........0...U.%.
+16 30 14 06 08 2B 06 01 05 05 07 03 01 06 08 2B | .0...+.........+
+06 01 05 05 07 03 02 30 0C 06 03 55 1D 13 01 01 | .......0...U....
+FF 04 02 30 00 30 1D 06 03 55 1D 0E 04 16 04 14 | ...0.0...U......
+0A A2 9D 1D D2 00 85 F6 3D 30 A7 DD 5E 2F 7E 5E | ........=0..^/~^
+78 20 ED 2D 30 1F 06 03 55 1D 23 04 18 30 16 80 | x .-0...U.#..0..
+14 5A F3 ED 2B FC 36 C2 37 79 B9 52 30 EA 54 6F | .Z..+.6.7y.R0.To
+CF 55 CB 2E AC 30 55 06 08 2B 06 01 05 05 07 01 | .U...0U..+......
+01 04 49 30 47 30 21 06 08 2B 06 01 05 05 07 30 | ..I0G0!..+.....0
+01 86 15 68 74 74 70 3A 2F 2F 65 31 2E 6F 2E 6C | ...http://e1.o.l
+65 6E 63 72 2E 6F 72 67 30 22 06 08 2B 06 01 05 | encr.org0"..+...
+05 07 30 02 86 16 68 74 74 70 3A 2F 2F 65 31 2E | ..0...http://e1.
+69 2E 6C 65 6E 63 72 2E 6F 72 67 2F 30 1B 06 03 | i.lencr.org/0...
+55 1D 11 04 14 30 12 82 10 61 70 69 2E 72 6F 6F | U....0...api.roo
+6E 6C 61 62 73 2E 6E 65 74 30 13 06 03 55 1D 20 | nlabs.net0...U.
+04 0C 30 0A 30 08 06 06 67 81 0C 01 02 01 30 82 | ..0.0...g.....0.
+01 04 06 0A 2B 06 01 04 01 D6 79 02 04 02 04 81 | ....+.....y.....
+F5 04 81 F2 00 F0 00 76 00 3B 53 77 75 3E 2D B9 | .......v.;Swu>-.
+80 4E 8B 30 5B 06 FE 40 3B 67 D8 4F C3 F4 C7 BD | .N.0[..@;g.O....
+00 0D 2D 72 6F E1 FA D4 17 00 00 01 8E DA 2F D2 | ..-ro........./.
+59 00 00 04 03 00 47 30 45 02 20 6F E8 1F A9 FF | Y.....G0E. o....
+36 DA 08 EC F7 36 0B 23 53 C5 A7 03 8F 7D F4 7E | 6....6.#S....}.~
+4C 36 EE 8F C2 18 C1 A1 29 3C 0C 02 21 00 BD 20 | L6......)<..!..
+9B F4 BF 57 40 FD C9 4C BB 99 C3 97 10 4A D1 A0 | ...W@..L.....J..
+BF 15 0F F8 F7 09 29 4B 92 1B 26 71 DE 38 00 76 | ......)K..&q.8.v
+00 76 FF 88 3F 0A B6 FB 95 51 C2 61 CC F5 87 BA | .v..?....Q.a....
+34 B4 A4 CD BB 29 DC 68 42 0A 9F E6 67 4C 5A 3A | 4....).hB...gLZ:
+74 00 00 01 8E DA 2F D2 86 00 00 04 03 00 47 30 | t...../.......G0
+45 02 20 16 94 7C D4 B6 9E B1 48 6C C9 1A DF 74 | E. ..|....Hl...t
+FB D1 68 4B F2 63 29 C5 38 28 41 55 9B 68 55 A7 | ..hK.c).8(AU.hU.
+02 B0 44 02 21 00 F5 3D C0 DA B0 F4 EC 78 14 3B | ..D.!..=.....x.;
+9B F5 60 22 AC 71 CD CD E4 8F E7 DB 33 68 9C 38 | ..`".q......3h.8
+E0 76 22 EE CF 94 30 0A 06 08 2A 86 48 CE 3D 04 | .v"...0...*.H.=.
+03 03 03 68 00 30 65 02 31 00 99 37 0F 43 15 73 | ...h.0e.1..7.C.s
+E5 F6 E2 32 68 10 DC 15 4D 34 F2 B9 28 B3 77 CA | ...2h...M4..(.w.
+D5 77 0C 98 08 7A 2C 62 FC 9D E7 DE 6A 46 00 52 | .w...z,b....jF.R
+6E 92 0D 49 D2 67 BE CD C0 72 02 30 0D 29 D9 D1 | n..I.g...r.0.)..
+E4 F5 CF FF 43 83 D1 25 7A 79 9B 4E 7D 53 EE 37 | ....C..%zy.N}S.7
+8C 33 00 6E DE F6 25 2A 68 49 B0 C1 7E FE 82 06 | .3.n..%*hI..~...
+53 0B C0 FD 4A EA 99 1F A9 D1 D4 44 00 02 CA 30 | S...J......D...0
+82 02 C6 30 82 02 4D A0 03 02 01 02 02 11 00 B3 | ...0..M.........
+BD DF F8 A7 84 5B BC E9 03 A0 41 35 B3 4A 45 30 | .....[....A5.JE0
+0A 06 08 2A 86 48 CE 3D 04 03 03 30 4F 31 0B 30 | ...*.H.=...0O1.0
+09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 | ...U....US1)0'..
+55 04 0A 13 20 49 6E 74 65 72 6E 65 74 20 53 65 | U... Internet Se
+63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 | curity Research
+47 72 6F 75 70 31 15 30 13 06 03 55 04 03 13 0C | Group1.0...U....
+49 53 52 47 20 52 6F 6F 74 20 58 32 30 1E 17 0D | ISRG Root X20...
+32 30 30 39 30 34 30 30 30 30 30 30 5A 17 0D 32 | 200904000000Z..2
+35 30 39 31 35 31 36 30 30 30 30 5A 30 32 31 0B | 50915160000Z021.
+30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 06 | 0...U....US1.0..
+03 55 04 0A 13 0D 4C 65 74 27 73 20 45 6E 63 72 | .U....Let's Encr
+79 70 74 31 0B 30 09 06 03 55 04 03 13 02 45 31 | ypt1.0...U....E1
+30 76 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B | 0v0...*.H.=....+
+81 04 00 22 03 62 00 04 24 5C 2D A2 2A FD 1C 4B | ...".b..$\-.*..K
+A6 5D 97 73 27 31 AC B2 A0 69 62 EF 65 E8 A6 B0 | .].s'1...ib.e...
+F0 AC 4B 9F FF 1C 0B 70 0F D3 98 2F 4D FC 0F 00 | ..K....p.../M...
+9B 37 F0 74 05 57 32 97 2E 05 EF 2A 43 25 A3 FB | .7.t.W2....*C%..
+6E 34 27 13 F6 4F 7E 69 D3 02 99 5E EB 24 47 92 | n4'..O~i...^.$G.
+C1 24 9B E6 B1 21 8F C1 24 81 FC 68 CC 1F 69 BA | .$...!..$..h..i.
+58 F5 19 22 F7 74 C6 16 A3 82 01 08 30 82 01 04 | X..".t......0...
+30 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 01 86 | 0...U...........
+30 1D 06 03 55 1D 25 04 16 30 14 06 08 2B 06 01 | 0...U.%..0...+..
+05 05 07 03 02 06 08 2B 06 01 05 05 07 03 01 30 | .......+.......0
+12 06 03 55 1D 13 01 01 FF 04 08 30 06 01 01 FF | ...U.......0....
+02 01 00 30 1D 06 03 55 1D 0E 04 16 04 14 5A F3 | ...0...U......Z.
+ED 2B FC 36 C2 37 79 B9 | .+.6.7y.
+
+Flow Record:
+ RecordCount = 4
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 5 12 15 29
+ size = 1402
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132382130 [2024-04-15 00:06:22.130]
+ last = 1713132382234 [2024-04-15 00:06:22.234]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 59255
+ src tos = 0
+ fwd status = 0
+ in packets = 11
+ in bytes = 4142
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ out packets = 11
+ out bytes = 4134
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+CA 00 00 00 01 00 08 E5 8A 24 A1 F6 A1 CD 6B 00 | .........$....k.
+43 9E DA A3 8B B8 17 5B 5D AA C2 B6 EA 30 50 6F | C......[]....0Po
+60 A3 30 DC 21 98 BB DE 84 13 45 CA AE E6 39 DF | `.0.!.....E...9.
+5D 8F 92 B6 D0 06 A3 96 D9 CC 00 A8 2C F5 AE E5 | ]...........,...
+29 4C 8B 6C 98 E1 45 8F C0 1E 82 14 FC 59 2D 4F | )L.l..E......Y-O
+FA F2 14 8C D8 D7 41 8F DB 1D 97 B9 60 EE 3A A6 | ......A.....`.:.
+D9 6A EB 92 5A 86 01 5C 49 76 24 52 8C 12 00 B6 | .j..Z..\Iv$R....
+F0 07 C6 8D 6A 4C BA 2B CC 75 1E 6F 5B D7 B9 FA | ....jL.+.u.o[...
+78 E5 28 06 96 50 34 07 23 94 9B FA 83 CB 4C AC | x.(..P4.#.....L.
+1C 17 2F C1 31 55 33 D8 3B DA 3D F3 2D 6A 01 44 | ../.1U3.;.=.-j.D
+A9 D7 5E 34 19 43 E3 3C 61 81 F0 07 82 27 48 16 | ..^4.C.M.M......+
+2C 7F 7B FA E1 41 43 1A 55 C6 F9 6E 83 4B 86 35 | ,.{..AC.U..n.K.5
+ED 84 B9 B4 4F 79 2B 90 6B 3F AA C7 DD CF 56 7E | ....Oy+.k?....V~
+DD DC E7 FE 95 A0 2D EA DB 89 5F 6A E5 0F D1 40 | ......-..._j...@
+8D 5F 4F 67 A5 AC EA 1D 01 2C 4B E4 01 4F 76 CE | ._Og.....,K..Ov.
+DA 78 68 CF 00 F3 83 D0 24 88 88 35 94 BF E3 44 | .xh.....$..5...D
+FF E3 CB 5B 47 F9 89 91 2A 69 15 E2 48 B2 35 2A | ...[G...*i..H.5*
+3E 47 E6 FD 10 FE D2 14 00 19 9A D9 21 A2 7C 7E | >G..........!.|~
+BA 21 A1 A4 34 5C 58 C4 BF 5C 0E 05 B8 34 8C 75 | .!..4\X..\...4.u
+5B 38 2A 82 3C 8B EF 3D 09 40 D1 9C E5 1B 99 64 | [8*.<..=.@.....d
+A7 2F 66 7C 8C AF 51 61 AD F4 74 EF 4A 15 7E 76 | ./f|..Qa..t.J.~v
+0C 14 11 68 E5 5A 09 E3 98 A2 E1 2B 79 38 2E 84 | ...h.Z.....+y8..
+FD D0 F9 62 4F A5 04 A8 78 B3 9E 56 28 48 3B C9 | ...bO...x..V(H;.
+B3 41 DB 89 FA 88 86 29 56 3C F0 95 F0 A0 1D 0A | .A.....)V<......
+DC C1 62 31 AC 3A 3C 7A 02 A3 7C 0E CF 62 9C 67 | ..b1.:w.F..o]..o:.
+C4 CF 59 19 AE 88 FE 6A 64 9B B3 18 78 43 7D C7 | ..Y....jd...xC}.
+3F 36 20 50 B8 2C BE AE 10 28 2E A8 76 65 B4 07 | ?6 P.,...(..ve..
+13 E1 81 E9 A1 58 52 1B 32 4B 31 23 D7 94 F5 B1 | .....XR.2K1#....
+7E 71 5F DF 5B 0A A8 27 D3 44 7C 22 19 98 DC 30 | ~q_.[..'.D|"...0
+7C 1A 49 CF 45 C9 36 85 79 0E 97 22 FF 21 99 0E | |.I.E.6.y..".!..
+CE 2A 62 70 69 9A 9E 23 52 A9 A0 CB 28 EF CC A5 | .*bpi..#R...(...
+E5 00 00 00 01 00 08 E5 8A 24 A1 F6 A1 CD 6B 40 | .........$....k@
+DD 9D B6 50 9A 8F FC 48 7E 97 F2 8C B0 EA 2C E2 | ...P...H~.....,.
+3C 2D 1B E3 18 B7 D8 90 75 C3 56 18 3F 2C 49 3F | <-......u.V.?,I?
+ED FA FE 35 16 20 E0 6D B2 2E F8 64 75 2E F0 F7 | ...5. .m...du...
+CF 4A 3B 7D C3 CF 52 3A 85 88 CA 19 83 03 B7 EA | .J;}..R:........
+70 00 5A EC C1 ED 9C 99 B9 AB 1F B2 61 40 48 10 | p.Z.........a@H.
+57 2B 2B 50 2A B9 D0 79 81 07 86 9F AE 8C 52 A1 | W++P*..y......R.
+4F 82 03 4D 70 59 65 01 BB 95 34 77 56 53 24 B4 | O..MpYe...4wVS$.
+6B 28 B2 9E 0F 34 96 F7 36 1B 5F F4 D3 65 C2 A6 | k(...4..6._..e..
+17 16 74 58 2E 1A 44 88 A8 75 90 BE 70 FB 70 DD | ..tX..D..u..p.p.
+29 B9 4D 7F 71 33 18 94 5F D6 50 11 60 A9 00 D5 | ).M.q3.._.P.`...
+C8 07 59 60 7D 89 45 6A 45 AF 64 19 F9 02 99 99 | ..Y`}.EjE.d.....
+81 36 50 D7 D4 05 4D 94 7F 7C 98 62 59 D7 31 FE | .6P...M..|.bY.1.
+FF D9 A5 D2 DE C4 3B A1 95 51 F7 95 4E 54 9E 1A | ......;..Q..NT..
+C8 E0 2D 47 BF E8 BA 4E 5D 55 30 BD 00 1F 40 FB | ..-G...N]U0...@.
+E0 5F F6 76 52 1A C0 5B 2B F1 E1 87 27 DC 6F A8 | ._.vR..[+...'.o.
+CD B7 FE CD 27 36 B3 38 83 E9 F4 D0 BE A0 CE 5F | ....'6.8......._
+33 FF 43 66 EC FD 9A 37 8F F6 31 35 2B A3 6B 13 | 3.Cf...7..15+.k.
+49 9A 7E 67 5B 39 8B 2E 50 5F 49 62 C2 98 22 2E | I.~g[9..P_Ib..".
+C5 60 | .`
+
+Flow Record:
+ RecordCount = 5
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132344685 [2024-04-15 00:05:44.685]
+ last = 1713132375682 [2024-04-15 00:06:15.682]
+ received at = 1713132441667 [2024-04-15 00:07:21.667]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 58880
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18601
+ src addr = 17.248.209.68
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 6945
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 15.901 ms
+ srv latency = 0.000 ms
+ app latency = 0.477 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 06 5F 5B 5F C9 | ....z...v..._[_.
+89 D3 54 BD 52 AF D1 91 4D 77 E2 33 02 79 79 80 | ..T.R...Mw.3.yy.
+8A E6 A6 74 F8 2E 54 EB 99 7B 22 20 B3 98 93 D3 | ...t..T..{" ....
+FD EB 7B 82 1C 6D CE 5F 4D FC 85 2E 08 13 D8 57 | ..{..m._M......W
+7A D0 B5 AA 1D A0 FB B9 06 38 CF 1B 13 02 00 00 | z........8......
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 5A | ..+.....3.$... Z
+4D 34 B9 06 BA C1 3B 67 FD 4A 78 18 7A 0E 7F DE | M4....;g.Jx.z...
+FA F0 75 D1 54 99 D5 BE FC CA 58 52 B2 B8 06 14 | ..u.T.....XR....
+03 03 00 01 01 17 03 03 00 2A 1C FE 79 61 CA BB | .........*..ya..
+00 74 16 64 A1 C4 A8 89 A4 71 4D 5B 6E 4B C8 F8 | .t.d.....qM[nK..
+D5 5A 79 CA FA 80 F6 59 DE 71 61 E3 97 A9 B3 24 | .Zy....Y.qa....$
+7E AA 09 E7 17 03 03 11 25 98 E8 13 7E 0E C0 6F | ~.......%...~..o
+F4 D7 20 62 54 8F AE C2 BA 65 DB 64 8F 9C FB 9A | .. bT....e.d....
+61 11 BB EE 1E B3 40 3F 69 13 F3 DD D3 87 AB 54 | a.....@?i......T
+7A E2 63 0A 58 D2 80 85 A3 9D 28 8C A4 EA C3 7C | z.c.X.....(....|
+81 5B 05 76 B5 B5 7F 8F 81 CA 1A F4 85 65 CD 0E | .[.v.........e..
+B1 C0 11 66 38 58 79 E9 0E E4 9D 49 2A 23 B8 92 | ...f8Xy....I*#..
+BA 65 8D 86 C9 56 A8 D5 5D 62 52 B0 08 2E F1 B8 | .e...V..]bR.....
+CB 37 82 FE 9E FD 25 AF 4C B5 E5 70 D6 61 98 1D | .7....%.L..p.a..
+26 D0 B9 02 9A 59 0A 92 AB 17 3E 30 3D E2 5B BD | &....Y....>0=.[.
+62 BF E7 3D 5C 74 D6 CE A2 5D CE 99 0C 3F 19 42 | b..=\t...]...?.B
+DC 0C E6 2F 5F 32 59 F2 3C 8A DF 4F E2 14 8E 7B | .../_2Y.<..O...{
+84 6D 19 4B E3 05 EE 17 D7 0B DB AF D3 AA 92 B4 | .m.K............
+6A AF DC DE 5A A1 D2 50 34 C9 9C D6 9E 7E D4 37 | j...Z..P4....~.7
+EA DF C5 2B 13 B9 E4 3C 57 97 45 78 31 7A 1C CF | ...+...
+20 F3 65 C5 1B 03 68 7E 0A 13 DB EB BB 37 A3 E6 | .e...h~.....7..
+2C 7B 2E E6 9B 2C BD 73 EC A1 D2 7F 56 02 B2 A2 | ,{...,.s....V...
+EE 48 A1 FE 4F 6D A8 EF 09 0C FA F0 C1 C7 39 68 | .H..Om........9h
+D2 EE 4B 3B 3C 32 36 85 35 F3 91 51 0A 24 86 73 | ..K;<26.5..Q.$.s
+65 20 D7 3F 6B 8D E4 29 EA FD 7F 19 17 42 4D 53 | e .?k..).....BMS
+BB 98 1B EB C8 29 A2 BB 4B DA 22 C8 EA 25 0A 52 | .....)..K."..%.R
+BA 1E D9 DC AF 82 67 7A FE FD 78 7D 59 A0 8D 47 | ......gz..x}Y..G
+9D B2 36 71 23 DA 5B 3E 8E 8E 6B FC D2 E2 E2 4E | ..6q#.[>..k....N
+A2 18 DB AF B8 77 C8 A9 4B D9 D9 7A 49 D8 73 56 | .....w..K..zI.sV
+4B CE DA 4B 56 22 FE CE DB 4E B7 51 BF 71 1E CF | K..KV"...N.Q.q..
+45 EB 36 AC 25 8D CE 55 61 7A C4 51 15 29 FC 52 | E.6.%..Uaz.Q.).R
+4B 51 BA 03 B5 FB AD 24 C3 56 72 19 2A 07 51 1B | KQ.....$.Vr.*.Q.
+62 9C 45 19 31 AC F2 9E 6C 44 A6 C9 35 EA 0B 67 | b.E.1...lD..5..g
+13 25 1A 88 FC E4 35 D2 87 58 E5 3B AF 0D 4C 56 | .%....5..X.;..LV
+C8 F5 B3 22 D6 D9 34 1D CE 76 15 FB BF 79 47 7A | ..."..4..v...yGz
+80 E1 0E B5 E4 BA 92 DC 35 35 99 AD 55 4A 25 F0 | ........55..UJ%.
+5F 04 B3 A5 70 F5 EE 6E 67 D2 7C E6 3C 14 ED AB | _...p..ng.|.<...
+00 BF 33 5E AE F3 6D 61 84 40 48 51 CD B1 71 B4 | ..3^..ma.@HQ..q.
+20 5C A2 B2 18 26 9D A6 38 3D 44 FB 55 44 AD CA | \...&..8=D.UD..
+88 71 AE 7B 3D 02 11 B6 DA 49 AF DC 7E 32 32 2E | .q.{=....I..~22.
+5A CD C2 FD 5E 07 69 AC 48 33 86 2F EE CE E9 8A | Z...^.i.H3./....
+5E 0D C1 25 52 4A 8A 85 5B E8 4B 70 D9 18 75 D8 | ^..%RJ..[.Kp..u.
+EF 27 46 3D 5E 61 F6 E6 64 EA 72 6B 18 B2 EE 65 | .'F=^a..d.rk...e
+F9 BB 47 0D 7E 6C 60 29 A8 C4 EA 68 99 16 98 7C | ..G.~l`)...h...|
+86 B2 40 92 36 E7 22 54 40 F7 46 91 CD FD 22 99 | ..@.6."T@.F...".
+53 9E 83 64 2E CE C7 D4 90 93 A4 22 CE 2F 40 91 | S..d......."./@.
+90 62 A7 2C 7C 09 FD F7 38 6D BB 33 AC F3 D7 2B | .b.,|...8m.3...+
+7A 48 A7 18 9B F1 FC F8 19 DF B8 05 B7 C2 B1 10 | zH..............
+CD 5A 92 F5 D6 C9 01 5B 5B A0 4C 98 96 30 0D 55 | .Z.....[[.L..0.U
+C8 5D BE B1 CA 5D 26 CF 54 4E 3A 0C 47 33 DB 23 | .]...]&.TN:.G3.#
+84 09 60 39 8F EB A9 49 58 87 D5 C2 B6 63 94 72 | ..`9...IX....c.r
+AF A7 8D A2 AE B6 C8 B7 CA 4C 20 14 B5 54 F6 0E | .........L ..T..
+86 98 53 62 04 FA D5 FC 3E F2 3C 36 77 C6 0A 55 | ..Sb....>.<6w..U
+4E 17 7C F7 09 F1 0D 9D 5E 27 5D 9B 6F 89 75 B0 | N.|.....^'].o.u.
+54 28 C0 0E 30 38 6B 54 7B 6F BB 6C BF B4 98 D3 | T(..08kT{o.l....
+4D 9E 8D 5D 67 2E E2 32 17 BC AC 35 65 61 52 34 | M..]g..2...5eaR4
+D9 40 5C 63 CD F0 09 47 BF 47 EB 78 03 1E 12 C4 | .@\c...G.G.x....
+12 D8 24 35 EC 23 B8 CD 14 FC 43 17 C0 FE 79 21 | ..$5.#....C...y!
+82 03 DB CF B7 E8 09 8B B4 41 95 D5 82 7D AE 20 | .........A...}.
+09 83 EE F4 03 E7 1E 30 | .......0
+
+Flow Record:
+ RecordCount = 6
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 697
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131941133 [2024-04-14 23:59:01.133]
+ last = 1713131941647 [2024-04-14 23:59:01.647]
+ received at = 1713132015760 [2024-04-15 00:00:15.760]
+ proto = 6 TCP
+ tcp flags = 0xdf CE.APRSF
+ src port = 57373
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 2107
+ src addr = 157.143.34.100
+ dst addr = 2.21.22.179
+ out packets = 14
+ out bytes = 11839
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.922 ms
+ srv latency = 0.000 ms
+ app latency = 0.281 ms
+ in payload = 517
+ TLS version = TLS 1.2
+ sni name = weather-data.apple.com
+ ja3 hash = e252913a211e4a33817d5ac1775d8e55
+ ja4 hash = t12d2014h1_a09f3c656075_14788d8d241b
+16 03 01 02 00 01 00 01 FC 03 03 32 C8 C9 9C F0 | ...........2....
+AD CA 63 94 02 3F 00 86 B2 D3 DF 74 42 A5 8D 6F | ..c..?.....tB..o
+C3 17 5F C5 80 FC 3A 60 37 73 8C 20 0E 6F 59 04 | .._...:`7s. .oY.
+DD D8 EB A3 7F 07 F1 ED 5D A9 36 CB BE 5D AF A6 | ........].6..]..
+D3 48 65 9E 23 C8 C1 26 35 74 43 CA 00 2A 4A 4A | .He.#..&5tC..*JJ
+13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./
+CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5
+00 2F C0 08 C0 12 00 0A 01 00 01 89 7A 7A 00 00 | ./..........zz..
+00 00 00 1B 00 19 00 00 16 77 65 61 74 68 65 72 | .........weather
+2D 64 61 74 61 2E 61 70 70 6C 65 2E 63 6F 6D 00 | -data.apple.com.
+17 00 00 FF 01 00 01 00 00 0A 00 0C 00 0A 0A 0A | ................
+00 1D 00 17 00 18 00 19 00 0B 00 02 01 00 00 10 | ................
+00 0B 00 09 08 68 74 74 70 2F 31 2E 31 00 05 00 | .....http/1.1...
+05 01 00 00 00 00 00 0D 00 18 00 16 04 03 08 04 | ................
+04 01 05 03 02 03 08 05 08 05 05 01 08 06 06 01 | ................
+02 01 00 12 00 00 00 33 00 2B 00 29 0A 0A 00 01 | .......3.+.)....
+00 00 1D 00 20 CD D6 86 28 3D 9D 85 AA E0 F6 AD | .... ...(=......
+E1 77 C0 9F A7 4C 94 5F EE A2 51 21 50 F6 24 77 | .w...L._..Q!P.$w
+1A B9 3A 7A 05 00 2D 00 02 01 01 00 2B 00 0B 0A | ..:z..-.....+...
+3A 3A 03 04 03 03 03 02 03 01 00 1B 00 03 02 00 | ::..............
+01 4A 4A 00 01 00 00 15 00 BB 00 00 00 00 00 00 | .JJ.............
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 | .....
+
+Flow Record:
+ RecordCount = 7
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132205444 [2024-04-15 00:03:25.444]
+ last = 1713132205905 [2024-04-15 00:03:25.905]
+ received at = 1713132277672 [2024-04-15 00:04:37.672]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 61719
+ src tos = 0
+ fwd status = 0
+ in packets = 14
+ in bytes = 8683
+ src addr = 104.22.15.70
+ dst addr = 157.143.34.100
+ out packets = 12
+ out bytes = 1547
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.237 ms
+ srv latency = 0.000 ms
+ app latency = 0.872 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 22a29273c84f24c87ea605eb553e276c
+ ja4s hash = t130500_c02b_926e7c93a85d
+16 03 03 00 63 02 00 00 5F 03 03 66 1C 52 AD 8D | ....c..._..f.R..
+9B 43 7C 13 66 ED 60 9B C2 29 29 7C C7 4E BE F9 | .C|.f.`..))|.N..
+F6 C0 F8 44 4F 57 4E 47 52 44 01 20 2F A0 46 C8 | ...DOWNGRD. /.F.
+DA 94 A0 79 8B 05 C1 B8 C1 C2 5F C5 CF 34 CB 03 | ...y......_..4..
+42 12 2B 03 3B 48 BF 23 C5 A2 E2 32 C0 2B 00 00 | B.+.;H.#...2.+..
+17 00 00 00 00 00 17 00 00 FF 01 00 01 00 00 0B | ................
+00 02 01 00 00 05 00 00 16 03 03 10 2A 0B 00 10 | ............*...
+26 00 10 23 00 03 85 30 82 03 81 30 82 03 07 A0 | &..#...0...0....
+03 02 01 02 02 12 04 83 EA 68 06 B1 AD EA 76 77 | .........h....vw
+39 76 37 6B A8 36 09 DB 30 0A 06 08 2A 86 48 CE | 9v7k.6..0...*.H.
+3D 04 03 03 30 32 31 0B 30 09 06 03 55 04 06 13 | =...021.0...U...
+02 55 53 31 16 30 14 06 03 55 04 0A 13 0D 4C 65 | .US1.0...U....Le
+74 27 73 20 45 6E 63 72 79 70 74 31 0B 30 09 06 | t's Encrypt1.0..
+03 55 04 03 13 02 45 31 30 1E 17 0D 32 34 30 34 | .U....E10...2404
+31 34 30 30 31 39 31 30 5A 17 0D 32 34 30 37 31 | 14001910Z..24071
+33 30 30 31 39 30 39 5A 30 1B 31 19 30 17 06 03 | 3001909Z0.1.0...
+55 04 03 13 10 61 70 69 2E 72 6F 6F 6E 6C 61 62 | U....api.roonlab
+73 2E 6E 65 74 30 59 30 13 06 07 2A 86 48 CE 3D | s.net0Y0...*.H.=
+02 01 06 08 2A 86 48 CE 3D 03 01 07 03 42 00 04 | ....*.H.=....B..
+03 24 E9 47 62 77 D9 B4 96 C5 B3 C4 89 CE 0C 90 | .$.Gbw..........
+20 5F E8 D8 AB 0E E0 42 26 48 8D DE A1 16 8F 3A | _.....B&H.....:
+B9 59 C4 D4 ED 39 D3 C0 2A B0 86 2A 97 25 0F 1F | .Y...9..*..*.%..
+35 B4 B8 23 8B 28 0F 27 D2 A2 7E 6A 39 C5 C4 AB | 5..#.(.'..~j9...
+A3 82 02 12 30 82 02 0E 30 0E 06 03 55 1D 0F 01 | ....0...0...U...
+01 FF 04 04 03 02 07 80 30 1D 06 03 55 1D 25 04 | ........0...U.%.
+16 30 14 06 08 2B 06 01 05 05 07 03 01 06 08 2B | .0...+.........+
+06 01 05 05 07 03 02 30 0C 06 03 55 1D 13 01 01 | .......0...U....
+FF 04 02 30 00 30 1D 06 03 55 1D 0E 04 16 04 14 | ...0.0...U......
+0A A2 9D 1D D2 00 85 F6 3D 30 A7 DD 5E 2F 7E 5E | ........=0..^/~^
+78 20 ED 2D 30 1F 06 03 55 1D 23 04 18 30 16 80 | x .-0...U.#..0..
+14 5A F3 ED 2B FC 36 C2 37 79 B9 52 30 EA 54 6F | .Z..+.6.7y.R0.To
+CF 55 CB 2E AC 30 55 06 08 2B 06 01 05 05 07 01 | .U...0U..+......
+01 04 49 30 47 30 21 06 08 2B 06 01 05 05 07 30 | ..I0G0!..+.....0
+01 86 15 68 74 74 70 3A 2F 2F 65 31 2E 6F 2E 6C | ...http://e1.o.l
+65 6E 63 72 2E 6F 72 67 30 22 06 08 2B 06 01 05 | encr.org0"..+...
+05 07 30 02 86 16 68 74 74 70 3A 2F 2F 65 31 2E | ..0...http://e1.
+69 2E 6C 65 6E 63 72 2E 6F 72 67 2F 30 1B 06 03 | i.lencr.org/0...
+55 1D 11 04 14 30 12 82 10 61 70 69 2E 72 6F 6F | U....0...api.roo
+6E 6C 61 62 73 2E 6E 65 74 30 13 06 03 55 1D 20 | nlabs.net0...U.
+04 0C 30 0A 30 08 06 06 67 81 0C 01 02 01 30 82 | ..0.0...g.....0.
+01 04 06 0A 2B 06 01 04 01 D6 79 02 04 02 04 81 | ....+.....y.....
+F5 04 81 F2 00 F0 00 76 00 3B 53 77 75 3E 2D B9 | .......v.;Swu>-.
+80 4E 8B 30 5B 06 FE 40 3B 67 D8 4F C3 F4 C7 BD | .N.0[..@;g.O....
+00 0D 2D 72 6F E1 FA D4 17 00 00 01 8E DA 2F D2 | ..-ro........./.
+59 00 00 04 03 00 47 30 45 02 20 6F E8 1F A9 FF | Y.....G0E. o....
+36 DA 08 EC F7 36 0B 23 53 C5 A7 03 8F 7D F4 7E | 6....6.#S....}.~
+4C 36 EE 8F C2 18 C1 A1 29 3C 0C 02 21 00 BD 20 | L6......)<..!..
+9B F4 BF 57 40 FD C9 4C BB 99 C3 97 10 4A D1 A0 | ...W@..L.....J..
+BF 15 0F F8 F7 09 29 4B 92 1B 26 71 DE 38 00 76 | ......)K..&q.8.v
+00 76 FF 88 3F 0A B6 FB 95 51 C2 61 CC F5 87 BA | .v..?....Q.a....
+34 B4 A4 CD BB 29 DC 68 42 0A 9F E6 67 4C 5A 3A | 4....).hB...gLZ:
+74 00 00 01 8E DA 2F D2 86 00 00 04 03 00 47 30 | t...../.......G0
+45 02 20 16 94 7C D4 B6 9E B1 48 6C C9 1A DF 74 | E. ..|....Hl...t
+FB D1 68 4B F2 63 29 C5 38 28 41 55 9B 68 55 A7 | ..hK.c).8(AU.hU.
+02 B0 44 02 21 00 F5 3D C0 DA B0 F4 EC 78 14 3B | ..D.!..=.....x.;
+9B F5 60 22 AC 71 CD CD E4 8F E7 DB 33 68 9C 38 | ..`".q......3h.8
+E0 76 22 EE CF 94 30 0A 06 08 2A 86 48 CE 3D 04 | .v"...0...*.H.=.
+03 03 03 68 00 30 65 02 31 00 99 37 0F 43 15 73 | ...h.0e.1..7.C.s
+E5 F6 E2 32 68 10 DC 15 4D 34 F2 B9 28 B3 77 CA | ...2h...M4..(.w.
+D5 77 0C 98 08 7A 2C 62 FC 9D E7 DE 6A 46 00 52 | .w...z,b....jF.R
+6E 92 0D 49 D2 67 BE CD C0 72 02 30 0D 29 D9 D1 | n..I.g...r.0.)..
+E4 F5 CF FF 43 83 D1 25 7A 79 9B 4E 7D 53 EE 37 | ....C..%zy.N}S.7
+8C 33 00 6E DE F6 25 2A 68 49 B0 C1 7E FE 82 06 | .3.n..%*hI..~...
+53 0B C0 FD 4A EA 99 1F A9 D1 D4 44 00 02 CA 30 | S...J......D...0
+82 02 C6 30 82 02 4D A0 03 02 01 02 02 11 00 B3 | ...0..M.........
+BD DF F8 A7 84 5B BC E9 03 A0 41 35 B3 4A 45 30 | .....[....A5.JE0
+0A 06 08 2A 86 48 CE 3D 04 03 03 30 4F 31 0B 30 | ...*.H.=...0O1.0
+09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 | ...U....US1)0'..
+55 04 0A 13 20 49 6E 74 65 72 6E 65 74 20 53 65 | U... Internet Se
+63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 | curity Research
+47 72 6F 75 70 31 15 30 13 06 03 55 04 03 13 0C | Group1.0...U....
+49 53 52 47 20 52 6F 6F 74 20 58 32 30 1E 17 0D | ISRG Root X20...
+32 30 30 39 30 34 30 30 30 30 30 30 5A 17 0D 32 | 200904000000Z..2
+35 30 39 31 35 31 36 30 30 30 30 5A 30 32 31 0B | 50915160000Z021.
+30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 06 | 0...U....US1.0..
+03 55 04 0A 13 0D 4C 65 74 27 73 20 45 6E 63 72 | .U....Let's Encr
+79 70 74 31 0B 30 09 06 03 55 04 03 13 02 45 31 | ypt1.0...U....E1
+30 76 30 10 06 07 2A 86 48 CE 3D 02 01 06 05 2B | 0v0...*.H.=....+
+81 04 00 22 03 62 00 04 24 5C 2D A2 2A FD 1C 4B | ...".b..$\-.*..K
+A6 5D 97 73 27 31 AC B2 A0 69 62 EF 65 E8 A6 B0 | .].s'1...ib.e...
+F0 AC 4B 9F FF 1C 0B 70 0F D3 98 2F 4D FC 0F 00 | ..K....p.../M...
+9B 37 F0 74 05 57 32 97 2E 05 EF 2A 43 25 A3 FB | .7.t.W2....*C%..
+6E 34 27 13 F6 4F 7E 69 D3 02 99 5E EB 24 47 92 | n4'..O~i...^.$G.
+C1 24 9B E6 B1 21 8F C1 24 81 FC 68 CC 1F 69 BA | .$...!..$..h..i.
+58 F5 19 22 F7 74 C6 16 A3 82 01 08 30 82 01 04 | X..".t......0...
+30 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 01 86 | 0...U...........
+30 1D 06 03 55 1D 25 04 16 30 14 06 08 2B 06 01 | 0...U.%..0...+..
+05 05 07 03 02 06 08 2B 06 01 05 05 07 03 01 30 | .......+.......0
+12 06 03 55 1D 13 01 01 FF 04 08 30 06 01 01 FF | ...U.......0....
+02 01 00 30 1D 06 03 55 1D 0E 04 16 04 14 5A F3 | ...0...U......Z.
+ED 2B FC 36 C2 37 79 B9 | .+.6.7y.
+
+Flow Record:
+ RecordCount = 8
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 12 15 17 29
+ size = 1552
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132384093 [2024-04-15 00:06:24.093]
+ last = 1713132384243 [2024-04-15 00:06:24.243]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 51654
+ src tos = 0
+ fwd status = 0
+ in packets = 16
+ in bytes = 8224
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 17.256 ms
+ srv latency = 0.000 ms
+ app latency = 12.277 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 F7 31 6E 76 5D | ....z...v...1nv]
+50 18 9E C7 FF A0 81 7E 43 7E 54 B2 83 88 37 32 | P......~C~T...72
+B0 9C 34 D8 FE 71 30 8A 5E 1C C0 20 19 5E C2 96 | ..4..q0.^.. .^..
+F9 4D 3C 3C FB B9 52 E5 8C D5 FB BE 2E 7B BF 04 | .M<<..R......{..
+D4 08 5A F9 AC 46 9C AA 9E 96 2C D8 13 01 00 00 | ..Z..F....,.....
+2E 00 33 00 24 00 1D 00 20 64 27 97 8D 8E EF 2D | ..3.$... d'....-
+72 2F 70 A2 DE 5A 25 3D DF 40 6D 9B D8 29 58 9D | r/p..Z%=.@m..)X.
+1B 72 87 40 73 31 C4 B1 28 00 2B 00 02 03 04 14 | .r.@s1..(.+.....
+03 03 00 01 01 17 03 03 11 C6 BF EE 88 59 20 60 | .............Y `
+98 65 7A 6A 1C 1A 96 58 6F CC 5A B0 8A 54 5D B7 | .ezj...Xo.Z..T].
+64 B5 39 FE 09 53 AF F9 77 F4 A7 BF AD CF 95 1D | d.9..S..w.......
+68 90 C6 38 68 25 4A A3 A4 AE 4E D5 EF C1 37 15 | h..8h%J...N...7.
+67 49 B6 04 42 83 78 59 23 8F 2C 64 B8 6E B4 0A | gI..B.xY#.,d.n..
+E4 14 0C DC DB 15 19 BD A4 61 C6 12 D7 B7 20 7A | .........a.... z
+24 C8 FF 63 0D FA FF 6B E2 C0 D3 B0 C8 1E 69 62 | $..c...k......ib
+43 F7 05 72 64 AE 5A 82 F4 BE 80 8E A0 BE 70 75 | C..rd.Z.......pu
+F0 E3 04 91 4E 76 9A 10 BB 4D CA D4 CB 1D D0 08 | ....Nv...M......
+3E 30 AB 2D 83 EE 59 97 AF 3A 91 4D 49 B3 64 1A | >0.-..Y..:.MI.d.
+F9 16 FC 27 A2 67 61 23 B5 40 BA D8 89 78 92 6C | ...'.ga#.@...x.l
+6D 77 0C 44 F4 F0 23 0E F9 F0 ED 65 60 0E 19 36 | mw.D..#....e`..6
+3A 96 29 3F 0C BB AD 76 92 34 8C 99 7E 20 4D 57 | :.)?...v.4..~ MW
+78 F1 81 17 17 B5 F7 8F 8A 04 E7 95 7B 2E 51 29 | x...........{.Q)
+00 66 D8 8D 40 CD A5 3A 8B 1B 55 99 7C 1E 56 6B | .f..@..:..U.|.Vk
+B8 BC BE BA 30 87 EE 31 25 2D 63 9F F2 62 45 21 | ....0..1%-c..bE!
+11 DE BD 34 3D DC E7 6F 53 4C 85 E3 C4 40 CB 48 | ...4=..oSL...@.H
+64 6A E9 01 B5 CA AF 39 41 32 E5 A7 B1 F0 D3 36 | dj.....9A2.....6
+F2 9F FB 9E 87 6C 56 FA 67 AA 72 74 E7 D4 83 D3 | .....lV.g.rt....
+12 EF 6A 98 44 79 42 E6 21 85 AE 83 F3 7F 86 04 | ..j.DyB.!.......
+A3 11 53 51 88 7D C2 04 C5 19 97 B1 EC 06 DD 3D | ..SQ.}.........=
+70 B9 D9 37 29 A2 DA 81 1A AC 0E 63 5D C4 98 9E | p..7)......c]...
+6A 85 FB 6E 94 98 F1 62 9D 02 8C F9 27 4D 61 DB | j..n...b....'Ma.
+AB 7B 5D EE 4A 37 72 85 D8 62 8B 8C 57 C9 03 44 | .{].J7r..b..W..D
+4F 90 B5 C8 3A ED 2A E5 39 08 E3 65 9C 5E 9D 20 | O...:.*.9..e.^.
+74 02 ED EF C8 1F 34 87 28 58 4D DB B6 CD 9D 94 | t.....4.(XM.....
+FE 9C 19 13 79 1F 65 00 EB DC BE 01 00 FE 8A 33 | ....y.e........3
+00 FA AB BC FE D3 81 E1 1F D0 EE 3B 51 67 B3 27 | ...........;Qg.'
+48 BA 17 48 5D 92 B8 6F 09 25 36 E4 63 42 B6 84 | H..H]..o.%6.cB..
+F3 B8 09 16 1C 20 F2 04 0D 29 03 3B 40 C6 FF 80 | ..... ...).;@...
+BB BA B6 D3 1A 9B 72 E6 16 C8 B6 48 C1 63 93 29 | ......r....H.c.)
+5F 2F B5 8D 40 23 44 82 C1 40 57 B0 9C 2E 2A E2 | _/..@#D..@W...*.
+83 C7 88 DE 6E 66 1A FF 68 3B 17 C8 20 AC 36 45 | ....nf..h;.. .6E
+CD 10 FD 11 C6 0F 4A D1 E3 24 A2 16 0F 29 B4 96 | ......J..$...)..
+CE 9F 85 D3 0C 8D 61 FD 66 74 27 8E 96 F4 A3 CD | ......a.ft'.....
+E0 A6 69 BB 36 3F F6 F5 6D D8 B4 33 E8 44 AA F4 | ..i.6?..m..3.D..
+DF 1B 80 A6 C0 3D 1D 33 EF C2 44 EB F6 8C 1E 7E | .....=.3..D....~
+25 DE B4 83 52 37 5F 04 6D F9 C3 8B 43 8A 52 B3 | %...R7_.m...C.R.
+75 0E B3 5F A0 EE 93 CC 2F 64 C7 13 02 94 CE FD | u.._..../d......
+FA 9B CE 80 8F C8 11 DC FB 20 77 90 2C 87 F7 B9 | ......... w.,...
+4C 99 8B A9 2C 06 02 FE A6 D5 E3 A7 D6 A6 08 8A | L...,...........
+C3 73 47 14 97 DB 20 2D 95 08 9D 05 5A E5 15 52 | .sG... -....Z..R
+C3 F3 EF 92 DD 98 A9 D6 4D 50 2C 20 97 4A DE A2 | ........MP, .J..
+44 68 7F 6C 77 0C 18 2C 31 99 7C 59 0B 9D A4 25 | Dh.lw..,1.|Y...%
+45 A0 D1 B1 3A 4A 7F F0 3B EB 59 C3 AC FC E4 ED | E...:J..;.Y.....
+98 07 5C 70 A1 67 D2 B2 E2 32 F0 A0 B9 5A 12 D6 | ..\p.g...2...Z..
+AD 71 51 CE B1 5B 55 8D B5 26 99 77 32 BC 22 0E | .qQ..[U..&.w2.".
+1D F1 8E 34 4F B1 B8 44 69 4D 86 CF 52 1F 8E 69 | ...4O..DiM..R..i
+FB 7A 25 C9 53 45 B1 EA A3 E2 29 D3 8A B6 90 EB | .z%.SE....).....
+D5 B8 E6 86 AC EF 44 1E 10 E2 D5 73 A3 89 EA C4 | ......D....s....
+A7 BE 05 CC 27 07 6A 40 38 5A A2 E9 A4 C8 8C 01 | ....'.j@8Z......
+04 CD 16 C8 75 F8 D8 EC A3 CC F1 85 8B 9A 51 49 | ....u.........QI
+53 9A 77 40 C2 B9 71 0D 75 CF A8 33 E8 41 4F 28 | S.w@..q.u..3.AO(
+07 F2 F7 27 7B 56 05 54 C1 3C 0F 64 F1 CB 19 CA | ...'{V.T.<.d....
+2F 0C BE AD 1C 1B 37 AD 44 7C 67 03 0A 52 82 1A | /.....7.D|g..R..
+CA 8B C7 16 B1 45 F4 D4 E0 BB F2 17 1A 0B 73 57 | .....E........sW
+67 F9 90 99 DE BD CD 0D 1F F6 67 B5 47 9D A5 2F | g.........g.G../
+E8 07 88 19 5A 93 76 AE D1 6A 8A 6A 43 B5 50 02 | ....Z.v..j.jC.P.
+6F 7D E8 86 75 5E 7C 27 13 58 BD FA EA 5D 3B 73 | o}..u^|'.X...];s
+62 C6 F0 8A 48 59 1B 28 C5 19 8D 27 65 06 79 A6 | b...HY.(...'e.y.
+06 A3 A5 A2 A9 8B 31 C5 50 13 68 F8 0E 74 2A CA | ......1.P.h..t*.
+B8 CE 16 D3 72 C2 65 6B 84 02 5B 04 5E 99 BE CC | ....r.ek..[.^...
+96 55 D7 28 F0 1D 30 13 69 0C 8E 22 11 7D C7 A9 | .U.(..0.i..".}..
+38 3D A1 70 63 BF E9 62 86 A6 3E 7C A2 F5 04 A3 | 8=.pc..b..>|....
+51 81 C2 84 52 70 0C C3 DC 7B D5 94 C1 FB A9 EA | Q...Rp...{......
+86 94 77 DC 3C 7D 02 21 E2 74 CE D5 D2 0C 24 EE | ..w.<}.!.t....$.
+5E FF 2F 0F 59 C8 E6 17 1A 4B 28 E3 81 74 EE 15 | ^./.Y....K(..t..
+F7 20 32 94 5B 83 89 E4 4D DF 97 22 E2 2E 38 C8 | . 2.[...M.."..8.
+82 90 DD D1 57 8A 1F 67 23 55 13 69 D8 58 89 A3 | ....W..g#U.i.X..
+9D CE 9D BE 36 7C 60 42 CC FE B2 FE A5 6B B5 04 | ....6|`B.....k..
+A7 9E 4B 65 EB FE BF 8B 53 28 EA 91 F8 84 30 38 | ..Ke....S(....08
+A5 ED 04 34 D0 80 B2 2A 29 98 66 11 DF 7A E0 80 | ...4...*).f..z..
+67 99 51 95 10 2D 19 0E BB E6 65 1C B8 2C E1 82 | g.Q..-....e..,..
+20 7D B7 62 0D 43 10 16 3A 86 A4 09 86 FB 8D B8 | }.b.C..:.......
+8C BE 35 E4 C1 81 11 67 F5 71 74 27 51 83 5F 1C | ..5....g.qt'Q._.
+E7 30 A0 01 A4 BA 7A D0 5A C0 A9 EB A7 27 E0 3D | .0....z.Z....'.=
+EC 32 5C 42 70 5E BC 8E 3B 80 38 6D 50 01 3E FF | .2\Bp^..;.8mP.>.
+62 66 10 DA CC 15 8A 58 51 D7 F4 12 A9 96 6A 73 | bf.....XQ.....js
+B6 7B ED 7A 5B 47 4C D6 B2 98 EB C2 1B A4 34 0C | .{.z[GL.......4.
+80 7D A0 C3 0A D5 E6 BD | .}......
+
+Flow Record:
+ RecordCount = 9
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1608
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132343067 [2024-04-15 00:05:43.067]
+ last = 1713132374094 [2024-04-15 00:06:14.094]
+ received at = 1713132441667 [2024-04-15 00:07:21.667]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 60765
+ src tos = 0
+ fwd status = 0
+ in packets = 11
+ in bytes = 7425
+ src addr = 13.224.103.88
+ dst addr = 157.143.34.100
+ out packets = 13
+ out bytes = 1562
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 9.079 ms
+ srv latency = 0.000 ms
+ app latency = 0.953 ms
+ in payload = 1428
+ TLS version = TLS 1.3
+ ja3s hash = f4febc55ea12b31ae17cfb7e614afda8
+ ja4s hash = t130200_1301_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 4E 99 6A 88 F4 | ....z...v..N.j..
+23 FB 72 E0 A5 0D 5B 9A 68 F9 7F C4 41 FF DA 79 | #.r...[.h...A..y
+A1 1F 14 D3 13 17 D7 20 5C DF 00 20 CB 27 55 C5 | ....... \.. .'U.
+74 05 0D 63 D6 AD 4C 2D 37 FE EB 9E 6D 5E 91 48 | t..c..L-7...m^.H
+4D 54 F4 AF BB D6 4A FF AA 7D 28 29 13 01 00 00 | MT....J..}()....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 7B | ..+.....3.$... {
+61 25 DF 97 AE 9F F0 8D C4 09 5D 24 B6 6E CA 47 | a%........]$.n.G
+98 28 27 FD 62 02 F2 D2 00 50 B5 6B DB 70 04 14 | .('.b....P.k.p..
+03 03 00 01 01 17 03 03 00 1B 24 CA D3 A8 2F 54 | ..........$.../T
+E9 82 40 F6 D7 93 C8 9C 28 2E CC E3 7F 1F CA 9C | ..@.....(.......
+F1 6C 24 76 C6 17 03 03 15 4E 60 B7 D9 3D 86 7E | .l$v.....N`..=.~
+1B A9 15 76 E6 36 69 AB 13 B6 69 84 A7 E1 2C 79 | ...v.6i...i...,y
+06 76 FC 38 4E D7 B4 E0 E7 C1 1A 63 A4 53 88 44 | .v.8N......c.S.D
+9A 97 5E A8 96 CD 6D EA E2 B1 C2 06 14 E4 55 81 | ..^...m.......U.
+95 70 0C 1E 9D 68 77 23 44 90 92 D8 B3 5F C7 E4 | .p...hw#D...._..
+9D 3C 27 F5 7D 4F 16 7F 10 2D B4 36 A4 4E FB 1D | .<'.}O...-.6.N..
+73 42 03 2B 20 23 24 26 D5 5D 60 4A 02 58 7B F7 | sB.+ #$&.]`J.X{.
+63 16 8C 6C A5 DF 5C B9 C2 74 43 88 F9 8B BF 71 | c..l..\..tC....q
+26 B6 36 67 8C 72 44 66 4B 09 B1 DA 66 0F 7D D0 | &.6g.rDfK...f.}.
+99 E1 4F 55 6A 11 E0 96 0F 91 15 BC 3B 27 F5 BF | ..OUj.......;'..
+54 30 F5 D6 AB ED B0 F9 92 14 53 CE 4C 42 97 AF | T0........S.LB..
+AE 0A BA 6A 37 18 A0 06 81 91 97 0E 34 F9 A9 F8 | ...j7.......4...
+F9 77 F5 79 4C 54 29 05 7A 0A B2 84 3E CA 98 D2 | .w.yLT).z...>...
+EA 87 6C E1 1F 65 E0 0B D8 91 CF 29 C0 FB D4 0C | ..l..e.....)....
+CE 79 DB 29 B9 FF F8 66 50 A5 AD C3 EB 35 14 B6 | .y.)...fP....5..
+55 E6 99 C2 4C C0 15 4E 1E 67 FA 67 31 25 6A EA | U...L..N.g.g1%j.
+E5 78 F0 19 6D 7B D8 5C D6 86 81 81 CC F9 2B FA | .x..m{.\......+.
+C1 A2 CF F7 07 84 FE D4 51 A8 4F 00 8E 1C 26 53 | ........Q.O...&S
+74 55 46 F4 22 DC 90 D8 83 16 5B C1 DC B7 17 01 | tUF.".....[.....
+CD 20 84 8E 01 79 03 A6 B5 49 75 91 90 44 B4 DC | . ...y...Iu..D..
+47 99 F3 83 3A 41 1B AD 2A AA 93 A8 92 23 97 F1 | G...:A..*....#..
+F8 7B CB 35 58 74 81 75 FC 16 14 0F E4 EE FB 89 | .{.5Xt.u........
+26 EE 25 B0 DD D4 87 B0 C6 B7 D8 EE 80 C9 0E E2 | &.%.............
+06 02 61 86 6F AB F8 82 7B A1 C5 C7 B8 A5 D6 4C | ..a.o...{......L
+B7 BE F9 2E 6E 12 33 96 F1 DB D4 61 A9 B4 ED FE | ....n.3....a....
+47 8B 30 62 C6 DB 0F 1C 59 86 4C BB ED 1A 67 63 | G.0b....Y.L...gc
+55 F9 BD 4C 1B 6F 65 B8 B3 BF 02 7A 72 55 83 3B | U..L.oe....zrU.;
+CA B7 16 DE 8C 0E 89 EC FC E7 D2 19 9B 6C D6 91 | .............l..
+BA 97 77 3C 0C BF 06 58 6B 8E 2A AC 1C 95 E0 99 | ..w<...Xk.*.....
+23 28 C5 0A 66 B9 0E 69 51 9E 47 ED 02 52 14 DA | #(..f..iQ.G..R..
+34 F3 8B 98 A7 A3 36 07 F1 94 7E EE 81 6A BF 55 | 4.....6...~..j.U
+94 F7 E4 0A 07 CC C9 EA 40 F9 52 AB 79 C1 DC A6 | ........@.R.y...
+9A 63 C8 4C 95 70 40 D4 89 6F 73 6C 11 8D 06 34 | .c.L.p@..osl...4
+99 B0 FF 96 B0 26 DF D6 96 B3 BF 92 15 00 FB C7 | .....&..........
+8D 26 7F 72 9B 1F 84 C9 A5 3D AD 10 ED E8 75 6C | .&.r.....=....ul
+E7 67 EB B3 50 26 6A F8 08 02 0E 0E 0A 83 CC 84 | .g..P&j.........
+50 D6 25 DD B4 BE 87 07 B1 7D 77 D1 98 27 D9 30 | P.%......}w..'.0
+71 22 51 BF C8 FB 14 0D A7 AA DC 3C 2B 46 13 64 | q"Q........<+F.d
+51 B7 FD 8E F8 59 0C 47 91 52 9A 43 9B 29 6D 2B | Q....Y.G.R.C.)m+
+17 23 F7 30 AF 7C C7 7D 02 B6 A4 74 A6 8E 45 07 | .#.0.|.}...t..E.
+6F EA 3C EE 59 2F 22 26 7C DC 03 AB 9F BD 94 38 | o.<.Y/"&|......8
+30 A5 DC B5 E9 16 A4 59 DB 41 19 99 02 7A B9 47 | 0......Y.A...z.G
+DA F6 90 EA 19 C0 A8 10 F9 AC 9D 92 17 71 52 F7 | .............qR.
+AB E2 20 09 F3 AA 8A 34 6D 46 66 86 33 10 0F D7 | .. ....4mFf.3...
+9B 0B 7E 65 C2 EA 96 31 07 79 D0 40 EC A2 F7 69 | ..~e...1.y.@...i
+AE 39 B9 7B 25 1D BE 77 8E 8D F5 A6 4C 84 CD 65 | .9.{%..w....L..e
+BD 10 9D 35 5A 4D FF DA 45 C7 D5 A0 51 5B B8 34 | ...5ZM..E...Q[.4
+60 D9 98 67 AC 5A F1 A9 AF F5 69 B8 AA A3 4B FC | `..g.Z....i...K.
+C5 F3 BC C5 5A F8 2C 1B 11 C5 89 CE 1A F9 12 BC | ....Z.,.........
+BC A4 84 65 72 12 B5 F1 55 92 E1 70 82 8E C8 D2 | ...er...U..p....
+16 EA 23 FF A5 3E 2B ED A9 9D 53 60 68 98 7A 22 | ..#..>+...S`h.z"
+17 30 B2 B8 BB 46 5A 9D 9F F5 15 8E D3 E7 4D 0F | .0...FZ.......M.
+8F DF 63 D2 63 03 AF D0 47 76 03 FF A2 6A 2C D0 | ..c.c...Gv...j,.
+C3 22 9B 42 C3 D1 4E FD 7C F1 15 23 67 0D EF 22 | .".B..N.|..#g.."
+D7 AF 36 91 38 17 09 4F B4 CE 23 DB 04 5B 1D 63 | ..6.8..O..#..[.c
+A4 64 71 5E 94 68 3D D6 6B 6A 8A 37 36 D4 58 5C | .dq^.h=.kj.76.X\
+7F B5 EE 97 00 D7 99 B1 4B F9 06 60 7E 16 9F B8 | ........K..`~...
+9B D2 A9 10 1D CB E6 52 7A 09 04 D2 A3 2E 02 83 | .......Rz.......
+87 08 24 C0 5F 7D C7 78 9C 3E 9C CD A0 E9 A5 F7 | ..$._}.x.>......
+8C D7 E6 5E C8 55 73 36 54 EF AA A7 82 D5 B9 C3 | ...^.Us6T.......
+14 64 9C 79 4C EF 76 0F C1 30 85 50 F6 71 8C A7 | .d.yL.v..0.P.q..
+22 1E AD 9B 64 FA 40 DC 55 60 28 F3 0E D1 FA 4F | "...d.@.U`(....O
+DE 43 EB 62 20 E5 97 5C 3E 9C A9 F4 7B 25 31 4B | .C.b ..\>...{%1K
+22 C5 CC 46 A6 1C 41 FC 6D 4C DD 0F 34 8B 07 59 | "..F..A.mL..4..Y
+50 C5 5B A9 77 15 02 E3 3E C1 EE 26 74 0F 7C 62 | P.[.w...>..&t.|b
+D9 41 09 E8 FD B5 18 CD 51 1B 29 D5 FD C8 8F 22 | .A......Q.)...."
+DF 34 90 FB 75 5F F9 16 EF 73 FC 27 E7 69 BB 06 | .4..u_...s.'.i..
+DB 02 F0 C5 1B F5 DE FD 05 23 8D 72 64 8A 5D EF | .........#.rd.].
+F6 AF DE 70 0C 5C FF 78 46 FD E3 79 ED 62 50 16 | ...p.\.xF..y.bP.
+AD F6 47 EF BD 0B A6 9B 0A 63 39 91 F3 AB 33 09 | ..G......c9...3.
+BE 9B CC E5 3F 1F 0C 12 C6 13 D8 D7 31 B1 AB 30 | ....?.......1..0
+2B 84 6B A3 FC D6 A2 D3 2A 7F B6 A5 B6 B1 0A 0C | +.k.....*.......
+32 50 5F 96 9A 16 45 89 B9 EB 65 26 D9 75 31 17 | 2P_...E...e&.u1.
+73 4C E9 54 15 A3 6B 15 01 1D 04 AA D4 4B 96 D6 | sL.T..k......K..
+27 60 B0 ED 32 DB 02 40 00 CA 3D 38 88 D3 73 32 | '`..2..@..=8..s2
+D4 BA 08 FE 9E 48 1A C2 E5 64 99 94 1D A0 48 57 | .....H...d....HW
+C3 F2 CB 10 BD 8F ED B9 28 7F BE BC 7C AD C0 E4 | ........(...|...
+2A D4 96 26 04 34 DD 4F 7E D6 A5 A3 46 3C 02 56 | *..&.4.O~...F<.V
+2D 47 EC 83 26 59 F2 8C 38 1C 6F DD C7 10 D4 17 | -G..&Y..8.o.....
+89 70 D9 36 | .p.6
+
+Flow Record:
+ RecordCount = 10
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132150187 [2024-04-15 00:02:30.187]
+ last = 1713132181222 [2024-04-15 00:03:01.222]
+ received at = 1713132277671 [2024-04-15 00:04:37.671]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 50515
+ src tos = 0
+ fwd status = 0
+ in packets = 31
+ in bytes = 18713
+ src addr = 17.248.209.70
+ dst addr = 157.143.34.100
+ out packets = 35
+ out bytes = 7113
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 37.394 ms
+ srv latency = 0.000 ms
+ app latency = 1.532 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 39 14 3D 1E 9C | ....z...v..9.=..
+45 09 BE 33 D6 49 D4 17 64 7E 84 8F ED 84 60 36 | E..3.I..d~....`6
+EB 28 62 14 5D D0 C8 7E A5 C8 A0 20 98 24 EA 27 | .(b.]..~... .$.'
+E5 C5 CD 5C 65 13 BD 0B 19 25 70 91 8B 00 9D 34 | ...\e....%p....4
+A0 10 A4 DE 86 D9 75 65 83 14 39 97 13 02 00 00 | ......ue..9.....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 89 | ..+.....3.$... .
+42 59 93 D8 D4 39 F1 F1 21 30 F1 89 54 21 60 F6 | BY...9..!0..T!`.
+E7 D2 E0 55 12 1A 1C D4 08 4A 88 30 44 43 72 14 | ...U.....J.0DCr.
+03 03 00 01 01 17 03 03 00 2A 22 E0 87 DF 32 A3 | .........*"...2.
+FF B9 44 76 82 95 5A 33 E3 47 77 5D A5 80 02 29 | ..Dv..Z3.Gw]...)
+09 3E 60 15 B9 02 BA 2A 11 D2 26 77 34 BD 33 45 | .>`....*..&w4.3E
+7F 01 1C 39 17 03 03 11 25 1B 4A 8E DB E3 E9 C4 | ...9....%.J.....
+AF F7 DC 8F 08 65 BA 45 EA 47 6E DB 0E DD E0 EB | .....e.E.Gn.....
+42 43 DF AF 11 BB FB BE 07 EC 90 E8 56 04 D0 C5 | BC..........V...
+98 04 42 67 EF 03 D3 33 08 55 75 09 1B 8D D0 D8 | ..Bg...3.Uu.....
+B3 83 80 3F 1A A7 27 93 BD 10 B9 2E 98 80 03 E2 | ...?..'.........
+7D 14 3E 35 0E 24 22 04 3E 88 19 25 D6 5A 99 FF | }.>5.$".>..%.Z..
+33 ED DB 46 16 AD 41 43 38 46 79 05 8C 91 14 01 | 3..F..AC8Fy.....
+1C 89 BB 1F 79 FB 8D 82 CA 48 90 AE 56 AC 6B 38 | ....y....H..V.k8
+63 67 4E 4C B5 B1 CD 3B 48 60 EA 11 7C 94 FB BC | cgNL...;H`..|...
+E3 3F B5 19 D3 AE F5 9C 80 EB 29 37 40 65 8E 8B | .?........)7@e..
+51 1B FA 63 62 F0 CE 8E E8 35 CB B0 CC D0 6E C8 | Q..cb....5....n.
+0F 66 68 05 1A 6A 96 AE 73 5C 19 1A CC 95 1B 41 | .fh..j..s\.....A
+BB BC C0 4A 6E CD CD 97 D3 DD F0 67 E7 B6 D3 40 | ...Jn......g...@
+9E 6A 19 73 FF B8 2F 52 7D 3A 35 14 CF 4C 1A F4 | .j.s../R}:5..L..
+7E 73 57 7C B3 0F 8C EC B2 2F 27 CC 7C A8 90 1C | ~sW|...../'.|...
+52 D9 3F 6A E3 F3 EC 50 70 E7 CB 7A 82 A9 9E BD | R.?j...Pp..z....
+6C 5F 52 51 AE 58 D5 50 BF AF 3B 92 55 98 30 4D | l_RQ.X.P..;.U.0M
+50 AA 04 BF 42 13 3F 39 C0 FB 56 74 E4 17 58 6B | P...B.?9..Vt..Xk
+55 5A AC ED AB 6A 2A D1 FA E5 DA 1B 96 4E 8A B0 | UZ...j*......N..
+49 30 9B D8 6C 72 F3 31 13 2D 32 C7 6B FB F5 56 | I0..lr.1.-2.k..V
+39 B7 C9 6D 02 03 69 54 32 04 15 78 C0 4E B1 E2 | 9..m..iT2..x.N..
+07 13 42 3F 09 E1 1C AE 29 5A CE 37 96 18 EA 12 | ..B?....)Z.7....
+64 A1 ED 71 AB 08 34 DD 46 11 F7 FB 93 F9 E1 AE | d..q..4.F.......
+B7 91 7B D4 CD 89 B5 72 5E 32 85 B9 61 DA 39 31 | ..{....r^2..a.91
+00 5E FF 56 0D F5 84 7D C9 A7 94 39 8F 80 3A 7C | .^.V...}...9..:|
+02 8E 43 F2 88 C7 E1 D8 81 84 26 8C 47 0D 31 F5 | ..C.......&.G.1.
+4F B5 A3 C9 90 26 87 3D 0C 39 A8 6D A8 11 A3 E7 | O....&.=.9.m....
+1E F6 A5 E6 27 C8 16 25 73 F9 63 9E A9 03 C4 EF | ....'..%s.c.....
+7E 48 8E F0 B0 C9 F6 89 D1 7B 2F 3B C7 D7 DB 52 | ~H.......{/;...R
+27 7A A8 E4 41 95 51 72 31 9F 59 7F B4 9B AD 7E | 'z..A.Qr1.Y....~
+CA 03 A9 DA DE 07 FA 3B CF E1 73 86 B5 06 16 86 | .......;..s.....
+CF C1 9F D6 BE 47 9C 2C AB F1 31 ED 1D 60 20 28 | .....G.,..1..` (
+B5 5A B3 BE BF D1 4D AA E0 05 02 54 97 6C 90 14 | .Z....M....T.l..
+7B 43 B5 C8 80 7A DE 53 1C D2 EC 32 72 61 7C E1 | {C...z.S...2ra|.
+F9 6D EA F6 54 28 6A 58 D8 1C B8 C1 5B 24 CD 3A | .m..T(jX....[$.:
+3C 85 6C 93 79 87 7C 48 D8 4B C0 51 26 8F 04 7B | <.l.y.|H.K.Q&..{
+54 1D BD F9 E8 DA C8 D8 1E 3F 35 1D FF EE 81 4E | T........?5....N
+40 26 5D 54 5F B0 51 16 22 4A FD CB 8E DD 91 F3 | @&]T_.Q."J......
+E2 37 75 5D EE 95 72 3A 54 C1 21 05 0F 65 13 E4 | .7u]..r:T.!..e..
+CC 4F F9 1B 05 CE 5F 24 A8 51 4E 48 AF 71 0A 2C | .O...._$.QNH.q.,
+18 03 BF 29 36 2F 93 5E 92 CB 46 B3 FE 59 4B 69 | ...)6/.^..F..YKi
+D8 F2 5B 2E 16 CA 3A 2C 1A 20 76 E3 60 06 97 2D | ..[...:,. v.`..-
+FC 3D 52 3D 9C 52 65 F5 C7 65 1F A2 87 68 79 1D | .=R=.Re..e...hy.
+DB BF C0 CA A2 A2 2C 59 EE 7E D1 C6 6E 52 84 2D | ......,Y.~..nR.-
+F1 9A 67 EB 9C D7 AB D4 B8 A9 23 60 58 B5 2D 00 | ..g.......#`X.-.
+50 B5 12 34 46 55 3E E5 F6 69 1A B5 59 0C 83 E2 | P..4FU>..i..Y...
+68 FE 0D 6A E2 75 7E A6 0F 52 81 C0 0B DB B2 0E | h..j.u~..R......
+0D 24 D7 17 7D 6E BC 78 5E 4A 36 4E D2 85 CD 97 | .$..}n.x^J6N....
+84 7F CE 64 21 76 7C B2 66 28 E7 12 87 96 6D 80 | ...d!v|.f(....m.
+15 BB 79 36 F7 D8 75 D4 59 3A 72 67 66 30 9F A4 | ..y6..u.Y:rgf0..
+39 A0 7C 36 A5 1D 80 E5 9C B9 B2 E7 04 9A 04 42 | 9.|6...........B
+71 81 46 63 E7 5E 4D E8 6B 51 E9 D3 FE 98 FA A0 | q.Fc.^M.kQ......
+9D 03 D8 6A 8E B8 A6 CB 34 25 10 9D C3 BF B2 1F | ...j....4%......
+E9 1A FB 08 E6 97 B5 3F 47 75 5B 0B 2F F8 FF 3A | .......?Gu[./..:
+2C E6 72 F2 34 BC 4F 22 99 C8 35 B9 95 25 89 4C | ,.r.4.O"..5..%.L
+11 1D 67 E1 04 4A 21 7D A7 CA 00 FC 10 9E 37 A2 | ..g..J!}......7.
+13 63 F6 E2 30 E7 6E 35 DD 76 B0 05 3E 15 F6 0C | .c..0.n5.v..>...
+0B C1 65 74 41 C4 1E 16 12 C8 D5 4D 0E 76 1C 24 | ..etA......M.v.$
+DF 52 3A AF 18 E8 01 CC 93 58 D9 01 72 7C 23 8F | .R:......X..r|#.
+74 8F 4F 3F EE F9 04 E7 8F DC 0C 73 A6 BF 8E C0 | t.O?.......s....
+F2 4F 7B 9D 8C FF 19 FD A9 A4 6C D9 DB 60 F6 D0 | .O{.......l..`..
+D2 B2 0C 50 1A D7 8E CA C9 CA FC AC EC 6E 64 8B | ...P.........nd.
+98 DA 0F 52 3D CC C3 8A 67 63 96 0F AB 6A 4C 52 | ...R=...gc...jLR
+CF AA F3 5B D3 75 1E D7 1A 22 F3 78 4D 9D 1F E8 | ...[.u...".xM...
+2A D0 08 56 DA 56 F2 F8 B0 37 5C F2 74 56 90 55 | *..V.V...7\.tV.U
+77 5D 3F 4A B2 6D 1C A7 C7 5D 26 66 8A F2 D1 A6 | w]?J.m...]&f....
+AB 51 57 A9 61 55 05 D7 74 BA 25 C5 FF 1A F8 48 | .QW.aU..t.%....H
+C6 31 08 AC 29 77 23 A2 AE DB E7 F2 A0 62 45 65 | .1..)w#......bEe
+DC AC 22 CE 75 B1 7B 16 1D 07 A4 F2 D9 02 6E 7E | ..".u.{.......n~
+D2 54 A5 07 3C 82 FF C0 43 CD 2C 7E A4 26 B9 40 | .T..<...C.,~.&.@
+D1 4E 74 9A 8A 9D DA C1 3C 62 1D D2 E1 FB 37 89 | .Nt......
+0E 69 60 DA 0E CB 66 D3 5B 3F A5 43 4F F1 17 D0 | .i`...f.[?.CO...
+0D B7 CC 67 6D 66 0C 99 13 CE E1 0F 89 44 76 E1 | ...gmf.......Dv.
+A5 B7 BC 4C 16 F3 28 26 10 05 E6 FD 19 A5 52 DC | ...L..(&......R.
+74 CA 69 B8 65 D2 0D 6E | t.i.e..n
+
+Flow Record:
+ RecordCount = 11
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 12 15 17 29
+ size = 1552
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132382740 [2024-04-15 00:06:22.740]
+ last = 1713132382867 [2024-04-15 00:06:22.867]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 54951
+ src tos = 0
+ fwd status = 0
+ in packets = 9
+ in bytes = 6256
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 14.387 ms
+ srv latency = 0.000 ms
+ app latency = 12.303 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 A4 CC 9F 4C 12 | ....z...v.....L.
+9C 28 15 46 13 5D 29 86 5C 70 66 AC 5C C8 6E FF | .(.F.]).\pf.\.n.
+C6 D4 3C 2B E3 29 50 4C DB A9 81 20 FB 70 A6 90 | ..<+.)PL... .p..
+D9 69 76 6A 45 CC 1C 07 0D CA E7 09 68 5D 45 7A | .ivjE.......h]Ez
+AD 08 D7 4E DF 65 71 4E 9C 42 A1 E5 13 01 00 00 | ...N.eqN.B......
+2E 00 33 00 24 00 1D 00 20 71 C1 B8 99 D6 4F C0 | ..3.$... q....O.
+0F 91 75 29 DC C6 0D B9 0C 09 02 FD B4 4B E0 F8 | ..u).........K..
+8A C2 3E DD 40 2F C2 4A 10 00 2B 00 02 03 04 14 | ..>.@/.J..+.....
+03 03 00 01 01 17 03 03 11 B7 51 EC AC 23 28 01 | ..........Q..#(.
+F1 04 0B 82 DD 8B 76 FC D8 10 E6 70 50 C1 58 10 | ......v....pP.X.
+D9 7E 69 4F A9 CC 47 3C BB AF 74 00 E6 9D 3C EE | .~iO..G<..t...<.
+3A 29 D5 98 EC A7 DF 57 F1 50 57 C1 BA A3 42 17 | :).....W.PW...B.
+EC 74 34 DC 44 27 C8 14 64 38 AC AA E4 E8 95 FD | .t4.D'..d8......
+77 39 E6 DF 84 6B 49 21 06 E1 22 99 1C 47 64 F0 | w9...kI!.."..Gd.
+10 CC 3F 63 A8 1C 0C 31 C2 51 31 14 D4 58 D5 E8 | ..?c...1.Q1..X..
+6C 68 17 98 D4 03 F9 F7 A8 27 3B E4 8F 34 24 5F | lh.......';..4$_
+ED 68 7E 1F 5E C2 18 87 33 12 D6 CE A4 23 88 8D | .h~.^...3....#..
+45 EB 8A C1 1B 47 C1 A9 35 DF 44 0D F6 62 66 9B | E....G..5.D..bf.
+56 83 1A 34 2A 74 34 56 49 CF 09 3E 8E 5A 39 AF | V..4*t4VI..>.Z9.
+97 CE 76 1F FC 8E CE 05 96 7C 96 89 A4 A6 4C 90 | ..v......|....L.
+2E D4 79 9E 6A 4D 5E 27 BD CB 99 87 A6 95 3A F2 | ..y.jM^'......:.
+B7 89 8E 40 B7 E2 E2 B8 41 08 8B 57 B5 AB E3 4D | ...@....A..W...M
+EE 1A 69 AC DC 3B 5D E3 95 0D A2 75 CA 4A 7F 6E | ..i..;]....u.J.n
+61 8A 03 68 D2 CF DB C3 52 30 8E D5 30 F4 90 1B | a..h....R0..0...
+BA F9 A3 FF B4 7F 50 3B 22 37 C4 4C D6 9E 21 1B | ......P;"7.L..!.
+B4 A5 EB 0E 1E 83 2B BE 99 B0 98 6F 3B 73 12 28 | ......+....o;s.(
+8E 71 68 29 F8 4F BE 31 B7 4C FB 39 CB 47 9D BC | .qh).O.1.L.9.G..
+0D 8C 21 FA 4F DB A9 11 6B 74 F2 A2 54 D9 18 04 | ..!.O...kt..T...
+3A 0E E5 DA 0D D8 8B 88 83 41 37 C6 66 88 FB 36 | :........A7.f..6
+7C A7 C5 3B AA 99 64 8F E3 83 CC AE CF 68 20 39 | |..;..d......h 9
+33 79 B1 9A F4 C9 EE 91 03 40 0C 18 C7 90 A4 7F | 3y.......@......
+68 92 66 E5 55 01 A7 3F 0A 12 62 33 D6 D5 A1 D0 | h.f.U..?..b3....
+9B E8 08 03 3F 57 1B 34 01 C8 B5 32 F9 58 FE B9 | ....?W.4...2.X..
+90 7F 44 4F 34 1D F4 10 49 DC 6E C5 7E 06 0A 89 | ..DO4...I.n.~...
+DA 1C C7 73 D8 30 58 F0 FD 75 F2 09 61 AE 65 51 | ...s.0X..u..a.eQ
+70 F1 63 18 1A FC 0C 64 71 36 D0 2F 8D F4 9E 8D | p.c....dq6./....
+49 9A 59 9A 03 5F 90 FC B9 E3 72 90 D2 14 E7 90 | I.Y.._....r.....
+27 45 40 65 05 11 1D DF 3C 76 8C C5 24 D3 ED D0 | 'E@e......%.y.
+3D D4 E0 E3 25 89 AF 1E 7C 8B 14 3E 8A 28 AC CC | =...%...|..>.(..
+98 74 58 76 5C FE 1B 3B 58 22 E1 C5 35 46 FF DE | .tXv\..;X"..5F..
+47 17 C1 7C 57 90 8A 30 20 56 66 59 A2 D0 C7 82 | G..|W..0 VfY....
+3B 40 B9 4D 1E 00 2A 5C 0D 85 FE 06 40 01 1D C6 | ;@.M..*\....@...
+44 98 62 84 99 21 ED FF 53 CB 6F 4C F2 D6 55 8E | D.b..!..S.oL..U.
+9C 4D 5B F7 57 DA 03 60 50 B6 EE 7C A0 32 6D 3D | .M[.W..`P..|.2m=
+76 F1 8E BE 90 A5 59 18 53 BD FC 4D 20 FB 81 C5 | v.....Y.S..M ...
+40 FC 1E D5 6C 74 3D 4B F7 19 05 53 27 A5 98 BF | @...lt=K...S'...
+47 1A B9 70 12 C0 19 15 48 3B FB 45 67 37 75 87 | G..p....H;.Eg7u.
+04 5C 80 FC B4 4E EA 98 79 EB 88 A1 33 BC C8 40 | .\...N..y...3..@
+2B 70 C4 3B 60 69 DD D9 | +p.;`i..
+
+Flow Record:
+ RecordCount = 12
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1580
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132381134 [2024-04-15 00:06:21.134]
+ last = 1713132381225 [2024-04-15 00:06:21.225]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 65089
+ src tos = 0
+ fwd status = 0
+ in packets = 7
+ in bytes = 6187
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ out packets = 8
+ out bytes = 1069
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 12.155 ms
+ srv latency = 0.000 ms
+ app latency = 12.660 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 2F 41 00 E8 EC | ....z...v../A...
+7C 12 29 B4 6C 17 29 76 2E AD 84 68 C3 91 E2 37 | |.).l.)v...h...7
+90 B3 83 B7 B3 E4 92 1D BE BA 40 20 AB 9A 15 7A | ..........@ ...z
+9C 5B 06 39 E0 F6 E6 8C 85 2D 1D 8F 2B A8 D3 B0 | .[.9.....-..+...
+5F B5 53 E4 FC 17 74 D2 AD 29 9A 40 13 01 00 00 | _.S...t..).@....
+2E 00 33 00 24 00 1D 00 20 8E 52 6C 3A FC F0 C2 | ..3.$... .Rl:...
+1E B0 9C EC 44 84 24 9B 07 E5 C2 DE 37 E3 C0 7D | ....D.$.....7..}
+1D D8 54 FD 0C 05 B4 55 63 00 2B 00 02 03 04 14 | ..T....Uc.+.....
+03 03 00 01 01 17 03 03 12 67 0B 5D 1F 1B C8 36 | .........g.]...6
+12 84 0A A5 4C AD B7 03 79 09 29 46 82 B1 7C 59 | ....L...y.)F..|Y
+CB FD CF 33 64 44 D9 A8 EC E0 85 15 C6 3C BE 8C | ...3dD.......<..
+B8 9D B2 EF 8E 90 FD A5 BC 69 0A 67 03 C9 18 FF | .........i.g....
+08 08 BC 84 0B 26 5B 8B D2 EE 9E 0E 07 E4 AC 1B | .....&[.........
+E0 F5 4B BE 26 DC 09 C9 88 C2 DF A3 A0 84 42 7D | ..K.&.........B}
+E1 25 34 EB DC 4F CC BE DA 2F 01 A2 6A B9 CC 5F | .%4..O.../..j.._
+E2 38 1F A5 1B 19 E7 23 01 D8 93 D9 54 D8 72 EA | .8.....#....T.r.
+06 4C 4E 54 A3 BB F6 3E 7F 37 AD D7 FD 3B 21 F9 | .LNT...>.7...;!.
+1F DB 7F B7 28 5C CA 7A C6 01 55 9F 10 66 58 53 | ....(\.z..U..fXS
+B7 D2 C1 9F 66 25 7D FB 21 D2 DA 6C D5 0F 1F 17 | ....f%}.!..l....
+A2 31 CF F1 A3 17 62 B4 67 3C 34 0B C2 46 E4 80 | .1....b.g<4..F..
+B5 39 D2 5D 45 84 5B 23 F2 A8 89 39 D0 E7 B4 C9 | .9.]E.[#...9....
+9C 70 36 29 9C 8E 86 C8 0D DF C9 10 F3 FE 25 04 | .p6)..........%.
+35 BB 6B FC 01 57 3F 99 A6 6B 16 B2 CB 75 2C 73 | 5.k..W?..k...u,s
+E8 5C 6C A5 18 3B 2D 0C E9 E6 E5 C1 79 81 FC 32 | .\l..;-.....y..2
+E4 17 A4 6A D3 89 6E 4A 81 4E DB 6F 42 34 22 E3 | ...j..nJ.N.oB4".
+11 3C 40 76 E2 6B 24 08 65 9E EA A0 43 55 AA 40 | .<@v.k$.e...CU.@
+B4 F9 37 4E 51 1B 7A 30 87 B6 61 84 A8 C8 BC 78 | ..7NQ.z0..a....x
+71 C9 DB 30 4A 01 F4 F5 62 53 38 B3 A7 8D 29 5B | q..0J...bS8...)[
+68 5C 7F 30 F2 A7 5C 20 4F 64 33 83 D1 7F 3D 81 | h\.0..\ Od3...=.
+0F AE 1E 0E ED B1 A9 48 33 21 78 31 39 4B AF A1 | .......H3!x19K..
+00 30 B6 22 D1 DF 35 C4 E0 05 D7 4F CA 9B 94 66 | .0."..5....O...f
+05 4B F7 4C F5 F2 90 AE 61 E6 B8 7B 60 C3 9D 2C | .K.L....a..{`..,
+32 ED 55 DB DB 9D 92 0F 13 9C 5A 9B 78 D9 22 A5 | 2.U.......Z.x.".
+D5 F5 79 B5 57 07 8A 5B 5C 01 97 30 89 44 A5 C5 | ..y.W..[\..0.D..
+68 52 86 60 4A 85 C7 11 18 DF 3D 0D 37 32 D1 5B | hR.`J.....=.72.[
+C7 0A 83 F7 CD 9E E1 7B D2 D1 81 3C F3 4C 3E C6 | .......{...<.L>.
+FC 6D 6A 75 10 88 4C 78 54 DC 1C 59 83 31 D9 1E | .mju..LxT..Y.1..
+A9 4D 85 92 EF AF 2A 85 DA 05 88 F6 59 20 DE 5D | .M....*.....Y .]
+1B 92 0D D7 32 79 1C B0 0D 4A BA 8D E4 04 59 5C | ....2y...J....Y\
+CE B3 EB 76 74 38 A1 2B F0 51 27 AE E4 80 CE 6E | ...vt8.+.Q'....n
+94 65 06 07 77 97 71 A5 22 42 EF E5 BD 82 62 9C | .e..w.q."B....b.
+55 86 DF 8C 76 9A 19 9A AB 75 BD E5 77 74 D2 2D | U...v....u..wt.-
+4B A1 45 1E F3 38 48 51 80 CD BD A1 75 D5 5E FC | K.E..8HQ....u.^.
+97 D2 70 DB 63 79 57 21 15 1A 9A 8D 46 CB EA 92 | ..p.cyW!....F...
+AC 67 9A 41 13 A8 A5 EA 02 79 B4 16 CE 38 58 95 | .g.A.....y...8X.
+71 D6 62 3A D9 10 FE 09 F8 4D 70 C3 F4 3A 95 F1 | q.b:.....Mp..:..
+03 5D E4 B8 F4 87 CE 7E 40 CD 1A E1 37 EE 7E F3 | .].....~@...7.~.
+53 09 32 12 8D C9 7B 4C 57 30 91 E2 6C B5 53 3D | S.2...{LW0..l.S=
+96 B7 D5 4E 09 0F 54 05 83 06 6D EF 54 A9 50 A4 | ...N..T...m.T.P.
+9D FF F5 AF FE 86 64 5B 55 84 59 4B 5B C1 1D FD | ......d[U.YK[...
+8A 3E 91 C1 32 4A A9 A4 05 F5 D7 61 55 CA 42 9D | .>..2J.....aU.B.
+45 31 A4 1F F5 79 00 94 AB 94 21 DE 1D 59 AF 06 | E1...y....!..Y..
+B4 5F EA AA 2D D3 FE 8E 1E F9 3C 91 C9 77 08 16 | ._..-.....<..w..
+E8 89 12 21 76 A0 70 A6 EA 44 FB D7 C1 B2 31 BF | ...!v.p..D....1.
+5B 6E 47 EF 93 C2 09 03 77 50 0C C6 BC 62 BD CC | [nG.....wP...b..
+0E 7B 83 08 C4 07 1B 12 28 88 DF 5B 1F BE 14 CC | .{......(..[....
+CE B6 3C 0A FA 6A 22 1D EC 90 62 B2 17 E9 04 FB | ..<..j"...b.....
+BC 52 AD 31 BC 04 59 37 39 E8 D2 22 6C 9A 41 F9 | .R.1..Y79.."l.A.
+FB 5F 60 71 92 03 A6 2E C1 37 F7 02 BE 19 F8 52 | ._`q.....7.....R
+F8 13 DD DD B3 AC 36 8B C3 D3 FA 90 C7 4A E8 23 | ......6......J.#
+63 17 C6 1B D6 57 65 3C 5D 1D 69 7B 71 09 DC 00 | c....We<].i{q...
+4B EA 33 62 9D FE B5 A3 D9 00 5C 74 D4 93 1A B7 | K.3b......\t....
+F1 B3 2C DC 4D 98 04 C3 0B 84 1D D5 44 FA 35 4E | ..,.M.......D.5N
+79 A7 13 7A 74 5C E5 5B C7 5B D9 32 10 84 85 F1 | y..zt\.[.[.2....
+7D 9B 84 B1 A1 BB 30 F6 CB 53 B4 72 1C 44 D5 E1 | }.....0..S.r.D..
+A3 55 5F F3 6F F0 E4 7F 25 E8 F2 70 75 C7 93 18 | .U_.o...%..pu...
+49 D4 79 38 30 00 9F 03 A2 53 A7 46 74 AD C1 A3 | I.y80....S.Ft...
+CE 18 00 78 4C BE 9D 45 42 AB 65 92 19 C5 3B 23 | ...xL..EB.e...;#
+60 58 88 5A B9 BF C0 4E 02 9F 06 98 41 93 37 98 | `X.Z...N....A.7.
+CA D4 FA F9 92 9D BA A6 C3 25 C9 CF 41 DA FD 1A | .........%..A...
+80 BA D8 A5 5B AF 71 F0 B9 6A 2C 8F 90 86 16 A5 | ....[.q..j,.....
+37 05 5A C0 FE D3 60 E5 6F 51 70 2D 1D 43 15 43 | 7.Z...`.oQp-.C.C
+98 24 19 92 4B 1D 3B 13 79 65 D9 95 BE 1B 89 A7 | .$..K.;.ye......
+BE 0D 07 D8 16 2A 36 78 03 FD AF FE 84 20 FD 88 | .....*6x..... ..
+AF 01 EA 54 36 97 A0 A4 12 99 F6 15 67 E6 49 6D | ...T6.......g.Im
+F9 3E DB 2D 03 A8 CB CE FC C5 CA F9 AD 35 61 A8 | .>.-.........5a.
+79 E8 2C A3 BF 8A 6A 8F AB 04 0E CE 21 05 53 67 | y.,...j.....!.Sg
+2B 80 49 F7 EB 1F 56 8C F5 5E 61 94 57 00 D3 48 | +.I...V..^a.W..H
+84 0F 36 64 24 DB 93 C0 B3 71 26 7E B6 D5 F5 C0 | ..6d$....q&~....
+50 C5 C8 D3 85 48 20 9F 27 E6 AF 68 B7 95 8C 9A | P....H .'..h....
+56 8E 1F AD 54 36 89 3E 88 B1 61 68 82 1F 7D FD | V...T6.>..ah..}.
+18 56 01 02 9C 7E 5D E1 23 EB 62 AC 6C 84 43 E6 | .V...~].#.b.l.C.
+35 8B 5A 87 59 48 CC 48 95 35 C6 96 65 6F 40 C2 | 5.Z.YH.H.5..eo@.
+B9 D5 15 5F 8E B5 59 42 05 6D F3 3F F5 19 DE 8F | ..._..YB.m.?....
+43 69 12 00 E1 6A 17 6E 2C F8 CB FA F2 2F 3C 3C | Ci...j.n,..../<<
+18 E0 68 5F 04 3A CD 49 E7 4D 49 B8 0A 21 F7 41 | ..h_.:.I.MI..!.A
+16 C5 2A 80 7A C2 3E 3E DD EB C7 28 BA B2 2A C0 | ..*.z.>>...(..*.
+19 FD 20 FA D6 86 C5 08 | .. .....
+
+Flow Record:
+ RecordCount = 13
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132280006 [2024-04-15 00:04:40.006]
+ last = 1713132311020 [2024-04-15 00:05:11.020]
+ received at = 1713132377066 [2024-04-15 00:06:17.066]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 53757
+ src tos = 0
+ fwd status = 0
+ in packets = 30
+ in bytes = 18660
+ src addr = 17.248.209.68
+ dst addr = 157.143.34.100
+ out packets = 34
+ out bytes = 7061
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 37.432 ms
+ srv latency = 0.000 ms
+ app latency = 5.568 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 D8 57 62 FC 39 | ....z...v...Wb.9
+3D 06 8F DF CA 43 25 60 4F 32 6C 2A E1 06 C5 C6 | =....C%`O2l*....
+FC 5C F8 B3 F6 41 57 FE 6A 46 02 20 7B 77 E2 C0 | .\...AW.jF. {w..
+38 A7 17 3F E3 40 C1 CA 68 76 BA 94 9F 1C D4 93 | 8..?.@..hv......
+8C 47 94 8E 87 54 5A DE C2 F4 3B F8 13 02 00 00 | .G...TZ...;.....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 69 | ..+.....3.$... i
+23 3D 95 74 AC 97 89 95 95 B2 E2 93 CD 2D C9 B0 | #=.t.........-..
+90 98 6C A5 7C 8D 95 07 8E 4F 2E 88 D8 2C 50 14 | ..l.|....O...,P.
+03 03 00 01 01 17 03 03 00 2A 87 9D AE BC 0A EE | .........*......
+FF 8E F6 3D 66 AD B9 7F 8C 96 8E 6F 59 BC 24 E4 | ...=f......oY.$.
+DF 2D 4B 94 57 AE DF E7 7F 03 C1 E4 AC E2 04 02 | .-K.W...........
+7E AB FA AE 17 03 03 11 25 D3 31 8F EB 4A EC 7D | ~.......%.1..J.}
+A2 6A C9 AB C2 BA 4F 24 62 F8 18 96 62 E1 6D C5 | .j....O$b...b.m.
+4A 2F D3 1E 73 B3 5C C1 99 68 8B 02 85 DE 0E 97 | J/..s.\..h......
+20 10 E2 1B C9 DF 47 39 DA DB 9F 93 DE F8 03 6D | .....G9.......m
+6C 96 56 7D 48 1E 76 6E 56 90 3C 38 58 A8 31 00 | l.V}H.vnV.<8X.1.
+2F 7E 06 84 D8 FF E0 79 6F 94 67 F2 AD 87 F3 83 | /~.....yo.g.....
+49 0B FE D8 33 2C 87 8A 92 FC A7 E4 10 68 AC 31 | I...3,.......h.1
+B9 2E ED E2 48 D8 95 D8 5B 40 79 F7 94 28 D6 A9 | ....H...[@y..(..
+CD A8 9A 9B BD E5 7A 56 9D 55 0D 21 C1 C7 67 53 | ......zV.U.!..gS
+4B 3C 77 9C 04 C6 8F 16 01 64 B7 93 C5 FC AD 67 | K...\B...:e
+F3 4C B1 4E D2 F5 9F 3B D6 A9 47 86 FE E0 FA 45 | .L.N...;..G....E
+72 B1 BA 9A 87 64 F7 48 06 DA 45 35 AD 87 68 94 | r....d.H..E5..h.
+DB 9E FA F8 28 45 50 E5 67 91 53 A1 50 35 CF 31 | ....(EP.g.S.P5.1
+DD B4 5E 04 71 53 23 13 5F F4 AF 69 F3 DE 8B 16 | ..^.qS#._..i....
+99 DD DD 17 6D 1A E7 90 82 AB C9 E6 1A ED 39 00 | ....m.........9.
+64 51 97 82 C3 24 DD 5F 91 B4 15 27 F5 30 5F 79 | dQ...$._...'.0_y
+7B 46 E3 8A 8C 6D E6 0A 8A 7E EF 8B 32 90 4C BB | {F...m...~..2.L.
+AE 71 7F 22 69 C4 40 68 98 B1 D9 C3 21 4C CC FE | .q."i.@h....!L..
+A9 0F FB 9A 93 06 95 ED D1 36 52 A8 A0 D0 E7 ED | .........6R.....
+77 6A E1 E8 71 1E BD E6 C3 04 F0 D0 85 51 B0 D5 | wj..q........Q..
+36 9F 39 19 58 9F 6B 68 77 61 4B 6A 48 F0 DA 92 | 6.9.X.khwaKjH...
+02 8F FA 10 2F 56 9A 29 00 E1 77 2A 79 2C FE 76 | ..../V.)..w*y,.v
+C9 29 E8 74 A0 95 10 02 B9 59 0E 3C 9F 12 D2 27 | .).t.....Y.<...'
+0A BE CB 8D D4 E2 25 CD EE EF E6 80 67 B9 07 A2 | ......%.....g...
+64 9E 36 C8 8F D3 A8 A7 32 93 19 33 CF 8D AD CC | d.6.....2..3....
+CE C9 7A 9F 27 AB F5 95 68 8A 32 E6 BE D7 DA AE | ..z.'...h.2.....
+88 65 5D 12 B1 FD E5 DB 0D F9 D2 BA D7 B3 E0 76 | .e]............v
+34 BB 2A 5D 4C 24 80 F1 4E A7 57 99 33 14 66 2F | 4.*]L$..N.W.3.f/
+9B 55 AB 0E 70 E9 24 7B 7E 32 E8 C6 75 50 F3 9A | .U..p.${~2..uP..
+CB B9 40 CC A1 D4 77 4E 24 23 61 EB 64 7E 5B 08 | ..@...wN$#a.d~[.
+0D 4C 9B 2D 1E 15 75 91 4D 65 AF 80 8E 5B 2F A5 | .L.-..u.Me...[/.
+1A C8 11 72 14 7D A3 F7 62 77 24 1B 87 AD 01 8B | ...r.}..bw$.....
+2C 67 09 1C 0B AC 83 C9 ED A3 31 17 D3 8C 5C FC | ,g........1...\.
+7A 39 E5 48 A1 F0 51 51 44 73 F7 35 63 04 4A FA | z9.H..QQDs.5c.J.
+C2 D4 09 8D 5E 08 6C 75 B6 11 CF 5D 06 B1 2C 03 | ....^.lu...]..,.
+BD 6F 6E F8 8D 0E 47 AF FE 56 B7 A6 C2 D0 81 F9 | .on...G..V......
+F9 80 A6 C2 3C D4 BA DA 2B 9D FB DA 69 A4 B8 C5 | ....<...+...i...
+0C 52 5B 25 26 E8 2D EA 26 08 80 52 1F 6B CF E3 | .R[%&.-.&..R.k..
+97 79 E7 EF 31 37 A4 D8 48 14 50 43 65 E1 AF 77 | .y..17..H.PCe..w
+87 0F 0A 20 AF E8 B8 48 F5 78 E2 FB B4 71 C6 62 | ... ...H.x...q.b
+43 EA C9 74 CE 3E D2 27 73 80 81 03 CE 21 F5 DA | C..t.>.'s....!..
+34 6E E2 C4 88 4E CE 73 41 23 CD 32 9A A4 90 43 | 4n...N.sA#.2...C
+2C 6B FE 5E B1 40 B2 B0 87 30 12 EE 09 21 4D 04 | ,k.^.@...0...!M.
+F2 52 C7 A8 7E D2 AE 84 A1 7D D6 7B 11 88 38 5C | .R..~....}.{..8\
+E8 55 1D 51 C3 D7 EA E4 DA DE C6 97 E8 69 AF 77 | .U.Q.........i.w
+AB 45 5B 18 3B 14 1E A9 C7 98 96 44 7A 0A EC 29 | .E[.;......Dz..)
+C2 F9 D5 3C 74 10 BC A3 5A 0A 87 93 E4 51 8F 86 | .....Xf|........
+F3 67 1B 86 4C 51 06 7D 6D DA 45 18 2B FC 1E 44 | .g..LQ.}m.E.+..D
+A6 B9 5C C0 59 A4 6D 05 36 8A B2 E3 3A 80 EA 02 | ..\.Y.m.6...:...
+8D 62 DF 56 FD 38 02 ED 2F B8 D0 8B 9B 9A F2 61 | .b.V.8../......a
+64 65 35 53 96 7A F0 6C 31 C7 7E 5E A1 54 E7 C3 | de5S.z.l1.~^.T..
+BA 43 70 41 B1 3E C3 3A 52 4E 1F 60 76 A2 B0 C2 | .CpA.>.:RN.`v...
+D1 4C 9A F6 77 EC F1 27 91 26 A9 CD 2A DE 32 44 | .L..w..'.&..*.2D
+3F 36 E0 CD C1 D7 44 35 97 09 08 C6 2D 7F 77 08 | ?6....D5....-.w.
+DF B3 74 CB 2F 40 8D 19 2D 22 3D F6 34 B8 AF 4C | ..t./@..-"=.4..L
+C0 9A CF 57 74 80 70 DA 8E 5F 31 EB BB 33 1E BA | ...Wt.p.._1..3..
+B3 6C CA FD 79 23 35 7F 6A B8 45 7C 99 B4 51 F9 | .l..y#5.j.E|..Q.
+09 59 21 FC EA B0 63 7B DB B7 0A 72 A2 B5 2D DD | .Y!...c{...r..-.
+AF F4 46 63 D1 AE 3A 9F | ..Fc..:.
+
+Flow Record:
+ RecordCount = 14
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1608
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132217356 [2024-04-15 00:03:37.356]
+ last = 1713132217536 [2024-04-15 00:03:37.536]
+ received at = 1713132302717 [2024-04-15 00:05:02.717]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 63066
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 7012
+ src addr = 13.224.103.47
+ dst addr = 157.143.34.100
+ out packets = 13
+ out bytes = 1676
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.294 ms
+ srv latency = 0.000 ms
+ app latency = 0.126 ms
+ in payload = 1428
+ TLS version = TLS 1.3
+ ja3s hash = 16a232c6047ab4c7f493b826d419a8be
+ ja4s hash = t130500_c02f_a241d087c239
+16 03 03 00 63 02 00 00 5F 03 03 B6 34 33 F2 88 | ....c..._...43..
+78 52 42 1B 23 B5 25 06 E1 C5 F1 43 8E EA 02 12 | xRB.#.%....C....
+E8 BD 2C 44 4F 57 4E 47 52 44 01 20 A8 D8 47 33 | ..,DOWNGRD. ..G3
+1B CD 04 21 EC 56 BD B4 92 B7 03 50 6D 06 8A 40 | ...!.V.....Pm..@
+19 F1 9D 9C 44 0A 13 97 69 C2 4A 8A C0 2F 00 00 | ....D...i.J../..
+17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................
+00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................
+8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0....
+03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g..
+C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H...
+01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U..
+13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A
+6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U....
+41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048
+4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000
+30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359
+35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U....
+74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0..
+09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............
+00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(..
+62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N
+E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b%
+4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?.
+47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. .
+49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_...
+CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3
+91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P.
+82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+
+B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X..
+B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._.
+C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X.
+E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^
+60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9.
+51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E
+16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L
+0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<.......
+82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#..
+30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;;
+50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U...
+16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k.
+04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z
+30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..*
+2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com..
+77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t
+69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*.
+74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid
+61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U.
+0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U.
+25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........
+08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U..
+04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http
+3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama
+7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m
+30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0
+0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+
+06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+
+06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http://
+6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo
+6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+.
+01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c
+72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont
+72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c
+65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0.
+30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y...
+04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v....
+64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F
+7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq......
+89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!.
+C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..'
+CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*...
+02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux..
+7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$..
+63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j
+02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,....
+AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w....
+03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%.
+2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g...
+46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../...
+EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{...
+4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v....
+6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql
+BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H......
+89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!.
+86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV.......
+DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7
+02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......}
+0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:.
+59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H.......
+00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]]
+D3 9D AC B4 | ....
+
+Flow Record:
+ RecordCount = 15
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 12 15 17 29
+ size = 1552
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132383422 [2024-04-15 00:06:23.422]
+ last = 1713132383682 [2024-04-15 00:06:23.682]
+ received at = 1713132487351 [2024-04-15 00:08:07.351]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 51203
+ src tos = 0
+ fwd status = 0
+ in packets = 10
+ in bytes = 5830
+ src addr = 172.217.168.3
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 11.892 ms
+ srv latency = 0.000 ms
+ app latency = 12.273 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 8B 6A FF 3D D8 | ....z...v...j.=.
+80 07 13 E3 58 50 71 3F 59 82 6D E4 84 79 91 A6 | ....XPq?Y.m..y..
+4F 49 70 98 49 76 7F 09 6B 17 B9 20 82 74 02 0F | OIp.Iv..k.. .t..
+67 B4 15 96 F5 76 60 19 36 1A 59 CC 40 18 6C 70 | g....v`.6.Y.@.lp
+CF D5 A6 5F CE 26 99 60 E0 00 F9 3F 13 01 00 00 | ..._.&.`...?....
+2E 00 33 00 24 00 1D 00 20 30 B0 9E DB 3B 2C BE | ..3.$... 0...;,.
+E9 EB C1 01 12 54 BD 2D 6D 7C DC 91 C8 10 3E 50 | .....T.-m|....>P
+21 38 B3 BF 0D 17 B3 23 2E 00 2B 00 02 03 04 14 | !8.....#..+.....
+03 03 00 01 01 17 03 03 10 5C 1B 1C E6 64 5E F0 | .........\...d^.
+BC 23 4E CE 2F 95 23 32 32 F0 D1 C5 ED 6F 22 B2 | .#N./.#22....o".
+61 F3 E0 FD 3D 9A B1 EB 4E 0C 84 31 67 3D 12 24 | a...=...N..1g=.$
+3A 60 85 48 30 FF 7C 88 15 33 F6 4E F7 61 69 8E | :`.H0.|..3.N.ai.
+3B 30 A8 13 DE 16 39 58 16 2E E0 3B 83 1F 8B D6 | ;0....9X...;....
+D8 4E 0A 3C 51 EF D5 AB 44 CE 79 0D 9D 24 FB 9C | .N.
+AD D5 BB E6 86 80 3A 13 19 AB EA 8B E0 C3 9F 56 | ......:........V
+EC 27 56 2B 98 40 10 71 D1 5E C9 59 11 B4 93 53 | .'V+.@.q.^.Y...S
+A5 F5 CE A3 65 77 54 07 35 AC 0D 66 04 DF 75 7E | ....ewT.5..f..u~
+4B 98 BD 6A 8E AB 02 C7 EB AA 0C 07 5B 13 B7 7D | K..j........[..}
+25 7B 62 D2 BD 07 09 D2 7C 7B 25 23 7D 46 BE 4E | %{b.....|{%#}F.N
+3C A0 DE 29 29 00 4A 09 68 A8 01 C9 DF 8C ED 0E | <..)).J.h.......
+AE 80 6E 39 37 D2 B0 30 97 72 A0 3F 1F 69 E6 03 | ..n97..0.r.?.i..
+DA F7 C4 2F 9F 38 1E 1F 26 63 7B EE E5 A0 48 30 | .../.8..&c{...H0
+AF 8B E5 53 69 49 6D 6C 25 B6 67 43 56 8F 6A 97 | ...SiIml%.gCV.j.
+03 33 68 7A 3C 2C 00 7E 0C 3D 85 20 76 FC E0 9D | .3hz<,.~.=. v...
+4E 64 1B 0F 78 31 F7 B5 81 C7 FB 29 0E F2 A5 24 | Nd..x1.....)...$
+37 FD BF A2 3D 53 A7 BE 23 4A 38 3F 55 97 E3 27 | 7...=S..#J8?U..'
+90 0D 67 84 F7 26 7D 50 9F E6 4B 28 0D 5F BE 65 | ..g..&}P..K(._.e
+70 3E 32 3B C0 E9 CB 56 DD 0D 3D E9 C0 AA F8 0F | p>2;...V..=.....
+6E CF 57 A6 40 CE D9 D8 1C D9 2D 03 E1 C9 E0 C0 | n.W.@.....-.....
+9E 9F 70 14 07 19 5C 94 7B CF 57 48 7C C0 53 C7 | ..p...\.{.WH|.S.
+93 C3 F3 CE BE 95 1E 8C 91 DF 20 4E E8 EE 9F 0B | .......... N....
+CC 5A 8D F0 73 88 64 E6 8F E1 3F E9 A8 F1 90 7E | .Z..s.d...?....~
+FB C0 2D 64 70 63 9B 1C 79 3F 48 00 8D B5 9B 40 | ..-dpc..y?H....@
+5F 56 6B 6F C0 15 B9 6C 70 22 3E C8 8C DB BC D5 | _Vko...lp">.....
+AC 93 7D 61 26 2E C4 7F 84 2F F1 91 9D 19 64 17 | ..}a&..../....d.
+6E 63 E0 3B 31 E7 09 B2 5F E2 B8 12 E1 0E DC DF | nc.;1..._.......
+D8 39 E7 42 5F FD E7 DE BC C3 12 B3 40 C3 47 C2 | .9.B_.......@.G.
+8D 56 57 98 A0 E1 F3 80 23 C5 40 F2 0C A7 12 94 | .VW.....#.@.....
+F1 2E EF B0 CD 47 60 FF 0E C0 F4 0E 1E 0C E4 BD | .....G`.........
+BF C5 4F 95 D9 5C 57 C0 42 C1 2F 5D 92 BB 89 BF | ..O..\W.B./]....
+68 13 46 27 E3 C1 2F 79 AB F4 77 F0 DF 42 9B 38 | h.F'../y..w..B.8
+28 6D 5B FE 17 BC AB F8 36 44 75 73 CF 54 2A E2 | (m[.....6Dus.T*.
+F3 00 A0 57 7C 80 2F D7 6A 45 D1 C0 80 D4 B9 86 | ...W|./.jE......
+09 EF D7 50 06 EB 3C 04 E3 B1 02 53 9F 7E ED 82 | ...P..<....S.~..
+32 87 23 39 5A C3 06 58 33 F4 DB E3 4C EE 32 0B | 2.#9Z..X3...L.2.
+9A 30 DC D5 E3 E3 50 1B 41 76 2C E3 CD 95 97 1F | .0....P.Av,.....
+5E BA 6F 14 72 BB 07 1A B0 A2 DA B7 EC C2 0A 97 | ^.o.r...........
+44 51 D1 19 BB A4 77 29 8C D2 2B AD 68 DA C5 D9 | DQ....w)..+.h...
+7B 07 A8 09 8D FA A7 CC E0 1C F9 13 6D 56 EC 88 | {...........mV..
+AD 45 C7 76 0E 5D 19 44 74 82 CD B3 23 68 96 71 | .E.v.].Dt...#h.q
+2C 89 02 CA C1 0C 3C 81 70 51 A3 97 94 76 42 29 | ,.....<.pQ...vB)
+58 54 9D 04 C3 41 7C FC A5 0B 5D 50 2E EF 1C 3B | XT...A|...]P...;
+AD 61 1A 9C 0B 84 D2 01 D1 DC 79 E8 98 94 9C 81 | .a........y.....
+F2 81 DA FC 31 A7 62 21 E9 06 EA 95 01 A9 32 A2 | ....1.b!......2.
+71 F9 0A CF C4 20 AA 27 15 BA 63 9C DE 77 00 C9 | q.... .'..c..w..
+46 F6 FC 6D E0 DE 8F 80 DD FC 52 90 5B FD F4 72 | F..m......R.[..r
+8C 8F DE EF 9F 9F FD 9B 16 1D B3 01 CD 7E D6 5B | .............~.[
+D0 1A 56 B1 6D 05 B1 B3 7A FE 16 F8 CB A6 2B 7B | ..V.m...z.....+{
+12 89 93 A9 FF 8A 6B CF 0B 93 F3 6F 18 CE C7 EF | ......k....o....
+8F AF 96 8F DA F0 4F DC 07 35 F3 83 F8 C6 04 57 | ......O..5.....W
+A2 05 74 9C C0 AD 12 9D 7C 84 84 E5 84 52 33 0C | ..t.....|....R3.
+52 DB 74 C2 3E E8 5A A8 40 73 D4 26 C2 F4 67 5E | R.t.>.Z.@s.&..g^
+42 F4 F9 11 73 DD B8 47 18 06 B9 C5 10 A7 1F BE | B...s..G........
+DD 6E BF 9B 0F 1A 25 1C 97 37 6D 8B FD 34 C4 1C | .n....%..7m..4..
+1D D8 EA A2 B0 CE B1 EA 19 A1 CC 80 B8 54 4C B3 | .............TL.
+3A 61 DD CC 71 A5 19 56 D2 19 5C 31 03 5F 45 70 | :a..q..V..\1._Ep
+4D 19 E0 F6 10 AA F4 62 07 CB F4 23 13 09 4C 8E | M......b...#..L.
+00 02 00 3E A0 E5 01 07 1D 85 C9 2B 14 18 C7 34 | ...>.......+...4
+24 3F 76 2E 45 0A 49 3F BC 0C 3C 5D 95 9F FE F7 | $?v.E.I?..<]....
+61 25 43 C9 83 25 BB 6B D8 C3 EF AE 0C 44 0F F4 | a%C..%.k.....D..
+40 0C F5 0C 5F CE 4D DF 07 95 DE B9 C3 BC 51 A8 | @..._.M.......Q.
+C7 0F 55 50 46 41 64 FB 6B 8D 48 3F 49 75 1B DE | ..UPFAd.k.H?Iu..
+37 0F F5 86 6F 90 48 4D 46 B6 30 D2 9F 0F 24 76 | 7...o.HMF.0...$v
+93 A8 93 62 0E A0 F1 7A CC 5F 3D 10 DB B9 C6 EA | ...b...z._=.....
+F4 29 82 A5 9B 97 9C AC 3B 9D 90 4E 4A 64 1B 06 | .)......;..NJd..
+E4 F0 C0 E7 A0 E4 5B B2 FF 40 DA A4 4E 95 80 43 | ......[..@..N..C
+5C E7 F7 37 32 6B F7 AB ED 11 CE 49 21 B8 F0 F4 | \..72k.....I!...
+40 21 57 19 F1 CF 88 A2 A9 A5 13 C4 5D A7 4B 88 | @!W.........].K.
+80 C7 A6 85 52 A4 F6 1F 39 50 DB 40 E2 E4 E4 DF | ....R...9P.@....
+22 5F 0F B8 66 D5 6A 43 D3 27 E6 D3 CA A0 4A A6 | "_..f.jC.'....J.
+25 38 34 4F CC C6 7D 67 03 24 0C 40 3D 5C C6 24 | %84O..}g.$.@=\.$
+FC 9B 32 35 C3 C5 6C 02 | ..25..l.
+
+Flow Record:
+ RecordCount = 16
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 5 12 15 29
+ size = 1402
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132381097 [2024-04-15 00:06:21.097]
+ last = 1713132381591 [2024-04-15 00:06:21.591]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 53011
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 9134
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 10776
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+C3 00 00 00 01 00 08 E7 13 B0 C5 BD EF F7 C0 00 | ................
+44 D0 75 F6 A3 03 41 C8 A0 F9 02 4C E7 10 86 9D | D.u...A....L....
+67 D6 F8 F6 AA E1 21 76 FD 84 3B 22 B6 F3 FE 11 | g.....!v..;"....
+76 6F D5 9C 0B EA 10 C1 5F EC D6 60 D0 BD 73 EE | vo......_..`..s.
+7F 77 0F D6 82 1A 86 91 15 BC 80 A7 71 05 D6 9D | .w..........q...
+7C 24 CD E6 F4 3B 7D 09 7F C2 EE 8F 6D 7C 3D 83 | |$...;}.....m|=.
+B6 57 6E 02 94 7B AF 1C 00 A2 00 90 24 03 10 BB | .Wn..{......$...
+3C 02 4F BF 36 CE 45 1E 48 D3 8E 42 5D 17 53 C9 | <.O.6.E.H..B].S.
+FB 54 B9 FD AF 01 0D 9D 6D 94 7A B7 7B 6E 32 22 | .T......m.z.{n2"
+C6 FB 4F C3 0F AC F0 8F 74 6C B3 FF E8 FB 19 B9 | ..O.....tl......
+8D C3 44 F9 A3 76 37 DD C0 BB 17 C2 24 34 A8 3E | ..D..v7.....$4.>
+70 27 1B CC 83 3A F0 18 77 70 A5 03 BB 0B 2F 11 | p'...:..wp..../.
+1A E1 D0 F8 7B A7 AF 78 AF DC 4F 92 31 B7 13 38 | ....{..x..O.1..8
+CB A7 87 6C F5 00 39 43 2F 44 AC BB 06 50 0E EA | ...l..9C/D...P..
+1E D2 0C 96 C8 08 76 C5 7C D9 78 94 AB 24 AA 13 | ......v.|.x..$..
+23 4C A3 10 F4 2C FB 27 46 A1 7F 07 F7 54 72 36 | #L...,.'F....Tr6
+4F 09 9E A2 5F 78 78 91 83 F0 4D 43 B9 48 AB 43 | O..._xx...MC.H.C
+0B EA C0 F8 74 49 BA C3 ED 78 EC 99 EC C3 22 F7 | ....tI...x....".
+DF FD 57 09 D2 3D ED D8 A6 A5 51 7F B2 2D 1F 56 | ..W..=....Q..-.V
+7A 43 38 9A 97 7F C2 66 D3 D3 EA 67 1A 4D 19 52 | zC8....f...g.M.R
+98 69 0D 86 D1 93 6F 70 45 15 44 6A 73 64 96 59 | .i....opE.Djsd.Y
+91 31 6A 4E 2A EB F8 ED 51 3B 73 31 31 77 97 2B | .1jN*...Q;s11w.+
+C5 D4 C3 CA 8D C0 FC E4 6B 13 FC 22 8F 65 A6 FC | ........k..".e..
+B1 C1 F7 87 8E 88 FB D2 F8 65 BA 7F 9D 30 D1 4D | .........e...0.M
+0A CE FD 0A A4 A4 88 D1 2C 2A 05 FF 9C 5B 9E 20 | ........,*...[.
+4F D4 6F 56 DA D5 3C AA C9 A7 B2 CE B5 B3 27 43 | O.oV..<.......'C
+EF BB BF 8F 1A 2E A5 71 1D 08 AA A2 53 2A D8 41 | .......q....S*.A
+E0 6D 43 49 47 09 07 D3 64 EE 29 60 24 63 6A B3 | .mCIG...d.)`$cj.
+39 87 10 DC 5E AA E7 5A 50 8B 4F 96 AE 14 35 8D | 9...^..ZP.O...5.
+4A 30 88 03 DE 99 86 A4 FE B4 07 CC C8 9C 4A 3D | J0............J=
+96 54 33 36 61 12 C8 87 3B A4 D3 72 75 E0 5F 4E | .T36a...;..ru._N
+A9 8A 22 C8 C9 04 5A 64 73 3B 90 96 8D BA 66 3C | .."...Zds;....f<
+C9 B0 86 43 3B A2 F9 FF BF 2B 79 12 65 36 6C 3B | ...C;....+y.e6l;
+95 00 C6 9C 8D B8 5F 9D 5B FE BF 5F C6 92 C4 A5 | ......_.[.._....
+19 A7 DB 60 F7 DE 55 51 95 90 26 84 BD 2B 98 D9 | ...`..UQ..&..+..
+6E 1C 83 BC 12 DC 11 30 88 E5 64 F5 E4 D5 A2 0E | n......0..d.....
+62 54 2E 53 4C DC 36 7F 83 8C A9 F7 BA 31 3B F4 | bT.SL.6......1;.
+DD 39 E4 55 C4 32 AD D0 6C F9 91 55 52 B4 0D DF | .9.U.2..l..UR...
+12 3A 38 1B B4 E5 76 80 FB 6D 54 89 00 63 D0 9E | .:8...v..mT..c..
+0C 39 E4 95 E3 31 82 3F 8D CF 52 C6 58 D3 B0 8E | .9...1.?..R.X...
+65 57 EE C9 A6 54 8A E9 D3 66 4F 44 3F 10 3F 09 | eW...T...fOD?.?.
+84 3A 69 91 3C D5 6B 7F 71 E5 3E AC AE 7D 1A 27 | .:i.<.k.q.>..}.'
+D5 06 72 CC 7D 8B 1C E1 2F 57 56 FD 17 62 27 E2 | ..r.}.../WV..b'.
+B5 9D AB 2B C1 ED 19 2A CF A3 76 C3 D5 0A 45 F0 | ...+...*..v...E.
+89 2C 96 E0 57 20 09 37 4F ED 4E 86 EE 5B 16 9B | .,..W .7O.N..[..
+34 DB 86 27 1A 5B 94 EE 46 1C BA AF 84 61 87 79 | 4..'.[..F....a.y
+AB BC 1B 99 25 ED 02 EF F1 A7 D4 EB F9 DC C0 BC | ....%...........
+6D 2B 9B D0 E3 19 31 67 CD 25 C9 A9 87 36 A5 1C | m+....1g.%...6..
+23 43 29 72 3E 5D 54 3C 06 CF 0D 7E 9C 9E 36 5C | #C)r>]T<...~..6\
+9A 7E 0A 3B 7C CC 87 A2 B7 0D 62 D1 B3 AB B3 38 | .~.;|.....b....8
+7A 2B 3F 9C 06 DB 58 90 9B F2 B9 B1 24 3F 50 B2 | z+?...X.....$?P.
+09 AA CA 7D C2 6C B1 66 A2 C8 9C 2A 8A 87 3C 61 | ...}.l.f...*..
+69 2D 2D D5 A9 EC 6B 78 F4 A6 1C 9D 2E 6D 48 A5 | i--...kx.....mH.
+7F F3 70 E0 3F 0E 63 CA 43 FD FE B4 62 DD BD 0A | ..p.?.c.C...b...
+18 F9 A0 F4 AD A5 8B 2A 68 ED 80 BE 9D 5C 8A 57 | .......*h....\.W
+CB 97 FD D6 F7 57 D1 FE BF 73 2D 9B FC CF 29 3E | .....W...s-...)>
+E7 07 03 8F D2 BD 77 40 F7 BE CA 13 C7 9F 78 A2 | ......w@......x.
+95 87 5C 8F 98 F0 40 47 88 F7 2E 82 C1 2C 73 5A | ..\...@G.....,sZ
+A5 4D B8 3F A9 4A 02 F6 F7 AB A8 A8 92 0B 39 67 | .M.?.J........9g
+5B CE 54 72 E3 B6 95 F8 9E 9F EC 13 5D B4 54 1D | [.Tr........].T.
+87 05 0E DC D2 68 2D 1D 61 6B FD 4E 71 1E 54 98 | .....h-.ak.Nq.T.
+13 1E C1 3C 60 13 B0 56 7F 83 65 84 BA D8 EE 25 | ...<`..V..e....%
+71 87 91 AD FC 3E BB 5A 17 DA BD C9 2A 4A 88 D4 | q....>.Z....*J..
+0B 7E 5F 07 F1 E1 B3 B1 C2 34 93 A0 2F 36 8D BF | .~_......4../6..
+5E 52 D5 C0 A9 F3 04 97 96 43 53 28 0B 0F 99 6D | ^R.......CS(...m
+AC F7 | ..
+
+Flow Record:
+ RecordCount = 17
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 207
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131973733 [2024-04-14 23:59:33.733]
+ last = 1713132274013 [2024-04-15 00:04:34.013]
+ received at = 1713132302717 [2024-04-15 00:05:02.717]
+ proto = 6 TCP
+ tcp flags = 0x18 ...AP...
+ src port = 58186
+ dst port = 5228
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 1008
+ src addr = 157.143.34.100
+ dst addr = 172.217.218.188
+ out packets = 18
+ out bytes = 1098
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 22.592 ms
+ srv latency = 0.000 ms
+ app latency = 60021.633 ms
+ in payload = 27
+17 03 03 00 16 9B DC 11 55 10 BF F9 A3 22 CC 05 | ........U...."..
+48 4B 8D F8 CE 75 87 33 C8 94 5A | HK...u.3..Z
+
+Flow Record:
+ RecordCount = 18
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 12 15 17 29
+ size = 1552
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132383212 [2024-04-15 00:06:23.212]
+ last = 1713132383255 [2024-04-15 00:06:23.255]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 59891
+ src tos = 0
+ fwd status = 0
+ in packets = 7
+ in bytes = 6183
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 14.087 ms
+ srv latency = 0.000 ms
+ app latency = 12.190 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 13 E1 DC 7D B5 | ....z...v.....}.
+69 92 B1 0C A0 2C 7C C4 38 37 56 94 C6 C2 3B 83 | i....,|.87V...;.
+45 89 8F EA BD C8 39 28 08 49 68 20 30 9B C6 11 | E.....9(.Ih 0...
+6E 0B CF DF 1C 95 F8 BC F5 22 4D 40 FF 75 57 F7 | n........"M@.uW.
+07 93 99 A5 47 45 E0 7D 8D 54 B7 EE 13 01 00 00 | ....GE.}.T......
+2E 00 33 00 24 00 1D 00 20 97 D6 73 BB 08 FC B3 | ..3.$... ..s....
+28 4B 73 E5 F1 82 7D A0 71 92 4F 55 EE 63 2C 20 | (Ks...}.q.OU.c,
+22 F2 2B 12 10 DA 4F D0 43 00 2B 00 02 03 04 14 | ".+...O.C.+.....
+03 03 00 01 01 17 03 03 12 65 79 4A E7 22 BA 6E | .........eyJ.".n
+28 C0 53 AB 67 D1 8C 12 DA 7B 3F 13 4A 0A C6 BC | (.S.g....{?.J...
+B7 47 EC E7 9F 83 D9 90 65 80 BD C9 6C B7 C9 DF | .G......e...l...
+2B BF 9F 34 52 0F 61 28 79 A7 BF 68 D0 47 27 24 | +..4R.a(y..h.G'$
+3A 87 A9 F4 85 ED 88 A5 65 D8 2D E6 D6 59 F9 41 | :.......e.-..Y.A
+91 3D 23 E9 21 DC 44 04 61 39 72 2B 39 B5 55 89 | .=#.!.D.a9r+9.U.
+4C A6 C8 A8 F9 D0 06 E8 CC A5 FD A6 80 40 77 0D | L............@w.
+27 24 BD 8C C3 6D 1E 57 FC 63 3C 79 9D 39 A2 56 | '$...m.W.c
+91 25 C1 3E 20 6F 8F 6D 87 FA CF BE C4 3F 3F B1 | .%.> o.m.....??.
+B9 11 BC F1 3E 74 67 CD 3A F3 F2 B5 68 6D 0A E9 | ....>tg.:...hm..
+45 1A 96 FA B7 82 CC 26 88 42 40 F3 05 DB 81 89 | E......&.B@.....
+2C 63 41 E4 D7 F4 58 9C 29 CF D6 D1 78 0B 59 63 | ,cA...X.)...x.Yc
+EA CD DB AA 45 0D BE 18 14 40 39 12 BE B1 A5 BE | ....E....@9.....
+80 FD 87 14 C5 10 40 8D 72 D1 9D E0 DE 69 1E 28 | ......@.r....i.(
+4D 0C 7C 89 65 44 F3 D3 C8 1F 68 07 A8 DF EF 63 | M.|.eD....h....c
+14 6E 9C 54 5C 53 F4 FF B4 03 14 F6 72 C6 8F A9 | .n.T\S......r...
+89 08 1F 58 44 E2 CA EB 26 CA 1C 57 C6 CB 3C 4E | ...XD...&..W........w#...A...
+20 68 86 2D 02 DA 28 3B CF 4D 62 12 5F 2D 6C 6A | h.-..(;.Mb._-lj
+AB 1C DA 4D 8F 98 AD 10 B5 02 45 64 94 AC 2A 99 | ...M......Ed..*.
+66 12 AC DB B2 8F 14 D1 FB 0B 43 1D BF 07 AA 84 | f.........C.....
+27 93 B2 B0 10 B0 39 06 07 EA 73 CE 1F E8 84 8C | '.....9...s.....
+7C A1 26 B8 B2 43 11 BA C9 19 2F 9C 52 9A DF 17 | |.&..C..../.R...
+2C 37 28 37 8B 3E 73 04 84 76 25 8F E2 A9 56 58 | ,7(7.>s..v%...VX
+31 9E 77 27 2E 17 21 55 EA 58 52 05 FC C9 CB 18 | 1.w'..!U.XR.....
+58 46 07 0E DA CA 4B 62 FA D1 78 F2 DA 07 77 84 | XF....Kb..x...w.
+FE 75 84 85 17 09 E9 E5 B2 26 D8 73 26 36 FA F0 | .u.......&.s&6..
+C5 DF 91 49 9B F9 E2 74 25 40 B8 A1 15 41 00 F6 | ...I...t%@...A..
+FD B1 F1 CE 40 3F 2A 3A | ....@?*:
+
+Flow Record:
+ RecordCount = 19
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131988800 [2024-04-14 23:59:48.800]
+ last = 1713132019757 [2024-04-15 00:00:19.757]
+ received at = 1713132148815 [2024-04-15 00:02:28.815]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 56527
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18599
+ src addr = 17.248.209.66
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 6945
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.998 ms
+ srv latency = 0.000 ms
+ app latency = 0.754 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 1C 7E C7 0C FC | ....z...v...~...
+6D A3 32 54 9E A2 B0 09 49 4D 8A F1 75 55 F9 72 | m.2T....IM..uU.r
+68 5B 28 B5 1D 19 4B 5B F7 A7 85 20 07 EB D9 DB | h[(...K[... ....
+4D D5 2E 83 B5 12 E1 49 AA 70 13 F8 1B 5D 10 87 | M......I.p...]..
+43 3F 20 B8 CA 28 6E 56 CD C8 C0 91 13 02 00 00 | C? ..(nV........
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 E6 | ..+.....3.$... .
+08 A1 60 FE 02 68 AA 96 43 AD 3A 49 56 70 BF DC | ..`..h..C.:IVp..
+66 F1 43 D2 84 9F 34 2D 6C 4F 9D EE DD 96 32 14 | f.C...4-lO....2.
+03 03 00 01 01 17 03 03 00 2A 11 82 49 70 11 B5 | .........*..Ip..
+13 81 E2 1A 42 4B 6C 40 BB 91 D7 86 47 34 A2 1B | ....BKl@....G4..
+A6 46 C9 2A AE 5C 5F E5 BC 66 F7 AE 03 13 DA 0F | .F.*.\_..f......
+A6 F6 24 78 17 03 03 11 25 06 2E 11 AB 37 AD AA | ..$x....%....7..
+E1 B7 13 26 29 8F AB 4E A7 42 2C 8C F2 F2 6E E3 | ...&)..N.B,...n.
+8B 40 E0 F5 6F 18 58 52 64 B4 FF 7A 41 D0 81 11 | .@..o.XRd..zA...
+35 2C 6E 8A 4B 9F DC 71 A7 0B E8 5F EC C2 9D BD | 5,n.K..q..._....
+90 75 AA 44 F5 7C 56 68 60 A9 D8 66 20 1C DD 1D | .u.D.|Vh`..f ...
+01 81 6C CC 7B A9 E3 0A FE 71 85 4C 83 43 06 4D | ..l.{....q.L.C.M
+AF DA 96 03 F2 EF E4 78 49 7B 13 37 5F 8B 77 89 | .......xI{.7_.w.
+6E B8 D5 80 85 8A C2 12 EE C2 E5 93 5C 22 EC 42 | n...........\".B
+E6 FA EC 39 EA 33 9F 94 7F 82 C6 D1 EB 77 22 4B | ...9.3.......w"K
+EA FF 80 1B 75 73 84 34 63 EF FD 9F 8C 65 14 61 | ....us.4c....e.a
+6C 54 59 54 44 78 8B 0B C1 2F 7B E7 EB 89 E4 5D | lTYTDx.../{....]
+B6 4A 1B FF E0 97 03 2E DC F9 01 F4 89 D7 4A B8 | .J............J.
+8A 52 11 DB B7 07 8A 18 A1 B6 7C 52 30 55 14 9A | .R........|R0U..
+1F DF 4C E8 E6 A5 C4 CB F8 DE 13 67 E2 59 9E 93 | ..L........g.Y..
+35 62 46 F0 D4 E2 8A 29 07 65 96 FB 8E E1 F9 27 | 5bF....).e.....'
+C6 CE 8E F3 01 57 79 A5 E5 88 C2 05 7F 64 55 74 | .....Wy......dUt
+BB F6 9D 0F F7 3D F2 3C 7E 80 F9 03 B4 FB 4D D1 | .....=.<~.....M.
+5E 09 FB 55 F9 0D 98 35 24 0E 4C 09 CD C3 02 A8 | ^..U...5$.L.....
+B4 10 51 F3 29 24 68 F6 C0 53 EC 4D 83 BD 29 BE | ..Q.)$h..S.M..).
+E5 F6 21 3C D1 96 91 6C D5 A9 56 42 F5 2B 2D F1 | ..!<...l..VB.+-.
+AF 20 B5 E1 9E 3A 15 BA 44 55 BC 3F 99 72 72 EB | . ...:..DU.?.rr.
+9B 5A 9B 84 CC 57 FE 3A 34 73 2D F7 F3 2E FD 3E | .Z...W.:4s-....>
+46 92 39 71 B6 3A FC 55 BF B2 25 1C E6 3E BE 1B | F.9q.:.U..%..>..
+08 0F 08 FD 8D E8 85 D2 71 6F E0 19 7D 31 28 BF | ........qo..}1(.
+8C 2A 5D 7F 20 94 E5 00 86 7D 3F 0B AA 44 27 81 | .*]. ....}?..D'.
+78 A7 29 FC FA 5D F1 AD B6 25 D1 1D DF 01 BA 83 | x.)..]...%......
+7D A7 1E 23 E2 56 0F 25 51 97 AE 33 ED A3 FD A0 | }..#.V.%Q..3....
+02 C0 EA CD 07 AE 6A F1 B5 43 AC E7 FE A5 54 01 | ......j..C....T.
+BD 1E BA A9 C7 A5 61 43 0B 3B 4A B8 00 CA 26 EB | ......aC.;J...&.
+5D 91 F2 CD 55 91 E3 10 30 54 FD 51 C5 7F 5D 73 | ]...U...0T.Q..]s
+93 32 7A A7 8E 6E B7 A9 24 AB DD D8 33 8D F0 E3 | .2z..n..$...3...
+83 48 FB 94 30 25 27 73 A5 F2 C0 A1 5C 34 9F 03 | .H..0%'s....\4..
+8B 9E C4 DB D2 D9 C0 AA 50 41 27 06 A6 C8 C1 64 | ........PA'....d
+E7 CF 05 FB FB A9 30 09 4A 19 8C 0D 80 81 59 15 | ......0.J.....Y.
+98 CD 44 33 95 9B E8 48 FA F2 BD 2F 98 B5 79 6A | ..D3...H.../..yj
+D7 61 FD 0A 4E 68 CE 5C CA FC 14 D0 C5 84 FD 06 | .a..Nh.\........
+B7 85 E8 1A 76 92 27 9F C7 F7 68 F8 78 BC 59 E6 | ....v.'...h.x.Y.
+DE 27 99 D4 7D F8 42 5D 29 52 FA 61 34 3E DE C0 | .'..}.B])R.a4>..
+08 F5 D2 D1 B6 70 6B A7 04 F9 44 F2 54 AB F0 47 | .....pk...D.T..G
+44 41 26 29 B4 8C 32 6F C4 2F 21 82 1D B4 D1 0B | DA&)..2o./!.....
+BB DE 69 66 BD D8 8C 60 8D C6 19 35 1E 26 C1 DD | ..if...`...5.&..
+28 48 12 38 1E 60 B8 17 84 94 B2 76 26 37 52 CE | (H.8.`.....v&7R.
+EB FD 05 EF 53 9F 3E 12 2B 8A 18 AF 2A AC B2 5D | ....S.>.+...*..]
+C8 E1 07 3C 46 14 72 F1 B6 99 CF 4D 33 5D DD 1C | ......
+2A 86 4C 35 C1 FD 02 FD 46 F5 AD F5 D5 84 E5 AF | *.L5....F.......
+04 9A 33 96 A7 39 5D B9 B5 CB 2C 3D A2 73 FB 82 | ..3..9]...,=.s..
+CA 69 71 3A 4C 37 64 EF E6 43 2E AE F9 94 8A 99 | .iq:L7d..C......
+0C 7B C9 B1 AF 72 FB 35 70 44 5F 68 F9 AA 27 1C | .{...r.5pD_h..'.
+66 26 3C 6E 66 08 2B D9 87 4C CF 0E 60 EE 38 D2 | f&].. .(.....
+CD EC 83 28 8D 6D 05 2A 1F 7E 80 80 35 EA 6E 48 | ...(.m.*.~..5.nH
+5B A2 02 32 8C 1D 40 1F 31 9C 13 35 9E 2E 8B 97 | [..2..@.1..5....
+CC 2C F3 5B C9 70 0B FE C7 AE B7 8D FE D2 A5 A7 | .,.[.p..........
+33 2D 28 54 C3 CE 3D 3F 7B E3 93 51 E2 30 4F CC | 3-(T..=?{..Q.0O.
+07 08 14 C0 CE 87 BA A8 02 46 57 73 D7 5A D7 E4 | .........FWs.Z..
+04 F7 5D 21 7A F9 01 D5 36 B2 5F 74 4F 59 BE 6E | ..]!z...6._tOY.n
+71 F3 2D E2 FA AD 66 8B A5 AA 5F 3B DE 92 24 5A | q.-...f..._;..$Z
+DB 80 39 86 E3 05 24 A5 FA D4 65 F6 B2 A2 05 47 | ..9...$...e....G
+F9 0F 44 07 E8 5F 93 2D 8F EB CE 4E AF 41 34 7E | ..D.._.-...N.A4~
+07 66 4E 08 E6 EE C0 11 E9 84 3F 8C 0D A1 44 39 | .fN.......?...D9
+47 2D 06 A8 FC 56 44 DB FE C1 CE 7A BB F2 D4 6B | G-...VD....z...k
+D4 59 47 1B 9F B4 A3 D1 2B 20 80 7C DD 53 03 13 | .YG.....+ .|.S..
+CE 45 03 E8 BF 27 4F 4E 19 2B 1E 6B 77 86 43 B1 | .E...'ON.+.kw.C.
+CE E3 04 8F 7D 39 B9 1E 07 38 43 FE 97 97 89 D9 | ....}9...8C.....
+F2 B0 C2 0B 63 B3 3E 72 62 B3 39 07 77 88 30 BF | ....c.>rb.9.w.0.
+A9 15 FF C8 45 2D 85 39 35 0A 92 8F 7B 36 70 7F | ....E-.95...{6p.
+D4 90 1D 48 19 9A 94 9D F1 D0 84 90 DF A5 23 7A | ...H..........#z
+51 53 B2 A6 9C D7 FB 39 C0 17 CC 2D 7D 91 1E 14 | QS.....9...-}...
+A1 6F 07 5C 99 86 97 8C 48 5B 79 55 10 2D 60 3C | .o.\....H[yU.-`<
+F9 20 83 DD 67 5D 55 E7 55 59 59 C3 DC E1 B0 D0 | . ..g]U.UYY.....
+B5 A2 43 E2 72 D0 CC 69 20 92 D3 5C 03 DA AF 3D | ..C.r..i ..\...=
+DF 60 BC 86 10 F3 A4 0F 63 7F B4 52 2F FE 7C 76 | .`......c..R/.|v
+3A 3D 75 65 F3 9B 07 8F C4 AF B2 95 AA 72 F0 15 | :=ue.........r..
+CE A8 85 D6 B3 16 10 A4 22 77 54 61 13 BB A8 A1 | ........"wTa....
+57 4C DE 92 81 E9 39 2C DF 97 78 F5 DB AB C6 26 | WL....9,..x....&
+7C FB 02 49 A4 91 16 9B 40 83 10 E5 C5 BA 48 D5 | |..I....@.....H.
+C3 83 90 65 EE 34 1B AD 85 6C E8 9B 95 4D 7C 6E | ...e.4...l...M|n
+46 1C E9 B3 C5 FA B3 80 AF DB 46 81 95 91 B9 7F | F.........F.....
+85 01 00 96 A9 8D AF 79 82 82 F3 4E B3 F9 16 C0 | .......y...N....
+64 CF 15 B4 80 A1 5F AF 7F 13 76 20 A2 25 B8 F8 | d....._...v .%..
+89 9C 8C 6B 54 53 9C E0 41 47 AA FC 58 20 E7 6F | ...kTS..AG..X .o
+77 47 A0 E0 00 00 00 01 00 08 F5 2F 5E B8 7A 96 | wG........./^.z.
+2F 0C 40 DC A5 62 B8 43 14 9B 03 D9 9D AC FD 15 | /.@..b.C........
+18 C8 37 F8 36 48 2B 23 95 87 69 A0 EF C0 FB F7 | ..7.6H+#..i.....
+72 F4 5A BD 20 92 D4 A5 7D 71 5F 2E 94 4B FA 82 | r.Z. ...}q_..K..
+50 F2 9A C4 E2 4B 8D E0 B7 3E E1 21 34 EF 5F 83 | P....K...>.!4._.
+DF 78 BF 09 8F 55 FC 0F 00 EB 2E 5F D8 6C 07 79 | .x...U....._.l.y
+88 53 1D FC DE F9 4A BE 7A E3 3F 2B 75 01 97 78 | .S....J.z.?+u..x
+66 8E E6 C0 30 D7 8F 53 0C 9D 2F 39 3A 27 56 20 | f...0..S../9:'V
+56 A6 1B E4 87 DE F8 AC 1B 32 5D 85 7A B5 AA 35 | V........2].z..5
+89 39 8B C0 40 60 D2 00 58 69 AE ED 16 52 23 E3 | .9..@`..Xi...R#.
+D2 4E 0B EE 1C 4C FE 8B A1 55 2D 41 E7 9E 0B 89 | .N...L...U-A....
+C6 D2 86 68 E7 D9 24 8A B3 C4 BD 15 82 56 8B F0 | ...h..$......V..
+2D 6D 9C 35 CC 4A 2C 10 EB 76 94 A5 10 FB 59 68 | -m.5.J,..v....Yh
+C4 A4 7D 5B 0D FC 1E E3 BE 64 A9 AF D6 DA DE 81 | ..}[.....d......
+EA 99 92 3F 4E BE 74 61 0F FC 9D 85 46 01 05 8F | ...?N.ta....F...
+45 25 EF 18 E8 76 47 39 48 99 AA 13 A0 7E 7D B7 | E%...vG9H....~}.
+E3 FF AE F4 17 45 8D 26 8A D2 AC 6D C7 3B 7D 97 | .....E.&...m.;}.
+39 6F 8A 28 C8 BB 6D 2B CD 74 4B 14 CD 2B C7 B1 | 9o.(..m+.tK..+..
+B1 78 8E C5 6C A7 2D 98 88 BD 08 9D 2D 74 58 F8 | .x..l.-.....-tX.
+6F C0 | o.
+
+Flow Record:
+ RecordCount = 22
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 697
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132261362 [2024-04-15 00:04:21.362]
+ last = 1713132262789 [2024-04-15 00:04:22.789]
+ received at = 1713132344717 [2024-04-15 00:05:44.717]
+ proto = 6 TCP
+ tcp flags = 0xdf CE.APRSF
+ src port = 61426
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 2093
+ src addr = 157.143.34.100
+ dst addr = 2.21.22.179
+ out packets = 14
+ out bytes = 11736
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.926 ms
+ srv latency = 0.000 ms
+ app latency = 0.376 ms
+ in payload = 517
+ TLS version = TLS 1.2
+ sni name = weather-data.apple.com
+ ja3 hash = 5d5dfdf4aa8c9df35f686abcc6af682b
+ ja4 hash = t12d2014h1_a09f3c656075_14788d8d241b
+16 03 01 02 00 01 00 01 FC 03 03 7D 64 24 23 B0 | ...........}d$#.
+E7 C4 36 01 A0 3D 33 4A BC FE 74 FD 4E B6 7A 8E | ..6..=3J..t.N.z.
+8E B3 5F 1F B3 D9 FD 8F 20 B6 D0 20 07 D2 65 9F | .._..... .. ..e.
+8D 6D 56 BB 2D 2D 89 D1 22 8F 59 6F B1 25 1D 5D | .mV.--..".Yo.%.]
+1F 68 C6 AF 0F 78 8D F1 52 58 85 C6 00 2A DA DA | .h...x..RX...*..
+13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./
+CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5
+00 2F C0 08 C0 12 00 0A 01 00 01 89 7A 7A 00 00 | ./..........zz..
+00 00 00 1B 00 19 00 00 16 77 65 61 74 68 65 72 | .........weather
+2D 64 61 74 61 2E 61 70 70 6C 65 2E 63 6F 6D 00 | -data.apple.com.
+17 00 00 FF 01 00 01 00 00 0A 00 0C 00 0A BA BA | ................
+00 1D 00 17 00 18 00 19 00 0B 00 02 01 00 00 10 | ................
+00 0B 00 09 08 68 74 74 70 2F 31 2E 31 00 05 00 | .....http/1.1...
+05 01 00 00 00 00 00 0D 00 18 00 16 04 03 08 04 | ................
+04 01 05 03 02 03 08 05 08 05 05 01 08 06 06 01 | ................
+02 01 00 12 00 00 00 33 00 2B 00 29 BA BA 00 01 | .......3.+.)....
+00 00 1D 00 20 4C F5 50 53 0E 60 45 CA 05 46 91 | .... L.PS.`E..F.
+5F 2E 88 C2 12 9D B0 26 0B 41 D6 42 64 14 74 8E | _......&.A.Bd.t.
+0C 5D 1E 7D 53 00 2D 00 02 01 01 00 2B 00 0B 0A | .].}S.-.....+...
+9A 9A 03 04 03 03 03 02 03 01 00 1B 00 03 02 00 | ................
+01 1A 1A 00 01 00 00 15 00 BB 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 | .....
+
+Flow Record:
+ RecordCount = 23
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1580
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132373946 [2024-04-15 00:06:13.946]
+ last = 1713132374109 [2024-04-15 00:06:14.109]
+ received at = 1713132441667 [2024-04-15 00:07:21.667]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 62402
+ src tos = 0
+ fwd status = 0
+ in packets = 13
+ in bytes = 9207
+ src addr = 172.217.168.46
+ dst addr = 157.143.34.100
+ out packets = 14
+ out bytes = 2093
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 77.332 ms
+ srv latency = 0.000 ms
+ app latency = 12.450 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = 907bf3ecef1c987c889946b737b43de8
+ ja4s hash = t130200_1302_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 D5 71 BB B1 1A | ....z...v...q...
+95 66 F2 88 85 6C F4 36 A9 82 04 93 1B 8F B1 9A | .f...l.6........
+0A 0D BA 3A BA 0F A7 24 71 07 5F 20 66 D7 B6 F8 | ...:...$q._ f...
+AA AB 07 E8 E6 60 09 15 05 4D D8 2B 5B B8 7E 1F | .....`...M.+[.~.
+1F 55 20 C5 CF B6 48 CF 77 B4 DD 8A 13 02 00 00 | .U ...H.w.......
+2E 00 33 00 24 00 1D 00 20 61 8D 3B 33 BC 4C C7 | ..3.$... a.;3.L.
+6C D4 C0 38 D7 48 73 09 48 FB F9 5E BE E9 FD BB | l..8.Hs.H..^....
+56 71 77 42 70 3F 63 38 21 00 2B 00 02 03 04 14 | VqwBp?c8!.+.....
+03 03 00 01 01 17 03 03 1A 22 F1 BA 35 AF F6 99 | ........."..5...
+A6 19 1C 08 09 BD EC 85 39 91 44 9A 56 06 02 10 | ........9.D.V...
+A7 8E 6A 7E 06 03 7C 50 F7 DB 4D 49 F8 3B 9C 74 | ..j~..|P..MI.;.t
+62 0C EA B7 24 C3 F5 11 09 B0 7B D6 BB 2D 88 BC | b...$.....{..-..
+3E 63 42 58 2A 33 DA 1F 90 C9 35 C4 A5 61 C6 92 | >cBX*3....5..a..
+FA 88 A4 C6 FF A5 FB AB 7D E5 C1 DC 1B 73 EA F8 | ........}....s..
+DF 10 21 D8 E6 B3 64 7B 6B B9 E1 77 6F AF 31 1A | ..!...d{k..wo.1.
+87 AF 31 EA D7 8B 2B 67 CF 87 C3 C8 A1 43 D9 DA | ..1...+g.....C..
+39 7C 24 0E 29 87 92 4B ED D0 3F 74 DC 21 44 15 | 9|$.)..K..?t.!D.
+47 9C 30 8A 22 33 6A 21 69 8B 7C 24 6E 49 3D D2 | G.0."3j!i.|$nI=.
+E3 42 CF A8 3F AC F1 A3 97 B0 82 78 19 56 5E 3E | .B..?......x.V^>
+17 91 A1 30 3A E9 4C 4D 5A 05 B0 51 E8 48 58 77 | ...0:.LMZ..Q.HXw
+9C CF 0D 10 43 8E B6 22 C2 9A 95 10 F1 14 8C B0 | ....C.."........
+E3 DA 29 F0 91 41 A7 59 CD 45 A5 FB B9 73 9E 4A | ..)..A.Y.E...s.J
+D3 DB D6 5C 32 C5 D9 EC 71 AF 67 CE FD C6 3A 0E | ...\2...q.g...:.
+17 B6 FE E8 98 22 F3 73 81 47 32 05 39 3B FF BD | .....".s.G2.9;..
+00 3B F3 93 00 D8 45 C3 7F 7E C5 BE CD 96 58 08 | .;....E..~....X.
+43 C9 30 86 91 22 03 8F F8 8A 6D 54 62 C9 59 74 | C.0.."....mTb.Yt
+F4 DF 0C 7D D7 FE 9A 51 85 AB D8 EA 59 DF ED DD | ...}...Q....Y...
+17 C8 B0 F7 6C 53 AB 80 BC 1C 3A CB E7 DE 9E D5 | ....lS....:.....
+4C E1 0A F5 30 D5 31 0F 87 C5 C5 5B 7F 90 81 D7 | L...0.1....[....
+03 7F 35 39 F6 B1 15 A2 09 F3 11 34 F8 69 35 A3 | ..59.......4.i5.
+E7 BB 74 48 6C A6 97 38 65 0A AB 65 A3 AC 6F 03 | ..tHl..8e..e..o.
+D8 11 2C 54 7E 2B D8 17 90 1A 1A 44 FC FA C7 1D | ..,T~+.....D....
+0C 15 C5 89 1E EB C5 B1 8A 4B 68 A4 E5 DD 17 DB | .........Kh.....
+9D 04 01 66 4E 91 8D 7E FD FE 2D 8A 7D 29 CB 85 | ...fN..~..-.})..
+38 81 40 85 AB 0D 7F 90 65 C0 EF 06 98 F0 23 8D | 8.@.....e.....#.
+5E 0E DB 56 4A E7 67 5A 5A 09 4C 91 94 6A 55 01 | ^..VJ.gZZ.L..jU.
+6D 39 72 3E F4 47 E6 3E 7C F7 BC C4 47 5D 53 9A | m9r>.G.>|...G]S.
+8B 37 58 F8 BC 6A B6 41 42 85 86 FE 48 B7 38 3B | .7X..j.AB...H.8;
+D2 90 A8 C0 74 5A 83 FF 20 4C 89 AD DE 53 DC 7E | ....tZ.. L...S.~
+63 2F 6B 4A 00 A8 F8 28 87 26 03 52 4F A9 2D 28 | c/kJ...(.&.RO.-(
+C8 20 89 D5 65 A7 E7 1E D8 09 EB FF 5F AB E7 B7 | . ..e......._...
+DD 79 5D 16 84 EC FC 9C 70 8C DE 53 CD CA 2C 11 | .y].....p..S..,.
+05 EC 60 65 2B F4 91 D0 87 DA 61 F2 D5 E3 4C FF | ..`e+.....a...L.
+1D 9B C2 FB C8 B6 1C 43 05 3F 88 48 74 FE 46 4B | .......C.?.Ht.FK
+A9 6F A1 43 0E F7 09 4C 73 A5 2D 38 7F DF E6 79 | .o.C...Ls.-8...y
+8E 4B 07 10 58 6F E9 16 C0 57 25 B9 D6 8A 0E 18 | .K..Xo...W%.....
+85 F6 FE A8 DB 38 9A 86 D2 73 36 40 B4 49 D5 61 | .....8...s6@.I.a
+CC F8 B3 FB E1 B1 A8 A9 E1 2A 23 E2 6D C8 30 7B | .........*#.m.0{
+96 94 55 E5 5D 04 88 B9 E6 53 AC C3 66 45 F5 E2 | ..U.]....S..fE..
+0F 6A 79 8F A6 2A EA 7D 2D 07 A2 AA 18 C3 C3 DC | .jy..*.}-.......
+12 16 32 DA 36 27 00 DD F5 18 9C C1 2D CA C6 D2 | ..2.6'......-...
+9D 7F D8 1B 2F 48 67 53 43 F2 51 D2 2C 6E 02 C6 | ..../HgSC.Q.,n..
+B5 C0 3C 13 59 FE 1F 23 D5 99 50 73 20 54 F8 D1 | ..<.Y..#..Ps T..
+8D 84 91 A3 1D 9B 9E 57 74 5A 62 9E B4 46 7D 1B | .......WtZb..F}.
+E7 15 11 A1 96 BE B8 34 A2 7F F2 03 10 FF BB 5F | .......4......._
+49 11 C7 C9 63 A7 1B C6 92 D6 2D 02 8A 75 B5 85 | I...c.....-..u..
+57 01 3C 56 9E 35 D2 44 7F B1 A7 86 55 24 21 6B | W.
+61 BB 7E CF 0E F3 C9 6F FE BD 4F 22 A6 C9 7D 78 | a.~....o..O"..}x
+8A 0D 31 94 04 83 A5 15 89 B1 5C A9 B8 A4 59 CF | ..1.......\...Y.
+F0 B0 C1 B9 3C 45 CC D1 A9 59 2B 32 88 EE 3E 79 | ....y
+38 35 B6 D7 E8 00 F8 84 A6 47 64 0E 8B B3 F0 31 | 85.......Gd....1
+FD 27 C5 33 11 4C D0 F6 57 28 BA DF 1D 4C BA 36 | .'.3.L..W(...L.6
+4C C0 72 B5 B1 3A 18 04 93 69 4D 53 63 84 36 78 | L.r..:...iMSc.6x
+27 C9 C0 CB 0D 1E DD 71 28 86 DA 24 79 83 73 21 | '......q(..$y.s!
+5B 7B 4C 0B 80 C1 33 CA 7D 70 B8 C8 BC 41 3A CD | [{L...3.}p...A:.
+29 3C BB 9C 90 64 54 6A F5 3F 3C 24 72 81 64 88 | )<...dTj.?<$r.d.
+9A D9 A0 60 9C 7E 27 D3 DC 60 F9 96 AC 39 1F F4 | ...`.~'..`...9..
+69 C6 4B 8B 64 64 DD B7 1B FD 6C 8F BB 86 AF 3A | i.K.dd....l....:
+4A ED 3F 08 1C 5D 54 F0 1F DE 50 B3 CE 0E 51 AD | J.?..]T...P...Q.
+56 3D 0F DE 4D 7B 21 39 FA 38 8A C1 3A D0 B3 B6 | V=..M{!9.8..:...
+19 CE F8 73 FD 4E 02 1D 23 46 67 C7 51 C9 97 21 | ...s.N..#Fg.Q..!
+97 74 C1 26 33 6D 6A 58 4C 90 C1 0D 88 B1 91 78 | .t.&3mjXL......x
+C8 DD 9A 54 CE 62 66 AD 28 36 3D 00 2A 5A A7 0B | ...T.bf.(6=.*Z..
+F8 46 FD E6 E7 6B ED A1 67 64 D8 F6 C0 C9 D6 22 | .F...k..gd....."
+07 90 FD 2C 1B FB 4D E9 F6 FE 8D 2C A0 67 86 A7 | ...,..M....,.g..
+08 01 00 1A 7E 80 7D AB 37 01 D1 3C BA DD E0 15 | ....~.}.7..<....
+3B F9 F4 FF 9E 08 08 5F 46 4A 38 29 B8 DC 0C 36 | ;......_FJ8)...6
+5F EA 76 F9 BB 94 27 A4 C3 E6 BA 36 5F 1B 7C AC | _.v...'....6_.|.
+51 0B BB 41 CD 16 D2 32 3C 1C E7 1F 4A D6 79 77 | Q..A...2<...J.yw
+4E E3 51 E6 04 D5 32 A2 06 DD 33 6B 35 0B AF 28 | N.Q...2...3k5..(
+0E 39 CC CE 66 0D 37 BD C7 19 43 A3 39 85 68 55 | .9..f.7...C.9.hU
+71 58 9F 07 C3 B7 90 38 BD D8 D5 C7 D5 D8 C5 AA | qX.....8........
+C1 9E DD ED B9 A6 91 50 C8 21 60 46 B8 31 0D AA | .......P.!`F.1..
+98 FE B4 B9 85 6D 97 4A | .....m.J
+
+Flow Record:
+ RecordCount = 24
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 307
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131667599 [2024-04-14 23:54:27.599]
+ last = 1713132267867 [2024-04-15 00:04:27.867]
+ received at = 1713132000886 [2024-04-15 00:00:00.886]
+ proto = 6 TCP
+ tcp flags = 0x18 ...AP...
+ src port = 80
+ dst port = 59696
+ src tos = 0
+ fwd status = 0
+ in packets = 21
+ in bytes = 2362
+ src addr = 172.217.168.3
+ dst addr = 157.143.34.100
+ out packets = 31
+ out bytes = 4672
+ aggr flows = 4
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 14994.852 ms
+ srv latency = 0.000 ms
+ app latency = 45038.849 ms
+ in payload = 127
+HTTP/1.1 204 No Content
+Content-Length: 0
+Cross-Origin-Resource-Policy: cross-origin
+Date: Sun, 14 Apr 2024 21:54:42 GMT
+
+
+48 54 54 50 2F 31 2E 31 20 32 30 34 20 4E 6F 20 | HTTP/1.1 204 No
+43 6F 6E 74 65 6E 74 0D 0A 43 6F 6E 74 65 6E 74 | Content..Content
+2D 4C 65 6E 67 74 68 3A 20 30 0D 0A 43 72 6F 73 | -Length: 0..Cros
+73 2D 4F 72 69 67 69 6E 2D 52 65 73 6F 75 72 63 | s-Origin-Resourc
+65 2D 50 6F 6C 69 63 79 3A 20 63 72 6F 73 73 2D | e-Policy: cross-
+6F 72 69 67 69 6E 0D 0A 44 61 74 65 3A 20 53 75 | origin..Date: Su
+6E 2C 20 31 34 20 41 70 72 20 32 30 32 34 20 32 | n, 14 Apr 2024 2
+31 3A 35 34 3A 34 32 20 47 4D 54 0D 0A 0D 0A | 1:54:42 GMT....
+
+Flow Record:
+ RecordCount = 25
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132182757 [2024-04-15 00:03:02.757]
+ last = 1713132213789 [2024-04-15 00:03:33.789]
+ received at = 1713132302717 [2024-04-15 00:05:02.717]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 56357
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18599
+ src addr = 17.248.209.70
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 6945
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 45.236 ms
+ srv latency = 0.000 ms
+ app latency = 0.455 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 11 32 B9 C4 F1 | ....z...v...2...
+D7 F2 4F 62 6E FE 1E F7 E4 80 EC DC EA BC 41 49 | ..Obn.........AI
+D8 0D 60 9B 98 44 09 BB FE 4F 38 20 22 C8 0F F6 | ..`..D...O8 "...
+0D 5B AA 86 CB B7 69 10 A3 6D EC 3B 66 85 AE 3E | .[....i..m.;f..>
+22 D2 50 50 5B 44 74 C8 84 04 96 59 13 02 00 00 | ".PP[Dt....Y....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 8E | ..+.....3.$... .
+DD 42 50 BD EF C9 5B D0 70 F8 4A 24 25 30 70 F8 | .BP...[.p.J$%0p.
+D1 D7 98 38 30 EC D4 6B 15 8D AE AC 87 EC 3C 14 | ...80..k......<.
+03 03 00 01 01 17 03 03 00 2A 18 A2 9F E9 8F 57 | .........*.....W
+DF 8D 59 A0 DF 8D F4 FA E3 95 30 2C 59 40 EB 4F | ..Y.......0,Y@.O
+48 1F 56 C6 AA 07 7C 83 55 02 5A 21 10 37 76 E4 | H.V...|.U.Z!.7v.
+BF D0 21 E0 17 03 03 11 25 08 0F D1 EF 46 ED 7C | ..!.....%....F.|
+EB 37 35 57 15 B6 51 AA D2 3D F0 07 EF 2D F1 06 | .75W..Q..=...-..
+41 17 F1 14 A4 E0 07 F5 02 97 F4 C9 1E 66 F9 13 | A............f..
+B6 BD 54 D3 E8 9C 85 C3 4E 64 4E 53 B9 F6 17 8B | ..T.....NdNS....
+70 13 DD A8 C2 C7 82 B0 2C FE D1 FA 76 6A 4F C7 | p.......,...vjO.
+49 C9 AF 23 55 8C F4 54 F7 A0 94 6B BA DF 36 C0 | I..#U..T...k..6.
+EA 5F 43 73 4A 68 C2 16 55 AA EC 10 87 05 23 9F | ._CsJh..U.....#.
+FA 9C 70 69 22 8D 7A 8A FA AD 67 32 AC 7B ED B1 | ..pi".z...g2.{..
+13 8F E4 31 17 BD 00 0B 82 A2 AB E3 97 79 78 AB | ...1.........yx.
+8A 63 AB EC 10 FA F4 0F AF 54 F0 88 60 4C C7 91 | .c.......T..`L..
+8E 3D 0C 08 4F 8D 76 15 54 85 6D FD 0F FF CF A8 | .=..O.v.T.m.....
+C6 77 F2 A1 4C 27 80 F0 0F 1C D6 53 5A E0 01 38 | .w..L'.....SZ..8
+DE 34 98 4E 78 E1 4B F0 40 74 1F FA 58 79 A6 EA | .4.Nx.K.@t..Xy..
+AE 76 84 26 EE C1 F2 03 64 EB 61 62 9E 16 76 25 | .v.&....d.ab..v%
+30 2A 7D 0B CB 0D 8A 1E C4 09 38 28 3E F3 4F FF | 0*}.......8(>.O.
+00 72 9E 80 95 6B F3 8B 72 CF 47 DD FA 70 04 AF | .r...k..r.G..p..
+BD 87 2C 6D DD E5 36 00 B4 6F 98 04 BE F6 00 DA | ..,m..6..o......
+D1 D9 49 16 69 CE E8 7F F9 F2 EE 4F C9 4A EC F8 | ..I.i......O.J..
+65 87 6E 96 F9 70 87 78 31 64 18 B1 BB F3 E5 C3 | e.n..p.x1d......
+01 C1 E3 93 41 DF 33 CC 77 8E 81 F1 50 24 07 F1 | ....A.3.w...P$..
+3D D8 22 42 E5 C0 C5 6A C5 8B 67 D9 0A F3 B6 F5 | =."B...j..g.....
+DC A9 CF 23 FB D9 8B 60 37 FF 88 3C 0A 0F F5 EE | ...#...`7..<....
+D6 15 0D 3A 45 99 8A FA 30 D5 1F E2 54 52 5F 58 | ...:E...0...TR_X
+55 D8 A0 C3 F6 11 9B 56 6F 14 F4 24 38 9F 75 9E | U......Vo..$8.u.
+68 9E 16 36 B2 C0 C5 C1 2E D9 36 9A D6 84 AC 0C | h..6......6.....
+A4 76 BC 3E 1B A5 A1 0E 0F 59 96 4A D6 95 85 AF | .v.>.....Y.J....
+BE B5 BB 01 E2 A6 14 5B 5C 60 78 FB E0 41 3B 70 | .......[\`x..A;p
+8D B4 38 17 9F C2 1C 49 FB 49 3A 12 D2 BE D6 9A | ..8....I.I:.....
+CB A8 82 70 49 69 26 01 D6 9A F1 DF 61 5C E4 E5 | ...pIi&.....a\..
+6D 2B 1C E7 22 16 E2 FD D8 9B E6 E9 81 37 EA 87 | m+.."........7..
+72 1C 2D 55 3C E9 69 DB 4A D6 1E 41 27 6B 02 51 | r.-U<.i.J..A'k.Q
+46 05 30 1D 4E AD 54 49 40 5E 88 5E E9 70 2A 33 | F.0.N.TI@^.^.p*3
+69 D8 1D A9 56 EB B9 E4 75 15 DC CF B5 DE 94 0B | i...V...u.......
+99 6D 59 7F 74 D3 19 B1 0B 59 EF 56 9B 31 C5 1C | .mY.t....Y.V.1..
+E9 CB 09 08 49 CC 24 AA 85 46 A5 B6 75 15 1F 62 | ....I.$..F..u..b
+12 1E 33 37 BB 90 3A EC 92 66 67 AC B6 2D 20 FC | ..37..:..fg..- .
+E8 74 0B D8 ED 4B FF B1 D5 F8 F1 38 A4 36 C6 33 | .t...K.....8.6.3
+2E 7E 48 59 BB BF 42 CE 66 02 DB E1 EB 95 62 3A | .~HY..B.f.....b:
+17 2B D5 76 2D 50 01 73 27 17 61 DF DA DE 20 A4 | .+.v-P.s'.a... .
+5F 7B BA 2C E6 16 8C 47 68 EF C1 01 7D 08 9C BD | _{.,...Gh...}...
+7A 15 C7 D9 18 E9 D5 CD EF 6F 43 9B 76 58 6B E4 | z........oC.vXk.
+AD 19 33 13 C5 59 B0 CE 8D CA E7 D1 90 9D 77 78 | ..3..Y........wx
+E2 5C 46 3D 89 19 BC 45 07 8E 15 DB FE DF 7E 6D | .\F=...E......~m
+1C 35 79 FD 29 E3 B0 E4 7F AC 5D 82 0D B6 C8 2C | .5y.).....]....,
+4A 83 41 BA 4A 72 E6 89 5D 8F B7 04 28 9F 87 4A | J.A.Jr..]...(..J
+C6 76 AB F9 76 87 3E 58 51 BA F6 1A 67 8A 61 11 | .v..v.>XQ...g.a.
+BD A1 35 F5 54 21 D0 61 28 B9 29 BF FE 2E CA 22 | ..5.T!.a(.)...."
+26 53 9E 4C DF A8 88 96 04 67 FF DF BF 2C 89 27 | &S.L.....g...,.'
+F0 BD A8 D3 C6 FA 6F 67 16 18 78 EE EE 9A 0C 4F | ......og..x....O
+BA C6 F3 E7 C2 DD 6F 64 21 1C 28 0C 62 5A 54 96 | ......od!.(.bZT.
+94 56 4B 4E 44 EF C2 E3 51 8E 1A 8A 08 54 90 FE | .VKND...Q....T..
+58 72 87 18 97 C7 A3 74 D4 52 EE CF 15 A8 4E 77 | Xr.....t.R....Nw
+96 4D 5F 0B 7D 77 1A 1D 4B 45 7B B6 84 91 C7 3F | .M_.}w..KE{....?
+C4 1D F0 D1 F9 46 45 BC 6A 32 AF 42 15 4A 1C 39 | .....FE.j2.B.J.9
+DE 99 81 98 F4 66 26 E1 1F 2A 76 FB D1 C8 26 1A | .....f&..*v...&.
+EF 99 30 AF 36 EC 7E 1D 81 8E 1D 07 3D D2 44 A5 | ..0.6.~.....=.D.
+09 AF 5D E2 F0 D6 AA 3E 74 54 F4 8D 72 96 04 DF | ..]....>tT..r...
+FB B2 E9 E9 61 7F DA 74 BE E6 48 8D A7 37 2C D0 | ....a..t..H..7,.
+A1 DB 2F AE 5B 52 C9 A9 F5 26 7C 30 53 71 38 62 | ../.[R...&|0Sq8b
+C7 44 11 79 AC B5 87 84 C0 43 67 0D 38 2B F6 C1 | .D.y.....Cg.8+..
+1C 46 B1 C9 E7 08 CC 3B D3 35 99 F3 A9 AA 84 13 | .F.....;.5......
+13 B2 E7 86 91 69 DE 46 0E D6 35 B0 EB 65 FE DA | .....i.F..5..e..
+4E 0C C7 DF BC B1 EA F4 C8 2B 3D 6C DB DC 4B BD | N........+=l..K.
+F9 AB 98 7F 7D 1A 69 B6 91 75 70 BE 69 93 72 7E | ....}.i..up.i.r~
+1C E9 F9 DF BB 6D 77 3E 1B F4 E9 41 AE F9 90 B6 | .....mw>...A....
+5C 6E 1B 84 BC 10 6A 07 E2 29 95 6C BE 52 9C 1E | \n....j..).l.R..
+E6 DB 05 B4 B0 5D 92 6E 57 97 BF 7D 43 47 1C FE | .....].nW..}CG..
+A8 86 C5 8E C0 D1 F8 02 A9 61 8F EA 3D E8 6A B7 | .........a..=.j.
+AB 1E 64 45 7D 2B 12 23 8F 6B 3E F6 33 D9 B2 DB | ..dE}+.#.k>.3...
+B2 E3 78 91 93 42 00 F2 CD 56 3E 95 BC E9 75 E4 | ..x..B...V>...u.
+1C F4 E6 F9 68 22 1F 55 37 FA 42 60 F2 E9 44 89 | ....h".U7.B`..D.
+DE B8 28 2C 3C DB 2D BF ED 23 08 9C 41 09 44 04 | ..(,<.-..#..A.D.
+98 16 DF 29 44 67 8D 82 2B B7 E9 B2 C2 24 57 51 | ...)Dg..+....$WQ
+B3 25 3E F0 CD 4F 04 4A 00 0A 0D BE ED 08 D8 C5 | .%>..O.J........
+15 30 EF 48 DA ED 7E 8B 8B 96 8E 3B DE 21 A6 4A | .0.H..~....;.!.J
+DF A9 87 CC 7B 2D AF 50 4D A5 8D 0C 1E 76 97 54 | ....{-.PM....v.T
+AE 4D 0A 93 70 9A 64 F2 B2 25 09 9D 05 92 37 83 | .M..p.d..%....7.
+53 7D CA 07 D3 0F 91 BC C7 5E FA 13 2A AF C3 A2 | S}.......^..*...
+72 DC B7 8C E4 BD 68 CA 7A F8 64 30 17 B7 57 80 | r.....h.z.d0..W.
+F7 05 FE 0C 20 CE 2E 0E | .... ...
+
+Flow Record:
+ RecordCount = 26
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131929021 [2024-04-14 23:58:49.021]
+ last = 1713131931365 [2024-04-14 23:58:51.365]
+ received at = 1713132000887 [2024-04-15 00:00:00.887]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 62151
+ src tos = 0
+ fwd status = 0
+ in packets = 11
+ in bytes = 4264
+ src addr = 17.167.200.72
+ dst addr = 157.143.34.100
+ out packets = 11
+ out bytes = 1934
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 115.449 ms
+ srv latency = 0.000 ms
+ app latency = 0.451 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 00 51 45 C8 28 | ....z...v...QE.(
+61 9C 48 BB 3E 53 E2 C9 1B 3B C0 74 4D 6F 75 75 | a.H.>S...;.tMouu
+0B 03 44 2F 32 4C 1D FF DB 66 F6 20 A7 31 2D EC | ..D/2L...f. .1-.
+54 26 7F DA FF BF 48 CC CF 4A AE 02 62 C5 9D AE | T&....H..J..b...
+8A EF C1 51 C1 76 A6 9C B2 EF E1 2A 13 02 00 00 | ...Q.v.....*....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 0C | ..+.....3.$... .
+78 79 B7 37 F8 07 9A 3A E0 21 6F 50 A6 A9 7F 38 | xy.7...:.!oP...8
+8A CE E4 17 AC 80 6E 19 44 47 5E 19 49 5E 26 14 | ......n.DG^.I^&.
+03 03 00 01 01 17 03 03 00 2A 6E 3C 9E 92 4F AB | .........*n<..O.
+98 A8 DF E3 DF C8 69 0B 9F E2 0B 6F 60 4B 5A F1 | ......i....o`KZ.
+F6 7D 6A E7 CC 50 FF 9B 6F A2 36 EE EF DD 58 08 | .}j..P..o.6...X.
+5D 3A 17 AA 17 03 03 09 7C 13 9F FF 12 8E 31 58 | ]:......|.....1X
+73 C1 79 47 C9 38 1C 01 2A 52 22 46 8F BC 8D 65 | s.yG.8..*R"F...e
+30 31 E4 F6 E2 74 39 55 8D E0 79 46 F6 51 4D 7D | 01...t9U..yF.QM}
+05 E5 2C 02 56 6A 5B 69 55 1F 7A 67 70 AA 98 B1 | ..,.Vj[iU.zgp...
+F9 34 DF 56 EB 99 C4 3C EA 32 48 37 5B 26 A7 15 | .4.V...<.2H7[&..
+3B 82 8B 56 4C D6 CB 3A DF 36 7B E0 46 03 52 13 | ;..VL..:.6{.F.R.
+5B ED 15 6E 77 D1 CC AD 99 D4 51 15 61 89 A7 43 | [..nw.....Q.a..C
+63 26 08 BD BA 68 E1 C0 9B 77 CC 36 B5 78 AF B1 | c&...h...w.6.x..
+A1 1D 7C 29 1A 5C 21 CD E2 9A D5 2D 01 38 B0 18 | ..|).\!....-.8..
+F6 FD D5 85 E3 EF 2A A4 4B F5 AF 57 5A 2D E1 57 | ......*.K..WZ-.W
+B2 9D D2 86 77 3A 04 8F 49 B1 30 DB ED ED 6B 4D | ....w:..I.0...kM
+34 46 30 33 6C 3F 1C 05 8F 82 E3 50 04 06 15 A5 | 4F03l?.....P....
+37 67 A5 B5 BF A9 D6 43 85 81 18 8E CB 4B CC F2 | 7g.....C.....K..
+85 89 B4 75 39 72 8A 25 5E 14 23 9B C9 3E 66 08 | ...u9r.%^.#..>f.
+DC 23 53 F9 E1 77 E0 94 94 86 19 A9 C1 09 CD 34 | .#S..w.........4
+AF 86 2C 84 18 DB F8 3A C9 96 B4 42 03 0C B0 56 | ..,....:...B...V
+26 BC 76 8D 09 2C 86 B8 D0 6A B0 5C BF 8B 61 25 | &.v..,...j.\..a%
+7B 26 77 BA CD D0 52 8A E6 25 5B 70 4A 2F 88 C0 | {&w...R..%[pJ/..
+45 E0 39 20 1A 19 73 B0 F4 3F 6B B2 34 1F C0 FA | E.9 ..s..?k.4...
+26 55 5D 5E 8C 3D F1 5A D7 A1 21 B7 8C 3E 63 54 | &U]^.=.Z..!..>cT
+89 8B 69 10 8A 7D E4 2E C4 83 90 28 63 9B B2 3E | ..i..}.....(c..>
+74 FA BA 23 BD 38 38 7E 39 14 B2 88 9F 9E 47 71 | t..#.88~9.....Gq
+4D 8D C2 A6 51 17 A2 4E 39 78 BC 8D BF 5F 99 8E | M...Q..N9x..._..
+82 D5 20 5A 3E FF D2 35 67 3A 07 24 47 75 9F 9E | .. Z>..5g:.$Gu..
+AC BC EE 16 AF C5 29 28 BA ED C8 7B 8B A3 00 D7 | ......)(...{....
+96 61 FA 23 8D 3D 85 8D 50 A1 E7 BD 73 11 8D ED | .a.#.=..P...s...
+2C 4B 5E A7 0B FC 92 7B B8 3B 9A BC 62 51 D5 60 | ,K^....{.;..bQ.`
+1C CD EA 0F 9A 32 86 E0 87 C4 C8 57 1D 3B 05 13 | .....2.....W.;..
+61 F1 D8 96 70 44 05 17 7B 18 2F DA 26 6C AB 67 | a...pD..{./.&l.g
+23 C8 EE 3F C1 CC CA 23 39 9D FA A4 B2 46 34 30 | #..?...#9....F40
+F9 3E D3 AD 7C AE 68 97 28 A0 BF 50 9F 42 12 E2 | .>..|.h.(..P.B..
+A1 40 66 2C DF C8 6E E5 9D D5 57 71 AE 7C A5 27 | .@f,..n...Wq.|.'
+69 74 DE 65 0E DF 18 35 D6 1A 59 AB 11 86 1D 88 | it.e...5..Y.....
+DB DB 64 3F 40 AE 40 10 47 83 7C 4B A1 47 B7 AD | ..d?@.@.G.|K.G..
+6F BE 62 BB 54 5C 53 2E 44 BB 12 23 D1 83 77 F3 | o.b.T\S.D..#..w.
+7B BF D8 A8 7F 5F 75 16 E7 E0 FB CC 0F E8 70 75 | {...._u.......pu
+36 29 C4 95 98 15 D5 C6 E6 32 3E EB 24 BA 14 C5 | 6).......2>.$...
+A8 A4 01 90 33 D4 66 93 92 6A DB C9 9E 2A 61 3B | ....3.f..j...*a;
+9B 36 4E 37 D3 5B 0C 3D D9 F0 1E 10 84 50 80 9A | .6N7.[.=.....P..
+66 AA 3D F5 1B B7 5E FD 1B ED 24 E3 DE 5E 65 C6 | f.=...^...$..^e.
+AA A5 AB 78 A4 D4 94 EB 2D DC 03 0B 95 D6 D4 F9 | ...x....-.......
+A9 AE 43 A8 69 70 77 47 E4 55 1D BE EC 88 D0 32 | ..C.ipwG.U.....2
+EB F5 AC 41 D4 FD E4 EE 49 F4 3A 33 9F 32 BE 02 | ...A....I.:3.2..
+FC 54 C8 34 40 C7 9B 96 6C 58 0E EA 05 6A 96 8F | .T.4@...lX...j..
+04 87 A5 C4 F2 6C C6 1C 30 91 E4 EA 80 91 7A 2E | .....l..0.....z.
+DE 5F 5F B7 DC 2C 59 EA 51 E8 95 E1 16 1A 7C F2 | .__..,Y.Q.....|.
+F8 A5 CE 60 8B 19 BF 7F BE 32 56 CD 0E 7C 64 FF | ...`.....2V..|d.
+70 D4 B6 A0 91 E4 F5 E6 18 72 70 63 10 27 2A 7B | p........rpc.'*{
+45 17 C4 AA DB 24 45 13 2A 20 85 E3 20 F3 42 AC | E....$E.* .. .B.
+E7 11 11 B6 21 78 72 35 CB 41 F0 02 26 38 52 85 | ....!xr5.A..&8R.
+78 B2 09 5F C9 C4 EC F0 CD B9 58 9F 59 20 03 31 | x.._......X.Y .1
+DF C2 C3 B8 B5 20 1B 5D 7A B6 0A A0 7C E3 A5 25 | ..... .]z...|..%
+EA 10 DC 8F 09 E6 02 DD 1B C9 0A 25 F2 03 3A 4C | ...........%..:L
+E8 06 EB 47 7D 9C 02 6E 20 C0 E5 72 0B 94 07 77 | ...G}..n ..r...w
+D4 55 4A DC 6A 96 4F 97 0C 1E 6E 53 01 76 B0 D2 | .UJ.j.O...nS.v..
+3F 1B 40 14 8A 2E 43 C3 B8 CC 72 BB F8 ED 16 2F | ?.@...C...r..../
+EB BD 18 BA 1F 46 BA 57 70 A5 6A 59 5D 79 58 FE | .....F.Wp.jY]yX.
+BA 44 67 E9 38 B1 77 15 21 B7 0A 8D 26 7D 19 DB | .Dg.8.w.!...&}..
+5B D4 F6 E7 8E C3 5E 91 AF F1 2A A3 E6 8C FA 2B | [.....^...*....+
+55 3F B7 30 F4 29 48 2C D0 3B 82 6A E0 3D 28 07 | U?.0.)H,.;.j.=(.
+29 9E 64 BE B4 20 DC A2 B4 E2 E1 5E 15 CC 28 51 | ).d.. .....^..(Q
+FC 0C 19 A1 54 9E BD A5 88 5A C8 61 66 02 5F 73 | ....T....Z.af._s
+CF EC D9 35 4D 75 2B 93 B1 14 C4 A1 C7 24 15 66 | ...5Mu+......$.f
+EB 69 5B 87 B4 92 AA DD 8A 61 FE 88 B2 EF 75 14 | .i[......a....u.
+4F 45 A7 DE AC BF 81 63 2E 60 17 A2 22 26 10 0D | OE.....c.`.."&..
+5A 50 D1 BA 0B 96 13 A1 5D 8B 5E 93 14 8B 11 68 | ZP......].^....h
+A6 0F C0 EC B7 AE 12 49 1C CE 79 14 33 D1 D7 BE | .......I..y.3...
+E2 7C C5 B2 72 3F 22 02 E7 E6 B3 88 8C A9 99 1A | .|..r?".........
+A8 65 03 E9 7B 37 61 12 94 40 89 DF A1 D9 10 48 | .e..{7a..@.....H
+14 98 BA 18 04 54 C3 8C AC E9 1A 5F 01 A2 7D 57 | .....T....._..}W
+21 7A 7E F5 B6 CB 4E D4 8B DF 4E 3F C6 FA FA 4A | !z~...N...N?...J
+C5 E9 7E 5F A5 3B 9A 9D EC F1 88 D0 DE 90 AE F0 | ..~_.;..........
+95 25 10 16 D0 8E A9 0C 0D 32 7A 43 D7 BF BA 8D | .%.......2zC....
+DD 60 66 10 4D 69 94 C9 F2 CF AD EE D8 5B DA FE | .`f.Mi.......[..
+6C 7C A2 5B 5E 9B CC 24 ED 03 14 7D 42 DD F5 1E | l|.[^..$...}B...
+94 A1 47 8E A2 A6 52 B1 29 49 71 4B 22 94 10 FE | ..G...R.)IqK"...
+42 5A F5 78 58 58 A1 DD 2E E6 BA 16 1D DD 75 61 | BZ.xXX........ua
+B4 CB DF A6 31 1F F0 0D 9C 8A AE 5B 9D 51 A8 4E | ....1......[.Q.N
+C8 32 49 C6 AC DB 83 4B 21 23 89 C7 FE 05 70 F7 | .2I....K!#....p.
+CD F5 09 64 03 D4 1E 0D | ...d....
+
+Flow Record:
+ RecordCount = 27
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 5: 1 2 12 15 29
+ size = 1374
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132383300 [2024-04-15 00:06:23.300]
+ last = 1713132383368 [2024-04-15 00:06:23.368]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 65143
+ src tos = 0
+ fwd status = 0
+ in packets = 10
+ in bytes = 4065
+ src addr = 172.217.168.46
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+C8 00 00 00 01 00 08 FB 35 76 79 08 37 B0 41 00 | ........5vy.7.A.
+43 9F E3 60 AA A3 C7 E4 66 E3 57 8A 01 2A F2 C9 | C..`....f.W..*..
+CE DA C1 45 56 47 08 C3 98 0A C2 3C AC DC EF F7 | ...EVG.....<....
+09 09 1A E5 20 F5 7E 1A F2 17 3C BA 59 9C 3D BE | .... .~...<.Y.=.
+B9 A6 65 84 82 F1 7E F0 05 49 04 C1 A6 B9 F9 51 | ..e...~..I.....Q
+24 A1 1B 3C B9 A8 8B A6 FF AD 99 CE CC D0 FF D1 | $..<............
+30 7A 1C 63 45 8D A1 92 C3 53 1C C2 E7 66 8C D1 | 0z.cE....S...f..
+7B 5B 30 5E 8E E7 2F 5E F9 7F 0A 04 7D 72 C2 2A | {[0^../^....}r.*
+7D 15 0A 3B CA E5 5E 28 DC 37 47 43 59 A7 52 C3 | }..;..^(.7GCY.R.
+20 D2 C3 F7 B5 81 98 1E 99 57 EC 67 C1 47 FC 4F | ........W.g.G.O
+D5 53 5C 7A 9C 5D 02 0C B6 AC D1 12 EC FB CD 85 | .S\z.]..........
+BE 23 65 B3 35 4E 1F 19 B4 58 23 EA 8D 73 A5 71 | .#e.5N...X#..s.q
+72 92 41 80 D9 BA CA 53 F4 C5 01 EC CA 3F 08 26 | r.A....S.....?.&
+87 1E 5D 3A E4 FB F1 33 78 6A 2A 54 2D 29 E1 27 | ..]:...3xj*T-).'
+E2 43 11 59 2A 67 63 8C 7B 10 58 CC 47 56 D0 43 | .C.Y*gc.{.X.GV.C
+46 CC 97 84 7A 1E 71 EC 7C 12 3D 2B 59 44 AC C3 | F...z.q.|.=+YD..
+FA D2 F6 73 F9 78 62 5A C8 6C 5A ED 82 BA 54 32 | ...s.xbZ.lZ...T2
+71 F7 A6 04 6E 93 B2 A5 EE 73 D4 CF 79 E9 D2 00 | q...n....s..y...
+16 AB 26 85 AA F8 92 C4 33 3C 8A 21 96 AF A4 84 | ..&.....3<.!....
+10 CE 27 6D 67 DD D5 73 72 71 9A 51 1B 82 59 BF | ..'mg..srq.Q..Y.
+98 D1 D9 D6 ED 43 4C 7E 88 4A A8 31 75 1F BC 10 | .....CL~.J.1u...
+9A 12 1C 47 30 24 94 A7 9D 3A 08 E7 28 E9 55 C2 | ...G0$...:..(.U.
+B7 77 DE 1D 3D 55 66 CF 87 06 6D 6C CF 12 81 C3 | .w..=Uf...ml....
+D1 B2 71 75 A8 08 79 4D AA 0F 57 8E 9F 2E 75 A5 | ..qu..yM..W...u.
+45 DE B2 B3 83 C2 43 46 94 4D 9C 60 DB 1B 77 00 | E.....CF.M.`..w.
+90 18 2B 1C 79 6D 23 EC 3D C5 6A E8 C1 4A 18 FC | ..+.ym#.=.j..J..
+3E 32 FC 81 53 95 5E 2E A7 B0 13 04 37 B2 70 20 | >2..S.^.....7.p
+A5 B4 25 BA 50 B1 96 07 05 2F 73 F9 C1 77 56 9C | ..%.P..../s..wV.
+E0 79 88 5A FB E0 6B D8 4D C3 32 7B CE 67 68 7B | .y.Z..k.M.2{.gh{
+BC 70 D4 78 E4 76 3A 84 16 7C 91 0A A8 67 40 7B | .p.x.v:..|...g@{
+32 F5 D1 4E 26 C8 EA 8E C8 7C 96 36 5A 7A 98 2C | 2..N&....|.6Zz.,
+7A 9C 34 34 BB 7F 9A 87 51 D6 57 4F 57 B4 FB 23 | z.44....Q.WOW..#
+AF FF E7 15 DF 36 EC 0C A5 0E CF 89 1B 27 81 0A | .....6.......'..
+29 48 BA 6A 78 80 B3 8D D6 60 96 BB EB 97 15 A6 | )H.jx....`......
+3F A1 D8 D2 0A 00 11 75 99 6A 97 F5 35 61 E1 48 | ?......u.j..5a.H
+06 73 33 17 AE FE 3E A1 09 9E 6B E0 4B EF 83 21 | .s3...>...k.K..!
+CE 8A 54 7B E7 B2 F8 33 C2 90 4B B2 42 64 B5 F7 | ..T{...3..K.Bd..
+AE B8 88 8C 73 04 EF 56 69 5D 12 50 D1 D3 C5 D2 | ....s..Vi].P....
+14 97 80 6B CD 0B EA B5 10 81 29 DB 51 FA 1B 7F | ...k......).Q...
+04 07 95 8F 01 05 E0 29 DB 3B F4 9E 6C EF D6 4E | .......).;..l..N
+60 2D 5D 47 AF 94 65 DA 16 63 F4 48 04 AF F3 9B | `-]G..e..c.H....
+89 A8 71 5D 5A 46 20 8F 48 BE 83 A1 9C C0 88 A2 | ..q]ZF .H.......
+7E 9A 85 4C 2F 74 DA 2E C1 4D 09 72 A1 FE 97 E1 | ~..L/t...M.r....
+77 9E C9 8C 91 37 AF 1A 62 65 1B 49 71 52 A1 63 | w....7..be.IqR.c
+81 25 46 E1 AF EF 91 9A EE 9C 0F 2D 3D F6 90 CA | .%F........-=...
+E8 64 20 A9 9F F6 AE 19 CD 0D 71 1F 72 9A B1 11 | .d .......q.r...
+1D 2F 59 E3 48 11 7D 33 31 68 75 C4 42 1C 97 BF | ./Y.H.}31hu.B...
+0B C2 FF 43 D1 BE 65 94 EC CD 83 01 97 15 19 73 | ...C..e........s
+40 96 25 AD D9 1E 01 AE 65 FE AB FE 97 94 7B 77 | @.%.....e.....{w
+10 73 66 B8 28 32 D8 CC 23 6E 2A 78 F6 B5 3D F1 | .sf.(2..#n*x..=.
+DF 24 86 52 1C 8C 3F EA 27 67 EA 18 94 A0 25 29 | .$.R..?.'g....%)
+67 84 C4 65 72 4B E6 92 E3 D7 38 59 61 53 80 1F | g..erK....8YaS..
+92 4E A7 5F C5 CF 46 87 5C BC 20 F9 09 75 20 08 | .N._..F.\. ..u .
+39 35 D4 27 3E 39 87 88 6D 99 98 B0 31 7C C7 14 | 95.'>9..m...1|..
+AD 27 83 7A 48 DF 46 96 30 AB B0 0A 59 31 15 58 | .'.zH.F.0...Y1.X
+1A F3 00 3F 31 39 DE 49 AD F8 1F 0F D2 7E 87 12 | ...?19.I.....~..
+65 C1 2A 1A F6 A4 D7 5A 62 FB 7F D8 81 1A CC 35 | e.*....Zb......5
+D9 7E BA DF 94 36 13 E9 E7 4F C6 DF EE B4 97 BA | .~...6...O......
+04 9A 40 A2 CF FF 51 BE D4 5C 2A F6 44 5B 4D 10 | ..@...Q..\*.D[M.
+17 E9 00 00 00 01 00 08 FB 35 76 79 08 37 B0 41 | .........5vy.7.A
+40 E1 A9 5F DA BA 7F D0 47 13 03 C1 B6 A1 EE 7C | @.._....G......|
+67 E1 9E 9C 3B CF 26 9F E0 33 8E 8B DA 54 B5 00 | g...;.&..3...T..
+15 F5 EC 3D A7 1C D5 7D 14 46 3E BD A7 B8 75 27 | ...=...}.F>...u'
+44 51 95 5E A9 AA 7B AC CE 17 F2 14 EC 9D 7C FA | DQ.^..{.......|.
+3F BE A6 2A CC 8E 79 0B CF E9 D8 16 DB D4 5F 28 | ?..*..y......._(
+63 B6 9D 6F 1C B3 3D 05 CB 7B DB 57 63 81 CB 4E | c..o..=..{.Wc..N
+F1 6B D9 F3 52 81 FC 78 1C FB 78 6D 9E 66 2E 7F | .k..R..x..xm.f..
+4C 31 82 19 7E F1 20 51 B2 E7 71 E1 A0 28 6A 12 | L1..~. Q..q..(j.
+CE E9 85 DB 10 F0 27 38 A1 AD FC 71 35 DC 57 B0 | ......'8...q5.W.
+FD 1B 52 F9 F1 60 17 BB AF 85 D0 86 F3 F3 C3 8C | ..R..`..........
+8D C8 C8 91 1D 39 07 4C 96 4A 0D 4E 0C 41 46 9B | .....9.L.J.N.AF.
+26 E2 D2 F3 B9 D4 E9 CD 7F F7 B4 64 B6 A6 A3 4E | &..........d...N
+73 BA 34 07 EC 27 D4 15 D7 4E 00 25 38 5E 77 B9 | s.4..'...N.%8^w.
+0B 8F 34 AB 21 B3 1F 6B 55 9D A4 53 14 04 23 84 | ..4.!..kU..S..#.
+A1 DB BB 5F D1 C7 80 FB 5E 17 80 A1 25 53 DA 83 | ..._....^...%S..
+33 85 65 18 9D BF 6E 56 14 A9 91 92 6B 98 2B 89 | 3.e...nV....k.+.
+40 2A 5D B7 21 64 5B 16 0C 24 36 98 30 2B 71 BA | @*].!d[..$6.0+q.
+75 F6 B5 F9 5D 08 B4 43 05 9F B7 B9 B5 AC 84 78 | u...]..C.......x
+89 F9 | ..
+
+Flow Record:
+ RecordCount = 28
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1580
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131960775 [2024-04-14 23:59:20.775]
+ last = 1713131960918 [2024-04-14 23:59:20.918]
+ received at = 1713132056973 [2024-04-15 00:00:56.973]
+ proto = 6 TCP
+ tcp flags = 0x1a ...AP.S.
+ src port = 443
+ dst port = 51638
+ src tos = 0
+ fwd status = 0
+ in packets = 13
+ in bytes = 6591
+ src addr = 216.239.38.57
+ dst addr = 157.143.34.100
+ out packets = 10
+ out bytes = 2112
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 10.664 ms
+ srv latency = 0.000 ms
+ app latency = 12.179 ms
+ in payload = 1400
+ TLS version = TLS 1.3
+ ja3s hash = eb1d94daa7e0344597e756a1fb6e7054
+ ja4s hash = t130200_1301_234ea6891581
+16 03 03 00 7A 02 00 00 76 03 03 A7 FE FC 65 C2 | ....z...v.....e.
+D4 EC A5 5B 0F 3B D6 ED 7B EA 1B B6 69 00 01 87 | ...[.;..{...i...
+EF 46 59 9E 49 03 98 31 D1 6E 29 20 66 A7 15 FB | .FY.I..1.n) f...
+32 59 A6 6A D1 EA 6A 52 2E 78 D8 6D 5B 5D 1C 54 | 2Y.j..jR.x.m[].T
+66 0D 9A 23 BF CF 20 31 90 CC E4 72 13 01 00 00 | f..#.. 1...r....
+2E 00 33 00 24 00 1D 00 20 A6 15 46 AA B9 60 60 | ..3.$... ..F..``
+0D A7 6B 67 87 07 E5 73 0F 5B 52 EB 29 EE B8 63 | ..kg...s.[R.)..c
+3B B8 18 4D 4E CE 3E E0 05 00 2B 00 02 03 04 14 | ;..MN.>...+.....
+03 03 00 01 01 17 03 03 12 08 17 C6 B3 4B BE 36 | .............K.6
+8E 05 AB 3D CA B2 CD 38 98 09 F4 9C 5B 5D FF 98 | ...=...8....[]..
+CE 16 BD A2 84 FC 66 75 7B F2 21 39 0D B5 FF 9C | ......fu{.!9....
+C7 99 3A C5 7A 5B D5 CD D3 42 79 DF 00 E7 7B 05 | ..:.z[...By...{.
+6F B7 82 86 00 76 8B DF 2B 8A 60 5D E2 C4 4B C6 | o....v..+.`]..K.
+68 18 B4 B2 E5 8A 88 75 5C 77 21 EB 0E 14 A2 1F | h......u\w!.....
+83 AC 2F 7F F4 90 E3 B6 B3 5F 8D 01 CD BE 5D F9 | ../......_....].
+39 C0 78 2A A5 36 8B B1 72 AF 29 DD E1 DE 4F AB | 9.x*.6..r.)...O.
+F3 BC 9D 1B 3F F8 05 83 D6 DF 6C 45 2A 88 99 68 | ....?.....lE*..h
+62 D6 8C C2 4F 23 C3 36 42 AC 2F 5A 54 B3 0C 19 | b...O#.6B./ZT...
+F6 EB AB FE 7B D6 37 F5 FE FD 05 D2 73 29 5A CC | ....{.7.....s)Z.
+0D F9 14 64 9A 6E 10 37 64 84 87 8B C9 34 26 0A | ...d.n.7d....4&.
+A2 DE AF 6E CB 25 EC 79 63 77 38 F3 1A E7 90 23 | ...n.%.ycw8....#
+4A 9C 00 5C 8C F6 91 68 9A 0F E9 65 92 FB A6 F7 | J..\...h...e....
+95 48 1C F7 78 F6 2B 7C FB 5C 70 72 FD 18 58 97 | .H..x.+|.\pr..X.
+D8 92 21 39 A3 53 AB 43 B2 ED E5 96 20 47 5A 88 | ..!9.S.C.... GZ.
+4B 32 BF 77 FA 10 00 66 06 DA 01 9F DB 4E B4 E3 | K2.w...f.....N..
+2C 0A 27 D3 40 1A 52 25 CC B2 AA E4 43 4F 2D D2 | ,.'.@.R%....CO-.
+EF 1A D1 5E 8B D9 27 A0 D8 76 CD 3C 19 7F 6F BA | ...^..'..v.<..o.
+53 58 91 8A DB 99 8B 72 56 1A 18 1E BF 57 A3 5C | SX.....rV....W.\
+44 EC 18 46 32 17 C5 45 6F DB EA ED 4A 4F E3 10 | D..F2..Eo...JO..
+49 9D 92 5B 6E 93 7A 48 14 91 11 10 B3 17 FD 97 | I..[n.zH........
+40 59 35 59 AA 99 EC 3A 2E BD A9 73 36 C1 F3 89 | @Y5Y...:...s6...
+CF 46 1E 9E F4 80 BA 51 11 A3 12 1C 07 9D 7E 4D | .F.....Q......~M
+D1 A4 C3 96 37 72 D9 1B AE 16 19 C1 3F FC 9A 57 | ....7r......?..W
+3A CA 0B B5 C9 6C 42 87 41 3D 83 A4 A7 32 E4 A7 | :....lB.A=...2..
+33 18 41 4F C3 C7 94 BC 9A 92 85 CF 03 EE 55 07 | 3.AO..........U.
+81 69 6E B7 18 5B 68 77 05 51 C9 C6 EB BF 44 5E | .in..[hw.Q....D^
+8D D2 A9 D9 82 97 EB C5 78 F5 55 82 0F 68 1B A3 | ........x.U..h..
+C9 3B 72 44 43 EE 60 30 C3 6D A4 77 0A 53 53 A6 | .;rDC.`0.m.w.SS.
+84 2C 6A 48 D0 D4 D1 33 5B 4A 1B 43 7F 1F 50 5B | .,jH...3[J.C..P[
+81 75 92 C6 2B 72 BE 24 43 43 8E D8 3E 00 98 4C | .u..+r.$CC..>..L
+30 46 BD 5C 78 E3 EC 2E DB 25 8F 12 BA 24 90 DB | 0F.\x....%...$..
+9D 1C 25 07 AC 40 0A 6A DE E2 49 95 69 5E 2C 3B | ..%..@.j..I.i^,;
+C3 A3 C1 94 44 6C 7C 2B F0 1A 2B E1 DE 45 EE 91 | ....Dl|+..+..E..
+43 FB ED 60 3C 20 FD 25 84 11 74 A5 D7 3C 8D C3 | C..`< .%..t..<..
+58 48 A8 40 DE 4A 31 A0 D3 18 57 75 0E 75 5D E7 | XH.@.J1...Wu.u].
+2C BC FF 78 34 9C A6 EB 21 ED BB B1 AE BB E1 C6 | ,..x4...!.......
+4A AC 6D 3E 31 F4 C8 AA ED 92 A0 86 CE DE 0A 9A | J.m>1...........
+F6 DF 07 18 CF 47 7A 26 49 92 D9 80 8C 5C EB 4C | .....Gz&I....\.L
+05 D2 93 43 39 29 29 C8 03 A0 2B 7C 5B 13 B8 50 | ...C9))...+|[..P
+33 82 C0 D5 17 59 5D 6D 0B 39 30 73 2E 9B 05 F2 | 3....Y]m.90s....
+0F B4 FE 2F 2D B8 AA 0F 13 57 11 14 26 10 72 B6 | .../-....W..&.r.
+F4 83 3D E8 54 FB BF 14 69 A6 06 69 5A A9 49 CB | ..=.T...i..iZ.I.
+86 92 A3 30 DB BF D9 6F 87 19 24 2D AF CB 07 58 | ...0...o..$-...X
+1E 69 3B 35 D1 F4 6B C7 70 F1 57 4D 86 A8 BD 01 | .i;5..k.p.WM....
+DA 47 55 F9 0F 27 B6 CE 7C FA C9 D4 C5 C8 A8 12 | .GU..'..|.......
+27 8C EE 4A CE 63 1E DA 62 35 A5 8F 5E DC 88 F1 | '..J.c..b5..^...
+EC 3D 76 8A 20 CA 7A B9 88 DC E9 D1 66 2C 01 1E | .=v. .z.....f,..
+AC 95 79 96 90 E5 83 10 F9 07 35 87 5E 4E 2F B6 | ..y.......5.^N/.
+7F 90 99 53 1C A2 42 FF 32 5C 9B FF DC 2F DA FA | ...S..B.2\.../..
+7E 32 38 2F 29 2B 78 B2 FF A1 E8 1C A1 5C 71 10 | ~28/)+x......\q.
+C5 E5 1E 6B 2A 47 60 9C 0A 4F 0A 3F 21 43 B4 8C | ...k*G`..O.?!C..
+E4 DF 9C 75 FA 7E 5A 8D 39 81 DE 8D 79 B4 41 B6 | ...u.~Z.9...y.A.
+2A 67 F8 01 E4 C8 AC 3A 1C 44 1B B9 1E E0 55 E0 | *g.....:.D....U.
+0C D3 90 55 40 DA 08 1F 3C 14 B7 F1 C9 E7 2C BA | ...U@...<.....,.
+15 5F 9A AD EC 1B 76 CB A0 E2 74 13 38 13 60 76 | ._....v...t.8.`v
+80 47 59 09 12 22 30 B8 B1 78 3B 1F A8 B9 EB AD | .GY.."0..x;.....
+5D 19 C2 6D 8C 41 DB 7C 4F 68 CE BC E3 65 4E 15 | ]..m.A.|Oh...eN.
+16 57 D1 52 55 0F 5D A1 A9 5E 4D 23 92 DF FB 8C | .W.RU.]..^M#....
+15 2F 36 8A 69 41 3D 7D 92 EF AB 0C 30 63 6E 7C | ./6.iA=}....0cn|
+1F 2E 74 70 F7 13 95 0D 8D 24 2E 13 3D 8C 63 E5 | ..tp.....$..=.c.
+30 36 9F 9F 71 B5 1D 83 58 C4 8F A8 9E 21 98 12 | 06..q...X....!..
+98 C3 78 AF 5D B6 C2 B9 16 5A 0D 3C D6 9D E6 97 | ..x.]....Z.<....
+35 A7 B4 79 03 49 EA 91 A4 5C 13 B2 B6 DC 72 B4 | 5..y.I...\....r.
+F9 9F 55 60 7C 46 51 7E 9A 79 85 F3 45 E4 96 5B | ..U`|FQ~.y..E..[
+3B D5 25 FD 52 15 1A 2A C7 A5 95 45 83 19 75 23 | ;.%.R..*...E..u#
+03 E3 66 C0 24 50 3D CA 74 1D C0 92 8F 62 56 06 | ..f.$P=.t....bV.
+99 B8 C3 53 FA 2B 20 98 D0 0D 97 E7 82 EC 60 EA | ...S.+ .......`.
+A9 59 C5 50 A1 ED 81 CD CF 2D E5 A8 E5 EB D2 55 | .Y.P.....-.....U
+B1 DF 7F AD FB 65 A2 55 AC 50 93 38 A4 99 7C 5D | .....e.U.P.8..|]
+DC 7F F1 0C 85 BF 2D 8E C9 CF 4B 8B 35 D7 75 16 | ......-...K.5.u.
+51 BB 39 B2 55 7A 7F 33 28 57 16 0C 59 06 47 31 | Q.9.Uz.3(W..Y.G1
+84 22 69 38 CD 46 32 77 EB 14 C3 7E BE AE 5B 23 | ."i8.F2w...~..[#
+73 E3 CC 2D CB 4E F7 26 6A 66 AA 52 58 96 20 25 | s..-.N.&jf.RX. %
+D1 5F 83 7B EE A4 95 9E 41 78 99 23 17 7C C2 73 | ._.{....Ax.#.|.s
+EE 49 D7 EB 7B FA B2 4F B5 54 13 0D 89 23 3B EB | .I..{..O.T...#;.
+DB 56 A8 10 4B B4 80 0C 74 43 F5 C8 52 47 8A 7E | .V..K...tC..RG.~
+CD 8E F0 00 59 0C 06 C1 D3 C0 C3 22 49 79 46 FB | ....Y......"IyF.
+0D 86 FA F3 67 12 C0 B5 | ....g...
+
+Flow Record:
+ RecordCount = 29
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 5 12 15 29
+ size = 1402
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131960512 [2024-04-14 23:59:20.512]
+ last = 1713131960626 [2024-04-14 23:59:20.626]
+ received at = 1713132056972 [2024-04-15 00:00:56.972]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 59739
+ src tos = 0
+ fwd status = 0
+ in packets = 13
+ in bytes = 4154
+ src addr = 172.217.168.10
+ dst addr = 157.143.34.100
+ out packets = 13
+ out bytes = 4781
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+C1 00 00 00 01 00 08 E2 4A D5 5D 68 47 4A 30 00 | ........J.]hGJ0.
+43 A1 6D B0 33 2E 3F EC 20 2F 13 6E 05 3A 95 A3 | C.m.3.?. /.n.:..
+68 80 F2 D3 25 F7 D2 32 EA 33 9F 90 04 EF 48 54 | h...%..2.3....HT
+54 19 1F 4E E7 DB C9 E6 D2 49 97 EB 76 4C 4C 38 | T..N.....I..vLL8
+56 35 8F 44 B2 E8 6F 76 6D 71 2B F6 12 EE 0B 14 | V5.D..ovmq+.....
+B3 54 8E E7 08 79 0F E5 C5 8A 26 C2 36 95 34 48 | .T...y....&.6.4H
+F3 77 95 DD AF B5 65 E5 0C 1E 39 FA 2B 66 E7 FA | .w....e...9.+f..
+41 D1 F7 1B E0 DE 51 46 63 3B 82 0C 19 69 16 6F | A.....QFc;...i.o
+C1 37 56 B8 FB 9B EB BF 94 18 96 DD AB AA EC CE | .7V.............
+0E D3 5C 4F 1B EB F7 EA 7C 2E 7D CF C2 CE 05 A7 | ..\O....|.}.....
+5B 21 86 12 80 2E A7 01 04 55 F5 9A B3 81 65 61 | [!.......U....ea
+10 86 F6 4F 23 9B 77 F7 CB 7A 50 80 7A 45 64 6A | ...O#.w..zP.zEdj
+D9 40 3E AB 93 69 66 C3 E6 44 3F 36 15 DC 1A 98 | .@>..if..D?6....
+03 86 BF 71 15 96 D4 74 16 87 AC 60 B5 58 69 3B | ...q...t...`.Xi;
+FE 77 E1 F3 CE 68 CF E1 AB 87 8C 7D 1C 21 E9 CF | .w...h.....}.!..
+16 4B 6A B3 1F 50 94 6B 26 3B C2 66 23 82 AD 8D | .Kj..P.k&;.f#...
+0B 47 60 20 8A BD 91 F5 3C F0 65 57 F6 A4 B8 48 | .G` ....<.eW...H
+57 DD 93 2D A1 73 4A A3 64 C5 B9 A6 4E 41 BC 8C | W..-.sJ.d...NA..
+98 47 9D 17 DA 43 DF 47 28 FF B8 FF 8C 05 44 CB | .G...C.G(.....D.
+46 7F 86 BD 64 8C 65 65 96 DA 72 DF 1A E9 61 A4 | F...d.ee..r...a.
+38 26 F2 F4 E5 CE 24 83 B6 3B 4E F6 27 DC C3 96 | 8&....$..;N.'...
+37 4F 3D 06 C5 0E 13 1E A0 FE C2 83 CC A8 C3 D1 | 7O=.............
+7D 18 A6 69 61 BC E4 18 E8 E7 92 96 36 09 2A B1 | }..ia.......6.*.
+B6 BB F3 F1 67 A7 D2 41 2A 29 8E B9 39 54 AA 89 | ....g..A*)..9T..
+01 BF 20 DB 36 A3 7A CB AE 68 BE 14 21 69 AD 3C | .. .6.z..h..!i.<
+6D 73 E9 82 A1 15 B8 FF DF F4 52 BA 30 40 65 3D | ms........R.0@e=
+AF 37 CD 60 5B 4D 49 2E 23 7D 7F 6A FD EF 7A 46 | .7.`[MI.#}.j..zF
+E3 5A 53 66 D7 6E B0 36 68 97 72 3D E1 D9 A6 D5 | .ZSf.n.6h.r=....
+93 E3 A1 D2 2F 9F 74 90 74 EB 30 F7 A2 C2 7B DA | ..../.t.t.0...{.
+30 8A BD FE 95 58 40 98 E8 D8 00 3F 58 53 D9 FE | 0....X@....?XS..
+68 44 F7 9A C8 CB 2A 8C AE 2D 7B E6 0E FD E4 E4 | hD....*..-{.....
+F2 3D 4E 89 61 99 2A D7 B8 B0 79 22 16 A1 6C 75 | .=N.a.*...y"..lu
+07 36 9C DE 9A 3D 8C 3C EB 6D F1 C7 93 C5 F4 BD | .6...=.<.m......
+0E C0 B0 5D 57 CB 41 E4 E9 EA 95 08 4A 47 AA 9F | ...]W.A.....JG..
+22 3E B1 22 7F 0A DD 4E EE 73 93 25 BD 5A BE 2F | ">."...N.s.%.Z./
+94 0A DE 15 C4 62 F1 11 93 50 84 A3 ED 98 FF 06 | .....b...P......
+A3 4F 3D 6D 34 FA 46 46 9A 71 5D 56 16 F2 FE EA | .O=m4.FF.q]V....
+A0 6B 72 C4 94 89 B5 C3 AC 25 86 E9 BC F1 00 B3 | .kr......%......
+71 7E 45 43 11 A3 E7 6B C9 2B A9 14 D1 62 97 0F | q~EC...k.+...b..
+9F FB F2 B6 64 F0 A1 11 FA 02 7D 13 CD D1 75 D0 | ....d.....}...u.
+76 59 CB E5 F5 80 2D 29 C4 79 58 B0 BA BD 27 BB | vY....-).yX...'.
+82 8F E3 F5 2F 4B EC 3E D7 F1 9B B7 A9 5F 4D 89 | ..../K.>....._M.
+90 30 30 F8 2C 86 AF C9 47 D0 D7 8F 88 55 52 79 | .00.,...G....URy
+DB B1 10 B5 62 D4 BC A0 71 6F DD A2 74 A2 C1 5F | ....b...qo..t.._
+AB 37 F3 5F 36 E1 1D CB 0E 54 44 B9 30 69 AA B2 | .7._6....TD.0i..
+32 DF 01 CA 77 24 1A 27 67 C6 E0 69 B5 7F 3D 56 | 2...w$.'g..i..=V
+9A 9C 3D 71 74 AF 18 8E 1C 2E BD 41 4C 70 33 FC | ..=qt......ALp3.
+B6 B3 2A D2 6D 91 02 EA D1 CE 40 D7 C0 44 A4 45 | ..*.m.....@..D.E
+0F FB 14 9D AF DD CD 64 AE 3B A2 28 BD A8 62 AF | .......d.;.(..b.
+F1 C7 31 5E 86 32 D4 D3 F8 4E 41 A9 5D 24 85 69 | ..1^.2...NA.]$.i
+E9 E5 A0 F6 06 49 DD 60 7B F9 D6 2A 2E 55 C6 83 | .....I.`{..*.U..
+C1 D7 70 CF EF 9D 9B 73 F4 50 0F 72 64 3B C5 E2 | ..p....s.P.rd;..
+4A 76 03 37 EF 82 B2 4D E2 02 50 30 61 1F E2 63 | Jv.7...M..P0a..c
+97 E3 7E 7D 86 C8 0C 44 73 32 F7 D3 2E 6D 09 A5 | ..~}...Ds2...m..
+86 AF 04 52 8B 0A CB B5 6E 6F 0B EB C8 C9 5F 36 | ...R....no...._6
+0C EE 1C CE BB 10 E7 DE F6 6B 7B E2 B4 2C BA 5A | .........k{..,.Z
+A8 B7 34 04 E5 BF 77 EE 63 15 D8 5B 90 18 BC 20 | ..4...w.c..[...
+4B 9D 9F 0A 4B C6 AE 77 10 8B 8D DC 01 91 38 A4 | K...K..w......8.
+67 96 82 0E BE 11 34 AB 22 44 96 C2 1C 36 FE 65 | g.....4."D...6.e
+9E B0 BA E4 00 00 00 01 00 08 E2 4A D5 5D 68 47 | ...........J.]hG
+4A 30 40 DA FA C4 3A 2A 2F 11 32 67 87 91 9A 31 | J0@...:*/.2g...1
+E3 DF 1B 5A 37 DF CA 72 49 B2 24 1C 17 DB 86 0C | ...Z7..rI.$.....
+0B B1 90 D3 EE 70 37 BC 2D 40 5A 82 74 F0 B6 B1 | .....p7.-@Z.t...
+5C BD F6 DF 0E 8B FA 08 14 F3 EA 7C EA CA 98 87 | \..........|....
+2B 5B 72 61 84 B8 7D A7 05 14 20 AE A3 80 D4 2F | +[ra..}... ..../
+58 C6 1C FA ED A9 25 08 C0 97 78 EB C6 A3 A0 34 | X.....%...x....4
+D5 4D FF FD F7 81 6B 40 44 7F 22 14 84 3D D0 C3 | .M....k@D."..=..
+35 D8 62 CF 20 1C E0 5F 69 1D 68 ED 01 95 1B 71 | 5.b. .._i.h....q
+79 72 AC 76 BD 86 D6 1A 4B 3A 9C 61 69 51 20 04 | yr.v....K:.aiQ .
+B6 2B 74 B0 C5 16 E8 77 A9 F9 C9 FF 0C AF 03 2F | .+t....w......./
+54 99 A7 E6 88 3D A5 BC 39 E1 A4 30 3E 82 06 69 | T....=..9..0>..i
+D1 8A 5D 82 72 8D 1D 86 DD CF 28 E2 3A D0 C1 1D | ..].r.....(.:...
+6E 3E 88 C1 B4 7F 58 F7 C9 BA 27 BC 10 9D 0E 5F | n>....X...'...._
+BF FD E8 34 E2 96 D5 E1 2D AB FB 04 A3 C3 4A 29 | ...4....-.....J)
+92 CD 7E 65 E0 EF A4 59 B7 E6 F5 94 98 FD 13 D2 | ..~e...Y........
+7E 36 57 73 5A C1 67 8B D1 AB 3B B9 94 4B 23 BC | ~6WsZ.g...;..K#.
+F2 A4 3C 2D 46 F2 E5 F0 97 4D 3A 65 43 61 71 57 | ..<-F....M:eCaqW
+1B 9E FA 84 DE 77 9B 89 72 55 05 3B 60 6B 32 D1 | .....w..rU.;`k2.
+88 DA | ..
+
+Flow Record:
+ RecordCount = 30
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132277438 [2024-04-15 00:04:37.438]
+ last = 1713132308081 [2024-04-15 00:05:08.081]
+ received at = 1713132377066 [2024-04-15 00:06:17.066]
+ proto = 6 TCP
+ tcp flags = 0x5f .E.APRSF
+ src port = 443
+ dst port = 61655
+ src tos = 0
+ fwd status = 0
+ in packets = 20
+ in bytes = 16585
+ src addr = 17.171.47.23
+ dst addr = 157.143.34.100
+ out packets = 15
+ out bytes = 3579
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 115.517 ms
+ srv latency = 0.000 ms
+ app latency = 2.904 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 5d79edf64e03689ff559a54e9d9487bc
+ ja4s hash = t130500_c02f_8763c20bf469
+16 03 03 00 70 02 00 00 6C 03 03 2B 8C B3 98 F0 | ....p...l..+....
+55 62 49 37 D3 80 56 50 51 6D E9 6B DF B1 58 8A | UbI7..VPQm.k..X.
+B3 11 BC 56 2F 13 25 77 71 FD 72 20 DC 64 15 78 | ...V/.%wq.r .d.x
+F4 1F A0 B9 B4 CB A6 01 29 4D 0A AB A7 00 00 F7 | ........)M......
+23 F9 D1 BE A4 14 72 D7 5E 4D A2 63 C0 2F 00 00 | #.....r.^M.c./..
+24 FF 01 00 01 00 00 00 00 00 00 0B 00 04 03 00 | $...............
+01 02 00 10 00 0B 00 09 08 68 74 74 70 2F 31 2E | .........http/1.
+31 00 17 00 00 16 03 03 0D 46 0B 00 0D 42 00 0D | 1........F...B..
+3F 00 04 7B 30 82 04 77 30 82 03 5F A0 03 02 01 | ?..{0..w0.._....
+02 02 10 1F 8A 57 19 C7 FB 1A 8B 00 EC 11 F7 D8 | .....W..........
+4E 86 86 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B | N..0...*.H......
+05 00 30 6D 31 27 30 25 06 03 55 04 03 0C 1E 41 | ..0m1'0%..U....A
+70 70 6C 65 20 53 65 72 76 65 72 20 41 75 74 68 | pple Server Auth
+65 6E 74 69 63 61 74 69 6F 6E 20 43 41 31 20 30 | entication CA1 0
+1E 06 03 55 04 0B 0C 17 43 65 72 74 69 66 69 63 | ...U....Certific
+61 74 69 6F 6E 20 41 75 74 68 6F 72 69 74 79 31 | ation Authority1
+13 30 11 06 03 55 04 0A 0C 0A 41 70 70 6C 65 20 | .0...U....Apple
+49 6E 63 2E 31 0B 30 09 06 03 55 04 06 13 02 55 | Inc.1.0...U....U
+53 30 1E 17 0D 32 33 30 39 31 34 32 32 35 30 34 | S0...23091422504
+35 5A 17 0D 32 34 31 30 31 33 32 32 35 30 34 34 | 5Z..241013225044
+5A 30 50 31 17 30 15 06 03 55 04 03 0C 0E 67 64 | Z0P1.0...U....gd
+6D 66 2E 61 70 70 6C 65 2E 63 6F 6D 31 13 30 11 | mf.apple.com1.0.
+06 03 55 04 0A 0C 0A 41 70 70 6C 65 20 49 6E 63 | ..U....Apple Inc
+2E 31 13 30 11 06 03 55 04 08 0C 0A 43 61 6C 69 | .1.0...U....Cali
+66 6F 72 6E 69 61 31 0B 30 09 06 03 55 04 06 13 | fornia1.0...U...
+02 55 53 30 82 01 22 30 0D 06 09 2A 86 48 86 F7 | .US0.."0...*.H..
+0D 01 01 01 05 00 03 82 01 0F 00 30 82 01 0A 02 | ...........0....
+82 01 01 00 D6 1D EE 94 DD 1F BD A5 B9 50 0B C1 | .............P..
+7D 65 07 B0 65 A8 46 3D 20 5D DB 39 BE F8 4F 23 | }e..e.F= ].9..O#
+30 C9 15 55 DD BA 4B 21 53 BD 58 65 ED BF 57 00 | 0..U..K!S.Xe..W.
+D6 06 99 86 AC 7A 6A 7B F3 73 25 BC B0 86 2B A2 | .....zj{.s%...+.
+C7 9D D0 18 72 50 9D 79 77 82 D6 E1 12 04 54 3E | ....rP.yw.....T>
+06 57 EE 60 2C AC 13 D0 8E A6 A5 4E CC 44 B1 6D | .W.`,......N.D.m
+9F 59 43 57 C4 75 3B 1A 32 4C 17 1D A2 DD 65 3A | .YCW.u;.2L....e:
+3E 69 E3 F8 9E E6 D7 57 9E 75 8F 0B 98 84 C3 F6 | >i.....W.u......
+71 6F 63 5C AE 7E 21 5A 6E 87 B1 69 AE 8F E9 5D | qoc\.~!Zn..i...]
+E8 10 4E E2 81 0D 8E 30 33 E1 FD 27 BC BA 11 1B | ..N....03..'....
+F4 2E 19 94 01 E6 41 34 AD 82 42 8D 8E 0C 34 11 | ......A4..B...4.
+49 62 67 4B A9 03 49 B1 EA 36 FA A3 84 C0 E7 9F | IbgK..I..6......
+E2 04 59 17 9F 81 2A 6A D7 88 23 02 0D C4 A3 7A | ..Y...*j..#....z
+50 6C 69 D2 5A 7E 5C 80 51 63 A8 EF 5B C4 8D C4 | Pli.Z~\.Qc..[...
+27 5A 79 F7 60 61 80 6E BA 6A 67 1D D5 6F 3B D1 | 'Zy.`a.n.jg..o;.
+89 6E 5A DB 30 89 8F CB 57 B5 87 5E F3 11 DC E0 | .nZ.0...W..^....
+56 70 A2 B7 02 03 01 00 01 A3 82 01 2E 30 82 01 | Vp...........0..
+2A 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 30 | *0...U.......0.0
+1F 06 03 55 1D 23 04 18 30 16 80 14 2C C5 6D 52 | ...U.#..0...,.mR
+DD 31 EF 8C EC 08 81 ED DF DC CA 43 00 45 01 D0 | .1.........C.E..
+30 4A 06 08 2B 06 01 05 05 07 01 01 04 3E 30 3C | 0J..+........>0<
+30 3A 06 08 2B 06 01 05 05 07 30 01 86 2E 68 74 | 0:..+.....0...ht
+74 70 3A 2F 2F 6F 63 73 70 2E 61 70 70 6C 65 2E | tp://ocsp.apple.
+63 6F 6D 2F 6F 63 73 70 30 33 2D 61 70 70 6C 65 | com/ocsp03-apple
+73 65 72 76 65 72 61 75 74 68 31 32 30 19 06 03 | serverauth120...
+55 1D 11 04 12 30 10 82 0E 67 64 6D 66 2E 61 70 | U....0...gdmf.ap
+70 6C 65 2E 63 6F 6D 30 13 06 03 55 1D 25 04 0C | ple.com0...U.%..
+30 0A 06 08 2B 06 01 05 05 07 03 01 30 3C 06 03 | 0...+.......0<..
+55 1D 1F 04 35 30 33 30 31 A0 2F A0 2D 86 2B 68 | U...50301./.-.+h
+74 74 70 3A 2F 2F 63 72 6C 2E 61 70 70 6C 65 2E | ttp://crl.apple.
+63 6F 6D 2F 61 70 70 6C 65 73 65 72 76 65 72 61 | com/appleservera
+75 74 68 63 61 31 2E 63 72 6C 30 1D 06 03 55 1D | uthca1.crl0...U.
+0E 04 16 04 14 20 4F CC B0 7C 3F 01 EE 1B 7F 56 | ..... O..|?....V
+F1 56 D1 59 87 9B EF 49 F6 30 0E 06 03 55 1D 0F | .V.Y...I.0...U..
+01 01 FF 04 04 03 02 05 A0 30 10 06 0A 2A 86 48 | .........0...*.H
+86 F7 63 64 06 1B 10 04 02 05 00 30 0D 06 09 2A | ..cd.......0...*
+86 48 86 F7 0D 01 01 0B 05 00 03 82 01 01 00 28 | .H.............(
+B1 4E E7 5B 95 BC 2A F1 18 22 AA 80 2E B7 B7 B4 | .N.[..*.."......
+18 44 F5 8C 37 7D 5D 04 D5 C8 8C 77 C6 17 1E 00 | .D..7}]....w....
+95 DE 8D D5 8F 6B EB E2 58 39 93 8A B9 EC F7 20 | .....k..X9.....
+91 99 C9 F6 84 36 1C 13 2B C7 DB 1B 1A EB 75 D2 | .....6..+.....u.
+CF A2 3C 28 43 71 41 1F 53 38 30 96 54 E0 89 C5 | ..<(CqA.S80.T...
+0D D4 D0 7D B3 37 DC 09 2E 9A 47 1F 1C B5 51 F4 | ...}.7....G...Q.
+BB F5 A4 1A 1F 3B 09 07 FB 5E B6 CB 18 78 0D 8E | .....;...^...x..
+5E EE 9E 24 9B 94 4A DE C7 D8 59 0A 24 B2 2E 06 | ^..$..J...Y.$...
+FF DB 26 A3 EF AE 56 FC 32 54 60 6A 0B F5 EC 5A | ..&...V.2T`j...Z
+58 44 65 3B 05 F6 9C B2 0B 62 82 4B 09 A7 CC 1B | XDe;.....b.K....
+EA 1B 9B 6F 55 0A 30 CE B6 D4 68 02 78 33 05 3C | ...oU.0...h.x3.<
+FB 47 88 96 E8 0D 87 D1 73 78 B0 4E 40 B5 0F 0C | .G......sx.N@...
+B1 D4 51 B9 25 1D 55 3C D3 71 73 72 F5 FB 81 D4 | ..Q.%.U<.qsr....
+20 AA C0 6F 91 07 9C 67 22 57 FB 2A FD F7 A5 F4 | ..o...g"W.*....
+C2 C9 8D FF 02 8B 45 EA 3E AD 4F EC 83 A5 F2 F4 | ......E.>.O.....
+F7 18 3D 3E 27 5C 6B 9C B7 3E 90 7E 2D F1 1D 00 | ..=>'\k..>.~-...
+03 FC 30 82 03 F8 30 82 02 E0 A0 03 02 01 02 02 | ..0...0.........
+08 23 69 74 04 AD CB 83 14 30 0D 06 09 2A 86 48 | .#it.....0...*.H
+86 F7 0D 01 01 0B 05 00 30 62 31 0B 30 09 06 03 | ........0b1.0...
+55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 0A | U....US1.0...U..
+13 0A 41 70 70 6C 65 20 49 6E 63 2E 31 26 30 24 | ..Apple Inc.1&0$
+06 03 55 04 0B 13 1D 41 70 70 6C 65 20 43 65 72 | ..U....Apple Cer
+74 69 66 69 63 61 74 69 6F 6E 20 41 75 74 68 6F | tification Autho
+72 69 74 79 31 16 30 14 06 03 55 04 03 13 0D 41 | rity1.0...U....A
+70 70 6C 65 20 52 6F 6F 74 20 43 41 30 1E 17 0D | pple Root CA0...
+31 34 30 33 30 38 30 31 35 33 30 34 5A 17 0D 32 | 140308015304Z..2
+39 30 33 30 38 30 31 35 | 90308015
+
+Flow Record:
+ RecordCount = 31
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 215
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131712553 [2024-04-14 23:55:12.553]
+ last = 1713131901997 [2024-04-14 23:58:21.997]
+ received at = 1713132000887 [2024-04-15 00:00:00.887]
+ proto = 6 TCP
+ tcp flags = 0x19 ...AP..F
+ src port = 8822
+ dst port = 28919
+ src tos = 0
+ fwd status = 0
+ in packets = 77363
+ in bytes = 4356041
+ src addr = 157.143.34.100
+ dst addr = 213.144.148.130
+ out packets = 114757
+ out bytes = 160882567
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.939 ms
+ srv latency = 0.000 ms
+ app latency = 6.125 ms
+ in payload = 35
+17 03 03 00 1E 26 63 BD 98 5C E1 DD 35 E9 83 17 | .....&c..\..5...
+5A A1 96 8E 7D 2D 03 A5 84 00 67 16 BF A6 85 D3 | Z...}-....g.....
+B5 F7 3F | ..?
+
+Flow Record:
+ RecordCount = 32
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 5: 1 2 12 15 29
+ size = 1374
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132382149 [2024-04-15 00:06:22.149]
+ last = 1713132382250 [2024-04-15 00:06:22.250]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 51648
+ src tos = 0
+ fwd status = 0
+ in packets = 13
+ in bytes = 7924
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+CD 00 00 00 01 00 08 F8 66 9D D0 4F F4 18 10 00 | ........f..O....
+44 D0 54 94 A0 D1 83 4F 1A DE 52 00 F1 E6 1A 7E | D.T....O..R....~
+69 D7 B5 FE 82 DA 34 17 90 B4 FD 85 43 19 97 A1 | i.....4.....C...
+B3 B6 F7 77 44 FF A4 AA F8 5A 45 5D C4 B3 EE 4B | ...wD....ZE]...K
+78 6B 76 7E 29 62 C3 33 26 6D E6 52 A7 78 2B 92 | xkv~)b.3&m.R.x+.
+B9 17 97 8A A0 B4 C5 04 8E E7 B1 CB A7 20 E3 82 | ............. ..
+9C 9B 67 6D B8 CC DA F5 C4 C9 D5 91 8E 12 AE 55 | ..gm...........U
+B0 ED 73 AA 14 A1 5D 4A CB 7B A2 06 3D 1A 33 80 | ..s...]J.{..=.3.
+A0 30 7C 08 DA 21 25 E4 21 54 D7 9F 00 FD 19 2F | .0|..!%.!T...../
+C6 71 C3 6F 50 B4 0E 02 64 11 A6 67 E7 71 94 01 | .q.oP...d..g.q..
+A9 41 96 D7 F0 F1 D2 EA D5 6B 68 A2 99 BC BD 7C | .A.......kh....|
+4B 24 C2 A8 0B 81 B6 99 6F 41 D7 78 16 AE 46 F3 | K$......oA.x..F.
+AC 6D 73 07 DD 49 CF 01 DB C7 DD CE 6E 2F 74 81 | .ms..I......n/t.
+83 08 69 D1 06 3E B4 05 6B E0 65 15 30 C9 5B F1 | ..i..>..k.e.0.[.
+92 40 45 E1 79 3D 00 46 60 67 41 1E D6 6F AC D5 | .@E.y=.F`gA..o..
+99 24 C5 9A F0 C9 26 ED 40 D4 8A 2C 9C 9B 21 A7 | .$....&.@..,..!.
+DA 49 EB 31 80 3D 5D F8 B0 1B AA 47 4A 41 D6 EC | .I.1.=]....GJA..
+F4 7F D6 C4 D5 BD BB 12 68 BA C3 54 04 56 8B 3A | ........h..T.V.:
+8B 40 B1 7F DA C2 78 CE 4E 35 FE C3 F5 F8 A0 C4 | .@....x.N5......
+23 55 4C 05 6C 66 A1 27 10 32 A0 A1 66 2C BF B2 | #UL.lf.'.2..f,..
+C8 46 3D 76 0F 28 1D B1 77 E9 8E C9 46 33 3C 9B | .F=v.(..w...F3<.
+16 F3 85 0F 87 21 05 55 05 2C E4 EA 47 6D 73 81 | .....!.U.,..Gms.
+5D F1 F3 59 DF 48 49 CE 5F 14 89 D7 9F A2 11 93 | ]..Y.HI._.......
+49 8C 62 F4 FB F0 42 10 A4 79 C4 0D DC 65 F4 0A | I.b...B..y...e..
+BC 2F B0 5F 51 1E D1 02 C2 43 54 87 E2 AB F1 E0 | ./._Q....CT.....
+84 E2 78 2C 5C 1A 50 5A 93 50 B2 F2 1C 78 92 E4 | ..x,\.PZ.P...x..
+59 C2 63 64 BA E8 BD 93 2D 16 C3 62 BB 77 E5 C4 | Y.cd....-..b.w..
+88 5F B1 77 8C DE 7E 98 F0 48 D0 ED 01 D3 52 90 | ._.w..~..H....R.
+2E 5E DA AD 6F 4A 4E EB 99 9B DB 7B AB BB C0 EF | .^..oJN....{....
+A6 66 6A D7 C9 7C 44 D3 8D 6F 94 87 38 11 FA 0A | .fj..|D..o..8...
+46 69 05 3F 25 C1 D8 4F 55 BA 32 8C B0 B2 D2 EB | Fi.?%..OU.2.....
+E6 A6 7D 94 3A 10 96 8A EB 5B 5A 05 3E 04 C0 F5 | ..}.:....[Z.>...
+72 75 74 BD D1 A3 68 2C 0C 65 A9 39 2E 8A 18 D5 | rut...h,.e.9....
+30 B1 9E F0 25 AB 4F C1 B3 75 1A 0B DE 7C 2B 0F | 0...%.O..u...|+.
+66 66 4A 59 B1 4C 84 1D 56 B2 82 42 37 4B B5 33 | ffJY.L..V..B7K.3
+76 44 62 86 3D 3D 9C 6B 48 A8 0B 2E BB 72 DB 53 | vDb.==.kH....r.S
+09 1D DB 34 21 5A 47 51 5F 65 94 3E E3 A3 BB 84 | ...4!ZGQ_e.>....
+57 23 67 EF 87 49 CD 3B 64 92 51 D1 04 68 CD AF | W#g..I.;d.Q..h..
+A8 85 D2 10 A9 24 52 AE 00 1E F8 AD BF DD 38 2C | .....$R.......8,
+56 F1 6A A3 AA 33 0F AA 09 8D 51 56 7A 43 E1 F3 | V.j..3....QVzC..
+E5 BA 57 46 D6 50 A0 E1 71 E2 9A EE EF B7 A4 BD | ..WF.P..q.......
+93 DD FE 49 F2 DE BF AE A4 B1 FD F8 20 B7 B6 67 | ...I........ ..g
+24 27 DB 0E FD 20 6A 2E 9A CA E9 C4 C1 50 DE D8 | $'... j......P..
+96 72 5A AF 9A D3 B4 A3 D5 BF 3E 99 E0 19 96 B4 | .rZ.......>.....
+A2 CA BB 67 ED B6 B5 E7 32 F2 FD F8 1A 69 F3 24 | ...g....2....i.$
+60 45 E3 D0 0F 40 AC E7 6A 9D EE AF 4D C0 92 85 | `E...@..j...M...
+10 76 44 EC 0F 61 B9 8A C6 65 C3 AA 13 64 B9 B4 | .vD..a...e...d..
+80 63 67 A8 AD 00 81 60 2F 85 63 75 BD 4F 93 23 | .cg....`/.cu.O.#
+8A EC B5 CD 0D BB 0B 1D 46 D2 A0 44 DF 5D 0F C7 | ........F..D.]..
+59 A1 D8 A6 5C B9 AB 1E FC F9 C3 5A 20 47 C9 1D | Y...\......Z G..
+7C 25 25 9D FF 00 9A 50 55 B0 A6 13 2C EF 13 DF | |%%....PU...,...
+13 1F 19 9F B6 22 DB 51 CB 35 7F D9 FA 61 55 B3 | .....".Q.5...aU.
+60 88 F1 47 00 91 80 5F E1 50 43 4A 97 0B 5B E4 | `..G..._.PCJ..[.
+F0 73 2D 48 B9 49 3D C6 BF 7D A1 49 8F F7 C1 7E | .s-H.I=..}.I...~
+4C 2E B8 D1 0D 5C 3F B5 FD CD AA 70 55 22 9B AA | L....\?....pU"..
+43 C5 3C DB 82 DB D1 61 90 CD 15 7C AE 99 00 9A | C.<....a...|....
+E7 33 91 D0 22 92 DB 97 FE 12 86 78 4A E3 6E B9 | .3.."......xJ.n.
+4C 11 33 CD 3C EC 22 4A AB 4E A3 01 F6 8F 6A 6D | L.3.<."J.N....jm
+B6 25 62 7D E5 56 0A 60 F3 E6 F2 74 CC E3 32 13 | .%b}.V.`...t..2.
+31 85 51 4E E8 4E 56 91 34 D6 EA 8B 89 32 16 1E | 1.QN.NV.4....2..
+21 5E DA FC 8E F0 CF 60 7E CA 3C 90 93 32 32 C9 | !^.....`~.<..22.
+94 61 3F B4 F5 15 9B C2 50 23 FB 7C AD 61 E3 C7 | .a?.....P#.|.a..
+CA 7C 39 AC 41 8B 3D 40 44 8B F6 74 21 C3 76 61 | .|9.A.=@D..t!.va
+83 2C 0A F0 45 E7 65 A9 35 D2 C2 1E 4C A9 3E 04 | .,..E.e.5...L.>.
+D1 DE A1 55 EE 84 9A 95 F7 27 54 FB D6 33 F7 09 | ...U.....'T..3..
+7C F4 78 83 BE 33 B2 0D F8 DE EA 91 5A A7 F4 0B | |.x..3......Z...
+EB FD 26 7B 4F A8 8D 08 AA 47 B6 94 F7 A3 13 EA | ..&{O....G......
+51 4F 84 66 68 9A F8 A4 F2 84 2B A8 94 25 CC B9 | QO.fh.....+..%..
+DA 8E 1E B2 7A 96 B5 3F EC 20 6C 97 55 C9 12 9C | ....z..?. l.U...
+8A D4 10 9B 12 6B 50 AD 84 5E 0F A8 D9 0D 6A C1 | .....kP..^....j.
+8A 59 22 AB BB 89 88 0D 4B EC 06 80 2A CA 96 8A | .Y".....K...*...
+B8 28 3D 68 34 9E 44 EA 8D 03 FA 17 A4 77 4F 5A | .(=h4.D......wOZ
+C0 2B 03 40 43 58 4D 25 E5 07 6D 11 37 42 9A 67 | .+.@CXM%..m.7B.g
+5F AF 09 6D 6A 7B 26 10 53 91 54 EF 75 E5 C6 CE | _..mj{&.S.T.u...
+57 9F 2D 77 87 17 21 12 76 45 26 4A ED 9A D6 46 | W.-w..!.vE&J...F
+96 8F 4E DB 8D A3 91 53 AA DD 42 10 B2 32 5F 30 | ..N....S..B..2_0
+A6 7A 8B 3E 89 F7 99 21 53 D3 B1 C4 89 51 A8 21 | .z.>...!S....Q.!
+2D 4C 4E B9 DF 25 41 F0 28 AD 18 C2 67 82 84 A4 | -LN..%A.(...g...
+7F 91 | ..
+
+Flow Record:
+ RecordCount = 33
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 5: 1 2 12 15 29
+ size = 1374
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132382156 [2024-04-15 00:06:22.156]
+ last = 1713132382236 [2024-04-15 00:06:22.236]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 62094
+ src tos = 0
+ fwd status = 0
+ in packets = 11
+ in bytes = 4235
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+CF 00 00 00 01 00 08 F7 3F ED 54 B4 25 50 4F 00 | ........?.T.%PO.
+43 9E B2 C8 9C D7 1F 54 E4 35 8A 0A 3F 98 2C 17 | C......T.5..?.,.
+86 05 50 C3 82 14 9B 6C 75 F3 F8 CC 32 7B BB 2C | ..P....lu...2{.,
+0F 78 72 56 AA E1 9C FC 99 04 50 2D 06 B6 21 32 | .xrV......P-..!2
+44 C4 23 8E A0 C6 35 CB C8 EB AC E8 99 DB 60 FE | D.#...5.......`.
+A1 43 B5 61 DD 52 F9 C5 2C C5 74 8F CA 04 34 B6 | .C.a.R..,.t...4.
+41 82 F9 5E 47 FF DB 57 C2 D4 AC 00 76 26 02 7E | A..^G..W....v&.~
+C6 56 40 67 35 CD 46 27 0C 37 A0 A3 D6 E7 20 A9 | .V@g5.F'.7.... .
+22 82 0E 15 49 C5 D6 1D A2 1E D5 FC B9 07 F6 DF | "...I...........
+25 9A 41 7B 36 CE 7A EC D1 82 E1 61 17 16 63 7C | %.A{6.z....a..c|
+6F 37 11 7A 7C A1 C9 FC 80 DC 70 60 E7 90 36 E6 | o7.z|.....p`..6.
+CF 0A 1D 46 BF 2E 7B 78 4F 35 7D 8E CC 6C 09 71 | ...F..{xO5}..l.q
+93 0D F7 E4 C0 89 24 FF 6E 29 02 D5 89 45 E5 42 | ......$.n)...E.B
+F2 E5 18 8D 27 42 75 7A BD C2 D2 AF F4 F4 79 B2 | ....'Buz......y.
+43 1F 6C F0 B6 0A 88 6F 96 93 1D 4E F1 6A 42 04 | C.l....o...N.jB.
+63 F6 FF 69 73 03 75 15 44 26 98 CD 75 8F 99 89 | c..is.u.D&..u...
+78 85 06 F4 70 78 B8 24 A9 A8 D7 6D 06 63 E5 BC | x...px.$...m.c..
+CA 39 E9 F9 DB 5C 30 DC E6 A4 C3 60 18 4B 1F 4A | .9...\0....`.K.J
+C6 A8 02 DD 46 90 CB 6C A9 28 A4 ED 25 15 56 81 | ....F..l.(..%.V.
+65 C3 F6 64 84 E9 FA 36 1E F3 72 25 99 BD 27 92 | e..d...6..r%..'.
+AF 9C 3B 1F 26 F3 5F 3A 48 CE D5 8A 9E 54 91 B0 | ..;.&._:H....T..
+88 1F 74 08 F9 EA 0D 67 58 D5 1F B1 FD 1B 55 2D | ..t....gX.....U-
+35 5B 40 A4 8E C5 9D B3 1E 6D BA 15 77 71 8B 50 | 5[@......m..wq.P
+72 82 56 67 26 7E 38 72 21 DF F9 C4 AF BC 84 DC | r.Vg&~8r!.......
+61 88 84 6F 21 37 4A 23 86 48 C6 E5 85 5D C8 90 | a..o!7J#.H...]..
+FD 9B E1 98 8E A8 0B A6 73 C2 BF 5A 2B 60 B7 DF | ........s..Z+`..
+29 01 F8 3B 7A 11 A6 AE 89 D1 F7 9B 35 27 D3 2E | )..;z.......5'..
+DD 18 13 7E 57 FF CC 5F 0D 8D B5 70 BB AF E5 24 | ...~W.._...p...$
+81 69 72 9B 4A 64 1E 48 CE F1 62 7A F1 9B 9D 80 | .ir.Jd.H..bz....
+10 1F 50 FE 23 1B 56 0F 78 E4 7F 21 9D 82 55 94 | ..P.#.V.x..!..U.
+35 CF CA 72 39 31 69 CA 79 71 3E 32 7E B1 6A 89 | 5..r91i.yq>2~.j.
+EC 90 3D 04 1D 14 D8 6F 7B 6B DB 91 00 7C A3 64 | ..=....o{k...|.d
+7C 63 12 15 9D 54 6F B4 F3 7F 7E C2 0E 9D 13 16 | |c...To...~.....
+58 B9 D2 6C 2D 24 92 0C FC 4A 86 AA 4F 10 D1 3E | X..l-$...J..O..>
+2E 59 A0 C7 51 9A 13 78 02 80 06 7F E1 C4 ED 7A | .Y..Q..x.......z
+F7 21 27 A8 97 67 A6 B3 83 51 04 8D 59 15 76 D4 | .!'..g...Q..Y.v.
+38 A8 A2 60 B6 A1 5A F1 D9 80 93 B9 C6 AE 67 F1 | 8..`..Z.......g.
+B1 FC 81 DC A8 65 9A D3 62 D9 8F A9 F7 9C 3D 38 | .....e..b.....=8
+F0 B4 A2 4E 2E 89 26 A6 9F D9 13 E7 7E 6D 27 DD | ...N..&.....~m'.
+D5 F0 07 2C B6 E2 90 27 14 D8 CC 95 74 75 20 A0 | ...,...'....tu .
+77 AD 92 9B A1 9B DF 1C 00 E1 C1 2C EF F0 13 CB | w..........,....
+C0 92 F5 2E 35 8E 59 23 7F 6C B0 53 9C 50 FB DA | ....5.Y#.l.S.P..
+0F 4B 69 B7 43 D6 9D 8A ED 03 25 3C E1 23 E1 3E | .Ki.C.....%<.#.>
+97 AD AD 23 68 37 94 BB 76 54 63 55 B2 D9 A2 59 | ...#h7..vTcU...Y
+A6 FC 1E 40 4A C9 38 B5 ED 04 F8 CC 72 15 6D A9 | ...@J.8.....r.m.
+6B ED D3 87 6C 19 5C 81 D1 6F DB 9A 3E 11 FF F8 | k...l.\..o..>...
+B3 B1 D7 E5 0B 83 76 EA 2C 7E 17 51 0F 72 0A 60 | ......v.,~.Q.r.`
+D2 61 F8 A1 32 48 7F 9F F0 2B E2 5C 7B 92 87 64 | .a..2H...+.\{..d
+A2 10 CA 14 A9 B1 DE 11 F2 ED A1 7F E1 61 A9 DF | .............a..
+55 1A 7B 14 6D EC A3 96 85 02 CE 9F 7D EA 4C B5 | U.{.m.......}.L.
+75 F4 88 AA AA 1A 1D 05 93 73 44 4B C9 32 53 23 | u........sDK.2S#
+F3 2D F6 C8 91 74 AF 75 EB 25 97 3B 73 30 FC 0F | .-...t.u.%.;s0..
+8D CE EB 59 0E CB E5 9D BC 2E 96 56 13 8F 23 9C | ...Y.......V..#.
+F7 5D 99 61 13 8C 3A FE CD F7 61 F7 AC 8B 03 03 | .].a..:...a.....
+A1 F8 37 D3 7A 4B 31 43 A8 0C 30 B3 0F 8B 38 5C | ..7.zK1C..0...8\
+54 4E 0D C1 5C 90 FA B0 61 51 76 B2 61 2B F2 8C | TN..\...aQv.a+..
+FB 35 FE FA D0 E4 6D 6C 2B B5 ED 29 A8 4B 94 87 | .5....ml+..).K..
+CE B4 AB 95 A4 5F 4D 66 68 96 0B 4F AD D7 B8 78 | ....._Mfh..O...x
+E8 9F B9 A2 33 E1 28 66 90 B9 6D AD CD CA 13 EB | ....3.(f..m.....
+EA 00 00 00 01 00 08 F7 3F ED 54 B4 25 50 4F 40 | ........?.T.%PO@
+DD 7C 19 06 61 91 7B 50 62 B3 63 73 49 A5 C5 11 | .|..a.{Pb.csI...
+BB CC C1 EA 7F 4A 68 1D E1 75 D8 8E 7E CF E8 77 | .....Jh..u..~..w
+67 B3 48 7E B3 5B 69 A9 B4 96 1C BD 48 8E 97 47 | g.H~.[i.....H..G
+69 9D AF ED CD 27 58 97 A9 61 A0 C7 1A 03 D9 D6 | i....'X..a......
+37 61 86 09 0A 1B 09 45 10 2C DF 51 4C BA E5 26 | 7a.....E.,.QL..&
+6C BD 4A BF 98 DF F3 88 F7 B6 45 C3 28 A3 77 E3 | l.J.......E.(.w.
+CB 35 89 A2 8A 80 B0 F8 58 60 B4 87 E5 74 47 61 | .5......X`...tGa
+18 5B A5 69 C3 EA FE 9C 59 58 65 BB 91 D8 7A 14 | .[.i....YXe...z.
+64 FC 91 60 16 A4 B7 8B 01 65 0C 83 77 19 CB EC | d..`.....e..w...
+DB AC 74 0B 33 82 BA 24 E4 F2 CC 5C B0 F1 5A 6B | ..t.3..$...\..Zk
+7B 75 9D BE C2 09 0B 2D C1 29 47 36 42 30 FD 5D | {u.....-.)G6B0.]
+BA 86 8F AF 06 DD C1 5A E5 04 03 CF 2A 86 33 BE | .......Z....*.3.
+34 50 59 BA F1 2C A0 56 AC 48 8F 8B 35 38 56 8B | 4PY..,.V.H..58V.
+A7 9D 1E E8 05 FB E9 7B EF 23 0F A4 C3 46 4E 86 | .......{.#...FN.
+8E FF 56 9F B2 EF F0 03 02 D9 F3 57 F6 46 84 00 | ..V........W.F..
+7B CB F6 CC 91 FA B8 E6 89 B6 3B E0 E6 73 23 02 | {.........;..s#.
+92 90 75 B4 AA 4B 87 EC 06 03 6A D5 BC 19 3B 5B | ..u..K....j...;[
+9A 8F FC 66 28 BE 44 3B 9C 27 45 A5 4D 21 23 41 | ...f(.D;.'E.M!#A
+D9 A8 | ..
+
+Flow Record:
+ RecordCount = 34
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132215178 [2024-04-15 00:03:35.178]
+ last = 1713132246172 [2024-04-15 00:04:06.172]
+ received at = 1713132344716 [2024-04-15 00:05:44.716]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 58109
+ src tos = 0
+ fwd status = 0
+ in packets = 31
+ in bytes = 18717
+ src addr = 17.248.209.70
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 7510
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 35.872 ms
+ srv latency = 0.000 ms
+ app latency = 0.137 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 5F 95 36 4B 3B | ....z...v.._.6K;
+A8 68 F4 A5 B1 0D F8 D4 1C 96 CF 01 51 38 5B F5 | .h..........Q8[.
+2E B9 47 59 3B AC 5C E4 04 2F BC 20 AC D5 26 82 | ..GY;.\../. ..&.
+E0 3C 9C 98 F0 83 B9 FE 54 75 7C 9A EC AC 91 B0 | .<......Tu|.....
+0F 42 99 B1 52 A0 25 B4 79 E6 84 DE 13 02 00 00 | .B..R.%.y.......
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 25 | ..+.....3.$... %
+D5 67 AD 8A 9D AA 38 7C C2 B5 85 5F A4 BE B6 FC | .g....8|..._....
+2C 1A 8F 28 87 93 EC 18 25 ED 62 CC CC FE 01 14 | ,..(....%.b.....
+03 03 00 01 01 17 03 03 00 2A 06 20 73 A3 20 EB | .........*. s. .
+41 9C EC B4 9C 12 6D FA 16 9E 91 E4 FD 79 3E 1A | A.....m......y>.
+AD 53 38 A8 90 90 98 21 EB 04 31 7A 07 E8 7D 0C | .S8....!..1z..}.
+E1 3D E1 8C 17 03 03 11 25 C5 1C 21 48 1D A3 6E | .=......%..!H..n
+31 E9 DF 43 7B 3B DC 7A AF 65 D3 92 CF 45 20 07 | 1..C{;.z.e...E .
+57 16 EF 76 9C FB 5C 9E 07 8F 18 CC 60 79 33 EB | W..v..\.....`y3.
+8E 10 A1 EF B9 3A 14 86 57 8B 89 76 2C E4 EC 33 | .....:..W..v,..3
+62 18 6C D2 08 6D 1F 9C 0B AE 26 CF B8 08 16 9E | b.l..m....&.....
+B2 C2 3C F5 13 A4 CF 61 DC 8D 68 66 23 0D DD B6 | ..<....a..hf#...
+AE CF A6 23 4D 90 D2 46 47 D1 40 81 7B 74 14 A6 | ...#M..FG.@.{t..
+9C B9 45 A5 8A 3A 4C 06 52 57 8F 5C 1D AD B0 55 | ..E..:L.RW.\...U
+DA 8A AA 09 6C AB E5 5A 0F 05 FB 6C 7B 4A F1 2F | ....l..Z...l{J./
+36 A1 69 21 C7 DE D1 E6 36 46 EF C9 09 8A 90 81 | 6.i!....6F......
+9A C0 F7 46 F5 11 C5 89 15 04 0E 84 38 1C 3A D2 | ...F........8.:.
+07 62 E9 D2 6D 8A 7E 1B 13 A3 73 47 1E 78 B8 F8 | .b..m.~...sG.x..
+8C 29 93 D3 F5 B9 82 D2 05 08 DD 0D 3D 35 4C 00 | .)..........=5L.
+41 BD 26 31 AB 75 91 63 A8 22 81 1A 56 01 87 4B | A.&1.u.c."..V..K
+F8 4C FB A2 22 A3 DF E9 FD B0 E6 89 EA D8 41 9A | .L..".........A.
+80 8C F0 00 AD 23 F6 BC B3 26 34 D0 BE 37 02 11 | .....#...&4..7..
+95 FD DF F7 C2 09 F7 58 6E 40 11 B2 52 CD DC 4E | .......Xn@..R..N
+6C DE BB 83 AE F3 25 BF 92 6A 32 FD 64 5C E4 23 | l.....%..j2.d\.#
+89 9F 34 C1 24 14 40 4C 1D 18 78 86 A5 A6 D9 8C | ..4.$.@L..x.....
+E4 CD C2 FB BB 27 8C 89 E6 A5 C3 8D 5E F2 4D DC | .....'......^.M.
+E3 CB 67 A0 6B 18 98 56 1B 53 2D 15 BF FC CD 01 | ..g.k..V.S-.....
+8F A3 6F 33 36 55 16 B2 AF 04 14 4A 1D B4 8C F1 | ..o36U.....J....
+89 3E 79 08 17 30 CE 6A BF 2F 56 71 3E 6B 07 27 | .>y..0.j./Vq>k.'
+13 99 F2 2C C8 84 16 36 2F CC 01 CB C2 D1 D0 EF | ...,...6/.......
+31 F3 BF 9A 24 85 7D CD 52 F0 66 D0 86 B1 A4 C0 | 1...$.}.R.f.....
+11 6E 96 D2 DF 47 FF F5 63 D6 D6 DB F5 D3 BA CB | .n...G..c.......
+69 BF A2 74 D4 22 41 AD B6 81 28 05 3C 2C 33 C5 | i..t."A...(.<,3.
+C7 93 50 84 55 77 E8 22 09 31 20 82 58 7E C5 F5 | ..P.Uw.".1 .X~..
+C8 C2 78 E7 27 D9 4C 3B 71 6C 5C 34 65 25 EE 63 | ..x.'.L;ql\4e%.c
+4D 8C 85 00 5F 70 B9 9C D2 EB D9 3C 86 F3 A4 A8 | M..._p.....<....
+02 7C FC A8 55 C7 54 42 03 56 2C 49 99 77 80 E5 | .|..U.TB.V,I.w..
+AB B3 C9 98 2E 71 32 2A D0 A9 1B 25 BD 7C 65 30 | .....q2*...%.|e0
+4B C0 3E 0B C3 F5 E2 6F 5F E9 86 AE 61 09 38 8E | K.>....o_...a.8.
+B6 CD FF 35 31 78 42 F6 3A 84 CF 32 3E 10 A6 12 | ...51xB.:..2>...
+70 BD D3 72 3D 2F 0A A9 64 B1 04 9E 98 1F D5 3E | p..r=/..d......>
+8B 8A FB 79 E8 36 93 FC DB E2 56 74 9C 5E DB FF | ...y.6....Vt.^..
+A1 A2 46 BC 2C 70 8C D3 E7 27 2C 43 C7 A3 31 FA | ..F.,p...',C..1.
+C6 9C B8 02 78 82 F2 F7 BE 27 1B 9B A8 8D B0 DA | ....x....'......
+79 62 3A 61 83 29 E9 C4 E5 5E 4D EC 0F 2E C7 72 | yb:a.)...^M....r
+5A FF F0 03 AC D6 3C FC 50 83 10 91 7B E3 43 81 | Z.....<.P...{.C.
+58 C8 0B 96 73 8B F8 CC 81 8C F0 1F 7B 23 F5 11 | X...s.......{#..
+BE 63 88 84 DF F6 51 9E B6 E7 89 48 BA C2 65 A8 | .c....Q....H..e.
+07 4D 58 45 6B 9F 45 7F F5 D1 0E BE 2F 30 3F E7 | .MXEk.E...../0?.
+60 32 5E 46 23 8C 8F F6 3D 54 54 82 C2 41 D5 30 | `2^F#...=TT..A.0
+BD 2C 7F 45 EE 29 EC EC ED CB 98 7C 3D DD 4D C7 | .,.E.).....|=.M.
+B9 B0 E8 5A 7F 41 0D 76 0A 7F 1F 16 42 34 1C BF | ...Z.A.v....B4..
+32 D7 CF 8D 73 D9 31 AD 52 5F 47 C3 9F 08 CE 40 | 2...s.1.R_G....@
+5B 7A D8 37 7B 22 A4 0C 5B 7F 4B 6C 82 5C B7 F8 | [z.7{"..[.Kl.\..
+9B 84 AF 00 13 9D 35 D9 0E 44 16 41 0B 55 06 BF | ......5..D.A.U..
+60 BD 6A 28 31 44 23 E8 78 72 3C 56 06 07 BD C0 | `.j(1D#.xr..xO.yM...
+9E 34 F3 4C 95 8A 35 86 0E 46 CA 56 5A B8 78 97 | .4.L..5..F.VZ.x.
+A9 19 16 1A 39 50 97 98 7F EF CE 50 E5 03 2D 8B | ....9P.....P..-.
+41 7C FC 44 E3 B2 A7 2E 61 53 AD 4B A5 82 A8 32 | A|.D....aS.K...2
+7D 0D 94 CA 8B 94 56 3E D7 F1 42 3C DE BC 0A 6B | }.....V>..B<...k
+6A DC E4 49 6E 75 50 09 23 CE B1 7F 36 19 AE 4B | j..InuP.#...6..K
+18 87 09 6C 7B 75 A8 9C 32 72 4D 66 FE 0B 17 B5 | ...l{u..2rMf....
+AD 4B 21 5E A1 FD 7E 50 E8 EB 38 86 6E F1 29 37 | .K!^..~P..8.n.)7
+FC D7 99 B5 E6 A8 EA 25 8F 02 C0 A4 90 55 0E 59 | .......%.....U.Y
+04 05 D7 E0 39 F0 B0 AA 19 43 E0 FC 2B FB BC 94 | ....9....C..+...
+4C 21 64 27 A7 E8 BA 99 8A F0 4F 9F A0 A3 70 24 | L!d'......O...p$
+5B FC 09 A4 FE AF 75 57 29 16 D7 B7 B3 9E AD 04 | [.....uW).......
+A4 E3 FF 53 7A D9 3C 80 25 2E D3 2D 21 C9 99 E4 | ...Sz.<.%..-!...
+03 FF C8 4D 59 E3 1B 29 40 5D D1 8E 3F 6A B3 FC | ...MY..)@]..?j..
+EC 12 DB 9A 89 8F 64 D3 | ......d.
+
+Flow Record:
+ RecordCount = 35
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132247739 [2024-04-15 00:04:07.739]
+ last = 1713132278735 [2024-04-15 00:04:38.735]
+ received at = 1713132344717 [2024-04-15 00:05:44.717]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 54177
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18600
+ src addr = 17.248.209.68
+ dst addr = 157.143.34.100
+ out packets = 33
+ out bytes = 6997
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.248 ms
+ srv latency = 0.000 ms
+ app latency = 0.646 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 DE 4B 54 CE 60 | ....z...v...KT.`
+EA F7 8D F7 0E A1 04 9C BE 26 AA 77 72 7B 8A 3D | .........&.wr{.=
+53 88 D2 A2 AD 13 6D FA 01 70 8F 20 5D 8D 40 36 | S.....m..p. ].@6
+E1 AD 53 AA 9B 5F AF AA 31 57 AC F2 BA 2E C1 30 | ..S.._..1W.....0
+B1 1D CE 76 08 77 04 66 CA 51 BC E9 13 02 00 00 | ...v.w.f.Q......
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 E3 | ..+.....3.$... .
+AE 33 17 B0 0F 6F 0E 59 D0 FE D4 65 F4 FA 4E 5B | .3...o.Y...e..N[
+9E 9E FE 48 66 B8 93 9A F8 4A 3F 41 11 41 0C 14 | ...Hf....J?A.A..
+03 03 00 01 01 17 03 03 00 2A F4 6E 08 19 4A EF | .........*.n..J.
+73 ED D6 F3 5F BC F8 18 07 AA 67 52 1E 2D 2B A3 | s..._.....gR.-+.
+2A E4 C3 31 C1 7D 48 85 CE 38 71 36 A9 B6 1E 8B | *..1.}H..8q6....
+D9 D5 30 19 17 03 03 11 25 56 DA 20 19 6E 15 CF | ..0.....%V. .n..
+D5 C3 2E FA 2A 91 88 E0 0E 9A 55 F7 55 FD 2C F4 | ....*.....U.U.,.
+1F 6B C0 BE 70 EA D0 31 43 74 C3 9F 8D A7 D5 8E | .k..p..1Ct......
+E7 4D 1A 8D 17 31 38 AB BD C3 A5 B6 1E E1 B8 69 | .M...18........i
+0F 70 B5 C7 B8 2E 48 33 19 38 09 EC 16 10 5E B6 | .p....H3.8....^.
+21 49 44 89 4E BA 21 B8 61 F4 B2 0A E1 5A C6 45 | !ID.N.!.a....Z.E
+19 9A C1 9F 6E D4 C7 1D 8F 13 A5 CC 57 22 75 BB | ....n.......W"u.
+AE F1 F6 98 B1 AB 36 1A 03 25 C4 2D 99 29 4C 0F | ......6..%.-.)L.
+90 09 7F FE 2D 8D 1E E8 0A EB E5 FE 77 CB 57 0C | ....-.......w.W.
+FF 71 D2 B7 8E AD 7D 7C 5A 6C 3A B8 C7 89 BE 6A | .q....}|Zl:....j
+41 C9 C9 5B 40 C3 74 22 26 83 CE A0 02 6E 3F 1C | A..[@.t"&....n?.
+22 9F CB 30 07 24 A3 A2 EB 6F 2C 51 E1 38 4C 67 | "..0.$...o,Q.8Lg
+D9 1C BB F3 F2 5E 7A 0D 1B D3 E8 D2 00 F0 25 BA | .....^z.......%.
+CE 18 64 95 51 D3 2A 48 08 F7 57 96 20 5C 82 81 | ..d.Q.*H..W. \..
+86 A8 D0 E9 B5 01 BD 99 2D F3 31 E6 65 06 F2 09 | ........-.1.e...
+17 58 F1 E5 42 DA AB A5 4B 99 49 08 41 91 C7 9E | .X..B...K.I.A...
+D6 EA C0 66 6D C8 F7 E1 DE B0 9E D1 A0 B8 A8 B7 | ...fm...........
+5C 2B F3 A4 76 D0 E8 13 35 5C 12 31 9C F2 05 20 | \+..v...5\.1...
+2F 99 F8 18 DA C3 AA A4 C0 76 7D E8 E0 65 E3 6F | /........v}..e.o
+6D E2 8F B2 85 2B A1 41 7D 42 AB 0F 01 8A F2 46 | m....+.A}B.....F
+E3 90 B0 FE 62 81 9B DA BD F7 DD FC 3C F4 2D E2 | ....b.......<.-.
+FC 51 B8 81 13 1F 63 67 56 FC 23 C4 32 FF DF 50 | .Q....cgV.#.2..P
+40 88 8B C8 02 B1 61 7B 93 19 79 47 DB 82 56 34 | @.....a{..yG..V4
+7E CB 87 2D 60 33 37 53 79 22 EE 84 20 0D 58 2F | ~..-`37Sy".. .X/
+7C B5 54 E9 97 C3 C6 EA EE 0F 2A BC 0D 46 B2 73 | |.T.......*..F.s
+82 C5 E5 24 80 5B 92 3A DF E2 EE A0 07 30 72 D7 | ...$.[.:.....0r.
+F7 E6 19 49 74 3F 24 04 72 69 61 D4 19 37 A7 1C | ...It?$.ria..7..
+D4 3A CB D2 69 83 2A 29 C0 0D 56 E3 9B 9F 18 43 | .:..i.*)..V....C
+07 A6 EF 37 65 87 B6 E2 5D 05 FC 27 44 46 EE 04 | ...7e...]..'DF..
+9D FF BD 1C 95 2D D2 AA 3F E0 D7 A7 BF 56 41 1E | .....-..?....VA.
+F2 01 94 B2 81 39 6E 10 63 68 7A B0 51 F1 94 C0 | .....9n.chz.Q...
+D5 08 7C 85 D2 20 43 3C 0B F1 87 00 C5 27 B1 F0 | ..|.. C<.....'..
+39 A0 E4 AD B0 FD 9A 69 8F 34 56 4B 74 C0 B3 07 | 9......i.4VKt...
+82 89 13 E4 14 CC 0A D7 CC 0D DE 11 61 7C D3 30 | ............a|.0
+4E 08 25 4A A4 69 1C 51 30 A2 37 17 8C DE 13 B8 | N.%J.i.Q0.7.....
+CC F6 6B 46 88 B8 DD 87 70 DC 70 AD 5B C5 4C 3C | ..kF....p.p.[.L<
+04 4F F6 DB EA 18 98 A6 70 61 EC 1D 2E 11 C2 70 | .O......pa.....p
+F3 25 81 79 B1 C1 64 6A B2 27 07 1E 93 8C 5E 4A | .%.y..dj.'....^J
+03 4F 55 49 32 87 20 90 5D 6A CE A1 2B 6C 9E AF | .OUI2. .]j..+l..
+8C 32 24 2E 85 06 EB C9 C4 E5 05 D1 E0 D9 9F 93 | .2$.............
+F0 E4 FF 54 CA 20 56 1E DC 01 CA 2D 84 54 22 4C | ...T. V....-.T"L
+59 DB B0 FF AF 26 5F 1F 08 EB 19 01 A2 A2 F5 37 | Y....&_........7
+CD 99 AA AF 30 7B 0A 33 1E 33 A7 C0 63 35 0A 3F | ....0{.3.3..c5.?
+43 CE 09 BC F1 63 A3 89 9C A1 63 D0 F2 50 D0 FE | C....c....c..P..
+E3 D1 EC 0E 91 E0 F2 0E 2A 23 B7 39 30 C7 C6 8B | ........*#.90...
+44 12 9A 10 69 C6 40 93 8B F3 E8 FB 83 7B 2E DB | D...i.@......{..
+61 30 D8 97 8E 5E 47 AA A9 BB 49 2F DE 9D 1F 63 | a0...^G...I/...c
+A2 4D 31 CC 8C 7B 39 13 A9 82 CE 25 2A 7E 42 26 | .M1..{9....%*~B&
+3F D9 F0 85 80 EC D7 B9 97 75 A2 3C E2 03 B8 31 | ?........u.<...1
+7C 7C 96 B6 CA 90 7D 40 DD 2A EE 71 A2 C5 9A 0A | ||....}@.*.q....
+1A 3B DC 98 F5 7B 3B 1F 46 8E 5D 7C AE 6F 99 EA | .;...{;.F.]|.o..
+EF A2 D4 2B 7F 32 10 05 88 20 57 46 EF 00 ED E8 | ...+.2... WF....
+7E 4C B2 F4 55 58 89 1D 27 74 98 D6 BA 0C 13 15 | ~L..UX..'t......
+71 AD 2F 27 DF 79 8A 80 44 39 32 87 CF 0F 51 D7 | q./'.y..D92...Q.
+EA 4B AE A1 AF FD 0C B6 23 B3 D2 5C F3 A4 02 98 | .K......#..\....
+95 6A 0C 5E CE 61 AD 79 46 A3 CF 0B 5F 11 C1 FF | .j.^.a.yF..._...
+F8 B6 AD 92 98 CE AA F4 90 B8 C4 B6 53 0C 3C 46 | ............S..0X..5..6...
+9B 9E BA 4D 0F 3E E7 18 50 17 14 4C 9F B1 78 01 | ...M.>..P..L..x.
+AF 3B F4 BC 43 EE 9F 47 E0 B6 02 3A 93 4A 61 D4 | .;..C..G...:.Ja.
+14 FF D0 D8 B3 69 9F 48 F3 EE 6F D2 4C CB 51 D3 | .....i.H..o.L.Q.
+85 07 7D 1F 92 94 81 95 09 BB D7 5A AB 59 5A DF | ..}........Z.YZ.
+51 69 CB 73 0B 2B 6A FA 3E CF 5A 87 6A F0 5B 3A | Qi.s.+j.>.Z.j.[:
+CC C6 A2 5C FC EE 80 65 30 D1 B5 EE 09 6E 6E C3 | ...\...e0....nn.
+6A 02 90 7A 99 F0 06 6B 76 10 C8 3D 34 33 DA D6 | j..z...kv..=43..
+C5 8B 6E F2 06 AD 65 4D 6C 50 0E 20 8D BD 1C 0A | ..n...eMlP. ....
+2C 8C 32 E6 B3 7D C7 30 F5 6E 21 FD 95 B9 8C 11 | ,.2..}.0.n!.....
+81 FB 67 23 78 50 B5 F9 54 24 21 D6 A3 1C 6E 9E | ..g#xP..T$!...n.
+65 5D D0 23 15 AA 08 AA 6A CF 6A 34 D1 C4 3B 5C | e].#....j.j4..;\
+2D 21 FD E8 53 4D 43 1A 1C 69 EC 2B 17 F4 00 54 | -!..SMC..i.+...T
+A4 E3 D0 24 49 F6 7E 55 1C 74 1F AE B5 A0 FB D5 | ...$I.~U.t......
+85 D7 CA E8 69 6E 38 63 0F 3D 69 C3 CF C7 52 5D | ....in8c.=i...R]
+C1 2C 8F CF DF 5E 10 24 | .,...^.$
+
+Flow Record:
+ RecordCount = 36
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 509
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131686461 [2024-04-14 23:54:46.461]
+ last = 1713132227100 [2024-04-15 00:03:47.100]
+ received at = 1713132000887 [2024-04-15 00:00:00.887]
+ proto = 6 TCP
+ tcp flags = 0x18 ...AP...
+ src port = 57657
+ dst port = 80
+ src tos = 0
+ fwd status = 0
+ in packets = 20
+ in bytes = 4330
+ src addr = 157.143.34.100
+ dst addr = 172.217.168.3
+ out packets = 0
+ out bytes = 0
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 9.655 ms
+ srv latency = 0.000 ms
+ app latency = 60041.739 ms
+ in payload = 329
+HEAD /generate_204 HTTP/1.1
+Host: connectivitycheck.gstatic.com
+Connection: keep-alive
+User-Agent: Mozilla/5.0 (Linux; Android 12.0; Build/STTC.220815.001) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.0 Safari/537.36 CrKey/1.56.500000 DeviceType/AndroidTV
+Accept-Encoding: gzip, deflate
+Accept-Language: de-DE
+
+
+48 45 41 44 20 2F 67 65 6E 65 72 61 74 65 5F 32 | HEAD /generate_2
+30 34 20 48 54 54 50 2F 31 2E 31 0D 0A 48 6F 73 | 04 HTTP/1.1..Hos
+74 3A 20 63 6F 6E 6E 65 63 74 69 76 69 74 79 63 | t: connectivityc
+68 65 63 6B 2E 67 73 74 61 74 69 63 2E 63 6F 6D | heck.gstatic.com
+0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 6B 65 | ..Connection: ke
+65 70 2D 61 6C 69 76 65 0D 0A 55 73 65 72 2D 41 | ep-alive..User-A
+67 65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 35 2E | gent: Mozilla/5.
+30 20 28 4C 69 6E 75 78 3B 20 41 6E 64 72 6F 69 | 0 (Linux; Androi
+64 20 31 32 2E 30 3B 20 42 75 69 6C 64 2F 53 54 | d 12.0; Build/ST
+54 43 2E 32 32 30 38 31 35 2E 30 30 31 29 20 41 | TC.220815.001) A
+70 70 6C 65 57 65 62 4B 69 74 2F 35 33 37 2E 33 | ppleWebKit/537.3
+36 20 28 4B 48 54 4D 4C 2C 20 6C 69 6B 65 20 47 | 6 (KHTML, like G
+65 63 6B 6F 29 20 43 68 72 6F 6D 65 2F 39 32 2E | ecko) Chrome/92.
+30 2E 34 35 31 35 2E 30 20 53 61 66 61 72 69 2F | 0.4515.0 Safari/
+35 33 37 2E 33 36 20 43 72 4B 65 79 2F 31 2E 35 | 537.36 CrKey/1.5
+36 2E 35 30 30 30 30 30 20 44 65 76 69 63 65 54 | 6.500000 DeviceT
+79 70 65 2F 41 6E 64 72 6F 69 64 54 56 0D 0A 41 | ype/AndroidTV..A
+63 63 65 70 74 2D 45 6E 63 6F 64 69 6E 67 3A 20 | ccept-Encoding:
+67 7A 69 70 2C 20 64 65 66 6C 61 74 65 0D 0A 41 | gzip, deflate..A
+63 63 65 70 74 2D 4C 61 6E 67 75 61 67 65 3A 20 | ccept-Language:
+64 65 2D 44 45 0D 0A 0D 0A | de-DE....
+
+Flow Record:
+ RecordCount = 37
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1608
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132217183 [2024-04-15 00:03:37.183]
+ last = 1713132217364 [2024-04-15 00:03:37.364]
+ received at = 1713132302717 [2024-04-15 00:05:02.717]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 62379
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 7405
+ src addr = 13.224.103.47
+ dst addr = 157.143.34.100
+ out packets = 12
+ out bytes = 1574
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.987 ms
+ srv latency = 0.000 ms
+ app latency = 0.175 ms
+ in payload = 1428
+ TLS version = TLS 1.3
+ ja3s hash = 16a232c6047ab4c7f493b826d419a8be
+ ja4s hash = t130500_c02f_a241d087c239
+16 03 03 00 63 02 00 00 5F 03 03 9D AE A3 BB B0 | ....c..._.......
+31 98 E2 AA 7E 8E 4C CE 03 2E CA 4B A9 52 EB 7F | 1...~.L....K.R..
+50 A6 22 44 4F 57 4E 47 52 44 01 20 C0 BA F8 8A | P."DOWNGRD. ....
+F5 3D C6 35 94 30 22 CF B9 46 BE 54 0B FF 9B 16 | .=.5.0"..F.T....
+2A CB E5 DF CB E4 81 97 6A 2B A6 4F C0 2F 00 00 | *.......j+.O./..
+17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................
+00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................
+8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0....
+03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g..
+C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H...
+01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U..
+13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A
+6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U....
+41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048
+4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000
+30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359
+35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U....
+74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0..
+09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............
+00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(..
+62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N
+E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b%
+4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?.
+47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. .
+49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_...
+CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3
+91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P.
+82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+
+B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X..
+B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._.
+C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X.
+E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^
+60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9.
+51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E
+16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L
+0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<.......
+82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#..
+30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;;
+50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U...
+16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k.
+04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z
+30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..*
+2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com..
+77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t
+69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*.
+74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid
+61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U.
+0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U.
+25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........
+08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U..
+04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http
+3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama
+7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m
+30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0
+0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+
+06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+
+06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http://
+6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo
+6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+.
+01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c
+72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont
+72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c
+65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0.
+30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y...
+04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v....
+64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F
+7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq......
+89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!.
+C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..'
+CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*...
+02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux..
+7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$..
+63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j
+02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,....
+AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w....
+03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%.
+2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g...
+46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../...
+EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{...
+4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v....
+6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql
+BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H......
+89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!.
+86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV.......
+DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7
+02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......}
+0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:.
+59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H.......
+00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]]
+D3 9D AC B4 | ....
+
+Flow Record:
+ RecordCount = 38
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713131891886 [2024-04-14 23:58:11.886]
+ last = 1713131922866 [2024-04-14 23:58:42.866]
+ received at = 1713132000887 [2024-04-15 00:00:00.887]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 59352
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18602
+ src addr = 17.248.209.64
+ dst addr = 157.143.34.100
+ out packets = 33
+ out bytes = 7661
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 37.772 ms
+ srv latency = 0.000 ms
+ app latency = 0.399 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 D1 32 AE 40 32 | ....z...v...2.@2
+FA 5A 43 DA E8 35 18 BF CE 43 38 C1 21 28 49 E1 | .ZC..5...C8.!(I.
+0E 8F 79 82 7E 79 B4 D2 71 FF 62 20 A4 9E D2 77 | ..y.~y..q.b ...w
+03 38 6A 7C 91 64 F0 89 B5 94 14 43 21 F7 CF 0C | .8j|.d.....C!...
+5B F1 28 E3 AC 7B BC 69 6A 5A 91 D5 13 02 00 00 | [.(..{.ijZ......
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 34 | ..+.....3.$... 4
+0A C4 F7 9C 16 6A D7 3B C7 B1 74 BA 2A 8E 29 19 | .....j.;..t.*.).
+37 5D 26 C4 17 39 18 16 4C 90 72 3F 4C 01 32 14 | 7]&..9..L.r?L.2.
+03 03 00 01 01 17 03 03 00 2A 2C FA B6 58 12 8F | .........*,..X..
+60 B6 9E CB CD 16 B9 C2 5C 65 9E 8B E9 2C B7 04 | `.......\e...,..
+C2 B6 05 4B 63 A3 31 A1 35 61 1C F1 38 7F CB 6F | ...Kc.1.5a..8..o
+6D 96 75 11 17 03 03 11 25 FF 5A D2 A9 86 4A 2A | m.u.....%.Z...J*
+DB F3 B1 D0 02 0A E2 B7 10 B1 8B E8 E3 03 CE E2 | ................
+7D BE 31 25 8B 0F F2 4A 10 58 E4 2F 47 C4 8D F8 | }.1%...J.X./G...
+AA 48 88 87 A7 4F 56 DD ED CA 48 96 F6 3E 82 63 | .H...OV...H..>.c
+00 56 78 6A 45 B6 A7 BB E7 66 AB D9 4D 32 9F 53 | .VxjE....f..M2.S
+57 40 5D 22 8D 68 71 58 40 45 62 1A 88 4A 76 81 | W@]".hqX@Eb..Jv.
+C0 50 93 2E 2E 68 BA E9 0D D0 18 FB BF FE D8 61 | .P...h.........a
+E7 A0 63 3A 0B 05 A1 BC 3C 61 EC 01 3D 05 47 EE | ..c:....U..&!.;.a.{.
+DF 3F F4 AE 09 78 1A AB 1A 8F 30 01 7E 7E 56 E4 | .?...x....0.~~V.
+29 04 7D DA BC A1 B7 FC 5A 29 04 94 66 16 BC 11 | ).}.....Z)..f...
+5F DB D3 1B 31 45 13 14 FB 79 AE 13 C6 46 B2 35 | _...1E...y...F.5
+D8 19 DF D3 4E 39 0F D5 80 8D CB 38 85 84 1B 5E | ....N9.....8...^
+06 8A AD 3F 60 AA DE B9 7F 37 D4 AA F9 95 DD 13 | ...?`....7......
+4F B8 AA 9F 72 85 30 B1 1D ED 39 3A 9F 6D 3F 3A | O...r.0...9:.m?:
+8E CA 5B 74 50 45 CC 8D 31 62 EE 26 67 0E B3 61 | ..[tPE..1b.&g..a
+40 9B 38 35 AA EF F9 A0 15 0F F9 CF F5 06 EE 4F | @.85...........O
+FE F6 D4 8F 56 30 81 FF 7C F7 B3 F0 6C 08 5B FB | ....V0..|...l.[.
+18 D5 9D 7B 25 11 CF 42 B1 38 5C 80 25 E1 E2 5D | ...{%..B.8\.%..]
+92 91 B3 28 9C 56 52 DC B7 2E 53 E7 B3 D0 0D 5A | ...(.VR...S....Z
+B1 5A 07 B8 4B 19 6D 3D 81 B8 8F 11 8D 44 0B 52 | .Z..K.m=.....D.R
+00 44 FE 96 DE A0 F9 44 CA E2 9F 7C 86 A5 F3 A2 | .D.....D...|....
+E3 51 42 95 A3 A2 37 9D 46 37 6C 5A E6 91 E2 E0 | .QB...7.F7lZ....
+D7 F2 03 4A 7B 7F 19 E4 54 2A D1 0B 2D 99 61 A4 | ...J{...T*..-.a.
+A7 69 86 0B 65 63 FE AE 8E 07 CF 80 4D 81 A9 42 | .i..ec......M..B
+2F 4C B2 2A 3F 06 20 B1 4F E8 10 7F 49 4B 07 49 | /L.*?. .O...IK.I
+05 77 5D FA 80 24 DD 39 F8 29 F2 B5 8F 24 85 E3 | .w]..$.9.)...$..
+2C FA 87 5C 96 02 DF C6 EA A4 36 FD 94 D2 4F 42 | ,..\......6...OB
+E0 79 FD 26 B1 02 77 F0 9B 32 BC 8A 80 EE 41 E4 | .y.&..w..2....A.
+36 3E A5 0B 14 CF 03 AB 00 14 F2 A6 9D 9F F9 65 | 6>.............e
+A7 27 E3 4A F5 D6 1F E4 7E 37 7D 6A 90 DE 7C 09 | .'.J....~7}j..|.
+78 DF 98 59 59 15 E7 20 FF 71 86 D5 F0 E3 1D D0 | x..YY.. .q......
+61 4D 83 CF 2A C7 29 2D 4E 72 09 12 11 DE 49 8B | aM..*.)-Nr....I.
+C3 88 6B D1 5B 0F 58 DD 9A A3 8C 84 A0 B4 87 06 | ..k.[.X.........
+1E C7 E8 9A AE FA BF 7E 02 D8 40 37 75 81 9B 6B | .......~..@7u..k
+81 B7 25 6A 95 4B C1 9A 22 04 D9 73 BA F1 E4 64 | ..%j.K.."..s...d
+CE 1C 97 A2 B5 92 01 AB D9 E0 82 66 37 1E 40 06 | ...........f7.@.
+68 39 2B BA FB 95 8B D5 49 8E 37 FA BE 8C 17 9F | h9+.....I.7.....
+59 32 B6 59 20 02 36 B3 BB 7E 79 A9 F5 4D 51 21 | Y2.Y .6..~y..MQ!
+34 36 1D 6C D4 A7 FB BF A5 F0 12 CA E0 DE EB F8 | 46.l............
+D1 7B 56 16 FD 74 6C 3D 71 03 4F C3 7B C6 3C 12 | .{V..tl=q.O.{.<.
+AA CF E3 B6 61 75 97 3B B0 AE 8A 9B C5 69 C7 BC | ....au.;.....i..
+D8 30 E7 D8 AB 42 CD 55 66 1F DB 1A 20 99 82 36 | .0...B.Uf... ..6
+88 70 02 43 B7 48 AA 15 03 D8 32 1A 6D 39 38 55 | .p.C.H....2.m98U
+A8 81 C1 7A B9 7D C9 55 C8 D1 34 C3 1E 3A 9C FE | ...z.}.U..4..:..
+81 FA 8F 5D AB 29 71 C7 9A 71 24 23 8A 77 C8 C3 | ...].)q..q$#.w..
+EC 32 F2 B7 78 86 28 8C 23 53 EF 7E AE 77 B1 D3 | .2..x.(.#S.~.w..
+3C D9 BB 6D BA C0 B1 D8 9C CC C0 BD E3 64 69 CF | <..m.........di.
+06 BA E3 F2 8F 07 84 CB 96 CB 92 B2 BD B5 13 DE | ................
+C8 FA 78 B1 3E C7 F5 6B 1E EC 85 75 55 AD 29 DE | ..x.>..k...uU.).
+9D 50 4E D3 10 7A C2 2F 96 E5 66 92 4D 7D 6B 0C | .PN..z./..f.M}k.
+06 12 5C D6 F7 27 F9 66 16 4D 50 9B BF B1 11 8C | ..\..'.f.MP.....
+5E A3 3C C5 89 FA 64 3B 90 24 0F 02 09 86 E3 83 | ^.<...d;.$......
+A7 92 D3 C1 6D 78 69 A2 69 6B 0A EC 6E 5E 9D 21 | ....mxi.ik..n^.!
+A0 B7 94 9F 80 27 43 7E 79 D3 4B BC B2 41 32 D8 | .....'C~y.K..A2.
+45 74 8B 48 D8 0F D3 C4 B2 54 B7 98 5E A7 4E 10 | Et.H.....T..^.N.
+57 37 08 29 32 12 D4 56 52 E4 66 80 CA AE B4 D6 | W7.)2..VR.f.....
+82 51 85 FE AB 9D 5C D7 19 04 7A B5 79 84 30 DB | .Q....\...z.y.0.
+9C 13 48 EA 7B 0B 27 4A 41 26 AB 3C D1 87 CA 22 | ..H.{.'JA&.<..."
+B1 EE 36 4E B9 B5 EF D7 24 E1 00 68 73 66 CB D8 | ..6N....$..hsf..
+65 20 98 D6 9E 14 FA 1D C2 5B 38 3C DD 98 1A B1 | e .......[8<....
+DA 6D 2D B9 D9 98 57 A9 E3 1E D3 92 AD AA 95 1B | .m-...W.........
+AD 7F F3 C5 42 A1 C0 28 5D EB 97 82 DC 81 BA 7D | ....B..(]......}
+C1 1D D3 5C B9 9F 48 C1 38 06 EC 7C 2D 0C AD 4E | ...\..H.8..|-..N
+B7 BE 45 BF 87 A8 F3 E8 47 5D 15 1F B7 83 1D DA | ..E.....G]......
+D3 5A E3 74 2D A2 24 3B B2 DE 7B 91 AA AD 57 65 | .Z.t-.$;..{...We
+C2 4F 36 2E 5F 7D 2F E3 C3 56 36 72 00 1A B6 56 | .O6._}/..V6r...V
+12 F7 B3 E9 53 7D 03 AD | ....S}..
+
+Flow Record:
+ RecordCount = 39
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132021008 [2024-04-15 00:00:21.008]
+ last = 1713132052026 [2024-04-15 00:00:52.026]
+ received at = 1713132148816 [2024-04-15 00:02:28.816]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 62570
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18601
+ src addr = 17.248.209.66
+ dst addr = 157.143.34.100
+ out packets = 31
+ out bytes = 6893
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 20.982 ms
+ srv latency = 0.000 ms
+ app latency = 0.659 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 97 31 ED 4A FD | ....z...v...1.J.
+10 DC 67 8C 63 98 B6 DF BE 8B 69 CD 83 50 56 63 | ..g.c.....i..PVc
+9E DB B6 30 5E C8 08 61 17 94 80 20 57 AD A0 84 | ...0^..a... W...
+F0 8D 06 FE 36 3D 5B FE AD 33 AF 7C 19 B6 25 11 | ....6=[..3.|..%.
+D0 C1 3C AD 56 A5 0C D2 3E EE B5 4F 13 02 00 00 | ..<.V...>..O....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 D2 | ..+.....3.$... .
+28 C3 36 14 8A FE 72 74 14 8D 77 23 60 0E 5A AF | (.6...rt..w#`.Z.
+42 96 24 81 12 F4 41 55 85 38 D0 2F CB 1C 38 14 | B.$...AU.8./..8.
+03 03 00 01 01 17 03 03 00 2A C0 0C 2C 4D D1 4C | .........*..,M.L
+6B B6 74 A0 CD B3 CD A1 D6 8B E4 90 80 C2 D2 FD | k.t.............
+2F 33 1C 77 4F 97 27 5E 46 1A 2B C4 C3 0C 6C 9A | /3.wO.'^F.+...l.
+E9 04 BA 1E 17 03 03 11 25 FC 09 88 6D 62 A8 7C | ........%...mb.|
+81 C3 54 13 F5 28 77 49 B2 E0 E1 33 91 EB 17 C7 | ..T..(wI...3....
+DE 18 4E 45 EC CB 31 A1 2E 95 48 CD 01 B5 0A 8F | ..NE..1...H.....
+F2 D1 57 67 51 CC F1 A2 41 E5 3A DD CE 8F 2C 75 | ..WgQ...A.:...,u
+D2 D1 5D 56 F4 97 C2 90 90 CD C2 3D EE A6 E2 19 | ..]V.......=....
+84 EA EB D1 3C 7B F2 71 70 0E C1 F2 61 E4 01 81 | ....<{.qp...a...
+F2 4F 71 73 8C 59 CE D5 9B C7 E7 B3 7E 23 04 3E | .Oqs.Y......~#.>
+DF 05 9A 31 8F 82 C2 EA 66 0F 67 4A 41 CA 97 C3 | ...1....f.gJA...
+28 B4 03 DE 4A B4 A9 4E 30 C0 F2 FE 5A 87 D2 FA | (...J..N0...Z...
+E9 C2 84 2D 77 26 3B CC EB BC CB 05 27 F6 84 42 | ...-w&;.....'..B
+68 A0 95 B4 66 01 A6 0F EC 76 23 13 4E DD AE BF | h...f....v#.N...
+A9 6F EF 6D 30 C7 D7 AF 39 36 54 FC B8 EF 96 BB | .o.m0...96T.....
+44 D8 55 8E 33 9B B2 C1 D3 98 68 1A 6B 52 F3 70 | D.U.3.....h.kR.p
+F5 30 23 76 DD 63 61 28 A4 96 D1 BA 63 95 E4 83 | .0#v.ca(....c...
+AC 51 7F 72 1F A6 77 7F C6 2C 14 3C E5 1D C2 31 | .Q.r..w..,.<...1
+C3 54 4D 8C 7F 85 19 3B AA 72 C4 3F F2 59 A0 EC | .TM....;.r.?.Y..
+65 18 08 CE 78 24 0B 51 54 89 6D 3C E5 69 07 06 | e...x$.QT.m<.i..
+20 A7 89 CA 0A 0B D6 44 A4 8B D7 B6 07 DC AF CE | ......D........
+BD 72 59 EA 17 D0 38 9C BD 05 24 13 7D 10 BF F8 | .rY...8...$.}...
+BF 9A 8D 97 51 1F 16 6E 55 9F 71 9B 9D 77 53 2E | ....Q..nU.q..wS.
+D3 F6 01 C8 4E 99 98 90 20 C0 79 98 A0 4D D7 95 | ....N... .y..M..
+1D 16 9D 5F F3 A7 DC DF 97 90 37 F2 AD AA 94 88 | ..._......7.....
+C1 51 68 6F 58 80 CD EB 94 DB 22 E5 83 A0 23 1B | .QhoX....."...#.
+03 88 89 31 4A 92 17 0B BD 08 CD C9 49 CB AB 5C | ...1J.......I..\
+86 94 09 81 5E 23 DE D8 95 CA A5 EE A6 EA 84 AF | ....^#..........
+1C E6 82 AD 01 56 B2 F7 24 48 1D D2 16 D3 28 0A | .....V..$H....(.
+FB E0 69 79 78 89 AA B0 7A 9D 07 50 81 F2 01 2E | ..iyx...z..P....
+ED 4B D2 65 DA F6 72 4F 00 DB A3 D6 9B 51 67 40 | .K.e..rO.....Qg@
+D3 EA F8 D7 95 03 D6 85 B7 3D 60 DA EB A1 35 57 | .........=`...5W
+C3 2C A2 FC B3 DC FE 46 0F B9 DC F5 30 4B DE 09 | .,.....F....0K..
+B4 7A AF CB FE 1E 1C AC 48 DE B3 5C DE 92 89 EE | .z......H..\....
+24 7A 9A 95 05 3B B4 5C 56 68 1D CE 7F B3 EC 77 | $z...;.\Vh.....w
+4F 07 61 2E 97 4C 5A EF 90 98 CB DB 44 11 82 B5 | O.a..LZ.....D...
+AA 85 C0 46 DC 6A 24 33 2F B2 7F C1 BB 4A BA 98 | ...F.j$3/....J..
+0E E2 4C AF C6 DF 3C A2 A7 0B 4D AF B1 9C 25 B2 | ..L...<...M...%.
+81 DC E1 66 D6 1D 92 F5 60 7E 4D 82 13 A9 81 13 | ...f....`~M.....
+A2 EA 64 0A 6E 33 27 A1 40 26 16 5A E2 16 F8 C9 | ..d.n3'.@&.Z....
+0C DE C1 5F B0 1B 9E AF 3E 10 B4 9E 7F BA CC F9 | ..._....>.......
+7D EA DB 2E 76 F2 82 53 D9 F8 D3 4F 23 D9 C5 5D | }...v..S...O#..]
+B7 5F 1A 02 FA A9 D6 99 0F 48 67 98 C1 A3 BF 51 | ._.......Hg....Q
+83 45 F4 97 AA 73 7A 8B 0E 70 35 F9 C7 94 74 7B | .E...sz..p5...t{
+08 15 83 93 AD 20 4E C0 14 A4 93 66 CD B5 68 BF | ..... N....f..h.
+14 E9 13 35 27 56 A3 5A BA C1 95 99 E8 74 8A 3C | ...5'V.Z.....t.<
+D5 14 11 BC 77 D2 1A 24 C3 12 79 1E CA F0 56 A9 | ....w..$..y...V.
+A7 2D E1 DD E7 F4 7E 53 4E 9A 51 D0 97 51 F0 D1 | .-....~SN.Q..Q..
+44 14 9E 4C 34 FE 04 9A 48 6E BD 2E FC 46 E5 7A | D..L4...Hn...F.z
+F4 E5 F7 9A 34 AE C5 D9 98 DC BF 7C C6 0B 50 64 | ....4......|..Pd
+45 FC 1F B4 72 2C 25 90 B1 49 34 22 EB 38 A8 FE | E...r,%..I4".8..
+4B A6 15 7F 07 2B 33 11 D4 C6 D6 EB 22 7C 32 C2 | K....+3....."|2.
+F8 0A 55 AF 96 BC 5E 37 CA D0 D8 B4 3A A8 29 A6 | ..U...^7....:.).
+0A FF F7 BA 9C 5A 30 CB 7E 34 FB 08 9B E6 E5 55 | .....Z0.~4.....U
+92 A3 5A 2C 1B C4 66 A8 12 89 4C 18 BD 7D 78 E8 | ..Z,..f...L..}x.
+42 75 4F F3 3E F9 81 52 F3 8C A6 62 E4 BB EA 61 | BuO.>..R...b...a
+D1 48 8A 17 73 E3 8F 3A 5B F8 C3 FA 6B B5 3E 9A | .H..s..:[...k.>.
+91 05 CD CF 72 3F DB E4 D0 A7 E9 F8 EA AB 91 FB | ....r?..........
+50 6A 1A D0 9F 96 6A 7C 60 C6 24 6F E1 BF 85 0A | Pj....j|`.$o....
+8E B5 1F 0B 7E 07 DD DE 4F 83 6E AB B7 CF DC D0 | ....~...O.n.....
+48 31 E1 3E 8B 26 85 81 79 D1 59 61 09 5F A1 DC | H1.>.&..y.Ya._..
+88 68 FA 36 74 61 CB FC D9 E7 A5 BB 93 10 54 D1 | .h.6ta........T.
+FC 9D 31 ED D3 09 BC 1C CD 45 95 3F 80 AE E5 6E | ..1......E.?...n
+2C 00 A9 CB BB 3A 3E 5B A0 64 25 86 B2 AD 1D 19 | ,....:>[.d%.....
+38 A5 85 A8 92 E2 AB AB 63 44 E0 62 9F A1 41 41 | 8.......cD.b..AA
+78 D9 B9 9C FE 5B AE 83 F1 29 DB 18 15 04 87 C2 | x....[...)......
+7D 40 BD 7F 5E 98 CE 28 1A 73 E7 1E 4B 09 8C AF | }@..^..(.s..K...
+39 51 51 3B D7 4C 55 0D A8 A5 FB 7F 9F 64 FB E7 | 9QQ;.LU......d..
+BA C7 35 BB 4B BD 4C 4E C7 0E 07 E5 AC CE CF FC | ..5.K.LN........
+EF AF 36 10 8A F1 B5 4A 07 7B 52 F3 D0 A3 5E BE | ..6....J.{R...^.
+25 43 1B BF 2A 11 2B B2 6F 3D F3 AB 2B 17 1C EB | %C..*.+.o=..+...
+AA 32 7A EB E3 D7 57 04 FA 5C E2 F2 3E 44 1D A4 | .2z...W..\..>D..
+99 55 C5 31 AC 44 9D CF 36 AD C6 D1 B4 BF 48 06 | .U.1.D..6.....H.
+57 DF 7E 05 08 D0 F9 B3 9B F9 B2 EA 79 AB A4 58 | W.~.........y..X
+38 1B BB EE 0A D4 50 20 E3 6A 8D A3 F7 39 29 70 | 8.....P .j...9)p
+46 4F 90 1E E2 A4 90 41 A0 71 64 D0 E2 9B 4F 92 | FO.....A.qd...O.
+CC 75 26 00 48 A1 3C 21 8A 40 95 26 12 42 7C E4 | .u&.H..+..i.
+66 74 FE F3 13 98 7D C3 0F 85 E2 E4 86 E0 C5 50 | ft....}........P
+6D EC 88 46 39 9A 29 D2 | m..F9.).
+
+Flow Record:
+ RecordCount = 40
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132085509 [2024-04-15 00:01:25.509]
+ last = 1713132116456 [2024-04-15 00:01:56.456]
+ received at = 1713132206017 [2024-04-15 00:03:26.017]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 50258
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18599
+ src addr = 17.248.209.70
+ dst addr = 157.143.34.100
+ out packets = 33
+ out bytes = 6997
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 15.118 ms
+ srv latency = 0.000 ms
+ app latency = 0.281 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 51 F7 9E 89 EF | ....z...v..Q....
+56 2A 52 60 11 28 0E E9 55 AC 50 3E 74 23 8E 82 | V*R`.(..U.P>t#..
+22 DA 63 D3 27 E6 36 EE 88 21 56 20 B5 BD 9E 75 | ".c.'.6..!V ...u
+60 02 71 70 F8 90 BD A9 94 99 18 BE 11 DF BB F9 | `.qp............
+B1 46 8A F7 44 97 BA C2 99 86 22 0C 13 02 00 00 | .F..D.....".....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 DD | ..+.....3.$... .
+A7 C8 04 22 21 A7 CE DE 72 00 81 C8 A2 FB 0F 17 | ..."!...r.......
+F0 D9 12 06 3F 9A FE 05 2E 4E A2 AA 59 FD 0D 14 | ....?....N..Y...
+03 03 00 01 01 17 03 03 00 2A 58 A5 07 0E C9 D3 | .........*X.....
+1D 28 9C 41 CC 67 47 F9 EE 99 5B 1C 9C 1E B1 C8 | .(.A.gG...[.....
+FD 0A 30 C1 33 85 AF 15 21 A0 FE 4D A1 CC 20 39 | ..0.3...!..M.. 9
+0F E9 3F 52 17 03 03 11 25 BE 48 BC 30 5C 88 13 | ..?R....%.H.0\..
+E1 4F DD CB 5F 00 67 93 02 C0 53 9D 77 A1 E7 D6 | .O.._.g...S.w...
+A1 82 11 47 ED 9E 38 E4 82 29 64 57 8C 62 F2 5A | ...G..8..)dW.b.Z
+A8 BC 72 09 55 22 FF 99 D4 C4 1F 22 2E 38 35 04 | ..r.U".....".85.
+51 C1 7B FB ED A0 DF 6F F2 9A 9B 5A 15 A4 D9 22 | Q.{....o...Z..."
+A3 F5 62 68 A3 CD 1B DB A7 0C D6 0C BC 8C 5C 57 | ..bh..........\W
+1A B4 49 47 F1 FE 80 AA AE 99 BA 7F 54 2D 05 A5 | ..IG........T-..
+07 2F 55 F9 7E 95 8E 67 44 A0 FD 63 AA E5 B0 A1 | ./U.~..gD..c....
+A5 53 3E 2D 49 6E D2 61 CE 45 2A A3 94 55 48 37 | .S>-In.a.E*..UH7
+86 14 34 F1 63 F2 44 4F 64 D9 0B E2 FB 1B 5B 00 | ..4.c.DOd.....[.
+47 2E F2 09 91 20 98 98 D7 2D F9 36 7A 3D 59 03 | G.... ...-.6z=Y.
+8C EE FD B5 C5 B1 A9 D1 7C 2E A9 66 1B E3 1B EA | ........|..f....
+D6 69 8A 51 F2 8C 05 70 F3 AA 8B C5 BE 12 D8 35 | .i.Q...p.......5
+8E E8 DF 4F 13 51 BE 05 E5 93 0A 74 42 EB CB 83 | ...O.Q.....tB...
+13 8C 16 0B BF AF C8 E5 4C 38 92 29 7E 89 91 6D | ........L8.)~..m
+FB 40 F8 AE 93 A9 44 1E 01 D6 A9 06 4F E8 E1 C5 | .@....D.....O...
+9C 1F 95 A0 07 AE 17 1C E3 17 1F C6 67 AD 0A 42 | ............g..B
+AD 5F AB 3F 34 14 DD DE DA 4D 94 08 D7 7F E1 17 | ._.?4....M......
+1D 7F B4 87 08 EA 39 D8 B8 4B ED BA 74 D6 3C 84 | ......9..K..t.<.
+33 76 0A 1A EA 51 D8 0C D0 68 65 D0 EB E8 6A F8 | 3v...Q...he...j.
+1F B6 D2 69 45 1D 0D 60 0D 2C 77 1F 26 AB FD 39 | ...iE..`.,w.&..9
+7C 05 57 5F 33 31 81 F6 77 06 87 AC B5 0A 2D 9A | |.W_31..w.....-.
+B5 60 1A 0D F0 14 77 78 1E BB 8E 35 52 81 86 C4 | .`....wx...5R...
+09 A5 A1 AE D7 D0 C4 1F 1E AA 3E 86 59 E4 75 EC | ..........>.Y.u.
+E3 A9 94 F4 EC AF 24 49 01 74 58 B2 3D 47 D8 5A | ......$I.tX.=G.Z
+15 6E 1C 00 9F AB 87 79 ED 52 E7 53 7B 5B C5 A6 | .n.....y.R.S{[..
+CF BA 99 DA 87 9D B9 F5 D1 E0 3E 58 3C 48 26 DD | ..........>XD....6i..=.
+1F B4 5B 61 31 2E 01 97 E5 98 B3 7E 4B 7B 47 A1 | ..[a1......~K{G.
+1D 97 F6 59 62 C5 96 07 2F C3 23 B7 92 A2 79 48 | ...Yb.../.#...yH
+8E AF B3 33 40 0F 64 55 96 A6 26 84 D8 C8 47 B4 | ...3@.dU..&...G.
+BE 37 1C A5 7C A5 6F 49 64 ED C3 5E 08 08 1E 0D | .7..|.oId..^....
+4F A4 B3 6E DD E8 B5 41 3F BA C5 2A DD 23 C7 BF | O..n...A?..*.#..
+FF 94 16 D7 FB B5 46 BF 4B 72 E6 59 CF 08 27 D0 | ......F.Kr.Y..'.
+1F 01 E2 80 E0 B9 88 88 D2 57 07 2E 92 7D 0B FF | .........W...}..
+E4 C3 F9 6D 3E D3 9E 0E BF CC D4 32 60 05 65 7C | ...m>......2`.e|
+5A 3C 2B 35 04 37 02 91 9B A4 E0 1E 2D 0F 70 DF | Z<+5.7......-.p.
+8E 7A 69 43 EB 84 3E 72 09 72 2D DA 1A 47 47 41 | .ziC..>r.r-..GGA
+81 FE F2 7F E6 DC 56 F8 6F 95 9B F8 5B 74 EF 38 | ......V.o...[t.8
+88 DC BD 50 18 B2 0E A6 88 81 C3 42 46 DA EA 65 | ...P.......BF..e
+7B 4E 18 86 EB 64 0C 3A F7 25 0E 00 6C 5E BB 55 | {N...d.:.%..l^.U
+DA 1D 85 FC 2A BB 1C 9A 9B B8 FC C6 94 D7 3B 28 | ....*.........;(
+F2 55 83 B5 E9 D3 F3 60 1E A9 47 BD 10 84 AD 2D | .U.....`..G....-
+0C E7 DF 27 E4 E5 9D 4B 5E E5 45 6A 6F 88 A4 C3 | ...'...K^.Ejo...
+EC 53 AC E0 2C 0A 20 22 C0 5A B1 37 69 99 31 E1 | .S..,. ".Z.7i.1.
+C2 D5 6B 16 3A 18 B6 A5 A6 5D 6C F7 31 CA 3F EB | ..k.:....]l.1.?.
+1B 41 9B EF 33 F3 53 F6 0D 76 8D AC CE 0A 31 95 | .A..3.S..v....1.
+6B 45 26 A4 8E 6B 22 84 68 69 60 F5 19 55 EC 4D | kE&..k".hi`..U.M
+82 97 A5 38 15 4E E8 69 2B CC B8 23 8E 64 D1 C5 | ...8.N.i+..#.d..
+25 78 BB D5 59 27 58 D3 C7 E9 9C 4D 85 C7 6C E7 | %x..Y'X....M..l.
+4E 2C 92 63 8E A1 28 77 B1 30 B6 74 92 98 0C 0E | N,.c..(w.0.t....
+2F 12 E3 97 64 B6 05 A0 AA 3B 78 A5 DA 89 1F 30 | /...d....;x....0
+25 44 4F 8F FE 61 49 67 BD 83 58 C5 6D A9 48 A1 | %DO..aIg..X.m.H.
+6A CE 33 C6 79 6C 80 2C B9 63 44 98 A3 40 1D 99 | j.3.yl.,.cD..@..
+6E 09 7C AC EA 03 01 2E 81 A7 57 70 33 A2 2D CD | n.|.......Wp3.-.
+17 C2 B9 0E 85 89 97 12 85 2A A2 FF 61 E6 87 43 | .........*..a..C
+87 F8 FF 65 DA 46 EF 9D 1D 7F 87 58 E7 64 C9 24 | ...e.F.....X.d.$
+F7 FD E2 EC 0E 5B 70 D2 D6 61 73 C4 A3 95 2C 86 | .....[p..as...,.
+D3 6D 3F BA A0 86 12 C2 F8 67 26 E0 8B 31 3A 79 | .m?......g&..1:y
+C6 DF 14 21 68 F3 87 C8 72 10 90 C2 1B 74 D2 E7 | ...!h...r....t..
+01 07 AF 74 34 D6 BC 06 CD 47 7D 27 D4 9B C8 B5 | ...t4....G}'....
+17 FB 30 B6 C9 D5 28 2F 6D DC AB 28 75 AB B0 96 | ..0...(/m..(u...
+6A 15 B0 14 DF 2B 3E 7D 60 72 5A 78 90 83 E5 E2 | j....+>}`rZx....
+70 92 E9 66 5D D8 47 15 46 5D 93 C0 B7 22 6B 1E | p..f].G.F]..."k.
+74 56 19 73 D4 23 A5 55 33 98 9B D7 9D C9 F3 62 | tV.s.#.U3......b
+C5 46 1D DA 36 55 8F 3D D5 CE 8C 68 6A CE 5C 6F | .F..6U.=...hj.\o
+3A 06 15 F4 70 19 5E 39 D1 B8 A8 99 85 71 0F 05 | :...p.^9.....q..
+52 FC 2E FF AD AF 32 69 BF D4 5D 45 5B 7E 58 7E | R.....2i..]E[~X~
+87 14 38 0E E7 4F 27 97 64 2B B3 8F F4 61 C8 68 | ..8..O'.d+...a.h
+BA E1 73 08 D5 C7 CF 03 AD 29 AF 10 2E 22 E0 44 | ..s......)...".D
+3B D9 B9 2B 31 E3 99 00 39 19 2A 10 C1 BC 33 C6 | ;..+1...9.*...3.
+1F 18 AE 7B 2C 92 DE A9 40 B4 3D 2B 9D B1 35 BC | ...{,...@.=+..5.
+81 DB 35 46 7D 06 1D B8 95 6B 1D 6D A2 5C 91 A3 | ..5F}....k.m.\..
+79 A3 D1 78 82 13 7F 06 | y..x....
+
+Flow Record:
+ RecordCount = 41
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 697
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132277481 [2024-04-15 00:04:37.481]
+ last = 1713132278578 [2024-04-15 00:04:38.578]
+ received at = 1713132344717 [2024-04-15 00:05:44.717]
+ proto = 6 TCP
+ tcp flags = 0xdf CE.APRSF
+ src port = 58134
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 1668
+ src addr = 157.143.34.100
+ dst addr = 17.253.15.204
+ out packets = 13
+ out bytes = 6168
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 14.757 ms
+ srv latency = 0.000 ms
+ app latency = 1.106 ms
+ in payload = 517
+ TLS version = TLS 1.2
+ sni name = mesu.apple.com
+ ja3 hash = 201976c7f7ca335fd8e2b45260f666fa
+ ja4 hash = t12d2014h2_a09f3c656075_14788d8d241b
+16 03 01 02 00 01 00 01 FC 03 03 34 28 A0 76 84 | ...........4(.v.
+84 5D EC BC 34 9C AD 77 F6 AB A1 D7 53 04 E9 E6 | .]..4..w....S...
+7E F8 C4 49 9E 3A 36 17 F5 94 FE 20 9D CA 84 52 | ~..I.:6.... ...R
+7B 00 CE 4D 73 F3 1F 26 60 C9 CC 91 F3 97 DE F4 | {..Ms..&`.......
+69 A1 01 EC 83 B7 9A C5 CA B5 94 A5 00 2A 2A 2A | i............***
+13 01 13 02 13 03 C0 2C C0 2B CC A9 C0 30 C0 2F | .......,.+...0./
+CC A8 C0 0A C0 09 C0 14 C0 13 00 9D 00 9C 00 35 | ...............5
+00 2F C0 08 C0 12 00 0A 01 00 01 89 0A 0A 00 00 | ./..............
+00 00 00 13 00 11 00 00 0E 6D 65 73 75 2E 61 70 | .........mesu.ap
+70 6C 65 2E 63 6F 6D 00 17 00 00 FF 01 00 01 00 | ple.com.........
+00 0A 00 0C 00 0A EA EA 00 1D 00 17 00 18 00 19 | ................
+00 0B 00 02 01 00 00 10 00 0E 00 0C 02 68 32 08 | .............h2.
+68 74 74 70 2F 31 2E 31 00 05 00 05 01 00 00 00 | http/1.1........
+00 00 0D 00 18 00 16 04 03 08 04 04 01 05 03 02 | ................
+03 08 05 08 05 05 01 08 06 06 01 02 01 00 12 00 | ................
+00 00 33 00 2B 00 29 EA EA 00 01 00 00 1D 00 20 | ..3.+.)........
+A7 C9 F3 1D 0F 6A A2 EF 2D 13 2B F6 09 3A 40 26 | .....j..-.+..:@&
+62 46 1E 85 9D 70 D4 57 64 83 8B 36 29 F7 98 12 | bF...p.Wd..6)...
+00 2D 00 02 01 01 00 2B 00 0B 0A 1A 1A 03 04 03 | .-.....+........
+03 03 02 03 01 00 1B 00 03 02 00 01 6A 6A 00 01 | ............jj..
+00 00 15 00 C0 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 | .....
+
+Flow Record:
+ RecordCount = 42
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 5: 1 2 12 15 29
+ size = 1374
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132381236 [2024-04-15 00:06:21.236]
+ last = 1713132382231 [2024-04-15 00:06:22.231]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 61866
+ src tos = 0
+ fwd status = 0
+ in packets = 20
+ in bytes = 5794
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+CD 00 00 00 01 00 08 F4 50 1D 41 A2 D1 A7 84 00 | ........P.A.....
+43 9F C7 1F ED 58 42 AF D3 1F D6 9C F4 15 5B B0 | C....XB.......[.
+2A F5 23 EE 4E CE 8A 44 AC DD 3E 54 01 24 C9 C4 | *.#.N..D..>T.$..
+2C DD 15 8B 73 78 5E 2E 69 4D E9 F6 7F B1 36 32 | ,...sx^.iM....62
+2E E3 BF D7 A6 CF A2 F3 A1 8B 6F 1A F9 75 73 3F | ..........o..us?
+2E 56 02 9F 30 62 80 F9 1E E5 58 3D 9A 26 6F 65 | .V..0b....X=.&oe
+46 8D 2A 77 D2 6A B1 E6 03 C4 D5 30 38 08 1E AE | F.*w.j.....08...
+5B F8 4F 77 17 92 98 3F 34 79 96 6C 29 46 10 AD | [.Ow...?4y.l)F..
+E3 16 31 36 4D 15 FC DE 8B F9 C3 27 BE 8F 8B EA | ..16M......'....
+C8 E2 7C C4 D6 EF 31 18 26 E7 AD 5E 8A 8A C9 BB | ..|...1.&..^....
+E3 A4 0D F1 94 59 34 E9 8C C4 BD F7 75 EA 04 6F | .....Y4.....u..o
+71 FA D7 7F 56 9E 04 43 78 2B 00 DF 84 33 BF 16 | q...V..Cx+...3..
+69 77 E8 B9 1E 1B 91 9C 98 A7 39 6D 82 E6 8E 18 | iw........9m....
+64 0C 4B 25 3F 42 F4 65 FA 53 D1 99 C6 66 01 AE | d.K%?B.e.S...f..
+B4 49 4C 11 38 20 08 5B 48 73 26 BC 6F 0D 24 98 | .IL.8 .[Hs&.o.$.
+3A CD 38 DF E1 1C 62 40 81 C9 22 B5 61 73 FB 0B | :.8...b@..".as..
+1A 50 B1 FA 1B 41 C5 A5 DF 41 FC 7F CB 8C BC 01 | .P...A...A......
+7A 73 8D BB 9B 8B 4D 48 6F CD 42 FA 87 A4 2C E0 | zs....MHo.B...,.
+AC 30 DA D6 CC DE C3 99 A2 2A BD DE 29 C7 98 A4 | .0.......*..)...
+D4 DE CD 4D 4B 5E 68 56 AB 6C CC 39 12 7A 38 14 | ...MK^hV.l.9.z8.
+35 89 27 9C 11 63 24 72 3C B9 AC 1B 39 E3 C2 D2 | 5.'..c$r<...9...
+E0 4F 74 9B C8 C9 B2 AA 39 13 D8 C7 E1 43 64 59 | .Ot.....9....CdY
+17 F5 BB DB 01 CD 8F 3C 23 25 65 03 48 9C 6E 85 | .......<#%e.H.n.
+7F 90 68 F9 9A C5 B0 9E 7E F2 85 15 29 CC 1B 36 | ..h.....~...)..6
+1D 9B 4B 6C 76 2E 83 ED 94 5D 8B FC AD 0C 3B B3 | ..Klv....]....;.
+5F 71 C8 F4 F5 82 72 84 5C 62 F9 8E 04 98 6E EE | _q....r.\b....n.
+28 D8 A6 A7 DA 09 92 9F C9 7C C4 BA DD 52 84 59 | (........|...R.Y
+EA F8 18 DB 18 D7 9B 68 AC F9 0C C8 B1 3B 9F 18 | .......h.....;..
+15 75 09 FC 60 1D 25 DD 66 54 11 98 3E 1D C8 35 | .u..`.%.fT..>..5
+67 40 84 ED 2B EB 00 5B 6C C6 96 B4 B3 9D 52 45 | g@..+..[l.....RE
+EF 30 DD 9E 27 F9 88 7B 20 8C 70 2E FB 4E C9 7E | .0..'..{ .p..N.~
+AE D1 F3 A6 A3 31 FA 8C 9A DA 39 2B 6C 90 D5 3F | .....1....9+l..?
+BC BA FE 25 EF 46 4C 9A 46 A4 42 D3 AA 8E A8 1B | ...%.FL.F.B.....
+06 4F DB 38 91 9D 44 C8 4C 1D 29 CB 70 34 36 EE | .O.8..D.L.).p46.
+42 51 6F 50 91 02 CB F2 04 33 DF BC 45 2F 52 24 | BQoP.....3..E/R$
+D0 8B 76 F3 D4 C3 77 32 19 41 E5 49 D0 2F 7E 81 | ..v...w2.A.I./~.
+59 F0 B1 61 68 4A 69 CC 8B D0 98 B9 2A 22 67 22 | Y..ahJi.....*"g"
+5D D2 73 6E 28 02 6A D1 70 C9 07 01 C5 96 DC BD | ].sn(.j.p.......
+4A 49 7B 5D 47 59 3D 13 3F FE CE 0B CA E2 16 24 | JI{]GY=.?......$
+FE 2E 5B B1 FF 76 97 5B A2 93 37 23 37 8B 5C 6A | ..[..v.[..7#7.\j
+D5 EA 1D BA 4D 4E D7 74 27 3B 82 C5 F5 9E BB D4 | ....MN.t';......
+C0 69 C9 EC 3C 20 92 32 61 1A 59 42 56 DC CB AE | .i..< .2a.YBV...
+51 AC 88 CD 9B D2 42 2A 56 CF 89 9C FF A0 97 AD | Q.....B*V.......
+45 90 B3 AC F1 3C 5E EB 45 18 90 D5 7C 7F BD 90 | E....<^.E...|...
+17 C8 B8 61 F9 2B E3 75 F4 60 45 DB 51 41 7F 16 | ...a.+.u.`E.QA..
+61 8C 7C 02 C5 A3 FC 66 61 5F 5E 3A 36 9A 94 79 | a.|....fa_^:6..y
+37 37 9F 5B 78 A6 A2 B9 14 2C 3F BC A0 10 58 19 | 77.[x....,?...X.
+1A 15 9F 76 71 D2 41 0C 07 90 49 6C 39 65 CA DA | ...vq.A...Il9e..
+17 65 1B 7D FF 76 53 70 6E AF 10 1F B4 00 4A 51 | .e.}.vSpn.....JQ
+AF DA 1B 4A 8A 4D 15 E5 EC 59 A5 0D F8 C6 B2 FA | ...J.M...Y......
+85 4E C1 E3 EA BE AE CC EC BC 69 BD 53 D1 D6 52 | .N........i.S..R
+AA B3 57 21 47 7F 99 19 7A D4 97 66 FF 69 38 8E | ..W!G...z..f.i8.
+2A 2D BD 99 EE 0C E8 86 CD 48 77 DA A9 61 9A 90 | *-.......Hw..a..
+66 0D E0 78 CF AE B0 06 DF 84 F7 C7 8F B0 B8 B0 | f..x............
+6E 57 99 49 17 91 F9 E0 21 15 92 D0 E8 EE 36 65 | nW.I....!.....6e
+7B 5D 2E 46 A6 0F E9 FE 3C AF 19 82 C8 50 BE D4 | {].F....<....P..
+10 E8 9E EE D6 07 10 D2 41 43 70 8F B1 F5 BA DE | ........ACp.....
+1C 1A 7A F8 B8 6B 3F 0F C4 39 59 71 93 86 A2 0E | ..z..k?..9Yq....
+9E 79 75 B4 FC 17 D9 50 38 14 27 AC B0 ED 6A 19 | .yu....P8.'...j.
+AD EC 00 00 00 01 00 08 F4 50 1D 41 A2 D1 A7 84 | .........P.A....
+40 E0 8B 6C 3D FC 69 FB B5 56 28 68 AD 17 D5 B4 | @..l=.i..V(h....
+A0 2B EE 4F 19 E2 BD FB 8A A9 A9 25 B5 9E 0E F7 | .+.O.......%....
+2D 38 13 4C 20 02 4F 51 9A B3 D9 36 D7 03 A7 F6 | -8.L .OQ...6....
+E7 7F 76 E3 CF 78 46 9F 2A F0 A8 B7 3F 87 33 A5 | ..v..xF.*...?.3.
+E7 F2 55 E6 8D CA 9C 75 8B 3B 78 4C DE BF ED 50 | ..U....u.;xL...P
+AF 43 37 34 10 F6 9D 84 EA 67 AB 9D 6B C0 28 5B | .C74.....g..k.([
+9A 31 07 B4 AF ED 89 B2 28 BD E6 68 8E 97 99 D7 | .1......(..h....
+73 90 0B 1A E8 62 8E 2D BB F9 E9 2F F1 31 E6 D1 | s....b.-.../.1..
+C0 44 0E EA 02 39 AF EE 68 D0 2F 6B 0C AB 0E D4 | .D...9..h./k....
+CF E6 44 23 AE 85 0E BD 60 A7 44 82 4D D7 1C BB | ..D#....`.D.M...
+0A 53 68 64 EA E2 24 BF 95 90 6E 1A B8 FA 24 79 | .Shd..$...n...$y
+67 48 9C 35 F3 BE 78 08 6C B6 91 AB CF 66 A6 78 | gH.5..x.l....f.x
+5B E1 BF 9F 0C 45 ED 54 FB 27 C8 6C 01 3A 22 2A | [....E.T.'.l.:"*
+EB E7 50 A9 17 B9 8C C5 C7 93 D6 3F DE E6 AD C0 | ..P........?....
+AD 52 5C AD 91 03 AD C0 96 3A 3E 42 6F A4 1D 2A | .R\......:>Bo..*
+FF 8B 51 59 A9 07 A1 9D 34 D1 6B B6 00 ED 04 FD | ..QY....4.k.....
+39 44 F6 F2 4D CF 9A 92 16 A1 4E BE 0C 97 9A 22 | 9D..M.....N...."
+D5 30 6B 1D B4 E0 E4 9C 78 C9 40 99 84 69 DD 01 | .0k.....x.@..i..
+CA BB | ..
+
+Flow Record:
+ RecordCount = 43
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 697
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132069800 [2024-04-15 00:01:09.800]
+ last = 1713132070148 [2024-04-15 00:01:10.148]
+ received at = 1713132148817 [2024-04-15 00:02:28.817]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 61318
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 1657
+ src addr = 157.143.34.100
+ dst addr = 142.250.203.115
+ out packets = 11
+ out bytes = 5919
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 10.143 ms
+ srv latency = 0.000 ms
+ app latency = 64.929 ms
+ in payload = 517
+ TLS version = TLS 1.2
+ sni name = live.cast4.audio
+ ja3 hash = f436b9416f37d134cadd04886327d3e8
+ ja4 hash = t12d3113h1_e8f1e7e78f70_1b3407e2c936
+16 03 01 02 00 01 00 01 FC 03 03 8D E4 2D FF D2 | .............-..
+3F DE 98 1E 84 D7 12 88 63 72 80 E6 02 63 8A BD | ?.......cr...c..
+02 09 D5 8D C4 1C 9B 09 F8 72 11 20 55 71 3A DB | .........r. Uq:.
+A1 BF C9 6A C2 65 7A B4 4C 1D 02 EA 5D 1C AD CE | ...j.ez.L...]...
+86 3C E9 B0 BA B1 99 FD 0E 42 88 8B 00 3E 13 02 | .<.......B...>..
+13 03 13 01 C0 2C C0 30 00 9F CC A9 CC A8 CC AA | .....,.0........
+C0 2B C0 2F 00 9E C0 24 C0 28 00 6B C0 23 C0 27 | .+./...$.(.k.#.'
+00 67 C0 0A C0 14 00 39 C0 09 C0 13 00 33 00 9D | .g.....9.....3..
+00 9C 00 3D 00 3C 00 35 00 2F 00 FF 01 00 01 75 | ...=.<.5./.....u
+00 00 00 15 00 13 00 00 10 6C 69 76 65 2E 63 61 | .........live.ca
+73 74 34 2E 61 75 64 69 6F 00 0B 00 04 03 00 01 | st4.audio.......
+02 00 0A 00 0C 00 0A 00 1D 00 17 00 1E 00 19 00 | ................
+18 33 74 00 00 00 10 00 0B 00 09 08 68 74 74 70 | .3t.........http
+2F 31 2E 31 00 16 00 00 00 17 00 00 00 31 00 00 | /1.1.........1..
+00 0D 00 30 00 2E 04 03 05 03 06 03 08 07 08 08 | ...0............
+08 09 08 0A 08 0B 08 04 08 05 08 06 04 01 05 01 | ................
+06 01 03 03 02 03 03 01 02 01 03 02 02 02 04 02 | ................
+05 02 06 02 00 2B 00 09 08 03 04 03 03 03 02 03 | .....+..........
+01 00 2D 00 02 01 01 00 33 00 26 00 24 00 1D 00 | ..-.....3.&.$...
+20 54 05 CF AA 99 70 B9 66 FE B1 28 85 C3 FD D7 | T....p.f..(....
+F5 D8 D5 53 E4 A9 64 5E 10 2E 11 03 4D 0E AF 01 | ...S..d^....M...
+01 00 15 00 B0 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
+00 00 00 00 00 | .....
+
+Flow Record:
+ RecordCount = 44
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132053217 [2024-04-15 00:00:53.217]
+ last = 1713132084155 [2024-04-15 00:01:24.155]
+ received at = 1713132148817 [2024-04-15 00:02:28.817]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 57665
+ src tos = 0
+ fwd status = 0
+ in packets = 28
+ in bytes = 18476
+ src addr = 17.248.209.66
+ dst addr = 157.143.34.100
+ out packets = 31
+ out bytes = 6893
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 15.616 ms
+ srv latency = 0.000 ms
+ app latency = 0.366 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 BE AC 7B A5 70 | ....z...v....{.p
+C6 14 FB 55 57 7D F7 9B 3B 21 E6 64 85 38 E0 78 | ...UW}..;!.d.8.x
+7F B7 57 27 54 1A 89 25 FB 92 4E 20 A9 E1 BF 80 | ..W'T..%..N ....
+95 64 A5 A3 2B BA 8A C8 8D 92 32 AC 36 EE 42 E2 | .d..+.....2.6.B.
+34 75 9D 32 A3 8A 42 72 72 5B BA ED 13 02 00 00 | 4u.2..Brr[......
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 C0 | ..+.....3.$... .
+73 73 29 17 46 C8 24 A0 88 CF 00 65 82 DB 99 81 | ss).F.$....e....
+A1 97 45 7A 95 AA 5D 59 67 25 D9 C7 39 CD 0B 14 | ..Ez..]Yg%..9...
+03 03 00 01 01 17 03 03 00 2A 32 DB E1 2B 9D AD | .........*2..+..
+1E CE 8B 06 31 09 35 0D 51 43 78 10 6C CB DF A9 | ....1.5.QCx.l...
+0C 95 84 D7 11 13 E9 D3 D1 C4 29 65 5B 1D C9 CD | ..........)e[...
+A3 54 CB 46 17 03 03 11 25 D3 26 96 3C ED CF 17 | .T.F....%.&.<...
+37 91 37 69 42 79 4D B4 3C B1 E2 D3 E3 AA 46 4C | 7.7iByM.<.....FL
+6D 17 C5 60 34 51 79 BB 88 11 3A B5 E9 44 4A 55 | m..`4Qy...:..DJU
+47 C7 AD 22 B2 12 4D C0 B1 4B 7F 15 BD 5E CD 6C | G.."..M..K...^.l
+05 76 4A BF 1A 6F 31 4F 09 69 39 F6 C8 F2 E0 F8 | .vJ..o1O.i9.....
+F8 3C 15 26 5A 15 03 B4 C1 2A DF AF 7B 22 1B A1 | .<.&Z....*..{"..
+EB 78 0C 5C 7B B2 51 2A 29 A5 8B 93 17 C1 23 D4 | .x.\{.Q*).....#.
+67 D5 EF 12 8E CB 77 1F 27 89 37 5B 76 AB 1F A4 | g.....w.'.7[v...
+A2 8E 4E FD 8F 04 16 B9 DB FB DB C1 32 3F D0 53 | ..N.........2?.S
+E8 41 CE 29 AA 6E 83 31 FC BB 16 4D 0F 63 06 75 | .A.).n.1...M.c.u
+52 CC 84 49 AD 0D 3A 84 1E B2 2B 43 AF 3B 23 74 | R..I..:...+C.;#t
+ED 31 FF E8 45 6E AC D6 65 C3 74 30 87 0A 7D 77 | .1..En..e.t0..}w
+CE FA 34 FB 4D FC 94 74 54 9E 89 56 D7 B7 66 17 | ..4.M..tT..V..f.
+39 45 F6 E7 13 4A FA D5 9C 13 83 5B 74 3C 5F FE | 9E...J.....[t<_.
+B2 6B 81 27 2E 7F 7D 06 A7 CC DA 2A 35 55 11 AE | .k.'..}....*5U..
+C2 F4 E4 95 DE 37 CD 4C 8C 0A C4 43 57 7F C1 F6 | .....7.L...CW...
+DD 92 66 05 C1 41 26 E8 14 B7 EB AF 86 0F C3 B7 | ..f..A&.........
+37 F3 44 16 7C BB D7 86 8A DA 89 8C 86 0B A1 6A | 7.D.|..........j
+8A 24 25 A6 D1 71 23 62 02 FD 79 9F 00 37 97 AA | .$%..q#b..y..7..
+0E 9F FE C8 7E FB 3A 59 AC E1 69 2A F5 A4 C3 B8 | ....~.:Y..i*....
+68 BA 4C D4 45 E7 7A B9 FD 46 1B 55 CE FF C5 45 | h.L.E.z..F.U...E
+18 AD C3 9B 84 C7 FE A7 C6 92 9D BF 4B C3 E6 4A | ............K..J
+05 34 7C 21 5C 83 7C 96 C7 5A D7 6E A1 69 45 2F | .4|!\.|..Z.n.iE/
+3C 46 EA 00 30 A5 D5 35 F7 92 38 4F A3 5B 03 09 | ..OJ....
+8C 46 BF 90 96 3E 36 BF 12 FA 1E B5 FD 3D 51 CA | .F...>6......=Q.
+1D A0 B2 95 A7 44 97 3D 85 7A 7F 26 AC 61 C6 CA | .....D.=.z.&.a..
+11 93 C3 2F B9 5E 05 79 A9 96 14 8F 50 33 A2 63 | .../.^.y....P3.c
+DA 89 2A D1 FE 8A 40 AA F3 24 15 BD EB 63 F7 2A | ..*...@..$...c.*
+79 5E 1A 4D 56 14 13 48 F6 B7 8C 52 3F 10 BC 07 | y^.MV..H...R?...
+6F E8 53 5D 2B 5F 24 EB E1 79 E6 02 43 A8 89 93 | o.S]+_$..y..C...
+AA 06 A7 5A 87 2E 8E 01 A0 06 95 EB 7D DD CF BB | ...Z........}...
+6A 6F 70 0D 89 AE CB 14 2A 7D 0F 61 1C 5E C0 B9 | jop.....*}.a.^..
+20 C2 4E 4E 53 87 10 7B 50 D2 BA 8D 37 CD D7 27 | .NNS..{P...7..'
+9D 7A 62 2A 23 45 96 7C EF D5 FA 8B CA 04 4F C6 | .zb*#E.|......O.
+9F 6E EC 3A 8B 10 FA 63 34 22 CC FE 09 0B 1B 23 | .n.:...c4".....#
+9B 29 52 08 13 E8 84 72 8F EE AA A1 34 CD EA F5 | .)R....r....4...
+48 3E 57 5F 3C 78 8C A3 C6 82 41 9F 2D CF 19 C3 | H>W_.k(..
+75 11 D0 B8 FD B1 20 B0 99 8B 3E B9 54 DB EF C4 | u..... ...>.T...
+DD C0 8E B8 1D EF 91 AB E2 91 19 C1 D1 B7 B6 AD | ................
+EA 98 8F 67 FD 7F 52 89 21 01 51 04 9C 05 35 35 | ...g..R.!.Q...55
+4C 66 66 0A 72 A8 50 46 34 D1 D6 FE 11 90 F5 CA | Lff.r.PF4.......
+9E 3E B7 71 89 96 AA DC 6F E5 1C 48 52 9A ED 99 | .>.q....o..HR...
+E1 B1 6A 30 F0 3F 88 60 46 2E 91 ED E3 8F 40 9C | ..j0.?.`F.....@.
+45 A1 DB 7B E1 99 19 C9 40 3C 6B 7C 25 F5 EC 93 | E..{....@S.
+93 F8 0E 25 27 F9 C8 51 75 54 38 B6 04 6A 9C 4C | ...%'..QuT8..j.L
+EE 7C E8 05 D6 5B 15 60 FD 85 40 C3 92 F8 8E B4 | .|...[.`..@.....
+15 6C 25 6E 50 13 CE 68 70 EC 5A 94 7E 72 2D F4 | .l%nP..hp.Z.~r-.
+4F FA 5E B0 61 20 63 55 00 DA F6 16 DB 56 41 81 | O.^.a cU.....VA.
+B4 1E 2F B8 4F 6F 51 FA E7 E6 44 98 31 DA 2C D4 | ../.OoQ...D.1.,.
+46 68 AE 04 AC E8 CB 78 DC 70 84 6D 03 66 82 F1 | Fh.....x.p.m.f..
+22 6C 78 8B 15 90 19 A6 C6 3B 9D D2 EE 85 75 06 | "lx......;....u.
+E6 84 E4 E8 65 09 2F C8 4E A8 14 D1 4D 63 C4 F2 | ....e./.N...Mc..
+5D 34 6B ED 6E 13 AD 12 0F 50 2B D4 AA D2 AE D9 | ]4k.n....P+.....
+13 BE 1F 91 9E 3F 55 E2 61 21 D5 D2 BE 45 FE 89 | .....?U.a!...E..
+4F E4 41 AE F2 5F 6F 29 82 BB EE AA 9C 12 08 72 | O.A.._o).......r
+75 F2 86 C0 B8 3E D2 BC 89 51 35 DE 0E 29 80 37 | u....>...Q5..).7
+04 0B 03 4A B4 28 6D 29 C6 13 1F 53 EE B5 D5 4E | ...J.(m)...S...N
+5C 3C 9C 0E 97 F4 7D 3C 63 69 69 0D 61 8C D7 CD | \<....}........{..@.
+CA AF 56 EE 75 0D DC 54 8F 95 07 21 EB 00 8E E9 | ..V.u..T...!....
+C0 F6 A2 09 17 03 03 11 25 0B 3C 28 76 22 1E 2F | ........%.<(v"./
+7E 43 BF E5 18 1F C4 28 04 1D 02 29 85 E3 7E 6F | ~C.....(...)..~o
+4B 6C 32 FF 65 13 6C C2 2A B2 62 C6 6E 76 FB 96 | Kl2.e.l.*.b.nv..
+1D A3 BB A5 02 B4 F9 D1 C0 53 AF CA 89 99 44 ED | .........S....D.
+38 20 5B B8 D3 0F EC FF 4A FA 58 91 7D 05 5F A8 | 8 [.....J.X.}._.
+E6 71 1D F4 BD 27 CC 90 EB 99 8B 05 09 91 92 84 | .q...'..........
+2A D2 3F D9 16 68 2A EC 42 E6 BE 1C 6E 9A D3 0E | *.?..h*.B...n...
+13 4A 1D 1F EB 30 A0 86 39 4D 7E 60 6A 3F 66 71 | .J...0..9M~`j?fq
+95 9A F0 7C D4 72 3F 64 4F 86 60 55 C4 15 D4 29 | ...|.r?dO.`U...)
+B0 16 33 19 39 47 66 94 3F 16 61 7C CC D2 5A A3 | ..3.9Gf.?.a|..Z.
+F2 27 0D 9E 35 51 B3 89 0A 85 1E 41 6F BA 1A 77 | .'..5Q.....Ao..w
+26 81 01 97 CF 54 F9 2C 78 77 05 D3 31 30 B0 E7 | &....T.,xw..10..
+24 FB E3 30 7D DB DD 93 19 F6 D4 24 22 E3 DA 41 | $..0}......$"..A
+9D 59 7D 86 42 D6 0D 05 8B D8 16 C3 DA FB 38 0C | .Y}.B.........8.
+13 71 BC 74 3E F1 BB 16 7C 89 FA E6 B8 8C 5E 28 | .q.t>...|.....^(
+C1 BD C2 EE C4 D4 91 D6 D7 8B 70 57 B1 ED 47 72 | ..........pW..Gr
+57 2F CC B2 62 E8 2E F4 8C 9D 45 E3 F2 7A C7 75 | W/..b.....E..z.u
+89 34 B2 5C 20 0E FA 3D 2B 0D AD E9 B7 B2 7C D3 | .4.\ ..=+.....|.
+B9 0F 12 F1 88 19 0F 1A 89 4A 1A 12 E5 42 3D 61 | .........J...B=a
+F5 01 6B 56 5D 45 CB 3C 11 D9 F7 E3 02 3B F2 5A | ..kV]E.<.....;.Z
+72 A1 88 F1 5A C1 39 96 94 90 14 03 7C 9E A5 2E | r...Z.9.....|...
+73 04 DB AD D7 22 17 13 82 51 EE 78 77 63 F9 26 | s...."...Q.xwc.&
+78 1A DC 80 D7 C3 23 94 5C 15 D8 0F E2 9D FC 20 | x.....#.\......
+40 49 53 36 3B F7 5A 48 3C D2 3B 5F F1 87 87 0F | @IS6;.ZH<.;_....
+00 DB A9 E8 27 FF 3B A1 05 93 EC A6 CC 8A 64 62 | ....'.;.......db
+A3 E3 6E 52 02 84 EC A1 12 97 E6 F2 C0 54 E1 9C | ..nR.........T..
+74 EF 0B 93 D0 82 C2 6F 33 BD D1 F1 EB 48 6F BA | t......o3....Ho.
+74 31 E0 98 23 11 CF 8C 0E C1 27 11 4E 91 65 E6 | t1..#.....'.N.e.
+5C DF 7B 6E 5D 92 B3 3E C9 9F 1C 84 13 1E 5B E2 | \.{n]..>......[.
+1D 14 F4 03 A3 5B 7D BC 30 F3 6C 00 F1 25 5B F0 | .....[}.0.l..%[.
+94 80 11 B5 75 A3 16 59 C6 70 D1 53 6E 62 96 77 | ....u..Y.p.Snb.w
+01 1D B1 3F 12 41 F5 93 F1 7D 58 E8 2A 60 43 1C | ...?.A...}X.*`C.
+8E 9D 60 3F 1D 1E CC 58 EE 61 B7 1B D1 5B 4C 0E | ..`?...X.a...[L.
+39 40 C0 50 2C 8A 2E 28 D8 BA AD FF 29 64 F1 6D | 9@.P,..(....)d.m
+94 E4 E4 3E E9 19 1F 9E 0D 02 39 68 A7 EE 58 5A | ...>......9h..XZ
+B8 24 F5 80 D3 70 2A 7A DB E0 62 8A C4 47 8A E6 | .$...p*z..b..G..
+67 D0 28 1D 31 32 5D 23 61 0D 64 04 69 75 3D 08 | g.(.12]#a.d.iu=.
+DA 01 FC 1C 93 CF 16 24 4E AA 68 D6 8E 52 4F 91 | .......$N.h..RO.
+A0 C5 6C 5F 71 1D D1 FE 4C F3 88 FA 3E 74 E9 90 | ..l_q...L...>t..
+B6 BD 9D AE DC 47 1C 4B 63 39 A3 6E D8 5E 76 72 | .....G.Kc9.n.^vr
+9B B0 DC FB 6E 09 F7 EB 13 A2 DE B6 D1 06 3E 8B | ....n.........>.
+0F 03 E0 2C 4E B9 03 94 5B E2 1F 56 0B DA CF 3B | ...,N...[..V...;
+42 B9 69 8E 51 90 8D 88 D5 13 6E B9 F7 A3 8F DD | B.i.Q.....n.....
+2D 23 D5 89 07 3C FA 01 40 D0 D6 99 B6 17 1B 58 | -#...<..@......X
+33 76 D4 5B 9F A0 BC C1 4D 5A 1D AF 38 23 1C F7 | 3v.[....MZ..8#..
+A1 AC 63 AA 65 8E FB 64 62 CD 22 5C 0D 44 4A 34 | ..c.e..db."\.DJ4
+A3 6F 94 16 6A 4F 3A 90 1B 75 C6 56 AC C8 90 D8 | .o..jO:..u.V....
+2F EF 0F E9 30 94 43 57 F5 D8 F3 16 F1 56 EF 1F | /...0.CW.....V..
+06 00 00 40 28 C4 02 4C F7 2F 69 ED BE 9B 06 A1 | ...@(..L./i.....
+7F C0 6B D9 BF 68 3B 7B 0E 63 3B 58 88 A8 DD A4 | ..k..h;{.c;X....
+E0 BB 3D D1 5B 8E 55 BC AD E4 E8 71 55 A4 E3 38 | ..=.[.U....qU..8
+D1 8A 53 9A 00 7B 23 63 A6 F7 0F BF FA AF E1 E4 | ..S..{#c........
+97 65 9F 3D BF 90 E2 72 48 8A A3 15 BF 74 91 79 | .e.=...rH....t.y
+E1 34 53 6D 16 FD 83 04 C8 F9 68 20 31 B1 CA 81 | .4Sm......h 1...
+9B BC 06 66 B3 7B B3 00 95 63 36 4F 5F 54 62 55 | ...f.{...c6O_TbU
+40 7C 05 F6 62 A3 E1 80 0B F0 12 38 30 AE 91 1C | @|..b......80...
+8B D8 75 82 D7 F7 6C 64 5F EB FD 6A 4E EC 77 F6 | ..u...ld_..jN.w.
+70 04 F6 7D 97 31 6D 9D BB AA 8B F7 84 ED 63 78 | p..}.1m.......cx
+EE EA CD F5 69 E1 16 5D 5B 57 F4 EF 7B C1 36 A6 | ....i..][W..{.6.
+E4 44 DE B1 E8 82 C1 B3 25 B1 3E 9A 2D 8E 20 0E | .D......%.>.-. .
+C9 2F 9E 79 7B FA 16 3D 2E AB 96 96 84 F4 0D B9 | ./.y{..=........
+76 86 E5 28 1C 41 45 F6 33 B0 B4 1E 74 C0 63 C0 | v..(.AE.3...t.c.
+10 15 FD B9 99 F3 F0 C8 84 33 28 B9 2F 81 99 A8 | .........3(./...
+F2 A3 40 6F 7E BE B1 8A A7 87 BE A2 4B 47 42 37 | ..@o~.......KGB7
+7D 48 F9 36 20 04 D7 1E BA 0E 74 7B 16 83 92 45 | }H.6 .....t{...E
+FF 02 C9 68 09 8B 1C AF 29 29 84 19 EC 62 0E 4E | ...h....))...b.N
+B3 A2 3E D1 52 50 CF 52 63 AB 04 20 49 6E A4 D4 | ..>.RP.Rc.. In..
+02 DB D2 6D 3C F1 2E 14 9F 70 D4 CE F7 19 36 74 | ...m<....p....6t
+6A F5 7B 0D 16 BC 0B F3 F0 05 5A B2 7C EC 05 FD | j.{.......Z.|...
+A4 39 D2 8A AB 04 C3 04 56 1C ED A8 3F 1A 29 1A | .9......V...?.).
+55 2B BB CA C2 2B 66 38 61 DE 95 3F 1E 58 3B 59 | U+...+f8a..?.X;Y
+98 1F 77 60 A8 6C 12 DA 80 01 7E 99 D6 AB 44 02 | ..w`.l....~...D.
+36 14 35 E9 29 9D E0 BB 65 26 79 2F 3C 47 6C 7B | 6.5.)...e&y/.xj#M.. N..P
+F9 84 7F E6 5B 99 A3 72 D1 8C CC 00 00 2C 00 FF | ....[..r.....,..
+C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0
+C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'..........
+00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O..
+00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz
+2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............
+00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................
+05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................
+01 00 00 00 00 00 12 00 00 00 17 00 00 | .............
+
+Flow Record:
+ RecordCount = 49
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 6: 1 2 5 12 15 29
+ size = 1402
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132381700 [2024-04-15 00:06:21.700]
+ last = 1713132382221 [2024-04-15 00:06:22.221]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 59480
+ src tos = 0
+ fwd status = 0
+ in packets = 26
+ in bytes = 14779
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ out packets = 21
+ out bytes = 5602
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+C5 00 00 00 01 00 08 E4 11 02 B6 A6 93 80 E0 00 | ................
+43 A5 76 A7 10 E4 E7 8E 3B DC 64 72 07 2D A6 F0 | C.v.....;.dr.-..
+D7 5C 9B 5E A7 74 1B D8 A0 BA A7 B8 5B 65 77 39 | .\.^.t......[ew9
+4B 94 62 37 9A A6 50 4A F0 EE 2C 95 D7 97 82 7B | K.b7..PJ..,....{
+95 06 6D FC 1A 5F B0 DD 21 72 49 74 12 B2 99 D5 | ..m.._..!rIt....
+6F 39 CD A8 10 25 42 8E BB 06 0F 28 93 43 57 E7 | o9...%B....(.CW.
+23 FC 1B E7 77 83 05 8D 59 E7 6F 82 1B A1 0B 62 | #...w...Y.o....b
+89 63 84 04 38 FB D2 B7 1F 57 37 D8 07 A2 79 C1 | .c..8....W7...y.
+90 38 BC DF 3F A8 0A 64 23 19 ED C1 C4 AD FB D9 | .8..?..d#.......
+69 E0 E9 16 0F 2E 03 C0 F7 F5 16 A2 E9 1B DF 00 | i...............
+D7 7E 87 96 8A CC 83 2F EE 38 18 39 CC D9 FC 46 | .~...../.8.9...F
+0A 94 F9 70 E4 0D 3B A3 73 41 CD 0D C1 88 88 1F | ...p..;.sA......
+88 2E 1F BB B7 97 33 93 B5 66 E0 61 5B 00 21 4A | ......3..f.a[.!J
+40 2F 4D 8D 37 82 13 30 9A 5C 8F 54 98 38 8D 9D | @/M.7..0.\.T.8..
+3E B0 F4 53 6F 51 81 0B DD 5C 79 5A 33 7E 95 99 | >..SoQ...\yZ3~..
+9E 11 6A 7B B9 8F AA E5 39 86 FF EA 45 8E 6D 85 | ..j{....9...E.m.
+C3 50 B9 E7 04 7D 66 18 4F 5E 2A 99 AA 90 92 AC | .P...}f.O^*.....
+08 00 A8 68 1D 39 25 A3 75 03 B6 FB 5A 3C D8 5D | ...h.9%.u...Z<.]
+63 FA 55 56 5B CB 90 05 3D 33 27 6C AD 9F 83 A0 | c.UV[...=3'l....
+B1 2F 57 48 29 D8 73 28 F3 01 EF 9D 78 54 9D 4A | ./WH).s(....xT.J
+83 3E FF BB 80 FC EA 03 40 2F 51 75 7A 46 BA E2 | .>......@/QuzF..
+20 DB 71 9A A9 A1 66 27 EA 5C 21 B8 FF 43 52 16 | .q...f'.\!..CR.
+B1 DF 2F 1F E2 83 95 F6 2D 99 3B 3E DF 12 FE 15 | ../.....-.;>....
+26 EB 90 B9 1C A8 AC 10 6D 64 CC 16 54 0F 2F 79 | &.......md..T./y
+9D 4F DA 66 B2 C4 E9 0A FF 65 06 28 5C 94 4E 00 | .O.f.....e.(\.N.
+01 07 48 4F 2B 47 91 C1 8C 50 01 FD B5 1D 71 81 | ..HO+G...P....q.
+A2 82 10 F4 27 9C A5 19 32 35 4E 8A 6C 37 55 5E | ....'...25N.l7U^
+68 DA E2 9A 72 86 09 17 3F 29 38 7C 4C D4 2E 81 | h...r...?)8|L...
+E2 39 4B 54 6F 89 ED 25 1B 11 22 9B 35 42 81 C5 | .9KTo..%..".5B..
+C1 14 73 C0 05 44 64 50 12 AD 28 5F 7D 4F 6D 87 | ..s..DdP..(_}Om.
+B9 96 DF 78 DA D3 1B 73 31 81 02 A6 98 51 A6 9E | ...x...s1....Q..
+F1 27 23 D1 03 DE 4A D0 5E 21 FE 90 C5 33 0D F2 | .'#...J.^!...3..
+83 67 68 AA A0 84 F7 06 FD B1 28 53 0A E6 D1 DF | .gh.......(S....
+67 0B 56 12 6E D0 B1 2D E3 08 13 F3 B6 AF 42 A3 | g.V.n..-......B.
+78 74 B3 2F 8D 8B 8A 81 B8 32 54 95 BD 13 42 48 | xt./.....2T...BH
+9D 29 2F AA 44 9B 02 0F FE 6C F6 93 F6 AF AB C0 | .)/.D....l......
+A3 94 9C 8F C0 80 86 C5 8A 07 D5 CC 50 9A 88 53 | ............P..S
+DF 18 EC CF 06 F6 F7 B6 A8 E4 AE 42 97 A1 A4 66 | ...........B...f
+41 CA CE E4 90 FD 46 BD 29 BC C7 35 89 C7 3E FA | A.....F.)..5..>.
+55 A6 45 32 49 8C 46 F6 E3 1A 71 83 CA D1 6F CE | U.E2I.F...q...o.
+84 C2 8D DD E4 97 D1 C4 72 41 86 52 C9 46 9F DA | ........rA.R.F..
+22 C9 A4 34 F7 C5 47 19 CA 6A 8E B4 BB 98 88 26 | "..4..G..j.....&
+07 D7 9E EE AD 2C 52 6A 94 79 02 B2 43 60 A5 9F | .....,Rj.y..C`..
+7E A7 EC 07 8C E8 70 2C 0B 53 BF 90 D2 54 A8 06 | ~.....p,.S...T..
+81 5E ED 6D BA 02 AD B2 33 35 BB FF 8D E1 EF FB | .^.m....35......
+A0 74 40 1F 69 B3 1C 7B FB 80 99 CF 1C 5D 06 9B | .t@.i..{.....]..
+71 F5 59 CE 6B C5 6E 2A C8 4A 31 9D 1E 33 28 65 | q.Y.k.n*.J1..3(e
+76 8B 03 06 47 75 24 83 1B FD 50 5C 2C 8E 4B 1C | v...Gu$...P\,.K.
+3D 1D DA 81 8B 9E 5A 29 92 0E 4C 63 1F 8C 3B DF | =.....Z)..Lc..;.
+33 83 A5 79 75 BC 39 AA 3A 33 A8 3C 8E FA F0 39 | 3..yu.9.:3.<...9
+E3 9A 90 BE A7 09 4D BE 58 08 89 03 45 AE 64 52 | ......M.X...E.dR
+63 14 01 DC A4 32 15 63 4A 0E B0 EC 38 F5 1E 1F | c....2.cJ...8...
+86 B9 5D 93 71 55 A6 C7 C0 1E 1A D4 10 1B 9A CF | ..].qU..........
+FF 9D FC D2 64 EB 09 B3 5B 29 53 90 40 09 E7 5F | ....d...[)S.@.._
+59 89 8E 1C 45 2E A2 A5 A1 6C 60 88 EC D7 DE 3D | Y...E....l`....=
+47 D6 D1 69 49 16 E7 AA 40 A2 2E 9F 46 55 38 D0 | G..iI...@...FU8.
+C4 40 EA 11 76 E9 79 0C 27 B1 79 0C A2 45 EE B5 | .@..v.y.'.y..E..
+A5 F9 E0 A2 D9 60 C1 FC 9E 9D 5F 73 75 77 A1 C3 | .....`...._suw..
+89 D8 B1 4A 69 8D FC 32 F1 B4 50 31 57 B2 0D A7 | ...Ji..2..P1W...
+26 D7 2E F9 A8 71 C1 EB 00 00 00 01 00 08 E4 11 | &....q..........
+02 B6 A6 93 80 E0 40 DB 3A AC 96 84 01 55 A5 34 | ......@.:....U.4
+23 AF 67 E4 1B 7C 94 59 B1 DB 49 DA 5B AA 48 A0 | #.g..|.Y..I.[.H.
+7B 37 EC 84 44 BF AB C4 68 1E BB 91 50 44 CA 8E | {7..D...h...PD..
+88 BA 2B 8F F1 C6 7F A3 19 39 4E 74 3C 64 92 BE | ..+......9Nt.....1M...../U.
+C1 52 63 49 50 11 2D CE 3A 7A 83 2D 4F 83 75 18 | .RcIP.-.:z.-O.u.
+21 3C 12 D2 59 47 1D 4C BE 21 24 A0 C6 C4 30 58 | !<..YG.L.!$...0X
+39 5A AD 30 A8 FE ED 4B 33 13 C9 30 E9 9A 47 E3 | 9Z.0...K3..0..G.
+FB 19 52 41 AB A4 F6 4E 9A 50 BB 8C A8 BD 67 F8 | ..RA...N.P....g.
+13 49 | .I
+
+Flow Record:
+ RecordCount = 50
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1608
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132217356 [2024-04-15 00:03:37.356]
+ last = 1713132217529 [2024-04-15 00:03:37.529]
+ received at = 1713132302716 [2024-04-15 00:05:02.716]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 60460
+ src tos = 0
+ fwd status = 0
+ in packets = 12
+ in bytes = 7012
+ src addr = 13.224.103.47
+ dst addr = 157.143.34.100
+ out packets = 12
+ out bytes = 1634
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 8.405 ms
+ srv latency = 0.000 ms
+ app latency = 0.262 ms
+ in payload = 1428
+ TLS version = TLS 1.3
+ ja3s hash = 16a232c6047ab4c7f493b826d419a8be
+ ja4s hash = t130500_c02f_a241d087c239
+16 03 03 00 63 02 00 00 5F 03 03 26 A5 A3 FF 2E | ....c..._..&....
+BB 06 A5 05 5B 55 50 AB DA F5 FE 10 52 07 5F 75 | ....[UP.....R._u
+F6 5D A5 44 4F 57 4E 47 52 44 01 20 34 AB F1 B6 | .].DOWNGRD. 4...
+B8 5E 91 27 7C F7 F7 51 A4 EC 3B 5C BD 90 7E 88 | .^.'|..Q..;\..~.
+B7 B2 71 2B 3D F6 53 9F 31 E6 FF E5 C0 2F 00 00 | ..q+=.S.1..../..
+17 00 00 00 00 00 0B 00 02 01 00 FF 01 00 01 00 | ................
+00 05 00 00 00 17 00 00 16 03 03 13 93 0B 00 13 | ................
+8F 00 13 8C 00 06 0F 30 82 06 0B 30 82 04 F3 A0 | .......0...0....
+03 02 01 02 02 10 0A 28 52 01 F0 E0 3A 67 F4 F8 | .......(R...:g..
+C7 A1 48 40 12 B8 30 0D 06 09 2A 86 48 86 F7 0D | ..H@..0...*.H...
+01 01 0B 05 00 30 3C 31 0B 30 09 06 03 55 04 06 | .....0<1.0...U..
+13 02 55 53 31 0F 30 0D 06 03 55 04 0A 13 06 41 | ..US1.0...U....A
+6D 61 7A 6F 6E 31 1C 30 1A 06 03 55 04 03 13 13 | mazon1.0...U....
+41 6D 61 7A 6F 6E 20 52 53 41 20 32 30 34 38 20 | Amazon RSA 2048
+4D 30 31 30 1E 17 0D 32 33 30 37 31 30 30 30 30 | M010...230710000
+30 30 30 5A 17 0D 32 34 30 38 30 37 32 33 35 39 | 000Z..2408072359
+35 39 5A 30 14 31 12 30 10 06 03 55 04 03 13 09 | 59Z0.1.0...U....
+74 69 64 61 6C 2E 63 6F 6D 30 82 01 22 30 0D 06 | tidal.com0.."0..
+09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F | .*.H............
+00 30 82 01 0A 02 82 01 01 00 D8 DB 24 28 FF 06 | .0..........$(..
+62 F6 20 6C E1 1D 3C 09 F1 AF 3E 26 6B F1 90 4E | b. l..<...>&k..N
+E7 D5 28 7C BD 18 AA E2 8F 06 66 64 65 35 62 25 | ..(|......fde5b%
+4A 9D 59 73 C3 BD 0A 64 C0 29 6C AA CC F5 3F A4 | J.Ys...d.)l...?.
+47 33 26 D1 13 96 93 01 DE 8A B0 B1 52 A7 20 F9 | G3&.........R. .
+49 B9 F9 B0 04 D8 27 BF A0 52 55 7C 5F B5 9F EF | I.....'..RU|_...
+CE 8E F0 EA 98 8D 49 2A FE 0B 65 E2 C5 29 06 33 | ......I*..e..).3
+91 C0 28 73 69 1E AB 09 06 E2 71 A2 0C 5F 50 A3 | ..(si.....q.._P.
+82 7D BE F5 A2 B6 FC BE E2 55 FD BB 3E E3 7F 2B | .}.......U..>..+
+B8 6E D9 5D E0 75 49 6A CD DC 49 52 0B 58 C2 0B | .n.].uIj..IR.X..
+B4 35 31 C6 35 8C F2 90 AC 29 FA 74 EA EF 5F AD | .51.5....).t.._.
+C3 2F B5 D0 04 4A CB 98 A8 8B 4B AE 22 86 58 EB | ./...J....K.".X.
+E1 9E E0 B1 4F F4 F3 07 14 B5 14 62 99 33 85 5E | ....O......b.3.^
+60 B9 01 6A 6A 26 FE 78 0B 00 DF D9 B5 BA 39 A4 | `..jj&.x......9.
+51 6F E1 88 1D 08 AE 05 B5 BD A9 50 BD 10 EC 45 | Qo.........P...E
+16 89 84 41 35 8B 69 2E DC 52 07 44 E8 28 B3 4C | ...A5.i..R.D.(.L
+0D A5 5F D9 8B 75 86 89 3C 93 02 03 01 00 01 A3 | .._..u..<.......
+82 03 2F 30 82 03 2B 30 1F 06 03 55 1D 23 04 18 | ../0..+0...U.#..
+30 16 80 14 81 B8 0E 63 8A 89 12 18 E5 FA 3B 3B | 0......c......;;
+50 95 9F E6 E5 90 13 85 30 1D 06 03 55 1D 0E 04 | P.......0...U...
+16 04 14 A6 52 40 27 FC 32 CD 1D D0 81 EC 6B 98 | ....R@'.2.....k.
+04 D6 8B FB 00 1D 81 30 61 06 03 55 1D 11 04 5A | .......0a..U...Z
+30 58 82 09 74 69 64 61 6C 2E 63 6F 6D 82 0F 2A | 0X..tidal.com..*
+2E 77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D | .wimpmusic.com..
+77 69 6D 70 6D 75 73 69 63 2E 63 6F 6D 82 0D 74 | wimpmusic.com..t
+69 64 61 6C 68 69 66 69 2E 63 6F 6D 82 0B 2A 2E | idalhifi.com..*.
+74 69 64 61 6C 2E 63 6F 6D 82 0F 2A 2E 74 69 64 | tidal.com..*.tid
+61 6C 68 69 66 69 2E 63 6F 6D 30 0E 06 03 55 1D | alhifi.com0...U.
+0F 01 01 FF 04 04 03 02 05 A0 30 1D 06 03 55 1D | ..........0...U.
+25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 | %..0...+........
+08 2B 06 01 05 05 07 03 02 30 3B 06 03 55 1D 1F | .+.......0;..U..
+04 34 30 32 30 30 A0 2E A0 2C 86 2A 68 74 74 70 | .40200...,.*http
+3A 2F 2F 63 72 6C 2E 72 32 6D 30 31 2E 61 6D 61 | ://crl.r2m01.ama
+7A 6F 6E 74 72 75 73 74 2E 63 6F 6D 2F 72 32 6D | zontrust.com/r2m
+30 31 2E 63 72 6C 30 13 06 03 55 1D 20 04 0C 30 | 01.crl0...U. ..0
+0A 30 08 06 06 67 81 0C 01 02 01 30 75 06 08 2B | .0...g.....0u..+
+06 01 05 05 07 01 01 04 69 30 67 30 2D 06 08 2B | ........i0g0-..+
+06 01 05 05 07 30 01 86 21 68 74 74 70 3A 2F 2F | .....0..!http://
+6F 63 73 70 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F | ocsp.r2m01.amazo
+6E 74 72 75 73 74 2E 63 6F 6D 30 36 06 08 2B 06 | ntrust.com06..+.
+01 05 05 07 30 02 86 2A 68 74 74 70 3A 2F 2F 63 | ....0..*http://c
+72 74 2E 72 32 6D 30 31 2E 61 6D 61 7A 6F 6E 74 | rt.r2m01.amazont
+72 75 73 74 2E 63 6F 6D 2F 72 32 6D 30 31 2E 63 | rust.com/r2m01.c
+65 72 30 0C 06 03 55 1D 13 01 01 FF 04 02 30 00 | er0...U.......0.
+30 82 01 7E 06 0A 2B 06 01 04 01 D6 79 02 04 02 | 0..~..+.....y...
+04 82 01 6E 04 82 01 6A 01 68 00 76 00 EE CD D0 | ...n...j.h.v....
+64 D5 DB 1A CE C5 5C B7 9D B4 CD 13 A2 32 87 46 | d.....\......2.F
+7C BC EC DE C3 51 48 59 46 71 1F B5 9B 00 00 01 | |....QHYFq......
+89 3E 21 77 27 00 00 04 03 00 47 30 45 02 21 00 | .>!w'.....G0E.!.
+C3 53 34 AF 43 03 C8 C1 11 23 3E C1 40 EF 06 27 | .S4.C....#>.@..'
+CD E1 7A 49 8B DD 92 84 2B 16 63 6C 2A B5 A2 E2 | ..zI....+.cl*...
+02 20 0F C9 0F B9 45 4D E3 88 94 3D 75 78 15 CC | . ....EM...=ux..
+7F 6B 35 8B 00 3B 7B 0E 8A 1C 2D 27 86 24 17 F5 | .k5..;{...-'.$..
+63 B7 00 76 00 48 B0 E3 6B DA A6 47 34 0F E5 6A | c..v.H..k..G4..j
+02 FA 9D 30 EB 1C 52 01 CB 56 DD 2C 81 D9 BB BF | ...0..R..V.,....
+AB 39 D8 84 73 00 00 01 89 3E 21 77 04 00 00 04 | .9..s....>!w....
+03 00 47 30 45 02 21 00 AC F0 89 AA C4 1F 25 10 | ..G0E.!.......%.
+2E 63 EB 9F 51 F8 34 FC B8 E9 87 80 67 CF FE 12 | .c..Q.4.....g...
+46 67 8D 9C ED 23 25 A6 02 20 0D 0C 2F 87 19 F4 | Fg...#%.. ../...
+EF 94 64 B0 F4 2D 7D 3C 5E 33 52 8D 7B D4 E0 FB | ..d..-}<^3R.{...
+4D 9A 14 C8 E1 65 89 5E C6 C4 00 76 00 DA B6 BF | M....e.^...v....
+6B 3F B5 B6 22 9F 9B C2 BB 5C 6B E8 70 91 71 6C | k?.."....\k.p.ql
+BB 51 84 85 34 BD A4 3D 30 48 D7 FB AB 00 00 01 | .Q..4..=0H......
+89 3E 21 76 E0 00 00 04 03 00 47 30 45 02 21 00 | .>!v......G0E.!.
+86 79 F0 C1 4E 93 9C 55 56 DF 1B 18 DC AF 80 B5 | .y..N..UV.......
+DB 29 68 19 86 6B B1 AF A0 E3 0D A5 91 42 42 37 | .)h..k.......BB7
+02 20 53 72 52 08 2E 09 7A E8 B8 10 1E AA C5 7D | . SrR...z......}
+0F D0 25 D2 EE 1D EC F5 E1 09 2D F5 B4 12 3A 83 | ..%.......-...:.
+59 A7 30 0D 06 09 2A 86 48 86 F7 0D 01 01 0B 05 | Y.0...*.H.......
+00 03 82 01 01 00 4F E5 AC 91 4E 4A 44 05 5D 5D | ......O...NJD.]]
+D3 9D AC B4 | ....
+
+Flow Record:
+ RecordCount = 51
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 1628
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132312425 [2024-04-15 00:05:12.425]
+ last = 1713132343398 [2024-04-15 00:05:43.398]
+ received at = 1713132441666 [2024-04-15 00:07:21.666]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 443
+ dst port = 53730
+ src tos = 0
+ fwd status = 0
+ in packets = 29
+ in bytes = 18529
+ src addr = 17.248.209.68
+ dst addr = 157.143.34.100
+ out packets = 32
+ out bytes = 6945
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 14.995 ms
+ srv latency = 0.000 ms
+ app latency = 0.552 ms
+ in payload = 1448
+ TLS version = TLS 1.3
+ ja3s hash = 15af977ce25de452b96affa2addb1036
+ ja4s hash = t130200_1302_a56c5b993250
+16 03 03 00 7A 02 00 00 76 03 03 BA 07 CE 30 B6 | ....z...v.....0.
+38 80 A7 FA BB F3 72 03 0E D3 3A DB A0 09 A2 32 | 8.....r...:....2
+3F 62 21 32 7F 97 D2 60 4E 8A 14 20 C4 DD 6E AC | ?b!2...`N.. ..n.
+FE 8D B5 9A 86 C2 18 8B E6 AD 1D 0E 16 6F 29 59 | .............o)Y
+BE 9F 65 72 F1 40 A4 36 30 40 75 00 13 02 00 00 | ..er.@.60@u.....
+2E 00 2B 00 02 03 04 00 33 00 24 00 1D 00 20 D4 | ..+.....3.$... .
+B1 07 2D 73 84 95 82 57 76 60 00 7C A0 69 FE 16 | ..-s...Wv`.|.i..
+09 86 B8 7F D3 AD 8D 4C 0D 2D 80 81 9E 4A 64 14 | .......L.-...Jd.
+03 03 00 01 01 17 03 03 00 2A 68 7C DD 01 66 6A | .........*h|..fj
+65 00 01 CD 30 FB E6 6D 04 1F BA BD 7C 0F A2 66 | e...0..m....|..f
+3B 4F 36 DD 98 A6 08 4C 1B 59 B5 5C A9 61 D3 36 | ;O6....L.Y.\.a.6
+D9 2D 3E 84 17 03 03 11 25 7A F3 01 9C 4C C3 2F | .->.....%z...L./
+38 70 C5 24 22 E9 B0 2A B7 42 59 52 FE E1 9E ED | 8p.$"..*.BYR....
+E4 C7 D7 D5 D7 A1 77 5B 9B 56 CF 4A 6F 91 53 5E | ......w[.V.Jo.S^
+BA E9 58 20 6E 2E A1 D6 CA 4E D3 53 FB E9 0D 91 | ..X n....N.S....
+6B 2C FC B4 89 8A D0 C6 F1 1D 0E 0F 7E E4 74 16 | k,..........~.t.
+AA B0 58 62 71 50 39 54 89 FA E6 BB 13 48 A4 AC | ..XbqP9T.....H..
+D4 71 D8 EC C0 3C 9F 7B E3 7E C8 38 5C 52 BE 8E | .q...<.{.~.8\R..
+79 29 F8 9B 62 1D 96 5B 90 FC D9 2D A3 35 BE 0A | y)..b..[...-.5..
+E7 4F 06 E2 1C 43 7C CD 25 C1 E7 8B EF 89 78 D3 | .O...C|.%.....x.
+89 D6 1C 47 1D 61 1B DB 15 EC 78 D0 A8 C8 34 23 | ...G.a....x...4#
+42 7D 5E EE FC 93 55 50 FB 85 07 40 1B DC 5A 59 | B}^...UP...@..ZY
+5F 63 E9 E1 23 60 BA 38 85 52 55 AB 2D B0 41 AA | _c..#`.8.RU.-.A.
+70 E0 B5 EB 50 1A 21 E5 FC C2 3D AE 9F 13 1A 96 | p...P.!...=.....
+B5 D0 E8 0F A8 C9 A6 FB CC 29 0C 85 29 8D 3A 83 | .........)..).:.
+F8 77 6B 04 E5 67 A9 CE EB DF A6 F0 2B 2E EB 33 | .wk..g......+..3
+AD B7 CC F6 26 D0 A6 DF 5B 28 68 49 32 59 20 D5 | ....&...[(hI2Y .
+CF 0D 35 61 90 4D 42 D0 79 2B 73 B0 A3 3D 6C C2 | ..5a.MB.y+s..=l.
+08 00 3C 98 3A CB 76 DB C7 04 1B C7 22 15 BF 5B | ..<.:.v....."..[
+43 CE 13 BC C5 7C EE 4D 68 BB 4F 93 08 8C E9 D0 | C....|.Mh.O.....
+5F 55 A1 E0 54 6D 6A 2C 1C 0A C0 90 59 12 17 6F | _U..Tmj,....Y..o
+55 5A 6E A8 28 3B 2C 39 49 5F 8E 65 B9 8E 89 40 | UZn.(;,9I_.e...@
+63 91 F0 03 E0 1B A3 E2 A6 4F 21 F0 5E EB E4 28 | c........O!.^..(
+A8 B5 B2 5E 72 36 08 66 E9 55 A7 E6 4A 5F 69 CF | ...^r6.f.U..J_i.
+8C 2F 5D 7B EF BB 53 9B A7 AC F2 92 EE 83 1B BA | ./]{..S.........
+F0 55 E6 AC 49 9E 05 77 3D E9 DA 03 82 74 E0 E1 | .U..I..w=....t..
+AE F7 F1 D5 B8 C1 5B ED 61 9C 90 F2 F9 1C 44 0D | ......[.a.....D.
+1A BD A5 5D 45 A5 D1 45 5E 00 52 EC A3 93 5B D2 | ...]E..E^.R...[.
+CF 84 56 D8 6C 34 62 BA CB 11 85 13 11 4B CF 97 | ..V.l4b......K..
+00 F4 4E C0 22 8C F1 72 EB B3 9E EF C9 B9 AC 24 | ..N."..r.......$
+C6 77 DB 5F 12 8D FE D2 D3 AA DB 87 6F 98 F8 06 | .w._........o...
+C3 31 CE C2 D4 9D 36 54 F4 4D 75 C4 A0 17 99 DF | .1....6T.Mu.....
+DB 59 A8 75 4D FD F3 A8 FC 0F EF E1 A5 32 CC 2B | .Y.uM........2.+
+E2 3B 9F 5C 9C 25 F5 A0 B4 CA 20 90 CE 78 49 34 | .;.\.%.... ..xI4
+33 DB AF F8 17 FF 79 42 36 DE 0B F0 97 0F 5E A1 | 3.....yB6.....^.
+41 62 3F 6D 86 77 77 E9 E9 92 1C 27 24 8A 74 D1 | Ab?m.ww....'$.t.
+B5 1E 7D 1D 52 2F F9 C5 36 81 F2 77 63 71 B4 90 | ..}.R/..6..wcq..
+98 28 5C E8 15 EB B2 DD 05 C8 44 13 AA 8A 57 1A | .(\.......D...W.
+97 38 61 D1 C4 5C 30 37 B0 43 D5 50 05 9F 68 9E | .8a..\07.C.P..h.
+6C E2 79 D0 74 F4 CD EA 7C C9 84 10 9D 82 68 6C | l.y.t...|.....hl
+FC 52 C8 A7 03 77 B0 8D 30 BB BF 95 9A B9 B2 D2 | .R...w..0.......
+21 A4 78 FA DB BE 89 54 BF F0 FF 9D 40 75 5F 3A | !.x....T....@u_:
+CA EF 49 9A 91 48 41 42 01 15 CF 02 1F 0F BD 47 | ..I..HAB.......G
+17 7A 5D 5D 3F 77 37 0F EF 75 BD B9 E3 37 73 5B | .z]]?w7..u...7s[
+75 1B 6B 2F 05 6F BF 38 DB 27 D0 B5 BD 04 47 BD | u.k/.o.8.'....G.
+15 E0 8B 3A 2B 2A 15 10 55 9D 7F B6 21 2F C9 75 | ...:+*..U...!/.u
+65 03 28 C2 DE 2A 7A 95 9B 84 F0 39 B2 FF FE 73 | e.(..*z....9...s
+6E B7 4A AF 25 07 D8 C0 B4 37 7E C7 8A 49 AA A3 | n.J.%....7~..I..
+44 F1 D9 4B 15 4C 1A 3D 44 05 75 4A 48 C0 CA 5F | D..K.L.=D.uJH.._
+EC 35 1C 59 10 52 51 D4 F6 F2 92 A2 F0 42 51 0D | .5.Y.RQ......BQ.
+E0 EE E1 A2 3C 34 21 E1 BA A9 39 0F 63 74 74 E7 | ....<4!...9.ctt.
+C7 72 FF 52 C6 23 39 B0 FA 31 9D 7C 45 EF C7 2E | .r.R.#9..1.|E...
+D5 F5 CD 87 0A CE 6D 9B 8A E9 CE FF E5 24 C9 A2 | ......m......$..
+C0 B8 63 E8 CC 8B 10 6F FE 3C 03 94 C4 DC 28 50 | ..c....o.<....(P
+54 00 2D F2 FB BF 8B 15 B8 83 A6 67 0B 18 1A 47 | T.-........g...G
+60 C3 4E B2 2E 3D 75 B8 C9 B8 3A 5F B1 61 2B A8 | `.N..=u...:_.a+.
+05 A0 B1 28 D5 EF D0 CC E6 5C A8 BB 36 28 12 EF | ...(.....\..6(..
+51 E5 2D 22 AF FF 04 04 2E 64 D0 0F 53 62 37 E2 | Q.-".....d..Sb7.
+25 A0 52 27 D4 AC 8F 7E FB 20 77 36 DC 3A 9C 9A | %.R'...~. w6.:..
+81 98 EA 1B 77 86 7A 45 67 95 2C F4 B5 5A F6 6F | ....w.zEg.,..Z.o
+43 96 79 6C 57 FA 38 D7 5B AB C2 DE 12 CE D6 CA | C.ylW.8.[.......
+54 E0 04 2F 2D 73 55 09 78 88 52 C3 61 68 F5 EB | T../-sU.x.R.ah..
+13 9C AF DE 0B 08 9C F0 67 54 FD AF FF 29 8E 23 | ........gT...).#
+83 C7 F5 20 6A 1A 63 EB E8 AD 7C 10 CF 55 2F 8B | ... j.c...|..U/.
+1B 0F 79 19 DD EA 4B BD 80 30 09 13 D8 FF D9 2A | ..y...K..0.....*
+5C 7C 28 A5 8A 2C 4B 3C 98 7F F8 58 71 7C E8 44 | \|(..,K<...Xq|.D
+19 6D 2A 29 71 CD 91 53 FF 0C BF 15 5D 44 35 DE | .m*)q..S....]D5.
+3C 96 81 28 48 BD 59 7B A1 CD 38 4D D3 B0 F7 E6 | <..(H.Y{..8M....
+AC F2 03 2D 30 14 93 3B E9 47 69 8B 8E 61 09 93 | ...-0..;.Gi..a..
+E3 5D DD 70 42 38 08 39 B9 86 81 CD 91 AA BC 49 | .].pB8.9.......I
+70 B0 38 04 5F 4D 9F 8E 4A 26 A6 72 2B 49 B7 00 | p.8._M..J&.r+I..
+9A 70 F3 65 DB 91 9D 6C 27 FB B2 E3 AB 03 80 2C | .p.e...l'......,
+79 05 2F FA A0 C3 B3 0B 06 93 1E 56 EB 7E FB D7 | y./........V.~..
+27 20 DD B8 43 59 91 9D 35 0C C3 69 70 96 E4 66 | ' ..CY..5..ip..f
+A5 FE 26 46 84 B8 3C AE 7C 72 D1 A1 CB C5 DC 2A | ..&F..<.|r.....*
+B8 D3 2A 89 FC C9 19 00 8F 3F 9D 57 B1 D1 B9 35 | ..*......?.W...5
+B0 ED C3 5D 8A A6 D4 6D 5D FB 5D 6B 26 59 27 F4 | ...]...m].]k&Y'.
+9C 87 FB A3 47 E6 91 B1 FF 51 5E 3E 1E 69 7F CD | ....G....Q^>.i..
+CC D2 F5 C8 8D 83 32 B3 B3 5E 66 61 1E F4 7D 58 | ......2..^fa..}X
+E9 06 30 86 26 1E B6 73 55 E1 C8 6A B7 FA 9C A4 | ..0.&..sU..j....
+B1 4A A4 7A E9 C5 6F C8 | .J.z..o.
+
+Flow Record:
+ RecordCount = 52
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 353
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132206344 [2024-04-15 00:03:26.344]
+ last = 1713132206577 [2024-04-15 00:03:26.577]
+ received at = 1713132277673 [2024-04-15 00:04:37.673]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 54916
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 13
+ in bytes = 1409
+ src addr = 157.143.34.100
+ dst addr = 54.78.190.126
+ out packets = 12
+ out bytes = 6786
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 35.198 ms
+ srv latency = 0.000 ms
+ app latency = 0.237 ms
+ in payload = 173
+ TLS version = TLS 1.2
+ sni name = www.qobuz.com
+ ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a
+ ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043
+16 03 03 00 A8 01 00 00 A4 03 03 66 1C 52 AE 75 | ...........f.R.u
+E6 5A 53 F3 ED F5 7B 78 DC B6 C7 28 DF DD 89 AC | .ZS...{x...(....
+C7 3D 97 1B 21 70 B8 32 FD 81 65 00 00 2C 00 FF | .=..!p.2..e..,..
+C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0
+C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'..........
+00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 4F 00 00 | .=.<.5./.....O..
+00 12 00 10 00 00 0D 77 77 77 2E 71 6F 62 75 7A | .......www.qobuz
+2E 63 6F 6D 00 0A 00 08 00 06 00 17 00 18 00 19 | .com............
+00 0B 00 02 01 00 00 0D 00 12 00 10 04 01 02 01 | ................
+05 01 06 01 04 03 02 03 05 03 06 03 00 05 00 05 | ................
+01 00 00 00 00 00 12 00 00 00 17 00 00 | .............
+
+Flow Record:
+ RecordCount = 53
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 5: 1 2 12 15 29
+ size = 1374
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132383187 [2024-04-15 00:06:23.187]
+ last = 1713132383634 [2024-04-15 00:06:23.634]
+ received at = 1713132487352 [2024-04-15 00:08:07.352]
+ proto = 17 UDP
+ tcp flags = 0x00 ........
+ src port = 443
+ dst port = 63665
+ src tos = 0
+ fwd status = 0
+ in packets = 20
+ in bytes = 7353
+ src addr = 172.217.168.42
+ dst addr = 157.143.34.100
+ ip exporter = 192.168.168.1
+ in src mac = 00:00:5e:00:01:0b
+ out dst mac = 00:0d:b9:5a:49:2f
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ in payload = 1250
+C2 00 00 00 01 00 08 FC 08 64 CD 41 6A C8 CC 00 | .........d.Aj...
+44 D0 D9 63 FA BA 01 0A C7 9D 2B BE A1 36 63 8F | D..c......+..6c.
+77 1F 0A DA BE 57 45 8B D4 11 4F 3A CA AD F6 26 | w....WE...O:...&
+41 33 91 C2 56 64 8E 78 0A F7 DB 8A 1D 6B B8 61 | A3..Vd.x.....k.a
+31 09 EE D2 C7 56 FB 76 D8 E6 B0 6E AA 66 FB DF | 1....V.v...n.f..
+47 83 C3 BD 63 28 CC 57 66 AF 03 40 42 9E 26 5B | G...c(.Wf..@B.&[
+6A B3 1F F4 CC 23 BF DC 3A 77 D7 17 1B 60 FC 84 | j....#..:w...`..
+F8 52 30 A7 02 0E 34 F8 D0 DE 3C 1D 29 07 82 1B | .R0...4...<.)...
+89 37 33 8A A2 AD 64 A9 10 10 ED 28 B1 F8 7C 53 | .73...d....(..|S
+61 CA 61 E4 90 85 A3 EC 44 A1 B9 F7 B9 06 62 A3 | a.a.....D.....b.
+5E 8A 13 1D D5 46 C7 4F E8 98 50 96 D1 9B 3C 8F | ^....F.O..P...<.
+36 F2 02 B5 8B CC 75 3C 24 F5 BC 08 F7 20 EF 55 | 6.....u<$.... .U
+28 BE 32 6B 4E 6F 12 4C F5 F7 41 E8 36 C9 11 85 | (.2kNo.L..A.6...
+F9 19 F6 9D 04 3D 53 E4 44 8A 69 CD 40 4B 70 0F | .....=S.D.i.@Kp.
+F3 78 AB 37 56 09 F2 0C 25 8A 83 E4 36 1B F8 97 | .x.7V...%...6...
+5A 70 8F 6F D0 F6 29 EA 85 3B 02 BE 88 C8 F3 31 | Zp.o..)..;.....1
+B8 A6 24 84 08 41 1D 79 2D 69 B9 AB 1C C6 41 F1 | ..$..A.y-i....A.
+0C 57 A3 92 93 A2 1C E8 01 25 68 E9 DF 06 CB 88 | .W.......%h.....
+7B 29 B1 D7 FD 0E CB A5 23 06 F3 59 64 7E 08 2B | {)......#..Yd~.+
+AD F8 08 83 0C E0 19 0C C6 C4 46 E9 F9 BC F7 1A | ..........F.....
+52 DC 1C 0F DB E5 A2 11 61 A9 4A 6F E6 EA 6D A0 | R.......a.Jo..m.
+E7 A8 E3 7D 02 62 DB 79 A1 FD A3 99 54 09 00 0A | ...}.b.y....T...
+03 C5 83 2B 5C 3B E8 79 1A 2A C9 F8 C6 A1 33 CA | ...+\;.y.*....3.
+0D 1C E9 BC 22 D6 18 26 92 C7 C2 50 51 A8 AE 72 | ...."..&...PQ..r
+BB 1D 81 0A 02 C5 29 7E 82 C3 D3 1F 8B 7B 5D 45 | ......)~.....{]E
+72 DB A8 C7 B7 E5 FA A7 8D 31 18 0A FF D9 2D C7 | r........1....-.
+6E 27 97 FC 3B B6 2D CE D5 DD C3 A3 5F C7 92 67 | n'..;.-....._..g
+84 EF C1 D4 E1 11 5B 71 57 98 47 F0 A8 B5 4F 4C | ......[qW.G...OL
+75 89 3D 1D 3C 0A 15 C1 65 FE 6B 02 78 02 45 79 | u.=.<...e.k.x.Ey
+59 FB 7C FA FA 5A 9F 83 2A AF 3B A8 59 3B 27 24 | Y.|..Z..*.;.Y;'$
+57 AA 60 63 F7 E5 DF 4E 98 82 5B E1 E7 65 D5 FF | W.`c...N..[..e..
+6F 0D 45 25 02 74 08 23 D3 89 DE EC 15 17 5C 4D | o.E%.t.#......\M
+3C 8F BA D0 4B 02 C0 8B B7 41 82 F9 B0 03 D5 3C | <...K....A.....<
+10 1D 2B 5E FE C4 C0 88 88 D0 81 22 F8 75 2F D0 | ..+^.......".u/.
+EE 03 83 CC 62 FF 31 5A 33 1B 1E B7 22 FD AD AF | ....b.1Z3..."...
+CC 32 4B 0F A7 4A AE 41 B2 AE 5A 7A 37 61 46 5B | .2K..J.A..Zz7aF[
+91 9B D6 D4 26 72 8C 05 B5 7E 52 40 3C 76 CA C1 | ....&r...~R@.8....Y.S...
+2A F9 D3 DD 5D 1B 14 69 0E A0 76 E4 52 60 31 B1 | *...]..i..v.R`1.
+B2 3C 74 85 59 4D 02 6F 93 92 D1 8A F0 71 C8 3C | .Z....}3.....
+6F 5A 57 8A 52 DE 42 36 A8 52 DA 25 8D 27 72 99 | oZW.R.B6.R.%.'r.
+6C 1A 5C 5C 30 04 80 FA 8E 38 4E 4F 78 1C 20 7E | l.\\0....8NOx. ~
+FB 77 1C 89 8F 9B 75 0F DE 26 D4 B7 95 4E D9 25 | .w....u..&...N.%
+AB F1 25 07 9C 6E 43 80 70 16 27 C3 28 15 0F 06 | ..%..nC.p.'.(...
+1E D1 82 46 CA 68 2A E7 E8 75 BA C2 23 B6 58 7A | ...F.h*..u..#.Xz
+8A 2B 6E 82 C1 3F 62 BF 27 AE D9 66 8C 48 76 C2 | .+n..?b.'..f.Hv.
+A4 B7 12 AD 41 51 D8 1C 02 C2 6C 12 43 31 3E 7F | ....AQ....l.C1>.
+88 8A 8B AE BC 93 95 94 C9 66 08 5E 90 98 C6 2D | .........f.^...-
+B1 C3 66 EF BF AC FF 2C 79 6D 3E 9E 5F 6D 63 DC | ..f....,ym>._mc.
+28 69 C2 2B 8B A3 85 77 03 AD E7 22 11 F5 2F AB | (i.+...w..."../.
+F4 E9 2F 20 11 BF CE AD 0C AE D9 AF 91 5F C4 8A | ../ ........._..
+97 72 E7 A4 CC F3 B3 49 CB F8 34 F0 81 16 C2 BE | .r.....I..4.....
+35 33 61 62 F5 E6 D0 2A 95 AA 45 38 B8 27 8D 42 | 53ab...*..E8.'.B
+FA 0C 26 81 6A 14 6C 9D 29 8F 8B E8 C1 32 8B 3F | ..&.j.l.)....2.?
+4A C6 4F 78 56 B2 F5 79 45 89 55 CF A1 B9 E8 CD | J.OxV..yE.U.....
+EB 64 1C 19 9D 3C B1 7D 35 7D 61 49 60 42 FC 7E | .d...<.}5}aI`B.~
+3D 5F | =_
+
+Flow Record:
+ RecordCount = 54
+ Flags = 0x00 PCAP v1, Unsampled
+ Elements = 7: 1 2 5 12 15 17 29
+ size = 362
+ engine type = 17
+ engine ID = 1
+ export sysid = 0
+ first = 1713132190588 [2024-04-15 00:03:10.588]
+ last = 1713132228174 [2024-04-15 00:03:48.174]
+ received at = 1713132302717 [2024-04-15 00:05:02.717]
+ proto = 6 TCP
+ tcp flags = 0x1b ...AP.SF
+ src port = 51573
+ dst port = 443
+ src tos = 0
+ fwd status = 0
+ in packets = 10
+ in bytes = 1602
+ src addr = 157.143.34.100
+ dst addr = 35.231.208.158
+ out packets = 8
+ out bytes = 3814
+ aggr flows = 2
+ ip exporter = 192.168.168.1
+ in src mac = 00:0d:b9:5a:49:2f
+ out dst mac = 00:00:5e:00:01:0b
+ in dst mac = 00:00:00:00:00:00
+ out src mac = 00:00:00:00:00:00
+ cli latency = 112.082 ms
+ srv latency = 0.000 ms
+ app latency = 0.006 ms
+ in payload = 182
+ TLS version = TLS 1.2
+ sni name = discovery.roonlabs.net
+ ja3 hash = e4d448cdfe06dc1243c1eb026c74ac9a
+ ja4 hash = t12d220700_0d4ca5d4ec72_3304d8368043
+16 03 01 00 B1 01 00 00 AD 03 03 66 1C 52 9E 01 | ...........f.R..
+F0 56 F8 48 43 57 15 76 7B BF E9 B7 80 0C 89 2E | .V.HCW.v{.......
+FB 77 A8 F2 0C 2C 46 7A CB 4D 02 00 00 2C 00 FF | .w...,Fz.M...,..
+C0 2C C0 2B C0 24 C0 23 C0 0A C0 09 C0 08 C0 30 | .,.+.$.#.......0
+C0 2F C0 28 C0 27 C0 14 C0 13 C0 12 00 9D 00 9C | ./.(.'..........
+00 3D 00 3C 00 35 00 2F 00 0A 01 00 00 58 00 00 | .=.<.5./.....X..
+00 1B 00 19 00 00 16 64 69 73 63 6F 76 65 72 79 | .......discovery
+2E 72 6F 6F 6E 6C 61 62 73 2E 6E 65 74 00 0A 00 | .roonlabs.net...
+08 00 06 00 17 00 18 00 19 00 0B 00 02 01 00 00 | ................
+0D 00 12 00 10 04 01 02 01 05 01 06 01 04 03 02 | ................
+03 05 03 06 03 00 05 00 05 01 00 00 00 00 00 12 | ................
+00 00 00 17 00 00 | ......
diff --git a/tmp/bidir b/tmp/bidir
new file mode 100644
index 00000000..851a3b6e
Binary files /dev/null and b/tmp/bidir differ
diff --git a/tmp/v4 b/tmp/v4
new file mode 100644
index 00000000..0485be56
Binary files /dev/null and b/tmp/v4 differ
diff --git a/tmp/v6 b/tmp/v6
new file mode 100644
index 00000000..e71c275a
Binary files /dev/null and b/tmp/v6 differ